Edit tour

Windows Analysis Report
https://7448842.extforms.netsuite.com/app/site/hosting/scriΡtlet.nl?scriΡt=58&deploy=1&compid=7448842&ns-at=AAEJ7tMQMbCwPDeyw2Y0j790_uuZRbdHKbwhV-8_UjaZd6k4SyM&mesaltid=507850-000582201242607-dffb3aeb-d&meskey=U2FsdGVkX1%2FJjNhRKxx1mC9UVYLu1zQgwRQuZe2t5Hn59ibRKnhALqIMzea9TPW6X5u7JLMrzNGMeKQ8t

Overview

General Information

Sample URL:	https://7448842.extforms.netsuite.com/app/site/hosting/scriΡtlet.nl?scriΡt=58&deploy=1&compid=7448842&ns-at=AAEJ7tMQMbCwPDeyw2Y0j790_uuZRbdHKbwhV-8_UjaZd6k4SyM&mesaltid=507850-000582201242607-dffb3aeb
Analysis ID:	1514197
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Detected non-DNS traffic on DNS port

HTML body with high number of embedded SVGs detected

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5748 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5228 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2092 --field-trial-handle=1988,i,13048715024528848359,6778295781523489837,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6776 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://7448842.extforms.netsuite.com/app/site/hosting/scriptlet.nl?script=58&deploy=1&compid=7448842&ns-at=AAEJ7tMQMbCwPDeyw2Y0j790_uuZRbdHKbwhV-8_UjaZd6k4SyM&mesaltid=507850-000582201242607-dffb3aeb-d&meskey=U2FsdGVkX1%2FJjNhRKxx1mC9UVYLu1zQgwRQuZe2t5Hn59ibRKnhALqIMzea9TPW6X5u7JLMrzNGMeKQ8t" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

HTTP traffic detected: POST /hpp/checkout/sign-in HTTP/1.1Host: hostedpayments.merchante.comConnection: keep-aliveContent-Length: 2461Cache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1Origin: https://7448842.extforms.netsuite.comContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://7448842.extforms.netsuite.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 19 Sep 2024 21:37:30 GMTContent-Length: 0Connection: closeServer: nginxStrict-Transport-Security: max-age=31536000X-Frame-Options: sameoriginX-Content-Type-Options: nosniff

Source: chromecache_58.2.dr, chromecache_57.2.dr	String found in binary or memory: http://code.google.com/p/google-web-toolkit/issues/detail?id=2079
Source: chromecache_54.2.dr, chromecache_63.2.dr	String found in binary or memory: http://jsbin.com/temexa/4
Source: chromecache_63.2.dr	String found in binary or memory: http://polymer.github.io/AUTHORS.txt
Source: chromecache_63.2.dr	String found in binary or memory: http://polymer.github.io/CONTRIBUTORS.txt
Source: chromecache_63.2.dr	String found in binary or memory: http://polymer.github.io/LICENSE.txt
Source: chromecache_63.2.dr	String found in binary or memory: http://polymer.github.io/PATENTS.txt
Source: chromecache_55.2.dr	String found in binary or memory: https://7448842.extforms.netsuite.com/app/site/hosting/scriptlet.nl?script=59&deploy=1&compid=744884
Source: chromecache_67.2.dr, chromecache_66.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_67.2.dr, chromecache_66.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_54.2.dr, chromecache_63.2.dr	String found in binary or memory: https://developer.apple.com/apple-pay/terms/apple-pay-web/
Source: chromecache_67.2.dr, chromecache_66.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_67.2.dr, chromecache_66.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_67.2.dr, chromecache_66.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_55.2.dr	String found in binary or memory: https://hostedpayments.merchante.com/hpp/checkout/sign-in
Source: chromecache_66.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_66.2.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_66.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_67.2.dr, chromecache_66.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_67.2.dr, chromecache_66.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_67.2.dr, chromecache_66.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_54.2.dr, chromecache_63.2.dr	String found in binary or memory: https://vaadin.com/license/
Source: chromecache_54.2.dr, chromecache_63.2.dr	String found in binary or memory: https://vaadin.com/license/cval-3
Source: chromecache_59.2.dr, chromecache_67.2.dr, chromecache_51.2.dr, chromecache_66.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_67.2.dr, chromecache_66.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/EGbODne6buzpTnWrrBprcfAY/recaptcha__.
Source: chromecache_59.2.dr, chromecache_51.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/EGbODne6buzpTnWrrBprcfAY/recaptcha__en.js
Source: chromecache_54.2.dr, chromecache_63.2.dr	String found in binary or memory: https://your-website.com/link-to-your-privacy-policy.html
Source: chromecache_54.2.dr, chromecache_63.2.dr	String found in binary or memory: https://your-website.com/link-to-your-terms-and-conditions.html

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 63180 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63194 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63202 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63191 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63186 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63192 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63204 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52605 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63206
Source: unknown	Network traffic detected: HTTP traffic on port 63206 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63198 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63201
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63200
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63190 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63203
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63202
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63205
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63204
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63180
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52605
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63182
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63184
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63183
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63186
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63191
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63190
Source: unknown	Network traffic detected: HTTP traffic on port 63182 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63193
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63192
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63195
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63194
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63197
Source: unknown	Network traffic detected: HTTP traffic on port 63199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63200 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63189
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 63193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63199
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63198
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:63183 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:63195 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:63200 version: TLS 1.2

Source: classification engine

Classification label: mal48.phis.win@17/32@15/9

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2092 --field-trial-handle=1988,i,13048715024528848359,6778295781523489837,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://7448842.extforms.netsuite.com/app/site/hosting/scriptlet.nl?script=58&deploy=1&compid=7448842&ns-at=AAEJ7tMQMbCwPDeyw2Y0j790_uuZRbdHKbwhV-8_UjaZd6k4SyM&mesaltid=507850-000582201242607-dffb3aeb-d&meskey=U2FsdGVkX1%2FJjNhRKxx1mC9UVYLu1zQgwRQuZe2t5Hn59ibRKnhALqIMzea9TPW6X5u7JLMrzNGMeKQ8t"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2092 --field-trial-handle=1988,i,13048715024528848359,6778295781523489837,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: continue
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://7448842.extforms.netsuite.com/app/site/hosting/scriptlet.nl?script=58&deploy=1&compid=7448842&ns-at=AAEJ7tMQMbCwPDeyw2Y0j790_uuZRbdHKbwhV-8_UjaZd6k4SyM&mesaltid=507850-000582201242607-dffb3aeb-d&meskey=U2FsdGVkX1%2FJjNhRKxx1mC9UVYLu1zQgwRQuZe2t5Hn59ibRKnhALqIMzea9TPW6X5u7JLMrzNGMeKQ8t	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://developers.google.com/recaptcha/docs/faq#localhost_support	0%	URL Reputation	safe
https://www.gstatic.c..?/recaptcha/releases/EGbODne6buzpTnWrrBprcfAY/recaptcha__.	0%	URL Reputation	safe
https://support.google.com/recaptcha#6262736	0%	URL Reputation	safe
https://cloud.google.com/recaptcha-enterprise/billing-information	0%	URL Reputation	safe
https://recaptcha.net	0%	URL Reputation	safe
https://support.google.com/recaptcha/?hl=en#6223828	0%	URL Reputation	safe
https://cloud.google.com/contact	0%	URL Reputation	safe
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	0%	URL Reputation	safe
https://hostedpayments.merchante.com/hpp/?v-r=uidl&v-uiId=0	0%	Avira URL Cloud	safe
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	0%	URL Reputation	safe
https://support.google.com/recaptcha/#6175971	0%	URL Reputation	safe
http://polymer.github.io/PATENTS.txt	0%	Avira URL Cloud	safe
https://your-website.com/link-to-your-terms-and-conditions.html	0%	Avira URL Cloud	safe
https://support.google.com/recaptcha	0%	URL Reputation	safe
https://hostedpayments.merchante.com/hpp/VAADIN/build/webcomponentsjs/webcomponents-loader.js	0%	Avira URL Cloud	safe
https://hostedpayments.merchante.com/hpp/images/background/flubber.png	0%	Avira URL Cloud	safe
https://your-website.com/link-to-your-privacy-policy.html	0%	Avira URL Cloud	safe
https://vaadin.com/license/cval-3	0%	Avira URL Cloud	safe
http://polymer.github.io/LICENSE.txt	0%	Avira URL Cloud	safe
https://vaadin.com/license/	0%	Avira URL Cloud	safe
http://polymer.github.io/AUTHORS.txt	0%	Avira URL Cloud	safe
https://play.google.com/log?format=json&hasfast=true	0%	Avira URL Cloud	safe
https://hostedpayments.merchante.com/favicon.ico	0%	Avira URL Cloud	safe
http://code.google.com/p/google-web-toolkit/issues/detail?id=2079	0%	Avira URL Cloud	safe
https://7448842.extforms.netsuite.com/app/site/hosting/scriptlet.nl?script=59&deploy=1&compid=744884	0%	Avira URL Cloud	safe
https://hostedpayments.merchante.com/hpp/VAADIN/static/client/client-4AE3B7490A0EC7EE13B41C91E0150FBA.cache.js	0%	Avira URL Cloud	safe
https://www.google.com/recaptcha/api.js	0%	Avira URL Cloud	safe
https://hostedpayments.merchante.com/hpp/VAADIN/dynamic/resource/0/1894b183-40e1-42c6-9557-c9f55fb8d605/logo.png	0%	Avira URL Cloud	safe
https://hostedpayments.merchante.com/hpp/images/ic_close.png	0%	Avira URL Cloud	safe
http://jsbin.com/temexa/4	0%	Avira URL Cloud	safe
https://www.google.com/recaptcha/api2/	0%	Avira URL Cloud	safe
http://polymer.github.io/CONTRIBUTORS.txt	0%	Avira URL Cloud	safe
https://hostedpayments.merchante.com/hpp/VAADIN/build/vaadin-bundle-9936da12bdae75e3b436.cache.js	0%	Avira URL Cloud	safe
https://hostedpayments.merchante.com/hpp/VAADIN/dynamic/resource/0/0eb3d227-c774-47f4-b47e-3b5da42b178a/logo.png	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
hostedpayments.merchante.com	199.255.242.14	true	false	unknown
www.google.com	142.250.186.132	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
18.31.95.13.in-addr.arpa	unknown	unknown	false	unknown
7448842.extforms.netsuite.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://hostedpayments.merchante.com/hpp/?v-r=uidl&v-uiId=0	false	Avira URL Cloud: safe	unknown
https://hostedpayments.merchante.com/hpp/VAADIN/build/webcomponentsjs/webcomponents-loader.js	false	Avira URL Cloud: safe	unknown
https://hostedpayments.merchante.com/hpp/images/background/flubber.png	false	Avira URL Cloud: safe	unknown
https://hostedpayments.merchante.com/hpp/checkout/sign-in	true		unknown
https://hostedpayments.merchante.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://www.google.com/recaptcha/api.js	false	Avira URL Cloud: safe	unknown
https://hostedpayments.merchante.com/hpp/VAADIN/static/client/client-4AE3B7490A0EC7EE13B41C91E0150FBA.cache.js	false	Avira URL Cloud: safe	unknown
https://hostedpayments.merchante.com/hpp/VAADIN/dynamic/resource/0/1894b183-40e1-42c6-9557-c9f55fb8d605/logo.png	false	Avira URL Cloud: safe	unknown
https://hostedpayments.merchante.com/hpp/images/ic_close.png	false	Avira URL Cloud: safe	unknown
https://hostedpayments.merchante.com/hpp/VAADIN/build/vaadin-bundle-9936da12bdae75e3b436.cache.js	false	Avira URL Cloud: safe	unknown
https://hostedpayments.merchante.com/hpp/VAADIN/dynamic/resource/0/0eb3d227-c774-47f4-b47e-3b5da42b178a/logo.png	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://vaadin.com/license/cval-3	chromecache_54.2.dr, chromecache_63.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_67.2.dr, chromecache_66.2.dr	false	URL Reputation: safe	unknown
https://www.gstatic.c..?/recaptcha/releases/EGbODne6buzpTnWrrBprcfAY/recaptcha__.	chromecache_67.2.dr, chromecache_66.2.dr	false	URL Reputation: safe	unknown
http://polymer.github.io/PATENTS.txt	chromecache_63.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha#6262736	chromecache_67.2.dr, chromecache_66.2.dr	false	URL Reputation: safe	unknown
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_67.2.dr, chromecache_66.2.dr	false	URL Reputation: safe	unknown
https://recaptcha.net	chromecache_66.2.dr	false	URL Reputation: safe	unknown
https://your-website.com/link-to-your-terms-and-conditions.html	chromecache_54.2.dr, chromecache_63.2.dr	false	Avira URL Cloud: safe	unknown
http://polymer.github.io/LICENSE.txt	chromecache_63.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha/?hl=en#6223828	chromecache_67.2.dr, chromecache_66.2.dr	false	URL Reputation: safe	unknown
https://your-website.com/link-to-your-privacy-policy.html	chromecache_54.2.dr, chromecache_63.2.dr	false	Avira URL Cloud: safe	unknown
http://polymer.github.io/AUTHORS.txt	chromecache_63.2.dr	false	Avira URL Cloud: safe	unknown
https://cloud.google.com/contact	chromecache_67.2.dr, chromecache_66.2.dr	false	URL Reputation: safe	unknown
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_67.2.dr, chromecache_66.2.dr	false	URL Reputation: safe	unknown
https://vaadin.com/license/	chromecache_54.2.dr, chromecache_63.2.dr	false	Avira URL Cloud: safe	unknown
https://play.google.com/log?format=json&hasfast=true	chromecache_66.2.dr	false	Avira URL Cloud: safe	unknown
http://code.google.com/p/google-web-toolkit/issues/detail?id=2079	chromecache_58.2.dr, chromecache_57.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	chromecache_67.2.dr, chromecache_66.2.dr	false	URL Reputation: safe	unknown
http://jsbin.com/temexa/4	chromecache_54.2.dr, chromecache_63.2.dr	false	Avira URL Cloud: safe	unknown
https://7448842.extforms.netsuite.com/app/site/hosting/scriptlet.nl?script=59&deploy=1&compid=744884	chromecache_55.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha/#6175971	chromecache_67.2.dr, chromecache_66.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/recaptcha/api2/	chromecache_59.2.dr, chromecache_67.2.dr, chromecache_51.2.dr, chromecache_66.2.dr	false	Avira URL Cloud: safe	unknown
http://polymer.github.io/CONTRIBUTORS.txt	chromecache_63.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha	chromecache_66.2.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.185.100	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
199.255.242.12	unknown	United States	53542	MESNETUS	false
199.255.242.14	hostedpayments.merchante.com	United States	53542	MESNETUS	false
142.250.186.132	www.google.com	United States	15169	GOOGLEUS	false
142.250.184.228	unknown	United States	15169	GOOGLEUS	false
142.250.74.196	unknown	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.7
192.168.2.6

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1514197
Start date and time:	2024-09-19 23:36:20 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 46s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://7448842.extforms.netsuite.com/app/site/hosting/scriΡtlet.nl?scriΡt=58&deploy=1&compid=7448842&ns-at=AAEJ7tMQMbCwPDeyw2Y0j790_uuZRbdHKbwhV-8_UjaZd6k4SyM&mesaltid=507850-000582201242607-dffb3aeb-d&meskey=U2FsdGVkX1%2FJjNhRKxx1mC9UVYLu1zQgwRQuZe2t5Hn59ibRKnhALqIMzea9TPW6X5u7JLMrzNGMeKQ8t
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	6
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.phis.win@17/32@15/9
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.18.3, 216.58.206.78, 64.233.184.84, 34.104.35.123, 2.23.209.148, 2.23.209.131, 142.250.186.131, 142.250.184.195, 216.58.206.35, 13.85.23.86, 192.229.221.95, 13.95.31.18, 93.184.221.240, 20.3.187.198, 20.12.23.50, 172.217.16.131
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, wu.azureedge.net, clients2.google.com, ocsp.digicert.com, extforms-future.netsuite.com.edgekey.net, e113714.x.akamaiedge.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, www.gstatic.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, client.wns.windows.com, fs.microsoft.com, accounts.google.com, fonts.gstatic.com, ctldl.windowsupdate.com.delivery.microsoft.com, wu.ec.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://7448842.extforms.netsuite.com/app/site/hosting/scriptlet.nl?script=58&deploy=1&compid=7448842&ns-at=AAEJ7tMQMbCwPDeyw2Y0j790_uuZRbdHKbwhV-8_UjaZd6k4SyM&mesaltid=507850-000582201242607-dffb3aeb-d&meskey=U2FsdGVkX1%2FJjNhRKxx1mC9UVYLu1zQgwRQuZe2t5Hn59ibRKnhALqIMzea9TPW6X5u7JLMrzNGMeKQ8t

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1434), with no line terminators
Category:	downloaded
Size (bytes):	1434
Entropy (8bit):	5.753879254497127
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAv+KVCe2TLph9gFB5vtADjkrDQndcl/1t4glvllLtm1+7E/6kKsQ:VKEctKo7LmvtUjPKtX7Q1+gCkbLrwUnG
MD5:	8C42AEB65A5E249CDAC026525C9262CA
SHA1:	6224FC6FC3CF389B257B8F2405A466FD60EBB5E7
SHA-256:	7CB7B3E07675CD1ED331968CDC8E63CADE8B8CFF7BB3A60A7B8D74129E8DBFDA
SHA-512:	1A4D62A054B3353F0A72756D3079F0EE9E3E57B47FC669851966CCDFDC9A269BA6909A1A4E68B7C75822E3534C5EEA41C546E1C59C721B8876A87EDD5180641A
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('onload');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1.2'&&l!=='control_1.1'){d.head.prepend(m)

Chrome Cache Entry: 52

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 416x87, components 3
Category:	dropped
Size (bytes):	11135
Entropy (8bit):	7.889987546993612
Encrypted:	false
SSDEEP:	192:zMKptDWOB+vTUd+kREchJZ9fMIMtbYNuYIshc2jquuexv8Zjb/i53nLM2:zjptDWOB+gd+81hJrfpMtb2Lc2+uvxvR
MD5:	34B11895B4DB38BD540FB95EEAB9F562
SHA1:	1B2A17B22871F7900DC27AD2DA625D6B637C3975
SHA-256:	D6C5140354571346344CFFE082AD6326A0857241B5D97DFA45544F176A43DDB9
SHA-512:	EEBD7C15EA54B88C0FB82F0480D2FEF466AC190BED85C9DDACAF0D2C92637BE671C98241D9EC52AFFF16FCBD7EA53A4C2475D97DFA5F2D32003655498BDC0FEB
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....C....................................................................C.......................................................................W...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S..(...(...(...(...(...(...(...(...(...(...(...(......!}.... .}.....:x?..n<I.Cm3....%..u.8.8....iO..p.n...7i.x~....!2..{.H.:z.t..Vpu...:...K.}.Er.7..odh?.t.R........@..[......;.......%....c...Zv5RL..Z...n......2.B..b*.4...(..E.P.E.P.E.P.E.P.E.P.E.P.E.P.E.P.E%-....Y...~...g./..f..Wt.H~.Q..;...N.$v........S_..2./3...o.........i....E=[........\|)..O.....b).{.E.p..

Chrome Cache Entry: 53

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 8 x 8, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	152
Entropy (8bit):	5.821017038023586
Encrypted:	false
SSDEEP:	3:yionv//thPlv5hrlHMLtstAJBsPTFjFujeUdiFkOuMuKSDlljp:6v/lhPZRMRNJ6PTFjEiUdiFVuz7jp
MD5:	405C77EA5FEFAB9BDE3BB1B9CEF4BB1E
SHA1:	5AEDE374920F1DEF265844719A226A83D622127A
SHA-256:	6F2B4CE836BFC206DDE0D7D5D9B5BCCBE546A4F33F16C032846041640498AE71
SHA-512:	B97FCBF7683FF97DFC2CE19106B77902F343D7B16B5AA059F2597321BA65615D61D9EB10484E448FBC6528B5DE5016469D3E343C7FAF3AB9B763284276F2BFC5
Malicious:	false
Reputation:	low
URL:	https://hostedpayments.merchante.com/hpp/images/ic_close.png
Preview:	.PNG........IHDR.....................sRGB........RIDAT..c...?7..0....H...x...aj@l ..A4"..$@.E.X#...$..X.4.n.. .0.....!.4......8x.....y..H.n....IEND.B`.

Chrome Cache Entry: 54

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1139982
Entropy (8bit):	5.427413181220379
Encrypted:	false
SSDEEP:	12288:sZhOwj9YCU5HLDXINmCeexK7PiiNxppTHI4d1yNKSWckcM9bqrDhE86NbStsVI74:sOk9Y64CeSKnc7MG40mi6
MD5:	4379AAA44678F771D4AAEC47B31AFA86
SHA1:	A1233F364FF1EF2085043BDCE7DE9FD6393AE504
SHA-256:	A76AD558168B3BC075C43291222A11E9858EC54B448ACD7DD84923261391AE4A
SHA-512:	7901DD5ED9C407E96707BF259104BE87EC71E08DD7F652FABDB39FE0D6BB79F422415997A22EA505C5E828B3D3CDF0757C2352E15C57ADFB5DCAD943756374BA
Malicious:	false
Reputation:	low
URL:	https://hostedpayments.merchante.com/hpp/VAADIN/build/vaadin-bundle-9936da12bdae75e3b436.cache.js
Preview:	!function(t){var e={};function n(i){if(e[i])return e[i].exports;var a=e[i]={i:i,l:!1,exports:{}};return t[i].call(a.exports,a,a.exports,n),a.l=!0,a.exports}n.m=t,n.c=e,n.d=function(t,e,i){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:i})},n.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var i=Object.create(null);if(n.r(i),Object.defineProperty(i,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var a in t)n.d(i,a,function(e){return t[e]}.bind(null,a));return i},n.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return n.d(e,"a",e),e},n.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},n.p="",n(n.s=30)}({10:function(t,e,n){"use strict";e.a="/\n Copyright (C) 2017-2020 by Merchant e-Solut

Chrome Cache Entry: 55

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2764)
Category:	downloaded
Size (bytes):	3444
Entropy (8bit):	5.397565808697982
Encrypted:	false
SSDEEP:	48:i1uPaUjeqefvt3bz9Rjq3k0S3k0l3k0HaT1lsTxn0e++Xdh:i1VJJ1Ftq0R0Y05/s9nAYb
MD5:	7ECAB80A45D89796387F5E5C4CFF4277
SHA1:	53E28570C8B813BD95160ADD6B9FBE85F26E2AEF
SHA-256:	2E552BE537168FAE3CEFE871F85A70359F3D5737FE3FF2CEBAD7575FB0A3A4A1
SHA-512:	60CB823CC8F94CA25429B5841B031164CDBFC4E2F66489DA0CB2380E97FF6E82EDF69584F42130025704564C1391950BF41D306FE3339D806D061FC853BE0A7C
Malicious:	false
Reputation:	low
URL:	https://7448842.extforms.netsuite.com/app/site/hosting/scriptlet.nl?script=58&deploy=1&compid=7448842&ns-at=AAEJ7tMQMbCwPDeyw2Y0j790_uuZRbdHKbwhV-8_UjaZd6k4SyM&mesaltid=507850-000582201242607-dffb3aeb-d&meskey=U2FsdGVkX1%2FJjNhRKxx1mC9UVYLu1zQgwRQuZe2t5Hn59ibRKnhALqIMzea9TPW6X5u7JLMrzNGMeKQ8t
Preview:	.......<html><body>.......<form action="https://hostedpayments.merchante.com/hpp/checkout/sign-in" method="post" id="hppForm">.......<input type="hidden" name="profile_id" value="94100013720500000001" /><input type="hidden" name="payment_amount" value="378.66" /><input type="hidden" name="requester_appname" value="NS" /><input type="hidden" name="invoice_number" value="INV3983073pmt0" /><input type="hidden" name="invoice_status" value="OPEN" /><input type="hidden" name="client_reference_number" value="INV3983073" /><input type="hidden" name="custom_amount_ind" value="Y" /><input type="hidden" name="recur_control_ind" value="N" /><input type="hidden" name="client_app_response_url" value="https://7448842.extforms.netsuite.com/app/site/hosting/scriptlet.nl?script=59&deploy=1&compid=7448842&ns-at=AAEJ7tMQx8z6EtymPe2SxTqizVDaCzoNvXgHAf79_wszRk5V604&mestranid=4214860&meskey=U2FsdGVkX1%2F19vc9ZwteJlQ1am%2FcMfG87fUrlCCCOUE%3D" /><input type="hidden" name="tax_amount" value="28.86" /><input typ

Chrome Cache Entry: 56

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 8 x 8, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	152
Entropy (8bit):	5.821017038023586
Encrypted:	false
SSDEEP:	3:yionv//thPlv5hrlHMLtstAJBsPTFjFujeUdiFkOuMuKSDlljp:6v/lhPZRMRNJ6PTFjEiUdiFVuz7jp
MD5:	405C77EA5FEFAB9BDE3BB1B9CEF4BB1E
SHA1:	5AEDE374920F1DEF265844719A226A83D622127A
SHA-256:	6F2B4CE836BFC206DDE0D7D5D9B5BCCBE546A4F33F16C032846041640498AE71
SHA-512:	B97FCBF7683FF97DFC2CE19106B77902F343D7B16B5AA059F2597321BA65615D61D9EB10484E448FBC6528B5DE5016469D3E343C7FAF3AB9B763284276F2BFC5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................sRGB........RIDAT..c...?7..0....H...x...aj@l ..A4"..$@.E.X#...$..X.4.n.. .0.....!.4......8x.....y..H.n....IEND.B`.

Chrome Cache Entry: 57

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1407)
Category:	dropped
Size (bytes):	145884
Entropy (8bit):	5.511685912254182
Encrypted:	false
SSDEEP:	3072:xh2ESizk8491kFF6k4nUTlx75HwhgXZKb:etioB91kF4UTlPY+ZKb
MD5:	2E3FFB94F8D81B57C423BC4B1634AD79
SHA1:	D287E46CEDD40D0187D7F63287BE57AB14BCC125
SHA-256:	46A871C95A3811A6D89DC919A3A5F46F1E2AA6210C261BB82EC59189932C160F
SHA-512:	183F82E0F9C27DD6D1A23DCE67A320C3DC53F0989F0FC5C86C5C85A9A1D270214A658A2C065A9335A7039B10BE964232ECC6F8F0C76BC2040E30129536DC048C
Malicious:	false
Reputation:	low
Preview:	function client(){var Jb='',Kb=0,Lb='gwt.codesvr=',Mb='gwt.hosted=',Nb='gwt.hybrid',Ob='client',Pb='#',Qb='?',Rb='/',Sb=1,Tb='img',Ub='clear.cache.gif',Vb='baseUrl',Wb='script',Xb='client.nocache.js',Yb='base',Zb='//',$b='meta',_b='name',ac='gwt:property',bc='content',cc='=',dc='gwt:onPropertyErrorFn',ec='Bad handler "',fc='" for "gwt:onPropertyErrorFn"',gc='gwt:onLoadErrorFn',hc='" for "gwt:onLoadErrorFn"',ic='user.agent',jc='webkit',kc='safari',lc='msie',mc=10,nc=11,oc='ie10',pc=9,qc='ie9',rc=8,sc='ie8',tc='gecko',uc='gecko1_8',vc=2,wc=3,xc=4,yc='Single-script hosted mode not yet implemented. See issue ',zc='http://code.google.com/p/google-web-toolkit/issues/detail?id=2079',Ac='4AE3B7490A0EC7EE13B41C91E0150FBA',Bc=':1',Cc=':',Dc='DOMContentLoaded',Ec=50;var l=Jb,m=Kb,n=Lb,o=Mb,p=Nb,q=Ob,r=Pb,s=Qb,t=Rb,u=Sb,v=Tb,w=Ub,A=Vb,B=Wb,C=Xb,D=Yb,F=Zb,G=$b,H=_b,I=ac,J=bc,K=cc,L=dc,M=ec,N=fc,O=gc,P=hc,Q=ic,R=jc,S=kc,T=lc,U=mc,V=nc,W=oc,X=pc,Y=qc,Z=rc,$=sc,_=tc,ab=uc,bb=vc,cb=wc,db=xc,eb=yc,fb=zc

Chrome Cache Entry: 58

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1407)
Category:	downloaded
Size (bytes):	145884
Entropy (8bit):	5.511685912254182
Encrypted:	false
SSDEEP:	3072:xh2ESizk8491kFF6k4nUTlx75HwhgXZKb:etioB91kF4UTlPY+ZKb
MD5:	2E3FFB94F8D81B57C423BC4B1634AD79
SHA1:	D287E46CEDD40D0187D7F63287BE57AB14BCC125
SHA-256:	46A871C95A3811A6D89DC919A3A5F46F1E2AA6210C261BB82EC59189932C160F
SHA-512:	183F82E0F9C27DD6D1A23DCE67A320C3DC53F0989F0FC5C86C5C85A9A1D270214A658A2C065A9335A7039B10BE964232ECC6F8F0C76BC2040E30129536DC048C
Malicious:	false
Reputation:	low
URL:	https://hostedpayments.merchante.com/hpp/VAADIN/static/client/client-4AE3B7490A0EC7EE13B41C91E0150FBA.cache.js
Preview:	function client(){var Jb='',Kb=0,Lb='gwt.codesvr=',Mb='gwt.hosted=',Nb='gwt.hybrid',Ob='client',Pb='#',Qb='?',Rb='/',Sb=1,Tb='img',Ub='clear.cache.gif',Vb='baseUrl',Wb='script',Xb='client.nocache.js',Yb='base',Zb='//',$b='meta',_b='name',ac='gwt:property',bc='content',cc='=',dc='gwt:onPropertyErrorFn',ec='Bad handler "',fc='" for "gwt:onPropertyErrorFn"',gc='gwt:onLoadErrorFn',hc='" for "gwt:onLoadErrorFn"',ic='user.agent',jc='webkit',kc='safari',lc='msie',mc=10,nc=11,oc='ie10',pc=9,qc='ie9',rc=8,sc='ie8',tc='gecko',uc='gecko1_8',vc=2,wc=3,xc=4,yc='Single-script hosted mode not yet implemented. See issue ',zc='http://code.google.com/p/google-web-toolkit/issues/detail?id=2079',Ac='4AE3B7490A0EC7EE13B41C91E0150FBA',Bc=':1',Cc=':',Dc='DOMContentLoaded',Ec=50;var l=Jb,m=Kb,n=Lb,o=Mb,p=Nb,q=Ob,r=Pb,s=Qb,t=Rb,u=Sb,v=Tb,w=Ub,A=Vb,B=Wb,C=Xb,D=Yb,F=Zb,G=$b,H=_b,I=ac,J=bc,K=cc,L=dc,M=ec,N=fc,O=gc,P=hc,Q=ic,R=jc,S=kc,T=lc,U=mc,V=nc,W=oc,X=pc,Y=qc,Z=rc,$=sc,_=tc,ab=uc,bb=vc,cb=wc,db=xc,eb=yc,fb=zc

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1434), with no line terminators
Category:	dropped
Size (bytes):	1434
Entropy (8bit):	5.753879254497127
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAv+KVCe2TLph9gFB5vtADjkrDQndcl/1t4glvllLtm1+7E/6kKsQ:VKEctKo7LmvtUjPKtX7Q1+gCkbLrwUnG
MD5:	8C42AEB65A5E249CDAC026525C9262CA
SHA1:	6224FC6FC3CF389B257B8F2405A466FD60EBB5E7
SHA-256:	7CB7B3E07675CD1ED331968CDC8E63CADE8B8CFF7BB3A60A7B8D74129E8DBFDA
SHA-512:	1A4D62A054B3353F0A72756D3079F0EE9E3E57B47FC669851966CCDFDC9A269BA6909A1A4E68B7C75822E3534C5EEA41C546E1C59C721B8876A87EDD5180641A
Malicious:	false
Reputation:	low
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('onload');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1.2'&&l!=='control_1.1'){d.head.prepend(m)

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 60840, version 1.0
Category:	downloaded
Size (bytes):	60840
Entropy (8bit):	7.9954855102740625
Encrypted:	true
SSDEEP:	768:hoAt2YDJqYz55ebENPXb3sq2tx1fxVG22vJ/nPUEhdS3x/6P8VmQapcD7lw/hFu3:h7hqYz5RpsqWpVGvJPUEP6zD7lw5BUr
MD5:	0509AB09C1B0D2200A4135803C91D6CE
SHA1:	308EE3580A4A34BD230025D460762D53B5344EFC
SHA-256:	0C9A3F7FDC13A3FF04B74E9B982C28FA738FA9373BD43BD24DBCA5F2DC360F24
SHA-512:	7580A11CDF697C3A92B48B440BACD6B667B50BF8ED42446325C2C60B3D66945AFCD34E446BA40AC5B4D54A316C527E4C0CAE1F1C43B4C20CF549A4F1799AF102
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/materialicons/v48/flUhRq6tzZclQEJ-Vdg-IuiaDsNcIhQ8tQ.woff2
Preview:	wOF2..................P................................`..4.....h..l..d..6.$..v. ..z. [g#r..v?.(uW.r....E...v.....`.3.....v.d...j..+I...f..!.k&..!Ge.pN.Y.33S3Zk.a..+.....8.3i..2..eWq.W 6.n...p...+[.......k...J......#....8G..I\.XV(;.M.l...5...^....%ct./?....mI....c...[..HPW[......Z..&.R.g,.0.....S#Y9y.%.h......`.6.bcN....zS..V.J.fm.CWn..h..8{Mr..gIgQ.$..........u........$..............d%..R.....S.P.!..e.;.....z.<..~O[{..f....$.W....U.5.j.f)...q6..a....dR.....5B.P.N.\./........R..C.-....\|]..a.0F..`...f.J%.8.C..e.;/.&.Q.nB...B......=.;.2..#!....r........?\.I.....Z+.....m..I....c...vK....k...k .5...d....4v\|.j..Cj.....p...T.....^.n.j...>)........Ut+z..,..^j.4....7.b.....zNK&.....S..VB.....P..p.f.R..s.`...{\|..%.}.2...:......_.......c6/.d..X.=.S.C}gKSt........-. /.t..r...w...E.N.....R.`.G.........X.,p...!...Y....x.N.....H..,.,.]"[..q.....6.._.........TX>..Q..p.....?.\G..CaY...[v.<.I.K..V..t.^o.q....,$...~Hx.....`..;.....K.....

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2048 x 1600, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	29169
Entropy (8bit):	5.237137867055029
Encrypted:	false
SSDEEP:	768:8BNvKDtnxCPVS4WushEO84Ys9dy0dp1gU:8etxCPjWulI9dy01B
MD5:	4B065406C283E49BD8421A6ABD4B596E
SHA1:	DB1D8B4584FBDB280F7A176CE5A526EA95CA370A
SHA-256:	3D3149214169C2442B6A73E514733079C81756F1A8D5EA211ED1EF8AAF9C49F1
SHA-512:	DFE79E20234F82621648F5BFDC8BED9BF78D45FB92A7A894A8ECDE1B390D947108D9578595D002E7E8F18522AEF5690B74B43A1821AC33413DA27AE1B3A139CD
Malicious:	false
Reputation:	low
URL:	https://hostedpayments.merchante.com/hpp/images/background/flubber.png
Preview:	.PNG........IHDR.......@.............pHYs.................sRGB.........gAMA......a...q.IDATx....v....C.".......C..<..j.6Eq..4...^..#+q....\|.......$v.]Y............uj....q........o.N.e8.....+...z.r{{[........q`.....?\]].................9........\|...........7.M...............a..p&...U......S.N........._.\|)www........W.D...t.)..../b......._.~5q.....8...._N\|A..n;.........h....rssS.x...jb%..t[.......u......&....o.O.^..jd%..t.1..u...-....$1. &...*....P3+........^.....tY<W.I...L....S.......1..\|.?s...C.....@..s.._....'......V..@..z.................Y.......J...8...v....{..................!.+.z=......{.......xYL..i....I#4.~....M....X..C.........../_..u..M......#.....r{+.p.........~..:...........v.].z.{&.........I<G...[.\...,B.Y.....t..........M......:...B..W...... ............g........@KD.h%......?..K.........V1UW..t..Dh..........<.N.h....I...h.x......E..h..J.... ....K+...;....m..uE.@.....b.@D.V..@......u....N..~+_.\|).]...Z.J...#..<<<.&0.....,..........+........~.y..r.

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	7773
Entropy (8bit):	4.777555030117667
Encrypted:	false
SSDEEP:	192:5ioioVLMVIvew4aa/EB/8+oM0pFmBerC0HD0fQRSmBl54:YoioVLMVQL4u/8c0pFmBOD0fQ8mBk
MD5:	13B4FA20BB0BD79FCAC56628B0631680
SHA1:	479A65803E1AA2C79062734530BCFAA9C9E19F50
SHA-256:	2CD88F54BEB4CAC6F0172308FAA2450E28903C29CDF659230FBF0B2B798A77E5
SHA-512:	D6A10DB2B3E9659D21E3CAFDF570F07F9D4ACF314CB988138506DD4A33130CF364F90C91D4624E4C9187C177449032BA38E23BF8FFA3917064F4712FBE59DD4F
Malicious:	false
Reputation:	low
Preview:	/*. @license. * Copyright (c) 2018 The Polymer Project Authors. All rights reserved.. * This code may only be used under the BSD style license found at http://polymer.github.io/LICENSE.txt. * The complete set of authors may be found at http://polymer.github.io/AUTHORS.txt. * The complete set of contributors may be found at http://polymer.github.io/CONTRIBUTORS.txt. * Code distributed by Google as part of the polymer project is also. * subject to an additional IP rights grant found at http://polymer.github.io/PATENTS.txt. /..(function () {. 'use strict';.. /. Basic flow of the loader process. . There are 4 flows the loader can take when booting up. . - Synchronous script, no polyfills needed. * - wait for `DOMContentLoaded`. * - fire WCR event, as there could not be any callbacks passed to `waitFor`. . - Synchronous script, polyfills needed. * - document.write the polyfill bundle. * - wait on the `load` event of the bundle to batch Custom

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	1139982
Entropy (8bit):	5.427413181220379
Encrypted:	false
SSDEEP:	12288:sZhOwj9YCU5HLDXINmCeexK7PiiNxppTHI4d1yNKSWckcM9bqrDhE86NbStsVI74:sOk9Y64CeSKnc7MG40mi6
MD5:	4379AAA44678F771D4AAEC47B31AFA86
SHA1:	A1233F364FF1EF2085043BDCE7DE9FD6393AE504
SHA-256:	A76AD558168B3BC075C43291222A11E9858EC54B448ACD7DD84923261391AE4A
SHA-512:	7901DD5ED9C407E96707BF259104BE87EC71E08DD7F652FABDB39FE0D6BB79F422415997A22EA505C5E828B3D3CDF0757C2352E15C57ADFB5DCAD943756374BA
Malicious:	false
Reputation:	low
Preview:	!function(t){var e={};function n(i){if(e[i])return e[i].exports;var a=e[i]={i:i,l:!1,exports:{}};return t[i].call(a.exports,a,a.exports,n),a.l=!0,a.exports}n.m=t,n.c=e,n.d=function(t,e,i){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:i})},n.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var i=Object.create(null);if(n.r(i),Object.defineProperty(i,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var a in t)n.d(i,a,function(e){return t[e]}.bind(null,a));return i},n.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return n.d(e,"a",e),e},n.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},n.p="",n(n.s=30)}({10:function(t,e,n){"use strict";e.a="/\n Copyright (C) 2017-2020 by Merchant e-Solut

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2048 x 1600, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	29169
Entropy (8bit):	5.237137867055029
Encrypted:	false
SSDEEP:	768:8BNvKDtnxCPVS4WushEO84Ys9dy0dp1gU:8etxCPjWulI9dy01B
MD5:	4B065406C283E49BD8421A6ABD4B596E
SHA1:	DB1D8B4584FBDB280F7A176CE5A526EA95CA370A
SHA-256:	3D3149214169C2442B6A73E514733079C81756F1A8D5EA211ED1EF8AAF9C49F1
SHA-512:	DFE79E20234F82621648F5BFDC8BED9BF78D45FB92A7A894A8ECDE1B390D947108D9578595D002E7E8F18522AEF5690B74B43A1821AC33413DA27AE1B3A139CD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......@.............pHYs.................sRGB.........gAMA......a...q.IDATx....v....C.".......C..<..j.6Eq..4...^..#+q....\|.......$v.]Y............uj....q........o.N.e8.....+...z.r{{[........q`.....?\]].................9........\|...........7.M...............a..p&...U......S.N........._.\|)www........W.D...t.)..../b......._.~5q.....8...._N\|A..n;.........h....rssS.x...jb%..t[.......u......&....o.O.^..jd%..t.1..u...-....$1. &...*....P3+........^.....tY<W.I...L....S.......1..\|.?s...C.....@..s.._....'......V..@..z.................Y.......J...8...v....{..................!.+.z=......{.......xYL..i....I#4.~....M....X..C.........../_..u..M......#.....r{+.p.........~..:...........v.].z.{&.........I<G...[.\...,B.Y.....t..........M......:...B..W...... ............g........@KD.h%......?..K.........V1UW..t..Dh..........<.N.h....I...h.x......E..h..J.... ....K+...;....m..uE.@.....b.@D.V..@......u....N..~+_.\|).]...Z.J...#..<<<.&0.....,..........+........~.y..r.

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	36
Entropy (8bit):	4.537844793048881
Encrypted:	false
SSDEEP:	3:QMS+767qLHGJMAmUY4:QX+7e4GCAnY4
MD5:	867EB2A53326FFF84EC2C99F6F06F61A
SHA1:	6540A7064D43FB75E23F570D38A12EB698E4DFEA
SHA-256:	16B75357116D08AEF37909B14346C36C344A79F3C2A6972103C223B049B2E747
SHA-512:	C3CBF84B3E47A59B94A36D0DD2BCA404911BBF90372B5E5FAD1F4B8D145207B51336B70A412D851AE98EFB225444401CEEEA416F34C733721BE0E45C1E3C9F01
Malicious:	false
Reputation:	low
Preview:	for(;;);[{"syncId":18,"clientId":9}]

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	550905
Entropy (8bit):	5.666803401551392
Encrypted:	false
SSDEEP:	6144:kOYnKXi2tpKdoYRMXT+gVL+r+53bl2tjig1yKeVQqNFcU9i1d7sLO1OiUBI2+e:k9KXv3eUvVl2RiKeVHFD9igS0INe
MD5:	C7BE68088B0A823F1A4C1F77C702D1B4
SHA1:	05D42D754AFD21681C0E815799B88FBE1FBABF4E
SHA-256:	4943E91F7F53318D481CA07297395ABBC52541C2BE55D7276ECDA152CD7AD9C3
SHA-512:	CB76505845E7FC0988ADE0598E6EA80636713E20209E1260EE4413423B45235F57CB0A33FCA7BAF223E829835CB76A52244C3197E4C0C166DAD9B946B9285222
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/EGbODne6buzpTnWrrBprcfAY/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var S=function(){return[function(q,y,d,h,l,A,G,V){if((q-((q>>((G=[26,"A","JT"],q\|72)==q&&(d=[sC,VO],V=(h=Array.from(ee(vv)).find(function(v){return d.includes(v.autocomplete)&&v.type!=Wv&&v.value}))==y?void 0:h.value),1)&11)>=3&&(q-7&16)<9&&(A=h.u[h.u.length-y],l=OC(),A.Pj<=l&&(A.CB=d),h[G[1]]&&h[G[1 =A.CB\|\|(A.CB===1?(h[G[1]]=y,h.Yu(A.Pj-l)):(h[G[1]]=d,h[G[2]]()))),5)\|35)<q&&q-8<<1>=q)S[13](3,"label",this);return(q\|7)>=-43&&(q\|3)>>4<1&&(V=H[28](G[0],y,d,h)),V},function(q,y,d,h,l,A,G,V,v,e,a){return(((q\|.1)&(a=[8,7,"O"],a[1]))>=0&&q>>1<12&&(h.P[a[2]]=y,v=[!0,100,1E3],U[36](2,v[1],"2fa","audio",36,h.u,d),h.u.P.I=h

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	550905
Entropy (8bit):	5.666803401551392
Encrypted:	false
SSDEEP:	6144:kOYnKXi2tpKdoYRMXT+gVL+r+53bl2tjig1yKeVQqNFcU9i1d7sLO1OiUBI2+e:k9KXv3eUvVl2RiKeVHFD9igS0INe
MD5:	C7BE68088B0A823F1A4C1F77C702D1B4
SHA1:	05D42D754AFD21681C0E815799B88FBE1FBABF4E
SHA-256:	4943E91F7F53318D481CA07297395ABBC52541C2BE55D7276ECDA152CD7AD9C3
SHA-512:	CB76505845E7FC0988ADE0598E6EA80636713E20209E1260EE4413423B45235F57CB0A33FCA7BAF223E829835CB76A52244C3197E4C0C166DAD9B946B9285222
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var S=function(){return[function(q,y,d,h,l,A,G,V){if((q-((q>>((G=[26,"A","JT"],q\|72)==q&&(d=[sC,VO],V=(h=Array.from(ee(vv)).find(function(v){return d.includes(v.autocomplete)&&v.type!=Wv&&v.value}))==y?void 0:h.value),1)&11)>=3&&(q-7&16)<9&&(A=h.u[h.u.length-y],l=OC(),A.Pj<=l&&(A.CB=d),h[G[1]]&&h[G[1 =A.CB\|\|(A.CB===1?(h[G[1]]=y,h.Yu(A.Pj-l)):(h[G[1]]=d,h[G[2]]()))),5)\|35)<q&&q-8<<1>=q)S[13](3,"label",this);return(q\|7)>=-43&&(q\|3)>>4<1&&(V=H[28](G[0],y,d,h)),V},function(q,y,d,h,l,A,G,V,v,e,a){return(((q\|.1)&(a=[8,7,"O"],a[1]))>=0&&q>>1<12&&(h.P[a[2]]=y,v=[!0,100,1E3],U[36](2,v[1],"2fa","audio",36,h.u,d),h.u.P.I=h

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 416x87, components 3
Category:	downloaded
Size (bytes):	11135
Entropy (8bit):	7.889987546993612
Encrypted:	false
SSDEEP:	192:zMKptDWOB+vTUd+kREchJZ9fMIMtbYNuYIshc2jquuexv8Zjb/i53nLM2:zjptDWOB+gd+81hJrfpMtb2Lc2+uvxvR
MD5:	34B11895B4DB38BD540FB95EEAB9F562
SHA1:	1B2A17B22871F7900DC27AD2DA625D6B637C3975
SHA-256:	D6C5140354571346344CFFE082AD6326A0857241B5D97DFA45544F176A43DDB9
SHA-512:	EEBD7C15EA54B88C0FB82F0480D2FEF466AC190BED85C9DDACAF0D2C92637BE671C98241D9EC52AFFF16FCBD7EA53A4C2475D97DFA5F2D32003655498BDC0FEB
Malicious:	false
Reputation:	low
URL:	https://hostedpayments.merchante.com/hpp/VAADIN/dynamic/resource/0/1894b183-40e1-42c6-9557-c9f55fb8d605/logo.png
Preview:	......JFIF.....`.`.....C....................................................................C.......................................................................W...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S..(...(...(...(...(...(...(...(...(...(...(...(......!}.... .}.....:x?..n<I.Cm3....%..u.8.8....iO..p.n...7i.x~....!2..{.H.:z.t..Vpu...:...K.}.Er.7..odh?.t.R........@..[......;.......%....c...Zv5RL..Z...n......2.B..b*.4...(..E.P.E.P.E.P.E.P.E.P.E.P.E.P.E.P.E%-....Y...~...g./..f..Wt.H~.Q..;...N.$v........S_..2./3...o.........i....E=[........\|)..O.....b).{.E.p..

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 416x87, components 3
Category:	dropped
Size (bytes):	11135
Entropy (8bit):	7.889987546993612
Encrypted:	false
SSDEEP:	192:zMKptDWOB+vTUd+kREchJZ9fMIMtbYNuYIshc2jquuexv8Zjb/i53nLM2:zjptDWOB+gd+81hJrfpMtb2Lc2+uvxvR
MD5:	34B11895B4DB38BD540FB95EEAB9F562
SHA1:	1B2A17B22871F7900DC27AD2DA625D6B637C3975
SHA-256:	D6C5140354571346344CFFE082AD6326A0857241B5D97DFA45544F176A43DDB9
SHA-512:	EEBD7C15EA54B88C0FB82F0480D2FEF466AC190BED85C9DDACAF0D2C92637BE671C98241D9EC52AFFF16FCBD7EA53A4C2475D97DFA5F2D32003655498BDC0FEB
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....C....................................................................C.......................................................................W...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S..(...(...(...(...(...(...(...(...(...(...(...(......!}.... .}.....:x?..n<I.Cm3....%..u.8.8....iO..p.n...7i.x~....!2..{.H.:z.t..Vpu...:...K.}.Er.7..odh?.t.R........@..[......;.......%....c...Zv5RL..Z...n......2.B..b*.4...(..E.P.E.P.E.P.E.P.E.P.E.P.E.P.E.P.E%-....Y...~...g./..f..Wt.H~.Q..;...N.$v........S_..2./3...o.........i....E=[........\|)..O.....b).{.E.p..

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	7773
Entropy (8bit):	4.777555030117667
Encrypted:	false
SSDEEP:	192:5ioioVLMVIvew4aa/EB/8+oM0pFmBerC0HD0fQRSmBl54:YoioVLMVQL4u/8c0pFmBOD0fQ8mBk
MD5:	13B4FA20BB0BD79FCAC56628B0631680
SHA1:	479A65803E1AA2C79062734530BCFAA9C9E19F50
SHA-256:	2CD88F54BEB4CAC6F0172308FAA2450E28903C29CDF659230FBF0B2B798A77E5
SHA-512:	D6A10DB2B3E9659D21E3CAFDF570F07F9D4ACF314CB988138506DD4A33130CF364F90C91D4624E4C9187C177449032BA38E23BF8FFA3917064F4712FBE59DD4F
Malicious:	false
Reputation:	low
URL:	https://hostedpayments.merchante.com/hpp/VAADIN/build/webcomponentsjs/webcomponents-loader.js
Preview:	/*. @license. * Copyright (c) 2018 The Polymer Project Authors. All rights reserved.. * This code may only be used under the BSD style license found at http://polymer.github.io/LICENSE.txt. * The complete set of authors may be found at http://polymer.github.io/AUTHORS.txt. * The complete set of contributors may be found at http://polymer.github.io/CONTRIBUTORS.txt. * Code distributed by Google as part of the polymer project is also. * subject to an additional IP rights grant found at http://polymer.github.io/PATENTS.txt. /..(function () {. 'use strict';.. /. Basic flow of the loader process. . There are 4 flows the loader can take when booting up. . - Synchronous script, no polyfills needed. * - wait for `DOMContentLoaded`. * - fire WCR event, as there could not be any callbacks passed to `waitFor`. . - Synchronous script, polyfills needed. * - document.write the polyfill bundle. * - wait on the `load` event of the bundle to batch Custom

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 416x87, components 3
Category:	downloaded
Size (bytes):	11135
Entropy (8bit):	7.889987546993612
Encrypted:	false
SSDEEP:	192:zMKptDWOB+vTUd+kREchJZ9fMIMtbYNuYIshc2jquuexv8Zjb/i53nLM2:zjptDWOB+gd+81hJrfpMtb2Lc2+uvxvR
MD5:	34B11895B4DB38BD540FB95EEAB9F562
SHA1:	1B2A17B22871F7900DC27AD2DA625D6B637C3975
SHA-256:	D6C5140354571346344CFFE082AD6326A0857241B5D97DFA45544F176A43DDB9
SHA-512:	EEBD7C15EA54B88C0FB82F0480D2FEF466AC190BED85C9DDACAF0D2C92637BE671C98241D9EC52AFFF16FCBD7EA53A4C2475D97DFA5F2D32003655498BDC0FEB
Malicious:	false
Reputation:	low
URL:	https://hostedpayments.merchante.com/hpp/VAADIN/dynamic/resource/0/0eb3d227-c774-47f4-b47e-3b5da42b178a/logo.png
Preview:	......JFIF.....`.`.....C....................................................................C.......................................................................W...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S..(...(...(...(...(...(...(...(...(...(...(...(......!}.... .}.....:x?..n<I.Cm3....%..u.8.8....iO..p.n...7i.x~....!2..{.H.:z.t..Vpu...:...K.}.Er.7..odh?.t.R........@..[......;.......%....c...Zv5RL..Z...n......2.B..b*.4...(..E.P.E.P.E.P.E.P.E.P.E.P.E.P.E.P.E%-....Y...~...g./..f..Wt.H~.Q..;...N.$v........S_..2./3...o.........i....E=[........\|)..O.....b).{.E.p..

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 19, 2024 23:37:11.512044907 CEST	49674	443	192.168.2.6	173.222.162.64
Sep 19, 2024 23:37:11.512044907 CEST	49673	443	192.168.2.6	173.222.162.64
Sep 19, 2024 23:37:11.808876038 CEST	49672	443	192.168.2.6	173.222.162.64
Sep 19, 2024 23:37:16.921830893 CEST	49710	443	192.168.2.6	40.113.103.199
Sep 19, 2024 23:37:16.921871901 CEST	443	49710	40.113.103.199	192.168.2.6
Sep 19, 2024 23:37:16.921926975 CEST	49710	443	192.168.2.6	40.113.103.199
Sep 19, 2024 23:37:16.923144102 CEST	49710	443	192.168.2.6	40.113.103.199
Sep 19, 2024 23:37:16.923163891 CEST	443	49710	40.113.103.199	192.168.2.6
Sep 19, 2024 23:37:17.720515013 CEST	443	49710	40.113.103.199	192.168.2.6
Sep 19, 2024 23:37:17.720618010 CEST	49710	443	192.168.2.6	40.113.103.199
Sep 19, 2024 23:37:17.725023985 CEST	49710	443	192.168.2.6	40.113.103.199
Sep 19, 2024 23:37:17.725033998 CEST	443	49710	40.113.103.199	192.168.2.6
Sep 19, 2024 23:37:17.725301027 CEST	443	49710	40.113.103.199	192.168.2.6
Sep 19, 2024 23:37:17.902666092 CEST	49710	443	192.168.2.6	40.113.103.199
Sep 19, 2024 23:37:17.987230062 CEST	49710	443	192.168.2.6	40.113.103.199
Sep 19, 2024 23:37:17.987301111 CEST	49710	443	192.168.2.6	40.113.103.199
Sep 19, 2024 23:37:17.987314939 CEST	443	49710	40.113.103.199	192.168.2.6
Sep 19, 2024 23:37:17.987442970 CEST	49710	443	192.168.2.6	40.113.103.199
Sep 19, 2024 23:37:18.031424999 CEST	443	49710	40.113.103.199	192.168.2.6
Sep 19, 2024 23:37:18.161089897 CEST	443	49710	40.113.103.199	192.168.2.6
Sep 19, 2024 23:37:18.161657095 CEST	443	49710	40.113.103.199	192.168.2.6
Sep 19, 2024 23:37:18.161729097 CEST	49710	443	192.168.2.6	40.113.103.199
Sep 19, 2024 23:37:18.314699888 CEST	49710	443	192.168.2.6	40.113.103.199
Sep 19, 2024 23:37:18.314742088 CEST	443	49710	40.113.103.199	192.168.2.6
Sep 19, 2024 23:37:21.120922089 CEST	49674	443	192.168.2.6	173.222.162.64
Sep 19, 2024 23:37:21.120923042 CEST	49673	443	192.168.2.6	173.222.162.64
Sep 19, 2024 23:37:21.417845964 CEST	49672	443	192.168.2.6	173.222.162.64
Sep 19, 2024 23:37:22.539014101 CEST	49720	443	192.168.2.6	142.250.186.132
Sep 19, 2024 23:37:22.539042950 CEST	443	49720	142.250.186.132	192.168.2.6
Sep 19, 2024 23:37:22.539107084 CEST	49720	443	192.168.2.6	142.250.186.132
Sep 19, 2024 23:37:22.539509058 CEST	49720	443	192.168.2.6	142.250.186.132
Sep 19, 2024 23:37:22.539521933 CEST	443	49720	142.250.186.132	192.168.2.6
Sep 19, 2024 23:37:23.084714890 CEST	443	49708	173.222.162.64	192.168.2.6
Sep 19, 2024 23:37:23.084815979 CEST	49708	443	192.168.2.6	173.222.162.64
Sep 19, 2024 23:37:23.214867115 CEST	443	49720	142.250.186.132	192.168.2.6
Sep 19, 2024 23:37:23.215233088 CEST	49720	443	192.168.2.6	142.250.186.132
Sep 19, 2024 23:37:23.215250015 CEST	443	49720	142.250.186.132	192.168.2.6
Sep 19, 2024 23:37:23.216345072 CEST	443	49720	142.250.186.132	192.168.2.6
Sep 19, 2024 23:37:23.216404915 CEST	49720	443	192.168.2.6	142.250.186.132
Sep 19, 2024 23:37:23.302902937 CEST	49720	443	192.168.2.6	142.250.186.132
Sep 19, 2024 23:37:23.303064108 CEST	443	49720	142.250.186.132	192.168.2.6
Sep 19, 2024 23:37:23.355288982 CEST	49720	443	192.168.2.6	142.250.186.132
Sep 19, 2024 23:37:23.355300903 CEST	443	49720	142.250.186.132	192.168.2.6
Sep 19, 2024 23:37:23.400522947 CEST	49720	443	192.168.2.6	142.250.186.132
Sep 19, 2024 23:37:23.908899069 CEST	49721	443	192.168.2.6	184.28.90.27
Sep 19, 2024 23:37:23.908941031 CEST	443	49721	184.28.90.27	192.168.2.6
Sep 19, 2024 23:37:23.909169912 CEST	49721	443	192.168.2.6	184.28.90.27
Sep 19, 2024 23:37:23.912561893 CEST	49721	443	192.168.2.6	184.28.90.27
Sep 19, 2024 23:37:23.912578106 CEST	443	49721	184.28.90.27	192.168.2.6
Sep 19, 2024 23:37:24.460717916 CEST	49722	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:24.460747004 CEST	443	49722	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:24.460846901 CEST	49722	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:24.461131096 CEST	49722	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:24.461143970 CEST	443	49722	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:24.584659100 CEST	443	49721	184.28.90.27	192.168.2.6
Sep 19, 2024 23:37:24.584738016 CEST	49721	443	192.168.2.6	184.28.90.27
Sep 19, 2024 23:37:24.587507010 CEST	49721	443	192.168.2.6	184.28.90.27
Sep 19, 2024 23:37:24.587513924 CEST	443	49721	184.28.90.27	192.168.2.6
Sep 19, 2024 23:37:24.587903976 CEST	443	49721	184.28.90.27	192.168.2.6
Sep 19, 2024 23:37:24.629931927 CEST	49721	443	192.168.2.6	184.28.90.27
Sep 19, 2024 23:37:24.675405025 CEST	443	49721	184.28.90.27	192.168.2.6
Sep 19, 2024 23:37:24.859693050 CEST	443	49721	184.28.90.27	192.168.2.6
Sep 19, 2024 23:37:24.859854937 CEST	443	49721	184.28.90.27	192.168.2.6
Sep 19, 2024 23:37:24.859981060 CEST	49721	443	192.168.2.6	184.28.90.27
Sep 19, 2024 23:37:24.859997988 CEST	443	49721	184.28.90.27	192.168.2.6
Sep 19, 2024 23:37:24.860012054 CEST	49721	443	192.168.2.6	184.28.90.27
Sep 19, 2024 23:37:24.860018015 CEST	443	49721	184.28.90.27	192.168.2.6
Sep 19, 2024 23:37:24.860059977 CEST	49721	443	192.168.2.6	184.28.90.27
Sep 19, 2024 23:37:24.860064030 CEST	443	49721	184.28.90.27	192.168.2.6
Sep 19, 2024 23:37:24.896712065 CEST	49723	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:24.896754026 CEST	443	49723	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:24.897022963 CEST	49723	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:24.897216082 CEST	49723	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:24.897233009 CEST	443	49723	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:24.951682091 CEST	49724	443	192.168.2.6	184.28.90.27
Sep 19, 2024 23:37:24.951724052 CEST	443	49724	184.28.90.27	192.168.2.6
Sep 19, 2024 23:37:24.952214003 CEST	49724	443	192.168.2.6	184.28.90.27
Sep 19, 2024 23:37:24.955575943 CEST	49724	443	192.168.2.6	184.28.90.27
Sep 19, 2024 23:37:24.955596924 CEST	443	49724	184.28.90.27	192.168.2.6
Sep 19, 2024 23:37:25.168030024 CEST	443	49722	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:25.169063091 CEST	49722	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:25.169080019 CEST	443	49722	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:25.170732021 CEST	443	49722	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:25.170820951 CEST	49722	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:25.172561884 CEST	49722	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:25.172650099 CEST	443	49722	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:25.173330069 CEST	49722	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:25.173337936 CEST	443	49722	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:25.173475981 CEST	49722	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:25.173506975 CEST	443	49722	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:25.575223923 CEST	443	49722	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:25.575292110 CEST	443	49722	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:25.575333118 CEST	443	49722	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:25.575464010 CEST	49722	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:25.575464010 CEST	49722	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:25.575486898 CEST	443	49722	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:25.575550079 CEST	49722	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:25.588489056 CEST	443	49723	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:25.605423927 CEST	443	49724	184.28.90.27	192.168.2.6
Sep 19, 2024 23:37:25.605613947 CEST	49724	443	192.168.2.6	184.28.90.27
Sep 19, 2024 23:37:25.636332035 CEST	49723	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:25.655486107 CEST	443	49722	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:25.655596018 CEST	49722	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:25.655657053 CEST	443	49722	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:25.655713081 CEST	49722	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:25.655757904 CEST	443	49722	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:25.655951023 CEST	443	49722	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:25.659502983 CEST	49722	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:25.849205971 CEST	49723	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:25.849246025 CEST	443	49723	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:25.851622105 CEST	49722	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:25.851649046 CEST	443	49722	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:25.853373051 CEST	443	49723	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:25.853462934 CEST	49723	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:25.875798941 CEST	49723	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:25.875950098 CEST	443	49723	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:25.916323900 CEST	49723	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:25.916347980 CEST	443	49723	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:25.924695969 CEST	49724	443	192.168.2.6	184.28.90.27
Sep 19, 2024 23:37:25.924731016 CEST	443	49724	184.28.90.27	192.168.2.6
Sep 19, 2024 23:37:25.925641060 CEST	443	49724	184.28.90.27	192.168.2.6
Sep 19, 2024 23:37:25.927736044 CEST	49724	443	192.168.2.6	184.28.90.27
Sep 19, 2024 23:37:25.960846901 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:25.960885048 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:25.960963011 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:25.961095095 CEST	49723	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:25.961524963 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:25.961543083 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:25.971441031 CEST	443	49724	184.28.90.27	192.168.2.6
Sep 19, 2024 23:37:26.007407904 CEST	443	49723	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:26.113583088 CEST	443	49724	184.28.90.27	192.168.2.6
Sep 19, 2024 23:37:26.114084005 CEST	443	49724	184.28.90.27	192.168.2.6
Sep 19, 2024 23:37:26.114151001 CEST	49724	443	192.168.2.6	184.28.90.27
Sep 19, 2024 23:37:26.117885113 CEST	49724	443	192.168.2.6	184.28.90.27
Sep 19, 2024 23:37:26.117932081 CEST	443	49724	184.28.90.27	192.168.2.6
Sep 19, 2024 23:37:26.117961884 CEST	49724	443	192.168.2.6	184.28.90.27
Sep 19, 2024 23:37:26.117980003 CEST	443	49724	184.28.90.27	192.168.2.6
Sep 19, 2024 23:37:26.129818916 CEST	443	49723	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:26.129841089 CEST	443	49723	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:26.129848957 CEST	443	49723	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:26.129926920 CEST	49723	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:26.129942894 CEST	443	49723	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:26.129954100 CEST	443	49723	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:26.130003929 CEST	49723	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:26.130017996 CEST	49723	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:26.144947052 CEST	49723	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:26.144974947 CEST	443	49723	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:26.166042089 CEST	49726	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:26.166075945 CEST	443	49726	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:26.166951895 CEST	49726	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:26.166951895 CEST	49726	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:26.166981936 CEST	443	49726	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:26.179702997 CEST	49727	443	192.168.2.6	142.250.184.228
Sep 19, 2024 23:37:26.179737091 CEST	443	49727	142.250.184.228	192.168.2.6
Sep 19, 2024 23:37:26.179841995 CEST	49727	443	192.168.2.6	142.250.184.228
Sep 19, 2024 23:37:26.180416107 CEST	49727	443	192.168.2.6	142.250.184.228
Sep 19, 2024 23:37:26.180428028 CEST	443	49727	142.250.184.228	192.168.2.6
Sep 19, 2024 23:37:26.315951109 CEST	49728	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:26.315973997 CEST	443	49728	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:26.316040039 CEST	49728	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:26.316497087 CEST	49728	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:26.316510916 CEST	443	49728	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:26.625900984 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:26.626207113 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:26.626224041 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:26.626724958 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:26.627160072 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:26.627254963 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:26.627348900 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:26.671399117 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:26.806003094 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:26.806034088 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:26.806052923 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:26.806092024 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:26.806102037 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:26.806133986 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:26.806153059 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:26.842825890 CEST	443	49727	142.250.184.228	192.168.2.6
Sep 19, 2024 23:37:26.843095064 CEST	49727	443	192.168.2.6	142.250.184.228
Sep 19, 2024 23:37:26.843108892 CEST	443	49727	142.250.184.228	192.168.2.6
Sep 19, 2024 23:37:26.845995903 CEST	443	49727	142.250.184.228	192.168.2.6
Sep 19, 2024 23:37:26.846060038 CEST	49727	443	192.168.2.6	142.250.184.228
Sep 19, 2024 23:37:26.846581936 CEST	49727	443	192.168.2.6	142.250.184.228
Sep 19, 2024 23:37:26.846661091 CEST	443	49727	142.250.184.228	192.168.2.6
Sep 19, 2024 23:37:26.846735954 CEST	49727	443	192.168.2.6	142.250.184.228
Sep 19, 2024 23:37:26.846744061 CEST	443	49727	142.250.184.228	192.168.2.6
Sep 19, 2024 23:37:26.850359917 CEST	443	49726	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:26.850547075 CEST	49726	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:26.850562096 CEST	443	49726	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:26.850927114 CEST	443	49726	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:26.851335049 CEST	49726	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:26.851409912 CEST	443	49726	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:26.851588011 CEST	49726	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:26.886846066 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:26.886873960 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:26.886917114 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:26.886924028 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:26.886960030 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:26.886971951 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:26.894958973 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:26.894984961 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:26.895020962 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:26.895028114 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:26.895060062 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:26.895349026 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:26.899180889 CEST	49727	443	192.168.2.6	142.250.184.228
Sep 19, 2024 23:37:26.899431944 CEST	443	49726	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:26.974198103 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:26.974222898 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:26.974270105 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:26.974283934 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:26.974318027 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:26.974338055 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:26.975285053 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:26.975306988 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:26.975351095 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:26.975356102 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:26.975387096 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:26.975411892 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:26.983012915 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:26.983037949 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:26.983077049 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:26.983083963 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:26.983115911 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:26.983146906 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:26.991003990 CEST	443	49728	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:26.991219044 CEST	49728	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:26.991228104 CEST	443	49728	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:26.992716074 CEST	443	49728	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:26.992772102 CEST	49728	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:26.993118048 CEST	49728	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:26.993196964 CEST	443	49728	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:26.993246078 CEST	49728	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:27.033575058 CEST	443	49726	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.033607006 CEST	443	49726	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.033622980 CEST	443	49726	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.033682108 CEST	49726	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.033693075 CEST	443	49726	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.033739090 CEST	49726	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.038077116 CEST	49728	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:27.038081884 CEST	443	49728	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:27.060873985 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.060898066 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.060966015 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.060977936 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.061022997 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.061542034 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.061561108 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.061603069 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.061609983 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.061639071 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.061666012 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.062520027 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.062540054 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.062585115 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.062592983 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.062624931 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.062644005 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.063518047 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.063539982 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.063602924 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.063611031 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.063654900 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.064477921 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.064496994 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.064534903 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.064541101 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.064578056 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.064600945 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.070540905 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.070563078 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.070622921 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.070632935 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.070667982 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.070686102 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.079473019 CEST	49728	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:27.116688013 CEST	443	49726	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.116736889 CEST	443	49726	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.116808891 CEST	49726	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.116818905 CEST	443	49726	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.116863012 CEST	49726	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.124155998 CEST	443	49726	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.124202967 CEST	443	49726	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.124258041 CEST	49726	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.124264956 CEST	443	49726	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.124311924 CEST	49726	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.134465933 CEST	443	49727	142.250.184.228	192.168.2.6
Sep 19, 2024 23:37:27.134593010 CEST	443	49727	142.250.184.228	192.168.2.6
Sep 19, 2024 23:37:27.134670019 CEST	49727	443	192.168.2.6	142.250.184.228
Sep 19, 2024 23:37:27.134684086 CEST	443	49727	142.250.184.228	192.168.2.6
Sep 19, 2024 23:37:27.134865046 CEST	443	49727	142.250.184.228	192.168.2.6
Sep 19, 2024 23:37:27.134922028 CEST	49727	443	192.168.2.6	142.250.184.228
Sep 19, 2024 23:37:27.142666101 CEST	49727	443	192.168.2.6	142.250.184.228
Sep 19, 2024 23:37:27.142684937 CEST	443	49727	142.250.184.228	192.168.2.6
Sep 19, 2024 23:37:27.148113012 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.148142099 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.148194075 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.148226976 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.148251057 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.148273945 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.148705006 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.148725033 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.148767948 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.148777008 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.148813963 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.148825884 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.149468899 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.149488926 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.149554968 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.149564028 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.149568081 CEST	443	49728	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:27.149595022 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.149621010 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.149622917 CEST	443	49728	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:27.149632931 CEST	443	49728	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:27.149655104 CEST	443	49728	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:27.149679899 CEST	49728	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:27.149692059 CEST	443	49728	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:27.149708033 CEST	49728	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:27.149728060 CEST	443	49728	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:27.149780989 CEST	49728	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:27.150199890 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.150233984 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.150279999 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.150290012 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.150322914 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.150341034 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.150691032 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.150710106 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.150760889 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.150768995 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.150806904 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.150825024 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.151679993 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.153107882 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.153129101 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.153193951 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.153202057 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.153258085 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.153850079 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.153868914 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.153929949 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.153937101 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.153960943 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.153980970 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.158082008 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.158102989 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.158163071 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.158173084 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.158226967 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.159902096 CEST	49728	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:27.159919024 CEST	443	49728	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:27.186214924 CEST	49730	443	192.168.2.6	142.250.74.196
Sep 19, 2024 23:37:27.186260939 CEST	443	49730	142.250.74.196	192.168.2.6
Sep 19, 2024 23:37:27.186460018 CEST	49730	443	192.168.2.6	142.250.74.196
Sep 19, 2024 23:37:27.187341928 CEST	49730	443	192.168.2.6	142.250.74.196
Sep 19, 2024 23:37:27.187361002 CEST	443	49730	142.250.74.196	192.168.2.6
Sep 19, 2024 23:37:27.206832886 CEST	443	49726	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.206897020 CEST	443	49726	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.206922054 CEST	49726	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.206929922 CEST	443	49726	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.206970930 CEST	49726	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.208965063 CEST	443	49726	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.209007025 CEST	443	49726	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.209034920 CEST	49726	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.209042072 CEST	443	49726	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.209072113 CEST	49726	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.209089994 CEST	49726	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.212272882 CEST	443	49726	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.212320089 CEST	443	49726	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.212349892 CEST	49726	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.212356091 CEST	443	49726	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.212394953 CEST	49726	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.212402105 CEST	49726	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.217828035 CEST	443	49726	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.217879057 CEST	443	49726	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.217926025 CEST	49726	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.217931986 CEST	443	49726	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.217978001 CEST	49726	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.217997074 CEST	49726	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.237523079 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.237543106 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.237612009 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.237621069 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.237668991 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.238318920 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.238336086 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.238384962 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.238392115 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.238441944 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.238910913 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.238925934 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.238977909 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.238984108 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.239017963 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.239025116 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.239626884 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.239641905 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.239708900 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.239717007 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.239751101 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.240530014 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.240546942 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.240611076 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.240617990 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.240668058 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.240873098 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.240900040 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.240963936 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.240971088 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.241018057 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.241851091 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.241872072 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.241939068 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.241945982 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.241988897 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.249044895 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.249067068 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.249104977 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.249110937 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.249159098 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.306446075 CEST	443	49726	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.306524992 CEST	443	49726	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.306545019 CEST	49726	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.306551933 CEST	443	49726	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.306616068 CEST	49726	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.307331085 CEST	443	49726	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.307391882 CEST	443	49726	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.307414055 CEST	49726	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.307420015 CEST	443	49726	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.307456970 CEST	49726	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.307569027 CEST	443	49726	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.307684898 CEST	49726	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.308990955 CEST	49726	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.309000015 CEST	443	49726	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.321814060 CEST	49731	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:27.321831942 CEST	443	49731	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:27.322102070 CEST	49731	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:27.322495937 CEST	49731	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:27.322510958 CEST	443	49731	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:27.331728935 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.331752062 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.331837893 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.331845999 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.331888914 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.332479954 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.332498074 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.332570076 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.332576990 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.332619905 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.333064079 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.333084106 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.333132982 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.333138943 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.333169937 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.333184958 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.333888054 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.333905935 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.333981991 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.333988905 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.334048033 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.334662914 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.334682941 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.334747076 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.334763050 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.334803104 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.335066080 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.335084915 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.335120916 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.335127115 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.335163116 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.335180044 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.336287975 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.336308002 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.336350918 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.336358070 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.336393118 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.336411953 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.342391968 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.342411995 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.342498064 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.342505932 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.342545033 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.417488098 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.417511940 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.417593002 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.417610884 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.417654037 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.418109894 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.418129921 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.418174028 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.418183088 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.418216944 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.418241024 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.418592930 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.418612003 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.418659925 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.418667078 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.418694019 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.418720961 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.419358015 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.419410944 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.419440031 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.419446945 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.419475079 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.419493914 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.420217037 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.420237064 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.420280933 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.420289040 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.420320034 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.420334101 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.420566082 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.420584917 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.420620918 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.420625925 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.420656919 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.420675993 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.427675962 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.427696943 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.427762032 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.427769899 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.427817106 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.428349972 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.428370953 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.428428888 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.428435087 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.428474903 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.504971981 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.504997015 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.505074978 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.505083084 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.505112886 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.505125999 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.505702972 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.505723000 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.505767107 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.505773067 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.505795956 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.505811930 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.506278038 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.506297112 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.506337881 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.506344080 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.506366014 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.506375074 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.506936073 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.506956100 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.507004976 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.507018089 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.507057905 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.507436991 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.507458925 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.507514000 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.507520914 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.507538080 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.507561922 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.507854939 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.507889986 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.507925034 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.507930994 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.507960081 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.507976055 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.515335083 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.515358925 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.515428066 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.515438080 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.515480042 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.515923977 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.515949011 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.515980959 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.515986919 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.516011953 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.516031981 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.559406042 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.603913069 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.603934050 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.603991985 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.604003906 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.604051113 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.605273962 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.605297089 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.605353117 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.605360031 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.605386972 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.605400085 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.605606079 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.605624914 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.605663061 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.605669975 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.605699062 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.605715036 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.606254101 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.606272936 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.606329918 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.606338024 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.606378078 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.607120991 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.607139111 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.607198000 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.607204914 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.607244968 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.607676983 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.607696056 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.607743979 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.607750893 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.607778072 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.607795954 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.608413935 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.608433962 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.608484983 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.608491898 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.608521938 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.608540058 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.608727932 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.608746052 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.608797073 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.608804941 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.608843088 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.700615883 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.700637102 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.700704098 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.700712919 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.700756073 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.701278925 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.701297998 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.701344967 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.701353073 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.701397896 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.701771021 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.701788902 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.701828957 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.701834917 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.701865911 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.701885939 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.702275038 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.702294111 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.702338934 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.702346087 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.702394009 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.705030918 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.705070972 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.705136061 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.705142975 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.705178976 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.705197096 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.705885887 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.705904961 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.705945969 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.705952883 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.705979109 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.705996990 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.706393003 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.706412077 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.706453085 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.706459045 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.706485033 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.706510067 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.710273027 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.710297108 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.710340023 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.710346937 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.710370064 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.710391045 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.726666927 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.788152933 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.788173914 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.788304090 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.788312912 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.788366079 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.788677931 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.788713932 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.788749933 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.788755894 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.788773060 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.788799047 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.788826942 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.839405060 CEST	49725	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:27.839421034 CEST	443	49725	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:27.852746964 CEST	443	49730	142.250.74.196	192.168.2.6
Sep 19, 2024 23:37:27.892966032 CEST	49730	443	192.168.2.6	142.250.74.196
Sep 19, 2024 23:37:28.020402908 CEST	443	49731	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:28.081779003 CEST	49731	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:28.389957905 CEST	49730	443	192.168.2.6	142.250.74.196
Sep 19, 2024 23:37:28.389986992 CEST	443	49730	142.250.74.196	192.168.2.6
Sep 19, 2024 23:37:28.390320063 CEST	49731	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:28.390357971 CEST	443	49731	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:28.390840054 CEST	443	49731	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:28.391578913 CEST	49731	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:28.391674995 CEST	443	49731	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:28.391700983 CEST	443	49730	142.250.74.196	192.168.2.6
Sep 19, 2024 23:37:28.391768932 CEST	49730	443	192.168.2.6	142.250.74.196
Sep 19, 2024 23:37:28.392880917 CEST	49730	443	192.168.2.6	142.250.74.196
Sep 19, 2024 23:37:28.392966986 CEST	443	49730	142.250.74.196	192.168.2.6
Sep 19, 2024 23:37:28.393502951 CEST	49731	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:28.393698931 CEST	49730	443	192.168.2.6	142.250.74.196
Sep 19, 2024 23:37:28.393707991 CEST	443	49730	142.250.74.196	192.168.2.6
Sep 19, 2024 23:37:28.439409018 CEST	443	49731	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:28.440222979 CEST	49730	443	192.168.2.6	142.250.74.196
Sep 19, 2024 23:37:28.570961952 CEST	443	49731	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:28.571033955 CEST	443	49731	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:28.571055889 CEST	443	49731	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:28.571094990 CEST	443	49731	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:28.571110010 CEST	49731	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:28.571129084 CEST	443	49731	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:28.571161032 CEST	443	49731	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:28.571182013 CEST	49731	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:28.571192980 CEST	49731	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:28.571225882 CEST	49731	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:28.584896088 CEST	49732	443	192.168.2.6	40.113.103.199
Sep 19, 2024 23:37:28.584935904 CEST	443	49732	40.113.103.199	192.168.2.6
Sep 19, 2024 23:37:28.585241079 CEST	49732	443	192.168.2.6	40.113.103.199
Sep 19, 2024 23:37:28.585931063 CEST	49732	443	192.168.2.6	40.113.103.199
Sep 19, 2024 23:37:28.585952997 CEST	443	49732	40.113.103.199	192.168.2.6
Sep 19, 2024 23:37:28.592329025 CEST	443	49730	142.250.74.196	192.168.2.6
Sep 19, 2024 23:37:28.592437029 CEST	443	49730	142.250.74.196	192.168.2.6
Sep 19, 2024 23:37:28.592710972 CEST	443	49730	142.250.74.196	192.168.2.6
Sep 19, 2024 23:37:28.592725992 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:28.592736959 CEST	49730	443	192.168.2.6	142.250.74.196
Sep 19, 2024 23:37:28.592765093 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:28.592789888 CEST	49730	443	192.168.2.6	142.250.74.196
Sep 19, 2024 23:37:28.592835903 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:28.593417883 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:28.593445063 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:28.594271898 CEST	49730	443	192.168.2.6	142.250.74.196
Sep 19, 2024 23:37:28.594290972 CEST	443	49730	142.250.74.196	192.168.2.6
Sep 19, 2024 23:37:28.655055046 CEST	443	49731	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:28.655080080 CEST	443	49731	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:28.655177116 CEST	49731	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:28.655193090 CEST	443	49731	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:28.655239105 CEST	49731	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:28.659739971 CEST	443	49731	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:28.659754992 CEST	443	49731	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:28.659840107 CEST	49731	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:28.659851074 CEST	443	49731	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:28.659895897 CEST	49731	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:28.660073042 CEST	49734	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:28.660101891 CEST	443	49734	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:28.660192966 CEST	49734	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:28.661067963 CEST	49734	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:28.661084890 CEST	443	49734	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:28.661551952 CEST	49735	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:28.661600113 CEST	443	49735	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:28.661714077 CEST	49735	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:28.662225008 CEST	49736	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:28.662276030 CEST	443	49736	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:28.662360907 CEST	49736	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:28.662496090 CEST	49735	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:28.662514925 CEST	443	49735	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:28.662683010 CEST	49736	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:28.662700891 CEST	443	49736	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:28.713586092 CEST	49737	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:28.713624001 CEST	443	49737	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:28.713687897 CEST	49737	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:28.714236975 CEST	49737	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:28.714247942 CEST	443	49737	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:28.740632057 CEST	443	49731	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:28.740648985 CEST	443	49731	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:28.740720987 CEST	49731	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:28.740735054 CEST	443	49731	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:28.740777016 CEST	49731	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:28.742825031 CEST	443	49731	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:28.742840052 CEST	443	49731	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:28.742901087 CEST	49731	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:28.742909908 CEST	443	49731	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:28.742969990 CEST	49731	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:28.744857073 CEST	443	49731	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:28.744873047 CEST	443	49731	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:28.744930983 CEST	49731	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:28.744940042 CEST	443	49731	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:28.744977951 CEST	49731	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:28.746977091 CEST	443	49731	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:28.747000933 CEST	443	49731	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:28.747054100 CEST	49731	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:28.747065067 CEST	443	49731	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:28.747104883 CEST	49731	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:28.827419996 CEST	443	49731	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:28.827469110 CEST	443	49731	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:28.827500105 CEST	49731	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:28.827528000 CEST	443	49731	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:28.827547073 CEST	49731	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:28.827572107 CEST	49731	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:28.828689098 CEST	443	49731	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:28.828742027 CEST	443	49731	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:28.828764915 CEST	49731	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:28.828774929 CEST	443	49731	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:28.828835011 CEST	49731	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:28.828885078 CEST	443	49731	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:28.828934908 CEST	49731	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:28.829143047 CEST	49731	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:28.829163074 CEST	443	49731	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.138071060 CEST	443	49734	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:29.138360977 CEST	49734	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:29.138381958 CEST	443	49734	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:29.138772011 CEST	443	49734	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:29.139112949 CEST	49734	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:29.139179945 CEST	443	49734	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:29.139348030 CEST	49734	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:29.140574932 CEST	443	49736	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:29.140805006 CEST	49736	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:29.140867949 CEST	443	49736	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:29.142806053 CEST	443	49736	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:29.142884970 CEST	49736	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:29.143208981 CEST	49736	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:29.143332005 CEST	49736	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:29.143346071 CEST	443	49736	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:29.143475056 CEST	443	49736	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:29.183412075 CEST	443	49734	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:29.189388990 CEST	49736	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:29.189435005 CEST	443	49736	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:29.234850883 CEST	49736	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:29.254239082 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.254578114 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.254604101 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.254982948 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.255486012 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.255573988 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.255709887 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.299423933 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.306754112 CEST	443	49734	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:29.307271004 CEST	443	49734	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:29.307329893 CEST	49734	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:29.310213089 CEST	49734	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:29.310240030 CEST	443	49734	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:29.314593077 CEST	49740	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.314666033 CEST	443	49740	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.314765930 CEST	49740	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.315023899 CEST	49740	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.315052032 CEST	443	49740	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.333436012 CEST	443	49735	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:29.333677053 CEST	49735	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:29.333692074 CEST	443	49735	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:29.334835052 CEST	443	49735	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:29.335154057 CEST	49735	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:29.335280895 CEST	49735	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:29.335284948 CEST	443	49735	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:29.335318089 CEST	443	49735	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:29.373847961 CEST	443	49732	40.113.103.199	192.168.2.6
Sep 19, 2024 23:37:29.373929024 CEST	49732	443	192.168.2.6	40.113.103.199
Sep 19, 2024 23:37:29.376903057 CEST	49735	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:29.377108097 CEST	49732	443	192.168.2.6	40.113.103.199
Sep 19, 2024 23:37:29.377120018 CEST	443	49732	40.113.103.199	192.168.2.6
Sep 19, 2024 23:37:29.377393007 CEST	443	49732	40.113.103.199	192.168.2.6
Sep 19, 2024 23:37:29.379493952 CEST	49732	443	192.168.2.6	40.113.103.199
Sep 19, 2024 23:37:29.379615068 CEST	49732	443	192.168.2.6	40.113.103.199
Sep 19, 2024 23:37:29.379622936 CEST	443	49732	40.113.103.199	192.168.2.6
Sep 19, 2024 23:37:29.379787922 CEST	49732	443	192.168.2.6	40.113.103.199
Sep 19, 2024 23:37:29.393038988 CEST	443	49737	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:29.393373013 CEST	49737	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:29.393381119 CEST	443	49737	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:29.393388987 CEST	443	49736	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:29.393471003 CEST	443	49736	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:29.393534899 CEST	49736	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:29.395533085 CEST	49736	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:29.395579100 CEST	443	49736	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:29.396806002 CEST	443	49737	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:29.396862030 CEST	49737	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:29.398185015 CEST	49737	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:29.398245096 CEST	443	49737	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:29.398726940 CEST	49737	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:29.398732901 CEST	443	49737	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:29.403723001 CEST	49741	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.403775930 CEST	443	49741	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.403846979 CEST	49741	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.404076099 CEST	49741	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.404109001 CEST	443	49741	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.427427053 CEST	443	49732	40.113.103.199	192.168.2.6
Sep 19, 2024 23:37:29.446883917 CEST	49737	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:29.505018950 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.505043030 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.505060911 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.505135059 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.505203009 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.505302906 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.554600954 CEST	443	49732	40.113.103.199	192.168.2.6
Sep 19, 2024 23:37:29.555272102 CEST	443	49732	40.113.103.199	192.168.2.6
Sep 19, 2024 23:37:29.555326939 CEST	49732	443	192.168.2.6	40.113.103.199
Sep 19, 2024 23:37:29.555478096 CEST	49732	443	192.168.2.6	40.113.103.199
Sep 19, 2024 23:37:29.555501938 CEST	443	49732	40.113.103.199	192.168.2.6
Sep 19, 2024 23:37:29.594870090 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.594893932 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.594961882 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.594981909 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.595020056 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.595041990 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.596710920 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.596728086 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.596775055 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.596787930 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.596812963 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.596848011 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.603025913 CEST	443	49737	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:29.603080034 CEST	443	49737	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:29.603086948 CEST	443	49737	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:29.603100061 CEST	443	49737	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:29.603123903 CEST	49737	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:29.603133917 CEST	443	49737	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:29.603143930 CEST	443	49737	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:29.603166103 CEST	49737	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:29.603199959 CEST	49737	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:29.652707100 CEST	443	49735	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:29.652770996 CEST	443	49735	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:29.652791977 CEST	443	49735	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:29.652827978 CEST	443	49735	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:29.652832031 CEST	49735	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:29.652858973 CEST	443	49735	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:29.652877092 CEST	49735	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:29.652884007 CEST	49735	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:29.653050900 CEST	443	49735	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:29.653103113 CEST	49735	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:29.656403065 CEST	49735	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:29.656418085 CEST	443	49735	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:29.661887884 CEST	49742	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.661938906 CEST	443	49742	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.662026882 CEST	49742	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.662242889 CEST	49742	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.662262917 CEST	443	49742	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.680576086 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.680596113 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.680661917 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.680685997 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.680727005 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.680748940 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.682063103 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.682077885 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.682132006 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.682143927 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.682171106 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.682189941 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.683124065 CEST	443	49737	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:29.683183908 CEST	443	49737	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:29.683193922 CEST	443	49737	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:29.683207989 CEST	49737	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:29.683271885 CEST	49737	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:29.683536053 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.683552027 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.683619022 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.683633089 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.683687925 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.684689999 CEST	49737	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:29.684700966 CEST	443	49737	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:29.688882113 CEST	49743	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.688905954 CEST	443	49743	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.688971996 CEST	49743	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.689198017 CEST	49743	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.689208031 CEST	443	49743	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.720745087 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.720762968 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.720860004 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.720896006 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.720948935 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.767411947 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.767431021 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.767564058 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.767591000 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.768001080 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.768104076 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.768120050 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.768507004 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.768520117 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.768676996 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.768723011 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.768735886 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.768816948 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.768827915 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.768958092 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.769778967 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.769792080 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.770026922 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.770039082 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.770723104 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.770742893 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.770767927 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.770780087 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.770813942 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.770900011 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.771653891 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.771667957 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.771790981 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.771804094 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.771948099 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.811094999 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.811114073 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.811186075 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.811203957 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.811242104 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.811304092 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.853461981 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.853478909 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.853760004 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.853768110 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.854115963 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.854340076 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.854353905 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.854490995 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.854496956 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.854614019 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.854967117 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.854979992 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.855057955 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.855057955 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.855063915 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.855112076 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.858412027 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.858424902 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.858740091 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.858745098 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.858788967 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.858807087 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.858824968 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.858829021 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.858858109 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.858858109 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.858886003 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.859505892 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.859519958 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.859647989 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.859653950 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.859747887 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.860058069 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.860073090 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.860200882 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.860204935 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.860507011 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.883655071 CEST	49745	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:29.883692026 CEST	443	49745	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:29.884979010 CEST	49745	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:29.885143042 CEST	49745	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:29.885154009 CEST	443	49745	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:29.892440081 CEST	443	49741	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.892692089 CEST	49741	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.892740011 CEST	443	49741	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.893877029 CEST	443	49741	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.894330978 CEST	49741	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.894330978 CEST	49741	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.894511938 CEST	443	49741	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.915174961 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.915191889 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.915465117 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.915484905 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.919629097 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.934705019 CEST	49741	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.940365076 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.940382957 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.940440893 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.940452099 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.940505028 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.940505028 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.941020966 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.941035032 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.941173077 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.941178083 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.941294909 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.941956997 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.941975117 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.942023039 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.942028999 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.942054987 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.942431927 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.942450047 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.942466021 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.942471027 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.942493916 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.942676067 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.943219900 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.943239927 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.943351984 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.943357944 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.943444967 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.943787098 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.943799973 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.943918943 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.943926096 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.944422007 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.944550037 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.944564104 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.944636106 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.944636106 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.944643021 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.944776058 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.998351097 CEST	443	49740	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.998658895 CEST	49740	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:29.998668909 CEST	443	49740	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:29.999839067 CEST	443	49740	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.000294924 CEST	49740	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.000294924 CEST	49740	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.000462055 CEST	443	49740	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.002039909 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.002054930 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.002345085 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.002373934 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.002546072 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.035940886 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.035954952 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.036058903 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.036058903 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.036066055 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.036480904 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.036694050 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.036710024 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.037108898 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.037113905 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.037130117 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.037148952 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.037180901 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.037185907 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.037240028 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.037240028 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.037656069 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.037669897 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.037858963 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.037864923 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.038052082 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.038078070 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.038094044 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.038213015 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.038218975 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.038361073 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.038630009 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.038644075 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.038801908 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.038808107 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.038983107 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.039057970 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.039072037 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.039167881 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.039172888 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.039500952 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.043282032 CEST	49740	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.061499119 CEST	443	49741	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.061568975 CEST	443	49741	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.062772036 CEST	49741	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.062938929 CEST	49741	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.062967062 CEST	443	49741	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.097043037 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.097060919 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.097237110 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.097244978 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.097500086 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.122992039 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.123008013 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.123147964 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.123155117 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.123271942 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.123289108 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.123303890 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.123307943 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.123363018 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.123363018 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.123622894 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.123641968 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.123728037 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.123733997 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.123858929 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.124248028 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.124262094 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.124357939 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.124363899 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.124587059 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.124603987 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.124618053 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.124620914 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.124644041 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.124826908 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.125190973 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.125204086 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.125510931 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.125515938 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.125583887 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.125602007 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.125613928 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.125618935 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.125629902 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.125663042 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.125873089 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.175019026 CEST	443	49740	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.175194979 CEST	443	49740	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.175610065 CEST	49740	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.175836086 CEST	49740	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.175848961 CEST	443	49740	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.183855057 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.183868885 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.184370995 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.184376955 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.184551001 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.209167957 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.209184885 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.209518909 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.209526062 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.209654093 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.209759951 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.209774971 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.209841013 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.209841013 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.209846020 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.210026979 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.210045099 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.210112095 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.210112095 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.210118055 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.210562944 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.210576057 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.210592985 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.210597992 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.210625887 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.210692883 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.210871935 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.210886955 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.211000919 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.211005926 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.211225986 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.211450100 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.211469889 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.211539984 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.211539984 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.211545944 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.211745024 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.212121964 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.212136984 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.212291956 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.212297916 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.212618113 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.281210899 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.281233072 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.281338930 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.281347990 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.281461000 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.296061039 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.296080112 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.296345949 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.296359062 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.296439886 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.296459913 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.296474934 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.296479940 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.296494961 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.296767950 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.296833992 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.296849012 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.297239065 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.297244072 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.297251940 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.297269106 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.297301054 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.297306061 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.297359943 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.297359943 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.297630072 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.297642946 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.297714949 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.297720909 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.297758102 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.298100948 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.298115969 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.298481941 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.298486948 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.298649073 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.298767090 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.298780918 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.298866987 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.298871994 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.298991919 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.347069025 CEST	443	49742	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.347402096 CEST	49742	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.347440958 CEST	443	49742	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.348920107 CEST	443	49742	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.349129915 CEST	49742	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.349301100 CEST	49742	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.349397898 CEST	443	49742	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.349831104 CEST	49742	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.349842072 CEST	443	49742	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.368410110 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.368433952 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.368674994 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.368686914 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.368742943 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.376671076 CEST	443	49743	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.376893044 CEST	49743	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.376902103 CEST	443	49743	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.380472898 CEST	443	49743	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.380642891 CEST	49743	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.381030083 CEST	49743	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.381030083 CEST	49743	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.381198883 CEST	443	49743	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.382877111 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.382893085 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.383017063 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.383027077 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.383285999 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.383302927 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.383311033 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.383325100 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.383352995 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.383408070 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.383666039 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.383682966 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.383853912 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.383862019 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.383940935 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.384285927 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.384305000 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.384371042 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.384371042 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.384380102 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.384563923 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.384749889 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.384766102 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.385134935 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.385168076 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.385174036 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.385195017 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.385207891 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.385427952 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.385831118 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.385844946 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.386004925 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.386013985 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.395504951 CEST	49742	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.424422979 CEST	49743	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.424431086 CEST	443	49743	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.432667017 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.454830885 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.454873085 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.454906940 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.454916954 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.455423117 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.455657005 CEST	49733	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.455672026 CEST	443	49733	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.479792118 CEST	49743	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.532635927 CEST	443	49742	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.532650948 CEST	443	49742	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.532660007 CEST	443	49742	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.532687902 CEST	443	49742	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.532752991 CEST	49742	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.532752991 CEST	49742	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.532774925 CEST	443	49742	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.533301115 CEST	49742	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.539295912 CEST	49742	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.539319038 CEST	443	49742	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.577105999 CEST	443	49745	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:30.584249020 CEST	49745	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:30.584259033 CEST	443	49745	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:30.584796906 CEST	443	49745	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:30.585242033 CEST	49745	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:30.585313082 CEST	443	49745	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:30.585504055 CEST	49745	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:30.627429962 CEST	443	49745	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:30.645052910 CEST	443	49743	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.645112038 CEST	443	49743	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.645132065 CEST	443	49743	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.645150900 CEST	443	49743	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.645190954 CEST	443	49743	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.645209074 CEST	443	49743	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.645221949 CEST	49743	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.645221949 CEST	49743	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.645240068 CEST	443	49743	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.645267963 CEST	49743	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.645267963 CEST	49743	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.647708893 CEST	49743	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.700606108 CEST	443	49745	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:30.700696945 CEST	443	49745	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:30.701015949 CEST	49745	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:30.721673012 CEST	443	49743	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.721719980 CEST	443	49743	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.721865892 CEST	443	49743	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:30.721949100 CEST	49743	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.721949100 CEST	49743	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.723555088 CEST	49743	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.873459101 CEST	49745	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:30.873466969 CEST	443	49745	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:30.877345085 CEST	49743	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:30.877362967 CEST	443	49743	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:33.120929003 CEST	443	49720	142.250.186.132	192.168.2.6
Sep 19, 2024 23:37:33.121006012 CEST	443	49720	142.250.186.132	192.168.2.6
Sep 19, 2024 23:37:33.121067047 CEST	49720	443	192.168.2.6	142.250.186.132
Sep 19, 2024 23:37:34.434422016 CEST	49720	443	192.168.2.6	142.250.186.132
Sep 19, 2024 23:37:34.434453964 CEST	443	49720	142.250.186.132	192.168.2.6
Sep 19, 2024 23:37:39.246936083 CEST	49750	443	192.168.2.6	40.113.103.199
Sep 19, 2024 23:37:39.246978045 CEST	443	49750	40.113.103.199	192.168.2.6
Sep 19, 2024 23:37:39.247044086 CEST	49750	443	192.168.2.6	40.113.103.199
Sep 19, 2024 23:37:39.247687101 CEST	49750	443	192.168.2.6	40.113.103.199
Sep 19, 2024 23:37:39.247704029 CEST	443	49750	40.113.103.199	192.168.2.6
Sep 19, 2024 23:37:40.386616945 CEST	443	49750	40.113.103.199	192.168.2.6
Sep 19, 2024 23:37:40.386773109 CEST	49750	443	192.168.2.6	40.113.103.199
Sep 19, 2024 23:37:40.392913103 CEST	49750	443	192.168.2.6	40.113.103.199
Sep 19, 2024 23:37:40.392918110 CEST	443	49750	40.113.103.199	192.168.2.6
Sep 19, 2024 23:37:40.393192053 CEST	443	49750	40.113.103.199	192.168.2.6
Sep 19, 2024 23:37:40.395411968 CEST	49750	443	192.168.2.6	40.113.103.199
Sep 19, 2024 23:37:40.395610094 CEST	49750	443	192.168.2.6	40.113.103.199
Sep 19, 2024 23:37:40.395616055 CEST	443	49750	40.113.103.199	192.168.2.6
Sep 19, 2024 23:37:40.395663023 CEST	49750	443	192.168.2.6	40.113.103.199
Sep 19, 2024 23:37:40.439444065 CEST	443	49750	40.113.103.199	192.168.2.6
Sep 19, 2024 23:37:40.576698065 CEST	443	49750	40.113.103.199	192.168.2.6
Sep 19, 2024 23:37:40.577279091 CEST	49750	443	192.168.2.6	40.113.103.199
Sep 19, 2024 23:37:40.577290058 CEST	443	49750	40.113.103.199	192.168.2.6
Sep 19, 2024 23:37:40.577331066 CEST	49750	443	192.168.2.6	40.113.103.199
Sep 19, 2024 23:37:40.577501059 CEST	443	49750	40.113.103.199	192.168.2.6
Sep 19, 2024 23:37:40.577590942 CEST	49750	443	192.168.2.6	40.113.103.199
Sep 19, 2024 23:37:40.577763081 CEST	49750	443	192.168.2.6	40.113.103.199
Sep 19, 2024 23:37:44.597580910 CEST	63179	53	192.168.2.6	162.159.36.2
Sep 19, 2024 23:37:44.602801085 CEST	53	63179	162.159.36.2	192.168.2.6
Sep 19, 2024 23:37:44.603085041 CEST	63179	53	192.168.2.6	162.159.36.2
Sep 19, 2024 23:37:44.603408098 CEST	63179	53	192.168.2.6	162.159.36.2
Sep 19, 2024 23:37:44.608422995 CEST	53	63179	162.159.36.2	192.168.2.6
Sep 19, 2024 23:37:44.615421057 CEST	63180	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:44.615468979 CEST	443	63180	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:44.615997076 CEST	63180	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:44.615997076 CEST	63180	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:44.616050959 CEST	443	63180	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:45.097256899 CEST	53	63179	162.159.36.2	192.168.2.6
Sep 19, 2024 23:37:45.142971039 CEST	63179	53	192.168.2.6	162.159.36.2
Sep 19, 2024 23:37:45.176070929 CEST	63179	53	192.168.2.6	162.159.36.2
Sep 19, 2024 23:37:45.229062080 CEST	53	63179	162.159.36.2	192.168.2.6
Sep 19, 2024 23:37:45.229147911 CEST	63179	53	192.168.2.6	162.159.36.2
Sep 19, 2024 23:37:45.437546015 CEST	443	63180	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:45.437963963 CEST	63180	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:45.437987089 CEST	443	63180	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:45.439112902 CEST	443	63180	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:45.439686060 CEST	63180	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:45.439856052 CEST	443	63180	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:45.440128088 CEST	63180	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:45.483429909 CEST	443	63180	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:48.491923094 CEST	443	63180	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:48.493458033 CEST	443	63180	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:48.493529081 CEST	63180	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:48.494074106 CEST	63180	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:48.494092941 CEST	443	63180	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:48.503487110 CEST	63182	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:48.503570080 CEST	443	63182	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:48.503676891 CEST	63182	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:48.503901005 CEST	63182	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:48.503931046 CEST	443	63182	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:49.369754076 CEST	443	63182	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:49.370074987 CEST	63182	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:49.370136976 CEST	443	63182	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:49.371258974 CEST	443	63182	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:49.371815920 CEST	63182	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:49.371815920 CEST	63182	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:49.371999979 CEST	443	63182	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:49.417361021 CEST	63182	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:49.580423117 CEST	443	63182	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:49.582381964 CEST	443	63182	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:49.582490921 CEST	63182	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:49.583589077 CEST	63182	443	192.168.2.6	199.255.242.12
Sep 19, 2024 23:37:49.583630085 CEST	443	63182	199.255.242.12	192.168.2.6
Sep 19, 2024 23:37:50.416445971 CEST	63183	443	192.168.2.6	40.113.103.199
Sep 19, 2024 23:37:50.416487932 CEST	443	63183	40.113.103.199	192.168.2.6
Sep 19, 2024 23:37:50.416555882 CEST	63183	443	192.168.2.6	40.113.103.199
Sep 19, 2024 23:37:50.417774916 CEST	63183	443	192.168.2.6	40.113.103.199
Sep 19, 2024 23:37:50.417795897 CEST	443	63183	40.113.103.199	192.168.2.6
Sep 19, 2024 23:37:51.264739037 CEST	443	63183	40.113.103.199	192.168.2.6
Sep 19, 2024 23:37:51.264848948 CEST	63183	443	192.168.2.6	40.113.103.199
Sep 19, 2024 23:37:51.275778055 CEST	63183	443	192.168.2.6	40.113.103.199
Sep 19, 2024 23:37:51.275798082 CEST	443	63183	40.113.103.199	192.168.2.6
Sep 19, 2024 23:37:51.276590109 CEST	443	63183	40.113.103.199	192.168.2.6
Sep 19, 2024 23:37:51.279798985 CEST	63183	443	192.168.2.6	40.113.103.199
Sep 19, 2024 23:37:51.279881001 CEST	63183	443	192.168.2.6	40.113.103.199
Sep 19, 2024 23:37:51.279887915 CEST	443	63183	40.113.103.199	192.168.2.6
Sep 19, 2024 23:37:51.279994965 CEST	63183	443	192.168.2.6	40.113.103.199
Sep 19, 2024 23:37:51.323406935 CEST	443	63183	40.113.103.199	192.168.2.6
Sep 19, 2024 23:37:51.469691992 CEST	443	63183	40.113.103.199	192.168.2.6
Sep 19, 2024 23:37:51.470241070 CEST	63183	443	192.168.2.6	40.113.103.199
Sep 19, 2024 23:37:51.470284939 CEST	443	63183	40.113.103.199	192.168.2.6
Sep 19, 2024 23:37:51.470325947 CEST	63183	443	192.168.2.6	40.113.103.199
Sep 19, 2024 23:37:51.470341921 CEST	63183	443	192.168.2.6	40.113.103.199
Sep 19, 2024 23:37:52.034837008 CEST	63184	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:52.034877062 CEST	443	63184	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:52.035028934 CEST	63184	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:52.035408020 CEST	63184	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:52.035418987 CEST	443	63184	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:52.612618923 CEST	443	63184	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:52.665422916 CEST	63184	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:52.811801910 CEST	63184	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:52.811814070 CEST	443	63184	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:52.813431978 CEST	443	63184	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:52.831069946 CEST	63184	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:52.831442118 CEST	443	63184	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:52.874191046 CEST	63184	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:53.498271942 CEST	63184	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:53.543426037 CEST	443	63184	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:53.755914927 CEST	443	63184	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:53.755958080 CEST	443	63184	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:53.755973101 CEST	443	63184	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:53.755997896 CEST	443	63184	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:53.756011009 CEST	63184	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:53.756012917 CEST	443	63184	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:53.756064892 CEST	63184	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:53.756077051 CEST	443	63184	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:53.756220102 CEST	443	63184	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:53.756277084 CEST	63184	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:53.757530928 CEST	63184	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:53.757545948 CEST	443	63184	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:53.757575035 CEST	63184	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:53.757596016 CEST	63184	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:53.871952057 CEST	63186	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:53.872044086 CEST	443	63186	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:53.872214079 CEST	63186	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:53.872406006 CEST	63186	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:53.872435093 CEST	443	63186	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:54.647656918 CEST	443	63186	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:54.648081064 CEST	63186	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:54.648149967 CEST	443	63186	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:54.648664951 CEST	443	63186	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:54.649132967 CEST	63186	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:54.649228096 CEST	443	63186	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:54.649272919 CEST	63186	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:54.695405960 CEST	443	63186	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:54.701174021 CEST	63186	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:54.867801905 CEST	443	63186	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:54.867908955 CEST	443	63186	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:54.867984056 CEST	63186	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:54.869055986 CEST	63186	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:54.869092941 CEST	443	63186	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:58.821610928 CEST	63189	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:58.821659088 CEST	443	63189	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:58.821736097 CEST	63189	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:58.821948051 CEST	63189	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:58.821968079 CEST	443	63189	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:59.523380041 CEST	443	63189	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:59.523816109 CEST	63189	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:59.523839951 CEST	443	63189	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:59.524677992 CEST	443	63189	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:59.525544882 CEST	63189	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:59.525630951 CEST	443	63189	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:59.525960922 CEST	63189	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:59.571408033 CEST	443	63189	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:59.763381004 CEST	443	63189	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:59.763483047 CEST	443	63189	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:59.763566971 CEST	63189	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:59.763572931 CEST	443	63189	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:59.763627052 CEST	443	63189	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:59.763667107 CEST	63189	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:59.763675928 CEST	443	63189	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:59.763765097 CEST	443	63189	199.255.242.14	192.168.2.6
Sep 19, 2024 23:37:59.763849974 CEST	63189	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:59.764839888 CEST	63189	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:37:59.764856100 CEST	443	63189	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:00.462451935 CEST	63190	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:00.462516069 CEST	443	63190	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:00.462588072 CEST	63190	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:00.463051081 CEST	63190	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:00.463074923 CEST	443	63190	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:00.476599932 CEST	63191	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:00.476639032 CEST	443	63191	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:00.476697922 CEST	63191	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:00.477236986 CEST	63191	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:00.477247953 CEST	443	63191	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:00.954372883 CEST	443	63191	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:00.954690933 CEST	63191	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:00.954710007 CEST	443	63191	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:00.955121994 CEST	443	63191	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:00.955579042 CEST	63191	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:00.955645084 CEST	443	63191	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:00.955763102 CEST	63191	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:01.003408909 CEST	443	63191	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:01.032033920 CEST	63192	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:01.032067060 CEST	443	63192	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:01.032138109 CEST	63192	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:01.032550097 CEST	63192	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:01.032567024 CEST	443	63192	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:01.123754025 CEST	443	63191	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:01.125947952 CEST	443	63191	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:01.126007080 CEST	63191	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:01.127159119 CEST	63191	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:01.127175093 CEST	443	63191	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:01.137460947 CEST	443	63190	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:01.138503075 CEST	63190	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:01.138523102 CEST	443	63190	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:01.139681101 CEST	443	63190	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:01.140883923 CEST	63190	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:01.141058922 CEST	443	63190	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:01.141428947 CEST	63190	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:01.183420897 CEST	443	63190	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:01.326488972 CEST	443	63190	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:01.326508999 CEST	443	63190	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:01.326560974 CEST	443	63190	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:01.326592922 CEST	63190	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:01.326626062 CEST	443	63190	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:01.326641083 CEST	443	63190	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:01.326646090 CEST	63190	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:01.326685905 CEST	63190	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:01.477494955 CEST	63190	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:01.477535963 CEST	443	63190	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:01.751735926 CEST	63193	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:01.751780033 CEST	443	63193	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:01.751894951 CEST	63193	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:01.753777027 CEST	443	63192	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:01.755497932 CEST	63193	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:01.755520105 CEST	443	63193	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:01.757493973 CEST	63192	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:01.757522106 CEST	443	63192	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:01.758730888 CEST	443	63192	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:01.759470940 CEST	63192	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:01.759654999 CEST	443	63192	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:01.759799004 CEST	63192	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:01.803440094 CEST	443	63192	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:01.935636997 CEST	443	63192	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:01.935714960 CEST	443	63192	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:01.935878992 CEST	63192	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:01.938313961 CEST	63192	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:01.938323975 CEST	443	63192	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:01.940320015 CEST	63194	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:01.940349102 CEST	443	63194	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:01.940604925 CEST	63194	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:01.941099882 CEST	63194	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:01.941109896 CEST	443	63194	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:02.224828005 CEST	443	63193	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:02.225162029 CEST	63193	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:02.225186110 CEST	443	63193	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:02.225538969 CEST	443	63193	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:02.225951910 CEST	63193	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:02.226010084 CEST	443	63193	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:02.226126909 CEST	63193	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:02.267433882 CEST	443	63193	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:02.437874079 CEST	443	63193	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:02.437907934 CEST	443	63193	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:02.437931061 CEST	443	63193	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:02.437983036 CEST	63193	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:02.437992096 CEST	443	63193	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:02.438009977 CEST	63193	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:02.438092947 CEST	443	63193	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:02.438205004 CEST	63193	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:02.439100027 CEST	63193	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:02.439105988 CEST	443	63193	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:02.631226063 CEST	443	63194	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:02.682199955 CEST	63194	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:02.688879013 CEST	63194	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:02.688895941 CEST	443	63194	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:02.689457893 CEST	443	63194	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:02.693054914 CEST	63194	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:02.693173885 CEST	443	63194	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:02.696572065 CEST	63194	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:02.739407063 CEST	443	63194	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:02.894064903 CEST	443	63194	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:02.894182920 CEST	443	63194	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:02.894248009 CEST	63194	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:02.895864010 CEST	63194	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:02.895896912 CEST	443	63194	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:04.081547022 CEST	63195	443	192.168.2.6	40.115.3.253
Sep 19, 2024 23:38:04.081607103 CEST	443	63195	40.115.3.253	192.168.2.6
Sep 19, 2024 23:38:04.081670046 CEST	63195	443	192.168.2.6	40.115.3.253
Sep 19, 2024 23:38:04.082844973 CEST	63195	443	192.168.2.6	40.115.3.253
Sep 19, 2024 23:38:04.082863092 CEST	443	63195	40.115.3.253	192.168.2.6
Sep 19, 2024 23:38:04.890959024 CEST	443	63195	40.115.3.253	192.168.2.6
Sep 19, 2024 23:38:04.891050100 CEST	63195	443	192.168.2.6	40.115.3.253
Sep 19, 2024 23:38:04.906802893 CEST	63195	443	192.168.2.6	40.115.3.253
Sep 19, 2024 23:38:04.906825066 CEST	443	63195	40.115.3.253	192.168.2.6
Sep 19, 2024 23:38:04.907114983 CEST	443	63195	40.115.3.253	192.168.2.6
Sep 19, 2024 23:38:04.924145937 CEST	63195	443	192.168.2.6	40.115.3.253
Sep 19, 2024 23:38:04.924329996 CEST	63195	443	192.168.2.6	40.115.3.253
Sep 19, 2024 23:38:04.924338102 CEST	443	63195	40.115.3.253	192.168.2.6
Sep 19, 2024 23:38:04.924527884 CEST	63195	443	192.168.2.6	40.115.3.253
Sep 19, 2024 23:38:04.971409082 CEST	443	63195	40.115.3.253	192.168.2.6
Sep 19, 2024 23:38:05.103303909 CEST	443	63195	40.115.3.253	192.168.2.6
Sep 19, 2024 23:38:05.103404045 CEST	443	63195	40.115.3.253	192.168.2.6
Sep 19, 2024 23:38:05.103503942 CEST	63195	443	192.168.2.6	40.115.3.253
Sep 19, 2024 23:38:05.105881929 CEST	63195	443	192.168.2.6	40.115.3.253
Sep 19, 2024 23:38:05.105904102 CEST	443	63195	40.115.3.253	192.168.2.6
Sep 19, 2024 23:38:20.722891092 CEST	63197	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:20.722949982 CEST	443	63197	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:20.723186016 CEST	63197	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:20.723458052 CEST	63197	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:20.723474026 CEST	443	63197	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:21.386259079 CEST	443	63197	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:21.386665106 CEST	63197	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:21.386701107 CEST	443	63197	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:21.387850046 CEST	443	63197	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:21.388247013 CEST	63197	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:21.388380051 CEST	63197	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:21.388386011 CEST	443	63197	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:21.388415098 CEST	443	63197	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:21.433794975 CEST	63197	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:21.619157076 CEST	443	63197	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:21.619419098 CEST	443	63197	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:21.619481087 CEST	63197	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:21.620170116 CEST	63197	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:21.620193005 CEST	443	63197	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:21.628937006 CEST	63198	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:21.628973007 CEST	443	63198	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:21.629051924 CEST	63198	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:21.629348040 CEST	63198	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:21.629363060 CEST	443	63198	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:22.162959099 CEST	443	63198	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:22.163350105 CEST	63198	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:22.163373947 CEST	443	63198	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:22.163868904 CEST	443	63198	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:22.164623022 CEST	63198	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:22.164731979 CEST	443	63198	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:22.164778948 CEST	63198	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:22.208030939 CEST	63198	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:22.208045006 CEST	443	63198	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:22.348809958 CEST	443	63198	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:22.349078894 CEST	443	63198	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:22.349159002 CEST	63198	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:22.426783085 CEST	63198	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:22.426816940 CEST	443	63198	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:22.598880053 CEST	63199	443	192.168.2.6	142.250.185.100
Sep 19, 2024 23:38:22.598932028 CEST	443	63199	142.250.185.100	192.168.2.6
Sep 19, 2024 23:38:22.599086046 CEST	63199	443	192.168.2.6	142.250.185.100
Sep 19, 2024 23:38:22.599302053 CEST	63199	443	192.168.2.6	142.250.185.100
Sep 19, 2024 23:38:22.599318981 CEST	443	63199	142.250.185.100	192.168.2.6
Sep 19, 2024 23:38:23.227443933 CEST	63200	443	192.168.2.6	40.115.3.253
Sep 19, 2024 23:38:23.227484941 CEST	443	63200	40.115.3.253	192.168.2.6
Sep 19, 2024 23:38:23.227541924 CEST	63200	443	192.168.2.6	40.115.3.253
Sep 19, 2024 23:38:23.228380919 CEST	63200	443	192.168.2.6	40.115.3.253
Sep 19, 2024 23:38:23.228394032 CEST	443	63200	40.115.3.253	192.168.2.6
Sep 19, 2024 23:38:23.263570070 CEST	443	63199	142.250.185.100	192.168.2.6
Sep 19, 2024 23:38:23.264365911 CEST	63199	443	192.168.2.6	142.250.185.100
Sep 19, 2024 23:38:23.264396906 CEST	443	63199	142.250.185.100	192.168.2.6
Sep 19, 2024 23:38:23.264908075 CEST	443	63199	142.250.185.100	192.168.2.6
Sep 19, 2024 23:38:23.266233921 CEST	63199	443	192.168.2.6	142.250.185.100
Sep 19, 2024 23:38:23.266334057 CEST	443	63199	142.250.185.100	192.168.2.6
Sep 19, 2024 23:38:23.311250925 CEST	63199	443	192.168.2.6	142.250.185.100
Sep 19, 2024 23:38:24.042623043 CEST	443	63200	40.115.3.253	192.168.2.6
Sep 19, 2024 23:38:24.042954922 CEST	63200	443	192.168.2.6	40.115.3.253
Sep 19, 2024 23:38:24.045043945 CEST	63200	443	192.168.2.6	40.115.3.253
Sep 19, 2024 23:38:24.045049906 CEST	443	63200	40.115.3.253	192.168.2.6
Sep 19, 2024 23:38:24.045301914 CEST	443	63200	40.115.3.253	192.168.2.6
Sep 19, 2024 23:38:24.048605919 CEST	63200	443	192.168.2.6	40.115.3.253
Sep 19, 2024 23:38:24.048605919 CEST	63200	443	192.168.2.6	40.115.3.253
Sep 19, 2024 23:38:24.048621893 CEST	443	63200	40.115.3.253	192.168.2.6
Sep 19, 2024 23:38:24.049971104 CEST	63200	443	192.168.2.6	40.115.3.253
Sep 19, 2024 23:38:24.095406055 CEST	443	63200	40.115.3.253	192.168.2.6
Sep 19, 2024 23:38:24.244012117 CEST	443	63200	40.115.3.253	192.168.2.6
Sep 19, 2024 23:38:24.244313002 CEST	443	63200	40.115.3.253	192.168.2.6
Sep 19, 2024 23:38:24.244484901 CEST	63200	443	192.168.2.6	40.115.3.253
Sep 19, 2024 23:38:24.245428085 CEST	63200	443	192.168.2.6	40.115.3.253
Sep 19, 2024 23:38:24.245428085 CEST	63200	443	192.168.2.6	40.115.3.253
Sep 19, 2024 23:38:24.245445013 CEST	443	63200	40.115.3.253	192.168.2.6
Sep 19, 2024 23:38:26.627238035 CEST	63201	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:26.627285004 CEST	443	63201	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:26.627506971 CEST	63201	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:26.627769947 CEST	63201	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:26.627780914 CEST	443	63201	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:27.335851908 CEST	443	63201	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:27.354449987 CEST	63201	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:27.354460955 CEST	443	63201	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:27.354808092 CEST	443	63201	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:27.357532978 CEST	63201	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:27.357601881 CEST	443	63201	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:27.358000994 CEST	63201	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:27.403397083 CEST	443	63201	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:27.582066059 CEST	443	63201	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:27.583338976 CEST	443	63201	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:27.583419085 CEST	63201	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:27.583616972 CEST	63201	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:27.583637953 CEST	443	63201	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:27.586766958 CEST	63202	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:27.586808920 CEST	443	63202	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:27.587106943 CEST	63202	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:27.587327957 CEST	63202	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:27.587337971 CEST	443	63202	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:28.251617908 CEST	443	63202	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:28.251899958 CEST	63202	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:28.251909971 CEST	443	63202	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:28.252393007 CEST	443	63202	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:28.252835035 CEST	63202	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:28.252912045 CEST	443	63202	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:28.253145933 CEST	63202	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:28.299408913 CEST	443	63202	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:28.476767063 CEST	443	63202	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:28.476852894 CEST	443	63202	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:28.476922989 CEST	63202	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:28.477840900 CEST	63202	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:28.477860928 CEST	443	63202	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:32.591218948 CEST	63203	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:32.591258049 CEST	443	63203	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:32.591310978 CEST	63203	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:32.591628075 CEST	63203	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:32.591644049 CEST	443	63203	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:33.177372932 CEST	443	63199	142.250.185.100	192.168.2.6
Sep 19, 2024 23:38:33.177548885 CEST	443	63199	142.250.185.100	192.168.2.6
Sep 19, 2024 23:38:33.177683115 CEST	63199	443	192.168.2.6	142.250.185.100
Sep 19, 2024 23:38:33.299276114 CEST	443	63203	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:33.299541950 CEST	63203	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:33.299573898 CEST	443	63203	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:33.299881935 CEST	443	63203	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:33.300293922 CEST	63203	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:33.300353050 CEST	443	63203	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:33.300452948 CEST	63203	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:33.343446970 CEST	443	63203	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:33.534262896 CEST	443	63203	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:33.534286976 CEST	443	63203	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:33.534329891 CEST	443	63203	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:33.534344912 CEST	63203	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:33.534358978 CEST	443	63203	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:33.534399986 CEST	63203	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:33.534728050 CEST	443	63203	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:33.534785032 CEST	443	63203	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:33.534841061 CEST	63203	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:33.537285089 CEST	63203	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:33.537305117 CEST	443	63203	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:33.785537004 CEST	63199	443	192.168.2.6	142.250.185.100
Sep 19, 2024 23:38:33.785563946 CEST	443	63199	142.250.185.100	192.168.2.6
Sep 19, 2024 23:38:33.786111116 CEST	63204	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:33.786134958 CEST	443	63204	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:33.786227942 CEST	63204	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:33.786863089 CEST	63204	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:33.786880016 CEST	443	63204	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:33.809690952 CEST	63205	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:33.809787989 CEST	443	63205	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:33.809870005 CEST	63205	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:33.810101986 CEST	63205	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:33.810137033 CEST	443	63205	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:34.264353037 CEST	443	63204	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:34.264656067 CEST	63204	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:34.264668941 CEST	443	63204	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:34.265798092 CEST	443	63204	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:34.266138077 CEST	63204	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:34.266308069 CEST	443	63204	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:34.266311884 CEST	63204	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:34.307065964 CEST	63204	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:34.307077885 CEST	443	63204	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:34.442689896 CEST	443	63204	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:34.442995071 CEST	443	63204	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:34.443110943 CEST	63204	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:34.443344116 CEST	63204	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:34.443357944 CEST	443	63204	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:34.520792007 CEST	443	63205	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:34.521174908 CEST	63205	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:34.521213055 CEST	443	63205	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:34.521549940 CEST	443	63205	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:34.521960020 CEST	63205	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:34.522026062 CEST	443	63205	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:34.522264957 CEST	63205	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:34.567401886 CEST	443	63205	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:34.704159975 CEST	443	63205	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:34.704241037 CEST	443	63205	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:34.704310894 CEST	63205	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:34.716602087 CEST	63205	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:34.716620922 CEST	443	63205	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:34.914069891 CEST	63206	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:34.914115906 CEST	443	63206	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:34.914242029 CEST	63206	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:34.917443991 CEST	63206	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:34.917457104 CEST	443	63206	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:35.585613966 CEST	443	63206	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:35.589726925 CEST	63206	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:35.589792013 CEST	443	63206	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:35.590955019 CEST	443	63206	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:35.591552019 CEST	63206	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:35.591747046 CEST	443	63206	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:35.592114925 CEST	63206	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:35.639400959 CEST	443	63206	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:35.758512020 CEST	443	63206	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:35.758713961 CEST	443	63206	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:35.758799076 CEST	63206	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:35.907587051 CEST	63206	443	192.168.2.6	199.255.242.14
Sep 19, 2024 23:38:35.907660007 CEST	443	63206	199.255.242.14	192.168.2.6
Sep 19, 2024 23:38:44.561633110 CEST	52602	53	192.168.2.6	1.1.1.1
Sep 19, 2024 23:38:44.573945045 CEST	53	52602	1.1.1.1	192.168.2.6
Sep 19, 2024 23:38:44.574143887 CEST	52602	53	192.168.2.6	1.1.1.1
Sep 19, 2024 23:38:44.574217081 CEST	52602	53	192.168.2.6	1.1.1.1
Sep 19, 2024 23:38:44.581718922 CEST	53	52602	1.1.1.1	192.168.2.6
Sep 19, 2024 23:38:45.135802984 CEST	53	52602	1.1.1.1	192.168.2.6
Sep 19, 2024 23:38:45.136321068 CEST	52602	53	192.168.2.6	1.1.1.1
Sep 19, 2024 23:38:45.156604052 CEST	53	52602	1.1.1.1	192.168.2.6
Sep 19, 2024 23:38:45.156725883 CEST	52602	53	192.168.2.6	1.1.1.1
Sep 19, 2024 23:38:47.051568985 CEST	52605	443	192.168.2.6	40.115.3.253
Sep 19, 2024 23:38:47.051637888 CEST	443	52605	40.115.3.253	192.168.2.6
Sep 19, 2024 23:38:47.051717043 CEST	52605	443	192.168.2.6	40.115.3.253
Sep 19, 2024 23:38:47.052450895 CEST	52605	443	192.168.2.6	40.115.3.253
Sep 19, 2024 23:38:47.052472115 CEST	443	52605	40.115.3.253	192.168.2.6

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 19, 2024 23:37:19.118115902 CEST	53	49213	1.1.1.1	192.168.2.6
Sep 19, 2024 23:37:19.148966074 CEST	53	56753	1.1.1.1	192.168.2.6
Sep 19, 2024 23:37:20.131683111 CEST	53	53625	1.1.1.1	192.168.2.6
Sep 19, 2024 23:37:20.458775043 CEST	54106	53	192.168.2.6	1.1.1.1
Sep 19, 2024 23:37:20.458981991 CEST	49795	53	192.168.2.6	1.1.1.1
Sep 19, 2024 23:37:22.529483080 CEST	62938	53	192.168.2.6	1.1.1.1
Sep 19, 2024 23:37:22.530056000 CEST	56434	53	192.168.2.6	1.1.1.1
Sep 19, 2024 23:37:22.536801100 CEST	53	62938	1.1.1.1	192.168.2.6
Sep 19, 2024 23:37:22.536859989 CEST	53	56434	1.1.1.1	192.168.2.6
Sep 19, 2024 23:37:24.388974905 CEST	57873	53	192.168.2.6	1.1.1.1
Sep 19, 2024 23:37:24.390120983 CEST	53414	53	192.168.2.6	1.1.1.1
Sep 19, 2024 23:37:24.441760063 CEST	53	57873	1.1.1.1	192.168.2.6
Sep 19, 2024 23:37:24.460210085 CEST	53	53414	1.1.1.1	192.168.2.6
Sep 19, 2024 23:37:26.170979977 CEST	56888	53	192.168.2.6	1.1.1.1
Sep 19, 2024 23:37:26.171560049 CEST	64216	53	192.168.2.6	1.1.1.1
Sep 19, 2024 23:37:26.178328037 CEST	53	56888	1.1.1.1	192.168.2.6
Sep 19, 2024 23:37:26.178497076 CEST	53	64216	1.1.1.1	192.168.2.6
Sep 19, 2024 23:37:26.284713030 CEST	60206	53	192.168.2.6	1.1.1.1
Sep 19, 2024 23:37:26.284884930 CEST	49954	53	192.168.2.6	1.1.1.1
Sep 19, 2024 23:37:26.292131901 CEST	53	49954	1.1.1.1	192.168.2.6
Sep 19, 2024 23:37:26.315088987 CEST	53	60206	1.1.1.1	192.168.2.6
Sep 19, 2024 23:37:27.162935972 CEST	53	49233	1.1.1.1	192.168.2.6
Sep 19, 2024 23:37:27.177153111 CEST	49808	53	192.168.2.6	1.1.1.1
Sep 19, 2024 23:37:27.177629948 CEST	56685	53	192.168.2.6	1.1.1.1
Sep 19, 2024 23:37:27.183778048 CEST	53	49808	1.1.1.1	192.168.2.6
Sep 19, 2024 23:37:27.184263945 CEST	53	56685	1.1.1.1	192.168.2.6
Sep 19, 2024 23:37:28.735182047 CEST	53	55953	1.1.1.1	192.168.2.6
Sep 19, 2024 23:37:29.194000006 CEST	53	49372	1.1.1.1	192.168.2.6
Sep 19, 2024 23:37:37.308288097 CEST	53	58378	1.1.1.1	192.168.2.6
Sep 19, 2024 23:37:44.596931934 CEST	53	54438	162.159.36.2	192.168.2.6
Sep 19, 2024 23:37:45.239566088 CEST	54420	53	192.168.2.6	1.1.1.1
Sep 19, 2024 23:37:45.287954092 CEST	53	54420	1.1.1.1	192.168.2.6
Sep 19, 2024 23:37:53.764348984 CEST	56429	53	192.168.2.6	1.1.1.1
Sep 19, 2024 23:37:53.868947983 CEST	53	56429	1.1.1.1	192.168.2.6
Sep 19, 2024 23:38:22.590172052 CEST	61496	53	192.168.2.6	1.1.1.1
Sep 19, 2024 23:38:22.597724915 CEST	53	61496	1.1.1.1	192.168.2.6
Sep 19, 2024 23:38:44.561057091 CEST	53	54164	1.1.1.1	192.168.2.6

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 19, 2024 23:37:20.458775043 CEST	192.168.2.6	1.1.1.1	0x837	Standard query (0)	7448842.extforms.netsuite.com	A (IP address)	IN (0x0001)	false
Sep 19, 2024 23:37:20.458981991 CEST	192.168.2.6	1.1.1.1	0x6fce	Standard query (0)	7448842.extforms.netsuite.com	65	IN (0x0001)	false
Sep 19, 2024 23:37:22.529483080 CEST	192.168.2.6	1.1.1.1	0xaa2f	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 19, 2024 23:37:22.530056000 CEST	192.168.2.6	1.1.1.1	0x69f3	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 19, 2024 23:37:24.388974905 CEST	192.168.2.6	1.1.1.1	0xc42f	Standard query (0)	hostedpayments.merchante.com	A (IP address)	IN (0x0001)	false
Sep 19, 2024 23:37:24.390120983 CEST	192.168.2.6	1.1.1.1	0x5a61	Standard query (0)	hostedpayments.merchante.com	65	IN (0x0001)	false
Sep 19, 2024 23:37:26.170979977 CEST	192.168.2.6	1.1.1.1	0xa7fc	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 19, 2024 23:37:26.171560049 CEST	192.168.2.6	1.1.1.1	0xc8c6	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 19, 2024 23:37:26.284713030 CEST	192.168.2.6	1.1.1.1	0xa9f4	Standard query (0)	hostedpayments.merchante.com	A (IP address)	IN (0x0001)	false
Sep 19, 2024 23:37:26.284884930 CEST	192.168.2.6	1.1.1.1	0xe5ac	Standard query (0)	hostedpayments.merchante.com	65	IN (0x0001)	false
Sep 19, 2024 23:37:27.177153111 CEST	192.168.2.6	1.1.1.1	0xb254	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 19, 2024 23:37:27.177629948 CEST	192.168.2.6	1.1.1.1	0x2a8b	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 19, 2024 23:37:45.239566088 CEST	192.168.2.6	1.1.1.1	0xcb11	Standard query (0)	18.31.95.13.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 19, 2024 23:37:53.764348984 CEST	192.168.2.6	1.1.1.1	0xfb2e	Standard query (0)	hostedpayments.merchante.com	A (IP address)	IN (0x0001)	false
Sep 19, 2024 23:38:22.590172052 CEST	192.168.2.6	1.1.1.1	0xd984	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Sep 19, 2024 23:37:20.517328024 CEST	1.1.1.1	192.168.2.6	0x6fce	No error (0)	7448842.extforms.netsuite.com	extforms-cdn-future.na4.netsuite.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 19, 2024 23:37:20.517328024 CEST	1.1.1.1	192.168.2.6	0x6fce	No error (0)	extforms-cdn-future.na4.netsuite.com	extforms-future.netsuite.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 19, 2024 23:37:20.980113029 CEST	1.1.1.1	192.168.2.6	0x837	No error (0)	7448842.extforms.netsuite.com	extforms-cdn-future.na4.netsuite.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 19, 2024 23:37:20.980113029 CEST	1.1.1.1	192.168.2.6	0x837	No error (0)	extforms-cdn-future.na4.netsuite.com	extforms-future.netsuite.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 19, 2024 23:37:22.536801100 CEST	1.1.1.1	192.168.2.6	0xaa2f	No error (0)	www.google.com		142.250.186.132	A (IP address)	IN (0x0001)	false
Sep 19, 2024 23:37:22.536859989 CEST	1.1.1.1	192.168.2.6	0x69f3	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 19, 2024 23:37:24.441760063 CEST	1.1.1.1	192.168.2.6	0xc42f	No error (0)	hostedpayments.merchante.com		199.255.242.14	A (IP address)	IN (0x0001)	false
Sep 19, 2024 23:37:24.441760063 CEST	1.1.1.1	192.168.2.6	0xc42f	No error (0)	hostedpayments.merchante.com		199.255.242.13	A (IP address)	IN (0x0001)	false
Sep 19, 2024 23:37:24.441760063 CEST	1.1.1.1	192.168.2.6	0xc42f	No error (0)	hostedpayments.merchante.com		199.255.242.12	A (IP address)	IN (0x0001)	false
Sep 19, 2024 23:37:26.178328037 CEST	1.1.1.1	192.168.2.6	0xa7fc	No error (0)	www.google.com		142.250.184.228	A (IP address)	IN (0x0001)	false
Sep 19, 2024 23:37:26.178497076 CEST	1.1.1.1	192.168.2.6	0xc8c6	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 19, 2024 23:37:26.315088987 CEST	1.1.1.1	192.168.2.6	0xa9f4	No error (0)	hostedpayments.merchante.com		199.255.242.12	A (IP address)	IN (0x0001)	false
Sep 19, 2024 23:37:26.315088987 CEST	1.1.1.1	192.168.2.6	0xa9f4	No error (0)	hostedpayments.merchante.com		199.255.242.13	A (IP address)	IN (0x0001)	false
Sep 19, 2024 23:37:26.315088987 CEST	1.1.1.1	192.168.2.6	0xa9f4	No error (0)	hostedpayments.merchante.com		199.255.242.14	A (IP address)	IN (0x0001)	false
Sep 19, 2024 23:37:27.183778048 CEST	1.1.1.1	192.168.2.6	0xb254	No error (0)	www.google.com		142.250.74.196	A (IP address)	IN (0x0001)	false
Sep 19, 2024 23:37:27.184263945 CEST	1.1.1.1	192.168.2.6	0x2a8b	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 19, 2024 23:37:30.971085072 CEST	1.1.1.1	192.168.2.6	0x56a1	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 19, 2024 23:37:30.971085072 CEST	1.1.1.1	192.168.2.6	0x56a1	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 19, 2024 23:37:45.287954092 CEST	1.1.1.1	192.168.2.6	0xcb11	Name error (3)	18.31.95.13.in-addr.arpa	none	none	PTR (Pointer record)	IN (0x0001)	false
Sep 19, 2024 23:37:53.868947983 CEST	1.1.1.1	192.168.2.6	0xfb2e	No error (0)	hostedpayments.merchante.com		199.255.242.14	A (IP address)	IN (0x0001)	false
Sep 19, 2024 23:37:53.868947983 CEST	1.1.1.1	192.168.2.6	0xfb2e	No error (0)	hostedpayments.merchante.com		199.255.242.12	A (IP address)	IN (0x0001)	false
Sep 19, 2024 23:37:53.868947983 CEST	1.1.1.1	192.168.2.6	0xfb2e	No error (0)	hostedpayments.merchante.com		199.255.242.13	A (IP address)	IN (0x0001)	false
Sep 19, 2024 23:38:22.597724915 CEST	1.1.1.1	192.168.2.6	0xd984	No error (0)	www.google.com		142.250.185.100	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

https:

hostedpayments.merchante.com

www.google.com

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.6	49710	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-09-19 21:37:17 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 32 68 61 47 34 35 51 71 6b 30 43 56 41 65 6a 4c 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 66 37 39 63 66 37 61 34 31 64 31 37 30 34 61 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: 2haG45Qqk0CVAejL.1Context: ff79cf7a41d1704a
2024-09-19 21:37:17 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-19 21:37:17 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 32 68 61 47 34 35 51 71 6b 30 43 56 41 65 6a 4c 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 66 37 39 63 66 37 61 34 31 64 31 37 30 34 61 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 55 30 77 30 6c 36 66 59 30 47 49 30 2b 74 6e 72 65 31 54 64 2f 35 36 44 6e 62 2b 43 68 59 7a 35 2f 74 52 50 73 6d 2b 79 48 4a 66 33 69 54 43 33 63 46 45 6f 49 47 41 56 31 78 46 30 34 49 55 65 4b 6f 65 4c 6b 49 35 62 57 4b 4b 69 61 6a 2b 4c 33 50 4d 65 75 2b 70 4c 4c 42 79 72 42 71 70 34 58 4f 76 47 38 48 30 6a 6b 6c 76 4d 53 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: 2haG45Qqk0CVAejL.2Context: ff79cf7a41d1704a<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAU0w0l6fY0GI0+tnre1Td/56Dnb+ChYz5/tRPsm+yHJf3iTC3cFEoIGAV1xF04IUeKoeLkI5bWKKiaj+L3PMeu+pLLByrBqp4XOvG8H0jklvMS
2024-09-19 21:37:17 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 32 68 61 47 34 35 51 71 6b 30 43 56 41 65 6a 4c 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 66 37 39 63 66 37 61 34 31 64 31 37 30 34 61 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: 2haG45Qqk0CVAejL.3Context: ff79cf7a41d1704a<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-09-19 21:37:18 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-19 21:37:18 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 67 6b 6c 4c 51 2f 43 57 44 55 6d 76 67 53 37 48 56 30 42 44 4b 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: gklLQ/CWDUmvgS7HV0BDKg.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49721	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-19 21:37:24 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-19 21:37:24 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=155341 Date: Thu, 19 Sep 2024 21:37:24 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49722	199.255.242.14	443	5228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 21:37:25 UTC	871	OUT	POST /hpp/checkout/sign-in HTTP/1.1 Host: hostedpayments.merchante.com Connection: keep-alive Content-Length: 2461 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://7448842.extforms.netsuite.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://7448842.extforms.netsuite.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-19 21:37:25 UTC	2461	OUT	Data Raw: 70 72 6f 66 69 6c 65 5f 69 64 3d 39 34 31 30 30 30 31 33 37 32 30 35 30 30 30 30 30 30 30 31 26 70 61 79 6d 65 6e 74 5f 61 6d 6f 75 6e 74 3d 33 37 38 2e 36 36 26 72 65 71 75 65 73 74 65 72 5f 61 70 70 6e 61 6d 65 3d 4e 53 26 69 6e 76 6f 69 63 65 5f 6e 75 6d 62 65 72 3d 49 4e 56 33 39 38 33 30 37 33 70 6d 74 30 26 69 6e 76 6f 69 63 65 5f 73 74 61 74 75 73 3d 4f 50 45 4e 26 63 6c 69 65 6e 74 5f 72 65 66 65 72 65 6e 63 65 5f 6e 75 6d 62 65 72 3d 49 4e 56 33 39 38 33 30 37 33 26 63 75 73 74 6f 6d 5f 61 6d 6f 75 6e 74 5f 69 6e 64 3d 59 26 72 65 63 75 72 5f 63 6f 6e 74 72 6f 6c 5f 69 6e 64 3d 4e 26 63 6c 69 65 6e 74 5f 61 70 70 5f 72 65 73 70 6f 6e 73 65 5f 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 37 34 34 38 38 34 32 2e 65 78 74 66 6f 72 6d 73 2e Data Ascii: profile_id=94100013720500000001&payment_amount=378.66&requester_appname=NS&invoice_number=INV3983073pmt0&invoice_status=OPEN&client_reference_number=INV3983073&custom_amount_ind=Y&recur_control_ind=N&client_app_response_url=https%3A%2F%2F7448842.extforms.
2024-09-19 21:37:25 UTC	713	IN	HTTP/1.1 200 OK Date: Thu, 19 Sep 2024 21:37:25 GMT Content-Type: text/html;charset=utf-8 Transfer-Encoding: chunked Connection: close Server: nginx Vary: Accept-Encoding set-cookie: profile_id_cookie=94100013720500000001 cache-control: no-cache, no-store pragma: no-cache expires: Thu, 01 Jan 1970 00:00:00 GMT x-content-type-options: nosniff x-xss-protection: 1; mode=block strict-transport-security: max-age=31536000 ; includeSubDomains set-cookie: SESSION=MDVmYjk5NjgtYzQxMi00Yzg5LThlMzctZmI0ODdiNGQwZGQx; Path=/hpp/; Secure; HttpOnly; SameSite=Lax x-envoy-upstream-service-time: 263 Strict-Transport-Security: max-age=31536000 X-Frame-Options: sameorigin X-Content-Type-Options: nosniff
2024-09-19 21:37:25 UTC	15671	IN	Data Raw: 34 62 36 32 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 3c 62 61 73 65 20 68 72 65 66 3d 22 2e 2f 2e 2e 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 3c 73 74 79 Data Ascii: 4b62<!doctype html><html lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><base href="./.."><meta name="viewport" content="width=device-width, initial-scale=1.0"><sty
2024-09-19 21:37:25 UTC	3635	IN	Data Raw: 3a 31 31 2c 22 69 6e 64 65 78 22 3a 30 2c 22 61 64 64 22 3a 5b 22 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 2d 6e 6f 6e 65 22 2c 22 6d 65 72 63 68 61 6e 74 2d 74 68 65 6d 65 22 5d 7d 2c 7b 22 6e 6f 64 65 22 3a 32 35 2c 22 74 79 70 65 22 3a 22 70 75 74 22 2c 22 6b 65 79 22 3a 22 72 6f 75 74 65 72 2d 6c 69 6e 6b 22 2c 22 66 65 61 74 22 3a 33 2c 22 76 61 6c 75 65 22 3a 22 22 7d 2c 7b 22 6e 6f 64 65 22 3a 32 35 2c 22 74 79 70 65 22 3a 22 70 75 74 22 2c 22 6b 65 79 22 3a 22 68 72 65 66 22 2c 22 66 65 61 74 22 3a 33 2c 22 76 61 6c 75 65 22 3a 22 63 68 65 63 6b 6f 75 74 2f 72 65 73 65 74 70 61 73 73 77 6f 72 64 2f 76 65 72 69 66 79 2d 65 6d 61 69 6c 22 7d 2c 7b 22 6e 6f 64 65 22 3a 32 36 2c 22 74 79 70 65 22 3a 22 61 74 74 61 63 68 22 7d 2c 7b 22 6e 6f 64 65 Data Ascii: :11,"index":0,"add":["text-decoration-none","merchant-theme"]},{"node":25,"type":"put","key":"router-link","feat":3,"value":""},{"node":25,"type":"put","key":"href","feat":3,"value":"checkout/resetpassword/verify-email"},{"node":26,"type":"attach"},{"node
2024-09-19 21:37:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49724	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-19 21:37:25 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-19 21:37:26 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=155343 Date: Thu, 19 Sep 2024 21:37:26 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-19 21:37:26 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49723	199.255.242.14	443	5228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 21:37:25 UTC	683	OUT	GET /hpp/VAADIN/build/webcomponentsjs/webcomponents-loader.js HTTP/1.1 Host: hostedpayments.merchante.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hostedpayments.merchante.com/hpp/checkout/sign-in Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSION=MDVmYjk5NjgtYzQxMi00Yzg5LThlMzctZmI0ODdiNGQwZGQx
2024-09-19 21:37:26 UTC	521	IN	HTTP/1.1 200 OK Date: Thu, 19 Sep 2024 21:37:26 GMT Content-Type: application/javascript Content-Length: 7773 Connection: close Server: nginx Vary: Accept-Encoding cache-control: max-age=3600 last-modified: Thu, 01 Jan 1970 00:00:01 GMT x-content-type-options: nosniff x-xss-protection: 1; mode=block strict-transport-security: max-age=31536000 ; includeSubDomains x-envoy-upstream-service-time: 50 Strict-Transport-Security: max-age=31536000 X-Frame-Options: sameorigin X-Content-Type-Options: nosniff
2024-09-19 21:37:26 UTC	7773	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 40 6c 69 63 65 6e 73 65 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 38 20 54 68 65 20 50 6f 6c 79 6d 65 72 20 50 72 6f 6a 65 63 74 20 41 75 74 68 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 54 68 69 73 20 63 6f 64 65 20 6d 61 79 20 6f 6e 6c 79 20 62 65 20 75 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 42 53 44 20 73 74 79 6c 65 20 6c 69 63 65 6e 73 65 20 66 6f 75 6e 64 20 61 74 20 68 74 74 70 3a 2f 2f 70 6f 6c 79 6d 65 72 2e 67 69 74 68 75 62 2e 69 6f 2f 4c 49 43 45 4e 53 45 2e 74 78 74 0a 20 2a 20 54 68 65 20 63 6f 6d 70 6c 65 74 65 20 73 65 74 20 6f 66 20 61 75 74 68 6f 72 73 20 6d 61 79 20 62 65 20 66 6f 75 6e 64 20 61 74 20 68 74 74 70 3a 2f 2f 70 6f 6c 79 6d 65 72 2e 67 Data Ascii: /** * @license * Copyright (c) 2018 The Polymer Project Authors. All rights reserved. * This code may only be used under the BSD style license found at http://polymer.github.io/LICENSE.txt * The complete set of authors may be found at http://polymer.g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49725	199.255.242.14	443	5228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 21:37:26 UTC	730	OUT	GET /hpp/VAADIN/build/vaadin-bundle-9936da12bdae75e3b436.cache.js HTTP/1.1 Host: hostedpayments.merchante.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://hostedpayments.merchante.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://hostedpayments.merchante.com/hpp/checkout/sign-in Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSION=MDVmYjk5NjgtYzQxMi00Yzg5LThlMzctZmI0ODdiNGQwZGQx
2024-09-19 21:37:26 UTC	528	IN	HTTP/1.1 200 OK Date: Thu, 19 Sep 2024 21:37:26 GMT Content-Type: application/javascript Content-Length: 1139982 Connection: close Server: nginx Vary: Accept-Encoding cache-control: max-age=31536000 last-modified: Thu, 01 Jan 1970 00:00:01 GMT x-content-type-options: nosniff x-xss-protection: 1; mode=block strict-transport-security: max-age=31536000 ; includeSubDomains x-envoy-upstream-service-time: 51 Strict-Transport-Security: max-age=31536000 X-Frame-Options: sameorigin X-Content-Type-Options: nosniff
2024-09-19 21:37:26 UTC	15856	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 69 29 7b 69 66 28 65 5b 69 5d 29 72 65 74 75 72 6e 20 65 5b 69 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 61 3d 65 5b 69 5d 3d 7b 69 3a 69 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 69 5d 2e 63 61 6c 6c 28 61 2e 65 78 70 6f 72 74 73 2c 61 2c 61 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 61 2e 6c 3d 21 30 2c 61 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 74 2c 6e 2e 63 3d 65 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 6e 2e 6f 28 74 2c 65 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 69 7d 29 7d 2c 6e 2e 72 3d 66 75 6e Data Ascii: !function(t){var e={};function n(i){if(e[i])return e[i].exports;var a=e[i]={i:i,l:!1,exports:{}};return t[i].call(a.exports,a,a.exports,n),a.l=!0,a.exports}n.m=t,n.c=e,n.d=function(t,e,i){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:i})},n.r=fun
2024-09-19 21:37:26 UTC	16379	IN	Data Raw: 6e 20 20 20 20 7d 5c 6e 5c 6e 20 20 20 20 2e 63 6f 6c 2d 35 5c 5c 40 6d 64 20 7b 5c 6e 20 20 20 20 20 20 20 20 66 6c 65 78 2d 62 61 73 69 73 3a 20 63 61 6c 63 28 34 31 2e 36 36 25 20 2d 20 30 2e 30 31 70 78 20 2d 20 76 61 72 28 2d 2d 67 72 69 64 2d 67 61 70 2c 20 31 65 6d 29 29 3b 5c 6e 20 20 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 63 61 6c 63 28 34 31 2e 36 36 25 20 2d 20 30 2e 30 31 70 78 20 2d 20 76 61 72 28 2d 2d 67 72 69 64 2d 67 61 70 2c 20 31 65 6d 29 29 3b 5c 6e 20 20 20 20 7d 5c 6e 5c 6e 20 20 20 20 2e 63 6f 6c 2d 36 5c 5c 40 6d 64 20 7b 5c 6e 20 20 20 20 20 20 20 20 66 6c 65 78 2d 62 61 73 69 73 3a 20 63 61 6c 63 28 35 30 25 20 2d 20 30 2e 30 31 70 78 20 2d 20 76 61 72 28 2d 2d 67 72 69 64 2d 67 61 70 2c 20 31 65 6d 29 29 3b 5c 6e 20 Data Ascii: n }\n\n .col-5\\@md {\n flex-basis: calc(41.66% - 0.01px - var(--grid-gap, 1em));\n max-width: calc(41.66% - 0.01px - var(--grid-gap, 1em));\n }\n\n .col-6\\@md {\n flex-basis: calc(50% - 0.01px - var(--grid-gap, 1em));\n
2024-09-19 21:37:26 UTC	16384	IN	Data Raw: 39 37 63 29 3b 5c 6e 7d 5c 6e 5c 6e 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 20 7b 5c 6e 20 20 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 63 6f 6e 74 72 61 73 74 2d 6d 65 64 69 75 6d 2c 20 23 37 39 37 39 37 63 29 3b 5c 6e 7d 5c 6e 5c 6e 2e 66 6f 72 6d 2d 6c 65 67 65 6e 64 20 7b 5c 6e 20 20 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 63 6f 6e 74 72 61 73 74 2d 68 69 67 68 65 72 2c 20 23 31 63 31 63 32 31 29 3b 5c 6e 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 32 3b 5c 6e 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 76 61 72 28 2d 2d 74 65 78 74 2d 6d 64 2c 20 31 2e 32 65 6d 29 3b 5c 6e 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 76 61 72 28 2d Data Ascii: 97c);\n}\n\n.form-control:-moz-placeholder {\n color: var(--color-contrast-medium, #79797c);\n}\n\n.form-legend {\n color: var(--color-contrast-higher, #1c1c21);\n line-height: 1.2;\n font-size: var(--text-md, 1.2em);\n margin-bottom: var(-
2024-09-19 21:37:26 UTC	16384	IN	Data Raw: 5c 6e 20 20 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 76 61 72 28 2d 2d 73 70 61 63 65 2d 6d 64 29 3b 5c 6e 7d 5c 6e 5c 6e 2e 70 61 64 64 69 6e 67 2d 79 2d 6c 67 20 7b 5c 6e 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 76 61 72 28 2d 2d 73 70 61 63 65 2d 6c 67 29 3b 5c 6e 20 20 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 76 61 72 28 2d 2d 73 70 61 63 65 2d 6c 67 29 3b 5c 6e 7d 5c 6e 5c 6e 2e 70 61 64 64 69 6e 67 2d 79 2d 78 6c 20 7b 5c 6e 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 76 61 72 28 2d 2d 73 70 61 63 65 2d 78 6c 29 3b 5c 6e 20 20 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 76 61 72 28 2d 2d 73 70 61 63 65 2d 78 6c 29 3b 5c 6e 7d 5c 6e 5c 6e 2e 70 61 64 64 69 6e 67 2d 79 2d 78 78 6c 20 7b 5c 6e 20 20 Data Ascii: \n padding-bottom: var(--space-md);\n}\n\n.padding-y-lg {\n padding-top: var(--space-lg);\n padding-bottom: var(--space-lg);\n}\n\n.padding-y-xl {\n padding-top: var(--space-xl);\n padding-bottom: var(--space-xl);\n}\n\n.padding-y-xxl {\n
2024-09-19 21:37:26 UTC	16384	IN	Data Raw: 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 5c 6e 20 20 20 20 7d 5c 6e 5c 6e 20 20 20 20 2e 66 6c 65 78 2d 67 72 6f 77 2d 30 5c 5c 40 78 73 20 7b 5c 6e 20 20 20 20 20 20 20 20 66 6c 65 78 2d 67 72 6f 77 3a 20 30 3b 5c 6e 20 20 20 20 7d 5c 6e 5c 6e 20 20 20 20 2e 66 6c 65 78 2d 73 68 72 69 6e 6b 5c 5c 40 78 73 20 7b 5c 6e 20 20 20 20 20 20 20 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 20 31 3b 5c 6e 20 20 20 20 7d 5c 6e 5c 6e 20 20 20 20 2e 6a 75 73 74 69 66 79 2d 73 74 61 72 74 5c 5c 40 78 73 20 7b 5c 6e 20 20 20 20 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 66 6c 65 78 2d 73 74 61 72 74 3b 5c 6e 20 20 20 20 7d 5c 6e 5c 6e 20 20 20 20 2e 6a 75 73 74 69 66 79 2d 65 6e 64 5c 5c 40 78 73 20 7b 5c 6e 20 20 20 20 20 20 20 20 6a Data Ascii: align-items: center;\n }\n\n .flex-grow-0\\@xs {\n flex-grow: 0;\n }\n\n .flex-shrink\\@xs {\n flex-shrink: 1;\n }\n\n .justify-start\\@xs {\n justify-content: flex-start;\n }\n\n .justify-end\\@xs {\n j
2024-09-19 21:37:26 UTC	16384	IN	Data Raw: 2e 63 6f 6e 74 65 6e 74 2d 63 61 72 64 20 7b 5c 6e 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 62 67 29 3b 5c 6e 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 76 61 72 28 2d 2d 72 61 64 69 75 73 2d 6d 64 29 3b 5c 6e 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 76 61 72 28 2d 2d 73 68 61 64 6f 77 2d 73 6d 29 3b 5c 6e 20 20 20 20 6d 61 72 67 69 6e 3a 20 76 61 72 28 2d 2d 73 70 61 63 65 2d 78 6c 29 20 76 61 72 28 2d 2d 73 70 61 63 65 2d 78 78 78 78 6c 29 3b 5c 6e 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 5c 6e 20 20 20 20 6d 69 6e 2d 68 65 69 67 68 74 3a 20 37 36 38 70 78 3b 5c 6e 7d 5c 6e 5c 6e 40 6d 65 64 69 61 20 73 63 72 65 65 6e 5c 6e 61 6e 64 20 28 6d 69 Data Ascii: .content-card {\n background-color: var(--color-bg);\n border-radius: var(--radius-md);\n box-shadow: var(--shadow-sm);\n margin: var(--space-xl) var(--space-xxxxl);\n text-align: center;\n min-height: 768px;\n}\n\n@media screen\nand (mi
2024-09-19 21:37:27 UTC	16384	IN	Data Raw: 6e 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 2f 2a 20 74 6f 70 2c 20 74 72 61 6e 73 70 61 72 65 6e 74 20 72 65 64 2c 20 66 61 6b 65 64 20 77 69 74 68 20 67 72 61 64 69 65 6e 74 20 2a 2f 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 28 2d 2d 6d 65 72 63 68 61 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 29 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 28 2d 2d 6d 65 72 63 68 61 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 29 5c 6e 20 20 20 20 29 2c 5c 6e 20 20 20 20 20 20 20 20 2f 2a 20 62 6f 74 74 6f 6d 2c 20 69 6d 61 67 65 20 2a 2f 20 75 72 6c 28 69 6d 61 67 65 73 2f 62 61 63 6b 67 72 6f 75 6e 64 2f 66 6c 75 62 62 65 72 2e 70 6e 67 29 3b 5c 6e 7d 5c 6e 5c 6e 76 Data Ascii: n background: /* top, transparent red, faked with gradient / linear-gradient(\n var(--merchant-background-color),\n var(--merchant-background-color)\n ),\n / bottom, image */ url(images/background/flubber.png);\n}\n\nv
2024-09-19 21:37:27 UTC	16384	IN	Data Raw: 62 6c 65 5f 5f 6d 65 6e 75 2d 62 74 6e 20 7b 5c 6e 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 5c 6e 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 5c 6e 20 20 20 20 77 69 64 74 68 3a 20 32 65 6d 3b 5c 6e 20 20 20 20 68 65 69 67 68 74 3a 20 32 65 6d 3b 5c 6e 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 25 3b 5c 6e 7d 5c 6e 5c 6e 5c 6e 2f 2a 20 4d 6f 64 61 6c 20 43 6f 6e 74 65 6e 74 20 2a 2f 5c 6e 2e 6d 6f 64 61 6c 2d 63 6f 6e 74 65 6e 74 20 7b 5c 6e 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 5c 6e 20 20 20 20 6d 61 72 67 69 6e 3a 20 61 75 74 6f 3b 5c 6e 20 20 20 20 70 61 64 64 69 6e 67 3a 20 32 30 70 78 3b 5c 6e 20 20 20 20 62 Data Ascii: ble__menu-btn {\n align-items: center;\n justify-content: center;\n width: 2em;\n height: 2em;\n border-radius: 50%;\n}\n\n\n/* Modal Content */\n.modal-content {\n background-color: #ffffff;\n margin: auto;\n padding: 20px;\n b
2024-09-19 21:37:27 UTC	16384	IN	Data Raw: 74 2b 22 2e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 56 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 65 2b 6e 2e 73 6c 69 63 65 28 74 2e 6c 65 6e 67 74 68 29 7d 66 75 6e 63 74 69 6f 6e 20 71 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 3d 3d 3d 65 7c 7c 24 28 74 2c 65 29 7c 7c 48 28 74 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 74 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 29 29 7b 6c 65 74 20 65 3d 5b 5d 3b 66 6f 72 28 6c 65 74 20 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 6c 65 74 20 69 3d 74 5b 6e 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 6c 65 74 20 74 3d 30 3b 74 3c 69 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 65 2e 70 75 73 68 28 69 5b 74 5d 29 7d 72 65 74 75 72 6e 20 65 2e 6a 6f 69 6e Data Ascii: t+".")}function V(t,e,n){return e+n.slice(t.length)}function q(t,e){return t===e\|\|$(t,e)\|\|H(t,e)}function j(t){if(Array.isArray(t)){let e=[];for(let n=0;n<t.length;n++){let i=t[n].toString().split(".");for(let t=0;t<i.length;t++)e.push(i[t])}return e.join
2024-09-19 21:37:27 UTC	16384	IN	Data Raw: 29 7d 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 46 74 28 74 2c 65 2c 6e 2c 69 2c 61 2c 6f 29 7b 6f 3d 65 2e 73 74 61 74 69 63 7c 7c 6f 26 26 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 6f 7c 7c 6f 5b 65 2e 6d 65 74 68 6f 64 4e 61 6d 65 5d 29 3b 6c 65 74 20 73 3d 7b 6d 65 74 68 6f 64 4e 61 6d 65 3a 65 2e 6d 65 74 68 6f 64 4e 61 6d 65 2c 61 72 67 73 3a 65 2e 61 72 67 73 2c 6d 65 74 68 6f 64 49 6e 66 6f 3a 61 2c 64 79 6e 61 6d 69 63 46 6e 3a 6f 7d 3b 66 6f 72 28 6c 65 74 20 61 2c 6f 3d 30 3b 6f 3c 65 2e 61 72 67 73 2e 6c 65 6e 67 74 68 26 26 28 61 3d 65 2e 61 72 67 73 5b 6f 5d 29 3b 6f 2b 2b 29 61 2e 6c 69 74 65 72 61 6c 7c 7c 74 2e 5f 61 64 64 50 72 6f 70 65 72 74 79 45 66 66 65 63 74 28 61 2e 72 6f 6f 74 50 72 6f 70 65 72 74 79 2c 6e 2c 7b 66 6e 3a Data Ascii: )}))}}function Ft(t,e,n,i,a,o){o=e.static\|\|o&&("object"!=typeof o\|\|o[e.methodName]);let s={methodName:e.methodName,args:e.args,methodInfo:a,dynamicFn:o};for(let a,o=0;o<e.args.length&&(a=e.args[o]);o++)a.literal\|\|t._addPropertyEffect(a.rootProperty,n,{fn:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49727	142.250.184.228	443	5228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 21:37:26 UTC	619	OUT	GET /recaptcha/api.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hostedpayments.merchante.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-19 21:37:27 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Thu, 19 Sep 2024 21:37:27 GMT Date: Thu, 19 Sep 2024 21:37:27 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-19 21:37:27 UTC	641	IN	Data Raw: 35 39 61 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 59a/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-09-19 21:37:27 UTC	800	IN	Data Raw: 41 41 43 51 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 64 76 62 32 64 73 5a 53 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 7a 49 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 33 4e 44 49 7a 4e 44 49 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 6c 75 49 6a 70 30 63 6e 56 6c 4c 43 4a 70 63 31 52 6f 61 58 4a 6b 55 47 46 79 64 48 6b 69 4f 6e 52 79 64 57 56 39 27 3b 69 66 28 76 26 26 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 6f 6e 4c 61 62 65 6c 29 7b 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 6f 6e 4c 61 62 65 6c 2e Data Ascii: AACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.
2024-09-19 21:37:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49726	199.255.242.14	443	5228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 21:37:26 UTC	700	OUT	GET /hpp/VAADIN/static/client/client-4AE3B7490A0EC7EE13B41C91E0150FBA.cache.js HTTP/1.1 Host: hostedpayments.merchante.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hostedpayments.merchante.com/hpp/checkout/sign-in Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSION=MDVmYjk5NjgtYzQxMi00Yzg5LThlMzctZmI0ODdiNGQwZGQx
2024-09-19 21:37:27 UTC	527	IN	HTTP/1.1 200 OK Date: Thu, 19 Sep 2024 21:37:26 GMT Content-Type: application/javascript Content-Length: 145884 Connection: close Server: nginx Vary: Accept-Encoding cache-control: max-age=31536000 last-modified: Fri, 15 May 2020 15:07:26 GMT x-content-type-options: nosniff x-xss-protection: 1; mode=block strict-transport-security: max-age=31536000 ; includeSubDomains x-envoy-upstream-service-time: 45 Strict-Transport-Security: max-age=31536000 X-Frame-Options: sameorigin X-Content-Type-Options: nosniff
2024-09-19 21:37:27 UTC	15857	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 63 6c 69 65 6e 74 28 29 7b 76 61 72 20 4a 62 3d 27 27 2c 4b 62 3d 30 2c 4c 62 3d 27 67 77 74 2e 63 6f 64 65 73 76 72 3d 27 2c 4d 62 3d 27 67 77 74 2e 68 6f 73 74 65 64 3d 27 2c 4e 62 3d 27 67 77 74 2e 68 79 62 72 69 64 27 2c 4f 62 3d 27 63 6c 69 65 6e 74 27 2c 50 62 3d 27 23 27 2c 51 62 3d 27 3f 27 2c 52 62 3d 27 2f 27 2c 53 62 3d 31 2c 54 62 3d 27 69 6d 67 27 2c 55 62 3d 27 63 6c 65 61 72 2e 63 61 63 68 65 2e 67 69 66 27 2c 56 62 3d 27 62 61 73 65 55 72 6c 27 2c 57 62 3d 27 73 63 72 69 70 74 27 2c 58 62 3d 27 63 6c 69 65 6e 74 2e 6e 6f 63 61 63 68 65 2e 6a 73 27 2c 59 62 3d 27 62 61 73 65 27 2c 5a 62 3d 27 2f 2f 27 2c 24 62 3d 27 6d 65 74 61 27 2c 5f 62 3d 27 6e 61 6d 65 27 2c 61 63 3d 27 67 77 74 3a 70 72 6f 70 65 72 74 79 27 Data Ascii: function client(){var Jb='',Kb=0,Lb='gwt.codesvr=',Mb='gwt.hosted=',Nb='gwt.hybrid',Ob='client',Pb='#',Qb='?',Rb='/',Sb=1,Tb='img',Ub='clear.cache.gif',Vb='baseUrl',Wb='script',Xb='client.nocache.js',Yb='base',Zb='//',$b='meta',_b='name',ac='gwt:property'
2024-09-19 21:37:27 UTC	16379	IN	Data Raw: 64 29 7b 72 65 74 75 72 6e 20 73 43 28 61 2c 62 2c 63 2c 64 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 66 6b 28 61 2c 62 2c 63 29 7b 57 6a 28 29 3b 72 65 74 75 72 6e 20 61 2e 73 65 74 28 63 2c 62 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 4b 43 28 64 2c 61 2c 62 2c 63 29 7b 64 2e 70 75 73 68 53 74 61 74 65 28 61 2c 62 2c 63 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 5a 45 28 62 2c 63 2c 64 29 7b 74 72 79 7b 62 5b 63 5d 3d 64 7d 63 61 74 63 68 28 61 29 7b 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 52 7a 28 61 29 7b 76 61 72 20 62 3b 62 3d 64 42 3b 21 21 62 26 26 53 41 28 62 2c 61 2e 62 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 52 28 61 2c 62 29 7b 61 2e 65 3d 62 3b 62 21 3d 6e 75 6c 6c 26 26 5a 45 28 62 2c 70 46 2c 61 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 68 75 28 61 2c 62 29 7b 73 43 28 62 Data Ascii: d){return sC(a,b,c,d)}function fk(a,b,c){Wj();return a.set(c,b)}function KC(d,a,b,c){d.pushState(a,b,c)}function ZE(b,c,d){try{b[c]=d}catch(a){}}function Rz(a){var b;b=dB;!!b&&SA(b,a.b)}function R(a,b){a.e=b;b!=null&&ZE(b,pF,a)}function hu(a,b){sC(b
2024-09-19 21:37:27 UTC	16384	IN	Data Raw: 65 7d 63 61 74 63 68 28 61 29 7b 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 77 75 28 61 29 7b 76 61 72 20 62 3b 62 3d 24 77 6e 64 2e 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 3b 76 75 28 61 2c 6c 69 28 4a 75 2e 70 72 6f 74 6f 74 79 70 65 2e 59 2c 4a 75 2c 5b 61 2c 62 5d 29 29 3b 72 65 74 75 72 6e 20 62 7d 0a 66 75 6e 63 74 69 6f 6e 20 24 75 28 61 29 7b 61 2e 61 2e 66 6f 72 45 61 63 68 28 6c 69 28 6b 76 2e 70 72 6f 74 6f 74 79 70 65 2e 59 2c 6b 76 2c 5b 61 5d 29 29 3b 76 75 28 61 2e 64 2c 6c 69 28 6d 76 2e 70 72 6f 74 6f 74 79 70 65 2e 59 2c 6d 76 2c 5b 5d 29 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 67 69 28 61 2c 62 29 7b 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3d 3d 3d 69 46 26 26 74 79 70 65 6f 66 20 77 69 6e 64 6f Data Ascii: e}catch(a){return false}}function wu(a){var b;b=$wnd.Object.create(null);vu(a,li(Ju.prototype.Y,Ju,[a,b]));return b}function $u(a){a.a.forEach(li(kv.prototype.Y,kv,[a]));vu(a.d,li(mv.prototype.Y,mv,[]))}function gi(a,b){typeof window===iF&&typeof windo
2024-09-19 21:37:27 UTC	16384	IN	Data Raw: 2c 62 29 7d 72 65 74 75 72 6e 20 62 7d 0a 66 75 6e 63 74 69 6f 6e 20 72 63 28 61 2c 62 29 7b 69 66 28 48 63 28 61 29 29 7b 72 65 74 75 72 6e 20 21 21 71 63 5b 62 5d 7d 65 6c 73 65 20 69 66 28 61 2e 24 62 29 7b 72 65 74 75 72 6e 20 21 21 61 2e 24 62 5b 62 5d 7d 65 6c 73 65 20 69 66 28 45 63 28 61 29 29 7b 72 65 74 75 72 6e 20 21 21 70 63 5b 62 5d 7d 65 6c 73 65 20 69 66 28 44 63 28 61 29 29 7b 72 65 74 75 72 6e 20 21 21 6f 63 5b 62 5d 7d 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 0a 66 75 6e 63 74 69 6f 6e 20 4a 6a 28 29 7b 69 66 28 24 77 6e 64 2e 56 61 61 64 69 6e 2e 46 6c 6f 77 2e 67 65 74 53 63 72 6f 6c 6c 50 6f 73 69 74 69 6f 6e 29 7b 72 65 74 75 72 6e 20 24 77 6e 64 2e 56 61 61 64 69 6e 2e 46 6c 6f 77 2e 67 65 74 53 63 72 6f 6c 6c 50 6f 73 69 74 69 6f 6e Data Ascii: ,b)}return b}function rc(a,b){if(Hc(a)){return !!qc[b]}else if(a.$b){return !!a.$b[b]}else if(Ec(a)){return !!pc[b]}else if(Dc(a)){return !!oc[b]}return false}function Jj(){if($wnd.Vaadin.Flow.getScrollPosition){return $wnd.Vaadin.Flow.getScrollPosition
2024-09-19 21:37:27 UTC	16384	IN	Data Raw: 66 29 3b 64 5b 47 46 5d 3d 78 63 28 62 2e 67 29 3b 4c 43 28 24 77 6e 64 2e 68 69 73 74 6f 72 79 2c 65 2c 27 27 2c 24 77 6e 64 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 3b 74 72 79 7b 4f 43 28 24 77 6e 64 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2c 48 46 2b 62 2e 62 2c 56 43 28 64 29 29 7d 63 61 74 63 68 28 61 29 7b 61 3d 61 69 28 61 29 3b 69 66 28 43 63 28 61 2c 32 34 29 29 7b 63 3d 61 3b 68 6a 28 49 46 2b 63 2e 77 28 29 29 7d 65 6c 73 65 20 74 68 72 6f 77 20 62 69 28 61 29 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 48 76 28 61 2c 62 2c 63 29 7b 44 76 28 29 3b 76 61 72 20 64 2c 65 2c 66 3b 65 3d 79 63 28 43 76 2e 67 65 74 28 61 29 2c 24 77 6e 64 2e 4d 61 70 29 3b 69 66 28 65 3d 3d 6e 75 6c 6c 29 7b 65 3d 6e 65 77 20 24 77 6e 64 2e 4d 61 70 3b 43 76 2e 73 Data Ascii: f);d[GF]=xc(b.g);LC($wnd.history,e,'',$wnd.location.href);try{OC($wnd.sessionStorage,HF+b.b,VC(d))}catch(a){a=ai(a);if(Cc(a,24)){c=a;hj(IF+c.w())}else throw bi(a)}}function Hv(a,b,c){Dv();var d,e,f;e=yc(Cv.get(a),$wnd.Map);if(e==null){e=new $wnd.Map;Cv.s
2024-09-19 21:37:27 UTC	16384	IN	Data Raw: 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 6b 5b 6a 5d 3d 5b 61 2c 62 5d 7d 29 7d 66 2e 46 62 28 6d 2c 6c 2c 67 2c 6a 29 3b 72 65 74 75 72 6e 20 68 7d 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 58 6a 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 2c 65 2c 66 2c 67 2c 68 3b 66 3d 6e 65 77 20 24 77 6e 64 2e 4d 61 70 3b 66 6f 72 28 65 3d 30 3b 65 3c 63 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 64 3d 63 5b 65 5d 3b 68 3d 28 67 43 28 29 2c 71 6f 28 28 6b 43 28 29 2c 6a 43 29 2c 64 5b 4f 46 5d 29 29 3b 67 3d 59 6a 28 61 2c 68 2c 62 29 3b 69 66 28 68 3d 3d 62 43 29 7b 62 6b 28 64 5b 27 75 72 6c 27 5d 2c 67 29 7d 65 6c 73 65 7b 73 77 69 74 63 68 28 62 2e 63 29 7b 63 61 73 65 20 31 3a 62 6b 28 42 6f 28 73 63 28 72 6a 28 61 2e 61 2c 75 65 29 2c 34 36 29 2c 64 5b 27 75 72 6c 27 5d 29 2c 67 Data Ascii: nction(a,b){k[j]=[a,b]})}f.Fb(m,l,g,j);return h})}function Xj(a,b,c){var d,e,f,g,h;f=new $wnd.Map;for(e=0;e<c.length;e++){d=c[e];h=(gC(),qo((kC(),jC),d[OF]));g=Yj(a,h,b);if(h==bC){bk(d['url'],g)}else{switch(b.c){case 1:bk(Bo(sc(rj(a.a,ue),46),d['url']),g
2024-09-19 21:37:27 UTC	16384	IN	Data Raw: 24 77 6e 64 2e 63 6f 6e 73 6f 6c 65 2c 22 54 68 65 20 65 72 72 6f 72 20 68 61 73 20 6f 63 63 75 72 72 65 64 20 69 6e 20 74 68 65 20 4a 53 20 63 6f 64 65 3a 20 27 22 2b 66 2b 22 27 22 29 7d 7d 65 6c 73 65 20 74 68 72 6f 77 20 62 69 28 61 29 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 69 77 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 2c 66 2c 67 2c 68 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 3b 6c 3d 28 6b 3d 79 75 28 63 2c 30 29 2c 78 63 28 42 7a 28 7a 41 28 6b 2c 4d 47 29 29 29 29 3b 6e 3d 6c 5b 4f 46 5d 3b 69 66 28 6c 45 28 27 69 6e 4d 65 6d 6f 72 79 27 2c 6e 29 29 7b 41 76 28 63 29 3b 72 65 74 75 72 6e 7d 6a 3d 73 63 28 72 6a 28 63 2e 67 2e 63 2c 45 64 29 2c 34 37 29 3b 69 66 28 21 62 2e 62 29 7b 64 65 62 75 67 67 65 72 3b 74 68 72 6f 77 20 62 69 28 6e 65 77 20 6b 44 28 Data Ascii: $wnd.console,"The error has occurred in the JS code: '"+f+"'")}}else throw bi(a)}}function iw(a,b,c,d){var e,f,g,h,j,k,l,m,n;l=(k=yu(c,0),xc(Bz(zA(k,MG))));n=l[OF];if(lE('inMemory',n)){Av(c);return}j=sc(rj(c.g.c,Ed),47);if(!b.b){debugger;throw bi(new kD(
2024-09-19 21:37:27 UTC	16384	IN	Data Raw: 65 3b 76 61 72 20 6b 65 3d 79 44 28 43 46 2c 27 53 63 72 6f 6c 6c 50 6f 73 69 74 69 6f 6e 48 61 6e 64 6c 65 72 27 2c 32 37 29 3b 6a 69 28 31 32 37 2c 32 37 2c 7b 32 37 3a 31 7d 2c 4e 6a 29 3b 5f 2e 55 3d 66 75 6e 63 74 69 6f 6e 20 4f 6a 28 61 29 7b 7d 3b 5f 2e 56 3d 66 75 6e 63 74 69 6f 6e 20 50 6a 28 61 29 7b 7d 3b 5f 2e 57 3d 66 75 6e 63 74 69 6f 6e 20 51 6a 28 61 2c 62 29 7b 7d 3b 5f 2e 58 3d 66 75 6e 63 74 69 6f 6e 20 52 6a 28 61 29 7b 7d 3b 76 61 72 20 6b 64 3d 79 44 28 43 46 2c 27 44 65 66 61 75 6c 74 52 65 67 69 73 74 72 79 2f 57 65 62 43 6f 6d 70 6f 6e 65 6e 74 53 63 72 6f 6c 6c 48 61 6e 64 6c 65 72 27 2c 31 32 37 29 3b 6a 69 28 36 33 2c 31 2c 7b 36 33 3a 31 7d 2c 64 6b 29 3b 76 61 72 20 53 6a 2c 54 6a 2c 55 6a 2c 56 6a 3d 30 3b 76 61 72 20 7a 64 Data Ascii: e;var ke=yD(CF,'ScrollPositionHandler',27);ji(127,27,{27:1},Nj);_.U=function Oj(a){};_.V=function Pj(a){};_.W=function Qj(a,b){};_.X=function Rj(a){};var kd=yD(CF,'DefaultRegistry/WebComponentScrollHandler',127);ji(63,1,{63:1},dk);var Sj,Tj,Uj,Vj=0;var zd
2024-09-19 21:37:27 UTC	15344	IN	Data Raw: 28 75 47 2c 27 58 68 72 43 6f 6e 6e 65 63 74 69 6f 6e 45 72 72 6f 72 27 2c 39 36 29 3b 6a 69 28 35 34 2c 31 2c 7b 35 34 3a 31 7d 2c 50 74 29 3b 76 61 72 20 47 66 3d 79 44 28 4b 47 2c 27 43 6f 6e 73 74 61 6e 74 50 6f 6f 6c 27 2c 35 34 29 3b 6a 69 28 37 37 2c 31 2c 7b 37 37 3a 31 7d 2c 57 74 29 3b 5f 2e 41 62 3d 66 75 6e 63 74 69 6f 6e 20 58 74 28 29 7b 72 65 74 75 72 6e 20 73 63 28 72 6a 28 74 68 69 73 2e 61 2c 63 64 29 2c 31 32 29 2e 61 7d 3b 76 61 72 20 4a 66 3d 79 44 28 4b 47 2c 27 45 78 65 63 75 74 65 4a 61 76 61 53 63 72 69 70 74 50 72 6f 63 65 73 73 6f 72 27 2c 37 37 29 3b 6a 69 28 31 38 37 2c 31 2c 7b 7d 2c 59 74 29 3b 5f 2e 63 62 3d 66 75 6e 63 74 69 6f 6e 20 5a 74 28 61 29 7b 72 65 74 75 72 6e 20 69 42 28 6e 65 77 20 24 74 28 74 68 69 73 2e 61 2c Data Ascii: (uG,'XhrConnectionError',96);ji(54,1,{54:1},Pt);var Gf=yD(KG,'ConstantPool',54);ji(77,1,{77:1},Wt);_.Ab=function Xt(){return sc(rj(this.a,cd),12).a};var Jf=yD(KG,'ExecuteJavaScriptProcessor',77);ji(187,1,{},Yt);_.cb=function Zt(a){return iB(new $t(this.a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49728	199.255.242.12	443	5228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 21:37:26 UTC	474	OUT	GET /hpp/VAADIN/build/webcomponentsjs/webcomponents-loader.js HTTP/1.1 Host: hostedpayments.merchante.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSION=MDVmYjk5NjgtYzQxMi00Yzg5LThlMzctZmI0ODdiNGQwZGQx
2024-09-19 21:37:27 UTC	521	IN	HTTP/1.1 200 OK Date: Thu, 19 Sep 2024 21:37:27 GMT Content-Type: application/javascript Content-Length: 7773 Connection: close Server: nginx Vary: Accept-Encoding cache-control: max-age=3600 last-modified: Thu, 01 Jan 1970 00:00:01 GMT x-content-type-options: nosniff x-xss-protection: 1; mode=block strict-transport-security: max-age=31536000 ; includeSubDomains x-envoy-upstream-service-time: 36 Strict-Transport-Security: max-age=31536000 X-Frame-Options: sameorigin X-Content-Type-Options: nosniff
2024-09-19 21:37:27 UTC	7773	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 40 6c 69 63 65 6e 73 65 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 38 20 54 68 65 20 50 6f 6c 79 6d 65 72 20 50 72 6f 6a 65 63 74 20 41 75 74 68 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 54 68 69 73 20 63 6f 64 65 20 6d 61 79 20 6f 6e 6c 79 20 62 65 20 75 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 42 53 44 20 73 74 79 6c 65 20 6c 69 63 65 6e 73 65 20 66 6f 75 6e 64 20 61 74 20 68 74 74 70 3a 2f 2f 70 6f 6c 79 6d 65 72 2e 67 69 74 68 75 62 2e 69 6f 2f 4c 49 43 45 4e 53 45 2e 74 78 74 0a 20 2a 20 54 68 65 20 63 6f 6d 70 6c 65 74 65 20 73 65 74 20 6f 66 20 61 75 74 68 6f 72 73 20 6d 61 79 20 62 65 20 66 6f 75 6e 64 20 61 74 20 68 74 74 70 3a 2f 2f 70 6f 6c 79 6d 65 72 2e 67 Data Ascii: /** * @license * Copyright (c) 2018 The Polymer Project Authors. All rights reserved. * This code may only be used under the BSD style license found at http://polymer.github.io/LICENSE.txt * The complete set of authors may be found at http://polymer.g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49731	199.255.242.12	443	5228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 21:37:28 UTC	491	OUT	GET /hpp/VAADIN/static/client/client-4AE3B7490A0EC7EE13B41C91E0150FBA.cache.js HTTP/1.1 Host: hostedpayments.merchante.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSION=MDVmYjk5NjgtYzQxMi00Yzg5LThlMzctZmI0ODdiNGQwZGQx
2024-09-19 21:37:28 UTC	527	IN	HTTP/1.1 200 OK Date: Thu, 19 Sep 2024 21:37:28 GMT Content-Type: application/javascript Content-Length: 145884 Connection: close Server: nginx Vary: Accept-Encoding cache-control: max-age=31536000 last-modified: Fri, 15 May 2020 15:07:26 GMT x-content-type-options: nosniff x-xss-protection: 1; mode=block strict-transport-security: max-age=31536000 ; includeSubDomains x-envoy-upstream-service-time: 48 Strict-Transport-Security: max-age=31536000 X-Frame-Options: sameorigin X-Content-Type-Options: nosniff
2024-09-19 21:37:28 UTC	15857	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 63 6c 69 65 6e 74 28 29 7b 76 61 72 20 4a 62 3d 27 27 2c 4b 62 3d 30 2c 4c 62 3d 27 67 77 74 2e 63 6f 64 65 73 76 72 3d 27 2c 4d 62 3d 27 67 77 74 2e 68 6f 73 74 65 64 3d 27 2c 4e 62 3d 27 67 77 74 2e 68 79 62 72 69 64 27 2c 4f 62 3d 27 63 6c 69 65 6e 74 27 2c 50 62 3d 27 23 27 2c 51 62 3d 27 3f 27 2c 52 62 3d 27 2f 27 2c 53 62 3d 31 2c 54 62 3d 27 69 6d 67 27 2c 55 62 3d 27 63 6c 65 61 72 2e 63 61 63 68 65 2e 67 69 66 27 2c 56 62 3d 27 62 61 73 65 55 72 6c 27 2c 57 62 3d 27 73 63 72 69 70 74 27 2c 58 62 3d 27 63 6c 69 65 6e 74 2e 6e 6f 63 61 63 68 65 2e 6a 73 27 2c 59 62 3d 27 62 61 73 65 27 2c 5a 62 3d 27 2f 2f 27 2c 24 62 3d 27 6d 65 74 61 27 2c 5f 62 3d 27 6e 61 6d 65 27 2c 61 63 3d 27 67 77 74 3a 70 72 6f 70 65 72 74 79 27 Data Ascii: function client(){var Jb='',Kb=0,Lb='gwt.codesvr=',Mb='gwt.hosted=',Nb='gwt.hybrid',Ob='client',Pb='#',Qb='?',Rb='/',Sb=1,Tb='img',Ub='clear.cache.gif',Vb='baseUrl',Wb='script',Xb='client.nocache.js',Yb='base',Zb='//',$b='meta',_b='name',ac='gwt:property'
2024-09-19 21:37:28 UTC	16379	IN	Data Raw: 64 29 7b 72 65 74 75 72 6e 20 73 43 28 61 2c 62 2c 63 2c 64 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 66 6b 28 61 2c 62 2c 63 29 7b 57 6a 28 29 3b 72 65 74 75 72 6e 20 61 2e 73 65 74 28 63 2c 62 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 4b 43 28 64 2c 61 2c 62 2c 63 29 7b 64 2e 70 75 73 68 53 74 61 74 65 28 61 2c 62 2c 63 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 5a 45 28 62 2c 63 2c 64 29 7b 74 72 79 7b 62 5b 63 5d 3d 64 7d 63 61 74 63 68 28 61 29 7b 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 52 7a 28 61 29 7b 76 61 72 20 62 3b 62 3d 64 42 3b 21 21 62 26 26 53 41 28 62 2c 61 2e 62 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 52 28 61 2c 62 29 7b 61 2e 65 3d 62 3b 62 21 3d 6e 75 6c 6c 26 26 5a 45 28 62 2c 70 46 2c 61 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 68 75 28 61 2c 62 29 7b 73 43 28 62 Data Ascii: d){return sC(a,b,c,d)}function fk(a,b,c){Wj();return a.set(c,b)}function KC(d,a,b,c){d.pushState(a,b,c)}function ZE(b,c,d){try{b[c]=d}catch(a){}}function Rz(a){var b;b=dB;!!b&&SA(b,a.b)}function R(a,b){a.e=b;b!=null&&ZE(b,pF,a)}function hu(a,b){sC(b
2024-09-19 21:37:28 UTC	16384	IN	Data Raw: 65 7d 63 61 74 63 68 28 61 29 7b 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 77 75 28 61 29 7b 76 61 72 20 62 3b 62 3d 24 77 6e 64 2e 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 3b 76 75 28 61 2c 6c 69 28 4a 75 2e 70 72 6f 74 6f 74 79 70 65 2e 59 2c 4a 75 2c 5b 61 2c 62 5d 29 29 3b 72 65 74 75 72 6e 20 62 7d 0a 66 75 6e 63 74 69 6f 6e 20 24 75 28 61 29 7b 61 2e 61 2e 66 6f 72 45 61 63 68 28 6c 69 28 6b 76 2e 70 72 6f 74 6f 74 79 70 65 2e 59 2c 6b 76 2c 5b 61 5d 29 29 3b 76 75 28 61 2e 64 2c 6c 69 28 6d 76 2e 70 72 6f 74 6f 74 79 70 65 2e 59 2c 6d 76 2c 5b 5d 29 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 67 69 28 61 2c 62 29 7b 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3d 3d 3d 69 46 26 26 74 79 70 65 6f 66 20 77 69 6e 64 6f Data Ascii: e}catch(a){return false}}function wu(a){var b;b=$wnd.Object.create(null);vu(a,li(Ju.prototype.Y,Ju,[a,b]));return b}function $u(a){a.a.forEach(li(kv.prototype.Y,kv,[a]));vu(a.d,li(mv.prototype.Y,mv,[]))}function gi(a,b){typeof window===iF&&typeof windo
2024-09-19 21:37:28 UTC	16384	IN	Data Raw: 2c 62 29 7d 72 65 74 75 72 6e 20 62 7d 0a 66 75 6e 63 74 69 6f 6e 20 72 63 28 61 2c 62 29 7b 69 66 28 48 63 28 61 29 29 7b 72 65 74 75 72 6e 20 21 21 71 63 5b 62 5d 7d 65 6c 73 65 20 69 66 28 61 2e 24 62 29 7b 72 65 74 75 72 6e 20 21 21 61 2e 24 62 5b 62 5d 7d 65 6c 73 65 20 69 66 28 45 63 28 61 29 29 7b 72 65 74 75 72 6e 20 21 21 70 63 5b 62 5d 7d 65 6c 73 65 20 69 66 28 44 63 28 61 29 29 7b 72 65 74 75 72 6e 20 21 21 6f 63 5b 62 5d 7d 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 0a 66 75 6e 63 74 69 6f 6e 20 4a 6a 28 29 7b 69 66 28 24 77 6e 64 2e 56 61 61 64 69 6e 2e 46 6c 6f 77 2e 67 65 74 53 63 72 6f 6c 6c 50 6f 73 69 74 69 6f 6e 29 7b 72 65 74 75 72 6e 20 24 77 6e 64 2e 56 61 61 64 69 6e 2e 46 6c 6f 77 2e 67 65 74 53 63 72 6f 6c 6c 50 6f 73 69 74 69 6f 6e Data Ascii: ,b)}return b}function rc(a,b){if(Hc(a)){return !!qc[b]}else if(a.$b){return !!a.$b[b]}else if(Ec(a)){return !!pc[b]}else if(Dc(a)){return !!oc[b]}return false}function Jj(){if($wnd.Vaadin.Flow.getScrollPosition){return $wnd.Vaadin.Flow.getScrollPosition
2024-09-19 21:37:28 UTC	16384	IN	Data Raw: 66 29 3b 64 5b 47 46 5d 3d 78 63 28 62 2e 67 29 3b 4c 43 28 24 77 6e 64 2e 68 69 73 74 6f 72 79 2c 65 2c 27 27 2c 24 77 6e 64 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 3b 74 72 79 7b 4f 43 28 24 77 6e 64 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2c 48 46 2b 62 2e 62 2c 56 43 28 64 29 29 7d 63 61 74 63 68 28 61 29 7b 61 3d 61 69 28 61 29 3b 69 66 28 43 63 28 61 2c 32 34 29 29 7b 63 3d 61 3b 68 6a 28 49 46 2b 63 2e 77 28 29 29 7d 65 6c 73 65 20 74 68 72 6f 77 20 62 69 28 61 29 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 48 76 28 61 2c 62 2c 63 29 7b 44 76 28 29 3b 76 61 72 20 64 2c 65 2c 66 3b 65 3d 79 63 28 43 76 2e 67 65 74 28 61 29 2c 24 77 6e 64 2e 4d 61 70 29 3b 69 66 28 65 3d 3d 6e 75 6c 6c 29 7b 65 3d 6e 65 77 20 24 77 6e 64 2e 4d 61 70 3b 43 76 2e 73 Data Ascii: f);d[GF]=xc(b.g);LC($wnd.history,e,'',$wnd.location.href);try{OC($wnd.sessionStorage,HF+b.b,VC(d))}catch(a){a=ai(a);if(Cc(a,24)){c=a;hj(IF+c.w())}else throw bi(a)}}function Hv(a,b,c){Dv();var d,e,f;e=yc(Cv.get(a),$wnd.Map);if(e==null){e=new $wnd.Map;Cv.s
2024-09-19 21:37:28 UTC	16384	IN	Data Raw: 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 6b 5b 6a 5d 3d 5b 61 2c 62 5d 7d 29 7d 66 2e 46 62 28 6d 2c 6c 2c 67 2c 6a 29 3b 72 65 74 75 72 6e 20 68 7d 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 58 6a 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 2c 65 2c 66 2c 67 2c 68 3b 66 3d 6e 65 77 20 24 77 6e 64 2e 4d 61 70 3b 66 6f 72 28 65 3d 30 3b 65 3c 63 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 64 3d 63 5b 65 5d 3b 68 3d 28 67 43 28 29 2c 71 6f 28 28 6b 43 28 29 2c 6a 43 29 2c 64 5b 4f 46 5d 29 29 3b 67 3d 59 6a 28 61 2c 68 2c 62 29 3b 69 66 28 68 3d 3d 62 43 29 7b 62 6b 28 64 5b 27 75 72 6c 27 5d 2c 67 29 7d 65 6c 73 65 7b 73 77 69 74 63 68 28 62 2e 63 29 7b 63 61 73 65 20 31 3a 62 6b 28 42 6f 28 73 63 28 72 6a 28 61 2e 61 2c 75 65 29 2c 34 36 29 2c 64 5b 27 75 72 6c 27 5d 29 2c 67 Data Ascii: nction(a,b){k[j]=[a,b]})}f.Fb(m,l,g,j);return h})}function Xj(a,b,c){var d,e,f,g,h;f=new $wnd.Map;for(e=0;e<c.length;e++){d=c[e];h=(gC(),qo((kC(),jC),d[OF]));g=Yj(a,h,b);if(h==bC){bk(d['url'],g)}else{switch(b.c){case 1:bk(Bo(sc(rj(a.a,ue),46),d['url']),g
2024-09-19 21:37:28 UTC	16384	IN	Data Raw: 24 77 6e 64 2e 63 6f 6e 73 6f 6c 65 2c 22 54 68 65 20 65 72 72 6f 72 20 68 61 73 20 6f 63 63 75 72 72 65 64 20 69 6e 20 74 68 65 20 4a 53 20 63 6f 64 65 3a 20 27 22 2b 66 2b 22 27 22 29 7d 7d 65 6c 73 65 20 74 68 72 6f 77 20 62 69 28 61 29 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 69 77 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 2c 66 2c 67 2c 68 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 3b 6c 3d 28 6b 3d 79 75 28 63 2c 30 29 2c 78 63 28 42 7a 28 7a 41 28 6b 2c 4d 47 29 29 29 29 3b 6e 3d 6c 5b 4f 46 5d 3b 69 66 28 6c 45 28 27 69 6e 4d 65 6d 6f 72 79 27 2c 6e 29 29 7b 41 76 28 63 29 3b 72 65 74 75 72 6e 7d 6a 3d 73 63 28 72 6a 28 63 2e 67 2e 63 2c 45 64 29 2c 34 37 29 3b 69 66 28 21 62 2e 62 29 7b 64 65 62 75 67 67 65 72 3b 74 68 72 6f 77 20 62 69 28 6e 65 77 20 6b 44 28 Data Ascii: $wnd.console,"The error has occurred in the JS code: '"+f+"'")}}else throw bi(a)}}function iw(a,b,c,d){var e,f,g,h,j,k,l,m,n;l=(k=yu(c,0),xc(Bz(zA(k,MG))));n=l[OF];if(lE('inMemory',n)){Av(c);return}j=sc(rj(c.g.c,Ed),47);if(!b.b){debugger;throw bi(new kD(
2024-09-19 21:37:28 UTC	16384	IN	Data Raw: 65 3b 76 61 72 20 6b 65 3d 79 44 28 43 46 2c 27 53 63 72 6f 6c 6c 50 6f 73 69 74 69 6f 6e 48 61 6e 64 6c 65 72 27 2c 32 37 29 3b 6a 69 28 31 32 37 2c 32 37 2c 7b 32 37 3a 31 7d 2c 4e 6a 29 3b 5f 2e 55 3d 66 75 6e 63 74 69 6f 6e 20 4f 6a 28 61 29 7b 7d 3b 5f 2e 56 3d 66 75 6e 63 74 69 6f 6e 20 50 6a 28 61 29 7b 7d 3b 5f 2e 57 3d 66 75 6e 63 74 69 6f 6e 20 51 6a 28 61 2c 62 29 7b 7d 3b 5f 2e 58 3d 66 75 6e 63 74 69 6f 6e 20 52 6a 28 61 29 7b 7d 3b 76 61 72 20 6b 64 3d 79 44 28 43 46 2c 27 44 65 66 61 75 6c 74 52 65 67 69 73 74 72 79 2f 57 65 62 43 6f 6d 70 6f 6e 65 6e 74 53 63 72 6f 6c 6c 48 61 6e 64 6c 65 72 27 2c 31 32 37 29 3b 6a 69 28 36 33 2c 31 2c 7b 36 33 3a 31 7d 2c 64 6b 29 3b 76 61 72 20 53 6a 2c 54 6a 2c 55 6a 2c 56 6a 3d 30 3b 76 61 72 20 7a 64 Data Ascii: e;var ke=yD(CF,'ScrollPositionHandler',27);ji(127,27,{27:1},Nj);_.U=function Oj(a){};_.V=function Pj(a){};_.W=function Qj(a,b){};_.X=function Rj(a){};var kd=yD(CF,'DefaultRegistry/WebComponentScrollHandler',127);ji(63,1,{63:1},dk);var Sj,Tj,Uj,Vj=0;var zd
2024-09-19 21:37:28 UTC	15344	IN	Data Raw: 28 75 47 2c 27 58 68 72 43 6f 6e 6e 65 63 74 69 6f 6e 45 72 72 6f 72 27 2c 39 36 29 3b 6a 69 28 35 34 2c 31 2c 7b 35 34 3a 31 7d 2c 50 74 29 3b 76 61 72 20 47 66 3d 79 44 28 4b 47 2c 27 43 6f 6e 73 74 61 6e 74 50 6f 6f 6c 27 2c 35 34 29 3b 6a 69 28 37 37 2c 31 2c 7b 37 37 3a 31 7d 2c 57 74 29 3b 5f 2e 41 62 3d 66 75 6e 63 74 69 6f 6e 20 58 74 28 29 7b 72 65 74 75 72 6e 20 73 63 28 72 6a 28 74 68 69 73 2e 61 2c 63 64 29 2c 31 32 29 2e 61 7d 3b 76 61 72 20 4a 66 3d 79 44 28 4b 47 2c 27 45 78 65 63 75 74 65 4a 61 76 61 53 63 72 69 70 74 50 72 6f 63 65 73 73 6f 72 27 2c 37 37 29 3b 6a 69 28 31 38 37 2c 31 2c 7b 7d 2c 59 74 29 3b 5f 2e 63 62 3d 66 75 6e 63 74 69 6f 6e 20 5a 74 28 61 29 7b 72 65 74 75 72 6e 20 69 42 28 6e 65 77 20 24 74 28 74 68 69 73 2e 61 2c Data Ascii: (uG,'XhrConnectionError',96);ji(54,1,{54:1},Pt);var Gf=yD(KG,'ConstantPool',54);ji(77,1,{77:1},Wt);_.Ab=function Xt(){return sc(rj(this.a,cd),12).a};var Jf=yD(KG,'ExecuteJavaScriptProcessor',77);ji(187,1,{},Yt);_.cb=function Zt(a){return iB(new $t(this.a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49730	142.250.74.196	443	5228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 21:37:28 UTC	431	OUT	GET /recaptcha/api.js HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-19 21:37:28 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Thu, 19 Sep 2024 21:37:28 GMT Date: Thu, 19 Sep 2024 21:37:28 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-19 21:37:28 UTC	641	IN	Data Raw: 35 39 61 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 59a/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-09-19 21:37:28 UTC	800	IN	Data Raw: 41 41 43 51 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 64 76 62 32 64 73 5a 53 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 7a 49 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 33 4e 44 49 7a 4e 44 49 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 6c 75 49 6a 70 30 63 6e 56 6c 4c 43 4a 70 63 31 52 6f 61 58 4a 6b 55 47 46 79 64 48 6b 69 4f 6e 52 79 64 57 56 39 27 3b 69 66 28 76 26 26 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 6f 6e 4c 61 62 65 6c 29 7b 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 6f 6e 4c 61 62 65 6c 2e Data Ascii: AACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.
2024-09-19 21:37:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49734	199.255.242.14	443	5228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 21:37:29 UTC	760	OUT	POST /hpp/?v-r=uidl&v-uiId=0 HTTP/1.1 Host: hostedpayments.merchante.com Connection: keep-alive Content-Length: 302 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/json; charset=UTF-8 Accept: / Origin: https://hostedpayments.merchante.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://hostedpayments.merchante.com/hpp/checkout/sign-in Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSION=MDVmYjk5NjgtYzQxMi00Yzg5LThlMzctZmI0ODdiNGQwZGQx
2024-09-19 21:37:29 UTC	302	OUT	Data Raw: 7b 22 63 73 72 66 54 6f 6b 65 6e 22 3a 22 62 33 33 62 38 63 63 33 2d 37 38 38 65 2d 34 63 37 66 2d 39 62 61 37 2d 32 62 61 63 35 32 39 61 61 66 36 62 22 2c 22 72 70 63 22 3a 5b 7b 22 74 79 70 65 22 3a 22 63 68 61 6e 6e 65 6c 22 2c 22 6e 6f 64 65 22 3a 33 2c 22 63 68 61 6e 6e 65 6c 22 3a 30 2c 22 61 72 67 73 22 3a 5b 6e 75 6c 6c 5d 7d 2c 7b 22 74 79 70 65 22 3a 22 63 68 61 6e 6e 65 6c 22 2c 22 6e 6f 64 65 22 3a 33 2c 22 63 68 61 6e 6e 65 6c 22 3a 32 2c 22 61 72 67 73 22 3a 5b 6e 75 6c 6c 5d 7d 2c 7b 22 74 79 70 65 22 3a 22 63 68 61 6e 6e 65 6c 22 2c 22 6e 6f 64 65 22 3a 32 39 2c 22 63 68 61 6e 6e 65 6c 22 3a 30 2c 22 61 72 67 73 22 3a 5b 6e 75 6c 6c 5d 7d 2c 7b 22 74 79 70 65 22 3a 22 63 68 61 6e 6e 65 6c 22 2c 22 6e 6f 64 65 22 3a 32 39 2c 22 63 68 61 6e Data Ascii: {"csrfToken":"b33b8cc3-788e-4c7f-9ba7-2bac529aaf6b","rpc":[{"type":"channel","node":3,"channel":0,"args":[null]},{"type":"channel","node":3,"channel":2,"args":[null]},{"type":"channel","node":29,"channel":0,"args":[null]},{"type":"channel","node":29,"chan
2024-09-19 21:37:29 UTC	477	IN	HTTP/1.1 200 OK Date: Thu, 19 Sep 2024 21:37:29 GMT Content-Type: application/json;charset=UTF-8 Content-Length: 35 Connection: close Server: nginx Vary: Accept-Encoding cache-control: no-cache x-content-type-options: nosniff x-xss-protection: 1; mode=block strict-transport-security: max-age=31536000 ; includeSubDomains x-envoy-upstream-service-time: 47 Strict-Transport-Security: max-age=31536000 X-Frame-Options: sameorigin X-Content-Type-Options: nosniff
2024-09-19 21:37:29 UTC	35	IN	Data Raw: 66 6f 72 28 3b 3b 29 3b 5b 7b 22 73 79 6e 63 49 64 22 3a 31 2c 22 63 6c 69 65 6e 74 49 64 22 3a 31 7d 5d Data Ascii: for(;;);[{"syncId":1,"clientId":1}]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	49736	199.255.242.14	443	5228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 21:37:29 UTC	710	OUT	GET /hpp/images/ic_close.png HTTP/1.1 Host: hostedpayments.merchante.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hostedpayments.merchante.com/hpp/checkout/sign-in Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSION=MDVmYjk5NjgtYzQxMi00Yzg5LThlMzctZmI0ODdiNGQwZGQx
2024-09-19 21:37:29 UTC	485	IN	HTTP/1.1 200 OK Date: Thu, 19 Sep 2024 21:37:29 GMT Content-Type: image/png Content-Length: 152 Connection: close Server: nginx cache-control: max-age=3600 last-modified: Thu, 01 Jan 1970 00:00:01 GMT x-content-type-options: nosniff x-xss-protection: 1; mode=block strict-transport-security: max-age=31536000 ; includeSubDomains x-envoy-upstream-service-time: 128 Strict-Transport-Security: max-age=31536000 X-Frame-Options: sameorigin X-Content-Type-Options: nosniff
2024-09-19 21:37:29 UTC	152	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 08 00 00 00 08 08 06 00 00 00 c4 0f be 8b 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 52 49 44 41 54 18 19 63 f8 ff ff 3f 37 10 9b 30 a0 01 90 18 48 8e 01 ca 78 09 a4 ed 61 6a 40 6c 20 06 89 41 34 22 09 80 24 40 18 45 03 58 23 92 04 8a 24 13 cc 58 bc 34 92 6e 90 f1 20 8c 30 05 c8 01 b9 16 21 00 34 0a c8 b7 87 8a 99 80 38 78 bd 09 00 ef 19 79 ef e7 48 bd 6e 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsRGBRIDATc?70Hxaj@l A4"$@EX#$X4n 0!48xyHnIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	49733	199.255.242.12	443	5228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 21:37:29 UTC	478	OUT	GET /hpp/VAADIN/build/vaadin-bundle-9936da12bdae75e3b436.cache.js HTTP/1.1 Host: hostedpayments.merchante.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSION=MDVmYjk5NjgtYzQxMi00Yzg5LThlMzctZmI0ODdiNGQwZGQx
2024-09-19 21:37:29 UTC	529	IN	HTTP/1.1 200 OK Date: Thu, 19 Sep 2024 21:37:29 GMT Content-Type: application/javascript Content-Length: 1139982 Connection: close Server: nginx Vary: Accept-Encoding cache-control: max-age=31536000 last-modified: Thu, 01 Jan 1970 00:00:01 GMT x-content-type-options: nosniff x-xss-protection: 1; mode=block strict-transport-security: max-age=31536000 ; includeSubDomains x-envoy-upstream-service-time: 124 Strict-Transport-Security: max-age=31536000 X-Frame-Options: sameorigin X-Content-Type-Options: nosniff
2024-09-19 21:37:29 UTC	15855	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 69 29 7b 69 66 28 65 5b 69 5d 29 72 65 74 75 72 6e 20 65 5b 69 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 61 3d 65 5b 69 5d 3d 7b 69 3a 69 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 69 5d 2e 63 61 6c 6c 28 61 2e 65 78 70 6f 72 74 73 2c 61 2c 61 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 61 2e 6c 3d 21 30 2c 61 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 74 2c 6e 2e 63 3d 65 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 6e 2e 6f 28 74 2c 65 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 69 7d 29 7d 2c 6e 2e 72 3d 66 75 6e Data Ascii: !function(t){var e={};function n(i){if(e[i])return e[i].exports;var a=e[i]={i:i,l:!1,exports:{}};return t[i].call(a.exports,a,a.exports,n),a.l=!0,a.exports}n.m=t,n.c=e,n.d=function(t,e,i){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:i})},n.r=fun
2024-09-19 21:37:29 UTC	16379	IN	Data Raw: 5c 6e 20 20 20 20 7d 5c 6e 5c 6e 20 20 20 20 2e 63 6f 6c 2d 35 5c 5c 40 6d 64 20 7b 5c 6e 20 20 20 20 20 20 20 20 66 6c 65 78 2d 62 61 73 69 73 3a 20 63 61 6c 63 28 34 31 2e 36 36 25 20 2d 20 30 2e 30 31 70 78 20 2d 20 76 61 72 28 2d 2d 67 72 69 64 2d 67 61 70 2c 20 31 65 6d 29 29 3b 5c 6e 20 20 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 63 61 6c 63 28 34 31 2e 36 36 25 20 2d 20 30 2e 30 31 70 78 20 2d 20 76 61 72 28 2d 2d 67 72 69 64 2d 67 61 70 2c 20 31 65 6d 29 29 3b 5c 6e 20 20 20 20 7d 5c 6e 5c 6e 20 20 20 20 2e 63 6f 6c 2d 36 5c 5c 40 6d 64 20 7b 5c 6e 20 20 20 20 20 20 20 20 66 6c 65 78 2d 62 61 73 69 73 3a 20 63 61 6c 63 28 35 30 25 20 2d 20 30 2e 30 31 70 78 20 2d 20 76 61 72 28 2d 2d 67 72 69 64 2d 67 61 70 2c 20 31 65 6d 29 29 3b 5c 6e Data Ascii: \n }\n\n .col-5\\@md {\n flex-basis: calc(41.66% - 0.01px - var(--grid-gap, 1em));\n max-width: calc(41.66% - 0.01px - var(--grid-gap, 1em));\n }\n\n .col-6\\@md {\n flex-basis: calc(50% - 0.01px - var(--grid-gap, 1em));\n
2024-09-19 21:37:29 UTC	16384	IN	Data Raw: 37 39 37 63 29 3b 5c 6e 7d 5c 6e 5c 6e 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 20 7b 5c 6e 20 20 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 63 6f 6e 74 72 61 73 74 2d 6d 65 64 69 75 6d 2c 20 23 37 39 37 39 37 63 29 3b 5c 6e 7d 5c 6e 5c 6e 2e 66 6f 72 6d 2d 6c 65 67 65 6e 64 20 7b 5c 6e 20 20 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 63 6f 6e 74 72 61 73 74 2d 68 69 67 68 65 72 2c 20 23 31 63 31 63 32 31 29 3b 5c 6e 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 32 3b 5c 6e 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 76 61 72 28 2d 2d 74 65 78 74 2d 6d 64 2c 20 31 2e 32 65 6d 29 3b 5c 6e 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 76 61 72 28 Data Ascii: 797c);\n}\n\n.form-control:-moz-placeholder {\n color: var(--color-contrast-medium, #79797c);\n}\n\n.form-legend {\n color: var(--color-contrast-higher, #1c1c21);\n line-height: 1.2;\n font-size: var(--text-md, 1.2em);\n margin-bottom: var(
2024-09-19 21:37:29 UTC	16384	IN	Data Raw: 3b 5c 6e 20 20 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 76 61 72 28 2d 2d 73 70 61 63 65 2d 6d 64 29 3b 5c 6e 7d 5c 6e 5c 6e 2e 70 61 64 64 69 6e 67 2d 79 2d 6c 67 20 7b 5c 6e 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 76 61 72 28 2d 2d 73 70 61 63 65 2d 6c 67 29 3b 5c 6e 20 20 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 76 61 72 28 2d 2d 73 70 61 63 65 2d 6c 67 29 3b 5c 6e 7d 5c 6e 5c 6e 2e 70 61 64 64 69 6e 67 2d 79 2d 78 6c 20 7b 5c 6e 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 76 61 72 28 2d 2d 73 70 61 63 65 2d 78 6c 29 3b 5c 6e 20 20 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 76 61 72 28 2d 2d 73 70 61 63 65 2d 78 6c 29 3b 5c 6e 7d 5c 6e 5c 6e 2e 70 61 64 64 69 6e 67 2d 79 2d 78 78 6c 20 7b 5c 6e 20 Data Ascii: ;\n padding-bottom: var(--space-md);\n}\n\n.padding-y-lg {\n padding-top: var(--space-lg);\n padding-bottom: var(--space-lg);\n}\n\n.padding-y-xl {\n padding-top: var(--space-xl);\n padding-bottom: var(--space-xl);\n}\n\n.padding-y-xxl {\n
2024-09-19 21:37:29 UTC	16384	IN	Data Raw: 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 5c 6e 20 20 20 20 7d 5c 6e 5c 6e 20 20 20 20 2e 66 6c 65 78 2d 67 72 6f 77 2d 30 5c 5c 40 78 73 20 7b 5c 6e 20 20 20 20 20 20 20 20 66 6c 65 78 2d 67 72 6f 77 3a 20 30 3b 5c 6e 20 20 20 20 7d 5c 6e 5c 6e 20 20 20 20 2e 66 6c 65 78 2d 73 68 72 69 6e 6b 5c 5c 40 78 73 20 7b 5c 6e 20 20 20 20 20 20 20 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 20 31 3b 5c 6e 20 20 20 20 7d 5c 6e 5c 6e 20 20 20 20 2e 6a 75 73 74 69 66 79 2d 73 74 61 72 74 5c 5c 40 78 73 20 7b 5c 6e 20 20 20 20 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 66 6c 65 78 2d 73 74 61 72 74 3b 5c 6e 20 20 20 20 7d 5c 6e 5c 6e 20 20 20 20 2e 6a 75 73 74 69 66 79 2d 65 6e 64 5c 5c 40 78 73 20 7b 5c 6e 20 20 20 20 20 20 20 20 Data Ascii: align-items: center;\n }\n\n .flex-grow-0\\@xs {\n flex-grow: 0;\n }\n\n .flex-shrink\\@xs {\n flex-shrink: 1;\n }\n\n .justify-start\\@xs {\n justify-content: flex-start;\n }\n\n .justify-end\\@xs {\n
2024-09-19 21:37:29 UTC	16384	IN	Data Raw: 6e 2e 63 6f 6e 74 65 6e 74 2d 63 61 72 64 20 7b 5c 6e 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 62 67 29 3b 5c 6e 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 76 61 72 28 2d 2d 72 61 64 69 75 73 2d 6d 64 29 3b 5c 6e 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 76 61 72 28 2d 2d 73 68 61 64 6f 77 2d 73 6d 29 3b 5c 6e 20 20 20 20 6d 61 72 67 69 6e 3a 20 76 61 72 28 2d 2d 73 70 61 63 65 2d 78 6c 29 20 76 61 72 28 2d 2d 73 70 61 63 65 2d 78 78 78 78 6c 29 3b 5c 6e 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 5c 6e 20 20 20 20 6d 69 6e 2d 68 65 69 67 68 74 3a 20 37 36 38 70 78 3b 5c 6e 7d 5c 6e 5c 6e 40 6d 65 64 69 61 20 73 63 72 65 65 6e 5c 6e 61 6e 64 20 28 6d Data Ascii: n.content-card {\n background-color: var(--color-bg);\n border-radius: var(--radius-md);\n box-shadow: var(--shadow-sm);\n margin: var(--space-xl) var(--space-xxxxl);\n text-align: center;\n min-height: 768px;\n}\n\n@media screen\nand (m
2024-09-19 21:37:29 UTC	16384	IN	Data Raw: 5c 6e 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 2f 2a 20 74 6f 70 2c 20 74 72 61 6e 73 70 61 72 65 6e 74 20 72 65 64 2c 20 66 61 6b 65 64 20 77 69 74 68 20 67 72 61 64 69 65 6e 74 20 2a 2f 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 28 2d 2d 6d 65 72 63 68 61 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 29 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 28 2d 2d 6d 65 72 63 68 61 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 29 5c 6e 20 20 20 20 29 2c 5c 6e 20 20 20 20 20 20 20 20 2f 2a 20 62 6f 74 74 6f 6d 2c 20 69 6d 61 67 65 20 2a 2f 20 75 72 6c 28 69 6d 61 67 65 73 2f 62 61 63 6b 67 72 6f 75 6e 64 2f 66 6c 75 62 62 65 72 2e 70 6e 67 29 3b 5c 6e 7d 5c 6e 5c 6e Data Ascii: \n background: /* top, transparent red, faked with gradient / linear-gradient(\n var(--merchant-background-color),\n var(--merchant-background-color)\n ),\n / bottom, image */ url(images/background/flubber.png);\n}\n\n
2024-09-19 21:37:29 UTC	16384	IN	Data Raw: 61 62 6c 65 5f 5f 6d 65 6e 75 2d 62 74 6e 20 7b 5c 6e 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 5c 6e 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 5c 6e 20 20 20 20 77 69 64 74 68 3a 20 32 65 6d 3b 5c 6e 20 20 20 20 68 65 69 67 68 74 3a 20 32 65 6d 3b 5c 6e 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 25 3b 5c 6e 7d 5c 6e 5c 6e 5c 6e 2f 2a 20 4d 6f 64 61 6c 20 43 6f 6e 74 65 6e 74 20 2a 2f 5c 6e 2e 6d 6f 64 61 6c 2d 63 6f 6e 74 65 6e 74 20 7b 5c 6e 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 5c 6e 20 20 20 20 6d 61 72 67 69 6e 3a 20 61 75 74 6f 3b 5c 6e 20 20 20 20 70 61 64 64 69 6e 67 3a 20 32 30 70 78 3b 5c 6e 20 20 20 20 Data Ascii: able__menu-btn {\n align-items: center;\n justify-content: center;\n width: 2em;\n height: 2em;\n border-radius: 50%;\n}\n\n\n/* Modal Content */\n.modal-content {\n background-color: #ffffff;\n margin: auto;\n padding: 20px;\n
2024-09-19 21:37:29 UTC	16384	IN	Data Raw: 28 74 2b 22 2e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 56 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 65 2b 6e 2e 73 6c 69 63 65 28 74 2e 6c 65 6e 67 74 68 29 7d 66 75 6e 63 74 69 6f 6e 20 71 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 3d 3d 3d 65 7c 7c 24 28 74 2c 65 29 7c 7c 48 28 74 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 74 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 29 29 7b 6c 65 74 20 65 3d 5b 5d 3b 66 6f 72 28 6c 65 74 20 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 6c 65 74 20 69 3d 74 5b 6e 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 6c 65 74 20 74 3d 30 3b 74 3c 69 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 65 2e 70 75 73 68 28 69 5b 74 5d 29 7d 72 65 74 75 72 6e 20 65 2e 6a 6f 69 Data Ascii: (t+".")}function V(t,e,n){return e+n.slice(t.length)}function q(t,e){return t===e\|\|$(t,e)\|\|H(t,e)}function j(t){if(Array.isArray(t)){let e=[];for(let n=0;n<t.length;n++){let i=t[n].toString().split(".");for(let t=0;t<i.length;t++)e.push(i[t])}return e.joi
2024-09-19 21:37:29 UTC	16384	IN	Data Raw: 65 29 7d 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 46 74 28 74 2c 65 2c 6e 2c 69 2c 61 2c 6f 29 7b 6f 3d 65 2e 73 74 61 74 69 63 7c 7c 6f 26 26 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 6f 7c 7c 6f 5b 65 2e 6d 65 74 68 6f 64 4e 61 6d 65 5d 29 3b 6c 65 74 20 73 3d 7b 6d 65 74 68 6f 64 4e 61 6d 65 3a 65 2e 6d 65 74 68 6f 64 4e 61 6d 65 2c 61 72 67 73 3a 65 2e 61 72 67 73 2c 6d 65 74 68 6f 64 49 6e 66 6f 3a 61 2c 64 79 6e 61 6d 69 63 46 6e 3a 6f 7d 3b 66 6f 72 28 6c 65 74 20 61 2c 6f 3d 30 3b 6f 3c 65 2e 61 72 67 73 2e 6c 65 6e 67 74 68 26 26 28 61 3d 65 2e 61 72 67 73 5b 6f 5d 29 3b 6f 2b 2b 29 61 2e 6c 69 74 65 72 61 6c 7c 7c 74 2e 5f 61 64 64 50 72 6f 70 65 72 74 79 45 66 66 65 63 74 28 61 2e 72 6f 6f 74 50 72 6f 70 65 72 74 79 2c 6e 2c 7b 66 6e Data Ascii: e)}))}}function Ft(t,e,n,i,a,o){o=e.static\|\|o&&("object"!=typeof o\|\|o[e.methodName]);let s={methodName:e.methodName,args:e.args,methodInfo:a,dynamicFn:o};for(let a,o=0;o<e.args.length&&(a=e.args[o]);o++)a.literal\|\|t._addPropertyEffect(a.rootProperty,n,{fn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	49735	199.255.242.14	443	5228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 21:37:29 UTC	762	OUT	GET /hpp/VAADIN/dynamic/resource/0/1894b183-40e1-42c6-9557-c9f55fb8d605/logo.png HTTP/1.1 Host: hostedpayments.merchante.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hostedpayments.merchante.com/hpp/checkout/sign-in Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSION=MDVmYjk5NjgtYzQxMi00Yzg5LThlMzctZmI0ODdiNGQwZGQx
2024-09-19 21:37:29 UTC	500	IN	HTTP/1.1 200 OK Date: Thu, 19 Sep 2024 21:37:29 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Server: nginx cache-control: no-cache pragma: no-cache expires: Thu, 01 Jan 1970 00:00:00 GMT x-content-type-options: nosniff x-xss-protection: 1; mode=block strict-transport-security: max-age=31536000 ; includeSubDomains x-envoy-upstream-service-time: 194 Strict-Transport-Security: max-age=31536000 X-Frame-Options: sameorigin X-Content-Type-Options: nosniff
2024-09-19 21:37:29 UTC	11143	IN	Data Raw: 32 62 37 66 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 57 01 a0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: 2b7fJFIF``CCW"}!1AQa"q
2024-09-19 21:37:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.6	49732	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-09-19 21:37:29 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 73 4a 70 57 53 58 54 71 48 30 57 32 68 32 49 32 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 39 61 66 37 37 66 33 30 37 34 34 30 61 34 63 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: sJpWSXTqH0W2h2I2.1Context: 59af77f307440a4c
2024-09-19 21:37:29 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-19 21:37:29 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 73 4a 70 57 53 58 54 71 48 30 57 32 68 32 49 32 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 39 61 66 37 37 66 33 30 37 34 34 30 61 34 63 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 55 30 77 30 6c 36 66 59 30 47 49 30 2b 74 6e 72 65 31 54 64 2f 35 36 44 6e 62 2b 43 68 59 7a 35 2f 74 52 50 73 6d 2b 79 48 4a 66 33 69 54 43 33 63 46 45 6f 49 47 41 56 31 78 46 30 34 49 55 65 4b 6f 65 4c 6b 49 35 62 57 4b 4b 69 61 6a 2b 4c 33 50 4d 65 75 2b 70 4c 4c 42 79 72 42 71 70 34 58 4f 76 47 38 48 30 6a 6b 6c 76 4d 53 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: sJpWSXTqH0W2h2I2.2Context: 59af77f307440a4c<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAU0w0l6fY0GI0+tnre1Td/56Dnb+ChYz5/tRPsm+yHJf3iTC3cFEoIGAV1xF04IUeKoeLkI5bWKKiaj+L3PMeu+pLLByrBqp4XOvG8H0jklvMS
2024-09-19 21:37:29 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 73 4a 70 57 53 58 54 71 48 30 57 32 68 32 49 32 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 39 61 66 37 37 66 33 30 37 34 34 30 61 34 63 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: sJpWSXTqH0W2h2I2.3Context: 59af77f307440a4c<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-09-19 21:37:29 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-19 21:37:29 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 53 51 43 4c 6c 4b 2f 67 71 55 61 66 56 2f 71 4c 65 31 75 30 6f 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: SQCLlK/gqUafV/qLe1u0oA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	49737	199.255.242.14	443	5228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 21:37:29 UTC	720	OUT	GET /hpp/images/background/flubber.png HTTP/1.1 Host: hostedpayments.merchante.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hostedpayments.merchante.com/hpp/checkout/sign-in Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSION=MDVmYjk5NjgtYzQxMi00Yzg5LThlMzctZmI0ODdiNGQwZGQx
2024-09-19 21:37:29 UTC	486	IN	HTTP/1.1 200 OK Date: Thu, 19 Sep 2024 21:37:29 GMT Content-Type: image/png Content-Length: 29169 Connection: close Server: nginx cache-control: max-age=3600 last-modified: Thu, 01 Jan 1970 00:00:01 GMT x-content-type-options: nosniff x-xss-protection: 1; mode=block strict-transport-security: max-age=31536000 ; includeSubDomains x-envoy-upstream-service-time: 51 Strict-Transport-Security: max-age=31536000 X-Frame-Options: sameorigin X-Content-Type-Options: nosniff
2024-09-19 21:37:29 UTC	15893	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 08 00 00 00 06 40 08 06 00 00 00 ed c0 a2 01 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 71 86 49 44 41 54 78 01 ec dd e9 76 1b d7 b1 80 d1 43 90 22 ad d8 cb d1 e0 f7 7f 43 11 f3 3c f0 de 6a 07 36 45 71 02 01 34 ba ab f7 5e 0b a1 23 2b 71 fe 04 80 fa 7c a7 ea ea e1 ff 15 e0 24 76 bb 5d 59 af d7 c5 ff ad 00 80 bd 9b 9b 9b ea 75 6a ab d5 aa fa ee 71 2e e7 fa df 0d 00 00 00 6f 99 4e a7 65 38 1c 16 00 0e d7 2b c0 c9 f4 7a bd 72 7b 7b 5b fd 04 00 08 db ed f6 e4 71 60 1c fc 9f f3 f0 3f 5c 5d 5d 15 00 00 00 b8 84 df 7f ff bd fc f1 c7 1f 05 80 c3 39 a5 84 13 8b 87 e5 11 01 7c fa f4 a9 00 00 c4 e1 ff Data Ascii: PNGIHDR@pHYssRGBgAMAaqIDATxvC"C<j6Eq4^#+q\|$v]Yujq.oNe8+zr{{[q`?\]]9\|
2024-09-19 21:37:29 UTC	13276	IN	Data Raw: 2e 01 dc 6e b7 00 00 00 00 00 00 00 f8 9e 00 00 4e 66 5d d7 98 e7 59 04 00 00 00 00 00 00 00 fc 8b 00 00 4e 28 1f ff 33 02 c8 18 00 00 00 00 00 00 00 20 09 00 e0 a4 44 00 00 00 00 00 00 00 c0 f7 04 00 70 72 19 01 b4 d6 02 00 00 00 00 00 00 e8 9b 00 00 2e 60 59 16 11 00 00 00 00 00 00 00 74 4e 00 00 17 91 11 40 ad 35 00 00 00 00 00 00 80 3e 09 00 e0 42 32 00 c8 10 e0 76 bb 05 00 00 00 00 00 00 d0 17 01 00 5c 4c 9e 02 10 01 00 00 00 00 00 00 40 7f 04 00 70 41 eb ba c6 3c cf db 2f 00 00 00 00 00 00 d0 07 01 00 5c 54 2e 00 88 00 00 00 00 00 00 00 a0 1f 02 00 b8 b8 8c 00 f2 2c 00 00 00 00 00 00 00 70 6d 02 00 e8 c0 b2 2c 51 6b 0d 00 00 00 00 00 00 e0 ba 04 00 d0 89 0c 00 32 04 c8 d3 00 00 00 00 00 00 00 c0 f5 08 00 a0 23 79 0a 40 04 00 00 00 00 00 00 00 d7 24 Data Ascii: .nNf]YN(3 Dpr.`YtN@5>B2v\L@pA</\T.,pm,Qk2#y@$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	49741	199.255.242.12	443	5228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 21:37:29 UTC	440	OUT	GET /hpp/?v-r=uidl&v-uiId=0 HTTP/1.1 Host: hostedpayments.merchante.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSION=MDVmYjk5NjgtYzQxMi00Yzg5LThlMzctZmI0ODdiNGQwZGQx
2024-09-19 21:37:30 UTC	477	IN	HTTP/1.1 200 OK Date: Thu, 19 Sep 2024 21:37:30 GMT Content-Type: application/json;charset=UTF-8 Content-Length: 35 Connection: close Server: nginx Vary: Accept-Encoding cache-control: no-cache x-content-type-options: nosniff x-xss-protection: 1; mode=block strict-transport-security: max-age=31536000 ; includeSubDomains x-envoy-upstream-service-time: 45 Strict-Transport-Security: max-age=31536000 X-Frame-Options: sameorigin X-Content-Type-Options: nosniff
2024-09-19 21:37:30 UTC	35	IN	Data Raw: 66 6f 72 28 3b 3b 29 3b 5b 7b 22 73 79 6e 63 49 64 22 3a 32 2c 22 63 6c 69 65 6e 74 49 64 22 3a 31 7d 5d Data Ascii: for(;;);[{"syncId":2,"clientId":1}]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	49740	199.255.242.12	443	5228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 21:37:29 UTC	441	OUT	GET /hpp/images/ic_close.png HTTP/1.1 Host: hostedpayments.merchante.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSION=MDVmYjk5NjgtYzQxMi00Yzg5LThlMzctZmI0ODdiNGQwZGQx
2024-09-19 21:37:30 UTC	484	IN	HTTP/1.1 200 OK Date: Thu, 19 Sep 2024 21:37:30 GMT Content-Type: image/png Content-Length: 152 Connection: close Server: nginx cache-control: max-age=3600 last-modified: Thu, 01 Jan 1970 00:00:01 GMT x-content-type-options: nosniff x-xss-protection: 1; mode=block strict-transport-security: max-age=31536000 ; includeSubDomains x-envoy-upstream-service-time: 55 Strict-Transport-Security: max-age=31536000 X-Frame-Options: sameorigin X-Content-Type-Options: nosniff
2024-09-19 21:37:30 UTC	152	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 08 00 00 00 08 08 06 00 00 00 c4 0f be 8b 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 52 49 44 41 54 18 19 63 f8 ff ff 3f 37 10 9b 30 a0 01 90 18 48 8e 01 ca 78 09 a4 ed 61 6a 40 6c 20 06 89 41 34 22 09 80 24 40 18 45 03 58 23 92 04 8a 24 13 cc 58 bc 34 92 6e 90 f1 20 8c 30 05 c8 01 b9 16 21 00 34 0a c8 b7 87 8a 99 80 38 78 bd 09 00 ef 19 79 ef e7 48 bd 6e 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsRGBRIDATc?70Hxaj@l A4"$@EX#$X4n 0!48xyHnIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	49742	199.255.242.12	443	5228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 21:37:30 UTC	493	OUT	GET /hpp/VAADIN/dynamic/resource/0/1894b183-40e1-42c6-9557-c9f55fb8d605/logo.png HTTP/1.1 Host: hostedpayments.merchante.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSION=MDVmYjk5NjgtYzQxMi00Yzg5LThlMzctZmI0ODdiNGQwZGQx
2024-09-19 21:37:30 UTC	499	IN	HTTP/1.1 200 OK Date: Thu, 19 Sep 2024 21:37:30 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Server: nginx cache-control: no-cache pragma: no-cache expires: Thu, 01 Jan 1970 00:00:00 GMT x-content-type-options: nosniff x-xss-protection: 1; mode=block strict-transport-security: max-age=31536000 ; includeSubDomains x-envoy-upstream-service-time: 58 Strict-Transport-Security: max-age=31536000 X-Frame-Options: sameorigin X-Content-Type-Options: nosniff
2024-09-19 21:37:30 UTC	11143	IN	Data Raw: 32 62 37 66 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 57 01 a0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: 2b7fJFIF``CCW"}!1AQa"q
2024-09-19 21:37:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	49743	199.255.242.12	443	5228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 21:37:30 UTC	451	OUT	GET /hpp/images/background/flubber.png HTTP/1.1 Host: hostedpayments.merchante.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSION=MDVmYjk5NjgtYzQxMi00Yzg5LThlMzctZmI0ODdiNGQwZGQx
2024-09-19 21:37:30 UTC	487	IN	HTTP/1.1 200 OK Date: Thu, 19 Sep 2024 21:37:30 GMT Content-Type: image/png Content-Length: 29169 Connection: close Server: nginx cache-control: max-age=3600 last-modified: Thu, 01 Jan 1970 00:00:01 GMT x-content-type-options: nosniff x-xss-protection: 1; mode=block strict-transport-security: max-age=31536000 ; includeSubDomains x-envoy-upstream-service-time: 140 Strict-Transport-Security: max-age=31536000 X-Frame-Options: sameorigin X-Content-Type-Options: nosniff
2024-09-19 21:37:30 UTC	15892	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 08 00 00 00 06 40 08 06 00 00 00 ed c0 a2 01 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 71 86 49 44 41 54 78 01 ec dd e9 76 1b d7 b1 80 d1 43 90 22 ad d8 cb d1 e0 f7 7f 43 11 f3 3c f0 de 6a 07 36 45 71 02 01 34 ba ab f7 5e 0b a1 23 2b 71 fe 04 80 fa 7c a7 ea ea e1 ff 15 e0 24 76 bb 5d 59 af d7 c5 ff ad 00 80 bd 9b 9b 9b ea 75 6a ab d5 aa fa ee 71 2e e7 fa df 0d 00 00 00 6f 99 4e a7 65 38 1c 16 00 0e d7 2b c0 c9 f4 7a bd 72 7b 7b 5b fd 04 00 08 db ed f6 e4 71 60 1c fc 9f f3 f0 3f 5c 5d 5d 15 00 00 00 b8 84 df 7f ff bd fc f1 c7 1f 05 80 c3 39 a5 84 13 8b 87 e5 11 01 7c fa f4 a9 00 00 c4 e1 ff Data Ascii: PNGIHDR@pHYssRGBgAMAaqIDATxvC"C<j6Eq4^#+q\|$v]Yujq.oNe8+zr{{[q`?\]]9\|
2024-09-19 21:37:30 UTC	13277	IN	Data Raw: 40 2e 01 dc 6e b7 00 00 00 00 00 00 00 f8 9e 00 00 4e 66 5d d7 98 e7 59 04 00 00 00 00 00 00 00 fc 8b 00 00 4e 28 1f ff 33 02 c8 18 00 00 00 00 00 00 00 20 09 00 e0 a4 44 00 00 00 00 00 00 00 c0 f7 04 00 70 72 19 01 b4 d6 02 00 00 00 00 00 00 e8 9b 00 00 2e 60 59 16 11 00 00 00 00 00 00 00 74 4e 00 00 17 91 11 40 ad 35 00 00 00 00 00 00 80 3e 09 00 e0 42 32 00 c8 10 e0 76 bb 05 00 00 00 00 00 00 d0 17 01 00 5c 4c 9e 02 10 01 00 00 00 00 00 00 40 7f 04 00 70 41 eb ba c6 3c cf db 2f 00 00 00 00 00 00 d0 07 01 00 5c 54 2e 00 88 00 00 00 00 00 00 00 a0 1f 02 00 b8 b8 8c 00 f2 2c 00 00 00 00 00 00 00 70 6d 02 00 e8 c0 b2 2c 51 6b 0d 00 00 00 00 00 00 e0 ba 04 00 d0 89 0c 00 32 04 c8 d3 00 00 00 00 00 00 00 c0 f5 08 00 a0 23 79 0a 40 04 00 00 00 00 00 00 00 d7 Data Ascii: @.nNf]YN(3 Dpr.`YtN@5>B2v\L@pA</\T.,pm,Qk2#y@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	49745	199.255.242.14	443	5228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 21:37:30 UTC	632	OUT	GET /favicon.ico HTTP/1.1 Host: hostedpayments.merchante.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hostedpayments.merchante.com/hpp/checkout/sign-in Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-19 21:37:30 UTC	223	IN	HTTP/1.1 404 Not Found Date: Thu, 19 Sep 2024 21:37:30 GMT Content-Length: 0 Connection: close Server: nginx Strict-Transport-Security: max-age=31536000 X-Frame-Options: sameorigin X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.6	49750	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-09-19 21:37:40 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 75 57 46 51 48 4e 52 73 78 45 47 67 5a 63 58 6b 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 33 62 34 61 30 32 37 62 33 36 36 66 34 61 32 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: uWFQHNRsxEGgZcXk.1Context: a3b4a027b366f4a2
2024-09-19 21:37:40 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-19 21:37:40 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 75 57 46 51 48 4e 52 73 78 45 47 67 5a 63 58 6b 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 33 62 34 61 30 32 37 62 33 36 36 66 34 61 32 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 55 30 77 30 6c 36 66 59 30 47 49 30 2b 74 6e 72 65 31 54 64 2f 35 36 44 6e 62 2b 43 68 59 7a 35 2f 74 52 50 73 6d 2b 79 48 4a 66 33 69 54 43 33 63 46 45 6f 49 47 41 56 31 78 46 30 34 49 55 65 4b 6f 65 4c 6b 49 35 62 57 4b 4b 69 61 6a 2b 4c 33 50 4d 65 75 2b 70 4c 4c 42 79 72 42 71 70 34 58 4f 76 47 38 48 30 6a 6b 6c 76 4d 53 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: uWFQHNRsxEGgZcXk.2Context: a3b4a027b366f4a2<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAU0w0l6fY0GI0+tnre1Td/56Dnb+ChYz5/tRPsm+yHJf3iTC3cFEoIGAV1xF04IUeKoeLkI5bWKKiaj+L3PMeu+pLLByrBqp4XOvG8H0jklvMS
2024-09-19 21:37:40 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 75 57 46 51 48 4e 52 73 78 45 47 67 5a 63 58 6b 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 33 62 34 61 30 32 37 62 33 36 36 66 34 61 32 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: uWFQHNRsxEGgZcXk.3Context: a3b4a027b366f4a2<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-09-19 21:37:40 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-19 21:37:40 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 6b 55 4c 44 6d 41 31 31 6a 55 79 31 68 76 50 74 4f 33 77 59 47 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: kULDmA11jUy1hvPtO3wYGg.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.6	63180	199.255.242.14	443	5228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 21:37:45 UTC	760	OUT	POST /hpp/?v-r=uidl&v-uiId=0 HTTP/1.1 Host: hostedpayments.merchante.com Connection: keep-alive Content-Length: 338 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/json; charset=UTF-8 Accept: / Origin: https://hostedpayments.merchante.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://hostedpayments.merchante.com/hpp/checkout/sign-in Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSION=MDVmYjk5NjgtYzQxMi00Yzg5LThlMzctZmI0ODdiNGQwZGQx
2024-09-19 21:37:45 UTC	338	OUT	Data Raw: 7b 22 63 73 72 66 54 6f 6b 65 6e 22 3a 22 62 33 33 62 38 63 63 33 2d 37 38 38 65 2d 34 63 37 66 2d 39 62 61 37 2d 32 62 61 63 35 32 39 61 61 66 36 62 22 2c 22 72 70 63 22 3a 5b 7b 22 74 79 70 65 22 3a 22 65 76 65 6e 74 22 2c 22 6e 6f 64 65 22 3a 32 33 2c 22 65 76 65 6e 74 22 3a 22 63 6c 69 63 6b 22 2c 22 64 61 74 61 22 3a 7b 22 65 76 65 6e 74 2e 73 68 69 66 74 4b 65 79 22 3a 66 61 6c 73 65 2c 22 65 76 65 6e 74 2e 6d 65 74 61 4b 65 79 22 3a 66 61 6c 73 65 2c 22 65 76 65 6e 74 2e 64 65 74 61 69 6c 22 3a 31 2c 22 65 76 65 6e 74 2e 63 74 72 6c 4b 65 79 22 3a 66 61 6c 73 65 2c 22 65 76 65 6e 74 2e 63 6c 69 65 6e 74 58 22 3a 36 39 33 2c 22 65 76 65 6e 74 2e 63 6c 69 65 6e 74 59 22 3a 34 36 32 2c 22 65 76 65 6e 74 2e 61 6c 74 4b 65 79 22 3a 66 61 6c 73 65 2c 22 Data Ascii: {"csrfToken":"b33b8cc3-788e-4c7f-9ba7-2bac529aaf6b","rpc":[{"type":"event","node":23,"event":"click","data":{"event.shiftKey":false,"event.metaKey":false,"event.detail":1,"event.ctrlKey":false,"event.clientX":693,"event.clientY":462,"event.altKey":false,"
2024-09-19 21:37:48 UTC	480	IN	HTTP/1.1 200 OK Date: Thu, 19 Sep 2024 21:37:48 GMT Content-Type: application/json;charset=UTF-8 Content-Length: 387 Connection: close Server: nginx Vary: Accept-Encoding cache-control: no-cache x-content-type-options: nosniff x-xss-protection: 1; mode=block strict-transport-security: max-age=31536000 ; includeSubDomains x-envoy-upstream-service-time: 2858 Strict-Transport-Security: max-age=31536000 X-Frame-Options: sameorigin X-Content-Type-Options: nosniff
2024-09-19 21:37:48 UTC	387	IN	Data Raw: 66 6f 72 28 3b 3b 29 3b 5b 7b 22 73 79 6e 63 49 64 22 3a 33 2c 22 63 6c 69 65 6e 74 49 64 22 3a 32 2c 22 63 68 61 6e 67 65 73 22 3a 5b 7b 22 6e 6f 64 65 22 3a 34 2c 22 74 79 70 65 22 3a 22 63 6c 65 61 72 22 2c 22 66 65 61 74 22 3a 32 7d 2c 7b 22 6e 6f 64 65 22 3a 34 2c 22 74 79 70 65 22 3a 22 73 70 6c 69 63 65 22 2c 22 66 65 61 74 22 3a 32 2c 22 69 6e 64 65 78 22 3a 30 2c 22 61 64 64 4e 6f 64 65 73 22 3a 5b 33 31 5d 7d 2c 7b 22 6e 6f 64 65 22 3a 34 2c 22 74 79 70 65 22 3a 22 70 75 74 22 2c 22 6b 65 79 22 3a 22 63 6f 6c 6f 72 22 2c 22 66 65 61 74 22 3a 31 32 2c 22 76 61 6c 75 65 22 3a 22 72 65 64 22 7d 2c 7b 22 6e 6f 64 65 22 3a 34 2c 22 74 79 70 65 22 3a 22 70 75 74 22 2c 22 6b 65 79 22 3a 22 66 6f 6e 74 2d 73 69 7a 65 22 2c 22 66 65 61 74 22 3a 31 32 2c Data Ascii: for(;;);[{"syncId":3,"clientId":2,"changes":[{"node":4,"type":"clear","feat":2},{"node":4,"type":"splice","feat":2,"index":0,"addNodes":[31]},{"node":4,"type":"put","key":"color","feat":12,"value":"red"},{"node":4,"type":"put","key":"font-size","feat":12,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.6	63182	199.255.242.12	443	5228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 21:37:49 UTC	440	OUT	GET /hpp/?v-r=uidl&v-uiId=0 HTTP/1.1 Host: hostedpayments.merchante.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSION=MDVmYjk5NjgtYzQxMi00Yzg5LThlMzctZmI0ODdiNGQwZGQx
2024-09-19 21:37:49 UTC	477	IN	HTTP/1.1 200 OK Date: Thu, 19 Sep 2024 21:37:49 GMT Content-Type: application/json;charset=UTF-8 Content-Length: 35 Connection: close Server: nginx Vary: Accept-Encoding cache-control: no-cache x-content-type-options: nosniff x-xss-protection: 1; mode=block strict-transport-security: max-age=31536000 ; includeSubDomains x-envoy-upstream-service-time: 49 Strict-Transport-Security: max-age=31536000 X-Frame-Options: sameorigin X-Content-Type-Options: nosniff
2024-09-19 21:37:49 UTC	35	IN	Data Raw: 66 6f 72 28 3b 3b 29 3b 5b 7b 22 73 79 6e 63 49 64 22 3a 34 2c 22 63 6c 69 65 6e 74 49 64 22 3a 32 7d 5d Data Ascii: for(;;);[{"syncId":4,"clientId":2}]

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.6	63183	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-09-19 21:37:51 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 61 6d 6b 4a 2b 7a 4f 58 5a 55 32 48 76 39 34 4f 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 32 32 61 65 30 34 39 38 31 38 65 34 61 34 39 38 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: amkJ+zOXZU2Hv94O.1Context: 22ae049818e4a498
2024-09-19 21:37:51 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-19 21:37:51 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 61 6d 6b 4a 2b 7a 4f 58 5a 55 32 48 76 39 34 4f 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 32 32 61 65 30 34 39 38 31 38 65 34 61 34 39 38 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 55 30 77 30 6c 36 66 59 30 47 49 30 2b 74 6e 72 65 31 54 64 2f 35 36 44 6e 62 2b 43 68 59 7a 35 2f 74 52 50 73 6d 2b 79 48 4a 66 33 69 54 43 33 63 46 45 6f 49 47 41 56 31 78 46 30 34 49 55 65 4b 6f 65 4c 6b 49 35 62 57 4b 4b 69 61 6a 2b 4c 33 50 4d 65 75 2b 70 4c 4c 42 79 72 42 71 70 34 58 4f 76 47 38 48 30 6a 6b 6c 76 4d 53 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: amkJ+zOXZU2Hv94O.2Context: 22ae049818e4a498<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAU0w0l6fY0GI0+tnre1Td/56Dnb+ChYz5/tRPsm+yHJf3iTC3cFEoIGAV1xF04IUeKoeLkI5bWKKiaj+L3PMeu+pLLByrBqp4XOvG8H0jklvMS
2024-09-19 21:37:51 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 61 6d 6b 4a 2b 7a 4f 58 5a 55 32 48 76 39 34 4f 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 32 32 61 65 30 34 39 38 31 38 65 34 61 34 39 38 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: amkJ+zOXZU2Hv94O.3Context: 22ae049818e4a498<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-09-19 21:37:51 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-19 21:37:51 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 7a 47 47 31 62 6b 75 52 68 45 43 75 4a 2f 42 63 30 43 4d 4f 49 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: zGG1bkuRhECuJ/Bc0CMOIQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.6	63184	199.255.242.14	443	5228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 21:37:53 UTC	760	OUT	POST /hpp/?v-r=uidl&v-uiId=0 HTTP/1.1 Host: hostedpayments.merchante.com Connection: keep-alive Content-Length: 264 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/json; charset=UTF-8 Accept: / Origin: https://hostedpayments.merchante.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://hostedpayments.merchante.com/hpp/checkout/sign-in Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSION=MDVmYjk5NjgtYzQxMi00Yzg5LThlMzctZmI0ODdiNGQwZGQx
2024-09-19 21:37:53 UTC	264	OUT	Data Raw: 7b 22 63 73 72 66 54 6f 6b 65 6e 22 3a 22 62 33 33 62 38 63 63 33 2d 37 38 38 65 2d 34 63 37 66 2d 39 62 61 37 2d 32 62 61 63 35 32 39 61 61 66 36 62 22 2c 22 72 70 63 22 3a 5b 7b 22 74 79 70 65 22 3a 22 6e 61 76 69 67 61 74 69 6f 6e 22 2c 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 63 68 65 63 6b 6f 75 74 2f 72 65 67 69 73 74 65 72 22 2c 22 73 74 61 74 65 22 3a 7b 22 68 72 65 66 22 3a 22 68 74 74 70 73 3a 2f 2f 68 6f 73 74 65 64 70 61 79 6d 65 6e 74 73 2e 6d 65 72 63 68 61 6e 74 65 2e 63 6f 6d 2f 68 70 70 2f 63 68 65 63 6b 6f 75 74 2f 72 65 67 69 73 74 65 72 22 2c 22 73 63 72 6f 6c 6c 50 6f 73 69 74 69 6f 6e 58 22 3a 30 2c 22 73 63 72 6f 6c 6c 50 6f 73 69 74 69 6f 6e 59 22 3a 30 7d 2c 22 6c 69 6e 6b 22 3a 31 7d 5d 2c 22 73 79 6e 63 49 64 22 3a 31 2c 22 63 6c 69 Data Ascii: {"csrfToken":"b33b8cc3-788e-4c7f-9ba7-2bac529aaf6b","rpc":[{"type":"navigation","location":"checkout/register","state":{"href":"https://hostedpayments.merchante.com/hpp/checkout/register","scrollPositionX":0,"scrollPositionY":0},"link":1}],"syncId":1,"cli
2024-09-19 21:37:53 UTC	480	IN	HTTP/1.1 200 OK Date: Thu, 19 Sep 2024 21:37:53 GMT Content-Type: application/json;charset=UTF-8 Content-Length: 10472 Connection: close Server: nginx Vary: Accept-Encoding cache-control: no-cache x-content-type-options: nosniff x-xss-protection: 1; mode=block strict-transport-security: max-age=31536000 ; includeSubDomains x-envoy-upstream-service-time: 60 Strict-Transport-Security: max-age=31536000 X-Frame-Options: sameorigin X-Content-Type-Options: nosniff
2024-09-19 21:37:53 UTC	10472	IN	Data Raw: 66 6f 72 28 3b 3b 29 3b 5b 7b 22 73 79 6e 63 49 64 22 3a 35 2c 22 63 6c 69 65 6e 74 49 64 22 3a 33 2c 22 63 6f 6e 73 74 61 6e 74 73 22 3a 7b 22 78 4b 4a 4c 46 47 45 72 4d 35 49 3d 22 3a 7b 22 7d 63 68 65 63 6b 65 64 22 3a 66 61 6c 73 65 7d 7d 2c 22 63 68 61 6e 67 65 73 22 3a 5b 7b 22 6e 6f 64 65 22 3a 31 2c 22 74 79 70 65 22 3a 22 73 70 6c 69 63 65 22 2c 22 66 65 61 74 22 3a 32 2c 22 69 6e 64 65 78 22 3a 30 2c 22 72 65 6d 6f 76 65 22 3a 31 7d 2c 7b 22 6e 6f 64 65 22 3a 31 2c 22 74 79 70 65 22 3a 22 73 70 6c 69 63 65 22 2c 22 66 65 61 74 22 3a 32 2c 22 69 6e 64 65 78 22 3a 30 2c 22 61 64 64 4e 6f 64 65 73 22 3a 5b 35 31 5d 7d 2c 7b 22 6e 6f 64 65 22 3a 31 2c 22 74 79 70 65 22 3a 22 72 65 6d 6f 76 65 22 2c 22 66 65 61 74 22 3a 34 2c 22 6b 65 79 22 3a 22 6b Data Ascii: for(;;);[{"syncId":5,"clientId":3,"constants":{"xKJLFGErM5I=":{"}checked":false}},"changes":[{"node":1,"type":"splice","feat":2,"index":0,"remove":1},{"node":1,"type":"splice","feat":2,"index":0,"addNodes":[51]},{"node":1,"type":"remove","feat":4,"key":"k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.6	63186	199.255.242.14	443	5228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 21:37:54 UTC	440	OUT	GET /hpp/?v-r=uidl&v-uiId=0 HTTP/1.1 Host: hostedpayments.merchante.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSION=MDVmYjk5NjgtYzQxMi00Yzg5LThlMzctZmI0ODdiNGQwZGQx
2024-09-19 21:37:54 UTC	477	IN	HTTP/1.1 200 OK Date: Thu, 19 Sep 2024 21:37:54 GMT Content-Type: application/json;charset=UTF-8 Content-Length: 35 Connection: close Server: nginx Vary: Accept-Encoding cache-control: no-cache x-content-type-options: nosniff x-xss-protection: 1; mode=block strict-transport-security: max-age=31536000 ; includeSubDomains x-envoy-upstream-service-time: 53 Strict-Transport-Security: max-age=31536000 X-Frame-Options: sameorigin X-Content-Type-Options: nosniff
2024-09-19 21:37:54 UTC	35	IN	Data Raw: 66 6f 72 28 3b 3b 29 3b 5b 7b 22 73 79 6e 63 49 64 22 3a 36 2c 22 63 6c 69 65 6e 74 49 64 22 3a 33 7d 5d Data Ascii: for(;;);[{"syncId":6,"clientId":3}]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.6	63189	199.255.242.14	443	5228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 21:37:59 UTC	760	OUT	POST /hpp/?v-r=uidl&v-uiId=0 HTTP/1.1 Host: hostedpayments.merchante.com Connection: keep-alive Content-Length: 106 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/json; charset=UTF-8 Accept: / Origin: https://hostedpayments.merchante.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://hostedpayments.merchante.com/hpp/checkout/sign-in Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSION=MDVmYjk5NjgtYzQxMi00Yzg5LThlMzctZmI0ODdiNGQwZGQx
2024-09-19 21:37:59 UTC	106	OUT	Data Raw: 7b 22 63 73 72 66 54 6f 6b 65 6e 22 3a 22 62 33 33 62 38 63 63 33 2d 37 38 38 65 2d 34 63 37 66 2d 39 62 61 37 2d 32 62 61 63 35 32 39 61 61 66 36 62 22 2c 22 72 70 63 22 3a 5b 5d 2c 22 73 79 6e 63 49 64 22 3a 31 2c 22 63 6c 69 65 6e 74 49 64 22 3a 33 2c 22 72 65 73 79 6e 63 68 72 6f 6e 69 7a 65 22 3a 74 72 75 65 7d Data Ascii: {"csrfToken":"b33b8cc3-788e-4c7f-9ba7-2bac529aaf6b","rpc":[],"syncId":1,"clientId":3,"resynchronize":true}
2024-09-19 21:37:59 UTC	479	IN	HTTP/1.1 200 OK Date: Thu, 19 Sep 2024 21:37:59 GMT Content-Type: application/json;charset=UTF-8 Content-Length: 9581 Connection: close Server: nginx Vary: Accept-Encoding cache-control: no-cache x-content-type-options: nosniff x-xss-protection: 1; mode=block strict-transport-security: max-age=31536000 ; includeSubDomains x-envoy-upstream-service-time: 63 Strict-Transport-Security: max-age=31536000 X-Frame-Options: sameorigin X-Content-Type-Options: nosniff
2024-09-19 21:37:59 UTC	9581	IN	Data Raw: 66 6f 72 28 3b 3b 29 3b 5b 7b 22 73 79 6e 63 49 64 22 3a 37 2c 22 72 65 73 79 6e 63 68 72 6f 6e 69 7a 65 22 3a 74 72 75 65 2c 22 63 6c 69 65 6e 74 49 64 22 3a 34 2c 22 63 68 61 6e 67 65 73 22 3a 5b 7b 22 6e 6f 64 65 22 3a 31 2c 22 74 79 70 65 22 3a 22 61 74 74 61 63 68 22 7d 2c 7b 22 6e 6f 64 65 22 3a 31 2c 22 74 79 70 65 22 3a 22 70 75 74 22 2c 22 6b 65 79 22 3a 22 74 61 67 22 2c 22 66 65 61 74 22 3a 30 2c 22 76 61 6c 75 65 22 3a 22 62 6f 64 79 22 7d 2c 7b 22 6e 6f 64 65 22 3a 31 2c 22 74 79 70 65 22 3a 22 73 70 6c 69 63 65 22 2c 22 66 65 61 74 22 3a 32 2c 22 69 6e 64 65 78 22 3a 30 2c 22 61 64 64 4e 6f 64 65 73 22 3a 5b 35 31 5d 7d 2c 7b 22 6e 6f 64 65 22 3a 31 2c 22 74 79 70 65 22 3a 22 65 6d 70 74 79 22 2c 22 66 65 61 74 54 79 70 65 22 3a 74 72 75 65 Data Ascii: for(;;);[{"syncId":7,"resynchronize":true,"clientId":4,"changes":[{"node":1,"type":"attach"},{"node":1,"type":"put","key":"tag","feat":0,"value":"body"},{"node":1,"type":"splice","feat":2,"index":0,"addNodes":[51]},{"node":1,"type":"empty","featType":true

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.6	63191	199.255.242.14	443	5228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 21:38:00 UTC	760	OUT	POST /hpp/?v-r=uidl&v-uiId=0 HTTP/1.1 Host: hostedpayments.merchante.com Connection: keep-alive Content-Length: 359 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/json; charset=UTF-8 Accept: / Origin: https://hostedpayments.merchante.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://hostedpayments.merchante.com/hpp/checkout/sign-in Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSION=MDVmYjk5NjgtYzQxMi00Yzg5LThlMzctZmI0ODdiNGQwZGQx
2024-09-19 21:38:00 UTC	359	OUT	Data Raw: 7b 22 63 73 72 66 54 6f 6b 65 6e 22 3a 22 62 33 33 62 38 63 63 33 2d 37 38 38 65 2d 34 63 37 66 2d 39 62 61 37 2d 32 62 61 63 35 32 39 61 61 66 36 62 22 2c 22 72 70 63 22 3a 5b 7b 22 74 79 70 65 22 3a 22 63 68 61 6e 6e 65 6c 22 2c 22 6e 6f 64 65 22 3a 33 32 2c 22 63 68 61 6e 6e 65 6c 22 3a 34 2c 22 61 72 67 73 22 3a 5b 6e 75 6c 6c 5d 7d 2c 7b 22 74 79 70 65 22 3a 22 63 68 61 6e 6e 65 6c 22 2c 22 6e 6f 64 65 22 3a 33 33 2c 22 63 68 61 6e 6e 65 6c 22 3a 34 2c 22 61 72 67 73 22 3a 5b 6e 75 6c 6c 5d 7d 2c 7b 22 74 79 70 65 22 3a 22 63 68 61 6e 6e 65 6c 22 2c 22 6e 6f 64 65 22 3a 34 37 2c 22 63 68 61 6e 6e 65 6c 22 3a 34 2c 22 61 72 67 73 22 3a 5b 6e 75 6c 6c 5d 7d 2c 7b 22 74 79 70 65 22 3a 22 63 68 61 6e 6e 65 6c 22 2c 22 6e 6f 64 65 22 3a 34 38 2c 22 63 68 Data Ascii: {"csrfToken":"b33b8cc3-788e-4c7f-9ba7-2bac529aaf6b","rpc":[{"type":"channel","node":32,"channel":4,"args":[null]},{"type":"channel","node":33,"channel":4,"args":[null]},{"type":"channel","node":47,"channel":4,"args":[null]},{"type":"channel","node":48,"ch
2024-09-19 21:38:01 UTC	477	IN	HTTP/1.1 200 OK Date: Thu, 19 Sep 2024 21:38:01 GMT Content-Type: application/json;charset=UTF-8 Content-Length: 35 Connection: close Server: nginx Vary: Accept-Encoding cache-control: no-cache x-content-type-options: nosniff x-xss-protection: 1; mode=block strict-transport-security: max-age=31536000 ; includeSubDomains x-envoy-upstream-service-time: 45 Strict-Transport-Security: max-age=31536000 X-Frame-Options: sameorigin X-Content-Type-Options: nosniff
2024-09-19 21:38:01 UTC	35	IN	Data Raw: 66 6f 72 28 3b 3b 29 3b 5b 7b 22 73 79 6e 63 49 64 22 3a 38 2c 22 63 6c 69 65 6e 74 49 64 22 3a 35 7d 5d Data Ascii: for(;;);[{"syncId":8,"clientId":5}]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.6	63190	199.255.242.14	443	5228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 21:38:01 UTC	762	OUT	GET /hpp/VAADIN/dynamic/resource/0/0eb3d227-c774-47f4-b47e-3b5da42b178a/logo.png HTTP/1.1 Host: hostedpayments.merchante.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hostedpayments.merchante.com/hpp/checkout/sign-in Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSION=MDVmYjk5NjgtYzQxMi00Yzg5LThlMzctZmI0ODdiNGQwZGQx
2024-09-19 21:38:01 UTC	499	IN	HTTP/1.1 200 OK Date: Thu, 19 Sep 2024 21:38:01 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Server: nginx cache-control: no-cache pragma: no-cache expires: Thu, 01 Jan 1970 00:00:00 GMT x-content-type-options: nosniff x-xss-protection: 1; mode=block strict-transport-security: max-age=31536000 ; includeSubDomains x-envoy-upstream-service-time: 49 Strict-Transport-Security: max-age=31536000 X-Frame-Options: sameorigin X-Content-Type-Options: nosniff
2024-09-19 21:38:01 UTC	11143	IN	Data Raw: 32 62 37 66 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 57 01 a0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: 2b7fJFIF``CCW"}!1AQa"q
2024-09-19 21:38:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.6	63192	199.255.242.14	443	5228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 21:38:01 UTC	440	OUT	GET /hpp/?v-r=uidl&v-uiId=0 HTTP/1.1 Host: hostedpayments.merchante.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSION=MDVmYjk5NjgtYzQxMi00Yzg5LThlMzctZmI0ODdiNGQwZGQx
2024-09-19 21:38:01 UTC	477	IN	HTTP/1.1 200 OK Date: Thu, 19 Sep 2024 21:38:01 GMT Content-Type: application/json;charset=UTF-8 Content-Length: 35 Connection: close Server: nginx Vary: Accept-Encoding cache-control: no-cache x-content-type-options: nosniff x-xss-protection: 1; mode=block strict-transport-security: max-age=31536000 ; includeSubDomains x-envoy-upstream-service-time: 52 Strict-Transport-Security: max-age=31536000 X-Frame-Options: sameorigin X-Content-Type-Options: nosniff
2024-09-19 21:38:01 UTC	35	IN	Data Raw: 66 6f 72 28 3b 3b 29 3b 5b 7b 22 73 79 6e 63 49 64 22 3a 39 2c 22 63 6c 69 65 6e 74 49 64 22 3a 35 7d 5d Data Ascii: for(;;);[{"syncId":9,"clientId":5}]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.6	63193	199.255.242.14	443	5228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 21:38:02 UTC	493	OUT	GET /hpp/VAADIN/dynamic/resource/0/0eb3d227-c774-47f4-b47e-3b5da42b178a/logo.png HTTP/1.1 Host: hostedpayments.merchante.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSION=MDVmYjk5NjgtYzQxMi00Yzg5LThlMzctZmI0ODdiNGQwZGQx
2024-09-19 21:38:02 UTC	499	IN	HTTP/1.1 200 OK Date: Thu, 19 Sep 2024 21:38:02 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Server: nginx cache-control: no-cache pragma: no-cache expires: Thu, 01 Jan 1970 00:00:00 GMT x-content-type-options: nosniff x-xss-protection: 1; mode=block strict-transport-security: max-age=31536000 ; includeSubDomains x-envoy-upstream-service-time: 68 Strict-Transport-Security: max-age=31536000 X-Frame-Options: sameorigin X-Content-Type-Options: nosniff
2024-09-19 21:38:02 UTC	11143	IN	Data Raw: 32 62 37 66 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 57 01 a0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: 2b7fJFIF``CCW"}!1AQa"q
2024-09-19 21:38:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.6	63194	199.255.242.14	443	5228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 21:38:02 UTC	440	OUT	GET /hpp/?v-r=uidl&v-uiId=0 HTTP/1.1 Host: hostedpayments.merchante.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSION=MDVmYjk5NjgtYzQxMi00Yzg5LThlMzctZmI0ODdiNGQwZGQx
2024-09-19 21:38:02 UTC	477	IN	HTTP/1.1 200 OK Date: Thu, 19 Sep 2024 21:38:02 GMT Content-Type: application/json;charset=UTF-8 Content-Length: 36 Connection: close Server: nginx Vary: Accept-Encoding cache-control: no-cache x-content-type-options: nosniff x-xss-protection: 1; mode=block strict-transport-security: max-age=31536000 ; includeSubDomains x-envoy-upstream-service-time: 69 Strict-Transport-Security: max-age=31536000 X-Frame-Options: sameorigin X-Content-Type-Options: nosniff
2024-09-19 21:38:02 UTC	36	IN	Data Raw: 66 6f 72 28 3b 3b 29 3b 5b 7b 22 73 79 6e 63 49 64 22 3a 31 30 2c 22 63 6c 69 65 6e 74 49 64 22 3a 35 7d 5d Data Ascii: for(;;);[{"syncId":10,"clientId":5}]

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.6	63195	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-09-19 21:38:04 UTC	70	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 34 0d 0a 4d 53 2d 43 56 3a 20 74 77 2b 77 4e 36 78 66 77 55 47 39 4c 43 71 78 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 63 62 66 61 62 31 30 37 38 62 64 35 37 66 0d 0a 0d 0a Data Ascii: CNT 1 CON 304MS-CV: tw+wN6xfwUG9LCqx.1Context: 3cbfab1078bd57f
2024-09-19 21:38:04 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-19 21:38:04 UTC	1083	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 30 0d 0a 4d 53 2d 43 56 3a 20 74 77 2b 77 4e 36 78 66 77 55 47 39 4c 43 71 78 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 63 62 66 61 62 31 30 37 38 62 64 35 37 66 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 55 30 77 30 6c 36 66 59 30 47 49 30 2b 74 6e 72 65 31 54 64 2f 35 36 44 6e 62 2b 43 68 59 7a 35 2f 74 52 50 73 6d 2b 79 48 4a 66 33 69 54 43 33 63 46 45 6f 49 47 41 56 31 78 46 30 34 49 55 65 4b 6f 65 4c 6b 49 35 62 57 4b 4b 69 61 6a 2b 4c 33 50 4d 65 75 2b 70 4c 4c 42 79 72 42 71 70 34 58 4f 76 47 38 48 30 6a 6b 6c 76 4d 53 5a Data Ascii: ATH 2 CON\DEVICE 1060MS-CV: tw+wN6xfwUG9LCqx.2Context: 3cbfab1078bd57f<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAU0w0l6fY0GI0+tnre1Td/56Dnb+ChYz5/tRPsm+yHJf3iTC3cFEoIGAV1xF04IUeKoeLkI5bWKKiaj+L3PMeu+pLLByrBqp4XOvG8H0jklvMSZ
2024-09-19 21:38:04 UTC	217	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 36 0d 0a 4d 53 2d 43 56 3a 20 74 77 2b 77 4e 36 78 66 77 55 47 39 4c 43 71 78 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 63 62 66 61 62 31 30 37 38 62 64 35 37 66 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 196MS-CV: tw+wN6xfwUG9LCqx.3Context: 3cbfab1078bd57f<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-09-19 21:38:05 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-19 21:38:05 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 62 6b 58 6a 31 63 69 4e 32 30 65 77 49 67 4c 46 73 68 51 6c 33 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: bkXj1ciN20ewIgLFshQl3w.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.6	63197	199.255.242.14	443	5228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 21:38:21 UTC	760	OUT	POST /hpp/?v-r=uidl&v-uiId=0 HTTP/1.1 Host: hostedpayments.merchante.com Connection: keep-alive Content-Length: 199 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/json; charset=UTF-8 Accept: / Origin: https://hostedpayments.merchante.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://hostedpayments.merchante.com/hpp/checkout/sign-in Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSION=MDVmYjk5NjgtYzQxMi00Yzg5LThlMzctZmI0ODdiNGQwZGQx
2024-09-19 21:38:21 UTC	199	OUT	Data Raw: 7b 22 63 73 72 66 54 6f 6b 65 6e 22 3a 22 62 33 33 62 38 63 63 33 2d 37 38 38 65 2d 34 63 37 66 2d 39 62 61 37 2d 32 62 61 63 35 32 39 61 61 66 36 62 22 2c 22 72 70 63 22 3a 5b 7b 22 74 79 70 65 22 3a 22 65 76 65 6e 74 22 2c 22 6e 6f 64 65 22 3a 33 33 2c 22 65 76 65 6e 74 22 3a 22 62 6c 75 72 22 7d 2c 7b 22 74 79 70 65 22 3a 22 6d 53 79 6e 63 22 2c 22 6e 6f 64 65 22 3a 34 36 2c 22 66 65 61 74 75 72 65 22 3a 31 2c 22 70 72 6f 70 65 72 74 79 22 3a 22 63 68 65 63 6b 65 64 22 2c 22 76 61 6c 75 65 22 3a 74 72 75 65 7d 5d 2c 22 73 79 6e 63 49 64 22 3a 38 2c 22 63 6c 69 65 6e 74 49 64 22 3a 35 7d Data Ascii: {"csrfToken":"b33b8cc3-788e-4c7f-9ba7-2bac529aaf6b","rpc":[{"type":"event","node":33,"event":"blur"},{"type":"mSync","node":46,"feature":1,"property":"checked","value":true}],"syncId":8,"clientId":5}
2024-09-19 21:38:21 UTC	477	IN	HTTP/1.1 200 OK Date: Thu, 19 Sep 2024 21:38:21 GMT Content-Type: application/json;charset=UTF-8 Content-Length: 36 Connection: close Server: nginx Vary: Accept-Encoding cache-control: no-cache x-content-type-options: nosniff x-xss-protection: 1; mode=block strict-transport-security: max-age=31536000 ; includeSubDomains x-envoy-upstream-service-time: 65 Strict-Transport-Security: max-age=31536000 X-Frame-Options: sameorigin X-Content-Type-Options: nosniff
2024-09-19 21:38:21 UTC	36	IN	Data Raw: 66 6f 72 28 3b 3b 29 3b 5b 7b 22 73 79 6e 63 49 64 22 3a 31 31 2c 22 63 6c 69 65 6e 74 49 64 22 3a 36 7d 5d Data Ascii: for(;;);[{"syncId":11,"clientId":6}]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.6	63198	199.255.242.14	443	5228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 21:38:22 UTC	440	OUT	GET /hpp/?v-r=uidl&v-uiId=0 HTTP/1.1 Host: hostedpayments.merchante.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSION=MDVmYjk5NjgtYzQxMi00Yzg5LThlMzctZmI0ODdiNGQwZGQx
2024-09-19 21:38:22 UTC	477	IN	HTTP/1.1 200 OK Date: Thu, 19 Sep 2024 21:38:22 GMT Content-Type: application/json;charset=UTF-8 Content-Length: 36 Connection: close Server: nginx Vary: Accept-Encoding cache-control: no-cache x-content-type-options: nosniff x-xss-protection: 1; mode=block strict-transport-security: max-age=31536000 ; includeSubDomains x-envoy-upstream-service-time: 58 Strict-Transport-Security: max-age=31536000 X-Frame-Options: sameorigin X-Content-Type-Options: nosniff
2024-09-19 21:38:22 UTC	36	IN	Data Raw: 66 6f 72 28 3b 3b 29 3b 5b 7b 22 73 79 6e 63 49 64 22 3a 31 32 2c 22 63 6c 69 65 6e 74 49 64 22 3a 36 7d 5d Data Ascii: for(;;);[{"syncId":12,"clientId":6}]

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.6	63200	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-09-19 21:38:24 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 75 56 63 4b 31 64 46 57 6b 6b 32 6c 6d 7a 6c 7a 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 31 61 37 38 65 38 64 64 64 61 32 62 36 66 39 61 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: uVcK1dFWkk2lmzlz.1Context: 1a78e8ddda2b6f9a
2024-09-19 21:38:24 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-19 21:38:24 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 75 56 63 4b 31 64 46 57 6b 6b 32 6c 6d 7a 6c 7a 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 31 61 37 38 65 38 64 64 64 61 32 62 36 66 39 61 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 55 30 77 30 6c 36 66 59 30 47 49 30 2b 74 6e 72 65 31 54 64 2f 35 36 44 6e 62 2b 43 68 59 7a 35 2f 74 52 50 73 6d 2b 79 48 4a 66 33 69 54 43 33 63 46 45 6f 49 47 41 56 31 78 46 30 34 49 55 65 4b 6f 65 4c 6b 49 35 62 57 4b 4b 69 61 6a 2b 4c 33 50 4d 65 75 2b 70 4c 4c 42 79 72 42 71 70 34 58 4f 76 47 38 48 30 6a 6b 6c 76 4d 53 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: uVcK1dFWkk2lmzlz.2Context: 1a78e8ddda2b6f9a<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAU0w0l6fY0GI0+tnre1Td/56Dnb+ChYz5/tRPsm+yHJf3iTC3cFEoIGAV1xF04IUeKoeLkI5bWKKiaj+L3PMeu+pLLByrBqp4XOvG8H0jklvMS
2024-09-19 21:38:24 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 75 56 63 4b 31 64 46 57 6b 6b 32 6c 6d 7a 6c 7a 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 31 61 37 38 65 38 64 64 64 61 32 62 36 66 39 61 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: uVcK1dFWkk2lmzlz.3Context: 1a78e8ddda2b6f9a<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-09-19 21:38:24 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-19 21:38:24 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 46 61 7a 5a 66 45 4f 47 75 30 75 49 4a 68 66 61 76 77 79 76 57 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: FazZfEOGu0uIJhfavwyvWQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.6	63201	199.255.242.14	443	5228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 21:38:27 UTC	760	OUT	POST /hpp/?v-r=uidl&v-uiId=0 HTTP/1.1 Host: hostedpayments.merchante.com Connection: keep-alive Content-Length: 126 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/json; charset=UTF-8 Accept: / Origin: https://hostedpayments.merchante.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://hostedpayments.merchante.com/hpp/checkout/sign-in Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSION=MDVmYjk5NjgtYzQxMi00Yzg5LThlMzctZmI0ODdiNGQwZGQx
2024-09-19 21:38:27 UTC	126	OUT	Data Raw: 7b 22 63 73 72 66 54 6f 6b 65 6e 22 3a 22 62 33 33 62 38 63 63 33 2d 37 38 38 65 2d 34 63 37 66 2d 39 62 61 37 2d 32 62 61 63 35 32 39 61 61 66 36 62 22 2c 22 72 70 63 22 3a 5b 7b 22 74 79 70 65 22 3a 22 65 76 65 6e 74 22 2c 22 6e 6f 64 65 22 3a 34 36 2c 22 65 76 65 6e 74 22 3a 22 62 6c 75 72 22 7d 5d 2c 22 73 79 6e 63 49 64 22 3a 38 2c 22 63 6c 69 65 6e 74 49 64 22 3a 36 7d Data Ascii: {"csrfToken":"b33b8cc3-788e-4c7f-9ba7-2bac529aaf6b","rpc":[{"type":"event","node":46,"event":"blur"}],"syncId":8,"clientId":6}
2024-09-19 21:38:27 UTC	477	IN	HTTP/1.1 200 OK Date: Thu, 19 Sep 2024 21:38:27 GMT Content-Type: application/json;charset=UTF-8 Content-Length: 36 Connection: close Server: nginx Vary: Accept-Encoding cache-control: no-cache x-content-type-options: nosniff x-xss-protection: 1; mode=block strict-transport-security: max-age=31536000 ; includeSubDomains x-envoy-upstream-service-time: 52 Strict-Transport-Security: max-age=31536000 X-Frame-Options: sameorigin X-Content-Type-Options: nosniff
2024-09-19 21:38:27 UTC	36	IN	Data Raw: 66 6f 72 28 3b 3b 29 3b 5b 7b 22 73 79 6e 63 49 64 22 3a 31 33 2c 22 63 6c 69 65 6e 74 49 64 22 3a 37 7d 5d Data Ascii: for(;;);[{"syncId":13,"clientId":7}]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.6	63202	199.255.242.14	443	5228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 21:38:28 UTC	440	OUT	GET /hpp/?v-r=uidl&v-uiId=0 HTTP/1.1 Host: hostedpayments.merchante.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSION=MDVmYjk5NjgtYzQxMi00Yzg5LThlMzctZmI0ODdiNGQwZGQx
2024-09-19 21:38:28 UTC	478	IN	HTTP/1.1 200 OK Date: Thu, 19 Sep 2024 21:38:28 GMT Content-Type: application/json;charset=UTF-8 Content-Length: 36 Connection: close Server: nginx Vary: Accept-Encoding cache-control: no-cache x-content-type-options: nosniff x-xss-protection: 1; mode=block strict-transport-security: max-age=31536000 ; includeSubDomains x-envoy-upstream-service-time: 106 Strict-Transport-Security: max-age=31536000 X-Frame-Options: sameorigin X-Content-Type-Options: nosniff
2024-09-19 21:38:28 UTC	36	IN	Data Raw: 66 6f 72 28 3b 3b 29 3b 5b 7b 22 73 79 6e 63 49 64 22 3a 31 34 2c 22 63 6c 69 65 6e 74 49 64 22 3a 37 7d 5d Data Ascii: for(;;);[{"syncId":14,"clientId":7}]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.6	63203	199.255.242.14	443	5228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 21:38:33 UTC	760	OUT	POST /hpp/?v-r=uidl&v-uiId=0 HTTP/1.1 Host: hostedpayments.merchante.com Connection: keep-alive Content-Length: 106 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/json; charset=UTF-8 Accept: / Origin: https://hostedpayments.merchante.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://hostedpayments.merchante.com/hpp/checkout/sign-in Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSION=MDVmYjk5NjgtYzQxMi00Yzg5LThlMzctZmI0ODdiNGQwZGQx
2024-09-19 21:38:33 UTC	106	OUT	Data Raw: 7b 22 63 73 72 66 54 6f 6b 65 6e 22 3a 22 62 33 33 62 38 63 63 33 2d 37 38 38 65 2d 34 63 37 66 2d 39 62 61 37 2d 32 62 61 63 35 32 39 61 61 66 36 62 22 2c 22 72 70 63 22 3a 5b 5d 2c 22 73 79 6e 63 49 64 22 3a 38 2c 22 63 6c 69 65 6e 74 49 64 22 3a 37 2c 22 72 65 73 79 6e 63 68 72 6f 6e 69 7a 65 22 3a 74 72 75 65 7d Data Ascii: {"csrfToken":"b33b8cc3-788e-4c7f-9ba7-2bac529aaf6b","rpc":[],"syncId":8,"clientId":7,"resynchronize":true}
2024-09-19 21:38:33 UTC	479	IN	HTTP/1.1 200 OK Date: Thu, 19 Sep 2024 21:38:33 GMT Content-Type: application/json;charset=UTF-8 Content-Length: 9581 Connection: close Server: nginx Vary: Accept-Encoding cache-control: no-cache x-content-type-options: nosniff x-xss-protection: 1; mode=block strict-transport-security: max-age=31536000 ; includeSubDomains x-envoy-upstream-service-time: 47 Strict-Transport-Security: max-age=31536000 X-Frame-Options: sameorigin X-Content-Type-Options: nosniff
2024-09-19 21:38:33 UTC	9581	IN	Data Raw: 66 6f 72 28 3b 3b 29 3b 5b 7b 22 73 79 6e 63 49 64 22 3a 31 35 2c 22 72 65 73 79 6e 63 68 72 6f 6e 69 7a 65 22 3a 74 72 75 65 2c 22 63 6c 69 65 6e 74 49 64 22 3a 38 2c 22 63 68 61 6e 67 65 73 22 3a 5b 7b 22 6e 6f 64 65 22 3a 31 2c 22 74 79 70 65 22 3a 22 61 74 74 61 63 68 22 7d 2c 7b 22 6e 6f 64 65 22 3a 31 2c 22 74 79 70 65 22 3a 22 70 75 74 22 2c 22 6b 65 79 22 3a 22 74 61 67 22 2c 22 66 65 61 74 22 3a 30 2c 22 76 61 6c 75 65 22 3a 22 62 6f 64 79 22 7d 2c 7b 22 6e 6f 64 65 22 3a 31 2c 22 74 79 70 65 22 3a 22 73 70 6c 69 63 65 22 2c 22 66 65 61 74 22 3a 32 2c 22 69 6e 64 65 78 22 3a 30 2c 22 61 64 64 4e 6f 64 65 73 22 3a 5b 35 31 5d 7d 2c 7b 22 6e 6f 64 65 22 3a 31 2c 22 74 79 70 65 22 3a 22 65 6d 70 74 79 22 2c 22 66 65 61 74 54 79 70 65 22 3a 74 72 75 Data Ascii: for(;;);[{"syncId":15,"resynchronize":true,"clientId":8,"changes":[{"node":1,"type":"attach"},{"node":1,"type":"put","key":"tag","feat":0,"value":"body"},{"node":1,"type":"splice","feat":2,"index":0,"addNodes":[51]},{"node":1,"type":"empty","featType":tru

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.6	63204	199.255.242.14	443	5228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 21:38:34 UTC	760	OUT	POST /hpp/?v-r=uidl&v-uiId=0 HTTP/1.1 Host: hostedpayments.merchante.com Connection: keep-alive Content-Length: 360 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/json; charset=UTF-8 Accept: / Origin: https://hostedpayments.merchante.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://hostedpayments.merchante.com/hpp/checkout/sign-in Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSION=MDVmYjk5NjgtYzQxMi00Yzg5LThlMzctZmI0ODdiNGQwZGQx
2024-09-19 21:38:34 UTC	360	OUT	Data Raw: 7b 22 63 73 72 66 54 6f 6b 65 6e 22 3a 22 62 33 33 62 38 63 63 33 2d 37 38 38 65 2d 34 63 37 66 2d 39 62 61 37 2d 32 62 61 63 35 32 39 61 61 66 36 62 22 2c 22 72 70 63 22 3a 5b 7b 22 74 79 70 65 22 3a 22 63 68 61 6e 6e 65 6c 22 2c 22 6e 6f 64 65 22 3a 33 32 2c 22 63 68 61 6e 6e 65 6c 22 3a 36 2c 22 61 72 67 73 22 3a 5b 6e 75 6c 6c 5d 7d 2c 7b 22 74 79 70 65 22 3a 22 63 68 61 6e 6e 65 6c 22 2c 22 6e 6f 64 65 22 3a 33 33 2c 22 63 68 61 6e 6e 65 6c 22 3a 36 2c 22 61 72 67 73 22 3a 5b 6e 75 6c 6c 5d 7d 2c 7b 22 74 79 70 65 22 3a 22 63 68 61 6e 6e 65 6c 22 2c 22 6e 6f 64 65 22 3a 34 37 2c 22 63 68 61 6e 6e 65 6c 22 3a 36 2c 22 61 72 67 73 22 3a 5b 6e 75 6c 6c 5d 7d 2c 7b 22 74 79 70 65 22 3a 22 63 68 61 6e 6e 65 6c 22 2c 22 6e 6f 64 65 22 3a 34 38 2c 22 63 68 Data Ascii: {"csrfToken":"b33b8cc3-788e-4c7f-9ba7-2bac529aaf6b","rpc":[{"type":"channel","node":32,"channel":6,"args":[null]},{"type":"channel","node":33,"channel":6,"args":[null]},{"type":"channel","node":47,"channel":6,"args":[null]},{"type":"channel","node":48,"ch
2024-09-19 21:38:34 UTC	477	IN	HTTP/1.1 200 OK Date: Thu, 19 Sep 2024 21:38:34 GMT Content-Type: application/json;charset=UTF-8 Content-Length: 36 Connection: close Server: nginx Vary: Accept-Encoding cache-control: no-cache x-content-type-options: nosniff x-xss-protection: 1; mode=block strict-transport-security: max-age=31536000 ; includeSubDomains x-envoy-upstream-service-time: 45 Strict-Transport-Security: max-age=31536000 X-Frame-Options: sameorigin X-Content-Type-Options: nosniff
2024-09-19 21:38:34 UTC	36	IN	Data Raw: 66 6f 72 28 3b 3b 29 3b 5b 7b 22 73 79 6e 63 49 64 22 3a 31 36 2c 22 63 6c 69 65 6e 74 49 64 22 3a 39 7d 5d Data Ascii: for(;;);[{"syncId":16,"clientId":9}]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.6	63205	199.255.242.14	443	5228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 21:38:34 UTC	440	OUT	GET /hpp/?v-r=uidl&v-uiId=0 HTTP/1.1 Host: hostedpayments.merchante.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSION=MDVmYjk5NjgtYzQxMi00Yzg5LThlMzctZmI0ODdiNGQwZGQx
2024-09-19 21:38:34 UTC	477	IN	HTTP/1.1 200 OK Date: Thu, 19 Sep 2024 21:38:34 GMT Content-Type: application/json;charset=UTF-8 Content-Length: 36 Connection: close Server: nginx Vary: Accept-Encoding cache-control: no-cache x-content-type-options: nosniff x-xss-protection: 1; mode=block strict-transport-security: max-age=31536000 ; includeSubDomains x-envoy-upstream-service-time: 51 Strict-Transport-Security: max-age=31536000 X-Frame-Options: sameorigin X-Content-Type-Options: nosniff
2024-09-19 21:38:34 UTC	36	IN	Data Raw: 66 6f 72 28 3b 3b 29 3b 5b 7b 22 73 79 6e 63 49 64 22 3a 31 37 2c 22 63 6c 69 65 6e 74 49 64 22 3a 39 7d 5d Data Ascii: for(;;);[{"syncId":17,"clientId":9}]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.6	63206	199.255.242.14	443	5228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 21:38:35 UTC	440	OUT	GET /hpp/?v-r=uidl&v-uiId=0 HTTP/1.1 Host: hostedpayments.merchante.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSION=MDVmYjk5NjgtYzQxMi00Yzg5LThlMzctZmI0ODdiNGQwZGQx
2024-09-19 21:38:35 UTC	477	IN	HTTP/1.1 200 OK Date: Thu, 19 Sep 2024 21:38:35 GMT Content-Type: application/json;charset=UTF-8 Content-Length: 36 Connection: close Server: nginx Vary: Accept-Encoding cache-control: no-cache x-content-type-options: nosniff x-xss-protection: 1; mode=block strict-transport-security: max-age=31536000 ; includeSubDomains x-envoy-upstream-service-time: 50 Strict-Transport-Security: max-age=31536000 X-Frame-Options: sameorigin X-Content-Type-Options: nosniff
2024-09-19 21:38:35 UTC	36	IN	Data Raw: 66 6f 72 28 3b 3b 29 3b 5b 7b 22 73 79 6e 63 49 64 22 3a 31 38 2c 22 63 6c 69 65 6e 74 49 64 22 3a 39 7d 5d Data Ascii: for(;;);[{"syncId":18,"clientId":9}]

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.6	52605	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-09-19 21:38:47 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 48 75 7a 6b 38 54 4b 43 63 6b 32 70 75 63 4c 53 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 65 62 39 34 39 63 62 35 36 33 31 62 64 38 36 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: Huzk8TKCck2pucLS.1Context: 6eb949cb5631bd86
2024-09-19 21:38:47 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-19 21:38:47 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 48 75 7a 6b 38 54 4b 43 63 6b 32 70 75 63 4c 53 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 65 62 39 34 39 63 62 35 36 33 31 62 64 38 36 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 55 30 77 30 6c 36 66 59 30 47 49 30 2b 74 6e 72 65 31 54 64 2f 35 36 44 6e 62 2b 43 68 59 7a 35 2f 74 52 50 73 6d 2b 79 48 4a 66 33 69 54 43 33 63 46 45 6f 49 47 41 56 31 78 46 30 34 49 55 65 4b 6f 65 4c 6b 49 35 62 57 4b 4b 69 61 6a 2b 4c 33 50 4d 65 75 2b 70 4c 4c 42 79 72 42 71 70 34 58 4f 76 47 38 48 30 6a 6b 6c 76 4d 53 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: Huzk8TKCck2pucLS.2Context: 6eb949cb5631bd86<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAU0w0l6fY0GI0+tnre1Td/56Dnb+ChYz5/tRPsm+yHJf3iTC3cFEoIGAV1xF04IUeKoeLkI5bWKKiaj+L3PMeu+pLLByrBqp4XOvG8H0jklvMS
2024-09-19 21:38:47 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 48 75 7a 6b 38 54 4b 43 63 6b 32 70 75 63 4c 53 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 65 62 39 34 39 63 62 35 36 33 31 62 64 38 36 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: Huzk8TKCck2pucLS.3Context: 6eb949cb5631bd86<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-09-19 21:38:48 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-19 21:38:48 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 44 79 30 41 4a 4e 71 4e 4e 6b 4b 46 77 4c 6f 6a 39 59 46 50 4a 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: Dy0AJNqNNkKFwLoj9YFPJw.0Payload parsing failed.

Target ID:	0
Start time:	17:37:13
Start date:	19/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	17:37:17
Start date:	19/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2092 --field-trial-handle=1988,i,13048715024528848359,6778295781523489837,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	17:37:20
Start date:	19/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://7448842.extforms.netsuite.com/app/site/hosting/scriptlet.nl?script=58&deploy=1&compid=7448842&ns-at=AAEJ7tMQMbCwPDeyw2Y0j790_uuZRbdHKbwhV-8_UjaZd6k4SyM&mesaltid=507850-000582201242607-dffb3aeb-d&meskey=U2FsdGVkX1%2FJjNhRKxx1mC9UVYLu1zQgwRQuZe2t5Hn59ibRKnhALqIMzea9TPW6X5u7JLMrzNGMeKQ8t"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://hostedpayments.merchante.com/hpp/checkout/sign-in	LLM: Score: 8 Reasons: The domain name'merchante.com' does not match the legitimate domain name associated with the identified brand 'SHARPS COMPLIANCE', which is'sharpscompliance.com'. The presence of a subdomain 'hostedpayments' and a partial domain match suggests that the webpage may be a phishing site. DOM: 1.0.pages.csv
Source: https://hostedpayments.merchante.com/hpp/checkout/sign-in	LLM: Score: 8 Reasons: The domain name'merchante.com' does not match the brand name 'SHARPS'. The presence of a subdomain 'hostedpayments' suggests that the website may be a third-party service, which is a common tactic used by phishing sites. Additionally, the URL does not have any obvious misspellings or suspicious characters, but the partial domain match and lack of brand association with the legitimate domain are concerning indicators. DOM: 1.2.pages.csv

Source: https://hostedpayments.merchante.com/hpp/checkout/sign-in	HTTP Parser: No favicon
Source: https://hostedpayments.merchante.com/hpp/checkout/sign-in	HTTP Parser: No favicon
Source: https://hostedpayments.merchante.com/hpp/checkout/sign-in	HTTP Parser: No favicon

Source: global traffic	TCP traffic: 192.168.2.6:52602 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.6:63179 -> 162.159.36.2:53

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199

Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /hpp/VAADIN/build/webcomponentsjs/webcomponents-loader.js HTTP/1.1Host: hostedpayments.merchante.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hostedpayments.merchante.com/hpp/checkout/sign-inAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSION=MDVmYjk5NjgtYzQxMi00Yzg5LThlMzctZmI0ODdiNGQwZGQx
Source: global traffic	HTTP traffic detected: GET /hpp/VAADIN/build/vaadin-bundle-9936da12bdae75e3b436.cache.js HTTP/1.1Host: hostedpayments.merchante.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://hostedpayments.merchante.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://hostedpayments.merchante.com/hpp/checkout/sign-inAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSION=MDVmYjk5NjgtYzQxMi00Yzg5LThlMzctZmI0ODdiNGQwZGQx
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hostedpayments.merchante.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hpp/VAADIN/static/client/client-4AE3B7490A0EC7EE13B41C91E0150FBA.cache.js HTTP/1.1Host: hostedpayments.merchante.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hostedpayments.merchante.com/hpp/checkout/sign-inAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSION=MDVmYjk5NjgtYzQxMi00Yzg5LThlMzctZmI0ODdiNGQwZGQx
Source: global traffic	HTTP traffic detected: GET /hpp/VAADIN/build/webcomponentsjs/webcomponents-loader.js HTTP/1.1Host: hostedpayments.merchante.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSION=MDVmYjk5NjgtYzQxMi00Yzg5LThlMzctZmI0ODdiNGQwZGQx
Source: global traffic	HTTP traffic detected: GET /hpp/VAADIN/static/client/client-4AE3B7490A0EC7EE13B41C91E0150FBA.cache.js HTTP/1.1Host: hostedpayments.merchante.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSION=MDVmYjk5NjgtYzQxMi00Yzg5LThlMzctZmI0ODdiNGQwZGQx
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hpp/images/ic_close.png HTTP/1.1Host: hostedpayments.merchante.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hostedpayments.merchante.com/hpp/checkout/sign-inAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSION=MDVmYjk5NjgtYzQxMi00Yzg5LThlMzctZmI0ODdiNGQwZGQx
Source: global traffic	HTTP traffic detected: GET /hpp/VAADIN/build/vaadin-bundle-9936da12bdae75e3b436.cache.js HTTP/1.1Host: hostedpayments.merchante.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSION=MDVmYjk5NjgtYzQxMi00Yzg5LThlMzctZmI0ODdiNGQwZGQx
Source: global traffic	HTTP traffic detected: GET /hpp/VAADIN/dynamic/resource/0/1894b183-40e1-42c6-9557-c9f55fb8d605/logo.png HTTP/1.1Host: hostedpayments.merchante.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hostedpayments.merchante.com/hpp/checkout/sign-inAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSION=MDVmYjk5NjgtYzQxMi00Yzg5LThlMzctZmI0ODdiNGQwZGQx
Source: global traffic	HTTP traffic detected: GET /hpp/images/background/flubber.png HTTP/1.1Host: hostedpayments.merchante.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hostedpayments.merchante.com/hpp/checkout/sign-inAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSION=MDVmYjk5NjgtYzQxMi00Yzg5LThlMzctZmI0ODdiNGQwZGQx
Source: global traffic	HTTP traffic detected: GET /hpp/?v-r=uidl&v-uiId=0 HTTP/1.1Host: hostedpayments.merchante.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSION=MDVmYjk5NjgtYzQxMi00Yzg5LThlMzctZmI0ODdiNGQwZGQx
Source: global traffic	HTTP traffic detected: GET /hpp/images/ic_close.png HTTP/1.1Host: hostedpayments.merchante.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSION=MDVmYjk5NjgtYzQxMi00Yzg5LThlMzctZmI0ODdiNGQwZGQx
Source: global traffic	HTTP traffic detected: GET /hpp/VAADIN/dynamic/resource/0/1894b183-40e1-42c6-9557-c9f55fb8d605/logo.png HTTP/1.1Host: hostedpayments.merchante.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSION=MDVmYjk5NjgtYzQxMi00Yzg5LThlMzctZmI0ODdiNGQwZGQx
Source: global traffic	HTTP traffic detected: GET /hpp/images/background/flubber.png HTTP/1.1Host: hostedpayments.merchante.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSION=MDVmYjk5NjgtYzQxMi00Yzg5LThlMzctZmI0ODdiNGQwZGQx
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: hostedpayments.merchante.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hostedpayments.merchante.com/hpp/checkout/sign-inAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hpp/?v-r=uidl&v-uiId=0 HTTP/1.1Host: hostedpayments.merchante.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSION=MDVmYjk5NjgtYzQxMi00Yzg5LThlMzctZmI0ODdiNGQwZGQx
Source: global traffic	HTTP traffic detected: GET /hpp/?v-r=uidl&v-uiId=0 HTTP/1.1Host: hostedpayments.merchante.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSION=MDVmYjk5NjgtYzQxMi00Yzg5LThlMzctZmI0ODdiNGQwZGQx
Source: global traffic	HTTP traffic detected: GET /hpp/VAADIN/dynamic/resource/0/0eb3d227-c774-47f4-b47e-3b5da42b178a/logo.png HTTP/1.1Host: hostedpayments.merchante.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hostedpayments.merchante.com/hpp/checkout/sign-inAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSION=MDVmYjk5NjgtYzQxMi00Yzg5LThlMzctZmI0ODdiNGQwZGQx
Source: global traffic	HTTP traffic detected: GET /hpp/?v-r=uidl&v-uiId=0 HTTP/1.1Host: hostedpayments.merchante.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSION=MDVmYjk5NjgtYzQxMi00Yzg5LThlMzctZmI0ODdiNGQwZGQx
Source: global traffic	HTTP traffic detected: GET /hpp/VAADIN/dynamic/resource/0/0eb3d227-c774-47f4-b47e-3b5da42b178a/logo.png HTTP/1.1Host: hostedpayments.merchante.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSION=MDVmYjk5NjgtYzQxMi00Yzg5LThlMzctZmI0ODdiNGQwZGQx
Source: global traffic	HTTP traffic detected: GET /hpp/?v-r=uidl&v-uiId=0 HTTP/1.1Host: hostedpayments.merchante.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSION=MDVmYjk5NjgtYzQxMi00Yzg5LThlMzctZmI0ODdiNGQwZGQx
Source: global traffic	HTTP traffic detected: GET /hpp/?v-r=uidl&v-uiId=0 HTTP/1.1Host: hostedpayments.merchante.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSION=MDVmYjk5NjgtYzQxMi00Yzg5LThlMzctZmI0ODdiNGQwZGQx
Source: global traffic	HTTP traffic detected: GET /hpp/?v-r=uidl&v-uiId=0 HTTP/1.1Host: hostedpayments.merchante.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSION=MDVmYjk5NjgtYzQxMi00Yzg5LThlMzctZmI0ODdiNGQwZGQx
Source: global traffic	HTTP traffic detected: GET /hpp/?v-r=uidl&v-uiId=0 HTTP/1.1Host: hostedpayments.merchante.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSION=MDVmYjk5NjgtYzQxMi00Yzg5LThlMzctZmI0ODdiNGQwZGQx
Source: global traffic	HTTP traffic detected: GET /hpp/?v-r=uidl&v-uiId=0 HTTP/1.1Host: hostedpayments.merchante.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSION=MDVmYjk5NjgtYzQxMi00Yzg5LThlMzctZmI0ODdiNGQwZGQx

Source: global traffic	DNS traffic detected: DNS query: 7448842.extforms.netsuite.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: hostedpayments.merchante.com
Source: global traffic	DNS traffic detected: DNS query: 18.31.95.13.in-addr.arpa

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 51

Chrome Cache Entry: 52

Chrome Cache Entry: 53

Chrome Cache Entry: 54

Chrome Cache Entry: 55

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph