Loading Joe Sandbox Report ...

Edit tour

Windows Analysis Report
https://metamask-support.web.app/

Overview

General Information

Sample URL:	https://metamask-support.web.app/
Analysis ID:	1516719
Infos:

Detection

Score:	64
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Detected clear text password fields (password is not hidden)

Detected non-DNS traffic on DNS port

HTML body contains low number of good links

HTML title does not match URL

Stores files to the Windows start menu directory

Classification

×

Process Tree

System is w10x64

chrome.exe (PID: 3812 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3992 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2540 --field-trial-handle=2492,i,15226367244816082001,1689044093451093101,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2836 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://metamask-support.web.app/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://metamask-support.web.app/

Avira URL Cloud: detection malicious, Label: phishing

Antivirus detection for URL or domain

Source: https://metamask-support.web.app/logo192.png	Avira URL Cloud: Label: phishing
Source: https://metamask-support.web.app/static/js/main.48dd4429.js	Avira URL Cloud: Label: phishing
Source: https://metamask-support.web.app/favicon.ico	Avira URL Cloud: Label: phishing
Source: https://metamask-support.web.app/static/css/main.5392d7b8.css	Avira URL Cloud: Label: phishing
Source: https://metamask-support.web.app/static/media/metamask_main.53f2bee2f357c4247916f6ee01a2332b.svg	Avira URL Cloud: Label: phishing
Source: https://metamask-support.web.app/manifest.json	Avira URL Cloud: Label: phishing

Phishing

AI detected phishing page

Source: https://metamask-support.web.app/

LLM: Score: 9 Reasons: The root domain 'web.app' does not match the official MetaMask domain 'metamask.io'., The subdomain 'metamask-support' is likely an attempt to mimic official support pages., '.web.app' is not associated with MetaMask or Ethereum Mainnet, raising suspicions of phishing., There are no known associations between MetaMask or Ethereum Mainnet and the domain 'web.app'. DOM: 1.0.pages.csv

Source: https://metamask-support.web.app/

HTTP Parser: <input type="text"... for password input

Source: https://metamask-support.web.app/

HTTP Parser: Number of links: 0

Source: https://metamask-support.web.app/

HTTP Parser: Title: React App does not match URL

Source: https://metamask-support.web.app/

HTTP Parser: No <meta name="author".. found

Source: https://metamask-support.web.app/

HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:53339 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:53344 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.5:53336 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: metamask-support.web.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/main.48dd4429.js HTTP/1.1Host: metamask-support.web.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://metamask-support.web.app/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/css/main.5392d7b8.css HTTP/1.1Host: metamask-support.web.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://metamask-support.web.app/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/main.48dd4429.js HTTP/1.1Host: metamask-support.web.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/media/metamask_main.53f2bee2f357c4247916f6ee01a2332b.svg HTTP/1.1Host: metamask-support.web.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://metamask-support.web.app/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /manifest.json HTTP/1.1Host: metamask-support.web.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://metamask-support.web.app/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/media/metamask_main.53f2bee2f357c4247916f6ee01a2332b.svg HTTP/1.1Host: metamask-support.web.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: metamask-support.web.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://metamask-support.web.app/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logo192.png HTTP/1.1Host: metamask-support.web.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://metamask-support.web.app/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: metamask-support.web.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logo192.png HTTP/1.1Host: metamask-support.web.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /faqs HTTP/1.1Host: metamask.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /faqs/ HTTP/1.1Host: metamask.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/EuclidCircularB-Regular-WebXL.woff2 HTTP/1.1Host: metamask.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://metamask.iosec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://metamask.io/faqs/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/EuclidCircularB-Bold-WebXL.woff2 HTTP/1.1Host: metamask.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://metamask.iosec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://metamask.io/faqs/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AzZMxHTbQDOQD8c1J/a2e89f0e-f467-4542-bfea-30ea2c1a6648/osano.js HTTP/1.1Host: cmp.osano.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://metamask.io/faqs/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /9sy2a0egs6zh/4zJfzJbG3kTDSk5Wo4RJI1/1b363263141cf629b28155e2625b56c9/mm-logo.svg HTTP/1.1Host: images.ctfassets.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://metamask.io/faqs/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /9sy2a0egs6zh/4zJfzJbG3kTDSk5Wo4RJI1/1b363263141cf629b28155e2625b56c9/mm-logo.svg HTTP/1.1Host: images.ctfassets.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uwt.js HTTP/1.1Host: static.ads-twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://metamask.io/faqs/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AzZMxHTbQDOQD8c1J/a2e89f0e-f467-4542-bfea-30ea2c1a6648/osano.js HTTP/1.1Host: cmp.osano.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/pixel.js HTTP/1.1Host: www.redditstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://metamask.io/faqs/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=0bc14146-8201-4499-a18e-0c054c9183f8&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=df68bdfa-c690-47be-960a-be5b92eda25d&tw_document_href=https%3A%2F%2Fmetamask.io%2Ffaqs%2F&tw_iframe_status=0&txn_id=oert2&type=javascript&version=2.3.30 HTTP/1.1Host: t.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://metamask.io/faqs/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uwt.js HTTP/1.1Host: static.ads-twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixels/t2_vjeg7kke/config HTTP/1.1Host: pixel-config.reddit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://metamask.ioSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://metamask.io/faqs/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/pixel.js HTTP/1.1Host: www.redditstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/conversions-config/v1/pixel/config/t2_8mqvi05zf_telemetry HTTP/1.1Host: www.redditstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://metamask.ioSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://metamask.io/faqs/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=0bc14146-8201-4499-a18e-0c054c9183f8&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=df68bdfa-c690-47be-960a-be5b92eda25d&tw_document_href=https%3A%2F%2Fmetamask.io%2Ffaqs%2F&tw_iframe_status=0&txn_id=oert2&type=javascript&version=2.3.30 HTTP/1.1Host: analytics.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://metamask.io/faqs/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rp.gif?ts=1727182571251&id=t2_vjeg7kke&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=eff1c192-9d83-4810-baa4-4e552783599e&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_5afed25b&dpm=&dpcc=&dprc= HTTP/1.1Host: alb.reddit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://metamask.io/faqs/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=0bc14146-8201-4499-a18e-0c054c9183f8&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=df68bdfa-c690-47be-960a-be5b92eda25d&tw_document_href=https%3A%2F%2Fmetamask.io%2Ffaqs%2F&tw_iframe_status=0&txn_id=oert2&type=javascript&version=2.3.30 HTTP/1.1Host: t.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: muc_ads=9feb2eed-e249-42d4-9cad-35dbc6dfc777; __cf_bm=nqHJZFSpPjQ3JAef8twD0ASqkbJHFb9NyiWdIKKBUH4-1727182572-1.0.1.1-a4AhXy7HVpHj8uWuJJVWsehI0E1K_iFOj1zyXu5ubQPwPPiPx_NhQ5otne_pmmUqRMXI3TOPLX02BPuuzeMH7g
Source: global traffic	HTTP traffic detected: GET /pixels/t2_vjeg7kke/config HTTP/1.1Host: pixel-config.reddit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/conversions-config/v1/pixel/config/t2_8mqvi05zf_telemetry HTTP/1.1Host: www.redditstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rp.gif?ts=1727182571253&id=t2_ffiwr7tji&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=eff1c192-9d83-4810-baa4-4e552783599e&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_5afed25b&dpm=&dpcc=&dprc= HTTP/1.1Host: alb.reddit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://metamask.io/faqs/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=0bc14146-8201-4499-a18e-0c054c9183f8&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=df68bdfa-c690-47be-960a-be5b92eda25d&tw_document_href=https%3A%2F%2Fmetamask.io%2Ffaqs%2F&tw_iframe_status=0&txn_id=oert2&type=javascript&version=2.3.30 HTTP/1.1Host: analytics.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id_marketing=v1%3A172718257265679307; guest_id_ads=v1%3A172718257265679307; personalization_id="v1_mDfoWTx7yAyAG/KSs+/mrQ=="; guest_id=v1%3A172718257265679307
Source: global traffic	HTTP traffic detected: GET /rp.gif?ts=1727182571257&id=t2_8mqvi05zf&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=eff1c192-9d83-4810-baa4-4e552783599e&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_5afed25b&dpm=&dpcc=&dprc= HTTP/1.1Host: alb.reddit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://metamask.io/faqs/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rp.gif?ts=1727182571251&id=t2_vjeg7kke&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=eff1c192-9d83-4810-baa4-4e552783599e&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_5afed25b&dpm=&dpcc=&dprc= HTTP/1.1Host: alb.reddit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rp.gif?ts=1727182571253&id=t2_ffiwr7tji&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=eff1c192-9d83-4810-baa4-4e552783599e&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_5afed25b&dpm=&dpcc=&dprc= HTTP/1.1Host: alb.reddit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rp.gif?ts=1727182571257&id=t2_8mqvi05zf&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=eff1c192-9d83-4810-baa4-4e552783599e&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_5afed25b&dpm=&dpcc=&dprc= HTTP/1.1Host: alb.reddit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_148.2.dr, chromecache_151.2.dr	String found in binary or memory: Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Uj:function(){e=zb()},ld:function(){d()}}};var gc=ja(["data-gtm-yt-inspected-"]),vC=["www.youtube.com","www.youtube-nocookie.com"],wC,xC=!1; equals www.youtube.com (Youtube)
Source: chromecache_151.2.dr	String found in binary or memory: N.getElementsByTagName("iframe"),la=R.length,na=0;na<la;na++)if(!u&&c(R[na],H.Ce)){WI("https://www.youtube.com/iframe_api");u=!0;break}})}}else E(v.vtp_gtmOnSuccess)}var q=["www.youtube.com","www.youtube-nocookie.com"],r={UNSTARTED:-1,ENDED:0,PLAYING:1,PAUSED:2,BUFFERING:3,CUED:5},t,u=!1;Y.__ytl=n;Y.__ytl.o="ytl";Y.__ytl.isVendorTemplate=!0;Y.__ytl.priorityOverride=0;Y.__ytl.isInfrastructure=!1; equals www.youtube.com (Youtube)
Source: chromecache_167.2.dr	String found in binary or memory: return b}tC.H="internal.enableAutoEventOnTimer";var gc=ja(["data-gtm-yt-inspected-"]),vC=["www.youtube.com","www.youtube-nocookie.com"],wC,xC=!1; equals www.youtube.com (Youtube)
Source: chromecache_174.2.dr	String found in binary or memory: s a quick demo to help you get started: <a href="https://www.youtube.com/watch?v=zeu-a-W2qJQ">https://youtu.be/zeu-a-W2qJQ </a></p></div></div></div></div></div></div></div><div class="Faq__FaqItem-sc-1oog2z8-0 eQeUqR"><div class="Faq__FaqItemInner-sc-1oog2z8-1 iVNbnE"><div class="Faq__QuestionItem-sc-1oog2z8-2 leNlJs">Why did my Swap fail?<div class="Faq__IconClose-sc-1oog2z8-5 bkjbQn icon"><div class="Faq__IconCloseInner-sc-1oog2z8-6 cUExjN"><svg fill="#000000" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" width="24px" height="24px"><path fill-rule="evenodd" d="M 11 2 L 11 11 L 2 11 L 2 13 L 11 13 L 11 22 L 13 22 L 13 13 L 22 13 L 22 11 L 13 11 L 13 2 Z"></path></svg></div></div></div><div class="Faq__AnswerItem-sc-1oog2z8-3 inlrYV"><div style="height:0;overflow:hidden" aria-hidden="true" class="rah-static rah-static--height-zero"><div><div class="Faq__AnswerItemInner-sc-1oog2z8-4 chLcLS anwser-item-inner"><div><p>A Swap may fail for various reasons, although the failure rate is low. The most common is when a transaction runs 'out of gas'. The <a href="https://support.metamask.io/transactions-and-gas/gas-fees/why-did-my-transaction-fail-with-an-out-of-gas-error-how-can-i-fix-it/">'out of gas' error</a> occurs when all the gas that was allocated for the transaction is consumed before the Swap could complete. To prevent an 'out of gas' transaction failure, we recommend using the default Network Fee amount that is provided by MetaMask. When a Swap fails, some of the gas fees may be consumed by the network, but the asset you wished to swap from will remain in your MetaMask wallet.</p> equals www.youtube.com (Youtube)
Source: chromecache_174.2.dr	String found in binary or memory: s a quick demo to help you get started: <a href=\"https://www.youtube.com/watch?v=zeu-a-W2qJQ\">https://youtu.be/zeu-a-W2qJQ </a></p>"}},{"@type":"Question","name":"Why did my Swap fail?","acceptedAnswer":{"@type":"Answer","text":"<p>A Swap may fail for various reasons, although the failure rate is low. The most common is when a transaction runs 'out of gas'. The <a href=\"https://support.metamask.io/transactions-and-gas/gas-fees/why-did-my-transaction-fail-with-an-out-of-gas-error-how-can-i-fix-it/\">'out of gas' error</a> occurs when all the gas that was allocated for the transaction is consumed before the Swap could complete. To prevent an 'out of gas' transaction failure, we recommend using the default Network Fee amount that is provided by MetaMask. When a Swap fails, some of the gas fees may be consumed by the network, but the asset you wished to swap from will remain in your MetaMask wallet.</p>\n<p>If a Swap fails, your funds will always be safe in your wallet. If your Swap fails more than once, please <a href=\"https://support.metamask.io/getting-started/how-to-contact-metamask-support/\">contact Support</a> so we can investigate the underlying cause.</p>"}},{"@type":"Question","name":"Why can equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: metamask-support.web.app
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: metamask.io
Source: global traffic	DNS traffic detected: DNS query: cmp.osano.com
Source: global traffic	DNS traffic detected: DNS query: images.ctfassets.net
Source: global traffic	DNS traffic detected: DNS query: static.ads-twitter.com
Source: global traffic	DNS traffic detected: DNS query: www.redditstatic.com
Source: global traffic	DNS traffic detected: DNS query: t.co
Source: global traffic	DNS traffic detected: DNS query: analytics.twitter.com
Source: global traffic	DNS traffic detected: DNS query: pixel-config.reddit.com
Source: global traffic	DNS traffic detected: DNS query: alb.reddit.com
Source: global traffic	DNS traffic detected: DNS query: w3-reporting-nel.reddit.com

Source: unknown

HTTP traffic detected: POST /reports HTTP/1.1Host: w3-reporting-nel.reddit.comConnection: keep-aliveContent-Length: 744Content-Type: application/reports+jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_174.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT
Source: chromecache_167.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_148.2.dr, chromecache_151.2.dr, chromecache_167.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_174.2.dr	String found in binary or memory: https://cmp.osano.com/AzZMxHTbQDOQD8c1J/a2e89f0e-f467-4542-bfea-30ea2c1a6648/osano.js
Source: chromecache_174.2.dr	String found in binary or memory: https://consensys.io/privacy-policy
Source: chromecache_174.2.dr	String found in binary or memory: https://consensys.io/terms-of-use
Source: chromecache_174.2.dr	String found in binary or memory: https://daneden.github.io/animate.css/
Source: chromecache_141.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw0aXpsog.woff2)
Source: chromecache_141.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw2aXpsog.woff2)
Source: chromecache_141.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw3aXpsog.woff2)
Source: chromecache_141.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aXo.woff2)
Source: chromecache_141.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw9aXpsog.woff2)
Source: chromecache_174.2.dr	String found in binary or memory: https://github.com/MetaMask
Source: chromecache_174.2.dr	String found in binary or memory: https://github.com/MetaMask/metamask-extension/issues/new/choose
Source: chromecache_174.2.dr	String found in binary or memory: https://github.com/MetaMask/metamask-mobile/issues/new/choose
Source: chromecache_151.2.dr	String found in binary or memory: https://google.com
Source: chromecache_151.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_174.2.dr	String found in binary or memory: https://metamask.io
Source: chromecache_174.2.dr	String found in binary or memory: https://metamask.io/faqs/
Source: chromecache_174.2.dr	String found in binary or memory: https://metamask.io/swaps/
Source: chromecache_174.2.dr	String found in binary or memory: https://metamask.zendesk.com/hc/en-us/articles/360018766351-How-to-use-the-Vault-Decryptor-with-the-
Source: chromecache_167.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_148.2.dr, chromecache_151.2.dr, chromecache_167.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_174.2.dr	String found in binary or memory: https://schema.org
Source: chromecache_151.2.dr	String found in binary or memory: https://static.ads-twitter.com/uwt.js
Source: chromecache_167.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_174.2.dr	String found in binary or memory: https://support.metamask.io
Source: chromecache_174.2.dr	String found in binary or memory: https://support.metamask.io/getting-started/how-to-contact-metamask-support/
Source: chromecache_174.2.dr	String found in binary or memory: https://support.metamask.io/getting-started/the-ethereum-address-format-and-why-it-matters-when-usin
Source: chromecache_174.2.dr	String found in binary or memory: https://support.metamask.io/managing-my-tokens/custom-tokens/how-to-display-tokens-in-metamask/
Source: chromecache_174.2.dr	String found in binary or memory: https://support.metamask.io/managing-my-wallet/accounts-and-addresses/how-to-copy-your-metamask-acco
Source: chromecache_174.2.dr	String found in binary or memory: https://support.metamask.io/managing-my-wallet/resetting-deleting-and-restoring/how-can-i-reset-my-p
Source: chromecache_174.2.dr	String found in binary or memory: https://support.metamask.io/managing-my-wallet/using-metamask/how-to-update-the-version-of-metamask/
Source: chromecache_174.2.dr	String found in binary or memory: https://support.metamask.io/metamask-portfolio/buy/how-to-buy-crypto-in-metamask/
Source: chromecache_174.2.dr	String found in binary or memory: https://support.metamask.io/privacy-and-security/hardware-wallet-hub/
Source: chromecache_174.2.dr	String found in binary or memory: https://support.metamask.io/privacy-and-security/what-is-a-secret-recovery-phrase-and-how-to-keep-yo
Source: chromecache_174.2.dr	String found in binary or memory: https://support.metamask.io/transactions-and-gas/gas-fees/why-did-my-transaction-fail-with-an-out-of
Source: chromecache_148.2.dr, chromecache_151.2.dr, chromecache_167.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_167.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_151.2.dr, chromecache_167.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_167.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_148.2.dr, chromecache_151.2.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_174.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_148.2.dr, chromecache_151.2.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_167.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_150.2.dr, chromecache_175.2.dr	String found in binary or memory: https://www.redditstatic.com/ads/8d515a58/pixel.js
Source: chromecache_148.2.dr, chromecache_151.2.dr	String found in binary or memory: https://www.redditstatic.com/ads/pixel.js
Source: chromecache_148.2.dr, chromecache_151.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_174.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=zeu-a-W2qJQ
Source: chromecache_174.2.dr	String found in binary or memory: https://youtu.be/zeu-a-W2qJQ

Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53383 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53360 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53357 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53339
Source: unknown	Network traffic detected: HTTP traffic on port 53374 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53380 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53366 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53338
Source: unknown	Network traffic detected: HTTP traffic on port 53339 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53363 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53340
Source: unknown	Network traffic detected: HTTP traffic on port 53377 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 53375 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53352 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53344
Source: unknown	Network traffic detected: HTTP traffic on port 53381 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53343
Source: unknown	Network traffic detected: HTTP traffic on port 53369 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53352
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 53355 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53378 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 53372 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53356
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53355
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53353
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53359
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53358
Source: unknown	Network traffic detected: HTTP traffic on port 53389 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53357
Source: unknown	Network traffic detected: HTTP traffic on port 53358 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53363
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53360
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 53373 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53344 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53366
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53365
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53364
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53369
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53370
Source: unknown	Network traffic detected: HTTP traffic on port 53364 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53374
Source: unknown	Network traffic detected: HTTP traffic on port 53338 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53373
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53372
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53371
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53376 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53370 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53353 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53378
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53377
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53376
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53375
Source: unknown	Network traffic detected: HTTP traffic on port 53387 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53379
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53381
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53380
Source: unknown	Network traffic detected: HTTP traffic on port 53384 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53384
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53383
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53382
Source: unknown	Network traffic detected: HTTP traffic on port 53356 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53390 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53371 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53389
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53388
Source: unknown	Network traffic detected: HTTP traffic on port 53365 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53387
Source: unknown	Network traffic detected: HTTP traffic on port 53388 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53391
Source: unknown	Network traffic detected: HTTP traffic on port 53359 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53390
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53391 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53343 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53382 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53340 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53379 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:53339 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:53344 version: TLS 1.2

Source: classification engine

Classification label: mal64.phis.win@22/68@46/18

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2540 --field-trial-handle=2492,i,15226367244816082001,1689044093451093101,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://metamask-support.web.app/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2540 --field-trial-handle=2492,i,15226367244816082001,1689044093451093101,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk			Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://metamask-support.web.app/	100%	Avira URL Cloud	phishing

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
https://stats.g.doubleclick.net/g/collect	0%	URL Reputation	safe
https://www.redditstatic.com/ads/pixel.js	0%	URL Reputation	safe
http://opensource.org/licenses/MIT	0%	URL Reputation	safe
https://schema.org	0%	URL Reputation	safe
https://cct.google/taggy/agent.js	0%	URL Reputation	safe
https://www.merchant-center-analytics.goog	0%	URL Reputation	safe
https://metamask.io/swaps/	0%	Avira URL Cloud	safe
https://metamask.io/faqs	0%	Avira URL Cloud	safe
https://w3-reporting-nel.reddit.com/reports	0%	Avira URL Cloud	safe
https://support.metamask.io/transactions-and-gas/gas-fees/why-did-my-transaction-fail-with-an-out-of	0%	Avira URL Cloud	safe
https://metamask-support.web.app/logo192.png	100%	Avira URL Cloud	phishing
https://metamask.zendesk.com/hc/en-us/articles/360018766351-How-to-use-the-Vault-Decryptor-with-the-	0%	Avira URL Cloud	safe
https://metamask-support.web.app/static/js/main.48dd4429.js	100%	Avira URL Cloud	phishing
https://github.com/MetaMask	0%	Avira URL Cloud	safe
https://support.metamask.io/managing-my-wallet/resetting-deleting-and-restoring/how-can-i-reset-my-p	0%	Avira URL Cloud	safe
https://support.metamask.io/privacy-and-security/hardware-wallet-hub/	0%	Avira URL Cloud	safe
https://github.com/MetaMask/metamask-extension/issues/new/choose	0%	Avira URL Cloud	safe
https://www.google.com	0%	Avira URL Cloud	safe
https://daneden.github.io/animate.css/	0%	Avira URL Cloud	safe
https://support.metamask.io/managing-my-wallet/accounts-and-addresses/how-to-copy-your-metamask-acco	0%	Avira URL Cloud	safe
https://support.metamask.io/privacy-and-security/what-is-a-secret-recovery-phrase-and-how-to-keep-yo	0%	Avira URL Cloud	safe
https://support.metamask.io/getting-started/how-to-contact-metamask-support/	0%	Avira URL Cloud	safe
https://www.redditstatic.com/ads/8d515a58/pixel.js	0%	Avira URL Cloud	safe
https://www.youtube.com/iframe_api	0%	Avira URL Cloud	safe
https://github.com/MetaMask/metamask-mobile/issues/new/choose	0%	Avira URL Cloud	safe
https://consensys.io/privacy-policy	0%	Avira URL Cloud	safe
https://images.ctfassets.net/9sy2a0egs6zh/4zJfzJbG3kTDSk5Wo4RJI1/1b363263141cf629b28155e2625b56c9/mm-logo.svg	0%	Avira URL Cloud	safe
https://metamask.io/fonts/EuclidCircularB-Regular-WebXL.woff2	0%	Avira URL Cloud	safe
https://support.metamask.io/metamask-portfolio/buy/how-to-buy-crypto-in-metamask/	0%	Avira URL Cloud	safe
https://consensys.io/terms-of-use	0%	Avira URL Cloud	safe
https://support.metamask.io/getting-started/the-ethereum-address-format-and-why-it-matters-when-usin	0%	Avira URL Cloud	safe
https://pixel-config.reddit.com/pixels/t2_vjeg7kke/config	0%	Avira URL Cloud	safe
https://analytics.twitter.com/1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=0bc14146-8201-4499-a18e-0c054c9183f8&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=df68bdfa-c690-47be-960a-be5b92eda25d&tw_document_href=https%3A%2F%2Fmetamask.io%2Ffaqs%2F&tw_iframe_status=0&txn_id=oert2&type=javascript&version=2.3.30	0%	Avira URL Cloud	safe
https://metamask.io	0%	Avira URL Cloud	safe
https://alb.reddit.com/rp.gif?ts=1727182571257&id=t2_8mqvi05zf&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=eff1c192-9d83-4810-baa4-4e552783599e&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_5afed25b&dpm=&dpcc=&dprc=	0%	Avira URL Cloud	safe
https://googleads.g.doubleclick.net	0%	Avira URL Cloud	safe
https://support.metamask.io	0%	Avira URL Cloud	safe
https://support.metamask.io/managing-my-wallet/using-metamask/how-to-update-the-version-of-metamask/	0%	Avira URL Cloud	safe
https://metamask-support.web.app/favicon.ico	100%	Avira URL Cloud	phishing
https://www.youtube.com/watch?v=zeu-a-W2qJQ	0%	Avira URL Cloud	safe
https://td.doubleclick.net	0%	Avira URL Cloud	safe
https://support.metamask.io/managing-my-tokens/custom-tokens/how-to-display-tokens-in-metamask/	0%	Avira URL Cloud	safe
https://static.ads-twitter.com/uwt.js	0%	Avira URL Cloud	safe
https://metamask-support.web.app/static/css/main.5392d7b8.css	100%	Avira URL Cloud	phishing
https://metamask.io/fonts/EuclidCircularB-Bold-WebXL.woff2	0%	Avira URL Cloud	safe
https://metamask.io/faqs/	0%	Avira URL Cloud	safe
https://alb.reddit.com/rp.gif?ts=1727182571251&id=t2_vjeg7kke&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=eff1c192-9d83-4810-baa4-4e552783599e&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_5afed25b&dpm=&dpcc=&dprc=	0%	Avira URL Cloud	safe
https://metamask-support.web.app/static/media/metamask_main.53f2bee2f357c4247916f6ee01a2332b.svg	100%	Avira URL Cloud	phishing
https://t.co/1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=0bc14146-8201-4499-a18e-0c054c9183f8&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=df68bdfa-c690-47be-960a-be5b92eda25d&tw_document_href=https%3A%2F%2Fmetamask.io%2Ffaqs%2F&tw_iframe_status=0&txn_id=oert2&type=javascript&version=2.3.30	0%	Avira URL Cloud	safe
https://alb.reddit.com/rp.gif?ts=1727182571253&id=t2_ffiwr7tji&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=eff1c192-9d83-4810-baa4-4e552783599e&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_5afed25b&dpm=&dpcc=&dprc=	0%	Avira URL Cloud	safe
https://google.com	0%	Avira URL Cloud	safe
https://cmp.osano.com/AzZMxHTbQDOQD8c1J/a2e89f0e-f467-4542-bfea-30ea2c1a6648/osano.js	0%	Avira URL Cloud	safe
https://adservice.google.com/pagead/regclk?	0%	Avira URL Cloud	safe
https://www.redditstatic.com/ads/conversions-config/v1/pixel/config/t2_8mqvi05zf_telemetry	0%	Avira URL Cloud	safe
https://metamask-support.web.app/manifest.json	100%	Avira URL Cloud	phishing
https://youtu.be/zeu-a-W2qJQ	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
bg.microsoft.map.fastly.net	199.232.214.172	true	false		unknown
d3orhvfyxudxxq.cloudfront.net	13.33.187.2	true	false		unknown
dualstack.reddit.map.fastly.net	151.101.1.140	true	false		unknown
metamask.io	185.199.108.153	true	true		unknown
t.co	162.159.140.229	true	false		unknown
s.twitter.com	104.244.42.3	true	false		unknown
reddit.map.fastly.net	151.101.129.140	true	false		unknown
d2gt2ux04o03l1.cloudfront.net	18.164.52.93	true	false		unknown
www.google.com	142.250.186.164	true	false		unknown
metamask-support.web.app	199.36.158.100	true	false		unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false		unknown
platform.twitter.map.fastly.net	199.232.188.157	true	false		unknown
analytics.twitter.com	unknown	unknown	false		unknown
alb.reddit.com	unknown	unknown	false		unknown
static.ads-twitter.com	unknown	unknown	false		unknown
www.redditstatic.com	unknown	unknown	false		unknown
pixel-config.reddit.com	unknown	unknown	false		unknown
images.ctfassets.net	unknown	unknown	false		unknown
w3-reporting-nel.reddit.com	unknown	unknown	false		unknown
cmp.osano.com	unknown	unknown	false		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://metamask-support.web.app/static/js/main.48dd4429.js	false	Avira URL Cloud: phishing	unknown
https://metamask-support.web.app/logo192.png	false	Avira URL Cloud: phishing	unknown
https://www.redditstatic.com/ads/pixel.js	false	URL Reputation: safe	unknown
https://metamask.io/faqs	false	Avira URL Cloud: safe	unknown
https://w3-reporting-nel.reddit.com/reports	false	Avira URL Cloud: safe	unknown
https://images.ctfassets.net/9sy2a0egs6zh/4zJfzJbG3kTDSk5Wo4RJI1/1b363263141cf629b28155e2625b56c9/mm-logo.svg	false	Avira URL Cloud: safe	unknown
https://alb.reddit.com/rp.gif?ts=1727182571257&id=t2_8mqvi05zf&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=eff1c192-9d83-4810-baa4-4e552783599e&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_5afed25b&dpm=&dpcc=&dprc=	false	Avira URL Cloud: safe	unknown
https://analytics.twitter.com/1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=0bc14146-8201-4499-a18e-0c054c9183f8&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=df68bdfa-c690-47be-960a-be5b92eda25d&tw_document_href=https%3A%2F%2Fmetamask.io%2Ffaqs%2F&tw_iframe_status=0&txn_id=oert2&type=javascript&version=2.3.30	false	Avira URL Cloud: safe	unknown
https://metamask.io/fonts/EuclidCircularB-Regular-WebXL.woff2	false	Avira URL Cloud: safe	unknown
https://pixel-config.reddit.com/pixels/t2_vjeg7kke/config	false	Avira URL Cloud: safe	unknown
https://metamask-support.web.app/favicon.ico	false	Avira URL Cloud: phishing	unknown
https://metamask-support.web.app/static/css/main.5392d7b8.css	false	Avira URL Cloud: phishing	unknown
https://static.ads-twitter.com/uwt.js	false	Avira URL Cloud: safe	unknown
https://metamask.io/fonts/EuclidCircularB-Bold-WebXL.woff2	false	Avira URL Cloud: safe	unknown
https://metamask.io/faqs/	false	Avira URL Cloud: safe	unknown
https://alb.reddit.com/rp.gif?ts=1727182571251&id=t2_vjeg7kke&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=eff1c192-9d83-4810-baa4-4e552783599e&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_5afed25b&dpm=&dpcc=&dprc=	false	Avira URL Cloud: safe	unknown
https://t.co/1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=0bc14146-8201-4499-a18e-0c054c9183f8&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=df68bdfa-c690-47be-960a-be5b92eda25d&tw_document_href=https%3A%2F%2Fmetamask.io%2Ffaqs%2F&tw_iframe_status=0&txn_id=oert2&type=javascript&version=2.3.30	false	Avira URL Cloud: safe	unknown
https://metamask-support.web.app/	true		unknown
https://metamask-support.web.app/static/media/metamask_main.53f2bee2f357c4247916f6ee01a2332b.svg	false	Avira URL Cloud: phishing	unknown
https://cmp.osano.com/AzZMxHTbQDOQD8c1J/a2e89f0e-f467-4542-bfea-30ea2c1a6648/osano.js	false	Avira URL Cloud: safe	unknown
https://alb.reddit.com/rp.gif?ts=1727182571253&id=t2_ffiwr7tji&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=eff1c192-9d83-4810-baa4-4e552783599e&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_5afed25b&dpm=&dpcc=&dprc=	false	Avira URL Cloud: safe	unknown
https://www.redditstatic.com/ads/conversions-config/v1/pixel/config/t2_8mqvi05zf_telemetry	false	Avira URL Cloud: safe	unknown
https://metamask-support.web.app/manifest.json	false	Avira URL Cloud: phishing	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_167.2.dr	false	URL Reputation: safe	unknown
https://metamask.io/swaps/	chromecache_174.2.dr	false	Avira URL Cloud: safe	unknown
https://metamask.zendesk.com/hc/en-us/articles/360018766351-How-to-use-the-Vault-Decryptor-with-the-	chromecache_174.2.dr	false	Avira URL Cloud: safe	unknown
https://support.metamask.io/transactions-and-gas/gas-fees/why-did-my-transaction-fail-with-an-out-of	chromecache_174.2.dr	false	Avira URL Cloud: safe	unknown
https://support.metamask.io/managing-my-wallet/resetting-deleting-and-restoring/how-can-i-reset-my-p	chromecache_174.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/MetaMask	chromecache_174.2.dr	false	Avira URL Cloud: safe	unknown
https://support.metamask.io/privacy-and-security/hardware-wallet-hub/	chromecache_174.2.dr	false	Avira URL Cloud: safe	unknown
https://daneden.github.io/animate.css/	chromecache_174.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/MetaMask/metamask-extension/issues/new/choose	chromecache_174.2.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com	chromecache_167.2.dr	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/iframe_api	chromecache_148.2.dr, chromecache_151.2.dr	false	Avira URL Cloud: safe	unknown
https://support.metamask.io/getting-started/how-to-contact-metamask-support/	chromecache_174.2.dr	false	Avira URL Cloud: safe	unknown
https://support.metamask.io/managing-my-wallet/accounts-and-addresses/how-to-copy-your-metamask-acco	chromecache_174.2.dr	false	Avira URL Cloud: safe	unknown
https://www.redditstatic.com/ads/8d515a58/pixel.js	chromecache_150.2.dr, chromecache_175.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/MetaMask/metamask-mobile/issues/new/choose	chromecache_174.2.dr	false	Avira URL Cloud: safe	unknown
https://consensys.io/privacy-policy	chromecache_174.2.dr	false	Avira URL Cloud: safe	unknown
https://support.metamask.io/privacy-and-security/what-is-a-secret-recovery-phrase-and-how-to-keep-yo	chromecache_174.2.dr	false	Avira URL Cloud: safe	unknown
https://consensys.io/terms-of-use	chromecache_174.2.dr	false	Avira URL Cloud: safe	unknown
https://support.metamask.io/metamask-portfolio/buy/how-to-buy-crypto-in-metamask/	chromecache_174.2.dr	false	Avira URL Cloud: safe	unknown
https://support.metamask.io/getting-started/the-ethereum-address-format-and-why-it-matters-when-usin	chromecache_174.2.dr	false	Avira URL Cloud: safe	unknown
https://metamask.io	chromecache_174.2.dr	false	Avira URL Cloud: safe	unknown
https://googleads.g.doubleclick.net	chromecache_151.2.dr	false	Avira URL Cloud: safe	unknown
https://support.metamask.io	chromecache_174.2.dr	false	Avira URL Cloud: safe	unknown
https://support.metamask.io/managing-my-wallet/using-metamask/how-to-update-the-version-of-metamask/	chromecache_174.2.dr	false	Avira URL Cloud: safe	unknown
http://opensource.org/licenses/MIT	chromecache_174.2.dr	false	URL Reputation: safe	unknown
https://schema.org	chromecache_174.2.dr	false	URL Reputation: safe	unknown
https://cct.google/taggy/agent.js	chromecache_148.2.dr, chromecache_151.2.dr, chromecache_167.2.dr	false	URL Reputation: safe	unknown
https://www.youtube.com/watch?v=zeu-a-W2qJQ	chromecache_174.2.dr	false	Avira URL Cloud: safe	unknown
https://support.metamask.io/managing-my-tokens/custom-tokens/how-to-display-tokens-in-metamask/	chromecache_174.2.dr	false	Avira URL Cloud: safe	unknown
https://td.doubleclick.net	chromecache_148.2.dr, chromecache_151.2.dr, chromecache_167.2.dr	false	Avira URL Cloud: safe	unknown
https://www.merchant-center-analytics.goog	chromecache_167.2.dr	false	URL Reputation: safe	unknown
https://google.com	chromecache_151.2.dr	false	Avira URL Cloud: safe	unknown
https://adservice.google.com/pagead/regclk?	chromecache_167.2.dr	false	Avira URL Cloud: safe	unknown
https://youtu.be/zeu-a-W2qJQ	chromecache_174.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
13.33.187.2	d3orhvfyxudxxq.cloudfront.net	United States		16509	AMAZON-02US	false
151.101.193.140	unknown	United States		54113	FASTLYUS	false
151.101.65.140	unknown	United States		54113	FASTLYUS	false
18.245.31.112	unknown	United States		16509	AMAZON-02US	false
18.164.52.93	d2gt2ux04o03l1.cloudfront.net	United States		3	MIT-GATEWAYSUS	false
162.159.140.229	t.co	United States		13335	CLOUDFLARENETUS	false
104.244.42.67	unknown	United States		13414	TWITTERUS	false
13.33.187.25	unknown	United States		16509	AMAZON-02US	false
104.244.42.3	s.twitter.com	United States		13414	TWITTERUS	false
151.101.1.140	dualstack.reddit.map.fastly.net	United States		54113	FASTLYUS	false
199.36.158.100	metamask-support.web.app	United States		15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved		unknown	unknown	false
142.250.186.164	www.google.com	United States		15169	GOOGLEUS	false
199.232.188.157	platform.twitter.map.fastly.net	United States		54113	FASTLYUS	false
185.199.108.153	metamask.io	Netherlands		54113	FASTLYUS	true
151.101.129.140	reddit.map.fastly.net	United States		54113	FASTLYUS	false

Private

IP
192.168.2.6
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1516719
Start date and time:	2024-09-24 14:54:55 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 40s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://metamask-support.web.app/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal64.phis.win@22/68@46/18
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://metamask.io/faqs

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.67, 142.250.185.174, 74.125.71.84, 34.104.35.123, 142.250.185.234, 216.58.206.35, 172.217.16.202, 172.217.18.106, 142.250.185.74, 172.217.23.106, 142.250.186.138, 142.250.185.138, 142.250.185.106, 142.250.184.234, 216.58.212.138, 142.250.186.106, 216.58.212.170, 142.250.181.234, 142.250.185.202, 142.250.185.170, 142.250.184.202, 20.114.59.183, 199.232.214.172, 192.229.221.95, 20.3.187.198, 142.250.185.136, 142.250.184.232, 142.250.186.78, 52.165.165.26, 142.250.184.227, 4.245.163.56
Excluded domains from analysis (whitelisted): fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, fonts.gstatic.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, clientservices.googleapis.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, www.googletagmanager.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, clients.l.google.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, www.google-analytics.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://metamask-support.web.app/

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Sep 24 11:55:54 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9797723750502563
Encrypted:	false
SSDEEP:	48:8Od0T4s+H70idAKZdA19ehwiZUklqehAy+3:8RftPy
MD5:	3A5402BCD56D2501572FC8E60AB8E3F1
SHA1:	DF90FCA9CD2F33C895D9D349A6A5177769C55635
SHA-256:	084B905B38D1E16700DA3B8622CD96ABC2F4EAC366AC37D8AD55BD97F7B6F5E7
SHA-512:	6C29C89F89CB743C3B2C59D05B091A08F8B6C6AC83888E36E064A632E404F80252E21CB02D9400907294702222D34613CD7B34588AC86D3F12993B3204B6BFCF
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....O......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I8Y.f....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V8Y.f....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V8Y.f....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V8Y.f..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V8Y.f...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............h.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Sep 24 11:55:54 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.993983116499217
Encrypted:	false
SSDEEP:	48:8Qd0T4s+H70idAKZdA1weh/iZUkAQkqeh/y+2:8vfH9Qiy
MD5:	6B1B022B73E6CBF7FF2E7E01C6242E65
SHA1:	CE049DAD593A72DD5CB0FAA7FF87DFD38A74708B
SHA-256:	D2291D4B0E614489A47AC399325D2AE8D922EF2EDB4A9991C3B804B498CA7845
SHA-512:	2015F95E9B448D4A347FABB4E053A7E9B2080BFA4840154F6A48F78804837F9AC53A7FE7A84F5E221FBC1F19843D540F3C6B9ED448A64CBFF1426C99C47EFDF1
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,............N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I8Y.f....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V8Y.f....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V8Y.f....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V8Y.f..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V8Y.f...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............h.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.003217491824516
Encrypted:	false
SSDEEP:	48:8x9d0T4ssH70idAKZdA14tseh7sFiZUkmgqeh7sZy+BX:8xEflnLy
MD5:	7310D10AA7FA96CA38A1E7F9B3732FA9
SHA1:	5FFC5078EB607565BF1681F0A4263F9FF67D37E3
SHA-256:	671D5B30A3587881165CFDEF3869FC0A63DF1A8839122A0D8CDDCA0756103905
SHA-512:	295DE2A94E72CADE42F6C24370475AFE987ACBD93A3A5C98E0952F7CEE687D89C5322FA9C083AAF1325AC0137805C785FC445B5DBB8C2015FE6D9F3602D44914
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I8Y.f....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V8Y.f....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V8Y.f....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V8Y.f..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............h.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Sep 24 11:55:54 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9917267346031196
Encrypted:	false
SSDEEP:	48:8yd0T4s+H70idAKZdA1vehDiZUkwqehTy+R:8tfkBy
MD5:	8FF18BBC20A76768D96AB94E18FFC590
SHA1:	FB4FD44D1CF7D7112241680EB206C0EB17F53E15
SHA-256:	D2F07F55584FB3C4CF1411C069E14CB6AC1A0090E726934E6F54D981F0F57FB9
SHA-512:	72334B0DD26823F8773E4100141FFDCB1FE9CC0C9DD282A5B9BDA5FD4579EB0C2489BD053E847666661FBD6B18B63AE9E69B8494285C3199849CAF396E89C4A9
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,............N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I8Y.f....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V8Y.f....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V8Y.f....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V8Y.f..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V8Y.f...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............h.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Sep 24 11:55:54 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.981542007457366
Encrypted:	false
SSDEEP:	48:8nd0T4s+H70idAKZdA1hehBiZUk1W1qehVy+C:8Cfk91y
MD5:	AFDDD89D39079C073EFB046EC6CAA15D
SHA1:	82E1B3C75ED8975601E1DDD2EFC69D3277BC0103
SHA-256:	6D3DBA455A847502A10125323FCEE0786D7D6ABEE08C1F86FFCB66DD4D3EA3D8
SHA-512:	FC3464FB76CD4CE23D7E68DA9A8E1C686265C8D1CF7EF8FE5DF1EFC95E919AB65C97C46F0519158A7E0F16A2706975AA69BC05B595EC03FFA0CCEE4238D7720A
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....u......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I8Y.f....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V8Y.f....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V8Y.f....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V8Y.f..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V8Y.f...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............h.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Sep 24 11:55:54 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.992792033930509
Encrypted:	false
SSDEEP:	48:8td0T4s+H70idAKZdA1duT+ehOuTbbiZUk5OjqehOuTbLy+yT+:8UfKT/TbxWOvTbLy7T
MD5:	DE3D6EFB542B955986BF3744968B0470
SHA1:	5FD84CF8482E695260D134FD8E39169EFEF40467
SHA-256:	0952B38EEC1E11606ADB4CBB892B5F73A407467B1455033BA18908C9063EF9B5
SHA-512:	453EAA81B6F963A74F15DA5DAA369E849B0B9DEFD27FFBDAC6D1C41815C8B2F133B056D9097250C5680650D46E2C375FF8653808B896561631CE9540199DC123
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......}.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I8Y.f....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V8Y.f....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V8Y.f....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V8Y.f..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V8Y.f...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............h.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 140

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 141

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1809
Entropy (8bit):	5.4639917773378075
Encrypted:	false
SSDEEP:	48:AOOL6wOOL/8FZOhOOLt7OOL9RVc+udOOLEN0oD:AOOL6wOOL/8FZOhOOLlOOL3Vc+udOOLk
MD5:	041A47896C77C2040DC1FD157D7D9946
SHA1:	6ED6B6B2F5A21E0BD9A061F3DB267689C953A029
SHA-256:	11F0F33F9711CA7551B10CDFF821A5C9B8AB7D74055C1D84ADF61708991774A4
SHA-512:	947F4C9D69B684729617FFF2A76410288033FC4B3A43D77E82E4EA0954F16AAFBD5271F9240CBBCA3DDCEF06BCF9FA8BABAD2D9745E7CF93365597B87BC711E4
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Montserrat
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw0aXpsog.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw9aXpsog.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ vietnamese */.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw2aXpsog.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0

Chrome Cache Entry: 142

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7779)
Category:	downloaded
Size (bytes):	7824
Entropy (8bit):	5.785019410576776
Encrypted:	false
SSDEEP:	96:tKpOlu5JhifjV/aKfyykBp/WQ78GhJZCjts/WP+zLmlDI/WKG8Czy4/WVMz2Tbvw:tB/fjV/aKeyY8syRttzGjVMSbhcN3
MD5:	FF926CDC4A1B7E5ECD40A03FDF541624
SHA1:	1112FE5D9EE16E4B4F993F60693B98CD418F2B6B
SHA-256:	B145683A54F91C6FD3E3B893834FFE892A488C3241ECC51E1AACEB009F86739F
SHA-512:	946F268C3EE23A485D09B219D655C4313BF61FB71C0B2F60460F8AF00481E4B68444F9596AEF063897D8343DDC963891CC8701024D99955934018A2D9BA8EE1B
Malicious:	false
Reputation:	low
URL:	https://metamask-support.web.app/static/css/main.5392d7b8.css
Preview:	body{-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale;font-family:-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,Oxygen,Ubuntu,Cantarell,Fira Sans,Droid Sans,Helvetica Neue,sans-serif;margin:0}code{font-family:source-code-pro,Menlo,Monaco,Consolas,Courier New,monospace}.App{height:100vh;text-align:center;width:100%}.banner{background-color:#e5e5e5;font-weight:bolder;height:10vh;justify-content:space-around;padding:8px}.banner,.banner_btn{align-items:center;display:flex}.banner_btn{border:thin solid #7b7b7b;border-radius:30px;color:#7b7b7b;font-size:.8em;justify-content:space-between;padding-left:9px;padding-right:9px}.online{background-color:#32cd32;border-radius:5px;height:10px;margin-right:5px;width:10px}.modal{padding:10%}.modal_cover{text-align:center;width:100%}.toast-title{font-weight:700}.toast-message{-ms-word-wrap:break-word;word-wrap:break-word}.toast-message a,.toast-message label{color:#fff}.toast-message a:hover{color:#ccc;text-decoration:none}.toast-

Chrome Cache Entry: 143

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 377 x 345, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	114217
Entropy (8bit):	7.992399851463594
Encrypted:	true
SSDEEP:	3072:92M8A3YgAwwS3edRmAV2arTUU56opmltP:k3A3F1f3evm62mCJtP
MD5:	023762B6AEC2A2249B8FDFB638F00EF3
SHA1:	F89237C6BC3F84DB882B640394725D61F3C9CB35
SHA-256:	62367D960F6827A816BA4F698C0CAA2F3A4B4672988EDBB2117353B7EFC48D24
SHA-512:	F3C704E5E6EED20F39AEF1E4ED6DFD82C1A6FC6E3DD91187250E3D4A6342139C31A4BD12AE18B244BEFB4D44D3C725BAE1C6F0C1DB1332F4C0E9261C15162F40
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...y...Y.....}._... .IDATx...i.e.q&..{/.....}.H.YZH...(R%...n.cK......z.!L.60. .....7.00...==.........LK..[.w.U"YUYkfUfU...{....E..<....=K..._.9.........(...."..@.b.6w........_.<:....^.G..W..l'(....v.R..~....\|.x....];.E\6.Os..6N........U.\|.1..jQ......$a..kC..5M....!.9........6-I..L..>..5.C..`x.4..........pq..x"......].....?39).....b.w._4G.M..".3}....cl..,{..!....bf.r.. .N.......(>.W.....;....I..+.}.Or...><}...Y...\?;..}}:..)#......7`p6....n...$......$9...DT.....U.......{>J.k0..6=^.L.3.w....+..BBx.d&.c.F..H..+.q..F().Kg........9Q...'.t.3.".cH....t..,....^N.t:..d/A.8YN6.7j..q`fj........I.Q..[..4.c.)....E.$...H:...Fp.R.H..~J.1.D.H.g.d...q;.z......,......\|@.6..`..X....._..m:m>.~{.c?z.........n}j...tes.R..jJ."..2-..@.}.. ...7.......}.S.J..g(.#...\>.u.r.nf...Wap.S]"...o.../......Nh....!9C..l!;u..!.I>..hT.q(.q.x......e.7.8$%4.>...WTr0.c0g...Y6.3...4.=.K.... 8o8.lG.F..&...B.....'..>.......>.?%.b(.0..6'?.3..C{.=>.nl.(.kA#j

Chrome Cache Entry: 144

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:H+uZYn:euZYn
MD5:	46DF3E5E2D15256CA16616EBFDA5427F
SHA1:	BE8F9B307E458075DA0D43585A05F1D451469182
SHA-256:	AF3248D0B278571EFF9A22F8ED1CEB54B70D202B44FD70ECA4CA13A5771CECC3
SHA-512:	88FBCC0A92317A0BADE7D4B72C023A16792F3728443075BF4B1767C8A55258836B54D56B24EABE36AE4EF240F796B58B8F1EA10C7E3C146BDE89882FC9ADE302
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAllx9tkaCuQ5xIFDZFhlU4=?alt=proto
Preview:	CgkKBw2RYZVOGgA=

Chrome Cache Entry: 145

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (677), with no line terminators
Category:	downloaded
Size (bytes):	677
Entropy (8bit):	4.918589265815836
Encrypted:	false
SSDEEP:	12:qTE0sF56ME2CAsBVaGuaXiMIgAUa8Mx8LVe19oNTG7faKj2a:0E0sr6FXjVaGaMrXMxYVqiC75j2a
MD5:	9C8D9F8DD2CD7E50BFA2BC262B3B4E94
SHA1:	6586C2B8C61A60A30B35CF7A1847ADA00517D17C
SHA-256:	4BED164DAE111169626DF85A07DE334E41CF9B290970471D12DDDD4167256E41
SHA-512:	B68E380616509CA136DD749DD63F106A48B2C0DF1003886D8A0DBC17E898D445053EFC26F0CD081BA0E6878E54D7AA573CE111C1B7CCBE6F4EC251F8AA431E0F
Malicious:	false
Reputation:	low
URL:	https://metamask-support.web.app/
Preview:	<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1,user-scalable=no"/><meta name="theme-color" content="#000000"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="manifest" href="/manifest.json"/><link rel="stylesheet" href="//fonts.googleapis.com/css?family=Montserrat"/><title>React App</title><script defer="defer" src="/static/js/main.48dd4429.js"></script><link href="/static/css/main.5392d7b8.css" rel="stylesheet"></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>

Chrome Cache Entry: 146

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65465)
Category:	downloaded
Size (bytes):	237002
Entropy (8bit):	5.333567572492398
Encrypted:	false
SSDEEP:	3072:Txuhg16HzwivVM+NZbg8tqhoqw1dObGw6TDlq7d4zf8IHba:VuK0zw4VM+LE6PqwHOB6TD9O
MD5:	1C9C9895D460E87B9B0EE2A6F76967D1
SHA1:	8A6C7E053F3F9E0972D7EAFC8A72F6878BCB305A
SHA-256:	AD742485361C941303447E6A514B9307E25C3E15987D9F8593B270056193D404
SHA-512:	2995E6DC98D30AC486003B1A4B06B0D28B5394997BE92234DE160389F9557FCA7176BEA4BD5C1FB1E02EB9F49D2065FED21FAF1D6B758C8D0E777587789C59E1
Malicious:	false
Reputation:	low
URL:	https://metamask-support.web.app/static/js/main.48dd4429.js
Preview:	/! For license information please see main.48dd4429.js.LICENSE.txt /.!function(){var e={890:function(e,t){var n;!function(t,n){"use strict";"object"===typeof e.exports?e.exports=t.document?n(t,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return n(e)}:n(t)}("undefined"!==typeof window?window:this,(function(r,o){"use strict";var i=[],a=Object.getPrototypeOf,l=i.slice,u=i.flat?function(e){return i.flat.call(e)}:function(e){return i.concat.apply([],e)},s=i.push,c=i.indexOf,f={},d=f.toString,p=f.hasOwnProperty,h=p.toString,m=h.call(Object),g={},v=function(e){return"function"===typeof e&&"number"!==typeof e.nodeType&&"function"!==typeof e.item},y=function(e){return null!=e&&e===e.window},b=r.document,w={type:!0,src:!0,nonce:!0,noModule:!0};function x(e,t,n){var r,o,i=(n=n\|\|b).createElement("script");if(i.text=e,t)for(r in w)(o=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&i.setAttribute(r,o);n.head.appendChild(i).parentNode.removeChild(i)}function

Chrome Cache Entry: 147

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/rp.gif?ts=1727182571253&id=t2_ffiwr7tji&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=eff1c192-9d83-4810-baa4-4e552783599e&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_5afed25b&dpm=&dpcc=&dprc=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 148

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45826)
Category:	dropped
Size (bytes):	364220
Entropy (8bit):	5.570751235754375
Encrypted:	false
SSDEEP:	3072:2dIeLFZ4uPQtZYrOOW0t6U0UXtu+yOD2sotFunDUt37KVj4QUysTZ3eY:8I8ZMZwo0htvyrsbxVcQUysTZF
MD5:	517BE2632DBBC68573CC5B797171A15F
SHA1:	0130CE98CE0FBA84D78A24B4DBC86BCA51096A02
SHA-256:	0B301E16B3704116DEDF03F6547AC6A7259FADD79BC3912F32A624A8A8F14AB8
SHA-512:	90075D1FF570803988AA61ABFC3831D4471A5E9B05E9D86CDDD53926D4A644A52E919271968A4A972D0B25A2910623D47830F5BA31E897A707BE01AA5CC53415
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"236",. . "macros":[{"function":"__e"},{"function":"__v","vtp_name":"gtm.elementClasses","vtp_dataLayerVersion":1},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__jsm","vtp_javascript":["template","(function(){var a=document.cookie.match(\"(?:^\|;)\\\\s_ga\\x3d([^;])\"),b=a?decodeURIComponent(a[1]):null;b\u0026\u0026(a=b.match(\/(\\d+\\.\\d+)$\/));return a?a[1]:null})();"]},{"function":"__aev","vtp_varType":"TEXT"},{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__v","vtp_name":"gtm.triggers","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":""},{"function":"__v","vtp_name":"gtm.elementUrl","vtp_d

Chrome Cache Entry: 149

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	492
Entropy (8bit):	4.508040222190771
Encrypted:	false
SSDEEP:	6:3vjkpO/Eqh/bwXLjQLMzmezk7TWKAKLkmXrdEJqJHGezXXdKLkmXcqJHGez1mjgw:fYDqJeLQq/KvriSdKvqUKV/cDTO
MD5:	D9D975CEBE2EC20B6C652E1E4C12CCF0
SHA1:	4E0AFE7F81A71F41366CD7859CA34776B8107923
SHA-256:	50B3D8C3903AF3F78D871B94557AB14F4E39CA192EACA3D2CFA863C867279A14
SHA-512:	50EF3C4963B89C9DBA094705B6DF105E5C82F8DB708059DF6A48A3F95C43487B7CCBEB9840E7B76074896DB5FB2F1D918326D0CE338220589CD275F9EE79B16C
Malicious:	false
Reputation:	low
URL:	https://metamask-support.web.app/manifest.json
Preview:	{. "short_name": "React App",. "name": "Create React App Sample",. "icons": [. {. "src": "favicon.ico",. "sizes": "64x64 32x32 24x24 16x16",. "type": "image/x-icon". },. {. "src": "logo192.png",. "type": "image/png",. "sizes": "192x192". },. {. "src": "logo512.png",. "type": "image/png",. "sizes": "512x512". }. ],. "start_url": ".",. "display": "standalone",. "theme_color": "#000000",. "background_color": "#ffffff".}.

Chrome Cache Entry: 150

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	86
Entropy (8bit):	4.612457348662773
Encrypted:	false
SSDEEP:	3:YTyLV/VfsqPNVcSLQzRE9Ldu1S4:YWLV9soDLQmpdwS4
MD5:	69EE36929D2172DEA5C1763BAC240040
SHA1:	77EF82FC4B7757D445E8901E16D785AA44E3B1DF
SHA-256:	45DA241A91C843B268ADA7481CDECE1AA679F2720931EFFEA28D83E1398D66A9
SHA-512:	FDA2E41AF332441315A0BC6352DD1B9350F92E13447CD1A58CBAA96748271C26780A653EA94F023808F572D1E329C855EF6A0E3B51558BF474ABA614AB26051A
Malicious:	false
Reputation:	low
Preview:	{"version_hash":"8d515a58","url":"https://www.redditstatic.com/ads/8d515a58/pixel.js"}

Chrome Cache Entry: 151

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45826)
Category:	downloaded
Size (bytes):	364206
Entropy (8bit):	5.570628813633362
Encrypted:	false
SSDEEP:	3072:2dIeLFZ4uPQtZYrOOWMtiU0UXtu+yOD2sotFunDUt37KVj4QUysTZ3eq:8I8ZMZwoMxtvyrsbxVcQUysTZP
MD5:	EB3CD4B8EEA64B48F7EEB047613216C1
SHA1:	1761068566D120842EA591A3202E5DF200DC3C8A
SHA-256:	C61E6AC299929588B224CE275DA9C6C1520F4BF9D3EC3953076F9700DCBB059C
SHA-512:	3F86F9E032E10BE84C6BFBEB1DB9A33CC79347C857C87EFEA49009E038DDF3222774C2CFDDD34E4165D1472EC199B9DCBAD2B0929B4554E1809CD9607A988F7E
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-M67JQ84
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"236",. . "macros":[{"function":"__e"},{"function":"__v","vtp_name":"gtm.elementClasses","vtp_dataLayerVersion":1},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__jsm","vtp_javascript":["template","(function(){var a=document.cookie.match(\"(?:^\|;)\\\\s_ga\\x3d([^;])\"),b=a?decodeURIComponent(a[1]):null;b\u0026\u0026(a=b.match(\/(\\d+\\.\\d+)$\/));return a?a[1]:null})();"]},{"function":"__aev","vtp_varType":"TEXT"},{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__v","vtp_name":"gtm.triggers","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":""},{"function":"__v","vtp_name":"gtm.elementUrl","vtp_d

Chrome Cache Entry: 152

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57671), with no line terminators
Category:	dropped
Size (bytes):	57671
Entropy (8bit):	5.406436595808325
Encrypted:	false
SSDEEP:	1536:buM99dAoLYPNh7S5BTF94zGnSJpSFD2No5/g:buMdAVNiTF94zGnSJpSFDr5/g
MD5:	BBBCF811D8437A575D796A4C1E5D4FAD
SHA1:	CCE821AAE4F2B8982D9C08B308FB5306945EA68E
SHA-256:	4D15FF2317E16CCD8CA1D3248FEA7D91130E022369BB032824A84AD9967064DF
SHA-512:	6D0E3E9079DB4C175F0E8EC0279E9A89DF786D226685C0764AB20179D69E19CA269E8CC40646A97D31F95597654EC869472358BB72071011DF3410FC32E501C0
Malicious:	false
Reputation:	low
Preview:	!function(){var t={6173:function(t,e,n){var r;t.exports=(r=r\|\|function(t,e){var r;if("undefined"!=typeof window&&window.crypto&&(r=window.crypto),"undefined"!=typeof self&&self.crypto&&(r=self.crypto),"undefined"!=typeof globalThis&&globalThis.crypto&&(r=globalThis.crypto),!r&&"undefined"!=typeof window&&window.msCrypto&&(r=window.msCrypto),!r&&void 0!==n.g&&n.g.crypto&&(r=n.g.crypto),!r)try{r=n(2480)}catch(t){}var i=function(){if(r){if("function"==typeof r.getRandomValues)try{return r.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof r.randomBytes)try{return r.randomBytes(4).readInt32LE()}catch(t){}}throw new Error("Native crypto module could not be used to get secure random number.")},o=Object.create\|\|function(){function t(){}return function(e){var n;return t.prototype=e,n=new t,t.prototype=null,n}}(),a={},c=a.lib={},u=c.Base={extend:function(t){var e=o(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply

Chrome Cache Entry: 153

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 44544, version 3.66
Category:	downloaded
Size (bytes):	44544
Entropy (8bit):	7.995435355874377
Encrypted:	true
SSDEEP:	768:OYwXmLSu2ENQ2CMecobgGcYjYHI5FhZF2UIlN9/j7gAfHxiPiX0gaIutLAP:OYUm1NQ5gGPZF2UI397nEPinanA
MD5:	9024D0BF73943172297C4628D0054E20
SHA1:	36C3795E7B297D06589E15EF59592683D9ED0974
SHA-256:	88FAD87880AE6BB0D733C967419D5F0D68DA547A88AD67E7AF41F18DAE2E20DF
SHA-512:	3B621D07ADD00DCBBEFA4B14279C78260D361B9848226D472780896865ECDB0C5096B1AD013ED114AD6C9B5FC60814CD678FD124D5265E9479ABC2730CBF9BD6
Malicious:	false
Reputation:	low
URL:	https://metamask.io/fonts/EuclidCircularB-Bold-WebXL.woff2
Preview:	wOF2..............M........B.....................F...4.....E.`..(.(..s.....8..3....6.$........ .... ..7[A'..i.....n.m.'Y.z..Z!;_....nO$.P5l..u.....n.......I.2f..sm.VA@D..n.I.c.m.C...".....d...=..."...<..\..Eu....H..j.@\...r&1..x....zL6...m.=..Nl:z`..mx.$...$}E..lm.;..dS.N..Xr.....1O..D.h.....a.._...%.G..L&R.De...w:.6...'.....(.......#..vf..D..pF.....p!j.j...l.teo........>Zd.A..pG..Z.....n...&.D.....l.O.F..@(o.z..c...e.7&...'..k.....(\|.l3.)......Gd3..\ilj.q.......k...s.b)Q.7..'...RR..X.A.>...[..Q.H.b=....$.e.4t....U.E.X.d...r.S....qr.G....QY3^.i........>....H2......ba...t)...s........:.!...Z..I!..7m+.........B..E.....1..c#6"G.......<Qj.c..6.".=....g....y..s..z//..e.^..0V..!.....D.....X.pT..5lq..rQm..jq/..I..t..2..7.e...h......t].....q.6..!...\.^[....@{...8h.....@..-Hb.=H..6.......1.Y.......D.~..`...H..0..N.n..yA...:0.....~....+ ...T..B.3....dk..o^_...g..e......wEw..@..'<.L.........!.......QWu6{b+..H.f.. .]7.9..A....?.s.r.PM.5hf!.a...z.$..6..yZP

Chrome Cache Entry: 154

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/rp.gif?ts=1727182571251&id=t2_vjeg7kke&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=eff1c192-9d83-4810-baa4-4e552783599e&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_5afed25b&dpm=&dpcc=&dprc=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 155

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (677), with no line terminators
Category:	dropped
Size (bytes):	677
Entropy (8bit):	4.918589265815836
Encrypted:	false
SSDEEP:	12:qTE0sF56ME2CAsBVaGuaXiMIgAUa8Mx8LVe19oNTG7faKj2a:0E0sr6FXjVaGaMrXMxYVqiC75j2a
MD5:	9C8D9F8DD2CD7E50BFA2BC262B3B4E94
SHA1:	6586C2B8C61A60A30B35CF7A1847ADA00517D17C
SHA-256:	4BED164DAE111169626DF85A07DE334E41CF9B290970471D12DDDD4167256E41
SHA-512:	B68E380616509CA136DD749DD63F106A48B2C0DF1003886D8A0DBC17E898D445053EFC26F0CD081BA0E6878E54D7AA573CE111C1B7CCBE6F4EC251F8AA431E0F
Malicious:	false
Reputation:	low
Preview:	<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1,user-scalable=no"/><meta name="theme-color" content="#000000"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="manifest" href="/manifest.json"/><link rel="stylesheet" href="//fonts.googleapis.com/css?family=Montserrat"/><title>React App</title><script defer="defer" src="/static/js/main.48dd4429.js"></script><link href="/static/css/main.5392d7b8.css" rel="stylesheet"></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>

Chrome Cache Entry: 156

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 43386
Category:	dropped
Size (bytes):	12103
Entropy (8bit):	7.985508379818304
Encrypted:	false
SSDEEP:	192:26MV2PEUWRRI2V6SKbQ5W3YmOCf3OrXT9WVc2VhjIJ0STPz03aWagq692yvggkbH:+tjRIm6SoITu3khUTPjI5TI3afb6YmwH
MD5:	BED9B675380C07EDC84C03D0F362B192
SHA1:	0FC4DCF8CB37F303985159B5A9348BB9AE5C6397
SHA-256:	3AE25E7FC8C3E9A41A480D9E39BA0E43845FFD78B0529695530925F6575852D9
SHA-512:	25CFA4027E02D6EEFC95202417A02843556BDA5D28685735FFC102F3C63327CFAAF59B9565E3B23F2BC26C0274EFDD0F69CCA8AD9A3A6DCEA4D903722DCE9FB6
Malicious:	false
Reputation:	low
Preview:	...........;ks.....n..i....k\....<.L..J..P"$F.q....{.%....;;.6.B.}N.w.>.....I.0(EF.J..t$T=4......yc....J...T.4..%......."\..F......d..%...U52..c+>F..f..JV...... ......."tW>..[.x....L.Q.P.u't..\]wF..w=.._.z....Boi...'.c.FIl<m6M..]u.;..K....F..'.Y.R........AK.M..3.c.N.....D....yf..&...Y2oz......uS..Q.j.]&$...8[.i..6cT..L5.....#..Q.&hj;I.=6I.L.^,F..v;z\&...S4.....N.h...\|.].@..D..B.=a..pz.P.....e.5...vQ....G~.fK...2..A.r9ko...ihO...R...[-...}.=.T.39O!.3"....(.....C.....q...8.E..6...}..]t.D...'gN.;.2.>....k.+.S)D.....0...".Q.i.,./r.(....Nn.Tmhz.m.Kx]Zj....y.<...;.D.r..H...U....@%.Kb...W.V.{..`i......._...'.!)5.CGd.....e.+^...E.8.Q..d.....4.#...\|_.7.UCm..I{.{.f['...`..c:mBjMp......N..F..1.>*. YR...N....~te.B.}n....M..q.<...x.....N:.6.....CT..+^.1........!;...8....P..d+>.q",3..qW.....qb....:....C@ey.$..c.D.e..D...-..<...!......$.d...I`sj.;yplf.....<Y.2I.y.L.Du1".K..... gWn.4.2.....l..0ri....I...Q......X.x.}.?.......A.I..).g.a4.....o..-c

Chrome Cache Entry: 157

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	12019
Entropy (8bit):	4.728440317155309
Encrypted:	false
SSDEEP:	192:7h/+7QQKF3oE3WAiq4rKp/svCULRoWBkiCcxj4kPeErXoXDK:7F+7Qb3oCK+xsvtoWBKcxj4kPeErXoX2
MD5:	51BCEA2625EB2C6E9268A7377A792C86
SHA1:	5EEB306E6584EED1747C36C11724F193711D430E
SHA-256:	5E722754F038988BA4B6D7F380D60191EBA3B6E01D4A00749A28B79C53521F5B
SHA-512:	B70F1531C4D61F0494B516DA54AF09EABAEC98A040993052DC63E39AC7D45E1DD112F5DC898DBFE57F77E5EE60ED8ACF31B0B4ECA8451FE93F77A962026DC742
Malicious:	false
Reputation:	low
URL:	https://images.ctfassets.net/9sy2a0egs6zh/4zJfzJbG3kTDSk5Wo4RJI1/1b363263141cf629b28155e2625b56c9/mm-logo.svg
Preview:	<svg width="172" height="33" viewBox="0 0 172 33" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M151.256 16.64C150.372 16.0569 149.398 15.6423 148.476 15.124C147.878 14.7871 147.241 14.489 146.722 14.0614C145.838 13.3358 146.02 11.9105 146.943 11.2885C148.268 10.4074 150.463 10.8997 150.697 12.7009C150.697 12.7397 150.736 12.7657 150.775 12.7657H152.776C152.828 12.7657 152.867 12.7268 152.854 12.675C152.75 11.431 152.269 10.3944 151.386 9.73355C150.541 9.09862 149.58 8.76172 148.553 8.76172C143.266 8.76172 142.785 14.3465 145.63 16.1088C145.955 16.3161 148.748 17.7155 149.736 18.3245C150.723 18.9335 151.035 20.0479 150.606 20.929C150.216 21.7324 149.203 22.2896 148.19 22.2248C147.085 22.16 146.228 21.564 145.929 20.631C145.877 20.4626 145.851 20.1386 145.851 19.9961C145.851 19.9572 145.812 19.9183 145.773 19.9183H143.604C143.565 19.9183 143.526 19.9572 143.526 19.9961C143.526 21.564 143.916 22.4321 144.981 23.2226C145.981 23.9741 147.072 24.2851 148.203 24.2851C151.165 24.28

Chrome Cache Entry: 158

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	12019
Entropy (8bit):	4.728440317155309
Encrypted:	false
SSDEEP:	192:7h/+7QQKF3oE3WAiq4rKp/svCULRoWBkiCcxj4kPeErXoXDK:7F+7Qb3oCK+xsvtoWBKcxj4kPeErXoX2
MD5:	51BCEA2625EB2C6E9268A7377A792C86
SHA1:	5EEB306E6584EED1747C36C11724F193711D430E
SHA-256:	5E722754F038988BA4B6D7F380D60191EBA3B6E01D4A00749A28B79C53521F5B
SHA-512:	B70F1531C4D61F0494B516DA54AF09EABAEC98A040993052DC63E39AC7D45E1DD112F5DC898DBFE57F77E5EE60ED8ACF31B0B4ECA8451FE93F77A962026DC742
Malicious:	false
Reputation:	low
URL:	https://metamask-support.web.app/static/media/metamask_main.53f2bee2f357c4247916f6ee01a2332b.svg
Preview:	<svg width="172" height="33" viewBox="0 0 172 33" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M151.256 16.64C150.372 16.0569 149.398 15.6423 148.476 15.124C147.878 14.7871 147.241 14.489 146.722 14.0614C145.838 13.3358 146.02 11.9105 146.943 11.2885C148.268 10.4074 150.463 10.8997 150.697 12.7009C150.697 12.7397 150.736 12.7657 150.775 12.7657H152.776C152.828 12.7657 152.867 12.7268 152.854 12.675C152.75 11.431 152.269 10.3944 151.386 9.73355C150.541 9.09862 149.58 8.76172 148.553 8.76172C143.266 8.76172 142.785 14.3465 145.63 16.1088C145.955 16.3161 148.748 17.7155 149.736 18.3245C150.723 18.9335 151.035 20.0479 150.606 20.929C150.216 21.7324 149.203 22.2896 148.19 22.2248C147.085 22.16 146.228 21.564 145.929 20.631C145.877 20.4626 145.851 20.1386 145.851 19.9961C145.851 19.9572 145.812 19.9183 145.773 19.9183H143.604C143.565 19.9183 143.526 19.9572 143.526 19.9961C143.526 21.564 143.916 22.4321 144.981 23.2226C145.981 23.9741 147.072 24.2851 148.203 24.2851C151.165 24.28

Chrome Cache Entry: 159

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57671), with no line terminators
Category:	downloaded
Size (bytes):	57671
Entropy (8bit):	5.406436595808325
Encrypted:	false
SSDEEP:	1536:buM99dAoLYPNh7S5BTF94zGnSJpSFD2No5/g:buMdAVNiTF94zGnSJpSFDr5/g
MD5:	BBBCF811D8437A575D796A4C1E5D4FAD
SHA1:	CCE821AAE4F2B8982D9C08B308FB5306945EA68E
SHA-256:	4D15FF2317E16CCD8CA1D3248FEA7D91130E022369BB032824A84AD9967064DF
SHA-512:	6D0E3E9079DB4C175F0E8EC0279E9A89DF786D226685C0764AB20179D69E19CA269E8CC40646A97D31F95597654EC869472358BB72071011DF3410FC32E501C0
Malicious:	false
Reputation:	low
URL:	https://static.ads-twitter.com/uwt.js
Preview:	!function(){var t={6173:function(t,e,n){var r;t.exports=(r=r\|\|function(t,e){var r;if("undefined"!=typeof window&&window.crypto&&(r=window.crypto),"undefined"!=typeof self&&self.crypto&&(r=self.crypto),"undefined"!=typeof globalThis&&globalThis.crypto&&(r=globalThis.crypto),!r&&"undefined"!=typeof window&&window.msCrypto&&(r=window.msCrypto),!r&&void 0!==n.g&&n.g.crypto&&(r=n.g.crypto),!r)try{r=n(2480)}catch(t){}var i=function(){if(r){if("function"==typeof r.getRandomValues)try{return r.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof r.randomBytes)try{return r.randomBytes(4).readInt32LE()}catch(t){}}throw new Error("Native crypto module could not be used to get secure random number.")},o=Object.create\|\|function(){function t(){}return function(e){var n;return t.prototype=e,n=new t,t.prototype=null,n}}(),a={},c=a.lib={},u=c.Base={extend:function(t){var e=o(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply

Chrome Cache Entry: 160

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 45196, version 3.66
Category:	downloaded
Size (bytes):	45196
Entropy (8bit):	7.995443137590167
Encrypted:	true
SSDEEP:	768:I31VpnYUI+dibkAK4rZJ5CkE9cfnRN0C6fZQ/UAqD2zsUz8ANMDuu1ftOl6GXv:Ep0IJ4FJ5MhQ22zsUzoDp1Olhf
MD5:	2D75957DF3BB3AA6ED84F6591B0D5A1A
SHA1:	906424E75625F63B0188471067065794D0348536
SHA-256:	8FF3B303322168B49A14878F195DBAF76D9DA16E35094D1F83FA23245450155B
SHA-512:	79733ED5303CA93CDEC16B9DA25CD95CA397343D5EE529F4074EA878FA0F9916A6FFEF297B51D5B9B3CD3BF8E199E203F91598166429BCCE398F7C9055557C40
Malicious:	false
Reputation:	low
URL:	https://metamask.io/fonts/EuclidCircularB-Regular-WebXL.woff2
Preview:	wOF2..............ZP...#...B.....................F...Z.....E.`..h...s.....x..~....6.$........ .... ..I[.3..D...7@.!.gS.P.}..m..z=..p.T!j.3.j'B..m.A......,D......M...X...x.^...5..v.>.y..O..;.....19:#.;..9...f8\j...,..V.....=._.HCK....L...8.h.-J....e4..~G..D.....Cc.7..t..^..6...................y.c.;U..O.....9./.V..1J....:q.T[s.........u.wYP?_.;y."H`\I.K....B:.7/.....s./8.. .&...E...t......5.....K.'R..q{AL..#>..v7.V...m...'....}.9......{.`\of.\.j.C4q.7&.?......J.jD.&.d.5ME...u........\|.}.+i%.d...]}F}.D....Q...=u.u..J.v&....`.x8.X0...EO..^........1.).....\|.<%..g...,.T..TdB#...?..._..f..T...x..)..D.0.vB.LDB..z.n...a.?..m'3:....6.....T.D@..*..W........,.Xd.....Z]b~..Wl...I.....?.~.....E4.z.o.+4".J.&.t.Vt.^G.D........./........2.....#D..+.GZ...[!.....E.j6X..m..JH..U.FcD...V...>F..m..n..............O...@ .\|...u....#aV....c~..DyI.B.....K<.if.P.+..........v...t.d..Vg.1$....l]...{8....'.w...bE."R4.W\|.U.......yv.M..7.&...L2...@lk...O.{'L..}xm. ....

Chrome Cache Entry: 161

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	167678
Entropy (8bit):	5.527026244643689
Encrypted:	false
SSDEEP:	3072:z4OUawH9PWgyKnpO8a9OVcn6XoMomxQXdjPowoW19hKn3aUr5XuW1:zzUPHZbyKnpvkOVCIoMlxQXdjPow19QX
MD5:	6BD40B8FCA66BEA52227533FEACEF616
SHA1:	82A91D5CF359FBCB7D0907397A28E33DEDA6821B
SHA-256:	20ED76A0CB9DE606D1CABB762F88944DA10AC7874443A4B2C11D1E008E76740E
SHA-512:	9F60DB2423A1059F203F1569A5DA3B54730D80357B4A402FDBBA0D58DF3B1CE12AE2BAA9EF17EB75AF6FD1E72F903B9DB4CE53212AA217B58E755E0A5881270C
Malicious:	false
Reputation:	low
Preview:	(()=>{var e,t,r={5289:()=>{!function(){var e=/\[object (Boolean\|Number\|String\|Function\|Array\|Date\|RegExp)\]/;function t(t){return null==t?String(t):(t=e.exec(Object.prototype.toString.call(Object(t))))?t[1].toLowerCase():"object"}function r(e,t){return Object.prototype.hasOwnProperty.call(Object(e),t)}function n(e){if(!e\|\|"object"!=t(e)\|\|e.nodeType\|\|e==e.window)return!1;try{if(e.constructor&&!r(e,"constructor")&&!r(e.constructor.prototype,"isPrototypeOf"))return!1}catch(o){return!1}for(var n in e);return void 0===n\|\|r(e,n)}function o(e,t,r){this.b=e,this.f=t\|\|function(){},this.d=!1,this.a={},this.c=[],this.e=function(e){return{set:function(t,r){c(i(t,r),e.a)},get:function(t){return e.get(t)}}}(this),s(this,e,!r);var n=e.push,o=this;e.push=function(){var t=[].slice.call(arguments,0),r=n.apply(e,t);return s(o,t),r}}function s(e,r,o){for(e.c.push.apply(e.c,r);!1===e.d&&0<e.c.length;){if("array"==t(r=e.c.shift()))e:{var s=r,a=e.a;if("string"==t(s[0])){for(var l=s[0].split("."),u=l.pop(),p=

Chrome Cache Entry: 162

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 377 x 345, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	114217
Entropy (8bit):	7.992399851463594
Encrypted:	true
SSDEEP:	3072:92M8A3YgAwwS3edRmAV2arTUU56opmltP:k3A3F1f3evm62mCJtP
MD5:	023762B6AEC2A2249B8FDFB638F00EF3
SHA1:	F89237C6BC3F84DB882B640394725D61F3C9CB35
SHA-256:	62367D960F6827A816BA4F698C0CAA2F3A4B4672988EDBB2117353B7EFC48D24
SHA-512:	F3C704E5E6EED20F39AEF1E4ED6DFD82C1A6FC6E3DD91187250E3D4A6342139C31A4BD12AE18B244BEFB4D44D3C725BAE1C6F0C1DB1332F4C0E9261C15162F40
Malicious:	false
Reputation:	low
URL:	https://metamask-support.web.app/favicon.ico
Preview:	.PNG........IHDR...y...Y.....}._... .IDATx...i.e.q&..{/.....}.H.YZH...(R%...n.cK......z.!L.60. .....7.00...==.........LK..[.w.U"YUYkfUfU...{....E..<....=K..._.9.........(...."..@.b.6w........_.<:....^.G..W..l'(....v.R..~....\|.x....];.E\6.Os..6N........U.\|.1..jQ......$a..kC..5M....!.9........6-I..L..>..5.C..`x.4..........pq..x"......].....?39).....b.w._4G.M..".3}....cl..,{..!....bf.r.. .N.......(>.W.....;....I..+.}.Or...><}...Y...\?;..}}:..)#......7`p6....n...$......$9...DT.....U.......{>J.k0..6=^.L.3.w....+..BBx.d&.c.F..H..+.q..F().Kg........9Q...'.t.3.".cH....t..,....^N.t:..d/A.8YN6.7j..q`fj........I.Q..[..4.c.)....E.$...H:...Fp.R.H..~J.1.D.H.g.d...q;.z......,......\|@.6..`..X....._..m:m>.~{.c?z.........n}j...tes.R..jJ."..2-..@.}.. ...7.......}.S.J..g(.#...\>.u.r.nf...Wap.S]"...o.../......Nh....!9C..l!;u..!.I>..hT.q(.q.x......e.7.8$%4.>...WTr0.c0g...Y6.3...4.=.K.... 8o8.lG.F..&...B.....'..>.......>.?%.b(.0..6'?.3..C{.=>.nl.(.kA#j

Chrome Cache Entry: 163

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65465)
Category:	dropped
Size (bytes):	237002
Entropy (8bit):	5.333567572492398
Encrypted:	false
SSDEEP:	3072:Txuhg16HzwivVM+NZbg8tqhoqw1dObGw6TDlq7d4zf8IHba:VuK0zw4VM+LE6PqwHOB6TD9O
MD5:	1C9C9895D460E87B9B0EE2A6F76967D1
SHA1:	8A6C7E053F3F9E0972D7EAFC8A72F6878BCB305A
SHA-256:	AD742485361C941303447E6A514B9307E25C3E15987D9F8593B270056193D404
SHA-512:	2995E6DC98D30AC486003B1A4B06B0D28B5394997BE92234DE160389F9557FCA7176BEA4BD5C1FB1E02EB9F49D2065FED21FAF1D6B758C8D0E777587789C59E1
Malicious:	false
Reputation:	low
Preview:	/! For license information please see main.48dd4429.js.LICENSE.txt /.!function(){var e={890:function(e,t){var n;!function(t,n){"use strict";"object"===typeof e.exports?e.exports=t.document?n(t,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return n(e)}:n(t)}("undefined"!==typeof window?window:this,(function(r,o){"use strict";var i=[],a=Object.getPrototypeOf,l=i.slice,u=i.flat?function(e){return i.flat.call(e)}:function(e){return i.concat.apply([],e)},s=i.push,c=i.indexOf,f={},d=f.toString,p=f.hasOwnProperty,h=p.toString,m=h.call(Object),g={},v=function(e){return"function"===typeof e&&"number"!==typeof e.nodeType&&"function"!==typeof e.item},y=function(e){return null!=e&&e===e.window},b=r.document,w={type:!0,src:!0,nonce:!0,noModule:!0};function x(e,t,n){var r,o,i=(n=n\|\|b).createElement("script");if(i.text=e,t)for(r in w)(o=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&i.setAttribute(r,o);n.head.appendChild(i).parentNode.removeChild(i)}function

Chrome Cache Entry: 164

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 43386
Category:	downloaded
Size (bytes):	12103
Entropy (8bit):	7.985508379818304
Encrypted:	false
SSDEEP:	192:26MV2PEUWRRI2V6SKbQ5W3YmOCf3OrXT9WVc2VhjIJ0STPz03aWagq692yvggkbH:+tjRIm6SoITu3khUTPjI5TI3afb6YmwH
MD5:	BED9B675380C07EDC84C03D0F362B192
SHA1:	0FC4DCF8CB37F303985159B5A9348BB9AE5C6397
SHA-256:	3AE25E7FC8C3E9A41A480D9E39BA0E43845FFD78B0529695530925F6575852D9
SHA-512:	25CFA4027E02D6EEFC95202417A02843556BDA5D28685735FFC102F3C63327CFAAF59B9565E3B23F2BC26C0274EFDD0F69CCA8AD9A3A6DCEA4D903722DCE9FB6
Malicious:	false
Reputation:	low
URL:	https://www.redditstatic.com/ads/pixel.js
Preview:	...........;ks.....n..i....k\....<.L..J..P"$F.q....{.%....;;.6.B.}N.w.>.....I.0(EF.J..t$T=4......yc....J...T.4..%......."\..F......d..%...U52..c+>F..f..JV...... ......."tW>..[.x....L.Q.P.u't..\]wF..w=.._.z....Boi...'.c.FIl<m6M..]u.;..K....F..'.Y.R........AK.M..3.c.N.....D....yf..&...Y2oz......uS..Q.j.]&$...8[.i..6cT..L5.....#..Q.&hj;I.=6I.L.^,F..v;z\&...S4.....N.h...\|.].@..D..B.=a..pz.P.....e.5...vQ....G~.fK...2..A.r9ko...ihO...R...[-...}.=.T.39O!.3"....(.....C.....q...8.E..6...}..]t.D...'gN.;.2.>....k.+.S)D.....0...".Q.i.,./r.(....Nn.Tmhz.m.Kx]Zj....y.<...;.D.r..H...U....@%.Kb...W.V.{..`i......._...'.!)5.CGd.....e.+^...E.8.Q..d.....4.#...\|_.7.UCm..I{.{.f['...`..c:mBjMp......N..F..1.>*. YR...N....~te.B.}n....M..q.<...x.....N:.6.....CT..+^.1........!;...8....P..d+>.q",3..qW.....qb....:....C@ey.$..c.D.e..D...-..<...!......$.d...I`sj.;yplf.....<Y.2I.y.L.Du1".K..... gWn.4.2.....l..0ri....I...Q......X.x.}.?.......A.I..).g.a4.....o..-c

Chrome Cache Entry: 165

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	167678
Entropy (8bit):	5.527026244643689
Encrypted:	false
SSDEEP:	3072:z4OUawH9PWgyKnpO8a9OVcn6XoMomxQXdjPowoW19hKn3aUr5XuW1:zzUPHZbyKnpvkOVCIoMlxQXdjPow19QX
MD5:	6BD40B8FCA66BEA52227533FEACEF616
SHA1:	82A91D5CF359FBCB7D0907397A28E33DEDA6821B
SHA-256:	20ED76A0CB9DE606D1CABB762F88944DA10AC7874443A4B2C11D1E008E76740E
SHA-512:	9F60DB2423A1059F203F1569A5DA3B54730D80357B4A402FDBBA0D58DF3B1CE12AE2BAA9EF17EB75AF6FD1E72F903B9DB4CE53212AA217B58E755E0A5881270C
Malicious:	false
Reputation:	low
URL:	https://cmp.osano.com/AzZMxHTbQDOQD8c1J/a2e89f0e-f467-4542-bfea-30ea2c1a6648/osano.js
Preview:	(()=>{var e,t,r={5289:()=>{!function(){var e=/\[object (Boolean\|Number\|String\|Function\|Array\|Date\|RegExp)\]/;function t(t){return null==t?String(t):(t=e.exec(Object.prototype.toString.call(Object(t))))?t[1].toLowerCase():"object"}function r(e,t){return Object.prototype.hasOwnProperty.call(Object(e),t)}function n(e){if(!e\|\|"object"!=t(e)\|\|e.nodeType\|\|e==e.window)return!1;try{if(e.constructor&&!r(e,"constructor")&&!r(e.constructor.prototype,"isPrototypeOf"))return!1}catch(o){return!1}for(var n in e);return void 0===n\|\|r(e,n)}function o(e,t,r){this.b=e,this.f=t\|\|function(){},this.d=!1,this.a={},this.c=[],this.e=function(e){return{set:function(t,r){c(i(t,r),e.a)},get:function(t){return e.get(t)}}}(this),s(this,e,!r);var n=e.push,o=this;e.push=function(){var t=[].slice.call(arguments,0),r=n.apply(e,t);return s(o,t),r}}function s(e,r,o){for(e.c.push.apply(e.c,r);!1===e.d&&0<e.c.length;){if("array"==t(r=e.c.shift()))e:{var s=r,a=e.a;if("string"==t(s[0])){for(var l=s[0].split("."),u=l.pop(),p=

Chrome Cache Entry: 166

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 167

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	286493
Entropy (8bit):	5.582592665216646
Encrypted:	false
SSDEEP:	6144:M4XAZMxwxw0ZtXynsuhqSysTZEcoiFJ/I1ZZ:VXAwow0Ztosn/
MD5:	9FCBEDCA85CFA1E77802636D32B605E0
SHA1:	7BB87EDC2A61BDA0D998DF283572E5C0634C3689
SHA-256:	425126237DEAE294997FE060FCA06A3F28D6CFC302ADCA1BC3AEB84981240D3E
SHA-512:	09436278B82ABE9CE4900192E4F0D9F3A2B9EC7C0E8E26F2D151A3AA73BAD9C42BED7C6A8B2BF778E43BD652772075472AD8DB6D6782530E0C88117A96594DD7
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-V74KQYX56N&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_referral_exclusion","priority":10,"tag_id":8},{"function":"__ogt_1p_data_v2","priority":10,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_auto

Chrome Cache Entry: 168

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/rp.gif?ts=1727182571257&id=t2_8mqvi05zf&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=eff1c192-9d83-4810-baa4-4e552783599e&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_5afed25b&dpm=&dpcc=&dprc=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 169

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	12019
Entropy (8bit):	4.728440317155309
Encrypted:	false
SSDEEP:	192:7h/+7QQKF3oE3WAiq4rKp/svCULRoWBkiCcxj4kPeErXoXDK:7F+7Qb3oCK+xsvtoWBKcxj4kPeErXoX2
MD5:	51BCEA2625EB2C6E9268A7377A792C86
SHA1:	5EEB306E6584EED1747C36C11724F193711D430E
SHA-256:	5E722754F038988BA4B6D7F380D60191EBA3B6E01D4A00749A28B79C53521F5B
SHA-512:	B70F1531C4D61F0494B516DA54AF09EABAEC98A040993052DC63E39AC7D45E1DD112F5DC898DBFE57F77E5EE60ED8ACF31B0B4ECA8451FE93F77A962026DC742
Malicious:	false
Reputation:	low
Preview:	<svg width="172" height="33" viewBox="0 0 172 33" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M151.256 16.64C150.372 16.0569 149.398 15.6423 148.476 15.124C147.878 14.7871 147.241 14.489 146.722 14.0614C145.838 13.3358 146.02 11.9105 146.943 11.2885C148.268 10.4074 150.463 10.8997 150.697 12.7009C150.697 12.7397 150.736 12.7657 150.775 12.7657H152.776C152.828 12.7657 152.867 12.7268 152.854 12.675C152.75 11.431 152.269 10.3944 151.386 9.73355C150.541 9.09862 149.58 8.76172 148.553 8.76172C143.266 8.76172 142.785 14.3465 145.63 16.1088C145.955 16.3161 148.748 17.7155 149.736 18.3245C150.723 18.9335 151.035 20.0479 150.606 20.929C150.216 21.7324 149.203 22.2896 148.19 22.2248C147.085 22.16 146.228 21.564 145.929 20.631C145.877 20.4626 145.851 20.1386 145.851 19.9961C145.851 19.9572 145.812 19.9183 145.773 19.9183H143.604C143.565 19.9183 143.526 19.9572 143.526 19.9961C143.526 21.564 143.916 22.4321 144.981 23.2226C145.981 23.9741 147.072 24.2851 148.203 24.2851C151.165 24.28

Chrome Cache Entry: 170

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, truncated
Category:	dropped
Size (bytes):	27
Entropy (8bit):	3.169382490786664
Encrypted:	false
SSDEEP:	3:Ftt4ipq4Wln:XtrxWl
MD5:	8C843FFB840DECAC646424269B22D78B
SHA1:	823D50FAA2E9D2D75CAEC02C2595C953F165F956
SHA-256:	CF5E566DC08016A63E1667A2726699C3ADE378330F8E073CC4632D0D19B9F51E
SHA-512:	C0C1F5624728CDBC57F55C77F6D59C53584F74731A25B8C2EC7C8CCE72725C7AB7A1E1266A8940F19E6C018D3E4A6FA36602987E7EC3680CFFE501A44289070C
Malicious:	false
Reputation:	low
Preview:	...........................

Chrome Cache Entry: 171

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, truncated
Category:	downloaded
Size (bytes):	27
Entropy (8bit):	3.169382490786664
Encrypted:	false
SSDEEP:	3:Ftt4ipq4Wln:XtrxWl
MD5:	8C843FFB840DECAC646424269B22D78B
SHA1:	823D50FAA2E9D2D75CAEC02C2595C953F165F956
SHA-256:	CF5E566DC08016A63E1667A2726699C3ADE378330F8E073CC4632D0D19B9F51E
SHA-512:	C0C1F5624728CDBC57F55C77F6D59C53584F74731A25B8C2EC7C8CCE72725C7AB7A1E1266A8940F19E6C018D3E4A6FA36602987E7EC3680CFFE501A44289070C
Malicious:	false
Reputation:	low
URL:	https://pixel-config.reddit.com/pixels/t2_vjeg7kke/config
Preview:	...........................

Chrome Cache Entry: 172

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 14940, version 1.0
Category:	downloaded
Size (bytes):	14940
Entropy (8bit):	7.987709153796886
Encrypted:	false
SSDEEP:	384:jWFlinIHZ2pt1u3Wy51ENJI5ClSohvI1jGm9RChE1:jWFlinIW1DyI0SSo6BGm9oE1
MD5:	A46FB7AAE99225FDFD9D64B2B8B1063F
SHA1:	1EE50BF5985C1956DDE1C06D9B1CEC4645DDB92B
SHA-256:	4B5816BBFC52587979139951355FE4048DA02CE60E40CEF8E4A1EFB6CD396281
SHA-512:	4D981728548E5AF03C71AC0209D4F669D109558B369B0CBCC6BBFA1C32B43D1358B0322F65CFDF6E286EEB743081E6804C5B58292DBA4FC34BA76171FB3B716E
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aXo.woff2
Preview:	wOF2......:\.......d..9...........................6..\..r.`?STATH..F.......[.....6.$..B. ..\|......'.5l.F.;........x..T)..g............Y...U..A.. Lr.v/..s.a..\|....wX.O:.w...IBP.=...$.F...kK.p..Wz...\|;...E2.'Y......V.r!.\..S.....+.\..-\|.rN.<.....\...f%..He....y..{.c.d..E...z...F]{..^e.E..4..R..T...M._.K...Z.B.R1....(.cE.0X[.?......w.{g.}..D< .K...0..e.......X.I. M!Xxi...m.....a]:..zo...A...H1UQ....X..-[97 @.@.25...............t...E...]..$...S..]..iuKV\.m-...t..{...&dTnuL..."....h.Z$.+"z.....~.......$.S9T....CB.Dx...7......?-......x.H..g..8g...I..[...RT.......`d.....5 YC.......3.....Fy........m.Rt[.[.)..v..m...<....u9....S..f.Qrv...s...K..1@.A....BY..@,.......N_....N... .....x..8 ..>.;..,.5...F....F...i..':..$.Io$c$..?.....g.3.)C..........aD..{..DU.L...X...!."..Q.....$..I.O..!....4.....C...$.P.p....`.SO5.>Z....g.n8..B...*+PN.J...#..\|......>._.`:.?u.&...k@..!.1.2.a. ......?F.(..x`d.. (...C.......7...E[9.t.L.k..7.S...o..n.o..u.,....U....p$...

Chrome Cache Entry: 173

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	12019
Entropy (8bit):	4.728440317155309
Encrypted:	false
SSDEEP:	192:7h/+7QQKF3oE3WAiq4rKp/svCULRoWBkiCcxj4kPeErXoXDK:7F+7Qb3oCK+xsvtoWBKcxj4kPeErXoX2
MD5:	51BCEA2625EB2C6E9268A7377A792C86
SHA1:	5EEB306E6584EED1747C36C11724F193711D430E
SHA-256:	5E722754F038988BA4B6D7F380D60191EBA3B6E01D4A00749A28B79C53521F5B
SHA-512:	B70F1531C4D61F0494B516DA54AF09EABAEC98A040993052DC63E39AC7D45E1DD112F5DC898DBFE57F77E5EE60ED8ACF31B0B4ECA8451FE93F77A962026DC742
Malicious:	false
Reputation:	low
Preview:	<svg width="172" height="33" viewBox="0 0 172 33" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M151.256 16.64C150.372 16.0569 149.398 15.6423 148.476 15.124C147.878 14.7871 147.241 14.489 146.722 14.0614C145.838 13.3358 146.02 11.9105 146.943 11.2885C148.268 10.4074 150.463 10.8997 150.697 12.7009C150.697 12.7397 150.736 12.7657 150.775 12.7657H152.776C152.828 12.7657 152.867 12.7268 152.854 12.675C152.75 11.431 152.269 10.3944 151.386 9.73355C150.541 9.09862 149.58 8.76172 148.553 8.76172C143.266 8.76172 142.785 14.3465 145.63 16.1088C145.955 16.3161 148.748 17.7155 149.736 18.3245C150.723 18.9335 151.035 20.0479 150.606 20.929C150.216 21.7324 149.203 22.2896 148.19 22.2248C147.085 22.16 146.228 21.564 145.929 20.631C145.877 20.4626 145.851 20.1386 145.851 19.9961C145.851 19.9572 145.812 19.9183 145.773 19.9183H143.604C143.565 19.9183 143.526 19.9572 143.526 19.9961C143.526 21.564 143.916 22.4321 144.981 23.2226C145.981 23.9741 147.072 24.2851 148.203 24.2851C151.165 24.28

Chrome Cache Entry: 174

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (49166)
Category:	downloaded
Size (bytes):	179102
Entropy (8bit):	5.5245205828639685
Encrypted:	false
SSDEEP:	3072:6tU8rZ6EYpUBQM/aRhj4fze2JTh2iz/YiCb:orZ6EYpUBQM/aRhj4fK2JT9/YRb
MD5:	13A96CB83A320C959DCD873CE03EC023
SHA1:	F88DE11D705EBBEBC84D0E804CBD865E4F5B1B8A
SHA-256:	11D5BF5457CD6E431E46F777A6DC682E4D62840F009CBE482643BB463E401226
SHA-512:	2077F017ED21E6D83BE7CBD75CA1572BA42B4BFBF5927FC4E5D079B0C019669E4777550649862604C2B0695AFCE864E921F15168313FADD9C350CDAB3FA78FC8
Malicious:	false
Reputation:	low
URL:	https://metamask.io/faqs/
Preview:	<!DOCTYPE html><html lang="en"><head><meta charSet="utf-8"/><meta http-equiv="x-ua-compatible" content="ie=edge"/><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"/><meta name="generator" content="Gatsby 5.12.10"/><meta data-react-helmet="true" name="keywords" content="blockchain, entrepreneurs, innovation, venture studio"/><meta data-react-helmet="true" name="referrer" content="no-referrer-when-downgrade"/><meta data-react-helmet="true" property="og:type" content="page"/><meta data-react-helmet="true" name="title" content="MetaMask FAQs: Mastering Your Blockchain Wallet"/><meta data-react-helmet="true" property="og:title" content="MetaMask FAQs: Mastering Your Blockchain Wallet"/><meta data-react-helmet="true" name="twitter:title" content="MetaMask FAQs: Mastering Your Blockchain Wallet"/><meta data-react-helmet="true" name="description" content="Your Ultimate Guide to Navigating Web3 Safely with MetaMask. Answers to All Your Crypto Wallet Queries."

Chrome Cache Entry: 175

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	86
Entropy (8bit):	4.612457348662773
Encrypted:	false
SSDEEP:	3:YTyLV/VfsqPNVcSLQzRE9Ldu1S4:YWLV9soDLQmpdwS4
MD5:	69EE36929D2172DEA5C1763BAC240040
SHA1:	77EF82FC4B7757D445E8901E16D785AA44E3B1DF
SHA-256:	45DA241A91C843B268ADA7481CDECE1AA679F2720931EFFEA28D83E1398D66A9
SHA-512:	FDA2E41AF332441315A0BC6352DD1B9350F92E13447CD1A58CBAA96748271C26780A653EA94F023808F572D1E329C855EF6A0E3B51558BF474ABA614AB26051A
Malicious:	false
Reputation:	low
URL:	https://www.redditstatic.com/ads/conversions-config/v1/pixel/config/t2_8mqvi05zf_telemetry
Preview:	{"version_hash":"8d515a58","url":"https://www.redditstatic.com/ads/8d515a58/pixel.js"}

Chrome Cache Entry: 176

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 177

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (677), with no line terminators
Category:	downloaded
Size (bytes):	677
Entropy (8bit):	4.918589265815836
Encrypted:	false
SSDEEP:	12:qTE0sF56ME2CAsBVaGuaXiMIgAUa8Mx8LVe19oNTG7faKj2a:0E0sr6FXjVaGaMrXMxYVqiC75j2a
MD5:	9C8D9F8DD2CD7E50BFA2BC262B3B4E94
SHA1:	6586C2B8C61A60A30B35CF7A1847ADA00517D17C
SHA-256:	4BED164DAE111169626DF85A07DE334E41CF9B290970471D12DDDD4167256E41
SHA-512:	B68E380616509CA136DD749DD63F106A48B2C0DF1003886D8A0DBC17E898D445053EFC26F0CD081BA0E6878E54D7AA573CE111C1B7CCBE6F4EC251F8AA431E0F
Malicious:	false
Reputation:	low
URL:	https://metamask-support.web.app/logo192.png
Preview:	<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1,user-scalable=no"/><meta name="theme-color" content="#000000"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="manifest" href="/manifest.json"/><link rel="stylesheet" href="//fonts.googleapis.com/css?family=Montserrat"/><title>React App</title><script defer="defer" src="/static/js/main.48dd4429.js"></script><link href="/static/css/main.5392d7b8.css" rel="stylesheet"></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 24, 2024 14:55:43.832624912 CEST	49675	443	192.168.2.5	23.1.237.91
Sep 24, 2024 14:55:43.832627058 CEST	49674	443	192.168.2.5	23.1.237.91
Sep 24, 2024 14:55:43.988858938 CEST	49673	443	192.168.2.5	23.1.237.91
Sep 24, 2024 14:55:53.450951099 CEST	49675	443	192.168.2.5	23.1.237.91
Sep 24, 2024 14:55:53.548628092 CEST	49674	443	192.168.2.5	23.1.237.91
Sep 24, 2024 14:55:53.641475916 CEST	49673	443	192.168.2.5	23.1.237.91
Sep 24, 2024 14:55:54.227303028 CEST	49709	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:54.227336884 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:54.227446079 CEST	49709	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:54.227647066 CEST	49710	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:54.227663994 CEST	443	49710	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:54.227803946 CEST	49710	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:54.227868080 CEST	49709	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:54.227880001 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:54.228112936 CEST	49710	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:54.228123903 CEST	443	49710	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:54.690562010 CEST	443	49710	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:54.690692902 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:54.691162109 CEST	49710	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:54.691162109 CEST	49709	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:54.691174030 CEST	443	49710	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:54.691193104 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:54.692277908 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:54.692291975 CEST	443	49710	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:54.692430973 CEST	49709	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:54.692430973 CEST	49710	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:54.693543911 CEST	49710	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:54.693641901 CEST	443	49710	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:54.693681002 CEST	49709	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:54.693753958 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:54.693849087 CEST	49710	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:54.693860054 CEST	443	49710	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:54.737793922 CEST	49710	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:54.831083059 CEST	49709	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:54.831100941 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:54.888236046 CEST	443	49710	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:54.888382912 CEST	443	49710	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:54.888600111 CEST	49710	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:54.889235020 CEST	49710	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:54.889254093 CEST	443	49710	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:54.904365063 CEST	49709	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:54.904666901 CEST	49711	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:54.904707909 CEST	443	49711	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:54.904798985 CEST	49711	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:54.904995918 CEST	49711	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:54.905019999 CEST	443	49711	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:54.947398901 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.156069040 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.156133890 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.156172037 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.156178951 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.156213045 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.156447887 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.156481028 CEST	49709	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:55.156481028 CEST	49709	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:55.156501055 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.156876087 CEST	49709	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:55.157088041 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.157118082 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.157202005 CEST	49709	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:55.157211065 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.160979986 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.161073923 CEST	49709	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:55.161082029 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.208206892 CEST	49709	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:55.241437912 CEST	443	49703	23.1.237.91	192.168.2.5
Sep 24, 2024 14:55:55.241570950 CEST	49703	443	192.168.2.5	23.1.237.91
Sep 24, 2024 14:55:55.244929075 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.244981050 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.245026112 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.245033979 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.245060921 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.245079994 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.245112896 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.245135069 CEST	49709	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:55.245135069 CEST	49709	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:55.245135069 CEST	49709	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:55.245155096 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.245338917 CEST	49709	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:55.245651960 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.245693922 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.245713949 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.245744944 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.245763063 CEST	49709	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:55.245775938 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.245783091 CEST	49709	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:55.246383905 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.246403933 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.246426105 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.246444941 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.246480942 CEST	49709	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:55.246480942 CEST	49709	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:55.246481895 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.246493101 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.246565104 CEST	49709	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:55.246572018 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.246687889 CEST	49709	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:55.247198105 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.247253895 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.247304916 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.247308969 CEST	49709	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:55.247319937 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.247380018 CEST	49709	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:55.247392893 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.296859026 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.297008038 CEST	49709	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:55.297027111 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.333673954 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.333720922 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.333739996 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.333760023 CEST	49709	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:55.333775043 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.333875895 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.333904982 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.333942890 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.333956003 CEST	49709	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:55.333956003 CEST	49709	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:55.333976984 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.334027052 CEST	49709	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:55.335566044 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.335581064 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.335609913 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.335618019 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.335637093 CEST	49709	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:55.335644960 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.335721970 CEST	49709	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:55.335807085 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.335825920 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.335891962 CEST	49709	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:55.335891962 CEST	49709	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:55.335900068 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.366981030 CEST	443	49711	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.367507935 CEST	49711	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:55.367526054 CEST	443	49711	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.367914915 CEST	443	49711	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.369522095 CEST	49711	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:55.369611025 CEST	443	49711	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.369708061 CEST	49711	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:55.379184008 CEST	49709	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:55.386305094 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.386318922 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.386358976 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.386405945 CEST	49709	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:55.386421919 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.386464119 CEST	49709	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:55.386476994 CEST	49709	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:55.415405989 CEST	443	49711	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.422606945 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.422633886 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.422817945 CEST	49709	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:55.422835112 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.422868967 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.422893047 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.422904015 CEST	49709	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:55.422913074 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.422981024 CEST	49709	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:55.422981024 CEST	49709	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:55.423842907 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.423867941 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.423969030 CEST	49709	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:55.423969030 CEST	49709	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:55.423985004 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.424061060 CEST	49709	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:55.426333904 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.426354885 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.426414013 CEST	49709	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:55.426423073 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.426464081 CEST	49709	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:55.426489115 CEST	49709	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:55.427654028 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.427670002 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.427742004 CEST	49709	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:55.427748919 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.427773952 CEST	49709	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:55.427877903 CEST	49709	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:55.428308964 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.428330898 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.428376913 CEST	49709	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:55.428395033 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.428419113 CEST	49709	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:55.428459883 CEST	49709	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:55.428795099 CEST	49709	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:55.430098057 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.430123091 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.430180073 CEST	49709	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:55.430196047 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.430274010 CEST	49709	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:55.483436108 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.483572006 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.483676910 CEST	49709	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:55.483676910 CEST	49709	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:55.485253096 CEST	49709	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:55.485272884 CEST	443	49709	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.543514967 CEST	49713	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:55.543565035 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.543636084 CEST	49713	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:55.543911934 CEST	49713	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:55.543924093 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.590106010 CEST	443	49711	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.590162992 CEST	443	49711	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.590183973 CEST	443	49711	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.590244055 CEST	49711	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:55.590269089 CEST	443	49711	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.590306044 CEST	49711	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:55.590312958 CEST	443	49711	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.590339899 CEST	443	49711	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.590392113 CEST	49711	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:55.590399027 CEST	443	49711	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.590408087 CEST	443	49711	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:55.590449095 CEST	49711	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:55.591974974 CEST	49711	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:55.591993093 CEST	443	49711	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.006676912 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.055126905 CEST	49713	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.130429029 CEST	49713	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.130449057 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.131741047 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.131819963 CEST	49713	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.136817932 CEST	49713	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.136909008 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.137455940 CEST	49713	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.137468100 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.149529934 CEST	49717	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.149560928 CEST	443	49717	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.149636030 CEST	49717	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.150366068 CEST	49717	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.150377989 CEST	443	49717	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.189461946 CEST	49713	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.371439934 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.371545076 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.371579885 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.371613026 CEST	49713	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.371638060 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.371705055 CEST	49713	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.371824980 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.379199982 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.379234076 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.379267931 CEST	49713	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.379286051 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.379405975 CEST	49713	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.379430056 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.379477978 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.379498959 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.379513979 CEST	49713	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.379523039 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.379561901 CEST	49713	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.380484104 CEST	49719	443	192.168.2.5	142.250.186.164
Sep 24, 2024 14:55:56.380523920 CEST	443	49719	142.250.186.164	192.168.2.5
Sep 24, 2024 14:55:56.380798101 CEST	49719	443	192.168.2.5	142.250.186.164
Sep 24, 2024 14:55:56.380930901 CEST	49719	443	192.168.2.5	142.250.186.164
Sep 24, 2024 14:55:56.380943060 CEST	443	49719	142.250.186.164	192.168.2.5
Sep 24, 2024 14:55:56.385601997 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.439001083 CEST	49713	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.439023972 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.460180998 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.460222960 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.460248947 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.460300922 CEST	49713	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.460321903 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.460398912 CEST	49713	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.460503101 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.460546970 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.460550070 CEST	49713	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.460560083 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.460599899 CEST	49713	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.461030960 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.461092949 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.461121082 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.461138010 CEST	49713	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.461154938 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.461190939 CEST	49713	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.461843967 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.467988968 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.468024015 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.468053102 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.468103886 CEST	49713	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.468122959 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.468163967 CEST	49713	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.468231916 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.468271971 CEST	49713	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.468281984 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.468364954 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.468396902 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.468411922 CEST	49713	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.468421936 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.468460083 CEST	49713	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.468468904 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.474172115 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.474201918 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.474267960 CEST	49713	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.474281073 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.474349022 CEST	49713	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.474462032 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.516937017 CEST	49713	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.516957998 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.548661947 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.548727036 CEST	49713	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.548744917 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.548783064 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.548835993 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.548846960 CEST	49713	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.548855066 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.548894882 CEST	49713	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.549390078 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.551095963 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.551104069 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.551117897 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.551126003 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.551143885 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.551182985 CEST	49713	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.551203012 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.551230907 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.551233053 CEST	49713	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.551254988 CEST	49713	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.551273108 CEST	49713	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.556581974 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.556597948 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.556682110 CEST	49713	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.556699038 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.556745052 CEST	49713	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.557657003 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.557672977 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.557740927 CEST	49713	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.557753086 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.557804108 CEST	49713	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.604065895 CEST	443	49717	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.604595900 CEST	49717	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.604623079 CEST	443	49717	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.605014086 CEST	443	49717	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.605765104 CEST	49717	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.605845928 CEST	443	49717	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.606151104 CEST	49717	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.637835979 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.637861013 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.638001919 CEST	49713	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.638022900 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.638117075 CEST	49713	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.638721943 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.638739109 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.638804913 CEST	49713	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.638814926 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.638855934 CEST	49713	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.639589071 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.639605045 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.639656067 CEST	49713	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.639667988 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.639688969 CEST	49713	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.639710903 CEST	49713	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.640599966 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.640618086 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.640685081 CEST	49713	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.640695095 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.640719891 CEST	49713	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.640742064 CEST	49713	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.645482063 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.645500898 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.645628929 CEST	49713	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.645641088 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.645703077 CEST	49713	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.646527052 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.646543980 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.646631002 CEST	49713	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.646639109 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.646682024 CEST	49713	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.647397995 CEST	443	49717	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.651824951 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.651844978 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.651885986 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.651909113 CEST	49713	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.651916981 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.651932955 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.651998043 CEST	49713	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.652005911 CEST	49713	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.652014971 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.652062893 CEST	49713	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.652470112 CEST	49713	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.652484894 CEST	443	49713	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.825208902 CEST	443	49717	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.825407982 CEST	443	49717	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.825438023 CEST	443	49717	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.825476885 CEST	49717	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.825489998 CEST	443	49717	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.825539112 CEST	49717	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.825754881 CEST	443	49717	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.825826883 CEST	443	49717	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.825870037 CEST	49717	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.825875044 CEST	443	49717	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.826520920 CEST	443	49717	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.826543093 CEST	443	49717	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.826575041 CEST	49717	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.826582909 CEST	443	49717	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.826653957 CEST	49717	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.836833000 CEST	443	49717	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.836906910 CEST	443	49717	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.836968899 CEST	49717	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.863063097 CEST	49717	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.863075972 CEST	443	49717	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.949373007 CEST	49720	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.949413061 CEST	443	49720	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.949482918 CEST	49720	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.949882984 CEST	49721	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.949912071 CEST	443	49721	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.949991941 CEST	49721	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.950385094 CEST	49722	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.950403929 CEST	443	49722	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.950448990 CEST	49722	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.950768948 CEST	49720	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.950786114 CEST	443	49720	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.950970888 CEST	49721	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.950984955 CEST	443	49721	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:56.951246023 CEST	49722	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:56.951260090 CEST	443	49722	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:57.023566008 CEST	443	49719	142.250.186.164	192.168.2.5
Sep 24, 2024 14:55:57.023963928 CEST	49719	443	192.168.2.5	142.250.186.164
Sep 24, 2024 14:55:57.023989916 CEST	443	49719	142.250.186.164	192.168.2.5
Sep 24, 2024 14:55:57.025051117 CEST	443	49719	142.250.186.164	192.168.2.5
Sep 24, 2024 14:55:57.025185108 CEST	49719	443	192.168.2.5	142.250.186.164
Sep 24, 2024 14:55:57.026298046 CEST	49719	443	192.168.2.5	142.250.186.164
Sep 24, 2024 14:55:57.026374102 CEST	443	49719	142.250.186.164	192.168.2.5
Sep 24, 2024 14:55:57.075030088 CEST	49719	443	192.168.2.5	142.250.186.164
Sep 24, 2024 14:55:57.075042009 CEST	443	49719	142.250.186.164	192.168.2.5
Sep 24, 2024 14:55:57.127157927 CEST	49719	443	192.168.2.5	142.250.186.164
Sep 24, 2024 14:55:58.361773014 CEST	443	49722	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:58.361972094 CEST	443	49720	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:58.362873077 CEST	443	49721	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:58.410324097 CEST	49722	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:58.410324097 CEST	49721	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:58.411221027 CEST	49720	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:58.464416981 CEST	53336	53	192.168.2.5	1.1.1.1
Sep 24, 2024 14:55:58.469383001 CEST	53	53336	1.1.1.1	192.168.2.5
Sep 24, 2024 14:55:58.469481945 CEST	53336	53	192.168.2.5	1.1.1.1
Sep 24, 2024 14:55:58.487638950 CEST	53336	53	192.168.2.5	1.1.1.1
Sep 24, 2024 14:55:58.492503881 CEST	53	53336	1.1.1.1	192.168.2.5
Sep 24, 2024 14:55:58.682554007 CEST	49721	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:58.682586908 CEST	443	49721	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:58.683832884 CEST	443	49721	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:58.683957100 CEST	49721	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:58.686131954 CEST	49720	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:58.686165094 CEST	443	49720	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:58.686722994 CEST	443	49720	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:58.692308903 CEST	49722	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:58.692327023 CEST	443	49722	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:58.692840099 CEST	443	49722	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:58.694246054 CEST	49721	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:58.694371939 CEST	443	49721	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:58.698780060 CEST	49720	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:58.698931932 CEST	443	49720	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:58.701309919 CEST	49722	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:58.701455116 CEST	443	49722	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:58.701821089 CEST	49721	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:58.701831102 CEST	443	49721	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:58.701942921 CEST	49720	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:58.705672026 CEST	49722	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:58.747406006 CEST	443	49720	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:58.751410961 CEST	443	49722	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:58.754123926 CEST	49721	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:58.858232021 CEST	443	49721	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:58.858336926 CEST	443	49721	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:58.858411074 CEST	49721	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:58.865076065 CEST	443	49720	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:58.865227938 CEST	443	49720	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:58.865261078 CEST	443	49720	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:58.865314960 CEST	49720	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:58.865324020 CEST	443	49720	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:58.865425110 CEST	49720	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:58.865513086 CEST	443	49720	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:58.865616083 CEST	443	49720	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:58.865638971 CEST	443	49720	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:58.865662098 CEST	49720	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:58.865667105 CEST	443	49720	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:58.865911007 CEST	49720	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:58.866373062 CEST	443	49720	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:58.876898050 CEST	443	49720	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:58.877141953 CEST	49720	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:58.914191961 CEST	53	53336	1.1.1.1	192.168.2.5
Sep 24, 2024 14:55:58.952981949 CEST	49721	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:58.953017950 CEST	443	49721	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:58.960694075 CEST	443	49722	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:58.960763931 CEST	443	49722	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:58.960808992 CEST	443	49722	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:58.960841894 CEST	443	49722	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:58.960864067 CEST	49722	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:58.960872889 CEST	443	49722	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:58.960932016 CEST	49722	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:58.961251020 CEST	443	49722	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:58.961323023 CEST	49722	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:58.968286991 CEST	443	49722	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:58.968368053 CEST	443	49722	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:58.968413115 CEST	443	49722	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:58.968413115 CEST	49722	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:58.968424082 CEST	443	49722	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:58.968473911 CEST	49722	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:58.968481064 CEST	443	49722	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:58.969383001 CEST	53336	53	192.168.2.5	1.1.1.1
Sep 24, 2024 14:55:58.974519014 CEST	443	49722	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:58.974641085 CEST	49722	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:58.974649906 CEST	443	49722	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:58.982577085 CEST	53336	53	192.168.2.5	1.1.1.1
Sep 24, 2024 14:55:58.987924099 CEST	53	53336	1.1.1.1	192.168.2.5
Sep 24, 2024 14:55:58.988023043 CEST	53336	53	192.168.2.5	1.1.1.1
Sep 24, 2024 14:55:59.008711100 CEST	53338	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:59.008763075 CEST	443	53338	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.008997917 CEST	53338	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:59.011466026 CEST	53338	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:59.011476994 CEST	443	53338	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.011974096 CEST	49720	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:59.012007952 CEST	443	49720	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.016282082 CEST	49722	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:59.016294003 CEST	443	49722	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.046976089 CEST	443	49722	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.047017097 CEST	443	49722	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.047040939 CEST	49722	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:59.047049999 CEST	443	49722	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.047169924 CEST	49722	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:59.047175884 CEST	443	49722	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.047247887 CEST	443	49722	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.047281027 CEST	443	49722	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.047312975 CEST	443	49722	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.047342062 CEST	49722	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:59.047348976 CEST	443	49722	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.047408104 CEST	49722	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:59.048098087 CEST	443	49722	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.048124075 CEST	443	49722	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.048166037 CEST	49722	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:59.048173904 CEST	443	49722	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.048285961 CEST	49722	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:59.054673910 CEST	443	49722	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.054714918 CEST	443	49722	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.054861069 CEST	49722	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:59.054879904 CEST	443	49722	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.055322886 CEST	443	49722	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.055351973 CEST	443	49722	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.055393934 CEST	49722	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:59.055408955 CEST	443	49722	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.055445910 CEST	443	49722	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.055526018 CEST	49722	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:59.055533886 CEST	443	49722	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.055576086 CEST	49722	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:59.055799961 CEST	443	49722	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.055885077 CEST	443	49722	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.055922985 CEST	49722	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:59.055926085 CEST	443	49722	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.055939913 CEST	443	49722	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.056045055 CEST	49722	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:59.062167883 CEST	443	49722	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.062230110 CEST	443	49722	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.062378883 CEST	443	49722	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.062381029 CEST	49722	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:59.062390089 CEST	443	49722	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.062427998 CEST	49722	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:59.133330107 CEST	443	49722	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.133385897 CEST	443	49722	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.133483887 CEST	443	49722	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.133492947 CEST	49722	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:59.133510113 CEST	443	49722	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.133538961 CEST	443	49722	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.133588076 CEST	49722	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:59.133600950 CEST	443	49722	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.133661032 CEST	49722	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:59.135459900 CEST	443	49722	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.135471106 CEST	443	49722	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.135531902 CEST	443	49722	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.135545015 CEST	49722	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:59.135550976 CEST	443	49722	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.135581017 CEST	49722	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:59.135624886 CEST	49722	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:59.141608000 CEST	443	49722	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.141624928 CEST	443	49722	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.141705990 CEST	49722	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:59.141726017 CEST	443	49722	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.141935110 CEST	49722	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:59.142719984 CEST	443	49722	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.142738104 CEST	443	49722	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.142855883 CEST	443	49722	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.142904043 CEST	49722	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:59.142904043 CEST	49722	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:59.142904043 CEST	49722	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:59.152443886 CEST	49722	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:59.152463913 CEST	443	49722	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.213460922 CEST	53339	443	192.168.2.5	184.28.90.27
Sep 24, 2024 14:55:59.213495970 CEST	443	53339	184.28.90.27	192.168.2.5
Sep 24, 2024 14:55:59.213665962 CEST	53339	443	192.168.2.5	184.28.90.27
Sep 24, 2024 14:55:59.217823029 CEST	53339	443	192.168.2.5	184.28.90.27
Sep 24, 2024 14:55:59.217835903 CEST	443	53339	184.28.90.27	192.168.2.5
Sep 24, 2024 14:55:59.240087986 CEST	53340	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:59.240118980 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.240197897 CEST	53340	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:59.240580082 CEST	53340	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:59.240595102 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.462690115 CEST	443	53338	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.488742113 CEST	53338	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:59.488779068 CEST	443	53338	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.489402056 CEST	443	53338	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.490305901 CEST	53338	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:59.490394115 CEST	443	53338	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.490735054 CEST	53338	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:59.535401106 CEST	443	53338	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.640587091 CEST	443	53338	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.640813112 CEST	443	53338	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.640999079 CEST	53338	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:59.649529934 CEST	53338	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:59.649553061 CEST	443	53338	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.703195095 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.703754902 CEST	53340	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:59.703764915 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.704133034 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.704989910 CEST	53340	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:59.705060005 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.705152988 CEST	53340	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:59.747402906 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.803344011 CEST	53340	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:59.890327930 CEST	443	53339	184.28.90.27	192.168.2.5
Sep 24, 2024 14:55:59.890418053 CEST	53339	443	192.168.2.5	184.28.90.27
Sep 24, 2024 14:55:59.895124912 CEST	53339	443	192.168.2.5	184.28.90.27
Sep 24, 2024 14:55:59.895133972 CEST	443	53339	184.28.90.27	192.168.2.5
Sep 24, 2024 14:55:59.895462036 CEST	443	53339	184.28.90.27	192.168.2.5
Sep 24, 2024 14:55:59.930699110 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.930788994 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.930829048 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.930866957 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.930891991 CEST	53340	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:59.930898905 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.930911064 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.930943012 CEST	53340	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:59.930960894 CEST	53340	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:59.934659958 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.934711933 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.934743881 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.934756041 CEST	53340	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:59.934766054 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.934803963 CEST	53340	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:59.935025930 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.938117981 CEST	53339	443	192.168.2.5	184.28.90.27
Sep 24, 2024 14:55:59.941333055 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.941370010 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.941433907 CEST	53340	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:55:59.941446066 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:55:59.941524982 CEST	53340	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:56:00.019531965 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:56:00.019608974 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:56:00.019656897 CEST	53340	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:56:00.019671917 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:56:00.019814968 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:56:00.019850016 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:56:00.019855976 CEST	53340	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:56:00.019866943 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:56:00.020426989 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:56:00.020463943 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:56:00.020483971 CEST	53340	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:56:00.020490885 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:56:00.020503998 CEST	53340	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:56:00.023324966 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:56:00.023369074 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:56:00.023387909 CEST	53340	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:56:00.023396015 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:56:00.023468971 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:56:00.023504972 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:56:00.023513079 CEST	53340	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:56:00.023521900 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:56:00.023541927 CEST	53340	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:56:00.023559093 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:56:00.023633957 CEST	53340	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:56:00.023639917 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:56:00.024395943 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:56:00.024458885 CEST	53340	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:56:00.024466038 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:56:00.030019045 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:56:00.030064106 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:56:00.030118942 CEST	53340	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:56:00.030128002 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:56:00.030193090 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:56:00.030224085 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:56:00.030240059 CEST	53340	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:56:00.030246019 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:56:00.030272961 CEST	53340	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:56:00.030723095 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:56:00.030771017 CEST	53340	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:56:00.030777931 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:56:00.078583956 CEST	53340	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:56:00.108479023 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:56:00.108539104 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:56:00.108567953 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:56:00.108603954 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:56:00.108608007 CEST	53340	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:56:00.108624935 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:56:00.108637094 CEST	53340	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:56:00.108680010 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:56:00.110186100 CEST	53340	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:56:00.110193014 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:56:00.110299110 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:56:00.110312939 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:56:00.110344887 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:56:00.110351086 CEST	53340	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:56:00.110358953 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:56:00.110368967 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:56:00.110380888 CEST	53340	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:56:00.110407114 CEST	53340	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:56:00.112658978 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:56:00.112684011 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:56:00.112720966 CEST	53340	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:56:00.112729073 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:56:00.112747908 CEST	53340	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:56:00.118938923 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:56:00.118971109 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:56:00.119014978 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:56:00.119035006 CEST	53340	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:56:00.119045019 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:56:00.119061947 CEST	53340	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:56:00.119106054 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:56:00.119107008 CEST	53340	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:56:00.119434118 CEST	53340	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:56:00.392947912 CEST	53340	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:56:00.393711090 CEST	53340	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:56:00.393724918 CEST	443	53340	199.36.158.100	192.168.2.5
Sep 24, 2024 14:56:00.869739056 CEST	53343	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:56:00.869782925 CEST	443	53343	199.36.158.100	192.168.2.5
Sep 24, 2024 14:56:00.869904041 CEST	53343	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:56:00.870245934 CEST	53343	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:56:00.870258093 CEST	443	53343	199.36.158.100	192.168.2.5
Sep 24, 2024 14:56:01.046087980 CEST	53339	443	192.168.2.5	184.28.90.27
Sep 24, 2024 14:56:01.091403961 CEST	443	53339	184.28.90.27	192.168.2.5
Sep 24, 2024 14:56:01.237363100 CEST	443	53339	184.28.90.27	192.168.2.5
Sep 24, 2024 14:56:01.258016109 CEST	443	53339	184.28.90.27	192.168.2.5
Sep 24, 2024 14:56:01.258104086 CEST	53339	443	192.168.2.5	184.28.90.27
Sep 24, 2024 14:56:01.264564991 CEST	53339	443	192.168.2.5	184.28.90.27
Sep 24, 2024 14:56:01.264580011 CEST	443	53339	184.28.90.27	192.168.2.5
Sep 24, 2024 14:56:01.324162960 CEST	443	53343	199.36.158.100	192.168.2.5
Sep 24, 2024 14:56:01.324486971 CEST	53343	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:56:01.324501038 CEST	443	53343	199.36.158.100	192.168.2.5
Sep 24, 2024 14:56:01.324858904 CEST	443	53343	199.36.158.100	192.168.2.5
Sep 24, 2024 14:56:01.325215101 CEST	53343	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:56:01.325284958 CEST	443	53343	199.36.158.100	192.168.2.5
Sep 24, 2024 14:56:01.325432062 CEST	53343	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:56:01.354290009 CEST	53344	443	192.168.2.5	184.28.90.27
Sep 24, 2024 14:56:01.354326963 CEST	443	53344	184.28.90.27	192.168.2.5
Sep 24, 2024 14:56:01.354799032 CEST	53344	443	192.168.2.5	184.28.90.27
Sep 24, 2024 14:56:01.355206013 CEST	53344	443	192.168.2.5	184.28.90.27
Sep 24, 2024 14:56:01.355221033 CEST	443	53344	184.28.90.27	192.168.2.5
Sep 24, 2024 14:56:01.367408991 CEST	443	53343	199.36.158.100	192.168.2.5
Sep 24, 2024 14:56:01.407691002 CEST	53343	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:56:01.684312105 CEST	443	53343	199.36.158.100	192.168.2.5
Sep 24, 2024 14:56:01.684422970 CEST	443	53343	199.36.158.100	192.168.2.5
Sep 24, 2024 14:56:01.684550047 CEST	53343	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:56:01.685271025 CEST	53343	443	192.168.2.5	199.36.158.100
Sep 24, 2024 14:56:01.685291052 CEST	443	53343	199.36.158.100	192.168.2.5
Sep 24, 2024 14:56:01.992901087 CEST	443	53344	184.28.90.27	192.168.2.5
Sep 24, 2024 14:56:01.993010998 CEST	53344	443	192.168.2.5	184.28.90.27
Sep 24, 2024 14:56:02.001841068 CEST	53344	443	192.168.2.5	184.28.90.27
Sep 24, 2024 14:56:02.001852036 CEST	443	53344	184.28.90.27	192.168.2.5
Sep 24, 2024 14:56:02.002085924 CEST	443	53344	184.28.90.27	192.168.2.5
Sep 24, 2024 14:56:02.003994942 CEST	53344	443	192.168.2.5	184.28.90.27
Sep 24, 2024 14:56:02.051398039 CEST	443	53344	184.28.90.27	192.168.2.5
Sep 24, 2024 14:56:02.269216061 CEST	443	53344	184.28.90.27	192.168.2.5
Sep 24, 2024 14:56:02.269284010 CEST	443	53344	184.28.90.27	192.168.2.5
Sep 24, 2024 14:56:02.269350052 CEST	53344	443	192.168.2.5	184.28.90.27
Sep 24, 2024 14:56:02.270878077 CEST	53344	443	192.168.2.5	184.28.90.27
Sep 24, 2024 14:56:02.270895004 CEST	443	53344	184.28.90.27	192.168.2.5
Sep 24, 2024 14:56:06.936017990 CEST	443	49719	142.250.186.164	192.168.2.5
Sep 24, 2024 14:56:06.936093092 CEST	443	49719	142.250.186.164	192.168.2.5
Sep 24, 2024 14:56:06.936305046 CEST	49719	443	192.168.2.5	142.250.186.164
Sep 24, 2024 14:56:07.753815889 CEST	49719	443	192.168.2.5	142.250.186.164
Sep 24, 2024 14:56:07.753848076 CEST	443	49719	142.250.186.164	192.168.2.5
Sep 24, 2024 14:56:07.791687012 CEST	53352	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:07.791738987 CEST	443	53352	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:07.791795969 CEST	53352	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:07.792031050 CEST	53353	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:07.792081118 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:07.792215109 CEST	53353	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:07.792562008 CEST	53353	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:07.792574883 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:07.792892933 CEST	53352	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:07.792910099 CEST	443	53352	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.259067059 CEST	443	53352	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.259561062 CEST	53352	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:08.259584904 CEST	443	53352	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.260651112 CEST	443	53352	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.260735989 CEST	53352	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:08.262336016 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.266757011 CEST	53352	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:08.266917944 CEST	443	53352	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.266951084 CEST	53353	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:08.266979933 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.268276930 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.268496037 CEST	53353	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:08.269587040 CEST	53353	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:08.269732952 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.269886017 CEST	53352	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:08.269897938 CEST	443	53352	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.313781977 CEST	53352	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:08.313800097 CEST	53353	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:08.313817024 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.362282991 CEST	53353	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:08.376689911 CEST	443	53352	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.376806974 CEST	443	53352	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.376873970 CEST	53352	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:08.377460003 CEST	53352	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:08.377477884 CEST	443	53352	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.380749941 CEST	53353	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:08.423408985 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.496191025 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.496248007 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.496273994 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.496299982 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.496325970 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.496340036 CEST	53353	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:08.496356964 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.496380091 CEST	53353	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:08.496515989 CEST	53353	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:08.498626947 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.498667002 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.498697996 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.498723984 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.498749971 CEST	53353	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:08.498773098 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.498794079 CEST	53353	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:08.549696922 CEST	53353	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:08.549706936 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.586817980 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.586847067 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.586874008 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.586942911 CEST	53353	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:08.586951971 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.586968899 CEST	53353	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:08.587263107 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.587285995 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.587307930 CEST	53353	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:08.587313890 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.587771893 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.587795019 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.587845087 CEST	53353	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:08.587845087 CEST	53353	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:08.587852955 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.587950945 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.588027954 CEST	53353	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:08.588033915 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.588771105 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.588797092 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.588820934 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.588844061 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.588848114 CEST	53353	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:08.588855028 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.588932037 CEST	53353	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:08.588988066 CEST	53353	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:08.588992119 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.589672089 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.589698076 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.589725018 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.589739084 CEST	53353	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:08.589745045 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.589772940 CEST	53353	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:08.590370893 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.590452909 CEST	53353	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:08.590459108 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.642787933 CEST	53353	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:08.642803907 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.677382946 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.677419901 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.677445889 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.677474976 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.677483082 CEST	53353	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:08.677491903 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.677503109 CEST	53353	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:08.677561045 CEST	53353	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:08.677572966 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.677747011 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.677773952 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.677798033 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.677808046 CEST	53353	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:08.677813053 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.677870989 CEST	53353	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:08.677885056 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.678086042 CEST	53353	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:08.678597927 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.678607941 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.678637028 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.678647041 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.678661108 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.678694010 CEST	53353	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:08.678694010 CEST	53353	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:08.678700924 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.678719997 CEST	53353	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:08.678750992 CEST	53353	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:08.678832054 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.678848028 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.678915024 CEST	53353	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:08.678915024 CEST	53353	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:08.678920984 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.678996086 CEST	53353	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:08.679712057 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.679728031 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.679796934 CEST	53353	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:08.679802895 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.679868937 CEST	53353	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:08.768435955 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.768460035 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.768537045 CEST	53353	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:08.768553972 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.768631935 CEST	53353	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:08.768840075 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.768853903 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.768913031 CEST	53353	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:08.768919945 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.769028902 CEST	53353	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:08.769401073 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.769418001 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.769488096 CEST	53353	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:08.769495010 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.769578934 CEST	53353	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:08.770140886 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.770159960 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.770226002 CEST	53353	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:08.770234108 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.770309925 CEST	53353	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:08.770673990 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.770741940 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.770872116 CEST	53353	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:08.773046017 CEST	53353	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:08.773065090 CEST	443	53353	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.783940077 CEST	53355	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:08.783979893 CEST	443	53355	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.784065008 CEST	53355	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:08.784352064 CEST	53355	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:08.784367085 CEST	443	53355	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.785397053 CEST	53356	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:08.785424948 CEST	443	53356	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.785482883 CEST	53356	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:08.786210060 CEST	53356	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:08.786222935 CEST	443	53356	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:08.792862892 CEST	53357	443	192.168.2.5	18.164.52.93
Sep 24, 2024 14:56:08.792910099 CEST	443	53357	18.164.52.93	192.168.2.5
Sep 24, 2024 14:56:08.793039083 CEST	53357	443	192.168.2.5	18.164.52.93
Sep 24, 2024 14:56:08.793433905 CEST	53357	443	192.168.2.5	18.164.52.93
Sep 24, 2024 14:56:08.793445110 CEST	443	53357	18.164.52.93	192.168.2.5
Sep 24, 2024 14:56:08.793771982 CEST	53358	443	192.168.2.5	13.33.187.2
Sep 24, 2024 14:56:08.793797016 CEST	443	53358	13.33.187.2	192.168.2.5
Sep 24, 2024 14:56:08.794033051 CEST	53358	443	192.168.2.5	13.33.187.2
Sep 24, 2024 14:56:08.794233084 CEST	53358	443	192.168.2.5	13.33.187.2
Sep 24, 2024 14:56:08.794241905 CEST	443	53358	13.33.187.2	192.168.2.5
Sep 24, 2024 14:56:09.403352976 CEST	443	53355	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.403896093 CEST	53355	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:09.403908968 CEST	443	53355	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.404295921 CEST	443	53355	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.405046940 CEST	443	53356	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.407824039 CEST	53356	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:09.407850981 CEST	443	53356	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.409013033 CEST	443	53356	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.410511971 CEST	53355	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:09.410634041 CEST	443	53355	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.412086964 CEST	53356	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:09.412189007 CEST	443	53356	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.412338972 CEST	53355	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:09.412391901 CEST	53356	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:09.455401897 CEST	443	53355	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.459395885 CEST	443	53356	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.513837099 CEST	443	53357	18.164.52.93	192.168.2.5
Sep 24, 2024 14:56:09.514096022 CEST	53357	443	192.168.2.5	18.164.52.93
Sep 24, 2024 14:56:09.514132977 CEST	443	53357	18.164.52.93	192.168.2.5
Sep 24, 2024 14:56:09.515224934 CEST	443	53357	18.164.52.93	192.168.2.5
Sep 24, 2024 14:56:09.515297890 CEST	53357	443	192.168.2.5	18.164.52.93
Sep 24, 2024 14:56:09.516505957 CEST	53357	443	192.168.2.5	18.164.52.93
Sep 24, 2024 14:56:09.516571999 CEST	443	53357	18.164.52.93	192.168.2.5
Sep 24, 2024 14:56:09.517060041 CEST	53357	443	192.168.2.5	18.164.52.93
Sep 24, 2024 14:56:09.517066956 CEST	443	53357	18.164.52.93	192.168.2.5
Sep 24, 2024 14:56:09.521517038 CEST	443	53356	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.521581888 CEST	443	53356	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.521610022 CEST	443	53356	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.521631002 CEST	53356	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:09.521637917 CEST	443	53356	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.521657944 CEST	443	53356	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.521677017 CEST	53356	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:09.521693945 CEST	443	53356	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.521748066 CEST	53356	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:09.521761894 CEST	443	53356	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.522274017 CEST	443	53356	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.522313118 CEST	53356	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:09.522320986 CEST	443	53356	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.526823044 CEST	443	53356	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.526865005 CEST	443	53356	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.526894093 CEST	53356	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:09.526901960 CEST	443	53356	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.526935101 CEST	53356	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:09.537157059 CEST	443	53358	13.33.187.2	192.168.2.5
Sep 24, 2024 14:56:09.537484884 CEST	53358	443	192.168.2.5	13.33.187.2
Sep 24, 2024 14:56:09.537502050 CEST	443	53358	13.33.187.2	192.168.2.5
Sep 24, 2024 14:56:09.538546085 CEST	443	53358	13.33.187.2	192.168.2.5
Sep 24, 2024 14:56:09.538631916 CEST	53358	443	192.168.2.5	13.33.187.2
Sep 24, 2024 14:56:09.539926052 CEST	53358	443	192.168.2.5	13.33.187.2
Sep 24, 2024 14:56:09.539998055 CEST	443	53358	13.33.187.2	192.168.2.5
Sep 24, 2024 14:56:09.540236950 CEST	53358	443	192.168.2.5	13.33.187.2
Sep 24, 2024 14:56:09.540246964 CEST	443	53358	13.33.187.2	192.168.2.5
Sep 24, 2024 14:56:09.554502010 CEST	443	53355	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.554574966 CEST	443	53355	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.554601908 CEST	443	53355	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.554626942 CEST	443	53355	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.554642916 CEST	53355	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:09.554652929 CEST	443	53355	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.554686069 CEST	443	53355	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.554702997 CEST	53355	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:09.554709911 CEST	443	53355	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.554718971 CEST	53355	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:09.554738045 CEST	443	53355	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.554780006 CEST	53355	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:09.554785013 CEST	443	53355	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.559449911 CEST	443	53355	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.559492111 CEST	443	53355	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.559537888 CEST	53355	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:09.559545040 CEST	443	53355	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.559590101 CEST	53355	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:09.565092087 CEST	53357	443	192.168.2.5	18.164.52.93
Sep 24, 2024 14:56:09.570704937 CEST	443	53355	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.580705881 CEST	53358	443	192.168.2.5	13.33.187.2
Sep 24, 2024 14:56:09.607654095 CEST	443	53356	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.608297110 CEST	443	53356	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.608335972 CEST	443	53356	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.608347893 CEST	53356	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:09.608366966 CEST	443	53356	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.608403921 CEST	53356	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:09.608409882 CEST	443	53356	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.608967066 CEST	443	53356	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.609002113 CEST	443	53356	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.609006882 CEST	53356	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:09.609018087 CEST	443	53356	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.609050035 CEST	53356	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:09.609056950 CEST	443	53356	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.609096050 CEST	443	53356	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.609127045 CEST	443	53356	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.609158039 CEST	53356	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:09.609165907 CEST	443	53356	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.609210014 CEST	53356	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:09.609647989 CEST	443	53356	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.609704971 CEST	443	53356	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.609755039 CEST	53356	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:09.609760046 CEST	443	53356	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.610670090 CEST	443	53356	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.610739946 CEST	53356	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:09.610744953 CEST	443	53356	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.610783100 CEST	443	53356	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.610837936 CEST	53356	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:09.610845089 CEST	443	53356	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.611099005 CEST	443	53356	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.611254930 CEST	53356	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:09.611260891 CEST	443	53356	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.611354113 CEST	443	53356	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.611507893 CEST	53356	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:09.611814022 CEST	53356	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:09.611824036 CEST	443	53356	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.611927032 CEST	53355	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:09.642946005 CEST	443	53355	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.643034935 CEST	443	53355	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.643093109 CEST	443	53355	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.643121004 CEST	443	53355	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.643150091 CEST	53355	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:09.643157959 CEST	443	53355	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.643174887 CEST	53355	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:09.643606901 CEST	443	53355	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.643632889 CEST	443	53355	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.643667936 CEST	53355	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:09.643673897 CEST	443	53355	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.643706083 CEST	53355	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:09.644335032 CEST	443	53355	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.644382000 CEST	443	53355	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.644448996 CEST	53355	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:09.644454956 CEST	443	53355	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.644536018 CEST	443	53355	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.644572020 CEST	53355	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:09.644577026 CEST	443	53355	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.644948959 CEST	443	53355	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.644987106 CEST	443	53355	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.645009995 CEST	53355	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:09.645015955 CEST	443	53355	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.645045996 CEST	443	53355	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.645062923 CEST	53355	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:09.645067930 CEST	443	53355	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.645097017 CEST	443	53355	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.645098925 CEST	53355	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:09.645108938 CEST	443	53355	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.645145893 CEST	53355	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:09.645844936 CEST	443	53355	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.645930052 CEST	443	53355	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.645975113 CEST	53355	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:09.646132946 CEST	53355	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:09.646140099 CEST	443	53355	185.199.108.153	192.168.2.5
Sep 24, 2024 14:56:09.646151066 CEST	53355	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:09.646178961 CEST	53355	443	192.168.2.5	185.199.108.153
Sep 24, 2024 14:56:09.764046907 CEST	443	53357	18.164.52.93	192.168.2.5
Sep 24, 2024 14:56:09.772794962 CEST	443	53357	18.164.52.93	192.168.2.5
Sep 24, 2024 14:56:09.772805929 CEST	443	53357	18.164.52.93	192.168.2.5
Sep 24, 2024 14:56:09.772816896 CEST	443	53357	18.164.52.93	192.168.2.5
Sep 24, 2024 14:56:09.772881031 CEST	53357	443	192.168.2.5	18.164.52.93
Sep 24, 2024 14:56:09.772907972 CEST	443	53357	18.164.52.93	192.168.2.5
Sep 24, 2024 14:56:09.772962093 CEST	53357	443	192.168.2.5	18.164.52.93
Sep 24, 2024 14:56:09.806797028 CEST	443	53358	13.33.187.2	192.168.2.5
Sep 24, 2024 14:56:09.814332962 CEST	443	53358	13.33.187.2	192.168.2.5
Sep 24, 2024 14:56:09.814346075 CEST	443	53358	13.33.187.2	192.168.2.5
Sep 24, 2024 14:56:09.814404011 CEST	443	53358	13.33.187.2	192.168.2.5
Sep 24, 2024 14:56:09.814441919 CEST	53358	443	192.168.2.5	13.33.187.2
Sep 24, 2024 14:56:09.814459085 CEST	443	53358	13.33.187.2	192.168.2.5
Sep 24, 2024 14:56:09.814469099 CEST	53358	443	192.168.2.5	13.33.187.2
Sep 24, 2024 14:56:09.814518929 CEST	53358	443	192.168.2.5	13.33.187.2
Sep 24, 2024 14:56:09.815299034 CEST	53358	443	192.168.2.5	13.33.187.2
Sep 24, 2024 14:56:09.815315008 CEST	443	53358	13.33.187.2	192.168.2.5
Sep 24, 2024 14:56:09.829257965 CEST	53359	443	192.168.2.5	13.33.187.25
Sep 24, 2024 14:56:09.829298973 CEST	443	53359	13.33.187.25	192.168.2.5
Sep 24, 2024 14:56:09.829407930 CEST	53359	443	192.168.2.5	13.33.187.25
Sep 24, 2024 14:56:09.829729080 CEST	53359	443	192.168.2.5	13.33.187.25
Sep 24, 2024 14:56:09.829744101 CEST	443	53359	13.33.187.25	192.168.2.5
Sep 24, 2024 14:56:09.852802992 CEST	443	53357	18.164.52.93	192.168.2.5
Sep 24, 2024 14:56:09.852826118 CEST	443	53357	18.164.52.93	192.168.2.5
Sep 24, 2024 14:56:09.852871895 CEST	53357	443	192.168.2.5	18.164.52.93
Sep 24, 2024 14:56:09.852895975 CEST	443	53357	18.164.52.93	192.168.2.5
Sep 24, 2024 14:56:09.852912903 CEST	53357	443	192.168.2.5	18.164.52.93
Sep 24, 2024 14:56:09.852943897 CEST	53357	443	192.168.2.5	18.164.52.93
Sep 24, 2024 14:56:09.859553099 CEST	443	53357	18.164.52.93	192.168.2.5
Sep 24, 2024 14:56:09.859571934 CEST	443	53357	18.164.52.93	192.168.2.5
Sep 24, 2024 14:56:09.859618902 CEST	53357	443	192.168.2.5	18.164.52.93
Sep 24, 2024 14:56:09.859641075 CEST	443	53357	18.164.52.93	192.168.2.5
Sep 24, 2024 14:56:09.859653950 CEST	53357	443	192.168.2.5	18.164.52.93
Sep 24, 2024 14:56:09.859679937 CEST	53357	443	192.168.2.5	18.164.52.93
Sep 24, 2024 14:56:09.938836098 CEST	443	53357	18.164.52.93	192.168.2.5
Sep 24, 2024 14:56:09.938862085 CEST	443	53357	18.164.52.93	192.168.2.5
Sep 24, 2024 14:56:09.938927889 CEST	53357	443	192.168.2.5	18.164.52.93
Sep 24, 2024 14:56:09.938961029 CEST	443	53357	18.164.52.93	192.168.2.5
Sep 24, 2024 14:56:09.939007998 CEST	53357	443	192.168.2.5	18.164.52.93
Sep 24, 2024 14:56:09.940030098 CEST	443	53357	18.164.52.93	192.168.2.5
Sep 24, 2024 14:56:09.940048933 CEST	443	53357	18.164.52.93	192.168.2.5
Sep 24, 2024 14:56:09.940135956 CEST	53357	443	192.168.2.5	18.164.52.93
Sep 24, 2024 14:56:09.940144062 CEST	443	53357	18.164.52.93	192.168.2.5
Sep 24, 2024 14:56:09.940166950 CEST	53357	443	192.168.2.5	18.164.52.93
Sep 24, 2024 14:56:09.940186977 CEST	53357	443	192.168.2.5	18.164.52.93
Sep 24, 2024 14:56:09.942255974 CEST	443	53357	18.164.52.93	192.168.2.5
Sep 24, 2024 14:56:09.942272902 CEST	443	53357	18.164.52.93	192.168.2.5
Sep 24, 2024 14:56:09.942307949 CEST	443	53357	18.164.52.93	192.168.2.5
Sep 24, 2024 14:56:09.942321062 CEST	53357	443	192.168.2.5	18.164.52.93
Sep 24, 2024 14:56:09.942326069 CEST	443	53357	18.164.52.93	192.168.2.5
Sep 24, 2024 14:56:09.942354918 CEST	53357	443	192.168.2.5	18.164.52.93
Sep 24, 2024 14:56:09.946429014 CEST	443	53357	18.164.52.93	192.168.2.5
Sep 24, 2024 14:56:09.946441889 CEST	443	53357	18.164.52.93	192.168.2.5
Sep 24, 2024 14:56:09.946516991 CEST	53357	443	192.168.2.5	18.164.52.93
Sep 24, 2024 14:56:09.946525097 CEST	443	53357	18.164.52.93	192.168.2.5
Sep 24, 2024 14:56:09.946562052 CEST	53357	443	192.168.2.5	18.164.52.93
Sep 24, 2024 14:56:09.986927986 CEST	53357	443	192.168.2.5	18.164.52.93
Sep 24, 2024 14:56:10.035976887 CEST	443	53357	18.164.52.93	192.168.2.5
Sep 24, 2024 14:56:10.035995007 CEST	443	53357	18.164.52.93	192.168.2.5
Sep 24, 2024 14:56:10.036058903 CEST	53357	443	192.168.2.5	18.164.52.93
Sep 24, 2024 14:56:10.036077976 CEST	443	53357	18.164.52.93	192.168.2.5
Sep 24, 2024 14:56:10.036123991 CEST	53357	443	192.168.2.5	18.164.52.93
Sep 24, 2024 14:56:10.036612034 CEST	443	53357	18.164.52.93	192.168.2.5
Sep 24, 2024 14:56:10.036627054 CEST	443	53357	18.164.52.93	192.168.2.5
Sep 24, 2024 14:56:10.036701918 CEST	53357	443	192.168.2.5	18.164.52.93
Sep 24, 2024 14:56:10.036709070 CEST	443	53357	18.164.52.93	192.168.2.5
Sep 24, 2024 14:56:10.036849976 CEST	53357	443	192.168.2.5	18.164.52.93
Sep 24, 2024 14:56:10.037367105 CEST	443	53357	18.164.52.93	192.168.2.5
Sep 24, 2024 14:56:10.037381887 CEST	443	53357	18.164.52.93	192.168.2.5
Sep 24, 2024 14:56:10.037419081 CEST	443	53357	18.164.52.93	192.168.2.5
Sep 24, 2024 14:56:10.037439108 CEST	53357	443	192.168.2.5	18.164.52.93
Sep 24, 2024 14:56:10.037447929 CEST	443	53357	18.164.52.93	192.168.2.5
Sep 24, 2024 14:56:10.037472010 CEST	53357	443	192.168.2.5	18.164.52.93
Sep 24, 2024 14:56:10.037489891 CEST	53357	443	192.168.2.5	18.164.52.93
Sep 24, 2024 14:56:10.037498951 CEST	443	53357	18.164.52.93	192.168.2.5
Sep 24, 2024 14:56:10.037543058 CEST	53357	443	192.168.2.5	18.164.52.93
Sep 24, 2024 14:56:10.038686991 CEST	53357	443	192.168.2.5	18.164.52.93
Sep 24, 2024 14:56:10.038707972 CEST	443	53357	18.164.52.93	192.168.2.5
Sep 24, 2024 14:56:10.053909063 CEST	53360	443	192.168.2.5	18.245.31.112
Sep 24, 2024 14:56:10.053941965 CEST	443	53360	18.245.31.112	192.168.2.5
Sep 24, 2024 14:56:10.054022074 CEST	53360	443	192.168.2.5	18.245.31.112
Sep 24, 2024 14:56:10.054408073 CEST	53360	443	192.168.2.5	18.245.31.112
Sep 24, 2024 14:56:10.054418087 CEST	443	53360	18.245.31.112	192.168.2.5
Sep 24, 2024 14:56:10.131232023 CEST	53363	443	192.168.2.5	199.232.188.157
Sep 24, 2024 14:56:10.131293058 CEST	443	53363	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:10.131408930 CEST	53363	443	192.168.2.5	199.232.188.157
Sep 24, 2024 14:56:10.131684065 CEST	53363	443	192.168.2.5	199.232.188.157
Sep 24, 2024 14:56:10.131700993 CEST	443	53363	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:10.568538904 CEST	443	53359	13.33.187.25	192.168.2.5
Sep 24, 2024 14:56:10.568813086 CEST	53359	443	192.168.2.5	13.33.187.25
Sep 24, 2024 14:56:10.568847895 CEST	443	53359	13.33.187.25	192.168.2.5
Sep 24, 2024 14:56:10.569930077 CEST	443	53359	13.33.187.25	192.168.2.5
Sep 24, 2024 14:56:10.569994926 CEST	53359	443	192.168.2.5	13.33.187.25
Sep 24, 2024 14:56:10.570456028 CEST	53359	443	192.168.2.5	13.33.187.25
Sep 24, 2024 14:56:10.570524931 CEST	443	53359	13.33.187.25	192.168.2.5
Sep 24, 2024 14:56:10.570631981 CEST	53359	443	192.168.2.5	13.33.187.25
Sep 24, 2024 14:56:10.611941099 CEST	53359	443	192.168.2.5	13.33.187.25
Sep 24, 2024 14:56:10.611968040 CEST	443	53359	13.33.187.25	192.168.2.5
Sep 24, 2024 14:56:10.659038067 CEST	53359	443	192.168.2.5	13.33.187.25
Sep 24, 2024 14:56:10.797157049 CEST	443	53363	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:10.797460079 CEST	53363	443	192.168.2.5	199.232.188.157
Sep 24, 2024 14:56:10.797468901 CEST	443	53363	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:10.798660994 CEST	443	53363	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:10.798881054 CEST	53363	443	192.168.2.5	199.232.188.157
Sep 24, 2024 14:56:10.800090075 CEST	53363	443	192.168.2.5	199.232.188.157
Sep 24, 2024 14:56:10.800090075 CEST	53363	443	192.168.2.5	199.232.188.157
Sep 24, 2024 14:56:10.800112009 CEST	443	53363	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:10.800168037 CEST	443	53363	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:10.802673101 CEST	443	53360	18.245.31.112	192.168.2.5
Sep 24, 2024 14:56:10.802948952 CEST	53360	443	192.168.2.5	18.245.31.112
Sep 24, 2024 14:56:10.802966118 CEST	443	53360	18.245.31.112	192.168.2.5
Sep 24, 2024 14:56:10.804049969 CEST	443	53360	18.245.31.112	192.168.2.5
Sep 24, 2024 14:56:10.804264069 CEST	53360	443	192.168.2.5	18.245.31.112
Sep 24, 2024 14:56:10.804560900 CEST	53360	443	192.168.2.5	18.245.31.112
Sep 24, 2024 14:56:10.804560900 CEST	53360	443	192.168.2.5	18.245.31.112
Sep 24, 2024 14:56:10.804625988 CEST	443	53360	18.245.31.112	192.168.2.5
Sep 24, 2024 14:56:10.839381933 CEST	443	53359	13.33.187.25	192.168.2.5
Sep 24, 2024 14:56:10.846338987 CEST	53360	443	192.168.2.5	18.245.31.112
Sep 24, 2024 14:56:10.846358061 CEST	443	53360	18.245.31.112	192.168.2.5
Sep 24, 2024 14:56:10.846384048 CEST	53363	443	192.168.2.5	199.232.188.157
Sep 24, 2024 14:56:10.846398115 CEST	443	53363	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:10.846708059 CEST	443	53359	13.33.187.25	192.168.2.5
Sep 24, 2024 14:56:10.846718073 CEST	443	53359	13.33.187.25	192.168.2.5
Sep 24, 2024 14:56:10.846752882 CEST	443	53359	13.33.187.25	192.168.2.5
Sep 24, 2024 14:56:10.846757889 CEST	443	53359	13.33.187.25	192.168.2.5
Sep 24, 2024 14:56:10.846784115 CEST	443	53359	13.33.187.25	192.168.2.5
Sep 24, 2024 14:56:10.846791983 CEST	53359	443	192.168.2.5	13.33.187.25
Sep 24, 2024 14:56:10.846801043 CEST	443	53359	13.33.187.25	192.168.2.5
Sep 24, 2024 14:56:10.846837044 CEST	53359	443	192.168.2.5	13.33.187.25
Sep 24, 2024 14:56:10.846884012 CEST	53359	443	192.168.2.5	13.33.187.25
Sep 24, 2024 14:56:10.848974943 CEST	53359	443	192.168.2.5	13.33.187.25
Sep 24, 2024 14:56:10.848998070 CEST	443	53359	13.33.187.25	192.168.2.5
Sep 24, 2024 14:56:10.893209934 CEST	53360	443	192.168.2.5	18.245.31.112
Sep 24, 2024 14:56:10.893220901 CEST	53363	443	192.168.2.5	199.232.188.157
Sep 24, 2024 14:56:11.082019091 CEST	443	53360	18.245.31.112	192.168.2.5
Sep 24, 2024 14:56:11.090852976 CEST	443	53360	18.245.31.112	192.168.2.5
Sep 24, 2024 14:56:11.090862989 CEST	443	53360	18.245.31.112	192.168.2.5
Sep 24, 2024 14:56:11.090898991 CEST	443	53360	18.245.31.112	192.168.2.5
Sep 24, 2024 14:56:11.090915918 CEST	443	53360	18.245.31.112	192.168.2.5
Sep 24, 2024 14:56:11.090928078 CEST	443	53360	18.245.31.112	192.168.2.5
Sep 24, 2024 14:56:11.090959072 CEST	53360	443	192.168.2.5	18.245.31.112
Sep 24, 2024 14:56:11.090976954 CEST	443	53360	18.245.31.112	192.168.2.5
Sep 24, 2024 14:56:11.091006994 CEST	443	53360	18.245.31.112	192.168.2.5
Sep 24, 2024 14:56:11.091011047 CEST	53360	443	192.168.2.5	18.245.31.112
Sep 24, 2024 14:56:11.091034889 CEST	53360	443	192.168.2.5	18.245.31.112
Sep 24, 2024 14:56:11.143202066 CEST	53360	443	192.168.2.5	18.245.31.112
Sep 24, 2024 14:56:11.168983936 CEST	443	53363	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:11.169043064 CEST	443	53363	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:11.169074059 CEST	443	53363	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:11.169096947 CEST	443	53363	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:11.169327021 CEST	53363	443	192.168.2.5	199.232.188.157
Sep 24, 2024 14:56:11.169337034 CEST	443	53363	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:11.169370890 CEST	53363	443	192.168.2.5	199.232.188.157
Sep 24, 2024 14:56:11.174949884 CEST	443	53363	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:11.175023079 CEST	443	53363	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:11.175092936 CEST	53363	443	192.168.2.5	199.232.188.157
Sep 24, 2024 14:56:11.175098896 CEST	443	53363	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:11.175328016 CEST	53363	443	192.168.2.5	199.232.188.157
Sep 24, 2024 14:56:11.176354885 CEST	443	53360	18.245.31.112	192.168.2.5
Sep 24, 2024 14:56:11.176364899 CEST	443	53360	18.245.31.112	192.168.2.5
Sep 24, 2024 14:56:11.176409960 CEST	443	53360	18.245.31.112	192.168.2.5
Sep 24, 2024 14:56:11.176423073 CEST	443	53360	18.245.31.112	192.168.2.5
Sep 24, 2024 14:56:11.176469088 CEST	443	53360	18.245.31.112	192.168.2.5
Sep 24, 2024 14:56:11.176475048 CEST	53360	443	192.168.2.5	18.245.31.112
Sep 24, 2024 14:56:11.176475048 CEST	53360	443	192.168.2.5	18.245.31.112
Sep 24, 2024 14:56:11.176491976 CEST	443	53360	18.245.31.112	192.168.2.5
Sep 24, 2024 14:56:11.176523924 CEST	53360	443	192.168.2.5	18.245.31.112
Sep 24, 2024 14:56:11.176523924 CEST	53360	443	192.168.2.5	18.245.31.112
Sep 24, 2024 14:56:11.176960945 CEST	53360	443	192.168.2.5	18.245.31.112
Sep 24, 2024 14:56:11.180592060 CEST	443	53363	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:11.183202982 CEST	443	53360	18.245.31.112	192.168.2.5
Sep 24, 2024 14:56:11.183228016 CEST	443	53360	18.245.31.112	192.168.2.5
Sep 24, 2024 14:56:11.183568954 CEST	53360	443	192.168.2.5	18.245.31.112
Sep 24, 2024 14:56:11.183583021 CEST	443	53360	18.245.31.112	192.168.2.5
Sep 24, 2024 14:56:11.183728933 CEST	53360	443	192.168.2.5	18.245.31.112
Sep 24, 2024 14:56:11.186393023 CEST	443	53363	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:11.186422110 CEST	443	53363	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:11.186543941 CEST	53363	443	192.168.2.5	199.232.188.157
Sep 24, 2024 14:56:11.186549902 CEST	443	53363	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:11.189241886 CEST	53363	443	192.168.2.5	199.232.188.157
Sep 24, 2024 14:56:11.259624004 CEST	443	53363	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:11.259706974 CEST	443	53363	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:11.259731054 CEST	443	53363	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:11.259744883 CEST	443	53363	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:11.259763956 CEST	443	53363	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:11.259804964 CEST	53363	443	192.168.2.5	199.232.188.157
Sep 24, 2024 14:56:11.259814024 CEST	443	53363	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:11.259850979 CEST	53363	443	192.168.2.5	199.232.188.157
Sep 24, 2024 14:56:11.259942055 CEST	53363	443	192.168.2.5	199.232.188.157
Sep 24, 2024 14:56:11.260521889 CEST	443	53363	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:11.260780096 CEST	443	53363	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:11.260821104 CEST	443	53363	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:11.261296988 CEST	443	53363	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:11.261322021 CEST	443	53363	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:11.261323929 CEST	53363	443	192.168.2.5	199.232.188.157
Sep 24, 2024 14:56:11.261332035 CEST	443	53363	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:11.261548042 CEST	53363	443	192.168.2.5	199.232.188.157
Sep 24, 2024 14:56:11.261606932 CEST	443	53363	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:11.265518904 CEST	443	53363	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:11.265542984 CEST	443	53363	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:11.265583992 CEST	443	53363	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:11.265667915 CEST	53363	443	192.168.2.5	199.232.188.157
Sep 24, 2024 14:56:11.265676975 CEST	443	53363	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:11.265713930 CEST	53363	443	192.168.2.5	199.232.188.157
Sep 24, 2024 14:56:11.267589092 CEST	443	53360	18.245.31.112	192.168.2.5
Sep 24, 2024 14:56:11.267611980 CEST	443	53360	18.245.31.112	192.168.2.5
Sep 24, 2024 14:56:11.267741919 CEST	53360	443	192.168.2.5	18.245.31.112
Sep 24, 2024 14:56:11.267755985 CEST	443	53360	18.245.31.112	192.168.2.5
Sep 24, 2024 14:56:11.267913103 CEST	53360	443	192.168.2.5	18.245.31.112
Sep 24, 2024 14:56:11.268891096 CEST	443	53360	18.245.31.112	192.168.2.5
Sep 24, 2024 14:56:11.268906116 CEST	443	53360	18.245.31.112	192.168.2.5
Sep 24, 2024 14:56:11.269407988 CEST	53360	443	192.168.2.5	18.245.31.112
Sep 24, 2024 14:56:11.269413948 CEST	443	53360	18.245.31.112	192.168.2.5
Sep 24, 2024 14:56:11.269653082 CEST	53360	443	192.168.2.5	18.245.31.112
Sep 24, 2024 14:56:11.270984888 CEST	443	53360	18.245.31.112	192.168.2.5
Sep 24, 2024 14:56:11.270996094 CEST	443	53363	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:11.271009922 CEST	443	53360	18.245.31.112	192.168.2.5
Sep 24, 2024 14:56:11.271092892 CEST	53360	443	192.168.2.5	18.245.31.112
Sep 24, 2024 14:56:11.271099091 CEST	53363	443	192.168.2.5	199.232.188.157
Sep 24, 2024 14:56:11.271112919 CEST	443	53363	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:11.271115065 CEST	443	53360	18.245.31.112	192.168.2.5
Sep 24, 2024 14:56:11.271234035 CEST	53360	443	192.168.2.5	18.245.31.112
Sep 24, 2024 14:56:11.271262884 CEST	443	53363	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:11.271624088 CEST	53363	443	192.168.2.5	199.232.188.157
Sep 24, 2024 14:56:11.271630049 CEST	443	53363	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:11.276875973 CEST	443	53363	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:11.276904106 CEST	443	53363	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:11.277029991 CEST	53363	443	192.168.2.5	199.232.188.157
Sep 24, 2024 14:56:11.277034998 CEST	443	53363	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:11.278728008 CEST	53363	443	192.168.2.5	199.232.188.157
Sep 24, 2024 14:56:11.278733015 CEST	443	53363	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:11.316394091 CEST	443	53360	18.245.31.112	192.168.2.5
Sep 24, 2024 14:56:11.316442966 CEST	443	53360	18.245.31.112	192.168.2.5
Sep 24, 2024 14:56:11.316504002 CEST	53360	443	192.168.2.5	18.245.31.112
Sep 24, 2024 14:56:11.316524029 CEST	443	53360	18.245.31.112	192.168.2.5
Sep 24, 2024 14:56:11.316561937 CEST	53360	443	192.168.2.5	18.245.31.112
Sep 24, 2024 14:56:11.316771030 CEST	53360	443	192.168.2.5	18.245.31.112
Sep 24, 2024 14:56:11.330920935 CEST	53363	443	192.168.2.5	199.232.188.157
Sep 24, 2024 14:56:11.350197077 CEST	443	53363	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:11.350255966 CEST	443	53363	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:11.350617886 CEST	443	53363	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:11.350644112 CEST	443	53363	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:11.350676060 CEST	443	53363	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:11.350728035 CEST	53363	443	192.168.2.5	199.232.188.157
Sep 24, 2024 14:56:11.350732088 CEST	443	53363	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:11.350750923 CEST	443	53363	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:11.350795984 CEST	53363	443	192.168.2.5	199.232.188.157
Sep 24, 2024 14:56:11.350936890 CEST	53363	443	192.168.2.5	199.232.188.157
Sep 24, 2024 14:56:11.352264881 CEST	53363	443	192.168.2.5	199.232.188.157
Sep 24, 2024 14:56:11.352278948 CEST	443	53363	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:11.359116077 CEST	443	53360	18.245.31.112	192.168.2.5
Sep 24, 2024 14:56:11.359167099 CEST	443	53360	18.245.31.112	192.168.2.5
Sep 24, 2024 14:56:11.359219074 CEST	53360	443	192.168.2.5	18.245.31.112
Sep 24, 2024 14:56:11.359246969 CEST	443	53360	18.245.31.112	192.168.2.5
Sep 24, 2024 14:56:11.359266043 CEST	53360	443	192.168.2.5	18.245.31.112
Sep 24, 2024 14:56:11.359370947 CEST	53360	443	192.168.2.5	18.245.31.112
Sep 24, 2024 14:56:11.361386061 CEST	443	53360	18.245.31.112	192.168.2.5
Sep 24, 2024 14:56:11.361411095 CEST	443	53360	18.245.31.112	192.168.2.5
Sep 24, 2024 14:56:11.361455917 CEST	443	53360	18.245.31.112	192.168.2.5
Sep 24, 2024 14:56:11.361490011 CEST	443	53360	18.245.31.112	192.168.2.5
Sep 24, 2024 14:56:11.361491919 CEST	53360	443	192.168.2.5	18.245.31.112
Sep 24, 2024 14:56:11.361491919 CEST	53360	443	192.168.2.5	18.245.31.112
Sep 24, 2024 14:56:11.361507893 CEST	443	53360	18.245.31.112	192.168.2.5
Sep 24, 2024 14:56:11.361524105 CEST	443	53360	18.245.31.112	192.168.2.5
Sep 24, 2024 14:56:11.361526012 CEST	53360	443	192.168.2.5	18.245.31.112
Sep 24, 2024 14:56:11.361552954 CEST	53360	443	192.168.2.5	18.245.31.112
Sep 24, 2024 14:56:11.361608028 CEST	443	53360	18.245.31.112	192.168.2.5
Sep 24, 2024 14:56:11.361634016 CEST	53360	443	192.168.2.5	18.245.31.112
Sep 24, 2024 14:56:11.361857891 CEST	53360	443	192.168.2.5	18.245.31.112
Sep 24, 2024 14:56:11.363416910 CEST	53360	443	192.168.2.5	18.245.31.112
Sep 24, 2024 14:56:11.363430023 CEST	443	53360	18.245.31.112	192.168.2.5
Sep 24, 2024 14:56:11.366667986 CEST	53364	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:56:11.366708994 CEST	443	53364	151.101.1.140	192.168.2.5
Sep 24, 2024 14:56:11.367008924 CEST	53364	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:56:11.368015051 CEST	53364	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:56:11.368026972 CEST	443	53364	151.101.1.140	192.168.2.5
Sep 24, 2024 14:56:11.378283978 CEST	53365	443	192.168.2.5	199.232.188.157
Sep 24, 2024 14:56:11.378325939 CEST	443	53365	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:11.378803015 CEST	53365	443	192.168.2.5	199.232.188.157
Sep 24, 2024 14:56:11.379076958 CEST	53365	443	192.168.2.5	199.232.188.157
Sep 24, 2024 14:56:11.379091978 CEST	443	53365	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:11.484447002 CEST	53366	443	192.168.2.5	162.159.140.229
Sep 24, 2024 14:56:11.484496117 CEST	443	53366	162.159.140.229	192.168.2.5
Sep 24, 2024 14:56:11.485018969 CEST	53366	443	192.168.2.5	162.159.140.229
Sep 24, 2024 14:56:11.488087893 CEST	53366	443	192.168.2.5	162.159.140.229
Sep 24, 2024 14:56:11.488117933 CEST	443	53366	162.159.140.229	192.168.2.5
Sep 24, 2024 14:56:11.846282959 CEST	443	53364	151.101.1.140	192.168.2.5
Sep 24, 2024 14:56:11.846600056 CEST	53364	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:56:11.846630096 CEST	443	53364	151.101.1.140	192.168.2.5
Sep 24, 2024 14:56:11.847706079 CEST	443	53364	151.101.1.140	192.168.2.5
Sep 24, 2024 14:56:11.847764015 CEST	53364	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:56:11.848870039 CEST	53364	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:56:11.848949909 CEST	443	53364	151.101.1.140	192.168.2.5
Sep 24, 2024 14:56:11.849128008 CEST	53364	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:56:11.849139929 CEST	443	53364	151.101.1.140	192.168.2.5
Sep 24, 2024 14:56:11.893201113 CEST	53364	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:56:11.948739052 CEST	443	53364	151.101.1.140	192.168.2.5
Sep 24, 2024 14:56:11.948791981 CEST	443	53364	151.101.1.140	192.168.2.5
Sep 24, 2024 14:56:11.948822975 CEST	443	53364	151.101.1.140	192.168.2.5
Sep 24, 2024 14:56:11.948865891 CEST	53364	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:56:11.948869944 CEST	443	53364	151.101.1.140	192.168.2.5
Sep 24, 2024 14:56:11.948899031 CEST	443	53364	151.101.1.140	192.168.2.5
Sep 24, 2024 14:56:11.948929071 CEST	53364	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:56:11.954801083 CEST	443	53366	162.159.140.229	192.168.2.5
Sep 24, 2024 14:56:11.955116987 CEST	53366	443	192.168.2.5	162.159.140.229
Sep 24, 2024 14:56:11.955144882 CEST	443	53366	162.159.140.229	192.168.2.5
Sep 24, 2024 14:56:11.956290960 CEST	443	53364	151.101.1.140	192.168.2.5
Sep 24, 2024 14:56:11.956326008 CEST	443	53364	151.101.1.140	192.168.2.5
Sep 24, 2024 14:56:11.956352949 CEST	53364	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:56:11.956382036 CEST	443	53364	151.101.1.140	192.168.2.5
Sep 24, 2024 14:56:11.956465960 CEST	443	53364	151.101.1.140	192.168.2.5
Sep 24, 2024 14:56:11.956480980 CEST	53364	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:56:11.956487894 CEST	443	53364	151.101.1.140	192.168.2.5
Sep 24, 2024 14:56:11.956527948 CEST	53364	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:56:11.956583977 CEST	443	53366	162.159.140.229	192.168.2.5
Sep 24, 2024 14:56:11.956644058 CEST	53366	443	192.168.2.5	162.159.140.229
Sep 24, 2024 14:56:11.958049059 CEST	53366	443	192.168.2.5	162.159.140.229
Sep 24, 2024 14:56:11.958147049 CEST	443	53366	162.159.140.229	192.168.2.5
Sep 24, 2024 14:56:11.958245039 CEST	53366	443	192.168.2.5	162.159.140.229
Sep 24, 2024 14:56:11.958256006 CEST	443	53366	162.159.140.229	192.168.2.5
Sep 24, 2024 14:56:11.958705902 CEST	53364	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:56:11.958755970 CEST	443	53364	151.101.1.140	192.168.2.5
Sep 24, 2024 14:56:11.958817959 CEST	53364	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:56:11.974179029 CEST	53369	443	192.168.2.5	104.244.42.3
Sep 24, 2024 14:56:11.974230051 CEST	443	53369	104.244.42.3	192.168.2.5
Sep 24, 2024 14:56:11.974553108 CEST	53369	443	192.168.2.5	104.244.42.3
Sep 24, 2024 14:56:11.975023031 CEST	53370	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:56:11.975055933 CEST	443	53370	151.101.1.140	192.168.2.5
Sep 24, 2024 14:56:11.975230932 CEST	53370	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:56:11.975239038 CEST	53369	443	192.168.2.5	104.244.42.3
Sep 24, 2024 14:56:11.975255013 CEST	443	53369	104.244.42.3	192.168.2.5
Sep 24, 2024 14:56:11.975830078 CEST	53370	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:56:11.975856066 CEST	443	53370	151.101.1.140	192.168.2.5
Sep 24, 2024 14:56:11.977667093 CEST	53371	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:56:11.977713108 CEST	443	53371	151.101.1.140	192.168.2.5
Sep 24, 2024 14:56:11.977772951 CEST	53371	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:56:11.977984905 CEST	53371	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:56:11.978003979 CEST	443	53371	151.101.1.140	192.168.2.5
Sep 24, 2024 14:56:11.979399920 CEST	53372	443	192.168.2.5	151.101.129.140
Sep 24, 2024 14:56:11.979430914 CEST	443	53372	151.101.129.140	192.168.2.5
Sep 24, 2024 14:56:11.979646921 CEST	53372	443	192.168.2.5	151.101.129.140
Sep 24, 2024 14:56:11.979793072 CEST	53372	443	192.168.2.5	151.101.129.140
Sep 24, 2024 14:56:11.979811907 CEST	443	53372	151.101.129.140	192.168.2.5
Sep 24, 2024 14:56:12.002578020 CEST	53366	443	192.168.2.5	162.159.140.229
Sep 24, 2024 14:56:12.029804945 CEST	443	53365	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:12.030082941 CEST	53365	443	192.168.2.5	199.232.188.157
Sep 24, 2024 14:56:12.030111074 CEST	443	53365	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:12.031004906 CEST	443	53365	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:12.031069994 CEST	53365	443	192.168.2.5	199.232.188.157
Sep 24, 2024 14:56:12.031461000 CEST	53365	443	192.168.2.5	199.232.188.157
Sep 24, 2024 14:56:12.031526089 CEST	443	53365	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:12.031600952 CEST	53365	443	192.168.2.5	199.232.188.157
Sep 24, 2024 14:56:12.079401970 CEST	443	53365	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:12.080683947 CEST	53365	443	192.168.2.5	199.232.188.157
Sep 24, 2024 14:56:12.080702066 CEST	443	53365	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:12.127556086 CEST	53365	443	192.168.2.5	199.232.188.157
Sep 24, 2024 14:56:12.202183008 CEST	443	53366	162.159.140.229	192.168.2.5
Sep 24, 2024 14:56:12.202272892 CEST	443	53366	162.159.140.229	192.168.2.5
Sep 24, 2024 14:56:12.202325106 CEST	53366	443	192.168.2.5	162.159.140.229
Sep 24, 2024 14:56:12.203073978 CEST	53366	443	192.168.2.5	162.159.140.229
Sep 24, 2024 14:56:12.203098059 CEST	443	53366	162.159.140.229	192.168.2.5
Sep 24, 2024 14:56:12.214895010 CEST	53373	443	192.168.2.5	151.101.193.140
Sep 24, 2024 14:56:12.214895964 CEST	53374	443	192.168.2.5	162.159.140.229
Sep 24, 2024 14:56:12.214920998 CEST	443	53374	162.159.140.229	192.168.2.5
Sep 24, 2024 14:56:12.214930058 CEST	443	53373	151.101.193.140	192.168.2.5
Sep 24, 2024 14:56:12.215003967 CEST	53373	443	192.168.2.5	151.101.193.140
Sep 24, 2024 14:56:12.215007067 CEST	53374	443	192.168.2.5	162.159.140.229
Sep 24, 2024 14:56:12.215241909 CEST	53373	443	192.168.2.5	151.101.193.140
Sep 24, 2024 14:56:12.215255022 CEST	443	53373	151.101.193.140	192.168.2.5
Sep 24, 2024 14:56:12.215389967 CEST	53374	443	192.168.2.5	162.159.140.229
Sep 24, 2024 14:56:12.215401888 CEST	443	53374	162.159.140.229	192.168.2.5
Sep 24, 2024 14:56:12.313740969 CEST	443	53365	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:12.313790083 CEST	443	53365	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:12.313824892 CEST	443	53365	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:12.313848972 CEST	443	53365	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:12.313852072 CEST	53365	443	192.168.2.5	199.232.188.157
Sep 24, 2024 14:56:12.313877106 CEST	443	53365	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:12.313905954 CEST	53365	443	192.168.2.5	199.232.188.157
Sep 24, 2024 14:56:12.313916922 CEST	443	53365	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:12.313951969 CEST	53365	443	192.168.2.5	199.232.188.157
Sep 24, 2024 14:56:12.313957930 CEST	443	53365	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:12.319303036 CEST	443	53365	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:12.319356918 CEST	53365	443	192.168.2.5	199.232.188.157
Sep 24, 2024 14:56:12.319381952 CEST	443	53365	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:12.325136900 CEST	443	53365	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:12.325172901 CEST	443	53365	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:12.325203896 CEST	53365	443	192.168.2.5	199.232.188.157
Sep 24, 2024 14:56:12.325207949 CEST	443	53365	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:12.325227976 CEST	443	53365	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:12.325251102 CEST	53365	443	192.168.2.5	199.232.188.157
Sep 24, 2024 14:56:12.377595901 CEST	53365	443	192.168.2.5	199.232.188.157
Sep 24, 2024 14:56:12.377618074 CEST	443	53365	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:12.402160883 CEST	443	53365	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:12.402223110 CEST	443	53365	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:12.402225018 CEST	53365	443	192.168.2.5	199.232.188.157
Sep 24, 2024 14:56:12.402242899 CEST	443	53365	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:12.402280092 CEST	443	53365	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:12.402292013 CEST	53365	443	192.168.2.5	199.232.188.157
Sep 24, 2024 14:56:12.402297020 CEST	443	53365	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:12.402329922 CEST	53365	443	192.168.2.5	199.232.188.157
Sep 24, 2024 14:56:12.402340889 CEST	443	53365	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:12.403055906 CEST	443	53365	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:12.403088093 CEST	443	53365	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:12.403115034 CEST	443	53365	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:12.403120041 CEST	53365	443	192.168.2.5	199.232.188.157
Sep 24, 2024 14:56:12.403125048 CEST	443	53365	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:12.403172016 CEST	53365	443	192.168.2.5	199.232.188.157
Sep 24, 2024 14:56:12.403768063 CEST	443	53365	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:12.403815985 CEST	443	53365	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:12.403830051 CEST	53365	443	192.168.2.5	199.232.188.157
Sep 24, 2024 14:56:12.403835058 CEST	443	53365	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:12.403873920 CEST	443	53365	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:12.403876066 CEST	53365	443	192.168.2.5	199.232.188.157
Sep 24, 2024 14:56:12.403884888 CEST	443	53365	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:12.403918982 CEST	53365	443	192.168.2.5	199.232.188.157
Sep 24, 2024 14:56:12.417958021 CEST	443	53365	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:12.418009996 CEST	443	53365	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:12.418054104 CEST	53365	443	192.168.2.5	199.232.188.157
Sep 24, 2024 14:56:12.418059111 CEST	443	53365	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:12.418093920 CEST	443	53365	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:12.418132067 CEST	53365	443	192.168.2.5	199.232.188.157
Sep 24, 2024 14:56:12.418135881 CEST	443	53365	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:12.418415070 CEST	443	53365	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:12.418462992 CEST	53365	443	192.168.2.5	199.232.188.157
Sep 24, 2024 14:56:12.418467045 CEST	443	53365	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:12.446325064 CEST	443	53372	151.101.129.140	192.168.2.5
Sep 24, 2024 14:56:12.446676016 CEST	53372	443	192.168.2.5	151.101.129.140
Sep 24, 2024 14:56:12.446698904 CEST	443	53372	151.101.129.140	192.168.2.5
Sep 24, 2024 14:56:12.447879076 CEST	443	53372	151.101.129.140	192.168.2.5
Sep 24, 2024 14:56:12.447968006 CEST	53372	443	192.168.2.5	151.101.129.140
Sep 24, 2024 14:56:12.448462963 CEST	443	53370	151.101.1.140	192.168.2.5
Sep 24, 2024 14:56:12.448715925 CEST	53370	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:56:12.448724985 CEST	443	53370	151.101.1.140	192.168.2.5
Sep 24, 2024 14:56:12.449002028 CEST	53372	443	192.168.2.5	151.101.129.140
Sep 24, 2024 14:56:12.449059963 CEST	443	53372	151.101.129.140	192.168.2.5
Sep 24, 2024 14:56:12.449234009 CEST	53372	443	192.168.2.5	151.101.129.140
Sep 24, 2024 14:56:12.449239969 CEST	443	53372	151.101.129.140	192.168.2.5
Sep 24, 2024 14:56:12.449935913 CEST	443	53370	151.101.1.140	192.168.2.5
Sep 24, 2024 14:56:12.450002909 CEST	53370	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:56:12.450512886 CEST	53370	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:56:12.450548887 CEST	443	53371	151.101.1.140	192.168.2.5
Sep 24, 2024 14:56:12.450583935 CEST	53370	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:56:12.450716019 CEST	53371	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:56:12.450726986 CEST	443	53371	151.101.1.140	192.168.2.5
Sep 24, 2024 14:56:12.451069117 CEST	443	53370	151.101.1.140	192.168.2.5
Sep 24, 2024 14:56:12.451776981 CEST	443	53371	151.101.1.140	192.168.2.5
Sep 24, 2024 14:56:12.451824903 CEST	53371	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:56:12.452143908 CEST	53371	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:56:12.452210903 CEST	443	53371	151.101.1.140	192.168.2.5
Sep 24, 2024 14:56:12.452348948 CEST	53371	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:56:12.452358007 CEST	443	53371	151.101.1.140	192.168.2.5
Sep 24, 2024 14:56:12.460354090 CEST	443	53365	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:12.460386038 CEST	443	53365	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:12.460419893 CEST	443	53365	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:12.460428953 CEST	53365	443	192.168.2.5	199.232.188.157
Sep 24, 2024 14:56:12.460433960 CEST	443	53365	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:12.460469007 CEST	53365	443	192.168.2.5	199.232.188.157
Sep 24, 2024 14:56:12.482527018 CEST	443	53369	104.244.42.3	192.168.2.5
Sep 24, 2024 14:56:12.482764959 CEST	53369	443	192.168.2.5	104.244.42.3
Sep 24, 2024 14:56:12.482781887 CEST	443	53369	104.244.42.3	192.168.2.5
Sep 24, 2024 14:56:12.483797073 CEST	443	53369	104.244.42.3	192.168.2.5
Sep 24, 2024 14:56:12.483846903 CEST	53369	443	192.168.2.5	104.244.42.3
Sep 24, 2024 14:56:12.484962940 CEST	53369	443	192.168.2.5	104.244.42.3
Sep 24, 2024 14:56:12.485024929 CEST	443	53369	104.244.42.3	192.168.2.5
Sep 24, 2024 14:56:12.485038996 CEST	53369	443	192.168.2.5	104.244.42.3
Sep 24, 2024 14:56:12.490449905 CEST	443	53365	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:12.490678072 CEST	443	53365	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:12.490719080 CEST	53365	443	192.168.2.5	199.232.188.157
Sep 24, 2024 14:56:12.490721941 CEST	443	53365	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:12.490731001 CEST	443	53365	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:12.490780115 CEST	53365	443	192.168.2.5	199.232.188.157
Sep 24, 2024 14:56:12.490786076 CEST	443	53365	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:12.490803003 CEST	443	53365	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:12.490840912 CEST	53365	443	192.168.2.5	199.232.188.157
Sep 24, 2024 14:56:12.491172075 CEST	53365	443	192.168.2.5	199.232.188.157
Sep 24, 2024 14:56:12.491180897 CEST	443	53365	199.232.188.157	192.168.2.5
Sep 24, 2024 14:56:12.502624035 CEST	53372	443	192.168.2.5	151.101.129.140
Sep 24, 2024 14:56:12.502635002 CEST	53371	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:56:12.502815008 CEST	53370	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:56:12.502827883 CEST	443	53370	151.101.1.140	192.168.2.5
Sep 24, 2024 14:56:12.530306101 CEST	53369	443	192.168.2.5	104.244.42.3
Sep 24, 2024 14:56:12.530323982 CEST	443	53369	104.244.42.3	192.168.2.5
Sep 24, 2024 14:56:12.545592070 CEST	53370	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:56:12.546017885 CEST	443	53372	151.101.129.140	192.168.2.5
Sep 24, 2024 14:56:12.546143055 CEST	443	53372	151.101.129.140	192.168.2.5
Sep 24, 2024 14:56:12.546207905 CEST	53372	443	192.168.2.5	151.101.129.140
Sep 24, 2024 14:56:12.547358036 CEST	53372	443	192.168.2.5	151.101.129.140
Sep 24, 2024 14:56:12.547369003 CEST	443	53372	151.101.129.140	192.168.2.5
Sep 24, 2024 14:56:12.556958914 CEST	443	53370	151.101.1.140	192.168.2.5
Sep 24, 2024 14:56:12.557465076 CEST	443	53370	151.101.1.140	192.168.2.5
Sep 24, 2024 14:56:12.557491064 CEST	443	53370	151.101.1.140	192.168.2.5
Sep 24, 2024 14:56:12.557529926 CEST	443	53370	151.101.1.140	192.168.2.5
Sep 24, 2024 14:56:12.557539940 CEST	53370	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:56:12.557559013 CEST	443	53370	151.101.1.140	192.168.2.5
Sep 24, 2024 14:56:12.557833910 CEST	53370	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:56:12.557919979 CEST	443	53370	151.101.1.140	192.168.2.5
Sep 24, 2024 14:56:12.557948112 CEST	443	53370	151.101.1.140	192.168.2.5
Sep 24, 2024 14:56:12.557979107 CEST	443	53370	151.101.1.140	192.168.2.5
Sep 24, 2024 14:56:12.558005095 CEST	53370	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:56:12.558015108 CEST	443	53370	151.101.1.140	192.168.2.5
Sep 24, 2024 14:56:12.558099031 CEST	53370	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:56:12.558459044 CEST	443	53371	151.101.1.140	192.168.2.5
Sep 24, 2024 14:56:12.559469938 CEST	443	53371	151.101.1.140	192.168.2.5
Sep 24, 2024 14:56:12.559540987 CEST	53371	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:56:12.559798956 CEST	53371	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:56:12.559806108 CEST	443	53371	151.101.1.140	192.168.2.5
Sep 24, 2024 14:56:12.561450005 CEST	53375	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:56:12.561471939 CEST	443	53375	151.101.1.140	192.168.2.5
Sep 24, 2024 14:56:12.561543941 CEST	53375	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:56:12.561841965 CEST	53375	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:56:12.561851978 CEST	443	53375	151.101.1.140	192.168.2.5
Sep 24, 2024 14:56:12.564285994 CEST	53376	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:56:12.564296961 CEST	443	53376	151.101.1.140	192.168.2.5
Sep 24, 2024 14:56:12.564392090 CEST	53376	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:56:12.564665079 CEST	53376	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:56:12.564673901 CEST	443	53376	151.101.1.140	192.168.2.5
Sep 24, 2024 14:56:12.568778038 CEST	443	53370	151.101.1.140	192.168.2.5
Sep 24, 2024 14:56:12.568872929 CEST	53370	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:56:12.569453001 CEST	53370	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:56:12.569461107 CEST	443	53370	151.101.1.140	192.168.2.5
Sep 24, 2024 14:56:12.578797102 CEST	53369	443	192.168.2.5	104.244.42.3
Sep 24, 2024 14:56:12.670691013 CEST	443	53373	151.101.193.140	192.168.2.5
Sep 24, 2024 14:56:12.671004057 CEST	53373	443	192.168.2.5	151.101.193.140
Sep 24, 2024 14:56:12.671017885 CEST	443	53373	151.101.193.140	192.168.2.5
Sep 24, 2024 14:56:12.672061920 CEST	443	53373	151.101.193.140	192.168.2.5
Sep 24, 2024 14:56:12.672250986 CEST	53373	443	192.168.2.5	151.101.193.140
Sep 24, 2024 14:56:12.673321009 CEST	53373	443	192.168.2.5	151.101.193.140
Sep 24, 2024 14:56:12.673321009 CEST	53373	443	192.168.2.5	151.101.193.140
Sep 24, 2024 14:56:12.673332930 CEST	443	53373	151.101.193.140	192.168.2.5
Sep 24, 2024 14:56:12.673377991 CEST	443	53373	151.101.193.140	192.168.2.5
Sep 24, 2024 14:56:12.697040081 CEST	443	53374	162.159.140.229	192.168.2.5
Sep 24, 2024 14:56:12.697300911 CEST	53374	443	192.168.2.5	162.159.140.229
Sep 24, 2024 14:56:12.697324991 CEST	443	53374	162.159.140.229	192.168.2.5
Sep 24, 2024 14:56:12.698364973 CEST	443	53374	162.159.140.229	192.168.2.5
Sep 24, 2024 14:56:12.698573112 CEST	53374	443	192.168.2.5	162.159.140.229
Sep 24, 2024 14:56:12.698859930 CEST	53374	443	192.168.2.5	162.159.140.229
Sep 24, 2024 14:56:12.698859930 CEST	53374	443	192.168.2.5	162.159.140.229
Sep 24, 2024 14:56:12.698873997 CEST	443	53374	162.159.140.229	192.168.2.5
Sep 24, 2024 14:56:12.698926926 CEST	443	53374	162.159.140.229	192.168.2.5
Sep 24, 2024 14:56:12.718437910 CEST	443	53369	104.244.42.3	192.168.2.5
Sep 24, 2024 14:56:12.718513012 CEST	443	53369	104.244.42.3	192.168.2.5
Sep 24, 2024 14:56:12.718796015 CEST	53369	443	192.168.2.5	104.244.42.3
Sep 24, 2024 14:56:12.719499111 CEST	53373	443	192.168.2.5	151.101.193.140
Sep 24, 2024 14:56:12.719511986 CEST	443	53373	151.101.193.140	192.168.2.5
Sep 24, 2024 14:56:12.719620943 CEST	53369	443	192.168.2.5	104.244.42.3
Sep 24, 2024 14:56:12.719641924 CEST	443	53369	104.244.42.3	192.168.2.5
Sep 24, 2024 14:56:12.721705914 CEST	53377	443	192.168.2.5	151.101.193.140
Sep 24, 2024 14:56:12.721730947 CEST	443	53377	151.101.193.140	192.168.2.5
Sep 24, 2024 14:56:12.722022057 CEST	53377	443	192.168.2.5	151.101.193.140
Sep 24, 2024 14:56:12.722022057 CEST	53377	443	192.168.2.5	151.101.193.140
Sep 24, 2024 14:56:12.722050905 CEST	443	53377	151.101.193.140	192.168.2.5
Sep 24, 2024 14:56:12.732948065 CEST	53378	443	192.168.2.5	104.244.42.67
Sep 24, 2024 14:56:12.732970953 CEST	443	53378	104.244.42.67	192.168.2.5
Sep 24, 2024 14:56:12.733148098 CEST	53378	443	192.168.2.5	104.244.42.67
Sep 24, 2024 14:56:12.733486891 CEST	53378	443	192.168.2.5	104.244.42.67
Sep 24, 2024 14:56:12.733500004 CEST	443	53378	104.244.42.67	192.168.2.5
Sep 24, 2024 14:56:12.750766993 CEST	53374	443	192.168.2.5	162.159.140.229
Sep 24, 2024 14:56:12.750783920 CEST	443	53374	162.159.140.229	192.168.2.5
Sep 24, 2024 14:56:12.766418934 CEST	53373	443	192.168.2.5	151.101.193.140
Sep 24, 2024 14:56:12.797564983 CEST	53374	443	192.168.2.5	162.159.140.229
Sep 24, 2024 14:56:12.971271992 CEST	443	53373	151.101.193.140	192.168.2.5
Sep 24, 2024 14:56:12.971378088 CEST	443	53373	151.101.193.140	192.168.2.5
Sep 24, 2024 14:56:12.971462011 CEST	53373	443	192.168.2.5	151.101.193.140
Sep 24, 2024 14:56:12.974114895 CEST	53373	443	192.168.2.5	151.101.193.140
Sep 24, 2024 14:56:12.974136114 CEST	443	53373	151.101.193.140	192.168.2.5
Sep 24, 2024 14:56:12.976746082 CEST	53379	443	192.168.2.5	151.101.193.140
Sep 24, 2024 14:56:12.976788998 CEST	443	53379	151.101.193.140	192.168.2.5
Sep 24, 2024 14:56:12.976908922 CEST	53379	443	192.168.2.5	151.101.193.140
Sep 24, 2024 14:56:12.977833986 CEST	53379	443	192.168.2.5	151.101.193.140
Sep 24, 2024 14:56:12.977852106 CEST	443	53379	151.101.193.140	192.168.2.5
Sep 24, 2024 14:56:12.985080957 CEST	443	53374	162.159.140.229	192.168.2.5
Sep 24, 2024 14:56:12.985163927 CEST	443	53374	162.159.140.229	192.168.2.5
Sep 24, 2024 14:56:12.985276937 CEST	53374	443	192.168.2.5	162.159.140.229
Sep 24, 2024 14:56:12.985990047 CEST	53374	443	192.168.2.5	162.159.140.229
Sep 24, 2024 14:56:12.986002922 CEST	443	53374	162.159.140.229	192.168.2.5
Sep 24, 2024 14:56:12.986995935 CEST	53380	443	192.168.2.5	151.101.129.140
Sep 24, 2024 14:56:12.987040997 CEST	443	53380	151.101.129.140	192.168.2.5
Sep 24, 2024 14:56:12.987303972 CEST	53380	443	192.168.2.5	151.101.129.140
Sep 24, 2024 14:56:12.987303972 CEST	53380	443	192.168.2.5	151.101.129.140
Sep 24, 2024 14:56:12.987335920 CEST	443	53380	151.101.129.140	192.168.2.5
Sep 24, 2024 14:56:13.014431000 CEST	443	53375	151.101.1.140	192.168.2.5
Sep 24, 2024 14:56:13.014683962 CEST	53375	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:56:13.014695883 CEST	443	53375	151.101.1.140	192.168.2.5
Sep 24, 2024 14:56:13.015707970 CEST	443	53375	151.101.1.140	192.168.2.5
Sep 24, 2024 14:56:13.015897036 CEST	53375	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:56:13.016273022 CEST	53375	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:56:13.016273022 CEST	53375	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:56:13.016331911 CEST	443	53375	151.101.1.140	192.168.2.5
Sep 24, 2024 14:56:13.063256979 CEST	53375	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:56:13.063280106 CEST	443	53375	151.101.1.140	192.168.2.5
Sep 24, 2024 14:56:13.106811047 CEST	443	53376	151.101.1.140	192.168.2.5
Sep 24, 2024 14:56:13.107198954 CEST	53376	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:56:13.107218027 CEST	443	53376	151.101.1.140	192.168.2.5
Sep 24, 2024 14:56:13.107616901 CEST	443	53376	151.101.1.140	192.168.2.5
Sep 24, 2024 14:56:13.108088017 CEST	53376	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:56:13.108158112 CEST	443	53376	151.101.1.140	192.168.2.5
Sep 24, 2024 14:56:13.108222961 CEST	53376	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:56:13.110124111 CEST	53375	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:56:13.114063025 CEST	443	53375	151.101.1.140	192.168.2.5
Sep 24, 2024 14:56:13.114172935 CEST	443	53375	151.101.1.140	192.168.2.5
Sep 24, 2024 14:56:13.115565062 CEST	53375	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:56:13.115681887 CEST	53375	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:56:13.115700006 CEST	443	53375	151.101.1.140	192.168.2.5
Sep 24, 2024 14:56:13.151406050 CEST	443	53376	151.101.1.140	192.168.2.5
Sep 24, 2024 14:56:13.157001972 CEST	53376	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:56:13.175400972 CEST	443	53377	151.101.193.140	192.168.2.5
Sep 24, 2024 14:56:13.176338911 CEST	53377	443	192.168.2.5	151.101.193.140
Sep 24, 2024 14:56:13.176369905 CEST	443	53377	151.101.193.140	192.168.2.5
Sep 24, 2024 14:56:13.176748037 CEST	443	53377	151.101.193.140	192.168.2.5
Sep 24, 2024 14:56:13.177134037 CEST	53377	443	192.168.2.5	151.101.193.140
Sep 24, 2024 14:56:13.177212000 CEST	443	53377	151.101.193.140	192.168.2.5
Sep 24, 2024 14:56:13.177352905 CEST	53377	443	192.168.2.5	151.101.193.140
Sep 24, 2024 14:56:13.210107088 CEST	443	53376	151.101.1.140	192.168.2.5
Sep 24, 2024 14:56:13.210264921 CEST	443	53376	151.101.1.140	192.168.2.5
Sep 24, 2024 14:56:13.212302923 CEST	53376	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:56:13.212302923 CEST	53376	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:56:13.223396063 CEST	443	53377	151.101.193.140	192.168.2.5
Sep 24, 2024 14:56:13.264098883 CEST	443	53378	104.244.42.67	192.168.2.5
Sep 24, 2024 14:56:13.264395952 CEST	53378	443	192.168.2.5	104.244.42.67
Sep 24, 2024 14:56:13.264421940 CEST	443	53378	104.244.42.67	192.168.2.5
Sep 24, 2024 14:56:13.265626907 CEST	443	53378	104.244.42.67	192.168.2.5
Sep 24, 2024 14:56:13.266094923 CEST	53378	443	192.168.2.5	104.244.42.67
Sep 24, 2024 14:56:13.266350031 CEST	53378	443	192.168.2.5	104.244.42.67
Sep 24, 2024 14:56:13.266350031 CEST	53378	443	192.168.2.5	104.244.42.67
Sep 24, 2024 14:56:13.266366005 CEST	443	53378	104.244.42.67	192.168.2.5
Sep 24, 2024 14:56:13.266412973 CEST	443	53378	104.244.42.67	192.168.2.5
Sep 24, 2024 14:56:13.274816990 CEST	443	53377	151.101.193.140	192.168.2.5
Sep 24, 2024 14:56:13.274960041 CEST	443	53377	151.101.193.140	192.168.2.5
Sep 24, 2024 14:56:13.275702953 CEST	53377	443	192.168.2.5	151.101.193.140
Sep 24, 2024 14:56:13.275918007 CEST	53377	443	192.168.2.5	151.101.193.140
Sep 24, 2024 14:56:13.275935888 CEST	443	53377	151.101.193.140	192.168.2.5
Sep 24, 2024 14:56:13.280487061 CEST	53381	443	192.168.2.5	151.101.129.140
Sep 24, 2024 14:56:13.280527115 CEST	443	53381	151.101.129.140	192.168.2.5
Sep 24, 2024 14:56:13.280775070 CEST	53381	443	192.168.2.5	151.101.129.140
Sep 24, 2024 14:56:13.280833960 CEST	53381	443	192.168.2.5	151.101.129.140
Sep 24, 2024 14:56:13.280841112 CEST	443	53381	151.101.129.140	192.168.2.5
Sep 24, 2024 14:56:13.287503958 CEST	53382	443	192.168.2.5	151.101.129.140
Sep 24, 2024 14:56:13.287527084 CEST	443	53382	151.101.129.140	192.168.2.5
Sep 24, 2024 14:56:13.287816048 CEST	53382	443	192.168.2.5	151.101.129.140
Sep 24, 2024 14:56:13.287816048 CEST	53382	443	192.168.2.5	151.101.129.140
Sep 24, 2024 14:56:13.287842989 CEST	443	53382	151.101.129.140	192.168.2.5
Sep 24, 2024 14:56:13.313201904 CEST	53378	443	192.168.2.5	104.244.42.67
Sep 24, 2024 14:56:13.313215971 CEST	443	53378	104.244.42.67	192.168.2.5
Sep 24, 2024 14:56:13.360130072 CEST	53378	443	192.168.2.5	104.244.42.67
Sep 24, 2024 14:56:13.458914042 CEST	443	53379	151.101.193.140	192.168.2.5
Sep 24, 2024 14:56:13.458925009 CEST	443	53380	151.101.129.140	192.168.2.5
Sep 24, 2024 14:56:13.459229946 CEST	53380	443	192.168.2.5	151.101.129.140
Sep 24, 2024 14:56:13.459256887 CEST	443	53380	151.101.129.140	192.168.2.5
Sep 24, 2024 14:56:13.459398031 CEST	53379	443	192.168.2.5	151.101.193.140
Sep 24, 2024 14:56:13.459414959 CEST	443	53379	151.101.193.140	192.168.2.5
Sep 24, 2024 14:56:13.459780931 CEST	443	53379	151.101.193.140	192.168.2.5
Sep 24, 2024 14:56:13.460345984 CEST	443	53380	151.101.129.140	192.168.2.5
Sep 24, 2024 14:56:13.460380077 CEST	53379	443	192.168.2.5	151.101.193.140
Sep 24, 2024 14:56:13.460380077 CEST	53379	443	192.168.2.5	151.101.193.140
Sep 24, 2024 14:56:13.460398912 CEST	443	53379	151.101.193.140	192.168.2.5
Sep 24, 2024 14:56:13.460434914 CEST	53380	443	192.168.2.5	151.101.129.140
Sep 24, 2024 14:56:13.460453987 CEST	443	53379	151.101.193.140	192.168.2.5
Sep 24, 2024 14:56:13.460820913 CEST	53380	443	192.168.2.5	151.101.129.140
Sep 24, 2024 14:56:13.460889101 CEST	443	53380	151.101.129.140	192.168.2.5
Sep 24, 2024 14:56:13.461000919 CEST	53380	443	192.168.2.5	151.101.129.140
Sep 24, 2024 14:56:13.461008072 CEST	443	53380	151.101.129.140	192.168.2.5
Sep 24, 2024 14:56:13.477204084 CEST	443	53378	104.244.42.67	192.168.2.5
Sep 24, 2024 14:56:13.477273941 CEST	443	53378	104.244.42.67	192.168.2.5
Sep 24, 2024 14:56:13.478676081 CEST	53378	443	192.168.2.5	104.244.42.67
Sep 24, 2024 14:56:13.478676081 CEST	53378	443	192.168.2.5	104.244.42.67
Sep 24, 2024 14:56:13.500710011 CEST	53379	443	192.168.2.5	151.101.193.140
Sep 24, 2024 14:56:13.500713110 CEST	53380	443	192.168.2.5	151.101.129.140
Sep 24, 2024 14:56:13.516356945 CEST	53376	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:56:13.516381979 CEST	443	53376	151.101.1.140	192.168.2.5
Sep 24, 2024 14:56:13.561949968 CEST	443	53380	151.101.129.140	192.168.2.5
Sep 24, 2024 14:56:13.562099934 CEST	443	53380	151.101.129.140	192.168.2.5
Sep 24, 2024 14:56:13.563381910 CEST	53380	443	192.168.2.5	151.101.129.140
Sep 24, 2024 14:56:13.563658953 CEST	53380	443	192.168.2.5	151.101.129.140
Sep 24, 2024 14:56:13.563679934 CEST	443	53380	151.101.129.140	192.168.2.5
Sep 24, 2024 14:56:13.563936949 CEST	443	53379	151.101.193.140	192.168.2.5
Sep 24, 2024 14:56:13.564050913 CEST	443	53379	151.101.193.140	192.168.2.5
Sep 24, 2024 14:56:13.564167976 CEST	53379	443	192.168.2.5	151.101.193.140
Sep 24, 2024 14:56:13.565494061 CEST	53379	443	192.168.2.5	151.101.193.140
Sep 24, 2024 14:56:13.565520048 CEST	443	53379	151.101.193.140	192.168.2.5
Sep 24, 2024 14:56:13.569577932 CEST	53383	443	192.168.2.5	151.101.129.140
Sep 24, 2024 14:56:13.569616079 CEST	443	53383	151.101.129.140	192.168.2.5
Sep 24, 2024 14:56:13.570039988 CEST	53383	443	192.168.2.5	151.101.129.140
Sep 24, 2024 14:56:13.570039988 CEST	53383	443	192.168.2.5	151.101.129.140
Sep 24, 2024 14:56:13.570070028 CEST	443	53383	151.101.129.140	192.168.2.5
Sep 24, 2024 14:56:13.740643024 CEST	443	53382	151.101.129.140	192.168.2.5
Sep 24, 2024 14:56:13.741353035 CEST	53382	443	192.168.2.5	151.101.129.140
Sep 24, 2024 14:56:13.741378069 CEST	443	53382	151.101.129.140	192.168.2.5
Sep 24, 2024 14:56:13.742130995 CEST	443	53381	151.101.129.140	192.168.2.5
Sep 24, 2024 14:56:13.742561102 CEST	53381	443	192.168.2.5	151.101.129.140
Sep 24, 2024 14:56:13.742572069 CEST	443	53381	151.101.129.140	192.168.2.5
Sep 24, 2024 14:56:13.742645979 CEST	443	53382	151.101.129.140	192.168.2.5
Sep 24, 2024 14:56:13.742721081 CEST	53382	443	192.168.2.5	151.101.129.140
Sep 24, 2024 14:56:13.743705988 CEST	443	53381	151.101.129.140	192.168.2.5
Sep 24, 2024 14:56:13.743767023 CEST	53381	443	192.168.2.5	151.101.129.140
Sep 24, 2024 14:56:13.743922949 CEST	53382	443	192.168.2.5	151.101.129.140
Sep 24, 2024 14:56:13.743990898 CEST	443	53382	151.101.129.140	192.168.2.5
Sep 24, 2024 14:56:13.744297028 CEST	53381	443	192.168.2.5	151.101.129.140
Sep 24, 2024 14:56:13.744373083 CEST	443	53381	151.101.129.140	192.168.2.5
Sep 24, 2024 14:56:13.744442940 CEST	53382	443	192.168.2.5	151.101.129.140
Sep 24, 2024 14:56:13.744448900 CEST	443	53382	151.101.129.140	192.168.2.5
Sep 24, 2024 14:56:13.744487047 CEST	53381	443	192.168.2.5	151.101.129.140
Sep 24, 2024 14:56:13.744494915 CEST	443	53381	151.101.129.140	192.168.2.5
Sep 24, 2024 14:56:13.781999111 CEST	53378	443	192.168.2.5	104.244.42.67
Sep 24, 2024 14:56:13.782037020 CEST	443	53378	104.244.42.67	192.168.2.5
Sep 24, 2024 14:56:13.797565937 CEST	53382	443	192.168.2.5	151.101.129.140
Sep 24, 2024 14:56:13.797565937 CEST	53381	443	192.168.2.5	151.101.129.140
Sep 24, 2024 14:56:13.839520931 CEST	443	53382	151.101.129.140	192.168.2.5
Sep 24, 2024 14:56:13.839601040 CEST	443	53382	151.101.129.140	192.168.2.5
Sep 24, 2024 14:56:13.839838982 CEST	53382	443	192.168.2.5	151.101.129.140
Sep 24, 2024 14:56:13.839868069 CEST	443	53382	151.101.129.140	192.168.2.5
Sep 24, 2024 14:56:13.839889050 CEST	53382	443	192.168.2.5	151.101.129.140
Sep 24, 2024 14:56:13.839920998 CEST	53382	443	192.168.2.5	151.101.129.140
Sep 24, 2024 14:56:13.840472937 CEST	53384	443	192.168.2.5	151.101.129.140
Sep 24, 2024 14:56:13.840516090 CEST	443	53384	151.101.129.140	192.168.2.5
Sep 24, 2024 14:56:13.840600014 CEST	53384	443	192.168.2.5	151.101.129.140
Sep 24, 2024 14:56:13.840842962 CEST	53384	443	192.168.2.5	151.101.129.140
Sep 24, 2024 14:56:13.840856075 CEST	443	53384	151.101.129.140	192.168.2.5
Sep 24, 2024 14:56:13.842120886 CEST	443	53381	151.101.129.140	192.168.2.5
Sep 24, 2024 14:56:13.842240095 CEST	443	53381	151.101.129.140	192.168.2.5
Sep 24, 2024 14:56:13.842370033 CEST	53381	443	192.168.2.5	151.101.129.140
Sep 24, 2024 14:56:13.843143940 CEST	53381	443	192.168.2.5	151.101.129.140
Sep 24, 2024 14:56:13.843153954 CEST	443	53381	151.101.129.140	192.168.2.5
Sep 24, 2024 14:56:14.021667004 CEST	443	53383	151.101.129.140	192.168.2.5
Sep 24, 2024 14:56:14.021965027 CEST	53383	443	192.168.2.5	151.101.129.140
Sep 24, 2024 14:56:14.021991968 CEST	443	53383	151.101.129.140	192.168.2.5
Sep 24, 2024 14:56:14.022341967 CEST	443	53383	151.101.129.140	192.168.2.5
Sep 24, 2024 14:56:14.022695065 CEST	53383	443	192.168.2.5	151.101.129.140
Sep 24, 2024 14:56:14.022768974 CEST	443	53383	151.101.129.140	192.168.2.5
Sep 24, 2024 14:56:14.022888899 CEST	53383	443	192.168.2.5	151.101.129.140
Sep 24, 2024 14:56:14.067394972 CEST	443	53383	151.101.129.140	192.168.2.5
Sep 24, 2024 14:56:14.121860027 CEST	443	53383	151.101.129.140	192.168.2.5
Sep 24, 2024 14:56:14.122642994 CEST	443	53383	151.101.129.140	192.168.2.5
Sep 24, 2024 14:56:14.122729063 CEST	53383	443	192.168.2.5	151.101.129.140
Sep 24, 2024 14:56:14.123352051 CEST	53383	443	192.168.2.5	151.101.129.140
Sep 24, 2024 14:56:14.123378038 CEST	443	53383	151.101.129.140	192.168.2.5
Sep 24, 2024 14:56:14.315327883 CEST	443	53384	151.101.129.140	192.168.2.5
Sep 24, 2024 14:56:14.315629959 CEST	53384	443	192.168.2.5	151.101.129.140
Sep 24, 2024 14:56:14.315658092 CEST	443	53384	151.101.129.140	192.168.2.5
Sep 24, 2024 14:56:14.316005945 CEST	443	53384	151.101.129.140	192.168.2.5
Sep 24, 2024 14:56:14.316329956 CEST	53384	443	192.168.2.5	151.101.129.140
Sep 24, 2024 14:56:14.316401005 CEST	443	53384	151.101.129.140	192.168.2.5
Sep 24, 2024 14:56:14.316468000 CEST	53384	443	192.168.2.5	151.101.129.140
Sep 24, 2024 14:56:14.360061884 CEST	53384	443	192.168.2.5	151.101.129.140
Sep 24, 2024 14:56:14.360069036 CEST	443	53384	151.101.129.140	192.168.2.5
Sep 24, 2024 14:56:14.509224892 CEST	443	53384	151.101.129.140	192.168.2.5
Sep 24, 2024 14:56:14.509310007 CEST	443	53384	151.101.129.140	192.168.2.5
Sep 24, 2024 14:56:14.509459019 CEST	53384	443	192.168.2.5	151.101.129.140
Sep 24, 2024 14:56:14.509969950 CEST	53384	443	192.168.2.5	151.101.129.140
Sep 24, 2024 14:56:14.509990931 CEST	443	53384	151.101.129.140	192.168.2.5
Sep 24, 2024 14:56:56.423736095 CEST	53387	443	192.168.2.5	142.250.186.164
Sep 24, 2024 14:56:56.423788071 CEST	443	53387	142.250.186.164	192.168.2.5
Sep 24, 2024 14:56:56.424010992 CEST	53387	443	192.168.2.5	142.250.186.164
Sep 24, 2024 14:56:56.424145937 CEST	53387	443	192.168.2.5	142.250.186.164
Sep 24, 2024 14:56:56.424154997 CEST	443	53387	142.250.186.164	192.168.2.5
Sep 24, 2024 14:56:57.051691055 CEST	443	53387	142.250.186.164	192.168.2.5
Sep 24, 2024 14:56:57.052104950 CEST	53387	443	192.168.2.5	142.250.186.164
Sep 24, 2024 14:56:57.052129984 CEST	443	53387	142.250.186.164	192.168.2.5
Sep 24, 2024 14:56:57.052459002 CEST	443	53387	142.250.186.164	192.168.2.5
Sep 24, 2024 14:56:57.052803993 CEST	53387	443	192.168.2.5	142.250.186.164
Sep 24, 2024 14:56:57.052879095 CEST	443	53387	142.250.186.164	192.168.2.5
Sep 24, 2024 14:56:57.094444990 CEST	53387	443	192.168.2.5	142.250.186.164
Sep 24, 2024 14:57:06.955044031 CEST	443	53387	142.250.186.164	192.168.2.5
Sep 24, 2024 14:57:06.955127954 CEST	443	53387	142.250.186.164	192.168.2.5
Sep 24, 2024 14:57:06.955178022 CEST	53387	443	192.168.2.5	142.250.186.164
Sep 24, 2024 14:57:07.769274950 CEST	53387	443	192.168.2.5	142.250.186.164
Sep 24, 2024 14:57:07.769308090 CEST	443	53387	142.250.186.164	192.168.2.5
Sep 24, 2024 14:57:13.284079075 CEST	53388	443	192.168.2.5	151.101.129.140
Sep 24, 2024 14:57:13.284131050 CEST	443	53388	151.101.129.140	192.168.2.5
Sep 24, 2024 14:57:13.284497976 CEST	53388	443	192.168.2.5	151.101.129.140
Sep 24, 2024 14:57:13.284569025 CEST	53388	443	192.168.2.5	151.101.129.140
Sep 24, 2024 14:57:13.284578085 CEST	443	53388	151.101.129.140	192.168.2.5
Sep 24, 2024 14:57:13.292978048 CEST	53389	443	192.168.2.5	151.101.65.140
Sep 24, 2024 14:57:13.293006897 CEST	443	53389	151.101.65.140	192.168.2.5
Sep 24, 2024 14:57:13.293313026 CEST	53389	443	192.168.2.5	151.101.65.140
Sep 24, 2024 14:57:13.293313026 CEST	53389	443	192.168.2.5	151.101.65.140
Sep 24, 2024 14:57:13.293339014 CEST	443	53389	151.101.65.140	192.168.2.5
Sep 24, 2024 14:57:13.756053925 CEST	443	53388	151.101.129.140	192.168.2.5
Sep 24, 2024 14:57:13.756356955 CEST	53388	443	192.168.2.5	151.101.129.140
Sep 24, 2024 14:57:13.756375074 CEST	443	53388	151.101.129.140	192.168.2.5
Sep 24, 2024 14:57:13.756716013 CEST	443	53388	151.101.129.140	192.168.2.5
Sep 24, 2024 14:57:13.757152081 CEST	53388	443	192.168.2.5	151.101.129.140
Sep 24, 2024 14:57:13.757215023 CEST	443	53388	151.101.129.140	192.168.2.5
Sep 24, 2024 14:57:13.757343054 CEST	53388	443	192.168.2.5	151.101.129.140
Sep 24, 2024 14:57:13.764317036 CEST	443	53389	151.101.65.140	192.168.2.5
Sep 24, 2024 14:57:13.764565945 CEST	53389	443	192.168.2.5	151.101.65.140
Sep 24, 2024 14:57:13.764584064 CEST	443	53389	151.101.65.140	192.168.2.5
Sep 24, 2024 14:57:13.766045094 CEST	443	53389	151.101.65.140	192.168.2.5
Sep 24, 2024 14:57:13.766211987 CEST	53389	443	192.168.2.5	151.101.65.140
Sep 24, 2024 14:57:13.766592026 CEST	53389	443	192.168.2.5	151.101.65.140
Sep 24, 2024 14:57:13.766592026 CEST	53389	443	192.168.2.5	151.101.65.140
Sep 24, 2024 14:57:13.766670942 CEST	443	53389	151.101.65.140	192.168.2.5
Sep 24, 2024 14:57:13.799407959 CEST	443	53388	151.101.129.140	192.168.2.5
Sep 24, 2024 14:57:13.813164949 CEST	53389	443	192.168.2.5	151.101.65.140
Sep 24, 2024 14:57:13.813182116 CEST	443	53389	151.101.65.140	192.168.2.5
Sep 24, 2024 14:57:13.856919050 CEST	443	53388	151.101.129.140	192.168.2.5
Sep 24, 2024 14:57:13.857002974 CEST	443	53388	151.101.129.140	192.168.2.5
Sep 24, 2024 14:57:13.857059002 CEST	53388	443	192.168.2.5	151.101.129.140
Sep 24, 2024 14:57:13.857258081 CEST	53388	443	192.168.2.5	151.101.129.140
Sep 24, 2024 14:57:13.857275009 CEST	443	53388	151.101.129.140	192.168.2.5
Sep 24, 2024 14:57:13.860030890 CEST	53389	443	192.168.2.5	151.101.65.140
Sep 24, 2024 14:57:13.865986109 CEST	443	53389	151.101.65.140	192.168.2.5
Sep 24, 2024 14:57:13.866077900 CEST	443	53389	151.101.65.140	192.168.2.5
Sep 24, 2024 14:57:13.866151094 CEST	53389	443	192.168.2.5	151.101.65.140
Sep 24, 2024 14:57:13.866208076 CEST	53389	443	192.168.2.5	151.101.65.140
Sep 24, 2024 14:57:13.866220951 CEST	443	53389	151.101.65.140	192.168.2.5
Sep 24, 2024 14:57:13.866229057 CEST	53389	443	192.168.2.5	151.101.65.140
Sep 24, 2024 14:57:13.866267920 CEST	53389	443	192.168.2.5	151.101.65.140
Sep 24, 2024 14:57:13.866828918 CEST	53390	443	192.168.2.5	151.101.65.140
Sep 24, 2024 14:57:13.866849899 CEST	443	53390	151.101.65.140	192.168.2.5
Sep 24, 2024 14:57:13.866899014 CEST	53390	443	192.168.2.5	151.101.65.140
Sep 24, 2024 14:57:13.867150068 CEST	53391	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:57:13.867186069 CEST	443	53391	151.101.1.140	192.168.2.5
Sep 24, 2024 14:57:13.867238998 CEST	53391	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:57:13.867536068 CEST	53390	443	192.168.2.5	151.101.65.140
Sep 24, 2024 14:57:13.867552042 CEST	443	53390	151.101.65.140	192.168.2.5
Sep 24, 2024 14:57:13.867810011 CEST	53391	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:57:13.867830038 CEST	443	53391	151.101.1.140	192.168.2.5
Sep 24, 2024 14:57:14.321000099 CEST	443	53391	151.101.1.140	192.168.2.5
Sep 24, 2024 14:57:14.321527958 CEST	53391	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:57:14.321592093 CEST	443	53391	151.101.1.140	192.168.2.5
Sep 24, 2024 14:57:14.322314978 CEST	443	53391	151.101.1.140	192.168.2.5
Sep 24, 2024 14:57:14.322859049 CEST	53391	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:57:14.322958946 CEST	443	53391	151.101.1.140	192.168.2.5
Sep 24, 2024 14:57:14.323118925 CEST	53391	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:57:14.337568998 CEST	443	53390	151.101.65.140	192.168.2.5
Sep 24, 2024 14:57:14.337827921 CEST	53390	443	192.168.2.5	151.101.65.140
Sep 24, 2024 14:57:14.337843895 CEST	443	53390	151.101.65.140	192.168.2.5
Sep 24, 2024 14:57:14.338166952 CEST	443	53390	151.101.65.140	192.168.2.5
Sep 24, 2024 14:57:14.338619947 CEST	53390	443	192.168.2.5	151.101.65.140
Sep 24, 2024 14:57:14.338685989 CEST	443	53390	151.101.65.140	192.168.2.5
Sep 24, 2024 14:57:14.338789940 CEST	53390	443	192.168.2.5	151.101.65.140
Sep 24, 2024 14:57:14.363460064 CEST	443	53391	151.101.1.140	192.168.2.5
Sep 24, 2024 14:57:14.379394054 CEST	443	53390	151.101.65.140	192.168.2.5
Sep 24, 2024 14:57:14.391267061 CEST	53390	443	192.168.2.5	151.101.65.140
Sep 24, 2024 14:57:14.429462910 CEST	443	53391	151.101.1.140	192.168.2.5
Sep 24, 2024 14:57:14.429666042 CEST	443	53391	151.101.1.140	192.168.2.5
Sep 24, 2024 14:57:14.429748058 CEST	53391	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:57:14.429814100 CEST	53391	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:57:14.429814100 CEST	53391	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:57:14.429860115 CEST	443	53391	151.101.1.140	192.168.2.5
Sep 24, 2024 14:57:14.429918051 CEST	53391	443	192.168.2.5	151.101.1.140
Sep 24, 2024 14:57:14.449523926 CEST	443	53390	151.101.65.140	192.168.2.5
Sep 24, 2024 14:57:14.449611902 CEST	443	53390	151.101.65.140	192.168.2.5
Sep 24, 2024 14:57:14.449681997 CEST	53390	443	192.168.2.5	151.101.65.140
Sep 24, 2024 14:57:14.449774981 CEST	53390	443	192.168.2.5	151.101.65.140
Sep 24, 2024 14:57:14.449794054 CEST	443	53390	151.101.65.140	192.168.2.5
Sep 24, 2024 14:57:14.449799061 CEST	53390	443	192.168.2.5	151.101.65.140
Sep 24, 2024 14:57:14.449842930 CEST	53390	443	192.168.2.5	151.101.65.140

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 24, 2024 14:55:53.257601976 CEST	53	58560	1.1.1.1	192.168.2.5
Sep 24, 2024 14:55:53.303839922 CEST	53	51538	1.1.1.1	192.168.2.5
Sep 24, 2024 14:55:54.199270964 CEST	52484	53	192.168.2.5	1.1.1.1
Sep 24, 2024 14:55:54.199704885 CEST	59234	53	192.168.2.5	1.1.1.1
Sep 24, 2024 14:55:54.221462011 CEST	53	52484	1.1.1.1	192.168.2.5
Sep 24, 2024 14:55:54.240741014 CEST	53	59234	1.1.1.1	192.168.2.5
Sep 24, 2024 14:55:54.301148891 CEST	53	64779	1.1.1.1	192.168.2.5
Sep 24, 2024 14:55:54.910934925 CEST	53	58736	1.1.1.1	192.168.2.5
Sep 24, 2024 14:55:55.497080088 CEST	56989	53	192.168.2.5	1.1.1.1
Sep 24, 2024 14:55:55.497220993 CEST	65156	53	192.168.2.5	1.1.1.1
Sep 24, 2024 14:55:55.532162905 CEST	53	56989	1.1.1.1	192.168.2.5
Sep 24, 2024 14:55:55.542439938 CEST	53	65156	1.1.1.1	192.168.2.5
Sep 24, 2024 14:55:56.225985050 CEST	53	49468	1.1.1.1	192.168.2.5
Sep 24, 2024 14:55:56.372160912 CEST	52556	53	192.168.2.5	1.1.1.1
Sep 24, 2024 14:55:56.372339010 CEST	56328	53	192.168.2.5	1.1.1.1
Sep 24, 2024 14:55:56.378665924 CEST	53	52556	1.1.1.1	192.168.2.5
Sep 24, 2024 14:55:56.379225969 CEST	53	56328	1.1.1.1	192.168.2.5
Sep 24, 2024 14:55:58.385188103 CEST	53	61157	1.1.1.1	192.168.2.5
Sep 24, 2024 14:56:07.773441076 CEST	56933	53	192.168.2.5	1.1.1.1
Sep 24, 2024 14:56:07.777615070 CEST	54790	53	192.168.2.5	1.1.1.1
Sep 24, 2024 14:56:07.784071922 CEST	53	56933	1.1.1.1	192.168.2.5
Sep 24, 2024 14:56:07.788542032 CEST	53	54790	1.1.1.1	192.168.2.5
Sep 24, 2024 14:56:08.698671103 CEST	53	52270	1.1.1.1	192.168.2.5
Sep 24, 2024 14:56:08.782087088 CEST	58711	53	192.168.2.5	1.1.1.1
Sep 24, 2024 14:56:08.782840014 CEST	49979	53	192.168.2.5	1.1.1.1
Sep 24, 2024 14:56:08.785800934 CEST	51664	53	192.168.2.5	1.1.1.1
Sep 24, 2024 14:56:08.785984993 CEST	53467	53	192.168.2.5	1.1.1.1
Sep 24, 2024 14:56:08.790173054 CEST	53	58711	1.1.1.1	192.168.2.5
Sep 24, 2024 14:56:08.792382956 CEST	53	49979	1.1.1.1	192.168.2.5
Sep 24, 2024 14:56:08.792905092 CEST	53	53467	1.1.1.1	192.168.2.5
Sep 24, 2024 14:56:08.793164968 CEST	53	51664	1.1.1.1	192.168.2.5
Sep 24, 2024 14:56:09.819588900 CEST	53319	53	192.168.2.5	1.1.1.1
Sep 24, 2024 14:56:09.819780111 CEST	50722	53	192.168.2.5	1.1.1.1
Sep 24, 2024 14:56:09.827018023 CEST	53	53319	1.1.1.1	192.168.2.5
Sep 24, 2024 14:56:09.828728914 CEST	53	50722	1.1.1.1	192.168.2.5
Sep 24, 2024 14:56:10.044806004 CEST	55262	53	192.168.2.5	1.1.1.1
Sep 24, 2024 14:56:10.045129061 CEST	58909	53	192.168.2.5	1.1.1.1
Sep 24, 2024 14:56:10.052396059 CEST	53	55262	1.1.1.1	192.168.2.5
Sep 24, 2024 14:56:10.053145885 CEST	53	58909	1.1.1.1	192.168.2.5
Sep 24, 2024 14:56:10.091851950 CEST	53	53007	1.1.1.1	192.168.2.5
Sep 24, 2024 14:56:10.122869015 CEST	59196	53	192.168.2.5	1.1.1.1
Sep 24, 2024 14:56:10.123017073 CEST	61341	53	192.168.2.5	1.1.1.1
Sep 24, 2024 14:56:10.130364895 CEST	53	61341	1.1.1.1	192.168.2.5
Sep 24, 2024 14:56:10.130815029 CEST	53	59196	1.1.1.1	192.168.2.5
Sep 24, 2024 14:56:11.357955933 CEST	57369	53	192.168.2.5	1.1.1.1
Sep 24, 2024 14:56:11.358212948 CEST	59226	53	192.168.2.5	1.1.1.1
Sep 24, 2024 14:56:11.365783930 CEST	53	57369	1.1.1.1	192.168.2.5
Sep 24, 2024 14:56:11.366111994 CEST	53	59226	1.1.1.1	192.168.2.5
Sep 24, 2024 14:56:11.370117903 CEST	53834	53	192.168.2.5	1.1.1.1
Sep 24, 2024 14:56:11.370369911 CEST	49781	53	192.168.2.5	1.1.1.1
Sep 24, 2024 14:56:11.377053022 CEST	53	53834	1.1.1.1	192.168.2.5
Sep 24, 2024 14:56:11.377708912 CEST	53	49781	1.1.1.1	192.168.2.5
Sep 24, 2024 14:56:11.473917961 CEST	58589	53	192.168.2.5	1.1.1.1
Sep 24, 2024 14:56:11.474272013 CEST	62518	53	192.168.2.5	1.1.1.1
Sep 24, 2024 14:56:11.481420994 CEST	53	58589	1.1.1.1	192.168.2.5
Sep 24, 2024 14:56:11.483496904 CEST	53	62518	1.1.1.1	192.168.2.5
Sep 24, 2024 14:56:11.513577938 CEST	53	51470	1.1.1.1	192.168.2.5
Sep 24, 2024 14:56:11.964730024 CEST	53739	53	192.168.2.5	1.1.1.1
Sep 24, 2024 14:56:11.964878082 CEST	50870	53	192.168.2.5	1.1.1.1
Sep 24, 2024 14:56:11.965503931 CEST	62922	53	192.168.2.5	1.1.1.1
Sep 24, 2024 14:56:11.965651035 CEST	49402	53	192.168.2.5	1.1.1.1
Sep 24, 2024 14:56:11.970005035 CEST	54432	53	192.168.2.5	1.1.1.1
Sep 24, 2024 14:56:11.970156908 CEST	56621	53	192.168.2.5	1.1.1.1
Sep 24, 2024 14:56:11.972774029 CEST	53	53739	1.1.1.1	192.168.2.5
Sep 24, 2024 14:56:11.973025084 CEST	53	50870	1.1.1.1	192.168.2.5
Sep 24, 2024 14:56:11.973402977 CEST	53	49402	1.1.1.1	192.168.2.5
Sep 24, 2024 14:56:11.973625898 CEST	53	62922	1.1.1.1	192.168.2.5
Sep 24, 2024 14:56:11.978543043 CEST	53	54432	1.1.1.1	192.168.2.5
Sep 24, 2024 14:56:11.978888035 CEST	53	56621	1.1.1.1	192.168.2.5
Sep 24, 2024 14:56:12.205861092 CEST	51867	53	192.168.2.5	1.1.1.1
Sep 24, 2024 14:56:12.206060886 CEST	58408	53	192.168.2.5	1.1.1.1
Sep 24, 2024 14:56:12.207375050 CEST	61548	53	192.168.2.5	1.1.1.1
Sep 24, 2024 14:56:12.207592964 CEST	61904	53	192.168.2.5	1.1.1.1
Sep 24, 2024 14:56:12.213337898 CEST	53	51867	1.1.1.1	192.168.2.5
Sep 24, 2024 14:56:12.214149952 CEST	53	58408	1.1.1.1	192.168.2.5
Sep 24, 2024 14:56:12.214160919 CEST	53	61548	1.1.1.1	192.168.2.5
Sep 24, 2024 14:56:12.214173079 CEST	53	61904	1.1.1.1	192.168.2.5
Sep 24, 2024 14:56:12.551269054 CEST	63141	53	192.168.2.5	1.1.1.1
Sep 24, 2024 14:56:12.551665068 CEST	61990	53	192.168.2.5	1.1.1.1
Sep 24, 2024 14:56:12.558870077 CEST	53	63141	1.1.1.1	192.168.2.5
Sep 24, 2024 14:56:12.560219049 CEST	53	61990	1.1.1.1	192.168.2.5
Sep 24, 2024 14:56:12.723843098 CEST	53260	53	192.168.2.5	1.1.1.1
Sep 24, 2024 14:56:12.723843098 CEST	51675	53	192.168.2.5	1.1.1.1
Sep 24, 2024 14:56:12.730813026 CEST	53	53260	1.1.1.1	192.168.2.5
Sep 24, 2024 14:56:12.732054949 CEST	53	51675	1.1.1.1	192.168.2.5
Sep 24, 2024 14:56:12.978115082 CEST	59284	53	192.168.2.5	1.1.1.1
Sep 24, 2024 14:56:12.978414059 CEST	63064	53	192.168.2.5	1.1.1.1
Sep 24, 2024 14:56:12.986479044 CEST	53	59284	1.1.1.1	192.168.2.5
Sep 24, 2024 14:56:12.986500978 CEST	53	63064	1.1.1.1	192.168.2.5
Sep 24, 2024 14:56:13.277743101 CEST	61764	53	192.168.2.5	1.1.1.1
Sep 24, 2024 14:56:13.278249979 CEST	65109	53	192.168.2.5	1.1.1.1
Sep 24, 2024 14:56:13.285552025 CEST	53	61764	1.1.1.1	192.168.2.5
Sep 24, 2024 14:56:13.287010908 CEST	53	65109	1.1.1.1	192.168.2.5
Sep 24, 2024 14:56:52.435602903 CEST	53	52259	1.1.1.1	192.168.2.5
Sep 24, 2024 14:57:13.283400059 CEST	54866	53	192.168.2.5	1.1.1.1
Sep 24, 2024 14:57:13.284163952 CEST	53665	53	192.168.2.5	1.1.1.1
Sep 24, 2024 14:57:13.291273117 CEST	53	54866	1.1.1.1	192.168.2.5
Sep 24, 2024 14:57:13.292438030 CEST	53	53665	1.1.1.1	192.168.2.5
Sep 24, 2024 14:57:13.858254910 CEST	62817	53	192.168.2.5	1.1.1.1
Sep 24, 2024 14:57:13.858563900 CEST	53333	53	192.168.2.5	1.1.1.1
Sep 24, 2024 14:57:13.865643024 CEST	53	53333	1.1.1.1	192.168.2.5
Sep 24, 2024 14:57:13.866432905 CEST	53	62817	1.1.1.1	192.168.2.5

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Sep 24, 2024 14:55:54.240806103 CEST	192.168.2.5	1.1.1.1	c244	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 24, 2024 14:55:54.199270964 CEST	192.168.2.5	1.1.1.1	0x2d54	Standard query (0)	metamask-support.web.app	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:55:54.199704885 CEST	192.168.2.5	1.1.1.1	0x2494	Standard query (0)	metamask-support.web.app	65	IN (0x0001)	false
Sep 24, 2024 14:55:55.497080088 CEST	192.168.2.5	1.1.1.1	0x79f4	Standard query (0)	metamask-support.web.app	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:55:55.497220993 CEST	192.168.2.5	1.1.1.1	0xea82	Standard query (0)	metamask-support.web.app	65	IN (0x0001)	false
Sep 24, 2024 14:55:56.372160912 CEST	192.168.2.5	1.1.1.1	0x73dd	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:55:56.372339010 CEST	192.168.2.5	1.1.1.1	0xabe7	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 24, 2024 14:56:07.773441076 CEST	192.168.2.5	1.1.1.1	0x8d53	Standard query (0)	metamask.io	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:07.777615070 CEST	192.168.2.5	1.1.1.1	0x25a6	Standard query (0)	metamask.io	65	IN (0x0001)	false
Sep 24, 2024 14:56:08.782087088 CEST	192.168.2.5	1.1.1.1	0x42f9	Standard query (0)	cmp.osano.com	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:08.782840014 CEST	192.168.2.5	1.1.1.1	0x849d	Standard query (0)	cmp.osano.com	65	IN (0x0001)	false
Sep 24, 2024 14:56:08.785800934 CEST	192.168.2.5	1.1.1.1	0xf922	Standard query (0)	images.ctfassets.net	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:08.785984993 CEST	192.168.2.5	1.1.1.1	0x62ce	Standard query (0)	images.ctfassets.net	65	IN (0x0001)	false
Sep 24, 2024 14:56:09.819588900 CEST	192.168.2.5	1.1.1.1	0x8272	Standard query (0)	images.ctfassets.net	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:09.819780111 CEST	192.168.2.5	1.1.1.1	0xc686	Standard query (0)	images.ctfassets.net	65	IN (0x0001)	false
Sep 24, 2024 14:56:10.044806004 CEST	192.168.2.5	1.1.1.1	0xcb8d	Standard query (0)	cmp.osano.com	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:10.045129061 CEST	192.168.2.5	1.1.1.1	0xe97f	Standard query (0)	cmp.osano.com	65	IN (0x0001)	false
Sep 24, 2024 14:56:10.122869015 CEST	192.168.2.5	1.1.1.1	0xc000	Standard query (0)	static.ads-twitter.com	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:10.123017073 CEST	192.168.2.5	1.1.1.1	0xad5c	Standard query (0)	static.ads-twitter.com	65	IN (0x0001)	false
Sep 24, 2024 14:56:11.357955933 CEST	192.168.2.5	1.1.1.1	0xf2b5	Standard query (0)	www.redditstatic.com	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:11.358212948 CEST	192.168.2.5	1.1.1.1	0xba98	Standard query (0)	www.redditstatic.com	65	IN (0x0001)	false
Sep 24, 2024 14:56:11.370117903 CEST	192.168.2.5	1.1.1.1	0x632f	Standard query (0)	static.ads-twitter.com	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:11.370369911 CEST	192.168.2.5	1.1.1.1	0xc868	Standard query (0)	static.ads-twitter.com	65	IN (0x0001)	false
Sep 24, 2024 14:56:11.473917961 CEST	192.168.2.5	1.1.1.1	0x7859	Standard query (0)	t.co	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:11.474272013 CEST	192.168.2.5	1.1.1.1	0xfbb2	Standard query (0)	t.co	65	IN (0x0001)	false
Sep 24, 2024 14:56:11.964730024 CEST	192.168.2.5	1.1.1.1	0x530c	Standard query (0)	analytics.twitter.com	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:11.964878082 CEST	192.168.2.5	1.1.1.1	0x9861	Standard query (0)	analytics.twitter.com	65	IN (0x0001)	false
Sep 24, 2024 14:56:11.965503931 CEST	192.168.2.5	1.1.1.1	0x9053	Standard query (0)	www.redditstatic.com	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:11.965651035 CEST	192.168.2.5	1.1.1.1	0x1146	Standard query (0)	www.redditstatic.com	65	IN (0x0001)	false
Sep 24, 2024 14:56:11.970005035 CEST	192.168.2.5	1.1.1.1	0x5842	Standard query (0)	pixel-config.reddit.com	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:11.970156908 CEST	192.168.2.5	1.1.1.1	0xb1b3	Standard query (0)	pixel-config.reddit.com	65	IN (0x0001)	false
Sep 24, 2024 14:56:12.205861092 CEST	192.168.2.5	1.1.1.1	0xdd1f	Standard query (0)	alb.reddit.com	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:12.206060886 CEST	192.168.2.5	1.1.1.1	0x53a6	Standard query (0)	alb.reddit.com	65	IN (0x0001)	false
Sep 24, 2024 14:56:12.207375050 CEST	192.168.2.5	1.1.1.1	0x386c	Standard query (0)	t.co	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:12.207592964 CEST	192.168.2.5	1.1.1.1	0xe98d	Standard query (0)	t.co	65	IN (0x0001)	false
Sep 24, 2024 14:56:12.551269054 CEST	192.168.2.5	1.1.1.1	0xf025	Standard query (0)	pixel-config.reddit.com	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:12.551665068 CEST	192.168.2.5	1.1.1.1	0x935f	Standard query (0)	pixel-config.reddit.com	65	IN (0x0001)	false
Sep 24, 2024 14:56:12.723843098 CEST	192.168.2.5	1.1.1.1	0x3e50	Standard query (0)	analytics.twitter.com	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:12.723843098 CEST	192.168.2.5	1.1.1.1	0x5443	Standard query (0)	analytics.twitter.com	65	IN (0x0001)	false
Sep 24, 2024 14:56:12.978115082 CEST	192.168.2.5	1.1.1.1	0x2b56	Standard query (0)	alb.reddit.com	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:12.978414059 CEST	192.168.2.5	1.1.1.1	0x59f	Standard query (0)	alb.reddit.com	65	IN (0x0001)	false
Sep 24, 2024 14:56:13.277743101 CEST	192.168.2.5	1.1.1.1	0x32eb	Standard query (0)	w3-reporting-nel.reddit.com	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:13.278249979 CEST	192.168.2.5	1.1.1.1	0x34c9	Standard query (0)	w3-reporting-nel.reddit.com	65	IN (0x0001)	false
Sep 24, 2024 14:57:13.283400059 CEST	192.168.2.5	1.1.1.1	0xda2b	Standard query (0)	w3-reporting-nel.reddit.com	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:57:13.284163952 CEST	192.168.2.5	1.1.1.1	0x9b60	Standard query (0)	w3-reporting-nel.reddit.com	65	IN (0x0001)	false
Sep 24, 2024 14:57:13.858254910 CEST	192.168.2.5	1.1.1.1	0x15da	Standard query (0)	w3-reporting-nel.reddit.com	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:57:13.858563900 CEST	192.168.2.5	1.1.1.1	0x96c	Standard query (0)	w3-reporting-nel.reddit.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Sep 24, 2024 14:55:54.221462011 CEST	1.1.1.1	192.168.2.5	0x2d54	No error (0)	metamask-support.web.app		199.36.158.100	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:55:55.532162905 CEST	1.1.1.1	192.168.2.5	0x79f4	No error (0)	metamask-support.web.app		199.36.158.100	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:55:56.378665924 CEST	1.1.1.1	192.168.2.5	0x73dd	No error (0)	www.google.com		142.250.186.164	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:55:56.379225969 CEST	1.1.1.1	192.168.2.5	0xabe7	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 24, 2024 14:56:04.591315031 CEST	1.1.1.1	192.168.2.5	0xd565	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:04.591315031 CEST	1.1.1.1	192.168.2.5	0xd565	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:05.445611954 CEST	1.1.1.1	192.168.2.5	0x4748	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 24, 2024 14:56:05.445611954 CEST	1.1.1.1	192.168.2.5	0x4748	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:07.784071922 CEST	1.1.1.1	192.168.2.5	0x8d53	No error (0)	metamask.io		185.199.108.153	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:07.784071922 CEST	1.1.1.1	192.168.2.5	0x8d53	No error (0)	metamask.io		185.199.109.153	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:07.784071922 CEST	1.1.1.1	192.168.2.5	0x8d53	No error (0)	metamask.io		185.199.110.153	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:07.784071922 CEST	1.1.1.1	192.168.2.5	0x8d53	No error (0)	metamask.io		185.199.111.153	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:08.790173054 CEST	1.1.1.1	192.168.2.5	0x42f9	No error (0)	cmp.osano.com	d2gt2ux04o03l1.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 24, 2024 14:56:08.790173054 CEST	1.1.1.1	192.168.2.5	0x42f9	No error (0)	d2gt2ux04o03l1.cloudfront.net		18.164.52.93	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:08.790173054 CEST	1.1.1.1	192.168.2.5	0x42f9	No error (0)	d2gt2ux04o03l1.cloudfront.net		18.164.52.109	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:08.790173054 CEST	1.1.1.1	192.168.2.5	0x42f9	No error (0)	d2gt2ux04o03l1.cloudfront.net		18.164.52.88	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:08.790173054 CEST	1.1.1.1	192.168.2.5	0x42f9	No error (0)	d2gt2ux04o03l1.cloudfront.net		18.164.52.33	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:08.792382956 CEST	1.1.1.1	192.168.2.5	0x849d	No error (0)	cmp.osano.com	d2gt2ux04o03l1.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 24, 2024 14:56:08.792905092 CEST	1.1.1.1	192.168.2.5	0x62ce	No error (0)	images.ctfassets.net	d3orhvfyxudxxq.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 24, 2024 14:56:08.793164968 CEST	1.1.1.1	192.168.2.5	0xf922	No error (0)	images.ctfassets.net	d3orhvfyxudxxq.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 24, 2024 14:56:08.793164968 CEST	1.1.1.1	192.168.2.5	0xf922	No error (0)	d3orhvfyxudxxq.cloudfront.net		13.33.187.2	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:08.793164968 CEST	1.1.1.1	192.168.2.5	0xf922	No error (0)	d3orhvfyxudxxq.cloudfront.net		13.33.187.16	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:08.793164968 CEST	1.1.1.1	192.168.2.5	0xf922	No error (0)	d3orhvfyxudxxq.cloudfront.net		13.33.187.102	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:08.793164968 CEST	1.1.1.1	192.168.2.5	0xf922	No error (0)	d3orhvfyxudxxq.cloudfront.net		13.33.187.25	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:09.827018023 CEST	1.1.1.1	192.168.2.5	0x8272	No error (0)	images.ctfassets.net	d3orhvfyxudxxq.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 24, 2024 14:56:09.827018023 CEST	1.1.1.1	192.168.2.5	0x8272	No error (0)	d3orhvfyxudxxq.cloudfront.net		13.33.187.25	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:09.827018023 CEST	1.1.1.1	192.168.2.5	0x8272	No error (0)	d3orhvfyxudxxq.cloudfront.net		13.33.187.16	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:09.827018023 CEST	1.1.1.1	192.168.2.5	0x8272	No error (0)	d3orhvfyxudxxq.cloudfront.net		13.33.187.2	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:09.827018023 CEST	1.1.1.1	192.168.2.5	0x8272	No error (0)	d3orhvfyxudxxq.cloudfront.net		13.33.187.102	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:09.828728914 CEST	1.1.1.1	192.168.2.5	0xc686	No error (0)	images.ctfassets.net	d3orhvfyxudxxq.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 24, 2024 14:56:10.052396059 CEST	1.1.1.1	192.168.2.5	0xcb8d	No error (0)	cmp.osano.com	d2gt2ux04o03l1.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 24, 2024 14:56:10.052396059 CEST	1.1.1.1	192.168.2.5	0xcb8d	No error (0)	d2gt2ux04o03l1.cloudfront.net		18.245.31.112	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:10.052396059 CEST	1.1.1.1	192.168.2.5	0xcb8d	No error (0)	d2gt2ux04o03l1.cloudfront.net		18.245.31.78	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:10.052396059 CEST	1.1.1.1	192.168.2.5	0xcb8d	No error (0)	d2gt2ux04o03l1.cloudfront.net		18.245.31.100	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:10.052396059 CEST	1.1.1.1	192.168.2.5	0xcb8d	No error (0)	d2gt2ux04o03l1.cloudfront.net		18.245.31.35	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:10.053145885 CEST	1.1.1.1	192.168.2.5	0xe97f	No error (0)	cmp.osano.com	d2gt2ux04o03l1.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 24, 2024 14:56:10.130364895 CEST	1.1.1.1	192.168.2.5	0xad5c	No error (0)	static.ads-twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 24, 2024 14:56:10.130815029 CEST	1.1.1.1	192.168.2.5	0xc000	No error (0)	static.ads-twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 24, 2024 14:56:10.130815029 CEST	1.1.1.1	192.168.2.5	0xc000	No error (0)	platform.twitter.map.fastly.net		199.232.188.157	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:11.365783930 CEST	1.1.1.1	192.168.2.5	0xf2b5	No error (0)	www.redditstatic.com	dualstack.reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 24, 2024 14:56:11.365783930 CEST	1.1.1.1	192.168.2.5	0xf2b5	No error (0)	dualstack.reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:11.365783930 CEST	1.1.1.1	192.168.2.5	0xf2b5	No error (0)	dualstack.reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:11.365783930 CEST	1.1.1.1	192.168.2.5	0xf2b5	No error (0)	dualstack.reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:11.365783930 CEST	1.1.1.1	192.168.2.5	0xf2b5	No error (0)	dualstack.reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:11.366111994 CEST	1.1.1.1	192.168.2.5	0xba98	No error (0)	www.redditstatic.com	dualstack.reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 24, 2024 14:56:11.377053022 CEST	1.1.1.1	192.168.2.5	0x632f	No error (0)	static.ads-twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 24, 2024 14:56:11.377053022 CEST	1.1.1.1	192.168.2.5	0x632f	No error (0)	platform.twitter.map.fastly.net		199.232.188.157	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:11.377708912 CEST	1.1.1.1	192.168.2.5	0xc868	No error (0)	static.ads-twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 24, 2024 14:56:11.481420994 CEST	1.1.1.1	192.168.2.5	0x7859	No error (0)	t.co		162.159.140.229	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:11.972774029 CEST	1.1.1.1	192.168.2.5	0x530c	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 24, 2024 14:56:11.972774029 CEST	1.1.1.1	192.168.2.5	0x530c	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 24, 2024 14:56:11.972774029 CEST	1.1.1.1	192.168.2.5	0x530c	No error (0)	s.twitter.com		104.244.42.3	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:11.973025084 CEST	1.1.1.1	192.168.2.5	0x9861	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 24, 2024 14:56:11.973025084 CEST	1.1.1.1	192.168.2.5	0x9861	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 24, 2024 14:56:11.973402977 CEST	1.1.1.1	192.168.2.5	0x1146	No error (0)	www.redditstatic.com	dualstack.reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 24, 2024 14:56:11.973625898 CEST	1.1.1.1	192.168.2.5	0x9053	No error (0)	www.redditstatic.com	dualstack.reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 24, 2024 14:56:11.973625898 CEST	1.1.1.1	192.168.2.5	0x9053	No error (0)	dualstack.reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:11.973625898 CEST	1.1.1.1	192.168.2.5	0x9053	No error (0)	dualstack.reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:11.973625898 CEST	1.1.1.1	192.168.2.5	0x9053	No error (0)	dualstack.reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:11.973625898 CEST	1.1.1.1	192.168.2.5	0x9053	No error (0)	dualstack.reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:11.978543043 CEST	1.1.1.1	192.168.2.5	0x5842	No error (0)	pixel-config.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 24, 2024 14:56:11.978543043 CEST	1.1.1.1	192.168.2.5	0x5842	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:11.978543043 CEST	1.1.1.1	192.168.2.5	0x5842	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:11.978543043 CEST	1.1.1.1	192.168.2.5	0x5842	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:11.978543043 CEST	1.1.1.1	192.168.2.5	0x5842	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:11.978888035 CEST	1.1.1.1	192.168.2.5	0xb1b3	No error (0)	pixel-config.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 24, 2024 14:56:12.213337898 CEST	1.1.1.1	192.168.2.5	0xdd1f	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 24, 2024 14:56:12.213337898 CEST	1.1.1.1	192.168.2.5	0xdd1f	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:12.213337898 CEST	1.1.1.1	192.168.2.5	0xdd1f	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:12.213337898 CEST	1.1.1.1	192.168.2.5	0xdd1f	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:12.213337898 CEST	1.1.1.1	192.168.2.5	0xdd1f	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:12.214149952 CEST	1.1.1.1	192.168.2.5	0x53a6	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 24, 2024 14:56:12.214160919 CEST	1.1.1.1	192.168.2.5	0x386c	No error (0)	t.co		162.159.140.229	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:12.558870077 CEST	1.1.1.1	192.168.2.5	0xf025	No error (0)	pixel-config.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 24, 2024 14:56:12.558870077 CEST	1.1.1.1	192.168.2.5	0xf025	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:12.558870077 CEST	1.1.1.1	192.168.2.5	0xf025	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:12.558870077 CEST	1.1.1.1	192.168.2.5	0xf025	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:12.558870077 CEST	1.1.1.1	192.168.2.5	0xf025	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:12.560219049 CEST	1.1.1.1	192.168.2.5	0x935f	No error (0)	pixel-config.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 24, 2024 14:56:12.730813026 CEST	1.1.1.1	192.168.2.5	0x3e50	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 24, 2024 14:56:12.730813026 CEST	1.1.1.1	192.168.2.5	0x3e50	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 24, 2024 14:56:12.730813026 CEST	1.1.1.1	192.168.2.5	0x3e50	No error (0)	s.twitter.com		104.244.42.67	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:12.732054949 CEST	1.1.1.1	192.168.2.5	0x5443	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 24, 2024 14:56:12.732054949 CEST	1.1.1.1	192.168.2.5	0x5443	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 24, 2024 14:56:12.986479044 CEST	1.1.1.1	192.168.2.5	0x2b56	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 24, 2024 14:56:12.986479044 CEST	1.1.1.1	192.168.2.5	0x2b56	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:12.986479044 CEST	1.1.1.1	192.168.2.5	0x2b56	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:12.986479044 CEST	1.1.1.1	192.168.2.5	0x2b56	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:12.986479044 CEST	1.1.1.1	192.168.2.5	0x2b56	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:12.986500978 CEST	1.1.1.1	192.168.2.5	0x59f	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 24, 2024 14:56:13.285552025 CEST	1.1.1.1	192.168.2.5	0x32eb	No error (0)	w3-reporting-nel.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 24, 2024 14:56:13.285552025 CEST	1.1.1.1	192.168.2.5	0x32eb	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:13.285552025 CEST	1.1.1.1	192.168.2.5	0x32eb	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:13.285552025 CEST	1.1.1.1	192.168.2.5	0x32eb	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:13.285552025 CEST	1.1.1.1	192.168.2.5	0x32eb	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:56:13.287010908 CEST	1.1.1.1	192.168.2.5	0x34c9	No error (0)	w3-reporting-nel.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 24, 2024 14:56:19.153743029 CEST	1.1.1.1	192.168.2.5	0x5399	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 24, 2024 14:56:19.153743029 CEST	1.1.1.1	192.168.2.5	0x5399	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:57:13.291273117 CEST	1.1.1.1	192.168.2.5	0xda2b	No error (0)	w3-reporting-nel.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 24, 2024 14:57:13.291273117 CEST	1.1.1.1	192.168.2.5	0xda2b	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:57:13.291273117 CEST	1.1.1.1	192.168.2.5	0xda2b	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:57:13.291273117 CEST	1.1.1.1	192.168.2.5	0xda2b	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:57:13.291273117 CEST	1.1.1.1	192.168.2.5	0xda2b	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:57:13.292438030 CEST	1.1.1.1	192.168.2.5	0x9b60	No error (0)	w3-reporting-nel.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 24, 2024 14:57:13.865643024 CEST	1.1.1.1	192.168.2.5	0x96c	No error (0)	w3-reporting-nel.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 24, 2024 14:57:13.866432905 CEST	1.1.1.1	192.168.2.5	0x15da	No error (0)	w3-reporting-nel.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 24, 2024 14:57:13.866432905 CEST	1.1.1.1	192.168.2.5	0x15da	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:57:13.866432905 CEST	1.1.1.1	192.168.2.5	0x15da	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:57:13.866432905 CEST	1.1.1.1	192.168.2.5	0x15da	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Sep 24, 2024 14:57:13.866432905 CEST	1.1.1.1	192.168.2.5	0x15da	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

metamask-support.web.app

https:

metamask.io

cmp.osano.com

images.ctfassets.net

static.ads-twitter.com

www.redditstatic.com

t.co

pixel-config.reddit.com

analytics.twitter.com

alb.reddit.com

fs.microsoft.com

w3-reporting-nel.reddit.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49710	199.36.158.100	443	3992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-24 12:55:54 UTC	667	OUT	GET / HTTP/1.1 Host: metamask-support.web.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-24 12:55:54 UTC	607	IN	HTTP/1.1 200 OK Connection: close Content-Length: 677 Cache-Control: max-age=3600 Content-Type: text/html; charset=utf-8 Etag: "32d030ebe9c438ba6ed7b25827d1692a79c7f4cfe1510f4c991ca22923e185e0" Last-Modified: Tue, 04 Jan 2022 18:43:10 GMT Strict-Transport-Security: max-age=31556926; includeSubDomains; preload Accept-Ranges: bytes Date: Tue, 24 Sep 2024 12:55:54 GMT X-Served-By: cache-ewr-kewr1740058-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1727182555.743623,VS0,VE99 Vary: x-fh-requested-host, accept-encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-09-24 12:55:54 UTC	677	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 30 30 30 30 30 30 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 Data Ascii: <!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1,user-scalable=no"/><meta name="theme-color" content="#000000"/><link rel="a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49709	199.36.158.100	443	3992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-24 12:55:54 UTC	559	OUT	GET /static/js/main.48dd4429.js HTTP/1.1 Host: metamask-support.web.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://metamask-support.web.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-24 12:55:55 UTC	617	IN	HTTP/1.1 200 OK Connection: close Content-Length: 237002 Cache-Control: max-age=3600 Content-Type: text/javascript; charset=utf-8 Etag: "b8d4bc250701946a5a4c465e7448ebba35b56114bab3bc2f89615689063f7d93" Last-Modified: Tue, 04 Jan 2022 18:43:10 GMT Strict-Transport-Security: max-age=31556926; includeSubDomains; preload Accept-Ranges: bytes Date: Tue, 24 Sep 2024 12:55:55 GMT X-Served-By: cache-ewr-kewr1740050-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1727182555.953737,VS0,VE157 Vary: x-fh-requested-host, accept-encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-09-24 12:55:55 UTC	1378	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6d 61 69 6e 2e 34 38 64 64 34 34 32 39 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 38 39 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3b 21 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 65 2e 65 78 70 6f 72 74 73 3f 65 2e 65 78 70 6f 72 74 73 3d 74 2e 64 6f 63 75 6d 65 6e 74 3f 6e 28 74 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 Data Ascii: /! For license information please see main.48dd4429.js.LICENSE.txt /!function(){var e={890:function(e,t){var n;!function(t,n){"use strict";"object"===typeof e.exports?e.exports=t.document?n(t,!0):function(e){if(!e.document)throw new Error("jQuery requi
2024-09-24 12:55:55 UTC	1378	IN	Data Raw: 29 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 6c 2e 63 61 6c 6c 28 74 68 69 73 29 3a 65 3c 30 3f 74 68 69 73 5b 65 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 65 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 45 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 74 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 45 2e 65 61 63 68 28 74 68 69 73 2c 65 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 45 2e 6d 61 70 28 74 68 69 73 2c Data Ascii: )},get:function(e){return null==e?l.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=E.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return E.each(this,e)},map:function(e){return this.pushStack(E.map(this,
2024-09-24 12:55:55 UTC	1378	IN	Data Raw: 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 64 2e 63 61 6c 6c 28 65 29 29 26 26 28 21 28 74 3d 61 28 65 29 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 28 6e 3d 70 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 26 26 68 2e 63 61 6c 6c 28 6e 29 3d 3d 3d 6d 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 67 6c 6f 62 61 6c 45 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 78 28 65 2c 7b 6e 6f 6e Data Ascii: ct:function(e){var t,n;return!(!e\|\|"[object Object]"!==d.call(e))&&(!(t=a(e))\|\|"function"===typeof(n=p.call(t,"constructor")&&t.constructor)&&h.call(n)===m)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){x(e,{non
2024-09-24 12:55:55 UTC	1378	IN	Data Raw: 74 79 2c 4c 3d 5b 5d 2c 44 3d 4c 2e 70 6f 70 2c 4f 3d 4c 2e 70 75 73 68 2c 6a 3d 4c 2e 70 75 73 68 2c 41 3d 4c 2e 73 6c 69 63 65 2c 52 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 4d 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 7a 3d 22 5b 5c 5c Data Ascii: ty,L=[],D=L.pop,O=L.push,j=L.push,A=L.slice,R=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},M="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",z="[\\
2024-09-24 12:55:55 UTC	1378	IN	Data Raw: 67 74 7c 6c 74 7c 6e 74 68 7c 66 69 72 73 74 7c 6c 61 73 74 29 28 3f 3a 5c 5c 28 5b 5c 5c 78 32 30 5c 5c 74 5c 5c 72 5c 5c 6e 5c 5c 66 5d 2a 28 28 3f 3a 2d 5c 5c 64 29 3f 5c 5c 64 2a 29 5b 5c 5c 78 32 30 5c 5c 74 5c 5c 72 5c 5c 6e 5c 5c 66 5d 2a 5c 5c 29 7c 29 28 3f 3d 5b 5e 2d 5d 7c 24 29 22 2c 22 69 22 29 7d 2c 59 3d 2f 48 54 4d 4c 24 2f 69 2c 4b 3d 2f 5e 28 3f 3a 69 6e 70 75 74 7c 73 65 6c 65 63 74 7c 74 65 78 74 61 72 65 61 7c 62 75 74 74 6f 6e 29 24 2f 69 2c 47 3d 2f 5e 68 5c 64 24 2f 69 2c 4a 3d 2f 5e 5b 5e 7b 5d 2b 5c 7b 5c 73 2a 5c 5b 6e 61 74 69 76 65 20 5c 77 2f 2c 5a 3d 2f 5e 28 3f 3a 23 28 5b 5c 77 2d 5d 2b 29 7c 28 5c 77 2b 29 7c 5c 2e 28 5b 5c 77 2d 5d 2b 29 29 24 2f 2c 65 65 3d 2f 5b 2b 7e 5d 2f 2c 74 65 3d 6e 65 77 20 52 65 67 45 78 70 28 Data Ascii: gt\|lt\|nth\|first\|last)(?:\\([\\x20\\t\\r\\n\\f]((?:-\\d)?\\d)[\\x20\\t\\r\\n\\f]\\)\|)(?=[^-]\|$)","i")},Y=/HTML$/i,K=/^(?:input\|select\|textarea\|button)$/i,G=/^h\d$/i,J=/^[^{]+\{\s\[native \w/,Z=/^(?:#([\w-]+)\|(\w+)\|\.([\w-]+))$/,ee=/[+~]/,te=new RegExp(
2024-09-24 12:55:55 UTC	1378	IN	Data Raw: 4e 61 6d 65 28 65 29 29 2c 72 3b 69 66 28 28 69 3d 66 5b 33 5d 29 26 26 6e 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 72 65 74 75 72 6e 20 6a 2e 61 70 70 6c 79 28 72 2c 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 69 29 29 2c 72 7d 69 66 28 6e 2e 71 73 61 26 26 21 4e 5b 65 2b 22 20 22 5d 26 26 28 21 67 7c 7c 21 67 2e 74 65 73 74 28 65 29 29 26 26 28 31 21 3d 3d 78 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 3d 74 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 29 7b 69 66 28 76 3d 65 2c 79 3d 74 2c 31 3d 3d 3d 78 26 26 28 56 2e 74 65 73 74 28 65 29 7c 7c 57 2e 74 65 73 74 28 65 29 29 29 7b 66 6f 72 28 28 Data Ascii: Name(e)),r;if((i=f[3])&&n.getElementsByClassName&&t.getElementsByClassName)return j.apply(r,t.getElementsByClassName(i)),r}if(n.qsa&&!N[e+" "]&&(!g\|\|!g.test(e))&&(1!==x\|\|"object"!==t.nodeName.toLowerCase())){if(v=e,y=t,1===x&&(V.test(e)\|\|W.test(e))){for((
2024-09-24 12:55:55 UTC	1378	IN	Data Raw: 4e 6f 64 65 26 26 21 31 3d 3d 3d 74 2e 64 69 73 61 62 6c 65 64 3f 22 6c 61 62 65 6c 22 69 6e 20 74 3f 22 6c 61 62 65 6c 22 69 6e 20 74 2e 70 61 72 65 6e 74 4e 6f 64 65 3f 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 65 3a 74 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 65 3a 74 2e 69 73 44 69 73 61 62 6c 65 64 3d 3d 3d 65 7c 7c 74 2e 69 73 44 69 73 61 62 6c 65 64 21 3d 3d 21 65 26 26 61 65 28 74 29 3d 3d 3d 65 3a 74 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 65 3a 22 6c 61 62 65 6c 22 69 6e 20 74 26 26 74 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 65 7d 7d 66 75 6e 63 74 69 6f 6e 20 67 65 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 2b 74 2c 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 Data Ascii: Node&&!1===t.disabled?"label"in t?"label"in t.parentNode?t.parentNode.disabled===e:t.disabled===e:t.isDisabled===e\|\|t.isDisabled!==!e&&ae(t)===e:t.disabled===e:"label"in t&&t.disabled===e}}function ge(e){return se((function(t){return t=+t,se((function(n,r
2024-09-24 12:55:55 UTC	1378	IN	Data Raw: 61 6d 65 28 77 29 2e 6c 65 6e 67 74 68 7d 29 29 2c 6e 2e 67 65 74 42 79 49 64 3f 28 72 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 3d 3d 3d 74 7d 7d 2c 72 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 6d 29 7b 76 61 72 20 6e 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 72 65 74 75 72 6e 20 6e 3f 5b 6e 5d 3a 5b 5d 7d 7d 29 3a 28 72 2e 66 69 6c 74 65 72 2e 49 44 3d Data Ascii: ame(w).length})),n.getById?(r.filter.ID=function(e){var t=e.replace(te,ne);return function(e){return e.getAttribute("id")===t}},r.find.ID=function(e,t){if("undefined"!==typeof t.getElementById&&m){var n=t.getElementById(e);return n?[n]:[]}}):(r.filter.ID=
2024-09-24 12:55:55 UTC	1378	IN	Data Raw: 5c 5c 72 5c 5c 6e 5c 5c 66 5d 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 73 65 6c 65 63 74 65 64 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 67 2e 70 75 73 68 28 22 5c 5c 5b 5b 5c 5c 78 32 30 5c 5c 74 5c 5c 72 5c 5c 6e 5c 5c 66 5d 2a 28 3f 3a 76 61 6c 75 65 7c 22 2b 4d 2b 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 69 64 7e 3d 22 2b 77 2b 22 2d 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 67 2e 70 75 73 68 28 22 7e 3d 22 29 2c 28 74 3d 70 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 22 29 2c 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f Data Ascii: \\r\\n\\f](?:''\|\"\")"),e.querySelectorAll("[selected]").length\|\|g.push("\\[[\\x20\\t\\r\\n\\f](?:value\|"+M+")"),e.querySelectorAll("[id~="+w+"-]").length\|\|g.push("~="),(t=p.createElement("input")).setAttribute("name",""),e.appendChild(t),e.querySelecto
2024-09-24 12:55:55 UTC	1378	IN	Data Raw: 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 29 2c 62 3d 74 7c 7c 4a 2e 74 65 73 74 28 68 2e 63 6f 6e 74 61 69 6e 73 29 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 3f 65 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3a 65 2c 72 3d 74 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 65 3d 3d 3d 72 7c 7c 21 28 21 72 7c 7c 31 21 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 28 6e 2e 63 6f 6e 74 61 69 6e 73 3f 6e 2e 63 6f 6e 74 61 69 6e 73 28 72 29 3a 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 26 26 31 36 26 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 72 29 29 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 74 29 Data Ascii: mentPosition),b=t\|\|J.test(h.contains)?function(e,t){var n=9===e.nodeType?e.documentElement:e,r=t&&t.parentNode;return e===r\|\|!(!r\|\|1!==r.nodeType\|\|!(n.contains?n.contains(r):e.compareDocumentPosition&&16&e.compareDocumentPosition(r)))}:function(e,t){if(t)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49711	199.36.158.100	443	3992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-24 12:55:55 UTC	575	OUT	GET /static/css/main.5392d7b8.css HTTP/1.1 Host: metamask-support.web.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://metamask-support.web.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-24 12:55:55 UTC	608	IN	HTTP/1.1 200 OK Connection: close Content-Length: 7824 Cache-Control: max-age=3600 Content-Type: text/css; charset=utf-8 Etag: "980a13c4537029564989d7fcbdd5b9790e2868333b43ce064c90e17496c360a9" Last-Modified: Tue, 04 Jan 2022 18:43:10 GMT Strict-Transport-Security: max-age=31556926; includeSubDomains; preload Accept-Ranges: bytes Date: Tue, 24 Sep 2024 12:55:55 GMT X-Served-By: cache-ewr-kewr1740020-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1727182555.438563,VS0,VE107 Vary: x-fh-requested-host, accept-encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-09-24 12:55:55 UTC	1378	IN	Data Raw: 62 6f 64 79 7b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 52 6f 62 6f 74 6f 2c 4f 78 79 67 65 6e 2c 55 62 75 6e 74 75 2c 43 61 6e 74 61 72 65 6c 6c 2c 46 69 72 61 20 53 61 6e 73 2c 44 72 6f 69 64 20 53 61 6e 73 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 73 61 6e 73 2d 73 65 72 69 66 3b 6d 61 72 67 69 6e 3a 30 7d 63 6f 64 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 6f 75 72 63 65 2d 63 6f 64 65 2d 70 72 6f 2c 4d 65 6e 6c 6f 2c 4d Data Ascii: body{-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale;font-family:-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,Oxygen,Ubuntu,Cantarell,Fira Sans,Droid Sans,Helvetica Neue,sans-serif;margin:0}code{font-family:source-code-pro,Menlo,M
2024-09-24 12:55:55 UTC	1378	IN	Data Raw: 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 41 6c 70 68 61 28 4f 70 61 63 69 74 79 3d 34 30 29 3b 66 69 6c 74 65 72 3a 61 6c 70 68 61 28 6f 70 61 63 69 74 79 3d 34 30 29 3b 6f 70 61 63 69 74 79 3a 2e 34 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 2e 72 74 6c 20 2e 74 6f 61 73 74 2d 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 6c 65 66 74 3a 2d 2e 33 65 6d 3b 72 69 67 68 74 3a 2e 33 65 6d 7d 62 75 74 74 6f 6e 2e 74 6f 61 73 74 2d 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 30 20 30 3b 62 6f 72 64 65 72 3a 30 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 70 61 64 64 69 6e 67 3a 30 7d Data Ascii: ageTransform.Microsoft.Alpha(Opacity=40);filter:alpha(opacity=40);opacity:.4;text-decoration:none}.rtl .toast-close-button{float:left;left:-.3em;right:.3em}button.toast-close-button{-webkit-appearance:none;background:0 0;border:0;cursor:pointer;padding:0}
2024-09-24 12:55:55 UTC	1378	IN	Data Raw: 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 42 67 41 41 41 41 59 43 41 59 41 41 41 44 67 64 7a 33 34 41 41 41 41 41 58 4e 53 52 30 49 41 72 73 34 63 36 51 41 41 41 41 52 6e 51 55 31 42 41 41 43 78 6a 77 76 38 59 51 55 41 41 41 41 4a 63 45 68 5a 63 77 41 41 44 73 4d 41 41 41 37 44 41 63 64 76 71 47 51 41 41 41 47 77 53 55 52 42 56 45 68 4c 74 5a 61 39 53 67 4e 42 45 4d 63 39 73 55 78 78 52 63 6f 55 4b 53 7a 53 57 49 68 58 70 46 4d 68 68 59 57 46 68 61 42 67 34 79 50 59 69 57 43 58 5a 78 42 4c 45 52 73 4c 52 53 33 45 51 6b 45 66 77 43 4b 64 6a 57 4a 41 77 53 4b 43 67 6f 4b 43 63 75 64 76 34 4f 35 59 4c 72 74 37 45 7a 67 58 68 69 55 33 2f 34 2b 62 32 63 6b 6d 77 56 6a 4a 53 70 4b 6b 51 36 Data Ascii: e/png;base64,iVBORw0KGgoAAAANSUhEUgAAABgAAAAYCAYAAADgdz34AAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsMAAA7DAcdvqGQAAAGwSURBVEhLtZa9SgNBEMc9sUxxRcoUKSzSWIhXpFMhhYWFhaBg4yPYiWCXZxBLERsLRS3EQkEfwCKdjWJAwSKCgoKCcudv4O5YLrt7EzgXhiU3/4+b2ckmwVjJSpKkQ6
2024-09-24 12:55:55 UTC	1378	IN	Data Raw: 61 48 67 42 73 71 6c 4e 71 4b 59 48 34 38 6a 58 79 4a 4b 4d 75 41 62 69 79 56 4a 38 4b 7a 61 42 33 65 52 63 30 70 67 39 56 77 51 34 6e 69 46 72 79 49 36 38 71 69 4f 69 33 41 62 6a 77 64 73 66 6e 41 74 6b 30 62 43 6a 54 4c 4a 4b 72 36 6d 72 44 39 67 38 69 71 2f 53 2f 42 38 31 68 67 75 4f 4d 6c 51 54 6e 56 79 47 34 30 77 41 63 6a 6e 6d 67 73 43 4e 45 53 44 72 6a 6d 65 37 77 66 66 74 50 34 50 37 53 50 34 4e 33 43 4a 5a 64 76 7a 6f 4e 79 47 71 32 63 2f 48 57 4f 58 4a 47 73 76 56 67 2b 52 41 2f 6b 32 4d 43 2f 77 4e 36 49 32 59 41 32 50 74 38 47 6b 41 41 41 41 41 53 55 56 4f 52 4b 35 43 59 49 49 3d 29 21 69 6d 70 6f 72 74 61 6e 74 7d 23 74 6f 61 73 74 2d 63 6f 6e 74 61 69 6e 65 72 3e 2e 74 6f 61 73 74 2d 73 75 63 63 65 73 73 7b 62 61 63 6b 67 72 6f 75 6e 64 2d Data Ascii: aHgBsqlNqKYH48jXyJKMuAbiyVJ8KzaB3eRc0pg9VwQ4niFryI68qiOi3AbjwdsfnAtk0bCjTLJKr6mrD9g8iq/S/B81hguOMlQTnVyG40wAcjnmgsCNESDrjme7wfftP4P7SP4N3CJZdvzoNyGq2c/HWOXJGsvVg+RA/k2MC/wN6I2YA2Pt8GkAAAAASUVORK5CYII=)!important}#toast-container>.toast-success{background-
2024-09-24 12:55:55 UTC	1378	IN	Data Raw: 34 62 57 44 4e 4d 46 62 4a 52 46 6d 43 39 45 37 34 53 6f 53 30 43 71 75 6c 77 6a 6b 43 30 2b 35 62 70 63 56 31 43 5a 38 4e 4d 65 6a 34 70 6a 79 30 55 2b 64 6f 44 51 73 47 79 6f 31 68 7a 56 4a 74 74 49 6a 68 51 37 47 6e 42 74 52 46 4e 31 55 61 72 55 6c 48 38 46 33 78 69 63 74 2b 48 59 30 37 72 45 7a 6f 55 47 50 6c 57 63 6a 52 46 52 72 34 2f 67 43 68 5a 67 63 33 5a 4c 32 64 38 6f 41 41 41 41 41 53 55 56 4f 52 4b 35 43 59 49 49 3d 29 21 69 6d 70 6f 72 74 61 6e 74 7d 23 74 6f 61 73 74 2d 63 6f 6e 74 61 69 6e 65 72 2e 74 6f 61 73 74 2d 62 6f 74 74 6f 6d 2d 63 65 6e 74 65 72 3e 64 69 76 2c 23 74 6f 61 73 74 2d 63 6f 6e 74 61 69 6e 65 72 2e 74 6f 61 73 74 2d 74 6f 70 2d 63 65 6e 74 65 72 3e 64 69 76 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 6d 61 72 Data Ascii: 4bWDNMFbJRFmC9E74SoS0CqulwjkC0+5bpcV1CZ8NMej4pjy0U+doDQsGyo1hzVJttIjhQ7GnBtRFN1UarUlH8F3xict+HY07rEzoUGPlWcjRFRr4/gChZgc3ZL2d8oAAAAASUVORK5CYII=)!important}#toast-container.toast-bottom-center>div,#toast-container.toast-top-center>div{margin-left:auto;mar
2024-09-24 12:55:55 UTC	934	IN	Data Raw: 65 72 3e 64 69 76 7b 70 61 64 64 69 6e 67 3a 31 35 70 78 20 31 35 70 78 20 31 35 70 78 20 35 30 70 78 3b 77 69 64 74 68 3a 32 35 65 6d 7d 23 74 6f 61 73 74 2d 63 6f 6e 74 61 69 6e 65 72 3e 64 69 76 2e 72 74 6c 7b 70 61 64 64 69 6e 67 3a 31 35 70 78 20 35 30 70 78 20 31 35 70 78 20 31 35 70 78 7d 7d 2e 66 6f 72 6d 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 65 72 3b 68 65 69 67 68 74 3a 36 30 76 68 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 7d 2e 66 6f 72 6d 20 69 6e 70 75 74 2c 2e 66 6f 72 6d 20 74 65 78 74 61 72 65 61 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 73 6f 6c Data Ascii: er>div{padding:15px 15px 15px 50px;width:25em}#toast-container>div.rtl{padding:15px 50px 15px 15px}}.form{display:flex;flex-direction:column;font-weight:bolder;height:60vh;justify-content:flex-start}.form input,.form textarea{border:none;border-bottom:sol

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49713	199.36.158.100	443	3992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-24 12:55:56 UTC	374	OUT	GET /static/js/main.48dd4429.js HTTP/1.1 Host: metamask-support.web.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-24 12:55:56 UTC	617	IN	HTTP/1.1 200 OK Connection: close Content-Length: 237002 Cache-Control: max-age=3600 Content-Type: text/javascript; charset=utf-8 Etag: "b8d4bc250701946a5a4c465e7448ebba35b56114bab3bc2f89615689063f7d93" Last-Modified: Tue, 04 Jan 2022 18:43:10 GMT Strict-Transport-Security: max-age=31556926; includeSubDomains; preload Accept-Ranges: bytes Date: Tue, 24 Sep 2024 12:55:56 GMT X-Served-By: cache-nyc-kteb1890059-NYC X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1727182556.188364,VS0,VE137 Vary: x-fh-requested-host, accept-encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-09-24 12:55:56 UTC	1378	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6d 61 69 6e 2e 34 38 64 64 34 34 32 39 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 38 39 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3b 21 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 65 2e 65 78 70 6f 72 74 73 3f 65 2e 65 78 70 6f 72 74 73 3d 74 2e 64 6f 63 75 6d 65 6e 74 3f 6e 28 74 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 Data Ascii: /! For license information please see main.48dd4429.js.LICENSE.txt /!function(){var e={890:function(e,t){var n;!function(t,n){"use strict";"object"===typeof e.exports?e.exports=t.document?n(t,!0):function(e){if(!e.document)throw new Error("jQuery requi
2024-09-24 12:55:56 UTC	1378	IN	Data Raw: 29 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 6c 2e 63 61 6c 6c 28 74 68 69 73 29 3a 65 3c 30 3f 74 68 69 73 5b 65 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 65 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 45 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 74 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 45 2e 65 61 63 68 28 74 68 69 73 2c 65 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 45 2e 6d 61 70 28 74 68 69 73 2c Data Ascii: )},get:function(e){return null==e?l.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=E.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return E.each(this,e)},map:function(e){return this.pushStack(E.map(this,
2024-09-24 12:55:56 UTC	1378	IN	Data Raw: 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 64 2e 63 61 6c 6c 28 65 29 29 26 26 28 21 28 74 3d 61 28 65 29 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 28 6e 3d 70 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 26 26 68 2e 63 61 6c 6c 28 6e 29 3d 3d 3d 6d 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 67 6c 6f 62 61 6c 45 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 78 28 65 2c 7b 6e 6f 6e Data Ascii: ct:function(e){var t,n;return!(!e\|\|"[object Object]"!==d.call(e))&&(!(t=a(e))\|\|"function"===typeof(n=p.call(t,"constructor")&&t.constructor)&&h.call(n)===m)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){x(e,{non
2024-09-24 12:55:56 UTC	1378	IN	Data Raw: 74 79 2c 4c 3d 5b 5d 2c 44 3d 4c 2e 70 6f 70 2c 4f 3d 4c 2e 70 75 73 68 2c 6a 3d 4c 2e 70 75 73 68 2c 41 3d 4c 2e 73 6c 69 63 65 2c 52 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 4d 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 7a 3d 22 5b 5c 5c Data Ascii: ty,L=[],D=L.pop,O=L.push,j=L.push,A=L.slice,R=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},M="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",z="[\\
2024-09-24 12:55:56 UTC	1378	IN	Data Raw: 67 74 7c 6c 74 7c 6e 74 68 7c 66 69 72 73 74 7c 6c 61 73 74 29 28 3f 3a 5c 5c 28 5b 5c 5c 78 32 30 5c 5c 74 5c 5c 72 5c 5c 6e 5c 5c 66 5d 2a 28 28 3f 3a 2d 5c 5c 64 29 3f 5c 5c 64 2a 29 5b 5c 5c 78 32 30 5c 5c 74 5c 5c 72 5c 5c 6e 5c 5c 66 5d 2a 5c 5c 29 7c 29 28 3f 3d 5b 5e 2d 5d 7c 24 29 22 2c 22 69 22 29 7d 2c 59 3d 2f 48 54 4d 4c 24 2f 69 2c 4b 3d 2f 5e 28 3f 3a 69 6e 70 75 74 7c 73 65 6c 65 63 74 7c 74 65 78 74 61 72 65 61 7c 62 75 74 74 6f 6e 29 24 2f 69 2c 47 3d 2f 5e 68 5c 64 24 2f 69 2c 4a 3d 2f 5e 5b 5e 7b 5d 2b 5c 7b 5c 73 2a 5c 5b 6e 61 74 69 76 65 20 5c 77 2f 2c 5a 3d 2f 5e 28 3f 3a 23 28 5b 5c 77 2d 5d 2b 29 7c 28 5c 77 2b 29 7c 5c 2e 28 5b 5c 77 2d 5d 2b 29 29 24 2f 2c 65 65 3d 2f 5b 2b 7e 5d 2f 2c 74 65 3d 6e 65 77 20 52 65 67 45 78 70 28 Data Ascii: gt\|lt\|nth\|first\|last)(?:\\([\\x20\\t\\r\\n\\f]((?:-\\d)?\\d)[\\x20\\t\\r\\n\\f]\\)\|)(?=[^-]\|$)","i")},Y=/HTML$/i,K=/^(?:input\|select\|textarea\|button)$/i,G=/^h\d$/i,J=/^[^{]+\{\s\[native \w/,Z=/^(?:#([\w-]+)\|(\w+)\|\.([\w-]+))$/,ee=/[+~]/,te=new RegExp(
2024-09-24 12:55:56 UTC	1378	IN	Data Raw: 4e 61 6d 65 28 65 29 29 2c 72 3b 69 66 28 28 69 3d 66 5b 33 5d 29 26 26 6e 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 72 65 74 75 72 6e 20 6a 2e 61 70 70 6c 79 28 72 2c 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 69 29 29 2c 72 7d 69 66 28 6e 2e 71 73 61 26 26 21 4e 5b 65 2b 22 20 22 5d 26 26 28 21 67 7c 7c 21 67 2e 74 65 73 74 28 65 29 29 26 26 28 31 21 3d 3d 78 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 3d 74 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 29 7b 69 66 28 76 3d 65 2c 79 3d 74 2c 31 3d 3d 3d 78 26 26 28 56 2e 74 65 73 74 28 65 29 7c 7c 57 2e 74 65 73 74 28 65 29 29 29 7b 66 6f 72 28 28 Data Ascii: Name(e)),r;if((i=f[3])&&n.getElementsByClassName&&t.getElementsByClassName)return j.apply(r,t.getElementsByClassName(i)),r}if(n.qsa&&!N[e+" "]&&(!g\|\|!g.test(e))&&(1!==x\|\|"object"!==t.nodeName.toLowerCase())){if(v=e,y=t,1===x&&(V.test(e)\|\|W.test(e))){for((
2024-09-24 12:55:56 UTC	1378	IN	Data Raw: 4e 6f 64 65 26 26 21 31 3d 3d 3d 74 2e 64 69 73 61 62 6c 65 64 3f 22 6c 61 62 65 6c 22 69 6e 20 74 3f 22 6c 61 62 65 6c 22 69 6e 20 74 2e 70 61 72 65 6e 74 4e 6f 64 65 3f 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 65 3a 74 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 65 3a 74 2e 69 73 44 69 73 61 62 6c 65 64 3d 3d 3d 65 7c 7c 74 2e 69 73 44 69 73 61 62 6c 65 64 21 3d 3d 21 65 26 26 61 65 28 74 29 3d 3d 3d 65 3a 74 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 65 3a 22 6c 61 62 65 6c 22 69 6e 20 74 26 26 74 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 65 7d 7d 66 75 6e 63 74 69 6f 6e 20 67 65 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 2b 74 2c 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 Data Ascii: Node&&!1===t.disabled?"label"in t?"label"in t.parentNode?t.parentNode.disabled===e:t.disabled===e:t.isDisabled===e\|\|t.isDisabled!==!e&&ae(t)===e:t.disabled===e:"label"in t&&t.disabled===e}}function ge(e){return se((function(t){return t=+t,se((function(n,r
2024-09-24 12:55:56 UTC	1378	IN	Data Raw: 61 6d 65 28 77 29 2e 6c 65 6e 67 74 68 7d 29 29 2c 6e 2e 67 65 74 42 79 49 64 3f 28 72 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 3d 3d 3d 74 7d 7d 2c 72 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 6d 29 7b 76 61 72 20 6e 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 72 65 74 75 72 6e 20 6e 3f 5b 6e 5d 3a 5b 5d 7d 7d 29 3a 28 72 2e 66 69 6c 74 65 72 2e 49 44 3d Data Ascii: ame(w).length})),n.getById?(r.filter.ID=function(e){var t=e.replace(te,ne);return function(e){return e.getAttribute("id")===t}},r.find.ID=function(e,t){if("undefined"!==typeof t.getElementById&&m){var n=t.getElementById(e);return n?[n]:[]}}):(r.filter.ID=
2024-09-24 12:55:56 UTC	1378	IN	Data Raw: 5c 5c 72 5c 5c 6e 5c 5c 66 5d 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 73 65 6c 65 63 74 65 64 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 67 2e 70 75 73 68 28 22 5c 5c 5b 5b 5c 5c 78 32 30 5c 5c 74 5c 5c 72 5c 5c 6e 5c 5c 66 5d 2a 28 3f 3a 76 61 6c 75 65 7c 22 2b 4d 2b 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 69 64 7e 3d 22 2b 77 2b 22 2d 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 67 2e 70 75 73 68 28 22 7e 3d 22 29 2c 28 74 3d 70 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 22 29 2c 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f Data Ascii: \\r\\n\\f](?:''\|\"\")"),e.querySelectorAll("[selected]").length\|\|g.push("\\[[\\x20\\t\\r\\n\\f](?:value\|"+M+")"),e.querySelectorAll("[id~="+w+"-]").length\|\|g.push("~="),(t=p.createElement("input")).setAttribute("name",""),e.appendChild(t),e.querySelecto
2024-09-24 12:55:56 UTC	1378	IN	Data Raw: 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 29 2c 62 3d 74 7c 7c 4a 2e 74 65 73 74 28 68 2e 63 6f 6e 74 61 69 6e 73 29 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 3f 65 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3a 65 2c 72 3d 74 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 65 3d 3d 3d 72 7c 7c 21 28 21 72 7c 7c 31 21 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 28 6e 2e 63 6f 6e 74 61 69 6e 73 3f 6e 2e 63 6f 6e 74 61 69 6e 73 28 72 29 3a 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 26 26 31 36 26 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 72 29 29 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 74 29 Data Ascii: mentPosition),b=t\|\|J.test(h.contains)?function(e,t){var n=9===e.nodeType?e.documentElement:e,r=t&&t.parentNode;return e===r\|\|!(!r\|\|1!==r.nodeType\|\|!(n.contains?n.contains(r):e.compareDocumentPosition&&16&e.compareDocumentPosition(r)))}:function(e,t){if(t)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49717	199.36.158.100	443	3992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-24 12:55:56 UTC	656	OUT	GET /static/media/metamask_main.53f2bee2f357c4247916f6ee01a2332b.svg HTTP/1.1 Host: metamask-support.web.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://metamask-support.web.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-24 12:55:56 UTC	599	IN	HTTP/1.1 200 OK Connection: close Content-Length: 12019 Cache-Control: max-age=3600 Content-Type: image/svg+xml Etag: "bc78e755f21a5b47ec0520c8cb9278cf1f750e6bdd09886248e4c6b4bee2df77" Last-Modified: Tue, 04 Jan 2022 18:43:10 GMT Strict-Transport-Security: max-age=31556926; includeSubDomains; preload Accept-Ranges: bytes Date: Tue, 24 Sep 2024 12:55:56 GMT X-Served-By: cache-nyc-kteb1890096-NYC X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1727182557.657875,VS0,VE123 Vary: x-fh-requested-host, accept-encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-09-24 12:55:56 UTC	1378	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 37 32 22 20 68 65 69 67 68 74 3d 22 33 33 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 37 32 20 33 33 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 35 31 2e 32 35 36 20 31 36 2e 36 34 43 31 35 30 2e 33 37 32 20 31 36 2e 30 35 36 39 20 31 34 39 2e 33 39 38 20 31 35 2e 36 34 32 33 20 31 34 38 2e 34 37 36 20 31 35 2e 31 32 34 43 31 34 37 2e 38 37 38 20 31 34 2e 37 38 37 31 20 31 34 37 2e 32 34 31 20 31 34 2e 34 38 39 20 31 34 36 2e 37 32 32 20 31 34 2e 30 36 31 34 43 31 34 35 2e 38 33 38 20 31 33 2e 33 33 35 38 20 31 34 36 2e 30 32 20 31 31 2e 39 31 30 35 20 31 34 36 2e 39 34 33 20 Data Ascii: <svg width="172" height="33" viewBox="0 0 172 33" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M151.256 16.64C150.372 16.0569 149.398 15.6423 148.476 15.124C147.878 14.7871 147.241 14.489 146.722 14.0614C145.838 13.3358 146.02 11.9105 146.943
2024-09-24 12:55:56 UTC	1378	IN	Data Raw: 38 31 32 20 39 2e 31 32 34 36 32 56 32 34 2e 30 37 37 39 43 34 37 2e 37 38 31 32 20 32 34 2e 31 31 36 37 20 34 37 2e 38 32 30 32 20 32 34 2e 31 35 35 36 20 34 37 2e 38 35 39 32 20 32 34 2e 31 35 35 36 48 35 30 2e 30 32 38 37 43 35 30 2e 30 36 37 37 20 32 34 2e 31 35 35 36 20 35 30 2e 31 30 36 37 20 32 34 2e 31 31 36 37 20 35 30 2e 31 30 36 37 20 32 34 2e 30 37 37 39 56 31 32 2e 37 31 33 39 43 35 30 2e 31 30 36 37 20 31 32 2e 36 32 33 32 20 35 30 2e 32 33 36 36 20 31 32 2e 36 31 30 33 20 35 30 2e 32 36 32 36 20 31 32 2e 36 38 38 4c 35 32 2e 30 35 35 33 20 31 38 2e 35 38 33 38 4c 35 32 2e 31 38 35 32 20 31 38 2e 39 39 38 34 43 35 32 2e 31 39 38 32 20 31 39 2e 30 33 37 33 20 35 32 2e 32 32 34 32 20 31 39 2e 30 35 30 33 20 35 32 2e 32 36 33 32 20 31 39 2e 30 Data Ascii: 812 9.12462V24.0779C47.7812 24.1167 47.8202 24.1556 47.8592 24.1556H50.0287C50.0677 24.1556 50.1067 24.1167 50.1067 24.0779V12.7139C50.1067 12.6232 50.2366 12.6103 50.2626 12.688L52.0553 18.5838L52.1852 18.9984C52.1982 19.0373 52.2242 19.0503 52.2632 19.0
2024-09-24 12:55:56 UTC	1378	IN	Data Raw: 38 38 48 31 31 38 2e 30 33 37 5a 22 20 66 69 6c 6c 3d 22 23 31 36 31 36 31 36 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 39 30 2e 30 35 34 33 20 39 2e 30 34 36 38 38 48 38 36 2e 30 31 34 48 38 33 2e 38 34 34 35 48 37 39 2e 38 30 34 33 43 37 39 2e 37 36 35 33 20 39 2e 30 34 36 38 38 20 37 39 2e 37 32 36 33 20 39 2e 30 38 35 37 35 20 37 39 2e 37 32 36 33 20 39 2e 31 32 34 36 32 56 31 30 2e 39 39 30 35 43 37 39 2e 37 32 36 33 20 31 31 2e 30 32 39 34 20 37 39 2e 37 36 35 33 20 31 31 2e 30 36 38 33 20 37 39 2e 38 30 34 33 20 31 31 2e 30 36 38 33 48 38 33 2e 37 36 36 36 56 32 34 2e 30 37 37 39 43 38 33 2e 37 36 36 36 20 32 34 2e 31 31 36 37 20 38 33 2e 38 30 35 35 20 32 34 2e 31 35 35 36 20 38 33 2e 38 34 34 35 20 32 34 2e 31 35 35 36 48 38 36 2e 30 31 34 43 38 Data Ascii: 88H118.037Z" fill="#161616"/><path d="M90.0543 9.04688H86.014H83.8445H79.8043C79.7653 9.04688 79.7263 9.08575 79.7263 9.12462V10.9905C79.7263 11.0294 79.7653 11.0683 79.8043 11.0683H83.7666V24.0779C83.7666 24.1167 83.8055 24.1556 83.8445 24.1556H86.014C8
2024-09-24 12:55:56 UTC	1378	IN	Data Raw: 2e 30 34 36 37 4c 31 32 37 2e 34 33 20 32 34 2e 30 35 31 38 43 31 32 37 2e 34 31 37 20 32 34 2e 31 30 33 36 20 31 32 37 2e 34 35 36 20 32 34 2e 31 35 35 34 20 31 32 37 2e 35 30 38 20 32 34 2e 31 35 35 34 48 31 32 39 2e 34 38 33 43 31 32 39 2e 35 32 32 20 32 34 2e 31 35 35 34 20 31 32 39 2e 35 34 38 20 32 34 2e 31 32 39 35 20 31 32 39 2e 35 36 31 20 32 34 2e 31 30 33 36 4c 31 33 30 2e 37 34 33 20 31 39 2e 37 33 36 38 43 31 33 30 2e 37 35 36 20 31 39 2e 36 39 38 20 31 33 30 2e 37 38 32 20 31 39 2e 36 38 35 20 31 33 30 2e 38 32 31 20 31 39 2e 36 38 35 48 31 33 35 2e 31 38 36 43 31 33 35 2e 32 32 35 20 31 39 2e 36 38 35 20 31 33 35 2e 32 35 31 20 31 39 2e 37 31 30 39 20 31 33 35 2e 32 36 34 20 31 39 2e 37 33 36 38 4c 31 33 36 2e 34 34 36 20 32 34 2e 31 30 33 Data Ascii: .0467L127.43 24.0518C127.417 24.1036 127.456 24.1554 127.508 24.1554H129.483C129.522 24.1554 129.548 24.1295 129.561 24.1036L130.743 19.7368C130.756 19.698 130.782 19.685 130.821 19.685H135.186C135.225 19.685 135.251 19.7109 135.264 19.7368L136.446 24.103
2024-09-24 12:55:56 UTC	1378	IN	Data Raw: 30 2e 33 34 20 39 2e 30 35 39 38 31 20 31 37 30 2e 32 37 35 20 39 2e 30 35 39 38 31 48 31 36 37 2e 35 30 38 43 31 36 37 2e 34 38 32 20 39 2e 30 35 39 38 31 20 31 36 37 2e 34 36 39 20 39 2e 30 37 32 37 37 20 31 36 37 2e 34 35 36 20 39 2e 30 38 35 37 33 4c 31 36 31 2e 37 32 37 20 31 35 2e 30 32 30 34 43 31 36 31 2e 36 37 35 20 31 35 2e 30 37 32 32 20 31 36 31 2e 35 39 37 20 31 35 2e 30 33 33 33 20 31 36 31 2e 35 39 37 20 31 34 2e 39 36 38 35 56 39 2e 31 33 37 35 36 43 31 36 31 2e 35 39 37 20 39 2e 30 39 38 36 39 20 31 36 31 2e 35 35 38 20 39 2e 30 35 39 38 31 20 31 36 31 2e 35 31 39 20 39 2e 30 35 39 38 31 48 31 35 39 2e 33 34 39 43 31 35 39 2e 33 31 20 39 2e 30 35 39 38 31 20 31 35 39 2e 32 37 31 20 39 2e 30 39 38 36 39 20 31 35 39 2e 32 37 31 20 39 2e 31 Data Ascii: 0.34 9.05981 170.275 9.05981H167.508C167.482 9.05981 167.469 9.07277 167.456 9.08573L161.727 15.0204C161.675 15.0722 161.597 15.0333 161.597 14.9685V9.13756C161.597 9.09869 161.558 9.05981 161.519 9.05981H159.349C159.31 9.05981 159.271 9.09869 159.271 9.1
2024-09-24 12:55:56 UTC	1378	IN	Data Raw: 22 20 73 74 72 6f 6b 65 3d 22 23 45 32 37 36 32 35 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 30 2e 32 35 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 22 72 6f 75 6e 64 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3d 22 72 6f 75 6e 64 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 32 35 2e 31 35 30 33 20 31 34 2e 35 31 35 4c 31 39 2e 39 39 32 39 20 39 2e 39 32 37 39 38 4c 31 39 2e 38 32 34 20 31 37 2e 39 38 37 37 4c 32 37 2e 32 32 38 39 20 31 37 2e 36 35 30 38 4c 32 35 2e 31 35 30 33 20 31 34 2e 35 31 35 5a 22 20 66 69 6c 6c 3d 22 23 45 32 37 36 32 35 22 20 73 74 72 6f 6b 65 3d 22 23 45 32 37 36 32 35 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 30 2e 32 35 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 22 72 6f 75 6e 64 22 20 73 74 72 Data Ascii: " stroke="#E27625" stroke-width="0.25" stroke-linecap="round" stroke-linejoin="round"/><path d="M25.1503 14.515L19.9929 9.92798L19.824 17.9877L27.2289 17.6508L25.1503 14.515Z" fill="#E27625" stroke="#E27625" stroke-width="0.25" stroke-linecap="round" str
2024-09-24 12:55:56 UTC	1378	IN	Data Raw: 30 2e 38 37 33 32 20 32 38 2e 38 37 32 4c 31 31 2e 35 32 32 38 20 32 33 2e 35 33 33 34 4c 37 2e 33 39 31 36 20 32 33 2e 36 35 30 31 4c 31 30 2e 38 37 33 32 20 32 38 2e 38 37 32 5a 22 20 66 69 6c 6c 3d 22 23 43 43 36 32 32 38 22 20 73 74 72 6f 6b 65 3d 22 23 43 43 36 32 32 38 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 30 2e 32 35 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 22 72 6f 75 6e 64 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3d 22 72 6f 75 6e 64 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 32 34 2e 30 39 38 31 20 32 33 2e 35 33 33 34 4c 32 34 2e 37 33 34 37 20 32 38 2e 38 37 32 4c 32 38 2e 32 32 39 33 20 32 33 2e 36 35 30 31 4c 32 34 2e 30 39 38 31 20 32 33 2e 35 33 33 34 5a 22 20 66 69 6c 6c 3d 22 23 43 43 36 32 32 38 22 20 73 74 Data Ascii: 0.8732 28.872L11.5228 23.5334L7.3916 23.6501L10.8732 28.872Z" fill="#CC6228" stroke="#CC6228" stroke-width="0.25" stroke-linecap="round" stroke-linejoin="round"/><path d="M24.0981 23.5334L24.7347 28.872L28.2293 23.6501L24.0981 23.5334Z" fill="#CC6228" st
2024-09-24 12:55:56 UTC	1378	IN	Data Raw: 32 20 31 37 2e 39 38 37 35 5a 22 20 66 69 6c 6c 3d 22 23 45 32 37 35 32 35 22 20 73 74 72 6f 6b 65 3d 22 23 45 32 37 35 32 35 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 30 2e 32 35 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 22 72 6f 75 6e 64 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3d 22 72 6f 75 6e 64 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 32 30 2e 35 31 32 37 20 32 31 2e 37 38 34 33 4c 31 39 2e 36 34 32 33 20 32 36 2e 32 36 37 36 4c 32 30 2e 32 36 35 39 20 32 36 2e 37 30 38 32 4c 32 34 2e 31 32 34 33 20 32 33 2e 37 30 32 4c 32 34 2e 32 34 31 32 20 32 30 2e 36 39 35 38 4c 32 30 2e 35 31 32 37 20 32 31 2e 37 38 34 33 5a 22 20 66 69 6c 6c 3d 22 23 46 35 38 34 31 46 22 20 73 74 72 6f 6b 65 3d 22 23 46 35 38 34 31 46 22 20 73 74 72 Data Ascii: 2 17.9875Z" fill="#E27525" stroke="#E27525" stroke-width="0.25" stroke-linecap="round" stroke-linejoin="round"/><path d="M20.5127 21.7843L19.6423 26.2676L20.2659 26.7082L24.1243 23.702L24.2412 20.6958L20.5127 21.7843Z" fill="#F5841F" stroke="#F5841F" str
2024-09-24 12:55:56 UTC	995	IN	Data Raw: 68 20 64 3d 22 4d 31 20 35 2e 39 38 38 37 33 4c 32 2e 31 31 37 32 34 20 31 31 2e 33 35 33 32 4c 31 2e 34 30 32 37 33 20 31 31 2e 38 38 34 35 4c 32 2e 34 36 38 20 31 32 2e 36 38 37 39 4c 31 2e 36 36 32 35 35 20 31 33 2e 33 30 39 39 4c 32 2e 37 31 34 38 33 20 31 34 2e 32 36 38 37 4c 32 2e 30 35 32 32 38 20 31 34 2e 37 34 38 32 4c 33 2e 35 37 32 32 35 20 31 36 2e 35 32 33 34 4c 31 30 2e 34 37 30 36 20 31 34 2e 35 31 34 39 4c 31 35 2e 33 35 35 32 20 31 30 2e 33 39 34 34 4c 32 2e 36 36 32 38 37 20 31 4c 31 20 35 2e 39 38 38 37 33 5a 22 20 66 69 6c 6c 3d 22 23 37 36 33 45 31 41 22 20 73 74 72 6f 6b 65 3d 22 23 37 36 33 45 31 41 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 30 2e 32 35 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 22 72 6f 75 6e 64 22 20 Data Ascii: h d="M1 5.98873L2.11724 11.3532L1.40273 11.8845L2.468 12.6879L1.66255 13.3099L2.71483 14.2687L2.05228 14.7482L3.57225 16.5234L10.4706 14.5149L15.3552 10.3944L2.66287 1L1 5.98873Z" fill="#763E1A" stroke="#763E1A" stroke-width="0.25" stroke-linecap="round"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49721	199.36.158.100	443	3992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-24 12:55:58 UTC	545	OUT	GET /manifest.json HTTP/1.1 Host: metamask-support.web.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: manifest Referer: https://metamask-support.web.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-24 12:55:58 UTC	599	IN	HTTP/1.1 200 OK Connection: close Content-Length: 492 Cache-Control: max-age=3600 Content-Type: application/json Etag: "341d52628782f8ac9290bbfc43298afccb47b7cbfcee146ae30cf0f46bc30900" Last-Modified: Tue, 04 Jan 2022 18:43:10 GMT Strict-Transport-Security: max-age=31556926; includeSubDomains; preload Accept-Ranges: bytes Date: Tue, 24 Sep 2024 12:55:58 GMT X-Served-By: cache-ewr-kewr1740052-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1727182559.751446,VS0,VE60 Vary: x-fh-requested-host, accept-encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-09-24 12:55:58 UTC	492	IN	Data Raw: 7b 0a 20 20 22 73 68 6f 72 74 5f 6e 61 6d 65 22 3a 20 22 52 65 61 63 74 20 41 70 70 22 2c 0a 20 20 22 6e 61 6d 65 22 3a 20 22 43 72 65 61 74 65 20 52 65 61 63 74 20 41 70 70 20 53 61 6d 70 6c 65 22 2c 0a 20 20 22 69 63 6f 6e 73 22 3a 20 5b 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 73 72 63 22 3a 20 22 66 61 76 69 63 6f 6e 2e 69 63 6f 22 2c 0a 20 20 20 20 20 20 22 73 69 7a 65 73 22 3a 20 22 36 34 78 36 34 20 33 32 78 33 32 20 32 34 78 32 34 20 31 36 78 31 36 22 2c 0a 20 20 20 20 20 20 22 74 79 70 65 22 3a 20 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 73 72 63 22 3a 20 22 6c 6f 67 6f 31 39 32 2e 70 6e 67 22 2c 0a 20 20 20 20 20 20 22 74 79 70 65 22 3a 20 22 69 6d 61 67 65 2f 70 6e 67 22 2c 0a 20 Data Ascii: { "short_name": "React App", "name": "Create React App Sample", "icons": [ { "src": "favicon.ico", "sizes": "64x64 32x32 24x24 16x16", "type": "image/x-icon" }, { "src": "logo192.png", "type": "image/png",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49720	199.36.158.100	443	3992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-24 12:55:58 UTC	411	OUT	GET /static/media/metamask_main.53f2bee2f357c4247916f6ee01a2332b.svg HTTP/1.1 Host: metamask-support.web.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-24 12:55:58 UTC	598	IN	HTTP/1.1 200 OK Connection: close Content-Length: 12019 Cache-Control: max-age=3600 Content-Type: image/svg+xml Etag: "bc78e755f21a5b47ec0520c8cb9278cf1f750e6bdd09886248e4c6b4bee2df77" Last-Modified: Tue, 04 Jan 2022 18:43:10 GMT Strict-Transport-Security: max-age=31556926; includeSubDomains; preload Accept-Ranges: bytes Date: Tue, 24 Sep 2024 12:55:58 GMT X-Served-By: cache-ewr-kewr1740036-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1727182559.751842,VS0,VE66 Vary: x-fh-requested-host, accept-encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-09-24 12:55:58 UTC	1378	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 37 32 22 20 68 65 69 67 68 74 3d 22 33 33 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 37 32 20 33 33 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 35 31 2e 32 35 36 20 31 36 2e 36 34 43 31 35 30 2e 33 37 32 20 31 36 2e 30 35 36 39 20 31 34 39 2e 33 39 38 20 31 35 2e 36 34 32 33 20 31 34 38 2e 34 37 36 20 31 35 2e 31 32 34 43 31 34 37 2e 38 37 38 20 31 34 2e 37 38 37 31 20 31 34 37 2e 32 34 31 20 31 34 2e 34 38 39 20 31 34 36 2e 37 32 32 20 31 34 2e 30 36 31 34 43 31 34 35 2e 38 33 38 20 31 33 2e 33 33 35 38 20 31 34 36 2e 30 32 20 31 31 2e 39 31 30 35 20 31 34 36 2e 39 34 33 20 Data Ascii: <svg width="172" height="33" viewBox="0 0 172 33" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M151.256 16.64C150.372 16.0569 149.398 15.6423 148.476 15.124C147.878 14.7871 147.241 14.489 146.722 14.0614C145.838 13.3358 146.02 11.9105 146.943
2024-09-24 12:55:58 UTC	1378	IN	Data Raw: 38 31 32 20 39 2e 31 32 34 36 32 56 32 34 2e 30 37 37 39 43 34 37 2e 37 38 31 32 20 32 34 2e 31 31 36 37 20 34 37 2e 38 32 30 32 20 32 34 2e 31 35 35 36 20 34 37 2e 38 35 39 32 20 32 34 2e 31 35 35 36 48 35 30 2e 30 32 38 37 43 35 30 2e 30 36 37 37 20 32 34 2e 31 35 35 36 20 35 30 2e 31 30 36 37 20 32 34 2e 31 31 36 37 20 35 30 2e 31 30 36 37 20 32 34 2e 30 37 37 39 56 31 32 2e 37 31 33 39 43 35 30 2e 31 30 36 37 20 31 32 2e 36 32 33 32 20 35 30 2e 32 33 36 36 20 31 32 2e 36 31 30 33 20 35 30 2e 32 36 32 36 20 31 32 2e 36 38 38 4c 35 32 2e 30 35 35 33 20 31 38 2e 35 38 33 38 4c 35 32 2e 31 38 35 32 20 31 38 2e 39 39 38 34 43 35 32 2e 31 39 38 32 20 31 39 2e 30 33 37 33 20 35 32 2e 32 32 34 32 20 31 39 2e 30 35 30 33 20 35 32 2e 32 36 33 32 20 31 39 2e 30 Data Ascii: 812 9.12462V24.0779C47.7812 24.1167 47.8202 24.1556 47.8592 24.1556H50.0287C50.0677 24.1556 50.1067 24.1167 50.1067 24.0779V12.7139C50.1067 12.6232 50.2366 12.6103 50.2626 12.688L52.0553 18.5838L52.1852 18.9984C52.1982 19.0373 52.2242 19.0503 52.2632 19.0
2024-09-24 12:55:58 UTC	1378	IN	Data Raw: 38 38 48 31 31 38 2e 30 33 37 5a 22 20 66 69 6c 6c 3d 22 23 31 36 31 36 31 36 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 39 30 2e 30 35 34 33 20 39 2e 30 34 36 38 38 48 38 36 2e 30 31 34 48 38 33 2e 38 34 34 35 48 37 39 2e 38 30 34 33 43 37 39 2e 37 36 35 33 20 39 2e 30 34 36 38 38 20 37 39 2e 37 32 36 33 20 39 2e 30 38 35 37 35 20 37 39 2e 37 32 36 33 20 39 2e 31 32 34 36 32 56 31 30 2e 39 39 30 35 43 37 39 2e 37 32 36 33 20 31 31 2e 30 32 39 34 20 37 39 2e 37 36 35 33 20 31 31 2e 30 36 38 33 20 37 39 2e 38 30 34 33 20 31 31 2e 30 36 38 33 48 38 33 2e 37 36 36 36 56 32 34 2e 30 37 37 39 43 38 33 2e 37 36 36 36 20 32 34 2e 31 31 36 37 20 38 33 2e 38 30 35 35 20 32 34 2e 31 35 35 36 20 38 33 2e 38 34 34 35 20 32 34 2e 31 35 35 36 48 38 36 2e 30 31 34 43 38 Data Ascii: 88H118.037Z" fill="#161616"/><path d="M90.0543 9.04688H86.014H83.8445H79.8043C79.7653 9.04688 79.7263 9.08575 79.7263 9.12462V10.9905C79.7263 11.0294 79.7653 11.0683 79.8043 11.0683H83.7666V24.0779C83.7666 24.1167 83.8055 24.1556 83.8445 24.1556H86.014C8
2024-09-24 12:55:58 UTC	1378	IN	Data Raw: 2e 30 34 36 37 4c 31 32 37 2e 34 33 20 32 34 2e 30 35 31 38 43 31 32 37 2e 34 31 37 20 32 34 2e 31 30 33 36 20 31 32 37 2e 34 35 36 20 32 34 2e 31 35 35 34 20 31 32 37 2e 35 30 38 20 32 34 2e 31 35 35 34 48 31 32 39 2e 34 38 33 43 31 32 39 2e 35 32 32 20 32 34 2e 31 35 35 34 20 31 32 39 2e 35 34 38 20 32 34 2e 31 32 39 35 20 31 32 39 2e 35 36 31 20 32 34 2e 31 30 33 36 4c 31 33 30 2e 37 34 33 20 31 39 2e 37 33 36 38 43 31 33 30 2e 37 35 36 20 31 39 2e 36 39 38 20 31 33 30 2e 37 38 32 20 31 39 2e 36 38 35 20 31 33 30 2e 38 32 31 20 31 39 2e 36 38 35 48 31 33 35 2e 31 38 36 43 31 33 35 2e 32 32 35 20 31 39 2e 36 38 35 20 31 33 35 2e 32 35 31 20 31 39 2e 37 31 30 39 20 31 33 35 2e 32 36 34 20 31 39 2e 37 33 36 38 4c 31 33 36 2e 34 34 36 20 32 34 2e 31 30 33 Data Ascii: .0467L127.43 24.0518C127.417 24.1036 127.456 24.1554 127.508 24.1554H129.483C129.522 24.1554 129.548 24.1295 129.561 24.1036L130.743 19.7368C130.756 19.698 130.782 19.685 130.821 19.685H135.186C135.225 19.685 135.251 19.7109 135.264 19.7368L136.446 24.103
2024-09-24 12:55:58 UTC	1378	IN	Data Raw: 30 2e 33 34 20 39 2e 30 35 39 38 31 20 31 37 30 2e 32 37 35 20 39 2e 30 35 39 38 31 48 31 36 37 2e 35 30 38 43 31 36 37 2e 34 38 32 20 39 2e 30 35 39 38 31 20 31 36 37 2e 34 36 39 20 39 2e 30 37 32 37 37 20 31 36 37 2e 34 35 36 20 39 2e 30 38 35 37 33 4c 31 36 31 2e 37 32 37 20 31 35 2e 30 32 30 34 43 31 36 31 2e 36 37 35 20 31 35 2e 30 37 32 32 20 31 36 31 2e 35 39 37 20 31 35 2e 30 33 33 33 20 31 36 31 2e 35 39 37 20 31 34 2e 39 36 38 35 56 39 2e 31 33 37 35 36 43 31 36 31 2e 35 39 37 20 39 2e 30 39 38 36 39 20 31 36 31 2e 35 35 38 20 39 2e 30 35 39 38 31 20 31 36 31 2e 35 31 39 20 39 2e 30 35 39 38 31 48 31 35 39 2e 33 34 39 43 31 35 39 2e 33 31 20 39 2e 30 35 39 38 31 20 31 35 39 2e 32 37 31 20 39 2e 30 39 38 36 39 20 31 35 39 2e 32 37 31 20 39 2e 31 Data Ascii: 0.34 9.05981 170.275 9.05981H167.508C167.482 9.05981 167.469 9.07277 167.456 9.08573L161.727 15.0204C161.675 15.0722 161.597 15.0333 161.597 14.9685V9.13756C161.597 9.09869 161.558 9.05981 161.519 9.05981H159.349C159.31 9.05981 159.271 9.09869 159.271 9.1
2024-09-24 12:55:58 UTC	1378	IN	Data Raw: 22 20 73 74 72 6f 6b 65 3d 22 23 45 32 37 36 32 35 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 30 2e 32 35 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 22 72 6f 75 6e 64 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3d 22 72 6f 75 6e 64 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 32 35 2e 31 35 30 33 20 31 34 2e 35 31 35 4c 31 39 2e 39 39 32 39 20 39 2e 39 32 37 39 38 4c 31 39 2e 38 32 34 20 31 37 2e 39 38 37 37 4c 32 37 2e 32 32 38 39 20 31 37 2e 36 35 30 38 4c 32 35 2e 31 35 30 33 20 31 34 2e 35 31 35 5a 22 20 66 69 6c 6c 3d 22 23 45 32 37 36 32 35 22 20 73 74 72 6f 6b 65 3d 22 23 45 32 37 36 32 35 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 30 2e 32 35 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 22 72 6f 75 6e 64 22 20 73 74 72 Data Ascii: " stroke="#E27625" stroke-width="0.25" stroke-linecap="round" stroke-linejoin="round"/><path d="M25.1503 14.515L19.9929 9.92798L19.824 17.9877L27.2289 17.6508L25.1503 14.515Z" fill="#E27625" stroke="#E27625" stroke-width="0.25" stroke-linecap="round" str
2024-09-24 12:55:58 UTC	1378	IN	Data Raw: 30 2e 38 37 33 32 20 32 38 2e 38 37 32 4c 31 31 2e 35 32 32 38 20 32 33 2e 35 33 33 34 4c 37 2e 33 39 31 36 20 32 33 2e 36 35 30 31 4c 31 30 2e 38 37 33 32 20 32 38 2e 38 37 32 5a 22 20 66 69 6c 6c 3d 22 23 43 43 36 32 32 38 22 20 73 74 72 6f 6b 65 3d 22 23 43 43 36 32 32 38 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 30 2e 32 35 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 22 72 6f 75 6e 64 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3d 22 72 6f 75 6e 64 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 32 34 2e 30 39 38 31 20 32 33 2e 35 33 33 34 4c 32 34 2e 37 33 34 37 20 32 38 2e 38 37 32 4c 32 38 2e 32 32 39 33 20 32 33 2e 36 35 30 31 4c 32 34 2e 30 39 38 31 20 32 33 2e 35 33 33 34 5a 22 20 66 69 6c 6c 3d 22 23 43 43 36 32 32 38 22 20 73 74 Data Ascii: 0.8732 28.872L11.5228 23.5334L7.3916 23.6501L10.8732 28.872Z" fill="#CC6228" stroke="#CC6228" stroke-width="0.25" stroke-linecap="round" stroke-linejoin="round"/><path d="M24.0981 23.5334L24.7347 28.872L28.2293 23.6501L24.0981 23.5334Z" fill="#CC6228" st
2024-09-24 12:55:58 UTC	1378	IN	Data Raw: 32 20 31 37 2e 39 38 37 35 5a 22 20 66 69 6c 6c 3d 22 23 45 32 37 35 32 35 22 20 73 74 72 6f 6b 65 3d 22 23 45 32 37 35 32 35 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 30 2e 32 35 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 22 72 6f 75 6e 64 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3d 22 72 6f 75 6e 64 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 32 30 2e 35 31 32 37 20 32 31 2e 37 38 34 33 4c 31 39 2e 36 34 32 33 20 32 36 2e 32 36 37 36 4c 32 30 2e 32 36 35 39 20 32 36 2e 37 30 38 32 4c 32 34 2e 31 32 34 33 20 32 33 2e 37 30 32 4c 32 34 2e 32 34 31 32 20 32 30 2e 36 39 35 38 4c 32 30 2e 35 31 32 37 20 32 31 2e 37 38 34 33 5a 22 20 66 69 6c 6c 3d 22 23 46 35 38 34 31 46 22 20 73 74 72 6f 6b 65 3d 22 23 46 35 38 34 31 46 22 20 73 74 72 Data Ascii: 2 17.9875Z" fill="#E27525" stroke="#E27525" stroke-width="0.25" stroke-linecap="round" stroke-linejoin="round"/><path d="M20.5127 21.7843L19.6423 26.2676L20.2659 26.7082L24.1243 23.702L24.2412 20.6958L20.5127 21.7843Z" fill="#F5841F" stroke="#F5841F" str
2024-09-24 12:55:58 UTC	995	IN	Data Raw: 68 20 64 3d 22 4d 31 20 35 2e 39 38 38 37 33 4c 32 2e 31 31 37 32 34 20 31 31 2e 33 35 33 32 4c 31 2e 34 30 32 37 33 20 31 31 2e 38 38 34 35 4c 32 2e 34 36 38 20 31 32 2e 36 38 37 39 4c 31 2e 36 36 32 35 35 20 31 33 2e 33 30 39 39 4c 32 2e 37 31 34 38 33 20 31 34 2e 32 36 38 37 4c 32 2e 30 35 32 32 38 20 31 34 2e 37 34 38 32 4c 33 2e 35 37 32 32 35 20 31 36 2e 35 32 33 34 4c 31 30 2e 34 37 30 36 20 31 34 2e 35 31 34 39 4c 31 35 2e 33 35 35 32 20 31 30 2e 33 39 34 34 4c 32 2e 36 36 32 38 37 20 31 4c 31 20 35 2e 39 38 38 37 33 5a 22 20 66 69 6c 6c 3d 22 23 37 36 33 45 31 41 22 20 73 74 72 6f 6b 65 3d 22 23 37 36 33 45 31 41 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 30 2e 32 35 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 22 72 6f 75 6e 64 22 20 Data Ascii: h d="M1 5.98873L2.11724 11.3532L1.40273 11.8845L2.468 12.6879L1.66255 13.3099L2.71483 14.2687L2.05228 14.7482L3.57225 16.5234L10.4706 14.5149L15.3552 10.3944L2.66287 1L1 5.98873Z" fill="#763E1A" stroke="#763E1A" stroke-width="0.25" stroke-linecap="round"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49722	199.36.158.100	443	3992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-24 12:55:58 UTC	604	OUT	GET /favicon.ico HTTP/1.1 Host: metamask-support.web.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://metamask-support.web.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-24 12:55:58 UTC	599	IN	HTTP/1.1 200 OK Connection: close Content-Length: 114217 Cache-Control: max-age=3600 Content-Type: image/x-icon Etag: "7f3a3dcca1124b3b5a76a76ee75189ad8b6a67a158a83082999c60b325a4b32b" Last-Modified: Tue, 04 Jan 2022 18:43:10 GMT Strict-Transport-Security: max-age=31556926; includeSubDomains; preload Accept-Ranges: bytes Date: Tue, 24 Sep 2024 12:55:58 GMT X-Served-By: cache-nyc-kteb1890055-NYC X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1727182559.755595,VS0,VE161 Vary: x-fh-requested-host, accept-encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-09-24 12:55:58 UTC	1378	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 79 00 00 01 59 08 06 00 00 00 7d af 5f 0b 00 00 20 00 49 44 41 54 78 9c 8c bd 69 8c 65 d7 71 26 f8 c5 7b 2f 97 aa ac ac ac 7d a5 48 16 59 5a 48 8a da 97 b6 28 52 25 d3 2a d3 90 c7 6e af 63 4b b6 db b2 07 1e 18 16 7a ba 21 4c 03 36 30 d3 20 c6 a0 d7 1e 03 0d 37 06 30 30 e8 f9 d1 3d 3d d0 fc 99 01 ba a7 db f2 a8 ad 96 4c 4b a4 cc 86 5b 14 77 91 55 22 59 55 59 6b 66 55 66 55 2e ef de 7b e6 c7 bd 11 f1 45 dc 9b f2 3c 89 95 f9 ee 3d 4b c4 17 11 5f c4 39 f7 bc 97 f2 81 b3 9f 83 00 80 00 28 f0 97 00 a5 00 22 dd 8d 02 40 f4 62 d7 36 77 ec 9a 1d 90 db f8 c4 e2 db 5f b8 3c 3a f2 cd e7 d7 96 5e de ac 47 ed 90 82 81 57 bf 7f 6c 27 28 a5 b8 1c 2a 98 76 05 52 a7 12 7e f4 ae f3 9c bd c9 7c fc 78 cb db b7 d7 bb 1b Data Ascii: PNGIHDRyY}_ IDATxieq&{/}HYZH(R%ncKz!L60 700==LK[wU"YUYkfUfU.{E<=K_9("@b6w_<:^GWl'(vR~\|x
2024-09-24 12:55:58 UTC	1378	IN	Data Raw: c8 3b e6 b7 8e 7e ff ce ee 6f 6e d5 a3 40 12 bd e5 37 11 52 8f 2c c8 1a 92 de 47 a5 25 00 12 1c 17 6c d0 14 9c fd d2 31 e8 ad d5 4e 80 2e 7b 07 47 5b 4e 2c c4 c8 81 d8 c9 50 00 c5 6f d0 85 fa a5 f1 7b 39 86 2a ca a0 27 8d 19 10 09 fa 53 1f f7 32 a4 01 48 a6 14 c0 f9 95 b0 35 9b 06 b2 1a 26 01 36 0d 5f 17 e4 1b 8e 85 f6 2c a9 5d 3f 88 d9 3f da f7 71 1b a2 1f 48 2e 7b de 3b 8d e3 f6 f7 9f 69 00 91 01 db 0b 9c a8 7d 5e f3 dd 9c 1c 82 c1 b5 ad ce 1d e5 dc 29 7e b8 40 b0 39 99 d4 09 bf 40 ec 48 e3 68 1b 83 8d f5 67 60 24 8c cf 49 8f af 0d ed dd bb 7e 24 9c 8e 91 32 95 ad 32 4c 3c 6f 13 f1 6b fb f8 5b c2 89 75 cb c5 1c cb 49 ea f1 b3 1b 0e e9 7d 33 15 7e f5 9e b7 9e fc 47 ef 7c ed 2b ef da b3 fa 63 1b 37 6f fc d8 f7 ae 4c 1f 28 a5 7c 4a 50 be 59 63 f6 dc 0a 16 Data Ascii: ;~on@7R,G%l1N.{G[N,Po{9*'S2H5&6_,]??qH.{;i}^)~@9@Hhg`$I~$22L<ok[uI}3~G\|+c7oL(\|JPYc
2024-09-24 12:55:58 UTC	1378	IN	Data Raw: 1e 64 1e 62 fd 12 64 8a b2 93 9e fc 52 00 03 df 38 2b 05 e7 e8 95 72 ae 6c dc 2e a0 f6 79 89 cf 30 a5 a4 db 0f e4 04 69 48 1c 43 b8 0c 24 9c 20 c7 00 69 06 06 ce f7 69 2c c5 85 ef 97 bc 6f 8f be 6d 07 13 61 22 dd a1 76 d9 57 91 7f 92 da 59 be ec 23 11 f4 be 2c 79 fc c8 08 7d a8 88 78 e3 6a 38 0b 84 80 ef a0 09 d8 e7 91 fa f6 7c 8e 1a 90 9f f5 fc 3b 2e ff 48 56 bd c6 71 92 64 c8 be de 13 2c 62 d4 db b2 cc 01 67 85 49 c6 0a 38 38 3b c5 cf 9f b8 f0 e4 0f 1f 5d fe ed 19 a9 67 46 22 98 19 d5 40 01 b6 aa 82 ff 72 b1 c1 4b cb 35 aa 06 a8 9a 62 c9 a1 24 bf 9f ca 2c 5e c1 fd a7 be 87 93 e7 43 bc fd 00 cc 06 e5 14 c1 f8 d8 fd 0f db 32 c5 33 2d e3 10 07 8b d9 cc 11 dc 5f d6 f1 0e b9 f4 d8 04 f5 59 40 5a e1 43 b5 df b6 65 50 0a 80 aa 11 bc bd d2 6e df 1c 5c 18 61 3c Data Ascii: dbdR8+rl.y0iHC$ ii,oma"vWY#,y}xj8\|;.HVqd,bgI88;]gF"@rK5b$,^C23-_Y@ZCePn\a<
2024-09-24 12:55:58 UTC	1378	IN	Data Raw: 30 08 24 36 48 56 da 87 93 18 dd 1a 6a 66 72 b9 ac 3c 42 e0 83 c1 44 c3 63 31 c0 88 ce 25 be ad 31 c4 8f 43 49 b2 77 29 fb 4e 20 38 ba 4f 6c ee f8 a7 2d 28 63 a4 e4 5b 8c af 38 2e b1 ef 0e 79 22 e1 15 e5 ce 8a a8 e2 2e 77 54 4d e8 27 f5 e3 89 bb c9 82 8b 33 2f 71 48 d1 fd 1e 49 e6 31 bb 7b 76 ab 9b fb d0 cc 14 bf 70 d7 c5 2f fd d4 c9 4b ff d3 a3 87 2f ff c3 d3 8b 6b 9f 5a 18 57 93 c9 88 fc 8d 26 db ac 81 ef 5c ac d1 9e 9e 91 b6 aa cf 20 91 cc 20 be 54 ee 1c 49 83 dd d8 7a e9 75 b4 a7 6c 5a 53 2a 26 08 b2 fb c2 d1 ed a7 af 49 96 b0 1d c3 d1 09 27 0f 02 a8 1e 74 f7 e1 c2 99 59 4c 17 d8 2b dd 94 de db aa 7b 7a ea 2f 10 14 32 72 01 30 ad 05 2f 5c ac 71 fd 76 83 47 ef 9f 60 61 d6 05 66 c7 16 11 8c 4a 83 dd e3 32 f3 9e c5 95 b3 f7 bd f3 d6 a7 ab 66 bc f9 fd 3b Data Ascii: 0$6HVjfr<BDc1%1CIw)N 8Ol-(c[8.y".wTM'3/qHI1{vp/K/kZW&\ TIzulZS*&I'tYL+{z/2r0/\qvG`afJ2f;
2024-09-24 12:55:58 UTC	1378	IN	Data Raw: 0a e3 f7 fb 72 85 19 c5 19 f2 dd ac d3 d0 bc f4 bb e9 d8 27 de 9e 3a 0c 68 19 f8 1b 03 c9 df f3 d4 e1 d5 8b 33 f7 07 1e 2e 27 f9 fe 03 e3 28 d3 ff 1f 93 0c 62 07 ee 37 44 de 3a 55 9a 8b 6d 94 54 ec af 40 e2 bc bd 55 30 af 8e 77 f0 cd de ea 21 63 1e 81 b1 c1 8e cc 6e e3 b3 c7 2e 7f e9 c1 bd b7 7e ec d4 c2 da 63 13 a9 67 e6 46 0d f5 61 8e 09 a4 65 79 74 6d bb e0 af be 57 e1 d2 ad 06 d3 1a d1 27 29 9e 7b b1 11 c4 62 aa 76 ae 14 00 5b 98 f9 9d 97 f0 ce 7f d9 6e d9 fc 1d 3c 44 84 a0 89 79 a2 8a f4 82 3d 07 f5 c0 f2 7b bf ac e1 00 56 1e 1a a3 ee 09 6b 7d 45 85 f5 eb 91 f4 db ff a1 00 45 2b 87 90 05 db 61 a6 0d f0 f6 6a c1 37 be 57 e1 c1 e3 63 9c dc 27 76 fa 26 eb c9 e0 8a 00 e3 52 30 1e 15 cc 8d b6 f6 3d b8 77 fa d9 fb f7 dc 3c fb c4 ed bd 5f fd f3 e5 63 bf fb Data Ascii: r':h3.'(b7D:UmT@U0w!cn.~cgFaeytmW'){bv[n<Dy={Vk}EE+aj7Wc'v&R0=w<_c
2024-09-24 12:55:58 UTC	1378	IN	Data Raw: 5b a8 57 a2 20 05 3b 8d db 23 2e 55 a5 d8 98 8c 75 21 5b f9 e0 65 d0 b4 ea 7e c2 55 5f 87 57 70 6d 0a 70 f7 53 7d 43 fa 5a 35 a8 8e cb 62 a4 80 0a 49 b8 c4 f7 d6 cc 03 34 7e 10 88 35 20 39 b3 83 18 c9 0c e8 15 02 5f c7 64 43 82 f0 ec fb 8b e9 00 20 54 cd 26 16 ad 42 a0 b8 75 24 98 fb 87 38 a1 7d e4 90 c0 5d c7 b0 ca a1 42 c5 49 56 db 3a ce a2 17 4c 45 9e 93 fd 2b da 1d 5a e5 72 65 ca 64 db f9 80 1e 8d 8c e4 0e 1c 9b dd c2 a7 0e 5f ff c2 e1 d9 ad 77 7e f2 f0 d5 2f ce 8f a6 8b ba d7 ae 09 89 17 ac ad fe 64 12 bd dc fd 53 44 b0 51 01 2f 5c 6c f0 d2 95 0a 9b d3 82 c6 4e 52 b2 7c e4 c1 e2 ec d7 2b a6 12 f6 8c 33 12 c1 77 1d 9f 9a a0 f9 37 da 34 c0 26 ae 7f 5e 61 03 82 89 b6 b1 8c 00 0a e4 f0 52 73 b5 4f c4 ef 1b 5d 38 c3 5f 63 a0 43 bb bb ea 7e 7b 80 8c 04 f4 Data Ascii: [W ;#.Uu![e~U_WpmpS}CZ5bI4~5 9_dC T&Bu$8}]BIV:LE+Zred_w~/dSDQ/\lNR\|+3w74&^aRsO]8_cC~{
2024-09-24 12:55:58 UTC	1378	IN	Data Raw: 3d c8 4a 29 d0 e3 50 f9 9c bd a9 9c 18 4d c9 fe c1 bd ab 4f dc b7 67 fd cc 17 9a f1 da db 1b 0b cf fe c5 f2 e1 3f fc f6 ca fe af af d5 9a 51 78 20 75 04 9b 38 12 85 25 45 3d 7d c0 91 44 01 6e 95 02 27 3c 26 bc 14 40 56 83 04 b6 89 b2 b1 90 aa 34 72 17 0f 66 26 2f ad e8 da f6 e4 b0 e4 2b 36 a5 12 d5 10 a8 5d 5b d1 3f e6 10 88 c4 6d e6 76 8a a7 8b 2c b1 51 62 88 59 81 7c 2c f8 73 87 57 58 01 70 47 12 91 89 8f 75 ec 25 75 22 b3 ac 24 eb 17 12 93 cf 2b 28 34 1e 8d d1 23 3a 66 df 2e 16 88 68 7b d3 a7 f8 8d 78 b8 7d 6d 4b cb 64 46 92 99 7e b2 5c 21 9e fd 73 1b a6 a7 c9 20 ec 16 64 33 dd b3 26 7f 1e 80 50 65 3d 3e bb 89 4f 1d be f1 85 43 b3 5b ef 7c e4 d0 d5 2f ee 9a 54 8b ba 1d 13 45 8c c9 95 e7 08 db 21 ec eb f4 da a8 ba ed 99 4b 15 a6 35 61 af c4 ca 60 e7 d8 Data Ascii: =J)PMOg?Qx u8%E=}Dn'<&@V4rf&/+6][?mv,QbY\|,sWXpGu%u"$+(4#:f.h{x}mKdF~\!s d3&Pe=>OC[\|/TE!K5a`
2024-09-24 12:55:58 UTC	1378	IN	Data Raw: 6a 56 a6 bf 1f 6c 69 ce 00 73 06 fa c8 47 b4 a1 5e 31 27 12 77 1a 72 02 16 26 8c c9 b1 16 56 1b f4 9b 65 c0 76 8c 69 53 70 fd 76 83 52 04 fb 76 0b 66 c7 ad 21 da ff a2 74 c3 95 7b 7c c2 df 4f 02 da aa 60 66 d4 60 7e dc cc 1d 9a db 3a fd be 7d ab 3f f7 be bd b7 1e 85 8c 2e 5c df 9e 3b bf 55 0b 91 1d 8d 2f 5d 50 26 2c 31 78 0d 9d b3 75 72 10 b3 8a 8d 4d 41 18 f4 8b d7 e3 49 9a 10 a5 e1 bd 57 c5 ae ac a8 1c 43 1c 18 ec 28 4e a4 2c 5f d0 ab f4 c4 56 03 f5 48 c0 e4 52 a1 10 fc 56 c9 cb 5d 33 13 1e e9 a3 f7 69 3e 7b df cd 6b 72 41 10 08 2d c5 8a e1 43 e1 ca ab b2 08 6f b2 53 f2 79 0f d8 21 dd 49 75 c2 93 9b 31 84 e6 27 34 0f 15 7f 81 d7 03 d4 46 ce 48 36 18 c0 d2 e6 08 ea 87 f7 12 07 21 f7 68 81 39 39 bf 85 1f 3b 72 e5 0b 8f 1f ba fe 8b 5f b8 f7 8d ff f3 dd 7b Data Ascii: jVlisG^1'wr&VeviSpvRvf!t{\|O`f`~:}?.\;U/]P&,1xurMAIWC(N,_VHRV]3i>{krA-CoSy!Iu1'4FH6!h99;r_{
2024-09-24 12:55:58 UTC	1378	IN	Data Raw: 95 0a cb b7 0a b6 2b 6d 22 e6 9b f1 f3 3b 04 97 4a d3 c3 86 0e 8b 18 40 02 f6 11 4e 1a 2d 8f 79 16 8a eb 6f b1 d3 82 54 b9 13 d7 b5 d7 e6 cb c6 c1 53 72 39 fe c5 28 d6 97 74 98 ec 48 0c 49 c9 fb 70 e1 cc 0c b6 16 4d 10 26 0c 29 c8 59 aa 68 a5 66 81 80 78 3f 29 68 99 8a 03 a7 23 75 37 74 27 65 19 0a 1c 02 d1 60 67 ad 7c 88 52 0a 36 2b e0 c5 4b 35 56 ee 34 78 f7 91 31 8e ef 1b 61 66 e4 3d c2 d1 2c 82 c8 cf 1a 47 e6 e7 87 7b e1 c3 5c 70 52 52 71 27 a3 82 bd a3 e9 c2 83 7b 57 9f b8 77 cf fa a3 bf 54 8f d7 2e 6e 2c 3c f7 97 57 0e ff c9 33 ab 07 be 7a 6b 7b d4 42 10 48 24 00 40 72 92 ee c1 f9 e0 18 c1 e0 ec 25 2c b3 42 21 13 51 92 e2 b3 d5 80 cb 24 81 00 9d f5 03 69 e4 17 93 78 22 ec 1e d9 88 f8 f1 53 0b 8e 44 72 92 ee 51 92 a6 2a 04 9e 20 93 8c e1 e5 41 61 cb Data Ascii: +m";J@N-yoTSr9(tHIpM&)Yhfx?)h#u7t'e`g\|R6+K5V4x1af=,G{\pRRq'{WwT.n,<W3zk{BH$@r%,B!Q$ix"SDrQ* Aa
2024-09-24 12:55:58 UTC	1378	IN	Data Raw: b3 ec 0c 4e 1e be 25 f6 8f ef 5f fd fc b1 f9 8d f7 7d fc c0 b5 5f 5f 18 4f 0f ee 9a d4 21 f7 c6 42 89 64 d3 64 a2 57 79 9b 25 eb 2b 51 75 d3 a2 d0 2f b4 a2 da 98 fa 5f 6e ba b3 1d e7 0e db b9 5c 15 d8 3c f9 b9 61 df 8a 25 fb 5b c0 99 0a 5f 96 96 76 38 86 79 2e 68 46 50 a5 5d 0f 14 54 98 c1 2b b8 ff f4 6b e5 e4 eb ec 37 c1 8f 00 8c 8f 9f 7e 1f c5 91 0c ca fc 5e bc f6 d9 79 6c ff 11 3b a4 50 33 a6 6e db 76 69 25 b3 b6 92 84 d6 01 6c 0b 21 cc d9 8d 3f 04 a2 2a 22 34 5f f2 04 06 c4 c7 13 16 36 02 d7 cd 53 17 60 7d 0b b8 b0 5a 63 cf fc 08 7b e7 47 18 f1 b2 8b 02 98 f7 d9 f5 fd 8e ab 7c 89 7d c2 1e bd aa 42 18 02 82 f1 08 98 19 35 e3 5d e3 6a cf a1 f9 cd 77 bf 77 ef ea 4f 3d bc 6f fd b1 31 46 cb 37 b6 67 ce 6d d6 a3 48 52 2a 26 1b db 2a 58 b6 94 ce ed db 14 ce Data Ascii: N%_}__O!BddWy%+Qu/_n\<a%[_v8y.hFP]T+k7~^yl;P3nvi%l!?"4_6S`}Zc{G\|}B5]jwwO=o1F7gmHR&*X

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	53338	199.36.158.100	443	3992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-24 12:55:59 UTC	604	OUT	GET /logo192.png HTTP/1.1 Host: metamask-support.web.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://metamask-support.web.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-24 12:55:59 UTC	607	IN	HTTP/1.1 200 OK Connection: close Content-Length: 677 Cache-Control: max-age=3600 Content-Type: text/html; charset=utf-8 Etag: "32d030ebe9c438ba6ed7b25827d1692a79c7f4cfe1510f4c991ca22923e185e0" Last-Modified: Tue, 04 Jan 2022 18:43:10 GMT Strict-Transport-Security: max-age=31556926; includeSubDomains; preload Accept-Ranges: bytes Date: Tue, 24 Sep 2024 12:55:59 GMT X-Served-By: cache-ewr-kewr1740071-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1727182560.540685,VS0,VE56 Vary: x-fh-requested-host, accept-encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-09-24 12:55:59 UTC	677	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 30 30 30 30 30 30 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 Data Ascii: <!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1,user-scalable=no"/><meta name="theme-color" content="#000000"/><link rel="a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	53340	199.36.158.100	443	3992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-24 12:55:59 UTC	359	OUT	GET /favicon.ico HTTP/1.1 Host: metamask-support.web.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-24 12:55:59 UTC	599	IN	HTTP/1.1 200 OK Connection: close Content-Length: 114217 Cache-Control: max-age=3600 Content-Type: image/x-icon Etag: "7f3a3dcca1124b3b5a76a76ee75189ad8b6a67a158a83082999c60b325a4b32b" Last-Modified: Tue, 04 Jan 2022 18:43:10 GMT Strict-Transport-Security: max-age=31556926; includeSubDomains; preload Accept-Ranges: bytes Date: Tue, 24 Sep 2024 12:55:59 GMT X-Served-By: cache-ewr-kewr1740040-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1727182560.756911,VS0,VE128 Vary: x-fh-requested-host, accept-encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-09-24 12:55:59 UTC	1378	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 79 00 00 01 59 08 06 00 00 00 7d af 5f 0b 00 00 20 00 49 44 41 54 78 9c 8c bd 69 8c 65 d7 71 26 f8 c5 7b 2f 97 aa ac ac ac 7d a5 48 16 59 5a 48 8a da 97 b6 28 52 25 d3 2a d3 90 c7 6e af 63 4b b6 db b2 07 1e 18 16 7a ba 21 4c 03 36 30 d3 20 c6 a0 d7 1e 03 0d 37 06 30 30 e8 f9 d1 3d 3d d0 fc 99 01 ba a7 db f2 a8 ad 96 4c 4b a4 cc 86 5b 14 77 91 55 22 59 55 59 6b 66 55 66 55 2e ef de 7b e6 c7 bd 11 f1 45 dc 9b f2 3c 89 95 f9 ee 3d 4b c4 17 11 5f c4 39 f7 bc 97 f2 81 b3 9f 83 00 80 00 28 f0 97 00 a5 00 22 dd 8d 02 40 f4 62 d7 36 77 ec 9a 1d 90 db f8 c4 e2 db 5f b8 3c 3a f2 cd e7 d7 96 5e de ac 47 ed 90 82 81 57 bf 7f 6c 27 28 a5 b8 1c 2a 98 76 05 52 a7 12 7e f4 ae f3 9c bd c9 7c fc 78 cb db b7 d7 bb 1b Data Ascii: PNGIHDRyY}_ IDATxieq&{/}HYZH(R%ncKz!L60 700==LK[wU"YUYkfUfU.{E<=K_9("@b6w_<:^GWl'(vR~\|x
2024-09-24 12:55:59 UTC	1364	IN	Data Raw: c8 3b e6 b7 8e 7e ff ce ee 6f 6e d5 a3 40 12 bd e5 37 11 52 8f 2c c8 1a 92 de 47 a5 25 00 12 1c 17 6c d0 14 9c fd d2 31 e8 ad d5 4e 80 2e 7b 07 47 5b 4e 2c c4 c8 81 d8 c9 50 00 c5 6f d0 85 fa a5 f1 7b 39 86 2a ca a0 27 8d 19 10 09 fa 53 1f f7 32 a4 01 48 a6 14 c0 f9 95 b0 35 9b 06 b2 1a 26 01 36 0d 5f 17 e4 1b 8e 85 f6 2c a9 5d 3f 88 d9 3f da f7 71 1b a2 1f 48 2e 7b de 3b 8d e3 f6 f7 9f 69 00 91 01 db 0b 9c a8 7d 5e f3 dd 9c 1c 82 c1 b5 ad ce 1d e5 dc 29 7e b8 40 b0 39 99 d4 09 bf 40 ec 48 e3 68 1b 83 8d f5 67 60 24 8c cf 49 8f af 0d ed dd bb 7e 24 9c 8e 91 32 95 ad 32 4c 3c 6f 13 f1 6b fb f8 5b c2 89 75 cb c5 1c cb 49 ea f1 b3 1b 0e e9 7d 33 15 7e f5 9e b7 9e fc 47 ef 7c ed 2b ef da b3 fa 63 1b 37 6f fc d8 f7 ae 4c 1f 28 a5 7c 4a 50 be 59 63 f6 dc 0a 16 Data Ascii: ;~on@7R,G%l1N.{G[N,Po{9*'S2H5&6_,]??qH.{;i}^)~@9@Hhg`$I~$22L<ok[uI}3~G\|+c7oL(\|JPYc
2024-09-24 12:55:59 UTC	1378	IN	Data Raw: ec e4 83 7a 64 c0 62 55 d4 4b 24 3f 68 89 1e 64 1e 62 fd 12 64 8a b2 93 9e fc 52 00 03 df 38 2b 05 e7 e8 95 72 ae 6c dc 2e a0 f6 79 89 cf 30 a5 a4 db 0f e4 04 69 48 1c 43 b8 0c 24 9c 20 c7 00 69 06 06 ce f7 69 2c c5 85 ef 97 bc 6f 8f be 6d 07 13 61 22 dd a1 76 d9 57 91 7f 92 da 59 be ec 23 11 f4 be 2c 79 fc c8 08 7d a8 88 78 e3 6a 38 0b 84 80 ef a0 09 d8 e7 91 fa f6 7c 8e 1a 90 9f f5 fc 3b 2e ff 48 56 bd c6 71 92 64 c8 be de 13 2c 62 d4 db b2 cc 01 67 85 49 c6 0a 38 38 3b c5 cf 9f b8 f0 e4 0f 1f 5d fe ed 19 a9 67 46 22 98 19 d5 40 01 b6 aa 82 ff 72 b1 c1 4b cb 35 aa 06 a8 9a 62 c9 a1 24 bf 9f ca 2c 5e c1 fd a7 be 87 93 e7 43 bc fd 00 cc 06 e5 14 c1 f8 d8 fd 0f db 32 c5 33 2d e3 10 07 8b d9 cc 11 dc 5f d6 f1 0e b9 f4 d8 04 f5 59 40 5a e1 43 b5 df b6 65 50 Data Ascii: zdbUK$?hdbdR8+rl.y0iHC$ ii,oma"vWY#,y}xj8\|;.HVqd,bgI88;]gF"@rK5b$,^C23-_Y@ZCeP
2024-09-24 12:55:59 UTC	1364	IN	Data Raw: dc 86 19 f2 5c e9 48 1d 90 fc 2c 61 23 12 30 08 24 36 48 56 da 87 93 18 dd 1a 6a 66 72 b9 ac 3c 42 e0 83 c1 44 c3 63 31 c0 88 ce 25 be ad 31 c4 8f 43 49 b2 77 29 fb 4e 20 38 ba 4f 6c ee f8 a7 2d 28 63 a4 e4 5b 8c af 38 2e b1 ef 0e 79 22 e1 15 e5 ce 8a a8 e2 2e 77 54 4d e8 27 f5 e3 89 bb c9 82 8b 33 2f 71 48 d1 fd 1e 49 e6 31 bb 7b 76 ab 9b fb d0 cc 14 bf 70 d7 c5 2f fd d4 c9 4b ff d3 a3 87 2f ff c3 d3 8b 6b 9f 5a 18 57 93 c9 88 fc 8d 26 db ac 81 ef 5c ac d1 9e 9e 91 b6 aa cf 20 91 cc 20 be 54 ee 1c 49 83 dd d8 7a e9 75 b4 a7 6c 5a 53 2a 26 08 b2 fb c2 d1 ed a7 af 49 96 b0 1d c3 d1 09 27 0f 02 a8 1e 74 f7 e1 c2 99 59 4c 17 d8 2b dd 94 de db aa 7b 7a ea 2f 10 14 32 72 01 30 ad 05 2f 5c ac 71 fd 76 83 47 ef 9f 60 61 d6 05 66 c7 16 11 8c 4a 83 dd e3 32 f3 9e Data Ascii: \H,a#0$6HVjfr<BDc1%1CIw)N 8Ol-(c[8.y".wTM'3/qHI1{vp/K/kZW&\ TIzulZS*&I'tYL+{z/2r0/\qvG`afJ2
2024-09-24 12:55:59 UTC	1371	IN	Data Raw: fc 32 d0 1e 3d f2 b4 3e 43 55 7b 0f 83 24 b3 f0 40 48 7d 81 1e 83 f4 b0 49 44 97 c1 0a e3 f7 fb 72 85 19 c5 19 f2 dd ac d3 d0 bc f4 bb e9 d8 27 de 9e 3a 0c 68 19 f8 1b 03 c9 df f3 d4 e1 d5 8b 33 f7 07 1e 2e 27 f9 fe 03 e3 28 d3 ff 1f 93 0c 62 07 ee 37 44 de 3a 55 9a 8b 6d 94 54 ec af 40 e2 bc bd 55 30 af 8e 77 f0 cd de ea 21 63 1e 81 b1 c1 8e cc 6e e3 b3 c7 2e 7f e9 c1 bd b7 7e ec d4 c2 da 63 13 a9 67 e6 46 0d f5 61 8e 09 a4 65 79 74 6d bb e0 af be 57 e1 d2 ad 06 d3 1a d1 27 29 9e 7b b1 11 c4 62 aa 76 ae 14 00 5b 98 f9 9d 97 f0 ce 7f d9 6e d9 fc 1d 3c 44 84 a0 89 79 a2 8a f4 82 3d 07 f5 c0 f2 7b bf ac e1 00 56 1e 1a a3 ee 09 6b 7d 45 85 f5 eb 91 f4 db ff a1 00 45 2b 87 90 05 db 61 a6 0d f0 f6 6a c1 37 be 57 e1 c1 e3 63 9c dc 27 76 fa 26 eb c9 e0 8a 00 e3 Data Ascii: 2=>CU{$@H}IDr':h3.'(b7D:UmT@U0w!cn.~cgFaeytmW'){bv[n<Dy={Vk}EE+aj7Wc'v&
2024-09-24 12:55:59 UTC	1378	IN	Data Raw: 02 77 2e be 26 fd cf 05 f8 f4 0e 72 de a3 e4 ac 2d 2c 77 af 12 23 b5 b4 27 59 55 b3 be e8 7c 3a 92 08 6c 5b a8 57 a2 20 05 3b 8d db 23 2e 55 a5 d8 98 8c 75 21 5b f9 e0 65 d0 b4 ea 7e c2 55 5f 87 57 70 6d 0a 70 f7 53 7d 43 fa 5a 35 a8 8e cb 62 a4 80 0a 49 b8 c4 f7 d6 cc 03 34 7e 10 88 35 20 39 b3 83 18 c9 0c e8 15 02 5f c7 64 43 82 f0 ec fb 8b e9 00 20 54 cd 26 16 ad 42 a0 b8 75 24 98 fb 87 38 a1 7d e4 90 c0 5d c7 b0 ca a1 42 c5 49 56 db 3a ce a2 17 4c 45 9e 93 fd 2b da 1d 5a e5 72 65 ca 64 db f9 80 1e 8d 8c e4 0e 1c 9b dd c2 a7 0e 5f ff c2 e1 d9 ad 77 7e f2 f0 d5 2f ce 8f a6 8b ba d7 ae 09 89 17 ac ad fe 64 12 bd dc fd 53 44 b0 51 01 2f 5c 6c f0 d2 95 0a 9b d3 82 c6 4e 52 b2 7c e4 c1 e2 ec d7 2b a6 12 f6 8c 33 12 c1 77 1d 9f 9a a0 f9 37 da 34 c0 26 ae 7f Data Ascii: w.&r-,w#'YU\|:l[W ;#.Uu![e~U_WpmpS}CZ5bI4~5 9_dC T&Bu$8}]BIV:LE+Zred_w~/dSDQ/\lNR\|+3w74&
2024-09-24 12:55:59 UTC	1364	IN	Data Raw: 6c 26 c8 37 00 00 20 00 49 44 41 54 bb 48 28 05 c0 76 55 70 71 55 70 75 ad dd be 79 ef f1 11 e6 67 94 b8 3d c8 4a 29 d0 e3 50 f9 9c bd a9 9c 18 4d c9 fe c1 bd ab 4f dc b7 67 fd cc 17 9a f1 da db 1b 0b cf fe c5 f2 e1 3f fc f6 ca fe af af d5 9a 51 78 20 75 04 9b 38 12 85 25 45 3d 7d c0 91 44 01 6e 95 02 27 3c 26 bc 14 40 56 83 04 b6 89 b2 b1 90 aa 34 72 17 0f 66 26 2f ad e8 da f6 e4 b0 e4 2b 36 a5 12 d5 10 a8 5d 5b d1 3f e6 10 88 c4 6d e6 76 8a a7 8b 2c b1 51 62 88 59 81 7c 2c f8 73 87 57 58 01 70 47 12 91 89 8f 75 ec 25 75 22 b3 ac 24 eb 17 12 93 cf 2b 28 34 1e 8d d1 23 3a 66 df 2e 16 88 68 7b d3 a7 f8 8d 78 b8 7d 6d 4b cb 64 46 92 99 7e b2 5c 21 9e fd 73 1b a6 a7 c9 20 ec 16 64 33 dd b3 26 7f 1e 80 50 65 3d 3e bb 89 4f 1d be f1 85 43 b3 5b ef 7c e4 d0 d5 Data Ascii: l&7 IDATH(vUpqUpuyg=J)PMOg?Qx u8%E=}Dn'<&@V4rf&/+6][?mv,QbY\|,sWXpGu%u"$+(4#:f.h{x}mKdF~\!s d3&Pe=>OC[\|
2024-09-24 12:55:59 UTC	1371	IN	Data Raw: c5 e0 e3 f1 23 ed cc 91 a6 8b 72 04 f7 11 c1 0c 2a dc 83 8b 8f bf 26 27 5f 0f 7e 00 f2 7b 02 55 80 f6 c3 50 31 a5 45 43 b3 61 0f c8 6d bc 0b e7 7f 6a 56 a6 bf 1f 6c 69 ce 00 73 06 fa c8 47 b4 a1 5e 31 27 12 77 1a 72 02 16 26 8c c9 b1 16 56 1b f4 9b 65 c0 76 8c 69 53 70 fd 76 83 52 04 fb 76 0b 66 c7 ad 21 da ff a2 74 c3 95 7b 7c c2 df 4f 02 da aa 60 66 d4 60 7e dc cc 1d 9a db 3a fd be 7d ab 3f f7 be bd b7 1e 85 8c 2e 5c df 9e 3b bf 55 0b 91 1d 8d 2f 5d 50 26 2c 31 78 0d 9d b3 75 72 10 b3 8a 8d 4d 41 18 f4 8b d7 e3 49 9a 10 a5 e1 bd 57 c5 ae ac a8 1c 43 1c 18 ec 28 4e a4 2c 5f d0 ab f4 c4 56 03 f5 48 c0 e4 52 a1 10 fc 56 c9 cb 5d 33 13 1e e9 a3 f7 69 3e 7b df cd 6b 72 41 10 08 2d c5 8a e1 43 e1 ca ab b2 08 6f b2 53 f2 79 0f d8 21 dd 49 75 c2 93 9b 31 84 e6 Data Ascii: #r*&'_~{UP1ECamjVlisG^1'wr&VeviSpvRvf!t{\|O`f`~:}?.\;U/]P&,1xurMAIWC(N,_VHRV]3i>{krA-CoSy!Iu1
2024-09-24 12:55:59 UTC	1371	IN	Data Raw: 8c 81 c3 bb 04 ef 98 df c2 8f 1c b9 fa a5 07 f6 de 3a 7b f7 ee f5 47 e6 a4 59 98 1f 57 e4 eb da 07 e8 19 29 24 a4 b4 ef 5d 94 5f 9c ec 02 52 84 f5 76 55 70 f1 26 f0 d2 95 0a cb b7 0a b6 2b 6d 22 e6 9b f1 f3 3b 04 97 4a d3 c3 86 0e 8b 18 40 02 f6 11 4e 1a 2d 8f 79 16 8a eb 6f b1 d3 82 54 b9 13 d7 b5 d7 e6 cb c6 c1 53 72 39 fe c5 28 d6 97 74 98 ec 48 0c 49 c9 fb 70 e1 cc 0c b6 16 4d 10 26 0c 29 c8 59 aa 68 a5 66 81 80 78 3f 29 68 99 8a 03 a7 23 75 37 74 27 65 19 0a 1c 02 d1 60 67 ad 7c 88 52 0a 36 2b e0 c5 4b 35 56 ee 34 78 f7 91 31 8e ef 1b 61 66 e4 3d c2 d1 2c 82 c8 cf 1a 47 e6 e7 87 7b e1 c3 5c 70 52 52 71 27 a3 82 bd a3 e9 c2 83 7b 57 9f b8 77 cf fa a3 bf 54 8f d7 2e 6e 2c 3c f7 97 57 0e ff c9 33 ab 07 be 7a 6b 7b d4 42 10 48 24 00 40 72 92 ee c1 f9 e0 Data Ascii: :{GYW)$]_RvUp&+m";J@N-yoTSr9(tHIpM&)Yhfx?)h#u7t'e`g\|R6+K5V4x1af=,G{\pRRq'{WwT.n,<W3zk{BH$@r
2024-09-24 12:55:59 UTC	1371	IN	Data Raw: 20 29 69 f0 9e 79 9a 7e 28 f9 04 d7 e0 0b 18 fe 3d b2 4f c4 68 07 79 a2 ee da 2c cf 51 92 cd 65 58 46 60 60 0e e4 06 3b c8 ec bf ab 0c e1 eb 14 72 26 1d 0c 56 26 bf 01 27 cc 09 29 eb 67 ed b3 ec 0c 4e 1e be 25 f6 8f ef 5f fd fc b1 f9 8d f7 7d fc c0 b5 5f 5f 18 4f 0f ee 9a d4 21 f7 c6 42 89 64 d3 64 a2 57 79 9b 25 eb 2b 51 75 d3 a2 d0 2f b4 a2 da 98 fa 5f 6e ba b3 1d e7 0e db b9 5c 15 d8 3c f9 b9 61 df 8a 25 fb 5b c0 99 0a 5f 96 96 76 38 86 79 2e 68 46 50 a5 5d 0f 14 54 98 c1 2b b8 ff f4 6b e5 e4 eb ec 37 c1 8f 00 8c 8f 9f 7e 1f c5 91 0c ca fc 5e bc f6 d9 79 6c ff 11 3b a4 50 33 a6 6e db 76 69 25 b3 b6 92 84 d6 01 6c 0b 21 cc d9 8d 3f 04 a2 2a 22 34 5f f2 04 06 c4 c7 13 16 36 02 d7 cd 53 17 60 7d 0b b8 b0 5a 63 cf fc 08 7b e7 47 18 f1 b2 8b 02 98 f7 d9 f5 Data Ascii: )iy~(=Ohy,QeXF``;r&V&')gN%_}__O!BddWy%+Qu/_n\<a%[_v8y.hFP]T+k7~^yl;P3nvi%l!?*"4_6S`}Zc{G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	53339	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-24 12:56:01 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-24 12:56:01 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF17) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=13777 Date: Tue, 24 Sep 2024 12:56:01 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	53343	199.36.158.100	443	3992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-24 12:56:01 UTC	359	OUT	GET /logo192.png HTTP/1.1 Host: metamask-support.web.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-24 12:56:01 UTC	608	IN	HTTP/1.1 200 OK Connection: close Content-Length: 677 Cache-Control: max-age=3600 Content-Type: text/html; charset=utf-8 Etag: "32d030ebe9c438ba6ed7b25827d1692a79c7f4cfe1510f4c991ca22923e185e0" Last-Modified: Tue, 04 Jan 2022 18:43:10 GMT Strict-Transport-Security: max-age=31556926; includeSubDomains; preload Accept-Ranges: bytes Date: Tue, 24 Sep 2024 12:56:01 GMT X-Served-By: cache-nyc-kteb1890061-NYC X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1727182561.378679,VS0,VE103 Vary: x-fh-requested-host, accept-encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-09-24 12:56:01 UTC	677	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 30 30 30 30 30 30 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 Data Ascii: <!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1,user-scalable=no"/><meta name="theme-color" content="#000000"/><link rel="a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	53344	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-24 12:56:02 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-24 12:56:02 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=25929 Date: Tue, 24 Sep 2024 12:56:02 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-24 12:56:02 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	53352	185.199.108.153	443	3992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-24 12:56:08 UTC	638	OUT	GET /faqs HTTP/1.1 Host: metamask.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-24 12:56:08 UTC	636	IN	HTTP/1.1 301 Moved Permanently Connection: close Content-Length: 162 Server: GitHub.com Content-Type: text/html x-origin-cache: HIT Location: https://metamask.io/faqs/ Access-Control-Allow-Origin: * expires: Tue, 24 Sep 2024 13:06:08 GMT Cache-Control: max-age=600 x-proxy-cache: MISS X-GitHub-Request-Id: 8469:16F7:20C859B:24B5EFE:66F2B6E8 Accept-Ranges: bytes Age: 0 Date: Tue, 24 Sep 2024 12:56:08 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740067-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1727182568.319324,VS0,VE11 Vary: Accept-Encoding X-Fastly-Request-ID: 56bea6368c7b10f4bf0f7ed1da996e4c1388c978
2024-09-24 12:56:08 UTC	162	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	53353	185.199.108.153	443	3992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-24 12:56:08 UTC	639	OUT	GET /faqs/ HTTP/1.1 Host: metamask.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-24 12:56:08 UTC	672	IN	HTTP/1.1 200 OK Connection: close Content-Length: 200636 Server: GitHub.com Content-Type: text/html; charset=utf-8 x-origin-cache: HIT Last-Modified: Tue, 24 Sep 2024 11:50:50 GMT Access-Control-Allow-Origin: * ETag: "66f2a79a-30fbc" expires: Tue, 24 Sep 2024 13:06:08 GMT Cache-Control: max-age=600 x-proxy-cache: MISS X-GitHub-Request-Id: FA59:C797:64DB4BF:6FB9F53:66F2B6E8 Accept-Ranges: bytes Age: 0 Date: Tue, 24 Sep 2024 12:56:08 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740036-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1727182568.430792,VS0,VE15 Vary: Accept-Encoding X-Fastly-Request-ID: 1885ce67c871fc10521c67f64b82a815e5793fbc
2024-09-24 12:56:08 UTC	1378	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 65 6e 65 72 61 74 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 47 61 74 73 62 79 20 35 2e 31 32 2e 31 30 22 2f 3e 3c 6d 65 74 61 Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charSet="utf-8"/><meta http-equiv="x-ua-compatible" content="ie=edge"/><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"/><meta name="generator" content="Gatsby 5.12.10"/><meta
2024-09-24 12:56:08 UTC	1378	IN	Data Raw: 6e 61 6d 65 3d 22 69 6d 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 73 2e 63 74 66 61 73 73 65 74 73 2e 6e 65 74 2f 39 73 79 32 61 30 65 67 73 36 7a 68 2f 37 37 6d 56 69 73 4a 63 6a 38 73 4d 71 75 59 6c 57 33 69 71 37 33 2f 35 66 30 62 61 33 63 35 31 35 31 31 30 64 34 37 38 36 64 36 38 39 63 62 62 36 38 33 39 37 34 35 2f 68 6f 6d 65 5f 66 65 61 74 75 72 65 64 2e 70 6e 67 22 2f 3e 3c 6d 65 74 61 20 64 61 74 61 2d 72 65 61 63 74 2d 68 65 6c 6d 65 74 3d 22 74 72 75 65 22 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 69 6d 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 73 2e 63 74 66 61 73 73 65 74 73 2e 6e 65 74 2f 39 73 79 32 61 30 65 67 73 36 7a 68 2f 37 37 6d 56 69 73 4a 63 6a 38 73 4d 71 Data Ascii: name="image" content="https://images.ctfassets.net/9sy2a0egs6zh/77mVisJcj8sMquYlW3iq73/5f0ba3c515110d4786d689cbb6839745/home_featured.png"/><meta data-react-helmet="true" property="og:image" content="https://images.ctfassets.net/9sy2a0egs6zh/77mVisJcj8sMq
2024-09-24 12:56:08 UTC	1378	IN	Data Raw: 6e 61 63 6f 2c 41 6e 64 61 6c 65 20 4d 6f 6e 6f 2c 55 62 75 6e 74 75 20 4d 6f 6e 6f 2c 6d 6f 6e 6f 73 70 61 63 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 3b 2d 77 65 62 6b 69 74 2d 68 79 70 68 65 6e 73 3a 6e 6f 6e 65 3b 68 79 70 68 65 6e 73 3a 6e 6f 6e 65 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 3b 74 61 62 2d 73 69 7a 65 3a 34 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 74 65 78 74 2d 73 68 61 64 6f 77 3a 30 20 31 70 78 20 23 66 66 66 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 70 72 65 3b 77 6f 72 64 2d 62 72 65 61 6b 3a 6e 6f 72 6d 61 6c 3b 77 6f 72 64 2d 73 70 61 63 69 6e 67 3a 6e 6f 72 6d 61 6c 7d 63 6f 64 65 5b 63 6c 61 73 73 2a 3d 6c 61 6e 67 75 61 67 65 2d 5d 20 3a 3a 73 65 6c 65 63 74 69 6f 6e 2c 63 6f 64 65 5b 63 6c 61 73 73 2a 3d 6c Data Ascii: naco,Andale Mono,Ubuntu Mono,monospace;font-size:1em;-webkit-hyphens:none;hyphens:none;line-height:1.5;tab-size:4;text-align:left;text-shadow:0 1px #fff;white-space:pre;word-break:normal;word-spacing:normal}code[class=language-] ::selection,code[class=l
2024-09-24 12:56:08 UTC	1378	IN	Data Raw: 73 74 79 6c 65 3a 69 74 61 6c 69 63 7d 2e 74 6f 6b 65 6e 2e 65 6e 74 69 74 79 7b 63 75 72 73 6f 72 3a 68 65 6c 70 7d 70 72 65 5b 63 6c 61 73 73 2a 3d 6c 61 6e 67 75 61 67 65 2d 5d 2e 6c 69 6e 65 2d 6e 75 6d 62 65 72 73 7b 63 6f 75 6e 74 65 72 2d 72 65 73 65 74 3a 6c 69 6e 65 6e 75 6d 62 65 72 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 2e 38 65 6d 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 70 72 65 5b 63 6c 61 73 73 2a 3d 6c 61 6e 67 75 61 67 65 2d 5d 2e 6c 69 6e 65 2d 6e 75 6d 62 65 72 73 3e 63 6f 64 65 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 69 6e 68 65 72 69 74 7d 2e 6c 69 6e 65 2d 6e 75 6d 62 65 72 73 20 2e 6c 69 6e 65 2d 6e 75 6d 62 65 72 73 2d 72 6f 77 73 7b 62 6f 72 64 65 72 2d 72 Data Ascii: style:italic}.token.entity{cursor:help}pre[class=language-].line-numbers{counter-reset:linenumber;padding-left:3.8em;position:relative}pre[class=language-].line-numbers>code{position:relative;white-space:inherit}.line-numbers .line-numbers-rows{border-r
2024-09-24 12:56:08 UTC	1378	IN	Data Raw: 79 3a 6f 6c 64 2d 69 63 6f 6e 73 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 22 64 61 74 61 3a 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 66 6f 6e 74 2d 74 74 66 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3b 62 61 73 65 36 34 2c 41 41 45 41 41 41 41 4c 41 49 41 41 41 77 41 77 54 31 4d 76 4d 67 38 53 42 69 55 41 41 41 43 38 41 41 41 41 59 47 4e 74 59 58 44 70 50 2b 61 34 41 41 41 42 48 41 41 41 41 46 78 6e 59 58 4e 77 41 41 41 41 45 41 41 41 41 58 67 41 41 41 41 49 5a 32 78 35 5a 6d 68 53 32 58 45 41 41 41 47 41 41 41 41 44 48 47 68 6c 59 57 51 54 46 77 33 48 41 41 41 45 6e 41 41 41 41 44 5a 6f 61 47 56 68 43 58 59 46 67 51 41 41 42 4e 51 41 41 41 41 6b 61 47 31 30 65 43 65 Data Ascii: y:old-icons;font-style:normal;font-weight:400;src:url("data:application/x-font-ttf;charset=utf-8;base64,AAEAAAALAIAAAwAwT1MvMg8SBiUAAAC8AAAAYGNtYXDpP+a4AAABHAAAAFxnYXNwAAAAEAAAAXgAAAAIZ2x5ZmhS2XEAAAGAAAADHGhlYWQTFw3HAAAEnAAAADZoaGVhCXYFgQAABNQAAAAkaG10eCe
2024-09-24 12:56:08 UTC	1378	IN	Data Raw: 51 33 50 67 45 33 4e 6a 4d 78 46 53 49 48 44 67 45 48 42 68 55 78 49 77 41 6f 4b 49 74 65 58 57 70 56 53 6b 74 76 49 43 46 6d 41 63 42 71 58 56 36 4c 4b 43 68 6d 49 53 42 76 53 30 70 56 41 41 41 41 41 67 41 41 2f 38 41 46 74 67 50 41 41 44 49 41 4f 67 41 41 41 52 59 58 48 67 45 58 46 68 55 55 42 77 34 42 42 77 59 48 49 78 55 68 49 69 63 75 41 53 63 6d 4e 54 51 33 50 67 45 33 4e 6a 4d 78 4f 41 45 78 4e 44 63 2b 41 54 63 32 4d 7a 49 58 48 67 45 58 46 68 63 56 41 54 4d 4a 41 54 4d 56 4d 7a 55 45 6a 44 38 33 4e 6c 41 58 46 78 59 58 54 6a 55 31 50 51 4c 38 6b 7a 30 31 4e 6b 38 58 46 78 63 58 54 7a 59 31 50 53 49 6a 64 31 42 51 57 6c 4a 4a 53 58 49 6e 4a 77 33 2b 6d 64 76 2b 32 2f 37 63 32 35 4d 43 55 51 59 63 48 46 67 35 4f 55 41 2f 4f 44 6c 58 48 42 77 49 41 Data Ascii: Q3PgE3NjMxFSIHDgEHBhUxIwAoKIteXWpVSktvICFmAcBqXV6LKChmISBvS0pVAAAAAgAA/8AFtgPAADIAOgAAARYXHgEXFhUUBw4BBwYHIxUhIicuAScmNTQ3PgE3NjMxOAExNDc+ATc2MzIXHgEXFhcVATMJATMVMzUEjD83NlAXFxYXTjU1PQL8kz01Nk8XFxcXTzY1PSIjd1BQWlJJSXInJw3+mdv+2/7c25MCUQYcHFg5OUA/ODlXHBwIA
2024-09-24 12:56:08 UTC	1378	IN	Data Raw: 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 76 61 72 69 61 6e 74 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 2e 77 2d 69 63 6f 6e 2d 73 6c 69 64 65 72 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 98 80 22 7d 2e 77 2d 69 63 6f 6e 2d 73 6c 69 64 65 72 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 98 81 22 7d 2e 77 2d 69 63 6f 6e 2d 6e 61 76 2d 6d 65 6e 75 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 98 82 22 7d 2e 77 2d 69 63 6f 6e 2d 61 72 72 6f 77 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 2c 2e 77 2d 69 63 6f 6e 2d 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 3a 62 65 Data Ascii: tyle:normal;font-variant:normal;font-weight:400;line-height:1;text-transform:none}.w-icon-slider-right:before{content:""}.w-icon-slider-left:before{content:""}.w-icon-nav-menu:before{content:""}.w-icon-arrow-down:before,.w-icon-dropdown-toggle:be
2024-09-24 12:56:08 UTC	1378	IN	Data Raw: 73 75 70 7b 74 6f 70 3a 2d 2e 35 65 6d 7d 69 6d 67 7b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 6e 6f 6e 65 7d 73 76 67 3a 6e 6f 74 28 3a 72 6f 6f 74 29 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 63 6f 64 65 2c 6b 62 64 2c 70 72 65 2c 73 61 6d 70 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 6d 6f 6e 6f 73 70 61 63 65 2c 6d 6f 6e 6f 73 70 61 63 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 7d 66 69 67 75 72 65 7b 6d 61 72 67 69 6e 3a 31 65 6d 20 34 30 70 78 7d 68 72 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 68 65 69 67 68 74 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 2c 6f 70 74 67 72 6f 75 70 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 66 6f 6e 74 3a 69 6e 68 65 72 69 Data Ascii: sup{top:-.5em}img{border-style:none}svg:not(:root){overflow:hidden}code,kbd,pre,samp{font-family:monospace,monospace;font-size:1em}figure{margin:1em 40px}hr{box-sizing:content-box;height:0;overflow:visible}button,input,optgroup,select,textarea{font:inheri
2024-09-24 12:56:08 UTC	1378	IN	Data Raw: 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 66 6f 6e 74 3a 31 30 30 25 7d 2a 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 69 6e 68 65 72 69 74 7d 3a 62 65 66 6f 72 65 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 69 6e 68 65 72 69 74 7d 3a 61 66 74 65 72 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 69 6e 68 65 72 69 74 7d 62 6f 64 79 7b 77 6f 72 64 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 3b 2d 6d 73 2d 66 6f 6e 74 2d 66 65 61 74 75 72 65 2d 73 65 74 74 69 6e 67 73 3a 22 6b 65 72 6e 22 2c 22 6c 69 67 61 22 2c 22 63 6c 69 67 22 2c 22 63 61 6c 74 22 3b 66 6f 6e 74 2d 66 65 61 74 75 72 65 2d 73 65 74 74 69 6e 67 73 3a 22 6b 65 72 6e 22 2c 22 6c 69 67 61 22 2c 22 63 6c 69 67 22 2c 22 63 61 6c 74 22 3b 66 6f 6e 74 2d 6b 65 72 6e 69 6e 67 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 Data Ascii: ing:border-box;font:100%}*{box-sizing:inherit}:before{box-sizing:inherit}:after{box-sizing:inherit}body{word-wrap:break-word;-ms-font-feature-settings:"kern","liga","clig","calt";font-feature-settings:"kern","liga","clig","calt";font-kerning:normal;font-w
2024-09-24 12:56:08 UTC	1378	IN	Data Raw: 38 35 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 32 3b 6f 76 65 72 66 6c 6f 77 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 31 2e 34 35 72 65 6d 7d 74 61 62 6c 65 7b 62 6f 72 64 65 72 2d 63 6f 6c 6c 61 70 73 65 3a 63 6f 6c 6c 61 70 73 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 35 72 65 6d 3b 77 69 64 74 68 3a 31 30 30 25 7d 66 69 65 6c 64 73 65 74 2c 74 61 62 6c 65 7b 6d 61 72 67 69 6e 3a 30 20 30 20 31 2e 34 35 72 65 6d 3b 70 61 64 64 69 6e 67 3a 30 7d 62 6c 6f 63 6b 71 75 6f 74 65 7b 6d 61 72 67 69 6e 3a 30 20 31 2e 34 35 72 65 6d 20 31 2e 34 35 72 65 6d 3b 70 61 64 64 69 6e 67 3a 30 7d 66 6f 72 6d 2c 6e 6f 73 63 72 69 70 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 31 2e 34 35 72 65 6d 3b 70 61 Data Ascii: 85rem;line-height:1.42;overflow:auto;padding:1.45rem}table{border-collapse:collapse;font-size:1rem;line-height:1.45rem;width:100%}fieldset,table{margin:0 0 1.45rem;padding:0}blockquote{margin:0 1.45rem 1.45rem;padding:0}form,noscript{margin:0 0 1.45rem;pa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	53355	185.199.108.153	443	3992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-24 12:56:09 UTC	577	OUT	GET /fonts/EuclidCircularB-Regular-WebXL.woff2 HTTP/1.1 Host: metamask.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://metamask.io sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://metamask.io/faqs/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-24 12:56:09 UTC	634	IN	HTTP/1.1 200 OK Connection: close Content-Length: 45196 Server: GitHub.com Content-Type: font/woff2 Last-Modified: Tue, 24 Sep 2024 11:50:50 GMT Access-Control-Allow-Origin: * ETag: "66f2a79a-b08c" expires: Tue, 24 Sep 2024 12:45:13 GMT Cache-Control: max-age=600 x-proxy-cache: MISS X-GitHub-Request-Id: EE42:16B5:4AC9326:53744D9:66F2B200 Accept-Ranges: bytes Age: 0 Date: Tue, 24 Sep 2024 12:56:09 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740025-EWR X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1727182569.464884,VS0,VE44 Vary: Accept-Encoding X-Fastly-Request-ID: 14877ece7f0d2e646b7fc73b958b7483056e42f5
2024-09-24 12:56:09 UTC	1378	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 b0 8c 00 13 00 00 00 02 5a 50 00 00 b0 23 00 03 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19 46 1b 83 ec 5a 1c a2 18 14 85 45 06 60 00 8c 68 08 2a 09 82 73 11 14 0a 83 f8 78 83 b8 7e 12 e9 14 01 36 02 24 03 96 04 0b 8b 04 00 04 20 05 86 18 07 20 0c 81 49 5b 86 33 92 e1 44 ae 16 8b 37 40 b7 21 9c 67 53 f6 50 99 7d b7 84 6d 0c cc 7a 3d b7 ad 70 05 54 21 6a f0 a6 33 0a 6a 27 42 a5 bf 6d a5 41 b3 ff ff ff ff df 91 2c 44 ce fb 0b f7 9f b4 4d b4 a8 02 58 cd 06 c9 78 e4 92 bb 5e 83 a9 b9 35 12 c1 76 ee 3e 12 79 aa 82 4f 95 b9 3b f6 82 14 08 c1 31 39 3a 23 96 3b b8 95 39 1c b3 9d 66 38 2a 5c 6a 1e a7 e5 2c 17 ad 56 ec 02 b1 8a c2 3d bb 5f d1 48 43 4b 9b 1c c3 dc 4c b0 ab e8 ad 38 95 68 13 2d 4a 98 d5 e3 8e a3 Data Ascii: wOF2ZP#BFZE`hsx~6$ I[3D7@!gSP}mz=pT!j3j'BmA,DMXx^5v>yO;19:#;9f8\j,V=_HCKL8h-J
2024-09-24 12:56:09 UTC	1378	IN	Data Raw: bb a7 94 7a cd e1 94 e3 fc 3f 7f 46 fa 7f 66 40 33 92 80 99 31 5e 4b 2e 0f 81 71 90 00 2f 42 5b 84 90 37 82 6d 2e 1d 52 6a 9f b1 b0 8d b6 4a 62 37 6e 29 68 3b 7b 4a 6b ed 54 eb e1 94 f3 71 cb e1 7e 88 ff b9 f7 9b 50 99 75 6e 85 af 56 bc 76 b7 66 2b a1 b4 aa 40 bd dc 73 92 9f 9f 42 2b e3 91 06 e3 30 92 e1 6a 59 d3 37 bd fd 0f b3 a4 ec 42 34 8e ae 53 8f 1a c8 1a 8c d9 f9 eb bd ab 67 af c9 1f 57 11 72 ee 86 ec 86 90 25 46 25 07 8e c2 3a fe 6f 69 19 dd 5f ad 59 19 c6 e1 d6 13 22 1a 6d c0 36 80 26 6c 54 5d bf e5 9a 52 a9 36 b4 67 9f b6 5f 3b a5 b6 9c e4 0b b9 ea f7 97 a6 93 e6 e6 74 21 47 ea 67 74 89 92 7b 87 81 e0 d0 63 ec 20 ad 64 6a 73 0c 3f a6 96 75 4e a0 a1 9f fa 4d f6 3d be 67 d2 6a 3f 4a 4d 07 9b 8a 84 30 84 10 86 10 44 44 16 b1 61 db be df 67 b9 28 43 Data Ascii: z?Ff@31^K.q/B[7m.RjJb7n)h;{JkTq~PunVvf+@sB+0jY7B4SgWr%F%:oi_Y"m6&lT]R6g_;t!Ggt{c djs?uNM=gj?JM0DDag(C
2024-09-24 12:56:09 UTC	1378	IN	Data Raw: b4 5b fc 6c df da f3 2f ec 49 75 af 41 8c 68 99 0a 4f d5 a9 eb 5c 3d 7a cf d7 cf e8 42 68 c7 45 f4 0c 17 33 a9 63 2e 8c 75 1e 5c 1d 0b 90 a8 85 ec 1a 2d e6 e9 58 c2 6b 7c a9 49 4d 05 3c f9 26 6d 5c 09 9b b1 39 a5 6e 9e 46 65 6e da 33 28 6b b3 b6 ac ec 6d dd b6 da 6e e7 76 d5 61 ff 6c 5f b9 db b3 83 75 da 01 8d ca df a1 7f 5d 9d 21 3c 80 0c 48 ca e9 07 26 ce 88 ab 82 97 a1 ca 50 8b 8b 4c d6 8a ea 4f 1a 38 94 4e 52 02 64 35 a8 59 44 52 75 20 2d b9 fc dc 92 f6 f2 fc 8e 4b 28 96 5c 26 e3 17 08 08 69 59 c3 a2 bb c2 83 d0 13 d2 27 dd bd d8 f1 61 41 9a b6 f5 ba 76 d4 e3 3e 46 15 8c 6e d7 98 8e 0f b4 35 25 12 4a ce e8 64 c6 8f df 1e 3f 14 ad de 79 18 4c 5c 4a 59 9a 22 a3 28 4b 96 67 29 80 1d ca aa 2a 0d bb 62 b5 ab 26 6a d5 b5 cd d6 05 7a 46 fd b4 fb bf 05 77 07 Data Ascii: [l/IuAhO\=zBhE3c.u\-Xk\|IM<&m\9nFen3(kmnval_u]!<H&PLO8NRd5YDRu -K(\&iY'aAv>Fn5%Jd?yL\JY"(Kg)*b&jzFw
2024-09-24 12:56:09 UTC	1378	IN	Data Raw: 52 ca 28 37 15 21 5f c0 0b 79 11 2f e6 25 bc 94 97 99 97 c3 36 d0 48 13 b3 99 c3 5c e6 99 f9 a0 05 2c 34 8b 42 be 8b 77 fb bf 13 7b 93 da e7 e8 0b c3 1d c8 ff 88 fd b1 38 91 e0 9c 83 3e 2f fa 02 5c 5c fc 90 b9 25 f2 a5 c1 ba e3 eb 89 63 95 f0 ef c0 d1 41 4c 34 10 66 f5 49 e0 fa 35 da 8a 75 f6 74 cd d6 b3 d5 8f 57 f9 e9 ba e2 ac 65 5a 54 d6 fc e8 76 8c 69 65 ec 38 ab aa b1 55 22 ab d1 8e d7 aa de 89 79 4e eb 6b 27 2c 62 28 40 02 81 22 91 64 c4 54 dd 63 12 b4 e9 6c b0 14 37 69 6d 19 66 50 d1 67 1d 10 45 7c 98 c2 4f 55 09 0b dc a8 4a 37 ab 31 84 61 0d 97 a2 ef ca 57 2b af 80 51 e6 14 fa c7 ea bf f6 57 0d 45 13 e3 dc fd 87 eb 45 b5 30 1a 8e 69 7c ac 3f 1b c8 1e 47 aa d2 ac 1a f7 f1 fa d5 33 db f9 37 fb 61 e4 bd a6 84 4f a6 b5 65 ea b4 74 a5 ea b9 67 99 40 54 Data Ascii: R(7!_y/%6H\,4Bw{8>/\\%cAL4fI5utWeZTvie8U"yNk',b(@"dTcl7imfPgE\|OUJ71aW+QWEE0i\|?G37aOetg@T
2024-09-24 12:56:09 UTC	1378	IN	Data Raw: f4 3e fb 14 9e 4f be 38 1b 6b 38 9b 6b 04 4d 78 93 e6 d6 26 9d 92 4d 06 53 92 a9 9f 44 74 fd 35 6a b6 bc 75 2a 36 e9 a4 e0 87 41 8c 44 d4 57 f8 81 e0 9d 36 b2 d3 47 ce e6 e0 a1 fa 13 13 01 22 a3 df 30 62 c2 1c b6 e4 ac 9b ee c7 3f 76 2a 92 7c 0e 8d df b7 cf 03 a9 20 f2 e5 57 fd 0e 72 d4 b5 c5 c3 ab 03 bd ca b5 11 db 55 9d df b4 fe 5b 7d 26 33 8b d9 cc a1 99 79 66 d9 c6 72 56 b0 92 55 ac 36 6b 1f ae 61 2d eb 58 bf 2c 30 94 26 6d 27 76 b0 93 5d ec 36 c7 e8 47 38 ca 31 ce 70 96 73 9c e7 21 8f 78 cc 93 e4 e9 76 a6 2c 86 34 8a 25 ce c4 93 43 39 f8 e1 2f 6e a8 14 28 15 08 10 4a 04 02 b0 62 23 02 3b 91 f9 3c 55 df 68 f7 2a fe 5a cd f7 ea b6 f4 0e 23 dc c2 3b 22 88 24 8a 68 62 88 25 8e 78 12 f2 89 84 da 09 dd 9d e4 14 a7 fd 73 7a 3b 8f df 05 97 5c 74 d0 89 56 01 Data Ascii: >O8k8kMx&MSDt5ju6ADW6G"0b?v\| WrU[}&3yfrVU6ka-X,0&m'v]6G81ps!xv,4%C9/n(Jb#;<Uh*Z#;"$hb%xsz;\tV
2024-09-24 12:56:09 UTC	1378	IN	Data Raw: 29 61 51 11 88 12 53 7c a5 84 48 9a 14 bf b4 03 68 64 21 5f 6d bb 96 a5 aa ce a8 2d ba f9 5e dd a8 67 fa 1a cc 35 16 13 a6 cc dc 9c df 02 2d ed af a4 1c cb 3b 69 e1 53 11 67 6a b3 34 66 17 1c b8 46 a0 b1 c8 4f 88 9f e4 3a e5 f2 0d 7b 07 10 6c 65 ba 9f a5 3b c7 71 7e 54 49 fd 65 fe 6b 10 ea e0 b0 af b5 70 fc 45 81 09 8b 58 ff bd 70 a5 22 ca a5 98 94 aa be 11 2e de 8a 78 14 f8 b0 37 8e 7c 20 f9 0c 37 40 f5 13 e5 0f cd 7f 24 e4 57 5f 58 01 76 94 58 48 c2 3a 20 bd 11 83 0a 63 0d 33 89 32 03 58 34 58 b9 d9 54 d8 cb 39 24 39 23 17 ce 0d e0 41 5e e4 eb 79 bf 96 80 b1 a0 42 67 08 bb 88 a2 a8 15 93 89 eb 4a 90 34 29 21 69 01 38 48 54 16 e5 1b 6d d7 01 eb 42 4f 7d 86 0f 45 8d 00 c6 3a 26 c6 a6 2a e6 1a 16 d1 92 fc 91 80 63 25 27 93 53 29 3e ac 32 4a b7 a1 bd 13 38 Data Ascii: )aQS\|Hhd!_m-^g5-;iSgj4fFO:{le;q~TIekpEXp".x7\| 7@$W_XvXH: c32X4XT9$9#A^yBgJ4)!i8HTmBO}E:&*c%'S)>2J8
2024-09-24 12:56:09 UTC	1378	IN	Data Raw: 23 c8 42 5e b9 70 d9 f4 74 2f 2c c2 5c b1 de 55 ef 17 75 8b 42 77 58 ec 4f b6 1d ab 63 36 3a 1a 26 c0 05 cf 16 2c 02 9b 57 0e 5b e7 6e 9e 8e e8 6d 22 5a 31 20 ab 1b ba 96 14 7a d7 72 c0 15 60 b1 e5 90 c8 1a f2 6c ae 57 a7 59 24 0a 40 94 ac 89 6c 8d ea 60 c8 5f 1a ed 0a aa 1e 50 45 5c 66 e7 f1 20 0c 89 48 1a 04 00 66 ac ef 38 d8 34 1c 0d 64 46 27 8d 24 e8 dd d5 61 97 59 e8 41 2d 25 87 3d 0a 76 61 72 05 cf ba db 08 b0 04 f5 e2 47 30 fc b8 ef 65 1f af 9c fd 25 0d 26 7e 20 a9 2b 77 52 ce a7 55 af 21 58 4d 0a 5c c7 62 7d 80 2d ee 44 21 c0 34 2c 25 10 e7 8c 56 16 53 0a 38 26 86 99 7c 4d 41 98 0d d9 66 8c 1a 4e cb 31 97 88 e4 56 38 5e 57 ec 29 08 da 2e 80 4e d0 6f 9c 45 7a 34 b4 7e ce 99 9f 29 31 18 4c 97 14 46 42 ba c8 fe b7 f0 50 c0 b6 3c a9 70 a3 83 71 39 d0 Data Ascii: #B^pt/,\UuBwXOc6:&,W[nm"Z1 zr`lWY$@l`_PE\f Hf84dF'$aYA-%=varG0e%&~ +wRU!XM\b}-D!4,%VS8&\|MAfN1V8^W).NoEz4~)1LFBP<pq9
2024-09-24 12:56:09 UTC	1378	IN	Data Raw: 02 4b 60 2b f7 87 89 ba 98 58 f1 7e 9a 55 b4 91 8c 2e 13 ae d3 01 3e bf 31 3e 14 47 c0 19 32 42 39 2b 30 f5 4c c8 e5 b2 35 a2 64 83 cd b3 19 ec ed 96 02 9e 7a 29 46 e0 71 ed d5 dc 84 a6 54 f7 41 d5 37 5e 46 33 27 da 02 7c f2 dc 5f 60 0a fb 2b e5 4f bf f3 c3 d1 60 d6 7f aa f3 86 07 87 fc f8 fd 00 8e ab 55 14 1f 86 04 4b 66 a1 67 6a 93 da e1 61 63 85 ee bf 49 0b 0c 6f ed 35 3a 4c 17 6f 36 0e c1 f1 0e 85 c2 29 ce 9e eb 9b 8c 47 eb 8d 54 91 9e e3 5f 45 66 26 9e fc c9 9f 89 1e a9 d6 b6 bb 0a c0 12 fc 63 82 dc 20 37 a5 e4 ab 6a d6 4b cf da 48 29 ee 6d cd 50 23 56 2c 09 42 c3 11 6a 3f d0 99 d1 29 3d 1e b0 22 32 08 55 e5 14 c1 84 13 28 d9 77 0b 27 3b af 38 a6 40 6d c2 82 44 8f 6d a7 9a 62 4a 71 45 44 bc 96 13 67 af ba f1 f2 9a 78 71 3d b1 f2 3d 4b 29 fb 11 6e b4 Data Ascii: K`+X~U.>1>G2B9+0L5dz)FqTA7^F3'\|_`+O`UKfgjacIo5:Lo6)GT_Ef&c 7jKH)mP#V,Bj?)="2U(w';8@mDmbJqEDgxq==K)n
2024-09-24 12:56:09 UTC	1378	IN	Data Raw: 8d 67 00 88 6b ee 07 e2 c2 f9 50 25 29 de 0b e4 2d 79 94 94 aa 43 5e 5c 6a 15 77 2b 98 79 52 cf b1 a7 12 22 0f 5e 80 6b 23 cb 55 6a 5e 37 38 c7 ef 98 49 01 10 1a 53 ba e7 0c ef 52 c0 cd f2 9f af 2b de 63 f7 77 30 ba ad 5c 44 dd 95 6f de 78 e9 77 bb ab 57 0e 46 bf ef 93 3f fe 79 2d b8 24 fc 26 ff ee eb 4c 5a 10 46 83 d7 71 c9 e6 96 62 62 93 ad b0 fb 4e f9 e2 a1 7c a2 0c 51 f4 f7 b6 b5 2a 3e 10 f1 e1 ee df a0 a4 bf bf 87 8b 38 9f 84 f6 0f 06 3b 71 76 e3 de bb 38 c6 66 50 4e 95 28 2d dd 81 35 44 5e 91 de 82 f6 a2 a8 81 27 6e 12 17 cb 51 06 9f 3b d9 a6 9e 99 15 77 bf c6 de 70 8e c4 4d c0 62 b0 72 1a 8e 04 9d 27 cd c4 0f 04 85 7b f5 71 25 3b 1c cd d5 5a 36 72 e5 33 04 5e 29 fe be 39 03 79 e5 e4 d0 21 8b e4 2a 0e 4f 21 e3 1c ed 99 64 b3 b9 e2 78 cc c4 55 88 13 Data Ascii: gkP%)-yC^\jw+yR"^k#Uj^78ISR+cw0\DoxwWF?y-$&LZFqbbN\|Q>8;qv8fPN(-5D^'nQ;wpMbr'{q%;Z6r3^)9y!O!dxU
2024-09-24 12:56:09 UTC	1378	IN	Data Raw: bc e4 f1 55 b2 8e b0 2d 9b 49 67 b7 2e 90 52 d1 bb 97 aa f3 95 0d 30 2c 04 f7 55 fc 2b c6 f2 77 28 3c 0b d7 0f 16 ea 17 1e 79 9f 3b 14 6d 50 78 42 43 54 ac 40 99 55 14 18 b9 59 c9 fc b0 0e 26 a1 6a 3a ec 96 bc a6 b0 59 d4 e1 8f 85 d4 c0 7c b8 ac 76 c1 66 f4 b9 1b 3f 06 e6 b4 34 7b fd 7a 05 92 d1 4a b7 2a a2 d3 a5 d2 4b dd 01 4f 7e 09 e1 40 34 4a ef 65 70 99 11 7c bc 2e 31 ed 37 1a a8 1b 36 5b e9 c4 46 ef a1 66 11 a3 4a e9 3a 54 68 f3 f3 db e0 f6 2a 76 e7 ad f1 d4 9f de 43 ea e9 9e 50 d8 76 02 7b a7 5a 5b ef 9d 47 06 db 6a 7a af ac ee 06 6f 24 81 39 34 4c f0 ce 45 f1 fa c5 e9 28 2d 4e 30 cf a0 08 f1 66 86 85 ec 14 bf c5 d5 0f 1f a6 87 07 a3 9c 8c 72 62 8f b2 cb c0 6b 99 9d b7 e6 b1 b0 2c 1b 67 c3 a3 ea f2 4f 9f b2 ce 5a 77 f7 6e 5f 4f df 28 6b 77 a5 67 98 Data Ascii: U-Ig.R0,U+w(<y;mPxBCT@UY&j:Y\|vf?4{zJKO~@4Jep\|.176[FfJ:ThvCPv{Z[Gjzo$94LE(-N0frbk,gOZwn_O(kwg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	53356	185.199.108.153	443	3992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-24 12:56:09 UTC	574	OUT	GET /fonts/EuclidCircularB-Bold-WebXL.woff2 HTTP/1.1 Host: metamask.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://metamask.io sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://metamask.io/faqs/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-24 12:56:09 UTC	655	IN	HTTP/1.1 200 OK Connection: close Content-Length: 44544 Server: GitHub.com Content-Type: font/woff2 x-origin-cache: HIT Last-Modified: Tue, 24 Sep 2024 11:50:50 GMT Access-Control-Allow-Origin: * ETag: "66f2a79a-ae00" expires: Tue, 24 Sep 2024 12:45:13 GMT Cache-Control: max-age=600 x-proxy-cache: MISS X-GitHub-Request-Id: 4AB4:16B5:1FED4CE:2397CC6:66F2B1FF Accept-Ranges: bytes Age: 0 Date: Tue, 24 Sep 2024 12:56:09 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740040-EWR X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1727182569.464880,VS0,VE12 Vary: Accept-Encoding X-Fastly-Request-ID: ac74f6ebcf1e993b8a4e1ebd98631b02fb82ec56
2024-09-24 12:56:09 UTC	1378	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 ae 00 00 13 00 00 00 02 4d 90 00 00 ad 97 00 03 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19 46 1b 83 d6 34 1c a2 18 14 85 45 06 60 00 8d 28 08 28 09 82 73 11 14 0a 83 f5 38 83 b6 33 12 e9 14 01 36 02 24 03 96 04 0b 8b 04 00 04 20 05 86 18 07 20 0c 81 37 5b 41 27 92 03 69 87 1f a1 8a da 6e d3 6d 08 27 59 a6 7a ab 19 5a 21 3b 5f 03 b7 0d b8 6e 4f 24 ee 50 35 6c 1b 0a 75 83 ee 00 c1 aa 6e da 96 fd ff ff ff ff af 49 1a 32 66 97 14 73 6d 81 56 41 40 44 9d 9b 6e ef ab 49 c4 63 ca 6d d7 43 e9 eb 9e 1c 22 d3 e0 8d d7 c2 64 b2 0a b2 3d b4 e3 d1 22 a4 0e 1d 3c 99 dc 5c c9 b2 b9 45 75 d3 bc b4 a9 b7 48 da 80 d3 6a e9 40 5c e8 e0 e7 72 26 31 8e db 78 81 9c ab 9f 7a 4c 36 94 a0 eb 6d 84 3d aa b1 4e 6c 3a 7a 60 8b Data Ascii: wOF2MBF4E`((s836$ 7[A'inm'YzZ!;_nO$P5lunI2fsmVA@DnIcmC"d="<\EuHj@\r&1xzL6m=Nl:z`
2024-09-24 12:56:09 UTC	1378	IN	Data Raw: f2 9b cb 2e 4b 37 bc d0 a7 f1 5e 12 5e 94 1c 7c d1 8d 17 1e 7b a2 03 60 1d 61 56 00 36 d9 ae 6d d6 c7 13 fc f0 fc 67 fa 6a bb 97 e0 28 64 1c 56 ea fe 28 38 94 28 3a 87 54 96 8b c1 32 3c 8e 87 14 94 87 6b 28 e4 d1 1e 9c ef e1 0a 87 1c 46 7c a5 5c da ac 5c a6 50 b9 d4 10 4a ab bc 86 93 62 2a ed a6 0b 9d 8b a6 f2 fc db d4 6a b5 80 d4 1d d1 eb b3 04 45 77 1d 70 d1 e8 d3 8c ff 8c 46 5a 8d 46 f2 49 32 ac 64 3b b6 64 27 1b d9 21 07 ff 9f f9 1a 8d c0 98 b0 bd 79 76 96 30 b0 04 0e b1 77 0f a9 28 ef 7a 02 68 8a ab 14 ab f1 c5 c7 5c 31 15 d5 bd fb 5f 53 ad 76 81 d1 98 5b 86 54 eb a9 ba a6 13 29 fb 5e 7f 45 77 dd 15 a5 88 01 40 43 5f e0 38 0c b5 8f e6 72 43 d6 d1 dc 18 81 8f 3f e4 24 5a 89 9b 73 75 b1 8a a9 be b2 b9 dc 96 7c ae ec 5b 7b 9b e5 36 b7 d0 d5 0a 77 4a 5d Data Ascii: .K7^^\|{`aV6mgj(dV(8(:T2<k(F\|\\PJb*jEwpFZFI2d;d'!yv0w(zh\1_Sv[T)^Ew@C_8rC?$Zsu\|[{6wJ]
2024-09-24 12:56:09 UTC	1378	IN	Data Raw: 2e 75 d9 0d 57 0b 6e b9 d1 4d b7 dd ee ea ae bb dd f3 1f 0f 60 d0 b3 60 c8 8b 5e ba ef 75 a5 cf bd ed a3 2f 7c ee 77 df fa 1e 7e f2 b3 f4 b3 bf 03 f8 6d c6 84 85 cf 47 ac 8c 21 a3 14 a2 e1 96 10 c4 8e 38 2d ec 84 33 f8 3c 01 e7 56 3e 19 e7 89 7c 0a ae 10 3f 4a 52 4c 94 c2 24 69 0c 48 0f 93 65 c9 19 54 14 53 95 30 cd 0c a6 2b 1f ce 50 61 d6 4c 75 e6 ce b3 50 e3 22 4d 85 a5 9a b5 2c d3 d6 70 3f 5d ba f7 b7 46 ef c1 fa 6d 5e 67 67 7f b4 c1 5e 83 47 1a b2 ff 68 23 0e 6c cc 31 50 23 d9 0c e8 3c 6e 49 fc e5 65 b3 aa cd 55 47 a9 55 aa 8e b1 9d 23 1f 7b cc d9 a3 6c 1f 13 e4 60 5f 64 a0 76 08 59 d5 76 e8 4f 44 e3 4a da 4e eb 36 4c 6d 21 63 f7 38 38 dd 01 29 c0 74 9a a1 5b 44 8f f0 c2 ca 47 f9 33 6d fa 58 e3 8e 67 3f 91 9d 92 f0 59 a4 02 c8 06 c4 b9 24 a9 64 18 ea Data Ascii: .uWnM``^u/\|w~mG!8-3<V>\|?JRL$iHeTS0+PaLuP"M,p?]Fm^gg^Gh#l1P#<nIeUGU#{l`_dvYvODJN6Lm!c88)t[DG3mXg?Y$d
2024-09-24 12:56:09 UTC	1378	IN	Data Raw: 94 11 14 87 0f 01 5e a0 27 24 32 ab 14 a8 6c ec dc b8 f3 e0 a9 df 72 c1 e2 25 91 4c 0a a9 92 d6 92 74 c8 d0 99 d0 78 5a 68 a5 4d b7 97 94 4b 80 3c 5d 3c ad 84 f1 4c d0 e1 b4 52 ca 74 39 34 05 35 1d 45 3f 43 fa e2 2e 09 fa a7 3e 6b 7c 6a 4e d0 a2 49 bf 8e fa 5f d2 6f f8 ed c5 09 ce 3c 9a f9 b4 fb 87 b7 ff fe c9 f0 75 a3 f5 e0 8d 22 1a 8d 19 8b c0 6a 8f bd 3d a7 93 4f d7 aa 6e 79 7a a4 3a 7c 5d df 9d f4 d8 85 ca 67 92 3e 4a f6 68 45 63 62 de 26 63 4d a1 f8 d4 5a 69 b7 57 2c b2 59 ba a0 21 30 08 21 90 48 d1 42 ae 27 b9 84 da 98 d6 ce 28 64 01 54 d7 b4 19 74 28 ed 7f 8d 21 c2 18 03 25 cb c3 0a 12 80 79 e0 0c a3 84 ab 1e b4 fe 55 7b 43 c7 f3 29 a7 8e 67 33 43 ef 06 7b 96 38 23 d7 65 e5 00 67 39 db ca 9b d4 14 8c 3f 4e 5b 6b 86 ae 37 e7 e8 c3 28 15 48 b4 8f 6d Data Ascii: ^'$2lr%LtxZhMK<]<LRt945E?C.>k\|jNI_o<u"j=Onyz:\|]g>JhEcb&cMZiW,Y!0!HB'(dTt(!%yU{C)g3C{8#eg9?N[k7(Hm
2024-09-24 12:56:09 UTC	1378	IN	Data Raw: cd 4e d1 2f aa 75 c6 50 c7 d8 f0 d3 52 3f 8b e1 e2 97 49 85 b0 14 e3 47 e7 ad 4a b0 f5 a7 47 11 a9 43 64 93 40 e4 35 98 9a 32 4b 3b 82 e2 49 21 2d 2d ac 6c 5c 27 8a 9d 92 fc f8 86 26 74 aa a2 6b 13 91 ca 5a 1e 32 5d 55 59 f5 9b 9b d4 99 9a c6 26 77 a7 b6 47 53 aa a9 eb c2 d4 1e 4c 4b f9 86 b8 92 ee 2d ac 61 51 91 5a c2 86 d0 d3 e2 99 f1 37 9e a9 e7 e0 79 5e d4 3b 97 ed 62 37 7b d8 cb be 5d 44 1f 3e 0e 7d 02 c7 39 c1 39 ce 73 81 8b 7c c9 57 7c cd 37 c5 b7 5f 57 af a0 1c 09 85 0c f9 68 e4 45 da 46 a3 83 fe 3e c3 d3 71 79 8b 0f 9b 01 33 99 c5 6c e6 30 97 79 cc 67 01 0b 47 17 1d f7 79 bb 2f 7c e5 5b 16 27 fe 2c f7 3b 84 f7 58 a4 15 50 27 7c f8 f9 79 f9 62 11 40 32 2f 64 5c 96 6b 11 d3 4a 7c 0a b9 14 0e f0 53 ac c3 32 b3 a3 90 71 ae 41 4c 56 e1 50 d5 6a de a7 Data Ascii: N/uPR?IGJGCd@52K;I!--l\'&tkZ2]UY&wGSLK-aQZ7y^;b7{]D>}99s\|W\|7_WhEF>qy3l0ygGy/\|[',;XP'\|yb@2/d\kJ\|S2qALVPj
2024-09-24 12:56:09 UTC	1378	IN	Data Raw: 03 83 26 e4 19 55 55 77 fa a7 01 63 2a 3b 9e 4b 17 12 53 76 9f 63 b1 3b 88 40 56 77 75 11 b9 d4 c4 5e c7 5a 70 e7 ab a6 01 8d c5 e5 c1 62 34 0c 74 2c af 7d 83 66 61 ba bb 37 36 0c ee 5a db 76 06 dc b4 b3 35 2f 58 cd 81 0d b0 4a 98 2d a9 7a 2c 09 8c 48 25 70 89 31 83 f0 9d b2 a0 54 4d 0f bf 2c a5 6e 8d 08 19 31 98 d1 2e 6e 5c 22 cd 88 d0 29 20 74 5e 6b 23 25 74 6c d3 1b 3b 74 49 bb 83 73 e6 91 3b 64 73 09 7b ea f6 3a 47 0b 27 41 02 1f 15 94 1a 09 e9 70 ac c5 9e 8a 3d 15 fb b8 52 32 da 45 b1 74 7c df 4b ba 79 02 7b e7 45 e4 c7 87 05 f3 00 53 10 63 77 ed 4e ac 16 d5 08 9a 1d 1a 84 4b f7 1f 39 b8 17 14 7c dc 7b b7 1b 1a 17 41 1e 88 f2 b4 28 7b 05 b1 e7 1f 64 ed e2 b4 b4 da 24 94 14 03 ef 67 4d 51 e7 91 56 55 d8 19 7a fe 6b 2d cc 47 d7 0f 19 2d 44 f2 66 1b 57 Data Ascii: &UUwc*;KSvc;@Vwu^Zpb4t,}fa76Zv5/XJ-z,H%p1TM,n1.n\") t^k#%tl;tIs;ds{:G'Ap=R2Et\|Ky{EScwNK9\|{A({d$gMQVUzk-G-DfW
2024-09-24 12:56:09 UTC	1378	IN	Data Raw: 9c 11 b2 3c 33 37 86 3c dd f2 a1 80 c2 b4 c8 6a c5 86 95 f4 cb 0c 93 52 74 b9 4e 35 32 87 b0 c0 39 ad 25 2c b2 d5 62 97 d6 9c b6 29 66 71 da ab 23 b2 ee 48 f6 92 f6 59 61 b3 af 08 b2 a3 96 de b6 0c 14 d9 d5 23 07 4d ef 31 68 af 0c 22 43 47 fa a8 23 86 e5 a0 f2 87 6c 70 58 ab 23 0e 3b 1a f7 1c 33 4d db 24 5b 1b 21 43 81 b9 fb da 62 33 31 71 ad b1 23 0c 5e ea 5e 15 ce 21 20 05 b1 94 f9 8d 54 51 4a ab 33 ea b9 f0 a7 90 dd 68 d4 44 5e c8 57 a1 6d 57 6d b0 0f 35 e9 2c 7a 3f 79 4e 19 79 8b db 57 85 41 c8 4c 49 99 62 7e 28 9a 05 c8 1a 9b d0 07 f0 96 dc 5c 53 cf 5c a8 00 4e a0 87 03 af ea 66 b7 70 d7 cb 39 97 6a c0 2a 38 23 4f d8 a5 6c 44 46 15 e1 12 99 39 24 33 e7 ea 54 49 8a b1 c4 cc 66 4d 57 a1 c7 c5 23 4c 1c 87 c5 7d bc 43 b2 41 b0 1e 3d 7f 46 22 ff fe 3f 67 Data Ascii: <37<jRtN529%,b)fq#HYa#M1h"CG#lpX#;3M$[!Cb31q#^^! TQJ3hD^WmWm5,z?yNyWALIb~(\S\Nfp9j*8#OlDF9$3TIfMW#L}CA=F"?g
2024-09-24 12:56:09 UTC	1378	IN	Data Raw: 72 ed ec 94 8c 44 92 53 95 8a 6a d1 c5 af 7a f4 2d 68 7d 44 2c c6 cf 00 a0 b9 6e c7 94 a9 1d a2 d3 c8 24 be 9c 3a 54 46 f7 81 f4 88 70 9d 52 ca 8c 36 8e 2a 76 f3 d5 78 b6 b8 84 82 e3 02 3b 54 c9 85 ee 9a d5 fc c3 35 89 d7 cf 5f 81 71 02 18 f1 70 47 34 51 43 77 8d 56 63 fa bc b6 f1 46 53 8e 06 cf 0b c2 68 1c 52 6f a1 24 5f a5 ca c5 54 a8 4f 71 41 7f 52 42 ff cb b4 7a 5b ea 1f 9e 84 45 a0 91 15 6a c8 f7 84 d9 10 24 59 35 05 be 7c 7f 3d a8 1d 38 ed 55 2b 24 36 2d 70 49 13 53 44 d5 76 fa 50 33 30 63 9c 61 28 4a 5e 5d 84 a7 cb 88 83 9e d2 a0 64 ea d3 1a 4d 06 bd 9f 81 e3 a3 2f d9 b7 56 a1 14 50 a0 b4 b6 3b db 4a a3 d6 92 9a 44 87 6a 07 ac e0 1d a0 6a d3 ce fb cf d2 53 7f 5a 92 d4 8e e5 1b 31 16 d6 80 45 c6 e3 6d 08 41 b8 8a 40 a3 13 8e 08 16 4f e7 25 08 75 11 Data Ascii: rDSjz-h}D,n$:TFpR6*vx;T5_qpG4QCwVcFShRo$_TOqARBz[Ej$Y5\|=8U+$6-pISDvP30ca(J^]dM/VP;JDjjSZ1EmA@O%u
2024-09-24 12:56:09 UTC	1378	IN	Data Raw: ef 2f a6 8b f4 88 a5 1d 49 8a 33 c8 c5 99 91 87 6e 85 09 db 33 29 6b 11 8f 64 78 2a bd 68 fe d9 54 12 33 67 81 f3 6a c9 e4 14 92 2f d6 e2 08 8a d6 b3 90 c5 0a 4e 4f 92 f6 d2 0c 8e f8 46 33 a8 7e 95 55 71 e7 b2 aa e4 41 08 19 cc c1 d2 6c 9a d9 98 8d 16 5e 44 e1 54 ce 95 d1 1c fa af 69 c9 df 19 01 68 34 25 94 39 ea ea 75 64 43 a3 40 1d 56 86 65 3c 1b 4c 78 32 b4 9c d1 22 67 94 95 43 ee bd d8 38 4c e7 a3 cc 8b d8 0a 28 38 1a 72 88 53 e3 75 d1 10 84 6e be ef 79 84 37 6c 70 4a 2b a4 dd 5f b0 d8 3c 6a d8 b0 05 66 4b 7e 17 64 71 d3 1b 0a 28 86 ac 08 07 c5 4a a4 6f 90 69 ad 68 99 4f 37 2a 72 4a 37 45 4f 75 f6 e0 3e 0e df ad 03 ee 6f 38 fa 81 2c 3a a7 d3 90 7d 1d a0 a3 65 66 a6 89 f6 8a 69 1e 1f d0 84 9f 5a a9 7d a9 7f 0b 20 1d d4 6e 93 7f c9 2b 4a 57 da de b9 cf Data Ascii: /I3n3)kdxhT3gj/NOF3~UqAl^DTih4%9udC@Ve<Lx2"gC8L(8rSuny7lpJ+_<jfK~dq(JoihO7rJ7EOu>o8,:}efiZ} n+JW
2024-09-24 12:56:09 UTC	1378	IN	Data Raw: d8 e5 3e da 32 73 ba 2d ee 3a e4 6e c4 89 01 ab 17 21 20 ff 49 af 7b c7 ae f2 00 66 97 aa c4 a7 7b ab 22 60 ed 5a 4c 50 dd 5a 19 d3 64 5d d5 86 64 6c b1 8d 8e 8e 77 a3 16 36 36 36 ef bf c0 ef b4 e3 dc b8 81 3d 54 24 77 36 f4 ff f0 75 4d 00 fd fc 83 ac 85 0f 0e b9 64 c6 22 f9 d8 71 20 2f 31 a4 63 1a ce 66 05 b8 6a f9 4e f4 dd da 5c f1 08 a1 41 78 40 fc f4 c7 df 7d f5 ce 7c 87 ec fe f9 5b 7f 31 bc c0 ef 0f 56 55 63 b0 5b 9b 42 80 fb 3a 3c 4b 58 5a fa 00 52 56 6a 0d d6 3d 66 86 81 78 37 7d 78 08 32 24 54 7e 74 26 62 ca 05 84 1d dc 65 04 54 7a 57 19 bf 69 34 53 86 fc c9 f9 d8 b1 b9 82 10 90 58 77 db 35 0a 8c 77 27 0d 20 a5 c2 d7 43 48 93 e0 44 57 ac 34 05 07 60 bb b6 55 c7 cd ed 1d 66 c8 d4 c7 14 6c 16 44 4f d4 5a 8b 18 e7 2f 9e 86 b8 8c 0e 9f c4 04 d5 49 d2 Data Ascii: >2s-:n! I{f{"`ZLPZd]dlw666=T$w6uMd"q /1cfjN\Ax@}\|[1VUc[B:<KXZRVj=fx7}x2$T~t&beTzWi4SXw5w' CHDW4`UflDOZ/I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	53357	18.164.52.93	443	3992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-24 12:56:09 UTC	576	OUT	GET /AzZMxHTbQDOQD8c1J/a2e89f0e-f467-4542-bfea-30ea2c1a6648/osano.js HTTP/1.1 Host: cmp.osano.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://metamask.io/faqs/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-24 12:56:09 UTC	877	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 167678 Connection: close Server: CloudFront Date: Mon, 23 Sep 2024 22:52:00 GMT ETag: "b365b2498543733cb21d8a01366a03b9" Last-Modified: Tue, 27 Aug 2024 09:26:49 GMT X-Cache: Hit from cloudfront Via: 1.1 eba0baba7ee3cc49ae1ec4ad205f2ccc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: CDG50-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: G3ziQQ93wl2V-AmbY-OA2BCE4i200Ndt7Vn4gGTCuR7G2x_uKKqAvA== Age: 50649 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Cache-Control: public, max-age=86400, s-maxage=86400, must-revalidate, proxy-revalidate, no-transform Cross-Origin-Resource-Policy: cross-origin Vary: Origin
2024-09-24 12:56:09 UTC	16384	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 65 2c 74 2c 72 3d 7b 35 32 38 39 3a 28 29 3d 3e 7b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 2f 5c 5b 6f 62 6a 65 63 74 20 28 42 6f 6f 6c 65 61 6e 7c 4e 75 6d 62 65 72 7c 53 74 72 69 6e 67 7c 46 75 6e 63 74 69 6f 6e 7c 41 72 72 61 79 7c 44 61 74 65 7c 52 65 67 45 78 70 29 5c 5d 2f 3b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 3f 53 74 72 69 6e 67 28 74 29 3a 28 74 3d 65 2e 65 78 65 63 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 28 74 29 29 29 29 3f 74 5b 31 5d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3a 22 6f 62 6a 65 63 74 22 7d 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 4f 62 Data Ascii: (()=>{var e,t,r={5289:()=>{!function(){var e=/\[object (Boolean\|Number\|String\|Function\|Array\|Date\|RegExp)\]/;function t(t){return null==t?String(t):(t=e.exec(Object.prototype.toString.call(Object(t))))?t[1].toLowerCase():"object"}function r(e,t){return Ob
2024-09-24 12:56:09 UTC	16384	IN	Data Raw: 67 69 6e 61 6c 56 61 6c 75 65 3d 6c 2c 69 2e 61 73 79 6e 63 26 26 69 2e 61 73 79 6e 63 2e 72 75 6e 6e 69 6e 67 26 26 28 69 2e 69 67 6e 6f 72 65 7c 7c 21 61 3f 28 69 2e 61 73 79 6e 63 2e 74 65 72 6d 69 6e 61 74 65 28 29 2c 64 65 6c 65 74 65 20 69 2e 61 73 79 6e 63 29 3a 69 2e 61 73 79 6e 63 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 7b 76 61 6c 75 65 3a 65 2e 73 72 63 2c 63 6c 61 73 73 69 66 69 63 61 74 69 6f 6e 73 3a 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 74 29 7d 29 29 2c 21 69 2e 61 73 79 6e 63 26 26 21 69 2e 69 67 6e 6f 72 65 29 29 7b 69 66 28 79 29 69 2e 63 6c 61 73 73 69 66 69 63 61 74 69 6f 6e 3d 79 3b 65 6c 73 65 7b 63 6f 6e 73 74 20 65 3d 4e 5b 6e 5d 5b 75 5d 3b 69 66 28 65 29 69 2e 63 6c 61 73 73 69 66 69 63 61 74 69 6f 6e 3d 69 2e 63 6c 61 73 Data Ascii: ginalValue=l,i.async&&i.async.running&&(i.ignore\|\|!a?(i.async.terminate(),delete i.async):i.async.postMessage({value:e.src,classifications:Object.entries(t)})),!i.async&&!i.ignore)){if(y)i.classification=y;else{const e=N[n][u];if(e)i.classification=i.clas
2024-09-24 12:56:09 UTC	16384	IN	Data Raw: 68 69 73 2c 65 29 7d 63 6f 6e 73 74 20 75 3d 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 63 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 63 2e 65 6e 75 6d 65 72 61 62 6c 65 2c 77 72 69 74 61 62 6c 65 3a 63 2e 77 72 69 74 61 62 6c 65 2c 76 61 6c 75 65 28 65 29 7b 63 6f 6e 73 74 20 74 3d 28 30 2c 6f 2e 66 62 29 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 21 3d 3d 74 68 69 73 26 26 6c 2e 63 61 6c 6c 28 74 2c 65 29 2c 6c 2e 63 61 6c 6c 28 74 68 69 73 2c 65 29 7d 7d 7d 2c 35 36 37 37 3a 28 65 2c 74 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 2e 64 28 74 2c 7b 41 79 3a 28 29 3d 3e 75 2c 4c 43 3a 28 29 3d 3e 61 2c 79 75 3a 28 29 3d 3e 63 7d 29 3b 76 61 72 20 6e 3d 72 28 34 39 36 30 29 2c 6f 3d 72 28 32 32 34 38 29 2c Data Ascii: his,e)}const u={configurable:c.configurable,enumerable:c.enumerable,writable:c.writable,value(e){const t=(0,o.fb)(this);return t!==this&&l.call(t,e),l.call(this,e)}}},5677:(e,t,r)=>{"use strict";r.d(t,{Ay:()=>u,LC:()=>a,yu:()=>c});var n=r(4960),o=r(2248),
2024-09-24 12:56:09 UTC	16384	IN	Data Raw: 74 3a 6f 2e 6d 37 2c 64 65 6e 79 41 6c 6c 43 6f 6e 73 65 6e 74 3a 6f 2e 6d 37 2c 73 61 76 65 43 6f 6e 73 65 6e 74 3a 28 30 2c 6f 2e 59 57 29 28 22 63 6f 6e 73 65 6e 74 54 69 6d 65 73 74 61 6d 70 22 2c 22 73 6b 69 70 52 65 63 6f 72 64 22 29 2c 72 65 76 65 72 74 43 6f 6e 73 65 6e 74 3a 6f 2e 6d 37 2c 63 6c 65 61 72 43 6f 6e 73 65 6e 74 3a 6f 2e 4d 76 2c 72 65 63 6f 72 64 43 6f 6e 73 65 6e 74 3a 28 30 2c 6f 2e 59 57 29 28 22 75 75 69 64 22 2c 22 63 6f 6e 73 65 6e 74 65 64 22 29 2c 74 69 6d 65 6f 75 74 42 65 67 69 6e 3a 6f 2e 6d 37 2c 74 69 6d 65 6f 75 74 43 6f 6d 70 6c 65 74 65 3a 6f 2e 6d 37 2c 72 65 6e 64 65 72 3a 6f 2e 6d 37 2c 73 68 6f 77 44 69 61 6c 6f 67 3a 6f 2e 6d 37 2c 68 69 64 65 44 69 61 6c 6f 67 3a 6f 2e 6d 37 2c 73 68 6f 77 44 72 61 77 65 72 3a Data Ascii: t:o.m7,denyAllConsent:o.m7,saveConsent:(0,o.YW)("consentTimestamp","skipRecord"),revertConsent:o.m7,clearConsent:o.Mv,recordConsent:(0,o.YW)("uuid","consented"),timeoutBegin:o.m7,timeoutComplete:o.m7,render:o.m7,showDialog:o.m7,hideDialog:o.m7,showDrawer:
2024-09-24 12:56:09 UTC	16384	IN	Data Raw: 6e 66 69 67 2e 74 69 6d 65 6f 75 74 53 65 63 6f 6e 64 73 22 29 2c 31 30 29 29 7c 7c 31 30 2c 51 3d 65 3d 3e 21 21 28 30 2c 61 2e 4a 74 29 28 65 2c 22 63 6f 6e 66 69 67 2e 74 79 70 65 2e 74 69 6d 65 72 22 29 2c 56 3d 65 3d 3e 51 28 65 29 26 26 28 65 3d 3e 28 30 2c 61 2e 4a 74 29 28 65 2c 22 63 6f 6e 66 69 67 2e 61 6c 6c 6f 77 54 69 6d 65 6f 75 74 22 2c 21 30 29 29 28 65 29 2c 7a 3d 65 3d 3e 28 30 2c 61 2e 4a 74 29 28 65 2c 22 73 61 76 65 64 43 6f 6e 73 65 6e 74 22 2c 6e 75 6c 6c 29 2c 5a 3d 65 3d 3e 28 30 2c 61 2e 4a 74 29 28 65 2c 22 63 6f 6e 66 69 67 2e 73 63 72 69 70 74 73 22 29 7c 7c 7b 7d 2c 58 3d 65 3d 3e 28 30 2c 61 2e 4a 74 29 28 65 2c 22 61 70 69 22 29 2c 65 65 3d 65 3d 3e 28 30 2c 61 2e 4a 74 29 28 65 2c 22 75 69 2e 64 72 61 77 65 72 2e 63 75 72 Data Ascii: nfig.timeoutSeconds"),10))\|\|10,Q=e=>!!(0,a.Jt)(e,"config.type.timer"),V=e=>Q(e)&&(e=>(0,a.Jt)(e,"config.allowTimeout",!0))(e),z=e=>(0,a.Jt)(e,"savedConsent",null),Z=e=>(0,a.Jt)(e,"config.scripts")\|\|{},X=e=>(0,a.Jt)(e,"api"),ee=e=>(0,a.Jt)(e,"ui.drawer.cur
2024-09-24 12:56:09 UTC	16384	IN	Data Raw: 3d 65 3b 73 77 69 74 63 68 28 72 29 7b 63 61 73 65 22 63 6f 6f 6b 69 65 22 3a 74 28 6e 2e 71 59 2e 43 4f 4f 4b 49 45 5f 42 4c 4f 43 4b 45 44 2c 65 2e 6e 61 6d 65 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 69 66 72 61 6d 65 22 3a 74 28 6e 2e 71 59 2e 49 46 52 41 4d 45 5f 42 4c 4f 43 4b 45 44 2c 65 2e 73 72 63 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 73 63 72 69 70 74 22 3a 74 28 6e 2e 71 59 2e 53 43 52 49 50 54 5f 42 4c 4f 43 4b 45 44 2c 65 2e 73 72 63 29 7d 62 72 65 61 6b 7d 63 61 73 65 20 63 2e 67 4b 2e 68 69 64 65 44 69 61 6c 6f 67 3a 74 28 6e 2e 71 59 2e 55 49 5f 43 48 41 4e 47 45 44 5f 53 54 41 54 45 2c 22 64 69 61 6c 6f 67 22 2c 22 68 69 64 65 22 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 63 2e 67 4b 2e 68 69 64 65 44 72 61 77 65 72 3a 74 28 6e 2e 71 59 2e 55 Data Ascii: =e;switch(r){case"cookie":t(n.qY.COOKIE_BLOCKED,e.name);break;case"iframe":t(n.qY.IFRAME_BLOCKED,e.src);break;case"script":t(n.qY.SCRIPT_BLOCKED,e.src)}break}case c.gK.hideDialog:t(n.qY.UI_CHANGED_STATE,"dialog","hide");break;case c.gK.hideDrawer:t(n.qY.U
2024-09-24 12:56:09 UTC	834	IN	Data Raw: 67 2c 22 3b 22 29 7d 60 3b 63 6f 6e 73 74 20 72 3d 74 2e 73 70 6c 69 74 28 60 3b 24 7b 65 7d 3d 60 29 3b 72 65 74 75 72 6e 20 72 2e 6c 65 6e 67 74 68 3e 3d 32 3f 72 2e 70 6f 70 28 29 2e 73 70 6c 69 74 28 22 3b 22 29 2e 73 68 69 66 74 28 29 3a 22 22 7d 2c 41 65 3d 65 3d 3e 7b 63 6f 6e 73 74 20 74 3d 28 30 2c 56 2e 53 4b 29 28 65 2c 7b 7d 29 2c 7b 6e 61 6d 65 3a 72 2c 66 72 6f 6d 4f 73 61 6e 6f 3a 6f 2c 76 61 6c 75 65 3a 73 7d 3d 74 2c 69 3d 28 30 2c 65 65 2e 41 29 28 74 2c 76 65 29 2c 63 3d 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 69 29 2e 72 65 64 75 63 65 28 77 65 2c 60 24 7b 72 7d 3d 24 7b 73 7d 60 29 3b 6f 26 26 53 65 2e 73 65 74 2e 63 61 6c 6c 28 6e 2e 42 6c 2c 60 24 7b 63 7d 3b 20 65 78 70 69 72 65 73 3d 31 20 4a 61 6e 20 31 39 37 30 20 30 30 3a Data Ascii: g,";")}`;const r=t.split(`;${e}=`);return r.length>=2?r.pop().split(";").shift():""},Ae=e=>{const t=(0,V.SK)(e,{}),{name:r,fromOsano:o,value:s}=t,i=(0,ee.A)(t,ve),c=Object.entries(i).reduce(we,`${r}=${s}`);o&&Se.set.call(n.Bl,`${c}; expires=1 Jan 1970 00:
2024-09-24 12:56:09 UTC	16384	IN	Data Raw: 44 43 29 7c 28 47 4d 43 29 7c 28 55 41 29 29 2d 2f 69 2c 54 65 3d 6e 65 77 20 53 65 74 3b 6c 65 74 20 43 65 3d 21 31 3b 66 75 6e 63 74 69 6f 6e 20 24 65 28 29 7b 6c 65 74 7b 30 3a 65 2c 31 3a 74 7d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 3b 73 77 69 74 63 68 28 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7b 63 61 73 65 20 6e 2e 75 34 3a 72 65 74 75 72 6e 20 76 6f 69 64 28 5b 6e 2e 71 36 2c 6e 2e 53 44 5d 2e 69 6e 63 6c 75 64 65 73 28 6e 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 26 26 28 43 65 3d 21 30 29 29 3b 63 61 73 65 20 6e Data Ascii: DC)\|(GMC)\|(UA))-/i,Te=new Set;let Ce=!1;function $e(){let{0:e,1:t}=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{};switch(null==e?void 0:e.toLowerCase()){case n.u4:return void([n.q6,n.SD].includes(null==t?void 0:t.toLowerCase())&&(Ce=!0));case n
2024-09-24 12:56:10 UTC	16384	IN	Data Raw: 3d 3e 22 22 29 29 2e 74 68 65 6e 28 28 74 3d 3e 28 65 3d 3e 7b 6c 65 74 7b 63 75 73 74 6f 6d 65 72 49 64 3a 74 2c 63 6f 6e 66 69 67 49 64 3a 72 2c 63 6f 6e 73 65 6e 74 65 64 43 61 74 65 67 6f 72 69 65 73 3a 6e 2c 75 75 69 64 3a 6f 7d 3d 65 2c 73 3d 28 30 2c 65 65 2e 41 29 28 65 2c 6d 65 29 3b 72 65 74 75 72 6e 20 4c 2e 41 2e 70 6f 73 74 28 60 24 7b 49 2e 43 4f 4e 53 45 4e 54 5f 55 52 49 7d 2f 72 65 63 6f 72 64 60 2c 4f 65 28 4f 65 28 7b 7d 2c 73 29 2c 7b 7d 2c 7b 6f 73 6e 6f 43 75 73 74 6f 6d 65 72 49 64 3a 74 2c 6f 73 6e 6f 43 6f 6e 66 69 67 49 64 3a 72 2c 75 73 65 72 43 6f 6e 73 65 6e 74 49 64 3a 6f 2c 63 6f 6e 73 65 6e 74 65 64 3a 6e 2e 6a 6f 69 6e 28 22 2c 20 22 29 7d 29 29 2e 63 61 74 63 68 28 28 28 29 3d 3e 7b 7d 29 29 7d 29 28 7b 63 6f 6e 66 69 67 Data Ascii: =>"")).then((t=>(e=>{let{customerId:t,configId:r,consentedCategories:n,uuid:o}=e,s=(0,ee.A)(e,me);return L.A.post(`${I.CONSENT_URI}/record`,Oe(Oe({},s),{},{osnoCustomerId:t,osnoConfigId:r,userConsentId:o,consented:n.join(", ")})).catch((()=>{}))})({config
2024-09-24 12:56:10 UTC	16384	IN	Data Raw: 61 2c 6c 2c 75 5d 3b 72 65 74 75 72 6e 20 52 72 28 72 29 3f 60 24 7b 70 61 72 73 65 49 6e 74 28 63 2e 74 6f 53 74 72 69 6e 67 28 29 2c 31 30 29 7d 24 7b 70 2e 6d 61 70 28 78 72 29 2e 6a 6f 69 6e 28 22 22 29 7d 60 3a 60 24 7b 70 61 72 73 65 49 6e 74 28 63 2e 74 6f 53 74 72 69 6e 67 28 29 2c 31 30 29 7d 2d 2d 2d 60 7d 7d 2c 4b 72 3d 65 3d 3e 28 74 2c 72 29 3d 3e 7b 63 6f 6e 73 74 7b 76 65 72 73 69 6f 6e 3a 6e 2c 6e 6f 74 69 66 69 65 64 3a 6f 2c 6f 70 74 4f 75 74 3a 73 2c 73 69 67 6e 61 74 6f 72 79 3a 69 7d 3d 48 72 28 65 29 28 46 72 28 72 2c 65 29 29 2c 7b 76 65 72 73 69 6f 6e 3a 63 3d 6e 2c 6e 6f 74 69 66 69 65 64 3a 61 3d 6f 2c 6f 70 74 4f 75 74 3a 6c 3d 73 2c 73 69 67 6e 61 74 6f 72 79 3a 75 3d 69 7d 3d 28 30 2c 79 2e 68 31 29 28 4d 72 28 72 29 2c 74 29 Data Ascii: a,l,u];return Rr(r)?`${parseInt(c.toString(),10)}${p.map(xr).join("")}`:`${parseInt(c.toString(),10)}---`}},Kr=e=>(t,r)=>{const{version:n,notified:o,optOut:s,signatory:i}=Hr(e)(Fr(r,e)),{version:c=n,notified:a=o,optOut:l=s,signatory:u=i}=(0,y.h1)(Mr(r),t)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	53358	13.33.187.2	443	3992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-24 12:56:09 UTC	660	OUT	GET /9sy2a0egs6zh/4zJfzJbG3kTDSk5Wo4RJI1/1b363263141cf629b28155e2625b56c9/mm-logo.svg HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://metamask.io/faqs/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-24 12:56:09 UTC	542	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 12019 Connection: close Last-Modified: Thu, 14 Oct 2021 12:34:16 GMT Server: Contentful Images API Access-Control-Allow-Origin: * Date: Mon, 23 Sep 2024 22:52:01 GMT Cache-Control: max-age=31536000 ETag: "51bcea2625eb2c6e9268a7377a792c86" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 d6dae4153314f4d7a17919a7dd5a237c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: WuiRml9kVj5BS8oZsdEkssvZfI4bSQEw_JNax6rHv4FSnsUE06nHyQ== Age: 50649
2024-09-24 12:56:09 UTC	12019	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 37 32 22 20 68 65 69 67 68 74 3d 22 33 33 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 37 32 20 33 33 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 35 31 2e 32 35 36 20 31 36 2e 36 34 43 31 35 30 2e 33 37 32 20 31 36 2e 30 35 36 39 20 31 34 39 2e 33 39 38 20 31 35 2e 36 34 32 33 20 31 34 38 2e 34 37 36 20 31 35 2e 31 32 34 43 31 34 37 2e 38 37 38 20 31 34 2e 37 38 37 31 20 31 34 37 2e 32 34 31 20 31 34 2e 34 38 39 20 31 34 36 2e 37 32 32 20 31 34 2e 30 36 31 34 43 31 34 35 2e 38 33 38 20 31 33 2e 33 33 35 38 20 31 34 36 2e 30 32 20 31 31 2e 39 31 30 35 20 31 34 36 2e 39 34 33 20 Data Ascii: <svg width="172" height="33" viewBox="0 0 172 33" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M151.256 16.64C150.372 16.0569 149.398 15.6423 148.476 15.124C147.878 14.7871 147.241 14.489 146.722 14.0614C145.838 13.3358 146.02 11.9105 146.943

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	53359	13.33.187.25	443	3992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-24 12:56:10 UTC	424	OUT	GET /9sy2a0egs6zh/4zJfzJbG3kTDSk5Wo4RJI1/1b363263141cf629b28155e2625b56c9/mm-logo.svg HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-24 12:56:10 UTC	542	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 12019 Connection: close Last-Modified: Thu, 14 Oct 2021 12:34:16 GMT Server: Contentful Images API Access-Control-Allow-Origin: * Date: Mon, 23 Sep 2024 22:52:01 GMT Cache-Control: max-age=31536000 ETag: "51bcea2625eb2c6e9268a7377a792c86" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 78668cba389ee6455cf1c23180f33cf8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: LXsArT1bckpj-nJpfSAj8Dtxzc5sw6fKo3q0sn_cB2r4rL27aQIU7Q== Age: 50650
2024-09-24 12:56:10 UTC	12019	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 37 32 22 20 68 65 69 67 68 74 3d 22 33 33 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 37 32 20 33 33 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 35 31 2e 32 35 36 20 31 36 2e 36 34 43 31 35 30 2e 33 37 32 20 31 36 2e 30 35 36 39 20 31 34 39 2e 33 39 38 20 31 35 2e 36 34 32 33 20 31 34 38 2e 34 37 36 20 31 35 2e 31 32 34 43 31 34 37 2e 38 37 38 20 31 34 2e 37 38 37 31 20 31 34 37 2e 32 34 31 20 31 34 2e 34 38 39 20 31 34 36 2e 37 32 32 20 31 34 2e 30 36 31 34 43 31 34 35 2e 38 33 38 20 31 33 2e 33 33 35 38 20 31 34 36 2e 30 32 20 31 31 2e 39 31 30 35 20 31 34 36 2e 39 34 33 20 Data Ascii: <svg width="172" height="33" viewBox="0 0 172 33" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M151.256 16.64C150.372 16.0569 149.398 15.6423 148.476 15.124C147.878 14.7871 147.241 14.489 146.722 14.0614C145.838 13.3358 146.02 11.9105 146.943

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	53363	199.232.188.157	443	3992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-24 12:56:10 UTC	528	OUT	GET /uwt.js HTTP/1.1 Host: static.ads-twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://metamask.io/faqs/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-24 12:56:11 UTC	536	IN	HTTP/1.1 200 OK Connection: close Content-Length: 57671 Last-Modified: Tue, 26 Mar 2024 20:58:07 GMT ETag: "bbbcf811d8437a575d796a4c1e5d4fad" x-amz-server-side-encryption: AES256 Cache-Control: no-cache Content-Type: application/javascript; charset=utf-8 Accept-Ranges: bytes Date: Tue, 24 Sep 2024 12:56:11 GMT X-Served-By: cache-iad-kcgs7200117-IAD, cache-muc13957-MUC X-Cache: HIT, HIT Vary: Accept-Encoding,Host P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT" x-tw-cdn: FT
2024-09-24 12:56:11 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 7b 36 31 37 33 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3b 74 2e 65 78 70 6f 72 74 73 3d 28 72 3d 72 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 26 26 28 72 3d 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2e 63 72 79 70 74 6f 26 26 28 72 3d 73 65 6c 66 2e 63 72 79 70 74 6f 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 26 26 28 72 3d Data Ascii: !function(){var t={6173:function(t,e,n){var r;t.exports=(r=r\|\|function(t,e){var r;if("undefined"!=typeof window&&window.crypto&&(r=window.crypto),"undefined"!=typeof self&&self.crypto&&(r=self.crypto),"undefined"!=typeof globalThis&&globalThis.crypto&&(r=
2024-09-24 12:56:11 UTC	1378	IN	Data Raw: 74 68 69 73 2e 77 6f 72 64 73 3d 74 7c 7c 5b 5d 2c 74 68 69 73 2e 73 69 67 42 79 74 65 73 3d 6e 75 6c 6c 21 3d 65 3f 65 3a 34 2a 74 2e 6c 65 6e 67 74 68 7d 2c 74 6f 53 74 72 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 7c 7c 66 29 2e 73 74 72 69 6e 67 69 66 79 28 74 68 69 73 29 7d 2c 63 6f 6e 63 61 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 77 6f 72 64 73 2c 6e 3d 74 2e 77 6f 72 64 73 2c 72 3d 74 68 69 73 2e 73 69 67 42 79 74 65 73 2c 69 3d 74 2e 73 69 67 42 79 74 65 73 3b 69 66 28 74 68 69 73 2e 63 6c 61 6d 70 28 29 2c 72 25 34 29 66 6f 72 28 76 61 72 20 6f 3d 30 3b 6f 3c 69 3b 6f 2b 2b 29 7b 76 61 72 20 61 3d 6e 5b 6f 3e 3e 3e 32 5d 3e 3e 3e 32 34 2d 6f 25 34 2a 38 26 32 35 35 3b 65 5b 72 2b 6f Data Ascii: this.words=t\|\|[],this.sigBytes=null!=e?e:4t.length},toString:function(t){return(t\|\|f).stringify(this)},concat:function(t){var e=this.words,n=t.words,r=this.sigBytes,i=t.sigBytes;if(this.clamp(),r%4)for(var o=0;o<i;o++){var a=n[o>>>2]>>>24-o%48&255;e[r+o
2024-09-24 12:56:11 UTC	1378	IN	Data Raw: 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 64 2e 70 61 72 73 65 28 75 6e 65 73 63 61 70 65 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 29 29 29 7d 7d 2c 70 3d 63 2e 42 75 66 66 65 72 65 64 42 6c 6f 63 6b 41 6c 67 6f 72 69 74 68 6d 3d 75 2e 65 78 74 65 6e 64 28 7b 72 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 64 61 74 61 3d 6e 65 77 20 73 2e 69 6e 69 74 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 3d 30 7d 2c 5f 61 70 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 68 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 Data Ascii: ion(t){return d.parse(unescape(encodeURIComponent(t)))}},p=c.BufferedBlockAlgorithm=u.extend({reset:function(){this._data=new s.init,this._nDataBytes=0},_append:function(t){"string"==typeof t&&(t=h.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigByt
2024-09-24 12:56:11 UTC	1378	IN	Data Raw: 72 28 76 61 72 20 72 3d 32 2c 69 3d 30 3b 69 3c 36 34 3b 29 65 28 72 29 26 26 28 69 3c 38 26 26 28 63 5b 69 5d 3d 6e 28 74 2e 70 6f 77 28 72 2c 2e 35 29 29 29 2c 75 5b 69 5d 3d 6e 28 74 2e 70 6f 77 28 72 2c 31 2f 33 29 29 2c 69 2b 2b 29 2c 72 2b 2b 7d 28 29 3b 76 61 72 20 73 3d 5b 5d 2c 6c 3d 61 2e 53 48 41 32 35 36 3d 6f 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 69 2e 69 6e 69 74 28 63 2e 73 6c 69 63 65 28 30 29 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 74 68 69 73 2e 5f 68 61 73 68 2e 77 6f 72 64 73 2c 72 3d 6e 5b 30 5d 2c 69 3d 6e 5b 31 5d 2c 6f 3d 6e 5b 32 5d 2c 61 3d 6e 5b 33 Data Ascii: r(var r=2,i=0;i<64;)e(r)&&(i<8&&(c[i]=n(t.pow(r,.5))),u[i]=n(t.pow(r,1/3)),i++),r++}();var s=[],l=a.SHA256=o.extend({_doReset:function(){this._hash=new i.init(c.slice(0))},_doProcessBlock:function(t,e){for(var n=this._hash.words,r=n[0],i=n[1],o=n[2],a=n[3
2024-09-24 12:56:11 UTC	1378	IN	Data Raw: 72 20 69 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 74 68 69 73 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 21 74 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 6e 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 74 79 70 65 6f 66 20 74 2b 22 20 22 2b 74 2b 22 20 69 73 20 6e 6f 74 20 69 74 65 72 61 62 6c 65 28 63 61 6e 6e 6f 74 20 72 65 61 64 20 70 72 6f 70 65 72 74 79 20 53 79 6d 62 6f 6c 28 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 29 29 22 29 29 3b 76 61 72 20 72 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 29 3b 69 66 28 30 3d 3d 3d 72 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 65 28 5b 5d 29 3b 76 61 72 20 69 3d 72 2e 6c 65 6e 67 74 Data Ascii: r i=function(t){return new this((function(e,n){if(!t\|\|void 0===t.length)return n(new TypeError(typeof t+" "+t+" is not iterable(cannot read property Symbol(Symbol.iterator))"));var r=Array.prototype.slice.call(t);if(0===r.length)return e([]);var i=r.lengt
2024-09-24 12:56:11 UTC	1378	IN	Data Raw: 76 6f 69 64 20 64 28 74 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 76 6f 69 64 20 70 28 28 72 3d 6e 2c 69 3d 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 61 70 70 6c 79 28 69 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 74 29 7d 74 2e 5f 73 74 61 74 65 3d 31 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 64 28 74 29 7d 63 61 74 63 68 28 65 29 7b 66 28 74 2c 65 29 7d 76 61 72 20 72 2c 69 7d 66 75 6e 63 74 69 6f 6e 20 66 28 74 2c 65 29 7b 74 2e 5f 73 74 61 74 65 3d 32 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 64 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 74 29 7b 32 3d 3d 3d 74 2e 5f 73 74 61 74 65 26 26 30 3d 3d 3d 74 2e 5f 64 65 66 65 72 72 65 64 73 2e 6c 65 6e 67 74 68 26 26 75 2e 5f 69 6d 6d 65 64 69 61 74 65 46 6e Data Ascii: void d(t);if("function"==typeof n)return void p((r=n,i=e,function(){r.apply(i,arguments)}),t)}t._state=1,t._value=e,d(t)}catch(e){f(t,e)}var r,i}function f(t,e){t._state=2,t._value=e,d(t)}function d(t){2===t._state&&0===t._deferreds.length&&u._immediateFn
2024-09-24 12:56:11 UTC	1378	IN	Data Raw: 74 75 72 6e 20 6e 65 77 20 75 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 6e 28 74 29 7d 29 29 7d 2c 75 2e 72 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 75 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 21 61 28 74 29 29 72 65 74 75 72 6e 20 6e 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 50 72 6f 6d 69 73 65 2e 72 61 63 65 20 61 63 63 65 70 74 73 20 61 6e 20 61 72 72 61 79 22 29 29 3b 66 6f 72 28 76 61 72 20 72 3d 30 2c 69 3d 74 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 75 2e 72 65 73 6f 6c 76 65 28 74 5b 72 5d 29 2e 74 68 65 6e 28 65 2c 6e 29 7d 29 29 7d 2c 75 2e 5f 69 6d 6d 65 64 69 61 74 65 46 6e 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 65 74 49 6d 6d 65 64 69 61 74 65 Data Ascii: turn new u((function(e,n){n(t)}))},u.race=function(t){return new u((function(e,n){if(!a(t))return n(new TypeError("Promise.race accepts an array"));for(var r=0,i=t.length;r<i;r++)u.resolve(t[r]).then(e,n)}))},u._immediateFn="function"==typeof setImmediate
2024-09-24 12:56:11 UTC	1378	IN	Data Raw: 68 72 6f 77 22 3d 3d 3d 69 29 74 68 72 6f 77 20 6f 3b 72 65 74 75 72 6e 20 43 28 29 7d 66 6f 72 28 6e 2e 6d 65 74 68 6f 64 3d 69 2c 6e 2e 61 72 67 3d 6f 3b 3b 29 7b 76 61 72 20 61 3d 6e 2e 64 65 6c 65 67 61 74 65 3b 69 66 28 61 29 7b 76 61 72 20 63 3d 67 28 61 2c 6e 29 3b 69 66 28 63 29 7b 69 66 28 63 3d 3d 3d 6c 29 63 6f 6e 74 69 6e 75 65 3b 72 65 74 75 72 6e 20 63 7d 7d 69 66 28 22 6e 65 78 74 22 3d 3d 3d 6e 2e 6d 65 74 68 6f 64 29 6e 2e 73 65 6e 74 3d 6e 2e 5f 73 65 6e 74 3d 6e 2e 61 72 67 3b 65 6c 73 65 20 69 66 28 22 74 68 72 6f 77 22 3d 3d 3d 6e 2e 6d 65 74 68 6f 64 29 7b 69 66 28 22 73 75 73 70 65 6e 64 65 64 53 74 61 72 74 22 3d 3d 3d 72 29 74 68 72 6f 77 20 72 3d 22 63 6f 6d 70 6c 65 74 65 64 22 2c 6e 2e 61 72 67 3b 6e 2e 64 69 73 70 61 74 63 68 Data Ascii: hrow"===i)throw o;return C()}for(n.method=i,n.arg=o;;){var a=n.delegate;if(a){var c=g(a,n);if(c){if(c===l)continue;return c}}if("next"===n.method)n.sent=n._sent=n.arg;else if("throw"===n.method){if("suspendedStart"===r)throw r="completed",n.arg;n.dispatch
2024-09-24 12:56:11 UTC	1378	IN	Data Raw: 29 7d 28 69 2c 6f 2c 72 2c 61 29 7d 29 29 7d 72 65 74 75 72 6e 20 72 3d 72 3f 72 2e 74 68 65 6e 28 61 2c 61 29 3a 61 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 67 28 74 2c 65 29 7b 76 61 72 20 6e 3d 74 2e 69 74 65 72 61 74 6f 72 5b 65 2e 6d 65 74 68 6f 64 5d 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6e 29 7b 69 66 28 65 2e 64 65 6c 65 67 61 74 65 3d 6e 75 6c 6c 2c 22 74 68 72 6f 77 22 3d 3d 3d 65 2e 6d 65 74 68 6f 64 29 7b 69 66 28 74 2e 69 74 65 72 61 74 6f 72 2e 72 65 74 75 72 6e 26 26 28 65 2e 6d 65 74 68 6f 64 3d 22 72 65 74 75 72 6e 22 2c 65 2e 61 72 67 3d 76 6f 69 64 20 30 2c 67 28 74 2c 65 29 2c 22 74 68 72 6f 77 22 3d 3d 3d 65 2e 6d 65 74 68 6f 64 29 29 72 65 74 75 72 6e 20 6c 3b 65 2e 6d 65 74 68 6f 64 3d 22 74 68 72 6f 77 22 2c 65 2e 61 72 67 3d 6e 65 Data Ascii: )}(i,o,r,a)}))}return r=r?r.then(a,a):a()}}function g(t,e){var n=t.iterator[e.method];if(void 0===n){if(e.delegate=null,"throw"===e.method){if(t.iterator.return&&(e.method="return",e.arg=void 0,g(t,e),"throw"===e.method))return l;e.method="throw",e.arg=ne
2024-09-24 12:56:11 UTC	1378	IN	Data Raw: 61 74 6f 72 46 75 6e 63 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 72 65 74 75 72 6e 21 21 65 26 26 28 65 3d 3d 3d 64 7c 7c 22 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 22 3d 3d 3d 28 65 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 65 2e 6e 61 6d 65 29 29 7d 2c 74 2e 6d 61 72 6b 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2c 68 29 3a 28 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 68 2c 63 28 74 2c 61 2c 22 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 22 29 29 2c 74 2e 70 Data Ascii: atorFunction=function(t){var e="function"==typeof t&&t.constructor;return!!e&&(e===d\|\|"GeneratorFunction"===(e.displayName\|\|e.name))},t.mark=function(t){return Object.setPrototypeOf?Object.setPrototypeOf(t,h):(t.__proto__=h,c(t,a,"GeneratorFunction")),t.p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	53360	18.245.31.112	443	3992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-24 12:56:10 UTC	400	OUT	GET /AzZMxHTbQDOQD8c1J/a2e89f0e-f467-4542-bfea-30ea2c1a6648/osano.js HTTP/1.1 Host: cmp.osano.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-24 12:56:11 UTC	877	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 167678 Connection: close Server: CloudFront Date: Mon, 23 Sep 2024 22:52:00 GMT ETag: "b365b2498543733cb21d8a01366a03b9" Last-Modified: Tue, 27 Aug 2024 09:26:49 GMT X-Cache: Hit from cloudfront Via: 1.1 4bf44796811ecea5881c6668d3aa9226.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P8 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: vbeLmIY64SpeD9R-pvZ2g4C71jQ-dOw5kwcGZsL6bTpucowCZUhQEw== Age: 50650 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Cache-Control: public, max-age=86400, s-maxage=86400, must-revalidate, proxy-revalidate, no-transform Cross-Origin-Resource-Policy: cross-origin Vary: Origin
2024-09-24 12:56:11 UTC	16384	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 65 2c 74 2c 72 3d 7b 35 32 38 39 3a 28 29 3d 3e 7b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 2f 5c 5b 6f 62 6a 65 63 74 20 28 42 6f 6f 6c 65 61 6e 7c 4e 75 6d 62 65 72 7c 53 74 72 69 6e 67 7c 46 75 6e 63 74 69 6f 6e 7c 41 72 72 61 79 7c 44 61 74 65 7c 52 65 67 45 78 70 29 5c 5d 2f 3b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 3f 53 74 72 69 6e 67 28 74 29 3a 28 74 3d 65 2e 65 78 65 63 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 28 74 29 29 29 29 3f 74 5b 31 5d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3a 22 6f 62 6a 65 63 74 22 7d 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 4f 62 Data Ascii: (()=>{var e,t,r={5289:()=>{!function(){var e=/\[object (Boolean\|Number\|String\|Function\|Array\|Date\|RegExp)\]/;function t(t){return null==t?String(t):(t=e.exec(Object.prototype.toString.call(Object(t))))?t[1].toLowerCase():"object"}function r(e,t){return Ob
2024-09-24 12:56:11 UTC	16384	IN	Data Raw: 67 69 6e 61 6c 56 61 6c 75 65 3d 6c 2c 69 2e 61 73 79 6e 63 26 26 69 2e 61 73 79 6e 63 2e 72 75 6e 6e 69 6e 67 26 26 28 69 2e 69 67 6e 6f 72 65 7c 7c 21 61 3f 28 69 2e 61 73 79 6e 63 2e 74 65 72 6d 69 6e 61 74 65 28 29 2c 64 65 6c 65 74 65 20 69 2e 61 73 79 6e 63 29 3a 69 2e 61 73 79 6e 63 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 7b 76 61 6c 75 65 3a 65 2e 73 72 63 2c 63 6c 61 73 73 69 66 69 63 61 74 69 6f 6e 73 3a 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 74 29 7d 29 29 2c 21 69 2e 61 73 79 6e 63 26 26 21 69 2e 69 67 6e 6f 72 65 29 29 7b 69 66 28 79 29 69 2e 63 6c 61 73 73 69 66 69 63 61 74 69 6f 6e 3d 79 3b 65 6c 73 65 7b 63 6f 6e 73 74 20 65 3d 4e 5b 6e 5d 5b 75 5d 3b 69 66 28 65 29 69 2e 63 6c 61 73 73 69 66 69 63 61 74 69 6f 6e 3d 69 2e 63 6c 61 73 Data Ascii: ginalValue=l,i.async&&i.async.running&&(i.ignore\|\|!a?(i.async.terminate(),delete i.async):i.async.postMessage({value:e.src,classifications:Object.entries(t)})),!i.async&&!i.ignore)){if(y)i.classification=y;else{const e=N[n][u];if(e)i.classification=i.clas
2024-09-24 12:56:11 UTC	2410	IN	Data Raw: 68 69 73 2c 65 29 7d 63 6f 6e 73 74 20 75 3d 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 63 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 63 2e 65 6e 75 6d 65 72 61 62 6c 65 2c 77 72 69 74 61 62 6c 65 3a 63 2e 77 72 69 74 61 62 6c 65 2c 76 61 6c 75 65 28 65 29 7b 63 6f 6e 73 74 20 74 3d 28 30 2c 6f 2e 66 62 29 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 21 3d 3d 74 68 69 73 26 26 6c 2e 63 61 6c 6c 28 74 2c 65 29 2c 6c 2e 63 61 6c 6c 28 74 68 69 73 2c 65 29 7d 7d 7d 2c 35 36 37 37 3a 28 65 2c 74 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 2e 64 28 74 2c 7b 41 79 3a 28 29 3d 3e 75 2c 4c 43 3a 28 29 3d 3e 61 2c 79 75 3a 28 29 3d 3e 63 7d 29 3b 76 61 72 20 6e 3d 72 28 34 39 36 30 29 2c 6f 3d 72 28 32 32 34 38 29 2c Data Ascii: his,e)}const u={configurable:c.configurable,enumerable:c.enumerable,writable:c.writable,value(e){const t=(0,o.fb)(this);return t!==this&&l.call(t,e),l.call(this,e)}}},5677:(e,t,r)=>{"use strict";r.d(t,{Ay:()=>u,LC:()=>a,yu:()=>c});var n=r(4960),o=r(2248),
2024-09-24 12:56:11 UTC	16384	IN	Data Raw: 29 2c 6e 3d 28 30 2c 6f 2e 47 66 29 28 74 68 69 73 2c 72 29 3b 69 66 28 21 28 28 30 2c 63 2e 4f 42 29 28 72 2c 6e 29 7c 7c 28 30 2c 6f 2e 74 75 29 28 6e 29 29 29 72 65 74 75 72 6e 28 30 2c 70 2e 64 47 29 28 74 29 7d 3b 73 2e 79 2e 76 61 6c 75 65 2e 63 61 6c 6c 28 74 68 69 73 2c 75 2c 72 2e 62 69 6e 64 28 74 68 69 73 29 2c 21 30 29 2c 74 2e 73 65 74 28 22 6c 6f 61 64 22 2c 72 29 7d 7d 72 65 74 75 72 6e 20 73 2e 79 2e 76 61 6c 75 65 2e 63 61 6c 6c 28 74 68 69 73 2c 2e 2e 2e 72 29 7d 66 75 6e 63 74 69 6f 6e 20 79 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 72 3d 6e 65 77 20 41 72 72 61 79 28 74 3e 31 3f 74 2d 31 3a 30 29 2c 6f 3d 31 3b 6f 3c 74 3b 6f 2b 2b 29 72 5b 6f 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b Data Ascii: ),n=(0,o.Gf)(this,r);if(!((0,c.OB)(r,n)\|\|(0,o.tu)(n)))return(0,p.dG)(t)};s.y.value.call(this,u,r.bind(this),!0),t.set("load",r)}}return s.y.value.call(this,...r)}function y(e){for(var t=arguments.length,r=new Array(t>1?t-1:0),o=1;o<t;o++)r[o-1]=arguments[
2024-09-24 12:56:11 UTC	16384	IN	Data Raw: 28 69 28 7b 7d 2c 65 29 2c 7b 7d 2c 7b 5b 60 24 7b 28 30 2c 6f 2e 78 51 29 28 74 29 7d 60 5d 3a 60 24 7b 28 30 2c 6f 2e 4c 57 29 28 74 29 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 7d 60 7d 29 3a 65 29 2c 7b 7d 29 2c 65 29 7d 2c 70 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6c 65 74 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 63 3b 69 66 28 21 65 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 28 7b 74 79 70 65 3a 65 7d 2c 74 28 2e 2e 2e 61 72 67 75 6d 65 6e 74 73 29 29 7d 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 72 2c 22 74 79 Data Ascii: (i({},e),{},{[`${(0,o.xQ)(t)}`]:`${(0,o.LW)(t).toUpperCase()}`}):e),{}),e)},p=function(e){let t=arguments.length>1&&void 0!==arguments[1]?arguments[1]:c;if(!e)return;const r=function(){return i({type:e},t(...arguments))};return Object.defineProperty(r,"ty
2024-09-24 12:56:11 UTC	16384	IN	Data Raw: 65 2c 22 63 6f 6e 66 69 67 2e 74 79 70 65 2e 72 65 6a 65 63 74 41 6c 6c 22 29 2c 24 65 3d 65 3d 3e 28 30 2c 61 2e 4a 74 29 28 65 2c 22 63 6f 6e 66 69 67 2e 74 79 70 65 2e 66 69 72 73 74 4c 61 79 65 72 55 73 61 67 65 22 29 2c 6b 65 3d 65 3d 3e 28 30 2c 61 2e 4a 74 29 28 65 2c 22 63 6f 6e 66 69 67 2e 74 79 70 65 2e 6d 61 6e 61 67 65 50 72 65 66 65 72 65 6e 63 65 73 22 29 2c 4e 65 3d 65 3d 3e 28 30 2c 61 2e 4a 74 29 28 65 2c 22 63 6f 6e 66 69 67 2e 66 6f 72 63 65 4d 61 6e 61 67 65 50 72 65 66 65 72 65 6e 63 65 73 22 2c 21 31 29 2c 49 65 3d 65 3d 3e 28 30 2c 61 2e 4a 74 29 28 65 2c 22 63 6f 6e 66 69 67 2e 74 79 70 65 2e 63 61 6e 44 69 73 6d 69 73 73 44 69 61 6c 6f 67 22 29 2c 4c 65 3d 65 3d 3e 21 21 28 30 2c 61 2e 4a 74 29 28 65 2c 22 63 6f 6e 66 69 67 2e 63 Data Ascii: e,"config.type.rejectAll"),$e=e=>(0,a.Jt)(e,"config.type.firstLayerUsage"),ke=e=>(0,a.Jt)(e,"config.type.managePreferences"),Ne=e=>(0,a.Jt)(e,"config.forceManagePreferences",!1),Ie=e=>(0,a.Jt)(e,"config.type.canDismissDialog"),Le=e=>!!(0,a.Jt)(e,"config.c
2024-09-24 12:56:11 UTC	16384	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 50 28 65 2c 74 29 7b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 6e 3d 6e 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 74 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 29 2c 72 2e 70 75 73 68 2e 61 70 70 6c 79 28 72 2c 6e 29 7d 72 65 74 75 72 6e 20 72 7d 66 75 6e 63 74 69 6f 6e 20 44 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d Data Ascii: function P(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function D(e){for(var t=1;t<argum
2024-09-24 12:56:11 UTC	16384	IN	Data Raw: 63 72 69 70 74 3a 6e 65 77 20 53 65 74 28 5b 5d 29 2c 63 6f 6f 6b 69 65 3a 6e 65 77 20 53 65 74 28 5b 5d 29 2c 69 66 72 61 6d 65 3a 6e 65 77 20 53 65 74 28 5b 5d 29 7d 29 2c 71 65 3d 28 65 2c 74 2c 72 29 3d 3e 7b 6c 65 74 5b 6f 2c 73 2c 69 5d 3d 65 3b 63 6f 6e 73 74 5b 63 2c 61 2c 6c 5d 3d 74 7c 7c 5b 5d 3b 28 6f 7c 7c 72 29 26 26 52 65 2e 63 61 6c 6c 28 4b 65 2c 6e 2e 68 42 29 2c 28 73 7c 7c 72 29 26 26 52 65 2e 63 61 6c 6c 28 4b 65 2c 6e 2e 53 50 29 2c 28 69 7c 7c 72 29 26 26 52 65 2e 63 61 6c 6c 28 4b 65 2c 6e 2e 4f 38 29 2c 28 74 7c 7c 72 29 26 26 52 65 2e 63 61 6c 6c 28 4b 65 2c 6e 2e 67 79 29 3b 74 72 79 7b 6f 26 26 21 72 26 26 48 65 2e 63 61 6c 6c 28 4b 65 2c 6e 2e 68 42 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 41 72 72 61 79 2e 66 72 6f 6d Data Ascii: cript:new Set([]),cookie:new Set([]),iframe:new Set([])}),qe=(e,t,r)=>{let[o,s,i]=e;const[c,a,l]=t\|\|[];(o\|\|r)&&Re.call(Ke,n.hB),(s\|\|r)&&Re.call(Ke,n.SP),(i\|\|r)&&Re.call(Ke,n.O8),(t\|\|r)&&Re.call(Ke,n.gy);try{o&&!r&&He.call(Ke,n.hB,JSON.stringify(Array.from
2024-09-24 12:56:11 UTC	13042	IN	Data Raw: 61 74 65 28 29 29 3b 74 26 26 21 28 30 2c 56 2e 77 6d 29 28 65 29 26 26 28 21 6e 2e 6c 77 7c 7c 28 30 2c 6e 2e 71 39 29 28 29 7c 7c 22 73 63 72 69 70 74 22 21 3d 3d 74 2e 65 6e 74 69 74 79 54 79 70 65 7c 7c 65 5b 6e 2e 62 37 5d 7c 7c 65 5b 6e 2e 67 59 5d 7c 7c 28 74 2e 73 68 6f 75 6c 64 52 65 6d 6f 76 65 4f 6e 42 6c 6f 63 6b 3d 21 30 29 2c 6f 28 74 29 29 7d 3b 72 65 74 75 72 6e 28 65 2c 6f 29 3d 3e 7b 6f 2e 64 69 73 63 6f 6e 6e 65 63 74 28 29 2c 65 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 7b 63 6f 6e 73 74 7b 61 64 64 65 64 4e 6f 64 65 73 3a 6e 3d 5b 5d 2c 72 65 6d 6f 76 65 64 4e 6f 64 65 73 3a 6f 3d 5b 5d 2c 74 79 70 65 3a 69 2c 61 74 74 72 69 62 75 74 65 4e 61 6d 65 3a 61 2c 74 61 72 67 65 74 3a 6c 2c 6f 6c 64 56 61 6c 75 65 3a 75 7d 3d 65 3b 73 77 69 74 Data Ascii: ate());t&&!(0,V.wm)(e)&&(!n.lw\|\|(0,n.q9)()\|\|"script"!==t.entityType\|\|e[n.b7]\|\|e[n.gY]\|\|(t.shouldRemoveOnBlock=!0),o(t))};return(e,o)=>{o.disconnect(),e.forEach((e=>{const{addedNodes:n=[],removedNodes:o=[],type:i,attributeName:a,target:l,oldValue:u}=e;swit
2024-09-24 12:56:11 UTC	16384	IN	Data Raw: 7c 7c 7b 7d 3b 72 65 74 75 72 6e 28 30 2c 79 2e 68 31 29 28 54 72 28 7b 7d 2c 65 29 2c 7b 69 61 62 3a 7b 75 73 70 3a 7b 63 63 70 61 41 70 70 6c 69 65 73 3a 73 7d 7d 7d 29 7d 2c 6b 72 3d 28 65 2c 74 29 3d 3e 5b 28 30 2c 69 2e 76 29 28 65 2c 74 29 2c 74 5d 2e 69 6e 63 6c 75 64 65 73 28 6e 2e 46 41 29 7c 7c 21 30 3d 3d 3d 74 2c 4e 72 3d 28 30 2c 41 2e 6d 7a 29 28 43 72 2c 7b 5b 63 2e 67 4b 2e 69 6e 69 74 5d 3a 24 72 2c 5b 63 2e 67 4b 2e 75 70 64 61 74 65 43 6f 6e 66 69 67 5d 3a 28 65 2c 74 29 3d 3e 24 72 28 65 2c 7b 63 6f 6e 66 69 67 3a 74 7d 29 2c 5b 63 2e 67 4b 2e 73 65 74 43 6f 6e 73 65 6e 74 5d 3a 28 65 2c 74 29 3d 3e 7b 6c 65 74 7b 63 61 74 65 67 6f 72 79 3a 72 2c 61 63 63 65 70 74 4f 72 44 65 6e 79 3a 6f 7d 3d 74 3b 72 65 74 75 72 6e 22 6f 62 6a 65 63 Data Ascii: \|\|{};return(0,y.h1)(Tr({},e),{iab:{usp:{ccpaApplies:s}}})},kr=(e,t)=>[(0,i.v)(e,t),t].includes(n.FA)\|\|!0===t,Nr=(0,A.mz)(Cr,{[c.gK.init]:$r,[c.gK.updateConfig]:(e,t)=>$r(e,{config:t}),[c.gK.setConsent]:(e,t)=>{let{category:r,acceptOrDeny:o}=t;return"objec

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	53364	151.101.1.140	443	3992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-24 12:56:11 UTC	532	OUT	GET /ads/pixel.js HTTP/1.1 Host: www.redditstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://metamask.io/faqs/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-24 12:56:11 UTC	1015	IN	HTTP/1.1 200 OK Connection: close Content-Length: 12103 Last-Modified: Mon, 23 Sep 2024 17:14:22 GMT ETag: "bed9b675380c07edc84c03d0f362b192" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=60 Content-Encoding: gzip Content-Type: application/javascript Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Tue, 24 Sep 2024 12:56:11 GMT Vary: Accept-Encoding,Origin Server: snooserv Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.02, "failure_fraction": 0.02}
2024-09-24 12:56:11 UTC	1378	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 d4 3b 6b 73 da c8 96 7f 05 ab 6e b8 92 69 cb 80 b1 93 08 6b 5c 04 e4 98 89 8d bd 3c 9c 4c b9 18 4a 96 1a 50 22 24 46 12 71 bc 86 fd ed 7b fa 25 b5 04 b6 93 3b 3b 1f 36 95 42 dd 7d 4e 9f 77 9f 3e dd 92 f7 a6 ab c0 49 bc 30 28 45 2a 46 01 4a b4 a7 74 24 54 3d 34 d5 9e bc a9 ba 17 dc 79 63 d6 c2 b4 f5 dd 8e 4a 8e a9 08 54 c5 34 93 c7 25 0e a7 a5 08 ff b5 f2 22 5c 2e f3 46 93 cc 99 96 cb 8e 16 e1 64 15 05 25 07 88 ee 55 35 32 be 12 63 2b 3e 46 a8 da 66 80 1f 4a 56 14 85 91 aa b4 ed 20 08 93 d2 d4 0b dc d2 22 74 57 3e 2e fd 5b a9 78 15 e5 df 8a d6 4c e6 51 f8 50 b2 75 27 74 b1 a9 5c 5d 77 46 97 d6 a4 77 3d 9c 9c 5f 8f 7a 1d 05 d9 1b 42 6f 69 12 d9 cd 27 fc 63 19 46 49 6c 3c 6d 36 4d a2 c3 5d 75 ac 3b b6 ef ab 4b 9d 83 90 d0 46 8d Data Ascii: ;ksnik\<LJP"$Fq{%;;6B}Nw>I0(E*FJt$T=4ycJT4%"\.Fd%U52c+>FfJV "tW>.[xLQPu't\]wFw=_zBoi'cFIl<m6M]u;KF
2024-09-24 12:56:11 UTC	1378	IN	Data Raw: 35 f4 02 55 21 55 c8 12 ba 52 28 00 06 cc cb 94 67 fd 4b 16 4d ac c3 63 0b 15 bc 28 63 12 5f d6 b5 4c bb 23 58 a4 94 11 f1 20 a7 02 9b 27 d8 1f ce 82 75 0d 81 8c 74 ed 7a 6f de ed 37 5e f5 af cc e9 b0 4e 72 fd 25 54 64 41 8d bb 96 77 fe 31 ef fa 94 fe df 77 b0 44 87 39 8f 39 4c 9f 46 e1 82 8c b6 61 1b a0 6e cf fc 27 4f 79 d6 85 0c 29 e7 c5 74 88 3b 32 ed 3f e3 cb 02 3e 55 4a 56 65 6d aa a0 41 39 23 e3 70 79 5b 89 ea 69 c2 97 a0 e8 ab be 2c 70 22 ce 1c 25 d3 77 dc 95 b4 f9 8a 23 a5 d2 de c5 64 eb 1c f5 bb ed 70 b1 84 4c 04 c1 86 63 c7 5e 62 95 c5 84 b4 9b 66 04 b4 b4 dc 07 5a c5 52 ff ca f6 c1 86 0b a8 e6 47 c3 f3 83 77 25 d7 4e 6c 85 08 59 b0 f9 0a 04 a5 16 e7 92 70 7e 14 4b 5d 05 5c 0a b6 b5 e7 e4 13 13 35 42 f4 c3 6a 3a c5 11 76 3f f8 a1 f3 ad e5 cf c2 Data Ascii: 5U!UR(gKMc(c_L#X 'utzo7^Nr%TdAw1wD99LFan'Oy)t;2?>UJVemA9#py[i,p"%w#dpLc^bfZRGw%NlYp~K]\5Bj:v?
2024-09-24 12:56:11 UTC	1378	IN	Data Raw: 3e a6 01 51 71 68 ef 68 4c e3 a2 e2 d2 5e 63 4c c3 a3 82 69 ef 78 4c a3 a4 32 a5 bd 93 31 0d 96 ca 8c f6 de 8e 69 cc 54 e6 eb 2a 0d d7 f3 ad 7a 88 65 bb 9f 3a d5 04 64 09 0e c3 c4 f6 cd 77 fb c5 63 15 83 5e e2 69 02 c0 5c 81 2d 6a 81 94 e6 5d 8a 0a 46 3d 86 93 7d ad fe 8e 9e df d3 f1 37 47 f5 4c 84 bb 5a a3 a2 a6 a0 ca 49 03 66 bd 3f 3d 6d 68 63 96 19 a7 7e 08 8b 2c 13 ee 30 4b 5e 9a 4c e5 f8 39 2a d9 d4 fc c9 c0 6c ec 67 27 09 7e 6b b1 ab cc 64 ab fa c5 43 00 cf 3b af 1c 03 68 d2 91 f2 44 fe 18 00 55 56 bb 90 c7 72 a5 a6 ca 60 a4 2c 23 f5 e0 6e cc b4 50 14 d8 bc 60 43 69 9d c0 c6 ff 3f 96 09 c7 3f 51 26 28 ab 18 97 c8 c5 02 68 46 f7 0a cf 45 ed eb de 60 d8 ea 0d 07 66 4e 76 fa 12 2c 89 15 72 e1 49 2c 26 43 d9 08 80 c8 1b 64 18 c6 71 42 77 8b 2f 57 97 17 Data Ascii: >QqhhL^cLixL21iTze:dwc^i\-j]F=}7GLZIf?=mhc~,0K^L9lg'~kdC;hDUVr`,#nP`Ci??Q&(hFE`fNv,rI,&CdqBw/W
2024-09-24 12:56:11 UTC	1378	IN	Data Raw: 86 7f dc 58 06 db 6c 21 57 92 87 82 a8 6c f0 03 8c 05 da c0 ba b4 da c3 eb 1c fe a4 3d 18 f0 39 a4 a9 f0 6d 6b 68 7d 19 8a 61 d2 a6 f4 08 df 61 ab db 1b 50 c2 69 8f c1 ac 2f b0 b0 19 80 36 81 6f 1a f1 40 00 b2 54 c6 19 b6 2c 0b 16 2a 7d 90 8d 85 89 05 69 9f b7 e4 b9 45 a1 89 b8 29 90 4a cc 64 4d c7 a8 b8 1b f2 8f 7e b8 fc f6 3f 39 25 bc 7a 44 80 ea eb bf 56 38 7a 84 34 0a eb 3f c9 9f 16 fe 22 10 f1 19 9a be 85 8a 58 6d 1c cb 53 f8 10 50 26 1b fc f7 86 0c a3 5b be 86 6c 58 b8 de 02 2a 42 28 59 60 35 d3 d4 9d 95 8c 04 29 fd c0 8b 1c 4d 3a e4 ed 05 61 4e 26 a9 5a 45 d1 95 0a 41 da 34 b9 da fa 4e 82 bb 06 85 a1 c8 3d 1a b9 9f 1b 01 99 73 f2 09 01 85 de d6 33 29 1c 36 42 b2 18 ff 56 73 e9 7b 89 29 0d d3 57 74 50 3e eb 4a 7a 1a a6 23 fc c0 7d 5a 3f 93 90 0d 0a Data Ascii: Xl!Wl=9mkh}aaPi/6o@T,}iE)JdM~?9%zDV8z4?"XmSP&[lXB(Y`5)M:aN&ZEA4N=s3)6BVs{)WtP>Jz#}Z?
2024-09-24 12:56:11 UTC	1378	IN	Data Raw: 48 b6 ae e7 ef 25 43 dd 92 73 ec 75 6f 3c 3c 97 bf 72 1b 3d bb 2c c6 75 d6 9f 74 4c 64 b6 7d 3a a1 01 67 2b 68 f4 e5 16 b8 52 98 68 58 f6 4a 39 8f cb 5c 27 36 e8 bd 55 41 1a 3b 4e d8 20 c8 d3 44 96 3a 9e dd 8e e4 36 a1 5f 96 49 77 15 7d 8a b0 99 dc 3d d7 7d b8 12 71 5c 16 85 22 4c 22 23 b4 d5 e7 4e 90 2d c7 a1 81 94 0b b6 6c 70 38 2f cb 2d 36 bb de 5f 16 bd 41 43 99 36 9a 32 b2 7d 96 4a 10 96 49 d8 33 f7 1f 74 19 50 3c e5 7a 64 2b 7d 90 8d d4 22 2b 8e e1 f8 a1 35 5a d8 47 54 e9 0c 4a ac d7 36 c6 fb c9 e0 96 37 06 e2 16 b6 1a 68 17 66 a0 75 08 53 6c f0 eb b0 b7 3b 28 7f e9 18 1d c3 66 f3 79 7c c7 63 64 27 75 18 70 06 73 f4 0c 0e 8b 67 d3 b9 ec b4 a5 66 98 3e ea dc 4f 30 9b 07 38 19 d8 37 9f a4 a7 97 b3 57 0b c8 ac d5 d6 1d 1e 21 79 0b 7d 33 08 dc 4e 5b b4 Data Ascii: H%Csuo<<r=,utLd}:g+hRhXJ9\'6UA;N D:6_Iw}=}q\"L"#N-lp8/-6_AC62}JI3tP<zd+}"+5ZGTJ67hfuSl;(fy\|cd'upsgf>O087W!y}3N[
2024-09-24 12:56:11 UTC	1378	IN	Data Raw: e5 3a 01 a9 89 6d 31 99 98 99 94 b1 3b 1e a8 a9 ad 12 36 6c eb b0 f2 16 8c 25 6e 38 bc 41 ad de ea 63 63 a6 22 d0 0b f8 65 1d d0 09 ea e6 44 bb 11 ac eb 67 06 52 94 c1 37 02 1c 34 44 04 93 aa 4d 7d b3 8b c7 35 10 61 2d 40 12 42 04 9b 95 12 ae 4c 6a 1e 81 93 32 03 d2 6d d3 22 d5 83 60 21 89 b6 98 14 91 b6 90 a5 0c aa 04 6f 04 d4 5c fb 1d a4 62 f7 c0 11 ed b6 b0 e8 52 24 e1 40 97 8a f5 99 53 d2 ab 1b 68 d3 55 2a ca 34 2e 43 97 31 36 5a 6f 2e 89 35 c4 46 f7 c3 b8 22 5f d6 ff 14 9e e8 c8 0d 5f cb 19 1f b8 fc c4 19 a5 41 fc a5 3b 1f 63 38 2a 39 a8 e6 b9 0e 7b bb 00 66 0d c7 04 c0 41 95 94 61 f6 5f e2 2b 99 ee 97 52 ac 6d 60 d3 bb 95 34 6b ae ec 93 dd fa 3f c0 d1 d5 88 5a 35 7a cc 68 f1 47 d3 92 ef bf 30 4d d2 1f 13 67 a2 3b 2e b6 08 c7 f6 5b 8c 79 3f 7c f3 74 Data Ascii: :m1;6l%n8Acc"eDgR74DM}5a-@BLj2m"`!o\bR$@ShU4.C16Zo.5F"__A;c89{fAa_+Rm`4k?Z5zhG0Mg;.[y?\|t
2024-09-24 12:56:11 UTC	1378	IN	Data Raw: 36 00 e1 72 d9 a2 2f 24 2b f9 5c 52 52 4f c8 e5 3f 55 df de 80 6f a2 0c 78 b2 e9 f0 3d 94 0e 4f 32 dd 5b 4b 08 4c c9 c2 7f 8e 37 7a 70 4e ab 0d 5b 4a 73 62 8b 13 38 0e 42 d6 33 78 a8 5b 81 63 3a 4a 28 78 b0 7b b0 9f 23 d2 46 98 11 35 03 50 d0 b1 2c e1 6b 03 41 0d da f0 13 23 aa 36 84 0b 93 79 a8 85 b8 d8 1d 18 c8 19 3b eb 72 95 4a 92 b9 8e 92 b1 a2 d6 40 2a 6d 0f 9d 03 70 c6 9c 02 87 b9 07 5a f3 d4 54 44 2c 45 c2 d6 ad 73 0a d0 23 09 1c c3 a6 72 5d ab 47 1b 97 ef 36 56 86 9d 88 54 4f 1a ea 40 03 eb 77 4d dd 7e 64 8c a0 aa be 69 04 31 2e 44 a0 32 ad b2 a2 f4 c7 6f d6 dc 11 c1 a8 cd 9a 4f 44 64 3a 28 75 e2 a3 fd 9d 8c 5c 09 f6 86 da 52 5d 45 af 8f da c2 d7 6a dc a6 9d 44 ad 6f 99 1f 00 e0 e9 38 77 49 29 15 74 0f 0e 7b ee 78 35 6a 47 de c1 48 41 ee 91 38 00 Data Ascii: 6r/$+\RRO?Uox=O2[KL7zpN[Jsb8B3x[c:J(x{#F5P,kA#6y;rJ@*mpZTD,Es#r]G6VTO@wM~di1.D2oODd:(u\R]EjDo8wI)t{x5jGHA8
2024-09-24 12:56:11 UTC	1378	IN	Data Raw: fe e0 c8 55 3a c8 22 06 64 b9 52 56 74 03 a2 d5 6a ec c5 1c 03 38 55 60 e6 99 fa 0a 05 b9 b4 e2 2e 61 80 a7 78 71 c8 c9 34 08 18 53 f1 5c 3b 08 52 b4 90 08 24 4e 1d 44 80 24 d7 fc 8f c6 6c f2 6f 76 3f 24 d7 3a 6c fb ce 15 5c 80 85 01 28 00 cb 06 89 b9 c8 65 ab 76 26 5a 57 52 ff 43 99 4e d1 72 b8 c4 0b 75 80 2c 03 95 9b 27 92 36 a4 c4 2c 49 98 17 26 3e 90 c9 57 f7 77 4b 28 e1 42 aa d0 41 d0 9b 66 5b f7 7e 32 99 e9 bd 22 a9 cf 58 4a f6 54 44 f4 69 6a 7b 9f fd 8b b0 1b fa ec 7b 11 dd 25 67 3f 88 8a 9d 69 d6 dc 76 5d 9c 85 dd c0 c3 65 69 15 1b d4 ac 89 d5 46 76 f0 59 f3 fb 8a 38 46 c1 2e 3b db 79 22 56 6a 1c b2 9d ef 7c 00 be 93 cf 76 40 2b b8 f3 df 16 fa 01 f4 8e ef 9d 4d be 52 78 44 74 1b ee 06 dd bf 9e 48 d9 06 c9 9d 0a 7b 6d cc ca 3c aa 05 6b 71 5c 4c b1 Data Ascii: U:"dRVtj8U`.axq4S\;R$ND$lov?$:l\(ev&ZWRCNru,'6,I&>WwK(BAf[~2"XJTDij{{%g?iv]eiFvY8F.;y"Vj\|v@+MRxDtH{m<kq\L
2024-09-24 12:56:11 UTC	1079	IN	Data Raw: 5f 69 95 89 80 5b 83 35 d3 02 10 c9 af 00 24 91 3b c4 3b f9 90 e9 8a 32 3c 5e 67 15 f4 fb 69 1b 33 92 04 89 c8 f0 50 9d 01 4c 11 60 0a 00 4b 73 63 90 11 98 1d 73 73 e5 a6 a6 fc 5f 34 57 93 74 1d a2 19 c9 e1 94 90 2e 4f 35 6c 17 1c 22 88 77 39 42 b1 f5 bb 8a fb 5b 91 94 22 c7 1c 72 f2 83 d1 a4 37 53 c5 52 91 8c 11 5f 50 42 dd b1 44 60 c0 5c 0e e0 c4 59 79 b3 a4 40 88 af 71 2c 2b 89 28 61 53 c2 7a 25 aa e0 41 df 65 50 f2 98 98 d6 22 c1 7a b0 97 a2 45 92 53 32 b8 59 43 90 2e 28 52 a8 e9 1c f5 a8 f2 96 47 e3 20 28 0c 38 09 ac aa 11 43 33 1e dd 0c 2a d8 05 39 a8 99 e1 6b f0 e9 07 ba f9 d9 eb c7 8a da 0c 9c 4a 5e 2c cc 68 f2 2f 42 09 30 06 43 25 1e e9 20 3c 96 00 95 d2 a3 83 1b a0 09 e7 65 0f 6e fd 36 fa 93 3e 5e 96 bd f9 a1 dc a2 1c 0c 3a 7d 13 cb 97 bb 96 4d Data Ascii: _i[5$;;2<^gi3PL`Kscss_4Wt.O5l"w9B["r7SR_PBD`\Yy@q,+(aSz%AeP"zES2YC.(RG (8C3*9kJ^,h/B0C% <en6>^:}M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	53366	162.159.140.229	443	3992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-24 12:56:11 UTC	844	OUT	GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=0bc14146-8201-4499-a18e-0c054c9183f8&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=df68bdfa-c690-47be-960a-be5b92eda25d&tw_document_href=https%3A%2F%2Fmetamask.io%2Ffaqs%2F&tw_iframe_status=0&txn_id=oert2&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://metamask.io/faqs/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-24 12:56:12 UTC	882	IN	HTTP/1.1 200 OK Date: Tue, 24 Sep 2024 12:56:12 GMT Content-Type: image/gif;charset=utf-8 Content-Length: 43 Connection: close perf: 7402827104 set-cookie: muc_ads=9feb2eed-e249-42d4-9cad-35dbc6dfc777; Max-Age=63072000; Expires=Thu, 24 Sep 2026 12:56:12 GMT; Path=/; Domain=t.co; Secure; SameSite=None Cache-Control: no-cache, no-store, max-age=0 x-transaction-id: 983dc073846b6bfb strict-transport-security: max-age=0 x-response-time: 77 x-connection-hash: 978ecdea3e31a21459e4c86ca55bd7a56f997ed55150d8bdc7e44f8aa57d0e61 CF-Cache-Status: DYNAMIC Set-Cookie: __cf_bm=nqHJZFSpPjQ3JAef8twD0ASqkbJHFb9NyiWdIKKBUH4-1727182572-1.0.1.1-a4AhXy7HVpHj8uWuJJVWsehI0E1K_iFOj1zyXu5ubQPwPPiPx_NhQ5otne_pmmUqRMXI3TOPLX02BPuuzeMH7g; path=/; expires=Tue, 24-Sep-24 13:26:12 GMT; domain=.t.co; HttpOnly; Secure; SameSite=None Server: cloudflare tsa_b CF-RAY: 8c82eee32c3c0fa9-EWR
2024-09-24 12:56:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	53365	199.232.188.157	443	3992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-24 12:56:12 UTC	352	OUT	GET /uwt.js HTTP/1.1 Host: static.ads-twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-24 12:56:12 UTC	536	IN	HTTP/1.1 200 OK Connection: close Content-Length: 57671 Last-Modified: Tue, 26 Mar 2024 20:58:07 GMT ETag: "bbbcf811d8437a575d796a4c1e5d4fad" x-amz-server-side-encryption: AES256 Cache-Control: no-cache Content-Type: application/javascript; charset=utf-8 Accept-Ranges: bytes Date: Tue, 24 Sep 2024 12:56:12 GMT X-Served-By: cache-iad-kcgs7200117-IAD, cache-muc13924-MUC X-Cache: HIT, HIT Vary: Accept-Encoding,Host P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT" x-tw-cdn: FT
2024-09-24 12:56:12 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 7b 36 31 37 33 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3b 74 2e 65 78 70 6f 72 74 73 3d 28 72 3d 72 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 26 26 28 72 3d 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2e 63 72 79 70 74 6f 26 26 28 72 3d 73 65 6c 66 2e 63 72 79 70 74 6f 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 26 26 28 72 3d Data Ascii: !function(){var t={6173:function(t,e,n){var r;t.exports=(r=r\|\|function(t,e){var r;if("undefined"!=typeof window&&window.crypto&&(r=window.crypto),"undefined"!=typeof self&&self.crypto&&(r=self.crypto),"undefined"!=typeof globalThis&&globalThis.crypto&&(r=
2024-09-24 12:56:12 UTC	1378	IN	Data Raw: 74 68 69 73 2e 77 6f 72 64 73 3d 74 7c 7c 5b 5d 2c 74 68 69 73 2e 73 69 67 42 79 74 65 73 3d 6e 75 6c 6c 21 3d 65 3f 65 3a 34 2a 74 2e 6c 65 6e 67 74 68 7d 2c 74 6f 53 74 72 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 7c 7c 66 29 2e 73 74 72 69 6e 67 69 66 79 28 74 68 69 73 29 7d 2c 63 6f 6e 63 61 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 77 6f 72 64 73 2c 6e 3d 74 2e 77 6f 72 64 73 2c 72 3d 74 68 69 73 2e 73 69 67 42 79 74 65 73 2c 69 3d 74 2e 73 69 67 42 79 74 65 73 3b 69 66 28 74 68 69 73 2e 63 6c 61 6d 70 28 29 2c 72 25 34 29 66 6f 72 28 76 61 72 20 6f 3d 30 3b 6f 3c 69 3b 6f 2b 2b 29 7b 76 61 72 20 61 3d 6e 5b 6f 3e 3e 3e 32 5d 3e 3e 3e 32 34 2d 6f 25 34 2a 38 26 32 35 35 3b 65 5b 72 2b 6f Data Ascii: this.words=t\|\|[],this.sigBytes=null!=e?e:4t.length},toString:function(t){return(t\|\|f).stringify(this)},concat:function(t){var e=this.words,n=t.words,r=this.sigBytes,i=t.sigBytes;if(this.clamp(),r%4)for(var o=0;o<i;o++){var a=n[o>>>2]>>>24-o%48&255;e[r+o
2024-09-24 12:56:12 UTC	1378	IN	Data Raw: 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 64 2e 70 61 72 73 65 28 75 6e 65 73 63 61 70 65 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 29 29 29 7d 7d 2c 70 3d 63 2e 42 75 66 66 65 72 65 64 42 6c 6f 63 6b 41 6c 67 6f 72 69 74 68 6d 3d 75 2e 65 78 74 65 6e 64 28 7b 72 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 64 61 74 61 3d 6e 65 77 20 73 2e 69 6e 69 74 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 3d 30 7d 2c 5f 61 70 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 68 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 Data Ascii: ion(t){return d.parse(unescape(encodeURIComponent(t)))}},p=c.BufferedBlockAlgorithm=u.extend({reset:function(){this._data=new s.init,this._nDataBytes=0},_append:function(t){"string"==typeof t&&(t=h.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigByt
2024-09-24 12:56:12 UTC	1378	IN	Data Raw: 72 28 76 61 72 20 72 3d 32 2c 69 3d 30 3b 69 3c 36 34 3b 29 65 28 72 29 26 26 28 69 3c 38 26 26 28 63 5b 69 5d 3d 6e 28 74 2e 70 6f 77 28 72 2c 2e 35 29 29 29 2c 75 5b 69 5d 3d 6e 28 74 2e 70 6f 77 28 72 2c 31 2f 33 29 29 2c 69 2b 2b 29 2c 72 2b 2b 7d 28 29 3b 76 61 72 20 73 3d 5b 5d 2c 6c 3d 61 2e 53 48 41 32 35 36 3d 6f 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 69 2e 69 6e 69 74 28 63 2e 73 6c 69 63 65 28 30 29 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 74 68 69 73 2e 5f 68 61 73 68 2e 77 6f 72 64 73 2c 72 3d 6e 5b 30 5d 2c 69 3d 6e 5b 31 5d 2c 6f 3d 6e 5b 32 5d 2c 61 3d 6e 5b 33 Data Ascii: r(var r=2,i=0;i<64;)e(r)&&(i<8&&(c[i]=n(t.pow(r,.5))),u[i]=n(t.pow(r,1/3)),i++),r++}();var s=[],l=a.SHA256=o.extend({_doReset:function(){this._hash=new i.init(c.slice(0))},_doProcessBlock:function(t,e){for(var n=this._hash.words,r=n[0],i=n[1],o=n[2],a=n[3
2024-09-24 12:56:12 UTC	1378	IN	Data Raw: 72 20 69 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 74 68 69 73 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 21 74 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 6e 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 74 79 70 65 6f 66 20 74 2b 22 20 22 2b 74 2b 22 20 69 73 20 6e 6f 74 20 69 74 65 72 61 62 6c 65 28 63 61 6e 6e 6f 74 20 72 65 61 64 20 70 72 6f 70 65 72 74 79 20 53 79 6d 62 6f 6c 28 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 29 29 22 29 29 3b 76 61 72 20 72 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 29 3b 69 66 28 30 3d 3d 3d 72 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 65 28 5b 5d 29 3b 76 61 72 20 69 3d 72 2e 6c 65 6e 67 74 Data Ascii: r i=function(t){return new this((function(e,n){if(!t\|\|void 0===t.length)return n(new TypeError(typeof t+" "+t+" is not iterable(cannot read property Symbol(Symbol.iterator))"));var r=Array.prototype.slice.call(t);if(0===r.length)return e([]);var i=r.lengt
2024-09-24 12:56:12 UTC	1378	IN	Data Raw: 76 6f 69 64 20 64 28 74 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 76 6f 69 64 20 70 28 28 72 3d 6e 2c 69 3d 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 61 70 70 6c 79 28 69 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 74 29 7d 74 2e 5f 73 74 61 74 65 3d 31 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 64 28 74 29 7d 63 61 74 63 68 28 65 29 7b 66 28 74 2c 65 29 7d 76 61 72 20 72 2c 69 7d 66 75 6e 63 74 69 6f 6e 20 66 28 74 2c 65 29 7b 74 2e 5f 73 74 61 74 65 3d 32 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 64 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 74 29 7b 32 3d 3d 3d 74 2e 5f 73 74 61 74 65 26 26 30 3d 3d 3d 74 2e 5f 64 65 66 65 72 72 65 64 73 2e 6c 65 6e 67 74 68 26 26 75 2e 5f 69 6d 6d 65 64 69 61 74 65 46 6e Data Ascii: void d(t);if("function"==typeof n)return void p((r=n,i=e,function(){r.apply(i,arguments)}),t)}t._state=1,t._value=e,d(t)}catch(e){f(t,e)}var r,i}function f(t,e){t._state=2,t._value=e,d(t)}function d(t){2===t._state&&0===t._deferreds.length&&u._immediateFn
2024-09-24 12:56:12 UTC	1378	IN	Data Raw: 74 75 72 6e 20 6e 65 77 20 75 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 6e 28 74 29 7d 29 29 7d 2c 75 2e 72 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 75 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 21 61 28 74 29 29 72 65 74 75 72 6e 20 6e 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 50 72 6f 6d 69 73 65 2e 72 61 63 65 20 61 63 63 65 70 74 73 20 61 6e 20 61 72 72 61 79 22 29 29 3b 66 6f 72 28 76 61 72 20 72 3d 30 2c 69 3d 74 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 75 2e 72 65 73 6f 6c 76 65 28 74 5b 72 5d 29 2e 74 68 65 6e 28 65 2c 6e 29 7d 29 29 7d 2c 75 2e 5f 69 6d 6d 65 64 69 61 74 65 46 6e 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 65 74 49 6d 6d 65 64 69 61 74 65 Data Ascii: turn new u((function(e,n){n(t)}))},u.race=function(t){return new u((function(e,n){if(!a(t))return n(new TypeError("Promise.race accepts an array"));for(var r=0,i=t.length;r<i;r++)u.resolve(t[r]).then(e,n)}))},u._immediateFn="function"==typeof setImmediate
2024-09-24 12:56:12 UTC	1378	IN	Data Raw: 68 72 6f 77 22 3d 3d 3d 69 29 74 68 72 6f 77 20 6f 3b 72 65 74 75 72 6e 20 43 28 29 7d 66 6f 72 28 6e 2e 6d 65 74 68 6f 64 3d 69 2c 6e 2e 61 72 67 3d 6f 3b 3b 29 7b 76 61 72 20 61 3d 6e 2e 64 65 6c 65 67 61 74 65 3b 69 66 28 61 29 7b 76 61 72 20 63 3d 67 28 61 2c 6e 29 3b 69 66 28 63 29 7b 69 66 28 63 3d 3d 3d 6c 29 63 6f 6e 74 69 6e 75 65 3b 72 65 74 75 72 6e 20 63 7d 7d 69 66 28 22 6e 65 78 74 22 3d 3d 3d 6e 2e 6d 65 74 68 6f 64 29 6e 2e 73 65 6e 74 3d 6e 2e 5f 73 65 6e 74 3d 6e 2e 61 72 67 3b 65 6c 73 65 20 69 66 28 22 74 68 72 6f 77 22 3d 3d 3d 6e 2e 6d 65 74 68 6f 64 29 7b 69 66 28 22 73 75 73 70 65 6e 64 65 64 53 74 61 72 74 22 3d 3d 3d 72 29 74 68 72 6f 77 20 72 3d 22 63 6f 6d 70 6c 65 74 65 64 22 2c 6e 2e 61 72 67 3b 6e 2e 64 69 73 70 61 74 63 68 Data Ascii: hrow"===i)throw o;return C()}for(n.method=i,n.arg=o;;){var a=n.delegate;if(a){var c=g(a,n);if(c){if(c===l)continue;return c}}if("next"===n.method)n.sent=n._sent=n.arg;else if("throw"===n.method){if("suspendedStart"===r)throw r="completed",n.arg;n.dispatch
2024-09-24 12:56:12 UTC	1378	IN	Data Raw: 29 7d 28 69 2c 6f 2c 72 2c 61 29 7d 29 29 7d 72 65 74 75 72 6e 20 72 3d 72 3f 72 2e 74 68 65 6e 28 61 2c 61 29 3a 61 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 67 28 74 2c 65 29 7b 76 61 72 20 6e 3d 74 2e 69 74 65 72 61 74 6f 72 5b 65 2e 6d 65 74 68 6f 64 5d 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6e 29 7b 69 66 28 65 2e 64 65 6c 65 67 61 74 65 3d 6e 75 6c 6c 2c 22 74 68 72 6f 77 22 3d 3d 3d 65 2e 6d 65 74 68 6f 64 29 7b 69 66 28 74 2e 69 74 65 72 61 74 6f 72 2e 72 65 74 75 72 6e 26 26 28 65 2e 6d 65 74 68 6f 64 3d 22 72 65 74 75 72 6e 22 2c 65 2e 61 72 67 3d 76 6f 69 64 20 30 2c 67 28 74 2c 65 29 2c 22 74 68 72 6f 77 22 3d 3d 3d 65 2e 6d 65 74 68 6f 64 29 29 72 65 74 75 72 6e 20 6c 3b 65 2e 6d 65 74 68 6f 64 3d 22 74 68 72 6f 77 22 2c 65 2e 61 72 67 3d 6e 65 Data Ascii: )}(i,o,r,a)}))}return r=r?r.then(a,a):a()}}function g(t,e){var n=t.iterator[e.method];if(void 0===n){if(e.delegate=null,"throw"===e.method){if(t.iterator.return&&(e.method="return",e.arg=void 0,g(t,e),"throw"===e.method))return l;e.method="throw",e.arg=ne
2024-09-24 12:56:12 UTC	1378	IN	Data Raw: 61 74 6f 72 46 75 6e 63 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 72 65 74 75 72 6e 21 21 65 26 26 28 65 3d 3d 3d 64 7c 7c 22 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 22 3d 3d 3d 28 65 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 65 2e 6e 61 6d 65 29 29 7d 2c 74 2e 6d 61 72 6b 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2c 68 29 3a 28 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 68 2c 63 28 74 2c 61 2c 22 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 22 29 29 2c 74 2e 70 Data Ascii: atorFunction=function(t){var e="function"==typeof t&&t.constructor;return!!e&&(e===d\|\|"GeneratorFunction"===(e.displayName\|\|e.name))},t.mark=function(t){return Object.setPrototypeOf?Object.setPrototypeOf(t,h):(t.__proto__=h,c(t,a,"GeneratorFunction")),t.p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	53372	151.101.129.140	443	3992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-24 12:56:12 UTC	573	OUT	GET /pixels/t2_vjeg7kke/config HTTP/1.1 Host: pixel-config.reddit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://metamask.io Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://metamask.io/faqs/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-24 12:56:12 UTC	253	IN	HTTP/1.1 200 OK Connection: close Content-Length: 27 Access-Control-Allow-Origin: * Cache-Control: max-age=14400 Content-Encoding: gzip Content-Type: application/json Accept-Ranges: bytes Date: Tue, 24 Sep 2024 12:56:12 GMT Via: 1.1 varnish
2024-09-24 12:56:12 UTC	27	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 ff aa ae e5 02 04 00 00 ff ff 06 b0 a1 dd 03 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	53370	151.101.1.140	443	3992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-24 12:56:12 UTC	356	OUT	GET /ads/pixel.js HTTP/1.1 Host: www.redditstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-24 12:56:12 UTC	1015	IN	HTTP/1.1 200 OK Connection: close Content-Length: 12103 Last-Modified: Mon, 23 Sep 2024 17:14:22 GMT ETag: "bed9b675380c07edc84c03d0f362b192" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=60 Content-Encoding: gzip Content-Type: application/javascript Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Tue, 24 Sep 2024 12:56:12 GMT Vary: Accept-Encoding,Origin Server: snooserv Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.02, "failure_fraction": 0.02}
2024-09-24 12:56:12 UTC	1378	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 d4 3b 6b 73 da c8 96 7f 05 ab 6e b8 92 69 cb 80 b1 93 08 6b 5c 04 e4 98 89 8d bd 3c 9c 4c b9 18 4a 96 1a 50 22 24 46 12 71 bc 86 fd ed 7b fa 25 b5 04 b6 93 3b 3b 1f 36 95 42 dd 7d 4e 9f 77 9f 3e dd 92 f7 a6 ab c0 49 bc 30 28 45 2a 46 01 4a b4 a7 74 24 54 3d 34 d5 9e bc a9 ba 17 dc 79 63 d6 c2 b4 f5 dd 8e 4a 8e a9 08 54 c5 34 93 c7 25 0e a7 a5 08 ff b5 f2 22 5c 2e f3 46 93 cc 99 96 cb 8e 16 e1 64 15 05 25 07 88 ee 55 35 32 be 12 63 2b 3e 46 a8 da 66 80 1f 4a 56 14 85 91 aa b4 ed 20 08 93 d2 d4 0b dc d2 22 74 57 3e 2e fd 5b a9 78 15 e5 df 8a d6 4c e6 51 f8 50 b2 75 27 74 b1 a9 5c 5d 77 46 97 d6 a4 77 3d 9c 9c 5f 8f 7a 1d 05 d9 1b 42 6f 69 12 d9 cd 27 fc 63 19 46 49 6c 3c 6d 36 4d a2 c3 5d 75 ac 3b b6 ef ab 4b 9d 83 90 d0 46 8d Data Ascii: ;ksnik\<LJP"$Fq{%;;6B}Nw>I0(E*FJt$T=4ycJT4%"\.Fd%U52c+>FfJV "tW>.[xLQPu't\]wFw=_zBoi'cFIl<m6M]u;KF
2024-09-24 12:56:12 UTC	1378	IN	Data Raw: 35 f4 02 55 21 55 c8 12 ba 52 28 00 06 cc cb 94 67 fd 4b 16 4d ac c3 63 0b 15 bc 28 63 12 5f d6 b5 4c bb 23 58 a4 94 11 f1 20 a7 02 9b 27 d8 1f ce 82 75 0d 81 8c 74 ed 7a 6f de ed 37 5e f5 af cc e9 b0 4e 72 fd 25 54 64 41 8d bb 96 77 fe 31 ef fa 94 fe df 77 b0 44 87 39 8f 39 4c 9f 46 e1 82 8c b6 61 1b a0 6e cf fc 27 4f 79 d6 85 0c 29 e7 c5 74 88 3b 32 ed 3f e3 cb 02 3e 55 4a 56 65 6d aa a0 41 39 23 e3 70 79 5b 89 ea 69 c2 97 a0 e8 ab be 2c 70 22 ce 1c 25 d3 77 dc 95 b4 f9 8a 23 a5 d2 de c5 64 eb 1c f5 bb ed 70 b1 84 4c 04 c1 86 63 c7 5e 62 95 c5 84 b4 9b 66 04 b4 b4 dc 07 5a c5 52 ff ca f6 c1 86 0b a8 e6 47 c3 f3 83 77 25 d7 4e 6c 85 08 59 b0 f9 0a 04 a5 16 e7 92 70 7e 14 4b 5d 05 5c 0a b6 b5 e7 e4 13 13 35 42 f4 c3 6a 3a c5 11 76 3f f8 a1 f3 ad e5 cf c2 Data Ascii: 5U!UR(gKMc(c_L#X 'utzo7^Nr%TdAw1wD99LFan'Oy)t;2?>UJVemA9#py[i,p"%w#dpLc^bfZRGw%NlYp~K]\5Bj:v?
2024-09-24 12:56:12 UTC	1378	IN	Data Raw: 3e a6 01 51 71 68 ef 68 4c e3 a2 e2 d2 5e 63 4c c3 a3 82 69 ef 78 4c a3 a4 32 a5 bd 93 31 0d 96 ca 8c f6 de 8e 69 cc 54 e6 eb 2a 0d d7 f3 ad 7a 88 65 bb 9f 3a d5 04 64 09 0e c3 c4 f6 cd 77 fb c5 63 15 83 5e e2 69 02 c0 5c 81 2d 6a 81 94 e6 5d 8a 0a 46 3d 86 93 7d ad fe 8e 9e df d3 f1 37 47 f5 4c 84 bb 5a a3 a2 a6 a0 ca 49 03 66 bd 3f 3d 6d 68 63 96 19 a7 7e 08 8b 2c 13 ee 30 4b 5e 9a 4c e5 f8 39 2a d9 d4 fc c9 c0 6c ec 67 27 09 7e 6b b1 ab cc 64 ab fa c5 43 00 cf 3b af 1c 03 68 d2 91 f2 44 fe 18 00 55 56 bb 90 c7 72 a5 a6 ca 60 a4 2c 23 f5 e0 6e cc b4 50 14 d8 bc 60 43 69 9d c0 c6 ff 3f 96 09 c7 3f 51 26 28 ab 18 97 c8 c5 02 68 46 f7 0a cf 45 ed eb de 60 d8 ea 0d 07 66 4e 76 fa 12 2c 89 15 72 e1 49 2c 26 43 d9 08 80 c8 1b 64 18 c6 71 42 77 8b 2f 57 97 17 Data Ascii: >QqhhL^cLixL21iTze:dwc^i\-j]F=}7GLZIf?=mhc~,0K^L9lg'~kdC;hDUVr`,#nP`Ci??Q&(hFE`fNv,rI,&CdqBw/W
2024-09-24 12:56:12 UTC	1378	IN	Data Raw: 86 7f dc 58 06 db 6c 21 57 92 87 82 a8 6c f0 03 8c 05 da c0 ba b4 da c3 eb 1c fe a4 3d 18 f0 39 a4 a9 f0 6d 6b 68 7d 19 8a 61 d2 a6 f4 08 df 61 ab db 1b 50 c2 69 8f c1 ac 2f b0 b0 19 80 36 81 6f 1a f1 40 00 b2 54 c6 19 b6 2c 0b 16 2a 7d 90 8d 85 89 05 69 9f b7 e4 b9 45 a1 89 b8 29 90 4a cc 64 4d c7 a8 b8 1b f2 8f 7e b8 fc f6 3f 39 25 bc 7a 44 80 ea eb bf 56 38 7a 84 34 0a eb 3f c9 9f 16 fe 22 10 f1 19 9a be 85 8a 58 6d 1c cb 53 f8 10 50 26 1b fc f7 86 0c a3 5b be 86 6c 58 b8 de 02 2a 42 28 59 60 35 d3 d4 9d 95 8c 04 29 fd c0 8b 1c 4d 3a e4 ed 05 61 4e 26 a9 5a 45 d1 95 0a 41 da 34 b9 da fa 4e 82 bb 06 85 a1 c8 3d 1a b9 9f 1b 01 99 73 f2 09 01 85 de d6 33 29 1c 36 42 b2 18 ff 56 73 e9 7b 89 29 0d d3 57 74 50 3e eb 4a 7a 1a a6 23 fc c0 7d 5a 3f 93 90 0d 0a Data Ascii: Xl!Wl=9mkh}aaPi/6o@T,}iE)JdM~?9%zDV8z4?"XmSP&[lXB(Y`5)M:aN&ZEA4N=s3)6BVs{)WtP>Jz#}Z?
2024-09-24 12:56:12 UTC	1378	IN	Data Raw: 48 b6 ae e7 ef 25 43 dd 92 73 ec 75 6f 3c 3c 97 bf 72 1b 3d bb 2c c6 75 d6 9f 74 4c 64 b6 7d 3a a1 01 67 2b 68 f4 e5 16 b8 52 98 68 58 f6 4a 39 8f cb 5c 27 36 e8 bd 55 41 1a 3b 4e d8 20 c8 d3 44 96 3a 9e dd 8e e4 36 a1 5f 96 49 77 15 7d 8a b0 99 dc 3d d7 7d b8 12 71 5c 16 85 22 4c 22 23 b4 d5 e7 4e 90 2d c7 a1 81 94 0b b6 6c 70 38 2f cb 2d 36 bb de 5f 16 bd 41 43 99 36 9a 32 b2 7d 96 4a 10 96 49 d8 33 f7 1f 74 19 50 3c e5 7a 64 2b 7d 90 8d d4 22 2b 8e e1 f8 a1 35 5a d8 47 54 e9 0c 4a ac d7 36 c6 fb c9 e0 96 37 06 e2 16 b6 1a 68 17 66 a0 75 08 53 6c f0 eb b0 b7 3b 28 7f e9 18 1d c3 66 f3 79 7c c7 63 64 27 75 18 70 06 73 f4 0c 0e 8b 67 d3 b9 ec b4 a5 66 98 3e ea dc 4f 30 9b 07 38 19 d8 37 9f a4 a7 97 b3 57 0b c8 ac d5 d6 1d 1e 21 79 0b 7d 33 08 dc 4e 5b b4 Data Ascii: H%Csuo<<r=,utLd}:g+hRhXJ9\'6UA;N D:6_Iw}=}q\"L"#N-lp8/-6_AC62}JI3tP<zd+}"+5ZGTJ67hfuSl;(fy\|cd'upsgf>O087W!y}3N[
2024-09-24 12:56:12 UTC	1378	IN	Data Raw: e5 3a 01 a9 89 6d 31 99 98 99 94 b1 3b 1e a8 a9 ad 12 36 6c eb b0 f2 16 8c 25 6e 38 bc 41 ad de ea 63 63 a6 22 d0 0b f8 65 1d d0 09 ea e6 44 bb 11 ac eb 67 06 52 94 c1 37 02 1c 34 44 04 93 aa 4d 7d b3 8b c7 35 10 61 2d 40 12 42 04 9b 95 12 ae 4c 6a 1e 81 93 32 03 d2 6d d3 22 d5 83 60 21 89 b6 98 14 91 b6 90 a5 0c aa 04 6f 04 d4 5c fb 1d a4 62 f7 c0 11 ed b6 b0 e8 52 24 e1 40 97 8a f5 99 53 d2 ab 1b 68 d3 55 2a ca 34 2e 43 97 31 36 5a 6f 2e 89 35 c4 46 f7 c3 b8 22 5f d6 ff 14 9e e8 c8 0d 5f cb 19 1f b8 fc c4 19 a5 41 fc a5 3b 1f 63 38 2a 39 a8 e6 b9 0e 7b bb 00 66 0d c7 04 c0 41 95 94 61 f6 5f e2 2b 99 ee 97 52 ac 6d 60 d3 bb 95 34 6b ae ec 93 dd fa 3f c0 d1 d5 88 5a 35 7a cc 68 f1 47 d3 92 ef bf 30 4d d2 1f 13 67 a2 3b 2e b6 08 c7 f6 5b 8c 79 3f 7c f3 74 Data Ascii: :m1;6l%n8Acc"eDgR74DM}5a-@BLj2m"`!o\bR$@ShU4.C16Zo.5F"__A;c89{fAa_+Rm`4k?Z5zhG0Mg;.[y?\|t
2024-09-24 12:56:12 UTC	1378	IN	Data Raw: 36 00 e1 72 d9 a2 2f 24 2b f9 5c 52 52 4f c8 e5 3f 55 df de 80 6f a2 0c 78 b2 e9 f0 3d 94 0e 4f 32 dd 5b 4b 08 4c c9 c2 7f 8e 37 7a 70 4e ab 0d 5b 4a 73 62 8b 13 38 0e 42 d6 33 78 a8 5b 81 63 3a 4a 28 78 b0 7b b0 9f 23 d2 46 98 11 35 03 50 d0 b1 2c e1 6b 03 41 0d da f0 13 23 aa 36 84 0b 93 79 a8 85 b8 d8 1d 18 c8 19 3b eb 72 95 4a 92 b9 8e 92 b1 a2 d6 40 2a 6d 0f 9d 03 70 c6 9c 02 87 b9 07 5a f3 d4 54 44 2c 45 c2 d6 ad 73 0a d0 23 09 1c c3 a6 72 5d ab 47 1b 97 ef 36 56 86 9d 88 54 4f 1a ea 40 03 eb 77 4d dd 7e 64 8c a0 aa be 69 04 31 2e 44 a0 32 ad b2 a2 f4 c7 6f d6 dc 11 c1 a8 cd 9a 4f 44 64 3a 28 75 e2 a3 fd 9d 8c 5c 09 f6 86 da 52 5d 45 af 8f da c2 d7 6a dc a6 9d 44 ad 6f 99 1f 00 e0 e9 38 77 49 29 15 74 0f 0e 7b ee 78 35 6a 47 de c1 48 41 ee 91 38 00 Data Ascii: 6r/$+\RRO?Uox=O2[KL7zpN[Jsb8B3x[c:J(x{#F5P,kA#6y;rJ@*mpZTD,Es#r]G6VTO@wM~di1.D2oODd:(u\R]EjDo8wI)t{x5jGHA8
2024-09-24 12:56:12 UTC	1378	IN	Data Raw: fe e0 c8 55 3a c8 22 06 64 b9 52 56 74 03 a2 d5 6a ec c5 1c 03 38 55 60 e6 99 fa 0a 05 b9 b4 e2 2e 61 80 a7 78 71 c8 c9 34 08 18 53 f1 5c 3b 08 52 b4 90 08 24 4e 1d 44 80 24 d7 fc 8f c6 6c f2 6f 76 3f 24 d7 3a 6c fb ce 15 5c 80 85 01 28 00 cb 06 89 b9 c8 65 ab 76 26 5a 57 52 ff 43 99 4e d1 72 b8 c4 0b 75 80 2c 03 95 9b 27 92 36 a4 c4 2c 49 98 17 26 3e 90 c9 57 f7 77 4b 28 e1 42 aa d0 41 d0 9b 66 5b f7 7e 32 99 e9 bd 22 a9 cf 58 4a f6 54 44 f4 69 6a 7b 9f fd 8b b0 1b fa ec 7b 11 dd 25 67 3f 88 8a 9d 69 d6 dc 76 5d 9c 85 dd c0 c3 65 69 15 1b d4 ac 89 d5 46 76 f0 59 f3 fb 8a 38 46 c1 2e 3b db 79 22 56 6a 1c b2 9d ef 7c 00 be 93 cf 76 40 2b b8 f3 df 16 fa 01 f4 8e ef 9d 4d be 52 78 44 74 1b ee 06 dd bf 9e 48 d9 06 c9 9d 0a 7b 6d cc ca 3c aa 05 6b 71 5c 4c b1 Data Ascii: U:"dRVtj8U`.axq4S\;R$ND$lov?$:l\(ev&ZWRCNru,'6,I&>WwK(BAf[~2"XJTDij{{%g?iv]eiFvY8F.;y"Vj\|v@+MRxDtH{m<kq\L
2024-09-24 12:56:12 UTC	1079	IN	Data Raw: 5f 69 95 89 80 5b 83 35 d3 02 10 c9 af 00 24 91 3b c4 3b f9 90 e9 8a 32 3c 5e 67 15 f4 fb 69 1b 33 92 04 89 c8 f0 50 9d 01 4c 11 60 0a 00 4b 73 63 90 11 98 1d 73 73 e5 a6 a6 fc 5f 34 57 93 74 1d a2 19 c9 e1 94 90 2e 4f 35 6c 17 1c 22 88 77 39 42 b1 f5 bb 8a fb 5b 91 94 22 c7 1c 72 f2 83 d1 a4 37 53 c5 52 91 8c 11 5f 50 42 dd b1 44 60 c0 5c 0e e0 c4 59 79 b3 a4 40 88 af 71 2c 2b 89 28 61 53 c2 7a 25 aa e0 41 df 65 50 f2 98 98 d6 22 c1 7a b0 97 a2 45 92 53 32 b8 59 43 90 2e 28 52 a8 e9 1c f5 a8 f2 96 47 e3 20 28 0c 38 09 ac aa 11 43 33 1e dd 0c 2a d8 05 39 a8 99 e1 6b f0 e9 07 ba f9 d9 eb c7 8a da 0c 9c 4a 5e 2c cc 68 f2 2f 42 09 30 06 43 25 1e e9 20 3c 96 00 95 d2 a3 83 1b a0 09 e7 65 0f 6e fd 36 fa 93 3e 5e 96 bd f9 a1 dc a2 1c 0c 3a 7d 13 cb 97 bb 96 4d Data Ascii: _i[5$;;2<^gi3PL`Kscss_4Wt.O5l"w9B["r7SR_PBD`\Yy@q,+(aSz%AeP"zES2YC.(RG (8C3*9kJ^,h/B0C% <en6>^:}M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	53371	151.101.1.140	443	3992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-24 12:56:12 UTC	606	OUT	GET /ads/conversions-config/v1/pixel/config/t2_8mqvi05zf_telemetry HTTP/1.1 Host: www.redditstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://metamask.io Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://metamask.io/faqs/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-24 12:56:12 UTC	868	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86 access-control-allow-origin: * cache-control: max-age=300 content-type: application/json Accept-Ranges: bytes Date: Tue, 24 Sep 2024 12:56:12 GMT Via: 1.1 varnish Vary: Accept-Encoding,Origin Server: snooserv Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.02, "failure_fraction": 0.02}
2024-09-24 12:56:12 UTC	86	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 5f 68 61 73 68 22 3a 22 38 64 35 31 35 61 35 38 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 64 64 69 74 73 74 61 74 69 63 2e 63 6f 6d 2f 61 64 73 2f 38 64 35 31 35 61 35 38 2f 70 69 78 65 6c 2e 6a 73 22 7d Data Ascii: {"version_hash":"8d515a58","url":"https://www.redditstatic.com/ads/8d515a58/pixel.js"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	53369	104.244.42.3	443	3992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-24 12:56:12 UTC	861	OUT	GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=0bc14146-8201-4499-a18e-0c054c9183f8&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=df68bdfa-c690-47be-960a-be5b92eda25d&tw_document_href=https%3A%2F%2Fmetamask.io%2Ffaqs%2F&tw_iframe_status=0&txn_id=oert2&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://metamask.io/faqs/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-24 12:56:12 UTC	1051	IN	HTTP/1.1 200 OK date: Tue, 24 Sep 2024 12:56:12 GMT perf: 7402827104 server: tsa_b set-cookie: guest_id_marketing=v1%3A172718257265679307; Max-Age=63072000; Expires=Thu, 24 Sep 2026 12:56:12 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None set-cookie: guest_id_ads=v1%3A172718257265679307; Max-Age=63072000; Expires=Thu, 24 Sep 2026 12:56:12 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None set-cookie: personalization_id="v1_mDfoWTx7yAyAG/KSs+/mrQ=="; Max-Age=63072000; Expires=Thu, 24 Sep 2026 12:56:12 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None set-cookie: guest_id=v1%3A172718257265679307; Max-Age=63072000; Expires=Thu, 24 Sep 2026 12:56:12 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: fdde556684eee136 strict-transport-security: max-age=631138519 x-response-time: 55 x-connection-hash: 0238e8d19592a0d961a74f0e70c2f9f7a9c06121eb43db3a02a5e320b8c6676b connection: close
2024-09-24 12:56:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	53373	151.101.193.140	443	3992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-24 12:56:12 UTC	914	OUT	GET /rp.gif?ts=1727182571251&id=t2_vjeg7kke&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=eff1c192-9d83-4810-baa4-4e552783599e&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_5afed25b&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://metamask.io/faqs/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-24 12:56:12 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Tue, 24 Sep 2024 12:56:12 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-09-24 12:56:12 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	53374	162.159.140.229	443	3992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-24 12:56:12 UTC	821	OUT	GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=0bc14146-8201-4499-a18e-0c054c9183f8&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=df68bdfa-c690-47be-960a-be5b92eda25d&tw_document_href=https%3A%2F%2Fmetamask.io%2Ffaqs%2F&tw_iframe_status=0&txn_id=oert2&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=9feb2eed-e249-42d4-9cad-35dbc6dfc777; __cf_bm=nqHJZFSpPjQ3JAef8twD0ASqkbJHFb9NyiWdIKKBUH4-1727182572-1.0.1.1-a4AhXy7HVpHj8uWuJJVWsehI0E1K_iFOj1zyXu5ubQPwPPiPx_NhQ5otne_pmmUqRMXI3TOPLX02BPuuzeMH7g
2024-09-24 12:56:12 UTC	460	IN	HTTP/1.1 200 OK Date: Tue, 24 Sep 2024 12:56:12 GMT Content-Type: image/gif;charset=utf-8 Content-Length: 43 Connection: close perf: 7402827104 Cache-Control: no-cache, no-store, max-age=0 x-transaction-id: 908ed477e77c8c3f strict-transport-security: max-age=0 x-response-time: 81 x-connection-hash: d4f2e3d76b25ccea61cadb2775804bcceae04cdf16e6f1c990573106e4085edf CF-Cache-Status: DYNAMIC Server: cloudflare tsa_b CF-RAY: 8c82eee7eda28cb9-EWR
2024-09-24 12:56:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	53375	151.101.1.140	443	3992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-24 12:56:13 UTC	372	OUT	GET /pixels/t2_vjeg7kke/config HTTP/1.1 Host: pixel-config.reddit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-24 12:56:13 UTC	253	IN	HTTP/1.1 200 OK Connection: close Content-Length: 27 Access-Control-Allow-Origin: * Cache-Control: max-age=14400 Content-Encoding: gzip Content-Type: application/json Accept-Ranges: bytes Date: Tue, 24 Sep 2024 12:56:13 GMT Via: 1.1 varnish
2024-09-24 12:56:13 UTC	27	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 ff aa ae e5 02 04 00 00 ff ff 06 b0 a1 dd 03 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	53376	151.101.1.140	443	3992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-24 12:56:13 UTC	405	OUT	GET /ads/conversions-config/v1/pixel/config/t2_8mqvi05zf_telemetry HTTP/1.1 Host: www.redditstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-24 12:56:13 UTC	868	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86 access-control-allow-origin: * cache-control: max-age=300 content-type: application/json Accept-Ranges: bytes Date: Tue, 24 Sep 2024 12:56:13 GMT Via: 1.1 varnish Vary: Accept-Encoding,Origin Server: snooserv Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.02, "failure_fraction": 0.02}
2024-09-24 12:56:13 UTC	86	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 5f 68 61 73 68 22 3a 22 38 64 35 31 35 61 35 38 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 64 64 69 74 73 74 61 74 69 63 2e 63 6f 6d 2f 61 64 73 2f 38 64 35 31 35 61 35 38 2f 70 69 78 65 6c 2e 6a 73 22 7d Data Ascii: {"version_hash":"8d515a58","url":"https://www.redditstatic.com/ads/8d515a58/pixel.js"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	53377	151.101.193.140	443	3992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-24 12:56:13 UTC	915	OUT	GET /rp.gif?ts=1727182571253&id=t2_ffiwr7tji&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=eff1c192-9d83-4810-baa4-4e552783599e&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_5afed25b&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://metamask.io/faqs/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-24 12:56:13 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Tue, 24 Sep 2024 12:56:13 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-09-24 12:56:13 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	53378	104.244.42.67	443	3992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-24 12:56:13 UTC	799	OUT	GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=0bc14146-8201-4499-a18e-0c054c9183f8&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=df68bdfa-c690-47be-960a-be5b92eda25d&tw_document_href=https%3A%2F%2Fmetamask.io%2Ffaqs%2F&tw_iframe_status=0&txn_id=oert2&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A172718257265679307; guest_id_ads=v1%3A172718257265679307; personalization_id="v1_mDfoWTx7yAyAG/KSs+/mrQ=="; guest_id=v1%3A172718257265679307
2024-09-24 12:56:13 UTC	401	IN	HTTP/1.1 200 OK date: Tue, 24 Sep 2024 12:56:12 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 6962371cfd05f8d5 strict-transport-security: max-age=631138519 x-response-time: 22 x-connection-hash: 49e78f87807557910e2c343a55754859a15ca9e52e7dd62444c72f15cfcba53b connection: close
2024-09-24 12:56:13 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	53379	151.101.193.140	443	3992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-24 12:56:13 UTC	915	OUT	GET /rp.gif?ts=1727182571257&id=t2_8mqvi05zf&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=eff1c192-9d83-4810-baa4-4e552783599e&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_5afed25b&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://metamask.io/faqs/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-24 12:56:13 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Tue, 24 Sep 2024 12:56:13 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-09-24 12:56:13 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	53380	151.101.129.140	443	3992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-24 12:56:13 UTC	678	OUT	GET /rp.gif?ts=1727182571251&id=t2_vjeg7kke&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=eff1c192-9d83-4810-baa4-4e552783599e&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_5afed25b&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-24 12:56:13 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Tue, 24 Sep 2024 12:56:13 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-09-24 12:56:13 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	53382	151.101.129.140	443	3992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-24 12:56:13 UTC	397	OUT	OPTIONS /reports HTTP/1.1 Host: w3-reporting-nel.reddit.com Connection: keep-alive Origin: https://alb.reddit.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-24 12:56:13 UTC	644	IN	HTTP/1.1 204 No Content Connection: close Server: Varnish Retry-After: 0 Access-Control-Allow-Origin: https://alb.reddit.com Cache-Control: no-cache, no-store, max-age=0, must-revalidate Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Headers: Content-Type,Origin,X-origination-host,X-origination-path Access-Control-Expose-Headers: * Access-Control-Max-Age: 86400 Accept-Ranges: bytes Date: Tue, 24 Sep 2024 12:56:13 GMT Via: 1.1 varnish Vary: Origin Strict-Transport-Security: max-age=31536000; includeSubdomains X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	53381	151.101.129.140	443	3992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-24 12:56:13 UTC	679	OUT	GET /rp.gif?ts=1727182571253&id=t2_ffiwr7tji&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=eff1c192-9d83-4810-baa4-4e552783599e&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_5afed25b&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-24 12:56:13 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Tue, 24 Sep 2024 12:56:13 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-09-24 12:56:13 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	53383	151.101.129.140	443	3992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-24 12:56:14 UTC	679	OUT	GET /rp.gif?ts=1727182571257&id=t2_8mqvi05zf&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=eff1c192-9d83-4810-baa4-4e552783599e&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_5afed25b&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-24 12:56:14 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Tue, 24 Sep 2024 12:56:14 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-09-24 12:56:14 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	53384	151.101.129.140	443	3992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-24 12:56:14 UTC	340	OUT	POST /reports HTTP/1.1 Host: w3-reporting-nel.reddit.com Connection: keep-alive Content-Length: 744 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-24 12:56:14 UTC	744	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 35 35 34 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 6d 61 73 6b 2e 69 6f 2f 66 61 71 73 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 33 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 35 31 2e 31 30 31 2e 31 39 33 2e 31 34 30 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 74 79 70 65 22 3a 22 6f 6b 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 Data Ascii: [{"age":0,"body":{"elapsed_time":554,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://metamask.io/faqs/","sampling_fraction":0.3,"server_ip":"151.101.193.140","status_code":200,"type":"ok"},"type":"network-error","url":"https
2024-09-24 12:56:14 UTC	681	IN	HTTP/1.1 200 OK Connection: close Content-Length: 0 content-type: text/plain; charset=utf-8 Accept-Ranges: bytes Date: Tue, 24 Sep 2024 12:56:14 GMT Via: 1.1 varnish Strict-Transport-Security: max-age=31536000; includeSubdomains X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block server: snooserv Access-Control-Allow-Origin: https://www.reddit.com Cache-Control: no-cache, no-store, max-age=0, must-revalidate Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Headers: Content-Type,Origin,X-origination-host,X-origination-path Access-Control-Expose-Headers: * Access-Control-Max-Age: 86400 Vary: Origin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	53388	151.101.129.140	443	3992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-24 12:57:13 UTC	397	OUT	OPTIONS /reports HTTP/1.1 Host: w3-reporting-nel.reddit.com Connection: keep-alive Origin: https://alb.reddit.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-24 12:57:13 UTC	644	IN	HTTP/1.1 204 No Content Connection: close Server: Varnish Retry-After: 0 Access-Control-Allow-Origin: https://alb.reddit.com Cache-Control: no-cache, no-store, max-age=0, must-revalidate Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Headers: Content-Type,Origin,X-origination-host,X-origination-path Access-Control-Expose-Headers: * Access-Control-Max-Age: 86400 Accept-Ranges: bytes Date: Tue, 24 Sep 2024 12:57:13 GMT Via: 1.1 varnish Vary: Origin Strict-Transport-Security: max-age=31536000; includeSubdomains X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.5	53389	151.101.65.140	443	3992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-24 12:57:13 UTC	397	OUT	OPTIONS /reports HTTP/1.1 Host: w3-reporting-nel.reddit.com Connection: keep-alive Origin: https://alb.reddit.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-24 12:57:13 UTC	644	IN	HTTP/1.1 204 No Content Connection: close Server: Varnish Retry-After: 0 Access-Control-Allow-Origin: https://alb.reddit.com Cache-Control: no-cache, no-store, max-age=0, must-revalidate Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Headers: Content-Type,Origin,X-origination-host,X-origination-path Access-Control-Expose-Headers: * Access-Control-Max-Age: 86400 Accept-Ranges: bytes Date: Tue, 24 Sep 2024 12:57:13 GMT Via: 1.1 varnish Vary: Origin Strict-Transport-Security: max-age=31536000; includeSubdomains X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	53391	151.101.1.140	443	3992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-24 12:57:14 UTC	340	OUT	POST /reports HTTP/1.1 Host: w3-reporting-nel.reddit.com Connection: keep-alive Content-Length: 748 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-24 12:57:14 UTC	748	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 35 39 37 31 37 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 35 38 39 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 6d 61 73 6b 2e 69 6f 2f 66 61 71 73 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 33 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 35 31 2e 31 30 31 2e 31 39 33 2e 31 34 30 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 74 79 70 65 22 3a 22 6f 6b 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 Data Ascii: [{"age":59717,"body":{"elapsed_time":589,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://metamask.io/faqs/","sampling_fraction":0.3,"server_ip":"151.101.193.140","status_code":200,"type":"ok"},"type":"network-error","url":"h
2024-09-24 12:57:14 UTC	681	IN	HTTP/1.1 200 OK Connection: close Content-Length: 0 content-type: text/plain; charset=utf-8 Accept-Ranges: bytes Date: Tue, 24 Sep 2024 12:57:14 GMT Via: 1.1 varnish Strict-Transport-Security: max-age=31536000; includeSubdomains X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block server: snooserv Access-Control-Allow-Origin: https://www.reddit.com Cache-Control: no-cache, no-store, max-age=0, must-revalidate Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Headers: Content-Type,Origin,X-origination-host,X-origination-path Access-Control-Expose-Headers: * Access-Control-Max-Age: 86400 Vary: Origin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.5	53390	151.101.65.140	443	3992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-24 12:57:14 UTC	340	OUT	POST /reports HTTP/1.1 Host: w3-reporting-nel.reddit.com Connection: keep-alive Content-Length: 723 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-24 12:57:14 UTC	723	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 35 39 34 33 39 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 35 36 33 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 33 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 35 31 2e 31 30 31 2e 31 32 39 2e 31 34 30 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 74 79 70 65 22 3a 22 6f 6b 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 6c 62 2e 72 65 64 64 69 74 2e 63 6f 6d 2f 72 70 2e Data Ascii: [{"age":59439,"body":{"elapsed_time":563,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":0.3,"server_ip":"151.101.129.140","status_code":200,"type":"ok"},"type":"network-error","url":"https://alb.reddit.com/rp.
2024-09-24 12:57:14 UTC	681	IN	HTTP/1.1 200 OK Connection: close Content-Length: 0 content-type: text/plain; charset=utf-8 Accept-Ranges: bytes Date: Tue, 24 Sep 2024 12:57:14 GMT Via: 1.1 varnish Strict-Transport-Security: max-age=31536000; includeSubdomains X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block server: snooserv Access-Control-Allow-Origin: https://www.reddit.com Cache-Control: no-cache, no-store, max-age=0, must-revalidate Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Headers: Content-Type,Origin,X-origination-host,X-origination-path Access-Control-Expose-Headers: * Access-Control-Max-Age: 86400 Vary: Origin

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 3812, Parent PID: 5528

General

Target ID:	0
Start time:	08:55:47
Start date:	24/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 3992, Parent PID: 3812

General

Target ID:	2
Start time:	08:55:50
Start date:	24/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2540 --field-trial-handle=2492,i,15226367244816082001,1689044093451093101,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 2836, Parent PID: 5528

General

Target ID:	3
Start time:	08:55:53
Start date:	24/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://metamask-support.web.app/"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly