Edit tour

Windows Analysis Report
https://www.paypal.com/signin/?returnUri=%2Fmyaccount%2Ftransfer%2FpayRequest%2FU-09584045BD498740V%2FU-7AK40048SY131414Y%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq&id=UJ8cMtNtnR8osXBu987dZoV1KMO8Kn.CKcv6ZA&expId=p2p&onboardData=%7B%22signUpRequest%22%3A%7B%22method%22%3A%22get%22%2C%22url%22%3A

Overview

General Information

Sample URL:	https://www.paypal.com/signin/?returnUri=%2Fmyaccount%2Ftransfer%2FpayRequest%2FU-09584045BD498740V%2FU-7AK40048SY131414Y%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq&id=UJ8cMtNtnR8osXBu987dZoV1KMO8
Analysis ID:	1569479
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Suricata IDS alerts for network traffic

HTML page contains hidden javascript code

HTML page contains string obfuscation

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6724 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6444 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2512 --field-trial-handle=2480,i,13953459428177512392,16051172419448561988,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 2680 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5484 --field-trial-handle=2480,i,13953459428177512392,16051172419448561988,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 2732 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5500 --field-trial-handle=2480,i,13953459428177512392,16051172419448561988,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 3608 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.paypal.com/signin/?returnUri=%2Fmyaccount%2Ftransfer%2FpayRequest%2FU-09584045BD498740V%2FU-7AK40048SY131414Y%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq&id=UJ8cMtNtnR8osXBu987dZoV1KMO8Kn.CKcv6ZA&expId=p2p&onboardData=%7B%22signUpRequest%22%3A%7B%22method%22%3A%22get%22%2C%22url%22%3A%22https%3A%2F%2Fwww.paypal.com%2Fmyaccount%2Ftransfer%2FguestLogin%2FpayRequest%2FU-09584045BD498740V%2FU-7AK40048SY131414Y%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq%26id%3DUJ8cMtNtnR8osXBu987dZoV1KMO8Kn.CKcv6ZA%22%7D%7D&flowContextData=k3KkNbgd2F3whUTyipi2CMJLh_A_-ZYRjnLUkRjoT_j0HNsy89M3Jq9pftpBPMtxKyazfBl41ygLF6L-3nSQM3yKD_1JSLMZUnm3gJtmC_GW6MtRMZgxxLdzhM2UidzudErvOhqzUKOKhl1Uolhas5WHE4v4p4McejHNxcZVkLh-Y4orpy9guCt5hhIB4GnzEz4SubWTdzvc3cAY2OwiaKLLHK8NR5mzXmQp5fVf3iIsNKSvq_9V0izgPURkU3T8RWrY5gGBkFdWln_xY5pl8zRv8lmUI-keUYe0DqQBvKVK8GwV8qiU_5p8qjPHJVW9i-G3ZBZuZum2FKJqczC5erDfF4QBe8JLLYzKBGyYHnHI7fFyBoEDubHGzh8R01uh4xAe-iAkcUj76XG_hnIoA0TzvY15PrfT8E9VdnaJhGuNJ5c8GhmekMGGnVwrlvOcZBIva0&v=1&utm_source=unp&utm_medium=email&utm_campaign=RT000186&utm_unptid=3bf303f1-b31d-11ef-81c6-bffe125023d8&ppid=RT000186&cnac=US&rsta=en_US%28en-US%29&unptid=3bf303f1-b31d-11ef-81c6-bffe125023d8&calc=f7859995fbf4b&unp_tpcid=requestmoney-notifications-requestee&page=main%3Aemail%3ART000186&pgrp=main%3Aemail&e=cl&mchn=em&s=ci&mail=sys&appVersion=1.294.0&tenant_name=&xt=145585%2C150948%2C104038&link_ref=www.paypal.com_signin" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Suricata Signatures

ET PHISHING Successful Paypal Phish Jan 23 2017

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-05T19:04:56.273054+0100	2023760	1	Successful Credential Theft Detected	192.168.2.6	49824	151.101.193.21	443	TCP

ET PHISHING Successful Paypal Phish M1 Dec 8 2015

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-05T19:04:56.273054+0100	2031565	1	Successful Credential Theft Detected	192.168.2.6	49824	151.101.193.21	443	TCP

ET PHISHING Successful Paypal Phish Oct 16 2017

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-05T19:04:56.273054+0100	2024846	1	Successful Credential Theft Detected	192.168.2.6	49824	151.101.193.21	443	TCP

ETPRO PHISHING Successful Paypal Phish Oct 11 2016

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-05T19:04:56.273054+0100	2822573	1	Successful Credential Theft Detected	192.168.2.6	49824	151.101.193.21	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Source: https://www.paypal.com/auth/validatecaptcha

HTTP Parser: Base64 decoded: https://www.paypalobjects.com:443

Source: https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/opinionLab/onlineOpinionPopup.js

HTTP Parser: Found new string: script /*. Spec #22956 OpinionLab. */..define(['opinionLab'], function(opinionLab) {...'use strict';..window.PAYPAL = window.PAYPAL ? window.PAYPAL : {};..var opVars = window.PAYPAL.opinionLabVars;...function showpopup(redirectTo) {...var mywin;...mywin = window.open('', '', 'top=3000,left=3000,width=1,height=1,menubar=0,scrollbars=0,resizeable=1');...if (mywin) {....mywin.document.open....var myURL = ""...../* This JS is customized for sparta because a JS call..... /* Comparing with corresponding XPT code - Removed the External opinionlab js from the popup content as it could not be loaded due to path issue */.....var HTML_txt = "<html><scr" + "ipt language='javascript'>";....HTML_txt = HTML_txt + "_hr='" + opinionLab._hr + "';";....HTML_txt = HTML_txt + "_ht='" + opinionLab._ht + "';";....HTML_txt = HTML_txt + "custom_var='" + opinionLab.custom_var + "';";.....if (( typeof opinionLab.baseurl == 'undefined')) {....} else {.....HTML_txt = HTML_txt + "baseurl='" + opinionLab.baseurl + "';";....}....if (( typeof opini...

Source: https://www.paypal.com/signin/?returnUri=%2Fmyaccount%2Ftransfer%2FpayRequest%2FU-09584045BD498740V%2FU-7AK40048SY131414Y%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq&id=UJ8cMtNtnR8osXBu987dZoV1KMO8Kn.CKcv6ZA&expId=p2p&onboardData=%7B%22signUpRequest%22%3A%7B%22method%22%3A%22get%22%2C%22url%22%3A%22https%3A%2F%2Fwww.paypal.com%2Fmyaccount%2Ftransfer%2FguestLogin%2FpayRequest%2FU-09584045BD498740V%2FU-7AK40048SY131414Y%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq%26id%3DUJ8cMtNtnR8osXBu987dZoV1KMO8Kn.CKcv6ZA%22%7D%7D&flowContextData=k3KkNbgd2F3whUTyipi2CMJLh_A_-ZYRjnLUkRjoT_j0HNsy89M3Jq9pftpBPMtxKyazfBl41ygLF6L-3nSQM3yKD_1JSLMZUnm3gJtmC_GW6MtRMZgxxLdzhM2UidzudErvOhqzUKOKhl1Uolhas5WHE4v4p4McejHNxcZVkLh-Y4orpy9guCt5hhIB4GnzEz4SubWTdzvc3cAY2OwiaKLLHK8NR5mzXmQp5fVf3iIsNKSvq_9V0izgPURkU3T8RWrY5gGBkFdWln_xY5pl8zRv8lmUI-keUYe0DqQBvKVK8GwV8qiU_5p8qjPHJVW9i-G3ZBZuZum2FKJqczC5erDfF4QBe8JLLYzKBGyYHnHI7fFyBoEDubHGzh8R01uh4xAe-iAkcUj76XG_hnIoA0TzvY15PrfT8E9VdnaJhGuNJ5c8GhmekMGGnVwrlvOcZBIva0&v=1&utm_source=unp&utm_med...

HTTP Parser: Title: does not match URL

HTTP Parser: <input type="password" .../> found

Source: https://www.paypal.com/signin/?returnUri=%2Fmyaccount%2Ftransfer%2FpayRequest%2FU-09584045BD498740V%2FU-7AK40048SY131414Y%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq&id=UJ8cMtNtnR8osXBu987dZoV1KMO8Kn.CKcv6ZA&expId=p2p&onboardData=%7B%22signUpRequest%22%3A%7B%22method%22%3A%22get%22%2C%22url%22%3A%22https%3A%2F%2Fwww.paypal.com%2Fmyaccount%2Ftransfer%2FguestLogin%2FpayRequest%2FU-09584045BD498740V%2FU-7AK40048SY131414Y%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq%26id%3DUJ8cMtNtnR8osXBu987dZoV1KMO8Kn.CKcv6ZA%22%7D%7D&flowContextData=k3KkNbgd2F3whUTyipi2CMJLh_A_-ZYRjnLUkRjoT_j0HNsy89M3Jq9pftpBPMtxKyazfBl41ygLF6L-3nSQM3yKD_1JSLMZUnm3gJtmC_GW6MtRMZgxxLdzhM2UidzudErvOhqzUKOKhl1Uolhas5WHE4v4p4McejHNxcZVkLh-Y4orpy9guCt5hhIB4GnzEz4SubWTdzvc3cAY2OwiaKLLHK8NR5mzXmQp5fVf3iIsNKSvq_9V0izgPURkU3T8RWrY5gGBkFdWln_xY5pl8zRv8lmUI-keUYe0DqQBvKVK8GwV8qiU_5p8qjPHJVW9i-G3ZBZuZum2FKJqczC5erDfF4QBe8JLLYzKBGyYHnHI7fFyBoEDubHGzh8R01uh4xAe-iAkcUj76XG_hnIoA0TzvY15PrfT8E9VdnaJhGuNJ5c8GhmekMGGnVwrlvOcZBIva0&v=1&utm_source=unp&utm_med...	HTTP Parser: No favicon
Source: https://www.paypal.com/signin	HTTP Parser: No favicon
Source: https://www.paypal.com/auth/validatecaptcha	HTTP Parser: No favicon
Source: https://www.paypal.com/auth/validatecaptcha	HTTP Parser: No favicon
Source: https://www.paypal.com/auth/validatecaptcha	HTTP Parser: No favicon
Source: https://www.paypal.com/auth/validatecaptcha	HTTP Parser: No favicon
Source: https://www.paypal.com/auth/validatecaptcha	HTTP Parser: No favicon

HTTP Parser: No <meta name="author".. found

HTTP Parser: No <meta name="copyright".. found

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2023760 - Severity 1 - ET PHISHING Successful Paypal Phish Jan 23 2017 : 192.168.2.6:49824 -> 151.101.193.21:443
Source: Network traffic	Suricata IDS: 2024846 - Severity 1 - ET PHISHING Successful Paypal Phish Oct 16 2017 : 192.168.2.6:49824 -> 151.101.193.21:443
Source: Network traffic	Suricata IDS: 2031565 - Severity 1 - ET PHISHING Successful Paypal Phish M1 Dec 8 2015 : 192.168.2.6:49824 -> 151.101.193.21:443
Source: Network traffic	Suricata IDS: 2822573 - Severity 1 - ETPRO PHISHING Successful Paypal Phish Oct 11 2016 : 192.168.2.6:49824 -> 151.101.193.21:443

Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /signin/?returnUri=%2Fmyaccount%2Ftransfer%2FpayRequest%2FU-09584045BD498740V%2FU-7AK40048SY131414Y%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq&id=UJ8cMtNtnR8osXBu987dZoV1KMO8Kn.CKcv6ZA&expId=p2p&onboardData=%7B%22signUpRequest%22%3A%7B%22method%22%3A%22get%22%2C%22url%22%3A%22https%3A%2F%2Fwww.paypal.com%2Fmyaccount%2Ftransfer%2FguestLogin%2FpayRequest%2FU-09584045BD498740V%2FU-7AK40048SY131414Y%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq%26id%3DUJ8cMtNtnR8osXBu987dZoV1KMO8Kn.CKcv6ZA%22%7D%7D&flowContextData=k3KkNbgd2F3whUTyipi2CMJLh_A_-ZYRjnLUkRjoT_j0HNsy89M3Jq9pftpBPMtxKyazfBl41ygLF6L-3nSQM3yKD_1JSLMZUnm3gJtmC_GW6MtRMZgxxLdzhM2UidzudErvOhqzUKOKhl1Uolhas5WHE4v4p4McejHNxcZVkLh-Y4orpy9guCt5hhIB4GnzEz4SubWTdzvc3cAY2OwiaKLLHK8NR5mzXmQp5fVf3iIsNKSvq_9V0izgPURkU3T8RWrY5gGBkFdWln_xY5pl8zRv8lmUI-keUYe0DqQBvKVK8GwV8qiU_5p8qjPHJVW9i-G3ZBZuZum2FKJqczC5erDfF4QBe8JLLYzKBGyYHnHI7fFyBoEDubHGzh8R01uh4xAe-iAkcUj76XG_hnIoA0TzvY15PrfT8E9VdnaJhGuNJ5c8GhmekMGGnVwrlvOcZBIva0&v=1&utm_source=unp&utm_medium=email&utm_campaign=RT000186&utm_unptid=3bf303f1-b31d-11ef-81c6-bffe125023d8&ppid=RT000186&cnac=US&rsta=en_US%28en-US%29&unptid=3bf303f1-b31d-11ef-81c6-bffe125023d8&calc=f7859995fbf4b&unp_tpcid=requestmoney-notifications-requestee&page=main%3Aemail%3ART000186&pgrp=main%3Aemail&e=cl&mchn=em&s=ci&mail=sys&appVersion=1.294.0&tenant_name=&xt=145585%2C150948%2C104038&link_ref=www.paypal.com_signin HTTP/1.1Host: www.paypal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/css/app.css HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/lib/modernizr-2.6.1.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rdaAssets/fraudnet/sync/fn-sync-telemetry-min.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/lib/require.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/app.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tags.js HTTP/1.1Host: ddbm2.paypal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTczMzQyMTg4MTQ4MiIsImwiOiIwIiwibSI6IjAifQ; l7_az=dcg01.phx; ts=vreXpYrS%3D1764957881%26vteXpYrS%3D1733423681%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352
Source: global traffic	HTTP traffic detected: GET /pa/js/min/pa.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/widgets/clientCalLogger.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/widgets/errorDetector.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/shared/paypal-logo-129x32.svg HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/css/app.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/lib/modernizr-2.6.1.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rdaAssets/fraudnet/sync/fn-sync-telemetry-min.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/app.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/lib/require.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pa/js/min/pa.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /webcaptcha/ngrlCaptcha.min.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tags.js HTTP/1.1Host: ddbm2.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTczMzQyMTg4MTQ4MiIsImwiOiIwIiwibSI6IjAifQ; l7_az=dcg01.phx; ts=vreXpYrS%3D1764957881%26vteXpYrS%3D1733423681%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352
Source: global traffic	HTTP traffic detected: GET /ts?v=1.9.5&t=1733421883562&g=300&e=ac&tsrce=unp&ppid=RT000186&space_key=SKCPAD&utm_source=unp&utm_medium=email&utm_campaign=RT000186&utm_unptid=3bf303f1-b31d-11ef-81c6-bffe125023d8&cnac=US&rsta=en_US(en-US)&unptid=3bf303f1-b31d-11ef-81c6-bffe125023d8&calc=f7859995fbf4b&unp_tpcid=requestmoney-notifications-requestee&page=main%3Aemail%3ART000186&pgrp=main%3Aemail&s=ci&mail=sys&appVersion=1.294.0&xt=145585%2C150948%2C104038&link_ref=www.paypal.com_signin&event_name=external_deep_link_processed HTTP/1.1Host: t.paypal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.paypal.com/signin/?returnUri=%2Fmyaccount%2Ftransfer%2FpayRequest%2FU-09584045BD498740V%2FU-7AK40048SY131414Y%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq&id=UJ8cMtNtnR8osXBu987dZoV1KMO8Kn.CKcv6ZA&expId=p2p&onboardData=%7B%22signUpRequest%22%3A%7B%22method%22%3A%22get%22%2C%22url%22%3A%22https%3A%2F%2Fwww.paypal.com%2Fmyaccount%2Ftransfer%2FguestLogin%2FpayRequest%2FU-09584045BD498740V%2FU-7AK40048SY131414Y%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq%26id%3DUJ8cMtNtnR8osXBu987dZoV1KMO8Kn.CKcv6ZA%22%7D%7D&flowContextData=k3KkNbgd2F3whUTyipi2CMJLh_A_-ZYRjnLUkRjoT_j0HNsy89M3Jq9pftpBPMtxKyazfBl41ygLF6L-3nSQM3yKD_1JSLMZUnm3gJtmC_GW6MtRMZgxxLdzhM2UidzudErvOhqzUKOKhl1Uolhas5WHE4v4p4McejHNxcZVkLh-Y4orpy9guCt5hhIB4GnzEz4SubWTdzvc3cAY2OwiaKLLHK8NR5mzXmQp5fVf3iIsNKSvq_9V0izgPURkU3T8RWrY5gGBkFdWln_xY5pl8zRv8lmUI-keUYe0DqQBvKVK8GwV8qiU_5p8qjPHJVW9i-G3ZBZuZum2FKJqczC5erDfF4QBe8JLLYzKBGyYHnHI7fFyBoEDubHGzh8R01uh4xAe-iAkcUj76XG_hnIoA0TzvY15PrfT8E9VdnaJhGuNJ5c8GhmekMGGnVwrlvOcZBIva0&v=1&utm_source=unp&utm_medium=email&utm_campaign=RT000186&utm_unptid=3bf303f1-b31d-11ef-81c6-bffe125023d8&ppid=RT000186&cnac=US&rsta=en_US%28en-US%29&unptid=3bf303f1-b31d-11ef-81c6-bffe125023d8&calc=f7859995fbf4b&unp_tpcid=requestmoney-notifications-requestee&page=main%3Aemail%3ART000186&pgrp=main%3Aemail&e=cl&mchn=em&s=ci&mail=sys&appVersion=1.294.0&tenant_name=&xt=145585%2C150948%2C104038&link_ref=www.paypal.com_signinAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTczMzQyMTg4MTQ4MiIsImwiOiIwIiwibSI6IjAifQ; l7_az=dcg01.phx; ts=vreXpYrS%3D1764957881%26vteXpYrS%3D1733423681%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352
Source: global traffic	HTTP traffic detected: GET /webcaptcha/grcenterprise_v3_static.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/widgets/clientCalLogger.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /martech/tm/paypal/mktgtagmanager.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.paypal.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pa/mi/paypal/latmconf.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.paypal.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/widgets/errorDetector.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/shared/paypal-logo-129x32.svg HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/browser_modules/dustjs-linkedin/dist/dust-full.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /webcaptcha/ngrlCaptcha.min.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ts?v=1.9.5&t=1733421883562&g=300&e=ac&tsrce=unp&ppid=RT000186&space_key=SKCPAD&utm_source=unp&utm_medium=email&utm_campaign=RT000186&utm_unptid=3bf303f1-b31d-11ef-81c6-bffe125023d8&cnac=US&rsta=en_US(en-US)&unptid=3bf303f1-b31d-11ef-81c6-bffe125023d8&calc=f7859995fbf4b&unp_tpcid=requestmoney-notifications-requestee&page=main%3Aemail%3ART000186&pgrp=main%3Aemail&s=ci&mail=sys&appVersion=1.294.0&xt=145585%2C150948%2C104038&link_ref=www.paypal.com_signin&event_name=external_deep_link_processed HTTP/1.1Host: t.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTczMzQyMTg4MTQ4MiIsImwiOiIwIiwibSI6IjAifQ; l7_az=dcg01.phx; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352; datadome=Fs5MmB0JLdw5hCSGAmtvwdro2EIMrpyZoEKRvW~XxZ2c~hmw~iHaVACWMnscsHbkmlhxsh0aESsOTcLR3dIWEgraKwQ9F_jjSv2agvz3e2Q7qEqPf4IlaH6_FUYKbme5; ts=vreXpYrS%3D1764957888%26vteXpYrS%3D1733423688%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew
Source: global traffic	HTTP traffic detected: GET /js/ HTTP/1.1Host: ddbm2.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTczMzQyMTg4MTQ4MiIsImwiOiIwIiwibSI6IjAifQ; l7_az=dcg01.phx; ts=vreXpYrS%3D1764957881%26vteXpYrS%3D1733423681%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352; datadome=Fs5MmB0JLdw5hCSGAmtvwdro2EIMrpyZoEKRvW~XxZ2c~hmw~iHaVACWMnscsHbkmlhxsh0aESsOTcLR3dIWEgraKwQ9F_jjSv2agvz3e2Q7qEqPf4IlaH6_FUYKbme5
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/core/nougat.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/router.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/widgets/analytics.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/view/mainContentView.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /webcaptcha/grcenterprise_v3_static.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/lib/jquery-3.7.0.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /webcaptcha/grcenterprise_v3_static.html HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pa/mi/paypal/latmconf.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /martech/tm/paypal/mktgtagmanager.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/lib/underscore-1.13.6.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/browser_modules/dustjs-linkedin/dist/dust-full.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pa/3pjs/tl/6.4.65/patleaf.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.paypal.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /martech/tm/paypal/mktconf.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.paypal.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/browser_modules/dust-makara-helpers/browser.amd.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/browser_modules/dusthelpers-supplement/index.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/core/nougat.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/router.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/widgets/analytics.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/view/mainContentView.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/lib/dustmotes-iterate.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/lib/jquery-3.7.0.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/enterprise.js?render=6LdCCOUUAAAAAHTE-Snr6hi4HJGtJk_d1_ce-gWB&hl=en HTTP/1.1Host: www.recaptcha.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypalobjects.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/browser_modules/pulvus-provide/provide.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/lib/underscore-1.13.6.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/browser_modules/dustjs-helpers/dist/dust-helpers.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/browser_modules/dust-makara-helpers/browser.amd.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/en-US/_languagepack.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/browser_modules/dusthelpers-supplement/index.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ts?v=1.9.5&t=1733421893227&g=300&pgrp=main%3Aunifiedlogin%3A%3A%3Alogin&page=main%3Aunifiedlogin%3A%3A%3Alogin%3Alegacy-web-dyn&pgst=1733421881400&calc=f4539225a1122&nsid=RLPSU2OHYvlTZtXh_VMfzo7ctuMnbu-c&rsta=en_US&pgtf=Nodejs&env=live&s=ci&ccpg=US&csci=16bc73c3ccf44355b5392134ef0346f4&comp=unifiedloginnodeweb&tsrce=unifiedloginnodeweb&cu=0&ef_policy=ccpa&xe=100353%2C106885%2C105604%2C105604%2C105351%2C101126%2C100614%2C101257%2C102153%2C104200%2C104200%2C105352%2C109195%2C104458%2C104458%2C100364%2C105999%2C100885%2C109334%2C109334%2C101270%2C102557%2C102557%2C101408%2C101408%2C104227%2C104227%2C100644%2C105124%2C100391%2C102695%2C100263%2C101031%2C100267%2C108076%2C100527%2C106031%2C106031%2C107054%2C107054%2C106033%2C106033%2C106032%2C106032%2C105392%2C105392%2C106035%2C106035%2C106034%2C106034%2C106036%2C106036%2C105271%2C110648%2C101688%2C101821%2C101820%2C102208%2C105543%2C105544%2C105416%2C105416%2C101064%2C106058%2C104778%2C103119%2C100303%2C100942%2C105553%2C105553%2C105552%2C105552%2C100304%2C105554%2C105554%2C101334%2C100572%2C101215%2C101214%2C101470%2C101216%2C103648%2C101472%2C101090%2C105698%2C102629%2C101735%2C104039%2C104039%2C104038%2C104038%2C101736%2C109931%2C110442%2C108653%2C108652%2C100846%2C109040%2C105843%2C105843%2C101875%2C105845%2C105845%2C105844%2C105844%2C109047%2C102390%2C102390%2C104571%2C104571%2C105340%2C105340%2C107263%2C107263%2C109195%2C108076%2C109047&xt=100886%2C132008%2C124899%2C124899%2C123668%2C103409%2C101617%2C104043%2C107844%2C127485%2C127485%2C123683%2C144027%2C119355%2C119355%2C103733%2C127242%2C102543%2C144768%2C144768%2C106407%2C109630%2C109630%2C104576%2C104576%2C117999%2C117999%2C101702%2C122483%2C100984%2C110241%2C100632%2C102993%2C100641%2C138090%2C101405%2C127662%2C127662%2C132781%2C132781%2C127659%2C127659%2C127666%2C127666%2C123875%2C123875%2C127651%2C127651%2C127655%2C127655%2C127648%2C127648%2C123248%2C152289%2C105645%2C106327%2C106324%2C108106%2C124626%2C124629%2C123994%2C123994%2C103105%2C127563%2C121149%2C112308%2C100722%2C113529%2C124686%2C124686%2C124682%2C124682%2C100727%2C124696%2C124696%2C104357%2C101510%2C103848%2C103847%2C104754%2C103864%2C114559%2C104762%2C103240%2C125356%2C109962%2C105856%2C120731%2C120731%2C120736%2C120736%2C105858%2C147989%2C150774%2C141151%2C141149%2C102359%2C143321%2C126375%2C126375%2C106610%2C126401%2C126401%2C126385%2C126385%2C143343%2C108798%2C108798%2C119908%2C119908%2C123611%2C123611%2C133840%2C133840%2C144027%2C138090%2C143343&obex=p2p&userRedirected=true&post_login_redirect=returnUri&ret_url=%2Fmyaccount%2Ftransfer%2FpayRequest%2FU-09584045BD498740V%2FU-7AK40048SY131414Y&link=unifiedlogin-login-submit&pglk=main%3Aunifiedlogin%3A%3A%3Alogin%7CbtnLogin&pgln=main%3Aunifiedlogin%3A%3A%3Alogin%3Alegacy-web-dyn%7CbtnLogin&e=cl HTTP/1.1Host: t.paypal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (K
Source: global traffic	HTTP traffic detected: GET /ts?v=1.9.5&t=1733421893241&g=300&pgrp=main%3Aunifiedlogin%3A%3A%3Alogin&page=main%3Aunifiedlogin%3A%3A%3Alogin%3Alegacy-web-dyn&pgst=1733421881400&calc=f4539225a1122&nsid=RLPSU2OHYvlTZtXh_VMfzo7ctuMnbu-c&rsta=en_US&pgtf=Nodejs&env=live&s=ci&ccpg=US&csci=16bc73c3ccf44355b5392134ef0346f4&comp=unifiedloginnodeweb&tsrce=unifiedloginnodeweb&cu=0&ef_policy=ccpa&xe=100353%2C106885%2C105604%2C105604%2C105351%2C101126%2C100614%2C101257%2C102153%2C104200%2C104200%2C105352%2C109195%2C104458%2C104458%2C100364%2C105999%2C100885%2C109334%2C109334%2C101270%2C102557%2C102557%2C101408%2C101408%2C104227%2C104227%2C100644%2C105124%2C100391%2C102695%2C100263%2C101031%2C100267%2C108076%2C100527%2C106031%2C106031%2C107054%2C107054%2C106033%2C106033%2C106032%2C106032%2C105392%2C105392%2C106035%2C106035%2C106034%2C106034%2C106036%2C106036%2C105271%2C110648%2C101688%2C101821%2C101820%2C102208%2C105543%2C105544%2C105416%2C105416%2C101064%2C106058%2C104778%2C103119%2C100303%2C100942%2C105553%2C105553%2C105552%2C105552%2C100304%2C105554%2C105554%2C101334%2C100572%2C101215%2C101214%2C101470%2C101216%2C103648%2C101472%2C101090%2C105698%2C102629%2C101735%2C104039%2C104039%2C104038%2C104038%2C101736%2C109931%2C110442%2C108653%2C108652%2C100846%2C109040%2C105843%2C105843%2C101875%2C105845%2C105845%2C105844%2C105844%2C109047%2C102390%2C102390%2C104571%2C104571%2C105340%2C105340%2C107263%2C107263%2C109195%2C108076%2C109047&xt=100886%2C132008%2C124899%2C124899%2C123668%2C103409%2C101617%2C104043%2C107844%2C127485%2C127485%2C123683%2C144027%2C119355%2C119355%2C103733%2C127242%2C102543%2C144768%2C144768%2C106407%2C109630%2C109630%2C104576%2C104576%2C117999%2C117999%2C101702%2C122483%2C100984%2C110241%2C100632%2C102993%2C100641%2C138090%2C101405%2C127662%2C127662%2C132781%2C132781%2C127659%2C127659%2C127666%2C127666%2C123875%2C123875%2C127651%2C127651%2C127655%2C127655%2C127648%2C127648%2C123248%2C152289%2C105645%2C106327%2C106324%2C108106%2C124626%2C124629%2C123994%2C123994%2C103105%2C127563%2C121149%2C112308%2C100722%2C113529%2C124686%2C124686%2C124682%2C124682%2C100727%2C124696%2C124696%2C104357%2C101510%2C103848%2C103847%2C104754%2C103864%2C114559%2C104762%2C103240%2C125356%2C109962%2C105856%2C120731%2C120731%2C120736%2C120736%2C105858%2C147989%2C150774%2C141151%2C141149%2C102359%2C143321%2C126375%2C126375%2C106610%2C126401%2C126401%2C126385%2C126385%2C143343%2C108798%2C108798%2C119908%2C119908%2C123611%2C123611%2C133840%2C133840%2C144027%2C138090%2C143343&obex=p2p&userRedirected=true&post_login_redirect=returnUri&ret_url=%2Fmyaccount%2Ftransfer%2FpayRequest%2FU-09584045BD498740V%2FU-7AK40048SY131414Y&e=im&imsrc=setup&view=%7B%22t10%22%3A1430%2C%22t11%22%3A9961%2C%22tcp%22%3A5066%2C%22et%22%3A%223g%22%2C%22nt%22%3A%22navigate%22%2C%22bt%22%3A51%7D&cd=24&sw=1280&sh=1024&dw=1280&dh=1024&bw=1280&bh=907&ce=1&t1=1430&t1c=1430&t1d=0&t1s=1263&t2=710&t3=224&t4d=0&t4=0&t4e=6894&tt=0&rdc=0&protocol=http%2F1.1&cdn=fastly&res=%7B%7D&rtt=3736 HTTP/1.1Host: t.paypal.comConnection: keep
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/core/baseView.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/lib/dustmotes-iterate.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/view/pageView.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pa/3pjs/tl/6.4.65/patleaf.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/widgets/postMessage.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/enterprise.js?render=6LdCCOUUAAAAAHTE-Snr6hi4HJGtJk_d1_ce-gWB&hl=en HTTP/1.1Host: www.recaptcha.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/browser_modules/pulvus-provide/provide.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /signin/client-log HTTP/1.1Host: www.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; nsid=s%3ARLPSU2OHYvlTZtXh_VMfzo7ctuMnbu-c.%2F5h%2FpbgyA12uYrTjTUlTTIQJX8aBsaqWc%2FutzlCO8XQ; l7_az=dcg01.phx; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352; datadome=Fs5MmB0JLdw5hCSGAmtvwdro2EIMrpyZoEKRvW~XxZ2c~hmw~iHaVACWMnscsHbkmlhxsh0aESsOTcLR3dIWEgraKwQ9F_jjSv2agvz3e2Q7qEqPf4IlaH6_FUYKbme5; tcs=main%3Aunifiedlogin%3A%3A%3Alogin%7CbtnLogin; x-pp-s=eyJ0IjoiMTczMzQyMTg5NDczMyIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1764957894%26vteXpYrS%3D1733423694%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew
Source: global traffic	HTTP traffic detected: GET /martech/tm/paypal/mktconf.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/css/app.css HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ts?v=1.9.5&t=1733421893227&g=300&pgrp=main%3Aunifiedlogin%3A%3A%3Alogin&page=main%3Aunifiedlogin%3A%3A%3Alogin%3Alegacy-web-dyn&pgst=1733421881400&calc=f4539225a1122&nsid=RLPSU2OHYvlTZtXh_VMfzo7ctuMnbu-c&rsta=en_US&pgtf=Nodejs&env=live&s=ci&ccpg=US&csci=16bc73c3ccf44355b5392134ef0346f4&comp=unifiedloginnodeweb&tsrce=unifiedloginnodeweb&cu=0&ef_policy=ccpa&xe=100353%2C106885%2C105604%2C105604%2C105351%2C101126%2C100614%2C101257%2C102153%2C104200%2C104200%2C105352%2C109195%2C104458%2C104458%2C100364%2C105999%2C100885%2C109334%2C109334%2C101270%2C102557%2C102557%2C101408%2C101408%2C104227%2C104227%2C100644%2C105124%2C100391%2C102695%2C100263%2C101031%2C100267%2C108076%2C100527%2C106031%2C106031%2C107054%2C107054%2C106033%2C106033%2C106032%2C106032%2C105392%2C105392%2C106035%2C106035%2C106034%2C106034%2C106036%2C106036%2C105271%2C110648%2C101688%2C101821%2C101820%2C102208%2C105543%2C105544%2C105416%2C105416%2C101064%2C106058%2C104778%2C103119%2C100303%2C100942%2C105553%2C105553%2C105552%2C105552%2C100304%2C105554%2C105554%2C101334%2C100572%2C101215%2C101214%2C101470%2C101216%2C103648%2C101472%2C101090%2C105698%2C102629%2C101735%2C104039%2C104039%2C104038%2C104038%2C101736%2C109931%2C110442%2C108653%2C108652%2C100846%2C109040%2C105843%2C105843%2C101875%2C105845%2C105845%2C105844%2C105844%2C109047%2C102390%2C102390%2C104571%2C104571%2C105340%2C105340%2C107263%2C107263%2C109195%2C108076%2C109047&xt=100886%2C132008%2C124899%2C124899%2C123668%2C103409%2C101617%2C104043%2C107844%2C127485%2C127485%2C123683%2C144027%2C119355%2C119355%2C103733%2C127242%2C102543%2C144768%2C144768%2C106407%2C109630%2C109630%2C104576%2C104576%2C117999%2C117999%2C101702%2C122483%2C100984%2C110241%2C100632%2C102993%2C100641%2C138090%2C101405%2C127662%2C127662%2C132781%2C132781%2C127659%2C127659%2C127666%2C127666%2C123875%2C123875%2C127651%2C127651%2C127655%2C127655%2C127648%2C127648%2C123248%2C152289%2C105645%2C106327%2C106324%2C108106%2C124626%2C124629%2C123994%2C123994%2C103105%2C127563%2C121149%2C112308%2C100722%2C113529%2C124686%2C124686%2C124682%2C124682%2C100727%2C124696%2C124696%2C104357%2C101510%2C103848%2C103847%2C104754%2C103864%2C114559%2C104762%2C103240%2C125356%2C109962%2C105856%2C120731%2C120731%2C120736%2C120736%2C105858%2C147989%2C150774%2C141151%2C141149%2C102359%2C143321%2C126375%2C126375%2C106610%2C126401%2C126401%2C126385%2C126385%2C143343%2C108798%2C108798%2C119908%2C119908%2C123611%2C123611%2C133840%2C133840%2C144027%2C138090%2C143343&obex=p2p&userRedirected=true&post_login_redirect=returnUri&ret_url=%2Fmyaccount%2Ftransfer%2FpayRequest%2FU-09584045BD498740V%2FU-7AK40048SY131414Y&link=unifiedlogin-login-submit&pglk=main%3Aunifiedlogin%3A%3A%3Alogin%7CbtnLogin&pgln=main%3Aunifiedlogin%3A%3A%3Alogin%3Alegacy-web-dyn%7CbtnLogin&e=cl HTTP/1.1Host: t.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode
Source: global traffic	HTTP traffic detected: GET /pa/js/pa.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/browser_modules/dustjs-helpers/dist/dust-helpers.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/core/baseView.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/modernizr-2.6.1.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/require.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /signin HTTP/1.1Host: www.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; nsid=s%3ARLPSU2OHYvlTZtXh_VMfzo7ctuMnbu-c.%2F5h%2FpbgyA12uYrTjTUlTTIQJX8aBsaqWc%2FutzlCO8XQ; l7_az=dcg01.phx; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352; datadome=Fs5MmB0JLdw5hCSGAmtvwdro2EIMrpyZoEKRvW~XxZ2c~hmw~iHaVACWMnscsHbkmlhxsh0aESsOTcLR3dIWEgraKwQ9F_jjSv2agvz3e2Q7qEqPf4IlaH6_FUYKbme5; tcs=main%3Aunifiedlogin%3A%3A%3Alogin%7CbtnLogin; tsrce=authchallengenodeweb; x-pp-s=eyJ0IjoiMTczMzQyMTg5Njc2MiIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1764957896%26vteXpYrS%3D1733423696%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/authchallenge.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/config.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pa/js/pa.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/hcaptcha/hcaptcha_fph.html?siteKey=bf07db68-5c2e-42e8-8779-ea8384890eea&locale.x=en_US&country.x=US&checkConnectionTimeout=10000&domain=hcaptcha.paypal.com&imgsDomain=imgs.hcaptcha.paypal.com&assetsDomain=newassets.hcaptcha.paypal.com&accountsDomain=accounts.hcaptcha.paypal.com&customDomains= HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/modernizr-2.6.1.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/require.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/config.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/app.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/shared/momgram@2x.png HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/css/app.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/authchallenge.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /auth/logclientdata HTTP/1.1Host: www.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; nsid=s%3ARLPSU2OHYvlTZtXh_VMfzo7ctuMnbu-c.%2F5h%2FpbgyA12uYrTjTUlTTIQJX8aBsaqWc%2FutzlCO8XQ; l7_az=dcg01.phx; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352; tcs=main%3Aunifiedlogin%3A%3A%3Alogin%7CbtnLogin; tsrce=authchallengenodeweb; datadome=8RSW3uzD4SbWvM9gFw9q0gQKTqu4dzosgEwjlVWJYqLsPPLmcSW45AaqUPwIez9Nxb_Xi8Zv7_oaSV_rYgieEwGmR_dsy5tyvCD7Ggqcjb1qKko3mAHLgzTBEcl7OT_L; ddbc=1; x-pp-s=eyJ0IjoiMTczMzQyMTkwMDg1NSIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1764957900%26vteXpYrS%3D1733423700%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew
Source: global traffic	HTTP traffic detected: GET /1/api.js?endpoint=https%3A%2F%2Fhcaptcha.paypal.com&assethost=https%3A%2F%2Fnewassets.hcaptcha.paypal.com&imghost=https%3A%2F%2Fimgs.hcaptcha.paypal.com&sentry=false&reportapi=https%3A%2F%2Faccounts.hcaptcha.paypal.com&host=hcaptcha.paypal.com&onload=hCaptchaCallback&render=explicit&hl=en HTTP/1.1Host: hcaptcha.paypal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypalobjects.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; l7_az=dcg01.phx; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352; tsrce=authchallengenodeweb; x-pp-s=eyJ0IjoiMTczMzQyMTg5Njc2MiIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1764957897%26vteXpYrS%3D1733423697%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/app.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/core/nougat.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/router.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/widgets/analytics.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/opinionLab/opinionLabComponent.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/jquery-1.12.4.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ts?v=1.9.5&t=1733421900875&g=300&pgrp=authchallengenodeweb%2Flayouts%2Fmaster.html.dust&page=authchallengenodeweb%2Flayouts%2Fmaster.html.dust&pgst=1733421896022&calc=f4773935a9896&nsid=RLPSU2OHYvlTZtXh_VMfzo7ctuMnbu-c&rsta=en_US&pgtf=Nodejs&env=live&s=ci&ccpg=US&csci=f46f4853341b4f54a3e4f8000fb6a48d&comp=authchallengenodeweb&tsrce=unifiedloginnodeweb&cu=0&ef_policy=ccpa&xe=109541%2C107585&xt=145835%2C135393&e=im&pglk=main%3Aunifiedlogin%3A%3A%3Alogin%7CbtnLogin&imsrc=setup&view=%7B%22t10%22%3A1220%2C%22t11%22%3A7406%2C%22tcp%22%3A4874%2C%22et%22%3A%223g%22%2C%22nt%22%3A%22navigate%22%2C%22bt%22%3A105%7D&ru=https%3A%2F%2Fwww.paypal.com%2Fsignin%2F%3FreturnUri%3D%252Fmyaccount%252Ftransfer%252FpayRequest%252FU-09584045BD498740V%252FU-7AK40048SY131414Y%253FclassicUrl%253D%252FUS%252Fcgi-bin%252F%253Fcmd%253D_prq%26id%3DUJ8cMtNtnR8osXBu987dZoV1KMO8Kn.CKcv6ZA%26expId%3Dp2p%26onboardData%3D%257B%2522signUpRequest%2522%253A%257B%2522method%2522%253A%2522get%2522%252C%2522url%2522%253A%2522https%253A%252F%252Fwww.paypal.com%252Fmyaccount%252Ftransfer%252FguestLogin%252FpayRequest%252FU-09584045BD498740V%252FU-7AK40048SY131414Y%253FclassicUrl%253D%252FUS%252Fcgi-bin%252F%253Fcmd%253D_prq%2526id%253DUJ8cMtNtnR8osXBu987dZoV1KMO8Kn.CKcv6ZA%2522%257D%257D%26flowContextData%3Dk3KkNbgd2F3whUTyipi2CMJLh_A_-ZYRjnLUkRjoT_j0HNsy89M3Jq9pftpBPMtxKyazfBl41ygLF6L-3nSQM3yKD_1JSLMZUnm3gJtmC_GW6MtRMZgxxLdzhM2UidzudErvOhqzUKOKhl1Uolhas5WHE4v4p4McejHNxcZVkLh-Y4orpy9guCt5hhIB4GnzEz4SubWTdzvc3cAY2OwiaKLLHK8NR5mzXmQp5fVf3iIsNKSvq_9V0izgPURkU3T8RWrY5gGBkFdWln_xY5pl8zRv8lmUI-keUYe0DqQBvKVK8GwV8qiU_5p8qjPHJVW9i-G3ZBZuZum2FKJqczC5erDfF4QBe8JLLYzKBGyYHnHI7fFyBoEDubHGzh8R01uh4xAe-iAkcUj76XG_hnIoA0TzvY15PrfT8E9VdnaJhGuNJ5c8GhmekMGGnVwrlvOcZBIva0%26v%3D1%26utm_source%3Dunp%26utm_medium%3Demail%26utm_campaign%3DRT000186%26utm_unptid%3D3bf303f1-b31d-11ef-81c6-bffe125023d8%26ppid%3DRT000186%26cnac%3DUS%26rsta%3Den_US%2528en-US%2529%26unptid%3D3bf303f1-b31d-11ef-81c6-bffe125023d8%26calc%3Df7859995fbf4b%26unp_tpcid%3Drequestmoney-notifications-requestee%26page%3Dmain%253Aemail%253ART000186%26pgrp%3Dmain%253Aemail%26e%3Dcl%26mchn%3Dem%26s%3Dci%26mail%3Dsys%26appVersion%3D1.294.0%26tenant_name%3D%26xt%3D145585%252C150948%252C104038%26link_ref%3Dwww.paypal.com_signin&cd=24&sw=1280&sh=1024&dw=1280&dh=1024&bw=1280&bh=907&ce=1&t1=1220&t1c=1220&t1d=0&t1s=1215&t2=700&t3=23&t4d=0&t4=0&t4e=4293&tt=0&rdc=0&protocol=http%2F1.1&res=%7B%7D HTTP/1.1Host: t.paypal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.paypal.com/signinAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9C
Source: global traffic	HTTP traffic detected: GET /images/shared/momgram@2x.png HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/underscore-1.13.4.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pa/3pjs/tl/6.4.65/patlcfg.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.paypal.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /signin HTTP/1.1Host: www.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; nsid=s%3ARLPSU2OHYvlTZtXh_VMfzo7ctuMnbu-c.%2F5h%2FpbgyA12uYrTjTUlTTIQJX8aBsaqWc%2FutzlCO8XQ; l7_az=dcg01.phx; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352; tsrce=authchallengenodeweb; datadome=8RSW3uzD4SbWvM9gFw9q0gQKTqu4dzosgEwjlVWJYqLsPPLmcSW45AaqUPwIez9Nxb_Xi8Zv7_oaSV_rYgieEwGmR_dsy5tyvCD7Ggqcjb1qKko3mAHLgzTBEcl7OT_L; ddbc=1; x-pp-s=eyJ0IjoiMTczMzQyMTkwMjY5MSIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1764957902%26vteXpYrS%3D1733423702%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew
Source: global traffic	HTTP traffic detected: GET /ts?v=1.9.5&t=1733421900875&g=300&pgrp=authchallengenodeweb%2Flayouts%2Fmaster.html.dust&page=authchallengenodeweb%2Flayouts%2Fmaster.html.dust&pgst=1733421896022&calc=f4773935a9896&nsid=RLPSU2OHYvlTZtXh_VMfzo7ctuMnbu-c&rsta=en_US&pgtf=Nodejs&env=live&s=ci&ccpg=US&csci=f46f4853341b4f54a3e4f8000fb6a48d&comp=authchallengenodeweb&tsrce=unifiedloginnodeweb&cu=0&ef_policy=ccpa&xe=109541%2C107585&xt=145835%2C135393&e=im&pglk=main%3Aunifiedlogin%3A%3A%3Alogin%7CbtnLogin&imsrc=setup&view=%7B%22t10%22%3A1220%2C%22t11%22%3A7406%2C%22tcp%22%3A4874%2C%22et%22%3A%223g%22%2C%22nt%22%3A%22navigate%22%2C%22bt%22%3A105%7D&ru=https%3A%2F%2Fwww.paypal.com%2Fsignin%2F%3FreturnUri%3D%252Fmyaccount%252Ftransfer%252FpayRequest%252FU-09584045BD498740V%252FU-7AK40048SY131414Y%253FclassicUrl%253D%252FUS%252Fcgi-bin%252F%253Fcmd%253D_prq%26id%3DUJ8cMtNtnR8osXBu987dZoV1KMO8Kn.CKcv6ZA%26expId%3Dp2p%26onboardData%3D%257B%2522signUpRequest%2522%253A%257B%2522method%2522%253A%2522get%2522%252C%2522url%2522%253A%2522https%253A%252F%252Fwww.paypal.com%252Fmyaccount%252Ftransfer%252FguestLogin%252FpayRequest%252FU-09584045BD498740V%252FU-7AK40048SY131414Y%253FclassicUrl%253D%252FUS%252Fcgi-bin%252F%253Fcmd%253D_prq%2526id%253DUJ8cMtNtnR8osXBu987dZoV1KMO8Kn.CKcv6ZA%2522%257D%257D%26flowContextData%3Dk3KkNbgd2F3whUTyipi2CMJLh_A_-ZYRjnLUkRjoT_j0HNsy89M3Jq9pftpBPMtxKyazfBl41ygLF6L-3nSQM3yKD_1JSLMZUnm3gJtmC_GW6MtRMZgxxLdzhM2UidzudErvOhqzUKOKhl1Uolhas5WHE4v4p4McejHNxcZVkLh-Y4orpy9guCt5hhIB4GnzEz4SubWTdzvc3cAY2OwiaKLLHK8NR5mzXmQp5fVf3iIsNKSvq_9V0izgPURkU3T8RWrY5gGBkFdWln_xY5pl8zRv8lmUI-keUYe0DqQBvKVK8GwV8qiU_5p8qjPHJVW9i-G3ZBZuZum2FKJqczC5erDfF4QBe8JLLYzKBGyYHnHI7fFyBoEDubHGzh8R01uh4xAe-iAkcUj76XG_hnIoA0TzvY15PrfT8E9VdnaJhGuNJ5c8GhmekMGGnVwrlvOcZBIva0%26v%3D1%26utm_source%3Dunp%26utm_medium%3Demail%26utm_campaign%3DRT000186%26utm_unptid%3D3bf303f1-b31d-11ef-81c6-bffe125023d8%26ppid%3DRT000186%26cnac%3DUS%26rsta%3Den_US%2528en-US%2529%26unptid%3D3bf303f1-b31d-11ef-81c6-bffe125023d8%26calc%3Df7859995fbf4b%26unp_tpcid%3Drequestmoney-notifications-requestee%26page%3Dmain%253Aemail%253ART000186%26pgrp%3Dmain%253Aemail%26e%3Dcl%26mchn%3Dem%26s%3Dci%26mail%3Dsys%26appVersion%3D1.294.0%26tenant_name%3D%26xt%3D145585%252C150948%252C104038%26link_ref%3Dwww.paypal.com_signin&cd=24&sw=1280&sh=1024&dw=1280&dh=1024&bw=1280&bh=907&ce=1&t1=1220&t1c=1220&t1d=0&t1s=1215&t2=700&t3=23&t4d=0&t4=0&t4e=4293&tt=0&rdc=0&protocol=http%2F1.1&res=%7B%7D HTTP/1.1Host: t.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; l7_az=dcg01.phx; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352; tsrce=authchallengenode
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/dust-core.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/core/baseView.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/core/nougat.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/router.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/widgets/analytics.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/opinionLab/opinionLabComponent.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/opinionLab/opinionLab.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pa/3pjs/tl/6.4.65/patlcfg.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/underscore-1.13.4.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/opinionLab/onlineOpinionPopup.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/backbone-1.5.0.min.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /auth/logclientdata HTTP/1.1Host: www.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; nsid=s%3ARLPSU2OHYvlTZtXh_VMfzo7ctuMnbu-c.%2F5h%2FpbgyA12uYrTjTUlTTIQJX8aBsaqWc%2FutzlCO8XQ; l7_az=dcg01.phx; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352; tsrce=authchallengenodeweb; ddbc=1; TLTSID=30167158646093787848819749747452; TLTDID=93723043988386874756787593010559; datadome=D8fSIT~dxz~mHSNyYTBDSRhEt2IYFFTDBQ1qJ3hUcAY7ERsrDodz5ZVyluuAb5NRxqCoUSBCopBgBow4dMKBuJ7R6REwjzuo9OrQ3WnpLQaztNcGpbdOTxLyK68vGUkJ; ts=vreXpYrS%3D1764957905%26vteXpYrS%3D1733423705%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew; x-pp-s=eyJ0IjoiMTczMzQyMTkwNTMzNSIsImwiOiIwIiwibSI6IjAifQ
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/jquery-1.12.4.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/core/baseView.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/dust-helpers.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/dust-core.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/opinionLab/opinionLab.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/opinionLab/onlineOpinionPopup.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /platform/tealeaftarget HTTP/1.1Host: www.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; nsid=s%3ARLPSU2OHYvlTZtXh_VMfzo7ctuMnbu-c.%2F5h%2FpbgyA12uYrTjTUlTTIQJX8aBsaqWc%2FutzlCO8XQ; l7_az=dcg01.phx; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352; tsrce=authchallengenodeweb; ddbc=1; TLTSID=30167158646093787848819749747452; TLTDID=93723043988386874756787593010559; datadome=D8fSIT~dxz~mHSNyYTBDSRhEt2IYFFTDBQ1qJ3hUcAY7ERsrDodz5ZVyluuAb5NRxqCoUSBCopBgBow4dMKBuJ7R6REwjzuo9OrQ3WnpLQaztNcGpbdOTxLyK68vGUkJ; x-pp-s=eyJ0IjoiMTczMzQyMTkwNTMzNSIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1764957907%26vteXpYrS%3D1733423707%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew
Source: global traffic	HTTP traffic detected: GET /signin HTTP/1.1Host: www.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; nsid=s%3ARLPSU2OHYvlTZtXh_VMfzo7ctuMnbu-c.%2F5h%2FpbgyA12uYrTjTUlTTIQJX8aBsaqWc%2FutzlCO8XQ; l7_az=dcg01.phx; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352; tsrce=authchallengenodeweb; ddbc=1; TLTSID=30167158646093787848819749747452; TLTDID=93723043988386874756787593010559; datadome=D8fSIT~dxz~mHSNyYTBDSRhEt2IYFFTDBQ1qJ3hUcAY7ERsrDodz5ZVyluuAb5NRxqCoUSBCopBgBow4dMKBuJ7R6REwjzuo9OrQ3WnpLQaztNcGpbdOTxLyK68vGUkJ; ts=vreXpYrS%3D1764957907%26vteXpYrS%3D1733423707%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew; x-pp-s=eyJ0IjoiMTczMzQyMTkwNzE1MyIsImwiOiIwIiwibSI6IjAifQ
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/backbone-1.5.0.min.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /error?code=404&ref=tealeaf HTTP/1.1Host: www.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; nsid=s%3ARLPSU2OHYvlTZtXh_VMfzo7ctuMnbu-c.%2F5h%2FpbgyA12uYrTjTUlTTIQJX8aBsaqWc%2FutzlCO8XQ; l7_az=dcg01.phx; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352; tsrce=authchallengenodeweb; ddbc=1; TLTSID=30167158646093787848819749747452; TLTDID=93723043988386874756787593010559; x-pp-s=eyJ0IjoiMTczMzQyMTkwNzE1MyIsImwiOiIwIiwibSI6IjAifQ; datadome=vSuP3ka4mVy~QZulHp1~WqR~EWUrnn2L7R5plnP1_VPgHKKliwbvZSiC7swhbZQ3S1DRPKOdctSPoK3ZygF4ZFHSfmxV1SY~~jrswy9SQbU_INJM_UckirO2CfOz2hEQ; ts=vreXpYrS%3D1764957908%26vteXpYrS%3D1733423708%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/dust-helpers.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/dust-helpers-supplement.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ts?v=1.9.5&t=1733421909680&g=300&e=err&page=main%3Aauthchallenge%3A%3Asignin&pgrp=main%3Aauthchallenge%3A%3Asignin&comp=authchallengenodeweb&erpg=Script%20error&error_type=WINDOW_ONERROR&error_source=-%200%3A0 HTTP/1.1Host: t.paypal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.paypal.com/signinAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; l7_az=dcg01.phx; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352; tsrce=authchallengenodeweb; TLTSID=30167158646093787848819749747452; TLTDID=93723043988386874756787593010559; x-pp-s=eyJ0IjoiMTczMzQyMTkwNzE1MyIsImwiOiIwIiwibSI6IjAifQ; datadome=vSuP3ka4mVy~QZulHp1~WqR~EWUrnn2L7R5plnP1_VPgHKKliwbvZSiC7swhbZQ3S1DRPKOdctSPoK3ZygF4ZFHSfmxV1SY~~jrswy9SQbU_INJM_UckirO2CfOz2hEQ; ts=vreXpYrS%3D1764957908%26vteXpYrS%3D1733423708%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/dust-helpers-supplement.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ts?v=1.9.5&t=1733421909680&g=300&e=err&page=main%3Aauthchallenge%3A%3Asignin&pgrp=main%3Aauthchallenge%3A%3Asignin&comp=authchallengenodeweb&erpg=Script%20error&error_type=WINDOW_ONERROR&error_source=-%200%3A0 HTTP/1.1Host: t.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352; tsrce=authchallengenodeweb; TLTDID=93723043988386874756787593010559; datadome=vSuP3ka4mVy~QZulHp1~WqR~EWUrnn2L7R5plnP1_VPgHKKliwbvZSiC7swhbZQ3S1DRPKOdctSPoK3ZygF4ZFHSfmxV1SY~~jrswy9SQbU_INJM_UckirO2CfOz2hEQ; navcmd=_home; consumer_display=USER_HOMEPAGE%3d0%26USER_TARGETPAGE%3d0%26USER_FILTER_CHOICE%3d0%26BALANCE_MODULE_STATE%3d1%26GIFT_BALANCE_MODULE_STATE%3d1%26LAST_SELECTED_ALIAS_ID%3d0%26SELLING_GROUP%3d1%26PAYMENT_AND_RISK_GROUP%3d1%26SHIPPING_GROUP%3d1%26HOME_VERSION%3d1733508311%26MCE2_ELIGIBILITY%3d4294967295; KHcl0EuY7AKSMgfvHl7J5E7hPtK=rdtTJETBNM7DwCh4qNpvdRxJdMSDzzFYo6In7MygF_6Md8QPhzwP-F4gHD7NOMP7zUuOBvACUHj0UJnL; navlns=0.0; cwrClyrK4LoCV1fydGbAxiNL6iG=3Ng6NGvsdTy3LmJYbfY1MmzXBIEVgHRclejTzBmAyTYWxq4Z-8IhvW39PAtMToI3jGQd7xAgIbQXgZmEW3Nq8ux8m8-zP_ab2u2ApnWN1rsHTjwxMvLkIa3Ou6P-opp8l65vJoiQDKWYCelscaLvzmOKwjPGaH8HFvG-3WDcvyZQyhylxqaY88qWBHDz4m0rfLaEhhk9hs01iziQYDqWrhtOyeu_fKCFI6iLkdE3BeQOhWxbd86OA1v86PvwekblqTgUkGC2tQLFg6lJltkH7IM3xcvZAf3Z1LAoHA49CxmgYkQ03fVNxnYwbNrmqkozsWLXEY-n_9aELBv28VjOVNkZqhwyDMEA5_AdgNp6b7q11oiBTVTzWq8h83fCKgBtaqow9WB29areckcfti7PEziSQpoVEb9hWFOT7QaDyGGmd-4UMXAvMJFJf_C; x-pp-s=eyJ0IjoiMTczMzQyMTkxMTk4MCIsImwiOiIwIiwibSI6IjAifQ; l7_az=ccg14.slc; ts=vreXpYrS%3D1764957912%26vteXpYrS%3D1733423712%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew
Source: global traffic	HTTP traffic detected: GET /auth/logclientdata HTTP/1.1Host: www.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; nsid=s%3ARLPSU2OHYvlTZtXh_VMfzo7ctuMnbu-c.%2F5h%2FpbgyA12uYrTjTUlTTIQJX8aBsaqWc%2FutzlCO8XQ; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352; tsrce=authchallengenodeweb; ddbc=1; TLTDID=93723043988386874756787593010559; datadome=vSuP3ka4mVy~QZulHp1~WqR~EWUrnn2L7R5plnP1_VPgHKKliwbvZSiC7swhbZQ3S1DRPKOdctSPoK3ZygF4ZFHSfmxV1SY~~jrswy9SQbU_INJM_UckirO2CfOz2hEQ; navcmd=_home; consumer_display=USER_HOMEPAGE%3d0%26USER_TARGETPAGE%3d0%26USER_FILTER_CHOICE%3d0%26BALANCE_MODULE_STATE%3d1%26GIFT_BALANCE_MODULE_STATE%3d1%26LAST_SELECTED_ALIAS_ID%3d0%26SELLING_GROUP%3d1%26PAYMENT_AND_RISK_GROUP%3d1%26SHIPPING_GROUP%3d1%26HOME_VERSION%3d1733508311%26MCE2_ELIGIBILITY%3d4294967295; KHcl0EuY7AKSMgfvHl7J5E7hPtK=rdtTJETBNM7DwCh4qNpvdRxJdMSDzzFYo6In7MygF_6Md8QPhzwP-F4gHD7NOMP7zUuOBvACUHj0UJnL; navlns=0.0; cwrClyrK4LoCV1fydGbAxiNL6iG=3Ng6NGvsdTy3LmJYbfY1MmzXBIEVgHRclejTzBmAyTYWxq4Z-8IhvW39PAtMToI3jGQd7xAgIbQXgZmEW3Nq8ux8m8-zP_ab2u2ApnWN1rsHTjwxMvLkIa3Ou6P-opp8l65vJoiQDKWYCelscaLvzmOKwjPGaH8HFvG-3WDcvyZQyhylxqaY88qWBHDz4m0rfLaEhhk9hs01iziQYDqWrhtOyeu_fKCFI6iLkdE3BeQOhWxbd86OA1v86PvwekblqTgUkGC2tQLFg6lJltkH7IM3xcvZAf3Z1LAoHA49CxmgYkQ03fVNxnYwbNrmqkozsWLXEY-n_9aELBv28VjOVNkZqhwyDMEA5_AdgNp6b7q11oiBTVTzWq8h83fCKgBtaqow9WB29areckcfti7PEziSQpoVEb9hWFOT7QaDyGGmd-4UMXAvMJFJf_C; ts=vreXpYrS%3D1764957912%26vteXpYrS%3D1733423712%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew; l7_az=dcg01.phx; enforce_policy=ccpa; x-pp-s=eyJ0IjoiMTczMzQyMTkxMjU1MSIsImwiOiIwIiwibSI6IjAifQ; TLTSID=27694270399228667603056339019786
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/recaptcha/recaptcha_v2.html?siteKey=6LeZ6egUAAAAAGwL8CjkDE8dcSw2DtvuVpdwTkwG&locale.x=en_US&country.x=US&checkConnectionTimeout=10000&reCaptchaEnterpriseEnabled=true HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/view/authcaptcha.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /auth/logclientdata HTTP/1.1Host: www.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; nsid=s%3ARLPSU2OHYvlTZtXh_VMfzo7ctuMnbu-c.%2F5h%2FpbgyA12uYrTjTUlTTIQJX8aBsaqWc%2FutzlCO8XQ; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352; tsrce=authchallengenodeweb; ddbc=1; TLTDID=93723043988386874756787593010559; datadome=vSuP3ka4mVy~QZulHp1~WqR~EWUrnn2L7R5plnP1_VPgHKKliwbvZSiC7swhbZQ3S1DRPKOdctSPoK3ZygF4ZFHSfmxV1SY~~jrswy9SQbU_INJM_UckirO2CfOz2hEQ; navcmd=_home; consumer_display=USER_HOMEPAGE%3d0%26USER_TARGETPAGE%3d0%26USER_FILTER_CHOICE%3d0%26BALANCE_MODULE_STATE%3d1%26GIFT_BALANCE_MODULE_STATE%3d1%26LAST_SELECTED_ALIAS_ID%3d0%26SELLING_GROUP%3d1%26PAYMENT_AND_RISK_GROUP%3d1%26SHIPPING_GROUP%3d1%26HOME_VERSION%3d1733508311%26MCE2_ELIGIBILITY%3d4294967295; KHcl0EuY7AKSMgfvHl7J5E7hPtK=rdtTJETBNM7DwCh4qNpvdRxJdMSDzzFYo6In7MygF_6Md8QPhzwP-F4gHD7NOMP7zUuOBvACUHj0UJnL; navlns=0.0; cwrClyrK4LoCV1fydGbAxiNL6iG=3Ng6NGvsdTy3LmJYbfY1MmzXBIEVgHRclejTzBmAyTYWxq4Z-8IhvW39PAtMToI3jGQd7xAgIbQXgZmEW3Nq8ux8m8-zP_ab2u2ApnWN1rsHTjwxMvLkIa3Ou6P-opp8l65vJoiQDKWYCelscaLvzmOKwjPGaH8HFvG-3WDcvyZQyhylxqaY88qWBHDz4m0rfLaEhhk9hs01iziQYDqWrhtOyeu_fKCFI6iLkdE3BeQOhWxbd86OA1v86PvwekblqTgUkGC2tQLFg6lJltkH7IM3xcvZAf3Z1LAoHA49CxmgYkQ03fVNxnYwbNrmqkozsWLXEY-n_9aELBv28VjOVNkZqhwyDMEA5_AdgNp6b7q11oiBTVTzWq8h83fCKgBtaqow9WB29areckcfti7PEziSQpoVEb9hWFOT7QaDyGGmd-4UMXAvMJFJf_C; l7_az=dcg01.phx; enforce_policy=ccpa; TLTSID=27694270399228667603056339019786; ts=vreXpYrS%3D1764957914%26vteXpYrS%3D1733423714%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew; x-pp-s=eyJ0IjoiMTczMzQyMTkxNDUxMSIsImwiOiIwIiwibSI6IjAifQ
Source: global traffic	HTTP traffic detected: GET /signin HTTP/1.1Host: www.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; nsid=s%3ARLPSU2OHYvlTZtXh_VMfzo7ctuMnbu-c.%2F5h%2FpbgyA12uYrTjTUlTTIQJX8aBsaqWc%2FutzlCO8XQ; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352; tsrce=authchallengenodeweb; ddbc=1; TLTDID=93723043988386874756787593010559; datadome=vSuP3ka4mVy~QZulHp1~WqR~EWUrnn2L7R5plnP1_VPgHKKliwbvZSiC7swhbZQ3S1DRPKOdctSPoK3ZygF4ZFHSfmxV1SY~~jrswy9SQbU_INJM_UckirO2CfOz2hEQ; navcmd=_home; consumer_display=USER_HOMEPAGE%3d0%26USER_TARGETPAGE%3d0%26USER_FILTER_CHOICE%3d0%26BALANCE_MODULE_STATE%3d1%26GIFT_BALANCE_MODULE_STATE%3d1%26LAST_SELECTED_ALIAS_ID%3d0%26SELLING_GROUP%3d1%26PAYMENT_AND_RISK_GROUP%3d1%26SHIPPING_GROUP%3d1%26HOME_VERSION%3d1733508311%26MCE2_ELIGIBILITY%3d4294967295; KHcl0EuY7AKSMgfvHl7J5E7hPtK=rdtTJETBNM7DwCh4qNpvdRxJdMSDzzFYo6In7MygF_6Md8QPhzwP-F4gHD7NOMP7zUuOBvACUHj0UJnL; navlns=0.0; cwrClyrK4LoCV1fydGbAxiNL6iG=3Ng6NGvsdTy3LmJYbfY1MmzXBIEVgHRclejTzBmAyTYWxq4Z-8IhvW39PAtMToI3jGQd7xAgIbQXgZmEW3Nq8ux8m8-zP_ab2u2ApnWN1rsHTjwxMvLkIa3Ou6P-opp8l65vJoiQDKWYCelscaLvzmOKwjPGaH8HFvG-3WDcvyZQyhylxqaY88qWBHDz4m0rfLaEhhk9hs01iziQYDqWrhtOyeu_fKCFI6iLkdE3BeQOhWxbd86OA1v86PvwekblqTgUkGC2tQLFg6lJltkH7IM3xcvZAf3Z1LAoHA49CxmgYkQ03fVNxnYwbNrmqkozsWLXEY-n_9aELBv28VjOVNkZqhwyDMEA5_AdgNp6b7q11oiBTVTzWq8h83fCKgBtaqow9WB29areckcfti7PEziSQpoVEb9hWFOT7QaDyGGmd-4UMXAvMJFJf_C; l7_az=dcg01.phx; enforce_policy=ccpa; TLTSID=27694270399228667603056339019786; ts=vreXpYrS%3D1764957914%26vteXpYrS%3D1733423714%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew; x-pp-s=eyJ0IjoiMTczMzQyMTkxNDU5OCIsImwiOiIwIiwibSI6IjAifQ
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/view/pageView.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/widgets/validation.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/widgets/errorDisplay.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/view/authcaptcha.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/enterprise.js?onload=recaptchaEnterpriseCallback&render=explicit&hl=en HTTP/1.1Host: www.recaptcha.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypalobjects.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ts?v=1.9.5&t=1733421915102&g=300&pgrp=authchallengenodeweb%2Flayouts%2Fmaster.html.dust&page=authchallengenodeweb%2Flayouts%2Fmaster.html.dust&pgst=1733421912512&calc=f50491546f905&nsid=RLPSU2OHYvlTZtXh_VMfzo7ctuMnbu-c&rsta=en_US&pgtf=Nodejs&env=live&s=ci&ccpg=US&csci=a2cfc41caf2f4e9e93be07c354b04372&comp=authchallengenodeweb&tsrce=authchallengenodeweb&cu=0&ef_policy=ccpa&xe=109541&xt=145835&e=im&imsrc=setup&view=%7B%22t10%22%3A1209%2C%22t11%22%3A5025%2C%22tcp%22%3A2005%2C%22et%22%3A%223g%22%2C%22nt%22%3A%22navigate%22%2C%22bt%22%3A57%7D&ru=https%3A%2F%2Fwww.paypal.com%2Fsignin&cd=24&sw=1280&sh=1024&dw=1280&dh=1024&bw=1280&bh=907&ce=1&t1=1209&t1c=1209&t1d=0&t1s=1206&t2=708&t3=6&t4d=0&t4=0&t4e=1963&tt=0&rdc=0&protocol=http%2F1.1&res=%7B%7D HTTP/1.1Host: t.paypal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.paypal.com/auth/validatecaptchaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352; tsrce=authchallengenodeweb; TLTDID=93723043988386874756787593010559; datadome=vSuP3ka4mVy~QZulHp1~WqR~EWUrnn2L7R5plnP1_VPgHKKliwbvZSiC7swhbZQ3S1DRPKOdctSPoK3ZygF4ZFHSfmxV1SY~~jrswy9SQbU_INJM_UckirO2CfOz2hEQ; navcmd=_home; consumer_display=USER_HOMEPAGE%3d0%26USER_TARGETPAGE%3d0%26USER_FILTER_CHOICE%3d0%26BALANCE_MODULE_STATE%3d1%26GIFT_BALANCE_MODULE_STATE%3d1%26LAST_SELECTED_ALIAS_ID%3d0%26SELLING_GROUP%3d1%26PAYMENT_AND_RISK_GROUP%3d1%26SHIPPING_GROUP%3d1%26HOME_VERSION%3d1733508311%26MCE2_ELIGIBILITY%3d4294967295; KHcl0EuY7AKSMgfvHl7J5E7hPtK=rdtTJETBNM7DwCh4qNpvdRxJdMSDzzFYo6In7MygF_6Md8QPhzwP-F4gHD7NOMP7zUuOBvACUHj0UJnL; navlns=0.0; cwrClyrK4LoCV1fydGbAxiNL6iG=3Ng6NGvsdTy3LmJYbfY1MmzXBIEVgHRclejTzBmAyTYWxq4Z-8IhvW39PAtMToI3jGQd7xAgIbQXgZmEW3Nq8ux8m8-zP_ab2u2ApnWN1rsHTjwxMvLkIa3Ou6P-opp8l65vJoiQDKWYCelscaLvzmOKwjPGaH8HFvG-3WDcvyZQyhylxqaY88qWBHDz4m0rfLaEhhk9hs01iziQYDqWrhtOyeu_fKCFI6iLkdE3BeQOhWxbd86OA1v86PvwekblqTgUkGC2tQLFg6lJltkH7IM3xcvZAf3Z1LAoHA49CxmgYkQ03fVNxnYwbNrmqkozsWLXEY-n_9aELBv28VjOVNkZqhwyDMEA5_AdgNp6b7q11oiBTVTzWq8h83fCKgBtaqow9WB29areckcfti7PEziSQpoVEb9hWFOT7QaDyGGmd-4UMXAvMJFJf_C; l7_az=dcg01.phx; enforce_policy=ccpa; TLTSID=27694270399228667603056339019786; ts=vreXpYrS%3D1764957914%26vteXpYrS%3D1733423714%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew; x-pp-s=eyJ0IjoiMTczMzQyMTkxNDU5OCIsImwiOiIwIiwibSI6IjAifQ
Source: global traffic	HTTP traffic detected: GET /platform/tealeaftarget HTTP/1.1Host: www.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; nsid=s%3ARLPSU2OHYvlTZtXh_VMfzo7ctuMnbu-c.%2F5h%2FpbgyA12uYrTjTUlTTIQJX8aBsaqWc%2FutzlCO8XQ; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352; tsrce=authchallengenodeweb; ddbc=1; TLTDID=93723043988386874756787593010559; datadome=vSuP3ka4mVy~QZulHp1~WqR~EWUrnn2L7R5plnP1_VPgHKKliwbvZSiC7swhbZQ3S1DRPKOdctSPoK3ZygF4ZFHSfmxV1SY~~jrswy9SQbU_INJM_UckirO2CfOz2hEQ; navcmd=_home; consumer_display=USER_HOMEPAGE%3d0%26USER_TARGETPAGE%3d0%26USER_FILTER_CHOICE%3d0%26BALANCE_MODULE_STATE%3d1%26GIFT_BALANCE_MODULE_STATE%3d1%26LAST_SELECTED_ALIAS_ID%3d0%26SELLING_GROUP%3d1%26PAYMENT_AND_RISK_GROUP%3d1%26SHIPPING_GROUP%3d1%26HOME_VERSION%3d1733508311%26MCE2_ELIGIBILITY%3d4294967295; KHcl0EuY7AKSMgfvHl7J5E7hPtK=rdtTJETBNM7DwCh4qNpvdRxJdMSDzzFYo6In7MygF_6Md8QPhzwP-F4gHD7NOMP7zUuOBvACUHj0UJnL; navlns=0.0; cwrClyrK4LoCV1fydGbAxiNL6iG=3Ng6NGvsdTy3LmJYbfY1MmzXBIEVgHRclejTzBmAyTYWxq4Z-8IhvW39PAtMToI3jGQd7xAgIbQXgZmEW3Nq8ux8m8-zP_ab2u2ApnWN1rsHTjwxMvLkIa3Ou6P-opp8l65vJoiQDKWYCelscaLvzmOKwjPGaH8HFvG-3WDcvyZQyhylxqaY88qWBHDz4m0rfLaEhhk9hs01iziQYDqWrhtOyeu_fKCFI6iLkdE3BeQOhWxbd86OA1v86PvwekblqTgUkGC2tQLFg6lJltkH7IM3xcvZAf3Z1LAoHA49CxmgYkQ03fVNxnYwbNrmqkozsWLXEY-n_9aELBv28VjOVNkZqhwyDMEA5_AdgNp6b7q11oiBTVTzWq8h83fCKgBtaqow9WB29areckcfti7PEziSQpoVEb9hWFOT7QaDyGGmd-4UMXAvMJFJf_C; l7_az=dcg01.phx; enforce_policy=ccpa; TLTSID=27694270399228667603056339019786; x-pp-s=eyJ0IjoiMTczMzQyMTkxNDU5OCIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1764957916%26vteXpYrS%3D1733423716%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew
Source: global traffic	HTTP traffic detected: GET /signin HTTP/1.1Host: www.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; nsid=s%3ARLPSU2OHYvlTZtXh_VMfzo7ctuMnbu-c.%2F5h%2FpbgyA12uYrTjTUlTTIQJX8aBsaqWc%2FutzlCO8XQ; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352; tsrce=authchallengenodeweb; ddbc=1; TLTDID=93723043988386874756787593010559; navcmd=_home; consumer_display=USER_HOMEPAGE%3d0%26USER_TARGETPAGE%3d0%26USER_FILTER_CHOICE%3d0%26BALANCE_MODULE_STATE%3d1%26GIFT_BALANCE_MODULE_STATE%3d1%26LAST_SELECTED_ALIAS_ID%3d0%26SELLING_GROUP%3d1%26PAYMENT_AND_RISK_GROUP%3d1%26SHIPPING_GROUP%3d1%26HOME_VERSION%3d1733508311%26MCE2_ELIGIBILITY%3d4294967295; KHcl0EuY7AKSMgfvHl7J5E7hPtK=rdtTJETBNM7DwCh4qNpvdRxJdMSDzzFYo6In7MygF_6Md8QPhzwP-F4gHD7NOMP7zUuOBvACUHj0UJnL; navlns=0.0; cwrClyrK4LoCV1fydGbAxiNL6iG=3Ng6NGvsdTy3LmJYbfY1MmzXBIEVgHRclejTzBmAyTYWxq4Z-8IhvW39PAtMToI3jGQd7xAgIbQXgZmEW3Nq8ux8m8-zP_ab2u2ApnWN1rsHTjwxMvLkIa3Ou6P-opp8l65vJoiQDKWYCelscaLvzmOKwjPGaH8HFvG-3WDcvyZQyhylxqaY88qWBHDz4m0rfLaEhhk9hs01iziQYDqWrhtOyeu_fKCFI6iLkdE3BeQOhWxbd86OA1v86PvwekblqTgUkGC2tQLFg6lJltkH7IM3xcvZAf3Z1LAoHA49CxmgYkQ03fVNxnYwbNrmqkozsWLXEY-n_9aELBv28VjOVNkZqhwyDMEA5_AdgNp6b7q11oiBTVTzWq8h83fCKgBtaqow9WB29areckcfti7PEziSQpoVEb9hWFOT7QaDyGGmd-4UMXAvMJFJf_C; l7_az=dcg01.phx; enforce_policy=ccpa; TLTSID=27694270399228667603056339019786; ts=vreXpYrS%3D1764957916%26vteXpYrS%3D1733423716%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew; datadome=Z9w51G2l458BrZOpqb83JGqtDzp5ZzVeZzdH_DLusX5jgJYpDxL24E_eqUbfWqQNvcJC4O6KMo44cMvWn7PYQdCxi55p2tjkrP5hdB59z9VbFlca2CViIKgWHp8Uek0z; x-pp-s=eyJ0IjoiMTczMzQyMTkxNjQzMCIsImwiOiIwIiwibSI6IjAifQ
Source: global traffic	HTTP traffic detected: GET /error?code=404&ref=tealeaf HTTP/1.1Host: www.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; nsid=s%3ARLPSU2OHYvlTZtXh_VMfzo7ctuMnbu-c.%2F5h%2FpbgyA12uYrTjTUlTTIQJX8aBsaqWc%2FutzlCO8XQ; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352; tsrce=authchallengenodeweb; ddbc=1; TLTDID=93723043988386874756787593010559; navcmd=_home; consumer_display=USER_HOMEPAGE%3d0%26USER_TARGETPAGE%3d0%26USER_FILTER_CHOICE%3d0%26BALANCE_MODULE_STATE%3d1%26GIFT_BALANCE_MODULE_STATE%3d1%26LAST_SELECTED_ALIAS_ID%3d0%26SELLING_GROUP%3d1%26PAYMENT_AND_RISK_GROUP%3d1%26SHIPPING_GROUP%3d1%26HOME_VERSION%3d1733508311%26MCE2_ELIGIBILITY%3d4294967295; KHcl0EuY7AKSMgfvHl7J5E7hPtK=rdtTJETBNM7DwCh4qNpvdRxJdMSDzzFYo6In7MygF_6Md8QPhzwP-F4gHD7NOMP7zUuOBvACUHj0UJnL; navlns=0.0; cwrClyrK4LoCV1fydGbAxiNL6iG=3Ng6NGvsdTy3LmJYbfY1MmzXBIEVgHRclejTzBmAyTYWxq4Z-8IhvW39PAtMToI3jGQd7xAgIbQXgZmEW3Nq8ux8m8-zP_ab2u2ApnWN1rsHTjwxMvLkIa3Ou6P-opp8l65vJoiQDKWYCelscaLvzmOKwjPGaH8HFvG-3WDcvyZQyhylxqaY88qWBHDz4m0rfLaEhhk9hs01iziQYDqWrhtOyeu_fKCFI6iLkdE3BeQOhWxbd86OA1v86PvwekblqTgUkGC2tQLFg6lJltkH7IM3xcvZAf3Z1LAoHA49CxmgYkQ03fVNxnYwbNrmqkozsWLXEY-n_9aELBv28VjOVNkZqhwyDMEA5_AdgNp6b7q11oiBTVTzWq8h83fCKgBtaqow9WB29areckcfti7PEziSQpoVEb9hWFOT7QaDyGGmd-4UMXAvMJFJf_C; l7_az=dcg01.phx; enforce_policy=ccpa; TLTSID=27694270399228667603056339019786; datadome=Z9w51G2l458BrZOpqb83JGqtDzp5ZzVeZzdH_DLusX5jgJYpDxL24E_eqUbfWqQNvcJC4O6KMo44cMvWn7PYQdCxi55p2tjkrP5hdB59z9VbFlca2CViIKgWHp8Uek0z; x-pp-s=eyJ0IjoiMTczMzQyMTkxNjQzMCIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1764957917%26vteXpYrS%3D1733423717%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew
Source: global traffic	HTTP traffic detected: GET /ts?v=1.9.5&t=1733421915102&g=300&pgrp=authchallengenodeweb%2Flayouts%2Fmaster.html.dust&page=authchallengenodeweb%2Flayouts%2Fmaster.html.dust&pgst=1733421912512&calc=f50491546f905&nsid=RLPSU2OHYvlTZtXh_VMfzo7ctuMnbu-c&rsta=en_US&pgtf=Nodejs&env=live&s=ci&ccpg=US&csci=a2cfc41caf2f4e9e93be07c354b04372&comp=authchallengenodeweb&tsrce=authchallengenodeweb&cu=0&ef_policy=ccpa&xe=109541&xt=145835&e=im&imsrc=setup&view=%7B%22t10%22%3A1209%2C%22t11%22%3A5025%2C%22tcp%22%3A2005%2C%22et%22%3A%223g%22%2C%22nt%22%3A%22navigate%22%2C%22bt%22%3A57%7D&ru=https%3A%2F%2Fwww.paypal.com%2Fsignin&cd=24&sw=1280&sh=1024&dw=1280&dh=1024&bw=1280&bh=907&ce=1&t1=1209&t1c=1209&t1d=0&t1s=1206&t2=708&t3=6&t4d=0&t4=0&t4e=1963&tt=0&rdc=0&protocol=http%2F1.1&res=%7B%7D HTTP/1.1Host: t.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352; tsrce=authchallengenodeweb; TLTDID=93723043988386874756787593010559; navcmd=_home; consumer_display=USER_HOMEPAGE%3d0%26USER_TARGETPAGE%3d0%26USER_FILTER_CHOICE%3d0%26BALANCE_MODULE_STATE%3d1%26GIFT_BALANCE_MODULE_STATE%3d1%26LAST_SELECTED_ALIAS_ID%3d0%26SELLING_GROUP%3d1%26PAYMENT_AND_RISK_GROUP%3d1%26SHIPPING_GROUP%3d1%26HOME_VERSION%3d1733508311%26MCE2_ELIGIBILITY%3d4294967295; KHcl0EuY7AKSMgfvHl7J5E7hPtK=rdtTJETBNM7DwCh4qNpvdRxJdMSDzzFYo6In7MygF_6Md8QPhzwP-F4gHD7NOMP7zUuOBvACUHj0UJnL; navlns=0.0; cwrClyrK4LoCV1fydGbAxiNL6iG=3Ng6NGvsdTy3LmJYbfY1MmzXBIEVgHRclejTzBmAyTYWxq4Z-8IhvW39PAtMToI3jGQd7xAgIbQXgZmEW3Nq8ux8m8-zP_ab2u2ApnWN1rsHTjwxMvLkIa3Ou6P-opp8l65vJoiQDKWYCelscaLvzmOKwjPGaH8HFvG-3WDcvyZQyhylxqaY88qWBHDz4m0rfLaEhhk9hs01iziQYDqWrhtOyeu_fKCFI6iLkdE3BeQOhWxbd86OA1v86PvwekblqTgUkGC2tQLFg6lJltkH7IM3xcvZAf3Z1LAoHA49CxmgYkQ03fVNxnYwbNrmqkozsWLXEY-n_9aELBv28VjOVNkZqhwyDMEA5_AdgNp6b7q11oiBTVTzWq8h83fCKgBtaqow9WB29areckcfti7PEziSQpoVEb9hWFOT7QaDyGGmd-4UMXAvMJFJf_C; l7_az=dcg01.phx; enforce_policy=ccpa; TLTSID=27694270399228667603056339019786; datadome=Z9w51G2l458BrZOpqb83JGqtDzp5ZzVeZzdH_DLusX5jgJYpDxL24E_eqUbfWqQNvcJC4O6KMo44cMvWn7PYQdCxi55p2tjkrP5hdB59z9VbFlca2CViIKgWHp8Uek0z; x-pp-s=eyJ0IjoiMTczMzQyMTkxNjQzMCIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1764957917%26vteXpYrS%3D1733423717%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/widgets/validation.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/widgets/errorDisplay.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/view/pageView.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/enterprise.js?onload=recaptchaEnterpriseCallback&render=explicit&hl=en HTTP/1.1Host: www.recaptcha.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/enterprise/anchor?ar=1&k=6LeZ6egUAAAAAGwL8CjkDE8dcSw2DtvuVpdwTkwG&co=aHR0cHM6Ly93d3cucGF5cGFsb2JqZWN0cy5jb206NDQz&hl=en&v=MskOi9BoTT5Vt82JMh92Dvhu&theme=light&size=normal&cb=w07wzl5n9z7l HTTP/1.1Host: www.recaptcha.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.paypalobjects.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /auth/logclientdata HTTP/1.1Host: www.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; nsid=s%3ARLPSU2OHYvlTZtXh_VMfzo7ctuMnbu-c.%2F5h%2FpbgyA12uYrTjTUlTTIQJX8aBsaqWc%2FutzlCO8XQ; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352; tsrce=authchallengenodeweb; ddbc=1; TLTDID=93723043988386874756787593010559; navcmd=_home; consumer_display=USER_HOMEPAGE%3d0%26USER_TARGETPAGE%3d0%26USER_FILTER_CHOICE%3d0%26BALANCE_MODULE_STATE%3d1%26GIFT_BALANCE_MODULE_STATE%3d1%26LAST_SELECTED_ALIAS_ID%3d0%26SELLING_GROUP%3d1%26PAYMENT_AND_RISK_GROUP%3d1%26SHIPPING_GROUP%3d1%26HOME_VERSION%3d1733508311%26MCE2_ELIGIBILITY%3d4294967295; KHcl0EuY7AKSMgfvHl7J5E7hPtK=rdtTJETBNM7DwCh4qNpvdRxJdMSDzzFYo6In7MygF_6Md8QPhzwP-F4gHD7NOMP7zUuOBvACUHj0UJnL; navlns=0.0; cwrClyrK4LoCV1fydGbAxiNL6iG=3Ng6NGvsdTy3LmJYbfY1MmzXBIEVgHRclejTzBmAyTYWxq4Z-8IhvW39PAtMToI3jGQd7xAgIbQXgZmEW3Nq8ux8m8-zP_ab2u2ApnWN1rsHTjwxMvLkIa3Ou6P-opp8l65vJoiQDKWYCelscaLvzmOKwjPGaH8HFvG-3WDcvyZQyhylxqaY88qWBHDz4m0rfLaEhhk9hs01iziQYDqWrhtOyeu_fKCFI6iLkdE3BeQOhWxbd86OA1v86PvwekblqTgUkGC2tQLFg6lJltkH7IM3xcvZAf3Z1LAoHA49CxmgYkQ03fVNxnYwbNrmqkozsWLXEY-n_9aELBv28VjOVNkZqhwyDMEA5_AdgNp6b7q11oiBTVTzWq8h83fCKgBtaqow9WB29areckcfti7PEziSQpoVEb9hWFOT7QaDyGGmd-4UMXAvMJFJf_C; enforce_policy=ccpa; TLTSID=27694270399228667603056339019786; datadome=~tlOVwgASsPb3jefL6eUe4yTmowUP20wLLRN1SWiJ6i8pEYCsLGQuyLNbXchA2xrjv2iG5a18KqQtQqLAEiTqd2pcwr0M0J7vIS8x_BOs5RzMrzMfwBycbB0ecQ5KB_e; x-pp-s=eyJ0IjoiMTczMzQyMTkyMzQ4NCIsImwiOiIwIiwibSI6IjAifQ; l7_az=dcg02.phx; ts=vreXpYrS%3D1764957923%26vteXpYrS%3D1733423723%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew
Source: global traffic	HTTP traffic detected: GET /signin HTTP/1.1Host: www.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; nsid=s%3ARLPSU2OHYvlTZtXh_VMfzo7ctuMnbu-c.%2F5h%2FpbgyA12uYrTjTUlTTIQJX8aBsaqWc%2FutzlCO8XQ; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352; tsrce=authchallengenodeweb; ddbc=1; TLTDID=93723043988386874756787593010559; navcmd=_home; consumer_display=USER_HOMEPAGE%3d0%26USER_TARGETPAGE%3d0%26USER_FILTER_CHOICE%3d0%26BALANCE_MODULE_STATE%3d1%26GIFT_BALANCE_MODULE_STATE%3d1%26LAST_SELECTED_ALIAS_ID%3d0%26SELLING_GROUP%3d1%26PAYMENT_AND_RISK_GROUP%3d1%26SHIPPING_GROUP%3d1%26HOME_VERSION%3d1733508311%26MCE2_ELIGIBILITY%3d4294967295; KHcl0EuY7AKSMgfvHl7J5E7hPtK=rdtTJETBNM7DwCh4qNpvdRxJdMSDzzFYo6In7MygF_6Md8QPhzwP-F4gHD7NOMP7zUuOBvACUHj0UJnL; navlns=0.0; cwrClyrK4LoCV1fydGbAxiNL6iG=3Ng6NGvsdTy3LmJYbfY1MmzXBIEVgHRclejTzBmAyTYWxq4Z-8IhvW39PAtMToI3jGQd7xAgIbQXgZmEW3Nq8ux8m8-zP_ab2u2ApnWN1rsHTjwxMvLkIa3Ou6P-opp8l65vJoiQDKWYCelscaLvzmOKwjPGaH8HFvG-3WDcvyZQyhylxqaY88qWBHDz4m0rfLaEhhk9hs01iziQYDqWrhtOyeu_fKCFI6iLkdE3BeQOhWxbd86OA1v86PvwekblqTgUkGC2tQLFg6lJltkH7IM3xcvZAf3Z1LAoHA49CxmgYkQ03fVNxnYwbNrmqkozsWLXEY-n_9aELBv28VjOVNkZqhwyDMEA5_AdgNp6b7q11oiBTVTzWq8h83fCKgBtaqow9WB29areckcfti7PEziSQpoVEb9hWFOT7QaDyGGmd-4UMXAvMJFJf_C; enforce_policy=ccpa; TLTSID=27694270399228667603056339019786; datadome=~tlOVwgASsPb3jefL6eUe4yTmowUP20wLLRN1SWiJ6i8pEYCsLGQuyLNbXchA2xrjv2iG5a18KqQtQqLAEiTqd2pcwr0M0J7vIS8x_BOs5RzMrzMfwBycbB0ecQ5KB_e; l7_az=dcg02.phx; x-pp-s=eyJ0IjoiMTczMzQyMTkyNTI5NCIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1764957925%26vteXpYrS%3D1733423725%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew
Source: global traffic	HTTP traffic detected: GET /js/bg/_g7F8zg2GdO3pOHRmF2TkLpGsVwPqyf6mfC5A8V3XdU.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.recaptcha.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/enterprise/webworker.js?hl=en&v=MskOi9BoTT5Vt82JMh92Dvhu HTTP/1.1Host: www.recaptcha.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.recaptcha.net/recaptcha/enterprise/anchor?ar=1&k=6LeZ6egUAAAAAGwL8CjkDE8dcSw2DtvuVpdwTkwG&co=aHR0cHM6Ly93d3cucGF5cGFsb2JqZWN0cy5jb206NDQz&hl=en&v=MskOi9BoTT5Vt82JMh92Dvhu&theme=light&size=normal&cb=w07wzl5n9z7lAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ts?v=1.9.5&t=1733421930171&g=300&page=main%3Aauthchallenge%3A%3Aauth%3Avalidatecaptcha&pgst=1733421912512&calc=f50491546f905&nsid=RLPSU2OHYvlTZtXh_VMfzo7ctuMnbu-c&rsta=en_US&pgtf=Nodejs&env=live&s=ci&ccpg=US&csci=a2cfc41caf2f4e9e93be07c354b04372&comp=authchallengenodeweb&tsrce=authchallengenodeweb&cu=0&ef_policy=ccpa&xe=109541&xt=145835&view=%7B%22t10%22%3A0%2C%22t11%22%3A18242%2C%22nt%22%3A%22manual%22%7D&ads_client_data=Navigator(appCodeName%3DMozilla%7CappName%3DNetscape%7CappVersion%3D5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%7CuserAgent%3DMozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%7Cwebdriverfalse%7CdeviceMemory8%7Cgeolocation(Available)%7Clanguage%3Den-US%7ConLine%3Dtrue%7Cplatform%3DWin32%7Cproduct%3DGecko)%7CHistory(2)%7Cscreen(1280%2C1024%2C1280%2C984%2C24%2C24)%7Cwindow(Width%3D1280%7Cheight%3D907%7CmozRTCPeerConnection%3Dundefined%7CChrome%3D%5Bobject%20Object%5D%7CcallPhantom%3Dundefined%7C_phantom%3Dundefined%7Cstr%3Dundefined%7Clength%3D1%7CdevicePixelRatio%3D1)%7CloginPresent(false)%7CloginTitle()%7Creferrer(https%3A%2F%2Fwww.paypal.com%2Fsignin)%7Cplugins%3A(PDF%20Viewer%20%7C%20internal-pdf-viewer%20%7C%20Portable%20Document%20Format%20%7C%20)(Chrome%20PDF%20Viewer%20%7C%20internal-pdf-viewer%20%7C%20Portable%20Document%20Format%20%7C%20)(Chromium%20PDF%20Viewer%20%7C%20internal-pdf-viewer%20%7C%20Portable%20Document%20Format%20%7C%20)(Microsoft%20Edge%20PDF%20Viewer%20%7C%20internal-pdf-viewer%20%7C%20Portable%20Document%20Format%20%7C%20)(WebKit%20built-in%20PDF%20%7C%20internal-pdf-viewer%20%7C%20Portable%20Document%20Format%20%7C%20)%7ChardwareConcurrency(4)%7CmozLockOrientation(undefined)%7CmozUnlockOrientation(undefined)%7CmozOrientation(undefined)%7CError(TypeError%3A%20Cannot%20read%20properties%20of%20null%20(reading%20%270%27))&res=%7B%7D&rtt=1741&e=pf HTTP/1.1Host: t.paypal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.paypal.com/auth/validatecaptchaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352; tsrce=authchallengenodeweb; TLTDID=93723043988386874756787593010559; navcmd=_home; consumer_display=USER_HOMEPAGE%3d0%26USER_TARGETPAGE%3d0%26USER_FILTER_CHOICE%3d0%26BALANCE_MODULE_STATE%3d1%26GIFT_BALANCE_MODULE_STATE%3d1%
Source: global traffic	HTTP traffic detected: GET /en_US/i/icon/pp_favicon_x.ico HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/enterprise/webworker.js?hl=en&v=MskOi9BoTT5Vt82JMh92Dvhu HTTP/1.1Host: www.recaptcha.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/enterprise/bframe?hl=en&v=MskOi9BoTT5Vt82JMh92Dvhu&k=6LeZ6egUAAAAAGwL8CjkDE8dcSw2DtvuVpdwTkwG HTTP/1.1Host: www.recaptcha.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.paypalobjects.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/bg/_g7F8zg2GdO3pOHRmF2TkLpGsVwPqyf6mfC5A8V3XdU.js HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ts?v=1.9.5&t=1733421930171&g=300&page=main%3Aauthchallenge%3A%3Aauth%3Avalidatecaptcha&pgst=1733421912512&calc=f50491546f905&nsid=RLPSU2OHYvlTZtXh_VMfzo7ctuMnbu-c&rsta=en_US&pgtf=Nodejs&env=live&s=ci&ccpg=US&csci=a2cfc41caf2f4e9e93be07c354b04372&comp=authchallengenodeweb&tsrce=authchallengenodeweb&cu=0&ef_policy=ccpa&xe=109541&xt=145835&view=%7B%22t10%22%3A0%2C%22t11%22%3A18242%2C%22nt%22%3A%22manual%22%7D&ads_client_data=Navigator(appCodeName%3DMozilla%7CappName%3DNetscape%7CappVersion%3D5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%7CuserAgent%3DMozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%7Cwebdriverfalse%7CdeviceMemory8%7Cgeolocation(Available)%7Clanguage%3Den-US%7ConLine%3Dtrue%7Cplatform%3DWin32%7Cproduct%3DGecko)%7CHistory(2)%7Cscreen(1280%2C1024%2C1280%2C984%2C24%2C24)%7Cwindow(Width%3D1280%7Cheight%3D907%7CmozRTCPeerConnection%3Dundefined%7CChrome%3D%5Bobject%20Object%5D%7CcallPhantom%3Dundefined%7C_phantom%3Dundefined%7Cstr%3Dundefined%7Clength%3D1%7CdevicePixelRatio%3D1)%7CloginPresent(false)%7CloginTitle()%7Creferrer(https%3A%2F%2Fwww.paypal.com%2Fsignin)%7Cplugins%3A(PDF%20Viewer%20%7C%20internal-pdf-viewer%20%7C%20Portable%20Document%20Format%20%7C%20)(Chrome%20PDF%20Viewer%20%7C%20internal-pdf-viewer%20%7C%20Portable%20Document%20Format%20%7C%20)(Chromium%20PDF%20Viewer%20%7C%20internal-pdf-viewer%20%7C%20Portable%20Document%20Format%20%7C%20)(Microsoft%20Edge%20PDF%20Viewer%20%7C%20internal-pdf-viewer%20%7C%20Portable%20Document%20Format%20%7C%20)(WebKit%20built-in%20PDF%20%7C%20internal-pdf-viewer%20%7C%20Portable%20Document%20Format%20%7C%20)%7ChardwareConcurrency(4)%7CmozLockOrientation(undefined)%7CmozUnlockOrientation(undefined)%7CmozOrientation(undefined)%7CError(TypeError%3A%20Cannot%20read%20properties%20of%20null%20(reading%20%270%27))&res=%7B%7D&rtt=1741&e=pf HTTP/1.1Host: t.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352; tsrce=authchallengenodeweb; TLTDID=93723043988386874756787593010559; navcmd=_home; consumer_display=USER_HOMEPAGE%3d0%26USER_TARGETPAGE%3d0%26USER_FILTER_CHOICE%3d0%26BALANCE_MODULE_STATE%3d1%26GIFT_BALANCE_MODULE_STATE%3d1%26LAST_SELECTED_ALIAS_ID%3d0%26SELLING_GROUP%3d1%26PAYMENT_AND_RISK_GROUP%3d1%26SHIPPING_GROUP%3d1%26HOME_VERSION%3d1733508311%26MCE2_ELIGIBILITY%3d4294967295; KHcl0EuY7AKSMgfvHl7J5E7hPtK=rdtTJETBNM7DwCh4qNpvdRxJdMSDzzFYo6In7MygF_6Md8QPhzwP-F4gHD7NOMP7z
Source: global traffic	HTTP traffic detected: GET /en_US/i/icon/pp_favicon_x.ico HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /platform/tealeaftarget HTTP/1.1Host: www.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; nsid=s%3ARLPSU2OHYvlTZtXh_VMfzo7ctuMnbu-c.%2F5h%2FpbgyA12uYrTjTUlTTIQJX8aBsaqWc%2FutzlCO8XQ; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352; tsrce=authchallengenodeweb; ddbc=1; TLTDID=93723043988386874756787593010559; navcmd=_home; consumer_display=USER_HOMEPAGE%3d0%26USER_TARGETPAGE%3d0%26USER_FILTER_CHOICE%3d0%26BALANCE_MODULE_STATE%3d1%26GIFT_BALANCE_MODULE_STATE%3d1%26LAST_SELECTED_ALIAS_ID%3d0%26SELLING_GROUP%3d1%26PAYMENT_AND_RISK_GROUP%3d1%26SHIPPING_GROUP%3d1%26HOME_VERSION%3d1733508311%26MCE2_ELIGIBILITY%3d4294967295; KHcl0EuY7AKSMgfvHl7J5E7hPtK=rdtTJETBNM7DwCh4qNpvdRxJdMSDzzFYo6In7MygF_6Md8QPhzwP-F4gHD7NOMP7zUuOBvACUHj0UJnL; navlns=0.0; cwrClyrK4LoCV1fydGbAxiNL6iG=3Ng6NGvsdTy3LmJYbfY1MmzXBIEVgHRclejTzBmAyTYWxq4Z-8IhvW39PAtMToI3jGQd7xAgIbQXgZmEW3Nq8ux8m8-zP_ab2u2ApnWN1rsHTjwxMvLkIa3Ou6P-opp8l65vJoiQDKWYCelscaLvzmOKwjPGaH8HFvG-3WDcvyZQyhylxqaY88qWBHDz4m0rfLaEhhk9hs01iziQYDqWrhtOyeu_fKCFI6iLkdE3BeQOhWxbd86OA1v86PvwekblqTgUkGC2tQLFg6lJltkH7IM3xcvZAf3Z1LAoHA49CxmgYkQ03fVNxnYwbNrmqkozsWLXEY-n_9aELBv28VjOVNkZqhwyDMEA5_AdgNp6b7q11oiBTVTzWq8h83fCKgBtaqow9WB29areckcfti7PEziSQpoVEb9hWFOT7QaDyGGmd-4UMXAvMJFJf_C; enforce_policy=ccpa; TLTSID=27694270399228667603056339019786; l7_az=dcg02.phx; x-pp-s=eyJ0IjoiMTczMzQyMTkyNTI5NCIsImwiOiIwIiwibSI6IjAifQ; datadome=~lCBjUdwNQ9KlUwKGcDdOMvo4rJxCFpsKb_8lsyT_NhI8n7MEuq3ZWKSsprd78~aoGmFGFKdteEx7RUcv3ZpPrC1tH5wMPEUpqdtsfdaQkV7a4i~RUNmfWCQSEsJA10w; ts=vreXpYrS%3D1764957938%26vteXpYrS%3D1733423738%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew
Source: global traffic	HTTP traffic detected: GET /error?code=404&ref=tealeaf HTTP/1.1Host: www.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; nsid=s%3ARLPSU2OHYvlTZtXh_VMfzo7ctuMnbu-c.%2F5h%2FpbgyA12uYrTjTUlTTIQJX8aBsaqWc%2FutzlCO8XQ; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352; tsrce=authchallengenodeweb; ddbc=1; TLTDID=93723043988386874756787593010559; navcmd=_home; consumer_display=USER_HOMEPAGE%3d0%26USER_TARGETPAGE%3d0%26USER_FILTER_CHOICE%3d0%26BALANCE_MODULE_STATE%3d1%26GIFT_BALANCE_MODULE_STATE%3d1%26LAST_SELECTED_ALIAS_ID%3d0%26SELLING_GROUP%3d1%26PAYMENT_AND_RISK_GROUP%3d1%26SHIPPING_GROUP%3d1%26HOME_VERSION%3d1733508311%26MCE2_ELIGIBILITY%3d4294967295; KHcl0EuY7AKSMgfvHl7J5E7hPtK=rdtTJETBNM7DwCh4qNpvdRxJdMSDzzFYo6In7MygF_6Md8QPhzwP-F4gHD7NOMP7zUuOBvACUHj0UJnL; navlns=0.0; cwrClyrK4LoCV1fydGbAxiNL6iG=3Ng6NGvsdTy3LmJYbfY1MmzXBIEVgHRclejTzBmAyTYWxq4Z-8IhvW39PAtMToI3jGQd7xAgIbQXgZmEW3Nq8ux8m8-zP_ab2u2ApnWN1rsHTjwxMvLkIa3Ou6P-opp8l65vJoiQDKWYCelscaLvzmOKwjPGaH8HFvG-3WDcvyZQyhylxqaY88qWBHDz4m0rfLaEhhk9hs01iziQYDqWrhtOyeu_fKCFI6iLkdE3BeQOhWxbd86OA1v86PvwekblqTgUkGC2tQLFg6lJltkH7IM3xcvZAf3Z1LAoHA49CxmgYkQ03fVNxnYwbNrmqkozsWLXEY-n_9aELBv28VjOVNkZqhwyDMEA5_AdgNp6b7q11oiBTVTzWq8h83fCKgBtaqow9WB29areckcfti7PEziSQpoVEb9hWFOT7QaDyGGmd-4UMXAvMJFJf_C; enforce_policy=ccpa; TLTSID=27694270399228667603056339019786; l7_az=dcg02.phx; x-pp-s=eyJ0IjoiMTczMzQyMTkyNTI5NCIsImwiOiIwIiwibSI6IjAifQ; datadome=~lCBjUdwNQ9KlUwKGcDdOMvo4rJxCFpsKb_8lsyT_NhI8n7MEuq3ZWKSsprd78~aoGmFGFKdteEx7RUcv3ZpPrC1tH5wMPEUpqdtsfdaQkV7a4i~RUNmfWCQSEsJA10w; ts=vreXpYrS%3D1764957939%26vteXpYrS%3D1733423739%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew

Source: chromecache_184.3.dr, chromecache_232.3.dr

String found in binary or memory: 'host': 'www.facebook.com', equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.paypal.com
Source: global traffic	DNS traffic detected: DNS query: ddbm2.paypal.com
Source: global traffic	DNS traffic detected: DNS query: www.paypalobjects.com
Source: global traffic	DNS traffic detected: DNS query: t.paypal.com
Source: global traffic	DNS traffic detected: DNS query: www.recaptcha.net
Source: global traffic	DNS traffic detected: DNS query: hcaptcha.paypal.com

Source: unknown

HTTP traffic detected: POST /js/ HTTP/1.1Host: ddbm2.paypal.comConnection: keep-aliveContent-Length: 5992sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: application/x-www-form-urlencodedAccept: */*Origin: https://www.paypal.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenConnection: closeContent-Length: 708Content-Type: text/html;charset=utf-8Server: DataDomeX-DataDome: protectedAccept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-MemoryCharset: utf-8Cache-Control: max-age=0, private, no-cache, no-store, must-revalidatePragma: no-cacheAccess-Control-Allow-Credentials: trueAccess-Control-Expose-Headers: x-dd-b, x-set-cookieAccess-Control-Allow-Origin: *X-DataDome-CID: AHrlqAAAAAMAaG7zfMJsD4kACC575A==X-DD-B: 1Set-Cookie: datadome=8RSW3uzD4SbWvM9gFw9q0gQKTqu4dzosgEwjlVWJYqLsPPLmcSW45AaqUPwIez9Nxb_Xi8Zv7_oaSV_rYgieEwGmR_dsy5tyvCD7Ggqcjb1qKko3mAHLgzTBEcl7OT_L; Max-Age=2592000; Domain=.paypal.com; Path=/; Secure; SameSite=LaxAccept-Ranges: bytesDate: Thu, 05 Dec 2024 18:04:58 GMTVia: 1.1 varnishPaypal-Debug-Id: f6772686d2e33Strict-Transport-Security: max-age=63072000; includeSubDomains; preloadX-Served-By: cache-ewr-kewr1740047-EWRX-Cache: MISSX-Cache-Hits: 0X-Timer: S1733421898.476431,VS0,VE18set-cookie: ddbc=1; secure; httponlyServer-Timing: content-encoding;desc="",x-cdn;desc="fastly"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenConnection: closeContent-Length: 708Content-Type: text/html;charset=utf-8Server: DataDomeX-DataDome: protectedAccept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-MemoryCharset: utf-8Cache-Control: max-age=0, private, no-cache, no-store, must-revalidatePragma: no-cacheAccess-Control-Allow-Credentials: trueAccess-Control-Expose-Headers: x-dd-b, x-set-cookieAccess-Control-Allow-Origin: *X-DataDome-CID: AHrlqAAAAAMAaG7zfMJsD4kACC575A==X-DD-B: 1Set-Cookie: datadome=D8fSIT~dxz~mHSNyYTBDSRhEt2IYFFTDBQ1qJ3hUcAY7ERsrDodz5ZVyluuAb5NRxqCoUSBCopBgBow4dMKBuJ7R6REwjzuo9OrQ3WnpLQaztNcGpbdOTxLyK68vGUkJ; Max-Age=2592000; Domain=.paypal.com; Path=/; Secure; SameSite=LaxAccept-Ranges: bytesDate: Thu, 05 Dec 2024 18:05:04 GMTVia: 1.1 varnishPaypal-Debug-Id: f598149fb6778Strict-Transport-Security: max-age=63072000; includeSubDomains; preloadX-Served-By: cache-ewr-kewr1740078-EWRX-Cache: MISSX-Cache-Hits: 0X-Timer: S1733421904.402634,VS0,VE16Server-Timing: content-encoding;desc="",x-cdn;desc="fastly"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenConnection: closeContent-Length: 708Content-Type: text/html;charset=utf-8Server: DataDomeX-DataDome: protectedAccept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-MemoryCharset: utf-8Cache-Control: max-age=0, private, no-cache, no-store, must-revalidatePragma: no-cacheAccess-Control-Allow-Credentials: trueAccess-Control-Expose-Headers: x-dd-b, x-set-cookieAccess-Control-Allow-Origin: *X-DataDome-CID: AHrlqAAAAAMAaG7zfMJsD4kACC575A==X-DD-B: 1Set-Cookie: datadome=vSuP3ka4mVy~QZulHp1~WqR~EWUrnn2L7R5plnP1_VPgHKKliwbvZSiC7swhbZQ3S1DRPKOdctSPoK3ZygF4ZFHSfmxV1SY~~jrswy9SQbU_INJM_UckirO2CfOz2hEQ; Max-Age=2592000; Domain=.paypal.com; Path=/; Secure; SameSite=LaxAccept-Ranges: bytesDate: Thu, 05 Dec 2024 18:05:08 GMTVia: 1.1 varnishPaypal-Debug-Id: f411665513e61Strict-Transport-Security: max-age=63072000; includeSubDomains; preloadX-Served-By: cache-ewr-kewr1740055-EWRX-Cache: MISSX-Cache-Hits: 0X-Timer: S1733421909.851158,VS0,VE20Server-Timing: content-encoding;desc="",x-cdn;desc="fastly"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closeAccept-Ch: Sec-CH-UA-FullCache-Control: max-age=0, no-cache, no-store, must-revalidateContent-Type: text/html; charset=UTF-8Origin-Trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==Paypal-Debug-Id: f653054c323b0Set-Cookie: enforce_policy=; expires=Thu, 01 Jan 1970 00:00:00 GMT GMT; domain=.paypal.com; path=/; Secure; SameSite=NoneSet-Cookie: navcmd=_home; domain=.paypal.com; path=/; Secure; HttpOnly; SameSite=NoneSet-Cookie: consumer_display=USER_HOMEPAGE%3d0%26USER_TARGETPAGE%3d0%26USER_FILTER_CHOICE%3d0%26BALANCE_MODULE_STATE%3d1%26GIFT_BALANCE_MODULE_STATE%3d1%26LAST_SELECTED_ALIAS_ID%3d0%26SELLING_GROUP%3d1%26PAYMENT_AND_RISK_GROUP%3d1%26SHIPPING_GROUP%3d1%26HOME_VERSION%3d1733508311%26MCE2_ELIGIBILITY%3d4294967295; expires=Sat, 05 Dec 2026 18:05:11 GMT GMT; domain=.paypal.com; path=/; Secure; HttpOnly; SameSite=NoneSet-Cookie: KHcl0EuY7AKSMgfvHl7J5E7hPtK=rdtTJETBNM7DwCh4qNpvdRxJdMSDzzFYo6In7MygF_6Md8QPhzwP-F4gHD7NOMP7zUuOBvACUHj0UJnL; expires=Sat, 05 Dec 2026 18:05:11 GMT GMT; domain=.paypal.com; path=/; Secure; HttpOnly; SameSite=None
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenConnection: closeContent-Length: 708Content-Type: text/html;charset=utf-8Server: DataDomeX-DataDome: protectedAccept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-MemoryCharset: utf-8Cache-Control: max-age=0, private, no-cache, no-store, must-revalidatePragma: no-cacheAccess-Control-Allow-Credentials: trueAccess-Control-Expose-Headers: x-dd-b, x-set-cookieAccess-Control-Allow-Origin: *X-DataDome-CID: AHrlqAAAAAMAaG7zfMJsD4kACC575A==X-DD-B: 1Set-Cookie: datadome=Z9w51G2l458BrZOpqb83JGqtDzp5ZzVeZzdH_DLusX5jgJYpDxL24E_eqUbfWqQNvcJC4O6KMo44cMvWn7PYQdCxi55p2tjkrP5hdB59z9VbFlca2CViIKgWHp8Uek0z; Max-Age=2592000; Domain=.paypal.com; Path=/; Secure; SameSite=LaxAccept-Ranges: bytesDate: Thu, 05 Dec 2024 18:05:16 GMTVia: 1.1 varnishPaypal-Debug-Id: f78453309813aStrict-Transport-Security: max-age=63072000; includeSubDomains; preloadX-Served-By: cache-ewr-kewr1740056-EWRX-Cache: MISSX-Cache-Hits: 0X-Timer: S1733421916.340478,VS0,VE20Server-Timing: content-encoding;desc="",x-cdn;desc="fastly"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenConnection: closeContent-Length: 708Content-Type: text/html;charset=utf-8Server: DataDomeX-DataDome: protectedAccept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-MemoryCharset: utf-8Cache-Control: max-age=0, private, no-cache, no-store, must-revalidatePragma: no-cacheAccess-Control-Allow-Credentials: trueAccess-Control-Expose-Headers: x-dd-b, x-set-cookieAccess-Control-Allow-Origin: *X-DataDome-CID: AHrlqAAAAAMAaG7zfMJsD4kACC575A==X-DD-B: 1Set-Cookie: datadome=~tlOVwgASsPb3jefL6eUe4yTmowUP20wLLRN1SWiJ6i8pEYCsLGQuyLNbXchA2xrjv2iG5a18KqQtQqLAEiTqd2pcwr0M0J7vIS8x_BOs5RzMrzMfwBycbB0ecQ5KB_e; Max-Age=2592000; Domain=.paypal.com; Path=/; Secure; SameSite=LaxAccept-Ranges: bytesDate: Thu, 05 Dec 2024 18:05:18 GMTVia: 1.1 varnishPaypal-Debug-Id: f7731169ced24Strict-Transport-Security: max-age=63072000; includeSubDomains; preloadX-Served-By: cache-ewr-kewr1740068-EWRX-Cache: MISSX-Cache-Hits: 0X-Timer: S1733421918.120244,VS0,VE22Server-Timing: content-encoding;desc="",x-cdn;desc="fastly"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenConnection: closeContent-Length: 708Content-Type: text/html;charset=utf-8Server: DataDomeX-DataDome: protectedAccept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-MemoryCharset: utf-8Cache-Control: max-age=0, private, no-cache, no-store, must-revalidatePragma: no-cacheAccess-Control-Allow-Credentials: trueAccess-Control-Expose-Headers: x-dd-b, x-set-cookieAccess-Control-Allow-Origin: *X-DataDome-CID: AHrlqAAAAAMAaG7zfMJsD4kACC575A==X-DD-B: 1Set-Cookie: datadome=~lCBjUdwNQ9KlUwKGcDdOMvo4rJxCFpsKb_8lsyT_NhI8n7MEuq3ZWKSsprd78~aoGmFGFKdteEx7RUcv3ZpPrC1tH5wMPEUpqdtsfdaQkV7a4i~RUNmfWCQSEsJA10w; Max-Age=2592000; Domain=.paypal.com; Path=/; Secure; SameSite=LaxAccept-Ranges: bytesDate: Thu, 05 Dec 2024 18:05:27 GMTVia: 1.1 varnishPaypal-Debug-Id: f7861615d84fcStrict-Transport-Security: max-age=63072000; includeSubDomains; preloadX-Served-By: cache-ewr-kewr1740056-EWRX-Cache: MISSX-Cache-Hits: 0X-Timer: S1733421927.032971,VS0,VE21Server-Timing: content-encoding;desc="",x-cdn;desc="fastly"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closeAccept-Ch: Sec-CH-UA-FullCache-Control: max-age=0, no-cache, no-store, must-revalidateContent-Type: text/html; charset=UTF-8Origin-Trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==Paypal-Debug-Id: f110435cb7563Set-Cookie: enforce_policy=; expires=Thu, 01 Jan 1970 00:00:00 GMT GMT; domain=.paypal.com; path=/; Secure; SameSite=NoneSet-Cookie: navcmd=_home; domain=.paypal.com; path=/; Secure; HttpOnly; SameSite=NoneSet-Cookie: consumer_display=USER_HOMEPAGE%3d0%26USER_TARGETPAGE%3d0%26USER_FILTER_CHOICE%3d0%26BALANCE_MODULE_STATE%3d1%26GIFT_BALANCE_MODULE_STATE%3d1%26LAST_SELECTED_ALIAS_ID%3d0%26SELLING_GROUP%3d1%26PAYMENT_AND_RISK_GROUP%3d1%26SHIPPING_GROUP%3d1%26HOME_VERSION%3d1733508342%26MCE2_ELIGIBILITY%3d4294967295; expires=Sat, 05 Dec 2026 18:05:42 GMT GMT; domain=.paypal.com; path=/; Secure; HttpOnly; SameSite=NoneSet-Cookie: navlns=0.0; expires=Sat, 05 Dec 2026 18:05:42 GMT GMT; domain=.paypal.com; path=/; Secure; HttpOnly; SameSite=NoneSet-Cookie: TLTSID=; expires=Thu, 01 Jan 1970 00:00:00 GMT GMT; domain=.paypal.com; path=/; Secure; HttpOnly; SameSite=None

Source: chromecache_252.3.dr, chromecache_140.3.dr	String found in binary or memory: http://bugs.jquery.com/ticket/12359
Source: chromecache_252.3.dr, chromecache_140.3.dr	String found in binary or memory: http://bugs.jquery.com/ticket/13378
Source: chromecache_252.3.dr, chromecache_140.3.dr	String found in binary or memory: http://dev.w3.org/csswg/cssom/#resolved-values
Source: chromecache_247.3.dr, chromecache_213.3.dr	String found in binary or memory: http://dustjs.com/
Source: chromecache_252.3.dr, chromecache_140.3.dr	String found in binary or memory: http://erik.eae.net/archives/2007/07/27/18.54.15/#comment-102291
Source: chromecache_161.3.dr, chromecache_172.3.dr	String found in binary or memory: http://es5.github.com/#x15.4.4.18
Source: chromecache_252.3.dr, chromecache_140.3.dr	String found in binary or memory: http://fluidproject.org/blog/2008/01/09/getting-setting-and-removing-tabindex-values-with-javascript
Source: chromecache_192.3.dr, chromecache_207.3.dr, chromecache_143.3.dr, chromecache_208.3.dr	String found in binary or memory: http://github.com/jrburke/requirejs
Source: chromecache_183.3.dr	String found in binary or memory: http://icreatestuff.co.uk/blog/article/ie9-z-index-stacking-problem-or-something-stranger
Source: chromecache_252.3.dr, chromecache_140.3.dr	String found in binary or memory: http://javascript.nwbox.com/IEContentLoaded/
Source: chromecache_252.3.dr, chromecache_140.3.dr	String found in binary or memory: http://jquery.com/
Source: chromecache_252.3.dr, chromecache_140.3.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_252.3.dr, chromecache_140.3.dr	String found in binary or memory: http://jsperf.com/getall-vs-sizzle/2
Source: chromecache_221.3.dr, chromecache_162.3.dr	String found in binary or memory: http://jsperf.com/isobject-tests
Source: chromecache_252.3.dr, chromecache_140.3.dr	String found in binary or memory: http://jsperf.com/thor-indexof-vs-for/5
Source: chromecache_203.3.dr, chromecache_137.3.dr	String found in binary or memory: http://linkedin.github.io/dustjs/
Source: chromecache_214.3.dr, chromecache_227.3.dr	String found in binary or memory: http://modernizr.com/download/#-shiv-cssclasses
Source: chromecache_192.3.dr, chromecache_208.3.dr	String found in binary or memory: http://requirejs.org/docs/errors.html#
Source: chromecache_252.3.dr, chromecache_140.3.dr	String found in binary or memory: http://sizzlejs.com/
Source: chromecache_252.3.dr, chromecache_140.3.dr	String found in binary or memory: http://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/
Source: chromecache_252.3.dr, chromecache_140.3.dr	String found in binary or memory: http://weblogs.java.net/blog/driscoll/archive/2009/09/08/eval-javascript-global-context
Source: chromecache_252.3.dr, chromecache_140.3.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=136851
Source: chromecache_252.3.dr, chromecache_140.3.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=29084
Source: chromecache_252.3.dr, chromecache_140.3.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=491668
Source: chromecache_252.3.dr, chromecache_140.3.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=649285
Source: chromecache_252.3.dr, chromecache_140.3.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=687787
Source: chromecache_260.3.dr, chromecache_212.3.dr, chromecache_153.3.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_260.3.dr, chromecache_212.3.dr, chromecache_153.3.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_252.3.dr, chromecache_140.3.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=378607
Source: chromecache_252.3.dr, chromecache_140.3.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=449857
Source: chromecache_252.3.dr, chromecache_140.3.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=470258
Source: chromecache_176.3.dr, chromecache_199.3.dr	String found in binary or memory: https://datadome.co
Source: chromecache_177.3.dr, chromecache_138.3.dr	String found in binary or memory: https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Object/assign)
Source: chromecache_252.3.dr, chromecache_140.3.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/CSS/display
Source: chromecache_252.3.dr, chromecache_140.3.dr	String found in binary or memory: https://developer.mozilla.org/en/Security/CSP)
Source: chromecache_260.3.dr, chromecache_212.3.dr, chromecache_153.3.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_260.3.dr, chromecache_212.3.dr, chromecache_153.3.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_260.3.dr, chromecache_212.3.dr, chromecache_153.3.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_177.3.dr, chromecache_138.3.dr	String found in binary or memory: https://docs.python.org/library/functions.html#range).
Source: chromecache_252.3.dr, chromecache_140.3.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/557)
Source: chromecache_252.3.dr, chromecache_140.3.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/764
Source: chromecache_252.3.dr, chromecache_140.3.dr	String found in binary or memory: https://github.com/jquery/sizzle/pull/225
Source: chromecache_252.3.dr, chromecache_140.3.dr	String found in binary or memory: https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon
Source: chromecache_221.3.dr, chromecache_226.3.dr, chromecache_196.3.dr, chromecache_162.3.dr	String found in binary or memory: https://github.com/linkedin/dustjs-helpers
Source: chromecache_221.3.dr, chromecache_162.3.dr	String found in binary or memory: https://github.com/linkedin/dustjs-helpers/wiki/Deprecated-Features#
Source: chromecache_252.3.dr, chromecache_140.3.dr	String found in binary or memory: https://html.spec.whatwg.org/#strip-and-collapse-whitespace
Source: chromecache_135.3.dr, chromecache_217.3.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_135.3.dr, chromecache_217.3.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_147.3.dr	String found in binary or memory: https://js.hcaptcha.com/1/api.js?onload=hCaptchaCallback&render=explicit
Source: chromecache_183.3.dr	String found in binary or memory: https://mppnodeweb-staging-10.qa.paypal.com/us/webapps/mpp/fonts-setup#fonts-demo
Source: chromecache_177.3.dr, chromecache_138.3.dr	String found in binary or memory: https://people.mozilla.org/~jorendorff/es6-draft.html#sec-tolength
Source: chromecache_153.3.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_235.3.dr, chromecache_141.3.dr	String found in binary or memory: https://secure.opinionlab.com/ccc01/comment_card.asp?
Source: chromecache_153.3.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_260.3.dr, chromecache_212.3.dr, chromecache_153.3.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_260.3.dr, chromecache_212.3.dr, chromecache_153.3.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_260.3.dr, chromecache_212.3.dr, chromecache_153.3.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_177.3.dr, chromecache_138.3.dr	String found in binary or memory: https://underscorejs.org
Source: chromecache_177.3.dr, chromecache_138.3.dr	String found in binary or memory: https://wiki.ecmascript.org/doku.php?id=harmony:egal).
Source: chromecache_167.3.dr	String found in binary or memory: https://www.google.com
Source: chromecache_260.3.dr, chromecache_212.3.dr, chromecache_153.3.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_260.3.dr, chromecache_212.3.dr, chromecache_153.3.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/MskOi9BoTT5Vt82JMh92Dvhu/recaptcha__.
Source: chromecache_242.3.dr, chromecache_151.3.dr, chromecache_190.3.dr, chromecache_198.3.dr, chromecache_230.3.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/MskOi9BoTT5Vt82JMh92Dvhu/recaptcha__en.js
Source: chromecache_142.3.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/pPK749sccDmVW_9DSeTMVvh2/recaptcha__en.js
Source: chromecache_174.3.dr, chromecache_210.3.dr	String found in binary or memory: https://www.paypalobjects.com
Source: chromecache_183.3.dr	String found in binary or memory: https://www.paypalobjects.com/images/checkout/hermes/icon_ot_spin_lock_skinny.png)
Source: chromecache_183.3.dr	String found in binary or memory: https://www.paypalobjects.com/images/shared//sprite-browsers.png
Source: chromecache_183.3.dr	String found in binary or memory: https://www.paypalobjects.com/images/shared/icon-sprite2-1x.png
Source: chromecache_183.3.dr	String found in binary or memory: https://www.paypalobjects.com/images/shared/icon-sprite2-2x.png
Source: chromecache_183.3.dr	String found in binary or memory: https://www.paypalobjects.com/images/shared/icon-x.svg
Source: chromecache_206.3.dr, chromecache_183.3.dr	String found in binary or memory: https://www.paypalobjects.com/images/shared/icon_alert_sprite-2x.png
Source: chromecache_183.3.dr	String found in binary or memory: https://www.paypalobjects.com/images/shared/icon_profile_placeholder
Source: chromecache_183.3.dr	String found in binary or memory: https://www.paypalobjects.com/images/shared/lg-attention-warning.png
Source: chromecache_206.3.dr, chromecache_183.3.dr	String found in binary or memory: https://www.paypalobjects.com/images/shared/momgram
Source: chromecache_183.3.dr	String found in binary or memory: https://www.paypalobjects.com/images/shared/monogram-small
Source: chromecache_183.3.dr	String found in binary or memory: https://www.paypalobjects.com/images/shared/onetouch-desktop.png
Source: chromecache_183.3.dr	String found in binary or memory: https://www.paypalobjects.com/images/shared/onetouch-desktop_2x.png
Source: chromecache_183.3.dr	String found in binary or memory: https://www.paypalobjects.com/images/shared/onetouch-mobile.png
Source: chromecache_183.3.dr	String found in binary or memory: https://www.paypalobjects.com/images/shared/onetouch-mobile_2x.png
Source: chromecache_183.3.dr	String found in binary or memory: https://www.paypalobjects.com/images/shared/paypal-logo-129x32.png
Source: chromecache_183.3.dr	String found in binary or memory: https://www.paypalobjects.com/images/shared/paypal-logo-129x32.svg
Source: chromecache_183.3.dr	String found in binary or memory: https://www.paypalobjects.com/images/shared/remember-me-Interstitial-image.png
Source: chromecache_183.3.dr	String found in binary or memory: https://www.paypalobjects.com/images/shared/remember-me-Interstitial-image_2x.png
Source: chromecache_206.3.dr	String found in binary or memory: https://www.paypalobjects.com/images/shared/sprite_forms_1x.png
Source: chromecache_183.3.dr	String found in binary or memory: https://www.paypalobjects.com/images/shared/sprite_forms_2x.png
Source: chromecache_183.3.dr	String found in binary or memory: https://www.paypalobjects.com/images/shared/success-animation.gif
Source: chromecache_183.3.dr	String found in binary or memory: https://www.paypalobjects.com/images/shared/success-animation_2x.gif
Source: chromecache_183.3.dr	String found in binary or memory: https://www.paypalobjects.com/images/shared/successCheckmark.png
Source: chromecache_183.3.dr	String found in binary or memory: https://www.paypalobjects.com/images/shared/successCheckmark2x.png
Source: chromecache_184.3.dr, chromecache_232.3.dr	String found in binary or memory: https://www.paypalobjects.com/martech/tm/paypal/3pjs/adobe/alloy.min.js
Source: chromecache_184.3.dr, chromecache_232.3.dr	String found in binary or memory: https://www.paypalobjects.com/martech/tm/paypal/3pjs/gtag/ga4.js
Source: chromecache_184.3.dr, chromecache_232.3.dr	String found in binary or memory: https://www.paypalobjects.com/martech/tm/paypal/3pjs/gtag/gtag.js
Source: chromecache_184.3.dr, chromecache_232.3.dr	String found in binary or memory: https://www.paypalobjects.com/paypalmktg/pardot/pd.js
Source: chromecache_174.3.dr, chromecache_210.3.dr	String found in binary or memory: https://www.paypalobjects.com/webstatic
Source: chromecache_206.3.dr, chromecache_183.3.dr	String found in binary or memory: https://www.paypalobjects.com/webstatic/checkout/hermes/icon_loader_med.gif
Source: chromecache_183.3.dr	String found in binary or memory: https://www.paypalobjects.com/webstatic/fnt/cweb/paypal-icons_1-0-3/PayPalIcons-Regular.eot
Source: chromecache_183.3.dr	String found in binary or memory: https://www.paypalobjects.com/webstatic/fnt/cweb/paypal-icons_1-0-3/PayPalIcons-Regular.eot?#iefix
Source: chromecache_183.3.dr	String found in binary or memory: https://www.paypalobjects.com/webstatic/fnt/cweb/paypal-icons_1-0-3/PayPalIcons-Regular.svg#69ac2c9f
Source: chromecache_183.3.dr	String found in binary or memory: https://www.paypalobjects.com/webstatic/fnt/cweb/paypal-icons_1-0-3/PayPalIcons-Regular.ttf
Source: chromecache_183.3.dr	String found in binary or memory: https://www.paypalobjects.com/webstatic/fnt/cweb/paypal-icons_1-0-3/PayPalIcons-Regular.woff
Source: chromecache_206.3.dr, chromecache_183.3.dr	String found in binary or memory: https://www.paypalobjects.com/webstatic/i/consumer/onboarding/icon_PP_monogram_2x.png
Source: chromecache_206.3.dr, chromecache_183.3.dr	String found in binary or memory: https://www.paypalobjects.com/webstatic/i/consumer/onboarding/sprite_form_2x.png);
Source: chromecache_206.3.dr, chromecache_183.3.dr	String found in binary or memory: https://www.paypalobjects.com/webstatic/mktg/2014design/close_default.png
Source: chromecache_183.3.dr	String found in binary or memory: https://www.paypalobjects.com/webstatic/mktg/2014design/fonts/v1.1/PP-Utility-v1.1.eot?#iefix-acnm6v
Source: chromecache_183.3.dr	String found in binary or memory: https://www.paypalobjects.com/webstatic/mktg/2014design/fonts/v1.1/PP-Utility-v1.1.eot?-acnm6v&_=999
Source: chromecache_183.3.dr	String found in binary or memory: https://www.paypalobjects.com/webstatic/mktg/2014design/fonts/v1.1/PP-Utility-v1.1.svg?-acnm6v&_=999
Source: chromecache_183.3.dr	String found in binary or memory: https://www.paypalobjects.com/webstatic/mktg/2014design/fonts/v1.1/PP-Utility-v1.1.ttf?-acnm6v&_=999
Source: chromecache_183.3.dr	String found in binary or memory: https://www.paypalobjects.com/webstatic/mktg/2014design/fonts/v1.1/PP-Utility-v1.1.woff?-acnm6v&_=99
Source: chromecache_183.3.dr	String found in binary or memory: https://www.paypalobjects.com/webstatic/mktg/2014design/fonts/v1.1/PP-Web-v1.1.eot?#iefix-acnm6v
Source: chromecache_183.3.dr	String found in binary or memory: https://www.paypalobjects.com/webstatic/mktg/2014design/fonts/v1.1/PP-Web-v1.1.eot?-acnm6v&_=999999
Source: chromecache_183.3.dr	String found in binary or memory: https://www.paypalobjects.com/webstatic/mktg/2014design/fonts/v1.1/PP-Web-v1.1.svg?-acnm6v&_=999999#
Source: chromecache_183.3.dr	String found in binary or memory: https://www.paypalobjects.com/webstatic/mktg/2014design/fonts/v1.1/PP-Web-v1.1.ttf?-acnm6v&_=999999
Source: chromecache_183.3.dr	String found in binary or memory: https://www.paypalobjects.com/webstatic/mktg/2014design/fonts/v1.1/PP-Web-v1.1.woff?-acnm6v&_=999999
Source: chromecache_206.3.dr, chromecache_183.3.dr	String found in binary or memory: https://www.paypalobjects.com/webstatic/mktg/consumer/onboarding/ui-sprite.png
Source: chromecache_167.3.dr	String found in binary or memory: https://www.recaptcha.net
Source: chromecache_264.3.dr, chromecache_185.3.dr	String found in binary or memory: https://www.recaptcha.net/recaptcha/enterprise.js?onload=recaptchaEnterpriseCallback&render=explicit
Source: chromecache_186.3.dr	String found in binary or memory: https://www.recaptcha.net/recaptcha/enterprise.js?render=
Source: chromecache_151.3.dr, chromecache_190.3.dr, chromecache_142.3.dr, chromecache_230.3.dr	String found in binary or memory: https://www.recaptcha.net/recaptcha/enterprise/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49993 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901

Source: classification engine

Classification label: mal48.win@23/204@30/11

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2512 --field-trial-handle=2480,i,13953459428177512392,16051172419448561988,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.paypal.com/signin/?returnUri=%2Fmyaccount%2Ftransfer%2FpayRequest%2FU-09584045BD498740V%2FU-7AK40048SY131414Y%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq&id=UJ8cMtNtnR8osXBu987dZoV1KMO8Kn.CKcv6ZA&expId=p2p&onboardData=%7B%22signUpRequest%22%3A%7B%22method%22%3A%22get%22%2C%22url%22%3A%22https%3A%2F%2Fwww.paypal.com%2Fmyaccount%2Ftransfer%2FguestLogin%2FpayRequest%2FU-09584045BD498740V%2FU-7AK40048SY131414Y%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq%26id%3DUJ8cMtNtnR8osXBu987dZoV1KMO8Kn.CKcv6ZA%22%7D%7D&flowContextData=k3KkNbgd2F3whUTyipi2CMJLh_A_-ZYRjnLUkRjoT_j0HNsy89M3Jq9pftpBPMtxKyazfBl41ygLF6L-3nSQM3yKD_1JSLMZUnm3gJtmC_GW6MtRMZgxxLdzhM2UidzudErvOhqzUKOKhl1Uolhas5WHE4v4p4McejHNxcZVkLh-Y4orpy9guCt5hhIB4GnzEz4SubWTdzvc3cAY2OwiaKLLHK8NR5mzXmQp5fVf3iIsNKSvq_9V0izgPURkU3T8RWrY5gGBkFdWln_xY5pl8zRv8lmUI-keUYe0DqQBvKVK8GwV8qiU_5p8qjPHJVW9i-G3ZBZuZum2FKJqczC5erDfF4QBe8JLLYzKBGyYHnHI7fFyBoEDubHGzh8R01uh4xAe-iAkcUj76XG_hnIoA0TzvY15PrfT8E9VdnaJhGuNJ5c8GhmekMGGnVwrlvOcZBIva0&v=1&utm_source=unp&utm_medium=email&utm_campaign=RT000186&utm_unptid=3bf303f1-b31d-11ef-81c6-bffe125023d8&ppid=RT000186&cnac=US&rsta=en_US%28en-US%29&unptid=3bf303f1-b31d-11ef-81c6-bffe125023d8&calc=f7859995fbf4b&unp_tpcid=requestmoney-notifications-requestee&page=main%3Aemail%3ART000186&pgrp=main%3Aemail&e=cl&mchn=em&s=ci&mail=sys&appVersion=1.294.0&tenant_name=&xt=145585%2C150948%2C104038&link_ref=www.paypal.com_signin"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5484 --field-trial-handle=2480,i,13953459428177512392,16051172419448561988,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5500 --field-trial-handle=2480,i,13953459428177512392,16051172419448561988,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2512 --field-trial-handle=2480,i,13953459428177512392,16051172419448561988,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5484 --field-trial-handle=2480,i,13953459428177512392,16051172419448561988,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5500 --field-trial-handle=2480,i,13953459428177512392,16051172419448561988,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://www.paypal.com/signin/?returnUri=%2Fmyaccount%2Ftransfer%2FpayRequest%2FU-09584045BD498740V%2FU-7AK40048SY131414Y%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq&id=UJ8cMtNtnR8osXBu987dZoV1KMO8Kn.CKcv6ZA&expId=p2p&onboardData=%7B%22signUpRequest%22%3A%7B%22method%22%3A%22get%22%2C%22url%22%3A%22https%3A%2F%2Fwww.paypal.com%2Fmyaccount%2Ftransfer%2FguestLogin%2FpayRequest%2FU-09584045BD498740V%2FU-7AK40048SY131414Y%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq%26id%3DUJ8cMtNtnR8osXBu987dZoV1KMO8Kn.CKcv6ZA%22%7D%7D&flowContextData=k3KkNbgd2F3whUTyipi2CMJLh_A_-ZYRjnLUkRjoT_j0HNsy89M3Jq9pftpBPMtxKyazfBl41ygLF6L-3nSQM3yKD_1JSLMZUnm3gJtmC_GW6MtRMZgxxLdzhM2UidzudErvOhqzUKOKhl1Uolhas5WHE4v4p4McejHNxcZVkLh-Y4orpy9guCt5hhIB4GnzEz4SubWTdzvc3cAY2OwiaKLLHK8NR5mzXmQp5fVf3iIsNKSvq_9V0izgPURkU3T8RWrY5gGBkFdWln_xY5pl8zRv8lmUI-keUYe0DqQBvKVK8GwV8qiU_5p8qjPHJVW9i-G3ZBZuZum2FKJqczC5erDfF4QBe8JLLYzKBGyYHnHI7fFyBoEDubHGzh8R01uh4xAe-iAkcUj76XG_hnIoA0TzvY15PrfT8E9VdnaJhGuNJ5c8GhmekMGGnVwrlvOcZBIva0&v=1&utm_source=unp&utm_medium=email&utm_campaign=RT000186&utm_unptid=3bf303f1-b31d-11ef-81c6-bffe125023d8&ppid=RT000186&cnac=US&rsta=en_US%28en-US%29&unptid=3bf303f1-b31d-11ef-81c6-bffe125023d8&calc=f7859995fbf4b&unp_tpcid=requestmoney-notifications-requestee&page=main%3Aemail%3ART000186&pgrp=main%3Aemail&e=cl&mchn=em&s=ci&mail=sys&appVersion=1.294.0&tenant_name=&xt=145585%2C150948%2C104038&link_ref=www.paypal.com_signin	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://www.gstatic.c..?/recaptcha/releases/MskOi9BoTT5Vt82JMh92Dvhu/recaptcha__.	0%	Avira URL Cloud	safe
http://dev.w3.org/csswg/cssom/#resolved-values	0%	Avira URL Cloud	safe
http://bugs.jquery.com/ticket/12359	0%	Avira URL Cloud	safe
http://dustjs.com/	0%	Avira URL Cloud	safe
http://bugs.jquery.com/ticket/13378	0%	Avira URL Cloud	safe
http://jsperf.com/isobject-tests	0%	Avira URL Cloud	safe
http://jsperf.com/getall-vs-sizzle/2	0%	Avira URL Cloud	safe
http://jsperf.com/thor-indexof-vs-for/5	0%	Avira URL Cloud	safe
http://linkedin.github.io/dustjs/	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
paypal-dynamic-cdn.map.fastly.net	151.101.131.1	true	false	high
cs1150.wpc.betacdn.net	192.229.221.25	true	false	high
paypal-dynamic.map.fastly.net	151.101.193.21	true	false	high
www.recaptcha.net	172.217.19.227	true	false	high
www.google.com	142.250.181.68	true	false	high
ddbm2.paypal.com.first-party-js.datadome.co	18.66.161.70	true	false	high
hcaptcha.paypal.com	unknown	unknown	false	high
ddbm2.paypal.com	unknown	unknown	false	high
t.paypal.com	unknown	unknown	false	high
www.paypalobjects.com	unknown	unknown	false	high
www.paypal.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/hcaptcha/hcaptcha_fph.html?siteKey=bf07db68-5c2e-42e8-8779-ea8384890eea&locale.x=en_US&country.x=US&checkConnectionTimeout=10000&domain=hcaptcha.paypal.com&imgsDomain=imgs.hcaptcha.paypal.com&assetsDomain=newassets.hcaptcha.paypal.com&accountsDomain=accounts.hcaptcha.paypal.com&customDomains=	false	high
https://www.paypal.com/auth/validatecaptcha	false	high
https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/js/widgets/postMessage.js	false	high
https://t.paypal.com/ts?v=1.9.5&t=1733421930171&g=300&page=main%3Aauthchallenge%3A%3Aauth%3Avalidatecaptcha&pgst=1733421912512&calc=f50491546f905&nsid=RLPSU2OHYvlTZtXh_VMfzo7ctuMnbu-c&rsta=en_US&pgtf=Nodejs&env=live&s=ci&ccpg=US&csci=a2cfc41caf2f4e9e93be07c354b04372&comp=authchallengenodeweb&tsrce=authchallengenodeweb&cu=0&ef_policy=ccpa&xe=109541&xt=145835&view=%7B%22t10%22%3A0%2C%22t11%22%3A18242%2C%22nt%22%3A%22manual%22%7D&ads_client_data=Navigator(appCodeName%3DMozilla%7CappName%3DNetscape%7CappVersion%3D5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%7CuserAgent%3DMozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%7Cwebdriverfalse%7CdeviceMemory8%7Cgeolocation(Available)%7Clanguage%3Den-US%7ConLine%3Dtrue%7Cplatform%3DWin32%7Cproduct%3DGecko)%7CHistory(2)%7Cscreen(1280%2C1024%2C1280%2C984%2C24%2C24)%7Cwindow(Width%3D1280%7Cheight%3D907%7CmozRTCPeerConnection%3Dundefined%7CChrome%3D%5Bobject%20Object%5D%7CcallPhantom%3Dundefined%7C_phantom%3Dundefined%7Cstr%3Dundefined%7Clength%3D1%7CdevicePixelRatio%3D1)%7CloginPresent(false)%7CloginTitle()%7Creferrer(https%3A%2F%2Fwww.paypal.com%2Fsignin)%7Cplugins%3A(PDF%20Viewer%20%7C%20internal-pdf-viewer%20%7C%20Portable%20Document%20Format%20%7C%20)(Chrome%20PDF%20Viewer%20%7C%20internal-pdf-viewer%20%7C%20Portable%20Document%20Format%20%7C%20)(Chromium%20PDF%20Viewer%20%7C%20internal-pdf-viewer%20%7C%20Portable%20Document%20Format%20%7C%20)(Microsoft%20Edge%20PDF%20Viewer%20%7C%20internal-pdf-viewer%20%7C%20Portable%20Document%20Format%20%7C%20)(WebKit%20built-in%20PDF%20%7C%20internal-pdf-viewer%20%7C%20Portable%20Document%20Format%20%7C%20)%7ChardwareConcurrency(4)%7CmozLockOrientation(undefined)%7CmozUnlockOrientation(undefined)%7CmozOrientation(undefined)%7CError(TypeError%3A%20Cannot%20read%20properties%20of%20null%20(reading%20%270%27))&res=%7B%7D&rtt=1741&e=pf	false	high
https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/js/browser_modules/dust-makara-helpers/browser.amd.js	false	high
https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/opinionLab/opinionLab.js	false	high
https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/opinionLab/onlineOpinionPopup.js	false	high
https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/core/baseView.js	false	high
https://ddbm2.paypal.com/tags.js	false	high
https://www.paypal.com/signin	false	high
https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/js/widgets/clientCalLogger.js	false	high
https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/router.js	false	high
https://www.recaptcha.net/recaptcha/enterprise/anchor?ar=1&k=6LeZ6egUAAAAAGwL8CjkDE8dcSw2DtvuVpdwTkwG&co=aHR0cHM6Ly93d3cucGF5cGFsb2JqZWN0cy5jb206NDQz&hl=en&v=MskOi9BoTT5Vt82JMh92Dvhu&theme=light&size=normal&cb=w07wzl5n9z7l	false	high
https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/view/pageView.js	false	high
https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/backbone-1.5.0.min.js	false	high
https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/authchallenge.js	false	high
https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/widgets/errorDisplay.js	false	high
https://www.paypalobjects.com/images/shared/momgram@2x.png	false	high
https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/js/browser_modules/pulvus-provide/provide.js	false	high
https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/jquery-1.12.4.js	false	high
https://www.paypalobjects.com/rdaAssets/fraudnet/sync/fn-sync-telemetry-min.js	false	high
https://t.paypal.com/ts?v=1.9.5&t=1733421909680&g=300&e=err&page=main%3Aauthchallenge%3A%3Asignin&pgrp=main%3Aauthchallenge%3A%3Asignin&comp=authchallengenodeweb&erpg=Script%20error&error_type=WINDOW_ONERROR&error_source=-%200%3A0	false	high
https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/require.js	false	high
https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/js/lib/modernizr-2.6.1.js	false	high
https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/js/browser_modules/dustjs-helpers/dist/dust-helpers.js	false	high
https://t.paypal.com/ts?v=1.9.5&t=1733421893241&g=300&pgrp=main%3Aunifiedlogin%3A%3A%3Alogin&page=main%3Aunifiedlogin%3A%3A%3Alogin%3Alegacy-web-dyn&pgst=1733421881400&calc=f4539225a1122&nsid=RLPSU2OHYvlTZtXh_VMfzo7ctuMnbu-c&rsta=en_US&pgtf=Nodejs&env=live&s=ci&ccpg=US&csci=16bc73c3ccf44355b5392134ef0346f4&comp=unifiedloginnodeweb&tsrce=unifiedloginnodeweb&cu=0&ef_policy=ccpa&xe=100353%2C106885%2C105604%2C105604%2C105351%2C101126%2C100614%2C101257%2C102153%2C104200%2C104200%2C105352%2C109195%2C104458%2C104458%2C100364%2C105999%2C100885%2C109334%2C109334%2C101270%2C102557%2C102557%2C101408%2C101408%2C104227%2C104227%2C100644%2C105124%2C100391%2C102695%2C100263%2C101031%2C100267%2C108076%2C100527%2C106031%2C106031%2C107054%2C107054%2C106033%2C106033%2C106032%2C106032%2C105392%2C105392%2C106035%2C106035%2C106034%2C106034%2C106036%2C106036%2C105271%2C110648%2C101688%2C101821%2C101820%2C102208%2C105543%2C105544%2C105416%2C105416%2C101064%2C106058%2C104778%2C103119%2C100303%2C100942%2C105553%2C105553%2C105552%2C105552%2C100304%2C105554%2C105554%2C101334%2C100572%2C101215%2C101214%2C101470%2C101216%2C103648%2C101472%2C101090%2C105698%2C102629%2C101735%2C104039%2C104039%2C104038%2C104038%2C101736%2C109931%2C110442%2C108653%2C108652%2C100846%2C109040%2C105843%2C105843%2C101875%2C105845%2C105845%2C105844%2C105844%2C109047%2C102390%2C102390%2C104571%2C104571%2C105340%2C105340%2C107263%2C107263%2C109195%2C108076%2C109047&xt=100886%2C132008%2C124899%2C124899%2C123668%2C103409%2C101617%2C104043%2C107844%2C127485%2C127485%2C123683%2C144027%2C119355%2C119355%2C103733%2C127242%2C102543%2C144768%2C144768%2C106407%2C109630%2C109630%2C104576%2C104576%2C117999%2C117999%2C101702%2C122483%2C100984%2C110241%2C100632%2C102993%2C100641%2C138090%2C101405%2C127662%2C127662%2C132781%2C132781%2C127659%2C127659%2C127666%2C127666%2C123875%2C123875%2C127651%2C127651%2C127655%2C127655%2C127648%2C127648%2C123248%2C152289%2C105645%2C106327%2C106324%2C108106%2C124626%2C124629%2C123994%2C123994%2C103105%2C127563%2C121149%2C112308%2C100722%2C113529%2C124686%2C124686%2C124682%2C124682%2C100727%2C124696%2C124696%2C104357%2C101510%2C103848%2C103847%2C104754%2C103864%2C114559%2C104762%2C103240%2C125356%2C109962%2C105856%2C120731%2C120731%2C120736%2C120736%2C105858%2C147989%2C150774%2C141151%2C141149%2C102359%2C143321%2C126375%2C126375%2C106610%2C126401%2C126401%2C126385%2C126385%2C143343%2C108798%2C108798%2C119908%2C119908%2C123611%2C123611%2C133840%2C133840%2C144027%2C138090%2C143343&obex=p2p&userRedirected=true&post_login_redirect=returnUri&ret_url=%2Fmyaccount%2Ftransfer%2FpayRequest%2FU-09584045BD498740V%2FU-7AK40048SY131414Y&e=im&imsrc=setup&view=%7B%22t10%22%3A1430%2C%22t11%22%3A9961%2C%22tcp%22%3A5066%2C%22et%22%3A%223g%22%2C%22nt%22%3A%22navigate%22%2C%22bt%22%3A51%7D&cd=24&sw=1280&sh=1024&dw=1280&dh=1024&bw=1280&bh=907&ce=1&t1=1430&t1c=1430&t1d=0&t1s=1263&t2=710&t3=224&t4d=0&t4=0&t4e=6894&tt=0&rdc=0&protocol=http%2F1.1&cdn=fastly&res=%7B%7D&rtt=3736	false	high
https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/js/view/mainContentView.js	false	high
https://www.recaptcha.net/recaptcha/enterprise/webworker.js?hl=en&v=MskOi9BoTT5Vt82JMh92Dvhu	false	high
https://www.paypalobjects.com/pa/mi/paypal/latmconf.js	false	high
https://www.paypal.com/auth/logclientdata	false	high
https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/css/app.css	false	high
https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/dust-core.js	false	high
https://www.paypalobjects.com/webcaptcha/grcenterprise_v3_static.html	false	high
https://www.paypal.com/error?code=404&ref=tealeaf	false	high
https://www.recaptcha.net/recaptcha/enterprise.js?render=6LdCCOUUAAAAAHTE-Snr6hi4HJGtJk_d1_ce-gWB&hl=en	false	high
https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/modernizr-2.6.1.js	false	high
https://www.paypalobjects.com/pa/3pjs/tl/6.4.65/patlcfg.js	false	high
https://ddbm2.paypal.com/js/	false	high
https://www.paypalobjects.com/en_US/i/icon/pp_favicon_x.ico	false	high
https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/js/widgets/errorDetector.js	false	high
https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/css/app.css	false	high
https://www.paypalobjects.com/pa/js/min/pa.js	false	high
https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/js/lib/require.js	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.paypalobjects.com/webstatic/fnt/cweb/paypal-icons_1-0-3/PayPalIcons-Regular.eot?#iefix	chromecache_183.3.dr	false		high
http://requirejs.org/docs/errors.html#	chromecache_192.3.dr, chromecache_208.3.dr	false		high
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_260.3.dr, chromecache_212.3.dr, chromecache_153.3.dr	false		high
http://icreatestuff.co.uk/blog/article/ie9-z-index-stacking-problem-or-something-stranger	chromecache_183.3.dr	false		high
https://www.paypalobjects.com/images/shared/onetouch-mobile_2x.png	chromecache_183.3.dr	false		high
https://code.google.com/p/chromium/issues/detail?id=378607	chromecache_252.3.dr, chromecache_140.3.dr	false		high
http://dev.w3.org/csswg/cssom/#resolved-values	chromecache_252.3.dr, chromecache_140.3.dr	false	Avira URL Cloud: safe	unknown
http://github.com/jrburke/requirejs	chromecache_192.3.dr, chromecache_207.3.dr, chromecache_143.3.dr, chromecache_208.3.dr	false		high
https://datadome.co	chromecache_176.3.dr, chromecache_199.3.dr	false		high
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	chromecache_252.3.dr, chromecache_140.3.dr	false		high
https://support.google.com/recaptcha/#6175971	chromecache_260.3.dr, chromecache_212.3.dr, chromecache_153.3.dr	false		high
https://bugzilla.mozilla.org/show_bug.cgi?id=687787	chromecache_252.3.dr, chromecache_140.3.dr	false		high
https://www.paypalobjects.com/martech/tm/paypal/3pjs/gtag/gtag.js	chromecache_184.3.dr, chromecache_232.3.dr	false		high
https://wiki.ecmascript.org/doku.php?id=harmony:egal).	chromecache_177.3.dr, chromecache_138.3.dr	false		high
http://dustjs.com/	chromecache_247.3.dr, chromecache_213.3.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha	chromecache_153.3.dr	false		high
https://www.paypalobjects.com/webstatic	chromecache_174.3.dr, chromecache_210.3.dr	false		high
https://github.com/linkedin/dustjs-helpers	chromecache_221.3.dr, chromecache_226.3.dr, chromecache_196.3.dr, chromecache_162.3.dr	false		high
http://bugs.jquery.com/ticket/12359	chromecache_252.3.dr, chromecache_140.3.dr	false	Avira URL Cloud: safe	unknown
https://www.paypalobjects.com/webstatic/mktg/2014design/fonts/v1.1/PP-Web-v1.1.woff?-acnm6v&_=999999	chromecache_183.3.dr	false		high
https://bugzilla.mozilla.org/show_bug.cgi?id=649285	chromecache_252.3.dr, chromecache_140.3.dr	false		high
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_260.3.dr, chromecache_212.3.dr, chromecache_153.3.dr	false		high
https://www.gstatic.c..?/recaptcha/releases/MskOi9BoTT5Vt82JMh92Dvhu/recaptcha__.	chromecache_260.3.dr, chromecache_212.3.dr, chromecache_153.3.dr	false	Avira URL Cloud: safe	unknown
https://jquery.com/	chromecache_135.3.dr, chromecache_217.3.dr	false		high
https://www.paypalobjects.com/webstatic/mktg/2014design/fonts/v1.1/PP-Utility-v1.1.woff?-acnm6v&_=99	chromecache_183.3.dr	false		high
https://www.paypalobjects.com/images/shared/onetouch-desktop.png	chromecache_183.3.dr	false		high
https://www.paypalobjects.com/images/shared/remember-me-Interstitial-image.png	chromecache_183.3.dr	false		high
https://bugzilla.mozilla.org/show_bug.cgi?id=491668	chromecache_252.3.dr, chromecache_140.3.dr	false		high
https://code.google.com/p/chromium/issues/detail?id=470258	chromecache_252.3.dr, chromecache_140.3.dr	false		high
https://www.paypalobjects.com/images/shared/onetouch-desktop_2x.png	chromecache_183.3.dr	false		high
https://www.paypalobjects.com/images/shared/icon-sprite2-1x.png	chromecache_183.3.dr	false		high
https://www.paypalobjects.com/webstatic/fnt/cweb/paypal-icons_1-0-3/PayPalIcons-Regular.woff	chromecache_183.3.dr	false		high
http://jsperf.com/getall-vs-sizzle/2	chromecache_252.3.dr, chromecache_140.3.dr	false	Avira URL Cloud: safe	unknown
https://www.paypalobjects.com/images/shared/icon-sprite2-2x.png	chromecache_183.3.dr	false		high
https://cloud.google.com/contact	chromecache_260.3.dr, chromecache_212.3.dr, chromecache_153.3.dr	false		high
https://www.paypalobjects.com/images/shared/successCheckmark.png	chromecache_183.3.dr	false		high
https://github.com/jquery/jquery/pull/557)	chromecache_252.3.dr, chromecache_140.3.dr	false		high
http://jsperf.com/isobject-tests	chromecache_221.3.dr, chromecache_162.3.dr	false	Avira URL Cloud: safe	unknown
https://www.paypalobjects.com/webstatic/fnt/cweb/paypal-icons_1-0-3/PayPalIcons-Regular.svg#69ac2c9f	chromecache_183.3.dr	false		high
https://www.paypalobjects.com/webstatic/mktg/2014design/fonts/v1.1/PP-Utility-v1.1.eot?-acnm6v&_=999	chromecache_183.3.dr	false		high
https://www.paypalobjects.com/webstatic/mktg/2014design/fonts/v1.1/PP-Utility-v1.1.svg?-acnm6v&_=999	chromecache_183.3.dr	false		high
https://www.paypalobjects.com/images/shared/successCheckmark2x.png	chromecache_183.3.dr	false		high
http://linkedin.github.io/dustjs/	chromecache_203.3.dr, chromecache_137.3.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/recaptcha/api2/	chromecache_260.3.dr, chromecache_212.3.dr, chromecache_153.3.dr	false		high
https://www.paypalobjects.com/webstatic/fnt/cweb/paypal-icons_1-0-3/PayPalIcons-Regular.eot	chromecache_183.3.dr	false		high
https://www.paypalobjects.com/paypalmktg/pardot/pd.js	chromecache_184.3.dr, chromecache_232.3.dr	false		high
https://people.mozilla.org/~jorendorff/es6-draft.html#sec-tolength	chromecache_177.3.dr, chromecache_138.3.dr	false		high
https://secure.opinionlab.com/ccc01/comment_card.asp?	chromecache_235.3.dr, chromecache_141.3.dr	false		high
https://www.paypalobjects.com/images/shared/sprite_forms_1x.png	chromecache_206.3.dr	false		high
https://www.paypalobjects.com/images/shared/lg-attention-warning.png	chromecache_183.3.dr	false		high
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_260.3.dr, chromecache_212.3.dr, chromecache_153.3.dr	false		high
https://www.paypalobjects.com/images/shared/success-animation.gif	chromecache_183.3.dr	false		high
https://www.paypalobjects.com/webstatic/mktg/2014design/fonts/v1.1/PP-Utility-v1.1.ttf?-acnm6v&_=999	chromecache_183.3.dr	false		high
https://www.recaptcha.net/recaptcha/enterprise/	chromecache_151.3.dr, chromecache_190.3.dr, chromecache_142.3.dr, chromecache_230.3.dr	false		high
http://bugs.jquery.com/ticket/13378	chromecache_252.3.dr, chromecache_140.3.dr	false	Avira URL Cloud: safe	unknown
http://jsperf.com/thor-indexof-vs-for/5	chromecache_252.3.dr, chromecache_140.3.dr	false	Avira URL Cloud: safe	unknown
https://jquery.org/license	chromecache_135.3.dr, chromecache_217.3.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.217.19.227	www.recaptcha.net	United States	15169	GOOGLEUS	false
151.101.1.21	unknown	United States	54113	FASTLYUS	false
192.229.221.25	cs1150.wpc.betacdn.net	United States	15133	EDGECASTUS	false
18.66.161.97	unknown	United States	3	MIT-GATEWAYSUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
151.101.131.1	paypal-dynamic-cdn.map.fastly.net	United States	54113	FASTLYUS	false
151.101.3.1	unknown	United States	54113	FASTLYUS	false
18.66.161.70	ddbm2.paypal.com.first-party-js.datadome.co	United States	3	MIT-GATEWAYSUS	false
142.250.181.68	www.google.com	United States	15169	GOOGLEUS	false
151.101.67.1	unknown	United States	54113	FASTLYUS	false
151.101.193.21	paypal-dynamic.map.fastly.net	United States	54113	FASTLYUS	false

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1569479
Start date and time:	2024-12-05 19:03:40 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 36s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://www.paypal.com/signin/?returnUri=%2Fmyaccount%2Ftransfer%2FpayRequest%2FU-09584045BD498740V%2FU-7AK40048SY131414Y%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq&id=UJ8cMtNtnR8osXBu987dZoV1KMO8Kn.CKcv6ZA&expId=p2p&onboardData=%7B%22signUpRequest%22%3A%7B%22method%22%3A%22get%22%2C%22url%22%3A%22https%3A%2F%2Fwww.paypal.com%2Fmyaccount%2Ftransfer%2FguestLogin%2FpayRequest%2FU-09584045BD498740V%2FU-7AK40048SY131414Y%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq%26id%3DUJ8cMtNtnR8osXBu987dZoV1KMO8Kn.CKcv6ZA%22%7D%7D&flowContextData=k3KkNbgd2F3whUTyipi2CMJLh_A_-ZYRjnLUkRjoT_j0HNsy89M3Jq9pftpBPMtxKyazfBl41ygLF6L-3nSQM3yKD_1JSLMZUnm3gJtmC_GW6MtRMZgxxLdzhM2UidzudErvOhqzUKOKhl1Uolhas5WHE4v4p4McejHNxcZVkLh-Y4orpy9guCt5hhIB4GnzEz4SubWTdzvc3cAY2OwiaKLLHK8NR5mzXmQp5fVf3iIsNKSvq_9V0izgPURkU3T8RWrY5gGBkFdWln_xY5pl8zRv8lmUI-keUYe0DqQBvKVK8GwV8qiU_5p8qjPHJVW9i-G3ZBZuZum2FKJqczC5erDfF4QBe8JLLYzKBGyYHnHI7fFyBoEDubHGzh8R01uh4xAe-iAkcUj76XG_hnIoA0TzvY15PrfT8E9VdnaJhGuNJ5c8GhmekMGGnVwrlvOcZBIva0&v=1&utm_source=unp&utm_medium=email&utm_campaign=RT000186&utm_unptid=3bf303f1-b31d-11ef-81c6-bffe125023d8&ppid=RT000186&cnac=US&rsta=en_US%28en-US%29&unptid=3bf303f1-b31d-11ef-81c6-bffe125023d8&calc=f7859995fbf4b&unp_tpcid=requestmoney-notifications-requestee&page=main%3Aemail%3ART000186&pgrp=main%3Aemail&e=cl&mchn=em&s=ci&mail=sys&appVersion=1.294.0&tenant_name=&xt=145585%2C150948%2C104038&link_ref=www.paypal.com_signin
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	11
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.win@23/204@30/11
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.21.35, 172.217.17.46, 173.194.220.84, 172.217.17.78, 172.217.19.202, 172.217.19.170, 172.217.17.74, 142.250.181.138, 216.58.208.234, 142.250.181.106, 172.217.17.42, 142.250.181.74, 142.250.181.42, 172.217.19.234, 142.250.181.10, 172.217.19.10, 216.58.208.227, 172.217.17.35
Excluded domains from analysis (whitelisted): client.wns.windows.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, slscr.update.microsoft.com, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com, www.gstatic.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://www.paypal.com/signin/?returnUri=%2Fmyaccount%2Ftransfer%2FpayRequest%2FU-09584045BD498740V%2FU-7AK40048SY131414Y%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq&id=UJ8cMtNtnR8osXBu987dZoV1KMO8Kn.CKcv6ZA&expId=p2p&onboardData=%7B%22signUpRequest%22%3A%7B%22method%22%3A%22get%22%2C%22url%22%3A%22https%3A%2F%2Fwww.paypal.com%2Fmyaccount%2Ftransfer%2FguestLogin%2FpayRequest%2FU-09584045BD498740V%2FU-7AK40048SY131414Y%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq%26id%3DUJ8cMtNtnR8osXBu987dZoV1KMO8Kn.CKcv6ZA%22%7D%7D&flowContextData=k3KkNbgd2F3whUTyipi2CMJLh_A_-ZYRjnLUkRjoT_j0HNsy89M3Jq9pftpBPMtxKyazfBl41ygLF6L-3nSQM3yKD_1JSLMZUnm3gJtmC_GW6MtRMZgxxLdzhM2UidzudErvOhqzUKOKhl1Uolhas5WHE4v4p4McejHNxcZVkLh-Y4orpy9guCt5hhIB4GnzEz4SubWTdzvc3cAY2OwiaKLLHK8NR5mzXmQp5fVf3iIsNKSvq_9V0izgPURkU3T8RWrY5gGBkFdWln_xY5pl8zRv8lmUI-keUYe0DqQBvKVK8GwV8qiU_5p8qjPHJVW9i-G3ZBZuZum2FKJqczC5erDfF4QBe8JLLYzKBGyYHnHI7fFyBoEDubHGzh8R01uh4xAe-iAkcUj76XG_hnIoA0TzvY15PrfT8E9VdnaJhGuNJ5c8GhmekMGGnVwrlvOcZBIva0&v=

Input	Output
URL: https://www.paypal.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://www.paypal.com
URL: https://www.gstatic.com/recaptcha/releases/MskOi9B... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "This appears to be a legitimate Google Closure Library code snippet with proper copyright notices and standard JavaScript operations. It contains obfuscated code (minified/compiled) which is normal for production libraries, and performs standard operations like event handling and data manipulation. No high-risk behaviors like eval() or suspicious network calls are present." }
(function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 / / Copyright Google LLC SPDX-License-Identifier: Apache-2.0 / / Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 / / Copyright 2005, 2007 Bob Ippolito. All Rights Reserved. Copyright The Closure Library Authors. SPDX-License-Identifier: MIT */ var d=function(){return[function(N,a,U,y,A,l){return((N^20)&13)==(N-6<((N>>2&14)>=((N+4^20)>=((A=[0,"P","Tx"],(N&71)==N)&&(y=d[7](86,U[A[1]]),l=r[6](2," > ",a,y,U[A[1]])),N)&&(N+2^22)<N&&(U=[34,1023,"ubd"],AD.call(this,e[37](51,U[2]),m[49](73,rK),"POST"),m[49](25,14,e[28](73,1,r[29](7,U[A[0]],U[1],a))),this[A[1]]=a.U()),12)&&(N+1&10)<10&&J.call(this,a,A[0],"conf"),14)&&((N\|5)&15)>=1&&(this[A[1]]=new er,this.size=A[0]),1)&&(l=y&&U[A[2]]()>a?y():null),l},function(N,a,U,y,A,l,z,u,p,x){return(N+6&7)== (((N-1\|(x=((N>>2&10)==2&&(this.B=a,this.P=U),[20,13,36]),x[2]))<N&&(N+3&51)>=N&&(F[48](21,y,l.P),(u=l.P.G)?p=m[35](29,U,l,"return"in u?u[A]:function(S){return{value:S,done:!0}},z,l.P.return):(l.P.return(z),p=T[2](78,a,l))),(N<<2&x[1])>=6&&(N^5)<x[0])&&(this.B=this.P=this.Z=a),1)&&(this.message=a,this.messageType=U,this.P=y),p},function(N,a,U,y,A,l,z,u,p,x,S,Z,W){if(((((W=[45,"P",2],N>>1)&3)==1&&(Z=F[41](W[2],null,function(){return r[30](45).frames})),((N^19)&7)==W[2]&&(U.t1=!0,U.listener=a,U.proxy= a,U.src=a,U.aL=a),N)-6\|49)<N&&(N+7&61)>=N&&(z=[32,"number",4294967295],l!=null))switch(H[43](17,U,A,y),typeof l){case z[1]:(x=y[W[1]],me(l),T)[15](W[2],U,l),F[W[0]](19,JD,x,Fr);break;case a:u=new oI((S=BigInt.asUintN(64,l),Number(S&BigInt(z[W[2]]))),Number(S>>BigInt(z[0]))),F[W[0]](16,u.B,y[W[1]],u[W[1]]);break;default:p=H[17](W[2],16,null,l),F[W[0]](18,p.B,y[W[1]],p[W[1]])}return Z},function(N,a,U,y,A,l,z,u,p,x,S,Z,W){if((N>>1&((N&(((N^10)&(W=["test","patreq",null],15)\|\|(window.addEventListener? window.addEventListener(y,A,a):window.attachEvent&&window.attachEvent(U,A)),N)-3&15\|\|J.call(this,a,0,W[1]),56))==N&&(x=e[10](59,z).toString(),S=x.split(/[?#]/),p=/[?]/[W[0]](x)?U+S[y]:"",u=/[#]/[W[0]](x)?a+(p?S[2]:S[y]):"",Z=e[10](8,W[2],0,"&","=",l,S[A],u,p)),3))==3)if(y=a,LV!==""&&Xr){try{U=function(P){return P},y=Xr.createPolicy(LV,{createHTML:U,createScript:U,createScriptURL:U})}catch(P){}Z=y}else Z=y;return Z},function(N,a,U,y,A,l,z){return(((N\|(((z=["BV",0,1],N)-5\|58)>=N&&N-7<<z[2]<N&&(wK=U, tD=y,Vj=A=H[42].bind(null,2),ku=a),4))>>3\|\|(l=r[5](4,F[z[1]](4,O[12](21,8),U),[F[33](2,a)])),N-7)\|53)>=N&&(N-2^24)<N&&(U=e[25](49,this),a=F[32](32,this),this[z[0]][U]=!a),l},function(N,a,U,y,A,l,z){return(l=[8,"P","beforeaction"],N-l[0]>>4<2&&N-9>=6&&(CV.call(this,a.vV),this.type=l[2]),(N\|l[0])==N)&&(this.B=a,this.K=A,this[l[1]]=U,this.Z=y),z},function(N,a,U,y,A,l){if(!((N^(l=["P",1,72],l[2]))&11))switch(typeof y){case a:H[17](l[1],U,null,y)}return((((((N+4&15)==2&&(this.B=a,this[l[0]]=y,this.v7= U),N)\|6)&26)==2&&(Yu.call(this,a),this.A=!1,this.I=[],this.o=[]),(N^81)&7)\|\|(this.B=this[l[0]]=null),(N>>2&11)==l[1])&&J.call(this,a),A},function(N,a,U,y,A,l,z,u,p,x,S,Z){if(((N\|2)&15)==((N&83)==(((((Z=[70,"e",10],N^Z[0])&15\|\|(S=F[42](24,a)>>>0),(N\|1)>>4)\|\|(U=[],a.Z.Ge.Zq.X1.forEach(function(W,P){W.selected&&U.push(P)}),S=U),N)-8^Z[2])>=N&&(N+3^16)<N&&(y.qm(),l=y.response,p=F[45](68,y.ZF),A=T[26](85,"b",a,p,"enterDocument"),l[Z[1]]=A,u=y.response,r[20](38,!1,u)?z="":(x=JSON.stringify(u),z=r[36](35, x,U)),S=z),N)&&(l=["running","opacity","animation-play-state"],A.P(a),O[18](38,A.o,"display",y),O[18](Z[0],A.o,l[2],l[0]),O[18](6,A.o,l[1],U),O[18](54,A.K5,l[2],l[0])),2))if(u=y.get(l),u!=null)S=u;else{for(u=z=0;z<l.length;z++)p=l[z],Y[32](33,a,A,U,p)!=null&&(u!==0&&(A=Y[48](Z[2],U,void 0,u,A)),u=p);S=(y.set(l,u),u)}return S},function(N,a,U,y,A,l,z,u,p,x){if((((((p=[32,4,0],N^75)>>p[1]<2&&((N^5)&5)>=2&&(this.gs=T[40](12,15,"mid",y,U,a)),N+9^p[0])<N&&(N-p[1]^25)>=N&&(u=u===void 0?Ej:u,l=e[49](29,y, U),z=typeof l,A=l==null?l:z==="bigint"?e[16](18,BigInt.asIntN(a,l)):Y[24](1,l,!0)?z==="string"?O[17](6,a
URL: https://www.paypal.com/signin/?returnUri=%2Fmyaccount%2Ftransfer%2FpayRequest%2FU-09584045BD498740V%2FU-7AK40048SY131414Y%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq&id=UJ8cMtNtnR8osXBu987dZoV1KMO8Kn.CKcv6ZA&expId=p2p&onboardData=%7B%22signUpRequest%22 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Don't recognize the seller? Please contact Pay...", "prominent_button_name": "Log In to Pay", "text_input_field_labels": [ "Email", "Password" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://www.paypal.com/signin/?returnUri=%2Fmyaccount%2Ftransfer%2FpayRequest%2FU-09584045BD498740V%2FU-7AK40048SY131414Y%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq&id=UJ8cMtNtnR8osXBu987dZoV1KMO8Kn.CKcv6ZA&expId=p2p&onboardData=%7B%22signUpRequest%22 Model: Joe Sandbox AI	{ "brands": [ "PayPal" ] }
	{ "brands": [ "PayPal" ] }
URL: https://www.paypal.com/signin/?returnUri=%2Fmyaccount%2Ftransfer%2FpayRequest%2FU-09584045BD498740V%2FU-7AK40048SY131414Y%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq&id=UJ8cMtNtnR8osXBu987dZoV1KMO8Kn.CKcv6ZA&expId=p2p&onboardData=%7B%22signUpRequest%22 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Don't recognize the seller? Please contact Pay...", "prominent_button_name": "Log In to Pay", "text_input_field_labels": [ "m9xvt2@cur.org", "**********" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://www.paypal.com/signin/?returnUri=%2Fmyaccount%2Ftransfer%2FpayRequest%2FU-09584045BD498740V%2FU-7AK40048SY131414Y%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq&id=UJ8cMtNtnR8osXBu987dZoV1KMO8Kn.CKcv6ZA&expId=p2p&onboardData=%7B%22signUpRequest%22 Model: Joe Sandbox AI	{ "brands": [ "PayPal" ] }
	{ "brands": [ "PayPal" ] }
URL: https://www.paypal.com/auth/validatecaptcha Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Security Challenge", "prominent_button_name": "I'm not a robot", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://www.paypal.com/signin/?returnUri=%2Fmyaccount%2Ftransfer%2FpayRequest%2FU-09584045BD498740V%2FU-7AK40048SY131414Y%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq&id=UJ8cMtNtnR8osXBu987dZoV1KMO8Kn.CKcv6ZA&expId=p2p&onboardData=%7B%22signUpRequest%22 Model: Joe Sandbox AI	```json{ "legit_domain": "paypal.com", "classification": "wellknown", "reasons": [ "The URL 'www.paypal.com' matches the legitimate domain name for PayPal.", "PayPal is a well-known brand with a strong online presence.", "There are no suspicious elements in the URL such as misspellings or unusual domain extensions.", "The domain is fully matching with the brand name, indicating a legitimate webpage." ], "riskscore": 1}
URL: www.paypal.com Brands: PayPal Input Fields: m9xvt2@cur.org, **********
URL: https://www.paypal.com/auth/validatecaptcha Model: Joe Sandbox AI	{ "brands": [ "PayPal" ] }
	{ "brands": [ "PayPal" ] }
URL: https://www.paypal.com/auth/validatecaptcha Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Security Challenge", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://www.paypal.com/auth/validatecaptcha Model: Joe Sandbox AI	{ "brands": [ "PayPal" ] }
	{ "brands": [ "PayPal" ] }
URL: https://www.paypal.com/auth/validatecaptcha Model: Joe Sandbox AI	```json{ "legit_domain": "paypal.com", "classification": "wellknown", "reasons": [ "The URL 'www.paypal.com' matches the legitimate domain name for PayPal.", "PayPal is a well-known brand with a strong online presence.", "There are no suspicious elements in the URL such as misspellings, extra characters, or unusual domain extensions.", "The URL does not contain any additional words or hyphens that could indicate phishing." ], "riskscore": 1}
URL: www.paypal.com Brands: PayPal Input Fields: unknown
URL: https://www.paypal.com/auth/validatecaptcha Model: Joe Sandbox AI	```json{ "legit_domain": "paypal.com", "classification": "wellknown", "reasons": [ "The URL 'www.paypal.com' matches the legitimate domain name for PayPal.", "PayPal is a well-known brand with a strong online presence.", "There are no suspicious elements in the URL such as misspellings, extra characters, or unusual domain extensions.", "The URL does not contain any additional words or hyphens that could indicate phishing." ], "riskscore": 1}
URL: www.paypal.com Brands: PayPal Input Fields: unknown

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1305), with no line terminators
Category:	dropped
Size (bytes):	1305
Entropy (8bit):	5.114410235023359
Encrypted:	false
SSDEEP:	24:2Q5RCCLxZhLSEZsNA9DBHey1HgWRWUVIoLAGa9SRRqys3KJS7nvLQR/s8eFEmYzM:uIxZYEiNA9DJesHgWwUKLGyS+ysLAvep
MD5:	77318F6FDC00171A089C5A9554C5D77F
SHA1:	C875B8A24BE51AEA1F71C5AAE4F79B76018F1C86
SHA-256:	F92AC1FD655D048DD658EC255FF71A6D409F2DA598B58199EFA67B976BD61057
SHA-512:	CB9BDB5C36A1ED91CA3876A09DE1CB459D336CB08F9A501529DCFE4028BC2188DD6BF7D77C72B1C939353A5ADF37E7BEAED3078B32BCBF4786D9814524784D07
Malicious:	false
Reputation:	low
Preview:	(function(){function f(t){xhr=new XMLHttpRequest,xhr.open("POST","/signin/client-log",!0),xhr.setRequestHeader("Content-Type","application/json;charset=UTF-8");try{xhr.send(JSON.stringify(t)),e.ulData.logRecords=[]}catch(n){}}function l(){var e={ulCorrelationId:t.getAttribute("data-correlation-id")};return t.getAttribute("data-is-inline-ul")&&(e.flowId=t.getAttribute("data-flow-id"),e.clientCorrelationId=t.getAttribute("data-client-correlation-id")),e}var e=window.PAYPAL\|\|{},t=document.getElementsByTagName("body")[0],n=9e3,r=window.attachEvent\|\|window.addEventListener,i=window.attachEvent?"onbeforeunload":"beforeunload",s,o=t.getAttribute("data-enable-client-cal-logging"),u=document.getElementById("token"),a=u&&u.value;o&&(Date.now?s=Date.now():s=(new Date).getTime(),e.ulData=e.ulData\|\|{},e.ulData.logRecords=[{evt:"ul-rendered",ts:s}],e.ulData.saveClientSideLogs=function(){var n;if(!e.ulData.logRecords\|\|e.ulData.logRecords.length<1)return;e.ulData.logRecords.push({evt:"ul-context-name"

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4945
Entropy (8bit):	4.629506414198924
Encrypted:	false
SSDEEP:	96:CXQSfsjFfE77sDwFD3udPJwEym6BxGuJCg6vuIp6v8TqUUwvd:WQAsjFfGML6TGu0ScTN
MD5:	0D105318575EA6A4FC653AA8290A3410
SHA1:	B8EF6C644FFDB3983C518014BC4C0FF4317A011B
SHA-256:	B3CC50B9E94BBECAAEB1079B64B8CA50616D1732824964C1CC2C5422627A0EC5
SHA-512:	8797088012937108ACA1905E27DC49900CE00D5D51DEF982454A4C5389F4301A8857734C4178EF311DAE6AED47F033E1C9DF3D6F6B0B9BEF694D9CE278B3D193
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/images/shared/paypal-logo-129x32.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... width="127.769px" height="31.5px" viewBox="0 0 127.769 31.5" enable-background="new 0 0 127.769 31.5" xml:space="preserve">..<g>...<g>....<g>.....<path fill="#009CDE" d="M98.396,6.933H91.37c-0.479,0-0.89,0.35-0.964,0.824l-2.841,18.015c-0.056,0.355,0.219,0.676,0.579,0.676......h3.604c0.335,0,0.622-0.244,0.674-0.576l0.807-5.107c0.074-0.474,0.483-0.824,0.964-0.824h2.223c4.628,0,7.298-2.239,7.996-6.678......c0.314-1.941,0.014-3.467-0.896-4.535C102.518,7.553,100.746,6.933,98.396,6.933z M99.207,13.512......c-0.384,2.522-2.31,2.522-4.173,2.522h-1.061l0.744-4.708c0.045-0.285,0.29-0.495,0.578-0.495h0.485c1.269,0,2.467,0,3.084,0.723.....

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65508)
Category:	dropped
Size (bytes):	70162
Entropy (8bit):	5.332928547809831
Encrypted:	false
SSDEEP:	1536:ihUQ8vmwdyuwzSpmURvVCzBuOtmfmVaom+gGmtBmxsuRc:iugz7e+KkCr
MD5:	0AF4783054B8E925EC024DC00FCB4510
SHA1:	B43B595D6899229217DA7CA15E8D1A846E93A666
SHA-256:	C3F1981E14042012337C6493597CD362261453611B727E91847A118B2B4CFFB7
SHA-512:	874D73FF48E306FBAC1471DB4F925DF8348F5C3D322AC13D769AF91F6DC67F33F0886674686F8A9F5168910FD8AC160F007423508ED29665E8138EC411C5BE84
Malicious:	false
Reputation:	low
Preview:	/@ 2024 PayPal (v1.9.5) /.!function(){"use strict";function r(t,e,n){(e=function(t){t=function(t,e){if("object"!=typeof t\|\|!t)return t;var n=t[Symbol.toPrimitive];if(void 0===n)return("string"===e?String:Number)(t);t=n.call(t,e\|\|"default");if("object"!=typeof t)return t;throw new TypeError("@@toPrimitive must return a primitive value.")}(t,"string");return"symbol"==typeof t?t:t+""}(e))in t?Object.defineProperty(t,e,{value:n,enumerable:!0,configurable:!0,writable:!0}):t[e]=n}function i(e,t){var n,r=Object.keys(e);return Object.getOwnPropertySymbols&&(n=Object.getOwnPropertySymbols(e),t&&(n=n.filter(function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable})),r.push.apply(r,n)),r}function g(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?i(Object(n),!0).forEach(function(t){r(e,t,n[t])}):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):i(Object(n)).forEach(function(t){Object.defineProperty(e,t,Ob

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65315)
Category:	downloaded
Size (bytes):	88110
Entropy (8bit):	5.276848915126569
Encrypted:	false
SSDEEP:	1536:opEcTreA2vNaZIsKF+HQUXi7VKNVdEUqN992B7TETUu/FZh5C+r:Bcf8Uy7V8VWUqaTEbz5C+r
MD5:	5CB3D10BF1449FB78DADA696632213E8
SHA1:	95752CA4737115A2E82145DCCAF396624E71935E
SHA-256:	B677CDFB9629330AC25C0A07F251DCD072A52537E7C68051A576EE4B27D99AA6
SHA-512:	DAF893B6B84347C28D677F060DE2E9605A7248ED777CD93C3B0730440376B8F7F16FF5EF483D3A182BED2AFA7FCEE5C051359A3C19472DC3B89F79E3459076C7
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/js/lib/jquery-3.7.0.js
Preview:	/!. jQuery JavaScript Library v3.7.0. * https://jquery.com/. . Copyright OpenJS Foundation and other contributors. * Released under the MIT license. * https://jquery.org/license. . Date: 2023-05-11T18:29Z. */..(function(e,t){"use strict";typeof module=="object"&&typeof module.exports=="object"?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)})(typeof window!="undefined"?window:this,function(e,t){"use strict";function y(e,t,n){n=n\|\|m;var r,i,s=n.createElement("script");s.text=e;if(t)for(r in g)i=t[r]\|\|t.getAttribute&&t.getAttribute(r),i&&s.setAttribute(r,i);n.head.appendChild(s).parentNode.removeChild(s)}function b(e){return e==null?e+"":typeof e=="object"\|\|typeof e=="function"?a[f.call(e)]\|\|"object":typeof e}function x(e){var t=!!e&&"length"in e&&e.length,n=b(e);return d(e)\|\|v(e)?!1:n==="array"\|\|t===0\|\|typeof t=="number"&&t>0&&t-1 in e}function T(e,t){return e.nodeName&&e.nodeName.toLower

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3133
Entropy (8bit):	5.139941225383131
Encrypted:	false
SSDEEP:	96:6jdrlNAcMAxvrhq2Pi0Bi8TiGMR0beb8Zp0rrQhrU90LSKjEmOOT8jc1dTZrhq22:OdrlTMAxvrhq2PZB+0SwZp0rh6LMc1pw
MD5:	BE3248D30C62F281EB6885A57D98A526
SHA1:	9F45C328C50C26D68341D33B16C7FE7A04FA7F26
SHA-256:	EE8D7EA50B87CF8151107330FF3F0FC610B96A77E7A1A0ED8FCE87CF51610F54
SHA-512:	413022A49030FF1F6BDF673C3496EFBBEC41F7C7B8591E46B4D7F580378D073E6435227485EA833EF02CCDFCA301F40EBD05C60CFFE9FB61C020BFA352D30D1D
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/opinionLab/opinionLabComponent.js
Preview:	define(['opinionLab', 'onlineOpinionPopup'], function(opinionLab, popup) {...'use strict';..window.PAYPAL = window.PAYPAL ? window.PAYPAL : {};..var opVars = window.PAYPAL.opinionLabVars;.../* Defines the referral URL - Verify */..function paypalURL (pagename) {...var paypalURL = 'https://'.......+ opVars.countryCode.......+ '.paypal.com/'.......+ opVars.languageCode.......+ '/00/'.......+ escape(pagename.replace(/\s\|\//g, '_')).......+ '.page';...return paypalURL;..};...function assignSiteCatalystVars() {...if ( typeof opVars.isSiteRedirect !== 'undefined' && typeof opVars.isPaymentFlow !== 'undefined') {....if ( typeof s !== 'undefined') {.....if ( typeof s.pageName !== 'undefined') {......opVars.siteCatalystPageName = s.pageName;.....}.....if ( typeof s.prop7 !== 'undefined') {......opVars.siteCatalystC7 = s.prop7 == "none" ? "Unknown" : s.prop7;.....}.....if ( typeof s.prop5 !== 'undefined') {......opVars.siteCatalystAccountNumber = s.prop5;.....}....}....opinionLab.custom_var = up

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	25417
Entropy (8bit):	4.641664509877341
Encrypted:	false
SSDEEP:	384:fe93jGIJI2AN/yRikI+aDDe2MJS0KYqKDmBVogMorGNq49n7jneB54DpJqhhwAW4:Y4+/KBVC7xVs
MD5:	4FB1FFD27A73E1DBB4DD02355A950A0B
SHA1:	C1124B998C389FB9EE967DCCF276E7AF56F77769
SHA-256:	79C488E61278C71E41B75578042332FB3C44425E7DBB224109368F696C51E779
SHA-512:	77695F1A32BE64925B3564825B7CB69722A2C61B23665D5B80B62DEC5692579C12ACCABB970954F0BF73DFDBF861BF924F7CC1486E754E3A8F594B2969F853F2
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/dust-core.js
Preview:	/! Dust - Asynchronous Templating - v2.6.2. http://linkedin.github.io/dustjs/.* Copyright (c) 2015 Aleksander Williams; Released under the MIT License /.(function (root, factory) {. /global define*/. if (typeof define === 'function' && define.amd && define.amd.dust === true) {. define('dust.core', [], factory);. } else if (typeof exports === 'object') {. module.exports = factory();. } else {. root.dust = factory();. }.}(this, function() {. var dust = {. "version": "2.6.2". },. NONE = 'NONE', ERROR = 'ERROR', WARN = 'WARN', INFO = 'INFO', DEBUG = 'DEBUG',. EMPTY_FUNC = function() {};.. dust.config = {. whitespace: false,. amd: false. };.. // Directive aliases to minify code. dust._aliases = {. "write": "w",. "end": "e",. "map": "m",. "render": "r",. "reference": "f",. "section": "s",. "exists": "x",. "notexists": "nx",. "block": "b",. "partial": "p",. "helper": "h". };.. (function initLogging() {. /

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	dropped
Size (bytes):	65441
Entropy (8bit):	5.030761148036821
Encrypted:	false
SSDEEP:	1536:tIipojPGlIr8vKP0DPLX7uE+6ZrstVjIc1s73+lPBfTpErw9JuEHPVoglPdYK5aO:tIip4P8Ir8vKP0DPLX7uE+ustVj11s7S
MD5:	EB3B3278A5766D86F111818071F88058
SHA1:	333152C3D0F530EEE42092B5D0738E5CB1EEFD73
SHA-256:	1203F43C3293903ED6C84739A9AA291970692992E310AAB32520C5CA58001CEA
SHA-512:	DD9DDC1B6A52AD37C647562D42979A331BE6E6D20885B1A690C3AEEE2CFC6F46404B994225D87141CA47D5C9650CC66C72A118B2D269D2F3FDEA52624216E3BC
Malicious:	false
Reputation:	low
Preview:	(function (global, factory) {..typeof exports === 'object' && typeof module !== 'undefined' ? module.exports = factory() :..typeof define === 'function' && define.amd ? define('underscore', factory) :..(global = typeof globalThis !== 'undefined' ? globalThis : global \|\| self, (function () {.. var current = global._;.. var exports = global._ = factory();.. exports.noConflict = function () { global._ = current; return exports; };..}()));. }(this, (function () {..// Underscore.js 1.13.4..// https://underscorejs.org..// (c) 2009-2022 Jeremy Ashkenas, Julian Gonggrijp, and DocumentCloud and Investigative Reporters & Editors..// Underscore may be freely distributed under the MIT license.. ..// Current version...var VERSION = '1.13.4';. ..// Establish the root object, `window` (`self`) in the browser, `global`..// on the server, or `this` in some virtual machines. We use `self`..// instead of `window` for `WebWorker` support...var root = (typeof self == 'object' && self.

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1198
Entropy (8bit):	4.92536183669385
Encrypted:	false
SSDEEP:	24:PzRCvsqk/AMvGGP5Zb0sgK1Z/O7+KU43IYxxqh3snFEPmZwifnmTNK43GNUSoG91:P9wM/tGGBZYsgKPU+KU43s3d+ZwifmTs
MD5:	B625A3DC02E4E9CBCD21AE7E50F331A3
SHA1:	E8A50FA6A995A8BEBEDCD190972644809EE2D089
SHA-256:	4A178734B54E5D15A488E5360123579D7F32AFAE93C18E751790DA8C8B3F8FF1
SHA-512:	F83810E9A023DBDAE40109B349AA37523A8F6AC7CA68C331E5923A1DF88DCBF593A3607A1EC7D5A4F05F509F4EE4ADDC28D1A869AA27B008D9CDD2CCF7E54241
Malicious:	false
Reputation:	low
Preview:	require(['nougat', 'backbone', 'router', 'widgets/analytics', 'underscore', 'opinionLabComponent'],...function (nougat, Backbone, Router, Analytics, _) {....'use strict';...var context, viewName, router;....// Turning Backbone into a pub/sub hub..._.extend(Backbone, Backbone.Events);....// Create instance of the App...var app = {.....initialize : function () {......// Analytics used for tracking links and errors.....Analytics.initialize();......// Grab data from the page context.....nougat.setContext($(document.body).data());......context = nougat.getContext();......viewName = context.viewName;......// Only instantiate the standalone CAPTCHA view but no other views because the Backbone router.....// will never be triggered because the URL in the browser window will not belong to the Auth.....// Challenge application......if (viewName === 'authcaptcha') {......var asyncAssets = [ "view/" + viewName ];.......require(asyncAssets, function (View) {.......if (typeof View === "function") {..

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	293429
Entropy (8bit):	5.083605252332618
Encrypted:	false
SSDEEP:	6144:pCLfh6nicf8Z5wPTdpM4mDoz1EsnFyyyHh3zOxPnS8kVLkIVfzYAK6k1PY:pfw4mDiTFyA6TVfMAKNZY
MD5:	CCD2CA0B9DDB09BD19848D61D1603288
SHA1:	7CB2A2148D29FDD47EAFAEEEE8D6163455AD44BE
SHA-256:	4D0AD40605C44992A4EEB4FC8A0C9BED4F58EFDB678424E929AFABCAAC576877
SHA-512:	E81F44F0BD032E48FEB330A4582D8E94059C5DE69C65CB73D28C9C9E088E6DB3DCB5664FF91487E2BBC9401E3F3BE21970F7108857AB7CED62DE881601277CDD
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/jquery-1.12.4.js
Preview:	/!. jQuery JavaScript Library v1.12.4. * http://jquery.com/. . Includes Sizzle.js. * http://sizzlejs.com/. . Copyright jQuery Foundation and other contributors. * Released under the MIT license. * http://jquery.org/license. . Date: 2016-05-20T17:17Z. */..(function( global, factory ) {...if ( typeof module === "object" && typeof module.exports === "object" ) {...// For CommonJS and CommonJS-like environments where a proper `window`...// is present, execute the factory and get jQuery....// For environments that do not have a `window` with a `document`...// (such as Node.js), expose a factory as module.exports....// This accentuates the need for the creation of a real `window`....// e.g. var jQuery = require("jquery")(window);...// See ticket #14549 for more info....module.exports = global.document ?....factory( global, true ) :....function( w ) {.....if ( !w.document ) {......throw new Error( "jQuery requires a window with a document" );.....}.....return factory( w );....};..

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4315
Entropy (8bit):	5.129546814483834
Encrypted:	false
SSDEEP:	96:jdrlOMQpaKDBiagJAWear9oaadIcDhWSbVn07cfMerbsCC5hftc/U51dK0i4uVGA:jdrlOzBiasAWEaKzDASbVn07uMerbsCL
MD5:	1121A6FAB74DA10B2857594A093EF35C
SHA1:	7DCD1500AD9352769A838E9F8214F5D6F886ACE2
SHA-256:	78EB4ED77419E21A7087B6DFCC34C98F4E57C00274EE93E03934A69518AD917A
SHA-512:	B9EB2CEF0EADD85E61A96440497462C173314E6B076636AD925AF0031541019E30C5AF4C89D4EAFA1C2676416BFECEC56972875155020E457F06568BCA50B587
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/opinionLab/opinionLab.js
Preview:	/. This file contains the javascript functions and snippets. * that are used to introduce the site feedback link in the footer.. * Function O_GoT inserts the link in the footer list and assigns onclick. * for popup window that displays the feedback from from opinionlab site.. /..define([], function () {...'use strict';..window.PAYPAL = window.PAYPAL ? window.PAYPAL : {};..var opVars = window.PAYPAL.opinionLabVars;...var _doc = document,..._w . = window,..._tm = (new Date()).getTime(),..._sH = screen.height,..._sW = screen.width;.../.. This method forms the siteFeedback image tag to be written into the DOM.. * Note: While calling this method, please make sure to check if sitefbIcon is enabled. This is decided by boolean the property 'showSitefbIcon'... * @returns sfimg.. */..function siteFeedBackImage () {...var sfImg = document.createElement('img');...sfImg.setAttribute('src', opVars.sitefb_plus_icon);...sfImg.setAttribute('alt', '');...return sfImg;..}...function popUp (opi

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1931), with no line terminators
Category:	downloaded
Size (bytes):	1931
Entropy (8bit):	5.855563471150385
Encrypted:	false
SSDEEP:	48:iEAhbKo75XI2ovtUjPKtXsDXx/gDq1p9jLrwUnG:pAcMI5czmIp9XsuG
MD5:	9DB807423C2B32FAE67241A4414487B2
SHA1:	72B12685FAC241737945AB23D5FDE6E8EC5D56CC
SHA-256:	BAECB3787BFE0DF2459109DA9DA0814EA3B40ED7DFC933A0605A71B87AD89325
SHA-512:	DBD5332398AD442E9E867150B743C15501426DA279CABAF2FB977B9958CCD2B56DDF357B61DDC80AFF0A2CE25F1D6F054523585570CC921291A85A3B58981123
Malicious:	false
Reputation:	low
URL:	https://www.recaptcha.net/recaptcha/enterprise.js?render=6LdCCOUUAAAAAHTE-Snr6hi4HJGtJk_d1_ce-gWB&hl=en
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var E='enterprise',a=w[N]=w[N]\|\|{},gr=a[E]=a[E]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.recaptcha.net/recaptcha/enterprise/';(cfg['enterprise']=cfg['enterprise']\|\|[]).push(true);(cfg['enterprise2fa']=cfg['enterprise2fa']\|\|[]).push(true);(cfg['render']=cfg['render']\|\|[]).push('6LdCCOUUAAAAAHTE-Snr6hi4HJGtJk_d1_ce-gWB');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A7uxtj3+hJmOcZFooFT0Ps276PuOqGnM1jfoPbFvxWp73VC60LnYGzayHVvcFeEiF0qrwy7fQAL+gGVXU+f9IQcAAACTeyJvcmlnaW4iOiJodHRwczovL3JlY2FwdGNoYS5uZXQ6NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14667)
Category:	downloaded
Size (bytes):	14854
Entropy (8bit):	5.248951222443214
Encrypted:	false
SSDEEP:	384:wMwkQT8rQL29uGTmqvpPEDjIy1wJmYkJs3wzhErIURNve88PMEWuP1:wpT8EYRPEDsy1wJkrVDcNvdEWuP1
MD5:	8EC7CE4519F5C6B2642DCCFE6BDAE23B
SHA1:	667A6CA8F5769BA9B49655E8C6779CECF43A7CBF
SHA-256:	C007D73792AC2D25882BFBB573E700E721A0ADACFAB947E6A0B64A61991FECF0
SHA-512:	F4AA97EE216C5E9BCD6796BE9A3598B6EAF9B55E252001FC35F6117708666190E14838940B9EDCC18867EB3353C149A883BDE02F620289200EE2387EACFE6B36
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/js/lib/require.js
Preview:	/. RequireJS 2.1.6 Copyright (c) 2010-2012, The Dojo Foundation All Rights Reserved.. Available via the MIT or new BSD license.. see: http://github.com/jrburke/requirejs for details./..var requirejs,require,define;(function(ba){function J(e){return"[object Function]"===N.call(e)}function K(e){return"[object Array]"===N.call(e)}function z(e,t){if(e){var n;for(n=0;n<e.length&&(!e[n]\|\|!t(e[n],n,e));n+=1);}}function O(e,t){if(e){var n;for(n=e.length-1;-1<n&&(!e[n]\|\|!t(e[n],n,e));n-=1);}}function t(e,t){return ha.call(e,t)}function m(e,n){return t(e,n)&&e[n]}function H(e,n){for(var r in e)if(t(e,r)&&n(e[r],r))break}function S(e,n,r,i){return n&&H(n,function(n,s){if(r\|\|!t(e,s))i&&"string"!=typeof n?(e[s]\|\|(e[s]={}),S(e[s],n,r,i)):e[s]=n}),e}function v(e,t){return function(){return t.apply(e,arguments)}}function ca(e){throw e}function da(e){if(!e)return e;var t=ba;return z(e.split("."),function(e){t=t[e]}),t}function B(e,t,n,r){return t=Error(t+"\nhttp://requirejs.org/docs/errors.html#"+e),

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15000)
Category:	dropped
Size (bytes):	15045
Entropy (8bit):	5.097122711465238
Encrypted:	false
SSDEEP:	384:ILCLoqKvmwdkPgn/sORxSYLiH0Udhw69cS:ILCLo7vmwdkg/1RxSwiUihw69cS
MD5:	1E4CBFFE3F8F8266818A96094F74EB41
SHA1:	C4EB64737FB1396CAC64B686B4442C3F846BA323
SHA-256:	2383F109C70BB6A1EF525D5D33E5F9332B105D7C622CD93608677E96631DC17C
SHA-512:	6309CE4DDBDAA62A9C35E44BE6889E4772A6BFAFBA5B3939165F9BF28CFD8709A654418FB9F93297569C087230C1D298C0EB36AE02825AF49977200C1CA133AF
Malicious:	false
Reputation:	low
Preview:	/! 2024 dl-pp-latm@paypal.com ver(5.1.1) /.!function(){"use strict";!function(){function e(e,n){(null==n\|\|n>e.length)&&(n=e.length);for(var o=0,a=Array(n);o<n;o++)a[o]=e[o];return a}function n(n,o){return function(e){if(Array.isArray(e))return e}(n)\|\|function(e,n){var o=null==e?null:"undefined"!=typeof Symbol&&e[Symbol.iterator]\|\|e["@@iterator"];if(null!=o){var a,t,d,i,r=[],b=!0,w=!1;try{if(d=(o=o.call(e)).next,0===n){if(Object(o)!==o)return;b=!1}else for(;!(b=(a=d.call(o)).done)&&(r.push(a.value),r.length!==n);b=!0);}catch(e){w=!0,t=e}finally{try{if(!b&&null!=o.return&&(i=o.return(),Object(i)!==i))return}finally{if(w)throw t}}return r}}(n,o)\|\|function(n,o){if(n){if("string"==typeof n)return e(n,o);var a={}.toString.call(n).slice(8,-1);return"Object"===a&&n.constructor&&(a=n.constructor.name),"Map"===a\|\|"Set"===a?Array.from(n):"Arguments"===a\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(a)?e(n,o):void 0}}(n,o)\|\|function(){throw new TypeError("Invalid attempt to destructure non-it

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2341), with no line terminators
Category:	downloaded
Size (bytes):	2341
Entropy (8bit):	5.08135258633511
Encrypted:	false
SSDEEP:	48:oNzDz0BW4FEM3QVOaxWSwaVWx01XP196HLMCiEuEGB2J9XY:oRDzMW4bKOyTwag0JPH6r/TuTs9I
MD5:	FD614191217CAA07489553ECE0A11197
SHA1:	8ECD6CA240C4D95856A24E93B0C13B6265BF3A6E
SHA-256:	4E8EB79476417AE63A24B8B00B1DB0CCD012582A8936137808C592A524C1C68F
SHA-512:	F9162CD8BE5E69372901EA7A37430D2B418E188399AEF0012F679C7866DEE920EDDB0AFE8D47513B057765E6C725A97D193AE3874ED5E27DF883134A659EE896
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/js/app.js
Preview:	requirejs.config({packages:[{name:"dust-makara-helpers",version:"4.2.0",location:"browser_modules/dust-makara-helpers",main:"browser.amd.js"},{name:"dusthelpers-supplement",version:"2.0.1",location:"browser_modules/dusthelpers-supplement",main:"index.js"},{name:"dustjs-helpers",version:"1.6.3",location:"browser_modules/dustjs-helpers",main:"dist/dust-helpers.js"},{name:"dustjs-linkedin",version:"3.0.1",location:"browser_modules/dustjs-linkedin",main:"dist/dust-full.js"},{name:"pulvus-provide",version:"1.0.3",location:"browser_modules/pulvus-provide",main:"provide.js"},{name:"requirejs",version:"2.3.6",location:"browser_modules/requirejs",main:"require.js"}],paths:{_languagepack:document.documentElement.getAttribute("data-langpack"),jquery:"lib/jquery-3.7.0",jqueryUI:"lib/jquery-ui.min",json:typeof JSON=="undefined"?"lib/json2":"empty:",underscore:"lib/underscore-1.13.6",backbone:"lib/backbone-0.9.2",backboneSubroute:"lib/backbone-subroute-0.3.2",BaseView:"core/baseView","dustmotes-iter

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	9329
Entropy (8bit):	5.289117432268145
Encrypted:	false
SSDEEP:	192:TyTHN2gqPk/gBMVyymnt2mZh9rZ+MP7yWktMfgUTQ1YoJ+XbL6:TyTHNlqPkYBMyntbZhJwrztMfgUTQ1Ye
MD5:	CE68CBF34207740F95051F4544CB891C
SHA1:	C42D3BF47D1FDBFE65B99D66891EB33E2CB66B79
SHA-256:	83CDE8296A338000A9957B29BF86EAF7405AE9C881A6C570653659DFE61E6D4C
SHA-512:	2FE649411EBE8EF0C75E78D4E8247401840F2D22BEE9BFA7C75F5F7CC3971FF6580F84517E5BF59633AC35F57BFF98A76DDC53F39CDE2702E0A0508A9FDE192B
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/hcaptcha/hcaptcha_fph.html?siteKey=bf07db68-5c2e-42e8-8779-ea8384890eea&locale.x=en_US&country.x=US&checkConnectionTimeout=10000&domain=hcaptcha.paypal.com&imgsDomain=imgs.hcaptcha.paypal.com&assetsDomain=newassets.hcaptcha.paypal.com&accountsDomain=accounts.hcaptcha.paypal.com&customDomains=
Preview:	<html>..<head>..<style>....spinner:after,....spinner:before {....content: ''...}....#recaptcha {....z-index: 1...}....@-webkit-keyframes rotation {....from {.....-webkit-transform: rotate(0);.....transform: rotate(0)....}.....to {.....-webkit-transform: rotate(359deg);.....transform: rotate(359deg)....}...}....@-moz-keyframes rotation {....from {.....-moz-transform: rotate(0);.....transform: rotate(0)....}.....to {.....-moz-transform: rotate(359deg);.....transform: rotate(359deg)....}...}....@-o-keyframes rotation {....from {.....-o-transform: rotate(0);.....transform: rotate(0)....}.....to {.....-o-transform: rotate(359deg);.....transform: rotate(359deg)....}...}....@keyframes rotation {....from {.....transform: rotate(0)....}.....to {.....transform: rotate(359deg)....}...}.....spinner:before {....display: block;....margin: 40px auto;....width: 34px;....height: 34px;....border-left: 8px solid rgba(0, 0, 0, .2);....border-right: 8px solid rgba(0, 0, 0, .2);....border-bottom: 8px solid

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	2050
Entropy (8bit):	4.751114111932053
Encrypted:	false
SSDEEP:	48:Kvs0QKsLGH7t9I6FdYWGT/aqTTj1RXXGFWAWUW1IJxFIe/Nf12lrlriXe:0sxKsW7t9t6HRaZeIJHIGNt2xxiXe
MD5:	5186E8EFF91DBD2EB4698F91F2761E71
SHA1:	9E6F0A6857E1FDDBAE2454B31B0A037539310E17
SHA-256:	BE90C8D2968F33F3798B013230B6C818AE66B715F7770A7D1D2E73DA26363D87
SHA-512:	4DF411A60D7A6A390936D7AD356DC943F402717F5D808BB70C7D0AC761502E0B56074F296514060D9049F0225EAE3D4BCFA95873029BE4B34C8796A995575B94
Malicious:	false
Reputation:	low
Preview:	/* global define:true /../. Abstract view which enables rendering contents with a template.. /.define([..'nougat',..'underscore',..'backbone'.],..function (nougat, _, Backbone) {....'use strict';.....var BaseView = Backbone.View.extend({...../.... The name of the template that represents this view..... * Must be defined for render to succeed..... /....template: null,...../.... A default implementation of the standard Backbone render method..... * Handles rendering a template with the current view model..... * @returns the current view instance.... /....render: function () {.....var renderer = nougat.viewRenderer,......template = this.template,......data = this.serialize();......_.bindAll(this, '_doRender', 'renderError', 'afterRender');......this.beforeRender();......renderer.render(template, data).......done(this._doRender).......fail(this.renderError).......always(this.afterRender);......return this;....},...../.... 'Protected' imlementation of what to do with tem

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1305), with no line terminators
Category:	downloaded
Size (bytes):	1305
Entropy (8bit):	5.114410235023359
Encrypted:	false
SSDEEP:	24:2Q5RCCLxZhLSEZsNA9DBHey1HgWRWUVIoLAGa9SRRqys3KJS7nvLQR/s8eFEmYzM:uIxZYEiNA9DJesHgWwUKLGyS+ysLAvep
MD5:	77318F6FDC00171A089C5A9554C5D77F
SHA1:	C875B8A24BE51AEA1F71C5AAE4F79B76018F1C86
SHA-256:	F92AC1FD655D048DD658EC255FF71A6D409F2DA598B58199EFA67B976BD61057
SHA-512:	CB9BDB5C36A1ED91CA3876A09DE1CB459D336CB08F9A501529DCFE4028BC2188DD6BF7D77C72B1C939353A5ADF37E7BEAED3078B32BCBF4786D9814524784D07
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/js/widgets/clientCalLogger.js
Preview:	(function(){function f(t){xhr=new XMLHttpRequest,xhr.open("POST","/signin/client-log",!0),xhr.setRequestHeader("Content-Type","application/json;charset=UTF-8");try{xhr.send(JSON.stringify(t)),e.ulData.logRecords=[]}catch(n){}}function l(){var e={ulCorrelationId:t.getAttribute("data-correlation-id")};return t.getAttribute("data-is-inline-ul")&&(e.flowId=t.getAttribute("data-flow-id"),e.clientCorrelationId=t.getAttribute("data-client-correlation-id")),e}var e=window.PAYPAL\|\|{},t=document.getElementsByTagName("body")[0],n=9e3,r=window.attachEvent\|\|window.addEventListener,i=window.attachEvent?"onbeforeunload":"beforeunload",s,o=t.getAttribute("data-enable-client-cal-logging"),u=document.getElementById("token"),a=u&&u.value;o&&(Date.now?s=Date.now():s=(new Date).getTime(),e.ulData=e.ulData\|\|{},e.ulData.logRecords=[{evt:"ul-rendered",ts:s}],e.ulData.saveClientSideLogs=function(){var n;if(!e.ulData.logRecords\|\|e.ulData.logRecords.length<1)return;e.ulData.logRecords.push({evt:"ul-context-name"

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (573), with no line terminators
Category:	downloaded
Size (bytes):	573
Entropy (8bit):	4.780399097912705
Encrypted:	false
SSDEEP:	12:1yBrz1etISdyDaoTwVh5XpoT62OCBIfI/6ZAIkzyQ/ya/n7:1yp1etI3WmT62O2IfI/62Ira/n7
MD5:	E131BF444C0DECF60E1F399F407650C4
SHA1:	BF7B4F4886F4CFF3D5E506E807BC94FC8210352F
SHA-256:	8BE5545BAD1DF71A1AB6CCA877305F3FB287C773C51ECED1270C1B1FF348CC0C
SHA-512:	E10F3CC850CE29492F86396BDEFB336FBDFC14B2823BD537FE899063B54A1A1DB0C900B7DF0195EEBF7568E2D74B0442CC7084512FA54DFA5C69509344EBF5D7
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/js/core/baseView.js
Preview:	define(["newgat","underscore","backbone"],function(e,t,n){"use strict";var r=n.View.extend({template:null,render:function(){var n=e.viewRenderer,r=this.template,i=this.serialize();return t.bindAll(this,"_doRender","renderError","afterRender"),this.beforeRender(),n.render(r,i).done(this._doRender).fail(this.renderError).always(this.afterRender),this},_doRender:function(e,t){this.$el.html(e)},beforeRender:function(){},afterRender:function(){},renderError:function(e){},serialize:function(){var e=this.model\|\|this.collection;return e&&e.toJSON?e.toJSON():{}}});return r});

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1910), with no line terminators
Category:	dropped
Size (bytes):	1910
Entropy (8bit):	5.8473807450949264
Encrypted:	false
SSDEEP:	48:iEAhpWKo75XI2ovtUjPKtXsDXx/gE1sc/LrwUnG:pATLMI5czjs2suG
MD5:	64DD769EB22BDF0158F63A50EA1F417A
SHA1:	C6EC4ABF8A106559877CA9D7B3F3A1527AEFEF23
SHA-256:	B76E6561318A1B90EBAE39CA8F7E8013CC3019AC7A1486509FF208B34A7432A3
SHA-512:	BC1B23BECD0CE8B515FBDD3B8D37D1E037C3A3DC9E06881D0AFB79C17C45C23FA3CA214F2FF27B73A269A326CE7314614ECFA571DD561F4F43274A512C4568CE
Malicious:	false
Reputation:	low
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var E='enterprise',a=w[N]=w[N]\|\|{},gr=a[E]=a[E]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.recaptcha.net/recaptcha/enterprise/';(cfg['enterprise']=cfg['enterprise']\|\|[]).push(true);(cfg['render']=cfg['render']\|\|[]).push('explicit');(cfg['onload']=cfg['onload']\|\|[]).push('recaptchaEnterpriseCallback');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A7uxtj3+hJmOcZFooFT0Ps276PuOqGnM1jfoPbFvxWp73VC60LnYGzayHVvcFeEiF0qrwy7fQAL+gGVXU+f9IQcAAACTeyJvcmlnaW4iOiJodHRwczovL3JlY2FwdGNoYS5uZXQ6NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12696), with no line terminators
Category:	downloaded
Size (bytes):	12696
Entropy (8bit):	5.130049969968838
Encrypted:	false
SSDEEP:	192:oLV3zev1o5E6PcoF+kkEBukQBEzmVxastV:oLV3SNSXEkkEBujSzm6WV
MD5:	21BE63CFA9F3A9BEAD27FDC3555D397B
SHA1:	A3AD888102598B9F846045BA5A1D75284B9E155D
SHA-256:	0F3A415DFDA1FFC276D264A1E26D47AB8B480B80219142661E05C75AD35E8CBD
SHA-512:	458192E91CE54129DA8AA0DABEC8C75E8786DC086916C89BEC461018969877477A9EA1035FD38681C8B1BFA29EF748F7DDC97BA4CAE615E7EC7CA4B49CF793A8
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/js/view/mainContentView.js
Preview:	define(["jquery","backbone","newgat","pageView","postMessage","authcaptcha"],function(e,t,n,r,i,s){"use strict";var o=r.extend({el:"#main",rlogIds:[],LOADING:"loading",currentViewTemplate:undefined,previousViewTemplate:"null",currentView:"null",pageName:"null",keepMeLoggedIn:undefined,events:{"submit form.proceed":"proceed","click a.proceed":"proceed"},postCaptchaMessageSent:!1,initialize:function(){var r,s,o,u;this.clientCalLog({evt:"ul-loaded"}),this.model=new t.Model(n.getContext()),this.template=this.model.get("viewName"),this.currentViewTemplate=this.model.get("viewName");if(this.isMiniBrowser()){var a=this;o=window.attachEvent?"onbeforeunload":"beforeunload",u=window.addEventListener\|\|window.attachEvent,u(o,function(t){var n=["eConsent","login"],r=document.getElementById("rememberMe"),i=r&&r.getAttribute("data-maxRMReached"),s=t.target\|\|t.srcElement,o=s&&s.activeElement&&s.activeElement.nodeName;if(n.indexOf(a.currentViewTemplate)>=0){a.sendPostMessage({flowtype:"prox",status:"ex

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (648)
Category:	downloaded
Size (bytes):	560414
Entropy (8bit):	5.682261246628439
Encrypted:	false
SSDEEP:	12288:Sipgp5LZvBAh23vrEx3O3EIqdPsXeIJZ3Np:Sipi5LZ5A+45YEIQPsXeu3
MD5:	7295EFF549FD29EFECB1D4D156101C7B
SHA1:	7D397D3A98710D0471DDB00A09920E6635A24947
SHA-256:	68C9ADEB367DE331CDCCE59F22197296197E36D51ED13BC82312E0256ACF20F9
SHA-512:	205A96BD3CD51E655BDC691524D68A170BFD53A559F957458B633F89517025C58DF338F4C0064DAD9CFF0CA7E4A46DE76E803DDA2ED0F4381559C6DBBB2ED730
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/MskOi9BoTT5Vt82JMh92Dvhu/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT./.var d=function(){return[function(N,a,U,y,A,l){return((N^20)&13)==(N-6<((N>>2&14)>=((N+4^20)>=((A=[0,"P","Tx"],(N&71)==N)&&(y=d[7](86,U[A[1]]),l=r[6](2," > ",a,y,U[A[1]])),N)&&(N+2^22)<N&&(U=[34,1023,"ubd"],AD.call(this,e[37](51,U[2]),m[49](73,rK),"POST"),m[49](25,14,e[28](73,1,r[29](7,U[A[0]],U[1],a))),this[A[1]]=a.U()),12)&&(N+1&10)<10&&J.call(this,a,A[0],"conf"),14)&&((N\|5)&15)>=1&&(this[A[1]]=new er,this.size=A[0]),1)&&(l=y&&U[A[2]]()>a?y():null),l},function(N,a,U,y,A,l,z,u,p,x){return(N+6&7)==.(((N-1\|(x=((N>>2&10)==2&&(this.B=a,this.P=U),[20,13,36]),x[2]))<N&&(N+3&51)>=N&&(F[48](21,y,l.P),(u=l.P.G)?p=m[35](29,

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	6158
Entropy (8bit):	4.803683897903787
Encrypted:	false
SSDEEP:	192:oHXo3pSW7yiuzvCyBoIQo/ZbTHvUMfItoa39SrWM8N6fG:QopAvCyR/ZbTHvUMfItoa39K8NMG
MD5:	95AA9AA9D26FCCCC5BB228A7A86CAECB
SHA1:	55A5BFC1A1B4192C4FDB480C7E5FDFC0FFD50A44
SHA-256:	75C159C9974A7207171CF1F4ED302F91F90AE95233FDD64E994FD66ADA89AB20
SHA-512:	3598C0552DB1D8039D9F898C14EF1B91E6DA6069B8FD7F53B5D2750EBD1046E7317B18DE4D3D2A307734E4B066E48BDF37B924948BC79B9027CCC2D5A8DE1D17
Malicious:	false
Reputation:	low
Preview:	"use strict";..function init() {. const key = getListenerSearchKey('data-key');. const sessionId = getListenerSearchKey('data-sessionId');. const csrf = getListenerSearchKey('data-csrf');. const action = getListenerSearchKey('data-action');. const src = getListenerSearchKey('data-src');. const submitURL = getListenerSearchKey('data-submitURL');. const startTime = getListenerSearchKey('data-startTime');...renderGRCV3Enterprise({. key,. action,. sessionId,. csrf,. src,. submitURL,. startTime. });.. var eventMethod = window.addEventListener ? "addEventListener" : "attachEvent",. eventer = window[eventMethod],. messageEvent = (eventMethod === "attachEvent") ? "onmessage" : "message",. clickEvent = eventMethod === "attachEvent" ? "onclick" : "click";.. document[eventMethod](clickEvent,resizeWidget);.. eventer(messageEvent, function(e) {. if(!e.data){. return;.

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	78685
Entropy (8bit):	6.020282308187139
Encrypted:	false
SSDEEP:	1536:OfGNbFoZJSUYOOaLnAW8+IcTOIQbkhXwW5vxM:mGRFauOxLA/+IcTOuXK
MD5:	6AEC8CFD5D3A790339DC627F9F1229B5
SHA1:	B6C8CFFE38E1015DD8595F2DD1A92435E2795874
SHA-256:	80583FA3C83831A9E036EBA0500D1B9C0D30892D0701F1617E0FAFAF5AEAA2CA
SHA-512:	4279E479C860007D04CD6FF0B8C45131C18D87420CD5CEB5C727A7DDBFB4206D007069102D643DA97C3BF01D0B756A2EF4662C8E39B6969FC154DE3C763B1EFC
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/MskOi9BoTT5Vt82JMh92Dvhu/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAAIGNIUk0AAHomAACAhAAA+gAAAIDoAAB1MAAA6mAAADqYAAAXcJy6UTwAAAAGYktHRAD/AP8A/6C9p5MAAHq9SURBVHja7Z15fFTl9f/fd9ZM9n1PgCyEXSSRNYKCgAuiIipuVSuudavV1tq6W/WrtnWrrZbWDZUqUqUoCoIEQhBI2JesELKvM9mTWe7c3x83d5xAlkky8fv92ft5vfKC19znOWfuZ571POc5B1SoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKHifwGCRqsTNFrdj6VPq9XqtNofT9+wvutQyEyad8t9IaPPntFUd

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (981), with no line terminators
Category:	dropped
Size (bytes):	981
Entropy (8bit):	4.987338872723357
Encrypted:	false
SSDEEP:	24:13AQ6l5/Vl6RX6uZ6uClXbIZ6FxqEuZz/fI8cl2T6qEuHmnYC:1w5/qqJysOEszHdrPEJnx
MD5:	2DC7C4277E22248E78386A41C4D0259E
SHA1:	582B7DBF6D93695743C23129DDADBD895D72E2D2
SHA-256:	A4171FB08505D1ED6009AEA69DD817173F0AC2B391BE7131138A7AB53ED589EC
SHA-512:	6C735A991A1FA17B036B6633A8304B8508C19D00B3E2E57DFA9AEEF7D3ECA997140C59B2F2F3CFDC68EDA5153AA5D4F2E1623BAC5B40D07129A4527712571015
Malicious:	false
Reputation:	low
Preview:	define(["jquery","BaseView","newgat"],function(e,t,n){"use strict";var r=t.extend({el:"body",events:{"click a[data-pagename], input[data-pagename], label[data-pagename]":"trackLink"},trackLink:function(t){var n=e(t.currentTarget),r=n.attr("data-pagename")\|\|s.pageName,i=n.attr("data-pagename2")\|\|s.prop25;s&&(s.prop26=n.attr("name")\|\|n.html(),s.prop25=s.eVar25=i,s.prop27=s.pageName+"\|"+s.prop26,s.pageName=r,n.attr("data-transactiondetailslinks")&&(s.prop28=n.attr("data-transactiondetailslinks")),s.tl(),e("#analytics").attr("data-pagename",r).attr("data-c25",i).attr("data-c27",s.prop27))}}),i={view:null,initialize:function(){this.view=new r,n.on("trackError",e.proxy(this.trackError,this))},trackError:function(t){s&&(s.prop25=s.eVar25=t.prop25,s.prop27=s.pageName+"\|"+s.prop26,s.pageName=t.pageName,s.prop14=t.prop14,s.prop15=t.prop15,s.prop29=t.prop29,s.tl(),e("#analytics").attr("data-pagename",s.pageName).attr("data-c25",s.prop25).attr("data-c27",s.prop27))}};return i});

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (981), with no line terminators
Category:	downloaded
Size (bytes):	981
Entropy (8bit):	4.987338872723357
Encrypted:	false
SSDEEP:	24:13AQ6l5/Vl6RX6uZ6uClXbIZ6FxqEuZz/fI8cl2T6qEuHmnYC:1w5/qqJysOEszHdrPEJnx
MD5:	2DC7C4277E22248E78386A41C4D0259E
SHA1:	582B7DBF6D93695743C23129DDADBD895D72E2D2
SHA-256:	A4171FB08505D1ED6009AEA69DD817173F0AC2B391BE7131138A7AB53ED589EC
SHA-512:	6C735A991A1FA17B036B6633A8304B8508C19D00B3E2E57DFA9AEEF7D3ECA997140C59B2F2F3CFDC68EDA5153AA5D4F2E1623BAC5B40D07129A4527712571015
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/js/widgets/analytics.js
Preview:	define(["jquery","BaseView","newgat"],function(e,t,n){"use strict";var r=t.extend({el:"body",events:{"click a[data-pagename], input[data-pagename], label[data-pagename]":"trackLink"},trackLink:function(t){var n=e(t.currentTarget),r=n.attr("data-pagename")\|\|s.pageName,i=n.attr("data-pagename2")\|\|s.prop25;s&&(s.prop26=n.attr("name")\|\|n.html(),s.prop25=s.eVar25=i,s.prop27=s.pageName+"\|"+s.prop26,s.pageName=r,n.attr("data-transactiondetailslinks")&&(s.prop28=n.attr("data-transactiondetailslinks")),s.tl(),e("#analytics").attr("data-pagename",r).attr("data-c25",i).attr("data-c27",s.prop27))}}),i={view:null,initialize:function(){this.view=new r,n.on("trackError",e.proxy(this.trackError,this))},trackError:function(t){s&&(s.prop25=s.eVar25=t.prop25,s.prop27=s.pageName+"\|"+s.prop26,s.pageName=t.pageName,s.prop14=t.prop14,s.prop15=t.prop15,s.prop29=t.prop29,s.tl(),e("#analytics").attr("data-pagename",s.pageName).attr("data-c25",s.prop25).attr("data-c27",s.prop27))}};return i});

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	3824
Entropy (8bit):	5.294305074122082
Encrypted:	false
SSDEEP:	48:SjzdrlxC4UtzM43bHBxn0YEFYGHHoi8MM4nBJAodM4QMhTQYAbbchxnVcJ3ROH8O:wdrlEhLkLtviMBCbcnuAz0hIK5m6mKA
MD5:	6F1A28AC77F6C6F42D972D117BD2169A
SHA1:	6A02B0695794F40631A3F16DA33D4578A9CCF1DC
SHA-256:	3BFDB2200744D989CEAD47443B7720AFF9D032ABD9B412B141BD89BCD7619171
SHA-512:	70F8A714550CDCB7FCDBC3E8BAD372A679DF15382EEBF546B7E5B18CF4BA53EA74AB19BBA154F3FC177F92ED4245A243621927FCF91125911B06E39D58AF7144
Malicious:	false
Reputation:	low
Preview:	/. Spec #22956 OpinionLab. /..define(['opinionLab'], function(opinionLab) {...'use strict';..window.PAYPAL = window.PAYPAL ? window.PAYPAL : {};..var opVars = window.PAYPAL.opinionLabVars;...function showpopup(redirectTo) {...var mywin;...mywin = window.open('', '', 'top=3000,left=3000,width=1,height=1,menubar=0,scrollbars=0,resizeable=1');...if (mywin) {....mywin.document.open....var myURL = ""...../* This JS is customized for sparta because a JS call..... /* Comparing with corresponding XPT code - Removed the External opinionlab js from the popup content as it could not be loaded due to path issue */.....var HTML_txt = "<html><scr" + "ipt language='javascript'>";....HTML_txt = HTML_txt + "_hr='" + opinionLab._hr + "';";....HTML_txt = HTML_txt + "_ht='" + opinionLab._ht + "';";....HTML_txt = HTML_txt + "custom_var='" + opinionLab.custom_var + "';";.....if (( typeof opinionLab.baseurl == 'undefined')) {....} else {.....HTML_txt = HTML_txt + "baseurl='" + opinionLab.baseurl + "';";...

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65508)
Category:	dropped
Size (bytes):	70162
Entropy (8bit):	5.332928547809831
Encrypted:	false
SSDEEP:	1536:ihUQ8vmwdyuwzSpmURvVCzBuOtmfmVaom+gGmtBmxsuRc:iugz7e+KkCr
MD5:	0AF4783054B8E925EC024DC00FCB4510
SHA1:	B43B595D6899229217DA7CA15E8D1A846E93A666
SHA-256:	C3F1981E14042012337C6493597CD362261453611B727E91847A118B2B4CFFB7
SHA-512:	874D73FF48E306FBAC1471DB4F925DF8348F5C3D322AC13D769AF91F6DC67F33F0886674686F8A9F5168910FD8AC160F007423508ED29665E8138EC411C5BE84
Malicious:	false
Reputation:	low
Preview:	/@ 2024 PayPal (v1.9.5) /.!function(){"use strict";function r(t,e,n){(e=function(t){t=function(t,e){if("object"!=typeof t\|\|!t)return t;var n=t[Symbol.toPrimitive];if(void 0===n)return("string"===e?String:Number)(t);t=n.call(t,e\|\|"default");if("object"!=typeof t)return t;throw new TypeError("@@toPrimitive must return a primitive value.")}(t,"string");return"symbol"==typeof t?t:t+""}(e))in t?Object.defineProperty(t,e,{value:n,enumerable:!0,configurable:!0,writable:!0}):t[e]=n}function i(e,t){var n,r=Object.keys(e);return Object.getOwnPropertySymbols&&(n=Object.getOwnPropertySymbols(e),t&&(n=n.filter(function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable})),r.push.apply(r,n)),r}function g(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?i(Object(n),!0).forEach(function(t){r(e,t,n[t])}):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):i(Object(n)).forEach(function(t){Object.defineProperty(e,t,Ob

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (622), with no line terminators
Category:	downloaded
Size (bytes):	622
Entropy (8bit):	4.96960191543784
Encrypted:	false
SSDEEP:	12:2aENAZ6DcZ9XJzB/S/Bf6AFMCmVRTsFdXeFGioetyQAMVFVtLMdogEhllDpW4XZZ:2qZ6QZ9ZzBkBf6oMxRwfJioetHAMVFXh
MD5:	4FFD1A0A324788C068877787F51883DF
SHA1:	5BF8943272515E5981D720A0DD80D9E78ECA8D56
SHA-256:	737C91D3BFAFADADE9CD1660BC29D0372ED9EEA14BDB76C9BF96EC96F882FC79
SHA-512:	40C23574BF5BC7732BFBA93D696EEDA170B8A8FA1CE329087607A09696B9D007391950FBCC66E3CC985F8B0243B9CD465C9D39A4158937F39D7FDEAC2B0A9CE3
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/js/browser_modules/pulvus-provide/provide.js
Preview:	(function(e,t){typeof define=="function"&&define.amd&&define.amd.dust===!0?define(["dust.core"],t):typeof module=="object"?(module.exports=t(require("dustjs-linkedin")),module.exports.registerWith=t):t(e.dust)})(this,function(e){return e.helpers.provide=function(t,n,r,i){var s=n;return i&&(s=n.push(i)),t.map(function(n){function l(e){n.render(e,s);var t=n,r=[];while(t!==i)r.push.apply(r,t.data),t=t.next;return n.data=[],n.next=i,r.join("")}var i=n.next;t.flushable=!1;var o={};for(var u in r)if(u!=="block"){var a=l(r[u]);try{o[u]=JSON.parse(a)}catch(f){o[u]=a}}t.flushable=!0,n.render(r.block,s.push(o)).end()})},e});

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	9819
Entropy (8bit):	4.18718488699821
Encrypted:	false
SSDEEP:	192:BjBeEWEqTCqoLOtFrB9CyYMS1yVvdJ6Z/1UNATnxtBvAOs5Gh2Jr7c0lGjc9c03j:xBeEWLvFSkGIKvQZgctKLzV5Dk
MD5:	57FCD74DE28BE72DE4F3E809122CB4B1
SHA1:	E55E9029D883E8CE69CF5C0668FA772232D71996
SHA-256:	8B456FE0F592FD65807C4E1976EF202D010E432B94ABEB0DAFD517857193A056
SHA-512:	02C5D73AF09EABD863EEDBB8C080B4F0576593B70FCA7F62684E3019A981A92588E45DB6739B41B3495018370320F649E3A7D46AF35ACF927A1F21706867EF49
Malicious:	false
Reputation:	low
Preview:	/. nougat.js v0.0.1 - Application Mediator/Sandbox Library. * This module performs the function of mediator/sandbox.. . @author Erik Toth <ertoth@paypal.com>. /../global define:false, requirejs:true /./jslint plusplus:true, nomen:true /..define(['jquery', 'dust', 'dust-helpers-supplement'], function ($, dust) {. 'use strict';.. var ViewRenderer = null,. DustRenderer = null,. Nougat = null;.. /. Creates a new array with all elements that pass the test implemented by the provided function.. * The filter callback receives three arguments: the value of the element, the index of the element,. * and the Array object being traversed.. * @param {Array} arr the array to filter. * @param {Function} fn the function defining the filter test, returning true to keep and false to discard.. * @param {Object} [context] Object to use as this when executing callback.. */. function filter(arr, fn, context) {. if (Array.prototype.f

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Algol 68 source, ASCII text
Category:	downloaded
Size (bytes):	22992
Entropy (8bit):	4.318444249541683
Encrypted:	false
SSDEEP:	384:NjB0PZV5PnJmyymBJERLKDAo00s2kadv9nvMLVAavDAVmm6vi08Bf:pB0VVJmoERLC5xzkaT0imfmt081
MD5:	E2E8FE02355CC8E6F5BD0A4FD61EA1C3
SHA1:	B1853D31FB5B0B964B78A79EEF43DDC6BBB60BBA
SHA-256:	492177839CCABB9A90A35EB4B37E6280D204B8C5F4B3B627E1093AA9DA375326
SHA-512:	7B5FF6C56A0F3BBB3F0733C612B2F7C5BBB4CC98EF7F141A20C2524ED9F86CB934EFEA9F6F0FAEB2BEC25FCB76CF50775BC3D0B712EAAC442E811B304AB87980
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/dust-helpers.js
Preview:	/! dustjs-helpers - v1.5.0. https://github.com/linkedin/dustjs-helpers.* Copyright (c) 2014 Aleksander Williams; Released under the MIT License */.(function(dust){.. // Use dust's built-in logging when available. var _log = dust.log ? function(msg, level) {. level = level \|\| "INFO";. dust.log(msg, level);. } : function() {};. . var _deprecatedCache = {};. function _deprecated(target) {. if(_deprecatedCache[target]) { return; }. _log("Deprecation warning: " + target + " is deprecated and will be removed in a future version of dustjs-helpers", "WARN");. _log("For help and a deprecation timeline, see https://github.com/linkedin/dustjs-helpers/wiki/Deprecated-Features#" + target.replace(/\W+/g, ""), "WARN");. _deprecatedCache[target] = true;. }. . function isSelect(context) {. var value = context.current();. return typeof value === "object" && value.isSelect === true;. }. . // Utility method : toString() equivale

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3807), with no line terminators
Category:	downloaded
Size (bytes):	3807
Entropy (8bit):	5.175114160879721
Encrypted:	false
SSDEEP:	96:Cejna4urzmVcW/vtXwIeg6yGfpyuqQb7lkWTGquqhqXYMKdyqZY:JaWcW/vSIegVmR7bZukNMKdk
MD5:	A635A55DDB6339A3D0D01C641F670753
SHA1:	A6DEE4A1DF6C51B82CE2E67323514E7DE4E165D4
SHA-256:	A6C3BFF965978DF8093C3A29F7071C21D7439A212AF41E7B40CE70D94D6BCC44
SHA-512:	2562CA35BE37BFE0B984EC288E23678BC97BA7A881764044E65914EA013742A5310A5C12839CB8A501A464791BC67868FE6A02AE149DF9329E40562569EBA42D
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/js/lib/modernizr-2.6.1.js
Preview:	window.Modernizr=function(e,t,n){function r(e){d.cssText=e}function i(e,t){return r(prefixes.join(e+";")+(t\|\|""))}function s(e,t){return typeof e===t}function o(e,t){return!!~(""+e).indexOf(t)}function u(e,t,r){for(var i in e){var o=t[e[i]];if(o!==n)return r===!1?e[i]:s(o,"function")?o.bind(r\|\|t):o}return!1}var a="2.6.1",f={},l=!0,c=t.documentElement,h="modernizr",p=t.createElement(h),d=p.style,v,m={}.toString,g={},y={},b={},w=[],E=w.slice,S,x={}.hasOwnProperty,T;!s(x,"undefined")&&!s(x.call,"undefined")?T=function(e,t){return x.call(e,t)}:T=function(e,t){return t in e&&s(e.constructor.prototype[t],"undefined")},Function.prototype.bind\|\|(Function.prototype.bind=function(e){var t=this;if(typeof t!="function")throw new TypeError;var n=E.call(arguments,1),r=function(){if(this instanceof r){var i=function(){};i.prototype=t.prototype;var s=new i,o=t.apply(s,n.concat(E.call(arguments)));return Object(o)===o?o:s}return t.apply(e,n.concat(E.call(arguments)))};return r});for(var N in g)T(g,N)&&

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7202), with no line terminators
Category:	dropped
Size (bytes):	7202
Entropy (8bit):	5.355379827732298
Encrypted:	false
SSDEEP:	192:GeLYFa7EGANz8HbcLvkJ26p0HLlIuAM0NzTKBB0nkV9cofMctaUc:fXoxYHbcLa0HL2uRgWwnsGof9taj
MD5:	CA4C1E3DC374D2C6966967C820647C45
SHA1:	556C0E5DC7ADED4F7D7EF6798D74E79A546A49E8
SHA-256:	B54CD3D43C06F2206B441706CB2100AB2AF2BC09D4780CBE899DE6480041701B
SHA-512:	0912FBF7B5E5B1C2D5F4FB6847F1FF94A9987F5F1408402F2B5D8D2CB7DF81FFDFCA81F5DCF02ACA34184479482AD494824AE9E5CA546ECAD3EC0900644D5443
Malicious:	false
Reputation:	low
Preview:	TLT.addModule("digitalData",function(){return{init:function(){},destroy:function(){},onevent:function(webEvent){if("object"==typeof webEvent&&webEvent.type&&webEvent)switch(webEvent.type){case"load":case"unload":"undefined"!=typeof window.fpti&&(qKeys=window.fpti,TLT.logCustomEvent("FPTI",{description:"FPTI",action:"Retrieve",value:qKeys}))}var qKeys}}}),function(){"use strict";var config,msgPrivacyPatterns,lastMsg,TLT=window.TLT,asyncReqOnUnload=/WebKit/i.test(navigator.userAgent),useFetch=!!window.fetch,useBeacon=!0,useWorker=!1,maxQueueEvents=30,maxQueueSize=3e4,queueTimerInterval=2e4,checkEndpoint=!1,enableDomCapture=!0,domDiffEnabled=!0;if("function"==typeof TLT.isInitialized&&TLT.isInitialized())console.warn("Tealeaf has already been initialized in this page. Aborting this initialization.");else{if(TLT.utils.isLegacyIE)return console&&(console.warn("This version of the UIC does not support Internet Explorer 8."),console.info("Applications requiring Internet Explorer 8 (or below)

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15000)
Category:	downloaded
Size (bytes):	15045
Entropy (8bit):	5.097122711465238
Encrypted:	false
SSDEEP:	384:ILCLoqKvmwdkPgn/sORxSYLiH0Udhw69cS:ILCLo7vmwdkg/1RxSwiUihw69cS
MD5:	1E4CBFFE3F8F8266818A96094F74EB41
SHA1:	C4EB64737FB1396CAC64B686B4442C3F846BA323
SHA-256:	2383F109C70BB6A1EF525D5D33E5F9332B105D7C622CD93608677E96631DC17C
SHA-512:	6309CE4DDBDAA62A9C35E44BE6889E4772A6BFAFBA5B3939165F9BF28CFD8709A654418FB9F93297569C087230C1D298C0EB36AE02825AF49977200C1CA133AF
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/pa/mi/paypal/latmconf.js
Preview:	/! 2024 dl-pp-latm@paypal.com ver(5.1.1) /.!function(){"use strict";!function(){function e(e,n){(null==n\|\|n>e.length)&&(n=e.length);for(var o=0,a=Array(n);o<n;o++)a[o]=e[o];return a}function n(n,o){return function(e){if(Array.isArray(e))return e}(n)\|\|function(e,n){var o=null==e?null:"undefined"!=typeof Symbol&&e[Symbol.iterator]\|\|e["@@iterator"];if(null!=o){var a,t,d,i,r=[],b=!0,w=!1;try{if(d=(o=o.call(e)).next,0===n){if(Object(o)!==o)return;b=!1}else for(;!(b=(a=d.call(o)).done)&&(r.push(a.value),r.length!==n);b=!0);}catch(e){w=!0,t=e}finally{try{if(!b&&null!=o.return&&(i=o.return(),Object(i)!==i))return}finally{if(w)throw t}}return r}}(n,o)\|\|function(n,o){if(n){if("string"==typeof n)return e(n,o);var a={}.toString.call(n).slice(8,-1);return"Object"===a&&n.constructor&&(a=n.constructor.name),"Map"===a\|\|"Set"===a?Array.from(n):"Arguments"===a\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(a)?e(n,o):void 0}}(n,o)\|\|function(){throw new TypeError("Invalid attempt to destructure non-it

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1198
Entropy (8bit):	4.92536183669385
Encrypted:	false
SSDEEP:	24:PzRCvsqk/AMvGGP5Zb0sgK1Z/O7+KU43IYxxqh3snFEPmZwifnmTNK43GNUSoG91:P9wM/tGGBZYsgKPU+KU43s3d+ZwifmTs
MD5:	B625A3DC02E4E9CBCD21AE7E50F331A3
SHA1:	E8A50FA6A995A8BEBEDCD190972644809EE2D089
SHA-256:	4A178734B54E5D15A488E5360123579D7F32AFAE93C18E751790DA8C8B3F8FF1
SHA-512:	F83810E9A023DBDAE40109B349AA37523A8F6AC7CA68C331E5923A1DF88DCBF593A3607A1EC7D5A4F05F509F4EE4ADDC28D1A869AA27B008D9CDD2CCF7E54241
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/app.js
Preview:	require(['nougat', 'backbone', 'router', 'widgets/analytics', 'underscore', 'opinionLabComponent'],...function (nougat, Backbone, Router, Analytics, _) {....'use strict';...var context, viewName, router;....// Turning Backbone into a pub/sub hub..._.extend(Backbone, Backbone.Events);....// Create instance of the App...var app = {.....initialize : function () {......// Analytics used for tracking links and errors.....Analytics.initialize();......// Grab data from the page context.....nougat.setContext($(document.body).data());......context = nougat.getContext();......viewName = context.viewName;......// Only instantiate the standalone CAPTCHA view but no other views because the Backbone router.....// will never be triggered because the URL in the browser window will not belong to the Auth.....// Challenge application......if (viewName === 'authcaptcha') {......var asyncAssets = [ "view/" + viewName ];.......require(asyncAssets, function (View) {.......if (typeof View === "function") {..

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1072)
Category:	downloaded
Size (bytes):	8773
Entropy (8bit):	5.266051375492752
Encrypted:	false
SSDEEP:	192:aenh+xzLOqNq/3txtImk7gYwphRxmMEn2bxHKnxMW2bxzKnxFaSDx+9t/lUVVF:aih+xnc/3Ptdk7g10n+TWMeSjNkF
MD5:	00B674364AC0DC69BC825CD0A4E4FB9E
SHA1:	3CF90BFD07F556E8E27497DA877FF042E9299E4D
SHA-256:	59F6E569928C45016510AEF64FD02035417EB0259C8C9C26BEED929B728CF766
SHA-512:	4B995E2D0D91122540998E2B4A457AA1B426B43E3D40693A7B1825FE1ABE31821CA48B94228A9A365D51CB789C0F18F36B2DEB9C900E6C90008A78CA26913AF9
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/recaptcha/recaptcha_v2.html?siteKey=6LeZ6egUAAAAAGwL8CjkDE8dcSw2DtvuVpdwTkwG&locale.x=en_US&country.x=US&checkConnectionTimeout=10000&reCaptchaEnterpriseEnabled=true
Preview:	<html>..<head>...<style>.....spinner:after,.spinner:before{content:''}#recaptcha{z-index:1}@-webkit-keyframes rotation{from{-webkit-transform:rotate(0);transform:rotate(0)}to{-webkit-transform:rotate(359deg);transform:rotate(359deg)}}@-moz-keyframes rotation{from{-moz-transform:rotate(0);transform:rotate(0)}to{-moz-transform:rotate(359deg);transform:rotate(359deg)}}@-o-keyframes rotation{from{-o-transform:rotate(0);transform:rotate(0)}to{-o-transform:rotate(359deg);transform:rotate(359deg)}}@keyframes rotation{from{transform:rotate(0)}to{transform:rotate(359deg)}}.spinner:before{display:block;margin:40px auto;width:34px;height:34px;border-left:8px solid rgba(0,0,0,.2);border-right:8px solid rgba(0,0,0,.2);border-bottom:8px solid rgba(0,0,0,.2);border-top:8px solid #2180c0;border-radius:50px;-webkit-animation:rotation .7s infinite linear;-moz-animation:rotation .7s infinite linear;-o-animation:rotation .7s infinite linear;animation:rotation .7s infinite linear}.spinner:after{position:fi

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	2974
Entropy (8bit):	4.88985867449781
Encrypted:	false
SSDEEP:	48:Ykrs/BqPgeFo5BwsbQwTIcACGWS29oXuseVzxdor2BFKH9zlnBJN4m:YkqBogKo8skwTIxCK2rsuLKH9JvNP
MD5:	01BC0C36F25B668C2461BD9AA72CBA12
SHA1:	36AA5EFC5A15AF82A9489BB1C34E0C538EE63659
SHA-256:	E991024988B4CD788022C6387E520882D74EDAC454F880738E5B267B50815404
SHA-512:	BF7D8020B63E424E744EE5E11FDB6E5B1AD898CF35248572F1D63A788D70FCF03D2CF833AB950D154AB44830511F12B58E0A1625DDE3188AC428FC49483F55C0
Malicious:	false
Reputation:	low
Preview:	/*. Created by hdoan on 5/5/14.. . Validates form inputs. Will emit Backbone event if input is valid, invalid, or empty.. * The event naming convention is 'valid', 'invalid', or 'empty' followed by the name attribute of the field. . For example, if you are validating the email input, the three possible events are as follows:. * 1. 'validemail'. * 2. 'invalidemail'. * 3. 'emptyemail'. /.define(..[ 'jquery', 'backbone', 'underscore' ],...function($, Backbone, _) {...'use strict';....var validation = {.....init: function(view) {.....var elem = view.$el,......fields = elem.find('.validate');......if (fields.length !== 0) {.......// Find all fields with the 'validate' class and onblur add handler to validate......fields.each(function() {.......$(this).on('blur', function (field) {........validation.doValidation(field.target);.......});......});.....}....},...../.... Performs the validation.... .... @param {Object} target - event object.... */....doValidation: function(targe

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (517), with no line terminators
Category:	downloaded
Size (bytes):	517
Entropy (8bit):	5.39637340288226
Encrypted:	false
SSDEEP:	12:2QAx6qCCLCAQaZhnVV4aQamMKO5OErRUk7Sx93q6MDE5DRRDYAIn:2QAxCCLxZh34aQamQOE1Uk7+q6MDaRRC
MD5:	D721595EDBF992753341DC68FECB1309
SHA1:	CA442A355A15E42ABB0D767C634E0F8FFE252525
SHA-256:	02540177403429B1916502DCF39FD63AE82B4F711B6AE848AE0DBC24820B52C3
SHA-512:	E61FDF09A2B24B8BA7E9388A82E4EB9982D27CDBB797B34AD9B35554B764CF6724504B0327C0789B4CBB70E747FF4151880AE1D23328ABBC1DE110323C980AB9
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/js/widgets/errorDetector.js
Preview:	(function(){function n(e){xhr=new XMLHttpRequest,xhr.open("POST","/signin/client-log",!0),xhr.setRequestHeader("Content-Type","application/json;charset=UTF-8");try{xhr.send(JSON.stringify(e))}catch(t){}}function r(e,r,i,s,o){var u=o&&o.message\|\|"unknown",a=typeof r=="string"&&r.split("js/")[1]\|\|"unknown",f={currentUrl:window.location.href,_csrf:t,logRecords:[{evt:"ERROR_DETECTOR",data:"ERROR_THROWN_FROM_"+a+"_"+u,calEvent:!0}]};return n(f)}var e=document.getElementById("token"),t=e&&e.value;window.onerror=r})();

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:H0hCkY:UUkY
MD5:	AFB69DF47958EB78B4E941270772BD6A
SHA1:	D9FE9A625E906FF25C1F165E7872B1D9C731E78E
SHA-256:	874809FB1235F80831B706B9E9B903D80BD5662D036B7712CC76F8C684118878
SHA-512:	FD92B98859FFCCFD12AD57830887259F03C7396DA6569C0629B64604CD964E0DF15D695F1A770D2E7F8DF238140F0E6DA7E7D176B54E31C3BB75DDE9B9127C45
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAl_Jiy42EDGqRIFDVNaR8U=?alt=proto
Preview:	CgkKBw1TWkfFGgA=

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2050
Entropy (8bit):	4.751114111932053
Encrypted:	false
SSDEEP:	48:Kvs0QKsLGH7t9I6FdYWGT/aqTTj1RXXGFWAWUW1IJxFIe/Nf12lrlriXe:0sxKsW7t9t6HRaZeIJHIGNt2xxiXe
MD5:	5186E8EFF91DBD2EB4698F91F2761E71
SHA1:	9E6F0A6857E1FDDBAE2454B31B0A037539310E17
SHA-256:	BE90C8D2968F33F3798B013230B6C818AE66B715F7770A7D1D2E73DA26363D87
SHA-512:	4DF411A60D7A6A390936D7AD356DC943F402717F5D808BB70C7D0AC761502E0B56074F296514060D9049F0225EAE3D4BCFA95873029BE4B34C8796A995575B94
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/core/baseView.js
Preview:	/* global define:true /../. Abstract view which enables rendering contents with a template.. /.define([..'nougat',..'underscore',..'backbone'.],..function (nougat, _, Backbone) {....'use strict';.....var BaseView = Backbone.View.extend({...../.... The name of the template that represents this view..... * Must be defined for render to succeed..... /....template: null,...../.... A default implementation of the standard Backbone render method..... * Handles rendering a template with the current view model..... * @returns the current view instance.... /....render: function () {.....var renderer = nougat.viewRenderer,......template = this.template,......data = this.serialize();......_.bindAll(this, '_doRender', 'renderError', 'afterRender');......this.beforeRender();......renderer.render(template, data).......done(this._doRender).......fail(this.renderError).......always(this.afterRender);......return this;....},...../.... 'Protected' imlementation of what to do with tem

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	9819
Entropy (8bit):	4.18718488699821
Encrypted:	false
SSDEEP:	192:BjBeEWEqTCqoLOtFrB9CyYMS1yVvdJ6Z/1UNATnxtBvAOs5Gh2Jr7c0lGjc9c03j:xBeEWLvFSkGIKvQZgctKLzV5Dk
MD5:	57FCD74DE28BE72DE4F3E809122CB4B1
SHA1:	E55E9029D883E8CE69CF5C0668FA772232D71996
SHA-256:	8B456FE0F592FD65807C4E1976EF202D010E432B94ABEB0DAFD517857193A056
SHA-512:	02C5D73AF09EABD863EEDBB8C080B4F0576593B70FCA7F62684E3019A981A92588E45DB6739B41B3495018370320F649E3A7D46AF35ACF927A1F21706867EF49
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/core/nougat.js
Preview:	/. nougat.js v0.0.1 - Application Mediator/Sandbox Library. * This module performs the function of mediator/sandbox.. . @author Erik Toth <ertoth@paypal.com>. /../global define:false, requirejs:true /./jslint plusplus:true, nomen:true /..define(['jquery', 'dust', 'dust-helpers-supplement'], function ($, dust) {. 'use strict';.. var ViewRenderer = null,. DustRenderer = null,. Nougat = null;.. /. Creates a new array with all elements that pass the test implemented by the provided function.. * The filter callback receives three arguments: the value of the element, the index of the element,. * and the Array object being traversed.. * @param {Array} arr the array to filter. * @param {Function} fn the function defining the filter test, returning true to keep and false to discard.. * @param {Object} [context] Object to use as this when executing callback.. */. function filter(arr, fn, context) {. if (Array.prototype.f

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1228), with no line terminators
Category:	downloaded
Size (bytes):	1228
Entropy (8bit):	4.991836041220244
Encrypted:	false
SSDEEP:	24:1UbSjYz0brlna3W8RsdwYU/ImxIlFlbkPIaPBWfIX9SmV5HDUmu+K/L:1ASjk0vkW7+x/pgFh+UfY5WmteL
MD5:	35558E9FA07B2F8F7F6F1A4F6124A0B4
SHA1:	695C51C3667E8DD8FFC9CB202E6399EE5F39C9BB
SHA-256:	B9D410B959D2E1509801C43780835655A35BA6F33D3E471C6B172B31E6E7D916
SHA-512:	82B8A6F5601D9C55CABFB407628E7A247637E76EC6209056C898D086A9043546225F898CF8DB62ED86A2BD33CEDDFE88800A9F4AA66EE72DCC409D041FF4A4D9
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/js/router.js
Preview:	define(["newgat","jquery","backbone"],function(e,t,n){"use strict";var r=["injectIframeTest"],i,s,o,u;return i=n.Router.extend({routes:{"":"showLanding","?queryString":"showLanding","inject/queryString":"showLanding",authorize:"showLanding","authorize?queryString":"showLanding",consent:"showLanding","consent?queryString":"showLanding","consent-cancel":"showLanding","activate-one-touch":"showLanding","activate-one-touch?*queryString":"showLanding","remember-me":"showLanding",econsent:"showLanding",genericError:"showGenericError","remember-me-interstitial":"showLanding"},hasPushState:window.history&&"pushState"in window.history,showLanding:function(){this.showView(this.viewName)},showGenericError:function(){this.showView("genericError")},showView:function(e){var i=e\|\|n.history.fragment\|\|"login",s=["view/"+i];if(t.inArray(i,r)>-1)return;require(s,function(e){typeof e=="function"&&(e=new e({parent:o}))})},start:function(){n.history.start({pushState:this.hasPushState,root:window.locatio

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	4495
Entropy (8bit):	4.231793539683161
Encrypted:	false
SSDEEP:	96:qLlbCe1CypE22uJuXplSlDrACAts8/yRlzUntwRntg1Zy7GbNB:QCgCym2hJuXuACEs8qRlzUtwRteZyCbj
MD5:	2ECD7878D26715C59A1462EA80D20C5B
SHA1:	2A0D2C2703EB290A814AF87EE09FEB9A56316489
SHA-256:	79A837D4EC921084E5CB0663372232B7B739A6AE5F981B00EB79EB3441043FC5
SHA-512:	222472C443ABA64839D4FA561A77541D913F43156083DA507380AC6889FDD237D9B5374E710092DD60B48A5B808CBA12749921C441144C5A429AB28D89D74FB0
Malicious:	false
Reputation:	low
Preview:	var extend = function extend(dust) {.. // Add new dust helpers in this style. dust.helpers.link = function link(chunk, ctx, bodies, params) {. 'use strict';.. var href,. host = ctx.getPath(false, ['context', 'pageInfo', 'hostName']),. production,. stage,. sandbox,. dev,. cobrand,. locale,. pat,. extension,. type,. str;.. // Get trailing part of url and extract extension, if any. if (params) {. if (params.href) {. href = dust.helpers.tap(params.href, chunk, ctx);. href = href.trim();. pat = /\.[0-9a-z]{1,4}$/i;. extension = href.match(pat);. } else {. return chunk.write(''); // if not href, generate empty output. }. if (params.type) {. type = dust.helpers.tap(params.type, chunk, ctx);. if

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23125), with no line terminators
Category:	dropped
Size (bytes):	23125
Entropy (8bit):	5.2464842228013895
Encrypted:	false
SSDEEP:	384:v0Ap5n5P9Nxf4hfWGwR+EkE+n4QnZ/X2NWKW4BCCMHxDkZbaXpweyGobcUWfgMcC:J5n51f4hfWGwR+Tnn4QnZ/b3J7yGQMUE
MD5:	243EDA4543153156C0AE9DF9E8C5833D
SHA1:	DFA372F408889FA3F4A6CA29847F4A379ED246A8
SHA-256:	D81BFEFD8585B694222D3E94E9DEE5D7935049C65355F9FD096800301D51545B
SHA-512:	BC2E170A94BB45624ED4392B2049FA017411C244DC765B5E862093E2264EC9580752A29A86E6739E2ECBA2F16B6880FDBF9AB1ECB6647E739B391B46A5BF9AA9
Malicious:	false
Reputation:	low
Preview:	!function(e){var t={};function n(r){if(t[r])return t[r].exports;var a=t[r]={i:r,l:!1,exports:{}};return e[r].call(a.exports,a,a.exports,n),a.l=!0,a.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var a in e)n.d(r,a,function(t){return e[t]}.bind(null,a));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s=6)}([function(e,t,n){var r=n(1);e.exports.find=function(e,t){if(Array.isArray(e)\|\|void 0!==e.

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65431)
Category:	dropped
Size (bytes):	177743
Entropy (8bit):	4.410090234686878
Encrypted:	false
SSDEEP:	3072:QTY1n3dDEthymN6mNbPoZLEkCgw2MK2xZ1w2pVJMnnnnp3oqSfDXCU:1lOsCj7Qp3EfDn
MD5:	B4F2EDBEA31DCEC5C70F4F1BF574B162
SHA1:	94C164B7A2F52B4FB2A8A61A10ACBB4C2AA4E2B5
SHA-256:	7B093CBB49ADC2923B6EF6B58AD22F87BA4A008E0ECB27665A76CAB5E9DEEB40
SHA-512:	6F66035FBBC99326837C79F92965AF24EBF028AE6CF7BCD532985E6804F76DB7DC2779F8FF24B19D9444E693D5020085EF961B5A87D73E5B6C6CC165782137FA
Malicious:	false
Reputation:	low
Preview:	/** DataDome is a cybersecurity solution to detect bot activity https://datadome.co (version 4.38.0) */ .!function e(t,n,o){function i(r,s){if(!n[r]){if(!t[r]){var d='\x66\x75\x6e\x63\x74\x69\x6f\x6e'==typeof require&&require;if(!s&&d)return d(r,!0);if(a)return a(r,!0);var c=new Error('\x43\x61\x6e\x6e\x6f\x74\x20\x66\x69\x6e\x64\x20\x6d\x6f\x64\x75\x6c\x65\x20\x27'+r+'\x27');throw c[['\x63\x6f\x64\x65']]='\x4d\x4f\x44\x55\x4c\x45\x5f\x4e\x4f\x54\x5f\x46\x4f\x55\x4e\x44',c;}var h=n[r]={exports:{}};t[r][0][['\x63\x61\x6c\x6c']](h[['\x65\x78\x70\x6f\x72\x74\x73']],function(e){return i(t[r][1][e]\|\|e);},h,h[['\x65\x78\x70\x6f\x72\x74\x73']],e,t,n,o);}return n[r][['\x65\x78\x70\x6f\x72\x74\x73']];}for(var a='\x66\x75\x6e\x63\x74\x69\x6f\x6e'==typeof require&&require,r=0;r<o[['\x6c\x65\x6e\x67\x74\x68']];r++)i(o[r]);return i;}({1:[function(e,t,n){t[['\x65\x78\x70\x6f\x72\x74\x73']]=function(){this[['\x65\x6e\x64\x70\x6f\x69\x6e\x74']]='\x68\x74\x74\x70\x73\x3a\x2f\x2f\x61\x70\x69\x2d\x6a\x73

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	65441
Entropy (8bit):	5.030761148036821
Encrypted:	false
SSDEEP:	1536:tIipojPGlIr8vKP0DPLX7uE+6ZrstVjIc1s73+lPBfTpErw9JuEHPVoglPdYK5aO:tIip4P8Ir8vKP0DPLX7uE+ustVj11s7S
MD5:	EB3B3278A5766D86F111818071F88058
SHA1:	333152C3D0F530EEE42092B5D0738E5CB1EEFD73
SHA-256:	1203F43C3293903ED6C84739A9AA291970692992E310AAB32520C5CA58001CEA
SHA-512:	DD9DDC1B6A52AD37C647562D42979A331BE6E6D20885B1A690C3AEEE2CFC6F46404B994225D87141CA47D5C9650CC66C72A118B2D269D2F3FDEA52624216E3BC
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/underscore-1.13.4.js
Preview:	(function (global, factory) {..typeof exports === 'object' && typeof module !== 'undefined' ? module.exports = factory() :..typeof define === 'function' && define.amd ? define('underscore', factory) :..(global = typeof globalThis !== 'undefined' ? globalThis : global \|\| self, (function () {.. var current = global._;.. var exports = global._ = factory();.. exports.noConflict = function () { global._ = current; return exports; };..}()));. }(this, (function () {..// Underscore.js 1.13.4..// https://underscorejs.org..// (c) 2009-2022 Jeremy Ashkenas, Julian Gonggrijp, and DocumentCloud and Investigative Reporters & Editors..// Underscore may be freely distributed under the MIT license.. ..// Current version...var VERSION = '1.13.4';. ..// Establish the root object, `window` (`self`) in the browser, `global`..// on the server, or `this` in some virtual machines. We use `self`..// instead of `window` for `WebWorker` support...var root = (typeof self == 'object' && self.

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25467)
Category:	downloaded
Size (bytes):	25508
Entropy (8bit):	5.094451586944145
Encrypted:	false
SSDEEP:	384:HTP8X48LLyEoSsntg1YwDPc4PFNZdcF7a9OOpj6UkeUZrg+y/3Rjqz+jtkd6Pmzq:zP8Xymxke9R04uGmXmH
MD5:	6E28DEAE28590A7A63969BF00512782A
SHA1:	C12712D683FD15FDBBE373180CF0F7C7A5BCDB5E
SHA-256:	BE241A24CAFE282578F2C401F940531631D50F3D0432C43B7ADC76ECA67A8898
SHA-512:	340245FC821DB5227927161A946BFE834C5B9DB1C94DAD16DB81B2DB59C89ADFAC0648D15933A1A28F89010BC2C3D03D5B30899AAFC956E8A382088E92B756D5
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/backbone-1.5.0.min.js
Preview:	(function(r){var n=typeof self=="object"&&self.self===self&&self\|\|typeof global=="object"&&global.global===global&&global;if(typeof define==="function"&&define.amd){define(["underscore","jquery","exports"],function(t,e,i){n.Backbone=r(n,i,t,e)})}else if(typeof exports!=="undefined"){var t=require("underscore"),e;try{e=require("jquery")}catch(t){}r(n,exports,t,e)}else{n.Backbone=r(n,{},n._,n.jQuery\|\|n.Zepto\|\|n.ender\|\|n.$)}})(function(t,h,x,e){var i=t.Backbone;var a=Array.prototype.slice;h.VERSION="1.5.0";h.$=e;h.noConflict=function(){t.Backbone=i;return this};h.emulateHTTP=false;h.emulateJSON=false;var r=h.Events={};var o=/\s+/;var l;var u=function(t,e,i,r,n){var s=0,a;if(i&&typeof i==="object"){if(r!==void 0&&"context"in n&&n.context===void 0)n.context=r;for(a=x.keys(i);s<a.length;s++){e=u(t,e,a[s],i[a[s]],n)}}else if(i&&o.test(i)){for(a=i.split(o);s<a.length;s++){e=t(e,a[s],r,n)}}else{e=t(e,i,r,n)}return e};r.on=function(t,e,i){this._events=u(n,this._events\|\|{},t,e,{context:i,ctx:this

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	4945
Entropy (8bit):	4.629506414198924
Encrypted:	false
SSDEEP:	96:CXQSfsjFfE77sDwFD3udPJwEym6BxGuJCg6vuIp6v8TqUUwvd:WQAsjFfGML6TGu0ScTN
MD5:	0D105318575EA6A4FC653AA8290A3410
SHA1:	B8EF6C644FFDB3983C518014BC4C0FF4317A011B
SHA-256:	B3CC50B9E94BBECAAEB1079B64B8CA50616D1732824964C1CC2C5422627A0EC5
SHA-512:	8797088012937108ACA1905E27DC49900CE00D5D51DEF982454A4C5389F4301A8857734C4178EF311DAE6AED47F033E1C9DF3D6F6B0B9BEF694D9CE278B3D193
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... width="127.769px" height="31.5px" viewBox="0 0 127.769 31.5" enable-background="new 0 0 127.769 31.5" xml:space="preserve">..<g>...<g>....<g>.....<path fill="#009CDE" d="M98.396,6.933H91.37c-0.479,0-0.89,0.35-0.964,0.824l-2.841,18.015c-0.056,0.355,0.219,0.676,0.579,0.676......h3.604c0.335,0,0.622-0.244,0.674-0.576l0.807-5.107c0.074-0.474,0.483-0.824,0.964-0.824h2.223c4.628,0,7.298-2.239,7.996-6.678......c0.314-1.941,0.014-3.467-0.896-4.535C102.518,7.553,100.746,6.933,98.396,6.933z M99.207,13.512......c-0.384,2.522-2.31,2.522-4.173,2.522h-1.061l0.744-4.708c0.045-0.285,0.29-0.495,0.578-0.495h0.485c1.269,0,2.467,0,3.084,0.723.....

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (517), with no line terminators
Category:	dropped
Size (bytes):	517
Entropy (8bit):	5.39637340288226
Encrypted:	false
SSDEEP:	12:2QAx6qCCLCAQaZhnVV4aQamMKO5OErRUk7Sx93q6MDE5DRRDYAIn:2QAxCCLxZh34aQamQOE1Uk7+q6MDaRRC
MD5:	D721595EDBF992753341DC68FECB1309
SHA1:	CA442A355A15E42ABB0D767C634E0F8FFE252525
SHA-256:	02540177403429B1916502DCF39FD63AE82B4F711B6AE848AE0DBC24820B52C3
SHA-512:	E61FDF09A2B24B8BA7E9388A82E4EB9982D27CDBB797B34AD9B35554B764CF6724504B0327C0789B4CBB70E747FF4151880AE1D23328ABBC1DE110323C980AB9
Malicious:	false
Reputation:	low
Preview:	(function(){function n(e){xhr=new XMLHttpRequest,xhr.open("POST","/signin/client-log",!0),xhr.setRequestHeader("Content-Type","application/json;charset=UTF-8");try{xhr.send(JSON.stringify(e))}catch(t){}}function r(e,r,i,s,o){var u=o&&o.message\|\|"unknown",a=typeof r=="string"&&r.split("js/")[1]\|\|"unknown",f={currentUrl:window.location.href,_csrf:t,logRecords:[{evt:"ERROR_DETECTOR",data:"ERROR_THROWN_FROM_"+a+"_"+u,calEvent:!0}]};return n(f)}var e=document.getElementById("token"),t=e&&e.value;window.onerror=r})();

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (705), with no line terminators
Category:	downloaded
Size (bytes):	705
Entropy (8bit):	5.048344747919151
Encrypted:	false
SSDEEP:	12:2aENAZ6DcZ9XJzB/S/Bf6AtnAutR/6w0BTq2qMR8dpMPu4JJZDMV8eaErYQ7a:2qZ6QZ9ZzBkBf6mhtR6BTq2aLM3HW2Hz
MD5:	C8DDDB4FFFA4A0F4360013DC08CAC19F
SHA1:	3D57D17A2B0909B6C686714AA185CCC2195AB863
SHA-256:	07D5BEDAF5859555A55C31E6A8FF04BEE28FB3A3B2F12E45250B50292A2F7FCD
SHA-512:	E190A13A372C53740311DB1ABC2878FAD652654A2E438312384DF6A43500796D19327B78F028F8818675591C043FF8471F36D3175D17F98B08075DBB9FB93CDE
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/js/lib/dustmotes-iterate.js
Preview:	(function(e,t){typeof define=="function"&&define.amd&&define.amd.dust===!0?define(["dust.core"],t):typeof module=="object"?(module.exports=t(require("dustjs-linkedin")),module.exports.registerWith=t):t(e.dust)})(this,function(e){return e.helpers.iterate=function(t,n,r,i){function h(e,t){return e<t?1:e>t?-1:0}function p(e,r){return s(t,n.push({$key:e,$value:r,$type:typeof r}))}var s=r.block,o,u,a,f,l,c;i=i\|\|{};if(i.key){l=e.helpers.tap(i.key,t,n);if(s)if(!i.sort)for(f in l)l.hasOwnProperty(f)&&(t=p(f,l[f]));else{o=e.helpers.tap(i.sort,t,n),u=[];for(f in l)l.hasOwnProperty(f)&&u.push(f);c=n.global[o],!c&&o==="desc"&&(c=h),c?u.sort(c):u.sort();for(a=0;a<u.length;a++)t=p(u[a],l[u[a]])}}return t},e});

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	3824
Entropy (8bit):	5.294305074122082
Encrypted:	false
SSDEEP:	48:SjzdrlxC4UtzM43bHBxn0YEFYGHHoi8MM4nBJAodM4QMhTQYAbbchxnVcJ3ROH8O:wdrlEhLkLtviMBCbcnuAz0hIK5m6mKA
MD5:	6F1A28AC77F6C6F42D972D117BD2169A
SHA1:	6A02B0695794F40631A3F16DA33D4578A9CCF1DC
SHA-256:	3BFDB2200744D989CEAD47443B7720AFF9D032ABD9B412B141BD89BCD7619171
SHA-512:	70F8A714550CDCB7FCDBC3E8BAD372A679DF15382EEBF546B7E5B18CF4BA53EA74AB19BBA154F3FC177F92ED4245A243621927FCF91125911B06E39D58AF7144
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/opinionLab/onlineOpinionPopup.js
Preview:	/. Spec #22956 OpinionLab. /..define(['opinionLab'], function(opinionLab) {...'use strict';..window.PAYPAL = window.PAYPAL ? window.PAYPAL : {};..var opVars = window.PAYPAL.opinionLabVars;...function showpopup(redirectTo) {...var mywin;...mywin = window.open('', '', 'top=3000,left=3000,width=1,height=1,menubar=0,scrollbars=0,resizeable=1');...if (mywin) {....mywin.document.open....var myURL = ""...../* This JS is customized for sparta because a JS call..... /* Comparing with corresponding XPT code - Removed the External opinionlab js from the popup content as it could not be loaded due to path issue */.....var HTML_txt = "<html><scr" + "ipt language='javascript'>";....HTML_txt = HTML_txt + "_hr='" + opinionLab._hr + "';";....HTML_txt = HTML_txt + "_ht='" + opinionLab._ht + "';";....HTML_txt = HTML_txt + "custom_var='" + opinionLab.custom_var + "';";.....if (( typeof opinionLab.baseurl == 'undefined')) {....} else {.....HTML_txt = HTML_txt + "baseurl='" + opinionLab.baseurl + "';";...

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (586)
Category:	downloaded
Size (bytes):	75660
Entropy (8bit):	5.15337403900488
Encrypted:	false
SSDEEP:	1536:jDy9+HLI6EQI6Eo9rqpoNVAZI6EJFvI6EtI6EeAhqVI6EchjUAhHYEJ4i4DyUI6u:fLI6EQI6Eo1qp0eI6E/I6EtI6EAI6EFG
MD5:	DB2426D7967E9AD4A67B032530EC2B07
SHA1:	D7C1D233D5E148D16867C4E0F912E78FA4109F47
SHA-256:	9AB8D53149B7B9E0C76C88E8B8933DCF455551D2BD0D483A764CB85BD37EA1D2
SHA-512:	6EC99A4614901006FB5EEEB6EAE321B20487E13610734996FDAECB02D30241255F94C052FE6647E994D44636C91476373CADF1F0FA98B13AE1F60B1BC26E6111
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/css/app.css
Preview:	/ method responsible for loading the background image set in CSS /.@-webkit-keyframes rotation {. from {. -webkit-transform: rotate(0deg);. transform: rotate(0deg);. }. to {. -webkit-transform: rotate(359deg);. transform: rotate(359deg);. }.}.@-moz-keyframes rotation {. from {. -moz-transform: rotate(0deg);. transform: rotate(0deg);. }. to {. -moz-transform: rotate(359deg);. transform: rotate(359deg);. }.}.@-o-keyframes rotation {. from {. -o-transform: rotate(0deg);. transform: rotate(0deg);. }. to {. -o-transform: rotate(359deg);. transform: rotate(359deg);. }.}.@keyframes rotation {. from {. transform: rotate(0deg);. }. to {. transform: rotate(359deg);. }.}./* Transform */.@-webkit-keyframes rightToLeft {. 0% {. -webkit-transform: translateX(100%);. transform: translateX(100%);. }. 100% {. -webkit-transform: translateX(0%);. transform: translateX(0%);. }.}.@-moz-keyframes rightToLeft {. 0% {. -moz-tran

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3037)
Category:	downloaded
Size (bytes):	582313
Entropy (8bit):	4.346547395512375
Encrypted:	false
SSDEEP:	1536:h0nEz7D7uNrU0UJUbJfaqk7n/bhOG1GmYKz5diPmxBWLA0hhTZoXw/cte/q5XzFw:hffSwuCvL/FYmviPmJA/6tFynZ
MD5:	BC6F4A89EA274CA210F761F33311A8D8
SHA1:	F82ACF5C72C1BD4CF3A775F24D05D09578CC075B
SHA-256:	D69E1263E3C76366DA84F3E93739C8C222260B7E13BE930C1D479C841CDA5E13
SHA-512:	43AF51ECCA3BF5649DB50FBE2E53758F781696807D2CC25A5B282CB24239B28BB34D5D50CF32B298C495A91F865DA540FF666A0EED8A14A25B952A598A0794A9
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/martech/tm/paypal/mktconf.js
Preview:	/! 2024 dl-pp-latm@paypal.com ver(1.1.0) /./. mktconf.js v1.1.0 - 11-18-2024.* Copyright (c) 2024 dl-pp-latm@paypal.com.*/.(function () {. 'use strict';.. (function () {.. function _iterableToArrayLimit(arr, i) {. var _i = null == arr ? null : 'undefined' != typeof Symbol && arr[Symbol.iterator] \|\| arr['@@iterator'];. if (null != _i) {. var _s,. _e,. _x,. _r,. _arr = [],. _n = !0,. _d = !1;. try {. if (_x = (_i = _i.call(arr)).next, 0 === i) {. if (Object(_i) !== _i) return;. _n = !1;. } else for (; !(_n = (_s = _x.call(_i)).done) && (_arr.push(_s.value), _arr.length !== i); _n = !0);. } catch (err) {. _d = !0, _e = err;. } finally {. try {. if (!_n && null != _i["return"] && (_r = _i["return"](), Object(_r) !== _r)) return;. } finally {. if (_d) throw

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (330)
Category:	downloaded
Size (bytes):	29314
Entropy (8bit):	5.449471861492707
Encrypted:	false
SSDEEP:	768:rw6peNonqZ+tOD/CVzJWFStqf9JAtEPmNF5w/WTad0XAK1FIAhUrYiOjHhff9V/G:0OjBff9VkUu3YTWzTr5
MD5:	6AEC50C9157FB0F30DD46B6D01E969EB
SHA1:	444F950B99B1160929B570F8A20A534F9D813CCD
SHA-256:	BC13F30508143C2E941180E85EE9A5768808B38E9E9DDEBC023A623BF33F4545
SHA-512:	A346DBC64A5114A95EBADE8A0307B18BF6D4158C72AB1D936AB9346BBB73502EC05A5AB736D70C866DC549CD5FCD7F1D86F642E1524BCE90F9877092E1681FFC
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/authchallenge.js
Preview:	'use strict';.var autosubmit = false,..recaptchaCallback,..recaptchaEnterpriseCallback;.var ADS_FPTI = (function(){...var adsPluginDiv = document.getElementById('captcha-standalone'),...csrf = adsPluginDiv.getAttribute('data-csrf'),...sessionId = adsPluginDiv.getAttribute('data-sessionid');...var isFPTIEnabled = typeof PAYPAL !== 'undefined' && typeof PAYPAL.analytics !== 'undefined' &&...typeof PAYPAL.analytics.instance !== 'undefined' && typeof fpti !== 'undefined';...if (isFPTIEnabled){...PAYPAL.analytics.startClientErrorTracking();...PAYPAL.analytics.startCPLTracking();..}...var postData = function (data){....var xmlHttpReq = new XMLHttpRequest();...xmlHttpReq.open('POST', '/auth/logclientdata');...xmlHttpReq.setRequestHeader("Content-Type", "application/json;charset=UTF-8");...xmlHttpReq.timeout = 15000; // 15sec....var dataToSend = {....fpti : data,...._csrf : csrf,...._sessionID : sessionId...};....xmlHttpReq.send(JSON.stringify(dataToSend));..};...var customADSFPTITracking = fu

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	6589
Entropy (8bit):	5.004433854328687
Encrypted:	false
SSDEEP:	192:hyatC/3tqt2mZh9rZT+HhbcGNBD7pc/sK7vOavMj:k/3otbZhJh0FesK7A
MD5:	FD7F53B9355D66C97BDF09E80309C704
SHA1:	17BD574B480D827E047FEDBFBE71103A9808AC71
SHA-256:	1DE7DCE113E00547082B160C7E6E08E329E081D6AFC572EE8CCE1105B05F2645
SHA-512:	010A2167E3651F463B6631FD8B269AABB0F655CDACEF5A31A1BA3529F5B41D43CE83EBEA70B717454416BF0C1D535CD7603C6BFC0BF2214FFB210006727BA279
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/webcaptcha/grcenterprise_v3_static.html
Preview:	<html>.<head>..<meta name="viewport" content="width=device-width, initial-scale=1.0">..<style>....grecaptcha-badge{....bottom: 3px !important;...}..</style>..<script>....var pp_loc_map = {"ar_EG":"ar","da_DK":"da","de_DE":"de","de_DE_AT":"de-AT","de_DE_CH":"de-CH","en_AU":"en",...."en_GB":"en-GB","en_US":"en","es_ES":"es","es_XC":"es-419","fr_CA":"fr-CA","fr_FR":"fr",...."fr_XC":"fr","he_IL":"iw","id_ID":"id","it_IT":"it","ja_JP":"ja","ko_KR":"ko","nl_NL":"nl",...."no_NO":"no","pl_PL":"pl","pt_BR":"pt-BR","pt_PT":"pt-PT","ru_RU":"ru","sv_SE":"sv","th_TH":"th",...."tr_TR":"tr","zh_CN":"zh-CN","zh_HK":"zh-HK","zh_TW":"zh-TW","zh_XC":"zh-CN","ar":"ar","da":"da",...."de":"de","en":"en","es":"es","fr":"fr","id":"id","ko":"ko","pt":"pt","ru":"ru","zh":"zh-CN"};.....function getGoogLocale(l,c){....try{.....var loc_lower = l.toLowerCase();.....if(c !== undefined && (c.toLowerCase() === 'at' \|\| c.toLowerCase() === 'ch') && (l === 'de_DE')) {......l = l + '_' + c.toUpperCase();.....}.....if(loc_

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (4455), with no line terminators
Category:	dropped
Size (bytes):	4459
Entropy (8bit):	5.065317516797803
Encrypted:	false
SSDEEP:	96:kc/0LOMPkB9lNkSL5QQncujCxbXABHR8Yxbl4OStqAI:Z/4OM8B9lSSFQQnFexbmZxlqpI
MD5:	95C3DE706B3F56B72C4727B7F1D1BF1B
SHA1:	1395944FBDF8201644DABFAC6CE244710724A06E
SHA-256:	093D776B5560002F1A43CEC835C3C6E76411138A2E8434CB5621C4B221110FC0
SHA-512:	77491352C21DD5C2A8E9B896011AEE4133352B645C8DC9F7CFDA5DEE8D18071BF5CE1D844135E6CCA4BC518FE1D272893AA27BE4402155887C985AEF4329E3F4
Malicious:	false
Reputation:	low
Preview:	define([],function(){return function(e){function n(r){if(t[r])return t[r].exports;var i=t[r]={exports:{},id:r,loaded:!1};return e[r].call(i.exports,i,i.exports,n),i.loaded=!0,i.exports}var t={};return n.m=e,n.c=t,n.p="",n(0)}([function(e,t,n){"use strict";var r=n(1);e.exports=function(e,t){t=t\|\|{},r(e,function(){},t,t.loader)},e.exports.registerWith=e.exports},function(e,t,n){"use strict";function o(e,t,n){var r=e.shiftBlocks,i=e.push;e.shiftBlocks=function(e){return r.call(this,a(e,function(e){return u(e,t,n)}))},e.push=function(){var e=i.apply(this,arguments);return o(e,t,n),e}}function u(e,t,n){return function(r,i){return i=i.push({intl:{messages:t,bundle:n}}),e(r,i)}}function a(e,t){var n={};return Object.keys(e).forEach(function(r){n[r]=t(e[r])}),n}function f(e,t,n){function i(t){if(!t)return null;if(typeof t=="function"&&t.template)return t.template;if(e.isTemplateFn(t))return t}var r=e.onLoad;if(!r)throw new Error("dust.onLoad must be configured to use automatic content loading"

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7845), with no line terminators
Category:	downloaded
Size (bytes):	7845
Entropy (8bit):	5.533132852324268
Encrypted:	false
SSDEEP:	192:uRdzEfNmNutaU+ldy9G++QfXh3D6NhRS3Euq:uDAlm4+ldyAQ29uEz
MD5:	89DDFD249765BDEB5D374267E7DAC475
SHA1:	2DB490F040C27D1EAB5FCBA86E939D6837ACCFD6
SHA-256:	53A9FD4A377A5C66BDCA2C2DAD33EBB8E7387B1F314F42849FD7A1733BF77B6F
SHA-512:	2A39E696B5EBFF972758F6CC17D87187405D04F29A5A34AB1FED806B51301BF67FA40F80631BEAAF53C32BC523EBA3D26F7FC425316F5D1498DCFA30A60DA17E
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/js/browser_modules/dusthelpers-supplement/index.js
Preview:	(function(e,t){typeof define=="function"&&define.amd&&define.amd.dust===!0?define(["dust.core"],t):typeof exports=="object"?module.exports=t(require("dustjs-linkedin")):t(e.dust)})(this,function extend(dust){function tokenize(t){"use strict";var n={"((":1,"))":1,"!!":1,"<!":1,">!":1,">=!":1,"<=!":1,"==!":1,"!=!":1,"&&!":1,"\|\|!":1,"]&&":1,"]\|\|":1,"]>":1,"]<":1,"]<=":1,"]>=":1,"]==":1,"]!=":1,"].":1,"[(":1,"])":1,")&&":1,")\|\|":1,")>":1,")<":1,")<=":1,")>=":1,")==":1,")!=":1,")!":1,")]":1,"]]":1,"&&(":1,"\|\|(":1,">'":1,"<(":1,"<=(":1,">=(":1,"==(":1,"!=(":1,"!(":1},r=[],i=0,s,o,u,a,f,l,c,h,p;if(tokCache[t])return tokCache[t];while(i<t.length){u=i,a=t[i],o=t.charCodeAt(i);if(o===SPACE\|\|o===TAB)i++;else if(o===QUOTE\|\|o===APOS){f=STR,s=a,i++;while(i<t.length){t.charCodeAt(i)===BACKSLASH&&i++,s+=t[i];if(t.charCodeAt(i)===o)break;i++}s.charCodeAt(s.length-1)!==o&&(f=ERR,s='"Unclosed string constant"'),pushToken(r,f,s.slice(1,s.length-1)),i++}else if(o>=ZERO&&o<=NINE\|\|o===MINUS\|\|o===DOT&&t.charC

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1910), with no line terminators
Category:	downloaded
Size (bytes):	1910
Entropy (8bit):	5.8473807450949264
Encrypted:	false
SSDEEP:	48:iEAhpWKo75XI2ovtUjPKtXsDXx/gE1sc/LrwUnG:pATLMI5czjs2suG
MD5:	64DD769EB22BDF0158F63A50EA1F417A
SHA1:	C6EC4ABF8A106559877CA9D7B3F3A1527AEFEF23
SHA-256:	B76E6561318A1B90EBAE39CA8F7E8013CC3019AC7A1486509FF208B34A7432A3
SHA-512:	BC1B23BECD0CE8B515FBDD3B8D37D1E037C3A3DC9E06881D0AFB79C17C45C23FA3CA214F2FF27B73A269A326CE7314614ECFA571DD561F4F43274A512C4568CE
Malicious:	false
Reputation:	low
URL:	https://www.recaptcha.net/recaptcha/enterprise.js?onload=recaptchaEnterpriseCallback&render=explicit&hl=en
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var E='enterprise',a=w[N]=w[N]\|\|{},gr=a[E]=a[E]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.recaptcha.net/recaptcha/enterprise/';(cfg['enterprise']=cfg['enterprise']\|\|[]).push(true);(cfg['render']=cfg['render']\|\|[]).push('explicit');(cfg['onload']=cfg['onload']\|\|[]).push('recaptchaEnterpriseCallback');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A7uxtj3+hJmOcZFooFT0Ps276PuOqGnM1jfoPbFvxWp73VC60LnYGzayHVvcFeEiF0qrwy7fQAL+gGVXU+f9IQcAAACTeyJvcmlnaW4iOiJodHRwczovL3JlY2FwdGNoYS5uZXQ6NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19626)
Category:	downloaded
Size (bytes):	19807
Entropy (8bit):	5.222852482936355
Encrypted:	false
SSDEEP:	384:X6mbfNn/COzhRiHbmHKQYVOf/OwJXxshUkk6UXSMxag8ZoCdkw5lPxzavwpfCQ:xbJKOUVVq/dJXxqkF9+bGopqQ
MD5:	FD4D2AC5869B6E52C5205D0D336CF69F
SHA1:	F27BC91E0B46135489CD808261327FF4F92C61D8
SHA-256:	C50F9519695E63EB34CB4740B88BD90FFA7F308094C56208EB1E80D6670DBB3E
SHA-512:	6852405A913D2AB86B670CE01EA9A71311B812068AA4C52C8DFC4C95BDF98E28E639D189A1187C6A074B2B96AA4F341193173857C26BC8BC6A0D78FD639082D2
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/js/lib/underscore-1.13.6.js
Preview:	// (c) 2009-2022 Jeremy Ashkenas, Julian Gonggrijp, and DocumentCloud and Investigative Reporters & Editors..// Underscore may be freely distributed under the MIT license...(function(e,t){typeof exports=="object"&&typeof module!="undefined"?module.exports=t():typeof define=="function"&&define.amd?define("underscore",t):(e=typeof globalThis!="undefined"?globalThis:e\|\|self,function(){var n=e._,r=e._=t();r.noConflict=function(){return e._=n,r}}())})(this,function(){function w(e,t){return t=t==null?e.length-1:+t,function(){var n=Math.max(arguments.length-t,0),r=Array(n),i=0;for(;i<n;i++)r[i]=arguments[i+t];switch(t){case 0:return e.call(this,r);case 1:return e.call(this,arguments[0],r);case 2:return e.call(this,arguments[0],arguments[1],r)}var s=Array(t+1);for(i=0;i<t;i++)s[i]=arguments[i];return s[t]=r,e.apply(this,s)}}function E(e){var t=typeof e;return t==="function"\|\|t==="object"&&!!e}function S(e){return e===null}function x(e){return e===void 0}function T(e){return e===!0\|\|e==

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (528)
Category:	dropped
Size (bytes):	15005
Entropy (8bit):	5.360552389101315
Encrypted:	false
SSDEEP:	384:bSzgUw7DiHCcInRKIlmSBD8FQBa0SwDQWURhU9119z4p:gZw7eHCcMRKwB8QQwDtchU9119z6
MD5:	0CB51C1A5E8E978CBE069C07F3B8D16D
SHA1:	C0A6B1EC034F8569587AEB90169E412AB1F4A495
SHA-256:	9B935BDA7709001067D9F40D0B008CB0C56170776245F4FF90C77156980FF5E9
SHA-512:	F98D0876E9B80F5499DDA72093621588950B9708B4261C8AA55912B7E4851E03596185486AFB3A9A075F90F59552BB9EC9D2E67534A7DEB9652BA794D6EE188D
Malicious:	false
Reputation:	low
Preview:	/. RequireJS 2.1.6 Copyright (c) 2010-2012, The Dojo Foundation All Rights Reserved.. Available via the MIT or new BSD license.. see: http://github.com/jrburke/requirejs for details./.var requirejs,require,define;.(function(ba){function J(b){return"[object Function]"===N.call(b)}function K(b){return"[object Array]"===N.call(b)}function z(b,c){if(b){var d;for(d=0;d<b.length&&(!b[d]\|\|!c(b[d],d,b));d+=1);}}function O(b,c){if(b){var d;for(d=b.length-1;-1<d&&(!b[d]\|\|!c(b[d],d,b));d-=1);}}function t(b,c){return ha.call(b,c)}function m(b,c){return t(b,c)&&b[c]}function H(b,c){for(var d in b)if(t(b,d)&&c(b[d],d))break}function S(b,c,d,m){c&&H(c,function(c,l){if(d\|\|!t(b,l))m&&"string"!==typeof c?(b[l]\|\|(b[l]={}),S(b[l],.c,d,m)):b[l]=c});return b}function v(b,c){return function(){return c.apply(b,arguments)}}function ca(b){throw b;}function da(b){if(!b)return b;var c=ba;z(b.split("."),function(b){c=c[b]});return c}function B(b,c,d,m){c=Error(c+"\nhttp://requirejs.org/docs/errors.html#"+b);c.re

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6564)
Category:	dropped
Size (bytes):	6565
Entropy (8bit):	5.382243764098105
Encrypted:	false
SSDEEP:	96:0vpl2sfWl0basxnWDEIY3gaBHzu0JtVGTHlsqsPlpDklR0klffXYjyEoHBp:k+euW/WDi3RzrSshmR0I3XUuHT
MD5:	5C0B394C3F25CFE7F093C013D9396AD5
SHA1:	6B11C3119C2AF3EB4A979589D765ED70408DC6CD
SHA-256:	CAE0AF2E9035626EBCC82AEDFFE6939E8DE145879607CC94C5F1EA379F94A12B
SHA-512:	9A52E6875C4FA651AE0888B44A2A9ABF93110E3E524F1EEDBEB83FFC1000210EE5F904C5E1CA0E9A82EC642BAE7B90DA9C6020C2CB01D1DEB1E72464BB5A4BAD
Malicious:	false
Reputation:	low
Preview:	var PAYPAL=window.PAYPAL\|\|{};!function(){"use strict";var t=function(t){var e=function(t,e,n){n[0]=(255&(0\|t[e]))<<24\|(255&(0\|t[e+1]))<<16\|(255&(0\|t[e+2]))<<8\|255&(0\|t[e+3])\|0,n[1]=(255&(0\|t[e+4]))<<24\|(255&(0\|t[e+5]))<<16\|(255&(0\|t[e+6]))<<8\|255&(0\|t[e+7])\|0},n=function(t,e){for(var n=32,r=0;n-- >0;)t[0]+=(t[1]<<4^t[1]>>5)+t[1]^r+e[3&r],r+=-1640531527,t[1]+=(t[0]<<4^t[0]>>5)+t[0]^r+e[r>>11&3]},r=function(t){for(var e=0,n=0;n<4;n++)e\|=t.charCodeAt(n)<<8n;return isNaN(e)?0:e},i=function(t,i){var o=new Array(2),a=new Array(8),s=new Array(4),u=0,c=0,d=t.split("").map((function(t){return t.charCodeAt(0)}));for(c=0;c<4;c++)s[c]=r(i.slice(4c,4*(c+1)));for(c=0;c<d.length;c+=8)e(d,c,o),n(o,s),a[u]=o[0],a[u+1]=o[1],u+=2;return a};var o={sh:function(t){for(var e=0,n=0;n<t.length;n++)e+=t.charCodeAt(n);return e&=e},addEventListener:function(t,e,n){void 0!==t.addEventListener?t.addEventListener(e,n,!1):void 0!==t.attachEvent&&t.attachEvent("on"+e,n)},removeEventListener:function(t,e,n){void 0!==

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (573), with no line terminators
Category:	dropped
Size (bytes):	573
Entropy (8bit):	4.780399097912705
Encrypted:	false
SSDEEP:	12:1yBrz1etISdyDaoTwVh5XpoT62OCBIfI/6ZAIkzyQ/ya/n7:1yp1etI3WmT62O2IfI/62Ira/n7
MD5:	E131BF444C0DECF60E1F399F407650C4
SHA1:	BF7B4F4886F4CFF3D5E506E807BC94FC8210352F
SHA-256:	8BE5545BAD1DF71A1AB6CCA877305F3FB287C773C51ECED1270C1B1FF348CC0C
SHA-512:	E10F3CC850CE29492F86396BDEFB336FBDFC14B2823BD537FE899063B54A1A1DB0C900B7DF0195EEBF7568E2D74B0442CC7084512FA54DFA5C69509344EBF5D7
Malicious:	false
Reputation:	low
Preview:	define(["newgat","underscore","backbone"],function(e,t,n){"use strict";var r=n.View.extend({template:null,render:function(){var n=e.viewRenderer,r=this.template,i=this.serialize();return t.bindAll(this,"_doRender","renderError","afterRender"),this.beforeRender(),n.render(r,i).done(this._doRender).fail(this.renderError).always(this.afterRender),this},_doRender:function(e,t){this.$el.html(e)},beforeRender:function(){},afterRender:function(){},renderError:function(e){},serialize:function(){var e=this.model\|\|this.collection;return e&&e.toJSON?e.toJSON():{}}});return r});

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3175
Entropy (8bit):	5.113464294316265
Encrypted:	false
SSDEEP:	96:nbhJ7QEROj/XoucqKTXXwfcIPpIwx75TNFkbaVyQxI1lxBJw:bXTO/HcqmXj8IwJ5pFkbaYKIFrw
MD5:	2454DC0BF112B2541FBA37CFD2E4CBC5
SHA1:	E8E86957B77AA457C757B9D4231BD46F70176002
SHA-256:	18657DF333EEA496F8322AFC0903F5ABD740A53FDD71B0730F4070911CD704E9
SHA-512:	1AFB2B1C951B1304D00F39BC4E0027F95CD4D9CBF74346305E8604236212E299D5CC50E78128165EF1F46689377209BB645095BEA0C1D8A7378002254CCC27D9
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/view/authcaptcha.js
Preview:	/*. Created by hdoan on 10/8/14.. */..define(['jquery', 'pageView', 'validation', 'errorDisplay'],...function ($, PageView, Validation, ErrorDisplay) {....'use strict';....var View = PageView.extend({.....el: '#captcha-standalone', // The dust template needs a section with id of 'captcha-standalone'.....//initialize form....initialize: function () {......ErrorDisplay.markError(this);......// Set back to hide on the popstate.....$(window).bind('popstate', function (event) {......if (!event.state) {.......$('.modal-overlay,.modal-animate').addClass('hide');......}.....});......// When the form is invalid, focus on the first input with an error.....Validation.on('invalidchallenge', function(form) {......ErrorDisplay.focusError(form);.....}, this);......// Adding handlers to validate form field.....Validation.init(this);......// Setting the page title.....$('title').html(this.$el.attr('data-title'));.....},.....events: {.....'click .captchaRefresh': 'refreshCaptcha',.....'click .captch

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5219)
Category:	downloaded
Size (bytes):	5369
Entropy (8bit):	5.146156831104758
Encrypted:	false
SSDEEP:	96:IeZ460AsQUoQ+MBjHwkWqY1V/Z+wZAwZSqrpV3+enQYbJIfvROvTYe:I/HrLXHklUNQrpV3Rxd
MD5:	E635C1320CD7EC0E330B5E6A464AB34A
SHA1:	F2A6BA50CAFA1F5C2E81504971E00ECF0598647E
SHA-256:	F507525B16FE106143BC8DD760BE56C9931C3D3C9DBB30182413CBE3EB318188
SHA-512:	27ED0FF3EF8C93B6A74CA320070C32B7962B94B790C844B91D43F953C800AF8BD896C7F57867F15C728947BE56D8D665A138961655FAF499B7DBA33EF825978A
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/js/browser_modules/dustjs-helpers/dist/dust-helpers.js
Preview:	/! dustjs-helpers - v1.6.3. https://github.com/linkedin/dustjs-helpers.* Copyright (c) 2015 Aleksander Williams; Released under the MIT License */..(function(e,t){typeof define=="function"&&define.amd&&define.amd.dust===!0?define(["dust.core"],t):typeof exports=="object"?module.exports=t(require("dustjs-linkedin")):t(e.dust)})(this,function(e){function r(e){if(n[e])return;t(e,"Deprecation warning: "+e+" is deprecated and will be removed in a future version of dustjs-helpers","WARN"),t(null,"For help and a deprecation timeline, see https://github.com/linkedin/dustjs-helpers/wiki/Deprecated-Features#"+e.replace(/\W+/g,""),"WARN"),n[e]=!0}function i(e){return e.stack.tail&&e.stack.tail.head&&typeof e.stack.tail.head.__select__!="undefined"}function s(e){return i(e)&&e.get("__select__")}function o(e,t){var n=e.stack.head,r=e.rebase();return e.stack&&e.stack.tail&&(r.stack=e.stack.tail),r.push({__select__:{isResolved:!1,isDefaulted:!1,isDeferredComplete:!1,deferreds:[],key:t}}).push(n,e.s

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16024)
Category:	downloaded
Size (bytes):	16052
Entropy (8bit):	5.3519984983543845
Encrypted:	false
SSDEEP:	384:XcGfcUvwKvmwdfdx7ACD0TXXIxjecdXJwEf5yFm0txf:OUVvmwdfPOgHdXJJW
MD5:	90355639E97F4CC3725A100B0B33ED19
SHA1:	0F09081F9F58EB793C8F27EAFB90154A04468710
SHA-256:	EFC3AD603DCA3C78E67493ADB079676731FD72C4204DBF7264D22E897A271267
SHA-512:	8003D80291F35C0BA499E3C5FC74FC4506B654FF62CC1D209538D127A26FC9A19882618F49CC17D67FD0E858D736F1A1DF414A39D5562AC620D2571611B44BC0
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/martech/tm/paypal/mktgtagmanager.js
Preview:	/@ 2024 PayPal (v1.0.1) /.!function(){"use strict";function f(t){if(!t\|\|t.constructor!==Object&&t.constructor!==Array)return t;var e,n=t.constructor();for(e in t)n[e]=f(t[e]);return n}function s(t,e){var n;return function(){return t&&(n=t.apply(e\|\|this,arguments),t=null),n}}var e,r={},D=-1,l=(window.PAYPAL=window.PAYPAL\|\|{PubSub:{subscribe:function(t,e){if("function"!=typeof e)return!1;t="symbol"==typeof t?t.toString():t,Object.prototype.hasOwnProperty.call(r,t)\|\|(r[t]={});var n="uid_"+String(++D);return r[t][n]=e,n}}},window.PAYPAL.PubSub),t=(window.fpti=window.fpti\|\|{},function t(){}),n=function n(){return{}},o=("undefined"==typeof JSON&&((JSON={}).stringify=t,JSON.parse=n,window.JSON=JSON),"performance"in window&&window.performance\|\|{}),d=(o&&!o.now&&(e=o.timing,o.now=function(){var t=(new Date).getTime()-(e&&e.navigationStart\|\|0);return 0<t?t:0}),String.prototype.trim\|\|(String.prototype.trim=function(){return this.replace(/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,"")}),Array.prototype

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	102
Entropy (8bit):	4.8542370785933695
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQK6OsL9dhX3QKTEVgWaee:PLKdXNQKM9dh7EVgL
MD5:	1ACFF473F06164968C3337635A5F984B
SHA1:	9B759A282CCDF15DA6DAF4CDE7B57D7FEF387ADF
SHA-256:	91351C02069D22E494C333D0C81CF0A557DDCC41E34CFCDD2606000AC6251018
SHA-512:	3FB69BC6EAF6A92D9269E2AAEA56E1A632C0EA25716A8B8D3E813C30FD4028EF39EF91219C867D0FC6D1CAAD388D4AACBC83177E09E1DCC39210D043C0553BB8
Malicious:	false
Reputation:	low
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/MskOi9BoTT5Vt82JMh92Dvhu/recaptcha__en.js');

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65431)
Category:	downloaded
Size (bytes):	177743
Entropy (8bit):	4.410090234686878
Encrypted:	false
SSDEEP:	3072:QTY1n3dDEthymN6mNbPoZLEkCgw2MK2xZ1w2pVJMnnnnp3oqSfDXCU:1lOsCj7Qp3EfDn
MD5:	B4F2EDBEA31DCEC5C70F4F1BF574B162
SHA1:	94C164B7A2F52B4FB2A8A61A10ACBB4C2AA4E2B5
SHA-256:	7B093CBB49ADC2923B6EF6B58AD22F87BA4A008E0ECB27665A76CAB5E9DEEB40
SHA-512:	6F66035FBBC99326837C79F92965AF24EBF028AE6CF7BCD532985E6804F76DB7DC2779F8FF24B19D9444E693D5020085EF961B5A87D73E5B6C6CC165782137FA
Malicious:	false
Reputation:	low
URL:	https://ddbm2.paypal.com/tags.js
Preview:	/** DataDome is a cybersecurity solution to detect bot activity https://datadome.co (version 4.38.0) */ .!function e(t,n,o){function i(r,s){if(!n[r]){if(!t[r]){var d='\x66\x75\x6e\x63\x74\x69\x6f\x6e'==typeof require&&require;if(!s&&d)return d(r,!0);if(a)return a(r,!0);var c=new Error('\x43\x61\x6e\x6e\x6f\x74\x20\x66\x69\x6e\x64\x20\x6d\x6f\x64\x75\x6c\x65\x20\x27'+r+'\x27');throw c[['\x63\x6f\x64\x65']]='\x4d\x4f\x44\x55\x4c\x45\x5f\x4e\x4f\x54\x5f\x46\x4f\x55\x4e\x44',c;}var h=n[r]={exports:{}};t[r][0][['\x63\x61\x6c\x6c']](h[['\x65\x78\x70\x6f\x72\x74\x73']],function(e){return i(t[r][1][e]\|\|e);},h,h[['\x65\x78\x70\x6f\x72\x74\x73']],e,t,n,o);}return n[r][['\x65\x78\x70\x6f\x72\x74\x73']];}for(var a='\x66\x75\x6e\x63\x74\x69\x6f\x6e'==typeof require&&require,r=0;r<o[['\x6c\x65\x6e\x67\x74\x68']];r++)i(o[r]);return i;}({1:[function(e,t,n){t[['\x65\x78\x70\x6f\x72\x74\x73']]=function(){this[['\x65\x6e\x64\x70\x6f\x69\x6e\x74']]='\x68\x74\x74\x70\x73\x3a\x2f\x2f\x61\x70\x69\x2d\x6a\x73

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1997
Entropy (8bit):	5.0050192129706
Encrypted:	false
SSDEEP:	48:syq5exVy+GtySao6qP9PGp161pyRDhKOJUoV0gQ84fTbln:7q5eO+GsSao6UGp8rSVKcUo2gp47bl
MD5:	1B66EA06B0CCC5574AA1593988231A8C
SHA1:	FBF4CC6664D86A91D3176E6B2A3DA684FC6E6EDA
SHA-256:	7173550FD32A664B4075E4C34D8BBCFC3725AFB987CF3DBD7FBA10AFA479A6B5
SHA-512:	9BF4C1894C7CFCC65690CC70D5A191C1CF073B39D70C3597790143AFCC0CEECDAB71928FFE49FDFF202312A161F38D2779ACF8B5D6D15B6614326D53A47EA068
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/config.js
Preview:	/* global requirejs:true */.requirejs.config({..deps: ['app'],..paths: {..."jquery":.....'lib/jquery-1.12.4',..."jqueryUI":.....'lib/jquery.ui.mini',..."json":......(typeof JSON === 'undefined') ? 'lib/json2' : 'empty:',..."underscore":....'lib/underscore-1.13.4',..."backbone":.....'lib/backbone-1.5.0.min',..."backboneSubroute":...'lib/backbone-subroute-0.4.5.min',..."dust":......'lib/dust-core',..."nougat":.....'core/nougat',..."BaseView":.....'core/baseView',..."dust-helpers" :...'lib/dust-helpers',..."dust-helpers-supplement":.'lib/dust-helpers-supplement',..."dustmotes-iterate":..'lib/dustmotes-iterate',..."fso-helper":....'lib/fso-helper',..."fso":......'lib/fso',..."browserId":....'lib/bid',...."pageView":.....'view/pageView',..."login":.....'view/login',...'notifications':...'view/notifications',....//Core Components..."lap":......'components/textInput/lap',..."textField":....'components/textInput/textField',...'selectDropdown':...'components/selectDropdown',....//Widgets..."val

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7202), with no line terminators
Category:	downloaded
Size (bytes):	7202
Entropy (8bit):	5.355379827732298
Encrypted:	false
SSDEEP:	192:GeLYFa7EGANz8HbcLvkJ26p0HLlIuAM0NzTKBB0nkV9cofMctaUc:fXoxYHbcLa0HL2uRgWwnsGof9taj
MD5:	CA4C1E3DC374D2C6966967C820647C45
SHA1:	556C0E5DC7ADED4F7D7EF6798D74E79A546A49E8
SHA-256:	B54CD3D43C06F2206B441706CB2100AB2AF2BC09D4780CBE899DE6480041701B
SHA-512:	0912FBF7B5E5B1C2D5F4FB6847F1FF94A9987F5F1408402F2B5D8D2CB7DF81FFDFCA81F5DCF02ACA34184479482AD494824AE9E5CA546ECAD3EC0900644D5443
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/pa/3pjs/tl/6.4.65/patlcfg.js
Preview:	TLT.addModule("digitalData",function(){return{init:function(){},destroy:function(){},onevent:function(webEvent){if("object"==typeof webEvent&&webEvent.type&&webEvent)switch(webEvent.type){case"load":case"unload":"undefined"!=typeof window.fpti&&(qKeys=window.fpti,TLT.logCustomEvent("FPTI",{description:"FPTI",action:"Retrieve",value:qKeys}))}var qKeys}}}),function(){"use strict";var config,msgPrivacyPatterns,lastMsg,TLT=window.TLT,asyncReqOnUnload=/WebKit/i.test(navigator.userAgent),useFetch=!!window.fetch,useBeacon=!0,useWorker=!1,maxQueueEvents=30,maxQueueSize=3e4,queueTimerInterval=2e4,checkEndpoint=!1,enableDomCapture=!0,domDiffEnabled=!0;if("function"==typeof TLT.isInitialized&&TLT.isInitialized())console.warn("Tealeaf has already been initialized in this page. Aborting this initialization.");else{if(TLT.utils.isLegacyIE)return console&&(console.warn("This version of the UIC does not support Internet Explorer 8."),console.info("Applications requiring Internet Explorer 8 (or below)

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 32x32, 32 bits/pixel, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	5430
Entropy (8bit):	3.4364435707992746
Encrypted:	false
SSDEEP:	48:++/pSKnJ/3cCXndBlr9aPZ0M0V+2hDTGlpFRlcPgCOfU:+ASKJPcCXjgZ03Gre9
MD5:	E1528B5176081F0ED963EC8397BC8FD3
SHA1:	FF60AFD001E924511E9B6F12C57B6BF26821FC1E
SHA-256:	1690C4E20869C3763B7FC111E2F94035B0A7EE830311DD680AC91421DAAD3667
SHA-512:	ACF71864E2844907752901EEEAF5C5648D9F6ACF3B73A2FB91E580BEE67A04FFE83BC2C984A9464732123BC43A3594007691653271BA94F95F7E1179F4146212
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/en_US/i/icon/pp_favicon_x.ico
Preview:	...... .... .....&......... .h.......(... ...@..... ............................................................................................................................................................................................................................................................................................................................................................................................................................................................................0...0...0...0.............................................................................................................>..............X...........................................................................................................\.......................................................................................................$...<...:...:...:..d......................................................................................................q

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	25417
Entropy (8bit):	4.641664509877341
Encrypted:	false
SSDEEP:	384:fe93jGIJI2AN/yRikI+aDDe2MJS0KYqKDmBVogMorGNq49n7jneB54DpJqhhwAW4:Y4+/KBVC7xVs
MD5:	4FB1FFD27A73E1DBB4DD02355A950A0B
SHA1:	C1124B998C389FB9EE967DCCF276E7AF56F77769
SHA-256:	79C488E61278C71E41B75578042332FB3C44425E7DBB224109368F696C51E779
SHA-512:	77695F1A32BE64925B3564825B7CB69722A2C61B23665D5B80B62DEC5692579C12ACCABB970954F0BF73DFDBF861BF924F7CC1486E754E3A8F594B2969F853F2
Malicious:	false
Reputation:	low
Preview:	/! Dust - Asynchronous Templating - v2.6.2. http://linkedin.github.io/dustjs/.* Copyright (c) 2015 Aleksander Williams; Released under the MIT License /.(function (root, factory) {. /global define*/. if (typeof define === 'function' && define.amd && define.amd.dust === true) {. define('dust.core', [], factory);. } else if (typeof exports === 'object') {. module.exports = factory();. } else {. root.dust = factory();. }.}(this, function() {. var dust = {. "version": "2.6.2". },. NONE = 'NONE', ERROR = 'ERROR', WARN = 'WARN', INFO = 'INFO', DEBUG = 'DEBUG',. EMPTY_FUNC = function() {};.. dust.config = {. whitespace: false,. amd: false. };.. // Directive aliases to minify code. dust._aliases = {. "write": "w",. "end": "e",. "map": "m",. "render": "r",. "reference": "f",. "section": "s",. "exists": "x",. "notexists": "nx",. "block": "b",. "partial": "p",. "helper": "h". };.. (function initLogging() {. /

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2483), with no line terminators
Category:	dropped
Size (bytes):	2483
Entropy (8bit):	5.014711721076513
Encrypted:	false
SSDEEP:	48:DqHGbpgqYXnOPDi4Ta5eaIqKn61/lq3XAVG+wKgj:DqUJY3OGteTqJlcL9
MD5:	9546C4415837D6088EEA6ED5262F65AE
SHA1:	3D333C384894EDCAFBBBD9E26D22567E74743F43
SHA-256:	A9B59501FACDBA2D613578549A901AFA5F98BBA4D301B3B7C4AF53178E84D75C
SHA-512:	343538B1814EB8C012335490127DA1FFC8ADF8E2C58DA1F18DC3E7F23A396D861229F2381AF4D46E5AC0A0D320A8FE6D96883F5EA2F46085BADF4AF84F502BE4
Malicious:	false
Reputation:	low
Preview:	define("newgat",["jquery","underscore","dustjs-linkedin","dust-makara-helpers","dusthelpers-supplement","dustmotes-iterate","pulvus-provide","dustjs-helpers","_languagepack"],function(e,t,n,r){function u(e,t,n){if(Array.prototype.filter)return e.filter(t);var r=[],i=e.length-1,s=null;while(i>-1)s=e[i],t.call(n,s,i,e)&&r.unshift(s),i--;return r}function a(e,t,n){if(e instanceof Array&&Array.prototype.forEach)return e.forEach(t,n);var r=Object(e),i=null,s=null;for(i in r)if(r.hasOwnProperty(i)){s=t.call(n,r[i],i,r);if(s===!1)break}}function f(e,t){var n=null;for(n in e)e.hasOwnProperty(n)&&(t[n]=e[n]);return t}function l(e){return a(Array.prototype.slice.call(arguments,1),function(t){f(t,e)}),e}r.registerWith(n,{autoloadTemplateContent:!0,loader:function(e,t,n){var r=document.documentElement.getAttribute("locale").replace("_","-");require(["_languagepack"],function(e){n(null,e[r][t])})}});var i=null,s=null,o=null;return i=function(){},i.prototype={render:function(t,n){var r=new e.Deferre

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	2420
Entropy (8bit):	4.972597027356834
Encrypted:	false
SSDEEP:	48:gmlhVeoLah0uOD5hgujkaUhoV0nahQEWcTAjL3CW6lnOiLq7lhQETJN:xIrXOzgibVGlEWc7XlnDETJN
MD5:	E36C272EBDBD82E467534A2B3F156286
SHA1:	BFA08A7B695470FE306A3482D07A5D7C556C7E71
SHA-256:	9292DC752A5B7C7EC21F5A214E61620B387745843BB2A528179939F9E2423665
SHA-512:	173C0F75627B436C3B137286EA636DCAF5445770D89DA77F6F0B416E0E83759879D197A54E15A973D2EB5CAF90B94014DA049DE6CC57DBD63CAB3E2917FBA1BA
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/widgets/analytics.js
Preview:	/global define:true, s:true /../*. @fileOverview Analytics . link and error tracking. * @name Analytics Widget. * @author dquock. /.define(["jquery", "BaseView", "nougat"],..function ($, BaseView, nougat) {..."use strict";....var View = BaseView.extend({.....el: "body",......events: {......// track any link with data-pagename......"click a[data-pagename], input[data-pagename], label[data-pagename]": "trackLink"......},....../..... .Link tracking..... .@linkname = name attribute..... .@pageName = data-pagename the link is going to..... .@pageName2 = data-pagename2 the link is going to..... .@prop27 = pagename(the one you're currently on)\|linkname..... .@prop28 = data-transactiondetailslinks..... .also sets div#analytics prop attrs for automation..... */.....trackLink: function (event) {......var $link = $(event.currentTarget),.......pageName = $link.attr("data-pagename") \|\| s.pageName,.......pageName2 = $link.attr("data-pagename2") \|\| s.prop25;.......if (s) {.......// s

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	33514
Entropy (8bit):	5.060602493646791
Encrypted:	false
SSDEEP:	768:jDy9k42NxFGFsFeesFGFsFeSXqHcFGFsFe6XXqHjFGFsFeF2kFGFsFeFXFGFsFes:jDy9k42NxI6EesI6EMI6E/I6EgkI6EdJ
MD5:	D4BFBFA83C7253FAE8E794B5AC26284A
SHA1:	5D813E61B29C8A7BC85BFB8ACAA5314AEE4103E3
SHA-256:	B0169C2A61B9B0DDC1D677DA884DF7FD4D13CE2FD77255378764CCA9B0AA6BE6
SHA-512:	7D41C055D8AB7CE9E1636E6A2EE005B1857D3CB3E2B7E4B230BBDCC2FC0BA2DA4622EED71B05FB60A98F0CF3CBDA54AC4962BCDB2344EDF9B5DFBCCD87A4925A
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/css/app.css
Preview:	/ method responsible for loading the background image set in CSS /.@-webkit-keyframes rotation {. from {. -webkit-transform: rotate(0deg);. transform: rotate(0deg);. }. to {. -webkit-transform: rotate(359deg);. transform: rotate(359deg);. }.}.@-moz-keyframes rotation {. from {. -moz-transform: rotate(0deg);. transform: rotate(0deg);. }. to {. -moz-transform: rotate(359deg);. transform: rotate(359deg);. }.}.@-o-keyframes rotation {. from {. -o-transform: rotate(0deg);. transform: rotate(0deg);. }. to {. -o-transform: rotate(359deg);. transform: rotate(359deg);. }.}.@keyframes rotation {. from {. transform: rotate(0deg);. }. to {. transform: rotate(359deg);. }.}./* Lib /.#main .headContainer {. margin-bottom: 10px;.}./ mobile ---- /.@media all and (max-width: 767px) {. {. -webkit-tap-highlight-color: transparent;. -webkit-touch-callout: none;. }. header.headContainer {. width: 100%;. }.}./* Animator setting

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14667)
Category:	dropped
Size (bytes):	14854
Entropy (8bit):	5.248951222443214
Encrypted:	false
SSDEEP:	384:wMwkQT8rQL29uGTmqvpPEDjIy1wJmYkJs3wzhErIURNve88PMEWuP1:wpT8EYRPEDsy1wJkrVDcNvdEWuP1
MD5:	8EC7CE4519F5C6B2642DCCFE6BDAE23B
SHA1:	667A6CA8F5769BA9B49655E8C6779CECF43A7CBF
SHA-256:	C007D73792AC2D25882BFBB573E700E721A0ADACFAB947E6A0B64A61991FECF0
SHA-512:	F4AA97EE216C5E9BCD6796BE9A3598B6EAF9B55E252001FC35F6117708666190E14838940B9EDCC18867EB3353C149A883BDE02F620289200EE2387EACFE6B36
Malicious:	false
Reputation:	low
Preview:	/. RequireJS 2.1.6 Copyright (c) 2010-2012, The Dojo Foundation All Rights Reserved.. Available via the MIT or new BSD license.. see: http://github.com/jrburke/requirejs for details./..var requirejs,require,define;(function(ba){function J(e){return"[object Function]"===N.call(e)}function K(e){return"[object Array]"===N.call(e)}function z(e,t){if(e){var n;for(n=0;n<e.length&&(!e[n]\|\|!t(e[n],n,e));n+=1);}}function O(e,t){if(e){var n;for(n=e.length-1;-1<n&&(!e[n]\|\|!t(e[n],n,e));n-=1);}}function t(e,t){return ha.call(e,t)}function m(e,n){return t(e,n)&&e[n]}function H(e,n){for(var r in e)if(t(e,r)&&n(e[r],r))break}function S(e,n,r,i){return n&&H(n,function(n,s){if(r\|\|!t(e,s))i&&"string"!=typeof n?(e[s]\|\|(e[s]={}),S(e[s],n,r,i)):e[s]=n}),e}function v(e,t){return function(){return t.apply(e,arguments)}}function ca(e){throw e}function da(e){if(!e)return e;var t=ba;return z(e.split("."),function(e){t=t[e]}),t}function B(e,t,n,r){return t=Error(t+"\nhttp://requirejs.org/docs/errors.html#"+e),

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (528)
Category:	downloaded
Size (bytes):	15005
Entropy (8bit):	5.360552389101315
Encrypted:	false
SSDEEP:	384:bSzgUw7DiHCcInRKIlmSBD8FQBa0SwDQWURhU9119z4p:gZw7eHCcMRKwB8QQwDtchU9119z6
MD5:	0CB51C1A5E8E978CBE069C07F3B8D16D
SHA1:	C0A6B1EC034F8569587AEB90169E412AB1F4A495
SHA-256:	9B935BDA7709001067D9F40D0B008CB0C56170776245F4FF90C77156980FF5E9
SHA-512:	F98D0876E9B80F5499DDA72093621588950B9708B4261C8AA55912B7E4851E03596185486AFB3A9A075F90F59552BB9EC9D2E67534A7DEB9652BA794D6EE188D
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/require.js
Preview:	/. RequireJS 2.1.6 Copyright (c) 2010-2012, The Dojo Foundation All Rights Reserved.. Available via the MIT or new BSD license.. see: http://github.com/jrburke/requirejs for details./.var requirejs,require,define;.(function(ba){function J(b){return"[object Function]"===N.call(b)}function K(b){return"[object Array]"===N.call(b)}function z(b,c){if(b){var d;for(d=0;d<b.length&&(!b[d]\|\|!c(b[d],d,b));d+=1);}}function O(b,c){if(b){var d;for(d=b.length-1;-1<d&&(!b[d]\|\|!c(b[d],d,b));d-=1);}}function t(b,c){return ha.call(b,c)}function m(b,c){return t(b,c)&&b[c]}function H(b,c){for(var d in b)if(t(b,d)&&c(b[d],d))break}function S(b,c,d,m){c&&H(c,function(c,l){if(d\|\|!t(b,l))m&&"string"!==typeof c?(b[l]\|\|(b[l]={}),S(b[l],.c,d,m)):b[l]=c});return b}function v(b,c){return function(){return c.apply(b,arguments)}}function ca(b){throw b;}function da(b){if(!b)return b;var c=ba;z(b.split("."),function(b){c=c[b]});return c}function B(b,c,d,m){c=Error(c+"\nhttp://requirejs.org/docs/errors.html#"+b);c.re

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	dropped
Size (bytes):	2420
Entropy (8bit):	4.972597027356834
Encrypted:	false
SSDEEP:	48:gmlhVeoLah0uOD5hgujkaUhoV0nahQEWcTAjL3CW6lnOiLq7lhQETJN:xIrXOzgibVGlEWc7XlnDETJN
MD5:	E36C272EBDBD82E467534A2B3F156286
SHA1:	BFA08A7B695470FE306A3482D07A5D7C556C7E71
SHA-256:	9292DC752A5B7C7EC21F5A214E61620B387745843BB2A528179939F9E2423665
SHA-512:	173C0F75627B436C3B137286EA636DCAF5445770D89DA77F6F0B416E0E83759879D197A54E15A973D2EB5CAF90B94014DA049DE6CC57DBD63CAB3E2917FBA1BA
Malicious:	false
Reputation:	low
Preview:	/global define:true, s:true /../*. @fileOverview Analytics . link and error tracking. * @name Analytics Widget. * @author dquock. /.define(["jquery", "BaseView", "nougat"],..function ($, BaseView, nougat) {..."use strict";....var View = BaseView.extend({.....el: "body",......events: {......// track any link with data-pagename......"click a[data-pagename], input[data-pagename], label[data-pagename]": "trackLink"......},....../..... .Link tracking..... .@linkname = name attribute..... .@pageName = data-pagename the link is going to..... .@pageName2 = data-pagename2 the link is going to..... .@prop27 = pagename(the one you're currently on)\|linkname..... .@prop28 = data-transactiondetailslinks..... .also sets div#analytics prop attrs for automation..... */.....trackLink: function (event) {......var $link = $(event.currentTarget),.......pageName = $link.attr("data-pagename") \|\| s.pageName,.......pageName2 = $link.attr("data-pagename2") \|\| s.prop25;.......if (s) {.......// s

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4495
Entropy (8bit):	4.231793539683161
Encrypted:	false
SSDEEP:	96:qLlbCe1CypE22uJuXplSlDrACAts8/yRlzUntwRntg1Zy7GbNB:QCgCym2hJuXuACEs8qRlzUtwRteZyCbj
MD5:	2ECD7878D26715C59A1462EA80D20C5B
SHA1:	2A0D2C2703EB290A814AF87EE09FEB9A56316489
SHA-256:	79A837D4EC921084E5CB0663372232B7B739A6AE5F981B00EB79EB3441043FC5
SHA-512:	222472C443ABA64839D4FA561A77541D913F43156083DA507380AC6889FDD237D9B5374E710092DD60B48A5B808CBA12749921C441144C5A429AB28D89D74FB0
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/dust-helpers-supplement.js
Preview:	var extend = function extend(dust) {.. // Add new dust helpers in this style. dust.helpers.link = function link(chunk, ctx, bodies, params) {. 'use strict';.. var href,. host = ctx.getPath(false, ['context', 'pageInfo', 'hostName']),. production,. stage,. sandbox,. dev,. cobrand,. locale,. pat,. extension,. type,. str;.. // Get trailing part of url and extract extension, if any. if (params) {. if (params.href) {. href = dust.helpers.tap(params.href, chunk, ctx);. href = href.trim();. pat = /\.[0-9a-z]{1,4}$/i;. extension = href.match(pat);. } else {. return chunk.write(''); // if not href, generate empty output. }. if (params.type) {. type = dust.helpers.tap(params.type, chunk, ctx);. if

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65508)
Category:	downloaded
Size (bytes):	70162
Entropy (8bit):	5.332928547809831
Encrypted:	false
SSDEEP:	1536:ihUQ8vmwdyuwzSpmURvVCzBuOtmfmVaom+gGmtBmxsuRc:iugz7e+KkCr
MD5:	0AF4783054B8E925EC024DC00FCB4510
SHA1:	B43B595D6899229217DA7CA15E8D1A846E93A666
SHA-256:	C3F1981E14042012337C6493597CD362261453611B727E91847A118B2B4CFFB7
SHA-512:	874D73FF48E306FBAC1471DB4F925DF8348F5C3D322AC13D769AF91F6DC67F33F0886674686F8A9F5168910FD8AC160F007423508ED29665E8138EC411C5BE84
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/pa/js/min/pa.js
Preview:	/@ 2024 PayPal (v1.9.5) /.!function(){"use strict";function r(t,e,n){(e=function(t){t=function(t,e){if("object"!=typeof t\|\|!t)return t;var n=t[Symbol.toPrimitive];if(void 0===n)return("string"===e?String:Number)(t);t=n.call(t,e\|\|"default");if("object"!=typeof t)return t;throw new TypeError("@@toPrimitive must return a primitive value.")}(t,"string");return"symbol"==typeof t?t:t+""}(e))in t?Object.defineProperty(t,e,{value:n,enumerable:!0,configurable:!0,writable:!0}):t[e]=n}function i(e,t){var n,r=Object.keys(e);return Object.getOwnPropertySymbols&&(n=Object.getOwnPropertySymbols(e),t&&(n=n.filter(function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable})),r.push.apply(r,n)),r}function g(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?i(Object(n),!0).forEach(function(t){r(e,t,n[t])}):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):i(Object(n)).forEach(function(t){Object.defineProperty(e,t,Ob

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (648)
Category:	downloaded
Size (bytes):	560414
Entropy (8bit):	5.682261246628439
Encrypted:	false
SSDEEP:	12288:Sipgp5LZvBAh23vrEx3O3EIqdPsXeIJZ3Np:Sipi5LZ5A+45YEIQPsXeu3
MD5:	7295EFF549FD29EFECB1D4D156101C7B
SHA1:	7D397D3A98710D0471DDB00A09920E6635A24947
SHA-256:	68C9ADEB367DE331CDCCE59F22197296197E36D51ED13BC82312E0256ACF20F9
SHA-512:	205A96BD3CD51E655BDC691524D68A170BFD53A559F957458B633F89517025C58DF338F4C0064DAD9CFF0CA7E4A46DE76E803DDA2ED0F4381559C6DBBB2ED730
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/MskOi9BoTT5Vt82JMh92Dvhu/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT./.var d=function(){return[function(N,a,U,y,A,l){return((N^20)&13)==(N-6<((N>>2&14)>=((N+4^20)>=((A=[0,"P","Tx"],(N&71)==N)&&(y=d[7](86,U[A[1]]),l=r[6](2," > ",a,y,U[A[1]])),N)&&(N+2^22)<N&&(U=[34,1023,"ubd"],AD.call(this,e[37](51,U[2]),m[49](73,rK),"POST"),m[49](25,14,e[28](73,1,r[29](7,U[A[0]],U[1],a))),this[A[1]]=a.U()),12)&&(N+1&10)<10&&J.call(this,a,A[0],"conf"),14)&&((N\|5)&15)>=1&&(this[A[1]]=new er,this.size=A[0]),1)&&(l=y&&U[A[2]]()>a?y():null),l},function(N,a,U,y,A,l,z,u,p,x){return(N+6&7)==.(((N-1\|(x=((N>>2&10)==2&&(this.B=a,this.P=U),[20,13,36]),x[2]))<N&&(N+3&51)>=N&&(F[48](21,y,l.P),(u=l.P.G)?p=m[35](29,

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (39693)
Category:	dropped
Size (bytes):	39820
Entropy (8bit):	5.232045417014232
Encrypted:	false
SSDEEP:	384:Cv3W0sOjNrHqSXYJ6y5ryBNZ3xBpxzzGSeUUUCSeUUUNUUUUiUUUULUKU0SvGUaT:sW0dxkxMDlrzzkn8wDPMruBb
MD5:	896EEAFD3E90844A3233C95E77C81097
SHA1:	4027BEFB3750417C1CD255F85A1D935B68E742A3
SHA-256:	10BB0A4C3E22BDB9E174F2E7EC6FA149FE8F016903BAEDA72F9B36A8CA8DC0DA
SHA-512:	8C465A446C405D272FD90E3BBCB847ED0ABC3617E98BB158241ED67E065604AC39D3A1D347A0F24F7B4F987147EC5139C482A3137CFE00D168ACF4E8EE0BD371
Malicious:	false
Reputation:	low
Preview:	/! dustjs-linkedin - v3.0.0. http://dustjs.com/.* Copyright (c) 2021 Aleksander Williams; Released under the MIT License */..(function(e,t){typeof define=="function"&&define.amd&&define.amd.dust===!0?define("dust.core",[],t):typeof exports=="object"?module.exports=t():e.dust=t()})(this,function(){function getTemplate(e,t){if(!e)return;if(typeof e=="function"&&e.template)return e.template;if(dust.isTemplateFn(e))return e;if(t!==!1)return dust.cache[e]}function load(e,t,n){if(!e)return t.setError(new Error("No template or template name provided to render"));var r=getTemplate(e,dust.config.cache);return r?r(t,Context.wrap(n,r.templateName)):dust.onLoad?t.map(function(t){function i(e,i){var s;if(e)return t.setError(e);s=getTemplate(i,!1)\|\|getTemplate(r,dust.config.cache);if(!s){if(!dust.compile)return t.setError(new Error("Dust compiler not available"));s=dust.loadSource(dust.compile(i,r))}s(t,Context.wrap(n,s.templateName)).end()}var r=e;dust.onLoad.length===3?dust.onLoad(r,n.options,i)

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3808)
Category:	dropped
Size (bytes):	3916
Entropy (8bit):	5.2749567971703994
Encrypted:	false
SSDEEP:	96:PMcABYAxCMaruyTOXPaJJccTMSeqdq9HVeGXlY:CDCM2RaSJJzASeIUHVS
MD5:	E0463BDE74EF42034671E53BCA8462E9
SHA1:	5EA0E2059A44236EE1E3B632EF001B22D17449F1
SHA-256:	A58147AEB14487FEF56E141EA0659AC604D61F5E682CFE95C05189BE17DF9F27
SHA-512:	1D01F65C6A00E27F60D3A7F642974CE7C2D9E4C1390B4F83C25C462D08D4AB3A0B397690169A81EACA08BEA3AEB55334C829AA77F0DBBAD8789ED247F0870057
Malicious:	false
Reputation:	low
Preview:	/* Modernizr 2.6.1 (Custom Build) \| MIT & BSD. * Build: http://modernizr.com/download/#-shiv-cssclasses. */.;window.Modernizr=function(a,b,c){function u(a){j.cssText=a}function v(a,b){return u(prefixes.join(a+";")+(b\|\|""))}function w(a,b){return typeof a===b}function x(a,b){return!!~(""+a).indexOf(b)}function y(a,b,d){for(var e in a){var f=b[a[e]];if(f!==c)return d===!1?a[e]:w(f,"function")?f.bind(d\|\|b):f}return!1}var d="2.6.1",e={},f=!0,g=b.documentElement,h="modernizr",i=b.createElement(h),j=i.style,k,l={}.toString,m={},n={},o={},p=[],q=p.slice,r,s={}.hasOwnProperty,t;!w(s,"undefined")&&!w(s.call,"undefined")?t=function(a,b){return s.call(a,b)}:t=function(a,b){return b in a&&w(a.constructor.prototype[b],"undefined")},Function.prototype.bind\|\|(Function.prototype.bind=function(b){var c=this;if(typeof c!="function")throw new TypeError;var d=q.call(arguments,1),e=function(){if(this instanceof e){var a=function(){};a.prototype=c.prototype;var f=new a,g=c.apply(f,d.concat(q.call(arguments)

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	6158
Entropy (8bit):	4.803683897903787
Encrypted:	false
SSDEEP:	192:oHXo3pSW7yiuzvCyBoIQo/ZbTHvUMfItoa39SrWM8N6fG:QopAvCyR/ZbTHvUMfItoa39K8NMG
MD5:	95AA9AA9D26FCCCC5BB228A7A86CAECB
SHA1:	55A5BFC1A1B4192C4FDB480C7E5FDFC0FFD50A44
SHA-256:	75C159C9974A7207171CF1F4ED302F91F90AE95233FDD64E994FD66ADA89AB20
SHA-512:	3598C0552DB1D8039D9F898C14EF1B91E6DA6069B8FD7F53B5D2750EBD1046E7317B18DE4D3D2A307734E4B066E48BDF37B924948BC79B9027CCC2D5A8DE1D17
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/webcaptcha/grcenterprise_v3_static.js
Preview:	"use strict";..function init() {. const key = getListenerSearchKey('data-key');. const sessionId = getListenerSearchKey('data-sessionId');. const csrf = getListenerSearchKey('data-csrf');. const action = getListenerSearchKey('data-action');. const src = getListenerSearchKey('data-src');. const submitURL = getListenerSearchKey('data-submitURL');. const startTime = getListenerSearchKey('data-startTime');...renderGRCV3Enterprise({. key,. action,. sessionId,. csrf,. src,. submitURL,. startTime. });.. var eventMethod = window.addEventListener ? "addEventListener" : "attachEvent",. eventer = window[eventMethod],. messageEvent = (eventMethod === "attachEvent") ? "onmessage" : "message",. clickEvent = eventMethod === "attachEvent" ? "onclick" : "click";.. document[eventMethod](clickEvent,resizeWidget);.. eventer(messageEvent, function(e) {. if(!e.data){. return;.

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	6071
Entropy (8bit):	4.961478576775147
Encrypted:	false
SSDEEP:	96:CftkjQu0Q0LCY/TMqqMbFibpR1KO0PT4tWaZSxLakjbBWk/YVGi4inMypJeeYsfA:MoQzj7wyFmnw3EtWaZw+oMCYVlBflKGG
MD5:	812B50931C7ACB37DDFCF2D66CE4F6D9
SHA1:	616C276F6632BE2C9C4F60F8F06582FDE300F9A1
SHA-256:	8B132276A98B7A181026AE1C803C5E060D8FA7A4007BF88F185DC78B7E7B5106
SHA-512:	670A77C041A030AB54CD1740BA69E9FE4C0B1F9531C02F9D37DB6A304052E5F909ED22F771009FE6DA41F6E1046FC6B5A21628E1A2AB7E3BE7F3E2F6397B8CB9
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/widgets/errorDisplay.js
Preview:	/*. Created by hdoan on 5/8/14.. . This is used to hide and show the error associated with an input field.. * Used also to mark the container of the input field with a 'hasError' class so when the input has focus, the error container can be shown. * Used also to focus on the first input with an error when the form is invalid due to empty inputs. /.define(['jquery', 'validation', 'backbone'], function($, Validation, Backbone) {...'use strict';....var errorDisplay = {...../.... Shows the error container AND visual treatment associated with the input field.... .... @param {Object} param - could be an Event object or element.... */....showError: function(param) {.....var $targetElement,......$targetParent;......// If param is an event.....if (param.type === 'focusin') {......$targetElement = $(param.target);......// param is an element.....} else {......$targetElement = param;.....}.....$targetParent = $targetElement.parents('.textInput');......if ($targetParent.hasClass('has

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65315)
Category:	dropped
Size (bytes):	88110
Entropy (8bit):	5.276848915126569
Encrypted:	false
SSDEEP:	1536:opEcTreA2vNaZIsKF+HQUXi7VKNVdEUqN992B7TETUu/FZh5C+r:Bcf8Uy7V8VWUqaTEbz5C+r
MD5:	5CB3D10BF1449FB78DADA696632213E8
SHA1:	95752CA4737115A2E82145DCCAF396624E71935E
SHA-256:	B677CDFB9629330AC25C0A07F251DCD072A52537E7C68051A576EE4B27D99AA6
SHA-512:	DAF893B6B84347C28D677F060DE2E9605A7248ED777CD93C3B0730440376B8F7F16FF5EF483D3A182BED2AFA7FCEE5C051359A3C19472DC3B89F79E3459076C7
Malicious:	false
Reputation:	low
Preview:	/!. jQuery JavaScript Library v3.7.0. * https://jquery.com/. . Copyright OpenJS Foundation and other contributors. * Released under the MIT license. * https://jquery.org/license. . Date: 2023-05-11T18:29Z. */..(function(e,t){"use strict";typeof module=="object"&&typeof module.exports=="object"?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)})(typeof window!="undefined"?window:this,function(e,t){"use strict";function y(e,t,n){n=n\|\|m;var r,i,s=n.createElement("script");s.text=e;if(t)for(r in g)i=t[r]\|\|t.getAttribute&&t.getAttribute(r),i&&s.setAttribute(r,i);n.head.appendChild(s).parentNode.removeChild(s)}function b(e){return e==null?e+"":typeof e=="object"\|\|typeof e=="function"?a[f.call(e)]\|\|"object":typeof e}function x(e){var t=!!e&&"length"in e&&e.length,n=b(e);return d(e)\|\|v(e)?!1:n==="array"\|\|t===0\|\|typeof t=="number"&&t>0&&t-1 in e}function T(e,t){return e.nodeName&&e.nodeName.toLower

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 32x32, 32 bits/pixel, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	5430
Entropy (8bit):	3.4364435707992746
Encrypted:	false
SSDEEP:	48:++/pSKnJ/3cCXndBlr9aPZ0M0V+2hDTGlpFRlcPgCOfU:+ASKJPcCXjgZ03Gre9
MD5:	E1528B5176081F0ED963EC8397BC8FD3
SHA1:	FF60AFD001E924511E9B6F12C57B6BF26821FC1E
SHA-256:	1690C4E20869C3763B7FC111E2F94035B0A7EE830311DD680AC91421DAAD3667
SHA-512:	ACF71864E2844907752901EEEAF5C5648D9F6ACF3B73A2FB91E580BEE67A04FFE83BC2C984A9464732123BC43A3594007691653271BA94F95F7E1179F4146212
Malicious:	false
Reputation:	low
Preview:	...... .... .....&......... .h.......(... ...@..... ............................................................................................................................................................................................................................................................................................................................................................................................................................................................................0...0...0...0.............................................................................................................>..............X...........................................................................................................\.......................................................................................................$...<...:...:...:..d......................................................................................................q

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65456), with no line terminators
Category:	downloaded
Size (bytes):	65533
Entropy (8bit):	4.891660667915502
Encrypted:	false
SSDEEP:	1536:RxrUgbhoBJAANUrbh9B+ZroW6PmRgDmRgmMz6NouAzkcPEA6PmRgzO:RJUgNoBJAANUrbh9B+ZroW6r3X6NouAd
MD5:	66DF6305418EDE23B1AD348B7AB2C2F7
SHA1:	6454F6A7535C9613307C0D904D75378E228FEE5B
SHA-256:	EAFC5308554C025F7E913851516EA31DC49B1CF4D376826D2DCBB4C0AB16BBC5
SHA-512:	85F40559E539433B449A764ABA32AF990559B106BAEA6328C9C386BAF2D4F2C6635B5312BD4489DA1AF51285C0307CEEBA57E9F2CED10D2972B1F71E108008BA
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/en-US/_languagepack.js
Preview:	define("_languagepack", function () { return {"en-US":{"activateOneTouch.properties":{"activateOneTouch":{"pageTitle":"Next time, skip login with PayPal One Touch","heading":"Next time, skip login with PayPal <span class=\"buzzword\">One Touch™</span>","paragraph1":"We'll always ask you to log in to update your PayPal personal or financial info.","bullet1":"No remembering your PayPal password when you shop on this device.","bullet2":"Speed through checkout at select merchants.","bullet3":"You're in control - you can turn this off at any time.","button":"Activate <span class=\"buzzword\">One Touch</span>","secondaryLink":"Not now","pageTitleVersioned":{"eightBall":"Skip login for faster purchases","expiredRefreshToken":"Reactivate One Touch™ for faster checkout","signUpVariantOne":"You have PayPal. Now get ready to check out with One Touch™","signUpVariantTwo":"Activate PayPal One Touch™ for faster checkout every time","gdpr":"Stay logged in for faster checkout"}

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Algol 68 source, ASCII text
Category:	dropped
Size (bytes):	22992
Entropy (8bit):	4.318444249541683
Encrypted:	false
SSDEEP:	384:NjB0PZV5PnJmyymBJERLKDAo00s2kadv9nvMLVAavDAVmm6vi08Bf:pB0VVJmoERLC5xzkaT0imfmt081
MD5:	E2E8FE02355CC8E6F5BD0A4FD61EA1C3
SHA1:	B1853D31FB5B0B964B78A79EEF43DDC6BBB60BBA
SHA-256:	492177839CCABB9A90A35EB4B37E6280D204B8C5F4B3B627E1093AA9DA375326
SHA-512:	7B5FF6C56A0F3BBB3F0733C612B2F7C5BBB4CC98EF7F141A20C2524ED9F86CB934EFEA9F6F0FAEB2BEC25FCB76CF50775BC3D0B712EAAC442E811B304AB87980
Malicious:	false
Reputation:	low
Preview:	/! dustjs-helpers - v1.5.0. https://github.com/linkedin/dustjs-helpers.* Copyright (c) 2014 Aleksander Williams; Released under the MIT License */.(function(dust){.. // Use dust's built-in logging when available. var _log = dust.log ? function(msg, level) {. level = level \|\| "INFO";. dust.log(msg, level);. } : function() {};. . var _deprecatedCache = {};. function _deprecated(target) {. if(_deprecatedCache[target]) { return; }. _log("Deprecation warning: " + target + " is deprecated and will be removed in a future version of dustjs-helpers", "WARN");. _log("For help and a deprecation timeline, see https://github.com/linkedin/dustjs-helpers/wiki/Deprecated-Features#" + target.replace(/\W+/g, ""), "WARN");. _deprecatedCache[target] = true;. }. . function isSelect(context) {. var value = context.current();. return typeof value === "object" && value.isSelect === true;. }. . // Utility method : toString() equivale

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (705), with no line terminators
Category:	dropped
Size (bytes):	705
Entropy (8bit):	5.048344747919151
Encrypted:	false
SSDEEP:	12:2aENAZ6DcZ9XJzB/S/Bf6AtnAutR/6w0BTq2qMR8dpMPu4JJZDMV8eaErYQ7a:2qZ6QZ9ZzBkBf6mhtR6BTq2aLM3HW2Hz
MD5:	C8DDDB4FFFA4A0F4360013DC08CAC19F
SHA1:	3D57D17A2B0909B6C686714AA185CCC2195AB863
SHA-256:	07D5BEDAF5859555A55C31E6A8FF04BEE28FB3A3B2F12E45250B50292A2F7FCD
SHA-512:	E190A13A372C53740311DB1ABC2878FAD652654A2E438312384DF6A43500796D19327B78F028F8818675591C043FF8471F36D3175D17F98B08075DBB9FB93CDE
Malicious:	false
Reputation:	low
Preview:	(function(e,t){typeof define=="function"&&define.amd&&define.amd.dust===!0?define(["dust.core"],t):typeof module=="object"?(module.exports=t(require("dustjs-linkedin")),module.exports.registerWith=t):t(e.dust)})(this,function(e){return e.helpers.iterate=function(t,n,r,i){function h(e,t){return e<t?1:e>t?-1:0}function p(e,r){return s(t,n.push({$key:e,$value:r,$type:typeof r}))}var s=r.block,o,u,a,f,l,c;i=i\|\|{};if(i.key){l=e.helpers.tap(i.key,t,n);if(s)if(!i.sort)for(f in l)l.hasOwnProperty(f)&&(t=p(f,l[f]));else{o=e.helpers.tap(i.sort,t,n),u=[];for(f in l)l.hasOwnProperty(f)&&u.push(f);c=n.global[o],!c&&o==="desc"&&(c=h),c?u.sort(c):u.sort();for(a=0;a<u.length;a++)t=p(u[a],l[u[a]])}}return t},e});

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25467)
Category:	dropped
Size (bytes):	25508
Entropy (8bit):	5.094451586944145
Encrypted:	false
SSDEEP:	384:HTP8X48LLyEoSsntg1YwDPc4PFNZdcF7a9OOpj6UkeUZrg+y/3Rjqz+jtkd6Pmzq:zP8Xymxke9R04uGmXmH
MD5:	6E28DEAE28590A7A63969BF00512782A
SHA1:	C12712D683FD15FDBBE373180CF0F7C7A5BCDB5E
SHA-256:	BE241A24CAFE282578F2C401F940531631D50F3D0432C43B7ADC76ECA67A8898
SHA-512:	340245FC821DB5227927161A946BFE834C5B9DB1C94DAD16DB81B2DB59C89ADFAC0648D15933A1A28F89010BC2C3D03D5B30899AAFC956E8A382088E92B756D5
Malicious:	false
Reputation:	low
Preview:	(function(r){var n=typeof self=="object"&&self.self===self&&self\|\|typeof global=="object"&&global.global===global&&global;if(typeof define==="function"&&define.amd){define(["underscore","jquery","exports"],function(t,e,i){n.Backbone=r(n,i,t,e)})}else if(typeof exports!=="undefined"){var t=require("underscore"),e;try{e=require("jquery")}catch(t){}r(n,exports,t,e)}else{n.Backbone=r(n,{},n._,n.jQuery\|\|n.Zepto\|\|n.ender\|\|n.$)}})(function(t,h,x,e){var i=t.Backbone;var a=Array.prototype.slice;h.VERSION="1.5.0";h.$=e;h.noConflict=function(){t.Backbone=i;return this};h.emulateHTTP=false;h.emulateJSON=false;var r=h.Events={};var o=/\s+/;var l;var u=function(t,e,i,r,n){var s=0,a;if(i&&typeof i==="object"){if(r!==void 0&&"context"in n&&n.context===void 0)n.context=r;for(a=x.keys(i);s<a.length;s++){e=u(t,e,a[s],i[a[s]],n)}}else if(i&&o.test(i)){for(a=i.split(o);s<a.length;s++){e=t(e,a[s],r,n)}}else{e=t(e,i,r,n)}return e};r.on=function(t,e,i){this._events=u(n,this._events\|\|{},t,e,{context:i,ctx:this

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	157659
Entropy (8bit):	5.346360923811718
Encrypted:	false
SSDEEP:	1536:T1v4ccRr6II4/tlrAGiUzG8tEubGKu/9eNzMZsmB015bRXA60KNrcnViPSHLqQzp:h41/t3LzG8KuruazMsmB0ad9tlJ
MD5:	C8A9A9FB63A37AF421FBB33BE32D26F3
SHA1:	1BE52B0D4207604E2FC8134327F65CB4F2C701CF
SHA-256:	5A0EA7E0EAD74C66F762B54BE56ABACF5A9E284935C07D67E4801BC833AB12CF
SHA-512:	DE8D355145DB5B7A8D9B30F969B00321A2435E3814F37103A2477DEC2DCEEFDDF0F5022794924A680A4D58986954F2F0334461CA37E1C054EDDCAC1E01A35573
Malicious:	false
Reputation:	low
Preview:	if(function(t){window.pako=t()}(function(){return function i(s,h,l){function o(e,t){if(!h[e]){if(!s[e]){var r="function"==typeof require&&require;if(!t&&r)return r(e,!0);if(_)return _(e,!0);throw(r=new Error("Cannot find module '"+e+"'")).code="MODULE_NOT_FOUND",r}r=h[e]={exports:{}},s[e][0].call(r.exports,function(t){return o(s[e][1][t]\|\|t)},r,r.exports,i,s,h,l)}return h[e].exports}for(var _="function"==typeof require&&require,t=0;t<l.length;t++)o(l[t]);return o}({1:[function(t,e,a){"use strict";var n="undefined"!=typeof Uint8Array&&"undefined"!=typeof Uint16Array&&"undefined"!=typeof Int32Array,r=(a.assign=function(t){for(var e,a,n=Array.prototype.slice.call(arguments,1);n.length;){var r=n.shift();if(r){if("object"!=typeof r)throw new TypeError(r+"must be non-object");for(var i in r)e=r,a=i,Object.prototype.hasOwnProperty.call(e,a)&&(t[i]=r[i])}}return t},a.shrinkBuf=function(t,e){return t.length===e?t:t.subarray?t.subarray(0,e):(t.length=e,t)},{arraySet:function(t,e,a,n,r){if(e.suba

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2483), with no line terminators
Category:	downloaded
Size (bytes):	2483
Entropy (8bit):	5.014711721076513
Encrypted:	false
SSDEEP:	48:DqHGbpgqYXnOPDi4Ta5eaIqKn61/lq3XAVG+wKgj:DqUJY3OGteTqJlcL9
MD5:	9546C4415837D6088EEA6ED5262F65AE
SHA1:	3D333C384894EDCAFBBBD9E26D22567E74743F43
SHA-256:	A9B59501FACDBA2D613578549A901AFA5F98BBA4D301B3B7C4AF53178E84D75C
SHA-512:	343538B1814EB8C012335490127DA1FFC8ADF8E2C58DA1F18DC3E7F23A396D861229F2381AF4D46E5AC0A0D320A8FE6D96883F5EA2F46085BADF4AF84F502BE4
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/js/core/nougat.js
Preview:	define("newgat",["jquery","underscore","dustjs-linkedin","dust-makara-helpers","dusthelpers-supplement","dustmotes-iterate","pulvus-provide","dustjs-helpers","_languagepack"],function(e,t,n,r){function u(e,t,n){if(Array.prototype.filter)return e.filter(t);var r=[],i=e.length-1,s=null;while(i>-1)s=e[i],t.call(n,s,i,e)&&r.unshift(s),i--;return r}function a(e,t,n){if(e instanceof Array&&Array.prototype.forEach)return e.forEach(t,n);var r=Object(e),i=null,s=null;for(i in r)if(r.hasOwnProperty(i)){s=t.call(n,r[i],i,r);if(s===!1)break}}function f(e,t){var n=null;for(n in e)e.hasOwnProperty(n)&&(t[n]=e[n]);return t}function l(e){return a(Array.prototype.slice.call(arguments,1),function(t){f(t,e)}),e}r.registerWith(n,{autoloadTemplateContent:!0,loader:function(e,t,n){var r=document.documentElement.getAttribute("locale").replace("_","-");require(["_languagepack"],function(e){n(null,e[r][t])})}});var i=null,s=null,o=null;return i=function(){},i.prototype={render:function(t,n){var r=new e.Deferre

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5219)
Category:	dropped
Size (bytes):	5369
Entropy (8bit):	5.146156831104758
Encrypted:	false
SSDEEP:	96:IeZ460AsQUoQ+MBjHwkWqY1V/Z+wZAwZSqrpV3+enQYbJIfvROvTYe:I/HrLXHklUNQrpV3Rxd
MD5:	E635C1320CD7EC0E330B5E6A464AB34A
SHA1:	F2A6BA50CAFA1F5C2E81504971E00ECF0598647E
SHA-256:	F507525B16FE106143BC8DD760BE56C9931C3D3C9DBB30182413CBE3EB318188
SHA-512:	27ED0FF3EF8C93B6A74CA320070C32B7962B94B790C844B91D43F953C800AF8BD896C7F57867F15C728947BE56D8D665A138961655FAF499B7DBA33EF825978A
Malicious:	false
Reputation:	low
Preview:	/! dustjs-helpers - v1.6.3. https://github.com/linkedin/dustjs-helpers.* Copyright (c) 2015 Aleksander Williams; Released under the MIT License */..(function(e,t){typeof define=="function"&&define.amd&&define.amd.dust===!0?define(["dust.core"],t):typeof exports=="object"?module.exports=t(require("dustjs-linkedin")):t(e.dust)})(this,function(e){function r(e){if(n[e])return;t(e,"Deprecation warning: "+e+" is deprecated and will be removed in a future version of dustjs-helpers","WARN"),t(null,"For help and a deprecation timeline, see https://github.com/linkedin/dustjs-helpers/wiki/Deprecated-Features#"+e.replace(/\W+/g,""),"WARN"),n[e]=!0}function i(e){return e.stack.tail&&e.stack.tail.head&&typeof e.stack.tail.head.__select__!="undefined"}function s(e){return i(e)&&e.get("__select__")}function o(e,t){var n=e.stack.head,r=e.rebase();return e.stack&&e.stack.tail&&(r.stack=e.stack.tail),r.push({__select__:{isResolved:!1,isDefaulted:!1,isDeferredComplete:!1,deferreds:[],key:t}}).push(n,e.s

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3808)
Category:	downloaded
Size (bytes):	3916
Entropy (8bit):	5.2749567971703994
Encrypted:	false
SSDEEP:	96:PMcABYAxCMaruyTOXPaJJccTMSeqdq9HVeGXlY:CDCM2RaSJJzASeIUHVS
MD5:	E0463BDE74EF42034671E53BCA8462E9
SHA1:	5EA0E2059A44236EE1E3B632EF001B22D17449F1
SHA-256:	A58147AEB14487FEF56E141EA0659AC604D61F5E682CFE95C05189BE17DF9F27
SHA-512:	1D01F65C6A00E27F60D3A7F642974CE7C2D9E4C1390B4F83C25C462D08D4AB3A0B397690169A81EACA08BEA3AEB55334C829AA77F0DBBAD8789ED247F0870057
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/modernizr-2.6.1.js
Preview:	/* Modernizr 2.6.1 (Custom Build) \| MIT & BSD. * Build: http://modernizr.com/download/#-shiv-cssclasses. */.;window.Modernizr=function(a,b,c){function u(a){j.cssText=a}function v(a,b){return u(prefixes.join(a+";")+(b\|\|""))}function w(a,b){return typeof a===b}function x(a,b){return!!~(""+a).indexOf(b)}function y(a,b,d){for(var e in a){var f=b[a[e]];if(f!==c)return d===!1?a[e]:w(f,"function")?f.bind(d\|\|b):f}return!1}var d="2.6.1",e={},f=!0,g=b.documentElement,h="modernizr",i=b.createElement(h),j=i.style,k,l={}.toString,m={},n={},o={},p=[],q=p.slice,r,s={}.hasOwnProperty,t;!w(s,"undefined")&&!w(s.call,"undefined")?t=function(a,b){return s.call(a,b)}:t=function(a,b){return b in a&&w(a.constructor.prototype[b],"undefined")},Function.prototype.bind\|\|(Function.prototype.bind=function(b){var c=this;if(typeof c!="function")throw new TypeError;var d=q.call(arguments,1),e=function(){if(this instanceof e){var a=function(){};a.prototype=c.prototype;var f=new a,g=c.apply(f,d.concat(q.call(arguments)

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	3175
Entropy (8bit):	5.113464294316265
Encrypted:	false
SSDEEP:	96:nbhJ7QEROj/XoucqKTXXwfcIPpIwx75TNFkbaVyQxI1lxBJw:bXTO/HcqmXj8IwJ5pFkbaYKIFrw
MD5:	2454DC0BF112B2541FBA37CFD2E4CBC5
SHA1:	E8E86957B77AA457C757B9D4231BD46F70176002
SHA-256:	18657DF333EEA496F8322AFC0903F5ABD740A53FDD71B0730F4070911CD704E9
SHA-512:	1AFB2B1C951B1304D00F39BC4E0027F95CD4D9CBF74346305E8604236212E299D5CC50E78128165EF1F46689377209BB645095BEA0C1D8A7378002254CCC27D9
Malicious:	false
Reputation:	low
Preview:	/*. Created by hdoan on 10/8/14.. */..define(['jquery', 'pageView', 'validation', 'errorDisplay'],...function ($, PageView, Validation, ErrorDisplay) {....'use strict';....var View = PageView.extend({.....el: '#captcha-standalone', // The dust template needs a section with id of 'captcha-standalone'.....//initialize form....initialize: function () {......ErrorDisplay.markError(this);......// Set back to hide on the popstate.....$(window).bind('popstate', function (event) {......if (!event.state) {.......$('.modal-overlay,.modal-animate').addClass('hide');......}.....});......// When the form is invalid, focus on the first input with an error.....Validation.on('invalidchallenge', function(form) {......ErrorDisplay.focusError(form);.....}, this);......// Adding handlers to validate form field.....Validation.init(this);......// Setting the page title.....$('title').html(this.$el.attr('data-title'));.....},.....events: {.....'click .captchaRefresh': 'refreshCaptcha',.....'click .captch

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1839
Entropy (8bit):	4.952637178893887
Encrypted:	false
SSDEEP:	48:gKZK68fKSLYBj17ekcLWyWpbwnGD9jH2RqFhmWe:i68fKSEBj17hcL1ewnGDZ2RqFAv
MD5:	E925A9183DDDF6BC1F3C6C21E4FC7F20
SHA1:	F4801E7F36BD3C94E0B3C405FDF5942A0563A91F
SHA-256:	F3A20B45053B0E79F75F12923FC4A7E836BC07F4ECFF2A2FA1F8ECDBA850E85A
SHA-512:	F10EB10B8065C10AE65950DE9EF5F36EC9DF25D764B289530FE2AD3AE97657BD5805E71FED99E58D81D34796A1002419343CCA85CA47EE7A71D6C15855AD9705
Malicious:	false
Reputation:	low
Preview:	/global define:true, console:true, jQuery:true, require:true /..define([ 'jquery', 'backbone'],...function ($, Backbone) {....'use strict';....var router;....router = Backbone.Router.extend({....routes: {.....'': 'showTheView',.....'stepup?queryString': 'showTheView',.....'rendercaptcha': 'showAuthCaptcha',.....'twofactorpath': 'showTheView',.....'resendotp': 'showTheView',.....'switchoption?*queryString': 'showTheView',.....'switchoption': 'showTheView',.....'softtoken': 'showTheView'....},.....hasPushState: window.history && 'pushState' in window.history,.....// this.viewName is only set when app.js is executed. It is never set again, unless app.js is....// requested again like when a page is rendered server-side.....showTheView: function () {.....this.showView(this.viewName);....},.....showAuthCaptcha: function() {.....this.showView('authcaptcha');....},.....showView: function (name) {.....var viewName = name,......asyncAssets = [ "view/" + viewName ];......require(asyncAssets,

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1931), with no line terminators
Category:	dropped
Size (bytes):	1931
Entropy (8bit):	5.86879365970491
Encrypted:	false
SSDEEP:	48:iEAhbKo75XI2ovtUjPKtXsDXx/gE1sc/LrwUnG:pAcMI5czjs2suG
MD5:	54AFF6E92DCA1D8575B8425A8993E3F1
SHA1:	7D9AAC64ED3E0E30077E56F147F106289C24A317
SHA-256:	C6EA4E29A6CDF64FAB7C4494B8EDA8E90C6BFD4C03D84DA4210AFCBF0D460655
SHA-512:	FC5CE67E066891A9D31FCB6C9B92BA9D711A7CC248A3CFABA3C469D9691CC43773C688553E0C1E3986F7BB6BE75FC239BE498777FF5F93DD14C4104F37AF9F3A
Malicious:	false
Reputation:	low
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var E='enterprise',a=w[N]=w[N]\|\|{},gr=a[E]=a[E]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.recaptcha.net/recaptcha/enterprise/';(cfg['enterprise']=cfg['enterprise']\|\|[]).push(true);(cfg['enterprise2fa']=cfg['enterprise2fa']\|\|[]).push(true);(cfg['render']=cfg['render']\|\|[]).push('6LdCCOUUAAAAAHTE-Snr6hi4HJGtJk_d1_ce-gWB');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A7uxtj3+hJmOcZFooFT0Ps276PuOqGnM1jfoPbFvxWp73VC60LnYGzayHVvcFeEiF0qrwy7fQAL+gGVXU+f9IQcAAACTeyJvcmlnaW4iOiJodHRwczovL3JlY2FwdGNoYS5uZXQ6NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	32
Entropy (8bit):	4.476409765557392
Encrypted:	false
SSDEEP:	3:H0hCkuWthHeTn:UUkuqxeT
MD5:	A3144EE887752BC84252FAACD4DFFD83
SHA1:	172430F70BAEDA54BB9F533293E0E80A2DA5835D
SHA-256:	8B87CFF79D0F8142D02D4A5991C83A5D59A7733BCB0EBEDD0DE57E559C6EAEFB
SHA-512:	E366210709098991B8B21140DF48E50CD650E115A30A8A5EEC016B98B077C6DA3FEE972BA219409AD72E85BF575A033E1E9AAC7931B727E4BA15644AAC5349D3
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAko6ufIqp3JChIFDVNaR8USEAl_Jiy42EDGqRIFDVNaR8U=?alt=proto
Preview:	CgkKBw1TWkfFGgAKCQoHDVNaR8UaAA==

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3037)
Category:	dropped
Size (bytes):	582313
Entropy (8bit):	4.346547395512375
Encrypted:	false
SSDEEP:	1536:h0nEz7D7uNrU0UJUbJfaqk7n/bhOG1GmYKz5diPmxBWLA0hhTZoXw/cte/q5XzFw:hffSwuCvL/FYmviPmJA/6tFynZ
MD5:	BC6F4A89EA274CA210F761F33311A8D8
SHA1:	F82ACF5C72C1BD4CF3A775F24D05D09578CC075B
SHA-256:	D69E1263E3C76366DA84F3E93739C8C222260B7E13BE930C1D479C841CDA5E13
SHA-512:	43AF51ECCA3BF5649DB50FBE2E53758F781696807D2CC25A5B282CB24239B28BB34D5D50CF32B298C495A91F865DA540FF666A0EED8A14A25B952A598A0794A9
Malicious:	false
Reputation:	low
Preview:	/! 2024 dl-pp-latm@paypal.com ver(1.1.0) /./. mktconf.js v1.1.0 - 11-18-2024.* Copyright (c) 2024 dl-pp-latm@paypal.com.*/.(function () {. 'use strict';.. (function () {.. function _iterableToArrayLimit(arr, i) {. var _i = null == arr ? null : 'undefined' != typeof Symbol && arr[Symbol.iterator] \|\| arr['@@iterator'];. if (null != _i) {. var _s,. _e,. _x,. _r,. _arr = [],. _n = !0,. _d = !1;. try {. if (_x = (_i = _i.call(arr)).next, 0 === i) {. if (Object(_i) !== _i) return;. _n = !1;. } else for (; !(_n = (_s = _x.call(_i)).done) && (_arr.push(_s.value), _arr.length !== i); _n = !0);. } catch (err) {. _d = !0, _e = err;. } finally {. try {. if (!_n && null != _i["return"] && (_r = _i["return"](), Object(_r) !== _r)) return;. } finally {. if (_d) throw

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7845), with no line terminators
Category:	dropped
Size (bytes):	7845
Entropy (8bit):	5.533132852324268
Encrypted:	false
SSDEEP:	192:uRdzEfNmNutaU+ldy9G++QfXh3D6NhRS3Euq:uDAlm4+ldyAQ29uEz
MD5:	89DDFD249765BDEB5D374267E7DAC475
SHA1:	2DB490F040C27D1EAB5FCBA86E939D6837ACCFD6
SHA-256:	53A9FD4A377A5C66BDCA2C2DAD33EBB8E7387B1F314F42849FD7A1733BF77B6F
SHA-512:	2A39E696B5EBFF972758F6CC17D87187405D04F29A5A34AB1FED806B51301BF67FA40F80631BEAAF53C32BC523EBA3D26F7FC425316F5D1498DCFA30A60DA17E
Malicious:	false
Reputation:	low
Preview:	(function(e,t){typeof define=="function"&&define.amd&&define.amd.dust===!0?define(["dust.core"],t):typeof exports=="object"?module.exports=t(require("dustjs-linkedin")):t(e.dust)})(this,function extend(dust){function tokenize(t){"use strict";var n={"((":1,"))":1,"!!":1,"<!":1,">!":1,">=!":1,"<=!":1,"==!":1,"!=!":1,"&&!":1,"\|\|!":1,"]&&":1,"]\|\|":1,"]>":1,"]<":1,"]<=":1,"]>=":1,"]==":1,"]!=":1,"].":1,"[(":1,"])":1,")&&":1,")\|\|":1,")>":1,")<":1,")<=":1,")>=":1,")==":1,")!=":1,")!":1,")]":1,"]]":1,"&&(":1,"\|\|(":1,">'":1,"<(":1,"<=(":1,">=(":1,"==(":1,"!=(":1,"!(":1},r=[],i=0,s,o,u,a,f,l,c,h,p;if(tokCache[t])return tokCache[t];while(i<t.length){u=i,a=t[i],o=t.charCodeAt(i);if(o===SPACE\|\|o===TAB)i++;else if(o===QUOTE\|\|o===APOS){f=STR,s=a,i++;while(i<t.length){t.charCodeAt(i)===BACKSLASH&&i++,s+=t[i];if(t.charCodeAt(i)===o)break;i++}s.charCodeAt(s.length-1)!==o&&(f=ERR,s='"Unclosed string constant"'),pushToken(r,f,s.slice(1,s.length-1)),i++}else if(o>=ZERO&&o<=NINE\|\|o===MINUS\|\|o===DOT&&t.charC

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/logo_48.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	4315
Entropy (8bit):	5.129546814483834
Encrypted:	false
SSDEEP:	96:jdrlOMQpaKDBiagJAWear9oaadIcDhWSbVn07cfMerbsCC5hftc/U51dK0i4uVGA:jdrlOzBiasAWEaKzDASbVn07uMerbsCL
MD5:	1121A6FAB74DA10B2857594A093EF35C
SHA1:	7DCD1500AD9352769A838E9F8214F5D6F886ACE2
SHA-256:	78EB4ED77419E21A7087B6DFCC34C98F4E57C00274EE93E03934A69518AD917A
SHA-512:	B9EB2CEF0EADD85E61A96440497462C173314E6B076636AD925AF0031541019E30C5AF4C89D4EAFA1C2676416BFECEC56972875155020E457F06568BCA50B587
Malicious:	false
Reputation:	low
Preview:	/. This file contains the javascript functions and snippets. * that are used to introduce the site feedback link in the footer.. * Function O_GoT inserts the link in the footer list and assigns onclick. * for popup window that displays the feedback from from opinionlab site.. /..define([], function () {...'use strict';..window.PAYPAL = window.PAYPAL ? window.PAYPAL : {};..var opVars = window.PAYPAL.opinionLabVars;...var _doc = document,..._w . = window,..._tm = (new Date()).getTime(),..._sH = screen.height,..._sW = screen.width;.../.. This method forms the siteFeedback image tag to be written into the DOM.. * Note: While calling this method, please make sure to check if sitefbIcon is enabled. This is decided by boolean the property 'showSitefbIcon'... * @returns sfimg.. */..function siteFeedBackImage () {...var sfImg = document.createElement('img');...sfImg.setAttribute('src', opVars.sitefb_plus_icon);...sfImg.setAttribute('alt', '');...return sfImg;..}...function popUp (opi

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	3133
Entropy (8bit):	5.139941225383131
Encrypted:	false
SSDEEP:	96:6jdrlNAcMAxvrhq2Pi0Bi8TiGMR0beb8Zp0rrQhrU90LSKjEmOOT8jc1dTZrhq22:OdrlTMAxvrhq2PZB+0SwZp0rh6LMc1pw
MD5:	BE3248D30C62F281EB6885A57D98A526
SHA1:	9F45C328C50C26D68341D33B16C7FE7A04FA7F26
SHA-256:	EE8D7EA50B87CF8151107330FF3F0FC610B96A77E7A1A0ED8FCE87CF51610F54
SHA-512:	413022A49030FF1F6BDF673C3496EFBBEC41F7C7B8591E46B4D7F580378D073E6435227485EA833EF02CCDFCA301F40EBD05C60CFFE9FB61C020BFA352D30D1D
Malicious:	false
Reputation:	low
Preview:	define(['opinionLab', 'onlineOpinionPopup'], function(opinionLab, popup) {...'use strict';..window.PAYPAL = window.PAYPAL ? window.PAYPAL : {};..var opVars = window.PAYPAL.opinionLabVars;.../* Defines the referral URL - Verify */..function paypalURL (pagename) {...var paypalURL = 'https://'.......+ opVars.countryCode.......+ '.paypal.com/'.......+ opVars.languageCode.......+ '/00/'.......+ escape(pagename.replace(/\s\|\//g, '_')).......+ '.page';...return paypalURL;..};...function assignSiteCatalystVars() {...if ( typeof opVars.isSiteRedirect !== 'undefined' && typeof opVars.isPaymentFlow !== 'undefined') {....if ( typeof s !== 'undefined') {.....if ( typeof s.pageName !== 'undefined') {......opVars.siteCatalystPageName = s.pageName;.....}.....if ( typeof s.prop7 !== 'undefined') {......opVars.siteCatalystC7 = s.prop7 == "none" ? "Unknown" : s.prop7;.....}.....if ( typeof s.prop5 !== 'undefined') {......opVars.siteCatalystAccountNumber = s.prop5;.....}....}....opinionLab.custom_var = up

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	3564
Entropy (8bit):	4.920420499731642
Encrypted:	false
SSDEEP:	48:gm8sIY/0E8/jFKNGdBr9wFafSzqKo1NX+JiYCHVnb7RzmM6EWclslaEWu+xMRfU6:xpIY98zN9CXzmsPyxbZ2EWaErdNF
MD5:	12E5657A61A6A578E4122B6B5B79348F
SHA1:	2F1DDE1B74A554CBDBF6764C8E84D645EDFA5862
SHA-256:	A3C9F1EE51287C4CEC2F44AE30887B767E0D7B024CE49F5FB7C8C26A337D7E3F
SHA-512:	22D4077F3F27C4F147BA750B4D5859ED36F676FC5B8E54516869C1FE94AECB8C2F1D5933F6993E5F46A838D5D6A66129E191DD03D8219C32E8121DD13509D9C6
Malicious:	false
Reputation:	low
Preview:	/global define:true, s:true /..define(["jquery", "backbone", "BaseView"],...function ($, Backbone, BaseView) {...."use strict";....var PageView = BaseView.extend({.....model: null, // Backbone model.....trackingPrefix: 'main:auth-challenge:::',.....request: function(options) {......return $.ajax({......dataType: "json",......url: options.url,......data: options.params,......type: options.method,......headers: {......."X-CSRF-Token": this.model.get("token") \|\| $(document.body).data("token")......},......timeout: 15000,.......success: function(response) {.......return options.success.apply(null, arguments);......},.......error: function(xhr, textStatus, errorThrown) {.......options.error.apply(null, arguments);......}.....});....},...../*.... Set the footer correctly..... * It should be position: fixed when window is tall enough..... * It should be position: static when window isn't tall enough.... */....setFooterPlacement: function() {.....var totalContentHeight,......windowHeight

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6564)
Category:	downloaded
Size (bytes):	6565
Entropy (8bit):	5.382243764098105
Encrypted:	false
SSDEEP:	96:0vpl2sfWl0basxnWDEIY3gaBHzu0JtVGTHlsqsPlpDklR0klffXYjyEoHBp:k+euW/WDi3RzrSshmR0I3XUuHT
MD5:	5C0B394C3F25CFE7F093C013D9396AD5
SHA1:	6B11C3119C2AF3EB4A979589D765ED70408DC6CD
SHA-256:	CAE0AF2E9035626EBCC82AEDFFE6939E8DE145879607CC94C5F1EA379F94A12B
SHA-512:	9A52E6875C4FA651AE0888B44A2A9ABF93110E3E524F1EEDBEB83FFC1000210EE5F904C5E1CA0E9A82EC642BAE7B90DA9C6020C2CB01D1DEB1E72464BB5A4BAD
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/rdaAssets/fraudnet/sync/fn-sync-telemetry-min.js
Preview:	var PAYPAL=window.PAYPAL\|\|{};!function(){"use strict";var t=function(t){var e=function(t,e,n){n[0]=(255&(0\|t[e]))<<24\|(255&(0\|t[e+1]))<<16\|(255&(0\|t[e+2]))<<8\|255&(0\|t[e+3])\|0,n[1]=(255&(0\|t[e+4]))<<24\|(255&(0\|t[e+5]))<<16\|(255&(0\|t[e+6]))<<8\|255&(0\|t[e+7])\|0},n=function(t,e){for(var n=32,r=0;n-- >0;)t[0]+=(t[1]<<4^t[1]>>5)+t[1]^r+e[3&r],r+=-1640531527,t[1]+=(t[0]<<4^t[0]>>5)+t[0]^r+e[r>>11&3]},r=function(t){for(var e=0,n=0;n<4;n++)e\|=t.charCodeAt(n)<<8n;return isNaN(e)?0:e},i=function(t,i){var o=new Array(2),a=new Array(8),s=new Array(4),u=0,c=0,d=t.split("").map((function(t){return t.charCodeAt(0)}));for(c=0;c<4;c++)s[c]=r(i.slice(4c,4*(c+1)));for(c=0;c<d.length;c+=8)e(d,c,o),n(o,s),a[u]=o[0],a[u+1]=o[1],u+=2;return a};var o={sh:function(t){for(var e=0,n=0;n<t.length;n++)e+=t.charCodeAt(n);return e&=e},addEventListener:function(t,e,n){void 0!==t.addEventListener?t.addEventListener(e,n,!1):void 0!==t.attachEvent&&t.attachEvent("on"+e,n)},removeEventListener:function(t,e,n){void 0!==

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1228), with no line terminators
Category:	dropped
Size (bytes):	1228
Entropy (8bit):	4.991836041220244
Encrypted:	false
SSDEEP:	24:1UbSjYz0brlna3W8RsdwYU/ImxIlFlbkPIaPBWfIX9SmV5HDUmu+K/L:1ASjk0vkW7+x/pgFh+UfY5WmteL
MD5:	35558E9FA07B2F8F7F6F1A4F6124A0B4
SHA1:	695C51C3667E8DD8FFC9CB202E6399EE5F39C9BB
SHA-256:	B9D410B959D2E1509801C43780835655A35BA6F33D3E471C6B172B31E6E7D916
SHA-512:	82B8A6F5601D9C55CABFB407628E7A247637E76EC6209056C898D086A9043546225F898CF8DB62ED86A2BD33CEDDFE88800A9F4AA66EE72DCC409D041FF4A4D9
Malicious:	false
Reputation:	low
Preview:	define(["newgat","jquery","backbone"],function(e,t,n){"use strict";var r=["injectIframeTest"],i,s,o,u;return i=n.Router.extend({routes:{"":"showLanding","?queryString":"showLanding","inject/queryString":"showLanding",authorize:"showLanding","authorize?queryString":"showLanding",consent:"showLanding","consent?queryString":"showLanding","consent-cancel":"showLanding","activate-one-touch":"showLanding","activate-one-touch?*queryString":"showLanding","remember-me":"showLanding",econsent:"showLanding",genericError:"showGenericError","remember-me-interstitial":"showLanding"},hasPushState:window.history&&"pushState"in window.history,showLanding:function(){this.showView(this.viewName)},showGenericError:function(){this.showView("genericError")},showView:function(e){var i=e\|\|n.history.fragment\|\|"login",s=["view/"+i];if(t.inArray(i,r)>-1)return;require(s,function(e){typeof e=="function"&&(e=new e({parent:o}))})},start:function(){n.history.start({pushState:this.hasPushState,root:window.locatio

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23125), with no line terminators
Category:	downloaded
Size (bytes):	23125
Entropy (8bit):	5.2464842228013895
Encrypted:	false
SSDEEP:	384:v0Ap5n5P9Nxf4hfWGwR+EkE+n4QnZ/X2NWKW4BCCMHxDkZbaXpweyGobcUWfgMcC:J5n51f4hfWGwR+Tnn4QnZ/b3J7yGQMUE
MD5:	243EDA4543153156C0AE9DF9E8C5833D
SHA1:	DFA372F408889FA3F4A6CA29847F4A379ED246A8
SHA-256:	D81BFEFD8585B694222D3E94E9DEE5D7935049C65355F9FD096800301D51545B
SHA-512:	BC2E170A94BB45624ED4392B2049FA017411C244DC765B5E862093E2264EC9580752A29A86E6739E2ECBA2F16B6880FDBF9AB1ECB6647E739B391B46A5BF9AA9
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/webcaptcha/ngrlCaptcha.min.js
Preview:	!function(e){var t={};function n(r){if(t[r])return t[r].exports;var a=t[r]={i:r,l:!1,exports:{}};return e[r].call(a.exports,a,a.exports,n),a.l=!0,a.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var a in e)n.d(r,a,function(t){return e[t]}.bind(null,a));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s=6)}([function(e,t,n){var r=n(1);e.exports.find=function(e,t){if(Array.isArray(e)\|\|void 0!==e.

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19626)
Category:	dropped
Size (bytes):	19807
Entropy (8bit):	5.222852482936355
Encrypted:	false
SSDEEP:	384:X6mbfNn/COzhRiHbmHKQYVOf/OwJXxshUkk6UXSMxag8ZoCdkw5lPxzavwpfCQ:xbJKOUVVq/dJXxqkF9+bGopqQ
MD5:	FD4D2AC5869B6E52C5205D0D336CF69F
SHA1:	F27BC91E0B46135489CD808261327FF4F92C61D8
SHA-256:	C50F9519695E63EB34CB4740B88BD90FFA7F308094C56208EB1E80D6670DBB3E
SHA-512:	6852405A913D2AB86B670CE01EA9A71311B812068AA4C52C8DFC4C95BDF98E28E639D189A1187C6A074B2B96AA4F341193173857C26BC8BC6A0D78FD639082D2
Malicious:	false
Reputation:	low
Preview:	// (c) 2009-2022 Jeremy Ashkenas, Julian Gonggrijp, and DocumentCloud and Investigative Reporters & Editors..// Underscore may be freely distributed under the MIT license...(function(e,t){typeof exports=="object"&&typeof module!="undefined"?module.exports=t():typeof define=="function"&&define.amd?define("underscore",t):(e=typeof globalThis!="undefined"?globalThis:e\|\|self,function(){var n=e._,r=e._=t();r.noConflict=function(){return e._=n,r}}())})(this,function(){function w(e,t){return t=t==null?e.length-1:+t,function(){var n=Math.max(arguments.length-t,0),r=Array(n),i=0;for(;i<n;i++)r[i]=arguments[i+t];switch(t){case 0:return e.call(this,r);case 1:return e.call(this,arguments[0],r);case 2:return e.call(this,arguments[0],arguments[1],r)}var s=Array(t+1);for(i=0;i<t;i++)s[i]=arguments[i];return s[t]=r,e.apply(this,s)}}function E(e){var t=typeof e;return t==="function"\|\|t==="object"&&!!e}function S(e){return e===null}function x(e){return e===void 0}function T(e){return e===!0\|\|e==

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.8542370785933695
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQK6OsL9dhX3QKTEVgWaee:PLKdXNQKM9dh7EVgL
MD5:	1ACFF473F06164968C3337635A5F984B
SHA1:	9B759A282CCDF15DA6DAF4CDE7B57D7FEF387ADF
SHA-256:	91351C02069D22E494C333D0C81CF0A557DDCC41E34CFCDD2606000AC6251018
SHA-512:	3FB69BC6EAF6A92D9269E2AAEA56E1A632C0EA25716A8B8D3E813C30FD4028EF39EF91219C867D0FC6D1CAAD388D4AACBC83177E09E1DCC39210D043C0553BB8
Malicious:	false
Reputation:	low
URL:	https://www.recaptcha.net/recaptcha/enterprise/webworker.js?hl=en&v=MskOi9BoTT5Vt82JMh92Dvhu
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/MskOi9BoTT5Vt82JMh92Dvhu/recaptcha__en.js');

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	157659
Entropy (8bit):	5.346360923811718
Encrypted:	false
SSDEEP:	1536:T1v4ccRr6II4/tlrAGiUzG8tEubGKu/9eNzMZsmB015bRXA60KNrcnViPSHLqQzp:h41/t3LzG8KuruazMsmB0ad9tlJ
MD5:	C8A9A9FB63A37AF421FBB33BE32D26F3
SHA1:	1BE52B0D4207604E2FC8134327F65CB4F2C701CF
SHA-256:	5A0EA7E0EAD74C66F762B54BE56ABACF5A9E284935C07D67E4801BC833AB12CF
SHA-512:	DE8D355145DB5B7A8D9B30F969B00321A2435E3814F37103A2477DEC2DCEEFDDF0F5022794924A680A4D58986954F2F0334461CA37E1C054EDDCAC1E01A35573
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/pa/3pjs/tl/6.4.65/patleaf.js
Preview:	if(function(t){window.pako=t()}(function(){return function i(s,h,l){function o(e,t){if(!h[e]){if(!s[e]){var r="function"==typeof require&&require;if(!t&&r)return r(e,!0);if(_)return _(e,!0);throw(r=new Error("Cannot find module '"+e+"'")).code="MODULE_NOT_FOUND",r}r=h[e]={exports:{}},s[e][0].call(r.exports,function(t){return o(s[e][1][t]\|\|t)},r,r.exports,i,s,h,l)}return h[e].exports}for(var _="function"==typeof require&&require,t=0;t<l.length;t++)o(l[t]);return o}({1:[function(t,e,a){"use strict";var n="undefined"!=typeof Uint8Array&&"undefined"!=typeof Uint16Array&&"undefined"!=typeof Int32Array,r=(a.assign=function(t){for(var e,a,n=Array.prototype.slice.call(arguments,1);n.length;){var r=n.shift();if(r){if("object"!=typeof r)throw new TypeError(r+"must be non-object");for(var i in r)e=r,a=i,Object.prototype.hasOwnProperty.call(e,a)&&(t[i]=r[i])}}return t},a.shrinkBuf=function(t,e){return t.length===e?t:t.subarray?t.subarray(0,e):(t.length=e,t)},{arraySet:function(t,e,a,n,r){if(e.suba

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	92
Entropy (8bit):	4.867532511941353
Encrypted:	false
SSDEEP:	3:+uH2EFlWZNDrNj3XyScspsc4k/d/+rY:RH2qS5jSo/dGM
MD5:	F3198921FEC3D7A136AD9DBF50A88678
SHA1:	F4233823BF114191CB000417D1B97FD0AFC7C89A
SHA-256:	D3D2A0206D9B3B4EFC69B8FC05FB24F4D1269B4B40ABF0183FC6A30CEA31E76A
SHA-512:	3A0CDD23EEFD91681A7D4A0D77A18F9652083AB510079B9D5F50B811BB6D69379AEAA98B50ADA81091EB7CF4A9563CC75FF2FEB7241376472882BC9AA33AACA0
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSFwmLBRpIV2McThIFDZJqrL4SBQ3Vcgqy?alt=proto
Preview:	CkEKEw2Saqy+GgQICRgBGgQIVhgCIAEKKg3VcgqyGgQISxgCKh0IClIZCg9AISQuIypfPy0mJSsvLCgQARj/////Dw==

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 74, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1996
Entropy (8bit):	7.879723323624132
Encrypted:	false
SSDEEP:	48:jFE8mmKQOc1+qfQLUGQ4KZ1X+QTaj1ZiVef5mdQG6wtDbt:Z/2QOc1+a4q15CTqef5mdn6wtDbt
MD5:	826F1C66EDC8D0B4A70F783874430DB5
SHA1:	56B5E2629A384E8AD5FE2FD1D3BBBD9B516B4B0A
SHA-256:	1C9DD1B0663BA2324632F0FFEBB21112A92F039305241661C289C88AF523CB1A
SHA-512:	87446A91F1CF5840230B55D3D0238B17686BC36334059D4F83BEEC90F7146365C395CACE9A3DD866926E095D6AE31CB2D6EDF9FDE586BDAB3E3C3EE38D33ABCF
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/images/shared/momgram@2x.png
Preview:	.PNG........IHDR...<...J......7.....sRGB.........IDATx..[kl.E.....]......Z.......(bE@............%..o..G..&.E...Db......4..Zm...Gk.\-m.z..g.^...s...%............n...T..v7G.F.4........W....z.L...5....3+....P.\..!...\...(.q....rN....t...pZe....M.>....Z.......D..].:...#...mq.(.....[...AU...~......<.G.h..l....^..D..x.i......V.S..`..B.E...;..V0..f'...f.A0i.Y.....[..p...?..9.^.G........uV.\|U. X.&.[q....TZ9.[.}u7/.{b../[.t./0..1_..BA.Kf.,./..[G..6f..6.<`V......4..;.......Z.~..{...K.8Z..To..<....xZ.F.....y....-.#...E..V........=...`.....n#....H....f..{..$..}:n..T0.....yJq8.x.......T0............J..HEg......6..H......}..b2G...x......j..M.........s%.....3I.f.i.C~.(..RI.4q..,....C...u...\}....f.njCI.eO...p$G....U.../.B.;..[....3.9t.(-..%....g(.c.1..z.Q.H..l.`..P0.Tm..a.\......)....F...,).4..Y.k<...\R.........t....\| z!.@..".t.-.G.t\.......S....Lr,h.......PB...L.%\........y....+\|f.Z....B_NC.....T..`.u.q..l..............NB...&.f..a_tc3.

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (4455), with no line terminators
Category:	downloaded
Size (bytes):	4459
Entropy (8bit):	5.065317516797803
Encrypted:	false
SSDEEP:	96:kc/0LOMPkB9lNkSL5QQncujCxbXABHR8Yxbl4OStqAI:Z/4OM8B9lSSFQQnFexbmZxlqpI
MD5:	95C3DE706B3F56B72C4727B7F1D1BF1B
SHA1:	1395944FBDF8201644DABFAC6CE244710724A06E
SHA-256:	093D776B5560002F1A43CEC835C3C6E76411138A2E8434CB5621C4B221110FC0
SHA-512:	77491352C21DD5C2A8E9B896011AEE4133352B645C8DC9F7CFDA5DEE8D18071BF5CE1D844135E6CCA4BC518FE1D272893AA27BE4402155887C985AEF4329E3F4
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/js/browser_modules/dust-makara-helpers/browser.amd.js
Preview:	define([],function(){return function(e){function n(r){if(t[r])return t[r].exports;var i=t[r]={exports:{},id:r,loaded:!1};return e[r].call(i.exports,i,i.exports,n),i.loaded=!0,i.exports}var t={};return n.m=e,n.c=t,n.p="",n(0)}([function(e,t,n){"use strict";var r=n(1);e.exports=function(e,t){t=t\|\|{},r(e,function(){},t,t.loader)},e.exports.registerWith=e.exports},function(e,t,n){"use strict";function o(e,t,n){var r=e.shiftBlocks,i=e.push;e.shiftBlocks=function(e){return r.call(this,a(e,function(e){return u(e,t,n)}))},e.push=function(){var e=i.apply(this,arguments);return o(e,t,n),e}}function u(e,t,n){return function(r,i){return i=i.push({intl:{messages:t,bundle:n}}),e(r,i)}}function a(e,t){var n={};return Object.keys(e).forEach(function(r){n[r]=t(e[r])}),n}function f(e,t,n){function i(t){if(!t)return null;if(typeof t=="function"&&t.template)return t.template;if(e.isTemplateFn(t))return t}var r=e.onLoad;if(!r)throw new Error("dust.onLoad must be configured to use automatic content loading"

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (39693)
Category:	downloaded
Size (bytes):	39820
Entropy (8bit):	5.232045417014232
Encrypted:	false
SSDEEP:	384:Cv3W0sOjNrHqSXYJ6y5ryBNZ3xBpxzzGSeUUUCSeUUUNUUUUiUUUULUKU0SvGUaT:sW0dxkxMDlrzzkn8wDPMruBb
MD5:	896EEAFD3E90844A3233C95E77C81097
SHA1:	4027BEFB3750417C1CD255F85A1D935B68E742A3
SHA-256:	10BB0A4C3E22BDB9E174F2E7EC6FA149FE8F016903BAEDA72F9B36A8CA8DC0DA
SHA-512:	8C465A446C405D272FD90E3BBCB847ED0ABC3617E98BB158241ED67E065604AC39D3A1D347A0F24F7B4F987147EC5139C482A3137CFE00D168ACF4E8EE0BD371
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/js/browser_modules/dustjs-linkedin/dist/dust-full.js
Preview:	/! dustjs-linkedin - v3.0.0. http://dustjs.com/.* Copyright (c) 2021 Aleksander Williams; Released under the MIT License */..(function(e,t){typeof define=="function"&&define.amd&&define.amd.dust===!0?define("dust.core",[],t):typeof exports=="object"?module.exports=t():e.dust=t()})(this,function(){function getTemplate(e,t){if(!e)return;if(typeof e=="function"&&e.template)return e.template;if(dust.isTemplateFn(e))return e;if(t!==!1)return dust.cache[e]}function load(e,t,n){if(!e)return t.setError(new Error("No template or template name provided to render"));var r=getTemplate(e,dust.config.cache);return r?r(t,Context.wrap(n,r.templateName)):dust.onLoad?t.map(function(t){function i(e,i){var s;if(e)return t.setError(e);s=getTemplate(i,!1)\|\|getTemplate(r,dust.config.cache);if(!s){if(!dust.compile)return t.setError(new Error("Dust compiler not available"));s=dust.loadSource(dust.compile(i,r))}s(t,Context.wrap(n,s.templateName)).end()}var r=e;dust.onLoad.length===3?dust.onLoad(r,n.options,i)

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (622), with no line terminators
Category:	dropped
Size (bytes):	622
Entropy (8bit):	4.96960191543784
Encrypted:	false
SSDEEP:	12:2aENAZ6DcZ9XJzB/S/Bf6AFMCmVRTsFdXeFGioetyQAMVFVtLMdogEhllDpW4XZZ:2qZ6QZ9ZzBkBf6oMxRwfJioetHAMVFXh
MD5:	4FFD1A0A324788C068877787F51883DF
SHA1:	5BF8943272515E5981D720A0DD80D9E78ECA8D56
SHA-256:	737C91D3BFAFADADE9CD1660BC29D0372ED9EEA14BDB76C9BF96EC96F882FC79
SHA-512:	40C23574BF5BC7732BFBA93D696EEDA170B8A8FA1CE329087607A09696B9D007391950FBCC66E3CC985F8B0243B9CD465C9D39A4158937F39D7FDEAC2B0A9CE3
Malicious:	false
Reputation:	low
Preview:	(function(e,t){typeof define=="function"&&define.amd&&define.amd.dust===!0?define(["dust.core"],t):typeof module=="object"?(module.exports=t(require("dustjs-linkedin")),module.exports.registerWith=t):t(e.dust)})(this,function(e){return e.helpers.provide=function(t,n,r,i){var s=n;return i&&(s=n.push(i)),t.map(function(n){function l(e){n.render(e,s);var t=n,r=[];while(t!==i)r.push.apply(r,t.data),t=t.next;return n.data=[],n.next=i,r.join("")}var i=n.next;t.flushable=!1;var o={};for(var u in r)if(u!=="block"){var a=l(r[u]);try{o[u]=JSON.parse(a)}catch(f){o[u]=a}}t.flushable=!0,n.render(r.block,s.push(o)).end()})},e});

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2341), with no line terminators
Category:	dropped
Size (bytes):	2341
Entropy (8bit):	5.08135258633511
Encrypted:	false
SSDEEP:	48:oNzDz0BW4FEM3QVOaxWSwaVWx01XP196HLMCiEuEGB2J9XY:oRDzMW4bKOyTwag0JPH6r/TuTs9I
MD5:	FD614191217CAA07489553ECE0A11197
SHA1:	8ECD6CA240C4D95856A24E93B0C13B6265BF3A6E
SHA-256:	4E8EB79476417AE63A24B8B00B1DB0CCD012582A8936137808C592A524C1C68F
SHA-512:	F9162CD8BE5E69372901EA7A37430D2B418E188399AEF0012F679C7866DEE920EDDB0AFE8D47513B057765E6C725A97D193AE3874ED5E27DF883134A659EE896
Malicious:	false
Reputation:	low
Preview:	requirejs.config({packages:[{name:"dust-makara-helpers",version:"4.2.0",location:"browser_modules/dust-makara-helpers",main:"browser.amd.js"},{name:"dusthelpers-supplement",version:"2.0.1",location:"browser_modules/dusthelpers-supplement",main:"index.js"},{name:"dustjs-helpers",version:"1.6.3",location:"browser_modules/dustjs-helpers",main:"dist/dust-helpers.js"},{name:"dustjs-linkedin",version:"3.0.1",location:"browser_modules/dustjs-linkedin",main:"dist/dust-full.js"},{name:"pulvus-provide",version:"1.0.3",location:"browser_modules/pulvus-provide",main:"provide.js"},{name:"requirejs",version:"2.3.6",location:"browser_modules/requirejs",main:"require.js"}],paths:{_languagepack:document.documentElement.getAttribute("data-langpack"),jquery:"lib/jquery-3.7.0",jqueryUI:"lib/jquery-ui.min",json:typeof JSON=="undefined"?"lib/json2":"empty:",underscore:"lib/underscore-1.13.6",backbone:"lib/backbone-0.9.2",backboneSubroute:"lib/backbone-subroute-0.3.2",BaseView:"core/baseView","dustmotes-iter

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3564
Entropy (8bit):	4.920420499731642
Encrypted:	false
SSDEEP:	48:gm8sIY/0E8/jFKNGdBr9wFafSzqKo1NX+JiYCHVnb7RzmM6EWclslaEWu+xMRfU6:xpIY98zN9CXzmsPyxbZ2EWaErdNF
MD5:	12E5657A61A6A578E4122B6B5B79348F
SHA1:	2F1DDE1B74A554CBDBF6764C8E84D645EDFA5862
SHA-256:	A3C9F1EE51287C4CEC2F44AE30887B767E0D7B024CE49F5FB7C8C26A337D7E3F
SHA-512:	22D4077F3F27C4F147BA750B4D5859ED36F676FC5B8E54516869C1FE94AECB8C2F1D5933F6993E5F46A838D5D6A66129E191DD03D8219C32E8121DD13509D9C6
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/view/pageView.js
Preview:	/global define:true, s:true /..define(["jquery", "backbone", "BaseView"],...function ($, Backbone, BaseView) {...."use strict";....var PageView = BaseView.extend({.....model: null, // Backbone model.....trackingPrefix: 'main:auth-challenge:::',.....request: function(options) {......return $.ajax({......dataType: "json",......url: options.url,......data: options.params,......type: options.method,......headers: {......."X-CSRF-Token": this.model.get("token") \|\| $(document.body).data("token")......},......timeout: 15000,.......success: function(response) {.......return options.success.apply(null, arguments);......},.......error: function(xhr, textStatus, errorThrown) {.......options.error.apply(null, arguments);......}.....});....},...../*.... Set the footer correctly..... * It should be position: fixed when window is tall enough..... * It should be position: static when window isn't tall enough.... */....setFooterPlacement: function() {.....var totalContentHeight,......windowHeight

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 74, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1996
Entropy (8bit):	7.879723323624132
Encrypted:	false
SSDEEP:	48:jFE8mmKQOc1+qfQLUGQ4KZ1X+QTaj1ZiVef5mdQG6wtDbt:Z/2QOc1+a4q15CTqef5mdn6wtDbt
MD5:	826F1C66EDC8D0B4A70F783874430DB5
SHA1:	56B5E2629A384E8AD5FE2FD1D3BBBD9B516B4B0A
SHA-256:	1C9DD1B0663BA2324632F0FFEBB21112A92F039305241661C289C88AF523CB1A
SHA-512:	87446A91F1CF5840230B55D3D0238B17686BC36334059D4F83BEEC90F7146365C395CACE9A3DD866926E095D6AE31CB2D6EDF9FDE586BDAB3E3C3EE38D33ABCF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...<...J......7.....sRGB.........IDATx..[kl.E.....]......Z.......(bE@............%..o..G..&.E...Db......4..Zm...Gk.\-m.z..g.^...s...%............n...T..v7G.F.4........W....z.L...5....3+....P.\..!...\...(.q....rN....t...pZe....M.>....Z.......D..].:...#...mq.(.....[...AU...~......<.G.h..l....^..D..x.i......V.S..`..B.E...;..V0..f'...f.A0i.Y.....[..p...?..9.^.G........uV.\|U. X.&.[q....TZ9.[.}u7/.{b../[.t./0..1_..BA.Kf.,./..[G..6f..6.<`V......4..;.......Z.~..{...K.8Z..To..<....xZ.F.....y....-.#...E..V........=...`.....n#....H....f..{..$..}:n..T0.....yJq8.x.......T0............J..HEg......6..H......}..b2G...x......j..M.........s%.....3I.f.i.C~.(..RI.4q..,....C...u...\}....f.njCI.eO...p$G....U.../.B.;..[....3.9t.(-..%....g(.c.1..z.Q.H..l.`..P0.Tm..a.\......)....F...,).4..Y.k<...\R.........t....\| z!.@..".t.-.G.t\.......S....Lr,h.......PB...L.%\........y....+\|f.Z....B_NC.....T..`.u.q..l..............NB...&.f..a_tc3.

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	293429
Entropy (8bit):	5.083605252332618
Encrypted:	false
SSDEEP:	6144:pCLfh6nicf8Z5wPTdpM4mDoz1EsnFyyyHh3zOxPnS8kVLkIVfzYAK6k1PY:pfw4mDiTFyA6TVfMAKNZY
MD5:	CCD2CA0B9DDB09BD19848D61D1603288
SHA1:	7CB2A2148D29FDD47EAFAEEEE8D6163455AD44BE
SHA-256:	4D0AD40605C44992A4EEB4FC8A0C9BED4F58EFDB678424E929AFABCAAC576877
SHA-512:	E81F44F0BD032E48FEB330A4582D8E94059C5DE69C65CB73D28C9C9E088E6DB3DCB5664FF91487E2BBC9401E3F3BE21970F7108857AB7CED62DE881601277CDD
Malicious:	false
Reputation:	low
Preview:	/!. jQuery JavaScript Library v1.12.4. * http://jquery.com/. . Includes Sizzle.js. * http://sizzlejs.com/. . Copyright jQuery Foundation and other contributors. * Released under the MIT license. * http://jquery.org/license. . Date: 2016-05-20T17:17Z. */..(function( global, factory ) {...if ( typeof module === "object" && typeof module.exports === "object" ) {...// For CommonJS and CommonJS-like environments where a proper `window`...// is present, execute the factory and get jQuery....// For environments that do not have a `window` with a `document`...// (such as Node.js), expose a factory as module.exports....// This accentuates the need for the creation of a real `window`....// e.g. var jQuery = require("jquery")(window);...// See ticket #14549 for more info....module.exports = global.document ?....factory( global, true ) :....function( w ) {.....if ( !w.document ) {......throw new Error( "jQuery requires a window with a document" );.....}.....return factory( w );....};..

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18275)
Category:	downloaded
Size (bytes):	18895
Entropy (8bit):	5.626512864859831
Encrypted:	false
SSDEEP:	384:JouK7O7qBQ/Qc3eK2ON/1thbJUxmsUKxnaeizzwoLVRg:DrqmaK2GIUKFaeSkoL4
MD5:	874B945767FDB01FEA44E4A1DCA343DD
SHA1:	20906A077B7DF2682FB761E4E422E0ECF7EE22A5
SHA-256:	FE0EC5F3383619D3B7A4E1D1985D9390BA46B15C0FAB27FA99F0B903C5775DD5
SHA-512:	55ACB6A4BB9FDE1E18E16B3CF3179FF31D5EAF750031A8D5BA4F291E81CBBB14C746FC5B409AF28952A87681374EAEDD55279F4F726E35219DEFA1C3DE7461C6
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/bg/_g7F8zg2GdO3pOHRmF2TkLpGsVwPqyf6mfC5A8V3XdU.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var u=function(f){return f},r=this\|\|self,C=function(f,H){if(!(H=(f=null,r).trustedTypes,H)\|\|!H.createPolicy)return f;try{f=H.createPolicy("bg",{createHTML:u,createScript:u,createScriptURL:u})}catch(P){r.console&&r.console.error(P.message)}return f};(0,eval)(function(f,H){return(H=C())&&f.eval(H.createScript("1"))===1?function(P){return H.createScript(P)}:function(P){return""+P}}(r)(Array(Math.random()7824\|0).join("\n")+['(function(){/',.'',.' Copyright Google LLC',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var f5=function(f,H){return H[f]<<24\|H[(f\|0)+1]<<16\|H[(f\|0)+2]<<8\|H[(f\|0)+3]},n=function(f,H,u){f[O(H,u,f),PJ]=2796},uG=function(f){return f},rU=function(f,H,u){return f.ne(function(C){u=C},false,H),u},gU=function(f,H,u,C,K,m,r,d,D){for(r.iO=(r.kI=r[r.fe=C5,r.WY=sD,w],j7(r.R,{get:function(){return this.concat()}})),r.zf=g[r.R](r.iO,{value:{value:{}}}),d=[],D=0;D<372;D++)d[D]=S

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3807), with no line terminators
Category:	dropped
Size (bytes):	3807
Entropy (8bit):	5.175114160879721
Encrypted:	false
SSDEEP:	96:Cejna4urzmVcW/vtXwIeg6yGfpyuqQb7lkWTGquqhqXYMKdyqZY:JaWcW/vSIegVmR7bZukNMKdk
MD5:	A635A55DDB6339A3D0D01C641F670753
SHA1:	A6DEE4A1DF6C51B82CE2E67323514E7DE4E165D4
SHA-256:	A6C3BFF965978DF8093C3A29F7071C21D7439A212AF41E7B40CE70D94D6BCC44
SHA-512:	2562CA35BE37BFE0B984EC288E23678BC97BA7A881764044E65914EA013742A5310A5C12839CB8A501A464791BC67868FE6A02AE149DF9329E40562569EBA42D
Malicious:	false
Reputation:	low
Preview:	window.Modernizr=function(e,t,n){function r(e){d.cssText=e}function i(e,t){return r(prefixes.join(e+";")+(t\|\|""))}function s(e,t){return typeof e===t}function o(e,t){return!!~(""+e).indexOf(t)}function u(e,t,r){for(var i in e){var o=t[e[i]];if(o!==n)return r===!1?e[i]:s(o,"function")?o.bind(r\|\|t):o}return!1}var a="2.6.1",f={},l=!0,c=t.documentElement,h="modernizr",p=t.createElement(h),d=p.style,v,m={}.toString,g={},y={},b={},w=[],E=w.slice,S,x={}.hasOwnProperty,T;!s(x,"undefined")&&!s(x.call,"undefined")?T=function(e,t){return x.call(e,t)}:T=function(e,t){return t in e&&s(e.constructor.prototype[t],"undefined")},Function.prototype.bind\|\|(Function.prototype.bind=function(e){var t=this;if(typeof t!="function")throw new TypeError;var n=E.call(arguments,1),r=function(){if(this instanceof r){var i=function(){};i.prototype=t.prototype;var s=new i,o=t.apply(s,n.concat(E.call(arguments)));return Object(o)===o?o:s}return t.apply(e,n.concat(E.call(arguments)))};return r});for(var N in g)T(g,N)&&

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	6071
Entropy (8bit):	4.961478576775147
Encrypted:	false
SSDEEP:	96:CftkjQu0Q0LCY/TMqqMbFibpR1KO0PT4tWaZSxLakjbBWk/YVGi4inMypJeeYsfA:MoQzj7wyFmnw3EtWaZw+oMCYVlBflKGG
MD5:	812B50931C7ACB37DDFCF2D66CE4F6D9
SHA1:	616C276F6632BE2C9C4F60F8F06582FDE300F9A1
SHA-256:	8B132276A98B7A181026AE1C803C5E060D8FA7A4007BF88F185DC78B7E7B5106
SHA-512:	670A77C041A030AB54CD1740BA69E9FE4C0B1F9531C02F9D37DB6A304052E5F909ED22F771009FE6DA41F6E1046FC6B5A21628E1A2AB7E3BE7F3E2F6397B8CB9
Malicious:	false
Reputation:	low
Preview:	/*. Created by hdoan on 5/8/14.. . This is used to hide and show the error associated with an input field.. * Used also to mark the container of the input field with a 'hasError' class so when the input has focus, the error container can be shown. * Used also to focus on the first input with an error when the form is invalid due to empty inputs. /.define(['jquery', 'validation', 'backbone'], function($, Validation, Backbone) {...'use strict';....var errorDisplay = {...../.... Shows the error container AND visual treatment associated with the input field.... .... @param {Object} param - could be an Event object or element.... */....showError: function(param) {.....var $targetElement,......$targetParent;......// If param is an event.....if (param.type === 'focusin') {......$targetElement = $(param.target);......// param is an element.....} else {......$targetElement = param;.....}.....$targetParent = $targetElement.parents('.textInput');......if ($targetParent.hasClass('has

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16024)
Category:	dropped
Size (bytes):	16052
Entropy (8bit):	5.3519984983543845
Encrypted:	false
SSDEEP:	384:XcGfcUvwKvmwdfdx7ACD0TXXIxjecdXJwEf5yFm0txf:OUVvmwdfPOgHdXJJW
MD5:	90355639E97F4CC3725A100B0B33ED19
SHA1:	0F09081F9F58EB793C8F27EAFB90154A04468710
SHA-256:	EFC3AD603DCA3C78E67493ADB079676731FD72C4204DBF7264D22E897A271267
SHA-512:	8003D80291F35C0BA499E3C5FC74FC4506B654FF62CC1D209538D127A26FC9A19882618F49CC17D67FD0E858D736F1A1DF414A39D5562AC620D2571611B44BC0
Malicious:	false
Reputation:	low
Preview:	/@ 2024 PayPal (v1.0.1) /.!function(){"use strict";function f(t){if(!t\|\|t.constructor!==Object&&t.constructor!==Array)return t;var e,n=t.constructor();for(e in t)n[e]=f(t[e]);return n}function s(t,e){var n;return function(){return t&&(n=t.apply(e\|\|this,arguments),t=null),n}}var e,r={},D=-1,l=(window.PAYPAL=window.PAYPAL\|\|{PubSub:{subscribe:function(t,e){if("function"!=typeof e)return!1;t="symbol"==typeof t?t.toString():t,Object.prototype.hasOwnProperty.call(r,t)\|\|(r[t]={});var n="uid_"+String(++D);return r[t][n]=e,n}}},window.PAYPAL.PubSub),t=(window.fpti=window.fpti\|\|{},function t(){}),n=function n(){return{}},o=("undefined"==typeof JSON&&((JSON={}).stringify=t,JSON.parse=n,window.JSON=JSON),"performance"in window&&window.performance\|\|{}),d=(o&&!o.now&&(e=o.timing,o.now=function(){var t=(new Date).getTime()-(e&&e.navigationStart\|\|0);return 0<t?t:0}),String.prototype.trim\|\|(String.prototype.trim=function(){return this.replace(/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,"")}),Array.prototype

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65508)
Category:	downloaded
Size (bytes):	70162
Entropy (8bit):	5.332928547809831
Encrypted:	false
SSDEEP:	1536:ihUQ8vmwdyuwzSpmURvVCzBuOtmfmVaom+gGmtBmxsuRc:iugz7e+KkCr
MD5:	0AF4783054B8E925EC024DC00FCB4510
SHA1:	B43B595D6899229217DA7CA15E8D1A846E93A666
SHA-256:	C3F1981E14042012337C6493597CD362261453611B727E91847A118B2B4CFFB7
SHA-512:	874D73FF48E306FBAC1471DB4F925DF8348F5C3D322AC13D769AF91F6DC67F33F0886674686F8A9F5168910FD8AC160F007423508ED29665E8138EC411C5BE84
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/pa/js/pa.js
Preview:	/@ 2024 PayPal (v1.9.5) /.!function(){"use strict";function r(t,e,n){(e=function(t){t=function(t,e){if("object"!=typeof t\|\|!t)return t;var n=t[Symbol.toPrimitive];if(void 0===n)return("string"===e?String:Number)(t);t=n.call(t,e\|\|"default");if("object"!=typeof t)return t;throw new TypeError("@@toPrimitive must return a primitive value.")}(t,"string");return"symbol"==typeof t?t:t+""}(e))in t?Object.defineProperty(t,e,{value:n,enumerable:!0,configurable:!0,writable:!0}):t[e]=n}function i(e,t){var n,r=Object.keys(e);return Object.getOwnPropertySymbols&&(n=Object.getOwnPropertySymbols(e),t&&(n=n.filter(function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable})),r.push.apply(r,n)),r}function g(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?i(Object(n),!0).forEach(function(t){r(e,t,n[t])}):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):i(Object(n)).forEach(function(t){Object.defineProperty(e,t,Ob

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18275)
Category:	dropped
Size (bytes):	18895
Entropy (8bit):	5.626512864859831
Encrypted:	false
SSDEEP:	384:JouK7O7qBQ/Qc3eK2ON/1thbJUxmsUKxnaeizzwoLVRg:DrqmaK2GIUKFaeSkoL4
MD5:	874B945767FDB01FEA44E4A1DCA343DD
SHA1:	20906A077B7DF2682FB761E4E422E0ECF7EE22A5
SHA-256:	FE0EC5F3383619D3B7A4E1D1985D9390BA46B15C0FAB27FA99F0B903C5775DD5
SHA-512:	55ACB6A4BB9FDE1E18E16B3CF3179FF31D5EAF750031A8D5BA4F291E81CBBB14C746FC5B409AF28952A87681374EAEDD55279F4F726E35219DEFA1C3DE7461C6
Malicious:	false
Reputation:	low
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var u=function(f){return f},r=this\|\|self,C=function(f,H){if(!(H=(f=null,r).trustedTypes,H)\|\|!H.createPolicy)return f;try{f=H.createPolicy("bg",{createHTML:u,createScript:u,createScriptURL:u})}catch(P){r.console&&r.console.error(P.message)}return f};(0,eval)(function(f,H){return(H=C())&&f.eval(H.createScript("1"))===1?function(P){return H.createScript(P)}:function(P){return""+P}}(r)(Array(Math.random()7824\|0).join("\n")+['(function(){/',.'',.' Copyright Google LLC',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var f5=function(f,H){return H[f]<<24\|H[(f\|0)+1]<<16\|H[(f\|0)+2]<<8\|H[(f\|0)+3]},n=function(f,H,u){f[O(H,u,f),PJ]=2796},uG=function(f){return f},rU=function(f,H,u){return f.ne(function(C){u=C},false,H),u},gU=function(f,H,u,C,K,m,r,d,D){for(r.iO=(r.kI=r[r.fe=C5,r.WY=sD,w],j7(r.R,{get:function(){return this.concat()}})),r.zf=g[r.R](r.iO,{value:{value:{}}}),d=[],D=0;D<372;D++)d[D]=S

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1997
Entropy (8bit):	5.0050192129706
Encrypted:	false
SSDEEP:	48:syq5exVy+GtySao6qP9PGp161pyRDhKOJUoV0gQ84fTbln:7q5eO+GsSao6UGp8rSVKcUo2gp47bl
MD5:	1B66EA06B0CCC5574AA1593988231A8C
SHA1:	FBF4CC6664D86A91D3176E6B2A3DA684FC6E6EDA
SHA-256:	7173550FD32A664B4075E4C34D8BBCFC3725AFB987CF3DBD7FBA10AFA479A6B5
SHA-512:	9BF4C1894C7CFCC65690CC70D5A191C1CF073B39D70C3597790143AFCC0CEECDAB71928FFE49FDFF202312A161F38D2779ACF8B5D6D15B6614326D53A47EA068
Malicious:	false
Reputation:	low
Preview:	/* global requirejs:true */.requirejs.config({..deps: ['app'],..paths: {..."jquery":.....'lib/jquery-1.12.4',..."jqueryUI":.....'lib/jquery.ui.mini',..."json":......(typeof JSON === 'undefined') ? 'lib/json2' : 'empty:',..."underscore":....'lib/underscore-1.13.4',..."backbone":.....'lib/backbone-1.5.0.min',..."backboneSubroute":...'lib/backbone-subroute-0.4.5.min',..."dust":......'lib/dust-core',..."nougat":.....'core/nougat',..."BaseView":.....'core/baseView',..."dust-helpers" :...'lib/dust-helpers',..."dust-helpers-supplement":.'lib/dust-helpers-supplement',..."dustmotes-iterate":..'lib/dustmotes-iterate',..."fso-helper":....'lib/fso-helper',..."fso":......'lib/fso',..."browserId":....'lib/bid',...."pageView":.....'view/pageView',..."login":.....'view/login',...'notifications':...'view/notifications',....//Core Components..."lap":......'components/textInput/lap',..."textField":....'components/textInput/textField',...'selectDropdown':...'components/selectDropdown',....//Widgets..."val

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (648)
Category:	dropped
Size (bytes):	560414
Entropy (8bit):	5.682261246628439
Encrypted:	false
SSDEEP:	12288:Sipgp5LZvBAh23vrEx3O3EIqdPsXeIJZ3Np:Sipi5LZ5A+45YEIQPsXeu3
MD5:	7295EFF549FD29EFECB1D4D156101C7B
SHA1:	7D397D3A98710D0471DDB00A09920E6635A24947
SHA-256:	68C9ADEB367DE331CDCCE59F22197296197E36D51ED13BC82312E0256ACF20F9
SHA-512:	205A96BD3CD51E655BDC691524D68A170BFD53A559F957458B633F89517025C58DF338F4C0064DAD9CFF0CA7E4A46DE76E803DDA2ED0F4381559C6DBBB2ED730
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT./.var d=function(){return[function(N,a,U,y,A,l){return((N^20)&13)==(N-6<((N>>2&14)>=((N+4^20)>=((A=[0,"P","Tx"],(N&71)==N)&&(y=d[7](86,U[A[1]]),l=r[6](2," > ",a,y,U[A[1]])),N)&&(N+2^22)<N&&(U=[34,1023,"ubd"],AD.call(this,e[37](51,U[2]),m[49](73,rK),"POST"),m[49](25,14,e[28](73,1,r[29](7,U[A[0]],U[1],a))),this[A[1]]=a.U()),12)&&(N+1&10)<10&&J.call(this,a,A[0],"conf"),14)&&((N\|5)&15)>=1&&(this[A[1]]=new er,this.size=A[0]),1)&&(l=y&&U[A[2]]()>a?y():null),l},function(N,a,U,y,A,l,z,u,p,x){return(N+6&7)==.(((N-1\|(x=((N>>2&10)==2&&(this.B=a,this.P=U),[20,13,36]),x[2]))<N&&(N+3&51)>=N&&(F[48](21,y,l.P),(u=l.P.G)?p=m[35](29,

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1839
Entropy (8bit):	4.952637178893887
Encrypted:	false
SSDEEP:	48:gKZK68fKSLYBj17ekcLWyWpbwnGD9jH2RqFhmWe:i68fKSEBj17hcL1ewnGDZ2RqFAv
MD5:	E925A9183DDDF6BC1F3C6C21E4FC7F20
SHA1:	F4801E7F36BD3C94E0B3C405FDF5942A0563A91F
SHA-256:	F3A20B45053B0E79F75F12923FC4A7E836BC07F4ECFF2A2FA1F8ECDBA850E85A
SHA-512:	F10EB10B8065C10AE65950DE9EF5F36EC9DF25D764B289530FE2AD3AE97657BD5805E71FED99E58D81D34796A1002419343CCA85CA47EE7A71D6C15855AD9705
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/router.js
Preview:	/global define:true, console:true, jQuery:true, require:true /..define([ 'jquery', 'backbone'],...function ($, Backbone) {....'use strict';....var router;....router = Backbone.Router.extend({....routes: {.....'': 'showTheView',.....'stepup?queryString': 'showTheView',.....'rendercaptcha': 'showAuthCaptcha',.....'twofactorpath': 'showTheView',.....'resendotp': 'showTheView',.....'switchoption?*queryString': 'showTheView',.....'switchoption': 'showTheView',.....'softtoken': 'showTheView'....},.....hasPushState: window.history && 'pushState' in window.history,.....// this.viewName is only set when app.js is executed. It is never set again, unless app.js is....// requested again like when a page is rendered server-side.....showTheView: function () {.....this.showView(this.viewName);....},.....showAuthCaptcha: function() {.....this.showView('authcaptcha');....},.....showView: function (name) {.....var viewName = name,......asyncAssets = [ "view/" + viewName ];......require(asyncAssets,

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12696), with no line terminators
Category:	dropped
Size (bytes):	12696
Entropy (8bit):	5.130049969968838
Encrypted:	false
SSDEEP:	192:oLV3zev1o5E6PcoF+kkEBukQBEzmVxastV:oLV3SNSXEkkEBujSzm6WV
MD5:	21BE63CFA9F3A9BEAD27FDC3555D397B
SHA1:	A3AD888102598B9F846045BA5A1D75284B9E155D
SHA-256:	0F3A415DFDA1FFC276D264A1E26D47AB8B480B80219142661E05C75AD35E8CBD
SHA-512:	458192E91CE54129DA8AA0DABEC8C75E8786DC086916C89BEC461018969877477A9EA1035FD38681C8B1BFA29EF748F7DDC97BA4CAE615E7EC7CA4B49CF793A8
Malicious:	false
Reputation:	low
Preview:	define(["jquery","backbone","newgat","pageView","postMessage","authcaptcha"],function(e,t,n,r,i,s){"use strict";var o=r.extend({el:"#main",rlogIds:[],LOADING:"loading",currentViewTemplate:undefined,previousViewTemplate:"null",currentView:"null",pageName:"null",keepMeLoggedIn:undefined,events:{"submit form.proceed":"proceed","click a.proceed":"proceed"},postCaptchaMessageSent:!1,initialize:function(){var r,s,o,u;this.clientCalLog({evt:"ul-loaded"}),this.model=new t.Model(n.getContext()),this.template=this.model.get("viewName"),this.currentViewTemplate=this.model.get("viewName");if(this.isMiniBrowser()){var a=this;o=window.attachEvent?"onbeforeunload":"beforeunload",u=window.addEventListener\|\|window.attachEvent,u(o,function(t){var n=["eConsent","login"],r=document.getElementById("rememberMe"),i=r&&r.getAttribute("data-maxRMReached"),s=t.target\|\|t.srcElement,o=s&&s.activeElement&&s.activeElement.nodeName;if(n.indexOf(a.currentViewTemplate)>=0){a.sendPostMessage({flowtype:"prox",status:"ex

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2974
Entropy (8bit):	4.88985867449781
Encrypted:	false
SSDEEP:	48:Ykrs/BqPgeFo5BwsbQwTIcACGWS29oXuseVzxdor2BFKH9zlnBJN4m:YkqBogKo8skwTIxCK2rsuLKH9JvNP
MD5:	01BC0C36F25B668C2461BD9AA72CBA12
SHA1:	36AA5EFC5A15AF82A9489BB1C34E0C538EE63659
SHA-256:	E991024988B4CD788022C6387E520882D74EDAC454F880738E5B267B50815404
SHA-512:	BF7D8020B63E424E744EE5E11FDB6E5B1AD898CF35248572F1D63A788D70FCF03D2CF833AB950D154AB44830511F12B58E0A1625DDE3188AC428FC49483F55C0
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/widgets/validation.js
Preview:	/*. Created by hdoan on 5/5/14.. . Validates form inputs. Will emit Backbone event if input is valid, invalid, or empty.. * The event naming convention is 'valid', 'invalid', or 'empty' followed by the name attribute of the field. . For example, if you are validating the email input, the three possible events are as follows:. * 1. 'validemail'. * 2. 'invalidemail'. * 3. 'emptyemail'. /.define(..[ 'jquery', 'backbone', 'underscore' ],...function($, Backbone, _) {...'use strict';....var validation = {.....init: function(view) {.....var elem = view.$el,......fields = elem.find('.validate');......if (fields.length !== 0) {.......// Find all fields with the 'validate' class and onblur add handler to validate......fields.each(function() {.......$(this).on('blur', function (field) {........validation.doValidation(field.target);.......});......});.....}....},...../.... Performs the validation.... .... @param {Object} target - event object.... */....doValidation: function(targe

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (330)
Category:	dropped
Size (bytes):	29314
Entropy (8bit):	5.449471861492707
Encrypted:	false
SSDEEP:	768:rw6peNonqZ+tOD/CVzJWFStqf9JAtEPmNF5w/WTad0XAK1FIAhUrYiOjHhff9V/G:0OjBff9VkUu3YTWzTr5
MD5:	6AEC50C9157FB0F30DD46B6D01E969EB
SHA1:	444F950B99B1160929B570F8A20A534F9D813CCD
SHA-256:	BC13F30508143C2E941180E85EE9A5768808B38E9E9DDEBC023A623BF33F4545
SHA-512:	A346DBC64A5114A95EBADE8A0307B18BF6D4158C72AB1D936AB9346BBB73502EC05A5AB736D70C866DC549CD5FCD7F1D86F642E1524BCE90F9877092E1681FFC
Malicious:	false
Reputation:	low
Preview:	'use strict';.var autosubmit = false,..recaptchaCallback,..recaptchaEnterpriseCallback;.var ADS_FPTI = (function(){...var adsPluginDiv = document.getElementById('captcha-standalone'),...csrf = adsPluginDiv.getAttribute('data-csrf'),...sessionId = adsPluginDiv.getAttribute('data-sessionid');...var isFPTIEnabled = typeof PAYPAL !== 'undefined' && typeof PAYPAL.analytics !== 'undefined' &&...typeof PAYPAL.analytics.instance !== 'undefined' && typeof fpti !== 'undefined';...if (isFPTIEnabled){...PAYPAL.analytics.startClientErrorTracking();...PAYPAL.analytics.startCPLTracking();..}...var postData = function (data){....var xmlHttpReq = new XMLHttpRequest();...xmlHttpReq.open('POST', '/auth/logclientdata');...xmlHttpReq.setRequestHeader("Content-Type", "application/json;charset=UTF-8");...xmlHttpReq.timeout = 15000; // 15sec....var dataToSend = {....fpti : data,...._csrf : csrf,...._sessionID : sessionId...};....xmlHttpReq.send(JSON.stringify(dataToSend));..};...var customADSFPTITracking = fu

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-05T19:04:56.273054+0100	2023760	ET PHISHING Successful Paypal Phish Jan 23 2017	1	192.168.2.6	49824	151.101.193.21	443	TCP
2024-12-05T19:04:56.273054+0100	2024846	ET PHISHING Successful Paypal Phish Oct 16 2017	1	192.168.2.6	49824	151.101.193.21	443	TCP
2024-12-05T19:04:56.273054+0100	2031565	ET PHISHING Successful Paypal Phish M1 Dec 8 2015	1	192.168.2.6	49824	151.101.193.21	443	TCP
2024-12-05T19:04:56.273054+0100	2822573	ETPRO PHISHING Successful Paypal Phish Oct 11 2016	1	192.168.2.6	49824	151.101.193.21	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 5, 2024 19:04:38.784902096 CET	49716	443	192.168.2.6	142.250.181.68
Dec 5, 2024 19:04:38.784959078 CET	443	49716	142.250.181.68	192.168.2.6
Dec 5, 2024 19:04:38.785130978 CET	49716	443	192.168.2.6	142.250.181.68
Dec 5, 2024 19:04:38.785378933 CET	49716	443	192.168.2.6	142.250.181.68
Dec 5, 2024 19:04:38.785397053 CET	443	49716	142.250.181.68	192.168.2.6
Dec 5, 2024 19:04:39.766539097 CET	49719	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:04:39.766593933 CET	443	49719	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:39.766693115 CET	49719	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:04:39.767036915 CET	49720	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:04:39.767071962 CET	443	49720	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:39.767121077 CET	49720	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:04:39.767347097 CET	49719	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:04:39.767359972 CET	443	49719	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:39.767599106 CET	49720	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:04:39.767611980 CET	443	49720	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:40.486361980 CET	443	49716	142.250.181.68	192.168.2.6
Dec 5, 2024 19:04:40.492429972 CET	49716	443	192.168.2.6	142.250.181.68
Dec 5, 2024 19:04:40.492471933 CET	443	49716	142.250.181.68	192.168.2.6
Dec 5, 2024 19:04:40.493541002 CET	443	49716	142.250.181.68	192.168.2.6
Dec 5, 2024 19:04:40.493618965 CET	49716	443	192.168.2.6	142.250.181.68
Dec 5, 2024 19:04:40.500519037 CET	49716	443	192.168.2.6	142.250.181.68
Dec 5, 2024 19:04:40.500600100 CET	443	49716	142.250.181.68	192.168.2.6
Dec 5, 2024 19:04:40.550690889 CET	49716	443	192.168.2.6	142.250.181.68
Dec 5, 2024 19:04:40.550718069 CET	443	49716	142.250.181.68	192.168.2.6
Dec 5, 2024 19:04:40.598220110 CET	49716	443	192.168.2.6	142.250.181.68
Dec 5, 2024 19:04:41.028459072 CET	443	49720	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:41.028723001 CET	49720	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:04:41.028743029 CET	443	49720	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:41.029208899 CET	443	49720	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:41.029273033 CET	49720	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:04:41.029959917 CET	443	49720	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:41.030006886 CET	49720	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:04:41.030920029 CET	49720	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:04:41.030991077 CET	443	49720	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:41.031101942 CET	49720	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:04:41.031112909 CET	443	49720	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:41.080857992 CET	49720	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:04:41.219991922 CET	443	49719	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:41.220268965 CET	49719	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:04:41.220288038 CET	443	49719	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:41.221113920 CET	443	49719	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:41.221174955 CET	49719	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:04:41.222373009 CET	443	49719	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:41.222455978 CET	49719	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:04:41.222642899 CET	49719	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:04:41.222841024 CET	443	49719	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:41.269948006 CET	49719	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:04:41.269961119 CET	443	49719	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:41.316268921 CET	49719	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:04:41.740204096 CET	443	49720	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:41.740262985 CET	443	49720	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:41.740309954 CET	443	49720	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:41.740336895 CET	49720	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:04:41.740355968 CET	443	49720	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:41.742796898 CET	49720	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:04:41.742805958 CET	443	49720	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:41.751565933 CET	443	49720	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:41.751625061 CET	49720	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:04:41.751636028 CET	443	49720	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:41.759849072 CET	443	49720	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:41.759908915 CET	49720	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:04:41.759916067 CET	443	49720	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:41.776354074 CET	443	49720	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:41.776464939 CET	49720	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:04:41.776489973 CET	443	49720	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:41.784785032 CET	443	49720	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:41.784827948 CET	443	49720	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:41.784888983 CET	49720	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:04:41.784898996 CET	443	49720	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:41.784955025 CET	49720	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:04:41.860027075 CET	443	49720	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:41.912915945 CET	49720	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:04:41.912942886 CET	443	49720	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:41.916009903 CET	49727	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:41.916042089 CET	443	49727	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:41.916300058 CET	49727	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:41.916496992 CET	49728	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:41.916506052 CET	443	49728	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:41.916624069 CET	49729	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:41.916652918 CET	49728	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:41.916666031 CET	443	49729	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:41.916810989 CET	49729	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:41.917980909 CET	49729	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:41.918000937 CET	443	49729	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:41.918288946 CET	49728	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:41.918308973 CET	443	49728	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:41.918557882 CET	49727	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:41.918566942 CET	443	49727	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:41.936748028 CET	443	49720	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:41.936822891 CET	49720	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:04:41.936852932 CET	443	49720	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:41.940538883 CET	49730	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:41.940562010 CET	443	49730	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:41.940629005 CET	49730	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:41.941101074 CET	49731	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:41.941137075 CET	443	49731	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:41.941349983 CET	49731	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:41.941438913 CET	49732	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:41.941478968 CET	443	49732	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:41.941739082 CET	49732	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:41.942073107 CET	49730	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:41.942087889 CET	443	49730	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:41.942255974 CET	49731	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:41.942270994 CET	443	49731	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:41.942401886 CET	49732	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:41.942425013 CET	443	49732	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:41.944286108 CET	443	49720	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:41.944324970 CET	443	49720	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:41.944346905 CET	49720	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:04:41.944369078 CET	443	49720	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:41.944633007 CET	49720	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:04:41.954309940 CET	443	49720	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:41.954399109 CET	443	49720	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:41.956489086 CET	49720	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:04:41.964539051 CET	49720	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:04:41.964565039 CET	443	49720	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:42.171216011 CET	49733	443	192.168.2.6	18.66.161.70
Dec 5, 2024 19:04:42.171288967 CET	443	49733	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:42.171400070 CET	49733	443	192.168.2.6	18.66.161.70
Dec 5, 2024 19:04:42.171633005 CET	49733	443	192.168.2.6	18.66.161.70
Dec 5, 2024 19:04:42.171648979 CET	443	49733	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:43.684571981 CET	443	49727	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:43.685003996 CET	443	49729	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:43.686546087 CET	443	49728	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:43.687459946 CET	49728	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:43.687479019 CET	443	49728	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:43.687609911 CET	49729	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:43.687638044 CET	443	49729	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:43.687767029 CET	49727	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:43.687786102 CET	443	49727	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:43.688055992 CET	443	49728	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:43.688123941 CET	49728	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:43.688272953 CET	443	49729	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:43.688273907 CET	443	49727	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:43.688330889 CET	49729	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:43.688397884 CET	49727	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:43.689038992 CET	443	49728	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:43.689076900 CET	443	49727	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:43.689095020 CET	49728	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:43.689116001 CET	49727	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:43.689135075 CET	443	49729	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:43.689188004 CET	49729	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:43.703465939 CET	443	49730	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:43.704267025 CET	443	49731	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:43.705741882 CET	443	49732	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:43.709127903 CET	49732	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:43.709167004 CET	443	49732	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:43.709322929 CET	49731	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:43.709337950 CET	443	49731	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:43.709422112 CET	49730	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:43.709435940 CET	443	49730	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:43.709822893 CET	443	49732	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:43.709835052 CET	443	49731	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:43.709868908 CET	443	49730	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:43.709902048 CET	49732	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:43.709908962 CET	49731	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:43.709954977 CET	49730	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:43.710510015 CET	443	49731	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:43.710546970 CET	443	49730	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:43.710566044 CET	49731	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:43.710608006 CET	49730	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:43.711380005 CET	443	49733	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:43.711399078 CET	443	49732	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:43.711467981 CET	49732	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:43.717957973 CET	49733	443	192.168.2.6	18.66.161.70
Dec 5, 2024 19:04:43.717979908 CET	443	49733	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:43.718499899 CET	49729	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:43.718636036 CET	443	49729	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:43.719177008 CET	443	49733	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:43.719239950 CET	49733	443	192.168.2.6	18.66.161.70
Dec 5, 2024 19:04:43.719681025 CET	49727	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:43.719809055 CET	443	49727	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:43.720092058 CET	49728	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:43.720202923 CET	443	49728	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:43.720418930 CET	49730	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:43.720489979 CET	443	49730	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:43.720575094 CET	49731	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:43.720645905 CET	443	49731	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:43.720938921 CET	49732	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:43.721246958 CET	443	49732	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:43.722022057 CET	49733	443	192.168.2.6	18.66.161.70
Dec 5, 2024 19:04:43.722089052 CET	443	49733	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:43.722325087 CET	49729	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:43.722343922 CET	443	49729	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:43.722579002 CET	49727	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:43.722594976 CET	443	49727	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:43.722785950 CET	49728	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:43.722791910 CET	443	49728	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:43.723094940 CET	49730	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:43.723108053 CET	443	49730	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:43.723161936 CET	49731	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:43.723176003 CET	443	49731	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:43.723212957 CET	49732	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:43.723225117 CET	443	49732	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:43.723308086 CET	49733	443	192.168.2.6	18.66.161.70
Dec 5, 2024 19:04:43.723325014 CET	443	49733	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:43.771015882 CET	49728	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:43.771015882 CET	49730	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:43.771018028 CET	49732	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:43.771015882 CET	49727	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:43.771023035 CET	49733	443	192.168.2.6	18.66.161.70
Dec 5, 2024 19:04:43.771085024 CET	49729	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:43.771085024 CET	49731	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.192614079 CET	443	49727	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.192708015 CET	443	49728	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.195100069 CET	443	49729	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.196749926 CET	443	49727	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.196825027 CET	49727	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.196835995 CET	443	49727	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.196865082 CET	443	49727	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.196923971 CET	49727	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.196935892 CET	49727	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.197431087 CET	49727	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.197452068 CET	443	49727	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.197871923 CET	49738	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.197917938 CET	443	49738	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.198118925 CET	49738	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.198514938 CET	49738	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.198528051 CET	443	49738	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.213550091 CET	443	49728	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.213591099 CET	443	49728	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.213639975 CET	443	49728	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.213654995 CET	49728	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.213766098 CET	49728	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.214210033 CET	49728	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.214221954 CET	443	49728	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.214657068 CET	49739	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.214699030 CET	443	49739	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.214818954 CET	49739	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.215393066 CET	49739	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.215403080 CET	443	49739	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.229620934 CET	443	49730	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.230515957 CET	443	49731	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.234669924 CET	443	49732	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.234755039 CET	443	49731	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.234827995 CET	443	49731	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.234853983 CET	49731	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.234998941 CET	49731	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.235261917 CET	49731	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.235275984 CET	443	49731	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.235646963 CET	49740	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.235691071 CET	443	49740	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.235800028 CET	49740	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.236192942 CET	49740	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.236205101 CET	443	49740	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.238104105 CET	49729	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.243107080 CET	443	49729	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.243115902 CET	443	49729	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.243156910 CET	443	49729	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.243181944 CET	443	49729	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.243201971 CET	49729	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.243206024 CET	443	49729	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.243221998 CET	443	49729	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.243263006 CET	49729	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.243263006 CET	49729	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.243263006 CET	49729	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.243330002 CET	49729	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.272375107 CET	49730	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.275702953 CET	443	49730	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.275719881 CET	443	49730	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.275737047 CET	443	49730	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.275746107 CET	443	49730	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.275758982 CET	443	49730	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.275815010 CET	49730	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.275815010 CET	49730	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.275830030 CET	443	49730	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.275841951 CET	443	49730	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.275985956 CET	49730	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.276287079 CET	49730	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.276299953 CET	443	49730	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.288253069 CET	49732	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.289117098 CET	443	49732	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.289133072 CET	443	49732	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.289153099 CET	443	49732	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.289163113 CET	443	49732	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.289180994 CET	443	49732	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.289205074 CET	49732	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.289220095 CET	443	49732	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.289252996 CET	49732	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.289283037 CET	49732	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.341089964 CET	49741	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.341136932 CET	443	49741	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.341222048 CET	49742	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.341249943 CET	49741	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.341265917 CET	443	49742	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.341376066 CET	49743	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.341384888 CET	443	49743	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.341402054 CET	49742	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.341435909 CET	49743	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.341618061 CET	49744	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.341645002 CET	443	49744	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.341707945 CET	49744	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.341883898 CET	49741	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.341897011 CET	443	49741	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.342034101 CET	49743	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.342042923 CET	443	49743	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.342159986 CET	49742	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.342175007 CET	443	49742	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.342288971 CET	49744	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.342298031 CET	443	49744	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.415916920 CET	443	49729	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.415940046 CET	443	49729	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.415981054 CET	49729	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.415997028 CET	443	49729	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.416656971 CET	49729	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.451318026 CET	443	49732	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.451334953 CET	443	49732	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.451374054 CET	443	49732	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.451396942 CET	49732	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.451422930 CET	443	49732	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.451447964 CET	49732	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.451464891 CET	49732	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.457438946 CET	443	49729	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.457459927 CET	443	49729	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.457686901 CET	49729	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.457698107 CET	443	49729	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.457978010 CET	49729	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.504056931 CET	443	49732	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.504096985 CET	443	49732	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.504144907 CET	49732	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.504163027 CET	443	49732	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.504201889 CET	49732	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.579410076 CET	443	49729	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.579432011 CET	443	49729	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.579567909 CET	49729	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.579567909 CET	49729	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.579585075 CET	443	49729	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.579746962 CET	49729	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.594434977 CET	443	49729	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.594474077 CET	443	49729	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.594494104 CET	49729	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.594501019 CET	443	49729	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.594538927 CET	443	49729	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.594655991 CET	49729	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.594655991 CET	49729	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.594979048 CET	49729	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.594990015 CET	443	49729	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.616971970 CET	443	49732	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.616992950 CET	443	49732	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.617058992 CET	49732	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.617073059 CET	443	49732	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.617109060 CET	49732	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.626019955 CET	443	49732	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.626085997 CET	49732	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.626089096 CET	443	49732	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.626130104 CET	49732	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.626357079 CET	49732	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.626372099 CET	443	49732	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.631647110 CET	49745	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.631685972 CET	443	49745	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.631808996 CET	49745	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.632754087 CET	49745	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.632766008 CET	443	49745	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.651240110 CET	49746	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.651276112 CET	443	49746	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:44.651375055 CET	49746	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.651552916 CET	49746	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:44.651561975 CET	443	49746	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:45.045619011 CET	443	49733	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:45.045653105 CET	443	49733	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:45.045660973 CET	443	49733	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:45.045675993 CET	443	49733	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:45.045694113 CET	443	49733	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:45.045701981 CET	443	49733	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:45.045738935 CET	49733	443	192.168.2.6	18.66.161.70
Dec 5, 2024 19:04:45.045773983 CET	443	49733	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:45.045790911 CET	49733	443	192.168.2.6	18.66.161.70
Dec 5, 2024 19:04:45.045821905 CET	49733	443	192.168.2.6	18.66.161.70
Dec 5, 2024 19:04:45.228491068 CET	443	49733	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:45.228516102 CET	443	49733	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:45.228590965 CET	49733	443	192.168.2.6	18.66.161.70
Dec 5, 2024 19:04:45.228626966 CET	443	49733	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:45.232449055 CET	49733	443	192.168.2.6	18.66.161.70
Dec 5, 2024 19:04:45.281224012 CET	443	49733	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:45.281245947 CET	443	49733	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:45.281339884 CET	49733	443	192.168.2.6	18.66.161.70
Dec 5, 2024 19:04:45.281368971 CET	443	49733	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:45.282434940 CET	49733	443	192.168.2.6	18.66.161.70
Dec 5, 2024 19:04:45.400480986 CET	443	49733	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:45.400547028 CET	443	49733	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:45.400701046 CET	49733	443	192.168.2.6	18.66.161.70
Dec 5, 2024 19:04:45.400701046 CET	49733	443	192.168.2.6	18.66.161.70
Dec 5, 2024 19:04:45.400728941 CET	443	49733	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:45.402802944 CET	49733	443	192.168.2.6	18.66.161.70
Dec 5, 2024 19:04:45.440423965 CET	443	49733	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:45.440450907 CET	443	49733	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:45.440557003 CET	49733	443	192.168.2.6	18.66.161.70
Dec 5, 2024 19:04:45.440591097 CET	443	49733	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:45.442569017 CET	49733	443	192.168.2.6	18.66.161.70
Dec 5, 2024 19:04:45.462081909 CET	443	49733	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:45.462106943 CET	443	49733	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:45.462194920 CET	49733	443	192.168.2.6	18.66.161.70
Dec 5, 2024 19:04:45.462218046 CET	443	49733	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:45.462424040 CET	49733	443	192.168.2.6	18.66.161.70
Dec 5, 2024 19:04:45.481673956 CET	443	49733	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:45.481698990 CET	443	49733	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:45.481887102 CET	49733	443	192.168.2.6	18.66.161.70
Dec 5, 2024 19:04:45.481908083 CET	443	49733	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:45.481951952 CET	49733	443	192.168.2.6	18.66.161.70
Dec 5, 2024 19:04:45.587758064 CET	443	49733	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:45.587790012 CET	443	49733	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:45.587893009 CET	49733	443	192.168.2.6	18.66.161.70
Dec 5, 2024 19:04:45.587929010 CET	443	49733	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:45.590593100 CET	49733	443	192.168.2.6	18.66.161.70
Dec 5, 2024 19:04:45.603913069 CET	443	49733	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:45.603935957 CET	443	49733	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:45.604156971 CET	49733	443	192.168.2.6	18.66.161.70
Dec 5, 2024 19:04:45.604172945 CET	443	49733	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:45.604223013 CET	49733	443	192.168.2.6	18.66.161.70
Dec 5, 2024 19:04:45.620290995 CET	443	49733	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:45.620311975 CET	443	49733	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:45.620400906 CET	49733	443	192.168.2.6	18.66.161.70
Dec 5, 2024 19:04:45.620417118 CET	443	49733	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:45.623536110 CET	49733	443	192.168.2.6	18.66.161.70
Dec 5, 2024 19:04:45.633347988 CET	443	49733	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:45.633390903 CET	443	49733	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:45.633435965 CET	443	49733	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:45.633436918 CET	49733	443	192.168.2.6	18.66.161.70
Dec 5, 2024 19:04:45.633605003 CET	49733	443	192.168.2.6	18.66.161.70
Dec 5, 2024 19:04:45.634262085 CET	49733	443	192.168.2.6	18.66.161.70
Dec 5, 2024 19:04:45.634277105 CET	443	49733	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:45.793171883 CET	49748	443	192.168.2.6	18.66.161.97
Dec 5, 2024 19:04:45.793217897 CET	443	49748	18.66.161.97	192.168.2.6
Dec 5, 2024 19:04:45.793329000 CET	49748	443	192.168.2.6	18.66.161.97
Dec 5, 2024 19:04:45.793540001 CET	49748	443	192.168.2.6	18.66.161.97
Dec 5, 2024 19:04:45.793550968 CET	443	49748	18.66.161.97	192.168.2.6
Dec 5, 2024 19:04:45.965413094 CET	443	49738	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:45.965718031 CET	49738	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:45.965759039 CET	443	49738	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:45.966272116 CET	443	49738	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:45.966685057 CET	49738	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:45.966768980 CET	443	49738	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:45.966826916 CET	49738	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:45.973057032 CET	443	49739	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:45.973516941 CET	49739	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:45.973542929 CET	443	49739	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:45.973958969 CET	443	49739	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:45.974411011 CET	49739	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:45.974476099 CET	443	49739	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:45.974701881 CET	49739	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.005812883 CET	443	49740	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.006102085 CET	49740	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.006130934 CET	443	49740	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.006685972 CET	443	49740	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.006755114 CET	49740	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.007626057 CET	443	49740	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.007679939 CET	49740	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.007899046 CET	49740	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.007988930 CET	443	49740	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.008030891 CET	49740	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.011339903 CET	443	49738	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.019334078 CET	443	49739	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.020199060 CET	49738	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.051341057 CET	443	49740	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.055341005 CET	49740	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.055354118 CET	443	49740	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.100944996 CET	443	49743	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.101213932 CET	49743	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.101238966 CET	443	49743	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.101434946 CET	443	49744	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.101612091 CET	49744	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.101638079 CET	443	49744	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.101660013 CET	443	49743	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.101674080 CET	443	49742	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.101735115 CET	49743	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.101946115 CET	49742	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.101965904 CET	443	49742	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.102040052 CET	443	49744	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.102111101 CET	49744	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.102144957 CET	49740	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.102482080 CET	443	49742	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.102504969 CET	443	49743	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.102533102 CET	49742	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.102562904 CET	49743	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.102782011 CET	443	49744	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.102807045 CET	443	49741	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.102826118 CET	49744	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.102946997 CET	49744	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.103005886 CET	443	49744	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.103101969 CET	49743	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.103190899 CET	443	49742	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.103244066 CET	49742	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.103291988 CET	443	49743	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.103565931 CET	49742	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.103631020 CET	443	49742	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.103708982 CET	49741	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.103717089 CET	443	49741	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.103905916 CET	49744	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.103914022 CET	443	49744	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.103940964 CET	49743	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.103948116 CET	443	49743	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.104080915 CET	49742	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.104089022 CET	443	49742	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.104635954 CET	443	49741	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.104693890 CET	49741	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.105529070 CET	443	49741	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.105592012 CET	49741	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.105722904 CET	49741	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.105849028 CET	49741	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.106071949 CET	443	49741	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.148037910 CET	49742	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.148053885 CET	49744	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.148058891 CET	49743	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.148122072 CET	49741	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.148130894 CET	443	49741	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.182132959 CET	49749	443	192.168.2.6	18.66.161.70
Dec 5, 2024 19:04:46.182173967 CET	443	49749	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:46.182329893 CET	49749	443	192.168.2.6	18.66.161.70
Dec 5, 2024 19:04:46.182692051 CET	49749	443	192.168.2.6	18.66.161.70
Dec 5, 2024 19:04:46.182703018 CET	443	49749	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:46.193892956 CET	49741	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.398823023 CET	443	49745	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.399249077 CET	49745	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.399274111 CET	443	49745	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.399727106 CET	443	49745	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.399816036 CET	49745	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.400463104 CET	443	49745	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.400530100 CET	49745	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.400686979 CET	49745	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.400758028 CET	443	49745	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.400825024 CET	49745	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.400832891 CET	443	49745	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.413750887 CET	443	49746	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.414046049 CET	49746	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.414066076 CET	443	49746	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.418560028 CET	443	49746	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.418755054 CET	49746	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.419305086 CET	443	49746	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.419405937 CET	49746	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.419516087 CET	49746	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.419617891 CET	443	49746	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.419651985 CET	49746	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.443228006 CET	49745	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.459853888 CET	49746	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.459877968 CET	443	49746	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.480717897 CET	443	49738	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.484183073 CET	443	49738	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.484381914 CET	49738	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.484747887 CET	49738	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.484769106 CET	443	49738	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.487145901 CET	443	49739	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.487251997 CET	443	49739	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.487341881 CET	49739	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.489154100 CET	49739	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.489173889 CET	443	49739	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.491481066 CET	49754	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.491511106 CET	443	49754	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.491611958 CET	49754	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.492034912 CET	49754	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.492044926 CET	443	49754	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.492496967 CET	49755	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.492566109 CET	443	49755	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.492624998 CET	49755	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.494760990 CET	49755	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.494776964 CET	443	49755	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.504359961 CET	49746	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.518563986 CET	443	49740	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.530877113 CET	443	49740	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.530881882 CET	443	49740	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.530952930 CET	443	49740	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.531064987 CET	49740	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.531064987 CET	49740	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.531265020 CET	49740	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.531280041 CET	443	49740	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.533823013 CET	49756	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.533866882 CET	443	49756	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.533931017 CET	49756	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.534154892 CET	49756	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.534169912 CET	443	49756	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.534624100 CET	49757	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.534668922 CET	443	49757	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.534739017 CET	49757	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.535887003 CET	49757	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.535902977 CET	443	49757	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.614972115 CET	443	49744	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.616420031 CET	443	49742	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.617212057 CET	443	49743	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.617969990 CET	443	49741	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.618918896 CET	443	49742	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.618982077 CET	49742	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.618988037 CET	443	49742	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.619035006 CET	49742	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.619246960 CET	49742	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.619270086 CET	443	49742	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.619621038 CET	49758	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.619659901 CET	443	49758	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.619729996 CET	49758	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.620193958 CET	49758	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.620207071 CET	443	49758	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.625686884 CET	443	49744	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.625747919 CET	443	49744	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.625802994 CET	49744	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.625802994 CET	49744	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.626149893 CET	49744	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.626164913 CET	443	49744	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.626481056 CET	49759	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.626529932 CET	443	49759	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.626605034 CET	49759	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.626971960 CET	49759	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.626986027 CET	443	49759	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.638147116 CET	443	49743	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.638184071 CET	443	49743	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.638206959 CET	443	49743	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.638220072 CET	49743	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.638277054 CET	49743	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.638492107 CET	49743	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.638501883 CET	443	49743	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.660954952 CET	49741	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.664227962 CET	443	49741	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.664238930 CET	443	49741	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.664294004 CET	443	49741	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.664309025 CET	443	49741	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.664335966 CET	49741	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.664335966 CET	49741	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.664340973 CET	443	49741	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.664355993 CET	49741	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.664361954 CET	443	49741	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.664405107 CET	49741	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.664405107 CET	49741	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.664695978 CET	49741	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.664705992 CET	443	49741	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.673989058 CET	49761	443	192.168.2.6	151.101.131.1
Dec 5, 2024 19:04:46.674011946 CET	443	49761	151.101.131.1	192.168.2.6
Dec 5, 2024 19:04:46.674158096 CET	49761	443	192.168.2.6	151.101.131.1
Dec 5, 2024 19:04:46.674263954 CET	49761	443	192.168.2.6	151.101.131.1
Dec 5, 2024 19:04:46.674274921 CET	443	49761	151.101.131.1	192.168.2.6
Dec 5, 2024 19:04:46.915067911 CET	443	49745	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.929718018 CET	443	49746	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.959482908 CET	443	49745	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.959495068 CET	443	49745	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.959517956 CET	443	49745	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.959604025 CET	49745	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.959644079 CET	443	49745	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.959661007 CET	49745	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.959702969 CET	49745	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.977477074 CET	443	49746	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.977487087 CET	443	49746	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.977534056 CET	443	49746	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.977546930 CET	443	49746	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.977554083 CET	443	49746	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.977572918 CET	49746	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.977592945 CET	443	49746	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.977627039 CET	443	49746	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:46.977729082 CET	49746	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.977729082 CET	49746	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:46.977729082 CET	49746	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:47.029146910 CET	49746	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:47.121665001 CET	443	49746	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:47.121678114 CET	443	49746	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:47.121706963 CET	443	49746	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:47.121776104 CET	443	49746	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:47.121778011 CET	49746	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:47.121826887 CET	49746	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:47.122271061 CET	49746	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:47.122289896 CET	443	49746	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:47.125650883 CET	49763	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:47.125696898 CET	443	49763	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:47.125766039 CET	49763	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:47.125999928 CET	49763	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:47.126014948 CET	443	49763	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:47.126784086 CET	49764	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:47.126816988 CET	443	49764	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:47.126888990 CET	49764	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:47.127099991 CET	49764	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:47.127116919 CET	443	49764	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:47.130852938 CET	443	49745	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:47.130862951 CET	443	49745	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:47.130897999 CET	443	49745	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:47.130937099 CET	49745	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:47.130965948 CET	443	49745	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:47.130979061 CET	49745	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:47.131012917 CET	49745	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:47.175725937 CET	443	49745	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:47.175749063 CET	443	49745	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:47.175879002 CET	49745	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:47.175915003 CET	443	49745	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:47.175966978 CET	49745	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:47.233696938 CET	443	49745	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:47.233722925 CET	443	49745	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:47.233845949 CET	49745	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:47.233871937 CET	443	49745	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:47.233922958 CET	49745	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:47.305705070 CET	443	49745	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:47.305783987 CET	443	49745	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:47.305807114 CET	49745	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:47.305856943 CET	49745	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:47.306197882 CET	49745	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:47.306222916 CET	443	49745	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:47.331566095 CET	443	49748	18.66.161.97	192.168.2.6
Dec 5, 2024 19:04:47.331829071 CET	49748	443	192.168.2.6	18.66.161.97
Dec 5, 2024 19:04:47.331847906 CET	443	49748	18.66.161.97	192.168.2.6
Dec 5, 2024 19:04:47.332907915 CET	443	49748	18.66.161.97	192.168.2.6
Dec 5, 2024 19:04:47.332997084 CET	49748	443	192.168.2.6	18.66.161.97
Dec 5, 2024 19:04:47.333463907 CET	49748	443	192.168.2.6	18.66.161.97
Dec 5, 2024 19:04:47.333529949 CET	443	49748	18.66.161.97	192.168.2.6
Dec 5, 2024 19:04:47.333775043 CET	49748	443	192.168.2.6	18.66.161.97
Dec 5, 2024 19:04:47.333784103 CET	443	49748	18.66.161.97	192.168.2.6
Dec 5, 2024 19:04:47.378577948 CET	49748	443	192.168.2.6	18.66.161.97
Dec 5, 2024 19:04:47.792309046 CET	443	49749	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:47.845422029 CET	49749	443	192.168.2.6	18.66.161.70
Dec 5, 2024 19:04:47.881690025 CET	49749	443	192.168.2.6	18.66.161.70
Dec 5, 2024 19:04:47.881699085 CET	443	49749	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:47.882889986 CET	443	49749	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:47.882926941 CET	443	49749	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:47.883001089 CET	49749	443	192.168.2.6	18.66.161.70
Dec 5, 2024 19:04:47.884578943 CET	49749	443	192.168.2.6	18.66.161.70
Dec 5, 2024 19:04:47.884653091 CET	443	49749	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:47.885026932 CET	49749	443	192.168.2.6	18.66.161.70
Dec 5, 2024 19:04:47.885040998 CET	443	49749	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:47.885065079 CET	49749	443	192.168.2.6	18.66.161.70
Dec 5, 2024 19:04:47.885123014 CET	443	49749	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:47.896186113 CET	443	49761	151.101.131.1	192.168.2.6
Dec 5, 2024 19:04:47.906975031 CET	49761	443	192.168.2.6	151.101.131.1
Dec 5, 2024 19:04:47.906984091 CET	443	49761	151.101.131.1	192.168.2.6
Dec 5, 2024 19:04:47.908066034 CET	443	49761	151.101.131.1	192.168.2.6
Dec 5, 2024 19:04:47.908142090 CET	49761	443	192.168.2.6	151.101.131.1
Dec 5, 2024 19:04:47.929248095 CET	49749	443	192.168.2.6	18.66.161.70
Dec 5, 2024 19:04:47.945734024 CET	49761	443	192.168.2.6	151.101.131.1
Dec 5, 2024 19:04:47.945822001 CET	443	49761	151.101.131.1	192.168.2.6
Dec 5, 2024 19:04:47.945992947 CET	49761	443	192.168.2.6	151.101.131.1
Dec 5, 2024 19:04:47.946005106 CET	443	49761	151.101.131.1	192.168.2.6
Dec 5, 2024 19:04:47.988416910 CET	49761	443	192.168.2.6	151.101.131.1
Dec 5, 2024 19:04:48.010874033 CET	443	49748	18.66.161.97	192.168.2.6
Dec 5, 2024 19:04:48.010890007 CET	443	49748	18.66.161.97	192.168.2.6
Dec 5, 2024 19:04:48.010899067 CET	443	49748	18.66.161.97	192.168.2.6
Dec 5, 2024 19:04:48.010914087 CET	443	49748	18.66.161.97	192.168.2.6
Dec 5, 2024 19:04:48.010938883 CET	443	49748	18.66.161.97	192.168.2.6
Dec 5, 2024 19:04:48.010953903 CET	49748	443	192.168.2.6	18.66.161.97
Dec 5, 2024 19:04:48.010984898 CET	443	49748	18.66.161.97	192.168.2.6
Dec 5, 2024 19:04:48.011002064 CET	49748	443	192.168.2.6	18.66.161.97
Dec 5, 2024 19:04:48.011023045 CET	49748	443	192.168.2.6	18.66.161.97
Dec 5, 2024 19:04:48.192658901 CET	443	49748	18.66.161.97	192.168.2.6
Dec 5, 2024 19:04:48.192676067 CET	443	49748	18.66.161.97	192.168.2.6
Dec 5, 2024 19:04:48.192743063 CET	49748	443	192.168.2.6	18.66.161.97
Dec 5, 2024 19:04:48.192765951 CET	443	49748	18.66.161.97	192.168.2.6
Dec 5, 2024 19:04:48.192816973 CET	49748	443	192.168.2.6	18.66.161.97
Dec 5, 2024 19:04:48.238676071 CET	443	49748	18.66.161.97	192.168.2.6
Dec 5, 2024 19:04:48.238702059 CET	443	49748	18.66.161.97	192.168.2.6
Dec 5, 2024 19:04:48.238759041 CET	49748	443	192.168.2.6	18.66.161.97
Dec 5, 2024 19:04:48.238771915 CET	443	49748	18.66.161.97	192.168.2.6
Dec 5, 2024 19:04:48.238817930 CET	49748	443	192.168.2.6	18.66.161.97
Dec 5, 2024 19:04:48.238836050 CET	49748	443	192.168.2.6	18.66.161.97
Dec 5, 2024 19:04:48.266168118 CET	443	49754	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.266505957 CET	49754	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.266513109 CET	443	49754	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.267178059 CET	443	49755	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.267568111 CET	49755	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.267591953 CET	443	49755	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.267791986 CET	443	49754	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.267997980 CET	443	49755	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.268246889 CET	49754	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.268309116 CET	443	49754	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.268485069 CET	49755	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.268552065 CET	443	49755	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.268631935 CET	49754	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.268675089 CET	49755	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.299977064 CET	443	49756	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.300263882 CET	49756	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.300276041 CET	443	49756	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.300708055 CET	443	49756	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.300774097 CET	49756	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.301266909 CET	443	49757	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.301460028 CET	49757	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.301487923 CET	443	49757	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.301505089 CET	443	49756	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.301561117 CET	49756	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.301729918 CET	49756	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.301789999 CET	443	49756	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.301891088 CET	49756	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.301898003 CET	443	49756	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.302412033 CET	443	49757	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.302468061 CET	49757	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.303718090 CET	443	49757	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.303806067 CET	49757	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.303961039 CET	49757	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.304033995 CET	443	49757	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.304065943 CET	49757	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.311326027 CET	443	49754	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.315332890 CET	443	49755	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.347337008 CET	443	49757	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.350445986 CET	49757	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.350464106 CET	443	49757	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.350492954 CET	49756	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.358889103 CET	443	49748	18.66.161.97	192.168.2.6
Dec 5, 2024 19:04:48.358916044 CET	443	49748	18.66.161.97	192.168.2.6
Dec 5, 2024 19:04:48.358964920 CET	49748	443	192.168.2.6	18.66.161.97
Dec 5, 2024 19:04:48.358989954 CET	443	49748	18.66.161.97	192.168.2.6
Dec 5, 2024 19:04:48.359014988 CET	49748	443	192.168.2.6	18.66.161.97
Dec 5, 2024 19:04:48.359030008 CET	49748	443	192.168.2.6	18.66.161.97
Dec 5, 2024 19:04:48.376753092 CET	443	49758	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.378686905 CET	49758	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.378698111 CET	443	49758	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.379133940 CET	443	49758	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.382409096 CET	49758	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.382482052 CET	443	49758	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.382590055 CET	49758	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.384164095 CET	443	49748	18.66.161.97	192.168.2.6
Dec 5, 2024 19:04:48.384188890 CET	443	49748	18.66.161.97	192.168.2.6
Dec 5, 2024 19:04:48.384247065 CET	49748	443	192.168.2.6	18.66.161.97
Dec 5, 2024 19:04:48.384263039 CET	443	49748	18.66.161.97	192.168.2.6
Dec 5, 2024 19:04:48.384290934 CET	49748	443	192.168.2.6	18.66.161.97
Dec 5, 2024 19:04:48.384327888 CET	49748	443	192.168.2.6	18.66.161.97
Dec 5, 2024 19:04:48.386588097 CET	443	49759	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.386786938 CET	49759	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.386806965 CET	443	49759	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.387212038 CET	443	49759	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.387274981 CET	49759	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.387521982 CET	443	49749	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:48.387614965 CET	443	49749	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:48.387661934 CET	49749	443	192.168.2.6	18.66.161.70
Dec 5, 2024 19:04:48.387953997 CET	443	49759	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.388009071 CET	49759	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.388300896 CET	49749	443	192.168.2.6	18.66.161.70
Dec 5, 2024 19:04:48.388314009 CET	443	49749	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:48.388843060 CET	49759	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.388911009 CET	443	49759	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.389761925 CET	49759	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.389770985 CET	443	49759	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.392152071 CET	49770	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.392169952 CET	443	49770	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.392230988 CET	49770	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.392716885 CET	49770	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.392726898 CET	443	49770	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.392833948 CET	49771	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.392852068 CET	443	49771	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.392920017 CET	49771	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.393110991 CET	49771	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.393122911 CET	443	49771	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.396830082 CET	49757	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.403968096 CET	443	49761	151.101.131.1	192.168.2.6
Dec 5, 2024 19:04:48.404403925 CET	49772	443	192.168.2.6	18.66.161.97
Dec 5, 2024 19:04:48.404429913 CET	443	49772	18.66.161.97	192.168.2.6
Dec 5, 2024 19:04:48.404489040 CET	49772	443	192.168.2.6	18.66.161.97
Dec 5, 2024 19:04:48.404548883 CET	443	49761	151.101.131.1	192.168.2.6
Dec 5, 2024 19:04:48.404598951 CET	49761	443	192.168.2.6	151.101.131.1
Dec 5, 2024 19:04:48.404715061 CET	49772	443	192.168.2.6	18.66.161.97
Dec 5, 2024 19:04:48.404727936 CET	443	49772	18.66.161.97	192.168.2.6
Dec 5, 2024 19:04:48.405512094 CET	49761	443	192.168.2.6	151.101.131.1
Dec 5, 2024 19:04:48.405523062 CET	443	49761	151.101.131.1	192.168.2.6
Dec 5, 2024 19:04:48.409324884 CET	443	49748	18.66.161.97	192.168.2.6
Dec 5, 2024 19:04:48.409344912 CET	443	49748	18.66.161.97	192.168.2.6
Dec 5, 2024 19:04:48.409389019 CET	49748	443	192.168.2.6	18.66.161.97
Dec 5, 2024 19:04:48.409404993 CET	443	49748	18.66.161.97	192.168.2.6
Dec 5, 2024 19:04:48.409442902 CET	49748	443	192.168.2.6	18.66.161.97
Dec 5, 2024 19:04:48.409462929 CET	49748	443	192.168.2.6	18.66.161.97
Dec 5, 2024 19:04:48.427334070 CET	443	49758	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.427516937 CET	443	49748	18.66.161.97	192.168.2.6
Dec 5, 2024 19:04:48.427536011 CET	443	49748	18.66.161.97	192.168.2.6
Dec 5, 2024 19:04:48.427592039 CET	49748	443	192.168.2.6	18.66.161.97
Dec 5, 2024 19:04:48.427606106 CET	443	49748	18.66.161.97	192.168.2.6
Dec 5, 2024 19:04:48.427675962 CET	49748	443	192.168.2.6	18.66.161.97
Dec 5, 2024 19:04:48.442743063 CET	49759	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.544337988 CET	443	49748	18.66.161.97	192.168.2.6
Dec 5, 2024 19:04:48.544388056 CET	443	49748	18.66.161.97	192.168.2.6
Dec 5, 2024 19:04:48.544420004 CET	49748	443	192.168.2.6	18.66.161.97
Dec 5, 2024 19:04:48.544445038 CET	443	49748	18.66.161.97	192.168.2.6
Dec 5, 2024 19:04:48.544466972 CET	49748	443	192.168.2.6	18.66.161.97
Dec 5, 2024 19:04:48.544497013 CET	49748	443	192.168.2.6	18.66.161.97
Dec 5, 2024 19:04:48.555753946 CET	49773	443	192.168.2.6	151.101.67.1
Dec 5, 2024 19:04:48.555794954 CET	443	49773	151.101.67.1	192.168.2.6
Dec 5, 2024 19:04:48.555855036 CET	49773	443	192.168.2.6	151.101.67.1
Dec 5, 2024 19:04:48.556206942 CET	49773	443	192.168.2.6	151.101.67.1
Dec 5, 2024 19:04:48.556222916 CET	443	49773	151.101.67.1	192.168.2.6
Dec 5, 2024 19:04:48.560323000 CET	443	49748	18.66.161.97	192.168.2.6
Dec 5, 2024 19:04:48.560342073 CET	443	49748	18.66.161.97	192.168.2.6
Dec 5, 2024 19:04:48.560414076 CET	49748	443	192.168.2.6	18.66.161.97
Dec 5, 2024 19:04:48.560425043 CET	443	49748	18.66.161.97	192.168.2.6
Dec 5, 2024 19:04:48.560478926 CET	49748	443	192.168.2.6	18.66.161.97
Dec 5, 2024 19:04:48.573848009 CET	443	49748	18.66.161.97	192.168.2.6
Dec 5, 2024 19:04:48.573868990 CET	443	49748	18.66.161.97	192.168.2.6
Dec 5, 2024 19:04:48.573930979 CET	49748	443	192.168.2.6	18.66.161.97
Dec 5, 2024 19:04:48.573944092 CET	443	49748	18.66.161.97	192.168.2.6
Dec 5, 2024 19:04:48.574045897 CET	49748	443	192.168.2.6	18.66.161.97
Dec 5, 2024 19:04:48.586559057 CET	443	49748	18.66.161.97	192.168.2.6
Dec 5, 2024 19:04:48.586575985 CET	443	49748	18.66.161.97	192.168.2.6
Dec 5, 2024 19:04:48.586642027 CET	49748	443	192.168.2.6	18.66.161.97
Dec 5, 2024 19:04:48.586656094 CET	443	49748	18.66.161.97	192.168.2.6
Dec 5, 2024 19:04:48.586703062 CET	49748	443	192.168.2.6	18.66.161.97
Dec 5, 2024 19:04:48.588556051 CET	443	49748	18.66.161.97	192.168.2.6
Dec 5, 2024 19:04:48.588632107 CET	443	49748	18.66.161.97	192.168.2.6
Dec 5, 2024 19:04:48.588691950 CET	49748	443	192.168.2.6	18.66.161.97
Dec 5, 2024 19:04:48.589030981 CET	49748	443	192.168.2.6	18.66.161.97
Dec 5, 2024 19:04:48.589045048 CET	443	49748	18.66.161.97	192.168.2.6
Dec 5, 2024 19:04:48.589083910 CET	49748	443	192.168.2.6	18.66.161.97
Dec 5, 2024 19:04:48.589083910 CET	49748	443	192.168.2.6	18.66.161.97
Dec 5, 2024 19:04:48.779834986 CET	443	49755	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.783535957 CET	443	49755	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.783647060 CET	49755	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.786607981 CET	49755	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.786626101 CET	443	49755	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.798316956 CET	443	49754	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.811052084 CET	443	49754	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.811130047 CET	443	49754	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.811193943 CET	49754	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.811193943 CET	49754	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.811561108 CET	49754	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.811568022 CET	443	49754	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.812407970 CET	443	49756	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.813275099 CET	443	49757	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.852161884 CET	49776	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.852215052 CET	443	49776	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.852300882 CET	49776	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.853207111 CET	49776	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.853223085 CET	443	49776	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.858179092 CET	49777	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.858211994 CET	443	49777	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.858284950 CET	49777	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.858479023 CET	49777	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.858501911 CET	443	49777	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.859586954 CET	443	49757	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.859592915 CET	443	49757	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.859658003 CET	49757	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.859693050 CET	443	49757	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.859698057 CET	443	49757	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.859749079 CET	49757	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.859803915 CET	443	49757	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.859807968 CET	443	49757	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.859841108 CET	443	49757	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.859849930 CET	49757	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.859863043 CET	443	49757	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.859877110 CET	49757	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.859908104 CET	49757	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.860286951 CET	443	49756	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.860291004 CET	49757	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.860301971 CET	443	49756	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.860305071 CET	443	49757	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.860325098 CET	443	49756	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.860341072 CET	49756	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.860352039 CET	443	49756	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.860378027 CET	443	49756	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.860390902 CET	49756	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.860418081 CET	49756	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.860450029 CET	443	49756	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.860485077 CET	49756	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.865724087 CET	49756	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.865740061 CET	443	49756	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.866974115 CET	49778	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.867001057 CET	443	49778	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.867060900 CET	49778	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.867501020 CET	49778	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.867527962 CET	443	49778	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.869034052 CET	49779	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.869052887 CET	443	49779	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.869159937 CET	49779	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.869304895 CET	49779	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.869319916 CET	443	49779	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.896790028 CET	443	49763	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.897036076 CET	49763	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.897068024 CET	443	49763	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.897583008 CET	443	49763	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.897887945 CET	49763	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.897977114 CET	443	49763	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.898014069 CET	49763	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.899082899 CET	443	49764	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.899298906 CET	49764	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.899332047 CET	443	49764	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.899977922 CET	443	49764	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.900046110 CET	49764	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.900660992 CET	443	49764	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.900713921 CET	49764	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.900908947 CET	49764	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.901005030 CET	49764	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.901103020 CET	443	49764	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.901256084 CET	443	49759	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.901824951 CET	443	49758	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.901916027 CET	443	49758	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.901966095 CET	49758	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.907475948 CET	49758	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.907489061 CET	443	49758	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.913187027 CET	443	49759	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.913204908 CET	443	49759	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.913260937 CET	49759	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.913269043 CET	443	49759	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.913290977 CET	49759	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.913338900 CET	49759	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.914386034 CET	49759	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.914403915 CET	443	49759	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.943327904 CET	443	49763	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.950190067 CET	49763	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.950225115 CET	49764	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.950248957 CET	443	49764	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.991609097 CET	49780	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.991679907 CET	443	49780	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.991782904 CET	49780	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.992069006 CET	49780	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:48.992086887 CET	443	49780	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:48.996376038 CET	49764	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:49.043844938 CET	49782	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:49.043889046 CET	443	49782	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:49.043950081 CET	49782	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:49.044327021 CET	49782	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:49.044347048 CET	443	49782	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:49.045994997 CET	49783	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:49.046031952 CET	443	49783	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:49.046080112 CET	49783	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:49.046253920 CET	49783	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:49.046264887 CET	443	49783	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:49.411787987 CET	443	49763	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:49.412703991 CET	443	49764	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:49.458400011 CET	49763	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:49.458549023 CET	49764	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:49.458955050 CET	443	49764	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:49.458967924 CET	443	49764	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:49.459028006 CET	49764	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:49.459032059 CET	443	49764	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:49.459047079 CET	443	49764	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:49.459090948 CET	49764	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:49.459103107 CET	443	49764	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:49.459111929 CET	443	49764	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:49.459152937 CET	49764	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:49.466146946 CET	443	49763	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:49.466156960 CET	443	49763	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:49.466187954 CET	443	49763	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:49.466232061 CET	443	49763	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:49.466240883 CET	49763	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:49.466259003 CET	443	49763	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:49.466269016 CET	443	49763	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:49.466279030 CET	49763	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:49.466300964 CET	49763	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:49.466325045 CET	49763	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:49.605197906 CET	443	49764	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:49.605207920 CET	443	49764	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:49.605268955 CET	49764	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:49.605281115 CET	443	49764	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:49.606205940 CET	49764	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:49.606219053 CET	443	49764	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:49.606232882 CET	49764	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:49.606287956 CET	49764	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:49.627126932 CET	443	49763	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:49.627140045 CET	443	49763	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:49.627177954 CET	443	49763	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:49.627207041 CET	49763	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:49.627235889 CET	443	49763	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:49.627271891 CET	49763	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:49.627290964 CET	49763	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:49.648160934 CET	443	49763	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:49.648228884 CET	49763	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:49.648258924 CET	443	49763	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:49.648272038 CET	443	49763	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:49.648314953 CET	49763	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:49.648729086 CET	49763	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:49.648746014 CET	443	49763	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:49.657466888 CET	49787	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:49.657511950 CET	443	49787	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:49.657696962 CET	49787	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:49.658148050 CET	49787	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:49.658160925 CET	443	49787	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:49.662360907 CET	49788	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:49.662426949 CET	443	49788	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:49.662488937 CET	49788	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:49.663764000 CET	49788	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:49.663788080 CET	443	49788	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:49.769630909 CET	443	49773	151.101.67.1	192.168.2.6
Dec 5, 2024 19:04:49.769889116 CET	49773	443	192.168.2.6	151.101.67.1
Dec 5, 2024 19:04:49.769937992 CET	443	49773	151.101.67.1	192.168.2.6
Dec 5, 2024 19:04:49.771255016 CET	443	49773	151.101.67.1	192.168.2.6
Dec 5, 2024 19:04:49.771339893 CET	49773	443	192.168.2.6	151.101.67.1
Dec 5, 2024 19:04:49.773407936 CET	49773	443	192.168.2.6	151.101.67.1
Dec 5, 2024 19:04:49.773493052 CET	443	49773	151.101.67.1	192.168.2.6
Dec 5, 2024 19:04:49.773632050 CET	49773	443	192.168.2.6	151.101.67.1
Dec 5, 2024 19:04:49.773642063 CET	443	49773	151.101.67.1	192.168.2.6
Dec 5, 2024 19:04:49.820276022 CET	49773	443	192.168.2.6	151.101.67.1
Dec 5, 2024 19:04:49.944927931 CET	443	49772	18.66.161.97	192.168.2.6
Dec 5, 2024 19:04:49.945311069 CET	49772	443	192.168.2.6	18.66.161.97
Dec 5, 2024 19:04:49.945331097 CET	443	49772	18.66.161.97	192.168.2.6
Dec 5, 2024 19:04:49.945687056 CET	443	49772	18.66.161.97	192.168.2.6
Dec 5, 2024 19:04:49.945997953 CET	49772	443	192.168.2.6	18.66.161.97
Dec 5, 2024 19:04:49.946100950 CET	443	49772	18.66.161.97	192.168.2.6
Dec 5, 2024 19:04:49.946257114 CET	49772	443	192.168.2.6	18.66.161.97
Dec 5, 2024 19:04:49.991329908 CET	443	49772	18.66.161.97	192.168.2.6
Dec 5, 2024 19:04:50.151329041 CET	443	49771	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:50.151424885 CET	443	49770	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:50.177839041 CET	443	49716	142.250.181.68	192.168.2.6
Dec 5, 2024 19:04:50.177915096 CET	443	49716	142.250.181.68	192.168.2.6
Dec 5, 2024 19:04:50.178020000 CET	49716	443	192.168.2.6	142.250.181.68
Dec 5, 2024 19:04:50.193147898 CET	49771	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:50.193151951 CET	49770	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:50.275554895 CET	49770	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:50.275572062 CET	443	49770	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:50.275682926 CET	49771	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:50.275696993 CET	443	49771	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:50.276236057 CET	443	49770	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:50.276278973 CET	443	49771	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:50.276386976 CET	49771	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:50.277075052 CET	443	49771	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:50.277148008 CET	49771	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:50.278212070 CET	49770	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:50.278323889 CET	443	49770	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:50.278399944 CET	49771	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:50.278523922 CET	443	49771	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:50.300970078 CET	443	49773	151.101.67.1	192.168.2.6
Dec 5, 2024 19:04:50.302161932 CET	443	49773	151.101.67.1	192.168.2.6
Dec 5, 2024 19:04:50.302274942 CET	49773	443	192.168.2.6	151.101.67.1
Dec 5, 2024 19:04:50.321665049 CET	49770	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:50.331816912 CET	49771	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:50.331830978 CET	443	49771	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:50.372714043 CET	49771	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:50.581760883 CET	443	49772	18.66.161.97	192.168.2.6
Dec 5, 2024 19:04:50.581825018 CET	443	49772	18.66.161.97	192.168.2.6
Dec 5, 2024 19:04:50.581914902 CET	49772	443	192.168.2.6	18.66.161.97
Dec 5, 2024 19:04:50.611519098 CET	443	49776	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:50.616365910 CET	443	49777	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:50.634165049 CET	443	49779	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:50.636919022 CET	443	49778	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:50.663171053 CET	49777	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:50.665061951 CET	49776	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:50.681145906 CET	49778	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:50.681159973 CET	443	49778	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:50.681756973 CET	49779	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:50.681770086 CET	443	49779	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:50.682009935 CET	443	49778	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:50.682066917 CET	49778	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:50.682140112 CET	49777	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:50.682147980 CET	443	49777	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:50.682375908 CET	443	49779	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:50.682441950 CET	49779	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:50.682580948 CET	49776	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:50.682591915 CET	443	49776	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:50.682724953 CET	443	49777	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:50.683011055 CET	443	49778	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:50.683059931 CET	49778	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:50.683109045 CET	443	49776	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:50.683121920 CET	443	49779	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:50.683126926 CET	443	49776	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:50.683186054 CET	49779	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:50.683197021 CET	49776	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:50.683199883 CET	49770	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:50.683451891 CET	49771	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:50.683859110 CET	443	49776	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:50.683924913 CET	49776	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:50.684184074 CET	49773	443	192.168.2.6	151.101.67.1
Dec 5, 2024 19:04:50.684225082 CET	443	49773	151.101.67.1	192.168.2.6
Dec 5, 2024 19:04:50.685128927 CET	49772	443	192.168.2.6	18.66.161.97
Dec 5, 2024 19:04:50.685152054 CET	443	49772	18.66.161.97	192.168.2.6
Dec 5, 2024 19:04:50.686691046 CET	49778	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:50.686804056 CET	443	49778	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:50.687450886 CET	49779	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:50.687532902 CET	443	49779	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:50.688545942 CET	49777	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:50.688625097 CET	443	49777	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:50.689416885 CET	49776	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:50.689502954 CET	443	49776	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:50.690220118 CET	49778	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:50.690227032 CET	443	49778	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:50.690640926 CET	49779	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:50.690650940 CET	443	49779	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:50.690702915 CET	49777	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:50.690759897 CET	49776	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:50.690768957 CET	443	49776	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:50.727330923 CET	443	49770	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:50.731329918 CET	443	49777	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:50.731328964 CET	443	49771	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:50.739166975 CET	49778	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:50.739166975 CET	49776	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:50.739168882 CET	49779	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:50.748825073 CET	443	49780	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:50.752686977 CET	49780	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:50.752701998 CET	443	49780	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:50.753892899 CET	443	49780	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:50.753951073 CET	49780	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:50.754616022 CET	443	49780	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:50.754707098 CET	49780	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:50.755568027 CET	49780	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:50.755665064 CET	443	49780	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:50.755845070 CET	49780	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:50.802335024 CET	49780	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:50.802371979 CET	443	49780	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:50.805653095 CET	49716	443	192.168.2.6	142.250.181.68
Dec 5, 2024 19:04:50.805691004 CET	443	49716	142.250.181.68	192.168.2.6
Dec 5, 2024 19:04:50.806543112 CET	443	49782	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:50.806889057 CET	443	49783	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:50.806915045 CET	49782	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:50.806937933 CET	443	49782	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:50.807339907 CET	49783	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:50.807352066 CET	443	49783	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:50.807384968 CET	443	49782	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:50.807698965 CET	49782	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:50.807766914 CET	443	49782	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:50.807816029 CET	443	49783	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:50.807843924 CET	49782	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:50.808435917 CET	49783	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:50.808500051 CET	443	49783	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:50.808543921 CET	49783	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:50.848351955 CET	49780	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:50.848371983 CET	49783	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:50.848381996 CET	443	49783	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:50.855330944 CET	443	49782	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.078239918 CET	443	49771	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.078290939 CET	443	49770	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.078377008 CET	443	49771	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.078461885 CET	49771	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.082452059 CET	443	49770	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.082525015 CET	443	49770	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.082532883 CET	49770	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.082603931 CET	49770	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.124953032 CET	443	49776	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.128669977 CET	443	49777	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.147911072 CET	443	49777	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.147969961 CET	443	49777	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.147979021 CET	49777	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.147996902 CET	443	49777	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.148046970 CET	49777	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.151097059 CET	443	49778	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.152041912 CET	49770	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.152057886 CET	443	49770	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.152354956 CET	49771	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.152384043 CET	443	49771	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.154113054 CET	443	49778	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.154217005 CET	49778	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.156161070 CET	443	49779	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.168972015 CET	49795	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.169009924 CET	443	49795	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.169132948 CET	49795	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.170932055 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.170974016 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.171415091 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.171910048 CET	49795	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.171921015 CET	443	49795	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.172537088 CET	49777	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.172574043 CET	443	49777	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.173193932 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.173213005 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.173584938 CET	49778	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.173590899 CET	443	49778	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.175093889 CET	49776	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.177762032 CET	443	49776	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.177777052 CET	443	49776	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.177855968 CET	443	49776	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.177867889 CET	49776	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.177867889 CET	49776	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.177872896 CET	443	49776	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.177917957 CET	49776	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.177928925 CET	443	49776	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.177942038 CET	443	49776	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.178150892 CET	49776	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.179522991 CET	49797	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.179558992 CET	443	49797	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.179860115 CET	49797	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.180216074 CET	49797	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.180228949 CET	443	49797	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.191577911 CET	443	49779	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.191591024 CET	443	49779	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.191646099 CET	49779	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.191653967 CET	443	49779	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.191665888 CET	443	49779	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.191672087 CET	443	49779	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.191723108 CET	49779	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.191728115 CET	443	49779	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.191806078 CET	49779	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.192147970 CET	49779	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.192158937 CET	443	49779	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.197333097 CET	49798	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.197360992 CET	443	49798	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.197423935 CET	49798	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.197633028 CET	49798	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.197648048 CET	443	49798	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.218759060 CET	49799	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.218779087 CET	443	49799	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.218884945 CET	49799	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.219121933 CET	49799	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.219136000 CET	443	49799	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.220596075 CET	49800	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.220626116 CET	443	49800	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.220747948 CET	49800	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.220891953 CET	49800	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.220911026 CET	443	49800	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.222206116 CET	49801	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.222242117 CET	443	49801	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.222403049 CET	49801	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.222750902 CET	49801	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.222769976 CET	443	49801	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.263716936 CET	443	49780	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.276432991 CET	443	49780	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.276447058 CET	443	49780	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.276518106 CET	49780	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.276551962 CET	443	49780	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.276571989 CET	443	49780	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.276612997 CET	49780	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.276879072 CET	49780	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.276897907 CET	443	49780	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.319281101 CET	443	49783	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.321543932 CET	443	49782	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.341928959 CET	443	49776	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.341943979 CET	443	49776	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.342006922 CET	49776	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.342015982 CET	443	49776	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.342027903 CET	443	49776	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.342041016 CET	49776	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.342082024 CET	49776	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.342087030 CET	443	49776	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.342143059 CET	49776	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.367145061 CET	443	49783	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.367155075 CET	443	49783	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.367167950 CET	443	49783	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.367234945 CET	49783	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.367254019 CET	443	49783	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.367265940 CET	443	49783	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.367324114 CET	49783	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.367507935 CET	49782	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.367713928 CET	443	49782	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.367721081 CET	49783	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.367724895 CET	443	49782	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.367733002 CET	443	49783	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.367758036 CET	443	49782	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.367783070 CET	49782	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.367786884 CET	443	49782	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.367803097 CET	443	49782	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.367822886 CET	443	49782	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.367825985 CET	49782	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.367835999 CET	49782	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.367891073 CET	49782	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.368272066 CET	49802	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.368309021 CET	443	49802	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.368382931 CET	49802	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.368976116 CET	49802	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.368993998 CET	443	49802	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.369016886 CET	49782	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.369041920 CET	443	49782	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.388875008 CET	443	49776	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.388901949 CET	443	49776	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.388978958 CET	49776	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.388989925 CET	443	49776	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.389002085 CET	49776	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.389061928 CET	49776	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.415621996 CET	443	49787	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.415878057 CET	49787	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.415896893 CET	443	49787	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.416337013 CET	443	49787	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.416754007 CET	49787	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.416834116 CET	443	49787	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.416893959 CET	49787	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.421010017 CET	443	49788	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.421225071 CET	49788	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.421258926 CET	443	49788	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.421696901 CET	443	49788	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.421761990 CET	49788	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.422431946 CET	443	49788	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.422494888 CET	49788	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.422616959 CET	49788	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.422681093 CET	443	49788	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.422727108 CET	49788	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.459332943 CET	443	49787	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.467339993 CET	443	49788	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.469229937 CET	49803	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:04:51.469275951 CET	443	49803	172.217.19.227	192.168.2.6
Dec 5, 2024 19:04:51.469330072 CET	49803	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:04:51.469837904 CET	49803	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:04:51.469852924 CET	443	49803	172.217.19.227	192.168.2.6
Dec 5, 2024 19:04:51.474263906 CET	49788	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.474276066 CET	443	49788	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.509576082 CET	443	49776	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.509598017 CET	443	49776	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.509649992 CET	49776	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.509668112 CET	443	49776	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.509715080 CET	49776	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.509715080 CET	49776	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.520142078 CET	49788	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.536170959 CET	443	49776	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.536195040 CET	443	49776	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.536248922 CET	49776	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.536274910 CET	443	49776	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.536288977 CET	49776	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.536314964 CET	49776	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.543128967 CET	443	49776	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.543189049 CET	49776	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.543203115 CET	443	49776	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.543217897 CET	443	49776	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.543333054 CET	49776	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.547650099 CET	49776	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.547672987 CET	443	49776	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.560590029 CET	49804	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.560631990 CET	443	49804	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.560837984 CET	49804	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.561077118 CET	49804	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.561089039 CET	443	49804	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.571048975 CET	49805	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.571079016 CET	443	49805	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.571134090 CET	49805	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.571335077 CET	49805	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.571343899 CET	443	49805	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.945470095 CET	443	49787	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.948734045 CET	443	49788	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.989315987 CET	49787	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.989391088 CET	49788	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.999826908 CET	443	49787	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.999836922 CET	443	49787	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.999874115 CET	443	49787	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.999906063 CET	49787	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:51.999907017 CET	443	49787	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.999922991 CET	443	49787	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:51.999963999 CET	49787	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:52.000025988 CET	49787	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:52.001315117 CET	443	49788	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:52.001322031 CET	443	49788	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:52.001343966 CET	443	49788	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:52.001352072 CET	443	49788	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:52.001360893 CET	49788	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:52.001378059 CET	443	49788	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:52.001389027 CET	443	49788	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:52.001398087 CET	49788	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:52.001426935 CET	49788	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:52.008172035 CET	443	49787	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:52.008259058 CET	443	49787	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:52.008266926 CET	49787	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:52.008544922 CET	49787	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:52.008618116 CET	49787	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:52.008631945 CET	443	49787	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:52.008685112 CET	49787	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:52.008685112 CET	49787	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:52.013103008 CET	49806	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:52.013158083 CET	443	49806	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:52.013223886 CET	49806	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:52.013462067 CET	49806	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:52.013477087 CET	443	49806	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:52.185889959 CET	443	49788	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:52.185900927 CET	443	49788	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:52.185923100 CET	443	49788	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:52.185930967 CET	443	49788	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:52.185966969 CET	49788	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:52.185998917 CET	443	49788	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:52.186017990 CET	49788	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:52.186094999 CET	49788	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:52.209141970 CET	443	49788	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:52.209223986 CET	49788	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:52.209244967 CET	443	49788	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:52.209254026 CET	443	49788	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:52.209302902 CET	49788	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:52.209579945 CET	49788	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:52.209593058 CET	443	49788	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:52.210016012 CET	49807	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:52.210057974 CET	443	49807	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:52.210503101 CET	49807	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:52.210704088 CET	49807	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:52.210712910 CET	443	49807	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.028419018 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.028697014 CET	443	49795	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.029287100 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.029314995 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.029529095 CET	49795	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.029558897 CET	443	49795	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.029784918 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.029974937 CET	443	49795	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.030628920 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.030637980 CET	49795	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.030706882 CET	443	49795	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.030711889 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.030798912 CET	49795	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.030808926 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.034068108 CET	443	49797	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.034368992 CET	49797	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.034384966 CET	443	49797	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.034832954 CET	443	49797	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.035160065 CET	49797	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.035239935 CET	443	49797	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.035278082 CET	49797	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.049449921 CET	443	49798	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.049678087 CET	49798	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.049709082 CET	443	49798	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.050170898 CET	443	49798	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.050620079 CET	49798	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.050620079 CET	49798	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.050641060 CET	443	49798	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.050693989 CET	443	49798	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.071331978 CET	443	49795	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.071332932 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.074114084 CET	49795	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.077687979 CET	443	49799	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.077712059 CET	443	49801	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.077975035 CET	443	49800	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.078042030 CET	49801	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.078057051 CET	443	49801	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.078190088 CET	49799	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.078207016 CET	443	49799	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.078301907 CET	49800	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.078314066 CET	443	49800	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.078483105 CET	443	49801	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.078696012 CET	49801	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.078722000 CET	443	49800	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.079091072 CET	49800	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.079171896 CET	443	49799	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.079180002 CET	443	49800	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.079220057 CET	49800	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.079304934 CET	443	49801	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.079322100 CET	443	49797	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.079488039 CET	49801	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.079770088 CET	49801	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.079772949 CET	49799	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.079839945 CET	443	49801	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.079854012 CET	443	49799	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.079863071 CET	49799	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.079936981 CET	49801	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.079946995 CET	443	49801	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.089376926 CET	49797	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.098481894 CET	49798	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.119333982 CET	443	49800	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.123328924 CET	443	49799	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.129079103 CET	49800	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.129091978 CET	49801	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.129096985 CET	49799	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.201642036 CET	443	49802	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.201946974 CET	49802	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.201961040 CET	443	49802	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.202392101 CET	443	49802	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.202474117 CET	49802	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.203135014 CET	443	49802	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.203377008 CET	49802	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.203377008 CET	49802	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.203466892 CET	443	49802	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.203563929 CET	49802	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.247324944 CET	443	49802	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.255728006 CET	49802	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.255738020 CET	443	49802	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.300941944 CET	49802	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.381207943 CET	443	49804	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.381717920 CET	49804	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.381746054 CET	443	49804	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.382213116 CET	443	49804	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.382618904 CET	49804	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.382688999 CET	443	49804	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.382736921 CET	49804	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.396644115 CET	443	49805	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.397739887 CET	49805	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.397767067 CET	443	49805	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.398243904 CET	443	49805	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.398600101 CET	49805	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.398673058 CET	443	49805	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.398787022 CET	49805	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.423332930 CET	443	49804	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.428245068 CET	49804	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.443331003 CET	443	49805	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.443519115 CET	49805	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.450396061 CET	443	49803	172.217.19.227	192.168.2.6
Dec 5, 2024 19:04:53.450685024 CET	49803	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:04:53.450701952 CET	443	49803	172.217.19.227	192.168.2.6
Dec 5, 2024 19:04:53.451239109 CET	443	49803	172.217.19.227	192.168.2.6
Dec 5, 2024 19:04:53.451258898 CET	443	49803	172.217.19.227	192.168.2.6
Dec 5, 2024 19:04:53.451304913 CET	49803	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:04:53.451318026 CET	443	49803	172.217.19.227	192.168.2.6
Dec 5, 2024 19:04:53.451359034 CET	49803	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:04:53.452037096 CET	443	49803	172.217.19.227	192.168.2.6
Dec 5, 2024 19:04:53.453310013 CET	49803	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:04:53.453389883 CET	443	49803	172.217.19.227	192.168.2.6
Dec 5, 2024 19:04:53.453577042 CET	49803	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:04:53.453593016 CET	443	49803	172.217.19.227	192.168.2.6
Dec 5, 2024 19:04:53.505279064 CET	49803	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:04:53.541373014 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.545908928 CET	443	49795	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.546924114 CET	443	49797	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.559453011 CET	443	49797	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.559472084 CET	443	49797	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.559576035 CET	49797	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.559590101 CET	443	49797	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.559632063 CET	49797	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.560044050 CET	49797	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.560065985 CET	443	49797	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.563160896 CET	49814	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.563220978 CET	443	49814	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.563344955 CET	49814	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.563889980 CET	49814	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.563905954 CET	443	49814	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.572992086 CET	443	49798	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.583091021 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.590568066 CET	443	49801	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.590754032 CET	443	49801	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.590965033 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.590972900 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.591020107 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.591048956 CET	49801	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.591052055 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.591058969 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.591073036 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.591095924 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.591156006 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.591321945 CET	443	49800	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.591540098 CET	49801	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.591562986 CET	443	49801	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.591857910 CET	49815	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.591911077 CET	443	49815	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.591979027 CET	49815	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.592441082 CET	443	49799	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.592530012 CET	443	49799	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.592716932 CET	49799	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.592854977 CET	49815	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.592869043 CET	443	49815	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.593836069 CET	443	49798	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.593849897 CET	443	49798	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.593902111 CET	49798	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.593916893 CET	443	49798	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.593959093 CET	49798	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.593959093 CET	49798	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.594702005 CET	49798	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.594717979 CET	443	49798	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.595524073 CET	443	49800	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.595586061 CET	49800	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.595590115 CET	443	49800	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.595654964 CET	49800	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.596143007 CET	49799	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.596153021 CET	443	49799	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.598618031 CET	443	49795	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.598632097 CET	443	49795	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.598649979 CET	443	49795	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.598720074 CET	49795	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.598740101 CET	443	49795	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.598769903 CET	49795	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.598777056 CET	443	49795	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.598788023 CET	49795	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.598818064 CET	49795	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.600296021 CET	49816	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.600327015 CET	443	49816	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.600439072 CET	49816	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.600567102 CET	49800	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.600579023 CET	443	49800	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.601121902 CET	49816	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.601130962 CET	443	49816	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.606045008 CET	49817	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.606091976 CET	443	49817	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.606478930 CET	49817	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.607215881 CET	49817	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.607228994 CET	443	49817	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.714695930 CET	443	49802	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.752804041 CET	443	49802	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.752814054 CET	443	49802	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.752862930 CET	443	49802	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.752881050 CET	443	49802	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.752899885 CET	49802	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.752909899 CET	443	49802	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.752918959 CET	443	49802	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.752927065 CET	49802	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.752983093 CET	49802	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.753381968 CET	49802	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.753400087 CET	443	49802	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.763290882 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.763324976 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.763345003 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.763390064 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.763402939 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.763448000 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.764512062 CET	443	49795	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.764529943 CET	443	49795	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.764599085 CET	443	49795	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.764597893 CET	49795	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.764628887 CET	443	49795	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.764638901 CET	443	49795	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.764682055 CET	49795	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.764682055 CET	49795	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.799364090 CET	443	49806	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.799640894 CET	49806	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.799669981 CET	443	49806	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.800124884 CET	443	49806	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.800199986 CET	49806	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.800848007 CET	443	49806	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.800899029 CET	49806	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.802033901 CET	49806	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.802119970 CET	443	49806	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.802181005 CET	49806	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.802186966 CET	443	49806	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.812160969 CET	443	49795	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.812180996 CET	443	49795	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.812236071 CET	49795	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.812268972 CET	443	49795	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.812283993 CET	49795	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.812321901 CET	49795	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.813575029 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.813607931 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.813657045 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.813694954 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.813715935 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.813715935 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.813734055 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.849323988 CET	49806	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.906063080 CET	443	49804	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.908482075 CET	443	49804	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.908565044 CET	49804	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.908996105 CET	49804	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.909017086 CET	443	49804	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.914020061 CET	49818	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.914072990 CET	443	49818	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.914158106 CET	49818	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.914812088 CET	49818	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.914825916 CET	443	49818	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.915163994 CET	49819	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.915200949 CET	443	49819	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.915258884 CET	49819	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.915530920 CET	49819	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.915545940 CET	443	49819	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.925451994 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.925479889 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.925539970 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.925568104 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.925609112 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.925618887 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.930535078 CET	443	49795	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.930563927 CET	443	49795	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.930671930 CET	49795	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.930671930 CET	49795	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.930700064 CET	443	49795	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.930757046 CET	49795	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.933165073 CET	443	49805	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.954387903 CET	443	49795	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.954416037 CET	443	49795	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.954488039 CET	49795	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.954502106 CET	443	49795	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.954513073 CET	49795	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.954545975 CET	49795	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.960206985 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.960232973 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.960289955 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.960319996 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.960336924 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.960448980 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.973779917 CET	49805	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.977298021 CET	443	49807	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.977587938 CET	49807	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.977605104 CET	443	49807	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.978347063 CET	443	49807	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.978743076 CET	49807	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.978832006 CET	443	49807	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.978925943 CET	49807	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.980784893 CET	443	49795	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.980817080 CET	443	49795	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.980884075 CET	49795	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.980895996 CET	443	49795	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.981056929 CET	49795	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.987585068 CET	443	49805	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.987602949 CET	443	49805	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.987622023 CET	443	49805	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.987631083 CET	443	49805	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.987653971 CET	49805	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.987654924 CET	443	49805	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.987674952 CET	443	49805	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.987704992 CET	49805	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.987744093 CET	49805	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.991123915 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.991147041 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.991211891 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:53.991235018 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:53.991344929 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.001813889 CET	443	49795	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.001841068 CET	443	49795	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.001905918 CET	49795	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.001915932 CET	443	49795	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.001991034 CET	49795	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.010341883 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.010370970 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.010466099 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.010492086 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.010888100 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.018143892 CET	443	49795	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.018172979 CET	443	49795	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.018243074 CET	49795	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.018260956 CET	443	49795	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.018275976 CET	49795	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.018316984 CET	49795	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.023328066 CET	443	49807	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.067069054 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.067095995 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.067147970 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.067162037 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.067192078 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.067214012 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.129688978 CET	443	49795	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.129720926 CET	443	49795	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.129849911 CET	49795	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.129849911 CET	49795	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.129868984 CET	443	49795	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.130115032 CET	49795	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.130984068 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.131007910 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.131084919 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.131097078 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.131123066 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.131138086 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.137789011 CET	443	49795	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.137845039 CET	443	49795	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.137892008 CET	443	49795	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.137903929 CET	49795	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.137947083 CET	49795	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.138326883 CET	49795	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.138341904 CET	443	49795	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.143600941 CET	49820	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.143660069 CET	443	49820	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.143727064 CET	49820	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.144057989 CET	49820	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.144073009 CET	443	49820	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.146404028 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.146430016 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.146508932 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.146528006 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.146553993 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.146573067 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.148545027 CET	49821	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.148583889 CET	443	49821	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.148665905 CET	49821	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.148967981 CET	49821	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.148981094 CET	443	49821	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.158107996 CET	443	49805	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.158139944 CET	443	49805	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.158240080 CET	49805	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.158241034 CET	49805	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.158269882 CET	443	49805	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.158375978 CET	49805	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.160701036 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.160729885 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.160795927 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.160810947 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.160837889 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.160847902 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.175090075 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.175122976 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.175216913 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.175229073 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.175467014 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.188360929 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.188385010 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.188551903 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.188572884 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.188646078 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.199589014 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.199609995 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.199687958 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.199707031 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.200320959 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.212203026 CET	443	49805	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.212240934 CET	443	49805	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.212291002 CET	49805	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.212301970 CET	443	49805	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.212346077 CET	49805	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.212430000 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.212454081 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.212490082 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.212510109 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.212527037 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.212549925 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.258054972 CET	443	49803	172.217.19.227	192.168.2.6
Dec 5, 2024 19:04:54.269851923 CET	443	49803	172.217.19.227	192.168.2.6
Dec 5, 2024 19:04:54.270013094 CET	49803	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:04:54.270047903 CET	443	49803	172.217.19.227	192.168.2.6
Dec 5, 2024 19:04:54.272382975 CET	443	49803	172.217.19.227	192.168.2.6
Dec 5, 2024 19:04:54.272447109 CET	49803	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:04:54.274030924 CET	49803	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:04:54.274049997 CET	443	49803	172.217.19.227	192.168.2.6
Dec 5, 2024 19:04:54.311624050 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.311651945 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.311706066 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.311733007 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.311764002 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.311779976 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.315613985 CET	443	49806	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.315727949 CET	443	49806	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.315785885 CET	49806	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.316312075 CET	49806	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.316322088 CET	443	49806	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.319396973 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.319423914 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.319483995 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.319494009 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.319530010 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.319530010 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.320410013 CET	443	49805	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.320444107 CET	443	49805	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.320518017 CET	49805	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.320518017 CET	49805	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.320530891 CET	443	49805	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.320600986 CET	49805	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.321044922 CET	49822	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.321090937 CET	443	49822	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.321263075 CET	49822	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.321685076 CET	49822	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.321701050 CET	443	49822	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.326442003 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.326469898 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.326533079 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.326548100 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.326571941 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.326596975 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.334372044 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.334397078 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.334453106 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.334472895 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.334527016 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.340586901 CET	49823	443	192.168.2.6	151.101.131.1
Dec 5, 2024 19:04:54.340624094 CET	443	49823	151.101.131.1	192.168.2.6
Dec 5, 2024 19:04:54.340717077 CET	49823	443	192.168.2.6	151.101.131.1
Dec 5, 2024 19:04:54.340956926 CET	49823	443	192.168.2.6	151.101.131.1
Dec 5, 2024 19:04:54.340969086 CET	443	49823	151.101.131.1	192.168.2.6
Dec 5, 2024 19:04:54.341967106 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.341989994 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.342072964 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.342089891 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.342133045 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.348347902 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.348372936 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.348423004 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.348472118 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.348479033 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.348541975 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.355745077 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.355766058 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.355825901 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.355838060 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.355864048 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.355875969 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.356017113 CET	49719	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:04:54.356017113 CET	49719	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:04:54.356089115 CET	443	49719	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:54.357326984 CET	443	49805	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.357357979 CET	443	49805	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.357425928 CET	49805	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.357431889 CET	443	49805	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.357474089 CET	49805	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.357522011 CET	49824	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:04:54.357523918 CET	49805	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.357547998 CET	443	49824	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:54.357707024 CET	49824	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:04:54.357935905 CET	49824	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:04:54.357950926 CET	443	49824	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:54.361851931 CET	49825	443	192.168.2.6	151.101.131.1
Dec 5, 2024 19:04:54.361881971 CET	443	49825	151.101.131.1	192.168.2.6
Dec 5, 2024 19:04:54.362082005 CET	49825	443	192.168.2.6	151.101.131.1
Dec 5, 2024 19:04:54.362409115 CET	49825	443	192.168.2.6	151.101.131.1
Dec 5, 2024 19:04:54.362416983 CET	443	49825	151.101.131.1	192.168.2.6
Dec 5, 2024 19:04:54.373085976 CET	443	49805	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.373173952 CET	443	49805	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.373186111 CET	49805	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.373217106 CET	49805	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.373580933 CET	49805	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.373591900 CET	443	49805	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.373928070 CET	49826	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.373955011 CET	443	49826	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.374186039 CET	49826	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.374735117 CET	49826	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.374747992 CET	443	49826	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.417149067 CET	49828	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:04:54.417192936 CET	443	49828	172.217.19.227	192.168.2.6
Dec 5, 2024 19:04:54.417270899 CET	49828	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:04:54.417488098 CET	49828	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:04:54.417501926 CET	443	49828	172.217.19.227	192.168.2.6
Dec 5, 2024 19:04:54.445637941 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.445677042 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.445749044 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.445766926 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.445987940 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.490098000 CET	443	49807	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.503411055 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.503429890 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.503499985 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.503509045 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.503565073 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.509141922 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.509159088 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.509211063 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.509219885 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.509279013 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.515959978 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.515976906 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.516037941 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.516047955 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.516172886 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.522340059 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.522365093 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.522402048 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.522411108 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.522459030 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.522478104 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.529103994 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.529126883 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.529174089 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.529181957 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.529215097 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.529233932 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.535377026 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.535397053 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.535453081 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.535464048 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.535490990 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.535511017 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.536673069 CET	49807	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.541580915 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.541598082 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.541649103 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.541657925 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.541692972 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.542938948 CET	443	49807	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.542948961 CET	443	49807	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.543023109 CET	49807	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.543028116 CET	443	49807	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.543045998 CET	443	49807	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.543060064 CET	443	49807	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.543095112 CET	49807	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.543158054 CET	49807	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.553550959 CET	443	49807	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.553625107 CET	49807	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.553632975 CET	443	49807	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.553683043 CET	49807	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.554686069 CET	49807	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.554697037 CET	443	49807	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.638232946 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.638254881 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.638315916 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.638338089 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.638353109 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.638379097 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.695921898 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.695949078 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.695997953 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.696019888 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.696049929 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.696073055 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.701809883 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.701827049 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.701884985 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.701894045 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.702163935 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.707906008 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.707922935 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.707983017 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.707992077 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.708051920 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.714497089 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.714513063 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.714572906 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.714581966 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.714637995 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.718161106 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.718233109 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.718240023 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.718260050 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.718592882 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.718697071 CET	49796	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.718715906 CET	443	49796	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.727341890 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.727384090 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.727474928 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.727880955 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.727891922 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.929152012 CET	443	49719	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:54.929200888 CET	443	49719	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:54.929269075 CET	443	49719	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:54.929267883 CET	49719	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:04:54.929307938 CET	443	49719	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:54.929358006 CET	49719	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:04:54.937586069 CET	443	49719	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:54.941231966 CET	443	49719	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:54.941327095 CET	49719	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:04:54.941956043 CET	49719	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:04:54.941978931 CET	443	49719	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:54.946774960 CET	49832	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.946819067 CET	443	49832	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:54.946911097 CET	49832	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.947221994 CET	49832	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:54.947235107 CET	443	49832	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.185097933 CET	49833	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:04:55.185163021 CET	443	49833	151.101.1.21	192.168.2.6
Dec 5, 2024 19:04:55.185273886 CET	49833	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:04:55.188389063 CET	49833	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:04:55.188407898 CET	443	49833	151.101.1.21	192.168.2.6
Dec 5, 2024 19:04:55.322602034 CET	443	49814	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.322925091 CET	49814	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:55.322993040 CET	443	49814	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.323461056 CET	443	49814	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.324882984 CET	49814	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:55.325021029 CET	443	49814	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.325041056 CET	49814	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:55.351032019 CET	443	49815	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.351697922 CET	49815	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:55.351732969 CET	443	49815	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.352168083 CET	443	49815	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.352735996 CET	49815	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:55.352803946 CET	443	49815	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.352987051 CET	49815	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:55.364160061 CET	443	49816	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.364803076 CET	49816	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:55.364818096 CET	443	49816	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.365253925 CET	443	49816	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.365698099 CET	49816	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:55.365755081 CET	443	49816	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.365987062 CET	49816	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:55.369628906 CET	49814	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:55.369640112 CET	443	49814	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.379570961 CET	443	49817	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.379815102 CET	49817	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:55.379839897 CET	443	49817	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.380326986 CET	443	49817	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.380654097 CET	49817	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:55.380743980 CET	443	49817	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.380759954 CET	49817	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:55.399332047 CET	443	49815	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.407335997 CET	443	49816	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.423341036 CET	443	49817	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.430938005 CET	49817	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:55.554529905 CET	443	49823	151.101.131.1	192.168.2.6
Dec 5, 2024 19:04:55.554857969 CET	49823	443	192.168.2.6	151.101.131.1
Dec 5, 2024 19:04:55.554874897 CET	443	49823	151.101.131.1	192.168.2.6
Dec 5, 2024 19:04:55.555536032 CET	443	49823	151.101.131.1	192.168.2.6
Dec 5, 2024 19:04:55.555883884 CET	49823	443	192.168.2.6	151.101.131.1
Dec 5, 2024 19:04:55.555942059 CET	443	49823	151.101.131.1	192.168.2.6
Dec 5, 2024 19:04:55.556107044 CET	49823	443	192.168.2.6	151.101.131.1
Dec 5, 2024 19:04:55.556130886 CET	443	49823	151.101.131.1	192.168.2.6
Dec 5, 2024 19:04:55.571206093 CET	443	49824	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:55.572252035 CET	49824	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:04:55.572287083 CET	443	49824	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:55.572571993 CET	443	49825	151.101.131.1	192.168.2.6
Dec 5, 2024 19:04:55.572745085 CET	443	49824	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:55.572763920 CET	49825	443	192.168.2.6	151.101.131.1
Dec 5, 2024 19:04:55.572779894 CET	443	49825	151.101.131.1	192.168.2.6
Dec 5, 2024 19:04:55.573206902 CET	443	49825	151.101.131.1	192.168.2.6
Dec 5, 2024 19:04:55.573302031 CET	49824	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:04:55.573326111 CET	49824	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:04:55.573326111 CET	49824	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:04:55.573383093 CET	443	49824	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:55.573868990 CET	49825	443	192.168.2.6	151.101.131.1
Dec 5, 2024 19:04:55.573942900 CET	443	49825	151.101.131.1	192.168.2.6
Dec 5, 2024 19:04:55.573977947 CET	49825	443	192.168.2.6	151.101.131.1
Dec 5, 2024 19:04:55.573997021 CET	443	49825	151.101.131.1	192.168.2.6
Dec 5, 2024 19:04:55.614495993 CET	49825	443	192.168.2.6	151.101.131.1
Dec 5, 2024 19:04:55.614607096 CET	49824	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:04:55.679157019 CET	443	49818	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.679455042 CET	49818	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:55.679467916 CET	443	49818	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.679893017 CET	443	49818	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.680325985 CET	49818	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:55.680392027 CET	443	49818	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.680464983 CET	49818	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:55.680725098 CET	443	49819	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.680912971 CET	49819	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:55.680947065 CET	443	49819	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.681370020 CET	443	49819	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.681443930 CET	49819	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:55.682080030 CET	443	49819	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.682135105 CET	49819	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:55.682344913 CET	49819	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:55.682405949 CET	443	49819	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.682491064 CET	49819	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:55.682499886 CET	443	49819	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.726012945 CET	49819	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:55.726023912 CET	49818	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:55.726044893 CET	443	49818	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.835800886 CET	443	49814	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.847189903 CET	443	49814	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.847258091 CET	49814	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:55.847270012 CET	443	49814	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.847296953 CET	443	49814	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.847341061 CET	49814	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:55.847754002 CET	49814	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:55.847769022 CET	443	49814	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.852531910 CET	49837	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:55.852588892 CET	443	49837	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.852861881 CET	49837	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:55.853121042 CET	49837	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:55.853137016 CET	443	49837	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.866396904 CET	443	49815	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.878851891 CET	443	49815	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.878928900 CET	49815	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:55.878936052 CET	443	49815	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.878987074 CET	49815	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:55.879399061 CET	49815	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:55.879421949 CET	443	49815	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.879563093 CET	443	49816	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.879887104 CET	49838	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:55.879947901 CET	443	49838	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.880050898 CET	49838	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:55.880620956 CET	49838	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:55.880640984 CET	443	49838	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.893647909 CET	443	49817	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.902704000 CET	443	49820	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.903002024 CET	49820	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:55.903031111 CET	443	49820	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.903493881 CET	443	49820	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.903857946 CET	49820	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:55.903943062 CET	443	49820	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.903991938 CET	49820	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:55.911277056 CET	443	49821	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.911866903 CET	49821	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:55.911907911 CET	443	49821	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.912339926 CET	443	49821	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.912733078 CET	49821	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:55.912803888 CET	443	49821	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.912882090 CET	49821	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:55.913376093 CET	443	49817	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.913389921 CET	443	49817	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.913415909 CET	443	49817	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.913439035 CET	49817	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:55.913461924 CET	443	49817	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.913479090 CET	49817	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:55.913485050 CET	443	49817	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.913551092 CET	49817	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:55.913799047 CET	49817	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:55.913816929 CET	443	49817	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.926486015 CET	49816	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:55.929250002 CET	443	49816	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.929263115 CET	443	49816	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.929321051 CET	443	49816	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.929352999 CET	443	49816	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.929390907 CET	49816	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:55.929390907 CET	49816	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:55.929414988 CET	443	49816	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.929465055 CET	49816	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:55.947336912 CET	443	49820	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:55.957458019 CET	49820	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:55.959333897 CET	443	49821	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.079444885 CET	443	49822	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.079950094 CET	49822	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.079973936 CET	443	49822	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.080427885 CET	443	49822	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.080506086 CET	49822	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.081161022 CET	443	49822	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.081237078 CET	49822	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.081619024 CET	49822	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.081696033 CET	443	49822	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.081870079 CET	49822	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.081877947 CET	443	49822	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.082362890 CET	443	49823	151.101.131.1	192.168.2.6
Dec 5, 2024 19:04:56.082514048 CET	443	49823	151.101.131.1	192.168.2.6
Dec 5, 2024 19:04:56.082868099 CET	49823	443	192.168.2.6	151.101.131.1
Dec 5, 2024 19:04:56.086196899 CET	443	49825	151.101.131.1	192.168.2.6
Dec 5, 2024 19:04:56.086319923 CET	443	49825	151.101.131.1	192.168.2.6
Dec 5, 2024 19:04:56.086385965 CET	49825	443	192.168.2.6	151.101.131.1
Dec 5, 2024 19:04:56.091614008 CET	49823	443	192.168.2.6	151.101.131.1
Dec 5, 2024 19:04:56.091644049 CET	443	49823	151.101.131.1	192.168.2.6
Dec 5, 2024 19:04:56.092266083 CET	49825	443	192.168.2.6	151.101.131.1
Dec 5, 2024 19:04:56.092289925 CET	443	49825	151.101.131.1	192.168.2.6
Dec 5, 2024 19:04:56.095856905 CET	49839	443	192.168.2.6	151.101.67.1
Dec 5, 2024 19:04:56.095911026 CET	443	49839	151.101.67.1	192.168.2.6
Dec 5, 2024 19:04:56.095999956 CET	49839	443	192.168.2.6	151.101.67.1
Dec 5, 2024 19:04:56.096216917 CET	49839	443	192.168.2.6	151.101.67.1
Dec 5, 2024 19:04:56.096235037 CET	443	49839	151.101.67.1	192.168.2.6
Dec 5, 2024 19:04:56.099134922 CET	443	49816	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.099160910 CET	443	49816	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.099240065 CET	49816	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.099252939 CET	443	49816	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.099324942 CET	49816	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.117449999 CET	443	49828	172.217.19.227	192.168.2.6
Dec 5, 2024 19:04:56.117930889 CET	49828	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:04:56.117945910 CET	443	49828	172.217.19.227	192.168.2.6
Dec 5, 2024 19:04:56.118437052 CET	443	49828	172.217.19.227	192.168.2.6
Dec 5, 2024 19:04:56.118453026 CET	443	49828	172.217.19.227	192.168.2.6
Dec 5, 2024 19:04:56.118511915 CET	49828	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:04:56.118520021 CET	443	49828	172.217.19.227	192.168.2.6
Dec 5, 2024 19:04:56.118577003 CET	49828	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:04:56.119169950 CET	443	49828	172.217.19.227	192.168.2.6
Dec 5, 2024 19:04:56.119347095 CET	49828	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:04:56.119421959 CET	443	49828	172.217.19.227	192.168.2.6
Dec 5, 2024 19:04:56.119544983 CET	49828	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:04:56.119560003 CET	443	49828	172.217.19.227	192.168.2.6
Dec 5, 2024 19:04:56.135515928 CET	443	49826	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.135618925 CET	49822	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.136085033 CET	49826	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.136095047 CET	443	49826	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.136509895 CET	443	49826	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.136686087 CET	49826	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.137207031 CET	443	49826	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.137324095 CET	49826	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.137422085 CET	49826	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.137481928 CET	443	49826	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.137558937 CET	49826	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.150887012 CET	443	49816	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.150917053 CET	443	49816	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.150971889 CET	49816	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.150989056 CET	443	49816	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.151026964 CET	49816	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.151056051 CET	49816	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.166229963 CET	49828	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:04:56.181607962 CET	49826	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.181626081 CET	443	49826	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.193244934 CET	443	49819	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.195427895 CET	443	49818	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.195522070 CET	443	49818	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.195723057 CET	443	49819	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.195799112 CET	49818	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.195914030 CET	49819	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.196309090 CET	49819	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.196331978 CET	443	49819	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.197256088 CET	49818	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.197277069 CET	443	49818	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.200383902 CET	49840	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.200414896 CET	443	49840	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.200822115 CET	49840	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.201298952 CET	49840	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.201308012 CET	443	49840	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.202616930 CET	49841	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.202650070 CET	443	49841	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.202711105 CET	49841	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.202897072 CET	49841	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.202907085 CET	443	49841	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.227420092 CET	49826	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.263909101 CET	443	49816	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.263936996 CET	443	49816	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.264108896 CET	49816	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.264123917 CET	443	49816	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.264384031 CET	49816	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.273067951 CET	443	49824	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:56.273130894 CET	443	49824	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:56.273180008 CET	443	49824	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:56.273236990 CET	443	49824	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:56.273255110 CET	443	49824	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:56.274950981 CET	49824	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:04:56.274950981 CET	49824	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:04:56.274983883 CET	443	49824	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:56.278229952 CET	49824	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:04:56.281332016 CET	443	49824	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:56.284353971 CET	49842	443	192.168.2.6	18.66.161.70
Dec 5, 2024 19:04:56.284410954 CET	443	49842	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:56.284549952 CET	49842	443	192.168.2.6	18.66.161.70
Dec 5, 2024 19:04:56.286495924 CET	49820	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.286581039 CET	443	49820	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.286640882 CET	49820	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.287368059 CET	49816	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.287429094 CET	443	49816	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.287530899 CET	49816	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.288639069 CET	49822	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.288711071 CET	443	49822	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.288878918 CET	443	49822	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.288925886 CET	49822	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.288944960 CET	49822	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.289783001 CET	443	49824	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:56.289829016 CET	443	49824	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:56.289849043 CET	443	49824	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:56.290015936 CET	49824	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:04:56.290015936 CET	49824	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:04:56.290026903 CET	443	49824	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:56.296084881 CET	49842	443	192.168.2.6	18.66.161.70
Dec 5, 2024 19:04:56.296098948 CET	443	49842	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:56.296284914 CET	49824	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:04:56.296338081 CET	443	49824	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:56.296421051 CET	49824	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:04:56.305921078 CET	49843	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.305969954 CET	443	49843	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.306052923 CET	49843	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.306334972 CET	49844	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.306391954 CET	443	49844	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.306611061 CET	49845	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.306632996 CET	49844	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.306641102 CET	443	49845	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.306693077 CET	49845	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.306936979 CET	49846	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.306946993 CET	443	49846	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.306998968 CET	49846	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.307240009 CET	49843	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.307266951 CET	443	49843	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.307446003 CET	49844	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.307461977 CET	443	49844	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.307638884 CET	49845	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.307651043 CET	443	49845	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.307817936 CET	49846	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.307833910 CET	443	49846	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.397732973 CET	443	49833	151.101.1.21	192.168.2.6
Dec 5, 2024 19:04:56.400095940 CET	49833	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:04:56.400120020 CET	443	49833	151.101.1.21	192.168.2.6
Dec 5, 2024 19:04:56.400970936 CET	443	49833	151.101.1.21	192.168.2.6
Dec 5, 2024 19:04:56.401046038 CET	49833	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:04:56.401664019 CET	443	49833	151.101.1.21	192.168.2.6
Dec 5, 2024 19:04:56.401725054 CET	49833	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:04:56.401894093 CET	49833	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:04:56.401959896 CET	443	49833	151.101.1.21	192.168.2.6
Dec 5, 2024 19:04:56.402046919 CET	49833	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:04:56.424416065 CET	443	49821	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.442540884 CET	49833	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:04:56.442563057 CET	443	49833	151.101.1.21	192.168.2.6
Dec 5, 2024 19:04:56.473773956 CET	49821	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.477401018 CET	443	49821	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.477417946 CET	443	49821	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.477461100 CET	443	49821	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.477505922 CET	443	49821	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.477555037 CET	49821	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.477580070 CET	443	49821	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.477598906 CET	49821	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.477626085 CET	49821	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.485569954 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.485872030 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.485882044 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.486289024 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.486392021 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.487044096 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.487134933 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.487299919 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.487365007 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.487443924 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.488971949 CET	49833	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:04:56.535331011 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.539092064 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.539118052 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.585892916 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.644603968 CET	443	49821	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.644635916 CET	443	49821	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.644785881 CET	49821	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.644823074 CET	443	49821	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.644880056 CET	49821	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.652638912 CET	443	49826	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.652746916 CET	443	49826	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.653862953 CET	49826	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.654048920 CET	49826	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.654067039 CET	443	49826	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.691807985 CET	443	49821	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.691833973 CET	443	49821	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.691931009 CET	49821	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.691967010 CET	443	49821	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.692091942 CET	49821	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.692091942 CET	49821	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.707386017 CET	443	49832	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.707712889 CET	49832	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.707741976 CET	443	49832	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.708179951 CET	443	49832	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.708281040 CET	49832	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.708884954 CET	443	49832	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.708942890 CET	49832	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.709098101 CET	49832	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.709160089 CET	443	49832	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.709242105 CET	49832	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.745995998 CET	443	49821	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.746025085 CET	443	49821	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.746140003 CET	49821	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.746176958 CET	443	49821	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.746332884 CET	49821	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.751327991 CET	443	49832	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.757635117 CET	49832	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.757662058 CET	443	49832	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.805949926 CET	49832	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.834079027 CET	443	49821	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.834115028 CET	443	49821	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.834292889 CET	49821	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.834292889 CET	49821	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.834333897 CET	443	49821	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.834758043 CET	49821	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.859503984 CET	443	49821	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.859532118 CET	443	49821	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.859664917 CET	49821	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.859693050 CET	443	49821	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.859844923 CET	49821	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.879925966 CET	443	49821	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.879945040 CET	443	49821	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.880013943 CET	49821	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.880043983 CET	443	49821	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.880091906 CET	49821	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.929924965 CET	443	49828	172.217.19.227	192.168.2.6
Dec 5, 2024 19:04:56.933017969 CET	443	49821	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.933042049 CET	443	49821	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.933115959 CET	49821	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.933149099 CET	443	49821	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:56.933171034 CET	49821	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.933583975 CET	49821	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:56.942495108 CET	443	49828	172.217.19.227	192.168.2.6
Dec 5, 2024 19:04:56.942601919 CET	49828	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:04:56.942619085 CET	443	49828	172.217.19.227	192.168.2.6
Dec 5, 2024 19:04:56.943048000 CET	49828	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:04:56.943090916 CET	443	49828	172.217.19.227	192.168.2.6
Dec 5, 2024 19:04:56.943141937 CET	49828	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:04:56.975362062 CET	443	49833	151.101.1.21	192.168.2.6
Dec 5, 2024 19:04:56.975419998 CET	443	49833	151.101.1.21	192.168.2.6
Dec 5, 2024 19:04:56.975486040 CET	443	49833	151.101.1.21	192.168.2.6
Dec 5, 2024 19:04:56.975533009 CET	49833	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:04:56.975548983 CET	443	49833	151.101.1.21	192.168.2.6
Dec 5, 2024 19:04:56.975593090 CET	443	49833	151.101.1.21	192.168.2.6
Dec 5, 2024 19:04:56.975703001 CET	49833	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:04:56.975703001 CET	49833	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:04:56.977513075 CET	49833	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:04:56.977531910 CET	443	49833	151.101.1.21	192.168.2.6
Dec 5, 2024 19:04:56.979439020 CET	49848	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:04:56.979487896 CET	443	49848	151.101.1.21	192.168.2.6
Dec 5, 2024 19:04:56.979585886 CET	49848	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:04:56.979810953 CET	49848	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:04:56.979823112 CET	443	49848	151.101.1.21	192.168.2.6
Dec 5, 2024 19:04:56.998959064 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.013715982 CET	443	49821	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.013737917 CET	443	49821	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.013813972 CET	49821	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.013854027 CET	443	49821	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.013926029 CET	49821	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.023448944 CET	443	49821	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.023526907 CET	443	49821	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.023539066 CET	443	49821	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.023545027 CET	49821	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.023591042 CET	49821	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.023797035 CET	49821	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.023821115 CET	443	49821	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.041330099 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.053633928 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.053648949 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.053689003 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.053704023 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.053721905 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.053730011 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.053742886 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.053807974 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.053807974 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.221801996 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.221816063 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.221852064 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.221946955 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.221946955 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.221967936 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.221990108 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.222022057 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.222131968 CET	443	49832	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.265089035 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.265115023 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.265172958 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.265204906 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.265219927 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.265259027 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.274661064 CET	49832	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.276679993 CET	443	49832	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.276694059 CET	443	49832	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.276730061 CET	443	49832	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.276746988 CET	443	49832	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.276761055 CET	443	49832	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.276782990 CET	49832	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.276796103 CET	443	49832	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.276814938 CET	49832	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.276896954 CET	49832	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.306449890 CET	443	49839	151.101.67.1	192.168.2.6
Dec 5, 2024 19:04:57.306723118 CET	49839	443	192.168.2.6	151.101.67.1
Dec 5, 2024 19:04:57.306744099 CET	443	49839	151.101.67.1	192.168.2.6
Dec 5, 2024 19:04:57.307180882 CET	443	49839	151.101.67.1	192.168.2.6
Dec 5, 2024 19:04:57.307497978 CET	49839	443	192.168.2.6	151.101.67.1
Dec 5, 2024 19:04:57.307568073 CET	443	49839	151.101.67.1	192.168.2.6
Dec 5, 2024 19:04:57.307878971 CET	49839	443	192.168.2.6	151.101.67.1
Dec 5, 2024 19:04:57.307913065 CET	443	49839	151.101.67.1	192.168.2.6
Dec 5, 2024 19:04:57.383589983 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.383624077 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.383764029 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.383783102 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.383829117 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.421453953 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.421475887 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.421622038 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.421655893 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.421813965 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.441667080 CET	443	49832	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.441678047 CET	443	49832	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.441730022 CET	443	49832	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.441746950 CET	443	49832	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.441762924 CET	443	49832	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.441843987 CET	443	49832	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.441888094 CET	49832	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.441889048 CET	49832	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.442648888 CET	49832	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.447552919 CET	49832	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.447580099 CET	443	49832	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.450730085 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.450747967 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.450809956 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.450831890 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.450849056 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.450875044 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.470928907 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.470956087 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.471050024 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.471086979 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.471226931 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.576704025 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.576735973 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.576852083 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.576888084 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.576915026 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.576931953 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.592936039 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.592958927 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.593178034 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.593209028 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.593265057 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.608186960 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.608211994 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.608323097 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.608347893 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.608493090 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.611345053 CET	443	49837	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.620369911 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.620390892 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.620508909 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.620522976 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.620651960 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.633744955 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.633766890 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.633861065 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.633879900 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.634015083 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.646687031 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.646706104 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.646833897 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.646852016 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.646989107 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.647473097 CET	49837	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.647494078 CET	443	49837	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.647893906 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.648252010 CET	443	49837	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.648644924 CET	49837	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.648725986 CET	443	49837	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.648809910 CET	49837	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.650943995 CET	443	49838	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.651134014 CET	49838	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.651151896 CET	443	49838	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.651568890 CET	443	49838	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.651927948 CET	49838	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.651989937 CET	49838	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.652000904 CET	443	49838	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.660295010 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.660312891 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.660375118 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.660386086 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.660439014 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.674046993 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.674067020 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.674139977 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.674151897 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.674303055 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.674303055 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.691340923 CET	443	49837	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.703174114 CET	49838	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.772393942 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.772418022 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.772684097 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.772684097 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.772710085 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.772757053 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.783508062 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.783531904 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.783668041 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.783744097 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.783806086 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.791860104 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.791882038 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.792005062 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.792023897 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.792076111 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.801151991 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.801191092 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.801259041 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.801266909 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.801305056 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.801316977 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.810237885 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.810256958 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.810364008 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.810379982 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.810427904 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.818763971 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.818783045 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.818852901 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.818872929 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.818902016 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.818941116 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.824796915 CET	443	49842	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:57.827924013 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.827950001 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.828031063 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.828042030 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.828088045 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.828795910 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.830185890 CET	49842	443	192.168.2.6	18.66.161.70
Dec 5, 2024 19:04:57.830197096 CET	443	49842	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:57.830588102 CET	443	49842	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:57.830899000 CET	49842	443	192.168.2.6	18.66.161.70
Dec 5, 2024 19:04:57.830976963 CET	443	49842	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:57.831047058 CET	49842	443	192.168.2.6	18.66.161.70
Dec 5, 2024 19:04:57.831073999 CET	49842	443	192.168.2.6	18.66.161.70
Dec 5, 2024 19:04:57.831123114 CET	443	49842	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:57.845335960 CET	443	49839	151.101.67.1	192.168.2.6
Dec 5, 2024 19:04:57.845478058 CET	443	49839	151.101.67.1	192.168.2.6
Dec 5, 2024 19:04:57.845541954 CET	49839	443	192.168.2.6	151.101.67.1
Dec 5, 2024 19:04:57.846270084 CET	49839	443	192.168.2.6	151.101.67.1
Dec 5, 2024 19:04:57.846288919 CET	443	49839	151.101.67.1	192.168.2.6
Dec 5, 2024 19:04:57.959697008 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.959718943 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.959779978 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.959803104 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.959831953 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.959846973 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.960939884 CET	443	49841	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.961251974 CET	49841	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.961267948 CET	443	49841	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.961661100 CET	443	49841	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.962172985 CET	49841	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.962244034 CET	443	49841	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.962296963 CET	49841	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.962564945 CET	443	49840	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.962749958 CET	49840	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.962779045 CET	443	49840	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.963186979 CET	443	49840	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.963537931 CET	49840	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.963609934 CET	443	49840	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.965626955 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.965652943 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.965728998 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.965737104 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.965851068 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.973047018 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.973074913 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.973118067 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.973125935 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.973177910 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.980465889 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.980493069 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.980536938 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.980542898 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.980582952 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.980597973 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.987149000 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.987174034 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.987209082 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.987257957 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.987263918 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.987308025 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.994982004 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.995014906 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.995053053 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.995060921 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:57.995094061 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:57.995117903 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.001624107 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.001652002 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.001744032 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.001755953 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.001802921 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.007340908 CET	443	49841	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.007472992 CET	49840	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.007477045 CET	49841	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.009371996 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.009402037 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.009473085 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.009480000 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.009520054 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.072773933 CET	443	49843	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.073054075 CET	49843	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.073076010 CET	443	49843	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.073523045 CET	443	49843	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.073621988 CET	49843	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.073769093 CET	443	49845	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.074155092 CET	49845	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.074193001 CET	443	49845	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.074295998 CET	443	49843	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.074342966 CET	49843	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.074518919 CET	49843	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.074582100 CET	443	49843	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.074763060 CET	49843	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.074774027 CET	443	49843	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.075292110 CET	443	49845	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.075295925 CET	443	49846	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.075362921 CET	49845	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.075376034 CET	443	49844	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.075510979 CET	49846	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.075544119 CET	443	49846	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.075800896 CET	49844	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.075813055 CET	443	49844	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.075952053 CET	443	49846	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.076026917 CET	49846	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.076055050 CET	443	49845	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.076118946 CET	49845	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.076453924 CET	49845	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.076527119 CET	443	49845	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.076675892 CET	443	49846	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.076728106 CET	49845	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.076721907 CET	49846	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.076735973 CET	443	49845	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.076965094 CET	49846	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.077157974 CET	443	49844	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.077244997 CET	443	49846	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.077465057 CET	49844	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.077517986 CET	443	49844	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.117108107 CET	49843	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.117132902 CET	49846	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.117132902 CET	49844	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.117160082 CET	49845	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.117166042 CET	443	49846	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.124080896 CET	443	49837	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.151942968 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.151974916 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.152017117 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.152034998 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.152072906 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.152092934 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.158421993 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.158443928 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.158504963 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.158515930 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.158570051 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.161371946 CET	49846	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.164773941 CET	443	49838	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.164999008 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.165029049 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.165065050 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.165075064 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.165110111 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.165157080 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.171911955 CET	443	49837	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.171933889 CET	443	49837	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.171977997 CET	49837	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.172003984 CET	443	49837	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.172032118 CET	49837	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.172055006 CET	49837	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.172364950 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.172394991 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.172429085 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.172441006 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.172451973 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.172483921 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.177311897 CET	443	49838	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.177326918 CET	443	49838	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.177377939 CET	49838	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.177406073 CET	443	49838	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.177426100 CET	443	49838	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.177495956 CET	49838	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.178109884 CET	49838	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.178128958 CET	443	49838	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.179781914 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.179816961 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.179852962 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.179863930 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.179893970 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.179912090 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.183998108 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.184071064 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.184079885 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.184144020 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.184200048 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.184350967 CET	49830	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.184365988 CET	443	49830	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.189829111 CET	443	49848	151.101.1.21	192.168.2.6
Dec 5, 2024 19:04:58.190123081 CET	49848	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:04:58.190133095 CET	443	49848	151.101.1.21	192.168.2.6
Dec 5, 2024 19:04:58.190511942 CET	443	49848	151.101.1.21	192.168.2.6
Dec 5, 2024 19:04:58.190857887 CET	49848	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:04:58.190911055 CET	443	49848	151.101.1.21	192.168.2.6
Dec 5, 2024 19:04:58.191004992 CET	49848	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:04:58.231328964 CET	443	49848	151.101.1.21	192.168.2.6
Dec 5, 2024 19:04:58.343724966 CET	443	49837	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.343751907 CET	443	49837	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.343835115 CET	49837	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.343872070 CET	443	49837	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.343919992 CET	49837	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.384330988 CET	443	49837	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.384356022 CET	443	49837	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.384582996 CET	49837	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.384582996 CET	49837	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.384605885 CET	443	49837	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.384653091 CET	49837	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.459548950 CET	443	49842	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:58.459660053 CET	443	49842	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:58.459717989 CET	49842	443	192.168.2.6	18.66.161.70
Dec 5, 2024 19:04:58.460208893 CET	49842	443	192.168.2.6	18.66.161.70
Dec 5, 2024 19:04:58.460230112 CET	443	49842	18.66.161.70	192.168.2.6
Dec 5, 2024 19:04:58.460238934 CET	49842	443	192.168.2.6	18.66.161.70
Dec 5, 2024 19:04:58.460280895 CET	49842	443	192.168.2.6	18.66.161.70
Dec 5, 2024 19:04:58.474993944 CET	443	49841	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.475119114 CET	443	49841	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.475195885 CET	49841	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.476203918 CET	49841	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.476223946 CET	443	49841	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.508497000 CET	443	49837	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.508529902 CET	443	49837	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.508723974 CET	49837	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.508723974 CET	49837	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.508752108 CET	443	49837	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.508800030 CET	49837	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.514396906 CET	443	49837	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.514477015 CET	49837	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.514487028 CET	443	49837	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.514537096 CET	49837	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.514790058 CET	49837	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.514808893 CET	443	49837	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.527168036 CET	49853	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.527209997 CET	443	49853	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.527324915 CET	49853	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.527467012 CET	49853	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.527477980 CET	443	49853	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.585923910 CET	443	49843	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.589665890 CET	443	49845	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.596898079 CET	443	49843	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.596960068 CET	443	49843	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.597163916 CET	49843	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.598436117 CET	49843	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.598449945 CET	443	49843	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.599915028 CET	49846	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.608406067 CET	49854	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.608463049 CET	443	49854	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.608541012 CET	49854	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.608782053 CET	49854	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.608794928 CET	443	49854	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.616487980 CET	49855	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.616522074 CET	443	49855	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.616600037 CET	49855	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.616916895 CET	49855	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.616926908 CET	443	49855	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.631772995 CET	49845	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.640037060 CET	443	49845	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.640050888 CET	443	49845	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.640100002 CET	443	49845	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.640116930 CET	443	49845	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.640129089 CET	443	49845	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.640156984 CET	443	49845	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.640288115 CET	49845	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.640288115 CET	49845	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.640651941 CET	49845	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.640675068 CET	443	49845	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.643331051 CET	443	49846	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.647650003 CET	49856	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.647671938 CET	443	49856	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.647806883 CET	49856	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.649426937 CET	443	49848	151.101.1.21	192.168.2.6
Dec 5, 2024 19:04:58.650383949 CET	443	49848	151.101.1.21	192.168.2.6
Dec 5, 2024 19:04:58.650443077 CET	49848	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:04:58.650443077 CET	49856	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.650468111 CET	443	49856	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.651331902 CET	49848	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:04:58.651340961 CET	443	49848	151.101.1.21	192.168.2.6
Dec 5, 2024 19:04:58.651658058 CET	49844	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:58.699328899 CET	443	49844	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:58.995074987 CET	443	49846	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:59.045691013 CET	443	49844	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:59.049844980 CET	49846	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:59.049875975 CET	443	49844	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:59.049940109 CET	49844	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:59.049957991 CET	443	49844	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:59.050380945 CET	443	49846	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:59.050391912 CET	443	49846	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:59.050434113 CET	443	49846	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:59.050446033 CET	49846	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:59.050452948 CET	443	49846	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:59.050467014 CET	443	49846	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:59.050477982 CET	443	49846	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:59.050493002 CET	49846	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:59.050515890 CET	49846	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:59.051265001 CET	443	49844	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:59.051323891 CET	49844	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:59.052165031 CET	49844	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:59.052186966 CET	443	49844	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:59.052196026 CET	49844	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:59.052232027 CET	49844	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:59.056835890 CET	49858	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:59.056888103 CET	443	49858	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:59.056968927 CET	49858	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:59.057210922 CET	49858	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:59.057223082 CET	443	49858	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:59.061651945 CET	49859	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:59.061711073 CET	443	49859	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:59.061847925 CET	49859	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:59.062014103 CET	49859	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:59.062027931 CET	443	49859	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:59.205274105 CET	443	49846	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:59.205285072 CET	443	49846	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:59.205315113 CET	443	49846	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:59.205349922 CET	443	49846	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:59.205367088 CET	49846	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:59.205424070 CET	49846	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:59.206248045 CET	49846	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:59.206264019 CET	443	49846	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:59.210282087 CET	49860	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:04:59.210319996 CET	443	49860	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:59.210407019 CET	49860	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:04:59.211019039 CET	49860	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:04:59.211030006 CET	443	49860	151.101.193.21	192.168.2.6
Dec 5, 2024 19:04:59.213318110 CET	49861	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:59.213367939 CET	443	49861	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:59.213432074 CET	49861	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:59.213638067 CET	49861	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:59.213659048 CET	443	49861	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:59.215783119 CET	49862	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:59.215795040 CET	443	49862	192.229.221.25	192.168.2.6
Dec 5, 2024 19:04:59.215867043 CET	49862	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:59.216088057 CET	49862	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:04:59.216097116 CET	443	49862	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:00.291196108 CET	443	49853	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:00.301799059 CET	49853	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:00.301826954 CET	443	49853	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:00.302411079 CET	443	49853	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:00.329196930 CET	49853	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:00.329314947 CET	443	49853	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:00.329541922 CET	49853	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:00.367770910 CET	443	49854	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:00.368057966 CET	49854	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:00.368097067 CET	443	49854	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:00.368546009 CET	443	49854	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:00.368923903 CET	49854	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:00.369003057 CET	443	49854	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:00.369075060 CET	49854	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:00.375323057 CET	443	49853	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:00.376553059 CET	443	49855	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:00.376852989 CET	49855	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:00.376867056 CET	443	49855	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:00.377259016 CET	443	49855	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:00.377631903 CET	49855	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:00.377690077 CET	443	49855	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:00.377751112 CET	49855	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:00.412411928 CET	443	49856	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:00.412975073 CET	49856	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:00.412986040 CET	443	49856	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:00.413480043 CET	443	49856	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:00.413542032 CET	49856	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:00.414247990 CET	443	49856	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:00.414294958 CET	49856	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:00.414480925 CET	49856	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:00.414571047 CET	443	49856	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:00.414628983 CET	49856	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:00.414634943 CET	443	49856	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:00.415334940 CET	443	49854	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:00.423320055 CET	443	49855	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:00.459506989 CET	49856	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:00.482923985 CET	443	49860	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:00.483190060 CET	49860	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:00.483205080 CET	443	49860	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:00.483875036 CET	443	49860	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:00.483961105 CET	49860	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:00.485114098 CET	443	49860	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:00.485163927 CET	49860	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:00.485347986 CET	49860	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:00.485436916 CET	443	49860	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:00.485511065 CET	49860	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:00.485522985 CET	443	49860	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:00.485538006 CET	49860	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:00.527335882 CET	443	49860	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:00.539791107 CET	49860	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:00.808687925 CET	443	49853	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:00.850578070 CET	49853	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:00.857970953 CET	443	49858	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:00.858262062 CET	49858	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:00.858278990 CET	443	49858	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:00.858676910 CET	443	49858	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:00.858730078 CET	49858	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:00.859309912 CET	443	49859	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:00.859360933 CET	443	49858	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:00.859402895 CET	49858	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:00.859675884 CET	49859	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:00.859718084 CET	443	49859	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:00.859798908 CET	49858	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:00.859858990 CET	443	49858	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:00.860025883 CET	49858	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:00.860035896 CET	443	49858	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:00.860187054 CET	443	49859	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:00.860677958 CET	49859	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:00.860750914 CET	443	49859	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:00.860769987 CET	49859	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:00.861984015 CET	443	49853	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:00.861994028 CET	443	49853	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:00.862037897 CET	49853	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:00.862040997 CET	443	49853	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:00.862066031 CET	443	49853	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:00.862086058 CET	443	49853	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:00.862097979 CET	443	49853	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:00.862106085 CET	49853	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:00.862106085 CET	49853	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:00.862129927 CET	49853	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:00.880847931 CET	443	49854	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:00.894990921 CET	443	49855	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:00.899112940 CET	443	49855	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:00.899163008 CET	49855	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:00.899175882 CET	443	49855	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:00.899194002 CET	443	49855	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:00.899307013 CET	49855	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:00.903337955 CET	443	49859	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:00.904856920 CET	49858	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:00.904859066 CET	49859	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:00.910259962 CET	443	49854	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:00.910300970 CET	443	49854	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:00.910343885 CET	443	49854	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:00.910348892 CET	49854	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:00.910393953 CET	49854	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:00.917551041 CET	49854	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:00.917570114 CET	443	49854	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:00.920023918 CET	49855	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:00.920038939 CET	443	49855	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:00.928061008 CET	443	49856	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:00.974138975 CET	443	49856	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:00.974153042 CET	443	49856	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:00.974183083 CET	443	49856	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:00.974205971 CET	49856	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:00.974226952 CET	443	49856	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:00.974240065 CET	49856	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:00.974246025 CET	443	49856	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:00.974267960 CET	443	49856	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:00.974282980 CET	49856	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:00.974312067 CET	49856	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:00.974833965 CET	49856	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:00.974850893 CET	443	49856	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:01.022404909 CET	443	49853	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:01.022433043 CET	443	49853	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:01.022492886 CET	49853	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:01.022502899 CET	443	49853	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:01.022533894 CET	49853	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:01.022552013 CET	49853	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:01.027199984 CET	443	49861	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:01.027527094 CET	49861	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:01.027548075 CET	443	49861	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:01.027820110 CET	443	49862	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:01.027990103 CET	443	49861	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:01.028013945 CET	49862	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:01.028026104 CET	443	49862	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:01.028362989 CET	49861	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:01.028455019 CET	443	49861	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:01.028486013 CET	443	49862	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:01.028518915 CET	49861	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:01.028546095 CET	49862	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:01.029226065 CET	443	49862	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:01.029314041 CET	49862	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:01.029447079 CET	49862	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:01.029515982 CET	443	49862	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:01.029561043 CET	49862	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:01.060178995 CET	443	49860	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:01.060549021 CET	443	49860	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:01.060596943 CET	443	49860	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:01.060611010 CET	49860	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:01.060632944 CET	443	49860	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:01.060672045 CET	443	49860	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:01.060671091 CET	49860	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:01.060688019 CET	443	49860	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:01.060736895 CET	49860	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:01.061850071 CET	443	49853	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:01.061872005 CET	443	49853	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:01.061930895 CET	49853	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:01.061940908 CET	443	49853	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:01.061970949 CET	49853	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:01.061984062 CET	49853	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:01.068603992 CET	443	49860	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:01.068690062 CET	443	49860	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:01.068789005 CET	49860	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:01.068862915 CET	49860	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:01.068862915 CET	49860	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:01.068881989 CET	443	49860	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:01.068938971 CET	49860	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:01.075324059 CET	443	49861	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:01.075340033 CET	443	49862	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:01.077442884 CET	49869	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:01.077496052 CET	443	49869	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:01.077562094 CET	49869	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:01.077795982 CET	49869	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:01.077816010 CET	443	49869	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:01.083105087 CET	49862	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:01.083115101 CET	443	49862	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:01.129725933 CET	49862	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:01.197292089 CET	443	49853	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:01.197321892 CET	443	49853	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:01.197374105 CET	49853	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:01.197393894 CET	443	49853	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:01.197427034 CET	49853	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:01.197474003 CET	49853	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:01.202672958 CET	443	49853	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:01.202739954 CET	49853	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:01.202748060 CET	443	49853	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:01.202764034 CET	443	49853	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:01.202804089 CET	49853	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:01.203054905 CET	49853	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:01.203068972 CET	443	49853	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:01.203094006 CET	49853	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:01.203119993 CET	49853	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:01.284356117 CET	49871	443	192.168.2.6	151.101.3.1
Dec 5, 2024 19:05:01.284396887 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:01.284456015 CET	49871	443	192.168.2.6	151.101.3.1
Dec 5, 2024 19:05:01.284823895 CET	49871	443	192.168.2.6	151.101.3.1
Dec 5, 2024 19:05:01.284832954 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:01.376174927 CET	443	49858	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:01.377197981 CET	443	49859	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:01.377338886 CET	443	49859	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:01.377541065 CET	49859	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:01.380341053 CET	443	49858	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:01.380394936 CET	443	49858	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:01.380490065 CET	49858	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:01.380490065 CET	49858	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:01.381421089 CET	49859	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:01.381455898 CET	443	49859	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:01.384607077 CET	49858	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:01.384625912 CET	443	49858	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:01.391033888 CET	49872	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:01.391091108 CET	443	49872	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:01.391359091 CET	49872	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:01.391360998 CET	49873	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:01.391411066 CET	443	49873	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:01.391473055 CET	49873	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:01.391822100 CET	49874	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:01.391833067 CET	443	49874	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:01.392132998 CET	49875	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:01.392143965 CET	443	49875	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:01.392194033 CET	49874	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:01.392251015 CET	49875	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:01.392750978 CET	49872	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:01.392752886 CET	49876	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:01.392765999 CET	443	49872	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:01.392788887 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:01.392930031 CET	49876	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:01.393738985 CET	49873	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:01.393738985 CET	49875	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:01.393754005 CET	443	49873	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:01.393779993 CET	443	49875	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:01.393958092 CET	49874	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:01.393973112 CET	443	49874	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:01.394731045 CET	49876	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:01.394735098 CET	49877	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:01.394752979 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:01.394767046 CET	443	49877	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:01.394948006 CET	49877	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:01.395761013 CET	49877	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:01.395772934 CET	443	49877	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:01.564476967 CET	443	49861	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:01.565314054 CET	443	49862	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:01.568516016 CET	443	49861	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:01.569036961 CET	49861	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:01.569084883 CET	443	49861	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:01.569593906 CET	49861	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:01.569607019 CET	443	49861	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:01.569623947 CET	443	49861	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:01.569719076 CET	49861	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:01.569719076 CET	49861	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:01.574532986 CET	49878	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:01.574532986 CET	49879	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:01.574577093 CET	443	49879	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:01.574577093 CET	443	49878	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:01.574661016 CET	49879	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:01.574666977 CET	49878	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:01.574884892 CET	49878	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:01.574902058 CET	443	49878	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:01.575267076 CET	49879	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:01.575279951 CET	443	49879	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:01.617517948 CET	49862	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:01.620129108 CET	443	49862	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:01.620141983 CET	443	49862	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:01.620161057 CET	443	49862	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:01.620167971 CET	443	49862	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:01.620198011 CET	443	49862	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:01.620261908 CET	49862	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:01.620263100 CET	49862	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:01.620263100 CET	49862	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:01.620276928 CET	443	49862	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:01.620476961 CET	49862	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:01.777610064 CET	443	49862	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:01.777631998 CET	443	49862	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:01.777651072 CET	443	49862	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:01.777735949 CET	443	49862	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:01.777753115 CET	49862	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:01.777753115 CET	49862	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:01.777822018 CET	49862	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:01.778594971 CET	49862	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:01.778611898 CET	443	49862	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:01.984929085 CET	49883	443	192.168.2.6	151.101.131.1
Dec 5, 2024 19:05:01.984978914 CET	443	49883	151.101.131.1	192.168.2.6
Dec 5, 2024 19:05:01.985169888 CET	49883	443	192.168.2.6	151.101.131.1
Dec 5, 2024 19:05:01.985410929 CET	49883	443	192.168.2.6	151.101.131.1
Dec 5, 2024 19:05:01.985428095 CET	443	49883	151.101.131.1	192.168.2.6
Dec 5, 2024 19:05:02.299067974 CET	443	49869	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:02.299451113 CET	49869	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:02.299484015 CET	443	49869	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:02.299854040 CET	443	49869	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:02.300319910 CET	49869	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:02.300321102 CET	49869	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:02.300349951 CET	443	49869	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:02.300403118 CET	443	49869	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:02.348309040 CET	49869	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:02.509628057 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:02.513535976 CET	49871	443	192.168.2.6	151.101.3.1
Dec 5, 2024 19:05:02.513552904 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:02.514604092 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:02.514677048 CET	49871	443	192.168.2.6	151.101.3.1
Dec 5, 2024 19:05:02.515796900 CET	49871	443	192.168.2.6	151.101.3.1
Dec 5, 2024 19:05:02.515855074 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:02.516086102 CET	49871	443	192.168.2.6	151.101.3.1
Dec 5, 2024 19:05:02.516093969 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:02.559611082 CET	49871	443	192.168.2.6	151.101.3.1
Dec 5, 2024 19:05:02.896709919 CET	443	49869	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:02.896766901 CET	443	49869	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:02.896828890 CET	443	49869	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:02.896867990 CET	49869	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:02.896902084 CET	443	49869	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:02.896990061 CET	49869	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:02.897034883 CET	443	49869	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:02.897095919 CET	443	49869	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:02.897154093 CET	49869	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:02.898494005 CET	49869	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:02.898494005 CET	49869	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:02.898523092 CET	443	49869	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:02.898577929 CET	49869	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:02.899925947 CET	49884	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:02.899945021 CET	443	49884	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:02.900033951 CET	49884	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:02.900460958 CET	49884	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:02.900470018 CET	443	49884	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:02.995090961 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:02.995378971 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:02.995425940 CET	49871	443	192.168.2.6	151.101.3.1
Dec 5, 2024 19:05:02.995439053 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:02.995570898 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:02.995598078 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:02.995605946 CET	49871	443	192.168.2.6	151.101.3.1
Dec 5, 2024 19:05:02.995615959 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:02.995646000 CET	49871	443	192.168.2.6	151.101.3.1
Dec 5, 2024 19:05:03.011971951 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.016149044 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.016200066 CET	49871	443	192.168.2.6	151.101.3.1
Dec 5, 2024 19:05:03.016206980 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.024629116 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.024657011 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.024681091 CET	49871	443	192.168.2.6	151.101.3.1
Dec 5, 2024 19:05:03.024689913 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.024724960 CET	49871	443	192.168.2.6	151.101.3.1
Dec 5, 2024 19:05:03.115308046 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.152282000 CET	443	49872	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.152657986 CET	49872	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.152688026 CET	443	49872	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.153022051 CET	443	49873	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.153105021 CET	443	49872	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.153294086 CET	49873	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.153311968 CET	443	49873	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.153645992 CET	49872	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.153723955 CET	443	49872	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.153878927 CET	443	49873	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.153944969 CET	443	49874	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.153956890 CET	49872	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.154294968 CET	49873	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.154443979 CET	49874	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.154452085 CET	443	49874	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.154593945 CET	49873	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.154598951 CET	443	49873	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.154912949 CET	443	49873	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.154952049 CET	443	49874	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.155003071 CET	49874	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.155138969 CET	443	49877	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.155479908 CET	49877	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.155495882 CET	443	49877	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.155711889 CET	443	49874	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.155765057 CET	49874	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.155905008 CET	49874	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.155936003 CET	443	49877	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.155957937 CET	443	49874	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.156012058 CET	49874	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.156018972 CET	443	49874	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.156027079 CET	49877	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.156436920 CET	443	49875	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.156647921 CET	443	49877	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.156649113 CET	49875	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.156660080 CET	443	49875	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.156712055 CET	49877	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.156857967 CET	49877	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.156922102 CET	443	49877	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.156980038 CET	49877	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.157087088 CET	443	49875	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.157408953 CET	49875	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.157471895 CET	443	49875	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.157495975 CET	49875	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.158165932 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.158365011 CET	49876	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.158390045 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.158936977 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.158998013 CET	49876	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.160693884 CET	49871	443	192.168.2.6	151.101.3.1
Dec 5, 2024 19:05:03.160708904 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.161518097 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.161596060 CET	49876	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.162338972 CET	49876	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.162419081 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.162482977 CET	49876	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.191406012 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.191468954 CET	49871	443	192.168.2.6	151.101.3.1
Dec 5, 2024 19:05:03.191473961 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.191484928 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.191545010 CET	49871	443	192.168.2.6	151.101.3.1
Dec 5, 2024 19:05:03.198880911 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.199326992 CET	443	49872	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.199331999 CET	443	49877	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.203325033 CET	443	49875	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.203329086 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.205931902 CET	443	49883	151.101.131.1	192.168.2.6
Dec 5, 2024 19:05:03.206356049 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.206403971 CET	49871	443	192.168.2.6	151.101.3.1
Dec 5, 2024 19:05:03.206410885 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.206471920 CET	49883	443	192.168.2.6	151.101.131.1
Dec 5, 2024 19:05:03.206492901 CET	443	49883	151.101.131.1	192.168.2.6
Dec 5, 2024 19:05:03.206840992 CET	443	49883	151.101.131.1	192.168.2.6
Dec 5, 2024 19:05:03.207238913 CET	49883	443	192.168.2.6	151.101.131.1
Dec 5, 2024 19:05:03.207304001 CET	443	49883	151.101.131.1	192.168.2.6
Dec 5, 2024 19:05:03.209753036 CET	49874	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.209767103 CET	49873	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.209765911 CET	49876	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.209767103 CET	49875	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.209784031 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.209820032 CET	49877	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.209837914 CET	443	49877	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.213814020 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.213890076 CET	49871	443	192.168.2.6	151.101.3.1
Dec 5, 2024 19:05:03.213896036 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.214369059 CET	49883	443	192.168.2.6	151.101.131.1
Dec 5, 2024 19:05:03.214409113 CET	443	49883	151.101.131.1	192.168.2.6
Dec 5, 2024 19:05:03.221489906 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.221551895 CET	49871	443	192.168.2.6	151.101.3.1
Dec 5, 2024 19:05:03.221559048 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.229002953 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.229080915 CET	49871	443	192.168.2.6	151.101.3.1
Dec 5, 2024 19:05:03.229089975 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.236417055 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.236577034 CET	49871	443	192.168.2.6	151.101.3.1
Dec 5, 2024 19:05:03.236582994 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.244003057 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.244046926 CET	49871	443	192.168.2.6	151.101.3.1
Dec 5, 2024 19:05:03.244054079 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.254604101 CET	49876	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.254663944 CET	49877	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.257261992 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.257306099 CET	49871	443	192.168.2.6	151.101.3.1
Dec 5, 2024 19:05:03.257316113 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.263295889 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.263329029 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.263340950 CET	49871	443	192.168.2.6	151.101.3.1
Dec 5, 2024 19:05:03.263346910 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.263400078 CET	49871	443	192.168.2.6	151.101.3.1
Dec 5, 2024 19:05:03.269331932 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.275393963 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.275454044 CET	49871	443	192.168.2.6	151.101.3.1
Dec 5, 2024 19:05:03.275460005 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.283404112 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.283809900 CET	49871	443	192.168.2.6	151.101.3.1
Dec 5, 2024 19:05:03.283816099 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.333405972 CET	443	49878	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.334557056 CET	443	49879	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.334894896 CET	49878	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.334918976 CET	443	49878	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.335072994 CET	49879	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.335086107 CET	443	49879	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.335139990 CET	49871	443	192.168.2.6	151.101.3.1
Dec 5, 2024 19:05:03.335344076 CET	443	49878	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.335405111 CET	49878	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.335489988 CET	443	49879	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.335886002 CET	49879	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.335942984 CET	443	49879	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.336014032 CET	49879	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.336078882 CET	443	49878	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.336129904 CET	49878	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.336234093 CET	49878	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.336293936 CET	443	49878	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.336325884 CET	49878	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.379323959 CET	443	49878	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.379779100 CET	49879	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.379787922 CET	443	49879	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.379790068 CET	49878	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.379801035 CET	443	49878	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.426367998 CET	49878	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.466231108 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.479990959 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.480043888 CET	49871	443	192.168.2.6	151.101.3.1
Dec 5, 2024 19:05:03.480076075 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.521557093 CET	49871	443	192.168.2.6	151.101.3.1
Dec 5, 2024 19:05:03.596910000 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.596968889 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.597004890 CET	49871	443	192.168.2.6	151.101.3.1
Dec 5, 2024 19:05:03.597033978 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.599692106 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.599775076 CET	49871	443	192.168.2.6	151.101.3.1
Dec 5, 2024 19:05:03.599783897 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.648399115 CET	49871	443	192.168.2.6	151.101.3.1
Dec 5, 2024 19:05:03.716761112 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.716871977 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.716880083 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.716950893 CET	49871	443	192.168.2.6	151.101.3.1
Dec 5, 2024 19:05:03.716968060 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.717015028 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.717051029 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.717060089 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.717075109 CET	49871	443	192.168.2.6	151.101.3.1
Dec 5, 2024 19:05:03.717081070 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.717092991 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.717139959 CET	49871	443	192.168.2.6	151.101.3.1
Dec 5, 2024 19:05:03.717139959 CET	49871	443	192.168.2.6	151.101.3.1
Dec 5, 2024 19:05:03.717147112 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.717241049 CET	49871	443	192.168.2.6	151.101.3.1
Dec 5, 2024 19:05:03.718334913 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.718347073 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.718379021 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.718410015 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.718435049 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.718466043 CET	49871	443	192.168.2.6	151.101.3.1
Dec 5, 2024 19:05:03.718466043 CET	49871	443	192.168.2.6	151.101.3.1
Dec 5, 2024 19:05:03.718466043 CET	49871	443	192.168.2.6	151.101.3.1
Dec 5, 2024 19:05:03.718483925 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.718524933 CET	49871	443	192.168.2.6	151.101.3.1
Dec 5, 2024 19:05:03.718920946 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.718967915 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.718976021 CET	49871	443	192.168.2.6	151.101.3.1
Dec 5, 2024 19:05:03.718983889 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.718997002 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.719024897 CET	49871	443	192.168.2.6	151.101.3.1
Dec 5, 2024 19:05:03.719098091 CET	49871	443	192.168.2.6	151.101.3.1
Dec 5, 2024 19:05:03.719103098 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.719161034 CET	49871	443	192.168.2.6	151.101.3.1
Dec 5, 2024 19:05:03.719865084 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.720010996 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.720021009 CET	49871	443	192.168.2.6	151.101.3.1
Dec 5, 2024 19:05:03.720032930 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.720081091 CET	49871	443	192.168.2.6	151.101.3.1
Dec 5, 2024 19:05:03.720081091 CET	49871	443	192.168.2.6	151.101.3.1
Dec 5, 2024 19:05:03.721009970 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.721065044 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.721143961 CET	443	49873	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.721165895 CET	49871	443	192.168.2.6	151.101.3.1
Dec 5, 2024 19:05:03.721165895 CET	49871	443	192.168.2.6	151.101.3.1
Dec 5, 2024 19:05:03.721168995 CET	443	49874	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.721175909 CET	443	49871	151.101.3.1	192.168.2.6
Dec 5, 2024 19:05:03.721760988 CET	443	49872	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.721930981 CET	443	49874	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.721942902 CET	443	49875	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.721971989 CET	49874	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.721980095 CET	443	49877	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.721992016 CET	443	49874	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.722011089 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.722011089 CET	443	49877	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.722021103 CET	443	49874	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.722073078 CET	49874	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.722080946 CET	49877	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.722095013 CET	443	49877	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.722125053 CET	443	49872	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.722199917 CET	49872	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.722294092 CET	443	49877	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.722352028 CET	49877	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.722809076 CET	443	49875	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.722853899 CET	49875	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.722867012 CET	443	49875	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.722897053 CET	443	49875	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.722928047 CET	49875	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.722946882 CET	49875	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.723711014 CET	443	49873	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.723726034 CET	443	49873	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.723753929 CET	443	49873	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.723766088 CET	443	49873	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.723772049 CET	49873	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.723783016 CET	443	49873	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.723809958 CET	49873	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.723823071 CET	49873	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.726171017 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.726175070 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.726191998 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.726197004 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.726205111 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.726234913 CET	49876	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.726274014 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.726284981 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.726294041 CET	49876	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.726326942 CET	49876	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.728449106 CET	49887	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:03.728481054 CET	443	49887	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:03.728570938 CET	49887	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:03.728863001 CET	49887	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:03.728877068 CET	443	49887	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:03.732357025 CET	49873	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.732364893 CET	443	49873	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.732970953 CET	49874	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.732983112 CET	443	49874	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.737464905 CET	49877	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.737474918 CET	443	49877	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.738548994 CET	49875	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.738554001 CET	443	49875	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.743751049 CET	443	49883	151.101.131.1	192.168.2.6
Dec 5, 2024 19:05:03.743900061 CET	443	49883	151.101.131.1	192.168.2.6
Dec 5, 2024 19:05:03.743953943 CET	49883	443	192.168.2.6	151.101.131.1
Dec 5, 2024 19:05:03.744991064 CET	49883	443	192.168.2.6	151.101.131.1
Dec 5, 2024 19:05:03.744997025 CET	443	49883	151.101.131.1	192.168.2.6
Dec 5, 2024 19:05:03.747657061 CET	49872	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.747663021 CET	443	49872	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.752083063 CET	49840	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.753555059 CET	49889	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.753573895 CET	443	49889	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.753657103 CET	49889	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.754369974 CET	49890	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.754388094 CET	443	49890	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.754434109 CET	49890	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.754699945 CET	49889	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.754715919 CET	443	49889	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.754951000 CET	49890	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.754966021 CET	443	49890	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.762012005 CET	49891	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.762020111 CET	443	49891	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.762116909 CET	49891	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.762284040 CET	49891	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.762294054 CET	443	49891	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.763847113 CET	49892	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.763868093 CET	443	49892	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.763937950 CET	49892	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.764098883 CET	49892	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.764111996 CET	443	49892	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.765788078 CET	49893	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.765811920 CET	443	49893	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.765876055 CET	49893	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.766212940 CET	49893	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.766222000 CET	443	49893	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.766581059 CET	49894	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.766592979 CET	443	49894	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.766647100 CET	49894	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.767069101 CET	49894	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.767080069 CET	443	49894	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.767952919 CET	49895	443	192.168.2.6	151.101.67.1
Dec 5, 2024 19:05:03.767983913 CET	443	49895	151.101.67.1	192.168.2.6
Dec 5, 2024 19:05:03.768104076 CET	49895	443	192.168.2.6	151.101.67.1
Dec 5, 2024 19:05:03.769010067 CET	49895	443	192.168.2.6	151.101.67.1
Dec 5, 2024 19:05:03.769026995 CET	443	49895	151.101.67.1	192.168.2.6
Dec 5, 2024 19:05:03.799324036 CET	443	49840	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.893599987 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.893610954 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.893644094 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.893685102 CET	49876	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.893707037 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.893740892 CET	49876	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.893763065 CET	49876	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.952518940 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.952538967 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.952604055 CET	49876	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:03.952617884 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:03.952680111 CET	49876	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.055978060 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.055998087 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.056057930 CET	49876	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.056076050 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.056114912 CET	49876	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.095109940 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.095184088 CET	49876	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.095189095 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.095201969 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.095242023 CET	49876	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.095267057 CET	49876	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.105520964 CET	443	49879	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.106410027 CET	443	49878	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.108431101 CET	443	49879	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.108491898 CET	443	49879	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.108553886 CET	49879	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.108591080 CET	49879	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.108625889 CET	443	49884	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:04.109005928 CET	49884	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:04.109026909 CET	443	49884	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:04.109076977 CET	49879	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.109091997 CET	443	49879	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.109414101 CET	443	49884	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:04.110193968 CET	49884	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:04.110270023 CET	443	49884	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:04.110403061 CET	49884	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:04.128730059 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.128753901 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.128813982 CET	49876	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.128823996 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.128858089 CET	49876	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.146095991 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.146120071 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.146168947 CET	49876	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.146178007 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.146229029 CET	49876	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.146431923 CET	49878	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.151329994 CET	443	49884	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:04.160810947 CET	443	49878	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.160821915 CET	443	49878	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.160845041 CET	443	49878	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.160859108 CET	443	49878	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.160871983 CET	443	49878	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.160873890 CET	49878	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.160887003 CET	443	49878	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.160914898 CET	49878	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.160938025 CET	49878	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.164987087 CET	443	49840	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.166338921 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.166361094 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.166435003 CET	49876	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.166445971 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.166487932 CET	49876	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.180718899 CET	443	49840	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.180777073 CET	443	49840	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.180792093 CET	443	49840	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.180793047 CET	49840	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.180840015 CET	49840	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.181194067 CET	49840	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.181205988 CET	443	49840	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.183916092 CET	49898	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.183957100 CET	443	49898	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.184022903 CET	49898	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.184195995 CET	49898	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.184207916 CET	443	49898	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.188672066 CET	49899	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.188704967 CET	443	49899	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.188816071 CET	49899	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.189198017 CET	49899	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.189223051 CET	443	49899	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.261734962 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.261759043 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.261811972 CET	49876	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.261832952 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.261861086 CET	49876	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.261883020 CET	49876	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.279055119 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.279072046 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.279175997 CET	49876	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.279186964 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.279211044 CET	49876	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.279232025 CET	49876	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.291949987 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.291980028 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.292033911 CET	49876	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.292043924 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.292090893 CET	49876	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.306380033 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.306401014 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.306442976 CET	49876	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.306452990 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.306492090 CET	49876	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.306509972 CET	49876	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.319883108 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.319910049 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.319976091 CET	49876	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.319984913 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.320058107 CET	49876	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.325668097 CET	443	49878	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.325681925 CET	443	49878	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.325715065 CET	443	49878	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.325757027 CET	443	49878	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.325757980 CET	49878	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.325769901 CET	443	49878	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.325808048 CET	49878	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.333759069 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.333790064 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.333873034 CET	49876	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.333882093 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.333909988 CET	49876	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.333934069 CET	49876	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.347764015 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.347790956 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.347851992 CET	49876	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.347862959 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.347927094 CET	49876	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.368386030 CET	443	49878	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.368403912 CET	443	49878	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.368429899 CET	443	49878	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.368458033 CET	49878	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.368474007 CET	443	49878	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.368515968 CET	49878	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.417401075 CET	443	49878	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.417423964 CET	443	49878	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.417484999 CET	49878	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.417506933 CET	443	49878	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.417521954 CET	443	49878	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.417565107 CET	49878	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.418037891 CET	49878	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.418056011 CET	443	49878	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.422521114 CET	49901	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.422566891 CET	443	49901	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.422699928 CET	49901	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.423109055 CET	49901	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.423124075 CET	443	49901	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.423701048 CET	49902	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.423743963 CET	443	49902	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.423811913 CET	49902	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.424118042 CET	49902	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.424134016 CET	443	49902	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.442104101 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.442126036 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.442183018 CET	49876	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.442212105 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.442224026 CET	49876	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.442442894 CET	49876	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.451879025 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.451899052 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.451961994 CET	49876	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.451971054 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.452075958 CET	49876	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.460278988 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.460329056 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.460366964 CET	49876	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.460367918 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.460405111 CET	49876	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.460426092 CET	49876	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.460870981 CET	49876	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.460886002 CET	443	49876	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.475569010 CET	49903	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.475610971 CET	443	49903	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.475861073 CET	49903	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.476306915 CET	49903	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:04.476322889 CET	443	49903	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:04.601372957 CET	443	49884	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:04.601481915 CET	443	49884	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:04.601593971 CET	49884	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:04.604114056 CET	49884	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:04.604135036 CET	443	49884	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:04.947974920 CET	443	49887	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:04.948585033 CET	49887	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:04.948596001 CET	443	49887	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:04.949004889 CET	443	49887	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:04.949419022 CET	49887	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:04.949491024 CET	443	49887	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:04.949759960 CET	49887	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:04.949784040 CET	443	49887	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:04.949811935 CET	49887	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:04.995323896 CET	443	49887	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:05.005357981 CET	443	49895	151.101.67.1	192.168.2.6
Dec 5, 2024 19:05:05.007181883 CET	49895	443	192.168.2.6	151.101.67.1
Dec 5, 2024 19:05:05.007198095 CET	443	49895	151.101.67.1	192.168.2.6
Dec 5, 2024 19:05:05.007635117 CET	443	49895	151.101.67.1	192.168.2.6
Dec 5, 2024 19:05:05.009134054 CET	49895	443	192.168.2.6	151.101.67.1
Dec 5, 2024 19:05:05.009222031 CET	443	49895	151.101.67.1	192.168.2.6
Dec 5, 2024 19:05:05.009327888 CET	49895	443	192.168.2.6	151.101.67.1
Dec 5, 2024 19:05:05.009356976 CET	443	49895	151.101.67.1	192.168.2.6
Dec 5, 2024 19:05:05.526597977 CET	443	49895	151.101.67.1	192.168.2.6
Dec 5, 2024 19:05:05.526731968 CET	443	49895	151.101.67.1	192.168.2.6
Dec 5, 2024 19:05:05.526880026 CET	49895	443	192.168.2.6	151.101.67.1
Dec 5, 2024 19:05:05.527894020 CET	49895	443	192.168.2.6	151.101.67.1
Dec 5, 2024 19:05:05.527913094 CET	443	49895	151.101.67.1	192.168.2.6
Dec 5, 2024 19:05:05.542428970 CET	443	49887	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:05.542480946 CET	443	49887	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:05.542534113 CET	443	49887	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:05.542581081 CET	49887	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:05.542593002 CET	443	49887	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:05.542665958 CET	49887	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:05.542671919 CET	443	49887	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:05.542721033 CET	443	49887	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:05.542790890 CET	49887	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:05.542795897 CET	443	49887	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:05.543930054 CET	49887	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:05.545399904 CET	443	49889	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:05.545433998 CET	443	49887	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:05.545552969 CET	49887	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:05.545675993 CET	49889	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:05.545703888 CET	443	49889	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:05.546228886 CET	443	49889	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:05.546830893 CET	49889	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:05.546932936 CET	443	49889	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:05.547214031 CET	49905	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:05.547245026 CET	443	49905	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:05.547328949 CET	49905	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:05.547504902 CET	49889	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:05.547735929 CET	49905	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:05.547736883 CET	443	49890	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:05.547745943 CET	443	49905	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:05.547950029 CET	49890	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:05.547981024 CET	443	49890	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:05.548439026 CET	443	49890	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:05.548778057 CET	49890	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:05.548857927 CET	443	49890	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:05.548860073 CET	49890	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:05.555443048 CET	443	49891	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:05.555721998 CET	49891	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:05.555731058 CET	443	49891	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:05.556137085 CET	443	49891	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:05.556448936 CET	49891	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:05.556512117 CET	443	49891	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:05.556572914 CET	49891	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:05.563647985 CET	443	49892	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:05.563873053 CET	49892	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:05.563905001 CET	443	49892	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:05.564454079 CET	443	49892	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:05.564754009 CET	49892	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:05.564826965 CET	443	49892	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:05.564841032 CET	49892	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:05.565869093 CET	443	49893	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:05.566039085 CET	49893	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:05.566056013 CET	443	49893	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:05.566205978 CET	443	49894	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:05.566509008 CET	443	49893	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:05.566584110 CET	49893	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:05.567255020 CET	443	49893	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:05.567348003 CET	49893	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:05.568255901 CET	49894	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:05.568264961 CET	443	49894	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:05.568792105 CET	443	49894	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:05.568870068 CET	49894	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:05.569566011 CET	443	49894	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:05.569633007 CET	49894	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:05.570489883 CET	49893	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:05.570586920 CET	443	49893	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:05.570645094 CET	49893	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:05.571372032 CET	49894	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:05.571460009 CET	443	49894	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:05.571475029 CET	49894	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:05.585644960 CET	49906	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:05.585694075 CET	443	49906	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:05.585803986 CET	49906	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:05.586755991 CET	49906	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:05.586781979 CET	443	49906	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:05.591353893 CET	443	49890	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:05.595331907 CET	443	49889	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:05.599345922 CET	443	49891	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:05.601691008 CET	49890	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:05.611335993 CET	443	49892	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:05.615335941 CET	443	49893	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:05.615339994 CET	443	49894	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:05.616996050 CET	49893	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:05.616997004 CET	49892	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:05.616997004 CET	49894	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:05.617006063 CET	443	49893	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:05.617027998 CET	443	49894	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:05.663990974 CET	49894	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:05.663990974 CET	49893	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:05.944950104 CET	443	49898	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:05.945255041 CET	49898	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:05.945292950 CET	443	49898	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:05.945677996 CET	443	49898	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:05.945739031 CET	49898	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:05.946362972 CET	443	49898	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:05.946410894 CET	49898	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:05.946594954 CET	49898	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:05.946655035 CET	443	49898	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:05.946772099 CET	49898	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:05.946780920 CET	443	49898	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:05.989330053 CET	49898	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.083069086 CET	443	49890	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.083108902 CET	443	49889	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.083147049 CET	443	49891	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.083228111 CET	443	49893	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.083436012 CET	443	49892	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.083542109 CET	443	49894	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.084086895 CET	443	49890	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.084142923 CET	49890	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.084166050 CET	443	49890	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.084208965 CET	49890	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.086621046 CET	443	49893	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.086675882 CET	49893	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.086697102 CET	443	49893	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.086714029 CET	443	49893	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.086831093 CET	49893	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.087346077 CET	443	49894	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.087407112 CET	49894	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.087414980 CET	443	49894	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.087461948 CET	49894	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.087551117 CET	49890	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.087570906 CET	443	49890	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.088036060 CET	49893	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.088051081 CET	443	49893	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.088630915 CET	49908	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.088663101 CET	443	49908	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.088721991 CET	49908	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.088954926 CET	49894	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.088965893 CET	443	49894	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.089662075 CET	49908	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.089674950 CET	443	49908	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.090869904 CET	443	49892	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.090922117 CET	49892	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.090929985 CET	443	49892	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.090972900 CET	443	49892	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.091013908 CET	49892	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.092716932 CET	49892	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.092720985 CET	443	49892	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.095936060 CET	49909	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.095978022 CET	443	49909	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.096065044 CET	49909	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.096261024 CET	49909	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.096268892 CET	443	49909	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.110405922 CET	443	49891	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.110469103 CET	49891	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.110476017 CET	443	49891	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.110517025 CET	49891	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.110726118 CET	49891	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.110744953 CET	443	49891	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.129467010 CET	49889	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.135862112 CET	443	49889	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.135874987 CET	443	49889	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.135914087 CET	443	49889	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.135934114 CET	49889	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.135960102 CET	443	49889	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.135972977 CET	443	49889	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.135993004 CET	49889	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.136015892 CET	49889	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.141606092 CET	443	49899	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.141932964 CET	49899	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.141959906 CET	443	49899	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.142389059 CET	443	49899	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.142472029 CET	49899	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.143100977 CET	443	49899	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.143170118 CET	49899	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.143331051 CET	49899	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.143393040 CET	443	49899	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.143517971 CET	49899	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.143531084 CET	443	49899	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.192403078 CET	49899	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.201484919 CET	443	49902	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.201751947 CET	49902	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.201766968 CET	443	49902	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.202184916 CET	443	49902	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.202260017 CET	49902	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.202573061 CET	443	49901	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.202769041 CET	49901	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.202779055 CET	443	49901	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.202891111 CET	443	49902	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.202965021 CET	49902	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.203174114 CET	49902	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.203234911 CET	443	49902	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.203397036 CET	49902	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.203419924 CET	443	49902	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.203425884 CET	443	49901	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.203488111 CET	49901	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.204715967 CET	443	49901	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.204781055 CET	49901	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.204971075 CET	49901	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.205069065 CET	443	49901	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.205087900 CET	49901	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.251322985 CET	443	49901	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.253575087 CET	443	49903	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.253851891 CET	49903	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.253859997 CET	443	49903	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.254306078 CET	443	49903	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.254369020 CET	49903	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.254626036 CET	49902	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.254662991 CET	49901	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.254668951 CET	443	49901	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.255017996 CET	443	49903	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.255084991 CET	49903	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.256874084 CET	49903	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.256983995 CET	443	49903	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.257121086 CET	49903	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.257126093 CET	443	49903	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.277122974 CET	443	49889	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.277200937 CET	443	49889	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.277211905 CET	49889	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.277262926 CET	49889	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.277837038 CET	49889	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.277859926 CET	443	49889	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.282654047 CET	49910	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.282677889 CET	443	49910	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.282763004 CET	49910	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.283044100 CET	49910	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.283050060 CET	443	49910	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.284482956 CET	49911	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.284518003 CET	443	49911	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.284574986 CET	49911	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.284780025 CET	49911	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.284796000 CET	443	49911	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.296972036 CET	49901	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.296972990 CET	49903	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.460382938 CET	443	49898	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.471286058 CET	443	49898	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.471340895 CET	49898	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.471364975 CET	443	49898	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.471379995 CET	443	49898	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.471412897 CET	49898	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.471438885 CET	49898	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.471831083 CET	49898	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.471849918 CET	443	49898	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.477963924 CET	49915	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.478003025 CET	443	49915	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.478068113 CET	49915	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.478315115 CET	49915	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.478331089 CET	443	49915	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.699484110 CET	443	49899	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.715437889 CET	443	49899	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.715486050 CET	443	49899	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.715512991 CET	49899	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.715528965 CET	443	49899	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.715590954 CET	49899	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.716708899 CET	49899	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.716737986 CET	443	49899	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.742080927 CET	443	49902	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.743407011 CET	443	49901	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.747683048 CET	443	49901	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.747741938 CET	49901	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.747754097 CET	443	49901	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.747767925 CET	443	49901	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.747838974 CET	49901	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.748641968 CET	49901	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.748656988 CET	443	49901	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.765001059 CET	49916	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.765054941 CET	443	49916	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.765199900 CET	49916	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.765383959 CET	49916	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.765393972 CET	443	49916	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.773258924 CET	443	49905	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:06.773668051 CET	49905	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:06.773685932 CET	443	49905	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:06.774064064 CET	443	49905	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:06.774513006 CET	49905	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:06.774595022 CET	443	49905	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:06.774677992 CET	49905	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:06.788249969 CET	49902	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.797029018 CET	443	49902	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.797045946 CET	443	49902	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.797081947 CET	443	49902	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.797101974 CET	443	49902	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.797105074 CET	49902	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.797117949 CET	443	49902	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.797126055 CET	443	49902	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.797162056 CET	49902	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.797184944 CET	49902	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.797940969 CET	443	49903	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.800292969 CET	443	49906	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:06.800508976 CET	49906	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:06.800535917 CET	443	49906	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:06.800920010 CET	443	49906	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:06.800981998 CET	49906	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:06.801635027 CET	443	49906	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:06.801687956 CET	49906	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:06.801901102 CET	49906	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:06.801963091 CET	443	49906	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:06.802108049 CET	49906	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:06.802122116 CET	443	49906	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:06.802156925 CET	49906	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:06.802196980 CET	443	49906	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:06.819139004 CET	49905	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:06.819148064 CET	443	49905	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:06.850438118 CET	49906	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:06.850440025 CET	49903	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.852822065 CET	443	49903	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.852833033 CET	443	49903	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.852869987 CET	443	49903	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.852895975 CET	443	49903	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.852909088 CET	443	49903	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.852926016 CET	49903	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.852941990 CET	443	49903	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.852981091 CET	49903	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.852981091 CET	49903	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.962066889 CET	443	49902	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.962084055 CET	443	49902	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.962122917 CET	443	49902	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.962155104 CET	443	49902	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.962169886 CET	49902	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.962187052 CET	443	49902	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.962213993 CET	49902	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.962229967 CET	49902	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.990768909 CET	443	49903	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.990781069 CET	443	49903	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.990843058 CET	49903	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.990853071 CET	443	49903	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.990865946 CET	443	49903	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:06.990916967 CET	49903	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.991853952 CET	49903	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:06.991864920 CET	443	49903	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:07.017467976 CET	443	49902	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:07.017497063 CET	443	49902	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:07.017549038 CET	49902	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:07.017559052 CET	443	49902	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:07.017612934 CET	49902	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:07.017612934 CET	49902	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:07.126322031 CET	443	49902	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:07.126344919 CET	443	49902	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:07.126426935 CET	443	49902	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:07.126447916 CET	49902	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:07.126533985 CET	49902	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:07.126810074 CET	49902	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:07.126830101 CET	443	49902	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:07.127202988 CET	49917	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:07.127275944 CET	443	49917	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:07.127341986 CET	49917	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:07.127791882 CET	49917	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:07.127813101 CET	443	49917	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:07.338572979 CET	443	49906	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:07.338660955 CET	443	49906	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:07.338761091 CET	443	49906	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:07.338912964 CET	49906	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:07.339592934 CET	49906	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:07.339622021 CET	443	49906	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:07.342787027 CET	49918	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:07.342830896 CET	443	49918	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:07.342919111 CET	49918	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:07.343130112 CET	49918	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:07.343146086 CET	443	49918	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:07.355149984 CET	443	49905	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:07.355196953 CET	443	49905	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:07.355272055 CET	49905	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:07.355274916 CET	443	49905	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:07.355282068 CET	443	49905	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:07.355334997 CET	49905	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:07.355341911 CET	443	49905	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:07.355402946 CET	443	49905	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:07.357093096 CET	49905	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:07.357093096 CET	49905	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:07.357104063 CET	443	49905	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:07.357234001 CET	49905	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:07.357729912 CET	49919	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:07.357760906 CET	443	49919	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:07.357839108 CET	49919	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:07.358058929 CET	49919	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:07.358069897 CET	443	49919	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:07.868124962 CET	443	49908	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:07.869859934 CET	443	49909	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:07.870233059 CET	49909	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:07.870249033 CET	443	49909	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:07.870366096 CET	49908	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:07.870381117 CET	443	49908	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:07.870879889 CET	443	49908	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:07.871875048 CET	443	49909	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:07.872268915 CET	49909	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:07.872356892 CET	443	49909	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:07.872606039 CET	49908	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:07.872704983 CET	443	49908	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:07.872720957 CET	49909	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:07.872792959 CET	49908	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:07.915332079 CET	443	49909	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:07.915339947 CET	443	49908	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:07.916686058 CET	49908	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.070943117 CET	443	49910	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.071218014 CET	49910	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.071224928 CET	443	49910	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.071669102 CET	443	49910	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.072005987 CET	49910	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.072074890 CET	443	49910	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.072175980 CET	49910	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.072812080 CET	443	49911	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.072983980 CET	49911	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.072993040 CET	443	49911	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.073438883 CET	443	49911	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.073735952 CET	49911	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.073801994 CET	443	49911	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.073821068 CET	49911	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.114396095 CET	49910	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.114402056 CET	49911	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.114406109 CET	443	49910	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.114413023 CET	443	49911	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.243207932 CET	443	49915	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.243509054 CET	49915	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.243535995 CET	443	49915	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.243968010 CET	443	49915	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.244342089 CET	49915	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.244420052 CET	443	49915	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.244497061 CET	49915	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.287339926 CET	443	49915	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.381481886 CET	443	49908	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.384664059 CET	443	49909	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.385588884 CET	443	49908	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.385669947 CET	443	49908	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.385691881 CET	49908	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.385750055 CET	49908	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.386333942 CET	49908	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.386348009 CET	443	49908	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.427413940 CET	49909	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.437594891 CET	443	49909	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.437608957 CET	443	49909	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.437645912 CET	443	49909	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.437675953 CET	443	49909	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.437721968 CET	49909	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.437730074 CET	443	49909	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.437792063 CET	49909	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.437792063 CET	49909	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.526900053 CET	443	49916	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.529500961 CET	49916	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.529531956 CET	443	49916	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.529984951 CET	443	49916	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.530113935 CET	49916	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.530705929 CET	443	49916	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.530766010 CET	49916	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.530931950 CET	49916	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.530998945 CET	443	49916	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.531212091 CET	49916	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.531220913 CET	443	49916	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.560079098 CET	443	49918	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:08.560420990 CET	49918	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:08.560452938 CET	443	49918	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:08.560854912 CET	443	49918	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:08.561187029 CET	49918	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:08.561280012 CET	443	49918	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:08.561327934 CET	49918	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:08.571856976 CET	443	49919	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:08.572181940 CET	49919	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:08.572210073 CET	443	49919	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:08.572561979 CET	443	49919	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:08.572889090 CET	49919	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:08.572962046 CET	443	49919	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:08.573035002 CET	49919	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:08.583671093 CET	49916	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.586159945 CET	443	49911	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.587910891 CET	443	49910	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.607328892 CET	443	49918	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:08.608336926 CET	443	49909	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.608365059 CET	443	49909	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.608462095 CET	49909	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.608470917 CET	443	49909	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.608557940 CET	49909	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.613893032 CET	49918	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:08.614121914 CET	49919	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:08.614137888 CET	443	49919	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:08.629978895 CET	49910	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.629981041 CET	49911	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.639105082 CET	443	49911	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.639120102 CET	443	49911	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.639153004 CET	443	49911	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.639172077 CET	443	49911	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.639182091 CET	443	49911	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.639259100 CET	49911	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.639259100 CET	49911	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.639272928 CET	443	49911	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.639283895 CET	443	49911	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.639328957 CET	49911	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.642926931 CET	443	49910	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.642942905 CET	443	49910	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.643016100 CET	49910	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.643027067 CET	443	49910	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.643037081 CET	443	49910	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.643064976 CET	443	49910	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.643073082 CET	443	49910	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.643088102 CET	49910	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.643151999 CET	49910	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.649040937 CET	443	49909	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.649072886 CET	443	49909	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.649147987 CET	49909	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.649161100 CET	443	49909	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.649174929 CET	49909	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.649205923 CET	49909	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.756902933 CET	443	49915	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.769262075 CET	443	49915	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.769345045 CET	443	49915	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.769382954 CET	49915	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.769428015 CET	49915	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.769711971 CET	49915	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.769735098 CET	443	49915	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.780868053 CET	443	49909	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.780903101 CET	443	49909	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.780987024 CET	49909	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.781003952 CET	443	49909	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.781085014 CET	49909	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.799379110 CET	443	49910	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.799490929 CET	443	49910	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.799525023 CET	49910	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.799654961 CET	49910	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.800066948 CET	49910	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.800082922 CET	443	49910	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.800754070 CET	443	49911	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.800769091 CET	443	49911	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.800862074 CET	443	49911	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.800883055 CET	49911	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.800913095 CET	49911	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.801233053 CET	443	49909	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.801259995 CET	443	49909	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.801363945 CET	49909	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.801363945 CET	49909	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.801372051 CET	443	49909	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.801469088 CET	49909	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.807493925 CET	49911	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.807507038 CET	443	49911	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.808299065 CET	49925	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.808325052 CET	443	49925	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.808397055 CET	49925	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.808744907 CET	49926	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.808778048 CET	443	49926	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.808912992 CET	49926	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.809094906 CET	49925	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.809108973 CET	443	49925	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.809254885 CET	49926	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.809273005 CET	443	49926	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.827224016 CET	443	49909	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.827243090 CET	443	49909	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.827330112 CET	49909	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.827343941 CET	443	49909	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.827455044 CET	49909	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.827455044 CET	49909	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.845664978 CET	443	49909	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.845690012 CET	443	49909	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.845798969 CET	49909	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.845804930 CET	443	49909	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.845922947 CET	49909	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.863939047 CET	443	49909	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.863954067 CET	443	49909	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.864114046 CET	49909	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.864121914 CET	443	49909	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.864289999 CET	49909	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.897229910 CET	443	49917	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.897527933 CET	49917	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.897558928 CET	443	49917	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.897958994 CET	443	49917	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.898020983 CET	49917	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.898650885 CET	443	49917	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.898791075 CET	49917	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.898937941 CET	49917	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.898999929 CET	443	49917	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.899065018 CET	49917	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.899074078 CET	443	49917	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.947691917 CET	49917	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.981978893 CET	443	49909	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.982036114 CET	443	49909	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.982100964 CET	49909	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.982100964 CET	49909	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.982120991 CET	443	49909	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.982214928 CET	49909	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.995724916 CET	443	49909	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.995743990 CET	443	49909	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.995832920 CET	49909	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:08.995841026 CET	443	49909	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:08.995889902 CET	49909	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:09.007401943 CET	443	49909	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:09.007417917 CET	443	49909	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:09.007518053 CET	49909	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:09.007527113 CET	443	49909	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:09.007592916 CET	49909	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:09.020622015 CET	443	49909	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:09.020643950 CET	443	49909	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:09.020720959 CET	49909	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:09.020726919 CET	443	49909	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:09.020807028 CET	49909	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:09.026133060 CET	443	49919	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:09.026246071 CET	443	49919	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:09.026315928 CET	49919	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:09.027097940 CET	49919	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:09.027120113 CET	443	49919	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:09.033893108 CET	443	49909	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:09.033917904 CET	443	49909	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:09.034012079 CET	49909	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:09.034012079 CET	49909	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:09.034024000 CET	443	49909	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:09.034087896 CET	49909	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:09.039573908 CET	443	49916	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:09.046413898 CET	443	49909	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:09.046431065 CET	443	49909	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:09.046518087 CET	49909	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:09.046525955 CET	443	49909	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:09.046623945 CET	49909	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:09.050452948 CET	443	49916	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:09.050534964 CET	443	49916	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:09.050544977 CET	49916	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:09.050605059 CET	49916	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:09.051278114 CET	49916	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:09.051290989 CET	443	49916	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:09.060023069 CET	443	49909	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:09.060039043 CET	443	49909	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:09.060120106 CET	49909	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:09.060127974 CET	443	49909	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:09.060215950 CET	49909	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:09.071327925 CET	443	49909	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:09.071345091 CET	443	49909	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:09.071418047 CET	49909	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:09.071428061 CET	443	49909	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:09.071600914 CET	49909	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:09.112312078 CET	443	49918	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:09.112390041 CET	443	49918	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:09.112446070 CET	49918	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:09.112478971 CET	443	49918	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:09.112498999 CET	443	49918	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:09.112551928 CET	49918	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:09.115545034 CET	49918	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:09.115572929 CET	443	49918	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:09.116298914 CET	49927	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:09.116334915 CET	443	49927	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:09.116457939 CET	49927	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:09.116700888 CET	49927	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:09.116714954 CET	443	49927	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:09.183665991 CET	443	49909	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:09.183702946 CET	443	49909	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:09.183801889 CET	49909	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:09.183814049 CET	443	49909	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:09.183916092 CET	49909	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:09.193595886 CET	443	49909	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:09.193691015 CET	443	49909	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:09.193701029 CET	49909	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:09.193708897 CET	443	49909	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:09.193737984 CET	443	49909	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:09.193785906 CET	49909	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:09.193785906 CET	49909	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:09.194164991 CET	49909	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:09.194181919 CET	443	49909	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:09.409769058 CET	443	49917	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:09.455816984 CET	49917	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:09.462584972 CET	443	49917	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:09.462608099 CET	443	49917	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:09.462642908 CET	443	49917	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:09.462660074 CET	443	49917	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:09.462675095 CET	443	49917	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:09.462703943 CET	49917	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:09.462718010 CET	443	49917	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:09.462743044 CET	49917	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:09.462776899 CET	49917	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:09.606215954 CET	443	49917	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:09.606236935 CET	443	49917	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:09.606319904 CET	443	49917	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:09.606367111 CET	49917	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:09.606422901 CET	49917	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:09.606761932 CET	49917	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:09.606780052 CET	443	49917	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:10.355515957 CET	443	49927	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:10.369452953 CET	49927	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:10.369473934 CET	443	49927	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:10.370013952 CET	443	49927	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:10.370486021 CET	49927	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:10.370553017 CET	443	49927	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:10.371844053 CET	49927	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:10.419322014 CET	443	49927	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:10.584261894 CET	443	49926	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:10.584578991 CET	49926	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:10.584580898 CET	443	49925	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:10.584594011 CET	443	49926	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:10.584759951 CET	49925	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:10.584770918 CET	443	49925	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:10.585005999 CET	443	49926	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:10.585180998 CET	443	49925	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:10.585995913 CET	49926	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:10.586066008 CET	443	49926	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:10.586328030 CET	49925	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:10.586402893 CET	443	49925	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:10.586504936 CET	49926	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:10.586559057 CET	49925	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:10.631328106 CET	443	49925	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:10.631335020 CET	443	49926	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:10.789796114 CET	49933	443	192.168.2.6	151.101.131.1
Dec 5, 2024 19:05:10.789829969 CET	443	49933	151.101.131.1	192.168.2.6
Dec 5, 2024 19:05:10.789922953 CET	49933	443	192.168.2.6	151.101.131.1
Dec 5, 2024 19:05:10.790193081 CET	49933	443	192.168.2.6	151.101.131.1
Dec 5, 2024 19:05:10.790203094 CET	443	49933	151.101.131.1	192.168.2.6
Dec 5, 2024 19:05:10.952641964 CET	49934	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:10.952689886 CET	443	49934	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:10.952835083 CET	49934	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:10.953418016 CET	49934	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:10.953428984 CET	443	49934	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:10.958686113 CET	49935	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:10.958733082 CET	443	49935	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:10.958808899 CET	49935	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:10.960891962 CET	49935	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:10.960908890 CET	443	49935	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:10.968487978 CET	49936	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:10.968522072 CET	443	49936	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:10.968585014 CET	49936	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:10.968745947 CET	49936	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:10.968761921 CET	443	49936	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:11.112782955 CET	443	49926	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:11.113692045 CET	443	49925	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:11.126292944 CET	443	49925	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:11.126389980 CET	443	49925	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:11.126383066 CET	49925	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:11.126456022 CET	49925	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:11.127002954 CET	49925	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:11.127027035 CET	443	49925	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:11.134485960 CET	49937	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:11.134526968 CET	443	49937	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:11.134589911 CET	49937	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:11.134789944 CET	49937	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:11.134803057 CET	443	49937	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:11.163125992 CET	49926	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:11.166043997 CET	443	49926	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:11.166057110 CET	443	49926	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:11.166094065 CET	443	49926	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:11.166107893 CET	443	49926	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:11.166126966 CET	443	49926	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:11.166143894 CET	49926	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:11.166155100 CET	443	49926	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:11.166194916 CET	49926	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:11.166213036 CET	49926	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:11.304657936 CET	443	49926	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:11.304765940 CET	443	49926	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:11.304773092 CET	49926	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:11.304830074 CET	49926	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:11.305064917 CET	49926	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:11.305088997 CET	443	49926	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:12.009990931 CET	443	49933	151.101.131.1	192.168.2.6
Dec 5, 2024 19:05:12.010327101 CET	49933	443	192.168.2.6	151.101.131.1
Dec 5, 2024 19:05:12.010341883 CET	443	49933	151.101.131.1	192.168.2.6
Dec 5, 2024 19:05:12.010725975 CET	443	49933	151.101.131.1	192.168.2.6
Dec 5, 2024 19:05:12.011068106 CET	49933	443	192.168.2.6	151.101.131.1
Dec 5, 2024 19:05:12.011126995 CET	443	49933	151.101.131.1	192.168.2.6
Dec 5, 2024 19:05:12.011254072 CET	49933	443	192.168.2.6	151.101.131.1
Dec 5, 2024 19:05:12.011276960 CET	443	49933	151.101.131.1	192.168.2.6
Dec 5, 2024 19:05:12.167397022 CET	443	49934	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:12.167745113 CET	49934	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:12.167762995 CET	443	49934	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:12.168142080 CET	443	49934	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:12.168545008 CET	49934	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:12.168606043 CET	443	49934	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:12.168734074 CET	49934	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:12.168752909 CET	443	49934	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:12.168785095 CET	49934	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:12.179884911 CET	443	49927	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:12.179976940 CET	443	49927	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:12.180116892 CET	49927	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:12.180129051 CET	443	49927	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:12.190407038 CET	443	49936	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:12.190629959 CET	49936	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:12.190654039 CET	443	49936	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:12.191045046 CET	443	49936	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:12.191111088 CET	49936	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:12.191200972 CET	443	49935	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:12.191787004 CET	443	49936	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:12.191836119 CET	49936	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:12.192312002 CET	49936	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:12.192372084 CET	443	49936	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:12.192481041 CET	49935	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:12.192498922 CET	443	49935	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:12.192629099 CET	49936	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:12.192629099 CET	49936	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:12.192639112 CET	443	49936	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:12.192862988 CET	443	49935	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:12.193160057 CET	49935	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:12.193212986 CET	443	49935	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:12.193275928 CET	49935	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:12.193290949 CET	443	49935	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:12.193312883 CET	49935	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:12.193320036 CET	443	49935	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:12.215329885 CET	443	49934	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:12.223587990 CET	49927	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:12.233895063 CET	443	49927	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:12.237780094 CET	443	49927	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:12.237807035 CET	443	49927	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:12.237848997 CET	49927	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:12.237864017 CET	443	49927	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:12.237930059 CET	49927	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:12.238677025 CET	49936	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:12.239336967 CET	443	49936	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:12.246226072 CET	443	49927	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:12.285942078 CET	49927	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:12.285954952 CET	443	49927	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:12.287195921 CET	443	49927	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:12.287275076 CET	49927	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:12.287281990 CET	443	49927	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:12.332432032 CET	49927	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:12.526078939 CET	443	49933	151.101.131.1	192.168.2.6
Dec 5, 2024 19:05:12.526904106 CET	443	49933	151.101.131.1	192.168.2.6
Dec 5, 2024 19:05:12.530559063 CET	49933	443	192.168.2.6	151.101.131.1
Dec 5, 2024 19:05:12.532092094 CET	49933	443	192.168.2.6	151.101.131.1
Dec 5, 2024 19:05:12.532108068 CET	443	49933	151.101.131.1	192.168.2.6
Dec 5, 2024 19:05:12.561284065 CET	49939	443	192.168.2.6	151.101.67.1
Dec 5, 2024 19:05:12.561335087 CET	443	49939	151.101.67.1	192.168.2.6
Dec 5, 2024 19:05:12.561424017 CET	49939	443	192.168.2.6	151.101.67.1
Dec 5, 2024 19:05:12.561676979 CET	49939	443	192.168.2.6	151.101.67.1
Dec 5, 2024 19:05:12.561695099 CET	443	49939	151.101.67.1	192.168.2.6
Dec 5, 2024 19:05:12.629714966 CET	443	49927	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:12.633858919 CET	443	49927	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:12.634035110 CET	443	49927	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:12.634131908 CET	49927	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:12.634145021 CET	443	49927	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:12.634460926 CET	49927	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:12.642491102 CET	443	49927	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:12.650613070 CET	443	49927	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:12.650743961 CET	443	49927	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:12.650851011 CET	49927	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:12.731074095 CET	443	49935	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:12.731168985 CET	443	49935	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:12.731241941 CET	49927	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:12.731270075 CET	443	49927	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:12.731275082 CET	49935	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:12.731322050 CET	443	49935	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:12.731553078 CET	443	49935	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:12.731601000 CET	49935	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:12.732979059 CET	49935	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:12.733005047 CET	443	49935	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:12.802112103 CET	443	49934	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:12.802170992 CET	443	49934	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:12.802217960 CET	443	49934	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:12.802253962 CET	49934	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:12.802284002 CET	443	49934	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:12.802521944 CET	49934	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:12.802529097 CET	443	49934	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:12.810401917 CET	443	49934	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:12.810617924 CET	49934	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:12.810632944 CET	443	49934	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:12.818994045 CET	443	49934	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:12.819026947 CET	443	49934	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:12.819099903 CET	49934	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:12.819106102 CET	443	49934	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:12.819164038 CET	49934	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:12.826014996 CET	443	49934	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:12.826093912 CET	443	49934	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:12.826183081 CET	49934	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:12.830221891 CET	443	49936	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:12.830307007 CET	443	49936	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:12.830358028 CET	443	49936	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:12.830440044 CET	49936	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:12.830486059 CET	443	49936	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:12.832457066 CET	49936	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:12.836247921 CET	443	49936	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:12.842881918 CET	443	49936	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:12.847997904 CET	49936	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:12.882085085 CET	49936	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:12.882116079 CET	443	49936	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:12.882925987 CET	49934	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:12.882950068 CET	443	49934	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:12.935964108 CET	49941	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:12.936022997 CET	443	49941	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:12.936145067 CET	49941	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:12.941175938 CET	49941	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:12.941190958 CET	443	49941	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:12.963824034 CET	49942	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:12.963887930 CET	443	49942	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:12.963977098 CET	49942	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:12.964432001 CET	49942	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:12.964453936 CET	443	49942	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:12.991028070 CET	49943	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:12.991079092 CET	443	49943	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:12.991311073 CET	49943	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:12.991497040 CET	49943	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:12.991514921 CET	443	49943	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:13.007567883 CET	443	49937	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:13.007827044 CET	49937	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:13.007855892 CET	443	49937	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:13.008297920 CET	443	49937	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:13.008644104 CET	49937	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:13.008718967 CET	443	49937	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:13.008779049 CET	49937	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:13.011200905 CET	49947	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:13.011223078 CET	443	49947	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:13.011362076 CET	49947	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:13.011569023 CET	49947	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:13.011581898 CET	443	49947	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:13.051337957 CET	443	49937	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:13.522327900 CET	443	49937	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:13.534857988 CET	443	49937	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:13.534939051 CET	443	49937	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:13.534945011 CET	49937	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:13.534998894 CET	49937	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:13.535372019 CET	49937	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:13.535391092 CET	443	49937	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:13.805210114 CET	443	49939	151.101.67.1	192.168.2.6
Dec 5, 2024 19:05:13.805669069 CET	49939	443	192.168.2.6	151.101.67.1
Dec 5, 2024 19:05:13.805684090 CET	443	49939	151.101.67.1	192.168.2.6
Dec 5, 2024 19:05:13.806052923 CET	443	49939	151.101.67.1	192.168.2.6
Dec 5, 2024 19:05:13.806400061 CET	49939	443	192.168.2.6	151.101.67.1
Dec 5, 2024 19:05:13.806476116 CET	443	49939	151.101.67.1	192.168.2.6
Dec 5, 2024 19:05:13.806565046 CET	49939	443	192.168.2.6	151.101.67.1
Dec 5, 2024 19:05:13.806588888 CET	443	49939	151.101.67.1	192.168.2.6
Dec 5, 2024 19:05:14.152721882 CET	443	49941	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:14.153084993 CET	49941	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:14.153114080 CET	443	49941	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:14.153511047 CET	443	49941	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:14.153915882 CET	49941	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:14.153979063 CET	443	49941	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:14.154068947 CET	49941	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:14.154068947 CET	49941	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:14.154093981 CET	443	49941	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:14.228117943 CET	443	49943	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:14.228473902 CET	49943	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:14.228491068 CET	443	49943	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:14.229300976 CET	443	49943	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:14.229649067 CET	49943	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:14.229724884 CET	443	49943	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:14.229811907 CET	49943	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:14.229849100 CET	443	49943	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:14.330432892 CET	443	49939	151.101.67.1	192.168.2.6
Dec 5, 2024 19:05:14.330564022 CET	443	49939	151.101.67.1	192.168.2.6
Dec 5, 2024 19:05:14.330641985 CET	49939	443	192.168.2.6	151.101.67.1
Dec 5, 2024 19:05:14.331479073 CET	49939	443	192.168.2.6	151.101.67.1
Dec 5, 2024 19:05:14.331489086 CET	443	49939	151.101.67.1	192.168.2.6
Dec 5, 2024 19:05:14.468348980 CET	49949	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:14.468399048 CET	443	49949	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:14.468544006 CET	49949	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:14.469248056 CET	49949	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:14.469259024 CET	443	49949	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:14.748636961 CET	443	49941	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:14.748692036 CET	443	49941	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:14.748747110 CET	443	49941	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:14.748807907 CET	49941	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:14.748809099 CET	443	49941	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:14.748826027 CET	443	49941	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:14.748878002 CET	49941	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:14.748927116 CET	443	49941	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:14.748997927 CET	49941	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:14.751871109 CET	49941	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:14.751885891 CET	443	49941	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:14.753897905 CET	443	49942	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:14.754556894 CET	49942	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:14.754568100 CET	443	49942	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:14.755356073 CET	443	49942	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:14.755956888 CET	49942	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:14.756031036 CET	443	49942	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:14.756242990 CET	49942	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:14.784164906 CET	443	49947	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:14.784477949 CET	49947	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:14.784492970 CET	443	49947	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:14.784912109 CET	443	49947	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:14.785229921 CET	49947	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:14.785337925 CET	443	49947	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:14.785888910 CET	49947	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:14.799333096 CET	443	49942	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:14.806242943 CET	443	49943	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:14.806294918 CET	443	49943	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:14.806355000 CET	443	49943	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:14.806370020 CET	49943	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:14.806406975 CET	443	49943	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:14.806454897 CET	49943	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:14.806464911 CET	443	49943	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:14.806500912 CET	443	49943	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:14.806566000 CET	49943	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:14.807760954 CET	49950	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:14.807799101 CET	443	49950	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:14.807884932 CET	49950	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:14.808346033 CET	49950	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:14.808353901 CET	443	49950	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:14.808866024 CET	49943	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:14.808887959 CET	443	49943	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:14.809447050 CET	49951	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:14.809495926 CET	443	49951	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:14.809571028 CET	49951	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:14.809731960 CET	49951	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:14.809743881 CET	443	49951	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:14.827337027 CET	443	49947	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:15.268063068 CET	443	49942	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:15.289412975 CET	443	49942	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:15.289468050 CET	443	49942	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:15.289505959 CET	443	49942	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:15.289552927 CET	49942	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:15.289592981 CET	49942	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:15.296725035 CET	443	49947	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:15.300728083 CET	443	49947	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:15.300801039 CET	443	49947	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:15.300813913 CET	49947	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:15.300951958 CET	49947	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:15.427009106 CET	49947	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:15.427036047 CET	443	49947	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:15.446393013 CET	49956	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:15.446444988 CET	443	49956	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:15.446504116 CET	49956	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:15.446937084 CET	49956	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:15.446952105 CET	443	49956	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:15.447668076 CET	49957	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:15.447721958 CET	443	49957	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:15.447778940 CET	49957	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:15.448165894 CET	49957	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:15.448180914 CET	443	49957	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:15.448729992 CET	49958	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:15.448741913 CET	443	49958	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:15.448791027 CET	49958	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:15.449174881 CET	49958	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:15.449183941 CET	443	49958	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:15.449549913 CET	49942	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:15.449562073 CET	443	49942	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:15.461040020 CET	49959	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:15.461091995 CET	443	49959	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:15.461147070 CET	49959	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:15.461671114 CET	49959	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:15.461685896 CET	443	49959	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:15.475999117 CET	49960	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:15.476062059 CET	443	49960	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:15.476135015 CET	49960	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:15.476547003 CET	49960	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:15.476564884 CET	443	49960	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:15.835227966 CET	443	49949	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:15.835726976 CET	49949	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:15.835736990 CET	443	49949	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:15.836147070 CET	443	49949	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:15.836476088 CET	49949	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:15.836533070 CET	443	49949	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:15.836680889 CET	49949	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:15.836680889 CET	49949	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:15.836698055 CET	443	49949	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:16.059926033 CET	443	49950	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:16.060221910 CET	49950	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:16.060233116 CET	443	49950	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:16.060616970 CET	443	49950	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:16.060956001 CET	443	49951	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:16.060978889 CET	49950	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:16.061041117 CET	443	49950	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:16.061115026 CET	49950	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:16.061131954 CET	443	49950	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:16.061244965 CET	49951	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:16.061270952 CET	443	49951	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:16.061635971 CET	443	49951	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:16.061916113 CET	49951	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:16.061971903 CET	443	49951	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:16.062015057 CET	49951	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:16.062060118 CET	443	49951	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:16.114326000 CET	49951	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:16.114327908 CET	49950	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:16.211524963 CET	49961	443	192.168.2.6	151.101.131.1
Dec 5, 2024 19:05:16.211582899 CET	443	49961	151.101.131.1	192.168.2.6
Dec 5, 2024 19:05:16.211716890 CET	49961	443	192.168.2.6	151.101.131.1
Dec 5, 2024 19:05:16.211947918 CET	49961	443	192.168.2.6	151.101.131.1
Dec 5, 2024 19:05:16.211961985 CET	443	49961	151.101.131.1	192.168.2.6
Dec 5, 2024 19:05:16.361428022 CET	443	49949	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:16.361498117 CET	443	49949	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:16.361577034 CET	49949	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:16.361581087 CET	443	49949	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:16.361645937 CET	49949	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:16.363003016 CET	49949	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:16.363017082 CET	443	49949	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:16.368484020 CET	49963	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:16.368516922 CET	443	49963	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:16.368602991 CET	49963	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:16.368797064 CET	49963	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:16.368822098 CET	443	49963	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:16.515283108 CET	443	49951	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:16.515398026 CET	443	49951	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:16.515465975 CET	49951	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:16.516415119 CET	49951	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:16.516436100 CET	443	49951	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:16.630642891 CET	443	49950	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:16.630691051 CET	443	49950	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:16.630789042 CET	49950	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:16.630800962 CET	443	49950	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:16.630820990 CET	443	49950	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:16.630872011 CET	49950	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:16.630877018 CET	443	49950	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:16.630943060 CET	443	49950	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:16.630997896 CET	49950	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:16.632586002 CET	49950	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:16.632605076 CET	443	49950	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:16.633325100 CET	49964	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:16.633352995 CET	443	49964	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:16.633416891 CET	49964	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:16.633666992 CET	49964	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:16.633675098 CET	443	49964	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:17.221559048 CET	443	49957	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:17.221924067 CET	443	49956	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:17.222268105 CET	49957	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:17.222285986 CET	443	49957	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:17.222666025 CET	443	49957	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:17.223038912 CET	49956	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:17.223067999 CET	443	49956	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:17.223571062 CET	443	49956	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:17.223598957 CET	49957	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:17.223678112 CET	443	49957	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:17.223929882 CET	49956	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:17.224020958 CET	443	49956	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:17.224149942 CET	49957	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:17.224220991 CET	49956	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:17.225085974 CET	443	49958	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:17.225250959 CET	49958	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:17.225259066 CET	443	49958	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:17.226183891 CET	443	49958	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:17.226243019 CET	49958	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:17.227032900 CET	443	49958	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:17.227082014 CET	49958	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:17.227222919 CET	49958	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:17.227281094 CET	443	49958	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:17.227293015 CET	49958	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:17.264298916 CET	443	49960	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:17.264615059 CET	49960	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:17.264630079 CET	443	49960	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:17.265042067 CET	443	49960	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:17.265352964 CET	49960	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:17.265428066 CET	443	49960	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:17.265500069 CET	49960	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:17.271322966 CET	443	49958	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:17.271322966 CET	443	49957	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:17.271334887 CET	443	49956	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:17.271831989 CET	49958	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:17.271842957 CET	443	49958	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:17.300276995 CET	443	49959	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:17.300734997 CET	49959	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:17.300765038 CET	443	49959	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:17.301268101 CET	443	49959	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:17.302308083 CET	49959	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:17.302361012 CET	443	49959	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:17.302470922 CET	49959	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:17.307331085 CET	443	49960	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:17.316920996 CET	49958	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:17.347346067 CET	443	49959	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:17.422519922 CET	443	49961	151.101.131.1	192.168.2.6
Dec 5, 2024 19:05:17.422873974 CET	49961	443	192.168.2.6	151.101.131.1
Dec 5, 2024 19:05:17.422894955 CET	443	49961	151.101.131.1	192.168.2.6
Dec 5, 2024 19:05:17.423233032 CET	443	49961	151.101.131.1	192.168.2.6
Dec 5, 2024 19:05:17.425668001 CET	49961	443	192.168.2.6	151.101.131.1
Dec 5, 2024 19:05:17.425733089 CET	443	49961	151.101.131.1	192.168.2.6
Dec 5, 2024 19:05:17.426017046 CET	49961	443	192.168.2.6	151.101.131.1
Dec 5, 2024 19:05:17.426048994 CET	443	49961	151.101.131.1	192.168.2.6
Dec 5, 2024 19:05:17.588406086 CET	443	49963	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:17.588795900 CET	49963	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:17.588818073 CET	443	49963	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:17.589222908 CET	443	49963	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:17.589651108 CET	49963	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:17.589725971 CET	443	49963	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:17.589823961 CET	49963	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:17.589857101 CET	443	49963	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:17.734831095 CET	443	49956	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:17.735476017 CET	443	49957	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:17.737669945 CET	443	49958	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:17.739020109 CET	443	49956	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:17.739109039 CET	443	49956	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:17.739125013 CET	49956	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:17.739203930 CET	49956	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:17.739806890 CET	443	49957	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:17.739869118 CET	49957	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:17.739886045 CET	443	49957	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:17.739898920 CET	443	49957	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:17.739924908 CET	49957	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:17.739950895 CET	49957	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:17.756958008 CET	443	49958	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:17.756972075 CET	443	49958	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:17.757066011 CET	443	49958	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:17.757118940 CET	49958	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:17.757152081 CET	49958	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:17.779002905 CET	443	49960	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:17.783049107 CET	443	49960	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:17.783127069 CET	443	49960	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:17.783130884 CET	49960	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:17.783183098 CET	49960	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:17.791991949 CET	49960	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:17.792017937 CET	443	49960	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:17.792814970 CET	49956	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:17.792840004 CET	443	49956	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:17.797976971 CET	49958	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:17.797986031 CET	443	49958	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:17.841185093 CET	443	49964	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:17.883367062 CET	49964	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:17.918885946 CET	49957	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:17.918903112 CET	443	49957	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:17.925874949 CET	49964	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:17.925880909 CET	443	49964	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:17.926429987 CET	443	49964	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:17.945800066 CET	443	49961	151.101.131.1	192.168.2.6
Dec 5, 2024 19:05:17.945928097 CET	443	49961	151.101.131.1	192.168.2.6
Dec 5, 2024 19:05:17.946005106 CET	49961	443	192.168.2.6	151.101.131.1
Dec 5, 2024 19:05:17.946664095 CET	49964	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:17.946777105 CET	443	49964	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:17.949990988 CET	49961	443	192.168.2.6	151.101.131.1
Dec 5, 2024 19:05:17.950014114 CET	443	49961	151.101.131.1	192.168.2.6
Dec 5, 2024 19:05:17.950541019 CET	49964	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:17.950619936 CET	443	49964	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:17.956779003 CET	49970	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:17.956815958 CET	443	49970	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:17.956903934 CET	49970	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:17.959158897 CET	49971	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:17.959203959 CET	443	49971	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:17.959266901 CET	49971	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:17.959568977 CET	49972	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:17.959599018 CET	443	49972	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:17.959650993 CET	49972	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:17.959954977 CET	49970	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:17.959966898 CET	443	49970	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:17.960139036 CET	49971	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:17.960153103 CET	443	49971	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:17.960751057 CET	49972	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:17.960766077 CET	443	49972	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:17.964668036 CET	49973	443	192.168.2.6	151.101.67.1
Dec 5, 2024 19:05:17.964693069 CET	443	49973	151.101.67.1	192.168.2.6
Dec 5, 2024 19:05:17.964756012 CET	49973	443	192.168.2.6	151.101.67.1
Dec 5, 2024 19:05:17.965612888 CET	49973	443	192.168.2.6	151.101.67.1
Dec 5, 2024 19:05:17.965627909 CET	443	49973	151.101.67.1	192.168.2.6
Dec 5, 2024 19:05:18.108380079 CET	443	49959	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:18.118504047 CET	443	49963	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:18.118577957 CET	443	49963	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:18.118660927 CET	443	49963	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:18.118681908 CET	49963	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:18.118706942 CET	49963	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:18.119450092 CET	443	49959	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:18.119501114 CET	49959	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:18.119535923 CET	443	49959	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:18.119905949 CET	49959	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:18.119940042 CET	443	49959	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:18.119982004 CET	49959	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:18.122663975 CET	49963	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:18.122689009 CET	443	49963	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:18.124717951 CET	49974	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:18.124767065 CET	443	49974	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:18.124856949 CET	49974	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:18.125298977 CET	49974	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:18.125313044 CET	443	49974	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:18.127123117 CET	49976	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:18.127157927 CET	443	49976	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:18.127219915 CET	49976	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:18.127408028 CET	49976	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:18.127422094 CET	443	49976	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:18.295615911 CET	443	49964	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:18.296344995 CET	443	49964	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:18.296407938 CET	49964	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:18.297548056 CET	49964	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:18.297561884 CET	443	49964	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:19.333970070 CET	443	49974	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:19.335098982 CET	49974	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:19.335138083 CET	443	49974	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:19.335541010 CET	443	49974	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:19.336128950 CET	49974	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:19.336189032 CET	443	49974	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:19.336302042 CET	49974	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:19.336322069 CET	443	49974	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:19.379739046 CET	49974	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:19.386240959 CET	443	49973	151.101.67.1	192.168.2.6
Dec 5, 2024 19:05:19.386703968 CET	49973	443	192.168.2.6	151.101.67.1
Dec 5, 2024 19:05:19.386729956 CET	443	49973	151.101.67.1	192.168.2.6
Dec 5, 2024 19:05:19.387080908 CET	443	49973	151.101.67.1	192.168.2.6
Dec 5, 2024 19:05:19.387403965 CET	49973	443	192.168.2.6	151.101.67.1
Dec 5, 2024 19:05:19.387469053 CET	443	49973	151.101.67.1	192.168.2.6
Dec 5, 2024 19:05:19.387568951 CET	49973	443	192.168.2.6	151.101.67.1
Dec 5, 2024 19:05:19.387588978 CET	443	49973	151.101.67.1	192.168.2.6
Dec 5, 2024 19:05:19.770195007 CET	443	49970	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:19.770432949 CET	443	49971	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:19.770937920 CET	443	49972	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:19.771265030 CET	49970	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:19.771275997 CET	443	49970	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:19.771389008 CET	49971	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:19.771431923 CET	443	49971	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:19.771519899 CET	49972	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:19.771536112 CET	443	49972	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:19.771749020 CET	443	49970	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:19.771898031 CET	443	49971	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:19.772088051 CET	49970	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:19.772161007 CET	443	49970	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:19.772197962 CET	443	49972	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:19.772268057 CET	49972	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:19.772330999 CET	49971	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:19.772398949 CET	443	49971	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:19.772648096 CET	49970	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:19.772727966 CET	49971	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:19.773416042 CET	443	49972	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:19.773583889 CET	49972	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:19.773633003 CET	49972	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:19.773691893 CET	49972	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:19.773705959 CET	443	49972	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:19.817220926 CET	49972	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:19.817238092 CET	443	49972	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:19.819329023 CET	443	49970	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:19.819338083 CET	443	49971	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:19.857211113 CET	49972	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:19.868206024 CET	443	49976	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:19.868413925 CET	49976	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:19.868448019 CET	443	49976	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:19.868957043 CET	443	49976	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:19.868972063 CET	443	49976	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:19.869028091 CET	49976	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:19.869039059 CET	443	49976	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:19.869081020 CET	49976	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:19.869101048 CET	49976	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:19.869676113 CET	443	49976	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:19.869851112 CET	49976	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:19.869918108 CET	443	49976	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:19.869962931 CET	49976	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:19.911325932 CET	443	49976	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:19.919681072 CET	49976	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:19.919696093 CET	443	49976	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:19.960095882 CET	443	49974	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:19.960232019 CET	443	49974	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:19.960315943 CET	49974	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:19.961437941 CET	49974	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:19.961457968 CET	443	49974	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:19.966190100 CET	49976	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:19.980560064 CET	443	49973	151.101.67.1	192.168.2.6
Dec 5, 2024 19:05:19.980664968 CET	443	49973	151.101.67.1	192.168.2.6
Dec 5, 2024 19:05:19.980735064 CET	49973	443	192.168.2.6	151.101.67.1
Dec 5, 2024 19:05:19.981471062 CET	49973	443	192.168.2.6	151.101.67.1
Dec 5, 2024 19:05:19.981487036 CET	443	49973	151.101.67.1	192.168.2.6
Dec 5, 2024 19:05:20.282990932 CET	443	49970	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:20.284091949 CET	443	49972	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:20.286343098 CET	443	49971	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:20.287417889 CET	443	49970	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:20.287492990 CET	443	49970	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:20.287508011 CET	49970	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:20.287569046 CET	49970	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:20.288367987 CET	443	49972	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:20.288417101 CET	49972	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:20.288435936 CET	443	49972	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:20.288451910 CET	443	49972	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:20.288490057 CET	49972	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:20.288508892 CET	49972	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:20.298935890 CET	443	49971	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:20.299010992 CET	49971	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:20.299016953 CET	443	49971	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:20.299052954 CET	49971	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:20.310410976 CET	49970	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:20.310430050 CET	443	49970	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:20.316066027 CET	49972	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:20.316085100 CET	443	49972	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:20.316417933 CET	49971	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:20.316443920 CET	443	49971	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:20.678744078 CET	443	49976	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:20.689892054 CET	443	49976	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:20.689954996 CET	49976	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:20.689985037 CET	443	49976	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:20.690304995 CET	49976	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:20.690345049 CET	443	49976	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:20.690392971 CET	49976	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:21.884066105 CET	49987	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:21.884118080 CET	443	49987	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:21.884192944 CET	49987	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:21.884458065 CET	49987	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:21.884469032 CET	443	49987	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:21.907149076 CET	49988	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:21.907180071 CET	443	49988	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:21.907293081 CET	49988	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:21.907502890 CET	49988	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:21.907511950 CET	443	49988	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:23.119745016 CET	443	49987	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:23.120322943 CET	49987	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:23.120340109 CET	443	49987	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:23.120732069 CET	443	49987	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:23.121237993 CET	49987	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:23.121296883 CET	443	49987	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:23.121414900 CET	49987	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:23.121431112 CET	49987	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:23.121438980 CET	443	49987	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:23.121484041 CET	49987	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:23.167340040 CET	443	49987	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:23.694211960 CET	443	49987	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:23.694276094 CET	443	49987	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:23.694334984 CET	443	49987	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:23.694334030 CET	49987	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:23.694345951 CET	443	49987	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:23.694406033 CET	443	49987	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:23.694411039 CET	49987	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:23.694417953 CET	443	49987	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:23.694464922 CET	49987	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:23.694469929 CET	443	49987	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:23.694504023 CET	443	49987	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:23.694570065 CET	49987	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:23.696659088 CET	49987	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:23.696671009 CET	443	49987	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:23.699395895 CET	49993	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:23.699460983 CET	443	49993	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:23.699558020 CET	49993	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:23.699759960 CET	49993	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:23.699779987 CET	443	49993	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:23.751209021 CET	443	49988	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:23.751503944 CET	49988	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:23.751517057 CET	443	49988	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:23.752003908 CET	443	49988	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:23.752019882 CET	443	49988	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:23.752120972 CET	49988	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:23.752126932 CET	443	49988	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:23.752172947 CET	49988	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:23.752713919 CET	443	49988	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:23.752904892 CET	49988	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:23.752965927 CET	443	49988	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:23.753037930 CET	49988	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:23.753047943 CET	443	49988	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:23.802771091 CET	49988	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:24.613616943 CET	443	49988	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:24.623743057 CET	443	49988	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:24.623795033 CET	49988	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:24.623806953 CET	443	49988	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:24.627851009 CET	443	49988	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:24.627928972 CET	49988	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:24.627938986 CET	443	49988	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:24.642340899 CET	443	49988	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:24.642477989 CET	49988	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:24.642489910 CET	443	49988	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:24.652247906 CET	443	49988	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:24.652426958 CET	49988	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:24.652439117 CET	443	49988	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:24.664771080 CET	443	49988	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:24.664935112 CET	49988	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:24.664946079 CET	443	49988	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:24.678669930 CET	443	49988	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:24.678834915 CET	49988	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:24.678845882 CET	443	49988	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:24.692095995 CET	443	49988	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:24.692183971 CET	49988	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:24.692198038 CET	443	49988	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:24.737596035 CET	443	49988	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:24.737672091 CET	49988	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:24.737683058 CET	443	49988	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:24.787728071 CET	49988	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:24.787744999 CET	443	49988	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:24.805636883 CET	443	49988	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:24.805797100 CET	49988	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:24.805808067 CET	443	49988	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:24.815650940 CET	443	49988	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:24.815745115 CET	49988	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:24.815757036 CET	443	49988	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:24.821837902 CET	443	49988	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:24.821897984 CET	49988	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:24.821907997 CET	443	49988	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:24.834897041 CET	443	49988	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:24.834929943 CET	443	49988	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:24.834960938 CET	49988	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:24.834971905 CET	443	49988	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:24.835052967 CET	49988	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:24.848762989 CET	443	49988	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:24.862346888 CET	443	49988	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:24.862399101 CET	443	49988	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:24.862409115 CET	49988	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:24.862420082 CET	443	49988	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:24.862498045 CET	49988	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:24.876002073 CET	443	49988	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:24.890043020 CET	443	49988	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:24.890091896 CET	443	49988	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:24.890114069 CET	49988	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:24.890124083 CET	443	49988	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:24.890208960 CET	49988	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:24.903805017 CET	443	49988	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:24.905328035 CET	443	49988	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:24.905405998 CET	49988	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:24.905416965 CET	443	49988	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:24.905642986 CET	443	49988	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:24.905670881 CET	49988	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:24.905678034 CET	443	49988	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:24.905719995 CET	49988	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:24.910672903 CET	443	49993	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:24.910886049 CET	49993	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:24.910898924 CET	443	49993	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:24.911268950 CET	443	49993	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:24.911638975 CET	49993	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:24.911695004 CET	443	49993	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:24.911803007 CET	49993	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:24.911824942 CET	443	49993	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:25.537947893 CET	443	49993	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:25.538002014 CET	443	49993	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:25.538052082 CET	49993	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:25.538067102 CET	443	49993	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:25.538079023 CET	443	49993	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:25.538137913 CET	49993	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:25.538146973 CET	443	49993	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:25.538222075 CET	443	49993	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:25.538295031 CET	49993	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:25.540322065 CET	49993	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:25.540354967 CET	443	49993	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:25.540361881 CET	49993	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:25.540405989 CET	49993	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:25.541296005 CET	50002	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:25.541325092 CET	443	50002	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:25.541398048 CET	50002	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:25.541616917 CET	50002	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:25.541627884 CET	443	50002	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:26.752655983 CET	443	50002	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:26.752926111 CET	50002	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:26.752955914 CET	443	50002	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:26.753334045 CET	443	50002	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:26.753751993 CET	50002	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:26.753812075 CET	443	50002	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:26.753922939 CET	50002	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:26.753943920 CET	443	50002	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:27.208344936 CET	443	50002	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:27.208455086 CET	443	50002	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:27.208573103 CET	50002	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:27.209368944 CET	50002	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:27.209391117 CET	443	50002	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:28.466586113 CET	50011	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:28.466628075 CET	443	50011	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:28.466708899 CET	50011	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:28.466933966 CET	50011	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:28.466950893 CET	443	50011	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:28.576258898 CET	50012	443	192.168.2.6	142.250.181.68
Dec 5, 2024 19:05:28.576318026 CET	443	50012	142.250.181.68	192.168.2.6
Dec 5, 2024 19:05:28.576412916 CET	50012	443	192.168.2.6	142.250.181.68
Dec 5, 2024 19:05:28.576622963 CET	50012	443	192.168.2.6	142.250.181.68
Dec 5, 2024 19:05:28.576639891 CET	443	50012	142.250.181.68	192.168.2.6
Dec 5, 2024 19:05:30.269778013 CET	443	50012	142.250.181.68	192.168.2.6
Dec 5, 2024 19:05:30.270060062 CET	50012	443	192.168.2.6	142.250.181.68
Dec 5, 2024 19:05:30.270129919 CET	443	50012	142.250.181.68	192.168.2.6
Dec 5, 2024 19:05:30.271159887 CET	443	50012	142.250.181.68	192.168.2.6
Dec 5, 2024 19:05:30.271238089 CET	50012	443	192.168.2.6	142.250.181.68
Dec 5, 2024 19:05:30.271565914 CET	50012	443	192.168.2.6	142.250.181.68
Dec 5, 2024 19:05:30.271640062 CET	443	50012	142.250.181.68	192.168.2.6
Dec 5, 2024 19:05:30.271706104 CET	50012	443	192.168.2.6	142.250.181.68
Dec 5, 2024 19:05:30.271728992 CET	443	50012	142.250.181.68	192.168.2.6
Dec 5, 2024 19:05:30.293159962 CET	443	50011	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:30.293368101 CET	50011	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:30.293395996 CET	443	50011	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:30.293899059 CET	443	50011	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:30.294204950 CET	50011	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:30.294284105 CET	443	50011	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:30.294317961 CET	50011	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:30.321742058 CET	50012	443	192.168.2.6	142.250.181.68
Dec 5, 2024 19:05:30.337101936 CET	50011	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:30.337130070 CET	443	50011	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:30.958997965 CET	443	50012	142.250.181.68	192.168.2.6
Dec 5, 2024 19:05:30.959055901 CET	443	50012	142.250.181.68	192.168.2.6
Dec 5, 2024 19:05:30.959089994 CET	443	50012	142.250.181.68	192.168.2.6
Dec 5, 2024 19:05:30.959120989 CET	443	50012	142.250.181.68	192.168.2.6
Dec 5, 2024 19:05:30.959152937 CET	50012	443	192.168.2.6	142.250.181.68
Dec 5, 2024 19:05:30.959178925 CET	443	50012	142.250.181.68	192.168.2.6
Dec 5, 2024 19:05:30.959192038 CET	50012	443	192.168.2.6	142.250.181.68
Dec 5, 2024 19:05:30.972702980 CET	443	50012	142.250.181.68	192.168.2.6
Dec 5, 2024 19:05:30.972738028 CET	443	50012	142.250.181.68	192.168.2.6
Dec 5, 2024 19:05:30.972794056 CET	50012	443	192.168.2.6	142.250.181.68
Dec 5, 2024 19:05:30.972820044 CET	443	50012	142.250.181.68	192.168.2.6
Dec 5, 2024 19:05:30.972861052 CET	50012	443	192.168.2.6	142.250.181.68
Dec 5, 2024 19:05:30.978732109 CET	443	50012	142.250.181.68	192.168.2.6
Dec 5, 2024 19:05:30.991266012 CET	443	50012	142.250.181.68	192.168.2.6
Dec 5, 2024 19:05:30.991322041 CET	50012	443	192.168.2.6	142.250.181.68
Dec 5, 2024 19:05:30.991343021 CET	443	50012	142.250.181.68	192.168.2.6
Dec 5, 2024 19:05:31.039371967 CET	50012	443	192.168.2.6	142.250.181.68
Dec 5, 2024 19:05:31.079281092 CET	443	50012	142.250.181.68	192.168.2.6
Dec 5, 2024 19:05:31.097981930 CET	443	50011	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:31.102423906 CET	443	50011	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:31.103432894 CET	50011	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:31.103735924 CET	50011	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:31.103754997 CET	443	50011	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:31.108347893 CET	50023	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:31.108386040 CET	443	50023	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:31.108464003 CET	50023	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:31.108772039 CET	50023	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:31.108784914 CET	443	50023	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:31.130650043 CET	50012	443	192.168.2.6	142.250.181.68
Dec 5, 2024 19:05:31.130671024 CET	443	50012	142.250.181.68	192.168.2.6
Dec 5, 2024 19:05:31.154711962 CET	443	50012	142.250.181.68	192.168.2.6
Dec 5, 2024 19:05:31.154921055 CET	50012	443	192.168.2.6	142.250.181.68
Dec 5, 2024 19:05:31.154944897 CET	443	50012	142.250.181.68	192.168.2.6
Dec 5, 2024 19:05:31.156716108 CET	443	50012	142.250.181.68	192.168.2.6
Dec 5, 2024 19:05:31.156843901 CET	50012	443	192.168.2.6	142.250.181.68
Dec 5, 2024 19:05:31.157155991 CET	50012	443	192.168.2.6	142.250.181.68
Dec 5, 2024 19:05:31.157175064 CET	443	50012	142.250.181.68	192.168.2.6
Dec 5, 2024 19:05:31.202442884 CET	50024	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:31.202497959 CET	443	50024	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:31.202562094 CET	50024	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:31.202857971 CET	50024	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:31.202873945 CET	443	50024	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:31.327589035 CET	50025	443	192.168.2.6	151.101.131.1
Dec 5, 2024 19:05:31.327622890 CET	443	50025	151.101.131.1	192.168.2.6
Dec 5, 2024 19:05:31.327773094 CET	50025	443	192.168.2.6	151.101.131.1
Dec 5, 2024 19:05:31.327960014 CET	50025	443	192.168.2.6	151.101.131.1
Dec 5, 2024 19:05:31.327971935 CET	443	50025	151.101.131.1	192.168.2.6
Dec 5, 2024 19:05:31.455539942 CET	50026	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:31.455565929 CET	443	50026	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:31.455615997 CET	50026	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:31.455974102 CET	50026	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:31.455986023 CET	443	50026	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:31.492552042 CET	50027	443	192.168.2.6	142.250.181.68
Dec 5, 2024 19:05:31.492599964 CET	443	50027	142.250.181.68	192.168.2.6
Dec 5, 2024 19:05:31.492660046 CET	50027	443	192.168.2.6	142.250.181.68
Dec 5, 2024 19:05:31.492877007 CET	50027	443	192.168.2.6	142.250.181.68
Dec 5, 2024 19:05:31.492888927 CET	443	50027	142.250.181.68	192.168.2.6
Dec 5, 2024 19:05:32.566404104 CET	443	50025	151.101.131.1	192.168.2.6
Dec 5, 2024 19:05:32.566792011 CET	50025	443	192.168.2.6	151.101.131.1
Dec 5, 2024 19:05:32.566807032 CET	443	50025	151.101.131.1	192.168.2.6
Dec 5, 2024 19:05:32.567146063 CET	443	50025	151.101.131.1	192.168.2.6
Dec 5, 2024 19:05:32.569045067 CET	50025	443	192.168.2.6	151.101.131.1
Dec 5, 2024 19:05:32.569113016 CET	443	50025	151.101.131.1	192.168.2.6
Dec 5, 2024 19:05:32.569389105 CET	50025	443	192.168.2.6	151.101.131.1
Dec 5, 2024 19:05:32.569407940 CET	443	50025	151.101.131.1	192.168.2.6
Dec 5, 2024 19:05:32.971690893 CET	443	50024	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:32.972022057 CET	50024	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:32.972044945 CET	443	50024	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:32.972440958 CET	443	50024	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:32.972887039 CET	50024	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:32.972951889 CET	443	50024	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:32.973198891 CET	50024	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:33.002183914 CET	443	50023	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:33.002541065 CET	50023	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:33.002556086 CET	443	50023	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:33.003088951 CET	443	50023	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:33.003103018 CET	443	50023	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:33.003164053 CET	50023	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:33.003170967 CET	443	50023	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:33.003235102 CET	50023	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:33.003891945 CET	443	50023	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:33.004086018 CET	50023	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:33.004143953 CET	443	50023	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:33.004393101 CET	50023	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:33.004406929 CET	443	50023	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:33.015330076 CET	443	50024	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:33.051068068 CET	50023	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:33.086349964 CET	443	50025	151.101.131.1	192.168.2.6
Dec 5, 2024 19:05:33.086496115 CET	443	50025	151.101.131.1	192.168.2.6
Dec 5, 2024 19:05:33.086565971 CET	50025	443	192.168.2.6	151.101.131.1
Dec 5, 2024 19:05:33.087747097 CET	50025	443	192.168.2.6	151.101.131.1
Dec 5, 2024 19:05:33.087760925 CET	443	50025	151.101.131.1	192.168.2.6
Dec 5, 2024 19:05:33.091191053 CET	50032	443	192.168.2.6	151.101.67.1
Dec 5, 2024 19:05:33.091228962 CET	443	50032	151.101.67.1	192.168.2.6
Dec 5, 2024 19:05:33.091295958 CET	50032	443	192.168.2.6	151.101.67.1
Dec 5, 2024 19:05:33.091492891 CET	50032	443	192.168.2.6	151.101.67.1
Dec 5, 2024 19:05:33.091506958 CET	443	50032	151.101.67.1	192.168.2.6
Dec 5, 2024 19:05:33.188050985 CET	443	50026	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:33.188404083 CET	50026	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:33.188436985 CET	443	50026	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:33.188951969 CET	443	50026	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:33.189424992 CET	50026	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:33.189533949 CET	443	50026	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:33.189623117 CET	50026	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:33.211383104 CET	443	50027	142.250.181.68	192.168.2.6
Dec 5, 2024 19:05:33.211779118 CET	50027	443	192.168.2.6	142.250.181.68
Dec 5, 2024 19:05:33.211808920 CET	443	50027	142.250.181.68	192.168.2.6
Dec 5, 2024 19:05:33.212939978 CET	443	50027	142.250.181.68	192.168.2.6
Dec 5, 2024 19:05:33.213016987 CET	50027	443	192.168.2.6	142.250.181.68
Dec 5, 2024 19:05:33.213574886 CET	50027	443	192.168.2.6	142.250.181.68
Dec 5, 2024 19:05:33.213641882 CET	443	50027	142.250.181.68	192.168.2.6
Dec 5, 2024 19:05:33.213851929 CET	50027	443	192.168.2.6	142.250.181.68
Dec 5, 2024 19:05:33.213857889 CET	443	50027	142.250.181.68	192.168.2.6
Dec 5, 2024 19:05:33.235326052 CET	443	50026	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:33.254338980 CET	50027	443	192.168.2.6	142.250.181.68
Dec 5, 2024 19:05:33.486109018 CET	443	50024	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:33.498882055 CET	443	50024	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:33.498950005 CET	50024	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:33.498960972 CET	443	50024	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:33.499054909 CET	50024	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:33.499480963 CET	50024	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:33.499496937 CET	443	50024	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:33.503964901 CET	50034	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:33.504024029 CET	443	50034	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:33.504218102 CET	50034	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:33.504528046 CET	50034	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:33.504543066 CET	443	50034	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:33.810710907 CET	443	50023	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:33.815287113 CET	443	50023	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:33.815350056 CET	50023	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:33.816394091 CET	50023	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:33.816417933 CET	443	50023	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:33.905250072 CET	443	50027	142.250.181.68	192.168.2.6
Dec 5, 2024 19:05:33.905303955 CET	443	50027	142.250.181.68	192.168.2.6
Dec 5, 2024 19:05:33.905328035 CET	443	50027	142.250.181.68	192.168.2.6
Dec 5, 2024 19:05:33.905352116 CET	50027	443	192.168.2.6	142.250.181.68
Dec 5, 2024 19:05:33.905355930 CET	443	50027	142.250.181.68	192.168.2.6
Dec 5, 2024 19:05:33.905389071 CET	443	50027	142.250.181.68	192.168.2.6
Dec 5, 2024 19:05:33.905407906 CET	50027	443	192.168.2.6	142.250.181.68
Dec 5, 2024 19:05:33.914712906 CET	443	50027	142.250.181.68	192.168.2.6
Dec 5, 2024 19:05:33.916487932 CET	50027	443	192.168.2.6	142.250.181.68
Dec 5, 2024 19:05:33.916505098 CET	443	50027	142.250.181.68	192.168.2.6
Dec 5, 2024 19:05:33.922987938 CET	443	50027	142.250.181.68	192.168.2.6
Dec 5, 2024 19:05:33.923048019 CET	50027	443	192.168.2.6	142.250.181.68
Dec 5, 2024 19:05:33.923073053 CET	443	50027	142.250.181.68	192.168.2.6
Dec 5, 2024 19:05:33.937230110 CET	443	50027	142.250.181.68	192.168.2.6
Dec 5, 2024 19:05:33.937341928 CET	50027	443	192.168.2.6	142.250.181.68
Dec 5, 2024 19:05:33.937362909 CET	443	50027	142.250.181.68	192.168.2.6
Dec 5, 2024 19:05:33.987884998 CET	50027	443	192.168.2.6	142.250.181.68
Dec 5, 2024 19:05:33.998631954 CET	443	50026	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:34.012407064 CET	443	50026	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:34.012490988 CET	50026	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:34.012567043 CET	443	50026	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:34.016858101 CET	443	50026	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:34.016963005 CET	50026	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:34.016985893 CET	443	50026	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:34.025207996 CET	443	50027	142.250.181.68	192.168.2.6
Dec 5, 2024 19:05:34.032788038 CET	443	50026	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:34.032843113 CET	50026	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:34.032875061 CET	443	50026	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:34.046555996 CET	443	50026	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:34.046710968 CET	50026	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:34.046865940 CET	50026	443	192.168.2.6	172.217.19.227
Dec 5, 2024 19:05:34.046900988 CET	443	50026	172.217.19.227	192.168.2.6
Dec 5, 2024 19:05:34.082526922 CET	50027	443	192.168.2.6	142.250.181.68
Dec 5, 2024 19:05:34.082564116 CET	443	50027	142.250.181.68	192.168.2.6
Dec 5, 2024 19:05:34.100903034 CET	443	50027	142.250.181.68	192.168.2.6
Dec 5, 2024 19:05:34.100955963 CET	50027	443	192.168.2.6	142.250.181.68
Dec 5, 2024 19:05:34.100976944 CET	443	50027	142.250.181.68	192.168.2.6
Dec 5, 2024 19:05:34.102097034 CET	443	50027	142.250.181.68	192.168.2.6
Dec 5, 2024 19:05:34.102148056 CET	50027	443	192.168.2.6	142.250.181.68
Dec 5, 2024 19:05:34.110199928 CET	50027	443	192.168.2.6	142.250.181.68
Dec 5, 2024 19:05:34.110222101 CET	443	50027	142.250.181.68	192.168.2.6
Dec 5, 2024 19:05:34.307166100 CET	443	50032	151.101.67.1	192.168.2.6
Dec 5, 2024 19:05:34.307393074 CET	50032	443	192.168.2.6	151.101.67.1
Dec 5, 2024 19:05:34.307411909 CET	443	50032	151.101.67.1	192.168.2.6
Dec 5, 2024 19:05:34.307766914 CET	443	50032	151.101.67.1	192.168.2.6
Dec 5, 2024 19:05:34.308132887 CET	50032	443	192.168.2.6	151.101.67.1
Dec 5, 2024 19:05:34.308193922 CET	443	50032	151.101.67.1	192.168.2.6
Dec 5, 2024 19:05:34.308300972 CET	50032	443	192.168.2.6	151.101.67.1
Dec 5, 2024 19:05:34.308326960 CET	443	50032	151.101.67.1	192.168.2.6
Dec 5, 2024 19:05:34.348157883 CET	50032	443	192.168.2.6	151.101.67.1
Dec 5, 2024 19:05:34.847785950 CET	443	50032	151.101.67.1	192.168.2.6
Dec 5, 2024 19:05:34.847939968 CET	443	50032	151.101.67.1	192.168.2.6
Dec 5, 2024 19:05:34.848001957 CET	50032	443	192.168.2.6	151.101.67.1
Dec 5, 2024 19:05:34.849175930 CET	50032	443	192.168.2.6	151.101.67.1
Dec 5, 2024 19:05:34.849195004 CET	443	50032	151.101.67.1	192.168.2.6
Dec 5, 2024 19:05:35.263969898 CET	443	50034	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:35.264337063 CET	50034	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:35.264372110 CET	443	50034	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:35.264765024 CET	443	50034	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:35.265358925 CET	50034	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:35.265467882 CET	443	50034	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:35.265528917 CET	50034	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:35.311328888 CET	443	50034	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:35.319333076 CET	50034	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:35.781281948 CET	443	50034	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:35.793648958 CET	443	50034	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:35.793658018 CET	443	50034	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:35.793715000 CET	50034	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:35.793751955 CET	443	50034	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:35.794188023 CET	50034	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:35.794241905 CET	443	50034	192.229.221.25	192.168.2.6
Dec 5, 2024 19:05:35.794290066 CET	50034	443	192.168.2.6	192.229.221.25
Dec 5, 2024 19:05:36.471394062 CET	50042	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:36.471432924 CET	443	50042	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:36.471501112 CET	50042	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:36.471905947 CET	50042	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:36.471920013 CET	443	50042	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:37.737842083 CET	443	50042	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:37.738234997 CET	50042	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:37.738249063 CET	443	50042	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:37.738636971 CET	443	50042	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:37.739079952 CET	50042	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:37.739183903 CET	443	50042	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:37.739491940 CET	50042	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:37.739491940 CET	50042	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:37.739526987 CET	443	50042	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:38.280724049 CET	443	50042	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:38.280812025 CET	443	50042	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:38.280884981 CET	443	50042	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:38.280889034 CET	50042	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:38.280930042 CET	50042	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:38.281996012 CET	50042	443	192.168.2.6	151.101.193.21
Dec 5, 2024 19:05:38.282017946 CET	443	50042	151.101.193.21	192.168.2.6
Dec 5, 2024 19:05:38.286036968 CET	50048	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:38.286077976 CET	443	50048	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:38.286389112 CET	50048	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:38.287035942 CET	50048	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:38.287045002 CET	443	50048	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:38.708766937 CET	50049	443	192.168.2.6	142.250.181.68
Dec 5, 2024 19:05:38.708817005 CET	443	50049	142.250.181.68	192.168.2.6
Dec 5, 2024 19:05:38.709362984 CET	50049	443	192.168.2.6	142.250.181.68
Dec 5, 2024 19:05:38.709628105 CET	50049	443	192.168.2.6	142.250.181.68
Dec 5, 2024 19:05:38.709641933 CET	443	50049	142.250.181.68	192.168.2.6
Dec 5, 2024 19:05:39.496320963 CET	443	50048	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:39.496758938 CET	50048	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:39.496792078 CET	443	50048	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:39.497193098 CET	443	50048	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:39.497545958 CET	50048	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:39.497610092 CET	443	50048	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:39.497824907 CET	50048	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:39.497848034 CET	443	50048	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:40.030245066 CET	443	50048	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:40.030323029 CET	443	50048	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:40.030416012 CET	443	50048	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:40.030474901 CET	50048	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:40.030474901 CET	50048	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:40.031934977 CET	50048	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:40.031950951 CET	443	50048	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:40.032787085 CET	50055	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:40.032831907 CET	443	50055	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:40.032886982 CET	50055	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:40.033091068 CET	50055	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:40.033107996 CET	443	50055	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:40.425553083 CET	443	50049	142.250.181.68	192.168.2.6
Dec 5, 2024 19:05:40.425873995 CET	50049	443	192.168.2.6	142.250.181.68
Dec 5, 2024 19:05:40.425903082 CET	443	50049	142.250.181.68	192.168.2.6
Dec 5, 2024 19:05:40.426253080 CET	443	50049	142.250.181.68	192.168.2.6
Dec 5, 2024 19:05:40.428884029 CET	50049	443	192.168.2.6	142.250.181.68
Dec 5, 2024 19:05:40.428961992 CET	443	50049	142.250.181.68	192.168.2.6
Dec 5, 2024 19:05:40.473126888 CET	50049	443	192.168.2.6	142.250.181.68
Dec 5, 2024 19:05:41.242579937 CET	443	50055	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:41.242907047 CET	50055	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:41.242921114 CET	443	50055	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:41.243294001 CET	443	50055	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:41.244882107 CET	50055	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:41.244970083 CET	443	50055	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:41.245058060 CET	50055	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:41.245088100 CET	443	50055	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:41.285182953 CET	50055	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:43.026654959 CET	443	50055	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:43.026830912 CET	443	50055	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:43.026854038 CET	443	50055	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:43.026962996 CET	50055	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:43.026973963 CET	443	50055	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:43.028656006 CET	50055	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:43.073824883 CET	443	50055	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:43.078102112 CET	443	50055	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:43.078139067 CET	443	50055	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:43.078272104 CET	50055	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:43.078288078 CET	443	50055	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:43.078689098 CET	50055	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:43.086847067 CET	443	50055	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:43.129926920 CET	50055	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:43.129939079 CET	443	50055	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:43.176681995 CET	50055	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:43.454972982 CET	443	50055	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:43.459091902 CET	443	50055	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:43.459156990 CET	50055	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:43.459171057 CET	443	50055	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:43.467530012 CET	443	50055	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:43.467572927 CET	443	50055	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:43.467602015 CET	50055	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:43.467618942 CET	443	50055	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:43.467696905 CET	50055	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:43.475847006 CET	443	50055	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:43.475955009 CET	443	50055	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:43.476022005 CET	50055	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:43.476157904 CET	50055	443	192.168.2.6	151.101.1.21
Dec 5, 2024 19:05:43.476172924 CET	443	50055	151.101.1.21	192.168.2.6
Dec 5, 2024 19:05:50.119632959 CET	443	50049	142.250.181.68	192.168.2.6
Dec 5, 2024 19:05:50.119693041 CET	443	50049	142.250.181.68	192.168.2.6
Dec 5, 2024 19:05:50.119765043 CET	50049	443	192.168.2.6	142.250.181.68
Dec 5, 2024 19:05:50.881454945 CET	50049	443	192.168.2.6	142.250.181.68
Dec 5, 2024 19:05:50.881491899 CET	443	50049	142.250.181.68	192.168.2.6

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 5, 2024 19:04:34.792272091 CET	53	61838	1.1.1.1	192.168.2.6
Dec 5, 2024 19:04:34.833760977 CET	53	50515	1.1.1.1	192.168.2.6
Dec 5, 2024 19:04:37.525624037 CET	53	51122	1.1.1.1	192.168.2.6
Dec 5, 2024 19:04:38.646419048 CET	54370	53	192.168.2.6	1.1.1.1
Dec 5, 2024 19:04:38.646708965 CET	49963	53	192.168.2.6	1.1.1.1
Dec 5, 2024 19:04:38.783677101 CET	53	54370	1.1.1.1	192.168.2.6
Dec 5, 2024 19:04:38.783874035 CET	53	49963	1.1.1.1	192.168.2.6
Dec 5, 2024 19:04:39.625240088 CET	57366	53	192.168.2.6	1.1.1.1
Dec 5, 2024 19:04:39.625433922 CET	60248	53	192.168.2.6	1.1.1.1
Dec 5, 2024 19:04:39.765008926 CET	53	57366	1.1.1.1	192.168.2.6
Dec 5, 2024 19:04:39.766024113 CET	53	60248	1.1.1.1	192.168.2.6
Dec 5, 2024 19:04:41.773875952 CET	52038	53	192.168.2.6	1.1.1.1
Dec 5, 2024 19:04:41.774382114 CET	50753	53	192.168.2.6	1.1.1.1
Dec 5, 2024 19:04:41.775361061 CET	64352	53	192.168.2.6	1.1.1.1
Dec 5, 2024 19:04:41.775521994 CET	59182	53	192.168.2.6	1.1.1.1
Dec 5, 2024 19:04:41.912563086 CET	53	64352	1.1.1.1	192.168.2.6
Dec 5, 2024 19:04:41.913669109 CET	53	59182	1.1.1.1	192.168.2.6
Dec 5, 2024 19:04:42.169889927 CET	53	52038	1.1.1.1	192.168.2.6
Dec 5, 2024 19:04:42.170638084 CET	53	50753	1.1.1.1	192.168.2.6
Dec 5, 2024 19:04:44.202666998 CET	52768	53	192.168.2.6	1.1.1.1
Dec 5, 2024 19:04:44.202864885 CET	63214	53	192.168.2.6	1.1.1.1
Dec 5, 2024 19:04:44.339765072 CET	53	52768	1.1.1.1	192.168.2.6
Dec 5, 2024 19:04:44.340445995 CET	53	63214	1.1.1.1	192.168.2.6
Dec 5, 2024 19:04:45.653683901 CET	59238	53	192.168.2.6	1.1.1.1
Dec 5, 2024 19:04:45.653820038 CET	58994	53	192.168.2.6	1.1.1.1
Dec 5, 2024 19:04:45.792196989 CET	53	58994	1.1.1.1	192.168.2.6
Dec 5, 2024 19:04:45.792473078 CET	53	59238	1.1.1.1	192.168.2.6
Dec 5, 2024 19:04:46.535486937 CET	53246	53	192.168.2.6	1.1.1.1
Dec 5, 2024 19:04:46.535698891 CET	50481	53	192.168.2.6	1.1.1.1
Dec 5, 2024 19:04:46.635507107 CET	53	65163	1.1.1.1	192.168.2.6
Dec 5, 2024 19:04:46.673455000 CET	53	50481	1.1.1.1	192.168.2.6
Dec 5, 2024 19:04:46.673485041 CET	53	53246	1.1.1.1	192.168.2.6
Dec 5, 2024 19:04:48.416148901 CET	56975	53	192.168.2.6	1.1.1.1
Dec 5, 2024 19:04:48.416400909 CET	58207	53	192.168.2.6	1.1.1.1
Dec 5, 2024 19:04:48.553638935 CET	53	58207	1.1.1.1	192.168.2.6
Dec 5, 2024 19:04:48.555166960 CET	53	56975	1.1.1.1	192.168.2.6
Dec 5, 2024 19:04:48.852710009 CET	53248	53	192.168.2.6	1.1.1.1
Dec 5, 2024 19:04:48.852888107 CET	58407	53	192.168.2.6	1.1.1.1
Dec 5, 2024 19:04:48.990354061 CET	53	53248	1.1.1.1	192.168.2.6
Dec 5, 2024 19:04:48.991090059 CET	53	58407	1.1.1.1	192.168.2.6
Dec 5, 2024 19:04:51.329711914 CET	58518	53	192.168.2.6	1.1.1.1
Dec 5, 2024 19:04:51.329843998 CET	60147	53	192.168.2.6	1.1.1.1
Dec 5, 2024 19:04:51.468611956 CET	53	58518	1.1.1.1	192.168.2.6
Dec 5, 2024 19:04:51.468626976 CET	53	60147	1.1.1.1	192.168.2.6
Dec 5, 2024 19:04:54.277671099 CET	62259	53	192.168.2.6	1.1.1.1
Dec 5, 2024 19:04:54.277841091 CET	49748	53	192.168.2.6	1.1.1.1
Dec 5, 2024 19:04:54.415209055 CET	53	49748	1.1.1.1	192.168.2.6
Dec 5, 2024 19:04:54.416630983 CET	53	62259	1.1.1.1	192.168.2.6
Dec 5, 2024 19:04:54.759967089 CET	53	62475	1.1.1.1	192.168.2.6
Dec 5, 2024 19:04:54.951512098 CET	54513	53	192.168.2.6	1.1.1.1
Dec 5, 2024 19:04:54.951921940 CET	51569	53	192.168.2.6	1.1.1.1
Dec 5, 2024 19:04:55.089207888 CET	53	54513	1.1.1.1	192.168.2.6
Dec 5, 2024 19:04:55.178508043 CET	53	51569	1.1.1.1	192.168.2.6
Dec 5, 2024 19:05:00.972477913 CET	64513	53	192.168.2.6	1.1.1.1
Dec 5, 2024 19:05:00.972738981 CET	49591	53	192.168.2.6	1.1.1.1
Dec 5, 2024 19:05:01.276185989 CET	53	64513	1.1.1.1	192.168.2.6
Dec 5, 2024 19:05:01.283601999 CET	53	49591	1.1.1.1	192.168.2.6
Dec 5, 2024 19:05:13.783946037 CET	53	51279	1.1.1.1	192.168.2.6
Dec 5, 2024 19:05:22.115789890 CET	53	59654	1.1.1.1	192.168.2.6
Dec 5, 2024 19:05:28.437402964 CET	56920	53	192.168.2.6	1.1.1.1
Dec 5, 2024 19:05:28.437547922 CET	64823	53	192.168.2.6	1.1.1.1
Dec 5, 2024 19:05:28.574764967 CET	53	56920	1.1.1.1	192.168.2.6
Dec 5, 2024 19:05:28.575673103 CET	53	64823	1.1.1.1	192.168.2.6
Dec 5, 2024 19:05:31.354480028 CET	54655	53	192.168.2.6	1.1.1.1
Dec 5, 2024 19:05:31.354629040 CET	65515	53	192.168.2.6	1.1.1.1
Dec 5, 2024 19:05:31.491950989 CET	53	54655	1.1.1.1	192.168.2.6
Dec 5, 2024 19:05:31.492070913 CET	53	65515	1.1.1.1	192.168.2.6
Dec 5, 2024 19:05:34.441940069 CET	53	56560	1.1.1.1	192.168.2.6
Dec 5, 2024 19:05:36.925278902 CET	53	65217	1.1.1.1	192.168.2.6

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 5, 2024 19:04:38.646419048 CET	192.168.2.6	1.1.1.1	0x9009	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 5, 2024 19:04:38.646708965 CET	192.168.2.6	1.1.1.1	0xdab1	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 5, 2024 19:04:39.625240088 CET	192.168.2.6	1.1.1.1	0xd8e9	Standard query (0)	www.paypal.com	A (IP address)	IN (0x0001)	false
Dec 5, 2024 19:04:39.625433922 CET	192.168.2.6	1.1.1.1	0x7f18	Standard query (0)	www.paypal.com	65	IN (0x0001)	false
Dec 5, 2024 19:04:41.773875952 CET	192.168.2.6	1.1.1.1	0x4f46	Standard query (0)	ddbm2.paypal.com	A (IP address)	IN (0x0001)	false
Dec 5, 2024 19:04:41.774382114 CET	192.168.2.6	1.1.1.1	0xe2e0	Standard query (0)	ddbm2.paypal.com	65	IN (0x0001)	false
Dec 5, 2024 19:04:41.775361061 CET	192.168.2.6	1.1.1.1	0xd458	Standard query (0)	www.paypalobjects.com	A (IP address)	IN (0x0001)	false
Dec 5, 2024 19:04:41.775521994 CET	192.168.2.6	1.1.1.1	0xf774	Standard query (0)	www.paypalobjects.com	65	IN (0x0001)	false
Dec 5, 2024 19:04:44.202666998 CET	192.168.2.6	1.1.1.1	0xece8	Standard query (0)	www.paypalobjects.com	A (IP address)	IN (0x0001)	false
Dec 5, 2024 19:04:44.202864885 CET	192.168.2.6	1.1.1.1	0x50c6	Standard query (0)	www.paypalobjects.com	65	IN (0x0001)	false
Dec 5, 2024 19:04:45.653683901 CET	192.168.2.6	1.1.1.1	0x7c7d	Standard query (0)	ddbm2.paypal.com	A (IP address)	IN (0x0001)	false
Dec 5, 2024 19:04:45.653820038 CET	192.168.2.6	1.1.1.1	0xf5c2	Standard query (0)	ddbm2.paypal.com	65	IN (0x0001)	false
Dec 5, 2024 19:04:46.535486937 CET	192.168.2.6	1.1.1.1	0x3126	Standard query (0)	t.paypal.com	A (IP address)	IN (0x0001)	false
Dec 5, 2024 19:04:46.535698891 CET	192.168.2.6	1.1.1.1	0xb62e	Standard query (0)	t.paypal.com	65	IN (0x0001)	false
Dec 5, 2024 19:04:48.416148901 CET	192.168.2.6	1.1.1.1	0xc60c	Standard query (0)	t.paypal.com	A (IP address)	IN (0x0001)	false
Dec 5, 2024 19:04:48.416400909 CET	192.168.2.6	1.1.1.1	0xcb17	Standard query (0)	t.paypal.com	65	IN (0x0001)	false
Dec 5, 2024 19:04:48.852710009 CET	192.168.2.6	1.1.1.1	0xeed6	Standard query (0)	www.paypalobjects.com	A (IP address)	IN (0x0001)	false
Dec 5, 2024 19:04:48.852888107 CET	192.168.2.6	1.1.1.1	0xa239	Standard query (0)	www.paypalobjects.com	65	IN (0x0001)	false
Dec 5, 2024 19:04:51.329711914 CET	192.168.2.6	1.1.1.1	0x5032	Standard query (0)	www.recaptcha.net	A (IP address)	IN (0x0001)	false
Dec 5, 2024 19:04:51.329843998 CET	192.168.2.6	1.1.1.1	0xb9e6	Standard query (0)	www.recaptcha.net	65	IN (0x0001)	false
Dec 5, 2024 19:04:54.277671099 CET	192.168.2.6	1.1.1.1	0x5a9f	Standard query (0)	www.recaptcha.net	A (IP address)	IN (0x0001)	false
Dec 5, 2024 19:04:54.277841091 CET	192.168.2.6	1.1.1.1	0xefaf	Standard query (0)	www.recaptcha.net	65	IN (0x0001)	false
Dec 5, 2024 19:04:54.951512098 CET	192.168.2.6	1.1.1.1	0xa938	Standard query (0)	www.paypal.com	A (IP address)	IN (0x0001)	false
Dec 5, 2024 19:04:54.951921940 CET	192.168.2.6	1.1.1.1	0xa274	Standard query (0)	www.paypal.com	65	IN (0x0001)	false
Dec 5, 2024 19:05:00.972477913 CET	192.168.2.6	1.1.1.1	0x9d37	Standard query (0)	hcaptcha.paypal.com	A (IP address)	IN (0x0001)	false
Dec 5, 2024 19:05:00.972738981 CET	192.168.2.6	1.1.1.1	0xfb12	Standard query (0)	hcaptcha.paypal.com	65	IN (0x0001)	false
Dec 5, 2024 19:05:28.437402964 CET	192.168.2.6	1.1.1.1	0x621	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 5, 2024 19:05:28.437547922 CET	192.168.2.6	1.1.1.1	0xc228	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 5, 2024 19:05:31.354480028 CET	192.168.2.6	1.1.1.1	0xd16e	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 5, 2024 19:05:31.354629040 CET	192.168.2.6	1.1.1.1	0x9e40	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 5, 2024 19:04:38.783677101 CET	1.1.1.1	192.168.2.6	0x9009	No error (0)	www.google.com		142.250.181.68	A (IP address)	IN (0x0001)	false
Dec 5, 2024 19:04:38.783874035 CET	1.1.1.1	192.168.2.6	0xdab1	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 5, 2024 19:04:39.765008926 CET	1.1.1.1	192.168.2.6	0xd8e9	No error (0)	www.paypal.com	www.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 19:04:39.765008926 CET	1.1.1.1	192.168.2.6	0xd8e9	No error (0)	www.glb.paypal.com	paypal-dynamic.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 19:04:39.765008926 CET	1.1.1.1	192.168.2.6	0xd8e9	No error (0)	paypal-dynamic.map.fastly.net		151.101.193.21	A (IP address)	IN (0x0001)	false
Dec 5, 2024 19:04:39.765008926 CET	1.1.1.1	192.168.2.6	0xd8e9	No error (0)	paypal-dynamic.map.fastly.net		151.101.1.21	A (IP address)	IN (0x0001)	false
Dec 5, 2024 19:04:39.765008926 CET	1.1.1.1	192.168.2.6	0xd8e9	No error (0)	paypal-dynamic.map.fastly.net		151.101.129.21	A (IP address)	IN (0x0001)	false
Dec 5, 2024 19:04:39.765008926 CET	1.1.1.1	192.168.2.6	0xd8e9	No error (0)	paypal-dynamic.map.fastly.net		151.101.65.21	A (IP address)	IN (0x0001)	false
Dec 5, 2024 19:04:39.766024113 CET	1.1.1.1	192.168.2.6	0x7f18	No error (0)	www.paypal.com	www.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 19:04:39.766024113 CET	1.1.1.1	192.168.2.6	0x7f18	No error (0)	www.glb.paypal.com	paypal-dynamic.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 19:04:41.912563086 CET	1.1.1.1	192.168.2.6	0xd458	No error (0)	www.paypalobjects.com	ppo.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 19:04:41.912563086 CET	1.1.1.1	192.168.2.6	0xd458	No error (0)	ppo.glb.paypal.com	cs1150.wpc.betacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 19:04:41.912563086 CET	1.1.1.1	192.168.2.6	0xd458	No error (0)	cs1150.wpc.betacdn.net		192.229.221.25	A (IP address)	IN (0x0001)	false
Dec 5, 2024 19:04:41.913669109 CET	1.1.1.1	192.168.2.6	0xf774	No error (0)	www.paypalobjects.com	ppo.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 19:04:41.913669109 CET	1.1.1.1	192.168.2.6	0xf774	No error (0)	ppo.glb.paypal.com	paypal-dynamic-cdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 19:04:42.169889927 CET	1.1.1.1	192.168.2.6	0x4f46	No error (0)	ddbm2.paypal.com	ddbm2.paypal.com.first-party-js.datadome.co		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 19:04:42.169889927 CET	1.1.1.1	192.168.2.6	0x4f46	No error (0)	ddbm2.paypal.com.first-party-js.datadome.co		18.66.161.70	A (IP address)	IN (0x0001)	false
Dec 5, 2024 19:04:42.169889927 CET	1.1.1.1	192.168.2.6	0x4f46	No error (0)	ddbm2.paypal.com.first-party-js.datadome.co		18.66.161.65	A (IP address)	IN (0x0001)	false
Dec 5, 2024 19:04:42.169889927 CET	1.1.1.1	192.168.2.6	0x4f46	No error (0)	ddbm2.paypal.com.first-party-js.datadome.co		18.66.161.97	A (IP address)	IN (0x0001)	false
Dec 5, 2024 19:04:42.169889927 CET	1.1.1.1	192.168.2.6	0x4f46	No error (0)	ddbm2.paypal.com.first-party-js.datadome.co		18.66.161.81	A (IP address)	IN (0x0001)	false
Dec 5, 2024 19:04:42.170638084 CET	1.1.1.1	192.168.2.6	0xe2e0	No error (0)	ddbm2.paypal.com	ddbm2.paypal.com.first-party-js.datadome.co		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 19:04:44.339765072 CET	1.1.1.1	192.168.2.6	0xece8	No error (0)	www.paypalobjects.com	ppo.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 19:04:44.339765072 CET	1.1.1.1	192.168.2.6	0xece8	No error (0)	ppo.glb.paypal.com	cs1150.wpc.betacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 19:04:44.339765072 CET	1.1.1.1	192.168.2.6	0xece8	No error (0)	cs1150.wpc.betacdn.net		192.229.221.25	A (IP address)	IN (0x0001)	false
Dec 5, 2024 19:04:44.340445995 CET	1.1.1.1	192.168.2.6	0x50c6	No error (0)	www.paypalobjects.com	ppo.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 19:04:44.340445995 CET	1.1.1.1	192.168.2.6	0x50c6	No error (0)	ppo.glb.paypal.com	paypal-dynamic-cdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 19:04:45.792196989 CET	1.1.1.1	192.168.2.6	0xf5c2	No error (0)	ddbm2.paypal.com	ddbm2.paypal.com.first-party-js.datadome.co		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 19:04:45.792473078 CET	1.1.1.1	192.168.2.6	0x7c7d	No error (0)	ddbm2.paypal.com	ddbm2.paypal.com.first-party-js.datadome.co		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 19:04:45.792473078 CET	1.1.1.1	192.168.2.6	0x7c7d	No error (0)	ddbm2.paypal.com.first-party-js.datadome.co		18.66.161.97	A (IP address)	IN (0x0001)	false
Dec 5, 2024 19:04:45.792473078 CET	1.1.1.1	192.168.2.6	0x7c7d	No error (0)	ddbm2.paypal.com.first-party-js.datadome.co		18.66.161.65	A (IP address)	IN (0x0001)	false
Dec 5, 2024 19:04:45.792473078 CET	1.1.1.1	192.168.2.6	0x7c7d	No error (0)	ddbm2.paypal.com.first-party-js.datadome.co		18.66.161.81	A (IP address)	IN (0x0001)	false
Dec 5, 2024 19:04:45.792473078 CET	1.1.1.1	192.168.2.6	0x7c7d	No error (0)	ddbm2.paypal.com.first-party-js.datadome.co		18.66.161.70	A (IP address)	IN (0x0001)	false
Dec 5, 2024 19:04:46.673455000 CET	1.1.1.1	192.168.2.6	0xb62e	No error (0)	t.paypal.com	t.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 19:04:46.673455000 CET	1.1.1.1	192.168.2.6	0xb62e	No error (0)	t.glb.paypal.com	paypal-dynamic-cdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 19:04:46.673485041 CET	1.1.1.1	192.168.2.6	0x3126	No error (0)	t.paypal.com	t.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 19:04:46.673485041 CET	1.1.1.1	192.168.2.6	0x3126	No error (0)	t.glb.paypal.com	paypal-dynamic-cdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 19:04:46.673485041 CET	1.1.1.1	192.168.2.6	0x3126	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.131.1	A (IP address)	IN (0x0001)	false
Dec 5, 2024 19:04:46.673485041 CET	1.1.1.1	192.168.2.6	0x3126	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.3.1	A (IP address)	IN (0x0001)	false
Dec 5, 2024 19:04:46.673485041 CET	1.1.1.1	192.168.2.6	0x3126	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.195.1	A (IP address)	IN (0x0001)	false
Dec 5, 2024 19:04:46.673485041 CET	1.1.1.1	192.168.2.6	0x3126	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.67.1	A (IP address)	IN (0x0001)	false
Dec 5, 2024 19:04:48.553638935 CET	1.1.1.1	192.168.2.6	0xcb17	No error (0)	t.paypal.com	t.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 19:04:48.553638935 CET	1.1.1.1	192.168.2.6	0xcb17	No error (0)	t.glb.paypal.com	paypal-dynamic-cdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 19:04:48.555166960 CET	1.1.1.1	192.168.2.6	0xc60c	No error (0)	t.paypal.com	t.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 19:04:48.555166960 CET	1.1.1.1	192.168.2.6	0xc60c	No error (0)	t.glb.paypal.com	paypal-dynamic-cdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 19:04:48.555166960 CET	1.1.1.1	192.168.2.6	0xc60c	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.67.1	A (IP address)	IN (0x0001)	false
Dec 5, 2024 19:04:48.555166960 CET	1.1.1.1	192.168.2.6	0xc60c	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.3.1	A (IP address)	IN (0x0001)	false
Dec 5, 2024 19:04:48.555166960 CET	1.1.1.1	192.168.2.6	0xc60c	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.195.1	A (IP address)	IN (0x0001)	false
Dec 5, 2024 19:04:48.555166960 CET	1.1.1.1	192.168.2.6	0xc60c	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.131.1	A (IP address)	IN (0x0001)	false
Dec 5, 2024 19:04:48.990354061 CET	1.1.1.1	192.168.2.6	0xeed6	No error (0)	www.paypalobjects.com	ppo.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 19:04:48.990354061 CET	1.1.1.1	192.168.2.6	0xeed6	No error (0)	ppo.glb.paypal.com	cs1150.wpc.betacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 19:04:48.990354061 CET	1.1.1.1	192.168.2.6	0xeed6	No error (0)	cs1150.wpc.betacdn.net		192.229.221.25	A (IP address)	IN (0x0001)	false
Dec 5, 2024 19:04:48.991090059 CET	1.1.1.1	192.168.2.6	0xa239	No error (0)	www.paypalobjects.com	ppo.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 19:04:48.991090059 CET	1.1.1.1	192.168.2.6	0xa239	No error (0)	ppo.glb.paypal.com	paypal-dynamic-cdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 19:04:51.468611956 CET	1.1.1.1	192.168.2.6	0x5032	No error (0)	www.recaptcha.net		172.217.19.227	A (IP address)	IN (0x0001)	false
Dec 5, 2024 19:04:54.416630983 CET	1.1.1.1	192.168.2.6	0x5a9f	No error (0)	www.recaptcha.net		172.217.19.227	A (IP address)	IN (0x0001)	false
Dec 5, 2024 19:04:55.089207888 CET	1.1.1.1	192.168.2.6	0xa938	No error (0)	www.paypal.com	www.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 19:04:55.089207888 CET	1.1.1.1	192.168.2.6	0xa938	No error (0)	www.glb.paypal.com	paypal-dynamic.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 19:04:55.089207888 CET	1.1.1.1	192.168.2.6	0xa938	No error (0)	paypal-dynamic.map.fastly.net		151.101.1.21	A (IP address)	IN (0x0001)	false
Dec 5, 2024 19:04:55.089207888 CET	1.1.1.1	192.168.2.6	0xa938	No error (0)	paypal-dynamic.map.fastly.net		151.101.65.21	A (IP address)	IN (0x0001)	false
Dec 5, 2024 19:04:55.089207888 CET	1.1.1.1	192.168.2.6	0xa938	No error (0)	paypal-dynamic.map.fastly.net		151.101.129.21	A (IP address)	IN (0x0001)	false
Dec 5, 2024 19:04:55.089207888 CET	1.1.1.1	192.168.2.6	0xa938	No error (0)	paypal-dynamic.map.fastly.net		151.101.193.21	A (IP address)	IN (0x0001)	false
Dec 5, 2024 19:04:55.178508043 CET	1.1.1.1	192.168.2.6	0xa274	No error (0)	www.paypal.com	www.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 19:04:55.178508043 CET	1.1.1.1	192.168.2.6	0xa274	No error (0)	www.glb.paypal.com	paypal-dynamic.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 19:05:01.276185989 CET	1.1.1.1	192.168.2.6	0x9d37	No error (0)	hcaptcha.paypal.com	paypal-dynamic-cdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 19:05:01.276185989 CET	1.1.1.1	192.168.2.6	0x9d37	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.3.1	A (IP address)	IN (0x0001)	false
Dec 5, 2024 19:05:01.276185989 CET	1.1.1.1	192.168.2.6	0x9d37	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.67.1	A (IP address)	IN (0x0001)	false
Dec 5, 2024 19:05:01.276185989 CET	1.1.1.1	192.168.2.6	0x9d37	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.131.1	A (IP address)	IN (0x0001)	false
Dec 5, 2024 19:05:01.276185989 CET	1.1.1.1	192.168.2.6	0x9d37	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.195.1	A (IP address)	IN (0x0001)	false
Dec 5, 2024 19:05:01.283601999 CET	1.1.1.1	192.168.2.6	0xfb12	No error (0)	hcaptcha.paypal.com	paypal-dynamic-cdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 19:05:28.574764967 CET	1.1.1.1	192.168.2.6	0x621	No error (0)	www.google.com		142.250.181.68	A (IP address)	IN (0x0001)	false
Dec 5, 2024 19:05:28.575673103 CET	1.1.1.1	192.168.2.6	0xc228	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 5, 2024 19:05:31.491950989 CET	1.1.1.1	192.168.2.6	0xd16e	No error (0)	www.google.com		142.250.181.68	A (IP address)	IN (0x0001)	false
Dec 5, 2024 19:05:31.492070913 CET	1.1.1.1	192.168.2.6	0x9e40	No error (0)	www.google.com			65	IN (0x0001)	false

HTTP Request Dependency Graph

www.paypal.com

https:

www.paypalobjects.com

ddbm2.paypal.com

t.paypal.com

www.recaptcha.net

hcaptcha.paypal.com

www.google.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49720	151.101.193.21	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:41 UTC	2056	OUT	GET /signin/?returnUri=%2Fmyaccount%2Ftransfer%2FpayRequest%2FU-09584045BD498740V%2FU-7AK40048SY131414Y%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq&id=UJ8cMtNtnR8osXBu987dZoV1KMO8Kn.CKcv6ZA&expId=p2p&onboardData=%7B%22signUpRequest%22%3A%7B%22method%22%3A%22get%22%2C%22url%22%3A%22https%3A%2F%2Fwww.paypal.com%2Fmyaccount%2Ftransfer%2FguestLogin%2FpayRequest%2FU-09584045BD498740V%2FU-7AK40048SY131414Y%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq%26id%3DUJ8cMtNtnR8osXBu987dZoV1KMO8Kn.CKcv6ZA%22%7D%7D&flowContextData=k3KkNbgd2F3whUTyipi2CMJLh_A_-ZYRjnLUkRjoT_j0HNsy89M3Jq9pftpBPMtxKyazfBl41ygLF6L-3nSQM3yKD_1JSLMZUnm3gJtmC_GW6MtRMZgxxLdzhM2UidzudErvOhqzUKOKhl1Uolhas5WHE4v4p4McejHNxcZVkLh-Y4orpy9guCt5hhIB4GnzEz4SubWTdzvc3cAY2OwiaKLLHK8NR5mzXmQp5fVf3iIsNKSvq_9V0izgPURkU3T8RWrY5gGBkFdWln_xY5pl8zRv8lmUI-keUYe0DqQBvKVK8GwV8qiU_5p8qjPHJVW9i-G3ZBZuZum2FKJqczC5erDfF4QBe8JLLYzKBGyYHnHI7fFyBoEDubHGzh8R01uh4xAe-iAkcUj76XG_hnIoA0TzvY15PrfT8E9VdnaJhGuNJ5c8GhmekMGGnVwrlvOcZBIva0&v=1&utm_source=unp&utm_medium=email&utm_camp [TRUNCATED] Host: www.paypal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:41 UTC	299	IN	HTTP/1.1 200 OK Connection: close Content-Length: 22612 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Cache-Control: max-age=0, no-cache, no-store, must-revalidate
2024-12-05 18:04:41 UTC	2385	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6e 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 6f 62 6a 65 63 74 73 2e 70 61 79 70 61 6c 2e 63 6e 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 3b 20 73 63 72 69 70 74 2d 73 72 63 20 27 6e 6f 6e 63 65 2d 4c 43 39 77 66 6c 43 39 45 59 74 35 4f 52 58 33 39 34 56 2f 58 48 38 4e 56 34 78 42 73 56 65 42 63 4d 2f 78 65 67 55 4f 6a 6c 4b 39 36 46 62 73 27 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 68 74 74 Data Ascii: Content-Security-Policy: default-src 'self' https://.paypal.com https://.paypal.cn https://.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; script-src 'nonce-LC9wflC9EYt5ORX394V/XH8NV4xBsVeBcM/xegUOjlK96Fbs' 'self' https://.paypal.com htt
2024-12-05 18:04:41 UTC	1449	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 64 5f 69 64 3d 31 36 62 63 37 33 63 33 63 63 66 34 34 33 35 35 62 35 33 39 32 31 33 34 65 66 30 33 34 36 66 34 31 37 33 33 34 32 31 38 38 31 34 32 30 3b 20 4d 61 78 2d 41 67 65 3d 33 31 35 35 33 32 37 39 39 3b 20 44 6f 6d 61 69 6e 3d 2e 70 61 79 70 61 6c 2e 63 6f 6d 3b 20 50 61 74 68 3d 2f 3b 20 45 78 70 69 72 65 73 3d 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 33 34 20 31 38 3a 30 34 3a 34 30 20 47 4d 54 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 4c 41 4e 47 3d 65 6e 5f 55 53 25 33 42 55 53 3b 20 4d 61 78 2d 41 67 65 3d 33 31 35 35 36 3b 20 44 6f 6d 61 69 6e 3d 2e 70 61 79 70 61 6c 2e 63 6f 6d 3b 20 50 61 74 68 3d 2f 3b 20 Data Ascii: Set-Cookie: d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; Max-Age=315532799; Domain=.paypal.com; Path=/; Expires=Tue, 05 Dec 2034 18:04:40 GMT; HttpOnly; Secure; SameSite=NoneSet-Cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/;
2024-12-05 18:04:41 UTC	645	IN	Data Raw: 54 72 61 63 65 70 61 72 65 6e 74 3a 20 30 30 2d 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 66 34 35 33 39 32 32 35 61 31 31 32 32 2d 62 64 32 36 65 66 35 33 65 64 38 30 62 31 37 33 2d 30 31 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 58 2d 46 72 61 6d 65 2d 4f 70 74 69 6f 6e 73 3a 20 53 41 4d 45 4f 52 49 47 49 4e 0d 0a 58 2d 58 73 73 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 44 43 3a 20 63 63 67 31 31 2d 6f 72 69 67 69 6e 2d 77 77 77 2d 31 2e 70 61 79 70 61 6c 2e 63 6f 6d 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 56 69 61 3a 20 31 2e 31 20 76 61 72 6e 69 73 68 2c 20 31 2e 31 20 76 61 72 6e 69 73 68 2c 20 31 2e Data Ascii: Traceparent: 00-0000000000000000000f4539225a1122-bd26ef53ed80b173-01X-Content-Type-Options: nosniffX-Frame-Options: SAMEORIGINX-Xss-Protection: 1; mode=blockDC: ccg11-origin-www-1.paypal.comAccept-Ranges: bytesVia: 1.1 varnish, 1.1 varnish, 1.
2024-12-05 18:04:41 UTC	1378	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 6c 6f 63 61 6c 65 3d 22 65 6e 5f 55 53 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 6c 6f 77 65 72 2d 74 68 61 6e 2d 69 65 39 20 69 65 20 64 65 73 6b 74 6f 70 22 20 64 61 74 61 2d 6c 61 6e 67 70 61 63 6b 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 77 65 62 2f 72 65 73 2f 30 38 37 2f 39 66 37 33 31 64 38 62 63 65 64 64 35 62 37 65 37 61 33 39 37 35 63 30 32 34 32 37 38 2f 65 6e 2d 55 53 2f 5f 6c 61 6e 67 75 61 67 65 70 61 63 6b 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 31 30 5d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e Data Ascii: <!DOCTYPE html>...[if lt IE 9]><html lang="en" locale="en_US" class="no-js lower-than-ie9 ie desktop" data-langpack="https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/en-US/_languagepack"><![endif]-->...[if lt IE 10]><html lang="en
2024-12-05 18:04:41 UTC	1378	IN	Data Raw: 6e 71 61 61 51 68 4c 6e 2f 6e 6d 57 54 38 63 53 55 6d 2b 37 32 56 51 37 69 6e 48 4c 78 6e 61 38 63 4f 59 2f 70 56 7a 38 45 56 6c 78 44 79 53 58 61 32 6b 52 75 55 71 4f 34 72 34 37 20 72 6c 6f 67 69 64 20 3a 20 72 5a 4a 76 6e 71 61 61 51 68 4c 6e 25 32 46 6e 6d 57 54 38 63 53 55 6f 74 53 79 6c 4d 47 4f 54 47 6b 52 55 4d 44 70 6d 55 54 76 62 58 64 76 65 76 75 4d 4d 46 41 66 61 4e 44 61 47 6b 59 36 32 6b 63 57 52 55 53 37 41 35 67 66 72 44 6b 45 4c 44 55 51 62 6b 50 6f 5a 59 79 6d 34 67 35 51 42 39 33 5f 31 39 33 39 37 66 65 64 38 33 38 20 2d 2d 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 Data Ascii: nqaaQhLn/nmWT8cSUm+72VQ7inHLxna8cOY/pVz8EVlxDySXa2kRuUqO4r47 rlogid : rZJvnqaaQhLn%2FnmWT8cSUotSylMGOTGkRUMDpmUTvbXdvevuMMFAfaNDaGkY62kcWRUS7A5gfrDkELDUQbkPoZYym4g5QB93_19397fed838 --><meta charset="utf-8" /><title></title><meta http-equiv="content-type"
2024-12-05 18:04:41 UTC	1378	IN	Data Raw: 20 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 69 6d 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 77 65 62 73 74 61 74 69 63 2f 69 63 6f 6e 2f 70 70 32 35 38 2e 70 6e 67 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 77 65 62 2f 72 65 73 2f 30 38 37 2f 39 66 37 33 31 64 38 62 63 65 64 64 35 62 37 65 37 61 33 39 37 35 63 30 32 34 32 37 38 2f 63 73 73 2f 61 70 70 2e 63 73 73 22 20 2f 3e 3c 21 2d 2d 5b Data Ascii: /><meta property="og:image" content="https://www.paypalobjects.com/webstatic/icon/pp258.png" /><meta name="robots" content="noindex"><link rel="stylesheet" href="https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/css/app.css" />...[
2024-12-05 18:04:41 UTC	1378	IN	Data Raw: 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 77 65 62 2f 72 65 73 2f 30 38 37 2f 39 66 37 33 31 64 38 62 63 65 64 64 35 62 37 65 37 61 33 39 37 35 63 30 32 34 32 37 38 2f 6a 73 2f 74 65 6d 70 6c 61 74 65 73 2f 25 73 22 64 61 74 61 2d 65 6e 61 62 6c 65 2d 63 6c 69 65 6e 74 2d 63 61 6c 2d 6c 6f 67 67 69 6e 67 3d 22 74 72 75 65 22 64 61 74 61 2d 63 6f 72 72 65 6c 61 74 69 6f 6e 2d 69 64 3d 22 66 34 35 33 39 32 32 35 61 31 31 32 32 22 64 61 74 61 2d 63 6c 69 65 6e 74 2d 6e 61 6d 65 3d 22 75 6c 22 64 61 74 61 2d 65 6e 61 62 6c 65 2d 66 6e 2d 62 65 61 63 6f 6e 2d 6f 6e 2d 77 65 62 2d 76 69 65 77 73 3d 22 74 72 75 65 22 64 61 74 61 2d 6e 6f 6e 63 65 3d 22 4c 43 39 77 66 6c 43 39 45 59 74 35 4f 52 58 33 39 34 56 2f 58 48 38 4e 56 34 78 42 73 56 65 42 63 4d 2f 78 Data Ascii: palobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/js/templates/%s"data-enable-client-cal-logging="true"data-correlation-id="f4539225a1122"data-client-name="ul"data-enable-fn-beacon-on-web-views="true"data-nonce="LC9wflC9EYt5ORX394V/XH8NV4xBsVeBcM/x
2024-12-05 18:04:41 UTC	1378	IN	Data Raw: 20 64 6f 20 6e 6f 74 20 72 65 61 63 68 20 6f 75 74 2c 20 77 65 20 77 69 6c 6c 20 70 72 6f 63 65 65 64 20 77 69 74 68 20 74 68 65 20 74 72 61 6e 73 61 63 74 69 6f 6e 2e 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 3c 2f 68 31 3e 3c 64 69 76 20 69 64 3d 22 6e 6f 74 69 66 69 63 61 74 69 6f 6e 73 22 20 63 6c 61 73 73 3d 22 6e 6f 74 69 66 69 63 61 74 69 6f 6e 73 22 3e 3c 2f 64 69 76 3e 3c 66 6f 72 6d 20 61 63 74 69 6f 6e 3d 22 2f 73 69 67 6e 69 6e 22 20 6d 65 74 68 6f 64 3d 22 70 6f 73 74 22 20 63 6c 61 73 73 3d 22 70 72 6f 63 65 65 64 20 6d 61 73 6b 61 62 6c 65 22 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3d 22 6f 66 66 22 20 6e 61 6d 65 3d 22 6c 6f 67 69 6e 22 20 6e 6f 76 61 6c 69 64 61 74 65 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d Data Ascii: do not reach out, we will proceed with the transaction.</span></div></h1><div id="notifications" class="notifications"></div><form action="/signin" method="post" class="proceed maskable" autocomplete="off" name="login" novalidate><input type="hidden" id=
2024-12-05 18:04:41 UTC	1378	IN	Data Raw: 69 64 61 74 65 45 6d 70 74 79 20 20 20 22 76 61 6c 75 65 3d 22 22 09 09 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3d 09 22 75 73 65 72 6e 61 6d 65 22 09 09 09 70 6c 61 63 65 68 6f 6c 64 65 72 3d 09 22 45 6d 61 69 6c 22 09 09 61 72 69 61 2d 64 65 73 63 72 69 62 65 64 62 79 3d 22 65 6d 61 69 6c 45 72 72 6f 72 4d 65 73 73 61 67 65 22 2f 3e 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 65 6d 61 69 6c 22 20 63 6c 61 73 73 3d 22 66 69 65 6c 64 4c 61 62 65 6c 22 3e 45 6d 61 69 6c 3c 2f 6c 61 62 65 6c 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 72 72 6f 72 4d 65 73 73 61 67 65 22 69 64 3d 22 65 6d 61 69 6c 45 72 72 6f 72 4d 65 73 73 61 67 65 22 20 3e 3c 70 20 63 6c 61 73 73 3d 22 65 6d 70 74 79 45 72 72 6f 72 20 68 69 64 65 22 3e 52 65 71 75 69 72 65 64 3c 2f 70 Data Ascii: idateEmpty "value=""autocomplete="username"placeholder="Email"aria-describedby="emailErrorMessage"/><label for="email" class="fieldLabel">Email</label></div><div class="errorMessage"id="emailErrorMessage" ><p class="emptyError hide">Required</p
2024-12-05 18:04:41 UTC	1378	IN	Data Raw: 72 67 6f 74 4c 69 6e 6b 22 3e 3c 61 20 68 72 65 66 3d 22 2f 61 75 74 68 66 6c 6f 77 2f 70 61 73 73 77 6f 72 64 2d 72 65 63 6f 76 65 72 79 2f 3f 72 65 64 69 72 65 63 74 55 72 69 3d 25 32 35 32 46 73 69 67 6e 69 6e 25 32 35 32 46 25 32 35 33 46 72 65 74 75 72 6e 55 72 69 25 32 35 33 44 25 32 35 32 35 32 46 6d 79 61 63 63 6f 75 6e 74 25 32 35 32 35 32 46 74 72 61 6e 73 66 65 72 25 32 35 32 35 32 46 70 61 79 52 65 71 75 65 73 74 25 32 35 32 35 32 46 55 2d 30 39 35 38 34 30 34 35 42 44 34 39 38 37 34 30 56 25 32 35 32 35 32 46 55 2d 37 41 4b 34 30 30 34 38 53 59 31 33 31 34 31 34 59 25 32 35 32 35 33 46 63 6c 61 73 73 69 63 55 72 6c 25 32 35 32 35 33 44 25 32 35 32 35 32 46 55 53 25 32 35 32 35 32 46 63 67 69 2d 62 69 6e 25 32 35 32 35 32 46 25 32 35 32 35 33 Data Ascii: rgotLink"><a href="/authflow/password-recovery/?redirectUri=%252Fsignin%252F%253FreturnUri%253D%25252Fmyaccount%25252Ftransfer%25252FpayRequest%25252FU-09584045BD498740V%25252FU-7AK40048SY131414Y%25253FclassicUrl%25253D%25252FUS%25252Fcgi-bin%25252F%25253

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49729	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:43 UTC	586	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/css/app.css HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:44 UTC	779	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: text/css Date: Thu, 05 Dec 2024 18:04:44 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6737ef0a-1278c" Expires: Fri, 05 Dec 2025 18:04:44 GMT Last-Modified: Sat, 16 Nov 2024 01:02:02 GMT Paypal-Debug-Id: bd5c98c08d7b7 Server: ECAcc (lhd/35CF) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000bd5c98c08d7b7-ae5d808507650231-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 75660 Connection: close
2024-12-05 18:04:44 UTC	16383	IN	Data Raw: 2f 2a 2a 20 6d 65 74 68 6f 64 20 72 65 73 70 6f 6e 73 69 62 6c 65 20 66 6f 72 20 6c 6f 61 64 69 6e 67 20 74 68 65 20 62 61 63 6b 67 72 6f 75 6e 64 20 69 6d 61 67 65 20 73 65 74 20 69 6e 20 43 53 53 20 2a 2a 2f 0a 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 72 6f 74 61 74 69 6f 6e 20 7b 0a 20 20 66 72 6f 6d 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0a 20 20 7d 0a 20 20 74 6f 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 Data Ascii: / method responsible for loading the background image set in CSS /@-webkit-keyframes rotation { from { -webkit-transform: rotate(0deg); transform: rotate(0deg); } to { -webkit-transform: rotate(359deg); transform: rotate(359deg)
2024-12-05 18:04:44 UTC	1	IN	Data Raw: 66 Data Ascii: f
2024-12-05 18:04:44 UTC	16383	IN	Data Raw: 6c 6f 77 3a 20 76 69 73 69 62 6c 65 3b 0a 20 20 62 6f 72 64 65 72 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6e 6f 6e 65 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 30 30 37 30 62 61 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 48 65 6c 76 65 74 69 63 61 4e 65 75 65 2d 4d 65 64 69 75 6d 2c 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 20 4d 65 64 69 75 6d 22 2c 20 48 65 6c 76 65 74 69 63 61 4e 65 75 65 2c 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 65 6d 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 Data Ascii: low: visible; border: 0; padding: 0; background: none; color: #0070ba; font-family: HelveticaNeue-Medium, "Helvetica Neue Medium", HelveticaNeue, "Helvetica Neue", Helvetica, Arial, sans-serif; font-size: 1em; text-align: left; text-decora
2024-12-05 18:04:44 UTC	16383	IN	Data Raw: 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 72 69 67 68 74 2c 20 23 43 42 44 32 44 36 20 35 30 25 2c 20 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 29 20 34 30 25 29 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 74 6f 70 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 33 70 78 20 31 70 78 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 72 65 70 65 61 74 2d 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 70 78 3b 0a 20 20 62 6f 72 64 65 72 3a 20 30 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 7d 0a 2e 73 65 6e 74 4d 65 73 73 61 67 65 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 62 39 65 31 62 3b 0a 7d 0a 2e 63 61 70 74 63 68 61 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 77 Data Ascii: near-gradient(to right, #CBD2D6 50%, rgba(255, 255, 255, 0) 40%); background-position: top; background-size: 3px 1px; background-repeat: repeat-x; height: 1px; border: 0; margin: 0;}.sentMessage { color: #1b9e1b;}.captcha-container { w
2024-12-05 18:04:44 UTC	2	IN	Data Raw: 0a 2e Data Ascii: .
2024-12-05 18:04:44 UTC	16383	IN	Data Raw: 6f 6e 65 54 6f 75 63 68 52 6d 20 2e 73 74 65 70 73 20 2e 73 74 65 70 73 2d 69 63 6f 6e 2e 69 63 6f 6e 2d 31 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 30 20 2d 34 38 70 78 3b 0a 7d 0a 2e 6f 6e 65 54 6f 75 63 68 52 6d 20 2e 73 74 65 70 73 20 2e 73 74 65 70 73 2d 69 63 6f 6e 2e 69 63 6f 6e 2d 32 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 30 20 2d 39 30 70 78 3b 0a 7d 0a 2e 6f 6e 65 54 6f 75 63 68 52 6d 20 2e 72 65 61 73 73 75 72 65 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 31 35 70 78 20 30 3b 0a 7d 0a 2e 6f 6e 65 54 6f 75 63 68 52 6d 20 2e 73 65 63 6f 6e 64 61 72 79 4c 69 6e 6b 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 32 70 78 3b 0a 7d 0a 2f 2a 2a 0a 2a 20 53 68 61 72 65 64 20 Data Ascii: oneTouchRm .steps .steps-icon.icon-1 { background-position: 0 -48px;}.oneTouchRm .steps .steps-icon.icon-2 { background-position: 0 -90px;}.oneTouchRm .reassure { margin: 15px 0;}.oneTouchRm .secondaryLink { margin-top: 12px;}/*** Shared
2024-12-05 18:04:44 UTC	10125	IN	Data Raw: 2f 69 6d 61 67 65 73 2f 73 68 61 72 65 64 2f 73 75 63 63 65 73 73 2d 61 6e 69 6d 61 74 69 6f 6e 5f 32 78 2e 67 69 66 22 29 20 6e 6f 2d 72 65 70 65 61 74 20 74 6f 70 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 31 30 30 70 78 3b 0a 20 20 7d 0a 7d 0a 2e 67 72 65 79 4f 75 74 2c 0a 61 2e 67 72 65 79 4f 75 74 3a 68 6f 76 65 72 2c 0a 61 2e 67 72 65 79 4f 75 74 3a 6c 69 6e 6b 2c 0a 61 2e 67 72 65 79 4f 75 74 3a 76 69 73 69 74 65 64 2c 0a 61 2e 67 72 65 79 4f 75 74 3a 66 6f 63 75 73 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 64 64 64 3b 0a 7d 0a 2e 67 72 65 79 42 61 63 6b 67 72 6f 75 6e 64 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 64 64 64 3b 0a 7d 0a 62 75 74 74 6f 6e 2e 67 72 65 79 42 61 63 Data Ascii: /images/shared/success-animation_2x.gif") no-repeat top center; background-size: 100px; }}.greyOut,a.greyOut:hover,a.greyOut:link,a.greyOut:visited,a.greyOut:focus { color: #ddd;}.greyBackground { background-color: #ddd;}button.greyBac

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49727	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:43 UTC	586	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/lib/modernizr-2.6.1.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:44 UTC	790	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:04:43 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6737ef18-edf" Expires: Fri, 05 Dec 2025 18:04:43 GMT Last-Modified: Sat, 16 Nov 2024 01:02:16 GMT Paypal-Debug-Id: 03c808c5966a2 Server: ECAcc (lhd/35D6) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-000000000000000000003c808c5966a2-74300e3f4248e9f9-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 3807 Connection: close
2024-12-05 18:04:44 UTC	3807	IN	Data Raw: 77 69 6e 64 6f 77 2e 4d 6f 64 65 72 6e 69 7a 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 64 2e 63 73 73 54 65 78 74 3d 65 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 72 28 70 72 65 66 69 78 65 73 2e 6a 6f 69 6e 28 65 2b 22 3b 22 29 2b 28 74 7c 7c 22 22 29 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 3d 3d 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 72 65 74 75 72 6e 21 21 7e 28 22 22 2b 65 29 2e 69 6e 64 65 78 4f 66 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 74 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 20 69 6e 20 65 29 7b 76 61 72 20 6f 3d 74 5b 65 5b 69 5d 5d 3b 69 66 28 6f 21 3d 3d 6e 29 72 65 74 75 72 Data Ascii: window.Modernizr=function(e,t,n){function r(e){d.cssText=e}function i(e,t){return r(prefixes.join(e+";")+(t\|\|""))}function s(e,t){return typeof e===t}function o(e,t){return!!~(""+e).indexOf(t)}function u(e,t,r){for(var i in e){var o=t[e[i]];if(o!==n)retur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49728	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:43 UTC	567	OUT	GET /rdaAssets/fraudnet/sync/fn-sync-telemetry-min.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:44 UTC	754	IN	HTTP/1.1 200 OK Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:04:43 GMT DC: ccg11-origin-www-1.paypal.com Etag: "67230a66-19a5+ident" Expires: Thu, 05 Dec 2024 19:04:43 GMT Last-Modified: Thu, 31 Oct 2024 04:41:10 GMT Paypal-Debug-Id: 672801e377ba4 Server: ECAcc (lhd/35BC) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000672801e377ba4-3e2623f270924a3d-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 6565 Connection: close
2024-12-05 18:04:44 UTC	6565	IN	Data Raw: 76 61 72 20 50 41 59 50 41 4c 3d 77 69 6e 64 6f 77 2e 50 41 59 50 41 4c 7c 7c 7b 7d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 6e 5b 30 5d 3d 28 32 35 35 26 28 30 7c 74 5b 65 5d 29 29 3c 3c 32 34 7c 28 32 35 35 26 28 30 7c 74 5b 65 2b 31 5d 29 29 3c 3c 31 36 7c 28 32 35 35 26 28 30 7c 74 5b 65 2b 32 5d 29 29 3c 3c 38 7c 32 35 35 26 28 30 7c 74 5b 65 2b 33 5d 29 7c 30 2c 6e 5b 31 5d 3d 28 32 35 35 26 28 30 7c 74 5b 65 2b 34 5d 29 29 3c 3c 32 34 7c 28 32 35 35 26 28 30 7c 74 5b 65 2b 35 5d 29 29 3c 3c 31 36 7c 28 32 35 35 26 28 30 7c 74 5b 65 2b 36 5d 29 29 3c 3c 38 7c 32 35 35 26 28 30 7c 74 5b 65 2b 37 Data Ascii: var PAYPAL=window.PAYPAL\|\|{};!function(){"use strict";var t=function(t){var e=function(t,e,n){n[0]=(255&(0\|t[e]))<<24\|(255&(0\|t[e+1]))<<16\|(255&(0\|t[e+2]))<<8\|255&(0\|t[e+3])\|0,n[1]=(255&(0\|t[e+4]))<<24\|(255&(0\|t[e+5]))<<16\|(255&(0\|t[e+6]))<<8\|255&(0\|t[e+7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49730	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:43 UTC	578	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/lib/require.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:44 UTC	792	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:04:44 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6737ef18-3a06" Expires: Fri, 05 Dec 2025 18:04:44 GMT Last-Modified: Sat, 16 Nov 2024 01:02:16 GMT Paypal-Debug-Id: 3b574d4eb09b4 Server: ECAcc (lhd/35A5) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000003b574d4eb09b4-a704e5c7c7e6a888-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 14854 Connection: close
2024-12-05 18:04:44 UTC	14854	IN	Data Raw: 2f 2a 0a 20 52 65 71 75 69 72 65 4a 53 20 32 2e 31 2e 36 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 30 2d 32 30 31 32 2c 20 54 68 65 20 44 6f 6a 6f 20 46 6f 75 6e 64 61 74 69 6f 6e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 20 41 76 61 69 6c 61 62 6c 65 20 76 69 61 20 74 68 65 20 4d 49 54 20 6f 72 20 6e 65 77 20 42 53 44 20 6c 69 63 65 6e 73 65 2e 0a 20 73 65 65 3a 20 68 74 74 70 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6a 72 62 75 72 6b 65 2f 72 65 71 75 69 72 65 6a 73 20 66 6f 72 20 64 65 74 61 69 6c 73 0a 2a 2f 0a 0a 76 61 72 20 72 65 71 75 69 72 65 6a 73 2c 72 65 71 75 69 72 65 2c 64 65 66 69 6e 65 3b 28 66 75 6e 63 74 69 6f 6e 28 62 61 29 7b 66 75 6e 63 74 69 6f 6e 20 4a 28 65 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a Data Ascii: /* RequireJS 2.1.6 Copyright (c) 2010-2012, The Dojo Foundation All Rights Reserved. Available via the MIT or new BSD license. see: http://github.com/jrburke/requirejs for details*/var requirejs,require,define;(function(ba){function J(e){return"[obj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49731	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:43 UTC	570	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/app.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:44 UTC	790	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:04:44 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6737ef17-925" Expires: Fri, 05 Dec 2025 18:04:44 GMT Last-Modified: Sat, 16 Nov 2024 01:02:15 GMT Paypal-Debug-Id: f5a6beb75425f Server: ECAcc (lhd/35BD) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000f5a6beb75425f-d7d7db1114ad7125-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 2341 Connection: close
2024-12-05 18:04:44 UTC	2341	IN	Data Raw: 72 65 71 75 69 72 65 6a 73 2e 63 6f 6e 66 69 67 28 7b 70 61 63 6b 61 67 65 73 3a 5b 7b 6e 61 6d 65 3a 22 64 75 73 74 2d 6d 61 6b 61 72 61 2d 68 65 6c 70 65 72 73 22 2c 76 65 72 73 69 6f 6e 3a 22 34 2e 32 2e 30 22 2c 6c 6f 63 61 74 69 6f 6e 3a 22 62 72 6f 77 73 65 72 5f 6d 6f 64 75 6c 65 73 2f 64 75 73 74 2d 6d 61 6b 61 72 61 2d 68 65 6c 70 65 72 73 22 2c 6d 61 69 6e 3a 22 62 72 6f 77 73 65 72 2e 61 6d 64 2e 6a 73 22 7d 2c 7b 6e 61 6d 65 3a 22 64 75 73 74 68 65 6c 70 65 72 73 2d 73 75 70 70 6c 65 6d 65 6e 74 22 2c 76 65 72 73 69 6f 6e 3a 22 32 2e 30 2e 31 22 2c 6c 6f 63 61 74 69 6f 6e 3a 22 62 72 6f 77 73 65 72 5f 6d 6f 64 75 6c 65 73 2f 64 75 73 74 68 65 6c 70 65 72 73 2d 73 75 70 70 6c 65 6d 65 6e 74 22 2c 6d 61 69 6e 3a 22 69 6e 64 65 78 2e 6a 73 22 7d Data Ascii: requirejs.config({packages:[{name:"dust-makara-helpers",version:"4.2.0",location:"browser_modules/dust-makara-helpers",main:"browser.amd.js"},{name:"dusthelpers-supplement",version:"2.0.1",location:"browser_modules/dusthelpers-supplement",main:"index.js"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49733	18.66.161.70	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:43 UTC	966	OUT	GET /tags.js HTTP/1.1 Host: ddbm2.paypal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTczMzQyMTg4MTQ4MiIsImwiOiIwIiwibSI6IjAifQ; l7_az=dcg01.phx; ts=vreXpYrS%3D1764957881%26vteXpYrS%3D1733423681%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352
2024-12-05 18:04:45 UTC	708	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 177743 Connection: close Last-Modified: Wed, 04 Dec 2024 11:03:19 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: fRdxQZTwv7aUXeF3zxmAg.EIiFr7SoNp Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 05 Dec 2024 18:04:45 GMT Cache-Control: max-age=3600, public ETag: "b4f2edbea31dcec5c70f4f1bf574b162" X-Cache: RefreshHit from cloudfront Via: 1.1 4b9c4f1584ced8efb82794c07e3d29f2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH52-C1 X-Amz-Cf-Id: iIPApiUPZYwnYMf69jkVYUoLg5t-3U6hat_VjX9bcasq6_CeA1c7Rg== X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Vary: Origin
2024-12-05 18:04:45 UTC	15676	IN	Data Raw: 2f 2a 2a 20 44 61 74 61 44 6f 6d 65 20 69 73 20 61 20 63 79 62 65 72 73 65 63 75 72 69 74 79 20 73 6f 6c 75 74 69 6f 6e 20 74 6f 20 64 65 74 65 63 74 20 62 6f 74 20 61 63 74 69 76 69 74 79 20 68 74 74 70 73 3a 2f 2f 64 61 74 61 64 6f 6d 65 2e 63 6f 20 28 76 65 72 73 69 6f 6e 20 34 2e 33 38 2e 30 29 20 2a 2f 20 0a 21 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 6e 2c 6f 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 72 2c 73 29 7b 69 66 28 21 6e 5b 72 5d 29 7b 69 66 28 21 74 5b 72 5d 29 7b 76 61 72 20 64 3d 27 5c 78 36 36 5c 78 37 35 5c 78 36 65 5c 78 36 33 5c 78 37 34 5c 78 36 39 5c 78 36 66 5c 78 36 65 27 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 26 26 72 65 71 75 69 72 65 3b 69 66 28 21 73 26 26 64 29 72 65 74 75 72 6e 20 64 28 72 2c 21 30 29 3b 69 66 28 61 29 Data Ascii: /** DataDome is a cybersecurity solution to detect bot activity https://datadome.co (version 4.38.0) */ !function e(t,n,o){function i(r,s){if(!n[r]){if(!t[r]){var d='\x66\x75\x6e\x63\x74\x69\x6f\x6e'==typeof require&&require;if(!s&&d)return d(r,!0);if(a)
2024-12-05 18:04:45 UTC	16384	IN	Data Raw: 5c 78 36 35 5c 78 35 33 5c 78 37 35 5c 78 36 32 5c 78 37 33 5c 78 37 34 5c 78 37 32 5c 78 36 39 5c 78 36 65 5c 78 36 37 5c 78 35 30 5c 78 36 31 5c 78 37 34 5c 78 37 34 5c 78 36 35 5c 78 37 32 5c 78 36 65 27 5d 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3f 65 5b 5b 27 5c 78 37 32 5c 78 36 35 5c 78 37 30 5c 78 36 63 5c 78 36 31 5c 78 36 33 5c 78 36 35 27 5d 5d 28 6e 65 77 20 52 65 67 45 78 70 28 74 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 5b 5b 27 5c 78 37 32 5c 78 36 35 5c 78 37 30 5c 78 36 63 5c 78 36 31 5c 78 36 33 5c 78 36 35 27 5d 5d 28 74 2c 27 27 29 3b 7d 29 3a 65 3b 7d 2c 74 68 69 73 5b 5b 27 5c 78 36 31 5c 78 36 34 5c 78 36 34 5c 78 34 35 5c 78 37 36 5c 78 36 35 5c 78 36 65 5c 78 37 34 5c Data Ascii: \x65\x53\x75\x62\x73\x74\x72\x69\x6e\x67\x50\x61\x74\x74\x65\x72\x6e']]=function(e,t){return t?e[['\x72\x65\x70\x6c\x61\x63\x65']](new RegExp(t),function(e,t){return e[['\x72\x65\x70\x6c\x61\x63\x65']](t,'');}):e;},this[['\x61\x64\x64\x45\x76\x65\x6e\x74\
2024-12-05 18:04:45 UTC	16384	IN	Data Raw: 34 32 5c 78 34 37 27 2c 27 5c 78 34 33 5c 78 36 37 5c 78 35 38 5c 78 33 31 5c 78 37 61 5c 78 33 32 5c 78 34 63 5c 78 35 35 5c 78 34 33 5c 78 35 37 27 2c 27 5c 78 37 61 5c 78 36 37 5c 78 37 32 5c 78 34 36 5c 78 37 39 5c 78 37 37 5c 78 35 33 27 2c 27 5c 78 34 33 5c 78 33 32 5c 78 35 38 5c 78 35 30 5c 78 37 39 5c 78 33 32 5c 78 37 35 27 2c 27 5c 78 37 35 5c 78 33 32 5c 78 36 36 5c 78 34 64 5c 78 37 39 5c 78 37 38 5c 78 36 61 5c 78 35 30 27 2c 27 5c 78 37 39 5c 78 37 38 5c 78 37 36 5c 78 34 62 5c 78 34 31 5c 78 37 37 5c 78 33 38 5c 78 35 36 5c 78 34 32 5c 78 33 32 5c 78 34 34 5c 78 34 65 5c 78 36 66 5c 78 35 39 5c 78 36 32 5c 78 34 61 5c 78 34 32 5c 78 33 32 5c 78 37 32 5c 78 34 63 5c 78 37 39 5c 78 33 33 5c 78 36 64 5c 78 33 39 5c 78 36 39 5c 78 34 65 5c 78 Data Ascii: 42\x47','\x43\x67\x58\x31\x7a\x32\x4c\x55\x43\x57','\x7a\x67\x72\x46\x79\x77\x53','\x43\x32\x58\x50\x79\x32\x75','\x75\x32\x66\x4d\x79\x78\x6a\x50','\x79\x78\x76\x4b\x41\x77\x38\x56\x42\x32\x44\x4e\x6f\x59\x62\x4a\x42\x32\x72\x4c\x79\x33\x6d\x39\x69\x4e\x
2024-12-05 18:04:45 UTC	16157	IN	Data Raw: 78 36 65 5c 78 37 34 5c 78 37 33 27 5d 2c 73 65 6c 3a 21 21 65 5b 6e 28 34 35 36 29 5d 7c 7c 21 28 21 65 5b 6e 28 37 32 31 29 5d 7c 7c 21 65 5b 6e 28 37 32 31 29 5d 5b 27 5c 78 32 34 5c 78 36 33 5c 78 36 34 5c 78 36 33 5c 78 35 66 5c 78 36 31 5c 78 37 33 5c 78 36 34 5c 78 36 61 5c 78 36 36 5c 78 36 63 5c 78 36 31 5c 78 37 33 5c 78 37 35 5c 78 37 34 5c 78 36 66 5c 78 37 30 5c 78 36 36 5c 78 36 38 5c 78 37 36 5c 78 36 33 5c 78 35 61 5c 78 34 63 5c 78 36 64 5c 78 36 33 5c 78 36 36 5c 78 36 63 5c 78 35 66 27 5d 29 2c 6f 6e 4c 3a 6f 5b 6e 28 34 36 39 29 5d 7d 3b 7d 66 75 6e 63 74 69 6f 6e 20 77 28 65 2c 6e 29 7b 76 61 72 20 6f 3d 74 2c 69 3d 5b 5d 2c 61 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 65 29 65 5b 72 5d 21 3d 3d 6e 5b 72 5d 26 26 28 69 5b 27 Data Ascii: x6e\x74\x73'],sel:!!e[n(456)]\|\|!(!e[n(721)]\|\|!e[n(721)]['\x24\x63\x64\x63\x5f\x61\x73\x64\x6a\x66\x6c\x61\x73\x75\x74\x6f\x70\x66\x68\x76\x63\x5a\x4c\x6d\x63\x66\x6c\x5f']),onL:o[n(469)]};}function w(e,n){var o=t,i=[],a=[];for(var r in e)e[r]!==n[r]&&(i['
2024-12-05 18:04:45 UTC	16384	IN	Data Raw: 34 5c 78 35 66 5c 78 36 32 27 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 2c 6e 3d 64 6f 63 75 6d 65 6e 74 5b 27 5c 78 36 33 5c 78 37 32 5c 78 36 35 5c 78 36 31 5c 78 37 34 5c 78 36 35 5c 78 34 35 5c 78 36 63 5c 78 36 35 5c 78 36 64 5c 78 36 35 5c 78 36 65 5c 78 37 34 27 5d 28 27 5c 78 36 39 5c 78 36 36 5c 78 37 32 5c 78 36 31 5c 78 36 64 5c 78 36 35 27 29 3b 6e 5b 27 5c 78 37 33 5c 78 37 32 5c 78 36 33 5c 78 36 34 5c 78 36 66 5c 78 36 33 27 5d 3d 65 28 35 30 38 29 2c 6e 5b 65 28 36 38 35 29 5d 5b 65 28 36 36 31 29 5d 3d 27 5c 78 36 65 5c 78 36 66 5c 78 36 65 5c 78 36 35 27 2c 64 6f 63 75 6d 65 6e 74 26 26 64 6f 63 75 6d 65 6e 74 5b 65 28 36 32 35 29 5d 26 26 28 64 6f 63 75 6d 65 6e 74 5b 65 28 36 32 35 29 5d 5b 27 5c 78 36 31 5c 78 37 30 Data Ascii: 4\x5f\x62']=function(){var e=t,n=document['\x63\x72\x65\x61\x74\x65\x45\x6c\x65\x6d\x65\x6e\x74']('\x69\x66\x72\x61\x6d\x65');n['\x73\x72\x63\x64\x6f\x63']=e(508),n[e(685)][e(661)]='\x6e\x6f\x6e\x65',document&&document[e(625)]&&(document[e(625)]['\x61\x70
2024-12-05 18:04:45 UTC	16384	IN	Data Raw: 5c 78 36 33 5c 78 36 64 5c 78 37 30 5c 78 33 33 27 5d 3d 6f 5b 6e 28 34 35 35 29 5d 28 6e 28 34 39 36 29 29 2c 65 5b 27 5c 78 36 31 5c 78 36 33 5c 78 36 64 5c 78 37 30 5c 78 33 33 5c 78 37 34 5c 78 37 33 27 5d 3d 69 5b 6e 28 36 33 37 29 5d 28 6e 28 34 39 36 29 29 2c 65 5b 27 5c 78 36 31 5c 78 36 33 5c 78 37 37 5c 78 36 64 27 5d 3d 6f 5b 27 5c 78 36 33 5c 78 36 31 5c 78 36 65 5c 78 35 30 5c 78 36 63 5c 78 36 31 5c 78 37 39 5c 78 35 34 5c 78 37 39 5c 78 37 30 5c 78 36 35 27 5d 28 6e 28 36 35 36 29 29 2c 65 5b 27 5c 78 36 31 5c 78 36 33 5c 78 37 37 5c 78 36 64 5c 78 37 34 5c 78 37 33 27 5d 3d 69 5b 6e 28 36 33 37 29 5d 28 6e 28 36 35 36 29 29 2c 65 5b 27 5c 78 36 66 5c 78 36 33 5c 78 37 30 5c 78 37 34 27 5d 3d 2d 31 3d 3d 3d 6f 5b 27 5c 78 36 33 5c 78 36 31 Data Ascii: \x63\x6d\x70\x33']=o[n(455)](n(496)),e['\x61\x63\x6d\x70\x33\x74\x73']=i[n(637)](n(496)),e['\x61\x63\x77\x6d']=o['\x63\x61\x6e\x50\x6c\x61\x79\x54\x79\x70\x65'](n(656)),e['\x61\x63\x77\x6d\x74\x73']=i[n(637)](n(656)),e['\x6f\x63\x70\x74']=-1===o['\x63\x61
2024-12-05 18:04:45 UTC	16384	IN	Data Raw: 30 3b 75 3c 68 5b 27 5c 78 36 63 5c 78 36 35 5c 78 36 65 5c 78 36 37 5c 78 37 34 5c 78 36 38 27 5d 3b 75 2b 2b 29 7b 73 3d 68 5b 75 5d 2c 64 3d 76 6f 69 64 20 30 2c 6e 5b 28 64 3d 6f 29 28 36 38 35 29 5d 5b 27 5c 78 36 36 5c 78 36 66 5c 78 36 65 5c 78 37 34 5c 78 34 36 5c 78 36 31 5c 78 36 64 5c 78 36 39 5c 78 36 63 5c 78 37 39 27 5d 3d 73 2b 27 5c 78 32 63 5c 78 32 30 27 2b 69 2c 6e 5b 64 28 34 39 35 29 5d 21 3d 61 26 26 28 6c 2b 3d 75 2b 27 5c 78 32 63 27 29 3b 7d 63 3d 6f 2c 64 6f 63 75 6d 65 6e 74 5b 27 5c 78 36 32 5c 78 36 66 5c 78 36 34 5c 78 37 39 27 5d 5b 63 28 36 36 35 29 5d 28 6e 29 2c 65 5b 27 5c 78 36 39 5c 78 36 36 5c 78 37 34 5c 78 37 33 27 5d 3d 6c 3b 7d 2c 74 68 69 73 5b 27 5c 78 36 34 5c 78 36 34 5c 78 35 66 5c 78 36 31 5c 78 36 65 27 5d Data Ascii: 0;u<h['\x6c\x65\x6e\x67\x74\x68'];u++){s=h[u],d=void 0,n[(d=o)(685)]['\x66\x6f\x6e\x74\x46\x61\x6d\x69\x6c\x79']=s+'\x2c\x20'+i,n[d(495)]!=a&&(l+=u+'\x2c');}c=o,document['\x62\x6f\x64\x79'][c(665)](n),e['\x69\x66\x74\x73']=l;},this['\x64\x64\x5f\x61\x6e']
2024-12-05 18:04:45 UTC	16384	IN	Data Raw: 64 27 29 2c 6f 3d 65 5b 5b 27 5c 78 36 33 5c 78 36 66 5c 78 36 66 5c 78 36 62 5c 78 36 39 5c 78 36 35 27 5d 5d 5b 5b 27 5c 78 36 39 5c 78 36 65 5c 78 36 34 5c 78 36 35 5c 78 37 38 5c 78 34 66 5c 78 36 36 27 5d 5d 28 27 5c 78 35 30 5c 78 36 31 5c 78 37 34 5c 78 36 38 5c 78 33 64 27 29 2c 69 3d 65 5b 5b 27 5c 78 36 33 5c 78 36 66 5c 78 36 66 5c 78 36 62 5c 78 36 39 5c 78 36 35 27 5d 5d 5b 5b 27 5c 78 37 33 5c 78 36 63 5c 78 36 39 5c 78 36 33 5c 78 36 35 27 5d 5d 28 6e 2b 27 5c 78 34 34 5c 78 36 66 5c 78 36 64 5c 78 36 31 5c 78 36 39 5c 78 36 65 5c 78 33 64 27 5b 5b 27 5c 78 36 63 5c 78 36 35 5c 78 36 65 5c 78 36 37 5c 78 37 34 5c 78 36 38 27 5d 5d 2c 6f 2d 27 5c 78 33 62 5c 78 32 30 27 5b 5b 27 5c 78 36 63 5c 78 36 35 5c 78 36 65 5c 78 36 37 5c 78 37 34 5c Data Ascii: d'),o=e[['\x63\x6f\x6f\x6b\x69\x65']][['\x69\x6e\x64\x65\x78\x4f\x66']]('\x50\x61\x74\x68\x3d'),i=e[['\x63\x6f\x6f\x6b\x69\x65']][['\x73\x6c\x69\x63\x65']](n+'\x44\x6f\x6d\x61\x69\x6e\x3d'[['\x6c\x65\x6e\x67\x74\x68']],o-'\x3b\x20'[['\x6c\x65\x6e\x67\x74\
2024-12-05 18:04:45 UTC	16384	IN	Data Raw: 37 33 5c 78 36 35 5c 78 34 34 5c 78 36 39 5c 78 37 33 5c 78 37 30 5c 78 36 63 5c 78 36 31 5c 78 37 39 5c 78 36 35 5c 78 36 34 27 5d 5d 29 7b 76 61 72 20 68 2c 6c 3d 6f 2c 75 3d 74 5b 5b 27 5c 78 36 39 5c 78 37 33 5c 78 35 33 5c 78 36 31 5c 78 36 36 5c 78 36 31 5c 78 37 32 5c 78 36 39 5c 78 35 35 5c 78 34 31 27 5d 5d 28 29 3f 27 5c 78 36 38 5c 78 36 35 5c 78 36 39 5c 78 36 37 5c 78 36 38 5c 78 37 34 5c 78 33 61 5c 78 32 30 5c 78 32 64 5c 78 37 37 5c 78 36 35 5c 78 36 32 5c 78 36 62 5c 78 36 39 5c 78 37 34 5c 78 32 64 5c 78 36 36 5c 78 36 39 5c 78 36 63 5c 78 36 63 5c 78 32 64 5c 78 36 31 5c 78 37 36 5c 78 36 31 5c 78 36 39 5c 78 36 63 5c 78 36 31 5c 78 36 32 5c 78 36 63 5c 78 36 35 5c 78 33 62 27 3a 27 27 3b 68 3d 76 6f 69 64 20 30 3d 3d 3d 64 3f 27 5c 78 Data Ascii: 73\x65\x44\x69\x73\x70\x6c\x61\x79\x65\x64']]){var h,l=o,u=t[['\x69\x73\x53\x61\x66\x61\x72\x69\x55\x41']]()?'\x68\x65\x69\x67\x68\x74\x3a\x20\x2d\x77\x65\x62\x6b\x69\x74\x2d\x66\x69\x6c\x6c\x2d\x61\x76\x61\x69\x6c\x61\x62\x6c\x65\x3b':'';h=void 0===d?'\x
2024-12-05 18:04:45 UTC	16384	IN	Data Raw: 37 34 27 5d 5d 29 7b 76 61 72 20 74 3d 70 65 72 66 6f 72 6d 61 6e 63 65 5b 5b 27 5c 78 36 65 5c 78 36 66 5c 78 37 37 27 5d 5d 28 29 3b 69 66 28 65 5b 5b 27 5c 78 37 34 5c 78 36 39 5c 78 36 64 5c 78 36 35 5c 78 35 33 5c 78 37 34 5c 78 36 31 5c 78 36 64 5c 78 37 30 27 5d 5d 3e 30 26 26 65 5b 5b 27 5c 78 37 34 5c 78 36 39 5c 78 36 64 5c 78 36 35 5c 78 35 33 5c 78 37 34 5c 78 36 31 5c 78 36 64 5c 78 37 30 27 5d 5d 3e 74 2d 35 30 30 30 26 26 65 5b 5b 27 5c 78 37 34 5c 78 36 39 5c 78 36 64 5c 78 36 35 5c 78 35 33 5c 78 37 34 5c 78 36 31 5c 78 36 64 5c 78 37 30 27 5d 5d 3c 74 29 72 65 74 75 72 6e 21 30 3b 7d 72 65 74 75 72 6e 21 31 3b 7d 2c 74 68 69 73 5b 5b 27 5c 78 36 38 5c 78 36 31 5c 78 36 65 5c 78 36 34 5c 78 36 63 5c 78 36 35 5c 78 34 35 5c 78 37 36 5c 78 Data Ascii: 74']]){var t=performance[['\x6e\x6f\x77']]();if(e[['\x74\x69\x6d\x65\x53\x74\x61\x6d\x70'...0&&e[['\x74\x69\x6d\x65\x53\x74\x61\x6d\x70'...t-5000&&e[['\x74\x69\x6d\x65\x53\x74\x61\x6d\x70']]<t)return!0;}return!1;},this[['\x68\x61\x6e\x64\x6c\x65\x45\x76\x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49732	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:43 UTC	534	OUT	GET /pa/js/min/pa.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:44 UTC	800	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:04:44 GMT DC: ccg11-origin-www-1.paypal.com Etag: "6735ac2d-11212+ident" Expires: Thu, 05 Dec 2024 19:04:44 GMT Last-Modified: Thu, 14 Nov 2024 07:52:13 GMT Paypal-Debug-Id: f898c5a52e3d2 Server: ECAcc (lhd/35DA) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000f898c5a52e3d2-b1bb2e86a5e09a5f-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 70162 Connection: close
2024-12-05 18:04:44 UTC	16383	IN	Data Raw: 2f 2a 40 20 32 30 32 34 20 50 61 79 50 61 6c 20 28 76 31 2e 39 2e 35 29 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 74 2c 65 2c 6e 29 7b 28 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 74 7c 7c 21 74 29 72 65 74 75 72 6e 20 74 3b 76 61 72 20 6e 3d 74 5b 53 79 6d 62 6f 6c 2e 74 6f 50 72 69 6d 69 74 69 76 65 5d 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6e 29 72 65 74 75 72 6e 28 22 73 74 72 69 6e 67 22 3d 3d 3d 65 3f 53 74 72 69 6e 67 3a 4e 75 6d 62 65 72 29 28 74 29 3b 74 3d 6e 2e 63 61 6c 6c 28 74 2c 65 7c 7c 22 64 65 66 61 75 6c 74 22 29 3b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d Data Ascii: /@ 2024 PayPal (v1.9.5) /!function(){"use strict";function r(t,e,n){(e=function(t){t=function(t,e){if("object"!=typeof t\|\|!t)return t;var n=t[Symbol.toPrimitive];if(void 0===n)return("string"===e?String:Number)(t);t=n.call(t,e\|\|"default");if("object"!=
2024-12-05 18:04:44 UTC	1	IN	Data Raw: 20 Data Ascii:
2024-12-05 18:04:44 UTC	16383	IN	Data Raw: 22 2b 74 5b 72 5d 2e 74 72 69 6d 28 29 2c 72 21 3d 3d 74 2e 6c 65 6e 67 74 68 2d 31 26 26 28 6e 2b 3d 22 2c 20 22 29 7d 65 6c 73 65 20 6e 3d 74 3b 72 65 74 75 72 6e 20 6e 7d 76 61 72 20 5f 65 3d 7b 70 70 3a 2f 5c 2e 70 61 79 70 61 6c 5c 2e 63 6f 6d 24 2f 2c 61 6c 6c 3a 48 7d 3b 66 75 6e 63 74 69 6f 6e 20 50 65 28 74 2c 65 29 7b 76 61 72 20 6e 3d 21 31 2c 65 3d 65 7c 7c 71 3b 72 65 74 75 72 6e 20 6e 3d 5f 65 5b 74 3d 74 7c 7c 22 61 6c 6c 22 5d 2e 74 65 73 74 28 65 29 3f 21 30 3a 6e 7d 66 75 6e 63 74 69 6f 6e 20 45 28 74 2c 65 2c 6e 29 7b 74 72 79 7b 76 61 72 20 72 3d 65 2e 72 65 70 6c 61 63 65 28 22 5b 22 2c 22 2e 22 29 2e 72 65 70 6c 61 63 65 28 22 5d 22 2c 22 22 29 2e 73 70 6c 69 74 28 22 2e 22 29 2e 72 65 64 75 63 65 28 66 75 6e 63 74 69 6f 6e 28 74 2c Data Ascii: "+t[r].trim(),r!==t.length-1&&(n+=", ")}else n=t;return n}var _e={pp:/\.paypal\.com$/,all:H};function Pe(t,e){var n=!1,e=e\|\|q;return n=_e[t=t\|\|"all"].test(e)?!0:n}function E(t,e,n){try{var r=e.replace("[",".").replace("]","").split(".").reduce(function(t,
2024-12-05 18:04:44 UTC	16383	IN	Data Raw: 2c 6f 3d 30 3b 6f 3c 61 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 63 3d 61 5b 6f 5d 2c 75 3d 6b 65 28 22 69 6e 70 75 74 22 2c 63 29 2c 73 3d 75 2e 6c 65 6e 67 74 68 2c 6c 3d 30 3b 6c 3c 73 3b 6c 2b 2b 29 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 68 28 65 2c 22 66 6f 63 75 73 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 5f 6c 61 73 74 46 6f 72 6d 3d 74 2c 72 2e 5f 6c 61 73 74 49 6e 70 75 74 3d 65 2c 72 2e 5f 74 72 61 63 6b 69 6e 67 46 41 7c 7c 28 72 2e 5f 74 72 61 63 6b 69 6e 67 46 41 3d 21 30 2c 22 62 65 66 6f 72 65 75 6e 6c 6f 61 64 2c 68 61 73 68 63 68 61 6e 67 65 22 2e 73 70 6c 69 74 28 22 2c 22 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 68 28 77 69 6e 64 6f 77 2c 74 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 75 Data Ascii: ,o=0;o<a.length;o++)for(var c=a[o],u=ke("input",c),s=u.length,l=0;l<s;l++)!function(t,e){h(e,"focus",function(){r._lastForm=t,r._lastInput=e,r._trackingFA\|\|(r._trackingFA=!0,"beforeunload,hashchange".split(",").forEach(function(t){h(window,t,function(){nu
2024-12-05 18:04:44 UTC	16383	IN	Data Raw: 6c 6f 61 64 56 65 6e 64 6f 72 44 65 66 61 75 6c 74 28 74 2e 6e 61 6d 65 29 7c 7c 7b 7d 2c 74 29 3b 62 72 28 74 29 26 26 28 6d 72 26 26 76 72 5b 65 5d 26 26 2d 31 21 3d 3d 76 72 5b 65 5d 2e 69 6e 64 65 78 4f 66 28 74 2e 6e 61 6d 65 29 3f 75 5b 65 5d 3d 21 31 3a 6e 2e 70 75 73 68 28 74 29 29 7d 29 2c 6e 2e 6c 65 6e 67 74 68 29 26 26 28 69 3d 7b 69 64 3a 65 2c 74 72 69 67 67 65 72 3a 6f 2e 74 72 69 67 67 65 72 2c 63 61 70 74 75 72 65 3a 6f 2e 63 61 70 74 75 72 65 2c 76 65 6e 64 6f 72 73 3a 6e 7d 2c 6f 3d 50 41 59 50 41 4c 2e 61 6e 61 6c 79 74 69 63 73 2e 6c 6f 67 4a 53 45 72 72 6f 72 2c 74 3d 69 2e 74 72 69 67 67 65 72 2e 74 79 70 65 2c 61 3d 69 2e 74 72 69 67 67 65 72 2e 63 6f 6e 64 69 74 69 6f 6e 2c 69 2e 74 72 69 67 67 65 72 2e 68 61 73 4f 77 6e 50 72 6f Data Ascii: loadVendorDefault(t.name)\|\|{},t);br(t)&&(mr&&vr[e]&&-1!==vr[e].indexOf(t.name)?u[e]=!1:n.push(t))}),n.length)&&(i={id:e,trigger:o.trigger,capture:o.capture,vendors:n},o=PAYPAL.analytics.logJSError,t=i.trigger.type,a=i.trigger.condition,i.trigger.hasOwnPro
2024-12-05 18:04:44 UTC	4629	IN	Data Raw: 26 28 61 2e 76 61 6c 75 65 3d 4d 61 74 68 2e 6d 61 78 28 74 2e 73 74 61 72 74 54 69 6d 65 2d 6e 69 28 29 2c 30 29 2c 61 2e 65 6e 74 72 69 65 73 3d 5b 74 5d 2c 6e 28 29 29 7d 29 3b 74 26 26 28 6e 3d 52 28 6f 2c 61 2c 42 69 2c 63 2e 72 65 70 6f 72 74 41 6c 6c 43 68 61 6e 67 65 73 29 2c 72 3d 6f 69 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7a 69 5b 61 2e 69 64 5d 7c 7c 28 65 28 74 2e 74 61 6b 65 52 65 63 6f 72 64 73 28 29 29 2c 74 2e 64 69 73 63 6f 6e 6e 65 63 74 28 29 2c 7a 69 5b 61 2e 69 64 5d 3d 21 30 2c 6e 28 21 30 29 29 7d 29 2c 5b 22 6b 65 79 64 6f 77 6e 22 2c 22 63 6c 69 63 6b 22 5d 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 Data Ascii: &(a.value=Math.max(t.startTime-ni(),0),a.entries=[t],n())});t&&(n=R(o,a,Bi,c.reportAllChanges),r=oi(function(){zi[a.id]\|\|(e(t.takeRecords()),t.disconnect(),zi[a.id]=!0,n(!0))}),["keydown","click"].forEach(function(t){addEventListener(t,function(){return s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49738	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:45 UTC	590	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/widgets/clientCalLogger.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:46 UTC	790	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:04:46 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6737ef1a-519" Expires: Fri, 05 Dec 2025 18:04:46 GMT Last-Modified: Sat, 16 Nov 2024 01:02:18 GMT Paypal-Debug-Id: 6240ddfabb5ae Server: ECAcc (lhd/35B2) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000006240ddfabb5ae-45725653d5931af3-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 1305 Connection: close
2024-12-05 18:04:46 UTC	1305	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 66 28 74 29 7b 78 68 72 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 2c 78 68 72 2e 6f 70 65 6e 28 22 50 4f 53 54 22 2c 22 2f 73 69 67 6e 69 6e 2f 63 6c 69 65 6e 74 2d 6c 6f 67 22 2c 21 30 29 2c 78 68 72 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 29 3b 74 72 79 7b 78 68 72 2e 73 65 6e 64 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 74 29 29 2c 65 2e 75 6c 44 61 74 61 2e 6c 6f 67 52 65 63 6f 72 64 73 3d 5b 5d 7d 63 61 74 63 68 28 6e 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 76 61 72 20 65 3d 7b 75 6c 43 6f 72 72 65 6c 61 Data Ascii: (function(){function f(t){xhr=new XMLHttpRequest,xhr.open("POST","/signin/client-log",!0),xhr.setRequestHeader("Content-Type","application/json;charset=UTF-8");try{xhr.send(JSON.stringify(t)),e.ulData.logRecords=[]}catch(n){}}function l(){var e={ulCorrela

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49739	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:45 UTC	588	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/widgets/errorDetector.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:46 UTC	789	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:04:46 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6737ef1a-205" Expires: Fri, 05 Dec 2025 18:04:46 GMT Last-Modified: Sat, 16 Nov 2024 01:02:18 GMT Paypal-Debug-Id: 3cba9f6cd4663 Server: ECAcc (lhd/35FD) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000003cba9f6cd4663-d43ec0cd1b219f50-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 517 Connection: close
2024-12-05 18:04:46 UTC	517	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 78 68 72 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 2c 78 68 72 2e 6f 70 65 6e 28 22 50 4f 53 54 22 2c 22 2f 73 69 67 6e 69 6e 2f 63 6c 69 65 6e 74 2d 6c 6f 67 22 2c 21 30 29 2c 78 68 72 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 29 3b 74 72 79 7b 78 68 72 2e 73 65 6e 64 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 29 29 7d 63 61 74 63 68 28 74 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 72 2c 69 2c 73 2c 6f 29 7b 76 61 72 20 75 3d 6f 26 26 6f 2e 6d 65 73 73 61 67 65 7c 7c 22 75 6e 6b 6e 6f 77 6e 22 2c Data Ascii: (function(){function n(e){xhr=new XMLHttpRequest,xhr.open("POST","/signin/client-log",!0),xhr.setRequestHeader("Content-Type","application/json;charset=UTF-8");try{xhr.send(JSON.stringify(e))}catch(t){}}function r(e,r,i,s,o){var u=o&&o.message\|\|"unknown",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49740	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:46 UTC	675	OUT	GET /images/shared/paypal-logo-129x32.svg HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/css/app.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:46 UTC	706	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: image/svg+xml Date: Thu, 05 Dec 2024 18:04:46 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"544ad849-1351" Expires: Thu, 05 Dec 2024 19:04:46 GMT Last-Modified: Fri, 24 Oct 2014 22:52:57 GMT Paypal-Debug-Id: a9274e1a826b2 Server: ECAcc (lhd/3598) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000a9274e1a826b2-d020aa44b15f9c8c-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 4945 Connection: close
2024-12-05 18:04:46 UTC	4945	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 36 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg version="1.1"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49744	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:46 UTC	412	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/lib/modernizr-2.6.1.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:46 UTC	790	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:04:46 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6737ef18-edf" Expires: Fri, 05 Dec 2025 18:04:46 GMT Last-Modified: Sat, 16 Nov 2024 01:02:16 GMT Paypal-Debug-Id: 03c808c5966a2 Server: ECAcc (lhd/35D6) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-000000000000000000003c808c5966a2-74300e3f4248e9f9-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 3807 Connection: close
2024-12-05 18:04:46 UTC	3807	IN	Data Raw: 77 69 6e 64 6f 77 2e 4d 6f 64 65 72 6e 69 7a 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 64 2e 63 73 73 54 65 78 74 3d 65 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 72 28 70 72 65 66 69 78 65 73 2e 6a 6f 69 6e 28 65 2b 22 3b 22 29 2b 28 74 7c 7c 22 22 29 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 3d 3d 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 72 65 74 75 72 6e 21 21 7e 28 22 22 2b 65 29 2e 69 6e 64 65 78 4f 66 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 74 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 20 69 6e 20 65 29 7b 76 61 72 20 6f 3d 74 5b 65 5b 69 5d 5d 3b 69 66 28 6f 21 3d 3d 6e 29 72 65 74 75 72 Data Ascii: window.Modernizr=function(e,t,n){function r(e){d.cssText=e}function i(e,t){return r(prefixes.join(e+";")+(t\|\|""))}function s(e,t){return typeof e===t}function o(e,t){return!!~(""+e).indexOf(t)}function u(e,t,r){for(var i in e){var o=t[e[i]];if(o!==n)retur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	49743	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:46 UTC	393	OUT	GET /rdaAssets/fraudnet/sync/fn-sync-telemetry-min.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:46 UTC	754	IN	HTTP/1.1 200 OK Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:04:46 GMT DC: ccg11-origin-www-1.paypal.com Etag: "67230a66-19a5+ident" Expires: Thu, 05 Dec 2024 19:04:46 GMT Last-Modified: Thu, 31 Oct 2024 04:41:10 GMT Paypal-Debug-Id: 672801e377ba4 Server: ECAcc (lhd/35BC) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000672801e377ba4-3e2623f270924a3d-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 6565 Connection: close
2024-12-05 18:04:46 UTC	6565	IN	Data Raw: 76 61 72 20 50 41 59 50 41 4c 3d 77 69 6e 64 6f 77 2e 50 41 59 50 41 4c 7c 7c 7b 7d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 6e 5b 30 5d 3d 28 32 35 35 26 28 30 7c 74 5b 65 5d 29 29 3c 3c 32 34 7c 28 32 35 35 26 28 30 7c 74 5b 65 2b 31 5d 29 29 3c 3c 31 36 7c 28 32 35 35 26 28 30 7c 74 5b 65 2b 32 5d 29 29 3c 3c 38 7c 32 35 35 26 28 30 7c 74 5b 65 2b 33 5d 29 7c 30 2c 6e 5b 31 5d 3d 28 32 35 35 26 28 30 7c 74 5b 65 2b 34 5d 29 29 3c 3c 32 34 7c 28 32 35 35 26 28 30 7c 74 5b 65 2b 35 5d 29 29 3c 3c 31 36 7c 28 32 35 35 26 28 30 7c 74 5b 65 2b 36 5d 29 29 3c 3c 38 7c 32 35 35 26 28 30 7c 74 5b 65 2b 37 Data Ascii: var PAYPAL=window.PAYPAL\|\|{};!function(){"use strict";var t=function(t){var e=function(t,e,n){n[0]=(255&(0\|t[e]))<<24\|(255&(0\|t[e+1]))<<16\|(255&(0\|t[e+2]))<<8\|255&(0\|t[e+3])\|0,n[1]=(255&(0\|t[e+4]))<<24\|(255&(0\|t[e+5]))<<16\|(255&(0\|t[e+6]))<<8\|255&(0\|t[e+7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	49742	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:46 UTC	396	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/app.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:46 UTC	790	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:04:46 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6737ef17-925" Expires: Fri, 05 Dec 2025 18:04:46 GMT Last-Modified: Sat, 16 Nov 2024 01:02:15 GMT Paypal-Debug-Id: f5a6beb75425f Server: ECAcc (lhd/35BD) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000f5a6beb75425f-d7d7db1114ad7125-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 2341 Connection: close
2024-12-05 18:04:46 UTC	2341	IN	Data Raw: 72 65 71 75 69 72 65 6a 73 2e 63 6f 6e 66 69 67 28 7b 70 61 63 6b 61 67 65 73 3a 5b 7b 6e 61 6d 65 3a 22 64 75 73 74 2d 6d 61 6b 61 72 61 2d 68 65 6c 70 65 72 73 22 2c 76 65 72 73 69 6f 6e 3a 22 34 2e 32 2e 30 22 2c 6c 6f 63 61 74 69 6f 6e 3a 22 62 72 6f 77 73 65 72 5f 6d 6f 64 75 6c 65 73 2f 64 75 73 74 2d 6d 61 6b 61 72 61 2d 68 65 6c 70 65 72 73 22 2c 6d 61 69 6e 3a 22 62 72 6f 77 73 65 72 2e 61 6d 64 2e 6a 73 22 7d 2c 7b 6e 61 6d 65 3a 22 64 75 73 74 68 65 6c 70 65 72 73 2d 73 75 70 70 6c 65 6d 65 6e 74 22 2c 76 65 72 73 69 6f 6e 3a 22 32 2e 30 2e 31 22 2c 6c 6f 63 61 74 69 6f 6e 3a 22 62 72 6f 77 73 65 72 5f 6d 6f 64 75 6c 65 73 2f 64 75 73 74 68 65 6c 70 65 72 73 2d 73 75 70 70 6c 65 6d 65 6e 74 22 2c 6d 61 69 6e 3a 22 69 6e 64 65 78 2e 6a 73 22 7d Data Ascii: requirejs.config({packages:[{name:"dust-makara-helpers",version:"4.2.0",location:"browser_modules/dust-makara-helpers",main:"browser.amd.js"},{name:"dusthelpers-supplement",version:"2.0.1",location:"browser_modules/dusthelpers-supplement",main:"index.js"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	49741	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:46 UTC	404	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/lib/require.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:46 UTC	792	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:04:46 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6737ef18-3a06" Expires: Fri, 05 Dec 2025 18:04:46 GMT Last-Modified: Sat, 16 Nov 2024 01:02:16 GMT Paypal-Debug-Id: 3b574d4eb09b4 Server: ECAcc (lhd/35A5) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000003b574d4eb09b4-a704e5c7c7e6a888-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 14854 Connection: close
2024-12-05 18:04:46 UTC	14854	IN	Data Raw: 2f 2a 0a 20 52 65 71 75 69 72 65 4a 53 20 32 2e 31 2e 36 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 30 2d 32 30 31 32 2c 20 54 68 65 20 44 6f 6a 6f 20 46 6f 75 6e 64 61 74 69 6f 6e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 20 41 76 61 69 6c 61 62 6c 65 20 76 69 61 20 74 68 65 20 4d 49 54 20 6f 72 20 6e 65 77 20 42 53 44 20 6c 69 63 65 6e 73 65 2e 0a 20 73 65 65 3a 20 68 74 74 70 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6a 72 62 75 72 6b 65 2f 72 65 71 75 69 72 65 6a 73 20 66 6f 72 20 64 65 74 61 69 6c 73 0a 2a 2f 0a 0a 76 61 72 20 72 65 71 75 69 72 65 6a 73 2c 72 65 71 75 69 72 65 2c 64 65 66 69 6e 65 3b 28 66 75 6e 63 74 69 6f 6e 28 62 61 29 7b 66 75 6e 63 74 69 6f 6e 20 4a 28 65 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a Data Ascii: /* RequireJS 2.1.6 Copyright (c) 2010-2012, The Dojo Foundation All Rights Reserved. Available via the MIT or new BSD license. see: http://github.com/jrburke/requirejs for details*/var requirejs,require,define;(function(ba){function J(e){return"[obj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	49745	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:46 UTC	360	OUT	GET /pa/js/min/pa.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:46 UTC	800	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:04:46 GMT DC: ccg11-origin-www-1.paypal.com Etag: "6735ac2d-11212+ident" Expires: Thu, 05 Dec 2024 19:04:46 GMT Last-Modified: Thu, 14 Nov 2024 07:52:13 GMT Paypal-Debug-Id: f898c5a52e3d2 Server: ECAcc (lhd/35DA) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000f898c5a52e3d2-b1bb2e86a5e09a5f-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 70162 Connection: close
2024-12-05 18:04:46 UTC	15602	IN	Data Raw: 2f 2a 40 20 32 30 32 34 20 50 61 79 50 61 6c 20 28 76 31 2e 39 2e 35 29 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 74 2c 65 2c 6e 29 7b 28 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 74 7c 7c 21 74 29 72 65 74 75 72 6e 20 74 3b 76 61 72 20 6e 3d 74 5b 53 79 6d 62 6f 6c 2e 74 6f 50 72 69 6d 69 74 69 76 65 5d 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6e 29 72 65 74 75 72 6e 28 22 73 74 72 69 6e 67 22 3d 3d 3d 65 3f 53 74 72 69 6e 67 3a 4e 75 6d 62 65 72 29 28 74 29 3b 74 3d 6e 2e 63 61 6c 6c 28 74 2c 65 7c 7c 22 64 65 66 61 75 6c 74 22 29 3b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d Data Ascii: /@ 2024 PayPal (v1.9.5) /!function(){"use strict";function r(t,e,n){(e=function(t){t=function(t,e){if("object"!=typeof t\|\|!t)return t;var n=t[Symbol.toPrimitive];if(void 0===n)return("string"===e?String:Number)(t);t=n.call(t,e\|\|"default");if("object"!=
2024-12-05 18:04:47 UTC	16383	IN	Data Raw: 2c 65 29 3b 69 66 28 65 29 69 66 28 30 3d 3d 3d 65 2e 69 6e 64 65 78 4f 66 28 22 7b 22 29 29 74 72 79 7b 65 3d 65 2e 72 65 70 6c 61 63 65 28 2f 5c 5c 22 2f 67 69 2c 27 22 27 29 2c 6e 3d 65 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 65 29 7d 63 61 74 63 68 28 72 29 7b 7d 65 6c 73 65 20 6e 2e 6c 69 6e 6b 3d 65 3b 65 3d 61 28 74 2c 22 70 61 67 65 22 29 2c 65 26 26 28 6e 2e 70 61 67 65 3d 65 29 2c 65 3d 61 28 74 2c 22 70 67 72 70 22 29 2c 65 26 26 28 6e 2e 70 67 72 70 3d 65 29 2c 65 3d 61 28 74 2c 22 6c 69 6e 6b 22 29 3b 72 65 74 75 72 6e 20 65 26 26 28 6e 2e 6c 69 6e 6b 3d 65 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 43 65 28 74 2c 65 29 7b 76 61 72 20 6e 3b 72 65 74 75 72 6e 20 6e 3d 21 28 6e 3d 28 6e 3d 65 3f 61 28 74 2c 65 29 3a 6e 29 7c 7c 61 28 74 2c 22 69 64 22 Data Ascii: ,e);if(e)if(0===e.indexOf("{"))try{e=e.replace(/\\"/gi,'"'),n=e=JSON.parse(e)}catch(r){}else n.link=e;e=a(t,"page"),e&&(n.page=e),e=a(t,"pgrp"),e&&(n.pgrp=e),e=a(t,"link");return e&&(n.link=e),n}function Ce(t,e){var n;return n=!(n=(n=e?a(t,e):n)\|\|a(t,"id"
2024-12-05 18:04:47 UTC	16383	IN	Data Raw: 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 5b 65 2c 74 2e 74 61 72 67 65 74 2c 74 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 2c 74 2e 73 72 63 45 6c 65 6d 65 6e 74 5d 2c 72 3d 30 3b 72 3c 6e 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 6e 5b 72 5d 2c 61 3d 61 7c 7c 69 3b 69 66 28 69 26 26 69 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 47 74 29 29 7b 61 3d 69 3b 62 72 65 61 6b 7d 7d 72 65 74 75 72 6e 20 61 7d 28 74 2c 65 29 3b 21 31 21 3d 3d 28 6e 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 2e 6f 6e 43 6c 69 63 6b 3f 72 2e 6f 6e 43 6c 69 63 6b 28 74 2c 65 29 3a 6e 29 26 26 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 28 72 2e 72 65 71 Data Ascii: on(t,e){var n,e=function(t,e){for(var n=[e,t.target,t.currentTarget,t.srcElement],r=0;r<n.length;r++){var i=n[r],a=a\|\|i;if(i&&i.getAttribute(Gt)){a=i;break}}return a}(t,e);!1!==(n="function"==typeof r.onClick?r.onClick(t,e):n)&&("object"==typeof n&&(r.req
2024-12-05 18:04:47 UTC	16383	IN	Data Raw: 2c 6e 29 3a 73 28 74 2e 73 68 69 66 74 28 29 2c 65 29 7d 28 61 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 69 3f 69 28 65 2c 6e 29 3a 6e 28 29 7d 2c 6f 29 3a 28 72 3d 61 2e 6c 65 6e 67 74 68 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 73 28 74 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 6f 29 2c 30 3d 3d 3d 28 72 2d 3d 31 29 26 26 28 69 3f 69 28 65 2c 6e 29 3a 6e 28 29 29 7d 29 29 3a 78 2e 76 65 6e 64 6f 72 53 63 72 69 70 74 73 54 72 61 63 6b 65 72 5b 61 5d 3f 22 6c 6f 61 64 69 6e 67 22 3d 3d 3d 78 2e 76 65 6e 64 6f 72 53 63 72 69 70 74 73 54 72 61 63 6b 65 72 5b 61 5d 3f 74 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 6c 6f 61 64 65 64 22 3d 3d 3d 78 2e 76 65 6e 64 6f 72 53 63 72 69 70 74 73 54 72 61 63 6b 65 Data Ascii: ,n):s(t.shift(),e)}(a,function(){i?i(e,n):n()},o):(r=a.length,a.forEach(function(t){s(t,function(){},o),0===(r-=1)&&(i?i(e,n):n())})):x.vendorScriptsTracker[a]?"loading"===x.vendorScriptsTracker[a]?t=setInterval(function(){"loaded"===x.vendorScriptsTracke
2024-12-05 18:04:47 UTC	5411	IN	Data Raw: 2c 61 2c 6f 2c 63 3d 47 72 28 29 3b 69 66 28 63 29 72 65 74 75 72 6e 20 61 3d 63 2e 61 63 74 69 76 61 74 69 6f 6e 53 74 61 72 74 7c 7c 30 2c 6e 3d 28 65 3d 74 2e 65 6e 74 72 69 65 73 5b 74 2e 65 6e 74 72 69 65 73 2e 6c 65 6e 67 74 68 2d 31 5d 29 2e 75 72 6c 26 26 70 65 72 66 6f 72 6d 61 6e 63 65 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 28 22 72 65 73 6f 75 72 63 65 22 29 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 6e 61 6d 65 3d 3d 3d 65 2e 75 72 6c 7d 29 5b 30 5d 2c 6f 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 63 2e 72 65 73 70 6f 6e 73 65 53 74 61 72 74 2d 61 29 2c 72 3d 4d 61 74 68 2e 6d 61 78 28 6f 2c 6e 3f 28 6e 2e 72 65 71 75 65 73 74 53 74 61 72 74 7c 7c 6e 2e 73 74 61 72 74 54 69 6d 65 29 2d 61 3a 30 Data Ascii: ,a,o,c=Gr();if(c)return a=c.activationStart\|\|0,n=(e=t.entries[t.entries.length-1]).url&&performance.getEntriesByType("resource").filter(function(t){return t.name===e.url})[0],o=Math.max(0,c.responseStart-a),r=Math.max(o,n?(n.requestStart\|\|n.startTime)-a:0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	49746	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:46 UTC	548	OUT	GET /webcaptcha/ngrlCaptcha.min.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:46 UTC	684	IN	HTTP/1.1 200 OK Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:04:46 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6697f682-5a55" Expires: Thu, 05 Dec 2024 19:04:46 GMT Last-Modified: Wed, 17 Jul 2024 16:51:14 GMT Paypal-Debug-Id: 12e4091c01e73 Server: ECAcc (lhd/3597) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-000000000000000000012e4091c01e73-51d8654737e0dd92-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 23125 Connection: close
2024-12-05 18:04:46 UTC	16383	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 61 3d 74 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 61 2e 65 78 70 6f 72 74 73 2c 61 2c 61 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 61 2e 6c 3d 21 30 2c 61 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 65 2c 6e 2e 63 3d 74 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 6e 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 72 7d 29 7d 2c 6e 2e 72 3d 66 75 6e Data Ascii: !function(e){var t={};function n(r){if(t[r])return t[r].exports;var a=t[r]={i:r,l:!1,exports:{}};return e[r].call(a.exports,a,a.exports,n),a.l=!0,a.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=fun
2024-12-05 18:04:47 UTC	6742	IN	Data Raw: 6c 65 64 3d 21 30 29 7d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 61 75 74 6f 73 75 62 6d 69 74 26 26 21 30 3d 3d 3d 61 75 74 6f 73 75 62 6d 69 74 3f 28 61 2e 74 72 69 67 67 65 72 43 75 73 74 6f 6d 54 72 61 63 6b 69 6e 67 28 7b 61 64 73 43 61 70 74 63 68 61 3a 22 73 69 6c 65 6e 74 22 7d 29 2c 6e 28 29 29 3a 28 68 3f 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 6c 69 63 6b 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 61 2e 74 72 69 67 67 65 72 43 75 73 74 6f 6d 54 72 61 63 6b 69 6e 67 28 7b 61 64 73 43 61 70 74 63 68 61 3a 22 72 65 63 61 70 74 63 68 61 22 7d 29 2c 6e 28 29 2c 74 2e 6f 6e 28 22 63 68 61 6c 6c 65 6e 67 65 53 6f 6c 76 65 64 22 2c 66 75 6e 63 74 69 6f 6e Data Ascii: led=!0)}"undefined"!=typeof autosubmit&&!0===autosubmit?(a.triggerCustomTracking({adsCaptcha:"silent"}),n()):(h?e.addEventListener("click",function(e){e.preventDefault(),a.triggerCustomTracking({adsCaptcha:"recaptcha"}),n(),t.on("challengeSolved",function

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	49748	18.66.161.97	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:47 UTC	793	OUT	GET /tags.js HTTP/1.1 Host: ddbm2.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTczMzQyMTg4MTQ4MiIsImwiOiIwIiwibSI6IjAifQ; l7_az=dcg01.phx; ts=vreXpYrS%3D1764957881%26vteXpYrS%3D1733423681%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352
2024-12-05 18:04:48 UTC	709	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 177743 Connection: close Last-Modified: Wed, 04 Dec 2024 11:03:19 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: fRdxQZTwv7aUXeF3zxmAg.EIiFr7SoNp Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 05 Dec 2024 18:04:45 GMT Cache-Control: max-age=3600, public ETag: "b4f2edbea31dcec5c70f4f1bf574b162" X-Cache: Hit from cloudfront Via: 1.1 e47955c447d3bc6630a9c0e1a8b8e666.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH52-C1 X-Amz-Cf-Id: 0y2bv9aGzlv06XBiOfj5ui0VAu9Ud4fKLw95YdlwwwT3MN1icahVZQ== Age: 3 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Vary: Origin
2024-12-05 18:04:48 UTC	15675	IN	Data Raw: 2f 2a 2a 20 44 61 74 61 44 6f 6d 65 20 69 73 20 61 20 63 79 62 65 72 73 65 63 75 72 69 74 79 20 73 6f 6c 75 74 69 6f 6e 20 74 6f 20 64 65 74 65 63 74 20 62 6f 74 20 61 63 74 69 76 69 74 79 20 68 74 74 70 73 3a 2f 2f 64 61 74 61 64 6f 6d 65 2e 63 6f 20 28 76 65 72 73 69 6f 6e 20 34 2e 33 38 2e 30 29 20 2a 2f 20 0a 21 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 6e 2c 6f 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 72 2c 73 29 7b 69 66 28 21 6e 5b 72 5d 29 7b 69 66 28 21 74 5b 72 5d 29 7b 76 61 72 20 64 3d 27 5c 78 36 36 5c 78 37 35 5c 78 36 65 5c 78 36 33 5c 78 37 34 5c 78 36 39 5c 78 36 66 5c 78 36 65 27 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 26 26 72 65 71 75 69 72 65 3b 69 66 28 21 73 26 26 64 29 72 65 74 75 72 6e 20 64 28 72 2c 21 30 29 3b 69 66 28 61 29 Data Ascii: /** DataDome is a cybersecurity solution to detect bot activity https://datadome.co (version 4.38.0) */ !function e(t,n,o){function i(r,s){if(!n[r]){if(!t[r]){var d='\x66\x75\x6e\x63\x74\x69\x6f\x6e'==typeof require&&require;if(!s&&d)return d(r,!0);if(a)
2024-12-05 18:04:48 UTC	16384	IN	Data Raw: 36 5c 78 36 35 5c 78 35 33 5c 78 37 35 5c 78 36 32 5c 78 37 33 5c 78 37 34 5c 78 37 32 5c 78 36 39 5c 78 36 65 5c 78 36 37 5c 78 35 30 5c 78 36 31 5c 78 37 34 5c 78 37 34 5c 78 36 35 5c 78 37 32 5c 78 36 65 27 5d 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3f 65 5b 5b 27 5c 78 37 32 5c 78 36 35 5c 78 37 30 5c 78 36 63 5c 78 36 31 5c 78 36 33 5c 78 36 35 27 5d 5d 28 6e 65 77 20 52 65 67 45 78 70 28 74 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 5b 5b 27 5c 78 37 32 5c 78 36 35 5c 78 37 30 5c 78 36 63 5c 78 36 31 5c 78 36 33 5c 78 36 35 27 5d 5d 28 74 2c 27 27 29 3b 7d 29 3a 65 3b 7d 2c 74 68 69 73 5b 5b 27 5c 78 36 31 5c 78 36 34 5c 78 36 34 5c 78 34 35 5c 78 37 36 5c 78 36 35 5c 78 36 65 5c 78 37 34 Data Ascii: 6\x65\x53\x75\x62\x73\x74\x72\x69\x6e\x67\x50\x61\x74\x74\x65\x72\x6e']]=function(e,t){return t?e[['\x72\x65\x70\x6c\x61\x63\x65']](new RegExp(t),function(e,t){return e[['\x72\x65\x70\x6c\x61\x63\x65']](t,'');}):e;},this[['\x61\x64\x64\x45\x76\x65\x6e\x74
2024-12-05 18:04:48 UTC	16384	IN	Data Raw: 78 34 32 5c 78 34 37 27 2c 27 5c 78 34 33 5c 78 36 37 5c 78 35 38 5c 78 33 31 5c 78 37 61 5c 78 33 32 5c 78 34 63 5c 78 35 35 5c 78 34 33 5c 78 35 37 27 2c 27 5c 78 37 61 5c 78 36 37 5c 78 37 32 5c 78 34 36 5c 78 37 39 5c 78 37 37 5c 78 35 33 27 2c 27 5c 78 34 33 5c 78 33 32 5c 78 35 38 5c 78 35 30 5c 78 37 39 5c 78 33 32 5c 78 37 35 27 2c 27 5c 78 37 35 5c 78 33 32 5c 78 36 36 5c 78 34 64 5c 78 37 39 5c 78 37 38 5c 78 36 61 5c 78 35 30 27 2c 27 5c 78 37 39 5c 78 37 38 5c 78 37 36 5c 78 34 62 5c 78 34 31 5c 78 37 37 5c 78 33 38 5c 78 35 36 5c 78 34 32 5c 78 33 32 5c 78 34 34 5c 78 34 65 5c 78 36 66 5c 78 35 39 5c 78 36 32 5c 78 34 61 5c 78 34 32 5c 78 33 32 5c 78 37 32 5c 78 34 63 5c 78 37 39 5c 78 33 33 5c 78 36 64 5c 78 33 39 5c 78 36 39 5c 78 34 65 5c Data Ascii: x42\x47','\x43\x67\x58\x31\x7a\x32\x4c\x55\x43\x57','\x7a\x67\x72\x46\x79\x77\x53','\x43\x32\x58\x50\x79\x32\x75','\x75\x32\x66\x4d\x79\x78\x6a\x50','\x79\x78\x76\x4b\x41\x77\x38\x56\x42\x32\x44\x4e\x6f\x59\x62\x4a\x42\x32\x72\x4c\x79\x33\x6d\x39\x69\x4e\
2024-12-05 18:04:48 UTC	16384	IN	Data Raw: 5c 78 36 65 5c 78 37 34 5c 78 37 33 27 5d 2c 73 65 6c 3a 21 21 65 5b 6e 28 34 35 36 29 5d 7c 7c 21 28 21 65 5b 6e 28 37 32 31 29 5d 7c 7c 21 65 5b 6e 28 37 32 31 29 5d 5b 27 5c 78 32 34 5c 78 36 33 5c 78 36 34 5c 78 36 33 5c 78 35 66 5c 78 36 31 5c 78 37 33 5c 78 36 34 5c 78 36 61 5c 78 36 36 5c 78 36 63 5c 78 36 31 5c 78 37 33 5c 78 37 35 5c 78 37 34 5c 78 36 66 5c 78 37 30 5c 78 36 36 5c 78 36 38 5c 78 37 36 5c 78 36 33 5c 78 35 61 5c 78 34 63 5c 78 36 64 5c 78 36 33 5c 78 36 36 5c 78 36 63 5c 78 35 66 27 5d 29 2c 6f 6e 4c 3a 6f 5b 6e 28 34 36 39 29 5d 7d 3b 7d 66 75 6e 63 74 69 6f 6e 20 77 28 65 2c 6e 29 7b 76 61 72 20 6f 3d 74 2c 69 3d 5b 5d 2c 61 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 65 29 65 5b 72 5d 21 3d 3d 6e 5b 72 5d 26 26 28 69 5b Data Ascii: \x6e\x74\x73'],sel:!!e[n(456)]\|\|!(!e[n(721)]\|\|!e[n(721)]['\x24\x63\x64\x63\x5f\x61\x73\x64\x6a\x66\x6c\x61\x73\x75\x74\x6f\x70\x66\x68\x76\x63\x5a\x4c\x6d\x63\x66\x6c\x5f']),onL:o[n(469)]};}function w(e,n){var o=t,i=[],a=[];for(var r in e)e[r]!==n[r]&&(i[
2024-12-05 18:04:48 UTC	16384	IN	Data Raw: 26 26 28 64 6f 63 75 6d 65 6e 74 5b 65 28 36 32 35 29 5d 5b 27 5c 78 36 31 5c 78 37 30 5c 78 37 30 5c 78 36 35 5c 78 36 65 5c 78 36 34 5c 78 34 33 5c 78 36 38 5c 78 36 39 5c 78 36 63 5c 78 36 34 27 5d 28 6e 29 2c 74 68 69 73 5b 27 5c 78 35 66 5c 78 36 39 5c 78 36 36 5c 78 37 32 5c 78 36 31 5c 78 36 64 5c 78 36 35 5c 78 35 32 5c 78 36 35 5c 78 36 36 27 5d 3d 6e 29 3b 7d 2c 74 68 69 73 5b 74 28 37 34 39 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 74 3b 74 72 79 7b 76 61 72 20 6f 3d 74 68 69 73 5b 27 5c 78 35 66 5c 78 36 39 5c 78 36 36 5c 78 37 32 5c 78 36 31 5c 78 36 64 5c 78 36 35 5c 78 35 32 5c 78 36 35 5c 78 36 36 27 5d 5b 27 5c 78 36 33 5c 78 36 66 5c 78 36 65 5c 78 37 34 5c 78 36 35 5c 78 36 65 5c 78 37 34 5c 78 35 37 5c 78 36 39 5c 78 Data Ascii: &&(document[e(625)]['\x61\x70\x70\x65\x6e\x64\x43\x68\x69\x6c\x64'](n),this['\x5f\x69\x66\x72\x61\x6d\x65\x52\x65\x66']=n);},this[t(749)]=function(){var n=t;try{var o=this['\x5f\x69\x66\x72\x61\x6d\x65\x52\x65\x66']['\x63\x6f\x6e\x74\x65\x6e\x74\x57\x69\x
2024-12-05 18:04:48 UTC	16384	IN	Data Raw: 36 33 5c 78 37 30 5c 78 37 34 27 5d 3d 2d 31 3d 3d 3d 6f 5b 27 5c 78 36 33 5c 78 36 31 5c 78 36 65 5c 78 35 30 5c 78 36 63 5c 78 36 31 5c 78 37 39 5c 78 35 34 5c 78 37 39 5c 78 37 30 5c 78 36 35 27 5d 5b 27 5c 78 37 34 5c 78 36 66 5c 78 35 33 5c 78 37 34 5c 78 37 32 5c 78 36 39 5c 78 36 65 5c 78 36 37 27 5d 28 29 5b 27 5c 78 36 39 5c 78 36 65 5c 78 36 34 5c 78 36 35 5c 78 37 38 5c 78 34 66 5c 78 36 36 27 5d 28 27 5c 78 36 33 5c 78 36 31 5c 78 36 65 5c 78 35 30 5c 78 36 63 5c 78 36 31 5c 78 37 39 5c 78 35 34 5c 78 37 39 5c 78 37 30 5c 78 36 35 27 29 3b 7d 63 61 74 63 68 28 74 29 7b 65 5b 27 5c 78 36 31 5c 78 36 33 5c 78 36 66 27 5d 3d 27 5c 78 34 65 5c 78 34 31 27 2c 65 5b 6e 28 36 31 38 29 5d 3d 27 5c 78 34 65 5c 78 34 31 27 2c 65 5b 6e 28 37 36 32 29 5d Data Ascii: 63\x70\x74']=-1===o['\x63\x61\x6e\x50\x6c\x61\x79\x54\x79\x70\x65']['\x74\x6f\x53\x74\x72\x69\x6e\x67']()['\x69\x6e\x64\x65\x78\x4f\x66']('\x63\x61\x6e\x50\x6c\x61\x79\x54\x79\x70\x65');}catch(t){e['\x61\x63\x6f']='\x4e\x41',e[n(618)]='\x4e\x41',e[n(762)]
2024-12-05 18:04:48 UTC	16384	IN	Data Raw: 2c 74 68 69 73 5b 27 5c 78 36 34 5c 78 36 34 5c 78 35 66 5c 78 36 31 5c 78 36 65 27 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 74 3b 6e 61 76 69 67 61 74 6f 72 5b 27 5c 78 36 37 5c 78 36 35 5c 78 37 34 5c 78 34 32 5c 78 36 31 5c 78 37 34 5c 78 37 34 5c 78 36 35 5c 78 37 32 5c 78 37 39 27 5d 26 26 27 5c 78 36 36 5c 78 37 35 5c 78 36 65 5c 78 36 33 5c 78 37 34 5c 78 36 39 5c 78 36 66 5c 78 36 65 27 3d 3d 74 79 70 65 6f 66 20 6e 61 76 69 67 61 74 6f 72 5b 27 5c 78 36 37 5c 78 36 35 5c 78 37 34 5c 78 34 32 5c 78 36 31 5c 78 37 34 5c 78 37 34 5c 78 36 35 5c 78 37 32 5c 78 37 39 27 5d 26 26 6e 61 76 69 67 61 74 6f 72 5b 6e 28 35 34 31 29 5d 28 29 5b 27 5c 78 37 34 5c 78 36 38 5c 78 36 35 5c 78 36 65 27 5d 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 Data Ascii: ,this['\x64\x64\x5f\x61\x6e']=function(){var n=t;navigator['\x67\x65\x74\x42\x61\x74\x74\x65\x72\x79']&&'\x66\x75\x6e\x63\x74\x69\x6f\x6e'==typeof navigator['\x67\x65\x74\x42\x61\x74\x74\x65\x72\x79']&&navigator[n(541)]()['\x74\x68\x65\x6e'](function(t){v
2024-12-05 18:04:48 UTC	13941	IN	Data Raw: 5c 78 32 30 27 5b 5b 27 5c 78 36 63 5c 78 36 35 5c 78 36 65 5c 78 36 37 5c 78 37 34 5c 78 36 38 27 5d 5d 29 3b 69 66 28 6e 3e 2d 31 29 7b 69 66 28 77 69 6e 64 6f 77 5b 5b 27 5c 78 36 34 5c 78 36 31 5c 78 37 34 5c 78 36 31 5c 78 34 34 5c 78 36 66 5c 78 36 64 5c 78 36 35 5c 78 34 66 5c 78 37 30 5c 78 37 34 5c 78 36 39 5c 78 36 66 5c 78 36 65 5c 78 37 33 27 5d 5d 5b 5b 27 5c 78 36 66 5c 78 37 36 5c 78 36 35 5c 78 37 32 5c 78 37 32 5c 78 36 39 5c 78 36 34 5c 78 36 35 5c 78 34 33 5c 78 36 66 5c 78 36 66 5c 78 36 62 5c 78 36 39 5c 78 36 35 5c 78 34 34 5c 78 36 66 5c 78 36 64 5c 78 36 31 5c 78 36 39 5c 78 36 65 27 5d 5d 3f 28 65 5b 5b 27 5c 78 36 33 5c 78 36 66 5c 78 36 66 5c 78 36 62 5c 78 36 39 5c 78 36 35 27 5d 5d 3d 73 5b 5b 27 5c 78 37 32 5c 78 36 35 5c 78 Data Ascii: \x20'[['\x6c\x65\x6e\x67\x74\x68']]);if(n>-1){if(window[['\x64\x61\x74\x61\x44\x6f\x6d\x65\x4f\x70\x74\x69\x6f\x6e\x73']][['\x6f\x76\x65\x72\x72\x69\x64\x65\x43\x6f\x6f\x6b\x69\x65\x44\x6f\x6d\x61\x69\x6e']]?(e[['\x63\x6f\x6f\x6b\x69\x65']]=s[['\x72\x65\x
2024-12-05 18:04:48 UTC	16384	IN	Data Raw: 78 36 34 5c 78 36 34 5c 78 35 33 5c 78 37 34 5c 78 37 39 5c 78 36 63 5c 78 36 35 5c 78 34 33 5c 78 36 31 5c 78 37 30 5c 78 37 34 5c 78 36 33 5c 78 36 38 5c 78 36 31 5c 78 34 32 5c 78 36 66 5c 78 36 34 5c 78 37 39 27 2b 70 29 3b 66 28 29 2c 61 26 26 61 5b 5b 27 5c 78 37 30 5c 78 36 31 5c 78 37 32 5c 78 36 35 5c 78 36 65 5c 78 37 34 5c 78 34 65 5c 78 36 66 5c 78 36 34 5c 78 36 35 27 5d 5d 26 26 61 5b 5b 27 5c 78 37 30 5c 78 36 31 5c 78 37 32 5c 78 36 35 5c 78 36 65 5c 78 37 34 5c 78 34 65 5c 78 36 66 5c 78 36 34 5c 78 36 35 27 5d 5d 5b 5b 27 5c 78 37 32 5c 78 36 35 5c 78 36 64 5c 78 36 66 5c 78 37 36 5c 78 36 35 5c 78 34 33 5c 78 36 38 5c 78 36 39 5c 78 36 63 5c 78 36 34 27 5d 5d 28 61 29 2c 77 69 6e 64 6f 77 5b 5b 27 5c 78 34 34 5c 78 36 31 5c 78 37 34 5c Data Ascii: x64\x64\x53\x74\x79\x6c\x65\x43\x61\x70\x74\x63\x68\x61\x42\x6f\x64\x79'+p);f(),a&&a[['\x70\x61\x72\x65\x6e\x74\x4e\x6f\x64\x65']]&&a[['\x70\x61\x72\x65\x6e\x74\x4e\x6f\x64\x65']][['\x72\x65\x6d\x6f\x76\x65\x43\x68\x69\x6c\x64']](a),window[['\x44\x61\x74\
2024-12-05 18:04:48 UTC	16384	IN	Data Raw: 34 35 5c 78 37 36 5c 78 36 35 5c 78 36 65 5c 78 37 34 5c 78 34 63 5c 78 36 39 5c 78 37 33 5c 78 37 34 5c 78 36 35 5c 78 36 65 5c 78 36 35 5c 78 37 32 27 5d 5d 28 77 69 6e 64 6f 77 2c 27 5c 78 36 31 5c 78 37 33 5c 78 37 39 5c 78 36 65 5c 78 36 33 5c 78 34 33 5c 78 36 38 5c 78 36 31 5c 78 36 63 5c 78 36 63 5c 78 36 35 5c 78 36 65 5c 78 36 37 5c 78 36 35 5c 78 34 36 5c 78 36 39 5c 78 36 65 5c 78 36 39 5c 78 37 33 5c 78 36 38 5c 78 36 35 5c 78 36 34 27 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 77 69 6e 64 6f 77 5b 5b 27 5c 78 36 34 5c 78 36 31 5c 78 37 34 5c 78 36 31 5c 78 34 34 5c 78 36 66 5c 78 36 64 5c 78 36 35 5c 78 34 66 5c 78 37 30 5c 78 37 34 5c 78 36 39 5c 78 36 66 5c 78 36 65 5c 78 37 33 27 5d 5d 26 26 74 5b 5b 27 5c 78 37 32 5c 78 36 35 5c 78 37 31 5c Data Ascii: 45\x76\x65\x6e\x74\x4c\x69\x73\x74\x65\x6e\x65\x72']](window,'\x61\x73\x79\x6e\x63\x43\x68\x61\x6c\x6c\x65\x6e\x67\x65\x46\x69\x6e\x69\x73\x68\x65\x64',function(n){window[['\x64\x61\x74\x61\x44\x6f\x6d\x65\x4f\x70\x74\x69\x6f\x6e\x73']]&&t[['\x72\x65\x71\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	49749	18.66.161.70	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:47 UTC	616	OUT	POST /js/ HTTP/1.1 Host: ddbm2.paypal.com Connection: keep-alive Content-Length: 5992 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://www.paypal.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:47 UTC	5992	OUT	Data Raw: 6a 73 44 61 74 61 3d 25 37 42 25 32 32 74 74 73 74 25 32 32 25 33 41 31 30 2e 33 39 39 39 39 39 39 39 39 39 39 34 31 38 25 32 43 25 32 32 69 66 6f 76 25 32 32 25 33 41 66 61 6c 73 65 25 32 43 25 32 32 62 72 5f 68 25 32 32 25 33 41 39 30 37 25 32 43 25 32 32 62 72 5f 77 25 32 32 25 33 41 31 32 38 30 25 32 43 25 32 32 69 73 66 25 32 32 25 33 41 66 61 6c 73 65 25 32 43 25 32 32 6e 64 64 63 25 32 32 25 33 41 30 25 32 43 25 32 32 72 73 5f 68 25 32 32 25 33 41 31 30 32 34 25 32 43 25 32 32 72 73 5f 77 25 32 32 25 33 41 31 32 38 30 25 32 43 25 32 32 72 73 5f 63 64 25 32 32 25 33 41 32 34 25 32 43 25 32 32 70 68 65 25 32 32 25 33 41 66 61 6c 73 65 25 32 43 25 32 32 6e 6d 25 32 32 25 33 41 66 61 6c 73 65 25 32 43 25 32 32 6a 73 66 25 32 32 25 33 41 66 61 6c 73 65 Data Ascii: jsData=%7B%22ttst%22%3A10.39999999999418%2C%22ifov%22%3Afalse%2C%22br_h%22%3A907%2C%22br_w%22%3A1280%2C%22isf%22%3Afalse%2C%22nddc%22%3A0%2C%22rs_h%22%3A1024%2C%22rs_w%22%3A1280%2C%22rs_cd%22%3A24%2C%22phe%22%3Afalse%2C%22nm%22%3Afalse%2C%22jsf%22%3Afalse
2024-12-05 18:04:48 UTC	577	IN	HTTP/1.1 200 OK Content-Type: application/json;charset=utf-8 Content-Length: 230 Connection: close Date: Thu, 05 Dec 2024 18:04:48 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: DataDome Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate Expires: 0 X-Cache: Miss from cloudfront Via: 1.1 7cb7aff585b14d8a9957e9d3c12f8186.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH52-C1 X-Amz-Cf-Id: bKlOeXEpLofmzRu_eW_Kh38FKkGxe7N9KXtQfCorNLHP8IO517Osog== X-Content-Type-Options: nosniff Access-Control-Allow-Origin: *
2024-12-05 18:04:48 UTC	230	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 63 6f 6f 6b 69 65 22 3a 22 64 61 74 61 64 6f 6d 65 3d 46 73 35 4d 6d 42 30 4a 4c 64 77 35 68 43 53 47 41 6d 74 76 77 64 72 6f 32 45 49 4d 72 70 79 5a 6f 45 4b 52 76 57 7e 58 78 5a 32 63 7e 68 6d 77 7e 69 48 61 56 41 43 57 4d 6e 73 63 73 48 62 6b 6d 6c 68 78 73 68 30 61 45 53 73 4f 54 63 4c 52 33 64 49 57 45 67 72 61 4b 77 51 39 46 5f 6a 6a 53 76 32 61 67 76 7a 33 65 32 51 37 71 45 71 50 66 34 49 6c 61 48 36 5f 46 55 59 4b 62 6d 65 35 3b 20 4d 61 78 2d 41 67 65 3d 32 35 39 32 30 30 30 3b 20 44 6f 6d 61 69 6e 3d 2e 70 61 79 70 61 6c 2e 63 6f 6d 3b 20 50 61 74 68 3d 2f 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4c 61 78 22 7d Data Ascii: {"status":200,"cookie":"datadome=Fs5MmB0JLdw5hCSGAmtvwdro2EIMrpyZoEKRvW~XxZ2c~hmw~iHaVACWMnscsHbkmlhxsh0aESsOTcLR3dIWEgraKwQ9F_jjSv2agvz3e2Q7qEqPf4IlaH6_FUYKbme5; Max-Age=2592000; Domain=.paypal.com; Path=/; Secure; SameSite=Lax"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	49761	151.101.131.1	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:47 UTC	2909	OUT	GET /ts?v=1.9.5&t=1733421883562&g=300&e=ac&tsrce=unp&ppid=RT000186&space_key=SKCPAD&utm_source=unp&utm_medium=email&utm_campaign=RT000186&utm_unptid=3bf303f1-b31d-11ef-81c6-bffe125023d8&cnac=US&rsta=en_US(en-US)&unptid=3bf303f1-b31d-11ef-81c6-bffe125023d8&calc=f7859995fbf4b&unp_tpcid=requestmoney-notifications-requestee&page=main%3Aemail%3ART000186&pgrp=main%3Aemail&s=ci&mail=sys&appVersion=1.294.0&xt=145585%2C150948%2C104038&link_ref=www.paypal.com_signin&event_name=external_deep_link_processed HTTP/1.1 Host: t.paypal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.paypal.com/signin/?returnUri=%2Fmyaccount%2Ftransfer%2FpayRequest%2FU-09584045BD498740V%2FU-7AK40048SY131414Y%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq&id=UJ8cMtNtnR8osXBu987dZoV1KMO8Kn.CKcv6ZA&expId=p2p&onboardData=%7B%22signUpRequest%22%3A%7B%22method%22%3A%22get%22%2C%22url%22%3A%22https%3A%2F%2Fwww.paypal.com%2Fmyaccount%2Ftransfer%2FguestLogin%2FpayRequest%2FU-09584045BD498740V%2FU-7AK40048SY131414Y%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq%26id%3DUJ8cMtNtnR8osXBu987dZoV1KMO8Kn.CKcv6ZA%22%7D%7D&flowContextData=k3KkNbgd2F3whUTyipi2CMJLh_A_-ZYRjnLUkRjoT_j0HNsy89M3Jq9pftpBPMtxKyazfBl41ygLF6L-3nSQM3yKD_1JSLMZUnm3gJtmC_GW6MtRMZgxxLdzhM2UidzudErvOhqzUKOKhl1Uolhas5WHE4v4p4McejHNxcZVkLh-Y4orpy9guCt5hhIB4GnzEz4SubWTdzvc3cAY2OwiaKLLHK8NR5mzXmQp5fVf3iIsNKSvq_9V0izgPURkU3T8RWrY5gGBkFdWln_xY5pl8zRv8lmUI-keUYe0DqQBvKVK8GwV8qiU_5p8qjPHJVW9i-G3ZBZuZum2FKJqczC5erDfF4QBe8JLLYzKBGyYHnHI7fFyBoEDubHGzh8R01uh4xAe-iAkcUj76XG_hnIoA0TzvY15PrfT8E9VdnaJhGuNJ5c8GhmekMGGnVwrlvOcZBIva0&v=1&utm_source=un [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTczMzQyMTg4MTQ4MiIsImwiOiIwIiwibSI6IjAifQ; l7_az=dcg01.phx; ts=vreXpYrS%3D1764957881%26vteXpYrS%3D1733423681%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352
2024-12-05 18:04:48 UTC	1360	IN	HTTP/1.1 200 OK Connection: close Access-Control-Expose-Headers: Server-Timing CORRELATION-ID: 2887b98d48d68 Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Type: image/gif Expires: Thu, 05 Dec 2024 18:04:48 GMT P3p: CP="CAO IND OUR SAM UNI STA COR COM" Paypal-Debug-Id: 2887b98d48d68 Pragma: no-cache Set-Cookie: ts=vreXpYrS%3D1764957888%26vteXpYrS%3D1733423688%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew;Expires=Fri, 05 Dec 2025 18:04:48 GMT;domain=.paypal.com;path=/;secure;HttpOnly;SameSite=None; Set-Cookie: ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352;Expires=Fri, 05 Dec 2025 18:04:48 GMT;domain=.paypal.com;path=/;secure;SameSite=None; Traceparent: 00-00000000000000000002887b98d48d68-e4a65daf9c7b0621-01 Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Date: Thu, 05 Dec 2024 18:04:48 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Served-By: cache-iad-kcgs7200100-IAD, cache-ewr-kewr1740059-EWR X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1733421888.166089,VS0,VE84 vary: Accept-Encoding Server-Timing: "traceparent;desc="00-00000000000000000002887b98d48d68-307f8aa9cef330b9-01"";content-encoding;desc="",x-cdn;desc="fastly" Timing-Allow-Origin: * transfer-encoding: chunked
2024-12-05 18:04:48 UTC	4	IN	Data Raw: 32 61 0d 0a Data Ascii: 2a
2024-12-05 18:04:48 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 01 01 32 00 3b Data Ascii: GIF89a!,2;
2024-12-05 18:04:48 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	49754	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:48 UTC	556	OUT	GET /webcaptcha/grcenterprise_v3_static.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:48 UTC	683	IN	HTTP/1.1 200 OK Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:04:48 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"65f1e42c-180e" Expires: Thu, 05 Dec 2024 19:04:48 GMT Last-Modified: Wed, 13 Mar 2024 17:36:44 GMT Paypal-Debug-Id: b3ccb366af5af Server: ECAcc (lhd/35E9) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000b3ccb366af5af-57e51581fae364c4-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 6158 Connection: close
2024-12-05 18:04:48 UTC	6158	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 69 6e 69 74 28 29 20 7b 0a 20 20 20 20 63 6f 6e 73 74 20 6b 65 79 20 3d 20 67 65 74 4c 69 73 74 65 6e 65 72 53 65 61 72 63 68 4b 65 79 28 27 64 61 74 61 2d 6b 65 79 27 29 3b 0a 20 20 20 20 63 6f 6e 73 74 20 73 65 73 73 69 6f 6e 49 64 20 3d 20 67 65 74 4c 69 73 74 65 6e 65 72 53 65 61 72 63 68 4b 65 79 28 27 64 61 74 61 2d 73 65 73 73 69 6f 6e 49 64 27 29 3b 0a 20 20 20 20 63 6f 6e 73 74 20 63 73 72 66 20 3d 20 67 65 74 4c 69 73 74 65 6e 65 72 53 65 61 72 63 68 4b 65 79 28 27 64 61 74 61 2d 63 73 72 66 27 29 3b 0a 20 20 20 20 63 6f 6e 73 74 20 61 63 74 69 6f 6e 20 3d 20 67 65 74 4c 69 73 74 65 6e 65 72 53 65 61 72 63 68 4b 65 79 28 27 64 61 74 61 2d 61 63 74 69 6f 6e 27 29 3b 0a 20 20 Data Ascii: "use strict";function init() { const key = getListenerSearchKey('data-key'); const sessionId = getListenerSearchKey('data-sessionId'); const csrf = getListenerSearchKey('data-csrf'); const action = getListenerSearchKey('data-action');

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	49755	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:48 UTC	416	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/widgets/clientCalLogger.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:48 UTC	790	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:04:48 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6737ef1a-519" Expires: Fri, 05 Dec 2025 18:04:48 GMT Last-Modified: Sat, 16 Nov 2024 01:02:18 GMT Paypal-Debug-Id: 6240ddfabb5ae Server: ECAcc (lhd/35B2) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000006240ddfabb5ae-45725653d5931af3-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 1305 Connection: close
2024-12-05 18:04:48 UTC	1305	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 66 28 74 29 7b 78 68 72 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 2c 78 68 72 2e 6f 70 65 6e 28 22 50 4f 53 54 22 2c 22 2f 73 69 67 6e 69 6e 2f 63 6c 69 65 6e 74 2d 6c 6f 67 22 2c 21 30 29 2c 78 68 72 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 29 3b 74 72 79 7b 78 68 72 2e 73 65 6e 64 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 74 29 29 2c 65 2e 75 6c 44 61 74 61 2e 6c 6f 67 52 65 63 6f 72 64 73 3d 5b 5d 7d 63 61 74 63 68 28 6e 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 76 61 72 20 65 3d 7b 75 6c 43 6f 72 72 65 6c 61 Data Ascii: (function(){function f(t){xhr=new XMLHttpRequest,xhr.open("POST","/signin/client-log",!0),xhr.setRequestHeader("Content-Type","application/json;charset=UTF-8");try{xhr.send(JSON.stringify(t)),e.ulData.logRecords=[]}catch(n){}}function l(){var e={ulCorrela

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.6	49756	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:48 UTC	583	OUT	GET /martech/tm/paypal/mktgtagmanager.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.paypal.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:48 UTC	795	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:04:48 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"67042d91-3eb4" Expires: Thu, 05 Dec 2024 19:04:48 GMT Last-Modified: Mon, 07 Oct 2024 18:50:57 GMT Paypal-Debug-Id: 43977cf5beaba Server: ECAcc (lhd/35D1) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-000000000000000000043977cf5beaba-bf7373f9bbb8911f-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 16052 Connection: close
2024-12-05 18:04:48 UTC	16052	IN	Data Raw: 2f 2a 40 20 32 30 32 34 20 50 61 79 50 61 6c 20 28 76 31 2e 30 2e 31 29 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 66 28 74 29 7b 69 66 28 21 74 7c 7c 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 21 3d 3d 4f 62 6a 65 63 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 21 3d 3d 41 72 72 61 79 29 72 65 74 75 72 6e 20 74 3b 76 61 72 20 65 2c 6e 3d 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 3b 66 6f 72 28 65 20 69 6e 20 74 29 6e 5b 65 5d 3d 66 28 74 5b 65 5d 29 3b 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 73 28 74 2c 65 29 7b 76 61 72 20 6e 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 26 26 28 6e 3d 74 2e 61 70 70 6c 79 28 65 7c 7c 74 68 69 73 2c Data Ascii: /@ 2024 PayPal (v1.0.1) /!function(){"use strict";function f(t){if(!t\|\|t.constructor!==Object&&t.constructor!==Array)return t;var e,n=t.constructor();for(e in t)n[e]=f(t[e]);return n}function s(t,e){var n;return function(){return t&&(n=t.apply(e\|\|this,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.6	49757	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:48 UTC	572	OUT	GET /pa/mi/paypal/latmconf.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.paypal.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:48 UTC	799	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:04:48 GMT DC: ccg11-origin-www-1.paypal.com Etag: "6735ac2d-3ac5+ident" Expires: Thu, 05 Dec 2024 19:04:48 GMT Last-Modified: Thu, 14 Nov 2024 07:52:13 GMT Paypal-Debug-Id: 8ca3f04ae1eca Server: ECAcc (lhd/35E2) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000008ca3f04ae1eca-7b6be631e999b634-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 15045 Connection: close
2024-12-05 18:04:48 UTC	15045	IN	Data Raw: 2f 2a 21 20 32 30 32 34 20 64 6c 2d 70 70 2d 6c 61 74 6d 40 70 61 79 70 61 6c 2e 63 6f 6d 20 76 65 72 28 35 2e 31 2e 31 29 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 6e 29 7b 28 6e 75 6c 6c 3d 3d 6e 7c 7c 6e 3e 65 2e 6c 65 6e 67 74 68 29 26 26 28 6e 3d 65 2e 6c 65 6e 67 74 68 29 3b 66 6f 72 28 76 61 72 20 6f 3d 30 2c 61 3d 41 72 72 61 79 28 6e 29 3b 6f 3c 6e 3b 6f 2b 2b 29 61 5b 6f 5d 3d 65 5b 6f 5d 3b 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 72 65 74 75 72 6e 20 65 7d 28 6e 29 7c 7c 66 75 Data Ascii: /! 2024 dl-pp-latm@paypal.com ver(5.1.1) /!function(){"use strict";!function(){function e(e,n){(null==n\|\|n>e.length)&&(n=e.length);for(var o=0,a=Array(n);o<n;o++)a[o]=e[o];return a}function n(n,o){return function(e){if(Array.isArray(e))return e}(n)\|\|fu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.6	49758	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:48 UTC	414	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/widgets/errorDetector.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:48 UTC	789	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:04:48 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6737ef1a-205" Expires: Fri, 05 Dec 2025 18:04:48 GMT Last-Modified: Sat, 16 Nov 2024 01:02:18 GMT Paypal-Debug-Id: 3cba9f6cd4663 Server: ECAcc (lhd/35FD) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000003cba9f6cd4663-d43ec0cd1b219f50-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 517 Connection: close
2024-12-05 18:04:48 UTC	517	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 78 68 72 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 2c 78 68 72 2e 6f 70 65 6e 28 22 50 4f 53 54 22 2c 22 2f 73 69 67 6e 69 6e 2f 63 6c 69 65 6e 74 2d 6c 6f 67 22 2c 21 30 29 2c 78 68 72 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 29 3b 74 72 79 7b 78 68 72 2e 73 65 6e 64 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 29 29 7d 63 61 74 63 68 28 74 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 72 2c 69 2c 73 2c 6f 29 7b 76 61 72 20 75 3d 6f 26 26 6f 2e 6d 65 73 73 61 67 65 7c 7c 22 75 6e 6b 6e 6f 77 6e 22 2c Data Ascii: (function(){function n(e){xhr=new XMLHttpRequest,xhr.open("POST","/signin/client-log",!0),xhr.setRequestHeader("Content-Type","application/json;charset=UTF-8");try{xhr.send(JSON.stringify(e))}catch(t){}}function r(e,r,i,s,o){var u=o&&o.message\|\|"unknown",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.6	49759	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:48 UTC	381	OUT	GET /images/shared/paypal-logo-129x32.svg HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:48 UTC	706	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: image/svg+xml Date: Thu, 05 Dec 2024 18:04:48 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"544ad849-1351" Expires: Thu, 05 Dec 2024 19:04:48 GMT Last-Modified: Fri, 24 Oct 2014 22:52:57 GMT Paypal-Debug-Id: a9274e1a826b2 Server: ECAcc (lhd/3598) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000a9274e1a826b2-d020aa44b15f9c8c-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 4945 Connection: close
2024-12-05 18:04:48 UTC	4945	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 36 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg version="1.1"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.6	49763	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:48 UTC	613	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/browser_modules/dustjs-linkedin/dist/dust-full.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:49 UTC	792	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:04:49 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6737ef18-9b8c" Expires: Fri, 05 Dec 2025 18:04:49 GMT Last-Modified: Sat, 16 Nov 2024 01:02:16 GMT Paypal-Debug-Id: 02b62f46403a9 Server: ECAcc (lhd/35F9) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-000000000000000000002b62f46403a9-f37761ce0b0bcd6f-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 39820 Connection: close
2024-12-05 18:04:49 UTC	16383	IN	Data Raw: 2f 2a 21 20 64 75 73 74 6a 73 2d 6c 69 6e 6b 65 64 69 6e 20 2d 20 76 33 2e 30 2e 30 0a 2a 20 68 74 74 70 3a 2f 2f 64 75 73 74 6a 73 2e 63 6f 6d 2f 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 32 31 20 41 6c 65 6b 73 61 6e 64 65 72 20 57 69 6c 6c 69 61 6d 73 3b 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 2a 2f 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 79 70 65 6f 66 20 64 65 66 69 6e 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 64 65 66 69 6e 65 2e 61 6d 64 26 26 64 65 66 69 6e 65 2e 61 6d 64 2e 64 75 73 74 3d 3d 3d 21 30 3f 64 65 66 69 6e 65 28 22 64 75 73 74 2e 63 6f 72 65 22 2c 5b 5d 2c 74 29 3a 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3d 3d 22 6f 62 6a 65 63 74 22 3f 6d 6f 64 Data Ascii: /! dustjs-linkedin - v3.0.0 http://dustjs.com/* Copyright (c) 2021 Aleksander Williams; Released under the MIT License */(function(e,t){typeof define=="function"&&define.amd&&define.amd.dust===!0?define("dust.core",[],t):typeof exports=="object"?mod
2024-12-05 18:04:49 UTC	1	IN	Data Raw: 3a Data Ascii: :
2024-12-05 18:04:49 UTC	16383	IN	Data Raw: 28 4c 6e 3d 74 2c 74 3d 69 29 29 3a 28 4c 6e 3d 74 2c 74 3d 69 29 7d 65 6c 73 65 20 4c 6e 3d 74 2c 74 3d 69 3b 69 66 28 74 3d 3d 3d 69 29 7b 74 3d 4c 6e 2c 6e 3d 24 6e 28 29 3b 69 66 28 6e 21 3d 3d 69 29 7b 72 3d 5b 5d 2c 73 3d 4e 72 28 29 3b 77 68 69 6c 65 28 73 21 3d 3d 69 29 72 2e 70 75 73 68 28 73 29 2c 73 3d 4e 72 28 29 3b 72 21 3d 3d 69 3f 28 65 2e 63 68 61 72 43 6f 64 65 41 74 28 4c 6e 29 3d 3d 3d 34 37 3f 28 73 3d 63 2c 4c 6e 2b 2b 29 3a 28 73 3d 69 2c 44 6e 3d 3d 3d 30 26 26 52 6e 28 68 29 29 2c 73 21 3d 3d 69 3f 28 6f 3d 45 72 28 29 2c 6f 21 3d 3d 69 3f 28 41 6e 3d 74 2c 6e 3d 70 28 6e 29 2c 74 3d 6e 29 3a 28 4c 6e 3d 74 2c 74 3d 69 29 29 3a 28 4c 6e 3d 74 2c 74 3d 69 29 29 3a 28 4c 6e 3d 74 2c 74 3d 69 29 7d 65 6c 73 65 20 4c 6e 3d 74 2c 74 3d Data Ascii: (Ln=t,t=i)):(Ln=t,t=i)}else Ln=t,t=i;if(t===i){t=Ln,n=$n();if(n!==i){r=[],s=Nr();while(s!==i)r.push(s),s=Nr();r!==i?(e.charCodeAt(Ln)===47?(s=c,Ln++):(s=i,Dn===0&&Rn(h)),s!==i?(o=Er(),o!==i?(An=t,n=p(n),t=n):(Ln=t,t=i)):(Ln=t,t=i)):(Ln=t,t=i)}else Ln=t,t=
2024-12-05 18:04:49 UTC	7053	IN	Data Raw: 22 2c 76 61 6c 75 65 3a 22 7b 21 22 2c 64 65 73 63 72 69 70 74 69 6f 6e 3a 27 22 7b 21 22 27 7d 2c 6e 6e 3d 22 21 7d 22 2c 72 6e 3d 7b 74 79 70 65 3a 22 6c 69 74 65 72 61 6c 22 2c 76 61 6c 75 65 3a 22 21 7d 22 2c 64 65 73 63 72 69 70 74 69 6f 6e 3a 27 22 21 7d 22 27 7d 2c 73 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6b 72 28 5b 22 63 6f 6d 6d 65 6e 74 22 2c 65 2e 6a 6f 69 6e 28 22 22 29 5d 29 7d 2c 6f 6e 3d 2f 5e 5b 23 3f 5c 5e 3e 3c 2b 25 3a 40 5c 2f 7e 25 5d 2f 2c 75 6e 3d 7b 74 79 70 65 3a 22 63 6c 61 73 73 22 2c 76 61 6c 75 65 3a 22 5b 23 3f 5e 3e 3c 2b 25 3a 40 2f 7e 25 5d 22 2c 64 65 73 63 72 69 70 74 69 6f 6e 3a 22 5b 23 3f 5e 3e 3c 2b 25 3a 40 2f 7e 25 5d 22 7d 2c 61 6e 3d 22 7b 22 2c 66 6e 3d 7b 74 79 70 65 3a 22 6c 69 74 65 Data Ascii: ",value:"{!",description:'"{!"'},nn="!}",rn={type:"literal",value:"!}",description:'"!}"'},sn=function(e){return kr(["comment",e.join("")])},on=/^[#?\^><+%:@\/~%]/,un={type:"class",value:"[#?^><+%:@/~%]",description:"[#?^><+%:@/~%]"},an="{",fn={type:"lite

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.6	49764	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:48 UTC	374	OUT	GET /webcaptcha/ngrlCaptcha.min.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:49 UTC	684	IN	HTTP/1.1 200 OK Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:04:49 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6697f682-5a55" Expires: Thu, 05 Dec 2024 19:04:49 GMT Last-Modified: Wed, 17 Jul 2024 16:51:14 GMT Paypal-Debug-Id: 12e4091c01e73 Server: ECAcc (lhd/3597) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-000000000000000000012e4091c01e73-51d8654737e0dd92-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 23125 Connection: close
2024-12-05 18:04:49 UTC	16383	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 61 3d 74 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 61 2e 65 78 70 6f 72 74 73 2c 61 2c 61 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 61 2e 6c 3d 21 30 2c 61 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 65 2c 6e 2e 63 3d 74 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 6e 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 72 7d 29 7d 2c 6e 2e 72 3d 66 75 6e Data Ascii: !function(e){var t={};function n(r){if(t[r])return t[r].exports;var a=t[r]={i:r,l:!1,exports:{}};return e[r].call(a.exports,a,a.exports,n),a.l=!0,a.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=fun
2024-12-05 18:04:49 UTC	6742	IN	Data Raw: 6c 65 64 3d 21 30 29 7d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 61 75 74 6f 73 75 62 6d 69 74 26 26 21 30 3d 3d 3d 61 75 74 6f 73 75 62 6d 69 74 3f 28 61 2e 74 72 69 67 67 65 72 43 75 73 74 6f 6d 54 72 61 63 6b 69 6e 67 28 7b 61 64 73 43 61 70 74 63 68 61 3a 22 73 69 6c 65 6e 74 22 7d 29 2c 6e 28 29 29 3a 28 68 3f 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 6c 69 63 6b 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 61 2e 74 72 69 67 67 65 72 43 75 73 74 6f 6d 54 72 61 63 6b 69 6e 67 28 7b 61 64 73 43 61 70 74 63 68 61 3a 22 72 65 63 61 70 74 63 68 61 22 7d 29 2c 6e 28 29 2c 74 2e 6f 6e 28 22 63 68 61 6c 6c 65 6e 67 65 53 6f 6c 76 65 64 22 2c 66 75 6e 63 74 69 6f 6e Data Ascii: led=!0)}"undefined"!=typeof autosubmit&&!0===autosubmit?(a.triggerCustomTracking({adsCaptcha:"silent"}),n()):(h?e.addEventListener("click",function(e){e.preventDefault(),a.triggerCustomTracking({adsCaptcha:"recaptcha"}),n(),t.on("challengeSolved",function

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.6	49773	151.101.67.1	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:49 UTC	1416	OUT	GET /ts?v=1.9.5&t=1733421883562&g=300&e=ac&tsrce=unp&ppid=RT000186&space_key=SKCPAD&utm_source=unp&utm_medium=email&utm_campaign=RT000186&utm_unptid=3bf303f1-b31d-11ef-81c6-bffe125023d8&cnac=US&rsta=en_US(en-US)&unptid=3bf303f1-b31d-11ef-81c6-bffe125023d8&calc=f7859995fbf4b&unp_tpcid=requestmoney-notifications-requestee&page=main%3Aemail%3ART000186&pgrp=main%3Aemail&s=ci&mail=sys&appVersion=1.294.0&xt=145585%2C150948%2C104038&link_ref=www.paypal.com_signin&event_name=external_deep_link_processed HTTP/1.1 Host: t.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTczMzQyMTg4MTQ4MiIsImwiOiIwIiwibSI6IjAifQ; l7_az=dcg01.phx; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352; datadome=Fs5MmB0JLdw5hCSGAmtvwdro2EIMrpyZoEKRvW~XxZ2c~hmw~iHaVACWMnscsHbkmlhxsh0aESsOTcLR3dIWEgraKwQ9F_jjSv2agvz3e2Q7qEqPf4IlaH6_FUYKbme5; ts=vreXpYrS%3D1764957888%26vteXpYrS%3D1733423688%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew
2024-12-05 18:04:50 UTC	1360	IN	HTTP/1.1 200 OK Connection: close Access-Control-Expose-Headers: Server-Timing CORRELATION-ID: ef62b9428c46a Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Type: image/gif Expires: Thu, 05 Dec 2024 18:04:50 GMT P3p: CP="CAO IND OUR SAM UNI STA COR COM" Paypal-Debug-Id: ef62b9428c46a Pragma: no-cache Set-Cookie: ts=vreXpYrS%3D1764957890%26vteXpYrS%3D1733423690%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew;Expires=Fri, 05 Dec 2025 18:04:50 GMT;domain=.paypal.com;path=/;secure;HttpOnly;SameSite=None; Set-Cookie: ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352;Expires=Fri, 05 Dec 2025 18:04:50 GMT;domain=.paypal.com;path=/;secure;SameSite=None; Traceparent: 00-0000000000000000000ef62b9428c46a-b92b85a4d05bbf07-01 Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Date: Thu, 05 Dec 2024 18:04:50 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Served-By: cache-iad-kcgs7200100-IAD, cache-nyc-kteb1890035-NYC X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1733421890.048571,VS0,VE98 vary: Accept-Encoding Server-Timing: "traceparent;desc="00-0000000000000000000ef62b9428c46a-a46c0701f6d5e236-01"";content-encoding;desc="",x-cdn;desc="fastly" Timing-Allow-Origin: * transfer-encoding: chunked
2024-12-05 18:04:50 UTC	4	IN	Data Raw: 32 61 0d 0a Data Ascii: 2a
2024-12-05 18:04:50 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 01 01 32 00 3b Data Ascii: GIF89a!,2;
2024-12-05 18:04:50 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.6	49772	18.66.161.97	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:49 UTC	928	OUT	GET /js/ HTTP/1.1 Host: ddbm2.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTczMzQyMTg4MTQ4MiIsImwiOiIwIiwibSI6IjAifQ; l7_az=dcg01.phx; ts=vreXpYrS%3D1764957881%26vteXpYrS%3D1733423681%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352; datadome=Fs5MmB0JLdw5hCSGAmtvwdro2EIMrpyZoEKRvW~XxZ2c~hmw~iHaVACWMnscsHbkmlhxsh0aESsOTcLR3dIWEgraKwQ9F_jjSv2agvz3e2Q7qEqPf4IlaH6_FUYKbme5
2024-12-05 18:04:50 UTC	524	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html;charset=iso-8859-1 Content-Length: 319 Connection: close Date: Thu, 05 Dec 2024 18:04:50 GMT Cache-Control: must-revalidate,no-cache,no-store X-Cache: Error from cloudfront Via: 1.1 4214f1deb3d2a013e97687dc6dcb5be0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH52-C1 X-Amz-Cf-Id: xTKUlkaZ6ulGGhJs8grkZG2A63HydKpfAHExqsCjx-Mf4CpKdOfjCA== X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Vary: Origin
2024-12-05 18:04:50 UTC	319	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 3c 2f 68 32 3e 0a 3c 70 3e 50 72 6f 62 6c 65 6d 20 61 63 63 65 73 73 69 6e 67 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 20 52 65 61 73 6f 6e 3a 0a 3c 70 72 65 3e 20 20 20 20 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 70 72 Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405</title></title></head><body><h2>HTTP ERROR 405</h2><p>Problem accessing this resource. Reason:<pre> HTTP method GET is not supported by this URL</pr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.6	49770	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:50 UTC	578	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/core/nougat.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:51 UTC	790	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:04:50 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6737ef18-9b3" Expires: Fri, 05 Dec 2025 18:04:50 GMT Last-Modified: Sat, 16 Nov 2024 01:02:16 GMT Paypal-Debug-Id: e81745789613f Server: ECAcc (lhd/3595) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000e81745789613f-d26269e48de18176-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 2483 Connection: close
2024-12-05 18:04:51 UTC	2483	IN	Data Raw: 64 65 66 69 6e 65 28 22 6e 65 77 67 61 74 22 2c 5b 22 6a 71 75 65 72 79 22 2c 22 75 6e 64 65 72 73 63 6f 72 65 22 2c 22 64 75 73 74 6a 73 2d 6c 69 6e 6b 65 64 69 6e 22 2c 22 64 75 73 74 2d 6d 61 6b 61 72 61 2d 68 65 6c 70 65 72 73 22 2c 22 64 75 73 74 68 65 6c 70 65 72 73 2d 73 75 70 70 6c 65 6d 65 6e 74 22 2c 22 64 75 73 74 6d 6f 74 65 73 2d 69 74 65 72 61 74 65 22 2c 22 70 75 6c 76 75 73 2d 70 72 6f 76 69 64 65 22 2c 22 64 75 73 74 6a 73 2d 68 65 6c 70 65 72 73 22 2c 22 5f 6c 61 6e 67 75 61 67 65 70 61 63 6b 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 74 2c 6e 29 7b 69 66 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 74 65 72 29 72 65 74 75 72 6e 20 65 2e 66 69 6c 74 65 72 28 74 29 Data Ascii: define("newgat",["jquery","underscore","dustjs-linkedin","dust-makara-helpers","dusthelpers-supplement","dustmotes-iterate","pulvus-provide","dustjs-helpers","_languagepack"],function(e,t,n,r){function u(e,t,n){if(Array.prototype.filter)return e.filter(t)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.6	49771	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:50 UTC	573	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/router.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:51 UTC	790	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:04:50 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6737ef17-4cc" Expires: Fri, 05 Dec 2025 18:04:50 GMT Last-Modified: Sat, 16 Nov 2024 01:02:15 GMT Paypal-Debug-Id: 60ef7b5f28cf2 Server: ECAcc (lhd/35FB) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-000000000000000000060ef7b5f28cf2-18d543d6ddf101d6-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 1228 Connection: close
2024-12-05 18:04:51 UTC	1228	IN	Data Raw: 64 65 66 69 6e 65 28 5b 22 6e 65 77 67 61 74 22 2c 22 6a 71 75 65 72 79 22 2c 22 62 61 63 6b 62 6f 6e 65 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 5b 22 69 6e 6a 65 63 74 49 66 72 61 6d 65 54 65 73 74 22 5d 2c 69 2c 73 2c 6f 2c 75 3b 72 65 74 75 72 6e 20 69 3d 6e 2e 52 6f 75 74 65 72 2e 65 78 74 65 6e 64 28 7b 72 6f 75 74 65 73 3a 7b 22 22 3a 22 73 68 6f 77 4c 61 6e 64 69 6e 67 22 2c 22 3f 2a 71 75 65 72 79 53 74 72 69 6e 67 22 3a 22 73 68 6f 77 4c 61 6e 64 69 6e 67 22 2c 22 69 6e 6a 65 63 74 2f 2a 71 75 65 72 79 53 74 72 69 6e 67 22 3a 22 73 68 6f 77 4c 61 6e 64 69 6e 67 22 2c 61 75 74 68 6f 72 69 7a 65 3a 22 73 68 6f 77 4c 61 6e 64 69 6e 67 22 2c 22 61 75 74 68 6f 72 69 7a 65 3f 2a Data Ascii: define(["newgat","jquery","backbone"],function(e,t,n){"use strict";var r=["injectIframeTest"],i,s,o,u;return i=n.Router.extend({routes:{"":"showLanding","?queryString":"showLanding","inject/queryString":"showLanding",authorize:"showLanding","authorize?*

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.6	49778	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:50 UTC	584	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/widgets/analytics.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:51 UTC	796	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:04:50 GMT DC: ccg11-origin-www-1.paypal.com Etag: "6737ef1a-3d5+br+ident" Expires: Fri, 05 Dec 2025 18:04:50 GMT Last-Modified: Sat, 16 Nov 2024 01:02:18 GMT Paypal-Debug-Id: a1053b5757c62 Server: ECAcc (lhd/3585) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000a1053b5757c62-38fa3fd4665235ef-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 981 Connection: close
2024-12-05 18:04:51 UTC	981	IN	Data Raw: 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 2c 22 42 61 73 65 56 69 65 77 22 2c 22 6e 65 77 67 61 74 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 74 2e 65 78 74 65 6e 64 28 7b 65 6c 3a 22 62 6f 64 79 22 2c 65 76 65 6e 74 73 3a 7b 22 63 6c 69 63 6b 20 61 5b 64 61 74 61 2d 70 61 67 65 6e 61 6d 65 5d 2c 20 69 6e 70 75 74 5b 64 61 74 61 2d 70 61 67 65 6e 61 6d 65 5d 2c 20 6c 61 62 65 6c 5b 64 61 74 61 2d 70 61 67 65 6e 61 6d 65 5d 22 3a 22 74 72 61 63 6b 4c 69 6e 6b 22 7d 2c 74 72 61 63 6b 4c 69 6e 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 65 28 74 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 29 2c 72 3d 6e 2e 61 74 74 72 28 22 64 61 74 61 2d 70 61 67 65 6e 61 6d 65 22 29 Data Ascii: define(["jquery","BaseView","newgat"],function(e,t,n){"use strict";var r=t.extend({el:"body",events:{"click a[data-pagename], input[data-pagename], label[data-pagename]":"trackLink"},trackLink:function(t){var n=e(t.currentTarget),r=n.attr("data-pagename")

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.6	49779	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:50 UTC	587	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/view/mainContentView.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:51 UTC	792	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:04:50 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6737ef1a-3198" Expires: Fri, 05 Dec 2025 18:04:50 GMT Last-Modified: Sat, 16 Nov 2024 01:02:18 GMT Paypal-Debug-Id: b209a03ca3fe4 Server: ECAcc (lhd/35E6) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000b209a03ca3fe4-4cd3bdd512c7387f-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 12696 Connection: close
2024-12-05 18:04:51 UTC	12696	IN	Data Raw: 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 2c 22 62 61 63 6b 62 6f 6e 65 22 2c 22 6e 65 77 67 61 74 22 2c 22 70 61 67 65 56 69 65 77 22 2c 22 70 6f 73 74 4d 65 73 73 61 67 65 22 2c 22 61 75 74 68 63 61 70 74 63 68 61 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 69 2c 73 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6f 3d 72 2e 65 78 74 65 6e 64 28 7b 65 6c 3a 22 23 6d 61 69 6e 22 2c 72 6c 6f 67 49 64 73 3a 5b 5d 2c 4c 4f 41 44 49 4e 47 3a 22 6c 6f 61 64 69 6e 67 22 2c 63 75 72 72 65 6e 74 56 69 65 77 54 65 6d 70 6c 61 74 65 3a 75 6e 64 65 66 69 6e 65 64 2c 70 72 65 76 69 6f 75 73 56 69 65 77 54 65 6d 70 6c 61 74 65 3a 22 6e 75 6c 6c 22 2c 63 75 72 72 65 6e 74 56 69 65 77 3a 22 6e 75 6c 6c 22 2c 70 61 67 65 4e 61 6d 65 3a 22 Data Ascii: define(["jquery","backbone","newgat","pageView","postMessage","authcaptcha"],function(e,t,n,r,i,s){"use strict";var o=r.extend({el:"#main",rlogIds:[],LOADING:"loading",currentViewTemplate:undefined,previousViewTemplate:"null",currentView:"null",pageName:"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.6	49777	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:50 UTC	382	OUT	GET /webcaptcha/grcenterprise_v3_static.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:51 UTC	683	IN	HTTP/1.1 200 OK Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:04:50 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"65f1e42c-180e" Expires: Thu, 05 Dec 2024 19:04:50 GMT Last-Modified: Wed, 13 Mar 2024 17:36:44 GMT Paypal-Debug-Id: b3ccb366af5af Server: ECAcc (lhd/35E9) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000b3ccb366af5af-57e51581fae364c4-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 6158 Connection: close
2024-12-05 18:04:51 UTC	6158	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 69 6e 69 74 28 29 20 7b 0a 20 20 20 20 63 6f 6e 73 74 20 6b 65 79 20 3d 20 67 65 74 4c 69 73 74 65 6e 65 72 53 65 61 72 63 68 4b 65 79 28 27 64 61 74 61 2d 6b 65 79 27 29 3b 0a 20 20 20 20 63 6f 6e 73 74 20 73 65 73 73 69 6f 6e 49 64 20 3d 20 67 65 74 4c 69 73 74 65 6e 65 72 53 65 61 72 63 68 4b 65 79 28 27 64 61 74 61 2d 73 65 73 73 69 6f 6e 49 64 27 29 3b 0a 20 20 20 20 63 6f 6e 73 74 20 63 73 72 66 20 3d 20 67 65 74 4c 69 73 74 65 6e 65 72 53 65 61 72 63 68 4b 65 79 28 27 64 61 74 61 2d 63 73 72 66 27 29 3b 0a 20 20 20 20 63 6f 6e 73 74 20 61 63 74 69 6f 6e 20 3d 20 67 65 74 4c 69 73 74 65 6e 65 72 53 65 61 72 63 68 4b 65 79 28 27 64 61 74 61 2d 61 63 74 69 6f 6e 27 29 3b 0a 20 20 Data Ascii: "use strict";function init() { const key = getListenerSearchKey('data-key'); const sessionId = getListenerSearchKey('data-sessionId'); const csrf = getListenerSearchKey('data-csrf'); const action = getListenerSearchKey('data-action');

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.6	49776	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:50 UTC	583	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/lib/jquery-3.7.0.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:51 UTC	793	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:04:50 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6737ef18-1582e" Expires: Fri, 05 Dec 2025 18:04:50 GMT Last-Modified: Sat, 16 Nov 2024 01:02:16 GMT Paypal-Debug-Id: 02b62f404330d Server: ECAcc (lhd/35FB) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-000000000000000000002b62f404330d-ab43c07b79a698aa-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 88110 Connection: close
2024-12-05 18:04:51 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 33 2e 37 2e 30 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 32 33 2d 30 35 2d 31 31 54 31 38 3a 32 39 5a 0a 20 2a 2f 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 79 70 65 6f 66 20 6d Data Ascii: /! jQuery JavaScript Library v3.7.0 * https://jquery.com/ * * Copyright OpenJS Foundation and other contributors * Released under the MIT license * https://jquery.org/license * * Date: 2023-05-11T18:29Z */(function(e,t){"use strict";typeof m
2024-12-05 18:04:51 UTC	16383	IN	Data Raw: 65 6c 73 65 20 66 6f 72 28 72 20 69 6e 20 65 29 69 66 28 74 2e 63 61 6c 6c 28 65 5b 72 5d 2c 72 2c 65 5b 72 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 65 7d 2c 74 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3d 22 22 2c 72 3d 30 2c 69 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 21 69 29 77 68 69 6c 65 28 74 3d 65 5b 72 2b 2b 5d 29 6e 2b 3d 53 2e 74 65 78 74 28 74 29 3b 65 6c 73 65 7b 69 66 28 69 3d 3d 3d 31 7c 7c 69 3d 3d 3d 39 7c 7c 69 3d 3d 3d 31 31 29 72 65 74 75 72 6e 20 65 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3b 69 66 28 69 3d 3d 3d 33 7c 7c 69 3d 3d 3d 34 29 72 65 74 75 72 6e 20 65 2e 6e 6f 64 65 56 61 6c 75 65 7d 72 65 74 75 72 6e 20 6e 7d 2c 6d 61 6b 65 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c Data Ascii: else for(r in e)if(t.call(e[r],r,e[r])===!1)break;return e},text:function(e){var t,n="",r=0,i=e.nodeType;if(!i)while(t=e[r++])n+=S.text(t);else{if(i===1\|\|i===9\|\|i===11)return e.textContent;if(i===3\|\|i===4)return e.nodeValue}return n},makeArray:function(e,
2024-12-05 18:04:51 UTC	2	IN	Data Raw: 65 64 Data Ascii: ed
2024-12-05 18:04:51 UTC	16383	IN	Data Raw: 49 6e 64 65 78 2c 65 2e 73 65 6c 65 63 74 65 64 3d 3d 3d 21 30 7d 2c 65 6d 70 74 79 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 65 3d 65 2e 66 69 72 73 74 43 68 69 6c 64 3b 65 3b 65 3d 65 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 69 66 28 65 2e 6e 6f 64 65 54 79 70 65 3c 36 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 70 61 72 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 72 2e 70 73 65 75 64 6f 73 2e 65 6d 70 74 79 28 65 29 7d 2c 68 65 61 64 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 2e 74 65 73 74 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7d 2c 69 6e 70 75 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 58 2e 74 65 73 74 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7d 2c 62 75 74 74 6f Data Ascii: Index,e.selected===!0},empty:function(e){for(e=e.firstChild;e;e=e.nextSibling)if(e.nodeType<6)return!1;return!0},parent:function(e){return!r.pseudos.empty(e)},header:function(e){return V.test(e.nodeName)},input:function(e){return X.test(e.nodeName)},butto
2024-12-05 18:04:51 UTC	16383	IN	Data Raw: 68 61 6e 64 6c 65 72 73 5b 6e 2b 2b 5d 29 26 26 21 61 2e 69 73 49 6d 6d 65 64 69 61 74 65 50 72 6f 70 61 67 61 74 69 6f 6e 53 74 6f 70 70 65 64 28 29 29 69 66 28 21 61 2e 72 6e 61 6d 65 73 70 61 63 65 7c 7c 73 2e 6e 61 6d 65 73 70 61 63 65 3d 3d 3d 21 31 7c 7c 61 2e 72 6e 61 6d 65 73 70 61 63 65 2e 74 65 73 74 28 73 2e 6e 61 6d 65 73 70 61 63 65 29 29 61 2e 68 61 6e 64 6c 65 4f 62 6a 3d 73 2c 61 2e 64 61 74 61 3d 73 2e 64 61 74 61 2c 72 3d 28 28 53 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 5b 73 2e 6f 72 69 67 54 79 70 65 5d 7c 7c 7b 7d 29 2e 68 61 6e 64 6c 65 7c 7c 73 2e 68 61 6e 64 6c 65 72 29 2e 61 70 70 6c 79 28 69 2e 65 6c 65 6d 2c 75 29 2c 72 21 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 28 61 2e 72 65 73 75 6c 74 3d 72 29 3d 3d 3d 21 31 26 26 28 61 2e Data Ascii: handlers[n++])&&!a.isImmediatePropagationStopped())if(!a.rnamespace\|\|s.namespace===!1\|\|a.rnamespace.test(s.namespace))a.handleObj=s,a.data=s.data,r=((S.event.special[s.origType]\|\|{}).handle\|\|s.handler).apply(i.elem,u),r!==undefined&&(a.result=r)===!1&&(a.
2024-12-05 18:04:51 UTC	16383	IN	Data Raw: 53 2e 66 78 2e 69 6e 74 65 72 76 61 6c 3d 31 33 2c 53 2e 66 78 2e 73 74 61 72 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 70 6e 29 72 65 74 75 72 6e 3b 70 6e 3d 21 30 2c 6d 6e 28 29 7d 2c 53 2e 66 78 2e 73 74 6f 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 70 6e 3d 6e 75 6c 6c 7d 2c 53 2e 66 78 2e 73 70 65 65 64 73 3d 7b 73 6c 6f 77 3a 36 30 30 2c 66 61 73 74 3a 32 30 30 2c 5f 64 65 66 61 75 6c 74 3a 34 30 30 7d 2c 53 2e 66 6e 2e 64 65 6c 61 79 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 74 3d 53 2e 66 78 3f 53 2e 66 78 2e 73 70 65 65 64 73 5b 74 5d 7c 7c 74 3a 74 2c 6e 3d 6e 7c 7c 22 66 78 22 2c 74 68 69 73 2e 71 75 65 75 65 28 6e 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 29 7b 76 61 72 20 69 3d 65 2e 73 65 74 54 69 6d 65 6f 75 74 28 6e Data Ascii: S.fx.interval=13,S.fx.start=function(){if(pn)return;pn=!0,mn()},S.fx.stop=function(){pn=null},S.fx.speeds={slow:600,fast:200,_default:400},S.fn.delay=function(t,n){return t=S.fx?S.fx.speeds[t]\|\|t:t,n=n\|\|"fx",this.queue(n,function(n,r){var i=e.setTimeout(n
2024-12-05 18:04:51 UTC	6193	IN	Data Raw: 70 74 3e 22 29 2e 61 74 74 72 28 65 2e 73 63 72 69 70 74 41 74 74 72 73 7c 7c 7b 7d 29 2e 70 72 6f 70 28 7b 63 68 61 72 73 65 74 3a 65 2e 73 63 72 69 70 74 43 68 61 72 73 65 74 2c 73 72 63 3a 65 2e 75 72 6c 7d 29 2e 6f 6e 28 22 6c 6f 61 64 20 65 72 72 6f 72 22 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 2e 72 65 6d 6f 76 65 28 29 2c 6e 3d 6e 75 6c 6c 2c 65 26 26 69 28 65 2e 74 79 70 65 3d 3d 3d 22 65 72 72 6f 72 22 3f 34 30 34 3a 32 30 30 2c 65 2e 74 79 70 65 29 7d 29 2c 6d 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 5b 30 5d 29 7d 2c 61 62 6f 72 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 26 26 6e 28 29 7d 7d 7d 7d 29 3b 76 61 72 20 73 72 3d 5b 5d 2c 6f 72 3d 2f 28 3d 29 5c 3f 28 3f 3d 26 7c 24 29 7c 5c 3f 5c 3f 2f 3b 53 2e 61 6a 61 78 53 Data Ascii: pt>").attr(e.scriptAttrs\|\|{}).prop({charset:e.scriptCharset,src:e.url}).on("load error",n=function(e){t.remove(),n=null,e&&i(e.type==="error"?404:200,e.type)}),m.head.appendChild(t[0])},abort:function(){n&&n()}}}});var sr=[],or=/(=)\?(?=&\|$)\|\?\?/;S.ajaxS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.6	49780	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:50 UTC	721	OUT	GET /webcaptcha/grcenterprise_v3_static.html HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:51 UTC	679	IN	HTTP/1.1 200 OK Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: text/html Date: Thu, 05 Dec 2024 18:04:51 GMT DC: ccg11-origin-www-1.paypal.com Etag: "6633898b-19bd+gzip+ident" Expires: Thu, 05 Dec 2024 19:04:51 GMT Last-Modified: Thu, 02 May 2024 12:39:39 GMT Paypal-Debug-Id: 3e337e25f1733 Server: ECAcc (lhd/35E9) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000003e337e25f1733-5972509d51136c7e-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 6589 Connection: close
2024-12-05 18:04:51 UTC	6589	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 73 74 79 6c 65 3e 0a 09 09 2e 67 72 65 63 61 70 74 63 68 61 2d 62 61 64 67 65 7b 0a 09 09 09 62 6f 74 74 6f 6d 3a 20 33 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 7d 0a 09 3c 2f 73 74 79 6c 65 3e 0a 09 3c 73 63 72 69 70 74 3e 0a 0a 09 09 76 61 72 20 70 70 5f 6c 6f 63 5f 6d 61 70 20 3d 20 7b 22 61 72 5f 45 47 22 3a 22 61 72 22 2c 22 64 61 5f 44 4b 22 3a 22 64 61 22 2c 22 64 65 5f 44 45 22 3a 22 64 65 22 2c 22 64 65 5f 44 45 5f 41 54 22 3a 22 64 65 2d 41 54 22 2c 22 64 65 5f 44 45 5f 43 48 Data Ascii: <html><head><meta name="viewport" content="width=device-width, initial-scale=1.0"><style>.grecaptcha-badge{bottom: 3px !important;}</style><script>var pp_loc_map = {"ar_EG":"ar","da_DK":"da","de_DE":"de","de_DE_AT":"de-AT","de_DE_CH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.6	49782	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:50 UTC	369	OUT	GET /pa/mi/paypal/latmconf.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:51 UTC	799	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:04:51 GMT DC: ccg11-origin-www-1.paypal.com Etag: "6735ac2d-3ac5+ident" Expires: Thu, 05 Dec 2024 19:04:51 GMT Last-Modified: Thu, 14 Nov 2024 07:52:13 GMT Paypal-Debug-Id: 8ca3f04ae1eca Server: ECAcc (lhd/35E2) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000008ca3f04ae1eca-7b6be631e999b634-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 15045 Connection: close
2024-12-05 18:04:51 UTC	15045	IN	Data Raw: 2f 2a 21 20 32 30 32 34 20 64 6c 2d 70 70 2d 6c 61 74 6d 40 70 61 79 70 61 6c 2e 63 6f 6d 20 76 65 72 28 35 2e 31 2e 31 29 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 6e 29 7b 28 6e 75 6c 6c 3d 3d 6e 7c 7c 6e 3e 65 2e 6c 65 6e 67 74 68 29 26 26 28 6e 3d 65 2e 6c 65 6e 67 74 68 29 3b 66 6f 72 28 76 61 72 20 6f 3d 30 2c 61 3d 41 72 72 61 79 28 6e 29 3b 6f 3c 6e 3b 6f 2b 2b 29 61 5b 6f 5d 3d 65 5b 6f 5d 3b 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 72 65 74 75 72 6e 20 65 7d 28 6e 29 7c 7c 66 75 Data Ascii: /! 2024 dl-pp-latm@paypal.com ver(5.1.1) /!function(){"use strict";!function(){function e(e,n){(null==n\|\|n>e.length)&&(n=e.length);for(var o=0,a=Array(n);o<n;o++)a[o]=e[o];return a}function n(n,o){return function(e){if(Array.isArray(e))return e}(n)\|\|fu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.6	49783	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:50 UTC	380	OUT	GET /martech/tm/paypal/mktgtagmanager.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:51 UTC	795	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:04:51 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"67042d91-3eb4" Expires: Thu, 05 Dec 2024 19:04:51 GMT Last-Modified: Mon, 07 Oct 2024 18:50:57 GMT Paypal-Debug-Id: 43977cf5beaba Server: ECAcc (lhd/35D1) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-000000000000000000043977cf5beaba-bf7373f9bbb8911f-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 16052 Connection: close
2024-12-05 18:04:51 UTC	16052	IN	Data Raw: 2f 2a 40 20 32 30 32 34 20 50 61 79 50 61 6c 20 28 76 31 2e 30 2e 31 29 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 66 28 74 29 7b 69 66 28 21 74 7c 7c 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 21 3d 3d 4f 62 6a 65 63 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 21 3d 3d 41 72 72 61 79 29 72 65 74 75 72 6e 20 74 3b 76 61 72 20 65 2c 6e 3d 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 3b 66 6f 72 28 65 20 69 6e 20 74 29 6e 5b 65 5d 3d 66 28 74 5b 65 5d 29 3b 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 73 28 74 2c 65 29 7b 76 61 72 20 6e 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 26 26 28 6e 3d 74 2e 61 70 70 6c 79 28 65 7c 7c 74 68 69 73 2c Data Ascii: /@ 2024 PayPal (v1.0.1) /!function(){"use strict";function f(t){if(!t\|\|t.constructor!==Object&&t.constructor!==Array)return t;var e,n=t.constructor();for(e in t)n[e]=f(t[e]);return n}function s(t,e){var n;return function(){return t&&(n=t.apply(e\|\|this,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.6	49787	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:51 UTC	588	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/lib/underscore-1.13.6.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:51 UTC	792	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:04:51 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6737ef18-4d5f" Expires: Fri, 05 Dec 2025 18:04:51 GMT Last-Modified: Sat, 16 Nov 2024 01:02:16 GMT Paypal-Debug-Id: da5f9cc121722 Server: ECAcc (lhd/35C7) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000da5f9cc121722-9f60941d6d26c99b-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 19807 Connection: close
2024-12-05 18:04:51 UTC	16383	IN	Data Raw: 2f 2f 20 20 20 20 20 28 63 29 20 32 30 30 39 2d 32 30 32 32 20 4a 65 72 65 6d 79 20 41 73 68 6b 65 6e 61 73 2c 20 4a 75 6c 69 61 6e 20 47 6f 6e 67 67 72 69 6a 70 2c 20 61 6e 64 20 44 6f 63 75 6d 65 6e 74 43 6c 6f 75 64 20 61 6e 64 20 49 6e 76 65 73 74 69 67 61 74 69 76 65 20 52 65 70 6f 72 74 65 72 73 20 26 20 45 64 69 74 6f 72 73 0a 0a 2f 2f 20 20 20 20 20 55 6e 64 65 72 73 63 6f 72 65 20 6d 61 79 20 62 65 20 66 72 65 65 6c 79 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3d 3d 22 6f 62 6a 65 63 74 22 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 6d 6f 64 75 6c 65 Data Ascii: // (c) 2009-2022 Jeremy Ashkenas, Julian Gonggrijp, and DocumentCloud and Investigative Reporters & Editors// Underscore may be freely distributed under the MIT license.(function(e,t){typeof exports=="object"&&typeof module!="undefined"?module
2024-12-05 18:04:52 UTC	3424	IN	Data Raw: 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 42 69 6e 64 20 6d 75 73 74 20 62 65 20 63 61 6c 6c 65 64 20 6f 6e 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 76 61 72 20 72 3d 77 28 66 75 6e 63 74 69 6f 6e 28 69 29 7b 72 65 74 75 72 6e 20 53 6e 28 65 2c 72 2c 74 2c 74 68 69 73 2c 6e 2e 63 6f 6e 63 61 74 28 69 29 29 7d 29 3b 72 65 74 75 72 6e 20 72 7d 29 2c 4e 6e 3d 51 28 72 74 29 2c 6b 6e 3d 77 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 3d 43 6e 28 74 2c 21 31 2c 21 31 29 3b 76 61 72 20 6e 3d 74 2e 6c 65 6e 67 74 68 3b 69 66 28 6e 3c 31 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 62 69 6e 64 41 6c 6c 20 6d 75 73 74 20 62 65 20 70 61 73 73 65 64 20 66 75 6e 63 74 69 6f 6e 20 6e 61 6d 65 73 22 29 3b 77 68 69 6c 65 28 6e 2d Data Ascii: ))throw new TypeError("Bind must be called on a function");var r=w(function(i){return Sn(e,r,t,this,n.concat(i))});return r}),Nn=Q(rt),kn=w(function(e,t){t=Cn(t,!1,!1);var n=t.length;if(n<1)throw new Error("bindAll must be passed function names");while(n-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.6	49788	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:51 UTC	439	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/browser_modules/dustjs-linkedin/dist/dust-full.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:51 UTC	792	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:04:51 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6737ef18-9b8c" Expires: Fri, 05 Dec 2025 18:04:51 GMT Last-Modified: Sat, 16 Nov 2024 01:02:16 GMT Paypal-Debug-Id: 02b62f46403a9 Server: ECAcc (lhd/35F9) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-000000000000000000002b62f46403a9-f37761ce0b0bcd6f-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 39820 Connection: close
2024-12-05 18:04:51 UTC	16383	IN	Data Raw: 2f 2a 21 20 64 75 73 74 6a 73 2d 6c 69 6e 6b 65 64 69 6e 20 2d 20 76 33 2e 30 2e 30 0a 2a 20 68 74 74 70 3a 2f 2f 64 75 73 74 6a 73 2e 63 6f 6d 2f 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 32 31 20 41 6c 65 6b 73 61 6e 64 65 72 20 57 69 6c 6c 69 61 6d 73 3b 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 2a 2f 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 79 70 65 6f 66 20 64 65 66 69 6e 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 64 65 66 69 6e 65 2e 61 6d 64 26 26 64 65 66 69 6e 65 2e 61 6d 64 2e 64 75 73 74 3d 3d 3d 21 30 3f 64 65 66 69 6e 65 28 22 64 75 73 74 2e 63 6f 72 65 22 2c 5b 5d 2c 74 29 3a 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3d 3d 22 6f 62 6a 65 63 74 22 3f 6d 6f 64 Data Ascii: /! dustjs-linkedin - v3.0.0 http://dustjs.com/* Copyright (c) 2021 Aleksander Williams; Released under the MIT License */(function(e,t){typeof define=="function"&&define.amd&&define.amd.dust===!0?define("dust.core",[],t):typeof exports=="object"?mod
2024-12-05 18:04:52 UTC	16383	IN	Data Raw: 3a 28 4c 6e 3d 74 2c 74 3d 69 29 29 3a 28 4c 6e 3d 74 2c 74 3d 69 29 7d 65 6c 73 65 20 4c 6e 3d 74 2c 74 3d 69 3b 69 66 28 74 3d 3d 3d 69 29 7b 74 3d 4c 6e 2c 6e 3d 24 6e 28 29 3b 69 66 28 6e 21 3d 3d 69 29 7b 72 3d 5b 5d 2c 73 3d 4e 72 28 29 3b 77 68 69 6c 65 28 73 21 3d 3d 69 29 72 2e 70 75 73 68 28 73 29 2c 73 3d 4e 72 28 29 3b 72 21 3d 3d 69 3f 28 65 2e 63 68 61 72 43 6f 64 65 41 74 28 4c 6e 29 3d 3d 3d 34 37 3f 28 73 3d 63 2c 4c 6e 2b 2b 29 3a 28 73 3d 69 2c 44 6e 3d 3d 3d 30 26 26 52 6e 28 68 29 29 2c 73 21 3d 3d 69 3f 28 6f 3d 45 72 28 29 2c 6f 21 3d 3d 69 3f 28 41 6e 3d 74 2c 6e 3d 70 28 6e 29 2c 74 3d 6e 29 3a 28 4c 6e 3d 74 2c 74 3d 69 29 29 3a 28 4c 6e 3d 74 2c 74 3d 69 29 29 3a 28 4c 6e 3d 74 2c 74 3d 69 29 7d 65 6c 73 65 20 4c 6e 3d 74 2c 74 Data Ascii: :(Ln=t,t=i)):(Ln=t,t=i)}else Ln=t,t=i;if(t===i){t=Ln,n=$n();if(n!==i){r=[],s=Nr();while(s!==i)r.push(s),s=Nr();r!==i?(e.charCodeAt(Ln)===47?(s=c,Ln++):(s=i,Dn===0&&Rn(h)),s!==i?(o=Er(),o!==i?(An=t,n=p(n),t=n):(Ln=t,t=i)):(Ln=t,t=i)):(Ln=t,t=i)}else Ln=t,t
2024-12-05 18:04:52 UTC	7054	IN	Data Raw: 6c 22 2c 76 61 6c 75 65 3a 22 7b 21 22 2c 64 65 73 63 72 69 70 74 69 6f 6e 3a 27 22 7b 21 22 27 7d 2c 6e 6e 3d 22 21 7d 22 2c 72 6e 3d 7b 74 79 70 65 3a 22 6c 69 74 65 72 61 6c 22 2c 76 61 6c 75 65 3a 22 21 7d 22 2c 64 65 73 63 72 69 70 74 69 6f 6e 3a 27 22 21 7d 22 27 7d 2c 73 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6b 72 28 5b 22 63 6f 6d 6d 65 6e 74 22 2c 65 2e 6a 6f 69 6e 28 22 22 29 5d 29 7d 2c 6f 6e 3d 2f 5e 5b 23 3f 5c 5e 3e 3c 2b 25 3a 40 5c 2f 7e 25 5d 2f 2c 75 6e 3d 7b 74 79 70 65 3a 22 63 6c 61 73 73 22 2c 76 61 6c 75 65 3a 22 5b 23 3f 5e 3e 3c 2b 25 3a 40 2f 7e 25 5d 22 2c 64 65 73 63 72 69 70 74 69 6f 6e 3a 22 5b 23 3f 5e 3e 3c 2b 25 3a 40 2f 7e 25 5d 22 7d 2c 61 6e 3d 22 7b 22 2c 66 6e 3d 7b 74 79 70 65 3a 22 6c 69 74 Data Ascii: l",value:"{!",description:'"{!"'},nn="!}",rn={type:"literal",value:"!}",description:'"!}"'},sn=function(e){return kr(["comment",e.join("")])},on=/^[#?\^><+%:@\/~%]/,un={type:"class",value:"[#?^><+%:@/~%]",description:"[#?^><+%:@/~%]"},an="{",fn={type:"lit

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.6	49795	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:53 UTC	576	OUT	GET /pa/3pjs/tl/6.4.65/patleaf.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.paypal.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:53 UTC	801	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:04:53 GMT DC: ccg11-origin-www-1.paypal.com Etag: "6735ac2d-267db+ident" Expires: Thu, 05 Dec 2024 19:04:53 GMT Last-Modified: Thu, 14 Nov 2024 07:52:13 GMT Paypal-Debug-Id: 00ad561ff8f4d Server: ECAcc (lhd/35C9) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-000000000000000000000ad561ff8f4d-9cda0a0444205ecc-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 157659 Connection: close
2024-12-05 18:04:53 UTC	16383	IN	Data Raw: 69 66 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 77 69 6e 64 6f 77 2e 70 61 6b 6f 3d 74 28 29 7d 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 69 28 73 2c 68 2c 6c 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 69 66 28 21 68 5b 65 5d 29 7b 69 66 28 21 73 5b 65 5d 29 7b 76 61 72 20 72 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 26 26 72 65 71 75 69 72 65 3b 69 66 28 21 74 26 26 72 29 72 65 74 75 72 6e 20 72 28 65 2c 21 30 29 3b 69 66 28 5f 29 72 65 74 75 72 6e 20 5f 28 65 2c 21 30 29 3b 74 68 72 6f 77 28 72 3d 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 6d 6f 64 75 6c 65 20 27 22 2b 65 2b 22 27 22 29 29 2e 63 6f 64 65 3d 22 4d 4f 44 55 4c 45 5f 4e 4f 54 Data Ascii: if(function(t){window.pako=t()}(function(){return function i(s,h,l){function o(e,t){if(!h[e]){if(!s[e]){var r="function"==typeof require&&require;if(!t&&r)return r(e,!0);if(_)return _(e,!0);throw(r=new Error("Cannot find module '"+e+"'")).code="MODULE_NOT
2024-12-05 18:04:53 UTC	1	IN	Data Raw: 77 Data Ascii: w
2024-12-05 18:04:53 UTC	16383	IN	Data Raw: 72 61 70 3c 3d 30 29 26 26 28 32 3d 3d 3d 6e 2e 77 72 61 70 3f 28 4c 28 6e 2c 32 35 35 26 74 2e 61 64 6c 65 72 29 2c 4c 28 6e 2c 74 2e 61 64 6c 65 72 3e 3e 38 26 32 35 35 29 2c 4c 28 6e 2c 74 2e 61 64 6c 65 72 3e 3e 31 36 26 32 35 35 29 2c 4c 28 6e 2c 74 2e 61 64 6c 65 72 3e 3e 32 34 26 32 35 35 29 2c 4c 28 6e 2c 32 35 35 26 74 2e 74 6f 74 61 6c 5f 69 6e 29 2c 4c 28 6e 2c 74 2e 74 6f 74 61 6c 5f 69 6e 3e 3e 38 26 32 35 35 29 2c 4c 28 6e 2c 74 2e 74 6f 74 61 6c 5f 69 6e 3e 3e 31 36 26 32 35 35 29 2c 4c 28 6e 2c 74 2e 74 6f 74 61 6c 5f 69 6e 3e 3e 32 34 26 32 35 35 29 29 3a 28 4e 28 6e 2c 74 2e 61 64 6c 65 72 3e 3e 3e 31 36 29 2c 4e 28 6e 2c 36 35 35 33 35 26 74 2e 61 64 6c 65 72 29 29 2c 71 28 74 29 2c 30 3c 6e 2e 77 72 61 70 26 26 28 6e 2e 77 72 61 70 3d Data Ascii: rap<=0)&&(2===n.wrap?(L(n,255&t.adler),L(n,t.adler>>8&255),L(n,t.adler>>16&255),L(n,t.adler>>24&255),L(n,255&t.total_in),L(n,t.total_in>>8&255),L(n,t.total_in>>16&255),L(n,t.total_in>>24&255)):(N(n,t.adler>>>16),N(n,65535&t.adler)),q(t),0<n.wrap&&(n.wrap=
2024-12-05 18:04:53 UTC	1	IN	Data Raw: 22 Data Ascii: "
2024-12-05 18:04:53 UTC	16383	IN	Data Raw: 29 3b 72 65 74 75 72 6e 20 75 2e 67 65 74 28 65 29 2e 73 65 74 28 74 2c 6e 29 2c 63 2e 67 65 74 28 65 29 2e 70 75 73 68 28 74 29 2c 6e 7d 28 6e 2c 65 29 29 7d 29 2c 69 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 74 2c 6e 75 6c 6c 29 2c 6f 2e 6f 62 73 65 72 76 65 28 69 2c 70 29 2c 6e 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 4f 28 74 2c 78 28 74 2c 65 29 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 52 28 74 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 6e 2e 73 68 65 65 74 73 3d 5b 5d 2c 68 2e 73 65 74 28 6e 2c 74 29 2c 6d 2e 73 65 74 28 6e 2c 5b 5d 29 2c 79 2e 73 65 74 28 6e 2c 6e 65 77 20 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6f 29 7b 64 6f 63 75 6d 65 6e 74 3f 74 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 Data Ascii: );return u.get(e).set(t,n),c.get(e).push(t),n}(n,e))}),i.insertBefore(t,null),o.observe(i,p),n.forEach(function(t){O(t,x(t,e))})}function R(t){var n=this;n.sheets=[],h.set(n,t),m.set(n,[]),y.set(n,new MutationObserver(function(t,o){document?t.forEach(func
2024-12-05 18:04:53 UTC	16383	IN	Data Raw: 6c 28 65 29 3b 66 6f 72 28 74 3d 30 2c 6f 3d 69 3f 69 2e 6c 65 6e 67 74 68 3a 30 3b 74 3c 6f 3b 74 2b 3d 31 29 69 66 28 69 5b 74 5d 26 26 69 5b 74 5d 3d 3d 3d 45 29 7b 68 3d 21 30 3b 62 72 65 61 6b 7d 7d 29 29 2c 21 68 29 29 26 26 28 6b 2e 69 73 55 6e 6c 6f 61 64 28 65 29 26 26 28 78 3d 22 75 6e 6c 6f 61 64 69 6e 67 22 29 2c 22 63 68 61 6e 67 65 22 21 3d 3d 65 2e 74 79 70 65 7c 7c 21 64 2e 69 73 4c 65 67 61 63 79 49 45 7c 7c 22 63 68 65 63 6b 62 6f 78 22 21 3d 3d 65 2e 74 61 72 67 65 74 2e 65 6c 65 6d 65 6e 74 2e 74 79 70 65 26 26 22 72 61 64 69 6f 22 21 3d 3d 65 2e 74 61 72 67 65 74 2e 65 6c 65 6d 65 6e 74 2e 74 79 70 65 29 29 7b 69 66 28 22 70 72 6f 70 65 72 74 79 63 68 61 6e 67 65 22 3d 3d 3d 65 2e 74 79 70 65 29 7b 69 66 28 22 63 68 65 63 6b 65 64 22 Data Ascii: l(e);for(t=0,o=i?i.length:0;t<o;t+=1)if(i[t]&&i[t]===E){h=!0;break}})),!h))&&(k.isUnload(e)&&(x="unloading"),"change"!==e.type\|\|!d.isLegacyIE\|\|"checkbox"!==e.target.element.type&&"radio"!==e.target.element.type)){if("propertychange"===e.type){if("checked"
2024-12-05 18:04:53 UTC	16383	IN	Data Raw: 72 69 65 6e 74 61 74 69 6f 6e 29 7b 63 61 73 65 22 6c 61 6e 64 73 63 61 70 65 2d 70 72 69 6d 61 72 79 22 3a 63 61 73 65 22 6c 61 6e 64 73 63 61 70 65 2d 73 65 63 6f 6e 64 61 72 79 22 3a 65 3d 39 30 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 65 3d 30 7d 72 65 74 75 72 6e 20 65 7d 2c 63 6c 6f 67 3a 28 77 69 6e 64 6f 77 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2c 74 72 69 6d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 74 6f 53 74 72 69 6e 67 3f 65 2e 74 72 69 6d 3f 65 2e 74 72 69 6d 28 29 3a 65 2e 74 6f 53 74 72 69 6e 67 28 29 2e 72 65 70 6c 61 63 65 28 2f 5e 5c 73 2b 7c 5c 73 2b 24 2f 67 2c 22 22 29 3a 65 7d 2c 6c 74 72 69 6d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 74 6f 53 74 72 69 6e 67 Data Ascii: rientation){case"landscape-primary":case"landscape-secondary":e=90;break;default:e=0}return e},clog:(window,function(){}),trim:function(e){return e&&e.toString?e.trim?e.trim():e.toString().replace(/^\s+\|\s+$/g,""):e},ltrim:function(e){return e&&e.toString
2024-12-05 18:04:53 UTC	16383	IN	Data Raw: 74 54 6f 50 61 72 65 6e 74 4c 69 6e 6b 22 2c 21 30 29 2c 75 3d 6e 2e 67 65 74 56 61 6c 75 65 28 61 2c 22 6c 6f 67 41 74 74 72 69 62 75 74 65 73 22 2c 5b 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 74 29 7b 6c 65 74 20 6e 2c 6f 2c 69 3b 69 66 28 21 65 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 69 66 28 21 28 69 3d 76 6f 69 64 20 30 21 3d 3d 74 3f 74 3a 65 2e 69 64 29 7c 7c 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 69 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 66 6f 72 28 6e 3d 30 2c 6f 3d 73 2e 6c 65 6e 67 74 68 3b 6e 3c 6f 3b 6e 2b 3d 31 29 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 73 5b 6e 5d 29 7b 69 66 28 69 3d 3d 3d 73 5b 6e 5d 29 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 65 6c 73 65 20 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 Data Ascii: tToParentLink",!0),u=n.getValue(a,"logAttributes",[])}function m(e,t){let n,o,i;if(!e)return null;if(!(i=void 0!==t?t:e.id)\|\|"string"!=typeof i)return null;for(n=0,o=s.length;n<o;n+=1)if("string"==typeof s[n]){if(i===s[n])return null}else if("object"==typ
2024-12-05 18:04:53 UTC	4	IN	Data Raw: 72 67 65 74 Data Ascii: rget
2024-12-05 18:04:53 UTC	16383	IN	Data Raw: 28 73 29 3a 73 3d 6e 75 6c 6c 29 2c 65 2e 61 74 74 72 69 62 75 74 65 73 3d 5b 7b 6e 61 6d 65 3a 63 2c 6f 6c 64 56 61 6c 75 65 3a 74 2e 6f 6c 64 56 61 6c 75 65 2c 76 61 6c 75 65 3a 73 3f 73 2e 63 75 72 72 53 74 61 74 65 2e 76 61 6c 75 65 3a 74 2e 74 61 72 67 65 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 63 29 7d 5d 3b 76 61 72 20 75 3d 65 2e 61 74 74 72 69 62 75 74 65 73 5b 30 5d 3b 69 66 28 75 2e 6f 6c 64 56 61 6c 75 65 21 3d 3d 75 2e 76 61 6c 75 65 29 7b 66 6f 72 28 6f 3d 30 2c 69 3d 79 2e 6c 65 6e 67 74 68 2c 61 3d 21 31 3b 6f 3c 69 3b 6f 2b 3d 31 29 69 66 28 73 3d 79 5b 6f 5d 2c 65 2e 69 73 53 61 6d 65 28 73 29 29 7b 73 2e 61 74 74 72 69 62 75 74 65 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 6c 65 74 20 6e 2c 6f 2c 69 2c 72 3b 66 6f 72 28 6e 3d Data Ascii: (s):s=null),e.attributes=[{name:c,oldValue:t.oldValue,value:s?s.currState.value:t.target.getAttribute(c)}];var u=e.attributes[0];if(u.oldValue!==u.value){for(o=0,i=y.length,a=!1;o<i;o+=1)if(s=y[o],e.isSame(s)){s.attributes=function(e,t){let n,o,i,r;for(n=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.6	49796	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:53 UTC	576	OUT	GET /martech/tm/paypal/mktconf.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.paypal.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:53 UTC	797	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:04:53 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"673b68e7-8e2a9" Expires: Thu, 05 Dec 2024 19:04:53 GMT Last-Modified: Mon, 18 Nov 2024 16:18:47 GMT Paypal-Debug-Id: 5a5b15fcc5fdc Server: ECAcc (lhd/3586) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000005a5b15fcc5fdc-4fc7c3425c896b48-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 582313 Connection: close
2024-12-05 18:04:53 UTC	16383	IN	Data Raw: 2f 2a 21 20 32 30 32 34 20 64 6c 2d 70 70 2d 6c 61 74 6d 40 70 61 79 70 61 6c 2e 63 6f 6d 20 76 65 72 28 31 2e 31 2e 30 29 20 2a 2f 0a 2f 2a 0a 2a 20 6d 6b 74 63 6f 6e 66 2e 6a 73 20 76 31 2e 31 2e 30 20 2d 20 31 31 2d 31 38 2d 32 30 32 34 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 32 34 20 64 6c 2d 70 70 2d 6c 61 74 6d 40 70 61 79 70 61 6c 2e 63 6f 6d 0a 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 0a 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 5f 69 74 65 72 61 62 6c 65 54 6f 41 72 72 61 79 4c 69 6d 69 74 28 61 72 72 2c 20 69 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 5f 69 20 3d 20 6e 75 6c 6c 20 3d 3d 20 61 72 Data Ascii: /! 2024 dl-pp-latm@paypal.com ver(1.1.0) //** mktconf.js v1.1.0 - 11-18-2024* Copyright (c) 2024 dl-pp-latm@paypal.com*/(function () { 'use strict'; (function () { function _iterableToArrayLimit(arr, i) { var _i = null == ar
2024-12-05 18:04:53 UTC	1	IN	Data Raw: 64 Data Ascii: d
2024-12-05 18:04:53 UTC	16383	IN	Data Raw: 7c 69 6e 7c 6a 70 7c 6b 72 7c 6d 79 7c 6e 7a 7c 70 68 7c 73 67 7c 74 68 7c 74 77 7c 76 6e 27 2c 20 27 66 65 74 63 68 43 6f 75 6e 74 72 79 27 5d 0a 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 27 76 61 72 73 27 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 73 65 6e 64 5f 74 6f 27 3a 20 27 41 57 2d 39 36 35 33 35 32 38 36 30 2f 6c 46 56 39 43 4f 65 34 76 39 67 42 45 4a 79 37 71 4d 77 44 27 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 2c 20 7b 0a 20 20 20 20 20 20 20 20 20 20 27 6e 61 6d 65 27 3a 20 27 67 61 27 2c 0a 20 20 20 20 20 20 20 20 20 20 27 76 61 72 73 27 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 73 65 6e 64 5f 74 6f 27 3a 20 27 55 41 2d 35 33 33 38 39 37 31 38 2d 31 32 27 2c 0a 20 20 20 20 Data Ascii: \|in\|jp\|kr\|my\|nz\|ph\|sg\|th\|tw\|vn', 'fetchCountry'] }, 'vars': { 'send_to': 'AW-965352860/lFV9COe4v9gBEJy7qMwD' } }, { 'name': 'ga', 'vars': { 'send_to': 'UA-53389718-12',
2024-12-05 18:04:53 UTC	16383	IN	Data Raw: 20 20 20 20 27 64 65 66 61 75 6c 74 56 61 6c 27 3a 20 27 27 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 65 76 65 6e 74 5f 6c 61 62 65 6c 27 3a 20 27 73 74 65 70 20 37 3a 20 65 6e 74 65 72 20 70 65 72 73 6f 6e 61 6c 20 69 6e 66 6f 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 70 61 67 65 5f 70 61 74 68 27 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 27 74 79 70 65 27 3a 20 27 76 61 72 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 27 70 61 74 68 27 3a 20 27 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 27 64 65 66 61 75 6c 74 56 61 6c 27 3a 20 27 27 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 70 61 67 Data Ascii: 'defaultVal': '' }, 'event_label': 'step 7: enter personal info', 'page_path': { 'type': 'var', 'path': 'location.pathname', 'defaultVal': '' }, 'pag
2024-12-05 18:04:53 UTC	16383	IN	Data Raw: 6f 6e 61 6c 3a 70 72 6f 64 75 63 74 3a 64 69 67 69 74 61 6c 2d 77 61 6c 6c 65 74 2d 73 65 6e 64 2d 72 65 63 65 69 76 65 2d 6d 6f 6e 65 79 2f 73 74 61 72 74 2d 73 65 6c 6c 69 6e 67 3a 3a 3a 7c 6d 61 69 6e 3a 6d 6b 74 67 3a 70 65 72 73 6f 6e 61 6c 3a 70 72 6f 64 75 63 74 3a 64 69 67 69 74 61 6c 2d 77 61 6c 6c 65 74 2d 6d 61 6e 61 67 65 2d 6d 6f 6e 65 79 3a 3a 3a 7c 6d 61 69 6e 3a 6d 6b 74 67 3a 70 65 72 73 6f 6e 61 6c 3a 70 72 6f 64 75 63 74 3a 64 69 67 69 74 61 6c 2d 77 61 6c 6c 65 74 2d 77 61 79 73 2d 74 6f 2d 70 61 79 2f 61 64 64 2d 70 61 79 6d 65 6e 74 2d 6d 65 74 68 6f 64 3a 3a 3a 7c 6d 61 69 6e 3a 6d 6b 74 67 3a 70 65 72 73 6f 6e 61 6c 3a 73 65 63 75 72 69 74 79 3a 64 69 67 69 74 61 6c 2d 77 61 6c 6c 65 74 2d 73 65 63 75 72 69 74 79 2d 61 6e 64 2d 70 Data Ascii: onal:product:digital-wallet-send-receive-money/start-selling:::\|main:mktg:personal:product:digital-wallet-manage-money:::\|main:mktg:personal:product:digital-wallet-ways-to-pay/add-payment-method:::\|main:mktg:personal:security:digital-wallet-security-and-p
2024-12-05 18:04:53 UTC	16383	IN	Data Raw: 20 20 20 20 20 20 27 64 65 66 61 75 6c 74 56 61 6c 27 3a 20 27 27 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 2c 20 7b 0a 20 20 20 20 20 20 20 20 20 20 27 6e 61 6d 65 27 3a 20 27 67 61 27 2c 0a 20 20 20 20 20 20 20 20 20 20 27 76 61 72 73 27 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 73 65 6e 64 5f 74 6f 27 3a 20 27 55 41 2d 35 33 33 38 39 37 31 38 2d 31 32 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 68 69 74 54 79 70 65 27 3a 20 27 65 76 65 6e 74 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 65 76 65 6e 74 5f 63 61 74 65 67 6f 72 79 27 3a 20 27 63 6f 6e 73 75 6d 65 72 20 63 72 65 64 69 74 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 65 76 65 6e 74 5f 61 63 74 69 6f 6e 27 3a Data Ascii: 'defaultVal': '' } } }, { 'name': 'ga', 'vars': { 'send_to': 'UA-53389718-12', 'hitType': 'event', 'event_category': 'consumer credit', 'event_action':
2024-12-05 18:04:53 UTC	4	IN	Data Raw: 20 20 20 27 Data Ascii: '
2024-12-05 18:04:53 UTC	16383	IN	Data Raw: 74 79 70 65 27 3a 20 27 66 6e 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 6e 61 6d 65 27 3a 20 27 63 6f 6e 64 69 74 69 6f 6e 61 6c 56 61 6c 75 65 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 61 72 67 73 27 3a 20 5b 27 61 75 7c 63 32 7c 63 6e 7c 68 6b 7c 69 64 7c 69 6e 7c 6a 70 7c 6b 72 7c 6d 79 7c 6e 7a 7c 70 68 7c 73 67 7c 74 68 7c 74 77 7c 76 6e 27 2c 20 27 66 65 74 63 68 43 6f 75 6e 74 72 79 27 5d 0a 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 27 76 61 72 73 27 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 73 65 6e 64 5f 74 6f 27 3a 20 27 41 57 2d 39 36 35 33 35 32 38 36 30 2f 59 49 52 42 43 4b 6a 70 36 2d 41 42 45 4a 79 37 71 4d 77 44 27 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 2c 20 7b 0a Data Ascii: type': 'fn', 'name': 'conditionalValue', 'args': ['au\|c2\|cn\|hk\|id\|in\|jp\|kr\|my\|nz\|ph\|sg\|th\|tw\|vn', 'fetchCountry'] }, 'vars': { 'send_to': 'AW-965352860/YIRBCKjp6-ABEJy7qMwD' } }, {
2024-12-05 18:04:54 UTC	16383	IN	Data Raw: 7c 64 6f 7c 65 63 7c 66 6b 7c 67 64 7c 67 74 7c 67 79 7c 68 6e 7c 6a 6d 7c 6b 6e 7c 6b 79 7c 6c 63 7c 6d 73 7c 6d 78 7c 6e 69 7c 70 61 7c 70 65 7c 70 79 7c 73 72 7c 73 76 7c 74 63 7c 74 74 7c 75 79 7c 76 63 7c 76 65 7c 76 67 27 2c 20 27 66 65 74 63 68 43 6f 75 6e 74 72 79 27 5d 0a 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 27 76 61 72 73 27 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 73 65 6e 64 5f 74 6f 27 3a 20 27 41 57 2d 39 39 33 37 30 31 30 34 35 2f 46 76 37 37 43 49 33 6e 32 70 63 59 45 4c 58 5a 36 74 6b 44 27 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 2c 20 7b 0a 20 20 20 20 20 20 20 20 20 20 27 6e 61 6d 65 27 3a 20 27 67 61 64 73 27 2c 0a 20 20 20 20 20 20 20 20 20 20 27 65 6e 61 62 6c 65 27 Data Ascii: \|do\|ec\|fk\|gd\|gt\|gy\|hn\|jm\|kn\|ky\|lc\|ms\|mx\|ni\|pa\|pe\|py\|sr\|sv\|tc\|tt\|uy\|vc\|ve\|vg', 'fetchCountry'] }, 'vars': { 'send_to': 'AW-993701045/Fv77CI3n2pcYELXZ6tkD' } }, { 'name': 'gads', 'enable'
2024-12-05 18:04:54 UTC	16383	IN	Data Raw: 20 20 20 20 20 20 20 27 76 61 72 73 27 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 73 65 6e 64 5f 74 6f 27 3a 20 27 41 57 2d 39 39 33 37 30 31 30 34 35 2f 58 68 49 34 43 4d 62 51 36 49 41 43 45 4c 58 5a 36 74 6b 44 27 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 2c 20 7b 0a 20 20 20 20 20 20 20 20 20 20 27 6e 61 6d 65 27 3a 20 27 67 61 64 73 27 2c 0a 20 20 20 20 20 20 20 20 20 20 27 65 6e 61 62 6c 65 27 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 74 79 70 65 27 3a 20 27 66 6e 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 6e 61 6d 65 27 3a 20 27 63 6f 6e 64 69 74 69 6f 6e 61 6c 56 61 6c 75 65 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 61 72 67 73 27 3a 20 5b 27 61 64 7c 61 65 7c 61 66 7c 61 6c 7c 61 6d 7c 61 6f 7c Data Ascii: 'vars': { 'send_to': 'AW-993701045/XhI4CMbQ6IACELXZ6tkD' } }, { 'name': 'gads', 'enable': { 'type': 'fn', 'name': 'conditionalValue', 'args': ['ad\|ae\|af\|al\|am\|ao\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.6	49797	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:53 UTC	614	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/browser_modules/dust-makara-helpers/browser.amd.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:53 UTC	791	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:04:53 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6737ef17-116b" Expires: Fri, 05 Dec 2025 18:04:53 GMT Last-Modified: Sat, 16 Nov 2024 01:02:15 GMT Paypal-Debug-Id: 8607a2cd8ed8e Server: ECAcc (lhd/35C5) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000008607a2cd8ed8e-2aba28ff7051934c-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 4459 Connection: close
2024-12-05 18:04:53 UTC	4459	IN	Data Raw: 64 65 66 69 6e 65 28 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 74 5b 72 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 72 2c 6c 6f 61 64 65 64 3a 21 31 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 69 2e 6c 6f 61 64 65 64 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 74 3d 7b 7d 3b 72 65 74 75 72 6e 20 6e 2e 6d 3d 65 2c 6e 2e 63 3d 74 2c 6e 2e 70 3d 22 22 2c 6e 28 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 Data Ascii: define([],function(){return function(e){function n(r){if(t[r])return t[r].exports;var i=t[r]={exports:{},id:r,loaded:!1};return e[r].call(i.exports,i,i.exports,n),i.loaded=!0,i.exports}var t={};return n.m=e,n.c=t,n.p="",n(0)}([function(e,t,n){"use strict"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.6	49798	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:53 UTC	611	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/browser_modules/dusthelpers-supplement/index.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:53 UTC	791	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:04:53 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6737ef17-1ea5" Expires: Fri, 05 Dec 2025 18:04:53 GMT Last-Modified: Sat, 16 Nov 2024 01:02:15 GMT Paypal-Debug-Id: d7a85a1b94a33 Server: ECAcc (lhd/35A5) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000d7a85a1b94a33-c8e3a5fea2514cc8-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 7845 Connection: close
2024-12-05 18:04:53 UTC	7845	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 79 70 65 6f 66 20 64 65 66 69 6e 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 64 65 66 69 6e 65 2e 61 6d 64 26 26 64 65 66 69 6e 65 2e 61 6d 64 2e 64 75 73 74 3d 3d 3d 21 30 3f 64 65 66 69 6e 65 28 5b 22 64 75 73 74 2e 63 6f 72 65 22 5d 2c 74 29 3a 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3d 3d 22 6f 62 6a 65 63 74 22 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 72 65 71 75 69 72 65 28 22 64 75 73 74 6a 73 2d 6c 69 6e 6b 65 64 69 6e 22 29 29 3a 74 28 65 2e 64 75 73 74 29 7d 29 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 20 65 78 74 65 6e 64 28 64 75 73 74 29 7b 66 75 6e 63 74 69 6f 6e 20 74 6f 6b 65 6e 69 7a 65 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 7b 22 28 28 22 3a 31 Data Ascii: (function(e,t){typeof define=="function"&&define.amd&&define.amd.dust===!0?define(["dust.core"],t):typeof exports=="object"?module.exports=t(require("dustjs-linkedin")):t(e.dust)})(this,function extend(dust){function tokenize(t){"use strict";var n={"((":1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.6	49800	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:53 UTC	404	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/core/nougat.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:53 UTC	790	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:04:53 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6737ef18-9b3" Expires: Fri, 05 Dec 2025 18:04:53 GMT Last-Modified: Sat, 16 Nov 2024 01:02:16 GMT Paypal-Debug-Id: e81745789613f Server: ECAcc (lhd/3595) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000e81745789613f-d26269e48de18176-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 2483 Connection: close
2024-12-05 18:04:53 UTC	2483	IN	Data Raw: 64 65 66 69 6e 65 28 22 6e 65 77 67 61 74 22 2c 5b 22 6a 71 75 65 72 79 22 2c 22 75 6e 64 65 72 73 63 6f 72 65 22 2c 22 64 75 73 74 6a 73 2d 6c 69 6e 6b 65 64 69 6e 22 2c 22 64 75 73 74 2d 6d 61 6b 61 72 61 2d 68 65 6c 70 65 72 73 22 2c 22 64 75 73 74 68 65 6c 70 65 72 73 2d 73 75 70 70 6c 65 6d 65 6e 74 22 2c 22 64 75 73 74 6d 6f 74 65 73 2d 69 74 65 72 61 74 65 22 2c 22 70 75 6c 76 75 73 2d 70 72 6f 76 69 64 65 22 2c 22 64 75 73 74 6a 73 2d 68 65 6c 70 65 72 73 22 2c 22 5f 6c 61 6e 67 75 61 67 65 70 61 63 6b 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 74 2c 6e 29 7b 69 66 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 74 65 72 29 72 65 74 75 72 6e 20 65 2e 66 69 6c 74 65 72 28 74 29 Data Ascii: define("newgat",["jquery","underscore","dustjs-linkedin","dust-makara-helpers","dusthelpers-supplement","dustmotes-iterate","pulvus-provide","dustjs-helpers","_languagepack"],function(e,t,n,r){function u(e,t,n){if(Array.prototype.filter)return e.filter(t)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.6	49799	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:53 UTC	399	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/router.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:53 UTC	790	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:04:53 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6737ef17-4cc" Expires: Fri, 05 Dec 2025 18:04:53 GMT Last-Modified: Sat, 16 Nov 2024 01:02:15 GMT Paypal-Debug-Id: 60ef7b5f28cf2 Server: ECAcc (lhd/35FB) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-000000000000000000060ef7b5f28cf2-18d543d6ddf101d6-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 1228 Connection: close
2024-12-05 18:04:53 UTC	1228	IN	Data Raw: 64 65 66 69 6e 65 28 5b 22 6e 65 77 67 61 74 22 2c 22 6a 71 75 65 72 79 22 2c 22 62 61 63 6b 62 6f 6e 65 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 5b 22 69 6e 6a 65 63 74 49 66 72 61 6d 65 54 65 73 74 22 5d 2c 69 2c 73 2c 6f 2c 75 3b 72 65 74 75 72 6e 20 69 3d 6e 2e 52 6f 75 74 65 72 2e 65 78 74 65 6e 64 28 7b 72 6f 75 74 65 73 3a 7b 22 22 3a 22 73 68 6f 77 4c 61 6e 64 69 6e 67 22 2c 22 3f 2a 71 75 65 72 79 53 74 72 69 6e 67 22 3a 22 73 68 6f 77 4c 61 6e 64 69 6e 67 22 2c 22 69 6e 6a 65 63 74 2f 2a 71 75 65 72 79 53 74 72 69 6e 67 22 3a 22 73 68 6f 77 4c 61 6e 64 69 6e 67 22 2c 61 75 74 68 6f 72 69 7a 65 3a 22 73 68 6f 77 4c 61 6e 64 69 6e 67 22 2c 22 61 75 74 68 6f 72 69 7a 65 3f 2a Data Ascii: define(["newgat","jquery","backbone"],function(e,t,n){"use strict";var r=["injectIframeTest"],i,s,o,u;return i=n.Router.extend({routes:{"":"showLanding","?queryString":"showLanding","inject/queryString":"showLanding",authorize:"showLanding","authorize?*

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.6	49801	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:53 UTC	410	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/widgets/analytics.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:53 UTC	796	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:04:53 GMT DC: ccg11-origin-www-1.paypal.com Etag: "6737ef1a-3d5+br+ident" Expires: Fri, 05 Dec 2025 18:04:53 GMT Last-Modified: Sat, 16 Nov 2024 01:02:18 GMT Paypal-Debug-Id: a1053b5757c62 Server: ECAcc (lhd/3585) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000a1053b5757c62-38fa3fd4665235ef-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 981 Connection: close
2024-12-05 18:04:53 UTC	981	IN	Data Raw: 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 2c 22 42 61 73 65 56 69 65 77 22 2c 22 6e 65 77 67 61 74 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 74 2e 65 78 74 65 6e 64 28 7b 65 6c 3a 22 62 6f 64 79 22 2c 65 76 65 6e 74 73 3a 7b 22 63 6c 69 63 6b 20 61 5b 64 61 74 61 2d 70 61 67 65 6e 61 6d 65 5d 2c 20 69 6e 70 75 74 5b 64 61 74 61 2d 70 61 67 65 6e 61 6d 65 5d 2c 20 6c 61 62 65 6c 5b 64 61 74 61 2d 70 61 67 65 6e 61 6d 65 5d 22 3a 22 74 72 61 63 6b 4c 69 6e 6b 22 7d 2c 74 72 61 63 6b 4c 69 6e 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 65 28 74 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 29 2c 72 3d 6e 2e 61 74 74 72 28 22 64 61 74 61 2d 70 61 67 65 6e 61 6d 65 22 29 Data Ascii: define(["jquery","BaseView","newgat"],function(e,t,n){"use strict";var r=t.extend({el:"body",events:{"click a[data-pagename], input[data-pagename], label[data-pagename]":"trackLink"},trackLink:function(t){var n=e(t.currentTarget),r=n.attr("data-pagename")

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.6	49802	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:53 UTC	413	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/view/mainContentView.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:53 UTC	792	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:04:53 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6737ef1a-3198" Expires: Fri, 05 Dec 2025 18:04:53 GMT Last-Modified: Sat, 16 Nov 2024 01:02:18 GMT Paypal-Debug-Id: b209a03ca3fe4 Server: ECAcc (lhd/35E6) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000b209a03ca3fe4-4cd3bdd512c7387f-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 12696 Connection: close
2024-12-05 18:04:53 UTC	12696	IN	Data Raw: 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 2c 22 62 61 63 6b 62 6f 6e 65 22 2c 22 6e 65 77 67 61 74 22 2c 22 70 61 67 65 56 69 65 77 22 2c 22 70 6f 73 74 4d 65 73 73 61 67 65 22 2c 22 61 75 74 68 63 61 70 74 63 68 61 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 69 2c 73 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6f 3d 72 2e 65 78 74 65 6e 64 28 7b 65 6c 3a 22 23 6d 61 69 6e 22 2c 72 6c 6f 67 49 64 73 3a 5b 5d 2c 4c 4f 41 44 49 4e 47 3a 22 6c 6f 61 64 69 6e 67 22 2c 63 75 72 72 65 6e 74 56 69 65 77 54 65 6d 70 6c 61 74 65 3a 75 6e 64 65 66 69 6e 65 64 2c 70 72 65 76 69 6f 75 73 56 69 65 77 54 65 6d 70 6c 61 74 65 3a 22 6e 75 6c 6c 22 2c 63 75 72 72 65 6e 74 56 69 65 77 3a 22 6e 75 6c 6c 22 2c 70 61 67 65 4e 61 6d 65 3a 22 Data Ascii: define(["jquery","backbone","newgat","pageView","postMessage","authcaptcha"],function(e,t,n,r,i,s){"use strict";var o=r.extend({el:"#main",rlogIds:[],LOADING:"loading",currentViewTemplate:undefined,previousViewTemplate:"null",currentView:"null",pageName:"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.6	49804	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:53 UTC	588	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/lib/dustmotes-iterate.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:53 UTC	789	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:04:53 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6737ef18-2c1" Expires: Fri, 05 Dec 2025 18:04:53 GMT Last-Modified: Sat, 16 Nov 2024 01:02:16 GMT Paypal-Debug-Id: f04b9eefd7cae Server: ECAcc (lhd/35B7) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000f04b9eefd7cae-2e74c7830acf12e6-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 705 Connection: close
2024-12-05 18:04:53 UTC	705	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 79 70 65 6f 66 20 64 65 66 69 6e 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 64 65 66 69 6e 65 2e 61 6d 64 26 26 64 65 66 69 6e 65 2e 61 6d 64 2e 64 75 73 74 3d 3d 3d 21 30 3f 64 65 66 69 6e 65 28 5b 22 64 75 73 74 2e 63 6f 72 65 22 5d 2c 74 29 3a 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3d 3d 22 6f 62 6a 65 63 74 22 3f 28 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 72 65 71 75 69 72 65 28 22 64 75 73 74 6a 73 2d 6c 69 6e 6b 65 64 69 6e 22 29 29 2c 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 2e 72 65 67 69 73 74 65 72 57 69 74 68 3d 74 29 3a 74 28 65 2e 64 75 73 74 29 7d 29 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 68 65 6c 70 65 72 73 2e 69 74 65 72 61 74 65 3d 66 Data Ascii: (function(e,t){typeof define=="function"&&define.amd&&define.amd.dust===!0?define(["dust.core"],t):typeof module=="object"?(module.exports=t(require("dustjs-linkedin")),module.exports.registerWith=t):t(e.dust)})(this,function(e){return e.helpers.iterate=f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.6	49805	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:53 UTC	409	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/lib/jquery-3.7.0.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:53 UTC	793	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:04:53 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6737ef18-1582e" Expires: Fri, 05 Dec 2025 18:04:53 GMT Last-Modified: Sat, 16 Nov 2024 01:02:16 GMT Paypal-Debug-Id: 02b62f404330d Server: ECAcc (lhd/35FB) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-000000000000000000002b62f404330d-ab43c07b79a698aa-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 88110 Connection: close
2024-12-05 18:04:53 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 33 2e 37 2e 30 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 32 33 2d 30 35 2d 31 31 54 31 38 3a 32 39 5a 0a 20 2a 2f 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 79 70 65 6f 66 20 6d Data Ascii: /! jQuery JavaScript Library v3.7.0 * https://jquery.com/ * * Copyright OpenJS Foundation and other contributors * Released under the MIT license * https://jquery.org/license * * Date: 2023-05-11T18:29Z */(function(e,t){"use strict";typeof m
2024-12-05 18:04:53 UTC	1	IN	Data Raw: 65 Data Ascii: e
2024-12-05 18:04:54 UTC	16383	IN	Data Raw: 6c 73 65 20 66 6f 72 28 72 20 69 6e 20 65 29 69 66 28 74 2e 63 61 6c 6c 28 65 5b 72 5d 2c 72 2c 65 5b 72 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 65 7d 2c 74 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3d 22 22 2c 72 3d 30 2c 69 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 21 69 29 77 68 69 6c 65 28 74 3d 65 5b 72 2b 2b 5d 29 6e 2b 3d 53 2e 74 65 78 74 28 74 29 3b 65 6c 73 65 7b 69 66 28 69 3d 3d 3d 31 7c 7c 69 3d 3d 3d 39 7c 7c 69 3d 3d 3d 31 31 29 72 65 74 75 72 6e 20 65 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3b 69 66 28 69 3d 3d 3d 33 7c 7c 69 3d 3d 3d 34 29 72 65 74 75 72 6e 20 65 2e 6e 6f 64 65 56 61 6c 75 65 7d 72 65 74 75 72 6e 20 6e 7d 2c 6d 61 6b 65 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 Data Ascii: lse for(r in e)if(t.call(e[r],r,e[r])===!1)break;return e},text:function(e){var t,n="",r=0,i=e.nodeType;if(!i)while(t=e[r++])n+=S.text(t);else{if(i===1\|\|i===9\|\|i===11)return e.textContent;if(i===3\|\|i===4)return e.nodeValue}return n},makeArray:function(e,t
2024-12-05 18:04:54 UTC	16383	IN	Data Raw: 64 49 6e 64 65 78 2c 65 2e 73 65 6c 65 63 74 65 64 3d 3d 3d 21 30 7d 2c 65 6d 70 74 79 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 65 3d 65 2e 66 69 72 73 74 43 68 69 6c 64 3b 65 3b 65 3d 65 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 69 66 28 65 2e 6e 6f 64 65 54 79 70 65 3c 36 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 70 61 72 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 72 2e 70 73 65 75 64 6f 73 2e 65 6d 70 74 79 28 65 29 7d 2c 68 65 61 64 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 2e 74 65 73 74 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7d 2c 69 6e 70 75 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 58 2e 74 65 73 74 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7d 2c 62 75 74 74 Data Ascii: dIndex,e.selected===!0},empty:function(e){for(e=e.firstChild;e;e=e.nextSibling)if(e.nodeType<6)return!1;return!0},parent:function(e){return!r.pseudos.empty(e)},header:function(e){return V.test(e.nodeName)},input:function(e){return X.test(e.nodeName)},butt
2024-12-05 18:04:54 UTC	16383	IN	Data Raw: 2e 68 61 6e 64 6c 65 72 73 5b 6e 2b 2b 5d 29 26 26 21 61 2e 69 73 49 6d 6d 65 64 69 61 74 65 50 72 6f 70 61 67 61 74 69 6f 6e 53 74 6f 70 70 65 64 28 29 29 69 66 28 21 61 2e 72 6e 61 6d 65 73 70 61 63 65 7c 7c 73 2e 6e 61 6d 65 73 70 61 63 65 3d 3d 3d 21 31 7c 7c 61 2e 72 6e 61 6d 65 73 70 61 63 65 2e 74 65 73 74 28 73 2e 6e 61 6d 65 73 70 61 63 65 29 29 61 2e 68 61 6e 64 6c 65 4f 62 6a 3d 73 2c 61 2e 64 61 74 61 3d 73 2e 64 61 74 61 2c 72 3d 28 28 53 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 5b 73 2e 6f 72 69 67 54 79 70 65 5d 7c 7c 7b 7d 29 2e 68 61 6e 64 6c 65 7c 7c 73 2e 68 61 6e 64 6c 65 72 29 2e 61 70 70 6c 79 28 69 2e 65 6c 65 6d 2c 75 29 2c 72 21 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 28 61 2e 72 65 73 75 6c 74 3d 72 29 3d 3d 3d 21 31 26 26 28 61 Data Ascii: .handlers[n++])&&!a.isImmediatePropagationStopped())if(!a.rnamespace\|\|s.namespace===!1\|\|a.rnamespace.test(s.namespace))a.handleObj=s,a.data=s.data,r=((S.event.special[s.origType]\|\|{}).handle\|\|s.handler).apply(i.elem,u),r!==undefined&&(a.result=r)===!1&&(a
2024-12-05 18:04:54 UTC	16383	IN	Data Raw: 2c 53 2e 66 78 2e 69 6e 74 65 72 76 61 6c 3d 31 33 2c 53 2e 66 78 2e 73 74 61 72 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 70 6e 29 72 65 74 75 72 6e 3b 70 6e 3d 21 30 2c 6d 6e 28 29 7d 2c 53 2e 66 78 2e 73 74 6f 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 70 6e 3d 6e 75 6c 6c 7d 2c 53 2e 66 78 2e 73 70 65 65 64 73 3d 7b 73 6c 6f 77 3a 36 30 30 2c 66 61 73 74 3a 32 30 30 2c 5f 64 65 66 61 75 6c 74 3a 34 30 30 7d 2c 53 2e 66 6e 2e 64 65 6c 61 79 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 74 3d 53 2e 66 78 3f 53 2e 66 78 2e 73 70 65 65 64 73 5b 74 5d 7c 7c 74 3a 74 2c 6e 3d 6e 7c 7c 22 66 78 22 2c 74 68 69 73 2e 71 75 65 75 65 28 6e 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 29 7b 76 61 72 20 69 3d 65 2e 73 65 74 54 69 6d 65 6f 75 74 28 Data Ascii: ,S.fx.interval=13,S.fx.start=function(){if(pn)return;pn=!0,mn()},S.fx.stop=function(){pn=null},S.fx.speeds={slow:600,fast:200,_default:400},S.fn.delay=function(t,n){return t=S.fx?S.fx.speeds[t]\|\|t:t,n=n\|\|"fx",this.queue(n,function(n,r){var i=e.setTimeout(
2024-12-05 18:04:54 UTC	6194	IN	Data Raw: 69 70 74 3e 22 29 2e 61 74 74 72 28 65 2e 73 63 72 69 70 74 41 74 74 72 73 7c 7c 7b 7d 29 2e 70 72 6f 70 28 7b 63 68 61 72 73 65 74 3a 65 2e 73 63 72 69 70 74 43 68 61 72 73 65 74 2c 73 72 63 3a 65 2e 75 72 6c 7d 29 2e 6f 6e 28 22 6c 6f 61 64 20 65 72 72 6f 72 22 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 2e 72 65 6d 6f 76 65 28 29 2c 6e 3d 6e 75 6c 6c 2c 65 26 26 69 28 65 2e 74 79 70 65 3d 3d 3d 22 65 72 72 6f 72 22 3f 34 30 34 3a 32 30 30 2c 65 2e 74 79 70 65 29 7d 29 2c 6d 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 5b 30 5d 29 7d 2c 61 62 6f 72 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 26 26 6e 28 29 7d 7d 7d 7d 29 3b 76 61 72 20 73 72 3d 5b 5d 2c 6f 72 3d 2f 28 3d 29 5c 3f 28 3f 3d 26 7c 24 29 7c 5c 3f 5c 3f 2f 3b 53 2e 61 6a 61 78 Data Ascii: ipt>").attr(e.scriptAttrs\|\|{}).prop({charset:e.scriptCharset,src:e.url}).on("load error",n=function(e){t.remove(),n=null,e&&i(e.type==="error"?404:200,e.type)}),m.head.appendChild(t[0])},abort:function(){n&&n()}}}});var sr=[],or=/(=)\?(?=&\|$)\|\?\?/;S.ajax

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.6	49803	172.217.19.227	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:53 UTC	599	OUT	GET /recaptcha/enterprise.js?render=6LdCCOUUAAAAAHTE-Snr6hi4HJGtJk_d1_ce-gWB&hl=en HTTP/1.1 Host: www.recaptcha.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypalobjects.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:54 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Thu, 05 Dec 2024 18:04:53 GMT Date: Thu, 05 Dec 2024 18:04:53 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-05 18:04:54 UTC	641	IN	Data Raw: 37 38 62 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 45 3d 27 65 6e 74 65 72 70 72 69 73 65 27 2c 61 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 2c 67 72 3d 61 5b 45 5d 3d 61 5b 45 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f Data Ascii: 78b/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var E='enterprise',a=w[N]=w[N]\|\|{},gr=a[E]=a[E]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['_
2024-12-05 18:04:54 UTC	1297	IN	Data Raw: 63 68 61 72 73 65 74 3d 27 75 74 66 2d 38 27 3b 76 61 72 20 76 3d 77 2e 6e 61 76 69 67 61 74 6f 72 2c 6d 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 6d 65 74 61 27 29 3b 6d 2e 68 74 74 70 45 71 75 69 76 3d 27 6f 72 69 67 69 6e 2d 74 72 69 61 6c 27 3b 6d 2e 63 6f 6e 74 65 6e 74 3d 27 41 37 75 78 74 6a 33 2b 68 4a 6d 4f 63 5a 46 6f 6f 46 54 30 50 73 32 37 36 50 75 4f 71 47 6e 4d 31 6a 66 6f 50 62 46 76 78 57 70 37 33 56 43 36 30 4c 6e 59 47 7a 61 79 48 56 76 63 46 65 45 69 46 30 71 72 77 79 37 66 51 41 4c 2b 67 47 56 58 55 2b 66 39 49 51 63 41 41 41 43 54 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 33 4a 6c 59 32 46 77 64 47 4e 6f 59 53 35 75 5a 58 51 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 Data Ascii: charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A7uxtj3+hJmOcZFooFT0Ps276PuOqGnM1jfoPbFvxWp73VC60LnYGzayHVvcFeEiF0qrwy7fQAL+gGVXU+f9IQcAAACTeyJvcmlnaW4iOiJodHRwczovL3JlY2FwdGNoYS5uZXQ6NDQzIiwiZmVhdHVyZSI6I
2024-12-05 18:04:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.6	49806	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:53 UTC	605	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/browser_modules/pulvus-provide/provide.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:54 UTC	789	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:04:54 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6737ef18-26e" Expires: Fri, 05 Dec 2025 18:04:54 GMT Last-Modified: Sat, 16 Nov 2024 01:02:16 GMT Paypal-Debug-Id: 9b337a812c9c0 Server: ECAcc (lhd/35DE) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000009b337a812c9c0-e74e92ca46f75ed4-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 622 Connection: close
2024-12-05 18:04:54 UTC	622	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 79 70 65 6f 66 20 64 65 66 69 6e 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 64 65 66 69 6e 65 2e 61 6d 64 26 26 64 65 66 69 6e 65 2e 61 6d 64 2e 64 75 73 74 3d 3d 3d 21 30 3f 64 65 66 69 6e 65 28 5b 22 64 75 73 74 2e 63 6f 72 65 22 5d 2c 74 29 3a 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3d 3d 22 6f 62 6a 65 63 74 22 3f 28 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 72 65 71 75 69 72 65 28 22 64 75 73 74 6a 73 2d 6c 69 6e 6b 65 64 69 6e 22 29 29 2c 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 2e 72 65 67 69 73 74 65 72 57 69 74 68 3d 74 29 3a 74 28 65 2e 64 75 73 74 29 7d 29 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 68 65 6c 70 65 72 73 2e 70 72 6f 76 69 64 65 3d 66 Data Ascii: (function(e,t){typeof define=="function"&&define.amd&&define.amd.dust===!0?define(["dust.core"],t):typeof module=="object"?(module.exports=t(require("dustjs-linkedin")),module.exports.registerWith=t):t(e.dust)})(this,function(e){return e.helpers.provide=f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.6	49807	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:53 UTC	414	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/lib/underscore-1.13.6.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:54 UTC	792	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:04:54 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6737ef18-4d5f" Expires: Fri, 05 Dec 2025 18:04:54 GMT Last-Modified: Sat, 16 Nov 2024 01:02:16 GMT Paypal-Debug-Id: da5f9cc121722 Server: ECAcc (lhd/35C7) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000da5f9cc121722-9f60941d6d26c99b-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 19807 Connection: close
2024-12-05 18:04:54 UTC	16383	IN	Data Raw: 2f 2f 20 20 20 20 20 28 63 29 20 32 30 30 39 2d 32 30 32 32 20 4a 65 72 65 6d 79 20 41 73 68 6b 65 6e 61 73 2c 20 4a 75 6c 69 61 6e 20 47 6f 6e 67 67 72 69 6a 70 2c 20 61 6e 64 20 44 6f 63 75 6d 65 6e 74 43 6c 6f 75 64 20 61 6e 64 20 49 6e 76 65 73 74 69 67 61 74 69 76 65 20 52 65 70 6f 72 74 65 72 73 20 26 20 45 64 69 74 6f 72 73 0a 0a 2f 2f 20 20 20 20 20 55 6e 64 65 72 73 63 6f 72 65 20 6d 61 79 20 62 65 20 66 72 65 65 6c 79 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3d 3d 22 6f 62 6a 65 63 74 22 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 6d 6f 64 75 6c 65 Data Ascii: // (c) 2009-2022 Jeremy Ashkenas, Julian Gonggrijp, and DocumentCloud and Investigative Reporters & Editors// Underscore may be freely distributed under the MIT license.(function(e,t){typeof exports=="object"&&typeof module!="undefined"?module
2024-12-05 18:04:54 UTC	3424	IN	Data Raw: 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 42 69 6e 64 20 6d 75 73 74 20 62 65 20 63 61 6c 6c 65 64 20 6f 6e 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 76 61 72 20 72 3d 77 28 66 75 6e 63 74 69 6f 6e 28 69 29 7b 72 65 74 75 72 6e 20 53 6e 28 65 2c 72 2c 74 2c 74 68 69 73 2c 6e 2e 63 6f 6e 63 61 74 28 69 29 29 7d 29 3b 72 65 74 75 72 6e 20 72 7d 29 2c 4e 6e 3d 51 28 72 74 29 2c 6b 6e 3d 77 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 3d 43 6e 28 74 2c 21 31 2c 21 31 29 3b 76 61 72 20 6e 3d 74 2e 6c 65 6e 67 74 68 3b 69 66 28 6e 3c 31 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 62 69 6e 64 41 6c 6c 20 6d 75 73 74 20 62 65 20 70 61 73 73 65 64 20 66 75 6e 63 74 69 6f 6e 20 6e 61 6d 65 73 22 29 3b 77 68 69 6c 65 28 6e 2d Data Ascii: ))throw new TypeError("Bind must be called on a function");var r=w(function(i){return Sn(e,r,t,this,n.concat(i))});return r}),Nn=Q(rt),kn=w(function(e,t){t=Cn(t,!1,!1);var n=t.length;if(n<1)throw new Error("bindAll must be passed function names");while(n-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.6	49719	151.101.193.21	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:54 UTC	3081	OUT	POST /signin/client-log HTTP/1.1 Host: www.paypal.com Connection: keep-alive Content-Length: 1687 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/json;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" X-Requested-With: XMLHttpRequest sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.paypal.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.paypal.com/signin/?returnUri=%2Fmyaccount%2Ftransfer%2FpayRequest%2FU-09584045BD498740V%2FU-7AK40048SY131414Y%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq&id=UJ8cMtNtnR8osXBu987dZoV1KMO8Kn.CKcv6ZA&expId=p2p&onboardData=%7B%22signUpRequest%22%3A%7B%22method%22%3A%22get%22%2C%22url%22%3A%22https%3A%2F%2Fwww.paypal.com%2Fmyaccount%2Ftransfer%2FguestLogin%2FpayRequest%2FU-09584045BD498740V%2FU-7AK40048SY131414Y%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq%26id%3DUJ8cMtNtnR8osXBu987dZoV1KMO8Kn.CKcv6ZA%22%7D%7D&flowContextData=k3KkNbgd2F3whUTyipi2CMJLh_A_-ZYRjnLUkRjoT_j0HNsy89M3Jq9pftpBPMtxKyazfBl41ygLF6L-3nSQM3yKD_1JSLMZUnm3gJtmC_GW6MtRMZgxxLdzhM2UidzudErvOhqzUKOKhl1Uolhas5WHE4v4p4McejHNxcZVkLh-Y4orpy9guCt5hhIB4GnzEz4SubWTdzvc3cAY2OwiaKLLHK8NR5mzXmQp5fVf3iIsNKSvq_9V0izgPURkU3T8RWrY5gGBkFdWln_xY5pl8zRv8lmUI-keUYe0DqQBvKVK8GwV8qiU_5p8qjPHJVW9i-G3ZBZuZum2FKJqczC5erDfF4QBe8JLLYzKBGyYHnHI7fFyBoEDubHGzh8R01uh4xAe-iAkcUj76XG_hnIoA0TzvY15PrfT8E9VdnaJhGuNJ5c8GhmekMGGnVwrlvOcZBIva0&v=1&utm_source=un [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTczMzQyMTg4MTQ4MiIsImwiOiIwIiwibSI6IjAifQ; nsid=s%3ARLPSU2OHYvlTZtXh_VMfzo7ctuMnbu-c.%2F5h%2FpbgyA12uYrTjTUlTTIQJX8aBsaqWc%2FutzlCO8XQ; l7_az=dcg01.phx; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352; datadome=Fs5MmB0JLdw5hCSGAmtvwdro2EIMrpyZoEKRvW~XxZ2c~hmw~iHaVACWMnscsHbkmlhxsh0aESsOTcLR3dIWEgraKwQ9F_jjSv2agvz3e2Q7qEqPf4IlaH6_FUYKbme5; ts=vreXpYrS%3D1764957890%26vteXpYrS%3D1733423690%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew; tcs=main%3Aunifiedlogin%3A%3A%3Alogin%7CbtnLogin
2024-12-05 18:04:54 UTC	1687	OUT	Data Raw: 7b 22 63 75 72 72 65 6e 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 2e 63 6f 6d 2f 73 69 67 6e 69 6e 2f 3f 72 65 74 75 72 6e 55 72 69 3d 25 32 46 6d 79 61 63 63 6f 75 6e 74 25 32 46 74 72 61 6e 73 66 65 72 25 32 46 70 61 79 52 65 71 75 65 73 74 25 32 46 55 2d 30 39 35 38 34 30 34 35 42 44 34 39 38 37 34 30 56 25 32 46 55 2d 37 41 4b 34 30 30 34 38 53 59 31 33 31 34 31 34 59 25 33 46 63 6c 61 73 73 69 63 55 72 6c 25 33 44 25 32 46 55 53 25 32 46 63 67 69 2d 62 69 6e 25 32 46 25 33 46 63 6d 64 25 33 44 5f 70 72 71 26 69 64 3d 55 4a 38 63 4d 74 4e 74 6e 52 38 6f 73 58 42 75 39 38 37 64 5a 6f 56 31 4b 4d 4f 38 4b 6e 2e 43 4b 63 76 36 5a 41 26 65 78 70 49 64 3d 70 32 70 26 6f 6e 62 6f 61 72 64 44 61 74 61 3d 25 37 42 25 32 32 73 Data Ascii: {"currentUrl":"https://www.paypal.com/signin/?returnUri=%2Fmyaccount%2Ftransfer%2FpayRequest%2FU-09584045BD498740V%2FU-7AK40048SY131414Y%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq&id=UJ8cMtNtnR8osXBu987dZoV1KMO8Kn.CKcv6ZA&expId=p2p&onboardData=%7B%22s
2024-12-05 18:04:54 UTC	298	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1850 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Cache-Control: max-age=0, no-cache, no-store, must-revalidate
2024-12-05 18:04:54 UTC	2386	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6e 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 6f 62 6a 65 63 74 73 2e 70 61 79 70 61 6c 2e 63 6e 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 3b 20 73 63 72 69 70 74 2d 73 72 63 20 27 6e 6f 6e 63 65 2d 38 79 4e 4e 76 48 76 57 48 4b 78 72 71 64 78 51 59 69 70 58 77 47 2b 6e 4a 4a 45 6f 58 78 4c 31 35 76 53 70 31 31 35 4e 77 56 70 4f 55 53 71 4a 27 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 68 74 74 Data Ascii: Content-Security-Policy: default-src 'self' https://.paypal.com https://.paypal.cn https://.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; script-src 'nonce-8yNNvHvWHKxrqdxQYipXwG+nJJEoXxL15vSp115NwVpOUSqJ' 'self' https://.paypal.com htt
2024-12-05 18:04:54 UTC	1344	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 78 2d 70 70 2d 73 3d 65 79 4a 30 49 6a 6f 69 4d 54 63 7a 4d 7a 51 79 4d 54 67 35 4e 44 63 7a 4d 79 49 73 49 6d 77 69 4f 69 49 77 49 69 77 69 62 53 49 36 49 6a 41 69 66 51 3b 20 44 6f 6d 61 69 6e 3d 2e 70 61 79 70 61 6c 2e 63 6f 6d 3b 20 50 61 74 68 3d 2f 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 37 5f 61 7a 3d 64 63 67 30 31 2e 70 68 78 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 70 61 79 70 61 6c 2e 63 6f 6d 3b 20 45 78 70 69 72 65 73 3d 54 68 75 2c 20 30 35 20 44 65 63 20 32 30 32 34 20 31 38 3a 33 34 3a 35 34 20 47 4d 54 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e Data Ascii: Set-Cookie: x-pp-s=eyJ0IjoiMTczMzQyMTg5NDczMyIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=NoneSet-Cookie: l7_az=dcg01.phx; Path=/; Domain=paypal.com; Expires=Thu, 05 Dec 2024 18:34:54 GMT; HttpOnly; Secure; SameSite=N
2024-12-05 18:04:54 UTC	1378	IN	Data Raw: 7b 22 63 64 6e 48 6f 73 74 4e 61 6d 65 22 3a 22 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 22 2c 22 70 61 79 70 61 6c 44 6f 6d 61 69 6e 22 3a 22 70 61 79 70 61 6c 2e 63 6f 6d 22 2c 22 6c 61 79 6f 75 74 22 3a 22 6c 61 79 6f 75 74 73 2f 65 6d 70 74 79 22 2c 22 73 79 73 22 3a 7b 22 6c 69 6e 6b 73 22 3a 7b 22 6a 73 42 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 77 65 62 2f 72 65 73 2f 30 38 37 2f 39 66 37 33 31 64 38 62 63 65 64 64 35 62 37 65 37 61 33 39 37 35 63 30 32 34 32 37 38 2f 6a 73 22 2c 22 63 73 73 42 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 77 65 62 2f 72 65 73 2f 30 38 37 2f 39 66 Data Ascii: {"cdnHostName":"www.paypalobjects.com","paypalDomain":"paypal.com","layout":"layouts/empty","sys":{"links":{"jsBaseUrl":"https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/js","cssBaseUrl":"https://www.paypalobjects.com/web/res/087/9f
2024-12-05 18:04:54 UTC	472	IN	Data Raw: 69 64 65 3c 2f 61 3e 22 7d 7d 2c 22 74 72 61 63 6b 69 6e 67 22 3a 7b 22 66 70 74 69 22 3a 7b 22 6e 61 6d 65 22 3a 22 70 74 61 22 2c 22 6a 73 55 52 4c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 22 2c 22 73 65 72 76 65 72 55 52 4c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 2e 70 61 79 70 61 6c 2e 63 6f 6d 2f 74 73 22 2c 22 64 61 74 61 53 74 72 69 6e 67 22 3a 22 70 67 72 70 3d 75 6e 69 66 69 65 64 6c 6f 67 69 6e 6e 6f 64 65 77 65 62 25 32 46 2e 64 75 73 74 26 70 61 67 65 3d 75 6e 69 66 69 65 64 6c 6f 67 69 6e 6e 6f 64 65 77 65 62 25 32 46 2e 64 75 73 74 26 70 67 73 74 3d 31 37 33 33 34 32 31 38 39 34 37 30 39 26 63 61 6c 63 3d 66 33 31 36 34 30 37 32 39 30 30 63 65 26 6e 73 69 64 3d 52 4c 50 53 55 32 4f 48 59 76 Data Ascii: ide</a>"}},"tracking":{"fpti":{"name":"pta","jsURL":"https://www.paypalobjects.com","serverURL":"https://t.paypal.com/ts","dataString":"pgrp=unifiedloginnodeweb%2F.dust&page=unifiedloginnodeweb%2F.dust&pgst=1733421894709&calc=f3164072900ce&nsid=RLPSU2OHYv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.6	49814	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:55 UTC	615	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/browser_modules/dustjs-helpers/dist/dust-helpers.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:55 UTC	791	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:04:55 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6737ef18-14f9" Expires: Fri, 05 Dec 2025 18:04:55 GMT Last-Modified: Sat, 16 Nov 2024 01:02:16 GMT Paypal-Debug-Id: fd2705432751b Server: ECAcc (lhd/35DB) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000fd2705432751b-a3d79bbb2922cec6-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 5369 Connection: close
2024-12-05 18:04:55 UTC	5369	IN	Data Raw: 2f 2a 21 20 64 75 73 74 6a 73 2d 68 65 6c 70 65 72 73 20 2d 20 76 31 2e 36 2e 33 0a 2a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6c 69 6e 6b 65 64 69 6e 2f 64 75 73 74 6a 73 2d 68 65 6c 70 65 72 73 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 35 20 41 6c 65 6b 73 61 6e 64 65 72 20 57 69 6c 6c 69 61 6d 73 3b 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 2a 2f 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 79 70 65 6f 66 20 64 65 66 69 6e 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 64 65 66 69 6e 65 2e 61 6d 64 26 26 64 65 66 69 6e 65 2e 61 6d 64 2e 64 75 73 74 3d 3d 3d 21 30 3f 64 65 66 69 6e 65 28 5b 22 64 75 73 74 2e 63 6f 72 65 22 5d 2c 74 29 3a 74 79 70 65 6f 66 Data Ascii: /! dustjs-helpers - v1.6.3 https://github.com/linkedin/dustjs-helpers* Copyright (c) 2015 Aleksander Williams; Released under the MIT License */(function(e,t){typeof define=="function"&&define.amd&&define.amd.dust===!0?define(["dust.core"],t):typeof

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.6	49815	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:55 UTC	440	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/browser_modules/dust-makara-helpers/browser.amd.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:55 UTC	791	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:04:55 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6737ef17-116b" Expires: Fri, 05 Dec 2025 18:04:55 GMT Last-Modified: Sat, 16 Nov 2024 01:02:15 GMT Paypal-Debug-Id: 8607a2cd8ed8e Server: ECAcc (lhd/35C5) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000008607a2cd8ed8e-2aba28ff7051934c-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 4459 Connection: close
2024-12-05 18:04:55 UTC	4459	IN	Data Raw: 64 65 66 69 6e 65 28 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 74 5b 72 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 72 2c 6c 6f 61 64 65 64 3a 21 31 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 69 2e 6c 6f 61 64 65 64 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 74 3d 7b 7d 3b 72 65 74 75 72 6e 20 6e 2e 6d 3d 65 2c 6e 2e 63 3d 74 2c 6e 2e 70 3d 22 22 2c 6e 28 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 Data Ascii: define([],function(){return function(e){function n(r){if(t[r])return t[r].exports;var i=t[r]={exports:{},id:r,loaded:!1};return e[r].call(i.exports,i,i.exports,n),i.loaded=!0,i.exports}var t={};return n.m=e,n.c=t,n.p="",n(0)}([function(e,t,n){"use strict"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.6	49816	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:55 UTC	583	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/en-US/_languagepack.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:55 UTC	801	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:04:55 GMT DC: ccg11-origin-www-1.paypal.com Etag: "6737ef10-1b531+br+ident" Expires: Fri, 05 Dec 2025 18:04:55 GMT Last-Modified: Sat, 16 Nov 2024 01:02:08 GMT Paypal-Debug-Id: a32d214760a2e Server: ECAcc (lhd/35FD) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000a32d214760a2e-6bb2395ef5066045-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 111921 Connection: close
2024-12-05 18:04:55 UTC	16383	IN	Data Raw: 64 65 66 69 6e 65 28 22 5f 6c 61 6e 67 75 61 67 65 70 61 63 6b 22 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 72 65 74 75 72 6e 20 7b 22 65 6e 2d 55 53 22 3a 7b 22 61 63 74 69 76 61 74 65 4f 6e 65 54 6f 75 63 68 2e 70 72 6f 70 65 72 74 69 65 73 22 3a 7b 22 61 63 74 69 76 61 74 65 4f 6e 65 54 6f 75 63 68 22 3a 7b 22 70 61 67 65 54 69 74 6c 65 22 3a 22 4e 65 78 74 20 74 69 6d 65 2c 20 73 6b 69 70 20 6c 6f 67 69 6e 20 77 69 74 68 20 50 61 79 50 61 6c 20 4f 6e 65 20 54 6f 75 63 68 22 2c 22 68 65 61 64 69 6e 67 22 3a 22 4e 65 78 74 20 74 69 6d 65 2c 20 73 6b 69 70 20 6c 6f 67 69 6e 20 77 69 74 68 20 50 61 79 50 61 6c 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 62 75 7a 7a 77 6f 72 64 5c 22 3e 4f 6e 65 20 54 6f 75 63 68 26 74 72 61 64 65 3b 3c 2f 73 70 61 Data Ascii: define("_languagepack", function () { return {"en-US":{"activateOneTouch.properties":{"activateOneTouch":{"pageTitle":"Next time, skip login with PayPal One Touch","heading":"Next time, skip login with PayPal <span class=\"buzzword\">One Touch™</spa
2024-12-05 18:04:55 UTC	1	IN	Data Raw: 69 Data Ascii: i
2024-12-05 18:04:56 UTC	16383	IN	Data Raw: 76 65 20 61 75 74 6f 6d 61 74 65 64 20 63 61 6c 6c 73 20 6f 72 20 74 65 78 74 73 2c 20 79 6f 75 20 63 61 6e 20 63 68 61 6e 67 65 20 79 6f 75 72 20 70 72 65 66 65 72 65 6e 63 65 73 20 69 6e 20 79 6f 75 72 20 61 63 63 6f 75 6e 74 20 73 65 74 74 69 6e 67 73 20 61 74 20 61 6e 79 20 74 69 6d 65 2e 22 2c 22 70 68 6f 6e 65 52 65 71 75 69 72 65 64 22 3a 22 52 65 71 75 69 72 65 64 22 2c 22 70 68 6f 6e 65 49 6e 76 61 6c 69 64 22 3a 22 43 61 6e 20 79 6f 75 20 63 68 65 63 6b 20 79 6f 75 72 20 6d 6f 62 69 6c 65 20 6e 75 6d 62 65 72 20 61 6e 64 20 74 72 79 20 61 67 61 69 6e 3f 22 2c 22 76 65 72 69 66 79 4f 74 70 22 3a 7b 22 68 65 61 64 69 6e 67 22 3a 22 54 79 70 65 20 69 6e 20 79 6f 75 72 20 63 6f 64 65 22 2c 22 70 61 72 61 67 72 61 70 68 22 3a 22 57 65 20 73 65 6e 74 Data Ascii: ve automated calls or texts, you can change your preferences in your account settings at any time.","phoneRequired":"Required","phoneInvalid":"Can you check your mobile number and try again?","verifyOtp":{"heading":"Type in your code","paragraph":"We sent
2024-12-05 18:04:56 UTC	16383	IN	Data Raw: 6f 6e 65 2d 74 69 6d 65 20 63 6f 64 65 20 6f 72 20 70 61 73 73 77 6f 72 64 22 2c 22 73 75 62 48 65 61 64 69 6e 67 22 3a 22 4e 65 78 74 20 74 69 6d 65 2c 20 6c 6f 67 20 69 6e 20 73 65 63 75 72 65 6c 79 20 77 69 74 68 20 61 20 70 61 73 73 6b 65 79 20 75 73 69 6e 67 20 46 61 63 65 20 49 44 20 6f 72 20 54 6f 75 63 68 20 49 44 2e 22 2c 22 68 6f 77 22 3a 22 48 6f 77 20 70 61 73 73 6b 65 79 20 77 6f 72 6b 73 22 2c 22 73 61 76 65 50 61 73 73 6b 65 79 22 3a 22 43 6f 6e 74 69 6e 75 65 22 2c 22 6e 6f 74 4e 6f 77 22 3a 22 53 6b 69 70 20 66 6f 72 20 6e 6f 77 22 7d 2c 22 62 69 6e 64 50 61 73 73 6b 65 79 41 6e 64 72 6f 69 64 4f 74 70 22 3a 7b 22 68 65 61 64 69 6e 67 22 3a 22 4e 65 78 74 20 74 69 6d 65 2c 20 6c 6f 67 20 69 6e 20 77 69 74 68 20 66 61 63 65 2c 20 66 69 6e Data Ascii: one-time code or password","subHeading":"Next time, log in securely with a passkey using Face ID or Touch ID.","how":"How passkey works","savePasskey":"Continue","notNow":"Skip for now"},"bindPasskeyAndroidOtp":{"heading":"Next time, log in with face, fin
2024-12-05 18:04:56 UTC	16383	IN	Data Raw: 7d 2c 22 69 6e 63 2f 6e 6f 4a 73 2e 70 72 6f 70 65 72 74 69 65 73 22 3a 7b 22 6e 6f 4a 73 22 3a 7b 22 72 65 71 75 69 72 65 6d 65 6e 74 22 3a 22 4e 4f 54 45 3a 20 4d 61 6e 79 20 66 65 61 74 75 72 65 73 20 6f 6e 20 74 68 65 20 50 61 79 50 61 6c 20 57 65 62 20 73 69 74 65 20 72 65 71 75 69 72 65 20 4a 61 76 61 73 63 72 69 70 74 20 61 6e 64 20 63 6f 6f 6b 69 65 73 2e 22 7d 7d 2c 22 69 6e 63 2f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 73 2e 70 72 6f 70 65 72 74 69 65 73 22 3a 7b 22 65 72 72 6f 72 4d 65 73 73 61 67 65 22 3a 7b 22 61 6a 61 78 45 72 72 6f 72 22 3a 22 57 65 27 72 65 20 68 61 76 69 6e 67 20 73 6f 6d 65 20 74 72 6f 75 62 6c 65 20 63 6f 6d 70 6c 65 74 69 6e 67 20 79 6f 75 72 20 72 65 71 75 65 73 74 2e 20 50 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 20 Data Ascii: },"inc/noJs.properties":{"noJs":{"requirement":"NOTE: Many features on the PayPal Web site require Javascript and cookies."}},"inc/notifications.properties":{"errorMessage":{"ajaxError":"We're having some trouble completing your request. Please try again

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.6	49817	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:55 UTC	437	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/browser_modules/dusthelpers-supplement/index.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:55 UTC	791	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:04:55 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6737ef17-1ea5" Expires: Fri, 05 Dec 2025 18:04:55 GMT Last-Modified: Sat, 16 Nov 2024 01:02:15 GMT Paypal-Debug-Id: d7a85a1b94a33 Server: ECAcc (lhd/35A5) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000d7a85a1b94a33-c8e3a5fea2514cc8-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 7845 Connection: close
2024-12-05 18:04:55 UTC	7845	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 79 70 65 6f 66 20 64 65 66 69 6e 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 64 65 66 69 6e 65 2e 61 6d 64 26 26 64 65 66 69 6e 65 2e 61 6d 64 2e 64 75 73 74 3d 3d 3d 21 30 3f 64 65 66 69 6e 65 28 5b 22 64 75 73 74 2e 63 6f 72 65 22 5d 2c 74 29 3a 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3d 3d 22 6f 62 6a 65 63 74 22 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 72 65 71 75 69 72 65 28 22 64 75 73 74 6a 73 2d 6c 69 6e 6b 65 64 69 6e 22 29 29 3a 74 28 65 2e 64 75 73 74 29 7d 29 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 20 65 78 74 65 6e 64 28 64 75 73 74 29 7b 66 75 6e 63 74 69 6f 6e 20 74 6f 6b 65 6e 69 7a 65 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 7b 22 28 28 22 3a 31 Data Ascii: (function(e,t){typeof define=="function"&&define.amd&&define.amd.dust===!0?define(["dust.core"],t):typeof exports=="object"?module.exports=t(require("dustjs-linkedin")):t(e.dust)})(this,function extend(dust){function tokenize(t){"use strict";var n={"((":1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.6	49823	151.101.131.1	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:55 UTC	5319	OUT	GET /ts?v=1.9.5&t=1733421893227&g=300&pgrp=main%3Aunifiedlogin%3A%3A%3Alogin&page=main%3Aunifiedlogin%3A%3A%3Alogin%3Alegacy-web-dyn&pgst=1733421881400&calc=f4539225a1122&nsid=RLPSU2OHYvlTZtXh_VMfzo7ctuMnbu-c&rsta=en_US&pgtf=Nodejs&env=live&s=ci&ccpg=US&csci=16bc73c3ccf44355b5392134ef0346f4&comp=unifiedloginnodeweb&tsrce=unifiedloginnodeweb&cu=0&ef_policy=ccpa&xe=100353%2C106885%2C105604%2C105604%2C105351%2C101126%2C100614%2C101257%2C102153%2C104200%2C104200%2C105352%2C109195%2C104458%2C104458%2C100364%2C105999%2C100885%2C109334%2C109334%2C101270%2C102557%2C102557%2C101408%2C101408%2C104227%2C104227%2C100644%2C105124%2C100391%2C102695%2C100263%2C101031%2C100267%2C108076%2C100527%2C106031%2C106031%2C107054%2C107054%2C106033%2C106033%2C106032%2C106032%2C105392%2C105392%2C106035%2C106035%2C106034%2C106034%2C106036%2C106036%2C105271%2C110648%2C101688%2C101821%2C101820%2C102208%2C105543%2C105544%2C105416%2C105416%2C101064%2C106058%2C104778%2C103119%2C100303%2C100942%2C105553%2C105553%2C105552%2C105552%2C100304%2C1 [TRUNCATED] Host: t.paypal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.paypal.com/signin/?returnUri=%2Fmyaccount%2Ftransfer%2FpayRequest%2FU-09584045BD498740V%2FU-7AK40048SY131414Y%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq&id=UJ8cMtNtnR8osXBu987dZoV1KMO8Kn.CKcv6ZA&expId=p2p&onboardData=%7B%22signUpRequest%22%3A%7B%22method%22%3A%22get%22%2C%22url%22%3A%22https%3A%2F%2Fwww.paypal.com%2Fmyaccount%2Ftransfer%2FguestLogin%2FpayRequest%2FU-09584045BD498740V%2FU-7AK40048SY131414Y%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq%26id%3DUJ8cMtNtnR8osXBu987dZoV1KMO8Kn.CKcv6ZA%22%7D%7D&flowContextData=k3KkNbgd2F3whUTyipi2CMJLh_A_-ZYRjnLUkRjoT_j0HNsy89M3Jq9pftpBPMtxKyazfBl41ygLF6L-3nSQM3yKD_1JSLMZUnm3gJtmC_GW6MtRMZgxxLdzhM2UidzudErvOhqzUKOKhl1Uolhas5WHE4v4p4McejHNxcZVkLh-Y4orpy9guCt5hhIB4GnzEz4SubWTdzvc3cAY2OwiaKLLHK8NR5mzXmQp5fVf3iIsNKSvq_9V0izgPURkU3T8RWrY5gGBkFdWln_xY5pl8zRv8lmUI-keUYe0DqQBvKVK8GwV8qiU_5p8qjPHJVW9i-G3ZBZuZum2FKJqczC5erDfF4QBe8JLLYzKBGyYHnHI7fFyBoEDubHGzh8R01uh4xAe-iAkcUj76XG_hnIoA0TzvY15PrfT8E9VdnaJhGuNJ5c8GhmekMGGnVwrlvOcZBIva0&v=1&utm_source=un [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTczMzQyMTg4MTQ4MiIsImwiOiIwIiwibSI6IjAifQ; l7_az=dcg01.phx; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352; datadome=Fs5MmB0JLdw5hCSGAmtvwdro2EIMrpyZoEKRvW~XxZ2c~hmw~iHaVACWMnscsHbkmlhxsh0aESsOTcLR3dIWEgraKwQ9F_jjSv2agvz3e2Q7qEqPf4IlaH6_FUYKbme5; ts=vreXpYrS%3D1764957890%26vteXpYrS%3D1733423690%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew
2024-12-05 18:04:56 UTC	1360	IN	HTTP/1.1 200 OK Connection: close Access-Control-Expose-Headers: Server-Timing CORRELATION-ID: 9b898201fc02d Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Type: image/gif Expires: Thu, 05 Dec 2024 18:04:55 GMT P3p: CP="CAO IND OUR SAM UNI STA COR COM" Paypal-Debug-Id: 9b898201fc02d Pragma: no-cache Set-Cookie: ts=vreXpYrS%3D1764957895%26vteXpYrS%3D1733423695%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew;Expires=Fri, 05 Dec 2025 18:04:55 GMT;domain=.paypal.com;path=/;secure;HttpOnly;SameSite=None; Set-Cookie: ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352;Expires=Fri, 05 Dec 2025 18:04:55 GMT;domain=.paypal.com;path=/;secure;SameSite=None; Traceparent: 00-00000000000000000009b898201fc02d-f7f9e81eaa71ae9d-01 Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Date: Thu, 05 Dec 2024 18:04:55 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Served-By: cache-iad-kiad7000130-IAD, cache-ewr-kewr1740063-EWR X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1733421896.838216,VS0,VE90 vary: Accept-Encoding Server-Timing: "traceparent;desc="00-00000000000000000009b898201fc02d-71b6094f54727056-01"";content-encoding;desc="",x-cdn;desc="fastly" Timing-Allow-Origin: * transfer-encoding: chunked
2024-12-05 18:04:56 UTC	4	IN	Data Raw: 32 61 0d 0a Data Ascii: 2a
2024-12-05 18:04:56 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 01 01 32 00 3b Data Ascii: GIF89a!,2;
2024-12-05 18:04:56 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.6	49824	151.101.193.21	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:55 UTC	3253	OUT	POST /signin HTTP/1.1 Host: www.paypal.com Connection: keep-alive Content-Length: 810 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-wow64: ?0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" Upgrade-Insecure-Requests: 1 Origin: https://www.paypal.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://www.paypal.com/signin/?returnUri=%2Fmyaccount%2Ftransfer%2FpayRequest%2FU-09584045BD498740V%2FU-7AK40048SY131414Y%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq&id=UJ8cMtNtnR8osXBu987dZoV1KMO8Kn.CKcv6ZA&expId=p2p&onboardData=%7B%22signUpRequest%22%3A%7B%22method%22%3A%22get%22%2C%22url%22%3A%22https%3A%2F%2Fwww.paypal.com%2Fmyaccount%2Ftransfer%2FguestLogin%2FpayRequest%2FU-09584045BD498740V%2FU-7AK40048SY131414Y%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq%26id%3DUJ8cMtNtnR8osXBu987dZoV1KMO8Kn.CKcv6ZA%22%7D%7D&flowContextData=k3KkNbgd2F3whUTyipi2CMJLh_A_-ZYRjnLUkRjoT_j0HNsy89M3Jq9pftpBPMtxKyazfBl41ygLF6L-3nSQM3yKD_1JSLMZUnm3gJtmC_GW6MtRMZgxxLdzhM2UidzudErvOhqzUKOKhl1Uolhas5WHE4v4p4McejHNxcZVkLh-Y4orpy9guCt5hhIB4GnzEz4SubWTdzvc3cAY2OwiaKLLHK8NR5mzXmQp5fVf3iIsNKSvq_9V0izgPURkU3T8RWrY5gGBkFdWln_xY5pl8zRv8lmUI-keUYe0DqQBvKVK8GwV8qiU_5p8qjPHJVW9i-G3ZBZuZum2FKJqczC5erDfF4QBe8JLLYzKBGyYHnHI7fFyBoEDubHGzh8R01uh4xAe-iAkcUj76XG_hnIoA0TzvY15PrfT8E9VdnaJhGuNJ5c8GhmekMGGnVwrlvOcZBIva0&v=1&utm_source=un [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTczMzQyMTg4MTQ4MiIsImwiOiIwIiwibSI6IjAifQ; nsid=s%3ARLPSU2OHYvlTZtXh_VMfzo7ctuMnbu-c.%2F5h%2FpbgyA12uYrTjTUlTTIQJX8aBsaqWc%2FutzlCO8XQ; l7_az=dcg01.phx; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352; datadome=Fs5MmB0JLdw5hCSGAmtvwdro2EIMrpyZoEKRvW~XxZ2c~hmw~iHaVACWMnscsHbkmlhxsh0aESsOTcLR3dIWEgraKwQ9F_jjSv2agvz3e2Q7qEqPf4IlaH6_FUYKbme5; ts=vreXpYrS%3D1764957890%26vteXpYrS%3D1733423690%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew; tcs=main%3Aunifiedlogin%3A%3A%3Alogin%7CbtnLogin
2024-12-05 18:04:55 UTC	810	OUT	Data Raw: 5f 63 73 72 66 3d 62 51 65 63 4b 6c 41 70 78 50 30 59 35 70 44 44 7a 45 4d 57 54 25 32 46 75 25 32 42 61 42 4c 4a 37 42 61 55 62 25 32 42 6f 76 34 25 33 44 26 6c 6f 63 61 6c 65 2e 78 3d 65 6e 5f 55 53 26 70 72 6f 63 65 73 73 53 69 67 6e 69 6e 3d 6d 61 69 6e 26 66 6c 6f 77 4e 61 6d 65 3d 70 32 70 26 66 6c 6f 77 43 6f 6e 74 65 78 74 44 61 74 61 3d 6b 33 4b 6b 4e 62 67 64 32 46 33 77 68 55 54 79 69 70 69 32 43 4d 4a 4c 68 5f 41 5f 2d 5a 59 52 6a 6e 4c 55 6b 52 6a 6f 54 5f 6a 30 48 4e 73 79 38 39 4d 33 4a 71 39 70 66 74 70 42 50 4d 74 78 4b 79 61 7a 66 42 6c 34 31 79 67 4c 46 36 4c 2d 33 6e 53 51 4d 33 79 4b 44 5f 31 4a 53 4c 4d 5a 55 6e 6d 33 67 4a 74 6d 43 5f 47 57 36 4d 74 52 4d 5a 67 78 78 4c 64 7a 68 4d 32 55 69 64 7a 75 64 45 72 76 4f 68 71 7a 55 4b 4f Data Ascii: _csrf=bQecKlApxP0Y5pDDzEMWT%2Fu%2BaBLJ7BaUb%2Bov4%3D&locale.x=en_US&processSignin=main&flowName=p2p&flowContextData=k3KkNbgd2F3whUTyipi2CMJLh_A_-ZYRjnLUkRjoT_j0HNsy89M3Jq9pftpBPMtxKyazfBl41ygLF6L-3nSQM3yKD_1JSLMZUnm3gJtmC_GW6MtRMZgxxLdzhM2UidzudErvOhqzUKO
2024-12-05 18:04:56 UTC	344	IN	HTTP/1.1 200 OK Connection: close Content-Length: 7055 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Access-Control-Expose-Headers: Server-Timing Cache-Control: max-age=0, no-cache, no-store, must-revalidate
2024-12-05 18:04:56 UTC	2106	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6e 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 6f 62 6a 65 63 74 73 2e 70 61 79 70 61 6c 2e 63 6e 3b 20 73 63 72 69 70 74 2d 73 72 63 20 27 6e 6f 6e 63 65 2d 59 66 73 74 79 30 6c 38 4b 6e 74 4c 54 53 53 31 4e 33 56 72 61 4b 52 53 54 72 75 63 57 46 46 6a 4a 64 56 6e 31 6b 6a 36 6c 6e 35 70 52 33 30 4a 27 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6e Data Ascii: Content-Security-Policy: default-src 'self' https://.paypal.com https://.paypal.cn https://.paypalobjects.com https://objects.paypal.cn; script-src 'nonce-Yfsty0l8KntLTSS1N3VraKRSTrucWFFjJdVn1kj6ln5pR30J' 'self' https://.paypal.com https://*.paypal.cn
2024-12-05 18:04:56 UTC	1658	IN	Data Raw: 50 65 72 6d 69 73 73 69 6f 6e 73 2d 50 6f 6c 69 63 79 3a 20 63 68 2d 75 61 2d 70 6c 61 74 66 6f 72 6d 2d 76 65 72 73 69 6f 6e 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 61 72 63 68 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 77 6f 77 36 34 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 6d 6f 64 65 6c 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 66 75 6c 6c 2d 76 65 Data Ascii: Permissions-Policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-ve
2024-12-05 18:04:56 UTC	623	IN	Data Raw: 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 58 2d 58 73 73 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 44 43 3a 20 63 63 67 31 31 2d 6f 72 69 67 69 6e 2d 77 77 77 2d 31 2e 70 61 79 70 61 6c 2e 63 6f 6d 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 56 69 61 3a 20 31 2e 31 20 76 61 72 6e 69 73 68 2c 20 31 2e 31 20 76 61 72 6e 69 73 68 2c 20 31 2e 31 20 76 61 72 6e 69 73 68 0d 0a 44 61 74 65 3a 20 54 68 75 2c 20 30 35 20 44 65 63 20 32 30 32 34 20 31 38 3a 30 34 3a 35 36 20 47 4d 54 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 33 30 37 32 30 30 30 3b 20 69 6e 63 6c 75 64 Data Ascii: X-Content-Type-Options: nosniffX-Xss-Protection: 1; mode=blockDC: ccg11-origin-www-1.paypal.comAccept-Ranges: bytesVia: 1.1 varnish, 1.1 varnish, 1.1 varnishDate: Thu, 05 Dec 2024 18:04:56 GMTStrict-Transport-Security: max-age=63072000; includ
2024-12-05 18:04:56 UTC	1378	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 6c 6f 77 65 72 2d 74 68 61 6e 2d 69 65 39 22 20 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 31 30 5d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 6c 6f 77 65 72 2d 74 68 61 6e 2d 69 65 31 30 22 20 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 21 49 45 5d 3e 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 3e 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 0a 20 Data Ascii: <!DOCTYPE html>...[if lt IE 9]><html lang="en" class="no-js lower-than-ie9" ><![endif]-->...[if lt IE 10]><html lang="en" class="no-js lower-than-ie10" ><![endif]-->...[if !IE]>--><html lang="en" class="no-js" >...<![endif]--> <head>
2024-12-05 18:04:56 UTC	1378	IN	Data Raw: 37 33 33 34 32 31 38 39 36 30 32 32 26 63 61 6c 63 3d 66 34 37 37 33 39 33 35 61 39 38 39 36 26 6e 73 69 64 3d 52 4c 50 53 55 32 4f 48 59 76 6c 54 5a 74 58 68 5f 56 4d 66 7a 6f 37 63 74 75 4d 6e 62 75 2d 63 26 72 73 74 61 3d 65 6e 5f 55 53 26 70 67 74 66 3d 4e 6f 64 65 6a 73 26 65 6e 76 3d 6c 69 76 65 26 73 3d 63 69 26 63 63 70 67 3d 55 53 26 63 73 63 69 3d 66 34 36 66 34 38 35 33 33 34 31 62 34 66 35 34 61 33 65 34 66 38 30 30 30 66 62 36 61 34 38 64 26 63 6f 6d 70 3d 61 75 74 68 63 68 61 6c 6c 65 6e 67 65 6e 6f 64 65 77 65 62 26 74 73 72 63 65 3d 75 6e 69 66 69 65 64 6c 6f 67 69 6e 6e 6f 64 65 77 65 62 26 63 75 3d 30 26 65 66 5f 70 6f 6c 69 63 79 3d 63 63 70 61 26 78 65 3d 31 30 39 35 34 31 25 32 43 31 30 37 35 38 35 26 78 74 3d 31 34 35 38 33 35 25 32 Data Ascii: 733421896022&calc=f4773935a9896&nsid=RLPSU2OHYvlTZtXh_VMfzo7ctuMnbu-c&rsta=en_US&pgtf=Nodejs&env=live&s=ci&ccpg=US&csci=f46f4853341b4f54a3e4f8000fb6a48d&comp=authchallengenodeweb&tsrce=unifiedloginnodeweb&cu=0&ef_policy=ccpa&xe=109541%2C107585&xt=145835%2
2024-12-05 18:04:56 UTC	1378	IN	Data Raw: 6e 74 65 6e 74 3d 22 6e 61 6d 65 3d 52 65 71 75 65 73 74 20 4d 6f 6e 65 79 3b 61 63 74 69 6f 6e 2d 75 72 69 3d 68 74 74 70 73 3a 2f 2f 70 65 72 73 6f 6e 61 6c 2e 70 61 79 70 61 6c 2e 63 6f 6d 2f 63 67 69 2d 62 69 6e 2f 3f 63 6d 64 3d 5f 72 65 6e 64 65 72 2d 63 6f 6e 74 65 6e 74 26 61 6d 70 3b 63 6f 6e 74 65 6e 74 5f 49 44 3d 6d 61 72 6b 65 74 69 6e 67 5f 75 73 2f 72 65 71 75 65 73 74 5f 6d 6f 6e 65 79 3b 69 63 6f 6e 2d 75 72 69 3d 68 74 74 70 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 65 6e 5f 55 53 2f 69 2f 69 63 6f 6e 2f 70 70 5f 66 61 76 69 63 6f 6e 5f 78 2e 69 63 6f 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6b 65 79 77 6f 72 64 73 22 20 63 6f 6e 74 65 6e 74 3d 22 74 72 61 6e 73 66 65 72 20 6d 6f 6e 65 79 2c 20 65 Data Ascii: ntent="name=Request Money;action-uri=https://personal.paypal.com/cgi-bin/?cmd=_render-content&content_ID=marketing_us/request_money;icon-uri=http://www.paypalobjects.com/en_US/i/icon/pp_favicon_x.ico" /><meta name="keywords" content="transfer money, e
2024-12-05 18:04:56 UTC	1378	IN	Data Raw: 62 65 31 30 38 33 37 37 63 63 33 39 37 35 32 2f 74 65 6d 70 6c 61 74 65 73 2f 55 53 2f 65 6e 2f 25 73 2e 6a 73 22 0a 20 20 20 20 64 61 74 61 2d 63 73 72 66 2d 74 6f 6b 65 6e 3d 22 31 34 32 4e 34 6b 43 76 57 63 6b 39 6c 59 70 42 36 44 37 38 4f 77 76 70 46 45 54 66 2b 35 44 4a 7a 6d 6e 65 51 3d 22 20 20 0a 20 20 20 20 64 61 74 61 2d 6c 6f 63 61 6c 65 3d 22 65 6e 5f 55 53 22 3e 0a 20 20 20 20 20 20 20 20 3c 6e 6f 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 6e 6f 6e 6a 73 41 6c 65 72 74 22 20 72 6f 6c 65 3d 22 61 6c 65 72 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 4e 4f 54 45 3a 20 4d 61 6e 79 20 66 65 61 74 75 72 65 73 20 6f 6e 20 74 68 65 20 50 61 79 50 61 6c 20 57 65 62 20 73 69 74 65 20 72 65 Data Ascii: be108377cc39752/templates/US/en/%s.js" data-csrf-token="142N4kCvWck9lYpB6D78OwvpFETf+5DJzmneQ=" data-locale="en_US"> <noscript> <p class="nonjsAlert" role="alert"> NOTE: Many features on the PayPal Web site re
2024-12-05 18:04:56 UTC	1378	IN	Data Raw: 70 61 79 70 61 6c 2e 63 6f 6d 26 61 63 63 6f 75 6e 74 73 44 6f 6d 61 69 6e 3d 61 63 63 6f 75 6e 74 73 2e 68 63 61 70 74 63 68 61 2e 70 61 79 70 61 6c 2e 63 6f 6d 26 63 75 73 74 6f 6d 44 6f 6d 61 69 6e 73 3d 22 20 68 65 69 67 68 74 3d 22 35 30 30 22 20 77 69 64 74 68 3d 22 31 30 30 25 32 35 22 20 6e 61 6d 65 3d 22 72 65 63 61 70 74 63 68 61 22 20 61 6c 69 67 6e 3d 22 6d 69 64 64 6c 65 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 61 6e 64 62 6f 78 3d 22 61 6c 6c 6f 77 2d 73 63 72 69 70 74 73 20 61 6c 6c 6f 77 2d 73 61 6d 65 2d 6f 72 69 67 69 6e 20 61 6c 6c 6f 77 2d 70 6f 70 75 70 73 20 61 6c 6c 6f 77 2d 66 6f 72 6d 73 22 3e 3c 2f 69 66 72 61 6d 65 3e 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 61 63 74 69 6f 6e 73 22 3e 3c 62 75 74 74 6f 6e 20 63 Data Ascii: paypal.com&accountsDomain=accounts.hcaptcha.paypal.com&customDomains=" height="500" width="100%25" name="recaptcha" align="middle" frameborder="0" sandbox="allow-scripts allow-same-origin allow-popups allow-forms"></iframe> <div class="actions"><button c
2024-12-05 18:04:56 UTC	165	IN	Data Raw: 61 63 30 34 62 65 31 30 38 33 37 37 63 63 33 39 37 35 32 2f 6a 73 2f 63 6f 6e 66 69 67 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 77 65 62 2f 72 65 73 2f 35 63 30 2f 36 65 65 36 64 30 38 38 30 64 61 63 30 34 62 65 31 30 38 33 37 37 63 63 33 39 37 35 32 2f 6a 73 2f 6c 69 62 2f 72 65 71 75 69 72 65 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 20 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: ac04be108377cc39752/js/config" src="https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/require.js"></script> </body> </html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.6	49825	151.101.131.1	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:55 UTC	5466	OUT	GET /ts?v=1.9.5&t=1733421893241&g=300&pgrp=main%3Aunifiedlogin%3A%3A%3Alogin&page=main%3Aunifiedlogin%3A%3A%3Alogin%3Alegacy-web-dyn&pgst=1733421881400&calc=f4539225a1122&nsid=RLPSU2OHYvlTZtXh_VMfzo7ctuMnbu-c&rsta=en_US&pgtf=Nodejs&env=live&s=ci&ccpg=US&csci=16bc73c3ccf44355b5392134ef0346f4&comp=unifiedloginnodeweb&tsrce=unifiedloginnodeweb&cu=0&ef_policy=ccpa&xe=100353%2C106885%2C105604%2C105604%2C105351%2C101126%2C100614%2C101257%2C102153%2C104200%2C104200%2C105352%2C109195%2C104458%2C104458%2C100364%2C105999%2C100885%2C109334%2C109334%2C101270%2C102557%2C102557%2C101408%2C101408%2C104227%2C104227%2C100644%2C105124%2C100391%2C102695%2C100263%2C101031%2C100267%2C108076%2C100527%2C106031%2C106031%2C107054%2C107054%2C106033%2C106033%2C106032%2C106032%2C105392%2C105392%2C106035%2C106035%2C106034%2C106034%2C106036%2C106036%2C105271%2C110648%2C101688%2C101821%2C101820%2C102208%2C105543%2C105544%2C105416%2C105416%2C101064%2C106058%2C104778%2C103119%2C100303%2C100942%2C105553%2C105553%2C105552%2C105552%2C100304%2C1 [TRUNCATED] Host: t.paypal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Cache-Control: max-age=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.paypal.com/signin/?returnUri=%2Fmyaccount%2Ftransfer%2FpayRequest%2FU-09584045BD498740V%2FU-7AK40048SY131414Y%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq&id=UJ8cMtNtnR8osXBu987dZoV1KMO8Kn.CKcv6ZA&expId=p2p&onboardData=%7B%22signUpRequest%22%3A%7B%22method%22%3A%22get%22%2C%22url%22%3A%22https%3A%2F%2Fwww.paypal.com%2Fmyaccount%2Ftransfer%2FguestLogin%2FpayRequest%2FU-09584045BD498740V%2FU-7AK40048SY131414Y%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq%26id%3DUJ8cMtNtnR8osXBu987dZoV1KMO8Kn.CKcv6ZA%22%7D%7D&flowContextData=k3KkNbgd2F3whUTyipi2CMJLh_A_-ZYRjnLUkRjoT_j0HNsy89M3Jq9pftpBPMtxKyazfBl41ygLF6L-3nSQM3yKD_1JSLMZUnm3gJtmC_GW6MtRMZgxxLdzhM2UidzudErvOhqzUKOKhl1Uolhas5WHE4v4p4McejHNxcZVkLh-Y4orpy9guCt5hhIB4GnzEz4SubWTdzvc3cAY2OwiaKLLHK8NR5mzXmQp5fVf3iIsNKSvq_9V0izgPURkU3T8RWrY5gGBkFdWln_xY5pl8zRv8lmUI-keUYe0DqQBvKVK8GwV8qiU_5p8qjPHJVW9i-G3ZBZuZum2FKJqczC5erDfF4QBe8JLLYzKBGyYHnHI7fFyBoEDubHGzh8R01uh4xAe-iAkcUj76XG_hnIoA0TzvY15PrfT8E9VdnaJhGuNJ5c8GhmekMGGnVwrlvOcZBIva0&v=1&utm_source=un [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTczMzQyMTg4MTQ4MiIsImwiOiIwIiwibSI6IjAifQ; l7_az=dcg01.phx; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352; datadome=Fs5MmB0JLdw5hCSGAmtvwdro2EIMrpyZoEKRvW~XxZ2c~hmw~iHaVACWMnscsHbkmlhxsh0aESsOTcLR3dIWEgraKwQ9F_jjSv2agvz3e2Q7qEqPf4IlaH6_FUYKbme5; ts=vreXpYrS%3D1764957890%26vteXpYrS%3D1733423690%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew
2024-12-05 18:04:56 UTC	1360	IN	HTTP/1.1 200 OK Connection: close Access-Control-Expose-Headers: Server-Timing CORRELATION-ID: 12056fbb91878 Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Type: image/gif Expires: Thu, 05 Dec 2024 18:04:55 GMT P3p: CP="CAO IND OUR SAM UNI STA COR COM" Paypal-Debug-Id: 12056fbb91878 Pragma: no-cache Set-Cookie: ts=vreXpYrS%3D1764957895%26vteXpYrS%3D1733423695%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew;Expires=Fri, 05 Dec 2025 18:04:55 GMT;domain=.paypal.com;path=/;secure;HttpOnly;SameSite=None; Set-Cookie: ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352;Expires=Fri, 05 Dec 2025 18:04:55 GMT;domain=.paypal.com;path=/;secure;SameSite=None; Traceparent: 00-000000000000000000012056fbb91878-8fcd3fc4302fad9c-01 Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Date: Thu, 05 Dec 2024 18:04:55 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Served-By: cache-iad-kjyo7100045-IAD, cache-ewr-kewr1740062-EWR X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1733421896.851213,VS0,VE81 vary: Accept-Encoding Server-Timing: "traceparent;desc="00-000000000000000000012056fbb91878-636bfdbf2961c974-01"";content-encoding;desc="",x-cdn;desc="fastly" Timing-Allow-Origin: * transfer-encoding: chunked
2024-12-05 18:04:56 UTC	4	IN	Data Raw: 32 61 0d 0a Data Ascii: 2a
2024-12-05 18:04:56 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 01 01 32 00 3b Data Ascii: GIF89a!,2;
2024-12-05 18:04:56 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.6	49818	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:55 UTC	580	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/core/baseView.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:56 UTC	796	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:04:56 GMT DC: ccg11-origin-www-1.paypal.com Etag: "6737ef18-23d+br+ident" Expires: Fri, 05 Dec 2025 18:04:56 GMT Last-Modified: Sat, 16 Nov 2024 01:02:16 GMT Paypal-Debug-Id: 127ad8b8f08f5 Server: ECAcc (lhd/35E6) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000127ad8b8f08f5-a5c826f0ba9b46a3-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 573 Connection: close
2024-12-05 18:04:56 UTC	573	IN	Data Raw: 64 65 66 69 6e 65 28 5b 22 6e 65 77 67 61 74 22 2c 22 75 6e 64 65 72 73 63 6f 72 65 22 2c 22 62 61 63 6b 62 6f 6e 65 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 2e 56 69 65 77 2e 65 78 74 65 6e 64 28 7b 74 65 6d 70 6c 61 74 65 3a 6e 75 6c 6c 2c 72 65 6e 64 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 65 2e 76 69 65 77 52 65 6e 64 65 72 65 72 2c 72 3d 74 68 69 73 2e 74 65 6d 70 6c 61 74 65 2c 69 3d 74 68 69 73 2e 73 65 72 69 61 6c 69 7a 65 28 29 3b 72 65 74 75 72 6e 20 74 2e 62 69 6e 64 41 6c 6c 28 74 68 69 73 2c 22 5f 64 6f 52 65 6e 64 65 72 22 2c 22 72 65 6e 64 65 72 45 72 72 6f 72 22 2c 22 61 66 74 65 72 52 65 6e 64 65 72 22 29 2c 74 68 69 73 2e 62 65 66 6f 72 65 52 Data Ascii: define(["newgat","underscore","backbone"],function(e,t,n){"use strict";var r=n.View.extend({template:null,render:function(){var n=e.viewRenderer,r=this.template,i=this.serialize();return t.bindAll(this,"_doRender","renderError","afterRender"),this.beforeR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.6	49819	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:55 UTC	414	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/lib/dustmotes-iterate.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:56 UTC	789	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:04:56 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6737ef18-2c1" Expires: Fri, 05 Dec 2025 18:04:56 GMT Last-Modified: Sat, 16 Nov 2024 01:02:16 GMT Paypal-Debug-Id: f04b9eefd7cae Server: ECAcc (lhd/35B7) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000f04b9eefd7cae-2e74c7830acf12e6-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 705 Connection: close
2024-12-05 18:04:56 UTC	705	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 79 70 65 6f 66 20 64 65 66 69 6e 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 64 65 66 69 6e 65 2e 61 6d 64 26 26 64 65 66 69 6e 65 2e 61 6d 64 2e 64 75 73 74 3d 3d 3d 21 30 3f 64 65 66 69 6e 65 28 5b 22 64 75 73 74 2e 63 6f 72 65 22 5d 2c 74 29 3a 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3d 3d 22 6f 62 6a 65 63 74 22 3f 28 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 72 65 71 75 69 72 65 28 22 64 75 73 74 6a 73 2d 6c 69 6e 6b 65 64 69 6e 22 29 29 2c 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 2e 72 65 67 69 73 74 65 72 57 69 74 68 3d 74 29 3a 74 28 65 2e 64 75 73 74 29 7d 29 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 68 65 6c 70 65 72 73 2e 69 74 65 72 61 74 65 3d 66 Data Ascii: (function(e,t){typeof define=="function"&&define.amd&&define.amd.dust===!0?define(["dust.core"],t):typeof module=="object"?(module.exports=t(require("dustjs-linkedin")),module.exports.registerWith=t):t(e.dust)})(this,function(e){return e.helpers.iterate=f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.6	49820	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:55 UTC	580	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/view/pageView.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.6	49821	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:55 UTC	373	OUT	GET /pa/3pjs/tl/6.4.65/patleaf.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:56 UTC	801	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:04:56 GMT DC: ccg11-origin-www-1.paypal.com Etag: "6735ac2d-267db+ident" Expires: Thu, 05 Dec 2024 19:04:56 GMT Last-Modified: Thu, 14 Nov 2024 07:52:13 GMT Paypal-Debug-Id: 00ad561ff8f4d Server: ECAcc (lhd/35C9) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-000000000000000000000ad561ff8f4d-9cda0a0444205ecc-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 157659 Connection: close
2024-12-05 18:04:56 UTC	16383	IN	Data Raw: 69 66 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 77 69 6e 64 6f 77 2e 70 61 6b 6f 3d 74 28 29 7d 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 69 28 73 2c 68 2c 6c 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 69 66 28 21 68 5b 65 5d 29 7b 69 66 28 21 73 5b 65 5d 29 7b 76 61 72 20 72 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 26 26 72 65 71 75 69 72 65 3b 69 66 28 21 74 26 26 72 29 72 65 74 75 72 6e 20 72 28 65 2c 21 30 29 3b 69 66 28 5f 29 72 65 74 75 72 6e 20 5f 28 65 2c 21 30 29 3b 74 68 72 6f 77 28 72 3d 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 6d 6f 64 75 6c 65 20 27 22 2b 65 2b 22 27 22 29 29 2e 63 6f 64 65 3d 22 4d 4f 44 55 4c 45 5f 4e 4f 54 Data Ascii: if(function(t){window.pako=t()}(function(){return function i(s,h,l){function o(e,t){if(!h[e]){if(!s[e]){var r="function"==typeof require&&require;if(!t&&r)return r(e,!0);if(_)return _(e,!0);throw(r=new Error("Cannot find module '"+e+"'")).code="MODULE_NOT
2024-12-05 18:04:56 UTC	1	IN	Data Raw: 77 Data Ascii: w
2024-12-05 18:04:56 UTC	16383	IN	Data Raw: 72 61 70 3c 3d 30 29 26 26 28 32 3d 3d 3d 6e 2e 77 72 61 70 3f 28 4c 28 6e 2c 32 35 35 26 74 2e 61 64 6c 65 72 29 2c 4c 28 6e 2c 74 2e 61 64 6c 65 72 3e 3e 38 26 32 35 35 29 2c 4c 28 6e 2c 74 2e 61 64 6c 65 72 3e 3e 31 36 26 32 35 35 29 2c 4c 28 6e 2c 74 2e 61 64 6c 65 72 3e 3e 32 34 26 32 35 35 29 2c 4c 28 6e 2c 32 35 35 26 74 2e 74 6f 74 61 6c 5f 69 6e 29 2c 4c 28 6e 2c 74 2e 74 6f 74 61 6c 5f 69 6e 3e 3e 38 26 32 35 35 29 2c 4c 28 6e 2c 74 2e 74 6f 74 61 6c 5f 69 6e 3e 3e 31 36 26 32 35 35 29 2c 4c 28 6e 2c 74 2e 74 6f 74 61 6c 5f 69 6e 3e 3e 32 34 26 32 35 35 29 29 3a 28 4e 28 6e 2c 74 2e 61 64 6c 65 72 3e 3e 3e 31 36 29 2c 4e 28 6e 2c 36 35 35 33 35 26 74 2e 61 64 6c 65 72 29 29 2c 71 28 74 29 2c 30 3c 6e 2e 77 72 61 70 26 26 28 6e 2e 77 72 61 70 3d Data Ascii: rap<=0)&&(2===n.wrap?(L(n,255&t.adler),L(n,t.adler>>8&255),L(n,t.adler>>16&255),L(n,t.adler>>24&255),L(n,255&t.total_in),L(n,t.total_in>>8&255),L(n,t.total_in>>16&255),L(n,t.total_in>>24&255)):(N(n,t.adler>>>16),N(n,65535&t.adler)),q(t),0<n.wrap&&(n.wrap=
2024-12-05 18:04:56 UTC	16383	IN	Data Raw: 22 29 3b 72 65 74 75 72 6e 20 75 2e 67 65 74 28 65 29 2e 73 65 74 28 74 2c 6e 29 2c 63 2e 67 65 74 28 65 29 2e 70 75 73 68 28 74 29 2c 6e 7d 28 6e 2c 65 29 29 7d 29 2c 69 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 74 2c 6e 75 6c 6c 29 2c 6f 2e 6f 62 73 65 72 76 65 28 69 2c 70 29 2c 6e 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 4f 28 74 2c 78 28 74 2c 65 29 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 52 28 74 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 6e 2e 73 68 65 65 74 73 3d 5b 5d 2c 68 2e 73 65 74 28 6e 2c 74 29 2c 6d 2e 73 65 74 28 6e 2c 5b 5d 29 2c 79 2e 73 65 74 28 6e 2c 6e 65 77 20 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6f 29 7b 64 6f 63 75 6d 65 6e 74 3f 74 2e 66 6f 72 45 61 63 68 28 66 75 6e Data Ascii: ");return u.get(e).set(t,n),c.get(e).push(t),n}(n,e))}),i.insertBefore(t,null),o.observe(i,p),n.forEach(function(t){O(t,x(t,e))})}function R(t){var n=this;n.sheets=[],h.set(n,t),m.set(n,[]),y.set(n,new MutationObserver(function(t,o){document?t.forEach(fun
2024-12-05 18:04:56 UTC	2	IN	Data Raw: 6c 6c Data Ascii: ll
2024-12-05 18:04:56 UTC	16383	IN	Data Raw: 28 65 29 3b 66 6f 72 28 74 3d 30 2c 6f 3d 69 3f 69 2e 6c 65 6e 67 74 68 3a 30 3b 74 3c 6f 3b 74 2b 3d 31 29 69 66 28 69 5b 74 5d 26 26 69 5b 74 5d 3d 3d 3d 45 29 7b 68 3d 21 30 3b 62 72 65 61 6b 7d 7d 29 29 2c 21 68 29 29 26 26 28 6b 2e 69 73 55 6e 6c 6f 61 64 28 65 29 26 26 28 78 3d 22 75 6e 6c 6f 61 64 69 6e 67 22 29 2c 22 63 68 61 6e 67 65 22 21 3d 3d 65 2e 74 79 70 65 7c 7c 21 64 2e 69 73 4c 65 67 61 63 79 49 45 7c 7c 22 63 68 65 63 6b 62 6f 78 22 21 3d 3d 65 2e 74 61 72 67 65 74 2e 65 6c 65 6d 65 6e 74 2e 74 79 70 65 26 26 22 72 61 64 69 6f 22 21 3d 3d 65 2e 74 61 72 67 65 74 2e 65 6c 65 6d 65 6e 74 2e 74 79 70 65 29 29 7b 69 66 28 22 70 72 6f 70 65 72 74 79 63 68 61 6e 67 65 22 3d 3d 3d 65 2e 74 79 70 65 29 7b 69 66 28 22 63 68 65 63 6b 65 64 22 21 Data Ascii: (e);for(t=0,o=i?i.length:0;t<o;t+=1)if(i[t]&&i[t]===E){h=!0;break}})),!h))&&(k.isUnload(e)&&(x="unloading"),"change"!==e.type\|\|!d.isLegacyIE\|\|"checkbox"!==e.target.element.type&&"radio"!==e.target.element.type)){if("propertychange"===e.type){if("checked"!
2024-12-05 18:04:56 UTC	16383	IN	Data Raw: 69 65 6e 74 61 74 69 6f 6e 29 7b 63 61 73 65 22 6c 61 6e 64 73 63 61 70 65 2d 70 72 69 6d 61 72 79 22 3a 63 61 73 65 22 6c 61 6e 64 73 63 61 70 65 2d 73 65 63 6f 6e 64 61 72 79 22 3a 65 3d 39 30 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 65 3d 30 7d 72 65 74 75 72 6e 20 65 7d 2c 63 6c 6f 67 3a 28 77 69 6e 64 6f 77 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2c 74 72 69 6d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 74 6f 53 74 72 69 6e 67 3f 65 2e 74 72 69 6d 3f 65 2e 74 72 69 6d 28 29 3a 65 2e 74 6f 53 74 72 69 6e 67 28 29 2e 72 65 70 6c 61 63 65 28 2f 5e 5c 73 2b 7c 5c 73 2b 24 2f 67 2c 22 22 29 3a 65 7d 2c 6c 74 72 69 6d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 74 6f 53 74 72 69 6e 67 3f Data Ascii: ientation){case"landscape-primary":case"landscape-secondary":e=90;break;default:e=0}return e},clog:(window,function(){}),trim:function(e){return e&&e.toString?e.trim?e.trim():e.toString().replace(/^\s+\|\s+$/g,""):e},ltrim:function(e){return e&&e.toString?
2024-12-05 18:04:56 UTC	16383	IN	Data Raw: 54 6f 50 61 72 65 6e 74 4c 69 6e 6b 22 2c 21 30 29 2c 75 3d 6e 2e 67 65 74 56 61 6c 75 65 28 61 2c 22 6c 6f 67 41 74 74 72 69 62 75 74 65 73 22 2c 5b 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 74 29 7b 6c 65 74 20 6e 2c 6f 2c 69 3b 69 66 28 21 65 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 69 66 28 21 28 69 3d 76 6f 69 64 20 30 21 3d 3d 74 3f 74 3a 65 2e 69 64 29 7c 7c 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 69 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 66 6f 72 28 6e 3d 30 2c 6f 3d 73 2e 6c 65 6e 67 74 68 3b 6e 3c 6f 3b 6e 2b 3d 31 29 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 73 5b 6e 5d 29 7b 69 66 28 69 3d 3d 3d 73 5b 6e 5d 29 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 65 6c 73 65 20 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 Data Ascii: ToParentLink",!0),u=n.getValue(a,"logAttributes",[])}function m(e,t){let n,o,i;if(!e)return null;if(!(i=void 0!==t?t:e.id)\|\|"string"!=typeof i)return null;for(n=0,o=s.length;n<o;n+=1)if("string"==typeof s[n]){if(i===s[n])return null}else if("object"==type
2024-12-05 18:04:56 UTC	3	IN	Data Raw: 67 65 74 Data Ascii: get
2024-12-05 18:04:56 UTC	16383	IN	Data Raw: 28 73 29 3a 73 3d 6e 75 6c 6c 29 2c 65 2e 61 74 74 72 69 62 75 74 65 73 3d 5b 7b 6e 61 6d 65 3a 63 2c 6f 6c 64 56 61 6c 75 65 3a 74 2e 6f 6c 64 56 61 6c 75 65 2c 76 61 6c 75 65 3a 73 3f 73 2e 63 75 72 72 53 74 61 74 65 2e 76 61 6c 75 65 3a 74 2e 74 61 72 67 65 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 63 29 7d 5d 3b 76 61 72 20 75 3d 65 2e 61 74 74 72 69 62 75 74 65 73 5b 30 5d 3b 69 66 28 75 2e 6f 6c 64 56 61 6c 75 65 21 3d 3d 75 2e 76 61 6c 75 65 29 7b 66 6f 72 28 6f 3d 30 2c 69 3d 79 2e 6c 65 6e 67 74 68 2c 61 3d 21 31 3b 6f 3c 69 3b 6f 2b 3d 31 29 69 66 28 73 3d 79 5b 6f 5d 2c 65 2e 69 73 53 61 6d 65 28 73 29 29 7b 73 2e 61 74 74 72 69 62 75 74 65 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 6c 65 74 20 6e 2c 6f 2c 69 2c 72 3b 66 6f 72 28 6e 3d Data Ascii: (s):s=null),e.attributes=[{name:c,oldValue:t.oldValue,value:s?s.currState.value:t.target.getAttribute(c)}];var u=e.attributes[0];if(u.oldValue!==u.value){for(o=0,i=y.length,a=!1;o<i;o+=1)if(s=y[o],e.isSame(s)){s.attributes=function(e,t){let n,o,i,r;for(n=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.6	49822	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:56 UTC	586	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/widgets/postMessage.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.6	49828	172.217.19.227	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:56 UTC	418	OUT	GET /recaptcha/enterprise.js?render=6LdCCOUUAAAAAHTE-Snr6hi4HJGtJk_d1_ce-gWB&hl=en HTTP/1.1 Host: www.recaptcha.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:56 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Thu, 05 Dec 2024 18:04:56 GMT Date: Thu, 05 Dec 2024 18:04:56 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-05 18:04:56 UTC	641	IN	Data Raw: 37 38 62 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 45 3d 27 65 6e 74 65 72 70 72 69 73 65 27 2c 61 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 2c 67 72 3d 61 5b 45 5d 3d 61 5b 45 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f Data Ascii: 78b/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var E='enterprise',a=w[N]=w[N]\|\|{},gr=a[E]=a[E]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['_
2024-12-05 18:04:56 UTC	1297	IN	Data Raw: 63 68 61 72 73 65 74 3d 27 75 74 66 2d 38 27 3b 76 61 72 20 76 3d 77 2e 6e 61 76 69 67 61 74 6f 72 2c 6d 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 6d 65 74 61 27 29 3b 6d 2e 68 74 74 70 45 71 75 69 76 3d 27 6f 72 69 67 69 6e 2d 74 72 69 61 6c 27 3b 6d 2e 63 6f 6e 74 65 6e 74 3d 27 41 37 75 78 74 6a 33 2b 68 4a 6d 4f 63 5a 46 6f 6f 46 54 30 50 73 32 37 36 50 75 4f 71 47 6e 4d 31 6a 66 6f 50 62 46 76 78 57 70 37 33 56 43 36 30 4c 6e 59 47 7a 61 79 48 56 76 63 46 65 45 69 46 30 71 72 77 79 37 66 51 41 4c 2b 67 47 56 58 55 2b 66 39 49 51 63 41 41 41 43 54 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 33 4a 6c 59 32 46 77 64 47 4e 6f 59 53 35 75 5a 58 51 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 Data Ascii: charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A7uxtj3+hJmOcZFooFT0Ps276PuOqGnM1jfoPbFvxWp73VC60LnYGzayHVvcFeEiF0qrwy7fQAL+gGVXU+f9IQcAAACTeyJvcmlnaW4iOiJodHRwczovL3JlY2FwdGNoYS5uZXQ6NDQzIiwiZmVhdHVyZSI6I
2024-12-05 18:04:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.6	49826	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:56 UTC	431	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/browser_modules/pulvus-provide/provide.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:56 UTC	789	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:04:56 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6737ef18-26e" Expires: Fri, 05 Dec 2025 18:04:56 GMT Last-Modified: Sat, 16 Nov 2024 01:02:16 GMT Paypal-Debug-Id: 9b337a812c9c0 Server: ECAcc (lhd/35DE) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000009b337a812c9c0-e74e92ca46f75ed4-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 622 Connection: close
2024-12-05 18:04:56 UTC	622	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 79 70 65 6f 66 20 64 65 66 69 6e 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 64 65 66 69 6e 65 2e 61 6d 64 26 26 64 65 66 69 6e 65 2e 61 6d 64 2e 64 75 73 74 3d 3d 3d 21 30 3f 64 65 66 69 6e 65 28 5b 22 64 75 73 74 2e 63 6f 72 65 22 5d 2c 74 29 3a 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3d 3d 22 6f 62 6a 65 63 74 22 3f 28 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 72 65 71 75 69 72 65 28 22 64 75 73 74 6a 73 2d 6c 69 6e 6b 65 64 69 6e 22 29 29 2c 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 2e 72 65 67 69 73 74 65 72 57 69 74 68 3d 74 29 3a 74 28 65 2e 64 75 73 74 29 7d 29 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 68 65 6c 70 65 72 73 2e 70 72 6f 76 69 64 65 3d 66 Data Ascii: (function(e,t){typeof define=="function"&&define.amd&&define.amd.dust===!0?define(["dust.core"],t):typeof module=="object"?(module.exports=t(require("dustjs-linkedin")),module.exports.registerWith=t):t(e.dust)})(this,function(e){return e.helpers.provide=f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.6	49833	151.101.1.21	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:56 UTC	1083	OUT	GET /signin/client-log HTTP/1.1 Host: www.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; nsid=s%3ARLPSU2OHYvlTZtXh_VMfzo7ctuMnbu-c.%2F5h%2FpbgyA12uYrTjTUlTTIQJX8aBsaqWc%2FutzlCO8XQ; l7_az=dcg01.phx; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352; datadome=Fs5MmB0JLdw5hCSGAmtvwdro2EIMrpyZoEKRvW~XxZ2c~hmw~iHaVACWMnscsHbkmlhxsh0aESsOTcLR3dIWEgraKwQ9F_jjSv2agvz3e2Q7qEqPf4IlaH6_FUYKbme5; tcs=main%3Aunifiedlogin%3A%3A%3Alogin%7CbtnLogin; x-pp-s=eyJ0IjoiMTczMzQyMTg5NDczMyIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1764957894%26vteXpYrS%3D1733423694%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew
2024-12-05 18:04:56 UTC	299	IN	HTTP/1.1 302 Found Connection: close Content-Length: 29 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Cache-Control: max-age=0, no-cache, no-store, must-revalidate
2024-12-05 18:04:56 UTC	2356	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6e 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 6f 62 6a 65 63 74 73 2e 70 61 79 70 61 6c 2e 63 6e 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 3b 20 73 63 72 69 70 74 2d 73 72 63 20 27 6e 6f 6e 63 65 2d 74 6d 77 30 4c 6e 6d 66 49 30 6f 4b 70 43 4a 65 78 2f 72 49 55 39 43 6c 33 39 69 77 36 2f 37 76 69 6d 71 36 4e 44 73 36 66 2b 4d 4c 4a 34 5a 61 27 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 68 74 74 Data Ascii: Content-Security-Policy: default-src 'self' https://.paypal.com https://.paypal.cn https://.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; script-src 'nonce-tmw0LnmfI0oKpCJex/rIU9Cl39iw6/7vimq6NDs6f+MLJ4Za' 'self' https://.paypal.com htt
2024-12-05 18:04:56 UTC	1321	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 78 2d 70 70 2d 73 3d 65 79 4a 30 49 6a 6f 69 4d 54 63 7a 4d 7a 51 79 4d 54 67 35 4e 6a 63 32 4d 69 49 73 49 6d 77 69 4f 69 49 77 49 69 77 69 62 53 49 36 49 6a 41 69 66 51 3b 20 44 6f 6d 61 69 6e 3d 2e 70 61 79 70 61 6c 2e 63 6f 6d 3b 20 50 61 74 68 3d 2f 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 37 5f 61 7a 3d 64 63 67 30 31 2e 70 68 78 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 70 61 79 70 61 6c 2e 63 6f 6d 3b 20 45 78 70 69 72 65 73 3d 54 68 75 2c 20 30 35 20 44 65 63 20 32 30 32 34 20 31 38 3a 33 34 3a 35 36 20 47 4d 54 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e Data Ascii: Set-Cookie: x-pp-s=eyJ0IjoiMTczMzQyMTg5Njc2MiIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=NoneSet-Cookie: l7_az=dcg01.phx; Path=/; Domain=paypal.com; Expires=Thu, 05 Dec 2024 18:34:56 GMT; HttpOnly; Secure; SameSite=N
2024-12-05 18:04:56 UTC	29	IN	Data Raw: 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 2f 73 69 67 6e 69 6e Data Ascii: Found. Redirecting to /signin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.6	49830	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:56 UTC	373	OUT	GET /martech/tm/paypal/mktconf.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:56 UTC	797	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:04:56 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"673b68e7-8e2a9" Expires: Thu, 05 Dec 2024 19:04:56 GMT Last-Modified: Mon, 18 Nov 2024 16:18:47 GMT Paypal-Debug-Id: 5a5b15fcc5fdc Server: ECAcc (lhd/3586) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000005a5b15fcc5fdc-4fc7c3425c896b48-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 582313 Connection: close
2024-12-05 18:04:57 UTC	16383	IN	Data Raw: 2f 2a 21 20 32 30 32 34 20 64 6c 2d 70 70 2d 6c 61 74 6d 40 70 61 79 70 61 6c 2e 63 6f 6d 20 76 65 72 28 31 2e 31 2e 30 29 20 2a 2f 0a 2f 2a 0a 2a 20 6d 6b 74 63 6f 6e 66 2e 6a 73 20 76 31 2e 31 2e 30 20 2d 20 31 31 2d 31 38 2d 32 30 32 34 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 32 34 20 64 6c 2d 70 70 2d 6c 61 74 6d 40 70 61 79 70 61 6c 2e 63 6f 6d 0a 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 0a 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 5f 69 74 65 72 61 62 6c 65 54 6f 41 72 72 61 79 4c 69 6d 69 74 28 61 72 72 2c 20 69 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 5f 69 20 3d 20 6e 75 6c 6c 20 3d 3d 20 61 72 Data Ascii: /! 2024 dl-pp-latm@paypal.com ver(1.1.0) //** mktconf.js v1.1.0 - 11-18-2024* Copyright (c) 2024 dl-pp-latm@paypal.com*/(function () { 'use strict'; (function () { function _iterableToArrayLimit(arr, i) { var _i = null == ar
2024-12-05 18:04:57 UTC	16383	IN	Data Raw: 64 7c 69 6e 7c 6a 70 7c 6b 72 7c 6d 79 7c 6e 7a 7c 70 68 7c 73 67 7c 74 68 7c 74 77 7c 76 6e 27 2c 20 27 66 65 74 63 68 43 6f 75 6e 74 72 79 27 5d 0a 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 27 76 61 72 73 27 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 73 65 6e 64 5f 74 6f 27 3a 20 27 41 57 2d 39 36 35 33 35 32 38 36 30 2f 6c 46 56 39 43 4f 65 34 76 39 67 42 45 4a 79 37 71 4d 77 44 27 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 2c 20 7b 0a 20 20 20 20 20 20 20 20 20 20 27 6e 61 6d 65 27 3a 20 27 67 61 27 2c 0a 20 20 20 20 20 20 20 20 20 20 27 76 61 72 73 27 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 73 65 6e 64 5f 74 6f 27 3a 20 27 55 41 2d 35 33 33 38 39 37 31 38 2d 31 32 27 2c 0a 20 20 20 Data Ascii: d\|in\|jp\|kr\|my\|nz\|ph\|sg\|th\|tw\|vn', 'fetchCountry'] }, 'vars': { 'send_to': 'AW-965352860/lFV9COe4v9gBEJy7qMwD' } }, { 'name': 'ga', 'vars': { 'send_to': 'UA-53389718-12',
2024-12-05 18:04:57 UTC	2	IN	Data Raw: 20 20 Data Ascii:
2024-12-05 18:04:57 UTC	16383	IN	Data Raw: 20 20 20 27 64 65 66 61 75 6c 74 56 61 6c 27 3a 20 27 27 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 65 76 65 6e 74 5f 6c 61 62 65 6c 27 3a 20 27 73 74 65 70 20 37 3a 20 65 6e 74 65 72 20 70 65 72 73 6f 6e 61 6c 20 69 6e 66 6f 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 70 61 67 65 5f 70 61 74 68 27 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 27 74 79 70 65 27 3a 20 27 76 61 72 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 27 70 61 74 68 27 3a 20 27 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 27 64 65 66 61 75 6c 74 56 61 6c 27 3a 20 27 27 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 70 61 67 65 Data Ascii: 'defaultVal': '' }, 'event_label': 'step 7: enter personal info', 'page_path': { 'type': 'var', 'path': 'location.pathname', 'defaultVal': '' }, 'page
2024-12-05 18:04:57 UTC	16383	IN	Data Raw: 6e 61 6c 3a 70 72 6f 64 75 63 74 3a 64 69 67 69 74 61 6c 2d 77 61 6c 6c 65 74 2d 73 65 6e 64 2d 72 65 63 65 69 76 65 2d 6d 6f 6e 65 79 2f 73 74 61 72 74 2d 73 65 6c 6c 69 6e 67 3a 3a 3a 7c 6d 61 69 6e 3a 6d 6b 74 67 3a 70 65 72 73 6f 6e 61 6c 3a 70 72 6f 64 75 63 74 3a 64 69 67 69 74 61 6c 2d 77 61 6c 6c 65 74 2d 6d 61 6e 61 67 65 2d 6d 6f 6e 65 79 3a 3a 3a 7c 6d 61 69 6e 3a 6d 6b 74 67 3a 70 65 72 73 6f 6e 61 6c 3a 70 72 6f 64 75 63 74 3a 64 69 67 69 74 61 6c 2d 77 61 6c 6c 65 74 2d 77 61 79 73 2d 74 6f 2d 70 61 79 2f 61 64 64 2d 70 61 79 6d 65 6e 74 2d 6d 65 74 68 6f 64 3a 3a 3a 7c 6d 61 69 6e 3a 6d 6b 74 67 3a 70 65 72 73 6f 6e 61 6c 3a 73 65 63 75 72 69 74 79 3a 64 69 67 69 74 61 6c 2d 77 61 6c 6c 65 74 2d 73 65 63 75 72 69 74 79 2d 61 6e 64 2d 70 72 Data Ascii: nal:product:digital-wallet-send-receive-money/start-selling:::\|main:mktg:personal:product:digital-wallet-manage-money:::\|main:mktg:personal:product:digital-wallet-ways-to-pay/add-payment-method:::\|main:mktg:personal:security:digital-wallet-security-and-pr
2024-12-05 18:04:57 UTC	2	IN	Data Raw: 20 20 Data Ascii:
2024-12-05 18:04:57 UTC	16383	IN	Data Raw: 20 20 20 27 64 65 66 61 75 6c 74 56 61 6c 27 3a 20 27 27 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 2c 20 7b 0a 20 20 20 20 20 20 20 20 20 20 27 6e 61 6d 65 27 3a 20 27 67 61 27 2c 0a 20 20 20 20 20 20 20 20 20 20 27 76 61 72 73 27 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 73 65 6e 64 5f 74 6f 27 3a 20 27 55 41 2d 35 33 33 38 39 37 31 38 2d 31 32 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 68 69 74 54 79 70 65 27 3a 20 27 65 76 65 6e 74 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 65 76 65 6e 74 5f 63 61 74 65 67 6f 72 79 27 3a 20 27 63 6f 6e 73 75 6d 65 72 20 63 72 65 64 69 74 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 65 76 65 6e 74 5f 61 63 74 69 6f 6e 27 3a 20 27 73 Data Ascii: 'defaultVal': '' } } }, { 'name': 'ga', 'vars': { 'send_to': 'UA-53389718-12', 'hitType': 'event', 'event_category': 'consumer credit', 'event_action': 's
2024-12-05 18:04:57 UTC	16383	IN	Data Raw: 27 74 79 70 65 27 3a 20 27 66 6e 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 6e 61 6d 65 27 3a 20 27 63 6f 6e 64 69 74 69 6f 6e 61 6c 56 61 6c 75 65 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 61 72 67 73 27 3a 20 5b 27 61 75 7c 63 32 7c 63 6e 7c 68 6b 7c 69 64 7c 69 6e 7c 6a 70 7c 6b 72 7c 6d 79 7c 6e 7a 7c 70 68 7c 73 67 7c 74 68 7c 74 77 7c 76 6e 27 2c 20 27 66 65 74 63 68 43 6f 75 6e 74 72 79 27 5d 0a 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 27 76 61 72 73 27 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 73 65 6e 64 5f 74 6f 27 3a 20 27 41 57 2d 39 36 35 33 35 32 38 36 30 2f 59 49 52 42 43 4b 6a 70 36 2d 41 42 45 4a 79 37 71 4d 77 44 27 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 2c 20 7b Data Ascii: 'type': 'fn', 'name': 'conditionalValue', 'args': ['au\|c2\|cn\|hk\|id\|in\|jp\|kr\|my\|nz\|ph\|sg\|th\|tw\|vn', 'fetchCountry'] }, 'vars': { 'send_to': 'AW-965352860/YIRBCKjp6-ABEJy7qMwD' } }, {
2024-12-05 18:04:57 UTC	2	IN	Data Raw: 6d 7c Data Ascii: m\|
2024-12-05 18:04:57 UTC	16383	IN	Data Raw: 64 6f 7c 65 63 7c 66 6b 7c 67 64 7c 67 74 7c 67 79 7c 68 6e 7c 6a 6d 7c 6b 6e 7c 6b 79 7c 6c 63 7c 6d 73 7c 6d 78 7c 6e 69 7c 70 61 7c 70 65 7c 70 79 7c 73 72 7c 73 76 7c 74 63 7c 74 74 7c 75 79 7c 76 63 7c 76 65 7c 76 67 27 2c 20 27 66 65 74 63 68 43 6f 75 6e 74 72 79 27 5d 0a 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 27 76 61 72 73 27 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 73 65 6e 64 5f 74 6f 27 3a 20 27 41 57 2d 39 39 33 37 30 31 30 34 35 2f 46 76 37 37 43 49 33 6e 32 70 63 59 45 4c 58 5a 36 74 6b 44 27 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 2c 20 7b 0a 20 20 20 20 20 20 20 20 20 20 27 6e 61 6d 65 27 3a 20 27 67 61 64 73 27 2c 0a 20 20 20 20 20 20 20 20 20 20 27 65 6e 61 62 6c 65 27 3a Data Ascii: do\|ec\|fk\|gd\|gt\|gy\|hn\|jm\|kn\|ky\|lc\|ms\|mx\|ni\|pa\|pe\|py\|sr\|sv\|tc\|tt\|uy\|vc\|ve\|vg', 'fetchCountry'] }, 'vars': { 'send_to': 'AW-993701045/Fv77CI3n2pcYELXZ6tkD' } }, { 'name': 'gads', 'enable':

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.6	49832	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:56 UTC	586	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/css/app.css HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:57 UTC	778	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: text/css Date: Thu, 05 Dec 2024 18:04:57 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-82ea" Expires: Fri, 05 Dec 2025 18:04:57 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 414af756eff5e Server: ECAcc (lhd/35D0) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000414af756eff5e-f68c17da8c00886f-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 33514 Connection: close
2024-12-05 18:04:57 UTC	16383	IN	Data Raw: 2f 2a 2a 20 6d 65 74 68 6f 64 20 72 65 73 70 6f 6e 73 69 62 6c 65 20 66 6f 72 20 6c 6f 61 64 69 6e 67 20 74 68 65 20 62 61 63 6b 67 72 6f 75 6e 64 20 69 6d 61 67 65 20 73 65 74 20 69 6e 20 43 53 53 20 2a 2a 2f 0a 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 72 6f 74 61 74 69 6f 6e 20 7b 0a 20 20 66 72 6f 6d 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0a 20 20 7d 0a 20 20 74 6f 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 Data Ascii: / method responsible for loading the background image set in CSS /@-webkit-keyframes rotation { from { -webkit-transform: rotate(0deg); transform: rotate(0deg); } to { -webkit-transform: rotate(359deg); transform: rotate(359deg)
2024-12-05 18:04:57 UTC	16383	IN	Data Raw: 0a 7d 0a 2f 2a 20 4c 41 50 20 2d 20 6d 65 64 69 75 6d 20 2a 2f 0a 2e 6a 73 20 2e 6c 61 70 20 2e 74 65 78 74 49 6e 70 75 74 2e 6d 65 64 69 75 6d 2c 0a 2e 6a 73 20 64 69 76 2e 6c 61 70 2e 74 65 78 74 49 6e 70 75 74 2e 6d 65 64 69 75 6d 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 7d 0a 2e 6a 73 20 2e 6c 61 70 20 2e 74 65 78 74 49 6e 70 75 74 2e 6d 65 64 69 75 6d 20 6c 61 62 65 6c 2e 66 6f 63 75 73 2c 0a 2e 6a 73 20 2e 66 6f 72 6d 4d 65 64 69 75 6d 20 64 69 76 2e 6c 61 70 2e 74 65 78 74 49 6e 70 75 74 2e 6d 65 64 69 75 6d 20 6c 61 62 65 6c 2e 66 6f 63 75 73 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 62 33 62 33 62 33 3b 0a 7d 0a 2e 6a 73 20 2e 6c 61 70 20 2e 74 65 78 74 49 6e 70 75 74 2e 6d Data Ascii: }/* LAP - medium */.js .lap .textInput.medium,.js div.lap.textInput.medium { padding: 0; position: relative;}.js .lap .textInput.medium label.focus,.js .formMedium div.lap.textInput.medium label.focus { color: #b3b3b3;}.js .lap .textInput.m
2024-12-05 18:04:57 UTC	748	IN	Data Raw: 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 20 7b 0a 20 20 2e 69 64 65 6e 74 69 74 79 46 6f 6f 74 65 72 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 35 30 70 78 3b 0a 20 20 7d 0a 7d 0a 2f 2a 20 70 61 67 65 20 2a 2f 0a 2f 2a 20 50 61 67 65 20 73 70 65 63 69 66 69 63 20 43 53 53 20 66 69 6c 65 73 20 2a 2f 0a 23 6c 6f 67 69 6e 20 2e 66 6f 72 67 6f 74 4c 69 6e 6b 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 32 35 70 78 20 61 75 74 6f 20 33 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 32 35 70 78 3b 0a 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 43 42 44 32 44 36 3b 0a 7d 0a 2f 2a 20 6d 6f 62 69 6c 65 20 2d 2d 2d 2d 20 2a 2f 0a 40 6d 65 64 69 61 20 61 6c 6c 20 61 6e 64 20 28 6d 61 78 2d 77 69 Data Ascii: -width: 767px) { .identityFooter { margin-top: 50px; }}/* page // Page specific CSS files /#login .forgotLink { margin: 25px auto 30px; padding-bottom: 25px; border-bottom: 1px solid #CBD2D6;}/ mobile ---- */@media all and (max-wi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.6	49839	151.101.67.1	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:57 UTC	3687	OUT	GET /ts?v=1.9.5&t=1733421893227&g=300&pgrp=main%3Aunifiedlogin%3A%3A%3Alogin&page=main%3Aunifiedlogin%3A%3A%3Alogin%3Alegacy-web-dyn&pgst=1733421881400&calc=f4539225a1122&nsid=RLPSU2OHYvlTZtXh_VMfzo7ctuMnbu-c&rsta=en_US&pgtf=Nodejs&env=live&s=ci&ccpg=US&csci=16bc73c3ccf44355b5392134ef0346f4&comp=unifiedloginnodeweb&tsrce=unifiedloginnodeweb&cu=0&ef_policy=ccpa&xe=100353%2C106885%2C105604%2C105604%2C105351%2C101126%2C100614%2C101257%2C102153%2C104200%2C104200%2C105352%2C109195%2C104458%2C104458%2C100364%2C105999%2C100885%2C109334%2C109334%2C101270%2C102557%2C102557%2C101408%2C101408%2C104227%2C104227%2C100644%2C105124%2C100391%2C102695%2C100263%2C101031%2C100267%2C108076%2C100527%2C106031%2C106031%2C107054%2C107054%2C106033%2C106033%2C106032%2C106032%2C105392%2C105392%2C106035%2C106035%2C106034%2C106034%2C106036%2C106036%2C105271%2C110648%2C101688%2C101821%2C101820%2C102208%2C105543%2C105544%2C105416%2C105416%2C101064%2C106058%2C104778%2C103119%2C100303%2C100942%2C105553%2C105553%2C105552%2C105552%2C100304%2C1 [TRUNCATED] Host: t.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; l7_az=dcg01.phx; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352; datadome=Fs5MmB0JLdw5hCSGAmtvwdro2EIMrpyZoEKRvW~XxZ2c~hmw~iHaVACWMnscsHbkmlhxsh0aESsOTcLR3dIWEgraKwQ9F_jjSv2agvz3e2Q7qEqPf4IlaH6_FUYKbme5; x-pp-s=eyJ0IjoiMTczMzQyMTg5NDczMyIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1764957895%26vteXpYrS%3D1733423695%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew
2024-12-05 18:04:57 UTC	1361	IN	HTTP/1.1 200 OK Connection: close Access-Control-Expose-Headers: Server-Timing CORRELATION-ID: 0728ee3d8399c Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Type: image/gif Expires: Thu, 05 Dec 2024 18:04:57 GMT P3p: CP="CAO IND OUR SAM UNI STA COR COM" Paypal-Debug-Id: 0728ee3d8399c Pragma: no-cache Set-Cookie: ts=vreXpYrS%3D1764957897%26vteXpYrS%3D1733423697%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew;Expires=Fri, 05 Dec 2025 18:04:57 GMT;domain=.paypal.com;path=/;secure;HttpOnly;SameSite=None; Set-Cookie: ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352;Expires=Fri, 05 Dec 2025 18:04:57 GMT;domain=.paypal.com;path=/;secure;SameSite=None; Traceparent: 00-00000000000000000000728ee3d8399c-8ca55913db606043-01 Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Date: Thu, 05 Dec 2024 18:04:57 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Served-By: cache-iad-kcgs7200126-IAD, cache-ewr-kewr1740051-EWR X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1733421898.587088,VS0,VE104 vary: Accept-Encoding Server-Timing: "traceparent;desc="00-00000000000000000000728ee3d8399c-cbac6730177d9e24-01"";content-encoding;desc="",x-cdn;desc="fastly" Timing-Allow-Origin: * transfer-encoding: chunked
2024-12-05 18:04:57 UTC	4	IN	Data Raw: 32 61 0d 0a Data Ascii: 2a
2024-12-05 18:04:57 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 01 01 32 00 3b Data Ascii: GIF89a!,2;
2024-12-05 18:04:57 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.6	49837	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:57 UTC	530	OUT	GET /pa/js/pa.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:58 UTC	800	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:04:57 GMT DC: ccg11-origin-www-1.paypal.com Etag: "6735ac2d-11212+ident" Expires: Thu, 05 Dec 2024 19:04:57 GMT Last-Modified: Thu, 14 Nov 2024 07:52:13 GMT Paypal-Debug-Id: a700c3e2ec03a Server: ECAcc (lhd/35C1) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000a700c3e2ec03a-a040008f3221dba8-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 70162 Connection: close
2024-12-05 18:04:58 UTC	16383	IN	Data Raw: 2f 2a 40 20 32 30 32 34 20 50 61 79 50 61 6c 20 28 76 31 2e 39 2e 35 29 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 74 2c 65 2c 6e 29 7b 28 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 74 7c 7c 21 74 29 72 65 74 75 72 6e 20 74 3b 76 61 72 20 6e 3d 74 5b 53 79 6d 62 6f 6c 2e 74 6f 50 72 69 6d 69 74 69 76 65 5d 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6e 29 72 65 74 75 72 6e 28 22 73 74 72 69 6e 67 22 3d 3d 3d 65 3f 53 74 72 69 6e 67 3a 4e 75 6d 62 65 72 29 28 74 29 3b 74 3d 6e 2e 63 61 6c 6c 28 74 2c 65 7c 7c 22 64 65 66 61 75 6c 74 22 29 3b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d Data Ascii: /@ 2024 PayPal (v1.9.5) /!function(){"use strict";function r(t,e,n){(e=function(t){t=function(t,e){if("object"!=typeof t\|\|!t)return t;var n=t[Symbol.toPrimitive];if(void 0===n)return("string"===e?String:Number)(t);t=n.call(t,e\|\|"default");if("object"!=
2024-12-05 18:04:58 UTC	1	IN	Data Raw: 20 Data Ascii:
2024-12-05 18:04:58 UTC	16383	IN	Data Raw: 22 2b 74 5b 72 5d 2e 74 72 69 6d 28 29 2c 72 21 3d 3d 74 2e 6c 65 6e 67 74 68 2d 31 26 26 28 6e 2b 3d 22 2c 20 22 29 7d 65 6c 73 65 20 6e 3d 74 3b 72 65 74 75 72 6e 20 6e 7d 76 61 72 20 5f 65 3d 7b 70 70 3a 2f 5c 2e 70 61 79 70 61 6c 5c 2e 63 6f 6d 24 2f 2c 61 6c 6c 3a 48 7d 3b 66 75 6e 63 74 69 6f 6e 20 50 65 28 74 2c 65 29 7b 76 61 72 20 6e 3d 21 31 2c 65 3d 65 7c 7c 71 3b 72 65 74 75 72 6e 20 6e 3d 5f 65 5b 74 3d 74 7c 7c 22 61 6c 6c 22 5d 2e 74 65 73 74 28 65 29 3f 21 30 3a 6e 7d 66 75 6e 63 74 69 6f 6e 20 45 28 74 2c 65 2c 6e 29 7b 74 72 79 7b 76 61 72 20 72 3d 65 2e 72 65 70 6c 61 63 65 28 22 5b 22 2c 22 2e 22 29 2e 72 65 70 6c 61 63 65 28 22 5d 22 2c 22 22 29 2e 73 70 6c 69 74 28 22 2e 22 29 2e 72 65 64 75 63 65 28 66 75 6e 63 74 69 6f 6e 28 74 2c Data Ascii: "+t[r].trim(),r!==t.length-1&&(n+=", ")}else n=t;return n}var _e={pp:/\.paypal\.com$/,all:H};function Pe(t,e){var n=!1,e=e\|\|q;return n=_e[t=t\|\|"all"].test(e)?!0:n}function E(t,e,n){try{var r=e.replace("[",".").replace("]","").split(".").reduce(function(t,
2024-12-05 18:04:58 UTC	16383	IN	Data Raw: 2c 6f 3d 30 3b 6f 3c 61 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 63 3d 61 5b 6f 5d 2c 75 3d 6b 65 28 22 69 6e 70 75 74 22 2c 63 29 2c 73 3d 75 2e 6c 65 6e 67 74 68 2c 6c 3d 30 3b 6c 3c 73 3b 6c 2b 2b 29 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 68 28 65 2c 22 66 6f 63 75 73 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 5f 6c 61 73 74 46 6f 72 6d 3d 74 2c 72 2e 5f 6c 61 73 74 49 6e 70 75 74 3d 65 2c 72 2e 5f 74 72 61 63 6b 69 6e 67 46 41 7c 7c 28 72 2e 5f 74 72 61 63 6b 69 6e 67 46 41 3d 21 30 2c 22 62 65 66 6f 72 65 75 6e 6c 6f 61 64 2c 68 61 73 68 63 68 61 6e 67 65 22 2e 73 70 6c 69 74 28 22 2c 22 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 68 28 77 69 6e 64 6f 77 2c 74 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 75 Data Ascii: ,o=0;o<a.length;o++)for(var c=a[o],u=ke("input",c),s=u.length,l=0;l<s;l++)!function(t,e){h(e,"focus",function(){r._lastForm=t,r._lastInput=e,r._trackingFA\|\|(r._trackingFA=!0,"beforeunload,hashchange".split(",").forEach(function(t){h(window,t,function(){nu
2024-12-05 18:04:58 UTC	16383	IN	Data Raw: 6c 6f 61 64 56 65 6e 64 6f 72 44 65 66 61 75 6c 74 28 74 2e 6e 61 6d 65 29 7c 7c 7b 7d 2c 74 29 3b 62 72 28 74 29 26 26 28 6d 72 26 26 76 72 5b 65 5d 26 26 2d 31 21 3d 3d 76 72 5b 65 5d 2e 69 6e 64 65 78 4f 66 28 74 2e 6e 61 6d 65 29 3f 75 5b 65 5d 3d 21 31 3a 6e 2e 70 75 73 68 28 74 29 29 7d 29 2c 6e 2e 6c 65 6e 67 74 68 29 26 26 28 69 3d 7b 69 64 3a 65 2c 74 72 69 67 67 65 72 3a 6f 2e 74 72 69 67 67 65 72 2c 63 61 70 74 75 72 65 3a 6f 2e 63 61 70 74 75 72 65 2c 76 65 6e 64 6f 72 73 3a 6e 7d 2c 6f 3d 50 41 59 50 41 4c 2e 61 6e 61 6c 79 74 69 63 73 2e 6c 6f 67 4a 53 45 72 72 6f 72 2c 74 3d 69 2e 74 72 69 67 67 65 72 2e 74 79 70 65 2c 61 3d 69 2e 74 72 69 67 67 65 72 2e 63 6f 6e 64 69 74 69 6f 6e 2c 69 2e 74 72 69 67 67 65 72 2e 68 61 73 4f 77 6e 50 72 6f Data Ascii: loadVendorDefault(t.name)\|\|{},t);br(t)&&(mr&&vr[e]&&-1!==vr[e].indexOf(t.name)?u[e]=!1:n.push(t))}),n.length)&&(i={id:e,trigger:o.trigger,capture:o.capture,vendors:n},o=PAYPAL.analytics.logJSError,t=i.trigger.type,a=i.trigger.condition,i.trigger.hasOwnPro
2024-12-05 18:04:58 UTC	4629	IN	Data Raw: 26 28 61 2e 76 61 6c 75 65 3d 4d 61 74 68 2e 6d 61 78 28 74 2e 73 74 61 72 74 54 69 6d 65 2d 6e 69 28 29 2c 30 29 2c 61 2e 65 6e 74 72 69 65 73 3d 5b 74 5d 2c 6e 28 29 29 7d 29 3b 74 26 26 28 6e 3d 52 28 6f 2c 61 2c 42 69 2c 63 2e 72 65 70 6f 72 74 41 6c 6c 43 68 61 6e 67 65 73 29 2c 72 3d 6f 69 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7a 69 5b 61 2e 69 64 5d 7c 7c 28 65 28 74 2e 74 61 6b 65 52 65 63 6f 72 64 73 28 29 29 2c 74 2e 64 69 73 63 6f 6e 6e 65 63 74 28 29 2c 7a 69 5b 61 2e 69 64 5d 3d 21 30 2c 6e 28 21 30 29 29 7d 29 2c 5b 22 6b 65 79 64 6f 77 6e 22 2c 22 63 6c 69 63 6b 22 5d 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 Data Ascii: &(a.value=Math.max(t.startTime-ni(),0),a.entries=[t],n())});t&&(n=R(o,a,Bi,c.reportAllChanges),r=oi(function(){zi[a.id]\|\|(e(t.takeRecords()),t.disconnect(),zi[a.id]=!0,n(!0))}),["keydown","click"].forEach(function(t){addEventListener(t,function(){return s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.6	49838	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:57 UTC	441	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/browser_modules/dustjs-helpers/dist/dust-helpers.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:58 UTC	791	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:04:57 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6737ef18-14f9" Expires: Fri, 05 Dec 2025 18:04:57 GMT Last-Modified: Sat, 16 Nov 2024 01:02:16 GMT Paypal-Debug-Id: fd2705432751b Server: ECAcc (lhd/35DB) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000fd2705432751b-a3d79bbb2922cec6-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 5369 Connection: close
2024-12-05 18:04:58 UTC	5369	IN	Data Raw: 2f 2a 21 20 64 75 73 74 6a 73 2d 68 65 6c 70 65 72 73 20 2d 20 76 31 2e 36 2e 33 0a 2a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6c 69 6e 6b 65 64 69 6e 2f 64 75 73 74 6a 73 2d 68 65 6c 70 65 72 73 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 35 20 41 6c 65 6b 73 61 6e 64 65 72 20 57 69 6c 6c 69 61 6d 73 3b 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 2a 2f 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 79 70 65 6f 66 20 64 65 66 69 6e 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 64 65 66 69 6e 65 2e 61 6d 64 26 26 64 65 66 69 6e 65 2e 61 6d 64 2e 64 75 73 74 3d 3d 3d 21 30 3f 64 65 66 69 6e 65 28 5b 22 64 75 73 74 2e 63 6f 72 65 22 5d 2c 74 29 3a 74 79 70 65 6f 66 Data Ascii: /! dustjs-helpers - v1.6.3 https://github.com/linkedin/dustjs-helpers* Copyright (c) 2015 Aleksander Williams; Released under the MIT License */(function(e,t){typeof define=="function"&&define.amd&&define.amd.dust===!0?define(["dust.core"],t):typeof

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.6	49842	18.66.161.70	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:57 UTC	1219	OUT	POST /js/ HTTP/1.1 Host: ddbm2.paypal.com Connection: keep-alive Content-Length: 6705 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: https://www.paypal.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; l7_az=dcg01.phx; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352; datadome=Fs5MmB0JLdw5hCSGAmtvwdro2EIMrpyZoEKRvW~XxZ2c~hmw~iHaVACWMnscsHbkmlhxsh0aESsOTcLR3dIWEgraKwQ9F_jjSv2agvz3e2Q7qEqPf4IlaH6_FUYKbme5; ts=vreXpYrS%3D1764957895%26vteXpYrS%3D1733423695%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew; tsrce=authchallengenodeweb; x-pp-s=eyJ0IjoiMTczMzQyMTg5NjA3MCIsImwiOiIwIiwibSI6IjAifQ
2024-12-05 18:04:57 UTC	6705	OUT	Data Raw: 6a 73 44 61 74 61 3d 25 37 42 25 32 32 74 74 73 74 25 32 32 25 33 41 31 30 2e 33 39 39 39 39 39 39 39 39 39 39 34 31 38 25 32 43 25 32 32 69 66 6f 76 25 32 32 25 33 41 66 61 6c 73 65 25 32 43 25 32 32 62 72 5f 68 25 32 32 25 33 41 39 30 37 25 32 43 25 32 32 62 72 5f 77 25 32 32 25 33 41 31 32 38 30 25 32 43 25 32 32 69 73 66 25 32 32 25 33 41 66 61 6c 73 65 25 32 43 25 32 32 6e 64 64 63 25 32 32 25 33 41 30 25 32 43 25 32 32 72 73 5f 68 25 32 32 25 33 41 31 30 32 34 25 32 43 25 32 32 72 73 5f 77 25 32 32 25 33 41 31 32 38 30 25 32 43 25 32 32 72 73 5f 63 64 25 32 32 25 33 41 32 34 25 32 43 25 32 32 70 68 65 25 32 32 25 33 41 66 61 6c 73 65 25 32 43 25 32 32 6e 6d 25 32 32 25 33 41 66 61 6c 73 65 25 32 43 25 32 32 6a 73 66 25 32 32 25 33 41 66 61 6c 73 65 Data Ascii: jsData=%7B%22ttst%22%3A10.39999999999418%2C%22ifov%22%3Afalse%2C%22br_h%22%3A907%2C%22br_w%22%3A1280%2C%22isf%22%3Afalse%2C%22nddc%22%3A0%2C%22rs_h%22%3A1024%2C%22rs_w%22%3A1280%2C%22rs_cd%22%3A24%2C%22phe%22%3Afalse%2C%22nm%22%3Afalse%2C%22jsf%22%3Afalse
2024-12-05 18:04:58 UTC	577	IN	HTTP/1.1 200 OK Content-Type: application/json;charset=utf-8 Content-Length: 230 Connection: close Date: Thu, 05 Dec 2024 18:04:58 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: DataDome Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate Expires: 0 X-Cache: Miss from cloudfront Via: 1.1 b4620d66a028319b68950536b2441dc8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH52-C1 X-Amz-Cf-Id: Dq_0fHh50h7luif7V1ynHDB4ZIrhkDBqkx_U5ykA4dvqsIZXV_9MIA== X-Content-Type-Options: nosniff Access-Control-Allow-Origin: *
2024-12-05 18:04:58 UTC	230	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 63 6f 6f 6b 69 65 22 3a 22 64 61 74 61 64 6f 6d 65 3d 55 52 6b 69 6c 5f 55 78 67 45 67 4e 4d 62 6a 66 38 31 48 7e 74 50 36 5f 4d 34 70 73 5f 6d 7e 31 46 53 4d 58 64 78 39 32 52 32 37 41 6c 6a 76 37 50 6f 71 4f 33 61 47 5a 33 33 39 74 75 70 76 74 57 51 55 38 4b 35 39 46 41 36 58 30 35 75 4a 68 69 5a 62 79 6c 66 41 75 31 6a 45 4c 75 57 34 70 70 4f 73 54 34 36 45 6e 4f 4b 7e 75 41 68 62 47 73 49 35 79 71 34 6a 5f 4d 31 39 56 6e 66 36 33 3b 20 4d 61 78 2d 41 67 65 3d 32 35 39 32 30 30 30 3b 20 44 6f 6d 61 69 6e 3d 2e 70 61 79 70 61 6c 2e 63 6f 6d 3b 20 50 61 74 68 3d 2f 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4c 61 78 22 7d Data Ascii: {"status":200,"cookie":"datadome=URkil_UxgEgNMbjf81H~tP6_M4ps_m~1FSMXdx92R27Aljv7PoqO3aGZ339tupvtWQU8K59FA6X05uJhiZbylfAu1jELuW4ppOsT46EnOK~uAhbGsI5yq4j_M19Vnf63; Max-Age=2592000; Domain=.paypal.com; Path=/; Secure; SameSite=Lax"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.6	49841	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:57 UTC	406	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/core/baseView.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:58 UTC	796	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:04:58 GMT DC: ccg11-origin-www-1.paypal.com Etag: "6737ef18-23d+br+ident" Expires: Fri, 05 Dec 2025 18:04:58 GMT Last-Modified: Sat, 16 Nov 2024 01:02:16 GMT Paypal-Debug-Id: 127ad8b8f08f5 Server: ECAcc (lhd/35E6) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000127ad8b8f08f5-a5c826f0ba9b46a3-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 573 Connection: close
2024-12-05 18:04:58 UTC	573	IN	Data Raw: 64 65 66 69 6e 65 28 5b 22 6e 65 77 67 61 74 22 2c 22 75 6e 64 65 72 73 63 6f 72 65 22 2c 22 62 61 63 6b 62 6f 6e 65 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 2e 56 69 65 77 2e 65 78 74 65 6e 64 28 7b 74 65 6d 70 6c 61 74 65 3a 6e 75 6c 6c 2c 72 65 6e 64 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 65 2e 76 69 65 77 52 65 6e 64 65 72 65 72 2c 72 3d 74 68 69 73 2e 74 65 6d 70 6c 61 74 65 2c 69 3d 74 68 69 73 2e 73 65 72 69 61 6c 69 7a 65 28 29 3b 72 65 74 75 72 6e 20 74 2e 62 69 6e 64 41 6c 6c 28 74 68 69 73 2c 22 5f 64 6f 52 65 6e 64 65 72 22 2c 22 72 65 6e 64 65 72 45 72 72 6f 72 22 2c 22 61 66 74 65 72 52 65 6e 64 65 72 22 29 2c 74 68 69 73 2e 62 65 66 6f 72 65 52 Data Ascii: define(["newgat","underscore","backbone"],function(e,t,n){"use strict";var r=n.View.extend({template:null,render:function(){var n=e.viewRenderer,r=this.template,i=this.serialize();return t.bindAll(this,"_doRender","renderError","afterRender"),this.beforeR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.6	49843	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:58 UTC	586	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/modernizr-2.6.1.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:58 UTC	790	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:04:58 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-f4c" Expires: Fri, 05 Dec 2025 18:04:58 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: f3a81dc494ff5 Server: ECAcc (lhd/3589) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000f3a81dc494ff5-3633b02f256b70a9-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 3916 Connection: close
2024-12-05 18:04:58 UTC	3916	IN	Data Raw: 2f 2a 20 4d 6f 64 65 72 6e 69 7a 72 20 32 2e 36 2e 31 20 28 43 75 73 74 6f 6d 20 42 75 69 6c 64 29 20 7c 20 4d 49 54 20 26 20 42 53 44 0a 20 2a 20 42 75 69 6c 64 3a 20 68 74 74 70 3a 2f 2f 6d 6f 64 65 72 6e 69 7a 72 2e 63 6f 6d 2f 64 6f 77 6e 6c 6f 61 64 2f 23 2d 73 68 69 76 2d 63 73 73 63 6c 61 73 73 65 73 0a 20 2a 2f 0a 3b 77 69 6e 64 6f 77 2e 4d 6f 64 65 72 6e 69 7a 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 66 75 6e 63 74 69 6f 6e 20 75 28 61 29 7b 6a 2e 63 73 73 54 65 78 74 3d 61 7d 66 75 6e 63 74 69 6f 6e 20 76 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 75 28 70 72 65 66 69 78 65 73 2e 6a 6f 69 6e 28 61 2b 22 3b 22 29 2b 28 62 7c 7c 22 22 29 29 7d 66 75 6e 63 74 69 6f 6e 20 77 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 3d Data Ascii: /* Modernizr 2.6.1 (Custom Build) \| MIT & BSD * Build: http://modernizr.com/download/#-shiv-cssclasses */;window.Modernizr=function(a,b,c){function u(a){j.cssText=a}function v(a,b){return u(prefixes.join(a+";")+(b\|\|""))}function w(a,b){return typeof a=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.6	49845	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:58 UTC	578	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/require.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:58 UTC	792	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:04:58 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-3a9d" Expires: Fri, 05 Dec 2025 18:04:58 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 0bb0259cc63ed Server: ECAcc (lhd/35B9) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000000bb0259cc63ed-34afe1882060ee0e-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 15005 Connection: close
2024-12-05 18:04:58 UTC	15005	IN	Data Raw: 2f 2a 0a 20 52 65 71 75 69 72 65 4a 53 20 32 2e 31 2e 36 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 30 2d 32 30 31 32 2c 20 54 68 65 20 44 6f 6a 6f 20 46 6f 75 6e 64 61 74 69 6f 6e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 20 41 76 61 69 6c 61 62 6c 65 20 76 69 61 20 74 68 65 20 4d 49 54 20 6f 72 20 6e 65 77 20 42 53 44 20 6c 69 63 65 6e 73 65 2e 0a 20 73 65 65 3a 20 68 74 74 70 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6a 72 62 75 72 6b 65 2f 72 65 71 75 69 72 65 6a 73 20 66 6f 72 20 64 65 74 61 69 6c 73 0a 2a 2f 0a 76 61 72 20 72 65 71 75 69 72 65 6a 73 2c 72 65 71 75 69 72 65 2c 64 65 66 69 6e 65 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 62 61 29 7b 66 75 6e 63 74 69 6f 6e 20 4a 28 62 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a Data Ascii: /* RequireJS 2.1.6 Copyright (c) 2010-2012, The Dojo Foundation All Rights Reserved. Available via the MIT or new BSD license. see: http://github.com/jrburke/requirejs for details*/var requirejs,require,define;(function(ba){function J(b){return"[obj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.6	49848	151.101.1.21	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:58 UTC	1073	OUT	GET /signin HTTP/1.1 Host: www.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; nsid=s%3ARLPSU2OHYvlTZtXh_VMfzo7ctuMnbu-c.%2F5h%2FpbgyA12uYrTjTUlTTIQJX8aBsaqWc%2FutzlCO8XQ; l7_az=dcg01.phx; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352; datadome=Fs5MmB0JLdw5hCSGAmtvwdro2EIMrpyZoEKRvW~XxZ2c~hmw~iHaVACWMnscsHbkmlhxsh0aESsOTcLR3dIWEgraKwQ9F_jjSv2agvz3e2Q7qEqPf4IlaH6_FUYKbme5; tcs=main%3Aunifiedlogin%3A%3A%3Alogin%7CbtnLogin; tsrce=authchallengenodeweb; x-pp-s=eyJ0IjoiMTczMzQyMTg5Njc2MiIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1764957896%26vteXpYrS%3D1733423696%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew
2024-12-05 18:04:58 UTC	1185	IN	HTTP/1.1 403 Forbidden Connection: close Content-Length: 708 Content-Type: text/html;charset=utf-8 Server: DataDome X-DataDome: protected Accept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory Charset: utf-8 Cache-Control: max-age=0, private, no-cache, no-store, must-revalidate Pragma: no-cache Access-Control-Allow-Credentials: true Access-Control-Expose-Headers: x-dd-b, x-set-cookie Access-Control-Allow-Origin: * X-DataDome-CID: AHrlqAAAAAMAaG7zfMJsD4kACC575A== X-DD-B: 1 Set-Cookie: datadome=8RSW3uzD4SbWvM9gFw9q0gQKTqu4dzosgEwjlVWJYqLsPPLmcSW45AaqUPwIez9Nxb_Xi8Zv7_oaSV_rYgieEwGmR_dsy5tyvCD7Ggqcjb1qKko3mAHLgzTBEcl7OT_L; Max-Age=2592000; Domain=.paypal.com; Path=/; Secure; SameSite=Lax Accept-Ranges: bytes Date: Thu, 05 Dec 2024 18:04:58 GMT Via: 1.1 varnish Paypal-Debug-Id: f6772686d2e33 Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Served-By: cache-ewr-kewr1740047-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1733421898.476431,VS0,VE18 set-cookie: ddbc=1; secure; httponly Server-Timing: content-encoding;desc="",x-cdn;desc="fastly"
2024-12-05 18:04:58 UTC	708	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 70 61 79 70 61 6c 2e 63 6f 6d 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 23 63 6d 73 67 7b 61 6e 69 6d 61 74 69 6f 6e 3a 20 41 20 31 2e 35 73 3b 7d 40 6b 65 79 66 72 61 6d 65 73 20 41 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 3b 7d 39 39 25 7b 6f 70 61 63 69 74 79 3a 30 3b 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 31 3b 7d 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 30 22 3e 3c 70 20 69 64 3d 22 63 6d 73 67 22 3e 50 6c 65 61 73 65 20 65 6e 61 62 6c 65 20 4a 53 20 61 6e 64 20 64 69 73 61 62 6c 65 20 61 6e 79 20 61 64 20 62 6c 6f 63 6b 65 72 3c 2f 70 3e 3c 73 63 72 69 70 74 20 64 61 74 61 2d 63 66 61 73 79 6e 63 3d 22 66 61 6c 73 65 22 3e Data Ascii: <html><head><title>paypal.com</title><style>#cmsg{animation: A 1.5s;}@keyframes A{0%{opacity:0;}99%{opacity:0;}100%{opacity:1;}}</style></head><body style="margin:0"><p id="cmsg">Please enable JS and disable any ad blocker</p><script data-cfasync="false">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.6	49846	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:58 UTC	580	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/authchallenge.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:58 UTC	792	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:04:58 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-7282" Expires: Fri, 05 Dec 2025 18:04:58 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 327630712f131 Server: ECAcc (lhd/35FD) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000327630712f131-7c8448a56651b410-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 29314 Connection: close
2024-12-05 18:04:59 UTC	16383	IN	Data Raw: 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 76 61 72 20 61 75 74 6f 73 75 62 6d 69 74 20 3d 20 66 61 6c 73 65 2c 0a 09 72 65 63 61 70 74 63 68 61 43 61 6c 6c 62 61 63 6b 2c 0a 09 72 65 63 61 70 74 63 68 61 45 6e 74 65 72 70 72 69 73 65 43 61 6c 6c 62 61 63 6b 3b 0a 76 61 72 20 41 44 53 5f 46 50 54 49 20 3d 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 0a 09 76 61 72 20 61 64 73 50 6c 75 67 69 6e 44 69 76 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 63 61 70 74 63 68 61 2d 73 74 61 6e 64 61 6c 6f 6e 65 27 29 2c 0a 09 09 63 73 72 66 20 3d 20 61 64 73 50 6c 75 67 69 6e 44 69 76 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 27 64 61 74 61 2d 63 73 72 66 27 29 2c 0a 09 09 73 65 73 73 69 6f 6e 49 64 20 3d 20 61 64 73 50 6c 75 67 69 Data Ascii: 'use strict';var autosubmit = false,recaptchaCallback,recaptchaEnterpriseCallback;var ADS_FPTI = (function(){var adsPluginDiv = document.getElementById('captcha-standalone'),csrf = adsPluginDiv.getAttribute('data-csrf'),sessionId = adsPlugi
2024-12-05 18:04:59 UTC	12931	IN	Data Raw: 63 68 61 20 28 4c 49 2d 36 33 32 33 38 29 0a 0a 09 09 09 09 61 70 70 65 6e 64 49 6e 70 75 74 45 6c 65 6d 65 6e 74 54 6f 46 6f 72 6d 28 20 63 61 70 74 63 68 61 54 79 70 65 20 3d 3d 3d 20 27 61 72 6b 6f 73 65 27 3f 20 27 61 72 6b 6f 73 65 27 20 3a 20 63 61 70 74 63 68 61 54 79 70 65 20 3d 3d 3d 20 41 44 53 5f 46 50 54 49 2e 43 41 50 54 43 48 41 5f 54 59 50 45 2e 48 43 41 50 54 43 48 41 20 3f 20 41 44 53 5f 46 50 54 49 2e 43 41 50 54 43 48 41 5f 54 59 50 45 2e 48 43 41 50 54 43 48 41 3a 20 63 61 70 74 63 68 61 54 79 70 65 20 3d 3d 3d 20 41 44 53 5f 46 50 54 49 2e 43 41 50 54 43 48 41 5f 54 59 50 45 2e 47 4f 4f 47 4c 45 5f 52 45 43 41 50 54 43 48 41 56 33 20 3f 20 27 67 72 63 56 33 45 6e 74 54 6f 6b 65 6e 27 20 3a 20 63 61 70 74 63 68 61 54 79 70 65 20 3d 3d Data Ascii: cha (LI-63238)appendInputElementToForm( captchaType === 'arkose'? 'arkose' : captchaType === ADS_FPTI.CAPTCHA_TYPE.HCAPTCHA ? ADS_FPTI.CAPTCHA_TYPE.HCAPTCHA: captchaType === ADS_FPTI.CAPTCHA_TYPE.GOOGLE_RECAPTCHAV3 ? 'grcV3EntToken' : captchaType ==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.6	49844	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:04:58 UTC	573	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/config.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:04:59 UTC	790	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:04:58 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-7cd" Expires: Fri, 05 Dec 2025 18:04:58 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 8653374dc5fdc Server: ECAcc (lhd/35D5) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000008653374dc5fdc-6f7d76958421d6bd-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 1997 Connection: close
2024-12-05 18:04:59 UTC	1997	IN	Data Raw: 2f 2a 20 67 6c 6f 62 61 6c 20 72 65 71 75 69 72 65 6a 73 3a 74 72 75 65 20 2a 2f 0a 72 65 71 75 69 72 65 6a 73 2e 63 6f 6e 66 69 67 28 7b 0a 09 64 65 70 73 3a 20 5b 27 61 70 70 27 5d 2c 0a 09 70 61 74 68 73 3a 20 7b 0a 09 09 22 6a 71 75 65 72 79 22 3a 09 09 09 09 09 27 6c 69 62 2f 6a 71 75 65 72 79 2d 31 2e 31 32 2e 34 27 2c 0a 09 09 22 6a 71 75 65 72 79 55 49 22 3a 09 09 09 09 09 27 6c 69 62 2f 6a 71 75 65 72 79 2e 75 69 2e 6d 69 6e 69 27 2c 0a 09 09 22 6a 73 6f 6e 22 3a 09 09 09 09 09 09 28 74 79 70 65 6f 66 20 4a 53 4f 4e 20 3d 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 3f 20 27 6c 69 62 2f 6a 73 6f 6e 32 27 20 3a 20 27 65 6d 70 74 79 3a 27 2c 0a 09 09 22 75 6e 64 65 72 73 63 6f 72 65 22 3a 09 09 09 09 27 6c 69 62 2f 75 6e 64 65 72 73 63 6f 72 65 Data Ascii: /* global requirejs:true */requirejs.config({deps: ['app'],paths: {"jquery":'lib/jquery-1.12.4',"jqueryUI":'lib/jquery.ui.mini',"json":(typeof JSON === 'undefined') ? 'lib/json2' : 'empty:',"underscore":'lib/underscore

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.6	49853	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:00 UTC	356	OUT	GET /pa/js/pa.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:05:00 UTC	800	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:05:00 GMT DC: ccg11-origin-www-1.paypal.com Etag: "6735ac2d-11212+ident" Expires: Thu, 05 Dec 2024 19:05:00 GMT Last-Modified: Thu, 14 Nov 2024 07:52:13 GMT Paypal-Debug-Id: a700c3e2ec03a Server: ECAcc (lhd/35C1) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000a700c3e2ec03a-a040008f3221dba8-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 70162 Connection: close
2024-12-05 18:05:00 UTC	16383	IN	Data Raw: 2f 2a 40 20 32 30 32 34 20 50 61 79 50 61 6c 20 28 76 31 2e 39 2e 35 29 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 74 2c 65 2c 6e 29 7b 28 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 74 7c 7c 21 74 29 72 65 74 75 72 6e 20 74 3b 76 61 72 20 6e 3d 74 5b 53 79 6d 62 6f 6c 2e 74 6f 50 72 69 6d 69 74 69 76 65 5d 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6e 29 72 65 74 75 72 6e 28 22 73 74 72 69 6e 67 22 3d 3d 3d 65 3f 53 74 72 69 6e 67 3a 4e 75 6d 62 65 72 29 28 74 29 3b 74 3d 6e 2e 63 61 6c 6c 28 74 2c 65 7c 7c 22 64 65 66 61 75 6c 74 22 29 3b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d Data Ascii: /@ 2024 PayPal (v1.9.5) /!function(){"use strict";function r(t,e,n){(e=function(t){t=function(t,e){if("object"!=typeof t\|\|!t)return t;var n=t[Symbol.toPrimitive];if(void 0===n)return("string"===e?String:Number)(t);t=n.call(t,e\|\|"default");if("object"!=
2024-12-05 18:05:01 UTC	16383	IN	Data Raw: 20 22 2b 74 5b 72 5d 2e 74 72 69 6d 28 29 2c 72 21 3d 3d 74 2e 6c 65 6e 67 74 68 2d 31 26 26 28 6e 2b 3d 22 2c 20 22 29 7d 65 6c 73 65 20 6e 3d 74 3b 72 65 74 75 72 6e 20 6e 7d 76 61 72 20 5f 65 3d 7b 70 70 3a 2f 5c 2e 70 61 79 70 61 6c 5c 2e 63 6f 6d 24 2f 2c 61 6c 6c 3a 48 7d 3b 66 75 6e 63 74 69 6f 6e 20 50 65 28 74 2c 65 29 7b 76 61 72 20 6e 3d 21 31 2c 65 3d 65 7c 7c 71 3b 72 65 74 75 72 6e 20 6e 3d 5f 65 5b 74 3d 74 7c 7c 22 61 6c 6c 22 5d 2e 74 65 73 74 28 65 29 3f 21 30 3a 6e 7d 66 75 6e 63 74 69 6f 6e 20 45 28 74 2c 65 2c 6e 29 7b 74 72 79 7b 76 61 72 20 72 3d 65 2e 72 65 70 6c 61 63 65 28 22 5b 22 2c 22 2e 22 29 2e 72 65 70 6c 61 63 65 28 22 5d 22 2c 22 22 29 2e 73 70 6c 69 74 28 22 2e 22 29 2e 72 65 64 75 63 65 28 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: "+t[r].trim(),r!==t.length-1&&(n+=", ")}else n=t;return n}var _e={pp:/\.paypal\.com$/,all:H};function Pe(t,e){var n=!1,e=e\|\|q;return n=_e[t=t\|\|"all"].test(e)?!0:n}function E(t,e,n){try{var r=e.replace("[",".").replace("]","").split(".").reduce(function(t
2024-12-05 18:05:01 UTC	2	IN	Data Raw: 29 2c Data Ascii: ),
2024-12-05 18:05:01 UTC	16383	IN	Data Raw: 6f 3d 30 3b 6f 3c 61 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 63 3d 61 5b 6f 5d 2c 75 3d 6b 65 28 22 69 6e 70 75 74 22 2c 63 29 2c 73 3d 75 2e 6c 65 6e 67 74 68 2c 6c 3d 30 3b 6c 3c 73 3b 6c 2b 2b 29 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 68 28 65 2c 22 66 6f 63 75 73 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 5f 6c 61 73 74 46 6f 72 6d 3d 74 2c 72 2e 5f 6c 61 73 74 49 6e 70 75 74 3d 65 2c 72 2e 5f 74 72 61 63 6b 69 6e 67 46 41 7c 7c 28 72 2e 5f 74 72 61 63 6b 69 6e 67 46 41 3d 21 30 2c 22 62 65 66 6f 72 65 75 6e 6c 6f 61 64 2c 68 61 73 68 63 68 61 6e 67 65 22 2e 73 70 6c 69 74 28 22 2c 22 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 68 28 77 69 6e 64 6f 77 2c 74 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 75 6c Data Ascii: o=0;o<a.length;o++)for(var c=a[o],u=ke("input",c),s=u.length,l=0;l<s;l++)!function(t,e){h(e,"focus",function(){r._lastForm=t,r._lastInput=e,r._trackingFA\|\|(r._trackingFA=!0,"beforeunload,hashchange".split(",").forEach(function(t){h(window,t,function(){nul
2024-12-05 18:05:01 UTC	16383	IN	Data Raw: 6f 61 64 56 65 6e 64 6f 72 44 65 66 61 75 6c 74 28 74 2e 6e 61 6d 65 29 7c 7c 7b 7d 2c 74 29 3b 62 72 28 74 29 26 26 28 6d 72 26 26 76 72 5b 65 5d 26 26 2d 31 21 3d 3d 76 72 5b 65 5d 2e 69 6e 64 65 78 4f 66 28 74 2e 6e 61 6d 65 29 3f 75 5b 65 5d 3d 21 31 3a 6e 2e 70 75 73 68 28 74 29 29 7d 29 2c 6e 2e 6c 65 6e 67 74 68 29 26 26 28 69 3d 7b 69 64 3a 65 2c 74 72 69 67 67 65 72 3a 6f 2e 74 72 69 67 67 65 72 2c 63 61 70 74 75 72 65 3a 6f 2e 63 61 70 74 75 72 65 2c 76 65 6e 64 6f 72 73 3a 6e 7d 2c 6f 3d 50 41 59 50 41 4c 2e 61 6e 61 6c 79 74 69 63 73 2e 6c 6f 67 4a 53 45 72 72 6f 72 2c 74 3d 69 2e 74 72 69 67 67 65 72 2e 74 79 70 65 2c 61 3d 69 2e 74 72 69 67 67 65 72 2e 63 6f 6e 64 69 74 69 6f 6e 2c 69 2e 74 72 69 67 67 65 72 2e 68 61 73 4f 77 6e 50 72 6f 70 Data Ascii: oadVendorDefault(t.name)\|\|{},t);br(t)&&(mr&&vr[e]&&-1!==vr[e].indexOf(t.name)?u[e]=!1:n.push(t))}),n.length)&&(i={id:e,trigger:o.trigger,capture:o.capture,vendors:n},o=PAYPAL.analytics.logJSError,t=i.trigger.type,a=i.trigger.condition,i.trigger.hasOwnProp
2024-12-05 18:05:01 UTC	4628	IN	Data Raw: 28 61 2e 76 61 6c 75 65 3d 4d 61 74 68 2e 6d 61 78 28 74 2e 73 74 61 72 74 54 69 6d 65 2d 6e 69 28 29 2c 30 29 2c 61 2e 65 6e 74 72 69 65 73 3d 5b 74 5d 2c 6e 28 29 29 7d 29 3b 74 26 26 28 6e 3d 52 28 6f 2c 61 2c 42 69 2c 63 2e 72 65 70 6f 72 74 41 6c 6c 43 68 61 6e 67 65 73 29 2c 72 3d 6f 69 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7a 69 5b 61 2e 69 64 5d 7c 7c 28 65 28 74 2e 74 61 6b 65 52 65 63 6f 72 64 73 28 29 29 2c 74 2e 64 69 73 63 6f 6e 6e 65 63 74 28 29 2c 7a 69 5b 61 2e 69 64 5d 3d 21 30 2c 6e 28 21 30 29 29 7d 29 2c 5b 22 6b 65 79 64 6f 77 6e 22 2c 22 63 6c 69 63 6b 22 5d 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 65 Data Ascii: (a.value=Math.max(t.startTime-ni(),0),a.entries=[t],n())});t&&(n=R(o,a,Bi,c.reportAllChanges),r=oi(function(){zi[a.id]\|\|(e(t.takeRecords()),t.disconnect(),zi[a.id]=!0,n(!0))}),["keydown","click"].forEach(function(t){addEventListener(t,function(){return se

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.6	49854	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:00 UTC	1017	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/hcaptcha/hcaptcha_fph.html?siteKey=bf07db68-5c2e-42e8-8779-ea8384890eea&locale.x=en_US&country.x=US&checkConnectionTimeout=10000&domain=hcaptcha.paypal.com&imgsDomain=imgs.hcaptcha.paypal.com&assetsDomain=newassets.hcaptcha.paypal.com&accountsDomain=accounts.hcaptcha.paypal.com&customDomains= HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:05:00 UTC	667	IN	HTTP/1.1 200 OK Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: text/html Date: Thu, 05 Dec 2024 18:05:00 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-2471" Expires: Fri, 05 Dec 2025 18:05:00 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 484a4088f052e Server: ECAcc (lhd/35BD) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000484a4088f052e-892d97c2e0d7f7f0-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 9329 Connection: close
2024-12-05 18:05:00 UTC	9329	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 0a 3c 68 65 61 64 3e 0a 09 3c 73 74 79 6c 65 3e 0a 09 09 2e 73 70 69 6e 6e 65 72 3a 61 66 74 65 72 2c 0a 09 09 2e 73 70 69 6e 6e 65 72 3a 62 65 66 6f 72 65 20 7b 0a 09 09 09 63 6f 6e 74 65 6e 74 3a 20 27 27 0a 09 09 7d 0a 0a 09 09 23 72 65 63 61 70 74 63 68 61 20 7b 0a 09 09 09 7a 2d 69 6e 64 65 78 3a 20 31 0a 09 09 7d 0a 0a 09 09 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 72 6f 74 61 74 69 6f 6e 20 7b 0a 09 09 09 66 72 6f 6d 20 7b 0a 09 09 09 09 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 29 3b 0a 09 09 09 09 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 29 0a 09 09 09 7d 0a 0a 09 09 09 74 6f 20 7b 0a 09 09 09 09 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 Data Ascii: <html><head><style>.spinner:after,.spinner:before {content: ''}#recaptcha {z-index: 1}@-webkit-keyframes rotation {from {-webkit-transform: rotate(0);transform: rotate(0)}to {-webkit-transform: r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.6	49855	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:00 UTC	412	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/modernizr-2.6.1.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:05:00 UTC	790	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:05:00 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-f4c" Expires: Fri, 05 Dec 2025 18:05:00 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: f3a81dc494ff5 Server: ECAcc (lhd/3589) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000f3a81dc494ff5-3633b02f256b70a9-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 3916 Connection: close
2024-12-05 18:05:00 UTC	3916	IN	Data Raw: 2f 2a 20 4d 6f 64 65 72 6e 69 7a 72 20 32 2e 36 2e 31 20 28 43 75 73 74 6f 6d 20 42 75 69 6c 64 29 20 7c 20 4d 49 54 20 26 20 42 53 44 0a 20 2a 20 42 75 69 6c 64 3a 20 68 74 74 70 3a 2f 2f 6d 6f 64 65 72 6e 69 7a 72 2e 63 6f 6d 2f 64 6f 77 6e 6c 6f 61 64 2f 23 2d 73 68 69 76 2d 63 73 73 63 6c 61 73 73 65 73 0a 20 2a 2f 0a 3b 77 69 6e 64 6f 77 2e 4d 6f 64 65 72 6e 69 7a 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 66 75 6e 63 74 69 6f 6e 20 75 28 61 29 7b 6a 2e 63 73 73 54 65 78 74 3d 61 7d 66 75 6e 63 74 69 6f 6e 20 76 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 75 28 70 72 65 66 69 78 65 73 2e 6a 6f 69 6e 28 61 2b 22 3b 22 29 2b 28 62 7c 7c 22 22 29 29 7d 66 75 6e 63 74 69 6f 6e 20 77 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 3d Data Ascii: /* Modernizr 2.6.1 (Custom Build) \| MIT & BSD * Build: http://modernizr.com/download/#-shiv-cssclasses */;window.Modernizr=function(a,b,c){function u(a){j.cssText=a}function v(a,b){return u(prefixes.join(a+";")+(b\|\|""))}function w(a,b){return typeof a=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.6	49856	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:00 UTC	404	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/require.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:05:00 UTC	792	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:05:00 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-3a9d" Expires: Fri, 05 Dec 2025 18:05:00 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 0bb0259cc63ed Server: ECAcc (lhd/35B9) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000000bb0259cc63ed-34afe1882060ee0e-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 15005 Connection: close
2024-12-05 18:05:00 UTC	15005	IN	Data Raw: 2f 2a 0a 20 52 65 71 75 69 72 65 4a 53 20 32 2e 31 2e 36 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 30 2d 32 30 31 32 2c 20 54 68 65 20 44 6f 6a 6f 20 46 6f 75 6e 64 61 74 69 6f 6e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 20 41 76 61 69 6c 61 62 6c 65 20 76 69 61 20 74 68 65 20 4d 49 54 20 6f 72 20 6e 65 77 20 42 53 44 20 6c 69 63 65 6e 73 65 2e 0a 20 73 65 65 3a 20 68 74 74 70 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6a 72 62 75 72 6b 65 2f 72 65 71 75 69 72 65 6a 73 20 66 6f 72 20 64 65 74 61 69 6c 73 0a 2a 2f 0a 76 61 72 20 72 65 71 75 69 72 65 6a 73 2c 72 65 71 75 69 72 65 2c 64 65 66 69 6e 65 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 62 61 29 7b 66 75 6e 63 74 69 6f 6e 20 4a 28 62 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a Data Ascii: /* RequireJS 2.1.6 Copyright (c) 2010-2012, The Dojo Foundation All Rights Reserved. Available via the MIT or new BSD license. see: http://github.com/jrburke/requirejs for details*/var requirejs,require,define;(function(ba){function J(b){return"[obj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.6	49860	151.101.193.21	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:00 UTC	1663	OUT	POST /auth/logclientdata HTTP/1.1 Host: www.paypal.com Connection: keep-alive Content-Length: 549 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" Content-Type: application/json;charset=UTF-8 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.paypal.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.paypal.com/signin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; nsid=s%3ARLPSU2OHYvlTZtXh_VMfzo7ctuMnbu-c.%2F5h%2FpbgyA12uYrTjTUlTTIQJX8aBsaqWc%2FutzlCO8XQ; l7_az=dcg01.phx; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352; tcs=main%3Aunifiedlogin%3A%3A%3Alogin%7CbtnLogin; tsrce=authchallengenodeweb; x-pp-s=eyJ0IjoiMTczMzQyMTg5Njc2MiIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1764957897%26vteXpYrS%3D1733423697%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew; datadome=8RSW3uzD4SbWvM9gFw9q0gQKTqu4dzosgEwjlVWJYqLsPPLmcSW45AaqUPwIez9Nxb_Xi8Zv7_oaSV_rYgieEwGmR_dsy5tyvCD7Ggqcjb1qKko3mAHLgzTBEcl7OT_L; ddbc=1
2024-12-05 18:05:00 UTC	549	OUT	Data Raw: 7b 22 66 70 74 69 22 3a 7b 22 70 67 72 70 22 3a 22 6d 61 69 6e 3a 61 75 74 68 63 68 61 6c 6c 65 6e 67 65 3a 3a 73 69 67 6e 69 6e 22 2c 22 70 61 67 65 22 3a 22 6d 61 69 6e 3a 61 75 74 68 63 68 61 6c 6c 65 6e 67 65 3a 3a 73 69 67 6e 69 6e 22 2c 22 70 67 73 74 22 3a 22 31 37 33 33 34 32 31 38 39 36 30 32 32 22 2c 22 63 61 6c 63 22 3a 22 66 34 37 37 33 39 33 35 61 39 38 39 36 22 2c 22 6e 73 69 64 22 3a 22 52 4c 50 53 55 32 4f 48 59 76 6c 54 5a 74 58 68 5f 56 4d 66 7a 6f 37 63 74 75 4d 6e 62 75 2d 63 22 2c 22 72 73 74 61 22 3a 22 65 6e 5f 55 53 22 2c 22 70 67 74 66 22 3a 22 4e 6f 64 65 6a 73 22 2c 22 65 6e 76 22 3a 22 6c 69 76 65 22 2c 22 73 22 3a 22 63 69 22 2c 22 63 63 70 67 22 3a 22 55 53 22 2c 22 63 73 63 69 22 3a 22 66 34 36 66 34 38 35 33 33 34 31 62 34 Data Ascii: {"fpti":{"pgrp":"main:authchallenge::signin","page":"main:authchallenge::signin","pgst":"1733421896022","calc":"f4773935a9896","nsid":"RLPSU2OHYvlTZtXh_VMfzo7ctuMnbu-c","rsta":"en_US","pgtf":"Nodejs","env":"live","s":"ci","ccpg":"US","csci":"f46f4853341b4
2024-12-05 18:05:01 UTC	344	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1927 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Access-Control-Expose-Headers: Server-Timing Cache-Control: max-age=0, no-cache, no-store, must-revalidate
2024-12-05 18:05:01 UTC	2112	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6e 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 6f 62 6a 65 63 74 73 2e 70 61 79 70 61 6c 2e 63 6e 3b 20 73 63 72 69 70 74 2d 73 72 63 20 27 6e 6f 6e 63 65 2d 4d 67 7a 77 63 73 74 4d 48 74 72 77 51 37 57 75 66 68 4d 51 77 45 45 49 66 77 4a 39 39 69 70 76 52 66 79 4a 64 68 45 4b 4e 43 67 6e 34 42 67 47 27 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6e Data Ascii: Content-Security-Policy: default-src 'self' https://.paypal.com https://.paypal.cn https://.paypalobjects.com https://objects.paypal.cn; script-src 'nonce-MgzwcstMHtrwQ7WufhMQwEEIfwJ99ipvRfyJdhEKNCgn4BgG' 'self' https://.paypal.com https://*.paypal.cn
2024-12-05 18:05:01 UTC	1677	IN	Data Raw: 50 65 72 6d 69 73 73 69 6f 6e 73 2d 50 6f 6c 69 63 79 3a 20 63 68 2d 75 61 2d 70 6c 61 74 66 6f 72 6d 2d 76 65 72 73 69 6f 6e 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 61 72 63 68 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 77 6f 77 36 34 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 6d 6f 64 65 6c 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 66 75 6c 6c 2d 76 65 Data Ascii: Permissions-Policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-ve
2024-12-05 18:05:01 UTC	346	IN	Data Raw: 58 2d 53 65 72 76 65 64 2d 42 79 3a 20 63 61 63 68 65 2d 69 61 64 2d 6b 69 61 64 37 30 30 30 31 37 35 2d 49 41 44 2c 20 63 61 63 68 65 2d 6e 79 63 2d 6b 74 65 62 31 38 39 30 30 38 31 2d 4e 59 43 2c 20 63 61 63 68 65 2d 6e 79 63 2d 6b 74 65 62 31 38 39 30 30 38 31 2d 4e 59 43 0d 0a 58 2d 43 61 63 68 65 3a 20 4d 49 53 53 2c 20 4d 49 53 53 2c 20 4d 49 53 53 0d 0a 58 2d 43 61 63 68 65 2d 48 69 74 73 3a 20 30 2c 20 30 2c 20 30 0d 0a 58 2d 54 69 6d 65 72 3a 20 53 31 37 33 33 34 32 31 39 30 31 2e 37 36 32 34 39 31 2c 56 53 30 2c 56 45 31 34 33 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 53 65 72 76 65 72 2d 54 69 6d 69 6e 67 3a 20 22 74 72 61 63 65 70 61 72 65 6e 74 3b 64 65 73 63 3d 22 30 30 2d 30 30 30 30 30 30 30 30 30 30 30 30 Data Ascii: X-Served-By: cache-iad-kiad7000175-IAD, cache-nyc-kteb1890081-NYC, cache-nyc-kteb1890081-NYCX-Cache: MISS, MISS, MISSX-Cache-Hits: 0, 0, 0X-Timer: S1733421901.762491,VS0,VE143Vary: Accept-EncodingServer-Timing: "traceparent;desc="00-000000000000
2024-12-05 18:05:01 UTC	1378	IN	Data Raw: 7b 22 69 73 43 6f 6f 6b 69 65 44 69 73 61 6c 62 65 64 22 3a 74 72 75 65 2c 22 63 6f 6f 6b 69 65 44 69 73 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 6f 42 72 61 6e 64 22 3a 22 75 73 22 2c 22 73 79 73 22 3a 7b 22 6c 6f 63 61 6c 69 74 79 22 3a 7b 22 74 69 6d 65 7a 6f 6e 65 22 3a 7b 22 64 65 74 65 72 6d 69 6e 65 72 22 3a 22 76 69 61 43 6f 77 50 72 69 6d 61 72 79 22 2c 22 76 61 6c 75 65 22 3a 22 41 6d 65 72 69 63 61 2f 4c 6f 73 5f 41 6e 67 65 6c 65 73 22 7d 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 5f 55 53 22 2c 22 6c 61 6e 67 75 61 67 65 22 3a 22 65 6e 22 2c 22 64 69 72 65 63 74 69 6f 6e 61 6c 69 74 79 22 3a 22 6c 74 72 22 7d 2c 22 6c 69 6e 6b 73 22 3a 7b 22 6a 73 42 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f Data Ascii: {"isCookieDisalbed":true,"cookieDisabled":false,"coBrand":"us","sys":{"locality":{"timezone":{"determiner":"viaCowPrimary","value":"America/Los_Angeles"},"country":"US","locale":"en_US","language":"en","directionality":"ltr"},"links":{"jsBaseUrl":"https:/
2024-12-05 18:05:01 UTC	549	IN	Data Raw: 75 6c 6c 5c 22 3e 50 6f 6c 69 63 79 20 55 70 64 61 74 65 73 3c 2f 61 3e 22 2c 22 77 6f 72 6c 64 77 69 64 65 22 3a 22 3c 61 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 20 68 72 65 66 3d 5c 22 2f 75 73 2f 77 65 62 61 70 70 73 2f 6d 70 70 2f 63 6f 75 6e 74 72 79 2d 77 6f 72 6c 64 77 69 64 65 5c 22 3e 57 6f 72 6c 64 77 69 64 65 3c 2f 61 3e 22 7d 7d 2c 22 74 72 61 63 6b 69 6e 67 22 3a 7b 22 66 70 74 69 22 3a 7b 22 6e 61 6d 65 22 3a 22 70 74 61 22 2c 22 6a 73 55 52 4c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 22 2c 22 73 65 72 76 65 72 55 52 4c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 2e 70 61 79 70 61 6c 2e 63 6f 6d 2f 74 73 22 2c 22 64 61 74 61 53 74 72 69 6e 67 22 3a 22 70 67 72 70 3d 61 75 74 68 63 Data Ascii: ull\">Policy Updates</a>","worldwide":"<a target=\"_blank\" href=\"/us/webapps/mpp/country-worldwide\">Worldwide</a>"}},"tracking":{"fpti":{"name":"pta","jsURL":"https://www.paypalobjects.com","serverURL":"https://t.paypal.com/ts","dataString":"pgrp=authc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.6	49858	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:00 UTC	399	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/config.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:05:01 UTC	790	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:05:01 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-7cd" Expires: Fri, 05 Dec 2025 18:05:01 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 8653374dc5fdc Server: ECAcc (lhd/35D5) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000008653374dc5fdc-6f7d76958421d6bd-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 1997 Connection: close
2024-12-05 18:05:01 UTC	1997	IN	Data Raw: 2f 2a 20 67 6c 6f 62 61 6c 20 72 65 71 75 69 72 65 6a 73 3a 74 72 75 65 20 2a 2f 0a 72 65 71 75 69 72 65 6a 73 2e 63 6f 6e 66 69 67 28 7b 0a 09 64 65 70 73 3a 20 5b 27 61 70 70 27 5d 2c 0a 09 70 61 74 68 73 3a 20 7b 0a 09 09 22 6a 71 75 65 72 79 22 3a 09 09 09 09 09 27 6c 69 62 2f 6a 71 75 65 72 79 2d 31 2e 31 32 2e 34 27 2c 0a 09 09 22 6a 71 75 65 72 79 55 49 22 3a 09 09 09 09 09 27 6c 69 62 2f 6a 71 75 65 72 79 2e 75 69 2e 6d 69 6e 69 27 2c 0a 09 09 22 6a 73 6f 6e 22 3a 09 09 09 09 09 09 28 74 79 70 65 6f 66 20 4a 53 4f 4e 20 3d 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 3f 20 27 6c 69 62 2f 6a 73 6f 6e 32 27 20 3a 20 27 65 6d 70 74 79 3a 27 2c 0a 09 09 22 75 6e 64 65 72 73 63 6f 72 65 22 3a 09 09 09 09 27 6c 69 62 2f 75 6e 64 65 72 73 63 6f 72 65 Data Ascii: /* global requirejs:true */requirejs.config({deps: ['app'],paths: {"jquery":'lib/jquery-1.12.4',"jqueryUI":'lib/jquery.ui.mini',"json":(typeof JSON === 'undefined') ? 'lib/json2' : 'empty:',"underscore":'lib/underscore

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.6	49859	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:00 UTC	570	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/app.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:05:01 UTC	797	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:05:01 GMT DC: ccg11-origin-www-1.paypal.com Etag: "6736db9f-4ae+br+ident" Expires: Fri, 05 Dec 2025 18:05:01 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 4e55a848c934a Server: ECAcc (lhd/35A5) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000004e55a848c934a-0939ca7ca05aa86c-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 1198 Connection: close
2024-12-05 18:05:01 UTC	1198	IN	Data Raw: 72 65 71 75 69 72 65 28 5b 27 6e 6f 75 67 61 74 27 2c 20 27 62 61 63 6b 62 6f 6e 65 27 2c 20 27 72 6f 75 74 65 72 27 2c 20 27 77 69 64 67 65 74 73 2f 61 6e 61 6c 79 74 69 63 73 27 2c 20 27 75 6e 64 65 72 73 63 6f 72 65 27 2c 20 27 6f 70 69 6e 69 6f 6e 4c 61 62 43 6f 6d 70 6f 6e 65 6e 74 27 5d 2c 0a 0a 09 66 75 6e 63 74 69 6f 6e 20 28 6e 6f 75 67 61 74 2c 20 42 61 63 6b 62 6f 6e 65 2c 20 52 6f 75 74 65 72 2c 20 41 6e 61 6c 79 74 69 63 73 2c 20 5f 29 20 7b 0a 0a 09 09 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 09 09 76 61 72 20 63 6f 6e 74 65 78 74 2c 20 76 69 65 77 4e 61 6d 65 2c 20 72 6f 75 74 65 72 3b 0a 0a 09 09 2f 2f 20 54 75 72 6e 69 6e 67 20 42 61 63 6b 62 6f 6e 65 20 69 6e 74 6f 20 61 20 70 75 62 2f 73 75 62 20 68 75 62 0a 09 09 5f 2e 65 78 74 65 6e Data Ascii: require(['nougat', 'backbone', 'router', 'widgets/analytics', 'underscore', 'opinionLabComponent'],function (nougat, Backbone, Router, Analytics, _) {'use strict';var context, viewName, router;// Turning Backbone into a pub/sub hub_.exten

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.6	49861	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:01 UTC	667	OUT	GET /images/shared/momgram@2x.png HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/css/app.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:05:01 UTC	720	IN	HTTP/1.1 200 OK Accept-CH: DPR, Viewport-Width, Width, ECT, Downlink Accept-Ranges: bytes Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: image/png Date: Thu, 05 Dec 2024 18:05:01 GMT DC: ccg11-origin-www-1.paypal.com Etag: "60271b47-7cc" Expires: Thu, 05 Dec 2024 19:05:01 GMT Last-Modified: Sat, 13 Feb 2021 00:20:23 GMT Paypal-Debug-Id: 2eaa78d91a263 Server: ECAcc (lhd/3589) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000002eaa78d91a263-d83d0b679a1b6a66-01 X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 1996 Connection: close
2024-12-05 18:05:01 UTC	1996	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 4a 08 06 00 00 00 e7 87 37 ae 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 07 86 49 44 41 54 78 01 ed 5b 6b 6c 14 45 1c ff cf ec ee 5d f7 fa e0 da d2 96 16 5a 8e d2 04 b5 b4 94 12 28 62 45 40 fd a2 89 9a 18 08 88 18 8d af 84 00 25 c4 c4 6f d6 c7 47 04 84 26 f0 45 bf 18 df 44 62 0c 9a f8 88 8f 18 34 1a 83 5a 6d 04 0d 86 47 6b 9f 5c 2d 6d ef 7a fb 1a 67 db 5e bd de ed 73 b6 bd ee 25 ce 97 dd 9b f9 ff fe f3 fb ed cc ec cc 7f 6e 16 81 8b 54 d3 d4 76 37 47 d0 46 82 34 ec 02 e6 cc 94 a0 04 00 e9 57 08 f4 02 d1 7a 88 4c fe ee b9 d0 35 02 f0 95 e2 cc 81 33 2b e4 c4 ac aa ea a9 50 a0 5c fc 03 21 b4 d4 89 fd 5c d9 10 9a 28 c1 71 02 e8 12 02 72 4e d3 d4 f7 af 74 f6 7f 0d 70 5a 65 ad c3 91 e0 e5 4d Data Ascii: PNGIHDR<J7sRGBIDATx[klE]Z(bE@%oG&EDb4ZmGk\-mzg^s%nTv7GF4WzL53+P\!\(qrNtpZeM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.6	49862	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:01 UTC	406	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/authchallenge.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:05:01 UTC	792	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:05:01 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-7282" Expires: Fri, 05 Dec 2025 18:05:01 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 327630712f131 Server: ECAcc (lhd/35FD) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000327630712f131-7c8448a56651b410-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 29314 Connection: close
2024-12-05 18:05:01 UTC	16383	IN	Data Raw: 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 76 61 72 20 61 75 74 6f 73 75 62 6d 69 74 20 3d 20 66 61 6c 73 65 2c 0a 09 72 65 63 61 70 74 63 68 61 43 61 6c 6c 62 61 63 6b 2c 0a 09 72 65 63 61 70 74 63 68 61 45 6e 74 65 72 70 72 69 73 65 43 61 6c 6c 62 61 63 6b 3b 0a 76 61 72 20 41 44 53 5f 46 50 54 49 20 3d 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 0a 09 76 61 72 20 61 64 73 50 6c 75 67 69 6e 44 69 76 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 63 61 70 74 63 68 61 2d 73 74 61 6e 64 61 6c 6f 6e 65 27 29 2c 0a 09 09 63 73 72 66 20 3d 20 61 64 73 50 6c 75 67 69 6e 44 69 76 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 27 64 61 74 61 2d 63 73 72 66 27 29 2c 0a 09 09 73 65 73 73 69 6f 6e 49 64 20 3d 20 61 64 73 50 6c 75 67 69 Data Ascii: 'use strict';var autosubmit = false,recaptchaCallback,recaptchaEnterpriseCallback;var ADS_FPTI = (function(){var adsPluginDiv = document.getElementById('captcha-standalone'),csrf = adsPluginDiv.getAttribute('data-csrf'),sessionId = adsPlugi
2024-12-05 18:05:01 UTC	12931	IN	Data Raw: 63 68 61 20 28 4c 49 2d 36 33 32 33 38 29 0a 0a 09 09 09 09 61 70 70 65 6e 64 49 6e 70 75 74 45 6c 65 6d 65 6e 74 54 6f 46 6f 72 6d 28 20 63 61 70 74 63 68 61 54 79 70 65 20 3d 3d 3d 20 27 61 72 6b 6f 73 65 27 3f 20 27 61 72 6b 6f 73 65 27 20 3a 20 63 61 70 74 63 68 61 54 79 70 65 20 3d 3d 3d 20 41 44 53 5f 46 50 54 49 2e 43 41 50 54 43 48 41 5f 54 59 50 45 2e 48 43 41 50 54 43 48 41 20 3f 20 41 44 53 5f 46 50 54 49 2e 43 41 50 54 43 48 41 5f 54 59 50 45 2e 48 43 41 50 54 43 48 41 3a 20 63 61 70 74 63 68 61 54 79 70 65 20 3d 3d 3d 20 41 44 53 5f 46 50 54 49 2e 43 41 50 54 43 48 41 5f 54 59 50 45 2e 47 4f 4f 47 4c 45 5f 52 45 43 41 50 54 43 48 41 56 33 20 3f 20 27 67 72 63 56 33 45 6e 74 54 6f 6b 65 6e 27 20 3a 20 63 61 70 74 63 68 61 54 79 70 65 20 3d 3d Data Ascii: cha (LI-63238)appendInputElementToForm( captchaType === 'arkose'? 'arkose' : captchaType === ADS_FPTI.CAPTCHA_TYPE.HCAPTCHA ? ADS_FPTI.CAPTCHA_TYPE.HCAPTCHA: captchaType === ADS_FPTI.CAPTCHA_TYPE.GOOGLE_RECAPTCHAV3 ? 'grcV3EntToken' : captchaType ==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.6	49869	151.101.1.21	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:02 UTC	1093	OUT	GET /auth/logclientdata HTTP/1.1 Host: www.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; nsid=s%3ARLPSU2OHYvlTZtXh_VMfzo7ctuMnbu-c.%2F5h%2FpbgyA12uYrTjTUlTTIQJX8aBsaqWc%2FutzlCO8XQ; l7_az=dcg01.phx; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352; tcs=main%3Aunifiedlogin%3A%3A%3Alogin%7CbtnLogin; tsrce=authchallengenodeweb; datadome=8RSW3uzD4SbWvM9gFw9q0gQKTqu4dzosgEwjlVWJYqLsPPLmcSW45AaqUPwIez9Nxb_Xi8Zv7_oaSV_rYgieEwGmR_dsy5tyvCD7Ggqcjb1qKko3mAHLgzTBEcl7OT_L; ddbc=1; x-pp-s=eyJ0IjoiMTczMzQyMTkwMDg1NSIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1764957900%26vteXpYrS%3D1733423700%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew
2024-12-05 18:05:02 UTC	345	IN	HTTP/1.1 302 Found Connection: close Content-Length: 29 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Access-Control-Expose-Headers: Server-Timing Cache-Control: max-age=0, no-cache, no-store, must-revalidate
2024-12-05 18:05:02 UTC	2082	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6e 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 6f 62 6a 65 63 74 73 2e 70 61 79 70 61 6c 2e 63 6e 3b 20 73 63 72 69 70 74 2d 73 72 63 20 27 6e 6f 6e 63 65 2d 6e 63 37 35 32 6b 41 77 33 68 57 6d 74 6b 39 57 75 67 30 4e 53 30 6e 56 39 63 52 46 61 6b 33 71 2b 70 6e 4c 6e 43 6c 62 2b 46 62 67 2f 38 68 74 27 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6e Data Ascii: Content-Security-Policy: default-src 'self' https://.paypal.com https://.paypal.cn https://.paypalobjects.com https://objects.paypal.cn; script-src 'nonce-nc752kAw3hWmtk9Wug0NS0nV9cRFak3q+pnLnClb+Fbg/8ht' 'self' https://.paypal.com https://*.paypal.cn
2024-12-05 18:05:02 UTC	1677	IN	Data Raw: 50 65 72 6d 69 73 73 69 6f 6e 73 2d 50 6f 6c 69 63 79 3a 20 63 68 2d 75 61 2d 70 6c 61 74 66 6f 72 6d 2d 76 65 72 73 69 6f 6e 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 61 72 63 68 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 77 6f 77 36 34 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 6d 6f 64 65 6c 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 66 75 6c 6c 2d 76 65 Data Ascii: Permissions-Policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-ve
2024-12-05 18:05:02 UTC	323	IN	Data Raw: 58 2d 53 65 72 76 65 64 2d 42 79 3a 20 63 61 63 68 65 2d 69 61 64 2d 6b 69 61 64 37 30 30 30 31 33 30 2d 49 41 44 2c 20 63 61 63 68 65 2d 65 77 72 2d 6b 65 77 72 31 37 34 30 30 35 33 2d 45 57 52 2c 20 63 61 63 68 65 2d 65 77 72 2d 6b 65 77 72 31 37 34 30 30 35 33 2d 45 57 52 0d 0a 58 2d 43 61 63 68 65 3a 20 4d 49 53 53 2c 20 4d 49 53 53 2c 20 4d 49 53 53 0d 0a 58 2d 43 61 63 68 65 2d 48 69 74 73 3a 20 30 2c 20 30 2c 20 30 0d 0a 58 2d 54 69 6d 65 72 3a 20 53 31 37 33 33 34 32 31 39 30 33 2e 35 37 38 34 39 33 2c 56 53 30 2c 56 45 31 36 34 0d 0a 53 65 72 76 65 72 2d 54 69 6d 69 6e 67 3a 20 22 74 72 61 63 65 70 61 72 65 6e 74 3b 64 65 73 63 3d 22 30 30 2d 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 66 39 30 33 30 32 36 66 39 33 34 62 37 2d 34 64 Data Ascii: X-Served-By: cache-iad-kiad7000130-IAD, cache-ewr-kewr1740053-EWR, cache-ewr-kewr1740053-EWRX-Cache: MISS, MISS, MISSX-Cache-Hits: 0, 0, 0X-Timer: S1733421903.578493,VS0,VE164Server-Timing: "traceparent;desc="00-0000000000000000000f903026f934b7-4d
2024-12-05 18:05:02 UTC	29	IN	Data Raw: 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 2f 73 69 67 6e 69 6e Data Ascii: Found. Redirecting to /signin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.6	49871	151.101.3.1	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:02 UTC	1260	OUT	GET /1/api.js?endpoint=https%3A%2F%2Fhcaptcha.paypal.com&assethost=https%3A%2F%2Fnewassets.hcaptcha.paypal.com&imghost=https%3A%2F%2Fimgs.hcaptcha.paypal.com&sentry=false&reportapi=https%3A%2F%2Faccounts.hcaptcha.paypal.com&host=hcaptcha.paypal.com&onload=hCaptchaCallback&render=explicit&hl=en HTTP/1.1 Host: hcaptcha.paypal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypalobjects.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; l7_az=dcg01.phx; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352; tsrce=authchallengenodeweb; x-pp-s=eyJ0IjoiMTczMzQyMTg5Njc2MiIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1764957897%26vteXpYrS%3D1733423697%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew
2024-12-05 18:05:02 UTC	637	IN	HTTP/1.1 200 OK Connection: close Content-Length: 150639 server: cloudflare etag: W/"6266f4e068faf5f1e1e5dce33fe9f2c7" cf-ray: 8ed5f64c9a32439f-EWR cf-cache-status: HIT content-type: application/javascript x-content-type-options: nosniff age: 0 cache-control: private, max-age=300 cross-origin-resource-policy: cross-origin Accept-Ranges: bytes Date: Thu, 05 Dec 2024 18:05:02 GMT Via: 1.1 varnish X-Served-By: cache-nyc-kteb1890025-NYC, cache-nyc-kteb1890025-NYC X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1733421903.784198,VS0,VE57 Vary: Origin, Accept-Encoding Strict-Transport-Security: max-age=31557600
2024-12-05 18:05:02 UTC	1378	IN	Data Raw: 2f 2a 20 68 74 74 70 73 3a 2f 2f 68 63 61 70 74 63 68 61 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 2e 72 65 73 6f 6c 76 65 28 65 28 29 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 7d 29 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 2e 72 65 73 6f 6c 76 65 28 65 28 29 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 72 65 6a 65 63 74 28 6e 29 7d 29 29 7d 29 Data Ascii: /* https://hcaptcha.com/license */!function(){"use strict";function e(e){var t=this.constructor;return this.then((function(n){return t.resolve(e()).then((function(){return n}))}),(function(n){return t.resolve(e()).then((function(){return t.reject(n)}))})
2024-12-05 18:05:02 UTC	1378	IN	Data Raw: 3d 6e 28 65 2e 5f 76 61 6c 75 65 29 7d 63 61 74 63 68 28 69 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 6c 28 74 2e 70 72 6f 6d 69 73 65 2c 69 29 7d 63 28 74 2e 70 72 6f 6d 69 73 65 2c 72 29 7d 65 6c 73 65 28 31 3d 3d 3d 65 2e 5f 73 74 61 74 65 3f 63 3a 6c 29 28 74 2e 70 72 6f 6d 69 73 65 2c 65 2e 5f 76 61 6c 75 65 29 7d 29 29 29 3a 65 2e 5f 64 65 66 65 72 72 65 64 73 2e 70 75 73 68 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 74 72 79 7b 69 66 28 74 3d 3d 3d 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 20 70 72 6f 6d 69 73 65 20 63 61 6e 6e 6f 74 20 62 65 20 72 65 73 6f 6c 76 65 64 20 77 69 74 68 20 69 74 73 65 6c 66 2e 22 29 3b 69 66 28 74 26 26 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 7c 7c 22 66 Data Ascii: =n(e._value)}catch(i){return void l(t.promise,i)}c(t.promise,r)}else(1===e._state?c:l)(t.promise,e._value)}))):e._deferreds.push(t)}function c(e,t){try{if(t===e)throw new TypeError("A promise cannot be resolved with itself.");if(t&&("object"==typeof t\|\|"f
2024-12-05 18:05:02 UTC	1378	IN	Data Raw: 26 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 69 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 29 29 7b 76 61 72 20 73 3d 69 2e 74 68 65 6e 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 29 72 65 74 75 72 6e 20 76 6f 69 64 20 73 2e 63 61 6c 6c 28 69 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 61 28 65 2c 74 29 7d 29 2c 6e 29 7d 72 5b 65 5d 3d 69 2c 30 3d 3d 2d 2d 6f 26 26 74 28 72 29 7d 63 61 74 63 68 28 63 29 7b 6e 28 63 29 7d 7d 66 6f 72 28 76 61 72 20 73 3d 30 3b 73 3c 72 2e 6c 65 6e 67 74 68 3b 73 2b 2b 29 61 28 73 2c 72 5b 73 5d 29 7d 29 29 7d 2c 61 2e 61 6c 6c 53 65 74 74 6c 65 64 3d 74 2c 61 2e 72 65 73 6f 6c 76 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 6f 62 6a Data Ascii: &("object"==typeof i\|\|"function"==typeof i)){var s=i.then;if("function"==typeof s)return void s.call(i,(function(t){a(e,t)}),n)}r[e]=i,0==--o&&t(r)}catch(c){n(c)}}for(var s=0;s<r.length;s++)a(s,r[s])}))},a.allSettled=t,a.resolve=function(e){return e&&"obj
2024-12-05 18:05:02 UTC	1378	IN	Data Raw: 72 73 65 28 29 7d 76 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 65 6e 64 4f 66 53 74 72 65 61 6d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 74 68 69 73 2e 74 6f 6b 65 6e 73 2e 6c 65 6e 67 74 68 7d 2c 72 65 61 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 6f 6b 65 6e 73 2e 6c 65 6e 67 74 68 3f 74 68 69 73 2e 74 6f 6b 65 6e 73 2e 70 6f 70 28 29 3a 79 7d 2c 70 72 65 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 66 6f 72 28 76 61 72 20 74 3d 65 3b 74 2e 6c 65 6e 67 74 68 3b 29 74 68 69 73 2e 74 6f 6b 65 6e 73 2e 70 75 73 68 28 74 2e 70 6f 70 28 29 29 3b 65 6c 73 65 20 74 68 69 73 2e 74 6f 6b 65 6e 73 2e 70 75 73 68 28 65 29 7d 2c 70 75 73 68 3a 66 75 6e 63 Data Ascii: rse()}v.prototype={endOfStream:function(){return!this.tokens.length},read:function(){return this.tokens.length?this.tokens.pop():y},prepend:function(e){if(Array.isArray(e))for(var t=e;t.length;)this.tokens.push(t.pop());else this.tokens.push(e)},push:func
2024-12-05 18:05:02 UTC	1378	IN	Data Raw: 74 2e 69 67 6e 6f 72 65 42 4f 4d 26 26 28 72 2e 5f 69 67 6e 6f 72 65 42 4f 4d 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 7c 7c 28 74 68 69 73 2e 65 6e 63 6f 64 69 6e 67 3d 72 2e 5f 65 6e 63 6f 64 69 6e 67 2e 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 74 68 69 73 2e 66 61 74 61 6c 3d 22 66 61 74 61 6c 22 3d 3d 3d 72 2e 5f 65 72 72 6f 72 5f 6d 6f 64 65 2c 74 68 69 73 2e 69 67 6e 6f 72 65 42 4f 4d 3d 72 2e 5f 69 67 6e 6f 72 65 42 4f 4d 29 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 41 28 65 2c 74 29 7b 69 66 28 21 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 29 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6c 6c 65 64 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 2e 20 44 69 64 20 79 6f 75 20 66 6f Data Ascii: t.ignoreBOM&&(r._ignoreBOM=!0),Object.defineProperty\|\|(this.encoding=r._encoding.name.toLowerCase(),this.fatal="fatal"===r._error_mode,this.ignoreBOM=r._ignoreBOM),r}function A(e,t){if(!(this instanceof A))throw TypeError("Called as a function. Did you fo
2024-12-05 18:05:03 UTC	1378	IN	Data Raw: 3f 28 6e 3d 32 2c 72 3d 32 32 34 29 3a 70 28 74 2c 36 35 35 33 36 2c 31 31 31 34 31 31 31 29 26 26 28 6e 3d 33 2c 72 3d 32 34 30 29 3b 66 6f 72 28 76 61 72 20 69 3d 5b 28 74 3e 3e 36 2a 6e 29 2b 72 5d 3b 6e 3e 30 3b 29 7b 76 61 72 20 6f 3d 74 3e 3e 36 2a 28 6e 2d 31 29 3b 69 2e 70 75 73 68 28 31 32 38 7c 36 33 26 6f 29 2c 6e 2d 3d 31 7d 72 65 74 75 72 6e 20 69 7d 7d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 26 26 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 4f 2e 70 72 6f 74 6f 74 79 70 65 2c 22 65 6e 63 6f 64 69 6e 67 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 65 6e 63 6f 64 69 6e 67 2e 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 7d 29 2c 4f 62 6a Data Ascii: ?(n=2,r=224):p(t,65536,1114111)&&(n=3,r=240);for(var i=[(t>>6n)+r];n>0;){var o=t>>6(n-1);i.push(128\|63&o),n-=1}return i}}Object.defineProperty&&(Object.defineProperty(O.prototype,"encoding",{get:function(){return this._encoding.name.toLowerCase()}}),Obj
2024-12-05 18:05:03 UTC	1378	IN	Data Raw: 68 69 73 2e 5f 42 4f 4d 73 65 65 6e 3d 21 30 29 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 22 22 2c 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 2b 2b 6e 29 7b 76 61 72 20 72 3d 65 5b 6e 5d 3b 72 3c 3d 36 35 35 33 35 3f 74 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 72 29 3a 28 72 2d 3d 36 35 35 33 36 2c 74 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 35 35 32 39 36 2b 28 72 3e 3e 31 30 29 2c 35 36 33 32 30 2b 28 31 30 32 33 26 72 29 29 29 7d 72 65 74 75 72 6e 20 74 7d 28 65 29 7d 2e 63 61 6c 6c 28 74 68 69 73 2c 6f 29 7d 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 41 2e 70 72 6f 74 6f 74 79 Data Ascii: his._BOMseen=!0)),function(e){for(var t="",n=0;n<e.length;++n){var r=e[n];r<=65535?t+=String.fromCharCode(r):(r-=65536,t+=String.fromCharCode(55296+(r>>10),56320+(1023&r)))}return t}(e)}.call(this,o)},Object.defineProperty&&Object.defineProperty(A.prototy
2024-12-05 18:05:03 UTC	1378	IN	Data Raw: 75 62 74 6c 65 7c 7c 74 2e 77 65 62 6b 69 74 53 75 62 74 6c 65 3b 69 66 28 6e 29 7b 76 61 72 20 72 3d 65 2e 43 72 79 70 74 6f 7c 7c 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 7c 7c 4f 62 6a 65 63 74 2c 69 3d 65 2e 53 75 62 74 6c 65 43 72 79 70 74 6f 7c 7c 6e 2e 63 6f 6e 73 74 72 75 63 74 6f 72 7c 7c 4f 62 6a 65 63 74 2c 6f 3d 28 65 2e 43 72 79 70 74 6f 4b 65 79 7c 7c 65 2e 4b 65 79 2c 65 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 69 6e 64 65 78 4f 66 28 22 45 64 67 65 2f 22 29 3e 2d 31 29 2c 61 3d 21 21 65 2e 6d 73 43 72 79 70 74 6f 26 26 21 6f 2c 73 3d 21 74 2e 73 75 62 74 6c 65 26 26 21 21 74 2e 77 65 62 6b 69 74 53 75 62 74 6c 65 3b 69 66 28 61 7c 7c 73 29 7b 76 61 72 20 63 3d 7b 4b 6f 5a 49 68 76 63 4e 41 51 45 42 3a 22 31 2e 32 2e 38 Data Ascii: ubtle\|\|t.webkitSubtle;if(n){var r=e.Crypto\|\|t.constructor\|\|Object,i=e.SubtleCrypto\|\|n.constructor\|\|Object,o=(e.CryptoKey\|\|e.Key,e.navigator.userAgent.indexOf("Edge/")>-1),a=!!e.msCrypto&&!o,s=!t.subtle&&!!t.webkitSubtle;if(a\|\|s){var c={KoZIhvcNAQEB:"1.2.8
2024-12-05 18:05:03 UTC	1378	IN	Data Raw: 2e 6b 65 79 5f 6f 70 73 29 2c 6e 2e 69 6d 70 6f 72 74 4b 65 79 28 22 6a 77 6b 22 2c 65 5b 31 5d 2c 6c 2c 75 2c 65 5b 31 5d 2e 6b 65 79 5f 6f 70 73 29 5d 29 7d 29 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 7b 70 75 62 6c 69 63 4b 65 79 3a 65 5b 30 5d 2c 70 72 69 76 61 74 65 4b 65 79 3a 65 5b 31 5d 7d 7d 29 29 3b 69 66 28 28 73 7c 7c 61 26 26 22 53 48 41 2d 31 22 3d 3d 3d 28 6c 2e 68 61 73 68 7c 7c 7b 7d 29 2e 6e 61 6d 65 29 26 26 22 69 6d 70 6f 72 74 4b 65 79 22 3d 3d 3d 65 26 26 22 6a 77 6b 22 3d 3d 3d 69 26 26 22 48 4d 41 43 22 3d 3d 3d 6c 2e 6e 61 6d 65 26 26 22 6f 63 74 22 3d 3d 3d 6f 2e 6b 74 79 29 72 65 74 75 72 6e 20 6e 2e 69 6d 70 6f 72 74 4b 65 79 28 22 72 61 77 22 2c 66 28 64 28 6f 2e 6b 29 29 2c 63 2c 62 5b 33 Data Ascii: .key_ops),n.importKey("jwk",e[1],l,u,e[1].key_ops)])})).then((function(e){return{publicKey:e[0],privateKey:e[1]}}));if((s\|\|a&&"SHA-1"===(l.hash\|\|{}).name)&&"importKey"===e&&"jwk"===i&&"HMAC"===l.name&&"oct"===o.kty)return n.importKey("raw",f(d(o.k)),c,b[3
2024-12-05 18:05:03 UTC	1378	IN	Data Raw: 72 74 4b 65 79 22 21 3d 3d 65 7c 7c 22 73 70 6b 69 22 21 3d 3d 72 26 26 22 70 6b 63 73 38 22 21 3d 3d 72 7c 7c 28 6c 5b 30 5d 3d 22 6a 77 6b 22 29 2c 61 26 26 22 77 72 61 70 4b 65 79 22 3d 3d 3d 65 29 72 65 74 75 72 6e 20 6e 2e 65 78 70 6f 72 74 4b 65 79 28 72 2c 69 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 6a 77 6b 22 3d 3d 3d 72 26 26 28 65 3d 66 28 75 6e 65 73 63 61 70 65 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 79 28 65 29 29 29 29 29 29 2c 6e 2e 65 6e 63 72 79 70 74 28 6c 5b 33 5d 2c 6f 2c 65 29 7d 29 29 3b 74 72 79 7b 63 3d 74 2e 61 70 70 6c 79 28 6e 2c 6c 29 7d 63 61 74 63 68 28 75 29 7b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 65 6a 65 63 Data Ascii: rtKey"!==e\|\|"spki"!==r&&"pkcs8"!==r\|\|(l[0]="jwk"),a&&"wrapKey"===e)return n.exportKey(r,i).then((function(e){return"jwk"===r&&(e=f(unescape(encodeURIComponent(JSON.stringify(y(e)))))),n.encrypt(l[3],o,e)}));try{c=t.apply(n,l)}catch(u){return Promise.rejec

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.6	49872	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:03 UTC	396	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/app.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:05:03 UTC	797	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:05:03 GMT DC: ccg11-origin-www-1.paypal.com Etag: "6736db9f-4ae+br+ident" Expires: Fri, 05 Dec 2025 18:05:03 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 4e55a848c934a Server: ECAcc (lhd/35A5) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000004e55a848c934a-0939ca7ca05aa86c-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 1198 Connection: close
2024-12-05 18:05:03 UTC	1198	IN	Data Raw: 72 65 71 75 69 72 65 28 5b 27 6e 6f 75 67 61 74 27 2c 20 27 62 61 63 6b 62 6f 6e 65 27 2c 20 27 72 6f 75 74 65 72 27 2c 20 27 77 69 64 67 65 74 73 2f 61 6e 61 6c 79 74 69 63 73 27 2c 20 27 75 6e 64 65 72 73 63 6f 72 65 27 2c 20 27 6f 70 69 6e 69 6f 6e 4c 61 62 43 6f 6d 70 6f 6e 65 6e 74 27 5d 2c 0a 0a 09 66 75 6e 63 74 69 6f 6e 20 28 6e 6f 75 67 61 74 2c 20 42 61 63 6b 62 6f 6e 65 2c 20 52 6f 75 74 65 72 2c 20 41 6e 61 6c 79 74 69 63 73 2c 20 5f 29 20 7b 0a 0a 09 09 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 09 09 76 61 72 20 63 6f 6e 74 65 78 74 2c 20 76 69 65 77 4e 61 6d 65 2c 20 72 6f 75 74 65 72 3b 0a 0a 09 09 2f 2f 20 54 75 72 6e 69 6e 67 20 42 61 63 6b 62 6f 6e 65 20 69 6e 74 6f 20 61 20 70 75 62 2f 73 75 62 20 68 75 62 0a 09 09 5f 2e 65 78 74 65 6e Data Ascii: require(['nougat', 'backbone', 'router', 'widgets/analytics', 'underscore', 'opinionLabComponent'],function (nougat, Backbone, Router, Analytics, _) {'use strict';var context, viewName, router;// Turning Backbone into a pub/sub hub_.exten

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.6	49873	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:03 UTC	578	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/core/nougat.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:05:03 UTC	791	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:05:03 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-265b" Expires: Fri, 05 Dec 2025 18:05:03 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 5c26ec02595df Server: ECAcc (lhd/35B7) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000005c26ec02595df-de7e93c56ef83a33-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 9819 Connection: close
2024-12-05 18:05:03 UTC	9819	IN	Data Raw: 2f 2a 0a 20 2a 20 6e 6f 75 67 61 74 2e 6a 73 20 76 30 2e 30 2e 31 20 2d 20 41 70 70 6c 69 63 61 74 69 6f 6e 20 4d 65 64 69 61 74 6f 72 2f 53 61 6e 64 62 6f 78 20 4c 69 62 72 61 72 79 0a 20 2a 20 54 68 69 73 20 6d 6f 64 75 6c 65 20 70 65 72 66 6f 72 6d 73 20 74 68 65 20 66 75 6e 63 74 69 6f 6e 20 6f 66 20 6d 65 64 69 61 74 6f 72 2f 73 61 6e 64 62 6f 78 2e 0a 20 2a 0a 20 2a 20 40 61 75 74 68 6f 72 20 45 72 69 6b 20 54 6f 74 68 20 3c 65 72 74 6f 74 68 40 70 61 79 70 61 6c 2e 63 6f 6d 3e 0a 20 2a 2f 0a 0a 2f 2a 67 6c 6f 62 61 6c 20 64 65 66 69 6e 65 3a 66 61 6c 73 65 2c 20 72 65 71 75 69 72 65 6a 73 3a 74 72 75 65 20 2a 2f 0a 2f 2a 6a 73 6c 69 6e 74 20 70 6c 75 73 70 6c 75 73 3a 74 72 75 65 2c 20 6e 6f 6d 65 6e 3a 74 72 75 65 20 2a 2f 0a 0a 64 65 66 69 6e 65 Data Ascii: /* * nougat.js v0.0.1 - Application Mediator/Sandbox Library * This module performs the function of mediator/sandbox. * * @author Erik Toth <ertoth@paypal.com> //global define:false, requirejs:true //jslint plusplus:true, nomen:true */define

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.6	49874	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:03 UTC	573	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/router.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:05:03 UTC	790	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:05:03 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-72f" Expires: Fri, 05 Dec 2025 18:05:03 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 4574b38a25485 Server: ECAcc (lhd/35D0) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000004574b38a25485-d2bf40bded9091a5-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 1839 Connection: close
2024-12-05 18:05:03 UTC	1839	IN	Data Raw: 2f 2a 67 6c 6f 62 61 6c 20 64 65 66 69 6e 65 3a 74 72 75 65 2c 20 63 6f 6e 73 6f 6c 65 3a 74 72 75 65 2c 20 6a 51 75 65 72 79 3a 74 72 75 65 2c 20 72 65 71 75 69 72 65 3a 74 72 75 65 20 2a 2f 0a 0a 64 65 66 69 6e 65 28 5b 20 27 6a 71 75 65 72 79 27 2c 20 27 62 61 63 6b 62 6f 6e 65 27 5d 2c 0a 0a 09 66 75 6e 63 74 69 6f 6e 20 28 24 2c 20 42 61 63 6b 62 6f 6e 65 29 20 7b 0a 0a 09 09 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 09 09 76 61 72 20 72 6f 75 74 65 72 3b 0a 0a 09 09 72 6f 75 74 65 72 20 3d 20 42 61 63 6b 62 6f 6e 65 2e 52 6f 75 74 65 72 2e 65 78 74 65 6e 64 28 7b 0a 09 09 09 72 6f 75 74 65 73 3a 20 7b 0a 09 09 09 09 27 27 3a 20 27 73 68 6f 77 54 68 65 56 69 65 77 27 2c 0a 09 09 09 09 27 73 74 65 70 75 70 3f 2a 71 75 65 72 79 53 74 72 69 6e 67 27 Data Ascii: /global define:true, console:true, jQuery:true, require:true /define([ 'jquery', 'backbone'],function ($, Backbone) {'use strict';var router;router = Backbone.Router.extend({routes: {'': 'showTheView','stepup?*queryString'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.6	49877	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:03 UTC	584	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/widgets/analytics.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:05:03 UTC	797	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:05:03 GMT DC: ccg11-origin-www-1.paypal.com Etag: "6736db9f-974+br+ident" Expires: Fri, 05 Dec 2025 18:05:03 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 088a9c2792b80 Server: ECAcc (lhd/3588) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000088a9c2792b80-2445d6753c41ca91-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 2420 Connection: close
2024-12-05 18:05:03 UTC	2420	IN	Data Raw: 2f 2a 67 6c 6f 62 61 6c 20 64 65 66 69 6e 65 3a 74 72 75 65 2c 20 73 3a 74 72 75 65 20 2a 2f 0a 0a 2f 2a 2a 0a 20 2a 20 40 66 69 6c 65 4f 76 65 72 76 69 65 77 20 41 6e 61 6c 79 74 69 63 73 20 e2 80 93 20 6c 69 6e 6b 20 61 6e 64 20 65 72 72 6f 72 20 74 72 61 63 6b 69 6e 67 0a 20 2a 20 40 6e 61 6d 65 20 41 6e 61 6c 79 74 69 63 73 20 57 69 64 67 65 74 0a 20 2a 20 40 61 75 74 68 6f 72 20 64 71 75 6f 63 6b 0a 20 2a 2f 0a 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 2c 20 22 42 61 73 65 56 69 65 77 22 2c 20 22 6e 6f 75 67 61 74 22 5d 2c 0a 09 66 75 6e 63 74 69 6f 6e 20 28 24 2c 20 42 61 73 65 56 69 65 77 2c 20 6e 6f 75 67 61 74 29 20 7b 0a 09 09 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 09 09 76 61 72 20 56 69 65 77 20 3d 20 42 61 73 65 56 69 65 77 2e 65 Data Ascii: /global define:true, s:true //** * @fileOverview Analytics link and error tracking * @name Analytics Widget * @author dquock */define(["jquery", "BaseView", "nougat"],function ($, BaseView, nougat) {"use strict";var View = BaseView.e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.6	49875	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:03 UTC	597	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/opinionLab/opinionLabComponent.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:05:03 UTC	790	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:05:03 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-c3d" Expires: Fri, 05 Dec 2025 18:05:03 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 21f72a8abbe45 Server: ECAcc (lhd/35ED) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-000000000000000000021f72a8abbe45-97a297d03a7ff37c-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 3133 Connection: close
2024-12-05 18:05:03 UTC	3133	IN	Data Raw: 64 65 66 69 6e 65 28 5b 27 6f 70 69 6e 69 6f 6e 4c 61 62 27 2c 20 27 6f 6e 6c 69 6e 65 4f 70 69 6e 69 6f 6e 50 6f 70 75 70 27 5d 2c 20 66 75 6e 63 74 69 6f 6e 28 6f 70 69 6e 69 6f 6e 4c 61 62 2c 20 70 6f 70 75 70 29 20 7b 0a 0a 09 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 09 77 69 6e 64 6f 77 2e 50 41 59 50 41 4c 20 3d 20 77 69 6e 64 6f 77 2e 50 41 59 50 41 4c 20 3f 20 77 69 6e 64 6f 77 2e 50 41 59 50 41 4c 20 3a 20 7b 7d 3b 0a 09 76 61 72 20 6f 70 56 61 72 73 20 3d 20 77 69 6e 64 6f 77 2e 50 41 59 50 41 4c 2e 6f 70 69 6e 69 6f 6e 4c 61 62 56 61 72 73 3b 0a 0a 09 2f 2a 20 44 65 66 69 6e 65 73 20 74 68 65 20 72 65 66 65 72 72 61 6c 20 55 52 4c 20 2d 20 56 65 72 69 66 79 20 2a 2f 0a 09 66 75 6e 63 74 69 6f 6e 20 70 61 79 70 61 6c 55 52 4c 20 28 70 61 67 65 Data Ascii: define(['opinionLab', 'onlineOpinionPopup'], function(opinionLab, popup) {'use strict';window.PAYPAL = window.PAYPAL ? window.PAYPAL : {};var opVars = window.PAYPAL.opinionLabVars;/* Defines the referral URL - Verify */function paypalURL (page

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.6	49876	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:03 UTC	584	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/jquery-1.12.4.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:05:03 UTC	794	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:05:03 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-47a35" Expires: Fri, 05 Dec 2025 18:05:03 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 88a2afba9a3a8 Server: ECAcc (lhd/35A2) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-000000000000000000088a2afba9a3a8-fc1ef7f35a139c0e-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 293429 Connection: close
2024-12-05 18:05:03 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 31 2e 31 32 2e 34 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 36 2d 30 35 2d 32 30 54 Data Ascii: /! jQuery JavaScript Library v1.12.4 * http://jquery.com/ * * Includes Sizzle.js * http://sizzlejs.com/ * * Copyright jQuery Foundation and other contributors * Released under the MIT license * http://jquery.org/license * * Date: 2016-05-20T
2024-12-05 18:05:03 UTC	16383	IN	Data Raw: 5c 5c 5c 28 29 5b 5c 5c 5d 5d 7c 22 20 2b 20 61 74 74 72 69 62 75 74 65 73 20 2b 20 22 29 2a 29 7c 22 20 2b 0a 09 09 2f 2f 20 33 2e 20 61 6e 79 74 68 69 6e 67 20 65 6c 73 65 20 28 63 61 70 74 75 72 65 20 32 29 0a 09 09 22 2e 2a 22 20 2b 0a 09 09 22 29 5c 5c 29 7c 29 22 2c 0a 0a 09 2f 2f 20 4c 65 61 64 69 6e 67 20 61 6e 64 20 6e 6f 6e 2d 65 73 63 61 70 65 64 20 74 72 61 69 6c 69 6e 67 20 77 68 69 74 65 73 70 61 63 65 2c 20 63 61 70 74 75 72 69 6e 67 20 73 6f 6d 65 20 6e 6f 6e 2d 77 68 69 74 65 73 70 61 63 65 20 63 68 61 72 61 63 74 65 72 73 20 70 72 65 63 65 64 69 6e 67 20 74 68 65 20 6c 61 74 74 65 72 0a 09 72 77 68 69 74 65 73 70 61 63 65 20 3d 20 6e 65 77 20 52 65 67 45 78 70 28 20 77 68 69 74 65 73 70 61 63 65 20 2b 20 22 2b 22 2c 20 22 67 22 20 29 2c Data Ascii: \\$)[\\]]\|" + attributes + "))\|" +// 3. anything else (capture 2)"." +")\$\|)",// Leading and non-escaped trailing whitespace, capturing some non-whitespace characters preceding the latterrwhitespace = new RegExp( whitespace + "+", "g" ),
2024-12-05 18:05:03 UTC	16383	IN	Data Raw: 63 74 6f 72 41 6c 6c 28 22 5b 6d 73 61 6c 6c 6f 77 63 61 70 74 75 72 65 5e 3d 27 27 5d 22 29 2e 6c 65 6e 67 74 68 20 29 20 7b 0a 09 09 09 09 72 62 75 67 67 79 51 53 41 2e 70 75 73 68 28 20 22 5b 2a 5e 24 5d 3d 22 20 2b 20 77 68 69 74 65 73 70 61 63 65 20 2b 20 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 20 29 3b 0a 09 09 09 7d 0a 0a 09 09 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 49 45 38 0a 09 09 09 2f 2f 20 42 6f 6f 6c 65 61 6e 20 61 74 74 72 69 62 75 74 65 73 20 61 6e 64 20 22 76 61 6c 75 65 22 20 61 72 65 20 6e 6f 74 20 74 72 65 61 74 65 64 20 63 6f 72 72 65 63 74 6c 79 0a 09 09 09 69 66 20 28 20 21 64 69 76 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 73 65 6c 65 63 74 65 64 5d 22 29 2e 6c 65 6e 67 74 68 20 29 20 7b 0a 09 09 09 09 72 62 75 Data Ascii: ctorAll("[msallowcapture^='']").length ) {rbuggyQSA.push( "[^$]=" + whitespace + "(?:''\|\"\")" );}// Support: IE8// Boolean attributes and "value" are not treated correctlyif ( !div.querySelectorAll("[selected]").length ) {rbu
2024-12-05 18:05:03 UTC	3	IN	Data Raw: 65 78 20 Data Ascii: ex
2024-12-05 18:05:04 UTC	16383	IN	Data Raw: 3d 20 30 29 20 7c 7c 20 73 74 61 72 74 2e 70 6f 70 28 29 29 20 29 20 7b 0a 0a 09 09 09 09 09 09 09 09 09 69 66 20 28 20 28 20 6f 66 54 79 70 65 20 3f 0a 09 09 09 09 09 09 09 09 09 09 6e 6f 64 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 20 3d 3d 3d 20 6e 61 6d 65 20 3a 0a 09 09 09 09 09 09 09 09 09 09 6e 6f 64 65 2e 6e 6f 64 65 54 79 70 65 20 3d 3d 3d 20 31 20 29 20 26 26 0a 09 09 09 09 09 09 09 09 09 09 2b 2b 64 69 66 66 20 29 20 7b 0a 0a 09 09 09 09 09 09 09 09 09 09 2f 2f 20 43 61 63 68 65 20 74 68 65 20 69 6e 64 65 78 20 6f 66 20 65 61 63 68 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 65 6c 65 6d 65 6e 74 0a 09 09 09 09 09 09 09 09 09 09 69 66 20 28 20 75 73 65 43 61 63 68 65 20 29 20 7b 0a 09 09 09 09 09 09 09 09 09 09 09 6f 75 Data Ascii: = 0) \|\| start.pop()) ) {if ( ( ofType ?node.nodeName.toLowerCase() === name :node.nodeType === 1 ) &&++diff ) {// Cache the index of each encountered elementif ( useCache ) {ou
2024-12-05 18:05:04 UTC	16383	IN	Data Raw: 0a 09 09 09 2f 2f 20 52 65 74 75 72 6e 20 73 70 65 63 69 61 6c 20 75 70 6f 6e 20 73 65 65 69 6e 67 20 61 20 70 6f 73 69 74 69 6f 6e 61 6c 20 6d 61 74 63 68 65 72 0a 09 09 09 69 66 20 28 20 6d 61 74 63 68 65 72 5b 20 65 78 70 61 6e 64 6f 20 5d 20 29 20 7b 0a 09 09 09 09 2f 2f 20 46 69 6e 64 20 74 68 65 20 6e 65 78 74 20 72 65 6c 61 74 69 76 65 20 6f 70 65 72 61 74 6f 72 20 28 69 66 20 61 6e 79 29 20 66 6f 72 20 70 72 6f 70 65 72 20 68 61 6e 64 6c 69 6e 67 0a 09 09 09 09 6a 20 3d 20 2b 2b 69 3b 0a 09 09 09 09 66 6f 72 20 28 20 3b 20 6a 20 3c 20 6c 65 6e 3b 20 6a 2b 2b 20 29 20 7b 0a 09 09 09 09 09 69 66 20 28 20 45 78 70 72 2e 72 65 6c 61 74 69 76 65 5b 20 74 6f 6b 65 6e 73 5b 6a 5d 2e 74 79 70 65 20 5d 20 29 20 7b 0a 09 09 09 09 09 09 62 72 65 61 6b 3b 0a Data Ascii: // Return special upon seeing a positional matcherif ( matcher[ expando ] ) {// Find the next relative operator (if any) for proper handlingj = ++i;for ( ; j < len; j++ ) {if ( Expr.relative[ tokens[j].type ] ) {break;
2024-12-05 18:05:04 UTC	16383	IN	Data Raw: 29 29 2f 2c 0a 0a 09 2f 2f 20 6d 65 74 68 6f 64 73 20 67 75 61 72 61 6e 74 65 65 64 20 74 6f 20 70 72 6f 64 75 63 65 20 61 20 75 6e 69 71 75 65 20 73 65 74 20 77 68 65 6e 20 73 74 61 72 74 69 6e 67 20 66 72 6f 6d 20 61 20 75 6e 69 71 75 65 20 73 65 74 0a 09 67 75 61 72 61 6e 74 65 65 64 55 6e 69 71 75 65 20 3d 20 7b 0a 09 09 63 68 69 6c 64 72 65 6e 3a 20 74 72 75 65 2c 0a 09 09 63 6f 6e 74 65 6e 74 73 3a 20 74 72 75 65 2c 0a 09 09 6e 65 78 74 3a 20 74 72 75 65 2c 0a 09 09 70 72 65 76 3a 20 74 72 75 65 0a 09 7d 3b 0a 0a 6a 51 75 65 72 79 2e 66 6e 2e 65 78 74 65 6e 64 28 20 7b 0a 09 68 61 73 3a 20 66 75 6e 63 74 69 6f 6e 28 20 74 61 72 67 65 74 20 29 20 7b 0a 09 09 76 61 72 20 69 2c 0a 09 09 09 74 61 72 67 65 74 73 20 3d 20 6a 51 75 65 72 79 28 20 74 61 72 Data Ascii: ))/,// methods guaranteed to produce a unique set when starting from a unique setguaranteedUnique = {children: true,contents: true,next: true,prev: true};jQuery.fn.extend( {has: function( target ) {var i,targets = jQuery( tar
2024-12-05 18:05:04 UTC	16383	IN	Data Raw: 73 61 66 65 20 61 6c 73 6f 20 66 6f 72 20 69 66 72 61 6d 65 73 0a 09 09 09 64 6f 63 75 6d 65 6e 74 2e 61 74 74 61 63 68 45 76 65 6e 74 28 20 22 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 22 2c 20 63 6f 6d 70 6c 65 74 65 64 20 29 3b 0a 0a 09 09 09 2f 2f 20 41 20 66 61 6c 6c 62 61 63 6b 20 74 6f 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 2c 20 74 68 61 74 20 77 69 6c 6c 20 61 6c 77 61 79 73 20 77 6f 72 6b 0a 09 09 09 77 69 6e 64 6f 77 2e 61 74 74 61 63 68 45 76 65 6e 74 28 20 22 6f 6e 6c 6f 61 64 22 2c 20 63 6f 6d 70 6c 65 74 65 64 20 29 3b 0a 0a 09 09 09 2f 2f 20 49 66 20 49 45 20 61 6e 64 20 6e 6f 74 20 61 20 66 72 61 6d 65 0a 09 09 09 2f 2f 20 63 6f 6e 74 69 6e 75 61 6c 6c 79 20 63 68 65 63 6b 20 74 6f 20 73 65 65 20 69 66 20 74 68 65 20 64 6f Data Ascii: safe also for iframesdocument.attachEvent( "onreadystatechange", completed );// A fallback to window.onload, that will always workwindow.attachEvent( "onload", completed );// If IE and not a frame// continually check to see if the do
2024-12-05 18:05:04 UTC	16383	IN	Data Raw: 72 74 73 2c 20 74 77 65 65 6e 20 29 20 7b 0a 09 76 61 72 20 61 64 6a 75 73 74 65 64 2c 0a 09 09 73 63 61 6c 65 20 3d 20 31 2c 0a 09 09 6d 61 78 49 74 65 72 61 74 69 6f 6e 73 20 3d 20 32 30 2c 0a 09 09 63 75 72 72 65 6e 74 56 61 6c 75 65 20 3d 20 74 77 65 65 6e 20 3f 0a 09 09 09 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 72 65 74 75 72 6e 20 74 77 65 65 6e 2e 63 75 72 28 29 3b 20 7d 20 3a 0a 09 09 09 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 72 65 74 75 72 6e 20 6a 51 75 65 72 79 2e 63 73 73 28 20 65 6c 65 6d 2c 20 70 72 6f 70 2c 20 22 22 20 29 3b 20 7d 2c 0a 09 09 69 6e 69 74 69 61 6c 20 3d 20 63 75 72 72 65 6e 74 56 61 6c 75 65 28 29 2c 0a 09 09 75 6e 69 74 20 3d 20 76 61 6c 75 65 50 61 72 74 73 20 26 26 20 76 61 6c 75 65 50 61 72 74 73 5b 20 33 20 5d 20 7c 7c Data Ascii: rts, tween ) {var adjusted,scale = 1,maxIterations = 20,currentValue = tween ?function() { return tween.cur(); } :function() { return jQuery.css( elem, prop, "" ); },initial = currentValue(),unit = valueParts && valueParts[ 3 ] \|\|
2024-12-05 18:05:04 UTC	16383	IN	Data Raw: 6e 64 6c 65 20 29 20 3d 3d 3d 20 66 61 6c 73 65 20 29 20 7b 0a 0a 09 09 09 09 09 2f 2f 20 42 69 6e 64 20 74 68 65 20 67 6c 6f 62 61 6c 20 65 76 65 6e 74 20 68 61 6e 64 6c 65 72 20 74 6f 20 74 68 65 20 65 6c 65 6d 65 6e 74 0a 09 09 09 09 09 69 66 20 28 20 65 6c 65 6d 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 20 29 20 7b 0a 09 09 09 09 09 09 65 6c 65 6d 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 20 74 79 70 65 2c 20 65 76 65 6e 74 48 61 6e 64 6c 65 2c 20 66 61 6c 73 65 20 29 3b 0a 0a 09 09 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 20 65 6c 65 6d 2e 61 74 74 61 63 68 45 76 65 6e 74 20 29 20 7b 0a 09 09 09 09 09 09 65 6c 65 6d 2e 61 74 74 61 63 68 45 76 65 6e 74 28 20 22 6f 6e 22 20 2b 20 74 79 70 65 2c 20 65 76 65 6e 74 48 61 6e 64 6c 65 Data Ascii: ndle ) === false ) {// Bind the global event handler to the elementif ( elem.addEventListener ) {elem.addEventListener( type, eventHandle, false );} else if ( elem.attachEvent ) {elem.attachEvent( "on" + type, eventHandle

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.6	49883	151.101.131.1	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:03 UTC	3587	OUT	GET /ts?v=1.9.5&t=1733421900875&g=300&pgrp=authchallengenodeweb%2Flayouts%2Fmaster.html.dust&page=authchallengenodeweb%2Flayouts%2Fmaster.html.dust&pgst=1733421896022&calc=f4773935a9896&nsid=RLPSU2OHYvlTZtXh_VMfzo7ctuMnbu-c&rsta=en_US&pgtf=Nodejs&env=live&s=ci&ccpg=US&csci=f46f4853341b4f54a3e4f8000fb6a48d&comp=authchallengenodeweb&tsrce=unifiedloginnodeweb&cu=0&ef_policy=ccpa&xe=109541%2C107585&xt=145835%2C135393&e=im&pglk=main%3Aunifiedlogin%3A%3A%3Alogin%7CbtnLogin&imsrc=setup&view=%7B%22t10%22%3A1220%2C%22t11%22%3A7406%2C%22tcp%22%3A4874%2C%22et%22%3A%223g%22%2C%22nt%22%3A%22navigate%22%2C%22bt%22%3A105%7D&ru=https%3A%2F%2Fwww.paypal.com%2Fsignin%2F%3FreturnUri%3D%252Fmyaccount%252Ftransfer%252FpayRequest%252FU-09584045BD498740V%252FU-7AK40048SY131414Y%253FclassicUrl%253D%252FUS%252Fcgi-bin%252F%253Fcmd%253D_prq%26id%3DUJ8cMtNtnR8osXBu987dZoV1KMO8Kn.CKcv6ZA%26expId%3Dp2p%26onboardData%3D%257B%2522signUpRequest%2522%253A%257B%2522method%2522%253A%2522get%2522%252C%2522url%2522%253A%2522https%253A%252F%252Fw [TRUNCATED] Host: t.paypal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.paypal.com/signin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; l7_az=dcg01.phx; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352; tsrce=authchallengenodeweb; datadome=8RSW3uzD4SbWvM9gFw9q0gQKTqu4dzosgEwjlVWJYqLsPPLmcSW45AaqUPwIez9Nxb_Xi8Zv7_oaSV_rYgieEwGmR_dsy5tyvCD7Ggqcjb1qKko3mAHLgzTBEcl7OT_L; x-pp-s=eyJ0IjoiMTczMzQyMTkwMDg1NSIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1764957900%26vteXpYrS%3D1733423700%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew
2024-12-05 18:05:03 UTC	1361	IN	HTTP/1.1 200 OK Connection: close Access-Control-Expose-Headers: Server-Timing CORRELATION-ID: b6324ff760f59 Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Type: image/gif Expires: Thu, 05 Dec 2024 18:05:03 GMT P3p: CP="CAO IND OUR SAM UNI STA COR COM" Paypal-Debug-Id: b6324ff760f59 Pragma: no-cache Set-Cookie: ts=vreXpYrS%3D1764957903%26vteXpYrS%3D1733423703%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew;Expires=Fri, 05 Dec 2025 18:05:03 GMT;domain=.paypal.com;path=/;secure;HttpOnly;SameSite=None; Set-Cookie: ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352;Expires=Fri, 05 Dec 2025 18:05:03 GMT;domain=.paypal.com;path=/;secure;SameSite=None; Traceparent: 00-0000000000000000000b6324ff760f59-7fe55b58f2894e72-01 Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Date: Thu, 05 Dec 2024 18:05:03 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Served-By: cache-iad-kjyo7100111-IAD, cache-ewr-kewr1740063-EWR X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1733421903.485849,VS0,VE102 vary: Accept-Encoding Server-Timing: "traceparent;desc="00-0000000000000000000b6324ff760f59-d9e1ba8b3ddae537-01"";content-encoding;desc="",x-cdn;desc="fastly" Timing-Allow-Origin: * transfer-encoding: chunked
2024-12-05 18:05:03 UTC	4	IN	Data Raw: 32 61 0d 0a Data Ascii: 2a
2024-12-05 18:05:03 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 01 01 32 00 3b Data Ascii: GIF89a!,2;
2024-12-05 18:05:03 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.6	49879	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:03 UTC	373	OUT	GET /images/shared/momgram@2x.png HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:05:04 UTC	720	IN	HTTP/1.1 200 OK Accept-CH: DPR, Viewport-Width, Width, ECT, Downlink Accept-Ranges: bytes Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: image/png Date: Thu, 05 Dec 2024 18:05:03 GMT DC: ccg11-origin-www-1.paypal.com Etag: "60271b47-7cc" Expires: Thu, 05 Dec 2024 19:05:03 GMT Last-Modified: Sat, 13 Feb 2021 00:20:23 GMT Paypal-Debug-Id: 2eaa78d91a263 Server: ECAcc (lhd/3589) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000002eaa78d91a263-d83d0b679a1b6a66-01 X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 1996 Connection: close
2024-12-05 18:05:04 UTC	1996	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 4a 08 06 00 00 00 e7 87 37 ae 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 07 86 49 44 41 54 78 01 ed 5b 6b 6c 14 45 1c ff cf ec ee 5d f7 fa e0 da d2 96 16 5a 8e d2 04 b5 b4 94 12 28 62 45 40 fd a2 89 9a 18 08 88 18 8d af 84 00 25 c4 c4 6f d6 c7 47 04 84 26 f0 45 bf 18 df 44 62 0c 9a f8 88 8f 18 34 1a 83 5a 6d 04 0d 86 47 6b 9f 5c 2d 6d ef 7a fb 1a 67 db 5e bd de ed 73 b6 bd ee 25 ce 97 dd 9b f9 ff fe f3 fb ed cc ec cc 7f 6e 16 81 8b 54 d3 d4 76 37 47 d0 46 82 34 ec 02 e6 cc 94 a0 04 00 e9 57 08 f4 02 d1 7a 88 4c fe ee b9 d0 35 02 f0 95 e2 cc 81 33 2b e4 c4 ac aa ea a9 50 a0 5c fc 03 21 b4 d4 89 fd 5c d9 10 9a 28 c1 71 02 e8 12 02 72 4e d3 d4 f7 af 74 f6 7f 0d 70 5a 65 ad c3 91 e0 e5 4d Data Ascii: PNGIHDR<J7sRGBIDATx[klE]Z(bE@%oG&EDb4ZmGk\-mzg^s%nTv7GF4WzL53+P\!\(qrNtpZeM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.6	49878	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:03 UTC	588	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/underscore-1.13.4.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:05:04 UTC	792	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:05:03 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-ffa1" Expires: Fri, 05 Dec 2025 18:05:03 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 74daf48a20eec Server: ECAcc (lhd/35A9) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-000000000000000000074daf48a20eec-95d4c89ec21fba24-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 65441 Connection: close
2024-12-05 18:05:04 UTC	16383	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 67 6c 6f 62 61 6c 2c 20 66 61 63 74 6f 72 79 29 20 7b 0a 09 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 20 3d 3d 3d 20 27 6f 62 6a 65 63 74 27 20 26 26 20 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 3f 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 20 3d 20 66 61 63 74 6f 72 79 28 29 20 3a 0a 09 74 79 70 65 6f 66 20 64 65 66 69 6e 65 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 20 26 26 20 64 65 66 69 6e 65 2e 61 6d 64 20 3f 20 64 65 66 69 6e 65 28 27 75 6e 64 65 72 73 63 6f 72 65 27 2c 20 66 61 63 74 6f 72 79 29 20 3a 0a 09 28 67 6c 6f 62 61 6c 20 3d 20 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 3f 20 67 6c 6f 62 61 6c 54 Data Ascii: (function (global, factory) {typeof exports === 'object' && typeof module !== 'undefined' ? module.exports = factory() :typeof define === 'function' && define.amd ? define('underscore', factory) :(global = typeof globalThis !== 'undefined' ? globalT
2024-12-05 18:05:04 UTC	16383	IN	Data Raw: 65 70 20 65 71 75 61 6c 69 74 79 2e 0a 09 09 69 66 20 28 6b 65 79 73 28 62 29 2e 6c 65 6e 67 74 68 20 21 3d 3d 20 6c 65 6e 67 74 68 29 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 09 09 77 68 69 6c 65 20 28 6c 65 6e 67 74 68 2d 2d 29 20 7b 0a 09 09 20 20 2f 2f 20 44 65 65 70 20 63 6f 6d 70 61 72 65 20 65 61 63 68 20 6d 65 6d 62 65 72 0a 09 09 20 20 6b 65 79 20 3d 20 5f 6b 65 79 73 5b 6c 65 6e 67 74 68 5d 3b 0a 09 09 20 20 69 66 20 28 21 28 68 61 73 24 31 28 62 2c 20 6b 65 79 29 20 26 26 20 65 71 28 61 5b 6b 65 79 5d 2c 20 62 5b 6b 65 79 5d 2c 20 61 53 74 61 63 6b 2c 20 62 53 74 61 63 6b 29 29 29 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 09 09 7d 0a 09 20 20 7d 0a 09 20 20 2f 2f 20 52 65 6d 6f 76 65 20 74 68 65 20 66 69 72 73 74 20 6f 62 6a 65 63 74 20 Data Ascii: ep equality.if (keys(b).length !== length) return false;while (length--) { // Deep compare each member key = _keys[length]; if (!(has$1(b, key) && eq(a[key], b[key], aStack, bStack))) return false;} } // Remove the first object
2024-12-05 18:05:04 UTC	2	IN	Data Raw: 20 3f Data Ascii: ?
2024-12-05 18:05:04 UTC	16383	IN	Data Raw: 20 70 72 65 66 69 78 20 2b 20 69 64 20 3a 20 69 64 3b 0a 09 7d 0a 20 20 0a 09 2f 2f 20 53 74 61 72 74 20 63 68 61 69 6e 69 6e 67 20 61 20 77 72 61 70 70 65 64 20 55 6e 64 65 72 73 63 6f 72 65 20 6f 62 6a 65 63 74 2e 0a 09 66 75 6e 63 74 69 6f 6e 20 63 68 61 69 6e 28 6f 62 6a 29 20 7b 0a 09 20 20 76 61 72 20 69 6e 73 74 61 6e 63 65 20 3d 20 5f 24 31 28 6f 62 6a 29 3b 0a 09 20 20 69 6e 73 74 61 6e 63 65 2e 5f 63 68 61 69 6e 20 3d 20 74 72 75 65 3b 0a 09 20 20 72 65 74 75 72 6e 20 69 6e 73 74 61 6e 63 65 3b 0a 09 7d 0a 20 20 0a 09 2f 2f 20 49 6e 74 65 72 6e 61 6c 20 66 75 6e 63 74 69 6f 6e 20 74 6f 20 65 78 65 63 75 74 65 20 60 73 6f 75 72 63 65 46 75 6e 63 60 20 62 6f 75 6e 64 20 74 6f 20 60 63 6f 6e 74 65 78 74 60 20 77 69 74 68 20 6f 70 74 69 6f 6e 61 6c Data Ascii: prefix + id : id;} // Start chaining a wrapped Underscore object.function chain(obj) { var instance = _$1(obj); instance._chain = true; return instance;} // Internal function to execute `sourceFunc` bound to `context` with optional
2024-12-05 18:05:04 UTC	16290	IN	Data Raw: 7c 20 28 74 79 70 65 6f 66 20 69 74 65 72 61 74 65 65 20 3d 3d 20 27 6e 75 6d 62 65 72 27 20 26 26 20 74 79 70 65 6f 66 20 6f 62 6a 5b 30 5d 20 21 3d 20 27 6f 62 6a 65 63 74 27 20 26 26 20 6f 62 6a 20 21 3d 20 6e 75 6c 6c 29 29 20 7b 0a 09 09 6f 62 6a 20 3d 20 69 73 41 72 72 61 79 4c 69 6b 65 28 6f 62 6a 29 20 3f 20 6f 62 6a 20 3a 20 76 61 6c 75 65 73 28 6f 62 6a 29 3b 0a 09 09 66 6f 72 20 28 76 61 72 20 69 20 3d 20 30 2c 20 6c 65 6e 67 74 68 20 3d 20 6f 62 6a 2e 6c 65 6e 67 74 68 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0a 09 09 20 20 76 61 6c 75 65 20 3d 20 6f 62 6a 5b 69 5d 3b 0a 09 09 20 20 69 66 20 28 76 61 6c 75 65 20 21 3d 20 6e 75 6c 6c 20 26 26 20 76 61 6c 75 65 20 3e 20 72 65 73 75 6c 74 29 20 7b 0a 09 09 09 72 65 73 75 6c 74 Data Ascii: \| (typeof iteratee == 'number' && typeof obj[0] != 'object' && obj != null)) {obj = isArrayLike(obj) ? obj : values(obj);for (var i = 0, length = obj.length; i < length; i++) { value = obj[i]; if (value != null && value > result) {result

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.6	49840	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:03 UTC	576	OUT	GET /pa/3pjs/tl/6.4.65/patlcfg.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.paypal.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:05:04 UTC	798	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:05:03 GMT DC: ccg11-origin-www-1.paypal.com Etag: "6735ac2d-1c22+ident" Expires: Thu, 05 Dec 2024 19:05:03 GMT Last-Modified: Thu, 14 Nov 2024 07:52:13 GMT Paypal-Debug-Id: 9b17caaea01e4 Server: ECAcc (lhd/3599) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000009b17caaea01e4-07280370cdd6793c-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 7202 Connection: close
2024-12-05 18:05:04 UTC	7202	IN	Data Raw: 54 4c 54 2e 61 64 64 4d 6f 64 75 6c 65 28 22 64 69 67 69 74 61 6c 44 61 74 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 64 65 73 74 72 6f 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 6f 6e 65 76 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 77 65 62 45 76 65 6e 74 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 65 62 45 76 65 6e 74 26 26 77 65 62 45 76 65 6e 74 2e 74 79 70 65 26 26 77 65 62 45 76 65 6e 74 29 73 77 69 74 63 68 28 77 65 62 45 76 65 6e 74 2e 74 79 70 65 29 7b 63 61 73 65 22 6c 6f 61 64 22 3a 63 61 73 65 22 75 6e 6c 6f 61 64 22 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 66 70 74 69 26 26 28 71 4b 65 79 73 3d 77 69 6e Data Ascii: TLT.addModule("digitalData",function(){return{init:function(){},destroy:function(){},onevent:function(webEvent){if("object"==typeof webEvent&&webEvent.type&&webEvent)switch(webEvent.type){case"load":case"unload":"undefined"!=typeof window.fpti&&(qKeys=win

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.6	49884	151.101.1.21	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:04 UTC	1031	OUT	GET /signin HTTP/1.1 Host: www.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; nsid=s%3ARLPSU2OHYvlTZtXh_VMfzo7ctuMnbu-c.%2F5h%2FpbgyA12uYrTjTUlTTIQJX8aBsaqWc%2FutzlCO8XQ; l7_az=dcg01.phx; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352; tsrce=authchallengenodeweb; datadome=8RSW3uzD4SbWvM9gFw9q0gQKTqu4dzosgEwjlVWJYqLsPPLmcSW45AaqUPwIez9Nxb_Xi8Zv7_oaSV_rYgieEwGmR_dsy5tyvCD7Ggqcjb1qKko3mAHLgzTBEcl7OT_L; ddbc=1; x-pp-s=eyJ0IjoiMTczMzQyMTkwMjY5MSIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1764957902%26vteXpYrS%3D1733423702%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew
2024-12-05 18:05:04 UTC	1147	IN	HTTP/1.1 403 Forbidden Connection: close Content-Length: 708 Content-Type: text/html;charset=utf-8 Server: DataDome X-DataDome: protected Accept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory Charset: utf-8 Cache-Control: max-age=0, private, no-cache, no-store, must-revalidate Pragma: no-cache Access-Control-Allow-Credentials: true Access-Control-Expose-Headers: x-dd-b, x-set-cookie Access-Control-Allow-Origin: * X-DataDome-CID: AHrlqAAAAAMAaG7zfMJsD4kACC575A== X-DD-B: 1 Set-Cookie: datadome=D8fSIT~dxz~mHSNyYTBDSRhEt2IYFFTDBQ1qJ3hUcAY7ERsrDodz5ZVyluuAb5NRxqCoUSBCopBgBow4dMKBuJ7R6REwjzuo9OrQ3WnpLQaztNcGpbdOTxLyK68vGUkJ; Max-Age=2592000; Domain=.paypal.com; Path=/; Secure; SameSite=Lax Accept-Ranges: bytes Date: Thu, 05 Dec 2024 18:05:04 GMT Via: 1.1 varnish Paypal-Debug-Id: f598149fb6778 Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Served-By: cache-ewr-kewr1740078-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1733421904.402634,VS0,VE16 Server-Timing: content-encoding;desc="",x-cdn;desc="fastly"
2024-12-05 18:05:04 UTC	708	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 70 61 79 70 61 6c 2e 63 6f 6d 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 23 63 6d 73 67 7b 61 6e 69 6d 61 74 69 6f 6e 3a 20 41 20 31 2e 35 73 3b 7d 40 6b 65 79 66 72 61 6d 65 73 20 41 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 3b 7d 39 39 25 7b 6f 70 61 63 69 74 79 3a 30 3b 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 31 3b 7d 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 30 22 3e 3c 70 20 69 64 3d 22 63 6d 73 67 22 3e 50 6c 65 61 73 65 20 65 6e 61 62 6c 65 20 4a 53 20 61 6e 64 20 64 69 73 61 62 6c 65 20 61 6e 79 20 61 64 20 62 6c 6f 63 6b 65 72 3c 2f 70 3e 3c 73 63 72 69 70 74 20 64 61 74 61 2d 63 66 61 73 79 6e 63 3d 22 66 61 6c 73 65 22 3e Data Ascii: <html><head><title>paypal.com</title><style>#cmsg{animation: A 1.5s;}@keyframes A{0%{opacity:0;}99%{opacity:0;}100%{opacity:1;}}</style></head><body style="margin:0"><p id="cmsg">Please enable JS and disable any ad blocker</p><script data-cfasync="false">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.6	49887	151.101.193.21	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:04 UTC	1613	OUT	POST /auth/logclientdata HTTP/1.1 Host: www.paypal.com Connection: keep-alive Content-Length: 570 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" Content-Type: application/json;charset=UTF-8 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.paypal.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.paypal.com/signin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; nsid=s%3ARLPSU2OHYvlTZtXh_VMfzo7ctuMnbu-c.%2F5h%2FpbgyA12uYrTjTUlTTIQJX8aBsaqWc%2FutzlCO8XQ; l7_az=dcg01.phx; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352; tsrce=authchallengenodeweb; datadome=8RSW3uzD4SbWvM9gFw9q0gQKTqu4dzosgEwjlVWJYqLsPPLmcSW45AaqUPwIez9Nxb_Xi8Zv7_oaSV_rYgieEwGmR_dsy5tyvCD7Ggqcjb1qKko3mAHLgzTBEcl7OT_L; ddbc=1; x-pp-s=eyJ0IjoiMTczMzQyMTkwMjY5MSIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1764957902%26vteXpYrS%3D1733423702%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew
2024-12-05 18:05:04 UTC	570	OUT	Data Raw: 7b 22 66 70 74 69 22 3a 7b 22 70 67 72 70 22 3a 22 6d 61 69 6e 3a 61 75 74 68 63 68 61 6c 6c 65 6e 67 65 3a 3a 73 69 67 6e 69 6e 22 2c 22 70 61 67 65 22 3a 22 6d 61 69 6e 3a 61 75 74 68 63 68 61 6c 6c 65 6e 67 65 3a 3a 73 69 67 6e 69 6e 22 2c 22 70 67 73 74 22 3a 22 31 37 33 33 34 32 31 38 39 36 30 32 32 22 2c 22 63 61 6c 63 22 3a 22 66 34 37 37 33 39 33 35 61 39 38 39 36 22 2c 22 6e 73 69 64 22 3a 22 52 4c 50 53 55 32 4f 48 59 76 6c 54 5a 74 58 68 5f 56 4d 66 7a 6f 37 63 74 75 4d 6e 62 75 2d 63 22 2c 22 72 73 74 61 22 3a 22 65 6e 5f 55 53 22 2c 22 70 67 74 66 22 3a 22 4e 6f 64 65 6a 73 22 2c 22 65 6e 76 22 3a 22 6c 69 76 65 22 2c 22 73 22 3a 22 63 69 22 2c 22 63 63 70 67 22 3a 22 55 53 22 2c 22 63 73 63 69 22 3a 22 66 34 36 66 34 38 35 33 33 34 31 62 34 Data Ascii: {"fpti":{"pgrp":"main:authchallenge::signin","page":"main:authchallenge::signin","pgst":"1733421896022","calc":"f4773935a9896","nsid":"RLPSU2OHYvlTZtXh_VMfzo7ctuMnbu-c","rsta":"en_US","pgtf":"Nodejs","env":"live","s":"ci","ccpg":"US","csci":"f46f4853341b4
2024-12-05 18:05:05 UTC	344	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1914 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Access-Control-Expose-Headers: Server-Timing Cache-Control: max-age=0, no-cache, no-store, must-revalidate
2024-12-05 18:05:05 UTC	2112	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6e 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 6f 62 6a 65 63 74 73 2e 70 61 79 70 61 6c 2e 63 6e 3b 20 73 63 72 69 70 74 2d 73 72 63 20 27 6e 6f 6e 63 65 2d 56 36 74 4a 48 78 6b 4c 47 4b 44 31 68 4c 4e 4e 76 37 6c 49 38 59 45 52 61 4a 44 50 6d 50 4f 32 58 51 6d 74 64 65 57 68 61 55 76 67 71 37 68 4e 27 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6e Data Ascii: Content-Security-Policy: default-src 'self' https://.paypal.com https://.paypal.cn https://.paypalobjects.com https://objects.paypal.cn; script-src 'nonce-V6tJHxkLGKD1hLNNv7lI8YERaJDPmPO2XQmtdeWhaUvgq7hN' 'self' https://.paypal.com https://*.paypal.cn
2024-12-05 18:05:05 UTC	1677	IN	Data Raw: 50 65 72 6d 69 73 73 69 6f 6e 73 2d 50 6f 6c 69 63 79 3a 20 63 68 2d 75 61 2d 70 6c 61 74 66 6f 72 6d 2d 76 65 72 73 69 6f 6e 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 61 72 63 68 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 77 6f 77 36 34 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 6d 6f 64 65 6c 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 66 75 6c 6c 2d 76 65 Data Ascii: Permissions-Policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-ve
2024-12-05 18:05:05 UTC	346	IN	Data Raw: 58 2d 53 65 72 76 65 64 2d 42 79 3a 20 63 61 63 68 65 2d 69 61 64 2d 6b 69 61 64 37 30 30 30 31 36 39 2d 49 41 44 2c 20 63 61 63 68 65 2d 6e 79 63 2d 6b 74 65 62 31 38 39 30 30 33 37 2d 4e 59 43 2c 20 63 61 63 68 65 2d 6e 79 63 2d 6b 74 65 62 31 38 39 30 30 33 37 2d 4e 59 43 0d 0a 58 2d 43 61 63 68 65 3a 20 4d 49 53 53 2c 20 4d 49 53 53 2c 20 4d 49 53 53 0d 0a 58 2d 43 61 63 68 65 2d 48 69 74 73 3a 20 30 2c 20 30 2c 20 30 0d 0a 58 2d 54 69 6d 65 72 3a 20 53 31 37 33 33 34 32 31 39 30 35 2e 32 32 37 39 38 32 2c 56 53 30 2c 56 45 31 36 30 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 53 65 72 76 65 72 2d 54 69 6d 69 6e 67 3a 20 22 74 72 61 63 65 70 61 72 65 6e 74 3b 64 65 73 63 3d 22 30 30 2d 30 30 30 30 30 30 30 30 30 30 30 30 Data Ascii: X-Served-By: cache-iad-kiad7000169-IAD, cache-nyc-kteb1890037-NYC, cache-nyc-kteb1890037-NYCX-Cache: MISS, MISS, MISSX-Cache-Hits: 0, 0, 0X-Timer: S1733421905.227982,VS0,VE160Vary: Accept-EncodingServer-Timing: "traceparent;desc="00-000000000000
2024-12-05 18:05:05 UTC	1378	IN	Data Raw: 7b 22 69 73 43 6f 6f 6b 69 65 44 69 73 61 6c 62 65 64 22 3a 74 72 75 65 2c 22 63 6f 6f 6b 69 65 44 69 73 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 6f 42 72 61 6e 64 22 3a 22 75 73 22 2c 22 73 79 73 22 3a 7b 22 6c 6f 63 61 6c 69 74 79 22 3a 7b 22 74 69 6d 65 7a 6f 6e 65 22 3a 7b 22 64 65 74 65 72 6d 69 6e 65 72 22 3a 22 76 69 61 43 6f 77 50 72 69 6d 61 72 79 22 2c 22 76 61 6c 75 65 22 3a 22 41 6d 65 72 69 63 61 2f 4c 6f 73 5f 41 6e 67 65 6c 65 73 22 7d 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 5f 55 53 22 2c 22 6c 61 6e 67 75 61 67 65 22 3a 22 65 6e 22 2c 22 64 69 72 65 63 74 69 6f 6e 61 6c 69 74 79 22 3a 22 6c 74 72 22 7d 2c 22 6c 69 6e 6b 73 22 3a 7b 22 6a 73 42 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f Data Ascii: {"isCookieDisalbed":true,"cookieDisabled":false,"coBrand":"us","sys":{"locality":{"timezone":{"determiner":"viaCowPrimary","value":"America/Los_Angeles"},"country":"US","locale":"en_US","language":"en","directionality":"ltr"},"links":{"jsBaseUrl":"https:/
2024-12-05 18:05:05 UTC	536	IN	Data Raw: 55 70 64 61 74 65 73 3c 2f 61 3e 22 2c 22 77 6f 72 6c 64 77 69 64 65 22 3a 22 3c 61 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 20 68 72 65 66 3d 5c 22 2f 75 73 2f 77 65 62 61 70 70 73 2f 6d 70 70 2f 63 6f 75 6e 74 72 79 2d 77 6f 72 6c 64 77 69 64 65 5c 22 3e 57 6f 72 6c 64 77 69 64 65 3c 2f 61 3e 22 7d 7d 2c 22 74 72 61 63 6b 69 6e 67 22 3a 7b 22 66 70 74 69 22 3a 7b 22 6e 61 6d 65 22 3a 22 70 74 61 22 2c 22 6a 73 55 52 4c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 22 2c 22 73 65 72 76 65 72 55 52 4c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 2e 70 61 79 70 61 6c 2e 63 6f 6d 2f 74 73 22 2c 22 64 61 74 61 53 74 72 69 6e 67 22 3a 22 70 67 72 70 3d 61 75 74 68 63 68 61 6c 6c 65 6e 67 65 6e 6f 64 65 77 Data Ascii: Updates</a>","worldwide":"<a target=\"_blank\" href=\"/us/webapps/mpp/country-worldwide\">Worldwide</a>"}},"tracking":{"fpti":{"name":"pta","jsURL":"https://www.paypalobjects.com","serverURL":"https://t.paypal.com/ts","dataString":"pgrp=authchallengenodew

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.6	49895	151.101.67.1	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:05 UTC	3348	OUT	GET /ts?v=1.9.5&t=1733421900875&g=300&pgrp=authchallengenodeweb%2Flayouts%2Fmaster.html.dust&page=authchallengenodeweb%2Flayouts%2Fmaster.html.dust&pgst=1733421896022&calc=f4773935a9896&nsid=RLPSU2OHYvlTZtXh_VMfzo7ctuMnbu-c&rsta=en_US&pgtf=Nodejs&env=live&s=ci&ccpg=US&csci=f46f4853341b4f54a3e4f8000fb6a48d&comp=authchallengenodeweb&tsrce=unifiedloginnodeweb&cu=0&ef_policy=ccpa&xe=109541%2C107585&xt=145835%2C135393&e=im&pglk=main%3Aunifiedlogin%3A%3A%3Alogin%7CbtnLogin&imsrc=setup&view=%7B%22t10%22%3A1220%2C%22t11%22%3A7406%2C%22tcp%22%3A4874%2C%22et%22%3A%223g%22%2C%22nt%22%3A%22navigate%22%2C%22bt%22%3A105%7D&ru=https%3A%2F%2Fwww.paypal.com%2Fsignin%2F%3FreturnUri%3D%252Fmyaccount%252Ftransfer%252FpayRequest%252FU-09584045BD498740V%252FU-7AK40048SY131414Y%253FclassicUrl%253D%252FUS%252Fcgi-bin%252F%253Fcmd%253D_prq%26id%3DUJ8cMtNtnR8osXBu987dZoV1KMO8Kn.CKcv6ZA%26expId%3Dp2p%26onboardData%3D%257B%2522signUpRequest%2522%253A%257B%2522method%2522%253A%2522get%2522%252C%2522url%2522%253A%2522https%253A%252F%252Fw [TRUNCATED] Host: t.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; l7_az=dcg01.phx; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352; tsrce=authchallengenodeweb; datadome=8RSW3uzD4SbWvM9gFw9q0gQKTqu4dzosgEwjlVWJYqLsPPLmcSW45AaqUPwIez9Nxb_Xi8Zv7_oaSV_rYgieEwGmR_dsy5tyvCD7Ggqcjb1qKko3mAHLgzTBEcl7OT_L; x-pp-s=eyJ0IjoiMTczMzQyMTkwMjY5MSIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1764957903%26vteXpYrS%3D1733423703%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew
2024-12-05 18:05:05 UTC	1360	IN	HTTP/1.1 200 OK Connection: close Access-Control-Expose-Headers: Server-Timing CORRELATION-ID: 8282669f3ff29 Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Type: image/gif Expires: Thu, 05 Dec 2024 18:05:05 GMT P3p: CP="CAO IND OUR SAM UNI STA COR COM" Paypal-Debug-Id: 8282669f3ff29 Pragma: no-cache Set-Cookie: ts=vreXpYrS%3D1764957905%26vteXpYrS%3D1733423705%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew;Expires=Fri, 05 Dec 2025 18:05:05 GMT;domain=.paypal.com;path=/;secure;HttpOnly;SameSite=None; Set-Cookie: ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352;Expires=Fri, 05 Dec 2025 18:05:05 GMT;domain=.paypal.com;path=/;secure;SameSite=None; Traceparent: 00-00000000000000000008282669f3ff29-281344ecfea4fa2e-01 Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Date: Thu, 05 Dec 2024 18:05:05 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Served-By: cache-iad-kjyo7100108-IAD, cache-ewr-kewr1740066-EWR X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1733421905.284247,VS0,VE88 vary: Accept-Encoding Server-Timing: "traceparent;desc="00-00000000000000000008282669f3ff29-4d75b23c7182d186-01"";content-encoding;desc="",x-cdn;desc="fastly" Timing-Allow-Origin: * transfer-encoding: chunked
2024-12-05 18:05:05 UTC	4	IN	Data Raw: 32 61 0d 0a Data Ascii: 2a
2024-12-05 18:05:05 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 01 01 32 00 3b Data Ascii: GIF89a!,2;
2024-12-05 18:05:05 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.6	49889	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:05 UTC	580	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/dust-core.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:05:06 UTC	792	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:05:05 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-6349" Expires: Fri, 05 Dec 2025 18:05:05 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 0245db07d3e50 Server: ECAcc (lhd/3729) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000000245db07d3e50-e96d030c9b1c9b9f-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 25417 Connection: close
2024-12-05 18:05:06 UTC	16383	IN	Data Raw: 2f 2a 21 20 44 75 73 74 20 2d 20 41 73 79 6e 63 68 72 6f 6e 6f 75 73 20 54 65 6d 70 6c 61 74 69 6e 67 20 2d 20 76 32 2e 36 2e 32 0a 2a 20 68 74 74 70 3a 2f 2f 6c 69 6e 6b 65 64 69 6e 2e 67 69 74 68 75 62 2e 69 6f 2f 64 75 73 74 6a 73 2f 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 35 20 41 6c 65 6b 73 61 6e 64 65 72 20 57 69 6c 6c 69 61 6d 73 3b 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 20 28 72 6f 6f 74 2c 20 66 61 63 74 6f 72 79 29 20 7b 0a 20 20 2f 2a 67 6c 6f 62 61 6c 20 64 65 66 69 6e 65 2a 2f 0a 20 20 69 66 20 28 74 79 70 65 6f 66 20 64 65 66 69 6e 65 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 20 26 26 20 64 65 66 69 6e 65 2e 61 6d 64 20 26 26 Data Ascii: /! Dust - Asynchronous Templating - v2.6.2 http://linkedin.github.io/dustjs/* Copyright (c) 2015 Aleksander Williams; Released under the MIT License /(function (root, factory) { /global define*/ if (typeof define === 'function' && define.amd &&
2024-12-05 18:05:06 UTC	9034	IN	Data Raw: 74 65 78 74 29 3b 0a 20 20 7d 3b 0a 0a 20 20 43 68 75 6e 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 66 65 72 65 6e 63 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 65 6c 65 6d 2c 20 63 6f 6e 74 65 78 74 2c 20 61 75 74 6f 2c 20 66 69 6c 74 65 72 73 29 20 7b 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 65 6c 65 6d 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 0a 20 20 20 20 20 20 65 6c 65 6d 20 3d 20 65 6c 65 6d 2e 61 70 70 6c 79 28 63 6f 6e 74 65 78 74 2e 63 75 72 72 65 6e 74 28 29 2c 20 5b 74 68 69 73 2c 20 63 6f 6e 74 65 78 74 2c 20 6e 75 6c 6c 2c 20 7b 61 75 74 6f 3a 20 61 75 74 6f 2c 20 66 69 6c 74 65 72 73 3a 20 66 69 6c 74 65 72 73 7d 5d 29 3b 0a 20 20 20 20 20 20 69 66 20 28 65 6c 65 6d 20 69 6e 73 74 61 6e 63 65 6f 66 20 43 68 75 6e 6b 29 20 7b Data Ascii: text); }; Chunk.prototype.reference = function(elem, context, auto, filters) { if (typeof elem === 'function') { elem = elem.apply(context.current(), [this, context, null, {auto: auto, filters: filters}]); if (elem instanceof Chunk) {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.6	49890	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:05 UTC	580	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/core/baseView.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:05:06 UTC	797	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:05:05 GMT DC: ccg11-origin-www-1.paypal.com Etag: "6736db9f-802+br+ident" Expires: Fri, 05 Dec 2025 18:05:05 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: e7e1b5d32ba47 Server: ECAcc (lhd/35C1) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000e7e1b5d32ba47-611ca1a3b2e10145-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 2050 Connection: close
2024-12-05 18:05:06 UTC	2050	IN	Data Raw: 2f 2a 20 67 6c 6f 62 61 6c 20 64 65 66 69 6e 65 3a 74 72 75 65 20 2a 2f 0a 0a 2f 2a 2a 0a 20 2a 20 41 62 73 74 72 61 63 74 20 76 69 65 77 20 77 68 69 63 68 20 65 6e 61 62 6c 65 73 20 72 65 6e 64 65 72 69 6e 67 20 63 6f 6e 74 65 6e 74 73 20 77 69 74 68 20 61 20 74 65 6d 70 6c 61 74 65 2e 0a 20 2a 2f 0a 64 65 66 69 6e 65 28 5b 0a 09 27 6e 6f 75 67 61 74 27 2c 0a 09 27 75 6e 64 65 72 73 63 6f 72 65 27 2c 0a 09 27 62 61 63 6b 62 6f 6e 65 27 0a 5d 2c 0a 09 66 75 6e 63 74 69 6f 6e 20 28 6e 6f 75 67 61 74 2c 20 5f 2c 20 42 61 63 6b 62 6f 6e 65 29 20 7b 0a 0a 09 09 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 0a 09 09 76 61 72 20 42 61 73 65 56 69 65 77 20 3d 20 42 61 63 6b 62 6f 6e 65 2e 56 69 65 77 2e 65 78 74 65 6e 64 28 7b 0a 0a 09 09 09 2f 2a 2a 0a 09 09 09 Data Ascii: /* global define:true //* * Abstract view which enables rendering contents with a template. /define(['nougat','underscore','backbone'],function (nougat, _, Backbone) {'use strict';var BaseView = Backbone.View.extend({/*

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.6	49891	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:05 UTC	404	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/core/nougat.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:05:06 UTC	791	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:05:05 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-265b" Expires: Fri, 05 Dec 2025 18:05:05 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 5c26ec02595df Server: ECAcc (lhd/35B7) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000005c26ec02595df-de7e93c56ef83a33-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 9819 Connection: close
2024-12-05 18:05:06 UTC	9819	IN	Data Raw: 2f 2a 0a 20 2a 20 6e 6f 75 67 61 74 2e 6a 73 20 76 30 2e 30 2e 31 20 2d 20 41 70 70 6c 69 63 61 74 69 6f 6e 20 4d 65 64 69 61 74 6f 72 2f 53 61 6e 64 62 6f 78 20 4c 69 62 72 61 72 79 0a 20 2a 20 54 68 69 73 20 6d 6f 64 75 6c 65 20 70 65 72 66 6f 72 6d 73 20 74 68 65 20 66 75 6e 63 74 69 6f 6e 20 6f 66 20 6d 65 64 69 61 74 6f 72 2f 73 61 6e 64 62 6f 78 2e 0a 20 2a 0a 20 2a 20 40 61 75 74 68 6f 72 20 45 72 69 6b 20 54 6f 74 68 20 3c 65 72 74 6f 74 68 40 70 61 79 70 61 6c 2e 63 6f 6d 3e 0a 20 2a 2f 0a 0a 2f 2a 67 6c 6f 62 61 6c 20 64 65 66 69 6e 65 3a 66 61 6c 73 65 2c 20 72 65 71 75 69 72 65 6a 73 3a 74 72 75 65 20 2a 2f 0a 2f 2a 6a 73 6c 69 6e 74 20 70 6c 75 73 70 6c 75 73 3a 74 72 75 65 2c 20 6e 6f 6d 65 6e 3a 74 72 75 65 20 2a 2f 0a 0a 64 65 66 69 6e 65 Data Ascii: /* * nougat.js v0.0.1 - Application Mediator/Sandbox Library * This module performs the function of mediator/sandbox. * * @author Erik Toth <ertoth@paypal.com> //global define:false, requirejs:true //jslint plusplus:true, nomen:true */define

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.6	49892	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:05 UTC	399	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/router.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:05:06 UTC	790	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:05:05 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-72f" Expires: Fri, 05 Dec 2025 18:05:05 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 4574b38a25485 Server: ECAcc (lhd/35D0) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000004574b38a25485-d2bf40bded9091a5-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 1839 Connection: close
2024-12-05 18:05:06 UTC	1839	IN	Data Raw: 2f 2a 67 6c 6f 62 61 6c 20 64 65 66 69 6e 65 3a 74 72 75 65 2c 20 63 6f 6e 73 6f 6c 65 3a 74 72 75 65 2c 20 6a 51 75 65 72 79 3a 74 72 75 65 2c 20 72 65 71 75 69 72 65 3a 74 72 75 65 20 2a 2f 0a 0a 64 65 66 69 6e 65 28 5b 20 27 6a 71 75 65 72 79 27 2c 20 27 62 61 63 6b 62 6f 6e 65 27 5d 2c 0a 0a 09 66 75 6e 63 74 69 6f 6e 20 28 24 2c 20 42 61 63 6b 62 6f 6e 65 29 20 7b 0a 0a 09 09 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 09 09 76 61 72 20 72 6f 75 74 65 72 3b 0a 0a 09 09 72 6f 75 74 65 72 20 3d 20 42 61 63 6b 62 6f 6e 65 2e 52 6f 75 74 65 72 2e 65 78 74 65 6e 64 28 7b 0a 09 09 09 72 6f 75 74 65 73 3a 20 7b 0a 09 09 09 09 27 27 3a 20 27 73 68 6f 77 54 68 65 56 69 65 77 27 2c 0a 09 09 09 09 27 73 74 65 70 75 70 3f 2a 71 75 65 72 79 53 74 72 69 6e 67 27 Data Ascii: /global define:true, console:true, jQuery:true, require:true /define([ 'jquery', 'backbone'],function ($, Backbone) {'use strict';var router;router = Backbone.Router.extend({routes: {'': 'showTheView','stepup?*queryString'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.6	49893	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:05 UTC	410	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/widgets/analytics.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:05:06 UTC	797	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:05:05 GMT DC: ccg11-origin-www-1.paypal.com Etag: "6736db9f-974+br+ident" Expires: Fri, 05 Dec 2025 18:05:05 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 088a9c2792b80 Server: ECAcc (lhd/3588) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000088a9c2792b80-2445d6753c41ca91-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 2420 Connection: close
2024-12-05 18:05:06 UTC	2420	IN	Data Raw: 2f 2a 67 6c 6f 62 61 6c 20 64 65 66 69 6e 65 3a 74 72 75 65 2c 20 73 3a 74 72 75 65 20 2a 2f 0a 0a 2f 2a 2a 0a 20 2a 20 40 66 69 6c 65 4f 76 65 72 76 69 65 77 20 41 6e 61 6c 79 74 69 63 73 20 e2 80 93 20 6c 69 6e 6b 20 61 6e 64 20 65 72 72 6f 72 20 74 72 61 63 6b 69 6e 67 0a 20 2a 20 40 6e 61 6d 65 20 41 6e 61 6c 79 74 69 63 73 20 57 69 64 67 65 74 0a 20 2a 20 40 61 75 74 68 6f 72 20 64 71 75 6f 63 6b 0a 20 2a 2f 0a 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 2c 20 22 42 61 73 65 56 69 65 77 22 2c 20 22 6e 6f 75 67 61 74 22 5d 2c 0a 09 66 75 6e 63 74 69 6f 6e 20 28 24 2c 20 42 61 73 65 56 69 65 77 2c 20 6e 6f 75 67 61 74 29 20 7b 0a 09 09 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 09 09 76 61 72 20 56 69 65 77 20 3d 20 42 61 73 65 56 69 65 77 2e 65 Data Ascii: /global define:true, s:true //** * @fileOverview Analytics link and error tracking * @name Analytics Widget * @author dquock */define(["jquery", "BaseView", "nougat"],function ($, BaseView, nougat) {"use strict";var View = BaseView.e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.6	49894	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:05 UTC	423	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/opinionLab/opinionLabComponent.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:05:06 UTC	790	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:05:05 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-c3d" Expires: Fri, 05 Dec 2025 18:05:05 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 21f72a8abbe45 Server: ECAcc (lhd/35ED) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-000000000000000000021f72a8abbe45-97a297d03a7ff37c-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 3133 Connection: close
2024-12-05 18:05:06 UTC	3133	IN	Data Raw: 64 65 66 69 6e 65 28 5b 27 6f 70 69 6e 69 6f 6e 4c 61 62 27 2c 20 27 6f 6e 6c 69 6e 65 4f 70 69 6e 69 6f 6e 50 6f 70 75 70 27 5d 2c 20 66 75 6e 63 74 69 6f 6e 28 6f 70 69 6e 69 6f 6e 4c 61 62 2c 20 70 6f 70 75 70 29 20 7b 0a 0a 09 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 09 77 69 6e 64 6f 77 2e 50 41 59 50 41 4c 20 3d 20 77 69 6e 64 6f 77 2e 50 41 59 50 41 4c 20 3f 20 77 69 6e 64 6f 77 2e 50 41 59 50 41 4c 20 3a 20 7b 7d 3b 0a 09 76 61 72 20 6f 70 56 61 72 73 20 3d 20 77 69 6e 64 6f 77 2e 50 41 59 50 41 4c 2e 6f 70 69 6e 69 6f 6e 4c 61 62 56 61 72 73 3b 0a 0a 09 2f 2a 20 44 65 66 69 6e 65 73 20 74 68 65 20 72 65 66 65 72 72 61 6c 20 55 52 4c 20 2d 20 56 65 72 69 66 79 20 2a 2f 0a 09 66 75 6e 63 74 69 6f 6e 20 70 61 79 70 61 6c 55 52 4c 20 28 70 61 67 65 Data Ascii: define(['opinionLab', 'onlineOpinionPopup'], function(opinionLab, popup) {'use strict';window.PAYPAL = window.PAYPAL ? window.PAYPAL : {};var opVars = window.PAYPAL.opinionLabVars;/* Defines the referral URL - Verify */function paypalURL (page

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.6	49898	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:05 UTC	588	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/opinionLab/opinionLab.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:05:06 UTC	798	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:05:06 GMT DC: ccg11-origin-www-1.paypal.com Etag: "6736db9f-10db+br+ident" Expires: Fri, 05 Dec 2025 18:05:06 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 33840520f9c7e Server: ECAcc (lhd/35F2) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-000000000000000000033840520f9c7e-d6a66713f67e83d2-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 4315 Connection: close
2024-12-05 18:05:06 UTC	4315	IN	Data Raw: 2f 2a 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 63 6f 6e 74 61 69 6e 73 20 74 68 65 20 6a 61 76 61 73 63 72 69 70 74 20 66 75 6e 63 74 69 6f 6e 73 20 61 6e 64 20 73 6e 69 70 70 65 74 73 0a 20 2a 20 74 68 61 74 20 61 72 65 20 75 73 65 64 20 74 6f 20 69 6e 74 72 6f 64 75 63 65 20 74 68 65 20 73 69 74 65 20 66 65 65 64 62 61 63 6b 20 6c 69 6e 6b 20 69 6e 20 74 68 65 20 66 6f 6f 74 65 72 2e 0a 20 2a 20 46 75 6e 63 74 69 6f 6e 20 4f 5f 47 6f 54 20 69 6e 73 65 72 74 73 20 74 68 65 20 6c 69 6e 6b 20 69 6e 20 74 68 65 20 66 6f 6f 74 65 72 20 6c 69 73 74 20 61 6e 64 20 61 73 73 69 67 6e 73 20 6f 6e 63 6c 69 63 6b 0a 20 2a 20 66 6f 72 20 70 6f 70 75 70 20 77 69 6e 64 6f 77 20 74 68 61 74 20 64 69 73 70 6c 61 79 73 20 74 68 65 20 66 65 65 64 62 61 63 6b 20 66 72 6f Data Ascii: /* * This file contains the javascript functions and snippets * that are used to introduce the site feedback link in the footer. * Function O_GoT inserts the link in the footer list and assigns onclick * for popup window that displays the feedback fro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.6	49899	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:06 UTC	373	OUT	GET /pa/3pjs/tl/6.4.65/patlcfg.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:05:06 UTC	798	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:05:06 GMT DC: ccg11-origin-www-1.paypal.com Etag: "6735ac2d-1c22+ident" Expires: Thu, 05 Dec 2024 19:05:06 GMT Last-Modified: Thu, 14 Nov 2024 07:52:13 GMT Paypal-Debug-Id: 9b17caaea01e4 Server: ECAcc (lhd/3599) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000009b17caaea01e4-07280370cdd6793c-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 7202 Connection: close
2024-12-05 18:05:06 UTC	7202	IN	Data Raw: 54 4c 54 2e 61 64 64 4d 6f 64 75 6c 65 28 22 64 69 67 69 74 61 6c 44 61 74 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 64 65 73 74 72 6f 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 6f 6e 65 76 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 77 65 62 45 76 65 6e 74 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 65 62 45 76 65 6e 74 26 26 77 65 62 45 76 65 6e 74 2e 74 79 70 65 26 26 77 65 62 45 76 65 6e 74 29 73 77 69 74 63 68 28 77 65 62 45 76 65 6e 74 2e 74 79 70 65 29 7b 63 61 73 65 22 6c 6f 61 64 22 3a 63 61 73 65 22 75 6e 6c 6f 61 64 22 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 66 70 74 69 26 26 28 71 4b 65 79 73 3d 77 69 6e Data Ascii: TLT.addModule("digitalData",function(){return{init:function(){},destroy:function(){},onevent:function(webEvent){if("object"==typeof webEvent&&webEvent.type&&webEvent)switch(webEvent.type){case"load":case"unload":"undefined"!=typeof window.fpti&&(qKeys=win

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.6	49902	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:06 UTC	414	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/underscore-1.13.4.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:05:06 UTC	792	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:05:06 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-ffa1" Expires: Fri, 05 Dec 2025 18:05:06 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 74daf48a20eec Server: ECAcc (lhd/35A9) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-000000000000000000074daf48a20eec-95d4c89ec21fba24-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 65441 Connection: close
2024-12-05 18:05:06 UTC	16383	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 67 6c 6f 62 61 6c 2c 20 66 61 63 74 6f 72 79 29 20 7b 0a 09 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 20 3d 3d 3d 20 27 6f 62 6a 65 63 74 27 20 26 26 20 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 3f 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 20 3d 20 66 61 63 74 6f 72 79 28 29 20 3a 0a 09 74 79 70 65 6f 66 20 64 65 66 69 6e 65 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 20 26 26 20 64 65 66 69 6e 65 2e 61 6d 64 20 3f 20 64 65 66 69 6e 65 28 27 75 6e 64 65 72 73 63 6f 72 65 27 2c 20 66 61 63 74 6f 72 79 29 20 3a 0a 09 28 67 6c 6f 62 61 6c 20 3d 20 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 3f 20 67 6c 6f 62 61 6c 54 Data Ascii: (function (global, factory) {typeof exports === 'object' && typeof module !== 'undefined' ? module.exports = factory() :typeof define === 'function' && define.amd ? define('underscore', factory) :(global = typeof globalThis !== 'undefined' ? globalT
2024-12-05 18:05:06 UTC	1	IN	Data Raw: 65 Data Ascii: e
2024-12-05 18:05:06 UTC	16383	IN	Data Raw: 70 20 65 71 75 61 6c 69 74 79 2e 0a 09 09 69 66 20 28 6b 65 79 73 28 62 29 2e 6c 65 6e 67 74 68 20 21 3d 3d 20 6c 65 6e 67 74 68 29 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 09 09 77 68 69 6c 65 20 28 6c 65 6e 67 74 68 2d 2d 29 20 7b 0a 09 09 20 20 2f 2f 20 44 65 65 70 20 63 6f 6d 70 61 72 65 20 65 61 63 68 20 6d 65 6d 62 65 72 0a 09 09 20 20 6b 65 79 20 3d 20 5f 6b 65 79 73 5b 6c 65 6e 67 74 68 5d 3b 0a 09 09 20 20 69 66 20 28 21 28 68 61 73 24 31 28 62 2c 20 6b 65 79 29 20 26 26 20 65 71 28 61 5b 6b 65 79 5d 2c 20 62 5b 6b 65 79 5d 2c 20 61 53 74 61 63 6b 2c 20 62 53 74 61 63 6b 29 29 29 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 09 09 7d 0a 09 20 20 7d 0a 09 20 20 2f 2f 20 52 65 6d 6f 76 65 20 74 68 65 20 66 69 72 73 74 20 6f 62 6a 65 63 74 20 66 Data Ascii: p equality.if (keys(b).length !== length) return false;while (length--) { // Deep compare each member key = _keys[length]; if (!(has$1(b, key) && eq(a[key], b[key], aStack, bStack))) return false;} } // Remove the first object f
2024-12-05 18:05:07 UTC	16383	IN	Data Raw: 3f 20 70 72 65 66 69 78 20 2b 20 69 64 20 3a 20 69 64 3b 0a 09 7d 0a 20 20 0a 09 2f 2f 20 53 74 61 72 74 20 63 68 61 69 6e 69 6e 67 20 61 20 77 72 61 70 70 65 64 20 55 6e 64 65 72 73 63 6f 72 65 20 6f 62 6a 65 63 74 2e 0a 09 66 75 6e 63 74 69 6f 6e 20 63 68 61 69 6e 28 6f 62 6a 29 20 7b 0a 09 20 20 76 61 72 20 69 6e 73 74 61 6e 63 65 20 3d 20 5f 24 31 28 6f 62 6a 29 3b 0a 09 20 20 69 6e 73 74 61 6e 63 65 2e 5f 63 68 61 69 6e 20 3d 20 74 72 75 65 3b 0a 09 20 20 72 65 74 75 72 6e 20 69 6e 73 74 61 6e 63 65 3b 0a 09 7d 0a 20 20 0a 09 2f 2f 20 49 6e 74 65 72 6e 61 6c 20 66 75 6e 63 74 69 6f 6e 20 74 6f 20 65 78 65 63 75 74 65 20 60 73 6f 75 72 63 65 46 75 6e 63 60 20 62 6f 75 6e 64 20 74 6f 20 60 63 6f 6e 74 65 78 74 60 20 77 69 74 68 20 6f 70 74 69 6f 6e 61 Data Ascii: ? prefix + id : id;} // Start chaining a wrapped Underscore object.function chain(obj) { var instance = _$1(obj); instance._chain = true; return instance;} // Internal function to execute `sourceFunc` bound to `context` with optiona
2024-12-05 18:05:07 UTC	16291	IN	Data Raw: 7c 7c 20 28 74 79 70 65 6f 66 20 69 74 65 72 61 74 65 65 20 3d 3d 20 27 6e 75 6d 62 65 72 27 20 26 26 20 74 79 70 65 6f 66 20 6f 62 6a 5b 30 5d 20 21 3d 20 27 6f 62 6a 65 63 74 27 20 26 26 20 6f 62 6a 20 21 3d 20 6e 75 6c 6c 29 29 20 7b 0a 09 09 6f 62 6a 20 3d 20 69 73 41 72 72 61 79 4c 69 6b 65 28 6f 62 6a 29 20 3f 20 6f 62 6a 20 3a 20 76 61 6c 75 65 73 28 6f 62 6a 29 3b 0a 09 09 66 6f 72 20 28 76 61 72 20 69 20 3d 20 30 2c 20 6c 65 6e 67 74 68 20 3d 20 6f 62 6a 2e 6c 65 6e 67 74 68 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0a 09 09 20 20 76 61 6c 75 65 20 3d 20 6f 62 6a 5b 69 5d 3b 0a 09 09 20 20 69 66 20 28 76 61 6c 75 65 20 21 3d 20 6e 75 6c 6c 20 26 26 20 76 61 6c 75 65 20 3e 20 72 65 73 75 6c 74 29 20 7b 0a 09 09 09 72 65 73 75 6c Data Ascii: \|\| (typeof iteratee == 'number' && typeof obj[0] != 'object' && obj != null)) {obj = isArrayLike(obj) ? obj : values(obj);for (var i = 0, length = obj.length; i < length; i++) { value = obj[i]; if (value != null && value > result) {resul

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.6	49901	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:06 UTC	596	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/opinionLab/onlineOpinionPopup.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:05:06 UTC	790	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:05:06 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-ef0" Expires: Fri, 05 Dec 2025 18:05:06 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: c2024eeaab32c Server: ECAcc (lhd/35F6) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000c2024eeaab32c-8176a71871a3efa2-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 3824 Connection: close
2024-12-05 18:05:06 UTC	3824	IN	Data Raw: 2f 2a 0a 20 53 70 65 63 20 23 32 32 39 35 36 20 4f 70 69 6e 69 6f 6e 4c 61 62 0a 20 2a 2f 0a 0a 64 65 66 69 6e 65 28 5b 27 6f 70 69 6e 69 6f 6e 4c 61 62 27 5d 2c 20 66 75 6e 63 74 69 6f 6e 28 6f 70 69 6e 69 6f 6e 4c 61 62 29 20 7b 0a 0a 09 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 09 77 69 6e 64 6f 77 2e 50 41 59 50 41 4c 20 3d 20 77 69 6e 64 6f 77 2e 50 41 59 50 41 4c 20 3f 20 77 69 6e 64 6f 77 2e 50 41 59 50 41 4c 20 3a 20 7b 7d 3b 0a 09 76 61 72 20 6f 70 56 61 72 73 20 3d 20 77 69 6e 64 6f 77 2e 50 41 59 50 41 4c 2e 6f 70 69 6e 69 6f 6e 4c 61 62 56 61 72 73 3b 0a 0a 09 66 75 6e 63 74 69 6f 6e 20 73 68 6f 77 70 6f 70 75 70 28 72 65 64 69 72 65 63 74 54 6f 29 20 7b 0a 09 09 76 61 72 20 6d 79 77 69 6e 3b 0a 09 09 6d 79 77 69 6e 20 3d 20 77 69 6e 64 6f 77 Data Ascii: /* Spec #22956 OpinionLab */define(['opinionLab'], function(opinionLab) {'use strict';window.PAYPAL = window.PAYPAL ? window.PAYPAL : {};var opVars = window.PAYPAL.opinionLabVars;function showpopup(redirectTo) {var mywin;mywin = window

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.6	49903	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:06 UTC	589	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/backbone-1.5.0.min.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:05:06 UTC	792	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:05:06 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-63a4" Expires: Fri, 05 Dec 2025 18:05:06 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 15a9fd45211c5 Server: ECAcc (lhd/35DA) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-000000000000000000015a9fd45211c5-5a3b9c0c9eb2d1be-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 25508 Connection: close
2024-12-05 18:05:06 UTC	16383	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 6e 3d 74 79 70 65 6f 66 20 73 65 6c 66 3d 3d 22 6f 62 6a 65 63 74 22 26 26 73 65 6c 66 2e 73 65 6c 66 3d 3d 3d 73 65 6c 66 26 26 73 65 6c 66 7c 7c 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3d 3d 22 6f 62 6a 65 63 74 22 26 26 67 6c 6f 62 61 6c 2e 67 6c 6f 62 61 6c 3d 3d 3d 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 3b 69 66 28 74 79 70 65 6f 66 20 64 65 66 69 6e 65 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 64 65 66 69 6e 65 2e 61 6d 64 29 7b 64 65 66 69 6e 65 28 5b 22 75 6e 64 65 72 73 63 6f 72 65 22 2c 22 6a 71 75 65 72 79 22 2c 22 65 78 70 6f 72 74 73 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 6e 2e 42 61 63 6b 62 6f 6e 65 3d 72 28 6e 2c 69 2c 74 2c 65 29 7d 29 7d 65 6c 73 65 20 69 66 28 74 Data Ascii: (function(r){var n=typeof self=="object"&&self.self===self&&self\|\|typeof global=="object"&&global.global===global&&global;if(typeof define==="function"&&define.amd){define(["underscore","jquery","exports"],function(t,e,i){n.Backbone=r(n,i,t,e)})}else if(t
2024-12-05 18:05:06 UTC	9125	IN	Data Raw: 2b 22 2e 64 65 6c 65 67 61 74 65 45 76 65 6e 74 73 22 2b 74 68 69 73 2e 63 69 64 2c 65 2c 69 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 5f 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 74 29 7d 2c 5f 65 6e 73 75 72 65 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 74 68 69 73 2e 65 6c 29 7b 76 61 72 20 74 3d 78 2e 65 78 74 65 6e 64 28 7b 7d 2c 78 2e 72 65 73 75 6c 74 28 74 68 69 73 2c 22 61 74 74 72 69 62 75 74 65 73 22 29 29 3b 69 66 28 74 68 69 73 2e 69 64 29 74 2e 69 64 3d 78 2e 72 65 73 75 6c 74 28 74 68 69 73 2c 22 69 64 22 29 3b 69 66 28 74 68 69 73 2e 63 6c 61 73 73 4e 61 6d 65 29 74 5b 22 63 6c 61 73 73 Data Ascii: +".delegateEvents"+this.cid,e,i);return this},_createElement:function(t){return document.createElement(t)},_ensureElement:function(){if(!this.el){var t=x.extend({},x.result(this,"attributes"));if(this.id)t.id=x.result(this,"id");if(this.className)t["class

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.6	49905	151.101.1.21	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:06 UTC	1125	OUT	GET /auth/logclientdata HTTP/1.1 Host: www.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; nsid=s%3ARLPSU2OHYvlTZtXh_VMfzo7ctuMnbu-c.%2F5h%2FpbgyA12uYrTjTUlTTIQJX8aBsaqWc%2FutzlCO8XQ; l7_az=dcg01.phx; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352; tsrce=authchallengenodeweb; ddbc=1; TLTSID=30167158646093787848819749747452; TLTDID=93723043988386874756787593010559; datadome=D8fSIT~dxz~mHSNyYTBDSRhEt2IYFFTDBQ1qJ3hUcAY7ERsrDodz5ZVyluuAb5NRxqCoUSBCopBgBow4dMKBuJ7R6REwjzuo9OrQ3WnpLQaztNcGpbdOTxLyK68vGUkJ; ts=vreXpYrS%3D1764957905%26vteXpYrS%3D1733423705%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew; x-pp-s=eyJ0IjoiMTczMzQyMTkwNTMzNSIsImwiOiIwIiwibSI6IjAifQ
2024-12-05 18:05:07 UTC	345	IN	HTTP/1.1 302 Found Connection: close Content-Length: 29 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Access-Control-Expose-Headers: Server-Timing Cache-Control: max-age=0, no-cache, no-store, must-revalidate
2024-12-05 18:05:07 UTC	2082	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6e 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 6f 62 6a 65 63 74 73 2e 70 61 79 70 61 6c 2e 63 6e 3b 20 73 63 72 69 70 74 2d 73 72 63 20 27 6e 6f 6e 63 65 2d 74 39 38 2b 50 4d 6a 5a 4b 49 4d 35 6b 36 6d 58 51 6e 76 57 7a 55 6d 71 4c 41 6a 63 6f 79 77 7a 57 64 33 33 50 38 48 57 68 65 4b 4c 78 30 6a 47 27 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6e Data Ascii: Content-Security-Policy: default-src 'self' https://.paypal.com https://.paypal.cn https://.paypalobjects.com https://objects.paypal.cn; script-src 'nonce-t98+PMjZKIM5k6mXQnvWzUmqLAjcoywzWd33P8HWheKLx0jG' 'self' https://.paypal.com https://*.paypal.cn
2024-12-05 18:05:07 UTC	1690	IN	Data Raw: 50 65 72 6d 69 73 73 69 6f 6e 73 2d 50 6f 6c 69 63 79 3a 20 63 68 2d 75 61 2d 70 6c 61 74 66 6f 72 6d 2d 76 65 72 73 69 6f 6e 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 61 72 63 68 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 77 6f 77 36 34 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 6d 6f 64 65 6c 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 66 75 6c 6c 2d 76 65 Data Ascii: Permissions-Policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-ve
2024-12-05 18:05:07 UTC	396	IN	Data Raw: 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 33 30 37 32 30 30 30 3b 20 69 6e 63 6c 75 64 65 53 75 62 44 6f 6d 61 69 6e 73 3b 20 70 72 65 6c 6f 61 64 0d 0a 58 2d 53 65 72 76 65 64 2d 42 79 3a 20 63 61 63 68 65 2d 69 61 64 2d 6b 63 67 73 37 32 30 30 31 36 34 2d 49 41 44 2c 20 63 61 63 68 65 2d 65 77 72 2d 6b 65 77 72 31 37 34 30 30 33 34 2d 45 57 52 2c 20 63 61 63 68 65 2d 65 77 72 2d 6b 65 77 72 31 37 34 30 30 33 34 2d 45 57 52 0d 0a 58 2d 43 61 63 68 65 3a 20 4d 49 53 53 2c 20 4d 49 53 53 2c 20 4d 49 53 53 0d 0a 58 2d 43 61 63 68 65 2d 48 69 74 73 3a 20 30 2c 20 30 2c 20 30 0d 0a 58 2d 54 69 6d 65 72 3a 20 53 31 37 33 33 34 32 31 39 30 37 2e 30 35 33 33 34 33 2c 56 53 30 2c 56 45 31 34 37 0d Data Ascii: Strict-Transport-Security: max-age=63072000; includeSubDomains; preloadX-Served-By: cache-iad-kcgs7200164-IAD, cache-ewr-kewr1740034-EWR, cache-ewr-kewr1740034-EWRX-Cache: MISS, MISS, MISSX-Cache-Hits: 0, 0, 0X-Timer: S1733421907.053343,VS0,VE147
2024-12-05 18:05:07 UTC	29	IN	Data Raw: 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 2f 73 69 67 6e 69 6e Data Ascii: Found. Redirecting to /signin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.6	49906	151.101.193.21	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:06 UTC	2094	OUT	POST /platform/tealeaftarget HTTP/1.1 Host: www.paypal.com Connection: keep-alive Content-Length: 3044 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Encoding: gzip X-Tealeaf-SyncXHR: false X-Tealeaf-MessageTypes: 12 sec-ch-ua-arch: "x86" sec-ch-ua-platform-version: "10.0.0" X-Tealeaf-SaaS-AppKey: 76938917d7504ff7a962174c021690bd X-Tealeaf-SaaS-TLTSID: 30167158646093787848819749747452 X-Requested-With: fetch sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" X-Tealeaf-SaaS-TLTDID: 93723043988386874756787593010559 X-Tealeaf: device (UIC) Lib/6.4.65 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json sec-ch-ua-full-version: "117.0.5938.134" X-TealeafType: GUI X-PageId: P.PLN64VWCP6Q4Z4M8BR6AV6ZEJG28 X-TeaLeaf-Page-Url: /signin Accept: / Origin: https://www.paypal.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.paypal.com/signin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; nsid=s%3ARLPSU2OHYvlTZtXh_VMfzo7ctuMnbu-c.%2F5h%2FpbgyA12uYrTjTUlTTIQJX8aBsaqWc%2FutzlCO8XQ; l7_az=dcg01.phx; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352; tsrce=authchallengenodeweb; ddbc=1; TLTSID=30167158646093787848819749747452; TLTDID=93723043988386874756787593010559; datadome=D8fSIT~dxz~mHSNyYTBDSRhEt2IYFFTDBQ1qJ3hUcAY7ERsrDodz5ZVyluuAb5NRxqCoUSBCopBgBow4dMKBuJ7R6REwjzuo9OrQ3WnpLQaztNcGpbdOTxLyK68vGUkJ; ts=vreXpYrS%3D1764957905%26vteXpYrS%3D1733423705%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew; x-pp-s=eyJ0IjoiMTczMzQyMTkwNTMzNSIsImwiOiIwIiwibSI6IjAifQ
2024-12-05 18:05:06 UTC	3044	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 c5 19 6b 73 a3 38 f2 af 70 ae 8a bf 5c b0 01 83 0d 99 38 3b 71 9c a7 ed 24 e3 47 5e b7 57 94 00 61 14 f3 0a 08 1b 7b 6a fe fb b5 04 38 76 66 67 f6 51 7b 77 71 0a a4 56 77 ab d5 dd ea 6e 89 af b5 00 a7 29 9a e3 07 9c a4 24 0a 6b 47 35 b9 d5 90 d8 af 76 58 4b 71 42 90 7f 9b 05 16 4e 6a 47 32 03 a4 0c 2b ad 1d fd eb 6b 8d 38 80 7d df b8 1f de b6 d5 87 c7 b3 fb f6 17 f5 45 1d e9 bd 71 fb f4 a1 fd 72 7e 73 a9 e8 c0 83 22 eb 9a 21 5e 8d 6f 4e 19 4b 8a 12 3a 25 01 06 7e 9d 56 4b 55 64 dd 68 29 aa 0a 88 00 dc 44 21 be 73 dd 14 d3 da 51 4b 92 0e 2b e9 8a 09 e9 3a 66 64 ca 61 2d 2a 71 64 59 51 34 60 6a 27 18 87 4b 82 57 15 31 90 da 51 16 52 2e b5 9b 44 c1 23 b6 6a 47 34 c9 f0 61 cd 89 82 33 14 d3 2c 01 66 5f 6b 51 42 e6 24 44 fe 84 6c Data Ascii: ks8p\8;q$G^Wa{j8vfgQ{wqVwn)$kG5vXKqBNjG2+k8}Eqr~s"!^oNK:%~VKUdh)D!sQK+:fda-*qdYQ4`j'KW1QR.D#jG4a3,f_kQB$Dl
2024-12-05 18:05:07 UTC	1096	IN	HTTP/1.1 200 OK Connection: close Content-Length: 38 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Security-Policy: default-src 'self' https://.paypal.com https://.paypalobjects.com 'unsafe-inline'; script-src 'self' https://.paypal.com https://.paypalobjects.com; img-src 'self' https:; object-src 'none'; form-action 'self' https://.paypal.com; base-uri 'self' https://.paypal.com; font-src 'self' https://.paypalobjects.com https://.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp Content-Type: application/json; charset=utf-8 Etag: W/"26-Gk06+v5jKZjJSatb1qivTiQJE1Y" Origin-Trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ== Paypal-Debug-Id: f410176d70c4d
2024-12-05 18:05:07 UTC	1558	IN	Data Raw: 50 65 72 6d 69 73 73 69 6f 6e 73 2d 50 6f 6c 69 63 79 3a 20 63 68 2d 75 61 2d 70 6c 61 74 66 6f 72 6d 2d 76 65 72 73 69 6f 6e 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 61 72 63 68 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 77 6f 77 36 34 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 6d 6f 64 65 6c 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 66 75 6c 6c 2d 76 65 Data Ascii: Permissions-Policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-ve
2024-12-05 18:05:07 UTC	38	IN	Data Raw: 7b 22 74 61 72 67 65 74 56 65 72 73 69 6f 6e 22 3a 22 31 22 2c 22 69 64 22 3a 37 39 32 30 35 31 30 35 38 38 30 7d Data Ascii: {"targetVersion":"1","id":79205105880}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.6	49909	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:07 UTC	410	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/jquery-1.12.4.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:05:08 UTC	794	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:05:08 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-47a35" Expires: Fri, 05 Dec 2025 18:05:08 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 88a2afba9a3a8 Server: ECAcc (lhd/35A2) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-000000000000000000088a2afba9a3a8-fc1ef7f35a139c0e-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 293429 Connection: close
2024-12-05 18:05:08 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 31 2e 31 32 2e 34 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 36 2d 30 35 2d 32 30 54 Data Ascii: /! jQuery JavaScript Library v1.12.4 * http://jquery.com/ * * Includes Sizzle.js * http://sizzlejs.com/ * * Copyright jQuery Foundation and other contributors * Released under the MIT license * http://jquery.org/license * * Date: 2016-05-20T
2024-12-05 18:05:08 UTC	1	IN	Data Raw: 5c Data Ascii: \
2024-12-05 18:05:08 UTC	16383	IN	Data Raw: 5c 5c 28 29 5b 5c 5c 5d 5d 7c 22 20 2b 20 61 74 74 72 69 62 75 74 65 73 20 2b 20 22 29 2a 29 7c 22 20 2b 0a 09 09 2f 2f 20 33 2e 20 61 6e 79 74 68 69 6e 67 20 65 6c 73 65 20 28 63 61 70 74 75 72 65 20 32 29 0a 09 09 22 2e 2a 22 20 2b 0a 09 09 22 29 5c 5c 29 7c 29 22 2c 0a 0a 09 2f 2f 20 4c 65 61 64 69 6e 67 20 61 6e 64 20 6e 6f 6e 2d 65 73 63 61 70 65 64 20 74 72 61 69 6c 69 6e 67 20 77 68 69 74 65 73 70 61 63 65 2c 20 63 61 70 74 75 72 69 6e 67 20 73 6f 6d 65 20 6e 6f 6e 2d 77 68 69 74 65 73 70 61 63 65 20 63 68 61 72 61 63 74 65 72 73 20 70 72 65 63 65 64 69 6e 67 20 74 68 65 20 6c 61 74 74 65 72 0a 09 72 77 68 69 74 65 73 70 61 63 65 20 3d 20 6e 65 77 20 52 65 67 45 78 70 28 20 77 68 69 74 65 73 70 61 63 65 20 2b 20 22 2b 22 2c 20 22 67 22 20 29 2c 0a Data Ascii: \$)[\\]]\|" + attributes + "))\|" +// 3. anything else (capture 2)"." +")\$\|)",// Leading and non-escaped trailing whitespace, capturing some non-whitespace characters preceding the latterrwhitespace = new RegExp( whitespace + "+", "g" ),
2024-12-05 18:05:08 UTC	1	IN	Data Raw: 74 Data Ascii: t
2024-12-05 18:05:08 UTC	16383	IN	Data Raw: 6f 72 41 6c 6c 28 22 5b 6d 73 61 6c 6c 6f 77 63 61 70 74 75 72 65 5e 3d 27 27 5d 22 29 2e 6c 65 6e 67 74 68 20 29 20 7b 0a 09 09 09 09 72 62 75 67 67 79 51 53 41 2e 70 75 73 68 28 20 22 5b 2a 5e 24 5d 3d 22 20 2b 20 77 68 69 74 65 73 70 61 63 65 20 2b 20 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 20 29 3b 0a 09 09 09 7d 0a 0a 09 09 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 49 45 38 0a 09 09 09 2f 2f 20 42 6f 6f 6c 65 61 6e 20 61 74 74 72 69 62 75 74 65 73 20 61 6e 64 20 22 76 61 6c 75 65 22 20 61 72 65 20 6e 6f 74 20 74 72 65 61 74 65 64 20 63 6f 72 72 65 63 74 6c 79 0a 09 09 09 69 66 20 28 20 21 64 69 76 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 73 65 6c 65 63 74 65 64 5d 22 29 2e 6c 65 6e 67 74 68 20 29 20 7b 0a 09 09 09 09 72 62 75 67 67 Data Ascii: orAll("[msallowcapture^='']").length ) {rbuggyQSA.push( "[^$]=" + whitespace + "(?:''\|\"\")" );}// Support: IE8// Boolean attributes and "value" are not treated correctlyif ( !div.querySelectorAll("[selected]").length ) {rbugg
2024-12-05 18:05:08 UTC	1	IN	Data Raw: 20 Data Ascii:
2024-12-05 18:05:08 UTC	16383	IN	Data Raw: 3d 20 30 29 20 7c 7c 20 73 74 61 72 74 2e 70 6f 70 28 29 29 20 29 20 7b 0a 0a 09 09 09 09 09 09 09 09 09 69 66 20 28 20 28 20 6f 66 54 79 70 65 20 3f 0a 09 09 09 09 09 09 09 09 09 09 6e 6f 64 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 20 3d 3d 3d 20 6e 61 6d 65 20 3a 0a 09 09 09 09 09 09 09 09 09 09 6e 6f 64 65 2e 6e 6f 64 65 54 79 70 65 20 3d 3d 3d 20 31 20 29 20 26 26 0a 09 09 09 09 09 09 09 09 09 09 2b 2b 64 69 66 66 20 29 20 7b 0a 0a 09 09 09 09 09 09 09 09 09 09 2f 2f 20 43 61 63 68 65 20 74 68 65 20 69 6e 64 65 78 20 6f 66 20 65 61 63 68 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 65 6c 65 6d 65 6e 74 0a 09 09 09 09 09 09 09 09 09 09 69 66 20 28 20 75 73 65 43 61 63 68 65 20 29 20 7b 0a 09 09 09 09 09 09 09 09 09 09 09 6f 75 Data Ascii: = 0) \|\| start.pop()) ) {if ( ( ofType ?node.nodeName.toLowerCase() === name :node.nodeType === 1 ) &&++diff ) {// Cache the index of each encountered elementif ( useCache ) {ou
2024-12-05 18:05:08 UTC	16383	IN	Data Raw: 0a 09 09 09 2f 2f 20 52 65 74 75 72 6e 20 73 70 65 63 69 61 6c 20 75 70 6f 6e 20 73 65 65 69 6e 67 20 61 20 70 6f 73 69 74 69 6f 6e 61 6c 20 6d 61 74 63 68 65 72 0a 09 09 09 69 66 20 28 20 6d 61 74 63 68 65 72 5b 20 65 78 70 61 6e 64 6f 20 5d 20 29 20 7b 0a 09 09 09 09 2f 2f 20 46 69 6e 64 20 74 68 65 20 6e 65 78 74 20 72 65 6c 61 74 69 76 65 20 6f 70 65 72 61 74 6f 72 20 28 69 66 20 61 6e 79 29 20 66 6f 72 20 70 72 6f 70 65 72 20 68 61 6e 64 6c 69 6e 67 0a 09 09 09 09 6a 20 3d 20 2b 2b 69 3b 0a 09 09 09 09 66 6f 72 20 28 20 3b 20 6a 20 3c 20 6c 65 6e 3b 20 6a 2b 2b 20 29 20 7b 0a 09 09 09 09 09 69 66 20 28 20 45 78 70 72 2e 72 65 6c 61 74 69 76 65 5b 20 74 6f 6b 65 6e 73 5b 6a 5d 2e 74 79 70 65 20 5d 20 29 20 7b 0a 09 09 09 09 09 09 62 72 65 61 6b 3b 0a Data Ascii: // Return special upon seeing a positional matcherif ( matcher[ expando ] ) {// Find the next relative operator (if any) for proper handlingj = ++i;for ( ; j < len; j++ ) {if ( Expr.relative[ tokens[j].type ] ) {break;
2024-12-05 18:05:08 UTC	2	IN	Data Raw: 29 29 Data Ascii: ))
2024-12-05 18:05:08 UTC	16383	IN	Data Raw: 2f 2c 0a 0a 09 2f 2f 20 6d 65 74 68 6f 64 73 20 67 75 61 72 61 6e 74 65 65 64 20 74 6f 20 70 72 6f 64 75 63 65 20 61 20 75 6e 69 71 75 65 20 73 65 74 20 77 68 65 6e 20 73 74 61 72 74 69 6e 67 20 66 72 6f 6d 20 61 20 75 6e 69 71 75 65 20 73 65 74 0a 09 67 75 61 72 61 6e 74 65 65 64 55 6e 69 71 75 65 20 3d 20 7b 0a 09 09 63 68 69 6c 64 72 65 6e 3a 20 74 72 75 65 2c 0a 09 09 63 6f 6e 74 65 6e 74 73 3a 20 74 72 75 65 2c 0a 09 09 6e 65 78 74 3a 20 74 72 75 65 2c 0a 09 09 70 72 65 76 3a 20 74 72 75 65 0a 09 7d 3b 0a 0a 6a 51 75 65 72 79 2e 66 6e 2e 65 78 74 65 6e 64 28 20 7b 0a 09 68 61 73 3a 20 66 75 6e 63 74 69 6f 6e 28 20 74 61 72 67 65 74 20 29 20 7b 0a 09 09 76 61 72 20 69 2c 0a 09 09 09 74 61 72 67 65 74 73 20 3d 20 6a 51 75 65 72 79 28 20 74 61 72 67 65 Data Ascii: /,// methods guaranteed to produce a unique set when starting from a unique setguaranteedUnique = {children: true,contents: true,next: true,prev: true};jQuery.fn.extend( {has: function( target ) {var i,targets = jQuery( targe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.6	49908	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:07 UTC	406	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/core/baseView.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:05:08 UTC	797	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:05:08 GMT DC: ccg11-origin-www-1.paypal.com Etag: "6736db9f-802+br+ident" Expires: Fri, 05 Dec 2025 18:05:08 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: e7e1b5d32ba47 Server: ECAcc (lhd/35C1) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000e7e1b5d32ba47-611ca1a3b2e10145-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 2050 Connection: close
2024-12-05 18:05:08 UTC	2050	IN	Data Raw: 2f 2a 20 67 6c 6f 62 61 6c 20 64 65 66 69 6e 65 3a 74 72 75 65 20 2a 2f 0a 0a 2f 2a 2a 0a 20 2a 20 41 62 73 74 72 61 63 74 20 76 69 65 77 20 77 68 69 63 68 20 65 6e 61 62 6c 65 73 20 72 65 6e 64 65 72 69 6e 67 20 63 6f 6e 74 65 6e 74 73 20 77 69 74 68 20 61 20 74 65 6d 70 6c 61 74 65 2e 0a 20 2a 2f 0a 64 65 66 69 6e 65 28 5b 0a 09 27 6e 6f 75 67 61 74 27 2c 0a 09 27 75 6e 64 65 72 73 63 6f 72 65 27 2c 0a 09 27 62 61 63 6b 62 6f 6e 65 27 0a 5d 2c 0a 09 66 75 6e 63 74 69 6f 6e 20 28 6e 6f 75 67 61 74 2c 20 5f 2c 20 42 61 63 6b 62 6f 6e 65 29 20 7b 0a 0a 09 09 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 0a 09 09 76 61 72 20 42 61 73 65 56 69 65 77 20 3d 20 42 61 63 6b 62 6f 6e 65 2e 56 69 65 77 2e 65 78 74 65 6e 64 28 7b 0a 0a 09 09 09 2f 2a 2a 0a 09 09 09 Data Ascii: /* global define:true //* * Abstract view which enables rendering contents with a template. /define(['nougat','underscore','backbone'],function (nougat, _, Backbone) {'use strict';var BaseView = Backbone.View.extend({/*

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.6	49910	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:08 UTC	583	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/dust-helpers.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:05:08 UTC	792	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:05:08 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-59d0" Expires: Fri, 05 Dec 2025 18:05:08 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 983e94fba8cf5 Server: ECAcc (lhd/35E9) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000983e94fba8cf5-6db7af5735060ca5-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 22992 Connection: close
2024-12-05 18:05:08 UTC	16383	IN	Data Raw: 2f 2a 21 20 64 75 73 74 6a 73 2d 68 65 6c 70 65 72 73 20 2d 20 76 31 2e 35 2e 30 0a 2a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6c 69 6e 6b 65 64 69 6e 2f 64 75 73 74 6a 73 2d 68 65 6c 70 65 72 73 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 34 20 41 6c 65 6b 73 61 6e 64 65 72 20 57 69 6c 6c 69 61 6d 73 3b 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 64 75 73 74 29 7b 0a 0a 20 20 20 20 2f 2f 20 55 73 65 20 64 75 73 74 27 73 20 62 75 69 6c 74 2d 69 6e 20 6c 6f 67 67 69 6e 67 20 77 68 65 6e 20 61 76 61 69 6c 61 62 6c 65 0a 20 20 20 20 76 61 72 20 5f 6c 6f 67 20 3d 20 64 75 73 74 2e 6c 6f 67 20 3f 20 66 75 6e 63 74 69 6f 6e 28 6d 73 67 Data Ascii: /! dustjs-helpers - v1.5.0 https://github.com/linkedin/dustjs-helpers* Copyright (c) 2014 Aleksander Williams; Released under the MIT License */(function(dust){ // Use dust's built-in logging when available var _log = dust.log ? function(msg
2024-12-05 18:05:08 UTC	6609	IN	Data Raw: 3d 20 22 6e 65 22 3b 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 69 6c 74 65 72 28 63 68 75 6e 6b 2c 20 63 6f 6e 74 65 78 74 2c 20 62 6f 64 69 65 73 2c 20 70 61 72 61 6d 73 2c 20 66 75 6e 63 74 69 6f 6e 28 65 78 70 65 63 74 65 64 2c 20 61 63 74 75 61 6c 29 20 7b 20 72 65 74 75 72 6e 20 61 63 74 75 61 6c 20 21 3d 3d 20 65 78 70 65 63 74 65 64 3b 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 63 68 75 6e 6b 3b 0a 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 0a 20 20 20 20 20 20 2f 2a 2a 0a 20 20 20 20 20 20 20 6c 74 20 68 65 6c 70 65 72 20 63 6f 6d 70 61 72 65 73 20 74 68 65 20 67 69 76 65 6e 20 6b 65 79 20 69 73 20 6c 65 73 73 20 74 68 61 6e 20 74 68 65 20 65 78 70 65 63 74 65 64 20 76 61 6c 75 65 0a 20 20 Data Ascii: = "ne"; return filter(chunk, context, bodies, params, function(expected, actual) { return actual !== expected; }); } return chunk; }, /** lt helper compares the given key is less than the expected value

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.6	49911	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:08 UTC	406	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/dust-core.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:05:08 UTC	792	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:05:08 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-6349" Expires: Fri, 05 Dec 2025 18:05:08 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 0245db07d3e50 Server: ECAcc (lhd/3729) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000000245db07d3e50-e96d030c9b1c9b9f-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 25417 Connection: close
2024-12-05 18:05:08 UTC	16383	IN	Data Raw: 2f 2a 21 20 44 75 73 74 20 2d 20 41 73 79 6e 63 68 72 6f 6e 6f 75 73 20 54 65 6d 70 6c 61 74 69 6e 67 20 2d 20 76 32 2e 36 2e 32 0a 2a 20 68 74 74 70 3a 2f 2f 6c 69 6e 6b 65 64 69 6e 2e 67 69 74 68 75 62 2e 69 6f 2f 64 75 73 74 6a 73 2f 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 35 20 41 6c 65 6b 73 61 6e 64 65 72 20 57 69 6c 6c 69 61 6d 73 3b 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 20 28 72 6f 6f 74 2c 20 66 61 63 74 6f 72 79 29 20 7b 0a 20 20 2f 2a 67 6c 6f 62 61 6c 20 64 65 66 69 6e 65 2a 2f 0a 20 20 69 66 20 28 74 79 70 65 6f 66 20 64 65 66 69 6e 65 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 20 26 26 20 64 65 66 69 6e 65 2e 61 6d 64 20 26 26 Data Ascii: /! Dust - Asynchronous Templating - v2.6.2 http://linkedin.github.io/dustjs/* Copyright (c) 2015 Aleksander Williams; Released under the MIT License /(function (root, factory) { /global define*/ if (typeof define === 'function' && define.amd &&
2024-12-05 18:05:08 UTC	9034	IN	Data Raw: 74 65 78 74 29 3b 0a 20 20 7d 3b 0a 0a 20 20 43 68 75 6e 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 66 65 72 65 6e 63 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 65 6c 65 6d 2c 20 63 6f 6e 74 65 78 74 2c 20 61 75 74 6f 2c 20 66 69 6c 74 65 72 73 29 20 7b 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 65 6c 65 6d 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 0a 20 20 20 20 20 20 65 6c 65 6d 20 3d 20 65 6c 65 6d 2e 61 70 70 6c 79 28 63 6f 6e 74 65 78 74 2e 63 75 72 72 65 6e 74 28 29 2c 20 5b 74 68 69 73 2c 20 63 6f 6e 74 65 78 74 2c 20 6e 75 6c 6c 2c 20 7b 61 75 74 6f 3a 20 61 75 74 6f 2c 20 66 69 6c 74 65 72 73 3a 20 66 69 6c 74 65 72 73 7d 5d 29 3b 0a 20 20 20 20 20 20 69 66 20 28 65 6c 65 6d 20 69 6e 73 74 61 6e 63 65 6f 66 20 43 68 75 6e 6b 29 20 7b Data Ascii: text); }; Chunk.prototype.reference = function(elem, context, auto, filters) { if (typeof elem === 'function') { elem = elem.apply(context.current(), [this, context, null, {auto: auto, filters: filters}]); if (elem instanceof Chunk) {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.6	49915	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:08 UTC	414	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/opinionLab/opinionLab.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:05:08 UTC	798	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:05:08 GMT DC: ccg11-origin-www-1.paypal.com Etag: "6736db9f-10db+br+ident" Expires: Fri, 05 Dec 2025 18:05:08 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 33840520f9c7e Server: ECAcc (lhd/35F2) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-000000000000000000033840520f9c7e-d6a66713f67e83d2-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 4315 Connection: close
2024-12-05 18:05:08 UTC	4315	IN	Data Raw: 2f 2a 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 63 6f 6e 74 61 69 6e 73 20 74 68 65 20 6a 61 76 61 73 63 72 69 70 74 20 66 75 6e 63 74 69 6f 6e 73 20 61 6e 64 20 73 6e 69 70 70 65 74 73 0a 20 2a 20 74 68 61 74 20 61 72 65 20 75 73 65 64 20 74 6f 20 69 6e 74 72 6f 64 75 63 65 20 74 68 65 20 73 69 74 65 20 66 65 65 64 62 61 63 6b 20 6c 69 6e 6b 20 69 6e 20 74 68 65 20 66 6f 6f 74 65 72 2e 0a 20 2a 20 46 75 6e 63 74 69 6f 6e 20 4f 5f 47 6f 54 20 69 6e 73 65 72 74 73 20 74 68 65 20 6c 69 6e 6b 20 69 6e 20 74 68 65 20 66 6f 6f 74 65 72 20 6c 69 73 74 20 61 6e 64 20 61 73 73 69 67 6e 73 20 6f 6e 63 6c 69 63 6b 0a 20 2a 20 66 6f 72 20 70 6f 70 75 70 20 77 69 6e 64 6f 77 20 74 68 61 74 20 64 69 73 70 6c 61 79 73 20 74 68 65 20 66 65 65 64 62 61 63 6b 20 66 72 6f Data Ascii: /* * This file contains the javascript functions and snippets * that are used to introduce the site feedback link in the footer. * Function O_GoT inserts the link in the footer list and assigns onclick * for popup window that displays the feedback fro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.6	49916	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:08 UTC	422	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/opinionLab/onlineOpinionPopup.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:05:09 UTC	790	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:05:08 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-ef0" Expires: Fri, 05 Dec 2025 18:05:08 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: c2024eeaab32c Server: ECAcc (lhd/35F6) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000c2024eeaab32c-8176a71871a3efa2-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 3824 Connection: close
2024-12-05 18:05:09 UTC	3824	IN	Data Raw: 2f 2a 0a 20 53 70 65 63 20 23 32 32 39 35 36 20 4f 70 69 6e 69 6f 6e 4c 61 62 0a 20 2a 2f 0a 0a 64 65 66 69 6e 65 28 5b 27 6f 70 69 6e 69 6f 6e 4c 61 62 27 5d 2c 20 66 75 6e 63 74 69 6f 6e 28 6f 70 69 6e 69 6f 6e 4c 61 62 29 20 7b 0a 0a 09 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 09 77 69 6e 64 6f 77 2e 50 41 59 50 41 4c 20 3d 20 77 69 6e 64 6f 77 2e 50 41 59 50 41 4c 20 3f 20 77 69 6e 64 6f 77 2e 50 41 59 50 41 4c 20 3a 20 7b 7d 3b 0a 09 76 61 72 20 6f 70 56 61 72 73 20 3d 20 77 69 6e 64 6f 77 2e 50 41 59 50 41 4c 2e 6f 70 69 6e 69 6f 6e 4c 61 62 56 61 72 73 3b 0a 0a 09 66 75 6e 63 74 69 6f 6e 20 73 68 6f 77 70 6f 70 75 70 28 72 65 64 69 72 65 63 74 54 6f 29 20 7b 0a 09 09 76 61 72 20 6d 79 77 69 6e 3b 0a 09 09 6d 79 77 69 6e 20 3d 20 77 69 6e 64 6f 77 Data Ascii: /* Spec #22956 OpinionLab */define(['opinionLab'], function(opinionLab) {'use strict';window.PAYPAL = window.PAYPAL ? window.PAYPAL : {};var opVars = window.PAYPAL.opinionLabVars;function showpopup(redirectTo) {var mywin;mywin = window

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.6	49918	151.101.1.21	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:08 UTC	1129	OUT	GET /platform/tealeaftarget HTTP/1.1 Host: www.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; nsid=s%3ARLPSU2OHYvlTZtXh_VMfzo7ctuMnbu-c.%2F5h%2FpbgyA12uYrTjTUlTTIQJX8aBsaqWc%2FutzlCO8XQ; l7_az=dcg01.phx; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352; tsrce=authchallengenodeweb; ddbc=1; TLTSID=30167158646093787848819749747452; TLTDID=93723043988386874756787593010559; datadome=D8fSIT~dxz~mHSNyYTBDSRhEt2IYFFTDBQ1qJ3hUcAY7ERsrDodz5ZVyluuAb5NRxqCoUSBCopBgBow4dMKBuJ7R6REwjzuo9OrQ3WnpLQaztNcGpbdOTxLyK68vGUkJ; x-pp-s=eyJ0IjoiMTczMzQyMTkwNTMzNSIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1764957907%26vteXpYrS%3D1733423707%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew
2024-12-05 18:05:09 UTC	1112	IN	HTTP/1.1 302 Found Connection: close Content-Length: 71 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Security-Policy: default-src 'self' https://.paypal.com https://.paypalobjects.com 'unsafe-inline'; script-src 'self' https://.paypal.com https://.paypalobjects.com; img-src 'self' https:; object-src 'none'; form-action 'self' https://.paypal.com; base-uri 'self' https://.paypal.com; font-src 'self' https://.paypalobjects.com https://.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp Content-Type: text/plain; charset=utf-8 Location: https://www.paypal.com/error?code=404&ref=tealeaf Origin-Trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ== Paypal-Debug-Id: f4116658f57cf
2024-12-05 18:05:09 UTC	1535	IN	Data Raw: 50 65 72 6d 69 73 73 69 6f 6e 73 2d 50 6f 6c 69 63 79 3a 20 63 68 2d 75 61 2d 70 6c 61 74 66 6f 72 6d 2d 76 65 72 73 69 6f 6e 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 61 72 63 68 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 77 6f 77 36 34 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 6d 6f 64 65 6c 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 66 75 6c 6c 2d 76 65 Data Ascii: Permissions-Policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-ve
2024-12-05 18:05:09 UTC	71	IN	Data Raw: 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 2e 63 6f 6d 2f 65 72 72 6f 72 3f 63 6f 64 65 3d 34 30 34 26 72 65 66 3d 74 65 61 6c 65 61 66 Data Ascii: Found. Redirecting to https://www.paypal.com/error?code=404&ref=tealeaf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.6	49919	151.101.1.21	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:08 UTC	1113	OUT	GET /signin HTTP/1.1 Host: www.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; nsid=s%3ARLPSU2OHYvlTZtXh_VMfzo7ctuMnbu-c.%2F5h%2FpbgyA12uYrTjTUlTTIQJX8aBsaqWc%2FutzlCO8XQ; l7_az=dcg01.phx; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352; tsrce=authchallengenodeweb; ddbc=1; TLTSID=30167158646093787848819749747452; TLTDID=93723043988386874756787593010559; datadome=D8fSIT~dxz~mHSNyYTBDSRhEt2IYFFTDBQ1qJ3hUcAY7ERsrDodz5ZVyluuAb5NRxqCoUSBCopBgBow4dMKBuJ7R6REwjzuo9OrQ3WnpLQaztNcGpbdOTxLyK68vGUkJ; ts=vreXpYrS%3D1764957907%26vteXpYrS%3D1733423707%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew; x-pp-s=eyJ0IjoiMTczMzQyMTkwNzE1MyIsImwiOiIwIiwibSI6IjAifQ
2024-12-05 18:05:09 UTC	1147	IN	HTTP/1.1 403 Forbidden Connection: close Content-Length: 708 Content-Type: text/html;charset=utf-8 Server: DataDome X-DataDome: protected Accept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory Charset: utf-8 Cache-Control: max-age=0, private, no-cache, no-store, must-revalidate Pragma: no-cache Access-Control-Allow-Credentials: true Access-Control-Expose-Headers: x-dd-b, x-set-cookie Access-Control-Allow-Origin: * X-DataDome-CID: AHrlqAAAAAMAaG7zfMJsD4kACC575A== X-DD-B: 1 Set-Cookie: datadome=vSuP3ka4mVy~QZulHp1~WqR~EWUrnn2L7R5plnP1_VPgHKKliwbvZSiC7swhbZQ3S1DRPKOdctSPoK3ZygF4ZFHSfmxV1SY~~jrswy9SQbU_INJM_UckirO2CfOz2hEQ; Max-Age=2592000; Domain=.paypal.com; Path=/; Secure; SameSite=Lax Accept-Ranges: bytes Date: Thu, 05 Dec 2024 18:05:08 GMT Via: 1.1 varnish Paypal-Debug-Id: f411665513e61 Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Served-By: cache-ewr-kewr1740055-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1733421909.851158,VS0,VE20 Server-Timing: content-encoding;desc="",x-cdn;desc="fastly"
2024-12-05 18:05:09 UTC	708	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 70 61 79 70 61 6c 2e 63 6f 6d 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 23 63 6d 73 67 7b 61 6e 69 6d 61 74 69 6f 6e 3a 20 41 20 31 2e 35 73 3b 7d 40 6b 65 79 66 72 61 6d 65 73 20 41 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 3b 7d 39 39 25 7b 6f 70 61 63 69 74 79 3a 30 3b 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 31 3b 7d 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 30 22 3e 3c 70 20 69 64 3d 22 63 6d 73 67 22 3e 50 6c 65 61 73 65 20 65 6e 61 62 6c 65 20 4a 53 20 61 6e 64 20 64 69 73 61 62 6c 65 20 61 6e 79 20 61 64 20 62 6c 6f 63 6b 65 72 3c 2f 70 3e 3c 73 63 72 69 70 74 20 64 61 74 61 2d 63 66 61 73 79 6e 63 3d 22 66 61 6c 73 65 22 3e Data Ascii: <html><head><title>paypal.com</title><style>#cmsg{animation: A 1.5s;}@keyframes A{0%{opacity:0;}99%{opacity:0;}100%{opacity:1;}}</style></head><body style="margin:0"><p id="cmsg">Please enable JS and disable any ad blocker</p><script data-cfasync="false">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.6	49917	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:08 UTC	415	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/backbone-1.5.0.min.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:05:09 UTC	792	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:05:09 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-63a4" Expires: Fri, 05 Dec 2025 18:05:09 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 15a9fd45211c5 Server: ECAcc (lhd/35DA) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-000000000000000000015a9fd45211c5-5a3b9c0c9eb2d1be-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 25508 Connection: close
2024-12-05 18:05:09 UTC	16383	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 6e 3d 74 79 70 65 6f 66 20 73 65 6c 66 3d 3d 22 6f 62 6a 65 63 74 22 26 26 73 65 6c 66 2e 73 65 6c 66 3d 3d 3d 73 65 6c 66 26 26 73 65 6c 66 7c 7c 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3d 3d 22 6f 62 6a 65 63 74 22 26 26 67 6c 6f 62 61 6c 2e 67 6c 6f 62 61 6c 3d 3d 3d 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 3b 69 66 28 74 79 70 65 6f 66 20 64 65 66 69 6e 65 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 64 65 66 69 6e 65 2e 61 6d 64 29 7b 64 65 66 69 6e 65 28 5b 22 75 6e 64 65 72 73 63 6f 72 65 22 2c 22 6a 71 75 65 72 79 22 2c 22 65 78 70 6f 72 74 73 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 6e 2e 42 61 63 6b 62 6f 6e 65 3d 72 28 6e 2c 69 2c 74 2c 65 29 7d 29 7d 65 6c 73 65 20 69 66 28 74 Data Ascii: (function(r){var n=typeof self=="object"&&self.self===self&&self\|\|typeof global=="object"&&global.global===global&&global;if(typeof define==="function"&&define.amd){define(["underscore","jquery","exports"],function(t,e,i){n.Backbone=r(n,i,t,e)})}else if(t
2024-12-05 18:05:09 UTC	9125	IN	Data Raw: 2b 22 2e 64 65 6c 65 67 61 74 65 45 76 65 6e 74 73 22 2b 74 68 69 73 2e 63 69 64 2c 65 2c 69 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 5f 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 74 29 7d 2c 5f 65 6e 73 75 72 65 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 74 68 69 73 2e 65 6c 29 7b 76 61 72 20 74 3d 78 2e 65 78 74 65 6e 64 28 7b 7d 2c 78 2e 72 65 73 75 6c 74 28 74 68 69 73 2c 22 61 74 74 72 69 62 75 74 65 73 22 29 29 3b 69 66 28 74 68 69 73 2e 69 64 29 74 2e 69 64 3d 78 2e 72 65 73 75 6c 74 28 74 68 69 73 2c 22 69 64 22 29 3b 69 66 28 74 68 69 73 2e 63 6c 61 73 73 4e 61 6d 65 29 74 5b 22 63 6c 61 73 73 Data Ascii: +".delegateEvents"+this.cid,e,i);return this},_createElement:function(t){return document.createElement(t)},_ensureElement:function(){if(!this.el){var t=x.extend({},x.result(this,"attributes"));if(this.id)t.id=x.result(this,"id");if(this.className)t["class

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.6	49927	151.101.1.21	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:10 UTC	1133	OUT	GET /error?code=404&ref=tealeaf HTTP/1.1 Host: www.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; nsid=s%3ARLPSU2OHYvlTZtXh_VMfzo7ctuMnbu-c.%2F5h%2FpbgyA12uYrTjTUlTTIQJX8aBsaqWc%2FutzlCO8XQ; l7_az=dcg01.phx; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352; tsrce=authchallengenodeweb; ddbc=1; TLTSID=30167158646093787848819749747452; TLTDID=93723043988386874756787593010559; x-pp-s=eyJ0IjoiMTczMzQyMTkwNzE1MyIsImwiOiIwIiwibSI6IjAifQ; datadome=vSuP3ka4mVy~QZulHp1~WqR~EWUrnn2L7R5plnP1_VPgHKKliwbvZSiC7swhbZQ3S1DRPKOdctSPoK3ZygF4ZFHSfmxV1SY~~jrswy9SQbU_INJM_UckirO2CfOz2hEQ; ts=vreXpYrS%3D1764957908%26vteXpYrS%3D1733423708%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew
2024-12-05 18:05:12 UTC	1290	IN	HTTP/1.1 404 Not Found Connection: close Accept-Ch: Sec-CH-UA-Full Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Type: text/html; charset=UTF-8 Origin-Trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ== Paypal-Debug-Id: f653054c323b0 Set-Cookie: enforce_policy=; expires=Thu, 01 Jan 1970 00:00:00 GMT GMT; domain=.paypal.com; path=/; Secure; SameSite=None Set-Cookie: navcmd=_home; domain=.paypal.com; path=/; Secure; HttpOnly; SameSite=None Set-Cookie: consumer_display=USER_HOMEPAGE%3d0%26USER_TARGETPAGE%3d0%26USER_FILTER_CHOICE%3d0%26BALANCE_MODULE_STATE%3d1%26GIFT_BALANCE_MODULE_STATE%3d1%26LAST_SELECTED_ALIAS_ID%3d0%26SELLING_GROUP%3d1%26PAYMENT_AND_RISK_GROUP%3d1%26SHIPPING_GROUP%3d1%26HOME_VERSION%3d1733508311%26MCE2_ELIGIBILITY%3d4294967295; expires=Sat, 05 Dec 2026 18:05:11 GMT GMT; domain=.paypal.com; path=/; Secure; HttpOnly; SameSite=None Set-Cookie: KHcl0EuY7AKSMgfvHl7J5E7hPtK=rdtTJETBNM7DwCh4qNpvdRxJdMSDzzFYo6In7MygF_6Md8QPhzwP-F4gHD7NOMP7zUuOBvACUHj0UJnL; expires=Sat, 05 Dec 2026 18:05:11 GMT GMT; domain=.paypal.com; path=/; Secure; HttpOnly; SameSite=None
2024-12-05 18:05:12 UTC	1313	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6e 61 76 6c 6e 73 3d 30 2e 30 3b 20 65 78 70 69 72 65 73 3d 53 61 74 2c 20 30 35 20 44 65 63 20 32 30 32 36 20 31 38 3a 30 35 3a 31 31 20 47 4d 54 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 70 61 79 70 61 6c 2e 63 6f 6d 3b 20 70 61 74 68 3d 2f 3b 20 53 65 63 75 72 65 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 63 77 72 43 6c 79 72 4b 34 4c 6f 43 56 31 66 79 64 47 62 41 78 69 4e 4c 36 69 47 3d 33 4e 67 36 4e 47 76 73 64 54 79 33 4c 6d 4a 59 62 66 59 31 4d 6d 7a 58 42 49 45 56 67 48 52 63 6c 65 6a 54 7a 42 6d 41 79 54 59 57 78 71 34 5a 2d 38 49 68 76 57 33 39 50 41 74 4d 54 6f 49 33 6a 47 51 64 37 78 41 67 49 62 51 58 67 5a 6d 45 57 33 4e 71 38 75 78 Data Ascii: Set-Cookie: navlns=0.0; expires=Sat, 05 Dec 2026 18:05:11 GMT GMT; domain=.paypal.com; path=/; Secure; HttpOnly; SameSite=NoneSet-Cookie: cwrClyrK4LoCV1fydGbAxiNL6iG=3Ng6NGvsdTy3LmJYbfY1MmzXBIEVgHRclejTzBmAyTYWxq4Z-8IhvW39PAtMToI3jGQd7xAgIbQXgZmEW3Nq8ux
2024-12-05 18:05:12 UTC	793	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 74 73 5f 63 3d 76 72 25 33 44 39 37 66 65 64 38 30 65 31 39 33 30 61 64 31 32 31 34 39 32 62 38 35 33 66 36 66 39 66 33 35 33 25 32 36 76 74 25 33 44 39 37 66 65 64 38 30 65 31 39 33 30 61 64 31 32 31 34 39 32 62 38 35 33 66 36 66 39 66 33 35 32 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 70 61 79 70 61 6c 2e 63 6f 6d 3b 20 45 78 70 69 72 65 73 3d 46 72 69 2c 20 30 35 20 44 65 63 20 32 30 32 35 20 31 38 3a 30 35 3a 31 31 20 47 4d 54 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 54 72 61 63 65 70 61 72 65 6e 74 3a 20 30 30 2d 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 66 36 35 33 30 35 34 63 33 32 33 62 30 2d 37 61 64 33 32 64 31 34 33 31 34 39 34 30 65 35 2d 30 31 0d 0a Data Ascii: Set-Cookie: ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352; Path=/; Domain=paypal.com; Expires=Fri, 05 Dec 2025 18:05:11 GMT; Secure; SameSite=NoneTraceparent: 00-0000000000000000000f653054c323b0-7ad32d14314940e5-01
2024-12-05 18:05:12 UTC	6	IN	Data Raw: 31 38 33 62 0d 0a Data Ascii: 183b
2024-12-05 18:05:12 UTC	1378	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3a 6e 73 31 3d 22 6f 67 22 20 6c 61 6e 67 3d 22 65 6e 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6e 73 31 3a 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html xmlns:ns1="og" lang="en" xmlns="http://www.w3.org/1999/xhtml" ns1:xmlns="http://ogp.me/ns#"><head><meta http-equiv="Content-Type" content="text/ht
2024-12-05 18:05:12 UTC	1378	IN	Data Raw: 26 23 78 32 66 3b 77 77 77 26 23 78 32 65 3b 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 26 23 78 32 65 3b 63 6f 6d 26 23 78 32 66 3b 57 45 42 53 43 52 26 23 78 32 64 3b 36 34 30 26 23 78 32 64 3b 32 30 31 38 30 32 32 35 26 23 78 32 64 3b 31 2f 63 73 73 2f 62 72 6f 77 73 65 72 73 2f 69 65 38 2e 63 73 73 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 3c 6c 69 6e 6b 20 6d 65 64 69 61 3d 22 73 63 72 65 65 6e 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 26 23 78 33 61 3b 26 23 78 32 66 3b 26 23 78 32 66 3b 77 77 77 26 23 78 32 65 3b 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 26 23 78 32 65 3b 63 6f 6d 26 23 78 32 66 3b 57 45 42 53 43 Data Ascii: /www.paypalobjects.com/WEBSCR-640-20180225-1/css/browsers/ie8.css"><![endif]-->...[if IE 7]><link media="screen" rel="stylesheet" type="text/css" href="https://www.paypalobjects.com/WEBSC
2024-12-05 18:05:12 UTC	1378	IN	Data Raw: 74 73 5c 78 32 65 63 6f 6d 5c 78 32 66 57 45 42 53 43 52 5c 78 32 64 36 34 30 5c 78 32 64 32 30 31 38 30 32 32 35 5c 78 32 64 31 27 3b 3c 2f 73 63 72 69 70 74 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 26 23 78 33 61 3b 26 23 78 32 66 3b 26 23 78 32 66 3b 77 77 77 26 23 78 32 65 3b 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 26 23 78 32 65 3b 63 6f 6d 26 23 78 32 66 3b 65 6e 26 23 78 35 66 3b 55 53 26 23 78 32 66 3b 69 26 23 78 32 66 3b 69 63 6f 6e 26 23 78 32 66 3b 70 70 26 23 78 35 66 3b 66 61 76 69 63 6f 6e 26 23 78 35 66 3b 78 26 23 78 32 65 3b 69 63 6f 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 26 23 78 Data Ascii: ts\x2ecom\x2fWEBSCR\x2d640\x2d20180225\x2d1';</script><link rel="shortcut icon" href="https://www.paypalobjects.com/en_US/i/icon/pp_favicon_x.ico"><link rel="apple-touch-icon" href="https&#x
2024-12-05 18:05:12 UTC	1378	IN	Data Raw: 3f 63 6d 64 3d 5f 68 65 6c 70 26 74 3d 65 73 63 61 6c 61 74 65 54 61 62 22 3e 43 6f 6e 74 61 63 74 20 55 73 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 2e 63 6f 6d 2f 77 65 62 61 70 70 73 2f 6d 70 70 2f 70 61 79 70 61 6c 2d 66 65 65 73 22 3e 46 65 65 73 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 2e 63 6f 6d 2f 64 65 76 65 6c 6f 70 65 72 22 3e 50 61 79 50 61 6c 20 44 65 76 65 6c 6f 70 65 72 73 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 2e 63 6f 6d 2f 63 67 69 2d 62 69 6e 2f 77 65 62 73 63 72 3f 63 6d 64 3d 5f 68 6f 6d 65 2d 6d 65 Data Ascii: ?cmd=_help&t=escalateTab">Contact Us</a></li><li><a href="https://www.paypal.com/webapps/mpp/paypal-fees">Fees</a></li><li><a href="https://www.paypal.com/developer">PayPal Developers</a></li><li><a href="https://www.paypal.com/cgi-bin/webscr?cmd=_home-me
2024-12-05 18:05:12 UTC	691	IN	Data Raw: 72 20 70 72 6f 70 65 72 74 69 65 73 20 61 66 74 65 72 20 74 68 65 20 6f 62 6a 65 63 74 20 69 73 20 63 72 65 61 74 65 64 0a 09 09 09 2f 2f 70 61 79 70 61 6c 5f 75 72 6c 2e 64 64 3d 22 45 53 22 3b 0a 09 09 09 2f 2f 70 61 79 70 61 6c 5f 75 72 6c 2e 6e 6e 3d 22 30 31 22 3b 0a 09 09 09 0a 09 09 5f 68 74 20 3d 20 70 61 79 70 61 6c 5f 75 72 6c 2e 74 6f 5f 73 74 72 28 29 3b 0a 09 09 76 61 72 20 5f 68 74 5f 74 65 6d 70 3d 5f 68 74 3b 0a 09 09 76 61 72 20 5f 68 72 5f 74 65 6d 70 3d 5f 68 72 3b 0a 09 09 63 75 73 74 6f 6d 5f 76 61 72 3d 63 75 73 74 6f 6d 5f 76 61 72 20 2b 20 22 7c 55 6e 6b 6e 6f 77 6e 7c 55 6e 6b 6e 6f 77 6e 22 3b 76 61 72 20 63 75 73 74 6f 6d 5f 76 61 72 5f 74 65 6d 70 3d 63 75 73 74 6f 6d 5f 76 61 72 3b 3c 2f 73 63 72 69 70 74 3e 3c 2f 6c 69 3e 3c Data Ascii: r properties after the object is created//paypal_url.dd="ES";//paypal_url.nn="01";_ht = paypal_url.to_str();var _ht_temp=_ht;var _hr_temp=_hr;custom_var=custom_var + "\|Unknown\|Unknown";var custom_var_temp=custom_var;</script></li><
2024-12-05 18:05:12 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-05 18:05:12 UTC	5	IN	Data Raw: 37 63 35 0d 0a Data Ascii: 7c5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.6	49926	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:10 UTC	409	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/dust-helpers.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:05:11 UTC	792	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:05:10 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-59d0" Expires: Fri, 05 Dec 2025 18:05:10 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 983e94fba8cf5 Server: ECAcc (lhd/35E9) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000983e94fba8cf5-6db7af5735060ca5-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 22992 Connection: close
2024-12-05 18:05:11 UTC	16383	IN	Data Raw: 2f 2a 21 20 64 75 73 74 6a 73 2d 68 65 6c 70 65 72 73 20 2d 20 76 31 2e 35 2e 30 0a 2a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6c 69 6e 6b 65 64 69 6e 2f 64 75 73 74 6a 73 2d 68 65 6c 70 65 72 73 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 34 20 41 6c 65 6b 73 61 6e 64 65 72 20 57 69 6c 6c 69 61 6d 73 3b 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 64 75 73 74 29 7b 0a 0a 20 20 20 20 2f 2f 20 55 73 65 20 64 75 73 74 27 73 20 62 75 69 6c 74 2d 69 6e 20 6c 6f 67 67 69 6e 67 20 77 68 65 6e 20 61 76 61 69 6c 61 62 6c 65 0a 20 20 20 20 76 61 72 20 5f 6c 6f 67 20 3d 20 64 75 73 74 2e 6c 6f 67 20 3f 20 66 75 6e 63 74 69 6f 6e 28 6d 73 67 Data Ascii: /! dustjs-helpers - v1.5.0 https://github.com/linkedin/dustjs-helpers* Copyright (c) 2014 Aleksander Williams; Released under the MIT License */(function(dust){ // Use dust's built-in logging when available var _log = dust.log ? function(msg
2024-12-05 18:05:11 UTC	6609	IN	Data Raw: 3d 20 22 6e 65 22 3b 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 69 6c 74 65 72 28 63 68 75 6e 6b 2c 20 63 6f 6e 74 65 78 74 2c 20 62 6f 64 69 65 73 2c 20 70 61 72 61 6d 73 2c 20 66 75 6e 63 74 69 6f 6e 28 65 78 70 65 63 74 65 64 2c 20 61 63 74 75 61 6c 29 20 7b 20 72 65 74 75 72 6e 20 61 63 74 75 61 6c 20 21 3d 3d 20 65 78 70 65 63 74 65 64 3b 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 63 68 75 6e 6b 3b 0a 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 0a 20 20 20 20 20 20 2f 2a 2a 0a 20 20 20 20 20 20 20 6c 74 20 68 65 6c 70 65 72 20 63 6f 6d 70 61 72 65 73 20 74 68 65 20 67 69 76 65 6e 20 6b 65 79 20 69 73 20 6c 65 73 73 20 74 68 61 6e 20 74 68 65 20 65 78 70 65 63 74 65 64 20 76 61 6c 75 65 0a 20 20 Data Ascii: = "ne"; return filter(chunk, context, bodies, params, function(expected, actual) { return actual !== expected; }); } return chunk; }, /** lt helper compares the given key is less than the expected value

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.6	49925	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:10 UTC	594	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/dust-helpers-supplement.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:05:11 UTC	791	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:05:10 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-118f" Expires: Fri, 05 Dec 2025 18:05:10 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: c4494514b3b7f Server: ECAcc (lhd/35A0) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000c4494514b3b7f-17e7acea67a0f445-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 4495 Connection: close
2024-12-05 18:05:11 UTC	4495	IN	Data Raw: 76 61 72 20 65 78 74 65 6e 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 65 78 74 65 6e 64 28 64 75 73 74 29 20 7b 0a 0a 20 20 20 20 2f 2f 20 41 64 64 20 6e 65 77 20 64 75 73 74 20 68 65 6c 70 65 72 73 20 69 6e 20 74 68 69 73 20 73 74 79 6c 65 0a 20 20 20 20 64 75 73 74 2e 68 65 6c 70 65 72 73 2e 6c 69 6e 6b 20 3d 20 66 75 6e 63 74 69 6f 6e 20 6c 69 6e 6b 28 63 68 75 6e 6b 2c 20 63 74 78 2c 20 62 6f 64 69 65 73 2c 20 70 61 72 61 6d 73 29 20 7b 0a 20 20 20 20 20 20 20 20 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 20 20 20 20 20 20 20 20 76 61 72 20 68 72 65 66 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 6f 73 74 20 3d 20 63 74 78 2e 67 65 74 50 61 74 68 28 66 61 6c 73 65 2c 20 5b 27 63 6f 6e 74 65 78 74 27 2c 20 27 70 61 67 65 49 6e 66 6f 27 2c 20 27 68 6f 73 Data Ascii: var extend = function extend(dust) { // Add new dust helpers in this style dust.helpers.link = function link(chunk, ctx, bodies, params) { 'use strict'; var href, host = ctx.getPath(false, ['context', 'pageInfo', 'hos

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.6	49933	151.101.131.1	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:12 UTC	1452	OUT	GET /ts?v=1.9.5&t=1733421909680&g=300&e=err&page=main%3Aauthchallenge%3A%3Asignin&pgrp=main%3Aauthchallenge%3A%3Asignin&comp=authchallengenodeweb&erpg=Script%20error&error_type=WINDOW_ONERROR&error_source=-%200%3A0 HTTP/1.1 Host: t.paypal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.paypal.com/signin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; l7_az=dcg01.phx; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352; tsrce=authchallengenodeweb; TLTSID=30167158646093787848819749747452; TLTDID=93723043988386874756787593010559; x-pp-s=eyJ0IjoiMTczMzQyMTkwNzE1MyIsImwiOiIwIiwibSI6IjAifQ; datadome=vSuP3ka4mVy~QZulHp1~WqR~EWUrnn2L7R5plnP1_VPgHKKliwbvZSiC7swhbZQ3S1DRPKOdctSPoK3ZygF4ZFHSfmxV1SY~~jrswy9SQbU_INJM_UckirO2CfOz2hEQ; ts=vreXpYrS%3D1764957908%26vteXpYrS%3D1733423708%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew
2024-12-05 18:05:12 UTC	1360	IN	HTTP/1.1 200 OK Connection: close Access-Control-Expose-Headers: Server-Timing CORRELATION-ID: f9fd1cd962ab8 Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Type: image/gif Expires: Thu, 05 Dec 2024 18:05:12 GMT P3p: CP="CAO IND OUR SAM UNI STA COR COM" Paypal-Debug-Id: f9fd1cd962ab8 Pragma: no-cache Set-Cookie: ts=vreXpYrS%3D1764957912%26vteXpYrS%3D1733423712%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew;Expires=Fri, 05 Dec 2025 18:05:12 GMT;domain=.paypal.com;path=/;secure;HttpOnly;SameSite=None; Set-Cookie: ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352;Expires=Fri, 05 Dec 2025 18:05:12 GMT;domain=.paypal.com;path=/;secure;SameSite=None; Traceparent: 00-0000000000000000000f9fd1cd962ab8-5b5d928ed57da25f-01 Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Date: Thu, 05 Dec 2024 18:05:12 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Served-By: cache-iad-kjyo7100022-IAD, cache-nyc-kteb1890058-NYC X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1733421912.289232,VS0,VE82 vary: Accept-Encoding Server-Timing: "traceparent;desc="00-0000000000000000000f9fd1cd962ab8-228a81f125eca6bf-01"";content-encoding;desc="",x-cdn;desc="fastly" Timing-Allow-Origin: * transfer-encoding: chunked
2024-12-05 18:05:12 UTC	4	IN	Data Raw: 32 61 0d 0a Data Ascii: 2a
2024-12-05 18:05:12 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 01 01 32 00 3b Data Ascii: GIF89a!,2;
2024-12-05 18:05:12 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.6	49934	151.101.193.21	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:12 UTC	1895	OUT	POST /auth/validatecaptcha HTTP/1.1 Host: www.paypal.com Connection: keep-alive Content-Length: 388 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-wow64: ?0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" Upgrade-Insecure-Requests: 1 Origin: https://www.paypal.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://www.paypal.com/signin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; nsid=s%3ARLPSU2OHYvlTZtXh_VMfzo7ctuMnbu-c.%2F5h%2FpbgyA12uYrTjTUlTTIQJX8aBsaqWc%2FutzlCO8XQ; l7_az=dcg01.phx; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352; tsrce=authchallengenodeweb; ddbc=1; TLTSID=30167158646093787848819749747452; TLTDID=93723043988386874756787593010559; x-pp-s=eyJ0IjoiMTczMzQyMTkwNzE1MyIsImwiOiIwIiwibSI6IjAifQ; datadome=vSuP3ka4mVy~QZulHp1~WqR~EWUrnn2L7R5plnP1_VPgHKKliwbvZSiC7swhbZQ3S1DRPKOdctSPoK3ZygF4ZFHSfmxV1SY~~jrswy9SQbU_INJM_UckirO2CfOz2hEQ; ts=vreXpYrS%3D1764957908%26vteXpYrS%3D1733423708%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew
2024-12-05 18:05:12 UTC	388	OUT	Data Raw: 5f 63 73 72 66 3d 31 34 32 4e 34 6b 43 76 57 63 6b 39 6c 59 70 42 36 44 37 38 4f 77 76 70 46 45 54 66 25 32 42 35 44 4a 7a 6d 6e 65 51 25 33 44 26 5f 72 65 71 75 65 73 74 49 64 3d 59 47 39 61 76 46 59 49 46 69 50 46 54 53 59 33 74 6b 45 71 4e 49 4f 4a 51 65 35 4a 5a 44 47 43 78 62 43 56 4f 30 73 41 61 43 65 32 69 4d 74 61 6b 51 63 4d 39 4a 6a 46 55 33 61 6a 6c 46 38 5f 51 54 44 36 51 58 76 44 35 71 51 35 35 52 6a 45 37 79 67 31 45 62 69 4c 4f 4a 41 35 6a 64 51 59 69 38 4e 5a 65 50 5a 52 55 31 41 74 38 50 44 78 33 50 64 57 68 52 6e 62 36 37 65 69 51 4e 62 35 26 5f 68 61 73 68 3d 42 34 31 61 61 74 34 35 78 50 39 78 6d 48 75 52 57 72 62 35 4f 41 6c 73 34 6f 57 62 71 4b 6f 37 76 4b 33 7a 54 47 32 44 6b 63 6f 25 33 44 26 68 63 61 70 74 63 68 61 5f 65 76 61 6c Data Ascii: _csrf=142N4kCvWck9lYpB6D78OwvpFETf%2B5DJzmneQ%3D&_requestId=YG9avFYIFiPFTSY3tkEqNIOJQe5JZDGCxbCVO0sAaCe2iMtakQcM9JjFU3ajlF8_QTD6QXvD5qQ55RjE7yg1EbiLOJA5jdQYi8NZePZRU1At8PDx3PdWhRnb67eiQNb5&_hash=B41aat45xP9xmHuRWrb5OAls4oWbqKo7vK3zTG2Dkco%3D&hcaptcha_eval
2024-12-05 18:05:12 UTC	344	IN	HTTP/1.1 200 OK Connection: close Content-Length: 7046 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Access-Control-Expose-Headers: Server-Timing Cache-Control: max-age=0, no-cache, no-store, must-revalidate
2024-12-05 18:05:12 UTC	2106	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6e 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 6f 62 6a 65 63 74 73 2e 70 61 79 70 61 6c 2e 63 6e 3b 20 73 63 72 69 70 74 2d 73 72 63 20 27 6e 6f 6e 63 65 2d 6a 4c 50 51 5a 6d 53 45 53 34 45 30 7a 6a 64 54 6c 6d 7a 6c 48 55 4d 4b 78 52 6f 54 4d 4b 35 6b 75 67 69 6d 41 35 49 31 2b 79 6a 32 45 64 48 4d 27 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6e Data Ascii: Content-Security-Policy: default-src 'self' https://.paypal.com https://.paypal.cn https://.paypalobjects.com https://objects.paypal.cn; script-src 'nonce-jLPQZmSES4E0zjdTlmzlHUMKxRoTMK5kugimA5I1+yj2EdHM' 'self' https://.paypal.com https://*.paypal.cn
2024-12-05 18:05:12 UTC	1654	IN	Data Raw: 50 65 72 6d 69 73 73 69 6f 6e 73 2d 50 6f 6c 69 63 79 3a 20 63 68 2d 75 61 2d 70 6c 61 74 66 6f 72 6d 2d 76 65 72 73 69 6f 6e 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 61 72 63 68 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 77 6f 77 36 34 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 6d 6f 64 65 6c 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 66 75 6c 6c 2d 76 65 Data Ascii: Permissions-Policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-ve
2024-12-05 18:05:12 UTC	557	IN	Data Raw: 44 43 3a 20 63 63 67 31 31 2d 6f 72 69 67 69 6e 2d 77 77 77 2d 31 2e 70 61 79 70 61 6c 2e 63 6f 6d 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 56 69 61 3a 20 31 2e 31 20 76 61 72 6e 69 73 68 2c 20 31 2e 31 20 76 61 72 6e 69 73 68 2c 20 31 2e 31 20 76 61 72 6e 69 73 68 0d 0a 44 61 74 65 3a 20 54 68 75 2c 20 30 35 20 44 65 63 20 32 30 32 34 20 31 38 3a 30 35 3a 31 32 20 47 4d 54 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 33 30 37 32 30 30 30 3b 20 69 6e 63 6c 75 64 65 53 75 62 44 6f 6d 61 69 6e 73 3b 20 70 72 65 6c 6f 61 64 0d 0a 58 2d 53 65 72 76 65 64 2d 42 79 3a 20 63 61 63 68 65 2d 69 61 64 2d 6b 63 67 73 37 32 30 30 30 33 33 2d 49 41 44 2c 20 63 61 63 68 Data Ascii: DC: ccg11-origin-www-1.paypal.comAccept-Ranges: bytesVia: 1.1 varnish, 1.1 varnish, 1.1 varnishDate: Thu, 05 Dec 2024 18:05:12 GMTStrict-Transport-Security: max-age=63072000; includeSubDomains; preloadX-Served-By: cache-iad-kcgs7200033-IAD, cach
2024-12-05 18:05:12 UTC	1378	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 6c 6f 77 65 72 2d 74 68 61 6e 2d 69 65 39 22 20 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 31 30 5d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 6c 6f 77 65 72 2d 74 68 61 6e 2d 69 65 31 30 22 20 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 21 49 45 5d 3e 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 3e 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 0a 20 Data Ascii: <!DOCTYPE html>...[if lt IE 9]><html lang="en" class="no-js lower-than-ie9" ><![endif]-->...[if lt IE 10]><html lang="en" class="no-js lower-than-ie10" ><![endif]-->...[if !IE]>--><html lang="en" class="no-js" >...<![endif]--> <head>
2024-12-05 18:05:12 UTC	1378	IN	Data Raw: 3d 66 35 30 34 39 31 35 34 36 66 39 30 35 26 6e 73 69 64 3d 52 4c 50 53 55 32 4f 48 59 76 6c 54 5a 74 58 68 5f 56 4d 66 7a 6f 37 63 74 75 4d 6e 62 75 2d 63 26 72 73 74 61 3d 65 6e 5f 55 53 26 70 67 74 66 3d 4e 6f 64 65 6a 73 26 65 6e 76 3d 6c 69 76 65 26 73 3d 63 69 26 63 63 70 67 3d 55 53 26 63 73 63 69 3d 61 32 63 66 63 34 31 63 61 66 32 66 34 65 39 65 39 33 62 65 30 37 63 33 35 34 62 30 34 33 37 32 26 63 6f 6d 70 3d 61 75 74 68 63 68 61 6c 6c 65 6e 67 65 6e 6f 64 65 77 65 62 26 74 73 72 63 65 3d 61 75 74 68 63 68 61 6c 6c 65 6e 67 65 6e 6f 64 65 77 65 62 26 63 75 3d 30 26 65 66 5f 70 6f 6c 69 63 79 3d 63 63 70 61 26 78 65 3d 31 30 39 35 34 31 26 78 74 3d 31 34 35 38 33 35 22 20 61 6c 74 3d 22 22 20 68 65 69 67 68 74 3d 22 31 22 20 77 69 64 74 68 3d 22 Data Ascii: =f50491546f905&nsid=RLPSU2OHYvlTZtXh_VMfzo7ctuMnbu-c&rsta=en_US&pgtf=Nodejs&env=live&s=ci&ccpg=US&csci=a2cfc41caf2f4e9e93be07c354b04372&comp=authchallengenodeweb&tsrce=authchallengenodeweb&cu=0&ef_policy=ccpa&xe=109541&xt=145835" alt="" height="1" width="
2024-12-05 18:05:12 UTC	1378	IN	Data Raw: 72 69 3d 68 74 74 70 73 3a 2f 2f 70 65 72 73 6f 6e 61 6c 2e 70 61 79 70 61 6c 2e 63 6f 6d 2f 63 67 69 2d 62 69 6e 2f 3f 63 6d 64 3d 5f 72 65 6e 64 65 72 2d 63 6f 6e 74 65 6e 74 26 61 6d 70 3b 63 6f 6e 74 65 6e 74 5f 49 44 3d 6d 61 72 6b 65 74 69 6e 67 5f 75 73 2f 72 65 71 75 65 73 74 5f 6d 6f 6e 65 79 3b 69 63 6f 6e 2d 75 72 69 3d 68 74 74 70 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 65 6e 5f 55 53 2f 69 2f 69 63 6f 6e 2f 70 70 5f 66 61 76 69 63 6f 6e 5f 78 2e 69 63 6f 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6b 65 79 77 6f 72 64 73 22 20 63 6f 6e 74 65 6e 74 3d 22 74 72 61 6e 73 66 65 72 20 6d 6f 6e 65 79 2c 20 65 6d 61 69 6c 20 6d 6f 6e 65 79 20 74 72 61 6e 73 66 65 72 2c 20 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c Data Ascii: ri=https://personal.paypal.com/cgi-bin/?cmd=_render-content&content_ID=marketing_us/request_money;icon-uri=http://www.paypalobjects.com/en_US/i/icon/pp_favicon_x.ico" /><meta name="keywords" content="transfer money, email money transfer, international
2024-12-05 18:05:12 UTC	1378	IN	Data Raw: 2e 6a 73 22 0a 20 20 20 20 64 61 74 61 2d 63 73 72 66 2d 74 6f 6b 65 6e 3d 22 6e 56 64 46 67 77 73 4c 66 58 68 70 55 45 74 2b 4a 32 69 69 31 52 68 73 6d 65 35 69 77 6e 5a 55 79 70 4b 76 41 3d 22 20 20 0a 20 20 20 20 64 61 74 61 2d 6c 6f 63 61 6c 65 3d 22 65 6e 5f 55 53 22 3e 0a 20 20 20 20 20 20 20 20 3c 6e 6f 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 6e 6f 6e 6a 73 41 6c 65 72 74 22 20 72 6f 6c 65 3d 22 61 6c 65 72 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 4e 4f 54 45 3a 20 4d 61 6e 79 20 66 65 61 74 75 72 65 73 20 6f 6e 20 74 68 65 20 50 61 79 50 61 6c 20 57 65 62 20 73 69 74 65 20 72 65 71 75 69 72 65 20 4a 61 76 61 73 63 72 69 70 74 20 61 6e 64 20 63 6f 6f 6b 69 65 73 2e 0a 20 20 20 20 Data Ascii: .js" data-csrf-token="nVdFgwsLfXhpUEt+J2ii1Rhsme5iwnZUypKvA=" data-locale="en_US"> <noscript> <p class="nonjsAlert" role="alert"> NOTE: Many features on the PayPal Web site require Javascript and cookies.
2024-12-05 18:05:12 UTC	1378	IN	Data Raw: 55 53 26 63 6f 75 6e 74 72 79 2e 78 3d 55 53 26 63 68 65 63 6b 43 6f 6e 6e 65 63 74 69 6f 6e 54 69 6d 65 6f 75 74 3d 31 30 30 30 30 26 72 65 43 61 70 74 63 68 61 45 6e 74 65 72 70 72 69 73 65 45 6e 61 62 6c 65 64 3d 74 72 75 65 22 20 68 65 69 67 68 74 3d 22 35 30 30 22 20 77 69 64 74 68 3d 22 31 30 30 25 32 35 22 20 6e 61 6d 65 3d 22 72 65 63 61 70 74 63 68 61 22 20 61 6c 69 67 6e 3d 22 6d 69 64 64 6c 65 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 61 6e 64 62 6f 78 3d 22 61 6c 6c 6f 77 2d 73 63 72 69 70 74 73 20 61 6c 6c 6f 77 2d 73 61 6d 65 2d 6f 72 69 67 69 6e 20 61 6c 6c 6f 77 2d 70 6f 70 75 70 73 22 3e 3c 2f 69 66 72 61 6d 65 3e 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 61 63 74 69 6f 6e 73 22 3e 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 Data Ascii: US&country.x=US&checkConnectionTimeout=10000&reCaptchaEnterpriseEnabled=true" height="500" width="100%25" name="recaptcha" align="middle" frameborder="0" sandbox="allow-scripts allow-same-origin allow-popups"></iframe> <div class="actions"><button class
2024-12-05 18:05:12 UTC	156	IN	Data Raw: 33 37 37 63 63 33 39 37 35 32 2f 6a 73 2f 63 6f 6e 66 69 67 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 77 65 62 2f 72 65 73 2f 35 63 30 2f 36 65 65 36 64 30 38 38 30 64 61 63 30 34 62 65 31 30 38 33 37 37 63 63 33 39 37 35 32 2f 6a 73 2f 6c 69 62 2f 72 65 71 75 69 72 65 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 20 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: 377cc39752/js/config" src="https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/require.js"></script> </body> </html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.6	49936	151.101.193.21	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:12 UTC	1695	OUT	POST /auth/logclientdata HTTP/1.1 Host: www.paypal.com Connection: keep-alive Content-Length: 569 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" Content-Type: application/json;charset=UTF-8 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.paypal.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.paypal.com/signin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; nsid=s%3ARLPSU2OHYvlTZtXh_VMfzo7ctuMnbu-c.%2F5h%2FpbgyA12uYrTjTUlTTIQJX8aBsaqWc%2FutzlCO8XQ; l7_az=dcg01.phx; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352; tsrce=authchallengenodeweb; ddbc=1; TLTSID=30167158646093787848819749747452; TLTDID=93723043988386874756787593010559; x-pp-s=eyJ0IjoiMTczMzQyMTkwNzE1MyIsImwiOiIwIiwibSI6IjAifQ; datadome=vSuP3ka4mVy~QZulHp1~WqR~EWUrnn2L7R5plnP1_VPgHKKliwbvZSiC7swhbZQ3S1DRPKOdctSPoK3ZygF4ZFHSfmxV1SY~~jrswy9SQbU_INJM_UckirO2CfOz2hEQ; ts=vreXpYrS%3D1764957908%26vteXpYrS%3D1733423708%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew
2024-12-05 18:05:12 UTC	569	OUT	Data Raw: 7b 22 66 70 74 69 22 3a 7b 22 70 67 72 70 22 3a 22 6d 61 69 6e 3a 61 75 74 68 63 68 61 6c 6c 65 6e 67 65 3a 3a 73 69 67 6e 69 6e 22 2c 22 70 61 67 65 22 3a 22 6d 61 69 6e 3a 61 75 74 68 63 68 61 6c 6c 65 6e 67 65 3a 3a 73 69 67 6e 69 6e 22 2c 22 70 67 73 74 22 3a 22 31 37 33 33 34 32 31 38 39 36 30 32 32 22 2c 22 63 61 6c 63 22 3a 22 66 34 37 37 33 39 33 35 61 39 38 39 36 22 2c 22 6e 73 69 64 22 3a 22 52 4c 50 53 55 32 4f 48 59 76 6c 54 5a 74 58 68 5f 56 4d 66 7a 6f 37 63 74 75 4d 6e 62 75 2d 63 22 2c 22 72 73 74 61 22 3a 22 65 6e 5f 55 53 22 2c 22 70 67 74 66 22 3a 22 4e 6f 64 65 6a 73 22 2c 22 65 6e 76 22 3a 22 6c 69 76 65 22 2c 22 73 22 3a 22 63 69 22 2c 22 63 63 70 67 22 3a 22 55 53 22 2c 22 63 73 63 69 22 3a 22 66 34 36 66 34 38 35 33 33 34 31 62 34 Data Ascii: {"fpti":{"pgrp":"main:authchallenge::signin","page":"main:authchallenge::signin","pgst":"1733421896022","calc":"f4773935a9896","nsid":"RLPSU2OHYvlTZtXh_VMfzo7ctuMnbu-c","rsta":"en_US","pgtf":"Nodejs","env":"live","s":"ci","ccpg":"US","csci":"f46f4853341b4
2024-12-05 18:05:12 UTC	344	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1925 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Access-Control-Expose-Headers: Server-Timing Cache-Control: max-age=0, no-cache, no-store, must-revalidate
2024-12-05 18:05:12 UTC	2112	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6e 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 6f 62 6a 65 63 74 73 2e 70 61 79 70 61 6c 2e 63 6e 3b 20 73 63 72 69 70 74 2d 73 72 63 20 27 6e 6f 6e 63 65 2d 55 66 71 55 4b 65 61 2b 6b 31 5a 52 65 72 64 36 47 6d 47 63 63 2f 78 41 47 41 67 59 45 4b 66 64 63 77 4d 48 65 47 55 5a 50 2f 43 46 58 45 58 61 27 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6e Data Ascii: Content-Security-Policy: default-src 'self' https://.paypal.com https://.paypal.cn https://.paypalobjects.com https://objects.paypal.cn; script-src 'nonce-UfqUKea+k1ZRerd6GmGcc/xAGAgYEKfdcwMHeGUZP/CFXEXa' 'self' https://.paypal.com https://*.paypal.cn
2024-12-05 18:05:12 UTC	1653	IN	Data Raw: 50 65 72 6d 69 73 73 69 6f 6e 73 2d 50 6f 6c 69 63 79 3a 20 63 68 2d 75 61 2d 70 6c 61 74 66 6f 72 6d 2d 76 65 72 73 69 6f 6e 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 61 72 63 68 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 77 6f 77 36 34 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 6d 6f 64 65 6c 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 66 75 6c 6c 2d 76 65 Data Ascii: Permissions-Policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-ve
2024-12-05 18:05:12 UTC	456	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 30 35 20 44 65 63 20 32 30 32 34 20 31 38 3a 30 35 3a 31 32 20 47 4d 54 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 33 30 37 32 30 30 30 3b 20 69 6e 63 6c 75 64 65 53 75 62 44 6f 6d 61 69 6e 73 3b 20 70 72 65 6c 6f 61 64 0d 0a 58 2d 53 65 72 76 65 64 2d 42 79 3a 20 63 61 63 68 65 2d 69 61 64 2d 6b 63 67 73 37 32 30 30 30 32 37 2d 49 41 44 2c 20 63 61 63 68 65 2d 65 77 72 2d 6b 65 77 72 31 37 34 30 30 33 34 2d 45 57 52 2c 20 63 61 63 68 65 2d 65 77 72 2d 6b 65 77 72 31 37 34 30 30 33 34 2d 45 57 52 0d 0a 58 2d 43 61 63 68 65 3a 20 4d 49 53 53 2c 20 4d 49 53 53 2c 20 4d 49 53 53 0d 0a 58 2d 43 61 63 68 65 2d 48 69 74 73 3a 20 30 2c 20 30 2c 20 30 0d 0a 58 Data Ascii: Date: Thu, 05 Dec 2024 18:05:12 GMTStrict-Transport-Security: max-age=63072000; includeSubDomains; preloadX-Served-By: cache-iad-kcgs7200027-IAD, cache-ewr-kewr1740034-EWR, cache-ewr-kewr1740034-EWRX-Cache: MISS, MISS, MISSX-Cache-Hits: 0, 0, 0X
2024-12-05 18:05:12 UTC	1378	IN	Data Raw: 7b 22 69 73 43 6f 6f 6b 69 65 44 69 73 61 6c 62 65 64 22 3a 74 72 75 65 2c 22 63 6f 6f 6b 69 65 44 69 73 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 6f 42 72 61 6e 64 22 3a 22 75 73 22 2c 22 73 79 73 22 3a 7b 22 6c 6f 63 61 6c 69 74 79 22 3a 7b 22 74 69 6d 65 7a 6f 6e 65 22 3a 7b 22 64 65 74 65 72 6d 69 6e 65 72 22 3a 22 76 69 61 43 6f 77 50 72 69 6d 61 72 79 22 2c 22 76 61 6c 75 65 22 3a 22 41 6d 65 72 69 63 61 2f 4c 6f 73 5f 41 6e 67 65 6c 65 73 22 7d 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 5f 55 53 22 2c 22 6c 61 6e 67 75 61 67 65 22 3a 22 65 6e 22 2c 22 64 69 72 65 63 74 69 6f 6e 61 6c 69 74 79 22 3a 22 6c 74 72 22 7d 2c 22 6c 69 6e 6b 73 22 3a 7b 22 6a 73 42 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f Data Ascii: {"isCookieDisalbed":true,"cookieDisabled":false,"coBrand":"us","sys":{"locality":{"timezone":{"determiner":"viaCowPrimary","value":"America/Los_Angeles"},"country":"US","locale":"en_US","language":"en","directionality":"ltr"},"links":{"jsBaseUrl":"https:/
2024-12-05 18:05:12 UTC	547	IN	Data Raw: 6c 5c 22 3e 50 6f 6c 69 63 79 20 55 70 64 61 74 65 73 3c 2f 61 3e 22 2c 22 77 6f 72 6c 64 77 69 64 65 22 3a 22 3c 61 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 20 68 72 65 66 3d 5c 22 2f 75 73 2f 77 65 62 61 70 70 73 2f 6d 70 70 2f 63 6f 75 6e 74 72 79 2d 77 6f 72 6c 64 77 69 64 65 5c 22 3e 57 6f 72 6c 64 77 69 64 65 3c 2f 61 3e 22 7d 7d 2c 22 74 72 61 63 6b 69 6e 67 22 3a 7b 22 66 70 74 69 22 3a 7b 22 6e 61 6d 65 22 3a 22 70 74 61 22 2c 22 6a 73 55 52 4c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 22 2c 22 73 65 72 76 65 72 55 52 4c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 2e 70 61 79 70 61 6c 2e 63 6f 6d 2f 74 73 22 2c 22 64 61 74 61 53 74 72 69 6e 67 22 3a 22 70 67 72 70 3d 61 75 74 68 63 68 61 Data Ascii: l\">Policy Updates</a>","worldwide":"<a target=\"_blank\" href=\"/us/webapps/mpp/country-worldwide\">Worldwide</a>"}},"tracking":{"fpti":{"name":"pta","jsURL":"https://www.paypalobjects.com","serverURL":"https://t.paypal.com/ts","dataString":"pgrp=authcha

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.6	49935	151.101.193.21	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:12 UTC	2069	OUT	POST /platform/tealeaftarget?Content-Type=application%2Fjson&X-PageId=P.PLN64VWCP6Q4Z4M8BR6AV6ZEJG28&X-Tealeaf=device%20(UIC)%20Lib%2F6.4.65&X-TealeafType=GUI&X-TeaLeaf-Page-Url=%2Fsignin&X-Tealeaf-SyncXHR=false&X-Tealeaf-MessageTypes=1%2C4%2C5%2C6%2C18&X-Tealeaf-SaaS-AppKey=76938917d7504ff7a962174c021690bd&X-Tealeaf-SaaS-TLTSID=30167158646093787848819749747452&X-Tealeaf-SaaS-TLTDID=93723043988386874756787593010559&Content-Encoding=gzip HTTP/1.1 Host: www.paypal.com Connection: keep-alive Content-Length: 2096 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.paypal.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.paypal.com/signin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; nsid=s%3ARLPSU2OHYvlTZtXh_VMfzo7ctuMnbu-c.%2F5h%2FpbgyA12uYrTjTUlTTIQJX8aBsaqWc%2FutzlCO8XQ; l7_az=dcg01.phx; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352; tsrce=authchallengenodeweb; ddbc=1; TLTSID=30167158646093787848819749747452; TLTDID=93723043988386874756787593010559; x-pp-s=eyJ0IjoiMTczMzQyMTkwNzE1MyIsImwiOiIwIiwibSI6IjAifQ; datadome=vSuP3ka4mVy~QZulHp1~WqR~EWUrnn2L7R5plnP1_VPgHKKliwbvZSiC7swhbZQ3S1DRPKOdctSPoK3ZygF4ZFHSfmxV1SY~~jrswy9SQbU_INJM_UckirO2CfOz2hEQ; ts=vreXpYrS%3D1764957908%26vteXpYrS%3D1733423708%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew
2024-12-05 18:05:12 UTC	2096	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 d5 58 69 6f db 3c 12 fe 2b 2f 04 c4 9f 62 57 07 25 4b 01 8c 45 9c c3 b7 e3 fa 4a ec 36 30 68 8a b2 18 4b 94 22 51 be 8a fc f7 1d 4a b6 9b b4 dd be db 5d 60 81 4d 02 9b 9c 19 0e 67 1e 0e 67 86 f9 a6 84 34 4d f1 8a 4e 69 92 b2 88 2b 57 8a 66 54 54 f9 ab 5c 2a 29 4d 18 0e fa 59 b8 a4 89 72 a5 4b 42 2a a5 52 e5 ea cb 37 85 b9 20 3d a8 0c ba 7d 0b 4d 1f 6f 06 d6 67 34 47 3d bb 3e b4 ae a7 d6 fc ae dd d0 6d d0 21 f0 b2 25 05 9b c3 f6 b5 54 29 70 22 c6 2c a4 ca 95 56 35 0c a4 6b b6 63 e8 08 81 20 10 0f 11 a7 0f 9e 97 52 a1 5c 19 aa 7a 79 b2 ae d8 50 ec 63 b9 cc be 54 a2 a3 8c a6 e9 86 09 4a 49 42 29 df 30 ba 3d 2d 86 a5 24 ca b8 c8 ad f6 92 28 7c a4 4b e5 4a 24 19 05 9d 51 96 d2 30 da 80 ae 6f 0a 0d 68 48 b9 78 e7 d1 97 2f 5f 61 2d Data Ascii: Xio<+/bW%KEJ60hK"QJ]`Mgg4MNi+WfTT\)MYrKBR7 =}Mog4G=>m!%T)p",V5kc R\zyPcTJIB)0=-$(\|KJ$Q0ohHx/_a-
2024-12-05 18:05:12 UTC	1096	IN	HTTP/1.1 200 OK Connection: close Content-Length: 39 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Security-Policy: default-src 'self' https://.paypal.com https://.paypalobjects.com 'unsafe-inline'; script-src 'self' https://.paypal.com https://.paypalobjects.com; img-src 'self' https:; object-src 'none'; form-action 'self' https://.paypal.com; base-uri 'self' https://.paypal.com; font-src 'self' https://.paypalobjects.com https://.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp Content-Type: application/json; charset=utf-8 Etag: W/"27-nn9l2+k2jnFr5za2291vuuvjcM0" Origin-Trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ== Paypal-Debug-Id: f5049150bed4d
2024-12-05 18:05:12 UTC	1558	IN	Data Raw: 50 65 72 6d 69 73 73 69 6f 6e 73 2d 50 6f 6c 69 63 79 3a 20 63 68 2d 75 61 2d 70 6c 61 74 66 6f 72 6d 2d 76 65 72 73 69 6f 6e 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 61 72 63 68 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 77 6f 77 36 34 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 6d 6f 64 65 6c 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 66 75 6c 6c 2d 76 65 Data Ascii: Permissions-Policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-ve
2024-12-05 18:05:12 UTC	39	IN	Data Raw: 7b 22 74 61 72 67 65 74 56 65 72 73 69 6f 6e 22 3a 22 31 22 2c 22 69 64 22 3a 39 30 39 36 33 36 36 30 35 31 39 37 7d Data Ascii: {"targetVersion":"1","id":909636605197}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.6	49937	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:13 UTC	420	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/dust-helpers-supplement.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:05:13 UTC	791	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:05:13 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-118f" Expires: Fri, 05 Dec 2025 18:05:13 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: c4494514b3b7f Server: ECAcc (lhd/35A0) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000c4494514b3b7f-17e7acea67a0f445-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 4495 Connection: close
2024-12-05 18:05:13 UTC	4495	IN	Data Raw: 76 61 72 20 65 78 74 65 6e 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 65 78 74 65 6e 64 28 64 75 73 74 29 20 7b 0a 0a 20 20 20 20 2f 2f 20 41 64 64 20 6e 65 77 20 64 75 73 74 20 68 65 6c 70 65 72 73 20 69 6e 20 74 68 69 73 20 73 74 79 6c 65 0a 20 20 20 20 64 75 73 74 2e 68 65 6c 70 65 72 73 2e 6c 69 6e 6b 20 3d 20 66 75 6e 63 74 69 6f 6e 20 6c 69 6e 6b 28 63 68 75 6e 6b 2c 20 63 74 78 2c 20 62 6f 64 69 65 73 2c 20 70 61 72 61 6d 73 29 20 7b 0a 20 20 20 20 20 20 20 20 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 20 20 20 20 20 20 20 20 76 61 72 20 68 72 65 66 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 6f 73 74 20 3d 20 63 74 78 2e 67 65 74 50 61 74 68 28 66 61 6c 73 65 2c 20 5b 27 63 6f 6e 74 65 78 74 27 2c 20 27 70 61 67 65 49 6e 66 6f 27 2c 20 27 68 6f 73 Data Ascii: var extend = function extend(dust) { // Add new dust helpers in this style dust.helpers.link = function link(chunk, ctx, bodies, params) { 'use strict'; var href, host = ctx.getPath(false, ['context', 'pageInfo', 'hos

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.6	49939	151.101.67.1	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:13 UTC	2061	OUT	GET /ts?v=1.9.5&t=1733421909680&g=300&e=err&page=main%3Aauthchallenge%3A%3Asignin&pgrp=main%3Aauthchallenge%3A%3Asignin&comp=authchallengenodeweb&erpg=Script%20error&error_type=WINDOW_ONERROR&error_source=-%200%3A0 HTTP/1.1 Host: t.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352; tsrce=authchallengenodeweb; TLTDID=93723043988386874756787593010559; datadome=vSuP3ka4mVy~QZulHp1~WqR~EWUrnn2L7R5plnP1_VPgHKKliwbvZSiC7swhbZQ3S1DRPKOdctSPoK3ZygF4ZFHSfmxV1SY~~jrswy9SQbU_INJM_UckirO2CfOz2hEQ; navcmd=_home; consumer_display=USER_HOMEPAGE%3d0%26USER_TARGETPAGE%3d0%26USER_FILTER_CHOICE%3d0%26BALANCE_MODULE_STATE%3d1%26GIFT_BALANCE_MODULE_STATE%3d1%26LAST_SELECTED_ALIAS_ID%3d0%26SELLING_GROUP%3d1%26PAYMENT_AND_RISK_GROUP%3d1%26SHIPPING_GROUP%3d1%26HOME_VERSION%3d1733508311%26MCE2_ELIGIBILITY%3d4294967295; KHcl0EuY7AKSMgfvHl7J5E7hPtK=rdtTJETBNM7DwCh4qNpvdRxJdMSDzzFYo6In7MygF_6Md8QPhzwP-F4gHD7NOMP7zUuOBvACUHj0UJnL; navlns=0.0; cwrClyrK4LoCV1fydGbAxiNL6iG=3Ng6NGvsdTy3LmJYbfY1MmzXBIEVgHRclejTzBmAyTYWxq4Z-8IhvW39PAtMToI3jGQd7xAgIbQXgZmEW3Nq8ux8m8-zP_ab2u2ApnWN1rsHTjwxMvLkIa3Ou6P-opp8l65vJoiQDKWYCelscaLvzmOKwjPGaH8HFvG-3WDcvyZQ [TRUNCATED]
2024-12-05 18:05:14 UTC	1360	IN	HTTP/1.1 200 OK Connection: close Access-Control-Expose-Headers: Server-Timing CORRELATION-ID: 7e47b7c10fc0d Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Type: image/gif Expires: Thu, 05 Dec 2024 18:05:14 GMT P3p: CP="CAO IND OUR SAM UNI STA COR COM" Paypal-Debug-Id: 7e47b7c10fc0d Pragma: no-cache Set-Cookie: ts=vreXpYrS%3D1764957914%26vteXpYrS%3D1733423714%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew;Expires=Fri, 05 Dec 2025 18:05:14 GMT;domain=.paypal.com;path=/;secure;HttpOnly;SameSite=None; Set-Cookie: ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352;Expires=Fri, 05 Dec 2025 18:05:14 GMT;domain=.paypal.com;path=/;secure;SameSite=None; Traceparent: 00-00000000000000000007e47b7c10fc0d-c70336e51192f6b1-01 Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Date: Thu, 05 Dec 2024 18:05:14 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Served-By: cache-iad-kjyo7100022-IAD, cache-ewr-kewr1740038-EWR X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1733421914.084370,VS0,VE92 vary: Accept-Encoding Server-Timing: "traceparent;desc="00-00000000000000000007e47b7c10fc0d-86ae0d1bde02f249-01"";content-encoding;desc="",x-cdn;desc="fastly" Timing-Allow-Origin: * transfer-encoding: chunked
2024-12-05 18:05:14 UTC	4	IN	Data Raw: 32 61 0d 0a Data Ascii: 2a
2024-12-05 18:05:14 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 01 01 32 00 3b Data Ascii: GIF89a!,2;
2024-12-05 18:05:14 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.6	49941	151.101.193.21	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:14 UTC	2578	OUT	POST /auth/logclientdata HTTP/1.1 Host: www.paypal.com Connection: keep-alive Content-Length: 565 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" Content-Type: application/json;charset=UTF-8 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.paypal.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.paypal.com/auth/validatecaptcha Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; nsid=s%3ARLPSU2OHYvlTZtXh_VMfzo7ctuMnbu-c.%2F5h%2FpbgyA12uYrTjTUlTTIQJX8aBsaqWc%2FutzlCO8XQ; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352; tsrce=authchallengenodeweb; ddbc=1; TLTDID=93723043988386874756787593010559; datadome=vSuP3ka4mVy~QZulHp1~WqR~EWUrnn2L7R5plnP1_VPgHKKliwbvZSiC7swhbZQ3S1DRPKOdctSPoK3ZygF4ZFHSfmxV1SY~~jrswy9SQbU_INJM_UckirO2CfOz2hEQ; navcmd=_home; consumer_display=USER_HOMEPAGE%3d0%26USER_TARGETPAGE%3d0%26USER_FILTER_CHOICE%3d0%26BALANCE_MODULE_STATE%3d1%26GIFT_BALANCE_MODULE_STATE%3d1%26LAST_SELECTED_ALIAS_ID%3d0%26SELLING_GROUP%3d1%26PAYMENT_AND_RISK_GROUP%3d1%26SHIPPING_GROUP%3d1%26HOME_VERSION%3d1733508311%26MCE2_ELIGIBILITY%3d4294967295; KHcl0EuY7AKSMgfvHl7J5E7hPtK=rdtTJETBNM7DwCh4qNpvdRxJdMSDzzFYo6In7MygF_6Md8QPhzwP-F4gHD7NOMP7zUuOBvACUHj0UJnL; navlns=0.0; cwrClyrK4LoCV1fydGbAxiNL6iG=3Ng6NGvsdTy3LmJYbfY1MmzXBIEVgHRclejTzBmAyTYWxq4Z-8IhvW39PAtMToI3jGQd7xA [TRUNCATED]
2024-12-05 18:05:14 UTC	565	OUT	Data Raw: 7b 22 66 70 74 69 22 3a 7b 22 70 67 72 70 22 3a 22 6d 61 69 6e 3a 61 75 74 68 63 68 61 6c 6c 65 6e 67 65 3a 3a 61 75 74 68 3a 76 61 6c 69 64 61 74 65 63 61 70 74 63 68 61 22 2c 22 70 61 67 65 22 3a 22 6d 61 69 6e 3a 61 75 74 68 63 68 61 6c 6c 65 6e 67 65 3a 3a 61 75 74 68 3a 76 61 6c 69 64 61 74 65 63 61 70 74 63 68 61 22 2c 22 70 67 73 74 22 3a 22 31 37 33 33 34 32 31 39 31 32 35 31 32 22 2c 22 63 61 6c 63 22 3a 22 66 35 30 34 39 31 35 34 36 66 39 30 35 22 2c 22 6e 73 69 64 22 3a 22 52 4c 50 53 55 32 4f 48 59 76 6c 54 5a 74 58 68 5f 56 4d 66 7a 6f 37 63 74 75 4d 6e 62 75 2d 63 22 2c 22 72 73 74 61 22 3a 22 65 6e 5f 55 53 22 2c 22 70 67 74 66 22 3a 22 4e 6f 64 65 6a 73 22 2c 22 65 6e 76 22 3a 22 6c 69 76 65 22 2c 22 73 22 3a 22 63 69 22 2c 22 63 63 70 67 Data Ascii: {"fpti":{"pgrp":"main:authchallenge::auth:validatecaptcha","page":"main:authchallenge::auth:validatecaptcha","pgst":"1733421912512","calc":"f50491546f905","nsid":"RLPSU2OHYvlTZtXh_VMfzo7ctuMnbu-c","rsta":"en_US","pgtf":"Nodejs","env":"live","s":"ci","ccpg
2024-12-05 18:05:14 UTC	344	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1925 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Access-Control-Expose-Headers: Server-Timing Cache-Control: max-age=0, no-cache, no-store, must-revalidate
2024-12-05 18:05:14 UTC	2112	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6e 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 6f 62 6a 65 63 74 73 2e 70 61 79 70 61 6c 2e 63 6e 3b 20 73 63 72 69 70 74 2d 73 72 63 20 27 6e 6f 6e 63 65 2d 4f 67 54 61 51 58 70 33 36 7a 6f 6a 79 58 56 53 39 57 67 4c 50 75 32 46 41 49 38 45 67 32 35 77 4d 2b 42 5a 58 46 44 47 69 39 4c 33 39 6a 73 46 27 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6e Data Ascii: Content-Security-Policy: default-src 'self' https://.paypal.com https://.paypal.cn https://.paypalobjects.com https://objects.paypal.cn; script-src 'nonce-OgTaQXp36zojyXVS9WgLPu2FAI8Eg25wM+BZXFDGi9L39jsF' 'self' https://.paypal.com https://*.paypal.cn
2024-12-05 18:05:14 UTC	1677	IN	Data Raw: 50 65 72 6d 69 73 73 69 6f 6e 73 2d 50 6f 6c 69 63 79 3a 20 63 68 2d 75 61 2d 70 6c 61 74 66 6f 72 6d 2d 76 65 72 73 69 6f 6e 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 61 72 63 68 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 77 6f 77 36 34 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 6d 6f 64 65 6c 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 66 75 6c 6c 2d 76 65 Data Ascii: Permissions-Policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-ve
2024-12-05 18:05:14 UTC	346	IN	Data Raw: 58 2d 53 65 72 76 65 64 2d 42 79 3a 20 63 61 63 68 65 2d 69 61 64 2d 6b 63 67 73 37 32 30 30 30 36 39 2d 49 41 44 2c 20 63 61 63 68 65 2d 6e 79 63 2d 6b 74 65 62 31 38 39 30 30 32 34 2d 4e 59 43 2c 20 63 61 63 68 65 2d 6e 79 63 2d 6b 74 65 62 31 38 39 30 30 32 34 2d 4e 59 43 0d 0a 58 2d 43 61 63 68 65 3a 20 4d 49 53 53 2c 20 4d 49 53 53 2c 20 4d 49 53 53 0d 0a 58 2d 43 61 63 68 65 2d 48 69 74 73 3a 20 30 2c 20 30 2c 20 30 0d 0a 58 2d 54 69 6d 65 72 3a 20 53 31 37 33 33 34 32 31 39 31 34 2e 34 33 32 35 31 33 2c 56 53 30 2c 56 45 31 32 37 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 53 65 72 76 65 72 2d 54 69 6d 69 6e 67 3a 20 22 74 72 61 63 65 70 61 72 65 6e 74 3b 64 65 73 63 3d 22 30 30 2d 30 30 30 30 30 30 30 30 30 30 30 30 Data Ascii: X-Served-By: cache-iad-kcgs7200069-IAD, cache-nyc-kteb1890024-NYC, cache-nyc-kteb1890024-NYCX-Cache: MISS, MISS, MISSX-Cache-Hits: 0, 0, 0X-Timer: S1733421914.432513,VS0,VE127Vary: Accept-EncodingServer-Timing: "traceparent;desc="00-000000000000
2024-12-05 18:05:14 UTC	1378	IN	Data Raw: 7b 22 69 73 43 6f 6f 6b 69 65 44 69 73 61 6c 62 65 64 22 3a 74 72 75 65 2c 22 63 6f 6f 6b 69 65 44 69 73 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 6f 42 72 61 6e 64 22 3a 22 75 73 22 2c 22 73 79 73 22 3a 7b 22 6c 6f 63 61 6c 69 74 79 22 3a 7b 22 74 69 6d 65 7a 6f 6e 65 22 3a 7b 22 64 65 74 65 72 6d 69 6e 65 72 22 3a 22 76 69 61 43 6f 77 50 72 69 6d 61 72 79 22 2c 22 76 61 6c 75 65 22 3a 22 41 6d 65 72 69 63 61 2f 4c 6f 73 5f 41 6e 67 65 6c 65 73 22 7d 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 5f 55 53 22 2c 22 6c 61 6e 67 75 61 67 65 22 3a 22 65 6e 22 2c 22 64 69 72 65 63 74 69 6f 6e 61 6c 69 74 79 22 3a 22 6c 74 72 22 7d 2c 22 6c 69 6e 6b 73 22 3a 7b 22 6a 73 42 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f Data Ascii: {"isCookieDisalbed":true,"cookieDisabled":false,"coBrand":"us","sys":{"locality":{"timezone":{"determiner":"viaCowPrimary","value":"America/Los_Angeles"},"country":"US","locale":"en_US","language":"en","directionality":"ltr"},"links":{"jsBaseUrl":"https:/
2024-12-05 18:05:14 UTC	547	IN	Data Raw: 6c 5c 22 3e 50 6f 6c 69 63 79 20 55 70 64 61 74 65 73 3c 2f 61 3e 22 2c 22 77 6f 72 6c 64 77 69 64 65 22 3a 22 3c 61 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 20 68 72 65 66 3d 5c 22 2f 75 73 2f 77 65 62 61 70 70 73 2f 6d 70 70 2f 63 6f 75 6e 74 72 79 2d 77 6f 72 6c 64 77 69 64 65 5c 22 3e 57 6f 72 6c 64 77 69 64 65 3c 2f 61 3e 22 7d 7d 2c 22 74 72 61 63 6b 69 6e 67 22 3a 7b 22 66 70 74 69 22 3a 7b 22 6e 61 6d 65 22 3a 22 70 74 61 22 2c 22 6a 73 55 52 4c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 22 2c 22 73 65 72 76 65 72 55 52 4c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 2e 70 61 79 70 61 6c 2e 63 6f 6d 2f 74 73 22 2c 22 64 61 74 61 53 74 72 69 6e 67 22 3a 22 70 67 72 70 3d 61 75 74 68 63 68 61 Data Ascii: l\">Policy Updates</a>","worldwide":"<a target=\"_blank\" href=\"/us/webapps/mpp/country-worldwide\">Worldwide</a>"}},"tracking":{"fpti":{"name":"pta","jsURL":"https://www.paypalobjects.com","serverURL":"https://t.paypal.com/ts","dataString":"pgrp=authcha

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.6	49943	151.101.1.21	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:14 UTC	2035	OUT	GET /auth/logclientdata HTTP/1.1 Host: www.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; nsid=s%3ARLPSU2OHYvlTZtXh_VMfzo7ctuMnbu-c.%2F5h%2FpbgyA12uYrTjTUlTTIQJX8aBsaqWc%2FutzlCO8XQ; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352; tsrce=authchallengenodeweb; ddbc=1; TLTDID=93723043988386874756787593010559; datadome=vSuP3ka4mVy~QZulHp1~WqR~EWUrnn2L7R5plnP1_VPgHKKliwbvZSiC7swhbZQ3S1DRPKOdctSPoK3ZygF4ZFHSfmxV1SY~~jrswy9SQbU_INJM_UckirO2CfOz2hEQ; navcmd=_home; consumer_display=USER_HOMEPAGE%3d0%26USER_TARGETPAGE%3d0%26USER_FILTER_CHOICE%3d0%26BALANCE_MODULE_STATE%3d1%26GIFT_BALANCE_MODULE_STATE%3d1%26LAST_SELECTED_ALIAS_ID%3d0%26SELLING_GROUP%3d1%26PAYMENT_AND_RISK_GROUP%3d1%26SHIPPING_GROUP%3d1%26HOME_VERSION%3d1733508311%26MCE2_ELIGIBILITY%3d4294967295; KHcl0EuY7AKSMgfvHl7J5E7hPtK=rdtTJETBNM7DwCh4qNpvdRxJdMSDzzFYo6In7MygF_6Md8QPhzwP-F4gHD7NOMP7zUuOBvACUHj0UJnL; navlns=0.0; cwrClyrK4LoCV1fydGbAxiNL6iG=3Ng6NGvsdTy3LmJYbfY1MmzXBIEVgHRclejTzBmAyTYWxq4Z-8IhvW39PAtMToI3jGQd7xA [TRUNCATED]
2024-12-05 18:05:14 UTC	345	IN	HTTP/1.1 302 Found Connection: close Content-Length: 29 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Access-Control-Expose-Headers: Server-Timing Cache-Control: max-age=0, no-cache, no-store, must-revalidate
2024-12-05 18:05:14 UTC	2082	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6e 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 6f 62 6a 65 63 74 73 2e 70 61 79 70 61 6c 2e 63 6e 3b 20 73 63 72 69 70 74 2d 73 72 63 20 27 6e 6f 6e 63 65 2d 53 72 6b 6f 6f 35 66 4e 30 6a 63 35 4f 4a 55 35 6d 56 46 2f 6f 65 33 2b 4a 41 70 4c 57 4d 44 49 56 69 70 34 49 6e 66 62 75 53 49 68 6f 68 50 5a 27 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6e Data Ascii: Content-Security-Policy: default-src 'self' https://.paypal.com https://.paypal.cn https://.paypalobjects.com https://objects.paypal.cn; script-src 'nonce-Srkoo5fN0jc5OJU5mVF/oe3+JApLWMDIVip4InfbuSIhohPZ' 'self' https://.paypal.com https://*.paypal.cn
2024-12-05 18:05:14 UTC	1690	IN	Data Raw: 50 65 72 6d 69 73 73 69 6f 6e 73 2d 50 6f 6c 69 63 79 3a 20 63 68 2d 75 61 2d 70 6c 61 74 66 6f 72 6d 2d 76 65 72 73 69 6f 6e 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 61 72 63 68 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 77 6f 77 36 34 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 6d 6f 64 65 6c 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 66 75 6c 6c 2d 76 65 Data Ascii: Permissions-Policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-ve
2024-12-05 18:05:14 UTC	396	IN	Data Raw: 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 33 30 37 32 30 30 30 3b 20 69 6e 63 6c 75 64 65 53 75 62 44 6f 6d 61 69 6e 73 3b 20 70 72 65 6c 6f 61 64 0d 0a 58 2d 53 65 72 76 65 64 2d 42 79 3a 20 63 61 63 68 65 2d 69 61 64 2d 6b 63 67 73 37 32 30 30 31 30 36 2d 49 41 44 2c 20 63 61 63 68 65 2d 65 77 72 2d 6b 65 77 72 31 37 34 30 30 32 30 2d 45 57 52 2c 20 63 61 63 68 65 2d 65 77 72 2d 6b 65 77 72 31 37 34 30 30 32 30 2d 45 57 52 0d 0a 58 2d 43 61 63 68 65 3a 20 4d 49 53 53 2c 20 4d 49 53 53 2c 20 4d 49 53 53 0d 0a 58 2d 43 61 63 68 65 2d 48 69 74 73 3a 20 30 2c 20 30 2c 20 30 0d 0a 58 2d 54 69 6d 65 72 3a 20 53 31 37 33 33 34 32 31 39 31 35 2e 35 30 35 36 36 37 2c 56 53 30 2c 56 45 31 34 33 0d Data Ascii: Strict-Transport-Security: max-age=63072000; includeSubDomains; preloadX-Served-By: cache-iad-kcgs7200106-IAD, cache-ewr-kewr1740020-EWR, cache-ewr-kewr1740020-EWRX-Cache: MISS, MISS, MISSX-Cache-Hits: 0, 0, 0X-Timer: S1733421915.505667,VS0,VE143
2024-12-05 18:05:14 UTC	29	IN	Data Raw: 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 2f 73 69 67 6e 69 6e Data Ascii: Found. Redirecting to /signin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.6	49942	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:14 UTC	889	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/recaptcha/recaptcha_v2.html?siteKey=6LeZ6egUAAAAAGwL8CjkDE8dcSw2DtvuVpdwTkwG&locale.x=en_US&country.x=US&checkConnectionTimeout=10000&reCaptchaEnterpriseEnabled=true HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:05:15 UTC	667	IN	HTTP/1.1 200 OK Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: text/html Date: Thu, 05 Dec 2024 18:05:15 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-2245" Expires: Fri, 05 Dec 2025 18:05:15 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 7dadba9049345 Server: ECAcc (lhd/35C9) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000007dadba9049345-71b40b8b5683ef17-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 8773 Connection: close
2024-12-05 18:05:15 UTC	8773	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 73 74 79 6c 65 3e 0a 09 09 09 2e 73 70 69 6e 6e 65 72 3a 61 66 74 65 72 2c 2e 73 70 69 6e 6e 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 27 7d 23 72 65 63 61 70 74 63 68 61 7b 7a 2d 69 6e 64 65 78 3a 31 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 72 6f 74 61 74 69 6f 6e 7b 66 72 6f 6d 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 29 7d 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 7d 7d 40 2d 6d 6f 7a 2d 6b 65 79 66 72 61 6d 65 73 20 72 6f 74 61 74 Data Ascii: <html><head><style>.spinner:after,.spinner:before{content:''}#recaptcha{z-index:1}@-webkit-keyframes rotation{from{-webkit-transform:rotate(0);transform:rotate(0)}to{-webkit-transform:rotate(359deg);transform:rotate(359deg)}}@-moz-keyframes rotat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.6	49947	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:14 UTC	583	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/view/authcaptcha.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:05:15 UTC	797	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:05:15 GMT DC: ccg11-origin-www-1.paypal.com Etag: "6736db9f-c67+br+ident" Expires: Fri, 05 Dec 2025 18:05:15 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: a356a1588855a Server: ECAcc (lhd/35E3) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000a356a1588855a-c76a3a7fb3f531e8-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 3175 Connection: close
2024-12-05 18:05:15 UTC	3175	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 43 72 65 61 74 65 64 20 62 79 20 68 64 6f 61 6e 20 6f 6e 20 31 30 2f 38 2f 31 34 2e 0a 20 2a 2f 0a 0a 64 65 66 69 6e 65 28 5b 27 6a 71 75 65 72 79 27 2c 20 27 70 61 67 65 56 69 65 77 27 2c 20 27 76 61 6c 69 64 61 74 69 6f 6e 27 2c 20 27 65 72 72 6f 72 44 69 73 70 6c 61 79 27 5d 2c 0a 0a 09 66 75 6e 63 74 69 6f 6e 20 28 24 2c 20 50 61 67 65 56 69 65 77 2c 20 56 61 6c 69 64 61 74 69 6f 6e 2c 20 45 72 72 6f 72 44 69 73 70 6c 61 79 29 20 7b 0a 0a 09 09 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 09 09 76 61 72 20 56 69 65 77 20 3d 20 50 61 67 65 56 69 65 77 2e 65 78 74 65 6e 64 28 7b 0a 0a 09 09 09 65 6c 3a 20 27 23 63 61 70 74 63 68 61 2d 73 74 61 6e 64 61 6c 6f 6e 65 27 2c 20 20 2f 2f 20 54 68 65 20 64 75 73 74 20 74 65 6d 70 6c 61 74 Data Ascii: /** * Created by hdoan on 10/8/14. */define(['jquery', 'pageView', 'validation', 'errorDisplay'],function ($, PageView, Validation, ErrorDisplay) {'use strict';var View = PageView.extend({el: '#captcha-standalone', // The dust templat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.6	49949	151.101.193.21	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:15 UTC	3032	OUT	POST /platform/tealeaftarget HTTP/1.1 Host: www.paypal.com Connection: keep-alive Content-Length: 2221 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Encoding: gzip X-Tealeaf-SyncXHR: false X-Tealeaf-MessageTypes: 12 sec-ch-ua-arch: "x86" sec-ch-ua-platform-version: "10.0.0" X-Tealeaf-SaaS-AppKey: 76938917d7504ff7a962174c021690bd X-Tealeaf-SaaS-TLTSID: 27694270399228667603056339019786 X-Requested-With: fetch sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" X-Tealeaf-SaaS-TLTDID: 93723043988386874756787593010559 X-Tealeaf: device (UIC) Lib/6.4.65 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json sec-ch-ua-full-version: "117.0.5938.134" X-TealeafType: GUI X-PageId: P.LWGAHASFY2SZ3SNSSQP56U67NXYS X-TeaLeaf-Page-Url: /auth/validatecaptcha Accept: / Origin: https://www.paypal.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.paypal.com/auth/validatecaptcha Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; nsid=s%3ARLPSU2OHYvlTZtXh_VMfzo7ctuMnbu-c.%2F5h%2FpbgyA12uYrTjTUlTTIQJX8aBsaqWc%2FutzlCO8XQ; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352; tsrce=authchallengenodeweb; ddbc=1; TLTDID=93723043988386874756787593010559; datadome=vSuP3ka4mVy~QZulHp1~WqR~EWUrnn2L7R5plnP1_VPgHKKliwbvZSiC7swhbZQ3S1DRPKOdctSPoK3ZygF4ZFHSfmxV1SY~~jrswy9SQbU_INJM_UckirO2CfOz2hEQ; navcmd=_home; consumer_display=USER_HOMEPAGE%3d0%26USER_TARGETPAGE%3d0%26USER_FILTER_CHOICE%3d0%26BALANCE_MODULE_STATE%3d1%26GIFT_BALANCE_MODULE_STATE%3d1%26LAST_SELECTED_ALIAS_ID%3d0%26SELLING_GROUP%3d1%26PAYMENT_AND_RISK_GROUP%3d1%26SHIPPING_GROUP%3d1%26HOME_VERSION%3d1733508311%26MCE2_ELIGIBILITY%3d4294967295; KHcl0EuY7AKSMgfvHl7J5E7hPtK=rdtTJETBNM7DwCh4qNpvdRxJdMSDzzFYo6In7MygF_6Md8QPhzwP-F4gHD7NOMP7zUuOBvACUHj0UJnL; navlns=0.0; cwrClyrK4LoCV1fydGbAxiNL6iG=3Ng6NGvsdTy3LmJYbfY1MmzXBIEVgHRclejTzBmAyTYWxq4Z-8IhvW39PAtMToI3jGQd7xA [TRUNCATED]
2024-12-05 18:05:15 UTC	2221	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 c5 18 fd 57 db 38 f2 5f f1 f9 bd bd 5f 2e 8e f3 41 80 d0 84 2d 07 b4 65 17 0a 47 42 9b f6 ba 2f 4f b1 27 b1 c0 b6 bc 92 9c 38 ed e3 7f bf 19 c9 0e 0e 94 63 b7 6f ef 9d 03 89 34 9a 19 8d e6 db fa e6 26 a0 14 5b c0 07 90 8a 8b d4 3d 70 db dd 66 8b 3e 6e c3 55 20 39 8b df e7 c9 0c a4 7b d0 26 80 22 2c e5 1e fc fb 9b cb 43 c4 be 6a 9e 7f 7c 7b f4 ee 68 f4 e6 53 67 f4 b9 3b 7a 3f 1a fd eb aa b7 7b b3 bb f7 7e f2 69 84 3c 34 9b 9d 11 e2 bb eb 5f 8e 88 a5 66 52 8f 79 02 c8 6f af db dd e9 b4 fb ad fe 7e af 83 88 08 fc 2a 52 b8 9c cf 15 68 f7 a0 db 6a 35 2a e9 ec 86 7a 9d 11 19 e2 8a 0a a7 d7 ea 22 cf 40 02 a4 4b 0e ab 8a 16 29 03 91 a7 da 08 3d 97 22 f9 08 33 f7 40 cb 1c 1a 6e 28 92 63 96 e9 5c 22 af 6f ae 90 7c c1 53 16 8f f8 57 e2 Data Ascii: W8__.A-eGB/O'8co4&[=pf>nU 9{&",Cj\|{hSg;z?{~i<4_fRyo~Rhj5z"@K)="3@n(c\"o\|SW
2024-12-05 18:05:16 UTC	1096	IN	HTTP/1.1 200 OK Connection: close Content-Length: 40 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Security-Policy: default-src 'self' https://.paypal.com https://.paypalobjects.com 'unsafe-inline'; script-src 'self' https://.paypal.com https://.paypalobjects.com; img-src 'self' https:; object-src 'none'; form-action 'self' https://.paypal.com; base-uri 'self' https://.paypal.com; font-src 'self' https://.paypalobjects.com https://.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp Content-Type: application/json; charset=utf-8 Etag: W/"28-xBmDQI9N6vp2TVAnl43erD4SVGY" Origin-Trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ== Paypal-Debug-Id: f7845332973ad
2024-12-05 18:05:16 UTC	1557	IN	Data Raw: 50 65 72 6d 69 73 73 69 6f 6e 73 2d 50 6f 6c 69 63 79 3a 20 63 68 2d 75 61 2d 70 6c 61 74 66 6f 72 6d 2d 76 65 72 73 69 6f 6e 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 61 72 63 68 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 77 6f 77 36 34 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 6d 6f 64 65 6c 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 66 75 6c 6c 2d 76 65 Data Ascii: Permissions-Policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-ve
2024-12-05 18:05:16 UTC	40	IN	Data Raw: 7b 22 74 61 72 67 65 74 56 65 72 73 69 6f 6e 22 3a 22 31 22 2c 22 69 64 22 3a 31 31 30 32 38 38 31 39 32 36 38 37 39 7d Data Ascii: {"targetVersion":"1","id":1102881926879}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.6	49950	151.101.1.21	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:16 UTC	2035	OUT	GET /auth/logclientdata HTTP/1.1 Host: www.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; nsid=s%3ARLPSU2OHYvlTZtXh_VMfzo7ctuMnbu-c.%2F5h%2FpbgyA12uYrTjTUlTTIQJX8aBsaqWc%2FutzlCO8XQ; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352; tsrce=authchallengenodeweb; ddbc=1; TLTDID=93723043988386874756787593010559; datadome=vSuP3ka4mVy~QZulHp1~WqR~EWUrnn2L7R5plnP1_VPgHKKliwbvZSiC7swhbZQ3S1DRPKOdctSPoK3ZygF4ZFHSfmxV1SY~~jrswy9SQbU_INJM_UckirO2CfOz2hEQ; navcmd=_home; consumer_display=USER_HOMEPAGE%3d0%26USER_TARGETPAGE%3d0%26USER_FILTER_CHOICE%3d0%26BALANCE_MODULE_STATE%3d1%26GIFT_BALANCE_MODULE_STATE%3d1%26LAST_SELECTED_ALIAS_ID%3d0%26SELLING_GROUP%3d1%26PAYMENT_AND_RISK_GROUP%3d1%26SHIPPING_GROUP%3d1%26HOME_VERSION%3d1733508311%26MCE2_ELIGIBILITY%3d4294967295; KHcl0EuY7AKSMgfvHl7J5E7hPtK=rdtTJETBNM7DwCh4qNpvdRxJdMSDzzFYo6In7MygF_6Md8QPhzwP-F4gHD7NOMP7zUuOBvACUHj0UJnL; navlns=0.0; cwrClyrK4LoCV1fydGbAxiNL6iG=3Ng6NGvsdTy3LmJYbfY1MmzXBIEVgHRclejTzBmAyTYWxq4Z-8IhvW39PAtMToI3jGQd7xA [TRUNCATED]
2024-12-05 18:05:16 UTC	345	IN	HTTP/1.1 302 Found Connection: close Content-Length: 29 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Access-Control-Expose-Headers: Server-Timing Cache-Control: max-age=0, no-cache, no-store, must-revalidate
2024-12-05 18:05:16 UTC	2082	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6e 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 6f 62 6a 65 63 74 73 2e 70 61 79 70 61 6c 2e 63 6e 3b 20 73 63 72 69 70 74 2d 73 72 63 20 27 6e 6f 6e 63 65 2d 77 6c 78 42 69 6d 41 53 47 55 2b 76 30 64 6a 4f 50 66 48 31 2b 53 48 46 65 37 6c 59 43 38 4e 65 78 4d 45 33 6e 53 43 63 6e 72 46 74 71 42 6d 69 27 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6e Data Ascii: Content-Security-Policy: default-src 'self' https://.paypal.com https://.paypal.cn https://.paypalobjects.com https://objects.paypal.cn; script-src 'nonce-wlxBimASGU+v0djOPfH1+SHFe7lYC8NexME3nSCcnrFtqBmi' 'self' https://.paypal.com https://*.paypal.cn
2024-12-05 18:05:16 UTC	1690	IN	Data Raw: 50 65 72 6d 69 73 73 69 6f 6e 73 2d 50 6f 6c 69 63 79 3a 20 63 68 2d 75 61 2d 70 6c 61 74 66 6f 72 6d 2d 76 65 72 73 69 6f 6e 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 61 72 63 68 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 77 6f 77 36 34 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 6d 6f 64 65 6c 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 66 75 6c 6c 2d 76 65 Data Ascii: Permissions-Policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-ve
2024-12-05 18:05:16 UTC	396	IN	Data Raw: 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 33 30 37 32 30 30 30 3b 20 69 6e 63 6c 75 64 65 53 75 62 44 6f 6d 61 69 6e 73 3b 20 70 72 65 6c 6f 61 64 0d 0a 58 2d 53 65 72 76 65 64 2d 42 79 3a 20 63 61 63 68 65 2d 69 61 64 2d 6b 6a 79 6f 37 31 30 30 30 36 39 2d 49 41 44 2c 20 63 61 63 68 65 2d 65 77 72 2d 6b 65 77 72 31 37 34 30 30 35 35 2d 45 57 52 2c 20 63 61 63 68 65 2d 65 77 72 2d 6b 65 77 72 31 37 34 30 30 35 35 2d 45 57 52 0d 0a 58 2d 43 61 63 68 65 3a 20 4d 49 53 53 2c 20 4d 49 53 53 2c 20 4d 49 53 53 0d 0a 58 2d 43 61 63 68 65 2d 48 69 74 73 3a 20 30 2c 20 30 2c 20 30 0d 0a 58 2d 54 69 6d 65 72 3a 20 53 31 37 33 33 34 32 31 39 31 36 2e 33 33 38 38 39 39 2c 56 53 30 2c 56 45 31 33 37 0d Data Ascii: Strict-Transport-Security: max-age=63072000; includeSubDomains; preloadX-Served-By: cache-iad-kjyo7100069-IAD, cache-ewr-kewr1740055-EWR, cache-ewr-kewr1740055-EWRX-Cache: MISS, MISS, MISSX-Cache-Hits: 0, 0, 0X-Timer: S1733421916.338899,VS0,VE137
2024-12-05 18:05:16 UTC	29	IN	Data Raw: 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 2f 73 69 67 6e 69 6e Data Ascii: Found. Redirecting to /signin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.6	49951	151.101.1.21	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:16 UTC	2023	OUT	GET /signin HTTP/1.1 Host: www.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; nsid=s%3ARLPSU2OHYvlTZtXh_VMfzo7ctuMnbu-c.%2F5h%2FpbgyA12uYrTjTUlTTIQJX8aBsaqWc%2FutzlCO8XQ; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352; tsrce=authchallengenodeweb; ddbc=1; TLTDID=93723043988386874756787593010559; datadome=vSuP3ka4mVy~QZulHp1~WqR~EWUrnn2L7R5plnP1_VPgHKKliwbvZSiC7swhbZQ3S1DRPKOdctSPoK3ZygF4ZFHSfmxV1SY~~jrswy9SQbU_INJM_UckirO2CfOz2hEQ; navcmd=_home; consumer_display=USER_HOMEPAGE%3d0%26USER_TARGETPAGE%3d0%26USER_FILTER_CHOICE%3d0%26BALANCE_MODULE_STATE%3d1%26GIFT_BALANCE_MODULE_STATE%3d1%26LAST_SELECTED_ALIAS_ID%3d0%26SELLING_GROUP%3d1%26PAYMENT_AND_RISK_GROUP%3d1%26SHIPPING_GROUP%3d1%26HOME_VERSION%3d1733508311%26MCE2_ELIGIBILITY%3d4294967295; KHcl0EuY7AKSMgfvHl7J5E7hPtK=rdtTJETBNM7DwCh4qNpvdRxJdMSDzzFYo6In7MygF_6Md8QPhzwP-F4gHD7NOMP7zUuOBvACUHj0UJnL; navlns=0.0; cwrClyrK4LoCV1fydGbAxiNL6iG=3Ng6NGvsdTy3LmJYbfY1MmzXBIEVgHRclejTzBmAyTYWxq4Z-8IhvW39PAtMToI3jGQd7xA [TRUNCATED]
2024-12-05 18:05:16 UTC	1147	IN	HTTP/1.1 403 Forbidden Connection: close Content-Length: 708 Content-Type: text/html;charset=utf-8 Server: DataDome X-DataDome: protected Accept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory Charset: utf-8 Cache-Control: max-age=0, private, no-cache, no-store, must-revalidate Pragma: no-cache Access-Control-Allow-Credentials: true Access-Control-Expose-Headers: x-dd-b, x-set-cookie Access-Control-Allow-Origin: * X-DataDome-CID: AHrlqAAAAAMAaG7zfMJsD4kACC575A== X-DD-B: 1 Set-Cookie: datadome=Z9w51G2l458BrZOpqb83JGqtDzp5ZzVeZzdH_DLusX5jgJYpDxL24E_eqUbfWqQNvcJC4O6KMo44cMvWn7PYQdCxi55p2tjkrP5hdB59z9VbFlca2CViIKgWHp8Uek0z; Max-Age=2592000; Domain=.paypal.com; Path=/; Secure; SameSite=Lax Accept-Ranges: bytes Date: Thu, 05 Dec 2024 18:05:16 GMT Via: 1.1 varnish Paypal-Debug-Id: f78453309813a Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Served-By: cache-ewr-kewr1740056-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1733421916.340478,VS0,VE20 Server-Timing: content-encoding;desc="",x-cdn;desc="fastly"
2024-12-05 18:05:16 UTC	708	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 70 61 79 70 61 6c 2e 63 6f 6d 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 23 63 6d 73 67 7b 61 6e 69 6d 61 74 69 6f 6e 3a 20 41 20 31 2e 35 73 3b 7d 40 6b 65 79 66 72 61 6d 65 73 20 41 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 3b 7d 39 39 25 7b 6f 70 61 63 69 74 79 3a 30 3b 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 31 3b 7d 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 30 22 3e 3c 70 20 69 64 3d 22 63 6d 73 67 22 3e 50 6c 65 61 73 65 20 65 6e 61 62 6c 65 20 4a 53 20 61 6e 64 20 64 69 73 61 62 6c 65 20 61 6e 79 20 61 64 20 62 6c 6f 63 6b 65 72 3c 2f 70 3e 3c 73 63 72 69 70 74 20 64 61 74 61 2d 63 66 61 73 79 6e 63 3d 22 66 61 6c 73 65 22 3e Data Ascii: <html><head><title>paypal.com</title><style>#cmsg{animation: A 1.5s;}@keyframes A{0%{opacity:0;}99%{opacity:0;}100%{opacity:1;}}</style></head><body style="margin:0"><p id="cmsg">Please enable JS and disable any ad blocker</p><script data-cfasync="false">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.6	49957	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:17 UTC	580	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/view/pageView.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:05:17 UTC	790	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:05:17 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-dec" Expires: Fri, 05 Dec 2025 18:05:17 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 117e1cde0ef9c Server: ECAcc (lhd/35FD) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000117e1cde0ef9c-764af4184ccc916a-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 3564 Connection: close
2024-12-05 18:05:17 UTC	3564	IN	Data Raw: 2f 2a 67 6c 6f 62 61 6c 20 64 65 66 69 6e 65 3a 74 72 75 65 2c 20 73 3a 74 72 75 65 20 2a 2f 0a 0a 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 2c 20 22 62 61 63 6b 62 6f 6e 65 22 2c 20 22 42 61 73 65 56 69 65 77 22 5d 2c 0a 0a 09 66 75 6e 63 74 69 6f 6e 20 28 24 2c 20 42 61 63 6b 62 6f 6e 65 2c 20 42 61 73 65 56 69 65 77 29 20 7b 0a 0a 09 09 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 09 09 76 61 72 20 50 61 67 65 56 69 65 77 20 3d 20 42 61 73 65 56 69 65 77 2e 65 78 74 65 6e 64 28 7b 0a 0a 09 09 09 6d 6f 64 65 6c 3a 20 6e 75 6c 6c 2c 20 20 2f 2f 20 42 61 63 6b 62 6f 6e 65 20 6d 6f 64 65 6c 0a 0a 09 09 09 74 72 61 63 6b 69 6e 67 50 72 65 66 69 78 3a 20 27 6d 61 69 6e 3a 61 75 74 68 2d 63 68 61 6c 6c 65 6e 67 65 3a 3a 3a 27 2c 0a 0a 09 09 09 72 65 71 Data Ascii: /global define:true, s:true /define(["jquery", "backbone", "BaseView"],function ($, Backbone, BaseView) {"use strict";var PageView = BaseView.extend({model: null, // Backbone modeltrackingPrefix: 'main:auth-challenge:::',req

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.6	49956	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:17 UTC	585	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/widgets/validation.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:05:17 UTC	790	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:05:17 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-b9e" Expires: Fri, 05 Dec 2025 18:05:17 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: afd44ceabbff1 Server: ECAcc (lhd/35A9) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000afd44ceabbff1-7b8babdff303de49-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 2974 Connection: close
2024-12-05 18:05:17 UTC	2974	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 43 72 65 61 74 65 64 20 62 79 20 68 64 6f 61 6e 20 6f 6e 20 35 2f 35 2f 31 34 2e 0a 20 2a 0a 20 2a 20 56 61 6c 69 64 61 74 65 73 20 66 6f 72 6d 20 69 6e 70 75 74 73 2e 20 57 69 6c 6c 20 65 6d 69 74 20 42 61 63 6b 62 6f 6e 65 20 65 76 65 6e 74 20 69 66 20 69 6e 70 75 74 20 69 73 20 76 61 6c 69 64 2c 20 69 6e 76 61 6c 69 64 2c 20 6f 72 20 65 6d 70 74 79 2e 0a 20 2a 20 54 68 65 20 65 76 65 6e 74 20 6e 61 6d 69 6e 67 20 63 6f 6e 76 65 6e 74 69 6f 6e 20 69 73 20 27 76 61 6c 69 64 27 2c 20 27 69 6e 76 61 6c 69 64 27 2c 20 6f 72 20 27 65 6d 70 74 79 27 20 66 6f 6c 6c 6f 77 65 64 20 62 79 20 74 68 65 20 6e 61 6d 65 20 61 74 74 72 69 62 75 74 65 20 6f 66 20 74 68 65 20 66 69 65 6c 64 0a 20 2a 0a 20 2a 20 46 6f 72 20 65 78 61 6d 70 6c 65 2c 20 Data Ascii: /** * Created by hdoan on 5/5/14. * * Validates form inputs. Will emit Backbone event if input is valid, invalid, or empty. * The event naming convention is 'valid', 'invalid', or 'empty' followed by the name attribute of the field * * For example,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.6	49958	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:17 UTC	587	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/widgets/errorDisplay.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:05:17 UTC	791	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:05:17 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-17b7" Expires: Fri, 05 Dec 2025 18:05:17 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 1dcbd97b11e63 Server: ECAcc (lhd/35EC) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000001dcbd97b11e63-6b10064ef2b6324b-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 6071 Connection: close
2024-12-05 18:05:17 UTC	6071	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 43 72 65 61 74 65 64 20 62 79 20 68 64 6f 61 6e 20 6f 6e 20 35 2f 38 2f 31 34 2e 0a 20 2a 0a 20 2a 20 54 68 69 73 20 69 73 20 75 73 65 64 20 74 6f 20 68 69 64 65 20 61 6e 64 20 73 68 6f 77 20 74 68 65 20 65 72 72 6f 72 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 61 6e 20 69 6e 70 75 74 20 66 69 65 6c 64 2e 0a 20 2a 20 55 73 65 64 20 61 6c 73 6f 20 74 6f 20 6d 61 72 6b 20 74 68 65 20 63 6f 6e 74 61 69 6e 65 72 20 6f 66 20 74 68 65 20 69 6e 70 75 74 20 66 69 65 6c 64 20 77 69 74 68 20 61 20 27 68 61 73 45 72 72 6f 72 27 20 63 6c 61 73 73 20 73 6f 20 77 68 65 6e 20 74 68 65 20 69 6e 70 75 74 20 68 61 73 20 66 6f 63 75 73 2c 20 74 68 65 20 65 72 72 6f 72 20 63 6f 6e 74 61 69 6e 65 72 20 63 61 6e 20 62 65 20 73 68 6f 77 6e 0a 20 2a Data Ascii: /** * Created by hdoan on 5/8/14. * * This is used to hide and show the error associated with an input field. * Used also to mark the container of the input field with a 'hasError' class so when the input has focus, the error container can be shown *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.6	49960	192.229.221.25	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:17 UTC	409	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/view/authcaptcha.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:05:17 UTC	797	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 18:05:17 GMT DC: ccg11-origin-www-1.paypal.com Etag: "6736db9f-c67+br+ident" Expires: Fri, 05 Dec 2025 18:05:17 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: a356a1588855a Server: ECAcc (lhd/35E3) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000a356a1588855a-c76a3a7fb3f531e8-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 3175 Connection: close
2024-12-05 18:05:17 UTC	3175	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 43 72 65 61 74 65 64 20 62 79 20 68 64 6f 61 6e 20 6f 6e 20 31 30 2f 38 2f 31 34 2e 0a 20 2a 2f 0a 0a 64 65 66 69 6e 65 28 5b 27 6a 71 75 65 72 79 27 2c 20 27 70 61 67 65 56 69 65 77 27 2c 20 27 76 61 6c 69 64 61 74 69 6f 6e 27 2c 20 27 65 72 72 6f 72 44 69 73 70 6c 61 79 27 5d 2c 0a 0a 09 66 75 6e 63 74 69 6f 6e 20 28 24 2c 20 50 61 67 65 56 69 65 77 2c 20 56 61 6c 69 64 61 74 69 6f 6e 2c 20 45 72 72 6f 72 44 69 73 70 6c 61 79 29 20 7b 0a 0a 09 09 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 09 09 76 61 72 20 56 69 65 77 20 3d 20 50 61 67 65 56 69 65 77 2e 65 78 74 65 6e 64 28 7b 0a 0a 09 09 09 65 6c 3a 20 27 23 63 61 70 74 63 68 61 2d 73 74 61 6e 64 61 6c 6f 6e 65 27 2c 20 20 2f 2f 20 54 68 65 20 64 75 73 74 20 74 65 6d 70 6c 61 74 Data Ascii: /** * Created by hdoan on 10/8/14. */define(['jquery', 'pageView', 'validation', 'errorDisplay'],function ($, PageView, Validation, ErrorDisplay) {'use strict';var View = PageView.extend({el: '#captcha-standalone', // The dust templat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.6	49959	172.217.19.227	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:17 UTC	602	OUT	GET /recaptcha/enterprise.js?onload=recaptchaEnterpriseCallback&render=explicit&hl=en HTTP/1.1 Host: www.recaptcha.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypalobjects.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 18:05:18 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Thu, 05 Dec 2024 18:05:17 GMT Date: Thu, 05 Dec 2024 18:05:17 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-05 18:05:18 UTC	641	IN	Data Raw: 37 37 36 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 45 3d 27 65 6e 74 65 72 70 72 69 73 65 27 2c 61 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 2c 67 72 3d 61 5b 45 5d 3d 61 5b 45 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f Data Ascii: 776/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var E='enterprise',a=w[N]=w[N]\|\|{},gr=a[E]=a[E]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['_
2024-12-05 18:05:18 UTC	1276	IN	Data Raw: 3d 77 2e 6e 61 76 69 67 61 74 6f 72 2c 6d 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 6d 65 74 61 27 29 3b 6d 2e 68 74 74 70 45 71 75 69 76 3d 27 6f 72 69 67 69 6e 2d 74 72 69 61 6c 27 3b 6d 2e 63 6f 6e 74 65 6e 74 3d 27 41 37 75 78 74 6a 33 2b 68 4a 6d 4f 63 5a 46 6f 6f 46 54 30 50 73 32 37 36 50 75 4f 71 47 6e 4d 31 6a 66 6f 50 62 46 76 78 57 70 37 33 56 43 36 30 4c 6e 59 47 7a 61 79 48 56 76 63 46 65 45 69 46 30 71 72 77 79 37 66 51 41 4c 2b 67 47 56 58 55 2b 66 39 49 51 63 41 41 41 43 54 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 33 4a 6c 59 32 46 77 64 47 4e 6f 59 53 35 75 5a 58 51 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e Data Ascii: =w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A7uxtj3+hJmOcZFooFT0Ps276PuOqGnM1jfoPbFvxWp73VC60LnYGzayHVvcFeEiF0qrwy7fQAL+gGVXU+f9IQcAAACTeyJvcmlnaW4iOiJodHRwczovL3JlY2FwdGNoYS5uZXQ6NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcn
2024-12-05 18:05:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.6	49961	151.101.131.1	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 18:05:17 UTC	2915	OUT	GET /ts?v=1.9.5&t=1733421915102&g=300&pgrp=authchallengenodeweb%2Flayouts%2Fmaster.html.dust&page=authchallengenodeweb%2Flayouts%2Fmaster.html.dust&pgst=1733421912512&calc=f50491546f905&nsid=RLPSU2OHYvlTZtXh_VMfzo7ctuMnbu-c&rsta=en_US&pgtf=Nodejs&env=live&s=ci&ccpg=US&csci=a2cfc41caf2f4e9e93be07c354b04372&comp=authchallengenodeweb&tsrce=authchallengenodeweb&cu=0&ef_policy=ccpa&xe=109541&xt=145835&e=im&imsrc=setup&view=%7B%22t10%22%3A1209%2C%22t11%22%3A5025%2C%22tcp%22%3A2005%2C%22et%22%3A%223g%22%2C%22nt%22%3A%22navigate%22%2C%22bt%22%3A57%7D&ru=https%3A%2F%2Fwww.paypal.com%2Fsignin&cd=24&sw=1280&sh=1024&dw=1280&dh=1024&bw=1280&bh=907&ce=1&t1=1209&t1c=1209&t1d=0&t1s=1206&t2=708&t3=6&t4d=0&t4=0&t4e=1963&tt=0&rdc=0&protocol=http%2F1.1&res=%7B%7D HTTP/1.1 Host: t.paypal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.paypal.com/auth/validatecaptcha Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cookie_check=yes; d_id=16bc73c3ccf44355b5392134ef0346f41733421881420; LANG=en_US%3BUS; ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352; tsrce=authchallengenodeweb; TLTDID=93723043988386874756787593010559; datadome=vSuP3ka4mVy~QZulHp1~WqR~EWUrnn2L7R5plnP1_VPgHKKliwbvZSiC7swhbZQ3S1DRPKOdctSPoK3ZygF4ZFHSfmxV1SY~~jrswy9SQbU_INJM_UckirO2CfOz2hEQ; navcmd=_home; consumer_display=USER_HOMEPAGE%3d0%26USER_TARGETPAGE%3d0%26USER_FILTER_CHOICE%3d0%26BALANCE_MODULE_STATE%3d1%26GIFT_BALANCE_MODULE_STATE%3d1%26LAST_SELECTED_ALIAS_ID%3d0%26SELLING_GROUP%3d1%26PAYMENT_AND_RISK_GROUP%3d1%26SHIPPING_GROUP%3d1%26HOME_VERSION%3d1733508311%26MCE2_ELIGIBILITY%3d4294967295; KHcl0EuY7AKSMgfvHl7J5E7hPtK=rdtTJETBNM7DwCh4qNpvdRxJdMSDzzFYo6In7MygF_6Md8QPhzwP-F4gHD7NOMP7zUuOBvACUHj0UJnL; navlns=0.0; cwrClyrK4LoCV1fydGbAxiNL6iG=3Ng6NGvsdTy3LmJYbfY1MmzXBIEVgHRclejTzBmAyTYWxq4Z-8IhvW39PAtMToI3jGQd7xAgIbQXgZmEW3Nq8ux8m8-zP_ab2u2ApnWN1rsHTjwxMvLkIa3Ou6P-opp8l65vJoiQDKWYCelscaLvzmOKwjPGaH8HFvG-3WDcvyZQ [TRUNCATED]
2024-12-05 18:05:17 UTC	1360	IN	HTTP/1.1 200 OK Connection: close Access-Control-Expose-Headers: Server-Timing CORRELATION-ID: 4104cd65723b6 Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Type: image/gif Expires: Thu, 05 Dec 2024 18:05:17 GMT P3p: CP="CAO IND OUR SAM UNI STA COR COM" Paypal-Debug-Id: 4104cd65723b6 Pragma: no-cache Set-Cookie: ts=vreXpYrS%3D1764957917%26vteXpYrS%3D1733423717%26vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352%26vtyp%3Dnew;Expires=Fri, 05 Dec 2025 18:05:17 GMT;domain=.paypal.com;path=/;secure;HttpOnly;SameSite=None; Set-Cookie: ts_c=vr%3D97fed80e1930ad121492b853f6f9f353%26vt%3D97fed80e1930ad121492b853f6f9f352;Expires=Fri, 05 Dec 2025 18:05:17 GMT;domain=.paypal.com;path=/;secure;SameSite=None; Traceparent: 00-00000000000000000004104cd65723b6-bf5f641e9994be48-01 Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Date: Thu, 05 Dec 2024 18:05:17 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Served-By: cache-iad-kjyo7100049-IAD, cache-nyc-kteb1890083-NYC X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1733421918.702021,VS0,VE90 vary: Accept-Encoding Server-Timing: "traceparent;desc="00-00000000000000000004104cd65723b6-a17007a9d3d67b88-01"";content-encoding;desc="",x-cdn;desc="fastly" Timing-Allow-Origin: * transfer-encoding: chunked
2024-12-05 18:05:17 UTC	4	IN	Data Raw: 32 61 0d 0a Data Ascii: 2a
2024-12-05 18:05:17 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 01 01 32 00 3b Data Ascii: GIF89a!,2;
2024-12-05 18:05:17 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	1
Start time:	13:04:29
Start date:	05/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	13:04:32
Start date:	05/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2512 --field-trial-handle=2480,i,13953459428177512392,16051172419448561988,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	4
Start time:	13:04:38
Start date:	05/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.paypal.com/signin/?returnUri=%2Fmyaccount%2Ftransfer%2FpayRequest%2FU-09584045BD498740V%2FU-7AK40048SY131414Y%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq&id=UJ8cMtNtnR8osXBu987dZoV1KMO8Kn.CKcv6ZA&expId=p2p&onboardData=%7B%22signUpRequest%22%3A%7B%22method%22%3A%22get%22%2C%22url%22%3A%22https%3A%2F%2Fwww.paypal.com%2Fmyaccount%2Ftransfer%2FguestLogin%2FpayRequest%2FU-09584045BD498740V%2FU-7AK40048SY131414Y%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq%26id%3DUJ8cMtNtnR8osXBu987dZoV1KMO8Kn.CKcv6ZA%22%7D%7D&flowContextData=k3KkNbgd2F3whUTyipi2CMJLh_A_-ZYRjnLUkRjoT_j0HNsy89M3Jq9pftpBPMtxKyazfBl41ygLF6L-3nSQM3yKD_1JSLMZUnm3gJtmC_GW6MtRMZgxxLdzhM2UidzudErvOhqzUKOKhl1Uolhas5WHE4v4p4McejHNxcZVkLh-Y4orpy9guCt5hhIB4GnzEz4SubWTdzvc3cAY2OwiaKLLHK8NR5mzXmQp5fVf3iIsNKSvq_9V0izgPURkU3T8RWrY5gGBkFdWln_xY5pl8zRv8lmUI-keUYe0DqQBvKVK8GwV8qiU_5p8qjPHJVW9i-G3ZBZuZum2FKJqczC5erDfF4QBe8JLLYzKBGyYHnHI7fFyBoEDubHGzh8R01uh4xAe-iAkcUj76XG_hnIoA0TzvY15PrfT8E9VdnaJhGuNJ5c8GhmekMGGnVwrlvOcZBIva0&v=1&utm_source=unp&utm_medium=email&utm_campaign=RT000186&utm_unptid=3bf303f1-b31d-11ef-81c6-bffe125023d8&ppid=RT000186&cnac=US&rsta=en_US%28en-US%29&unptid=3bf303f1-b31d-11ef-81c6-bffe125023d8&calc=f7859995fbf4b&unp_tpcid=requestmoney-notifications-requestee&page=main%3Aemail%3ART000186&pgrp=main%3Aemail&e=cl&mchn=em&s=ci&mail=sys&appVersion=1.294.0&tenant_name=&xt=145585%2C150948%2C104038&link_ref=www.paypal.com_signin"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	13:04:44
Start date:	05/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5484 --field-trial-handle=2480,i,13953459428177512392,16051172419448561988,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	6
Start time:	13:04:44
Start date:	05/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5500 --field-trial-handle=2480,i,13953459428177512392,16051172419448561988,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Chrome Cache Entry: 150

Chrome Cache Entry: 151

Chrome Cache Entry: 152

Chrome Cache Entry: 153

Chrome Cache Entry: 154

Chrome Cache Entry: 155

Chrome Cache Entry: 156

Chrome Cache Entry: 157

Chrome Cache Entry: 158

Chrome Cache Entry: 159

Chrome Cache Entry: 160

Chrome Cache Entry: 161

Chrome Cache Entry: 162

Chrome Cache Entry: 163