Edit tour

Windows Analysis Report
https://www.paypal.com/signin/?returnUri=%2Fmyaccount%2Ftransfer%2FpayRequest%2FU-09584045BD498740V%2FU-5R763959NX153980F%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq&id=OoO85MXTLVUkAlgY4sey9A8h.NxxqjO.iYbAWg&expId=p2p&onboardData=%7B%22signUpRequest%22%3A%7B%22method%22%3A%22get%22%2C%22url%22%3A

Overview

General Information

Sample URL:	https://www.paypal.com/signin/?returnUri=%2Fmyaccount%2Ftransfer%2FpayRequest%2FU-09584045BD498740V%2FU-5R763959NX153980F%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq&id=OoO85MXTLVUkAlgY4sey9A8h.Nxx
Analysis ID:	1569539
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Suricata IDS alerts for network traffic

HTML page contains string obfuscation

HTML title does not match URL

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6208 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5444 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2168 --field-trial-handle=1928,i,14656706162417554829,12577780559382963475,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3580 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5560 --field-trial-handle=1928,i,14656706162417554829,12577780559382963475,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3508 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5588 --field-trial-handle=1928,i,14656706162417554829,12577780559382963475,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5464 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.paypal.com/signin/?returnUri=%2Fmyaccount%2Ftransfer%2FpayRequest%2FU-09584045BD498740V%2FU-5R763959NX153980F%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq&id=OoO85MXTLVUkAlgY4sey9A8h.NxxqjO.iYbAWg&expId=p2p&onboardData=%7B%22signUpRequest%22%3A%7B%22method%22%3A%22get%22%2C%22url%22%3A%22https%3A%2F%2Fwww.paypal.com%2Fmyaccount%2Ftransfer%2FguestLogin%2FpayRequest%2FU-09584045BD498740V%2FU-5R763959NX153980F%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq%26id%3DOoO85MXTLVUkAlgY4sey9A8h.NxxqjO.iYbAWg%22%7D%7D&flowContextData=F7WdIOgJmH6-07KTJ7GpdWXhkdDQxLohB4l-G7vuWGaUsw9VWkH3unndZA7YlCRgtETWTIDn9hNnR_R_XfGvdxeCRkDmtXLc6qqtXR9sC3Gp-59lNBELQtpM5xEv0i4rCTpJiBcP2uf4VFrJLL1b5u1XG7JtP5TfW7CNqxSVOxEb9_duKrmtDgpztBtl32bVeoc8BgW5poXyk9lJHcKrYdvBHSdT0mosqrrmaGj2a5uNQdBK70Mwpn9Zddmj0KI1GIZrXWvFcpnuRbvbli2inkizkeV4nR1uyKnBSzFqdPDcK4t7K9B6YiFhb5sS8DaQd7F6oWzSe-J8gPxVURmdwwOxFn1ycN09t9caUdBz1XMuv96GDJywuv2feJdoAI73PNjro1a2cFEKAWnCgtoHqxdBD3A1mVV3OiytkjtEUDdvp0GL3CNOAV9zIrunX_DmbTO6KOe21dniBkeG&v=1&utm_source=unp&utm_medium=email&utm_campaign=RT000186&utm_unptid=09b8bd50-b31d-11ef-9fd6-7b2e619a4883&ppid=RT000186&cnac=US&rsta=en_US%28en-US%29&unptid=09b8bd50-b31d-11ef-9fd6-7b2e619a4883&calc=f8278373e34b4&unp_tpcid=requestmoney-notifications-requestee&page=main%3Aemail%3ART000186&pgrp=main%3Aemail&e=cl&mchn=em&s=ci&mail=sys&appVersion=1.294.0&tenant_name=&xt=145585%2C150948%2C104038&link_ref=www.paypal.com_signin" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Suricata Signatures

ET PHISHING Successful Paypal Phish Jan 23 2017

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-05T20:20:08.680596+0100	2023760	1	Successful Credential Theft Detected	192.168.2.8	49780	151.101.1.21	443	TCP

ET PHISHING Successful Paypal Phish M1 Dec 8 2015

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-05T20:20:08.680596+0100	2031565	1	Successful Credential Theft Detected	192.168.2.8	49780	151.101.1.21	443	TCP

ET PHISHING Successful Paypal Phish Oct 16 2017

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-05T20:20:08.680596+0100	2024846	1	Successful Credential Theft Detected	192.168.2.8	49780	151.101.1.21	443	TCP

ETPRO PHISHING Successful Paypal Phish Oct 11 2016

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-05T20:20:08.680596+0100	2822573	1	Successful Credential Theft Detected	192.168.2.8	49780	151.101.1.21	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Source: https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/opinionLab/onlineOpinionPopup.js

HTTP Parser: Found new string: script /*. Spec #22956 OpinionLab. */..define(['opinionLab'], function(opinionLab) {...'use strict';..window.PAYPAL = window.PAYPAL ? window.PAYPAL : {};..var opVars = window.PAYPAL.opinionLabVars;...function showpopup(redirectTo) {...var mywin;...mywin = window.open('', '', 'top=3000,left=3000,width=1,height=1,menubar=0,scrollbars=0,resizeable=1');...if (mywin) {....mywin.document.open....var myURL = ""...../* This JS is customized for sparta because a JS call..... /* Comparing with corresponding XPT code - Removed the External opinionlab js from the popup content as it could not be loaded due to path issue */.....var HTML_txt = "<html><scr" + "ipt language='javascript'>";....HTML_txt = HTML_txt + "_hr='" + opinionLab._hr + "';";....HTML_txt = HTML_txt + "_ht='" + opinionLab._ht + "';";....HTML_txt = HTML_txt + "custom_var='" + opinionLab.custom_var + "';";.....if (( typeof opinionLab.baseurl == 'undefined')) {....} else {.....HTML_txt = HTML_txt + "baseurl='" + opinionLab.baseurl + "';";....}....if (( typeof opini...

Source: https://www.paypal.com/signin/?returnUri=%2Fmyaccount%2Ftransfer%2FpayRequest%2FU-09584045BD498740V%2FU-5R763959NX153980F%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq&id=OoO85MXTLVUkAlgY4sey9A8h.NxxqjO.iYbAWg&expId=p2p&onboardData=%7B%22signUpRequest%22%3A%7B%22method%22%3A%22get%22%2C%22url%22%3A%22https%3A%2F%2Fwww.paypal.com%2Fmyaccount%2Ftransfer%2FguestLogin%2FpayRequest%2FU-09584045BD498740V%2FU-5R763959NX153980F%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq%26id%3DOoO85MXTLVUkAlgY4sey9A8h.NxxqjO.iYbAWg%22%7D%7D&flowContextData=F7WdIOgJmH6-07KTJ7GpdWXhkdDQxLohB4l-G7vuWGaUsw9VWkH3unndZA7YlCRgtETWTIDn9hNnR_R_XfGvdxeCRkDmtXLc6qqtXR9sC3Gp-59lNBELQtpM5xEv0i4rCTpJiBcP2uf4VFrJLL1b5u1XG7JtP5TfW7CNqxSVOxEb9_duKrmtDgpztBtl32bVeoc8BgW5poXyk9lJHcKrYdvBHSdT0mosqrrmaGj2a5uNQdBK70Mwpn9Zddmj0KI1GIZrXWvFcpnuRbvbli2inkizkeV4nR1uyKnBSzFqdPDcK4t7K9B6YiFhb5sS8DaQd7F6oWzSe-J8gPxVURmdwwOxFn1ycN09t9caUdBz1XMuv96GDJywuv2feJdoAI73PNjro1a2cFEKAWnCgtoHqxdBD3A1mVV3OiytkjtEUDdvp0GL3CNOAV9zIrunX_DmbTO6KOe21dniBkeG&v=1&utm_source=u...

HTTP Parser: Title: does not match URL

HTTP Parser: <input type="password" .../> found

Source: https://www.paypal.com/signin/?returnUri=%2Fmyaccount%2Ftransfer%2FpayRequest%2FU-09584045BD498740V%2FU-5R763959NX153980F%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq&id=OoO85MXTLVUkAlgY4sey9A8h.NxxqjO.iYbAWg&expId=p2p&onboardData=%7B%22signUpRequest%22%3A%7B%22method%22%3A%22get%22%2C%22url%22%3A%22https%3A%2F%2Fwww.paypal.com%2Fmyaccount%2Ftransfer%2FguestLogin%2FpayRequest%2FU-09584045BD498740V%2FU-5R763959NX153980F%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq%26id%3DOoO85MXTLVUkAlgY4sey9A8h.NxxqjO.iYbAWg%22%7D%7D&flowContextData=F7WdIOgJmH6-07KTJ7GpdWXhkdDQxLohB4l-G7vuWGaUsw9VWkH3unndZA7YlCRgtETWTIDn9hNnR_R_XfGvdxeCRkDmtXLc6qqtXR9sC3Gp-59lNBELQtpM5xEv0i4rCTpJiBcP2uf4VFrJLL1b5u1XG7JtP5TfW7CNqxSVOxEb9_duKrmtDgpztBtl32bVeoc8BgW5poXyk9lJHcKrYdvBHSdT0mosqrrmaGj2a5uNQdBK70Mwpn9Zddmj0KI1GIZrXWvFcpnuRbvbli2inkizkeV4nR1uyKnBSzFqdPDcK4t7K9B6YiFhb5sS8DaQd7F6oWzSe-J8gPxVURmdwwOxFn1ycN09t9caUdBz1XMuv96GDJywuv2feJdoAI73PNjro1a2cFEKAWnCgtoHqxdBD3A1mVV3OiytkjtEUDdvp0GL3CNOAV9zIrunX_DmbTO6KOe21dniBkeG&v=1&utm_source=u...	HTTP Parser: No favicon
Source: https://www.paypal.com/signin	HTTP Parser: No favicon
Source: https://www.paypal.com/signin	HTTP Parser: No favicon
Source: https://www.paypal.com/signin	HTTP Parser: No favicon
Source: https://www.paypal.com/signin	HTTP Parser: No favicon

HTTP Parser: No <meta name="author".. found

HTTP Parser: No <meta name="copyright".. found

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2023760 - Severity 1 - ET PHISHING Successful Paypal Phish Jan 23 2017 : 192.168.2.8:49780 -> 151.101.1.21:443
Source: Network traffic	Suricata IDS: 2024846 - Severity 1 - ET PHISHING Successful Paypal Phish Oct 16 2017 : 192.168.2.8:49780 -> 151.101.1.21:443
Source: Network traffic	Suricata IDS: 2031565 - Severity 1 - ET PHISHING Successful Paypal Phish M1 Dec 8 2015 : 192.168.2.8:49780 -> 151.101.1.21:443
Source: Network traffic	Suricata IDS: 2822573 - Severity 1 - ETPRO PHISHING Successful Paypal Phish Oct 11 2016 : 192.168.2.8:49780 -> 151.101.1.21:443

Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /signin/?returnUri=%2Fmyaccount%2Ftransfer%2FpayRequest%2FU-09584045BD498740V%2FU-5R763959NX153980F%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq&id=OoO85MXTLVUkAlgY4sey9A8h.NxxqjO.iYbAWg&expId=p2p&onboardData=%7B%22signUpRequest%22%3A%7B%22method%22%3A%22get%22%2C%22url%22%3A%22https%3A%2F%2Fwww.paypal.com%2Fmyaccount%2Ftransfer%2FguestLogin%2FpayRequest%2FU-09584045BD498740V%2FU-5R763959NX153980F%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq%26id%3DOoO85MXTLVUkAlgY4sey9A8h.NxxqjO.iYbAWg%22%7D%7D&flowContextData=F7WdIOgJmH6-07KTJ7GpdWXhkdDQxLohB4l-G7vuWGaUsw9VWkH3unndZA7YlCRgtETWTIDn9hNnR_R_XfGvdxeCRkDmtXLc6qqtXR9sC3Gp-59lNBELQtpM5xEv0i4rCTpJiBcP2uf4VFrJLL1b5u1XG7JtP5TfW7CNqxSVOxEb9_duKrmtDgpztBtl32bVeoc8BgW5poXyk9lJHcKrYdvBHSdT0mosqrrmaGj2a5uNQdBK70Mwpn9Zddmj0KI1GIZrXWvFcpnuRbvbli2inkizkeV4nR1uyKnBSzFqdPDcK4t7K9B6YiFhb5sS8DaQd7F6oWzSe-J8gPxVURmdwwOxFn1ycN09t9caUdBz1XMuv96GDJywuv2feJdoAI73PNjro1a2cFEKAWnCgtoHqxdBD3A1mVV3OiytkjtEUDdvp0GL3CNOAV9zIrunX_DmbTO6KOe21dniBkeG&v=1&utm_source=unp&utm_medium=email&utm_campaign=RT000186&utm_unptid=09b8bd50-b31d-11ef-9fd6-7b2e619a4883&ppid=RT000186&cnac=US&rsta=en_US%28en-US%29&unptid=09b8bd50-b31d-11ef-9fd6-7b2e619a4883&calc=f8278373e34b4&unp_tpcid=requestmoney-notifications-requestee&page=main%3Aemail%3ART000186&pgrp=main%3Aemail&e=cl&mchn=em&s=ci&mail=sys&appVersion=1.294.0&tenant_name=&xt=145585%2C150948%2C104038&link_ref=www.paypal.com_signin HTTP/1.1Host: www.paypal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/css/app.css HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/lib/modernizr-2.6.1.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rdaAssets/fraudnet/sync/fn-sync-telemetry-min.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/lib/require.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/app.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pa/js/min/pa.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/widgets/clientCalLogger.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/widgets/errorDetector.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/shared/paypal-logo-129x32.svg HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/css/app.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/lib/modernizr-2.6.1.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rdaAssets/fraudnet/sync/fn-sync-telemetry-min.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/lib/require.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/app.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tags.js HTTP/1.1Host: ddbm2.paypal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=c0c49a91e6384eadbaa4a565394e21da1733426393114; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTczMzQyNjM5MzE1OSIsImwiOiIwIiwibSI6IjAifQ; l7_az=dcg15.slc; ts=vreXpYrS%3D1764962393%26vteXpYrS%3D1733428193%26vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778%26vtyp%3Dnew; ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778
Source: global traffic	HTTP traffic detected: GET /webcaptcha/ngrlCaptcha.min.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pa/js/min/pa.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ts?v=1.9.5&t=1733426395344&g=300&e=ac&tsrce=unp&ppid=RT000186&space_key=SKCPAD&utm_source=unp&utm_medium=email&utm_campaign=RT000186&utm_unptid=09b8bd50-b31d-11ef-9fd6-7b2e619a4883&cnac=US&rsta=en_US(en-US)&unptid=09b8bd50-b31d-11ef-9fd6-7b2e619a4883&calc=f8278373e34b4&unp_tpcid=requestmoney-notifications-requestee&page=main%3Aemail%3ART000186&pgrp=main%3Aemail&s=ci&mail=sys&appVersion=1.294.0&xt=145585%2C150948%2C104038&link_ref=www.paypal.com_signin&event_name=external_deep_link_processed HTTP/1.1Host: t.paypal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.paypal.com/signin/?returnUri=%2Fmyaccount%2Ftransfer%2FpayRequest%2FU-09584045BD498740V%2FU-5R763959NX153980F%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq&id=OoO85MXTLVUkAlgY4sey9A8h.NxxqjO.iYbAWg&expId=p2p&onboardData=%7B%22signUpRequest%22%3A%7B%22method%22%3A%22get%22%2C%22url%22%3A%22https%3A%2F%2Fwww.paypal.com%2Fmyaccount%2Ftransfer%2FguestLogin%2FpayRequest%2FU-09584045BD498740V%2FU-5R763959NX153980F%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq%26id%3DOoO85MXTLVUkAlgY4sey9A8h.NxxqjO.iYbAWg%22%7D%7D&flowContextData=F7WdIOgJmH6-07KTJ7GpdWXhkdDQxLohB4l-G7vuWGaUsw9VWkH3unndZA7YlCRgtETWTIDn9hNnR_R_XfGvdxeCRkDmtXLc6qqtXR9sC3Gp-59lNBELQtpM5xEv0i4rCTpJiBcP2uf4VFrJLL1b5u1XG7JtP5TfW7CNqxSVOxEb9_duKrmtDgpztBtl32bVeoc8BgW5poXyk9lJHcKrYdvBHSdT0mosqrrmaGj2a5uNQdBK70Mwpn9Zddmj0KI1GIZrXWvFcpnuRbvbli2inkizkeV4nR1uyKnBSzFqdPDcK4t7K9B6YiFhb5sS8DaQd7F6oWzSe-J8gPxVURmdwwOxFn1ycN09t9caUdBz1XMuv96GDJywuv2feJdoAI73PNjro1a2cFEKAWnCgtoHqxdBD3A1mVV3OiytkjtEUDdvp0GL3CNOAV9zIrunX_DmbTO6KOe21dniBkeG&v=1&utm_source=unp&utm_medium=email&utm_campaign=RT000186&utm_unptid=09b8bd50-b31d-11ef-9fd6-7b2e619a4883&ppid=RT000186&cnac=US&rsta=en_US%28en-US%29&unptid=09b8bd50-b31d-11ef-9fd6-7b2e619a4883&calc=f8278373e34b4&unp_tpcid=requestmoney-notifications-requestee&page=main%3Aemail%3ART000186&pgrp=main%3Aemail&e=cl&mchn=em&s=ci&mail=sys&appVersion=1.294.0&tenant_name=&xt=145585%2C150948%2C104038&link_ref=www.paypal.com_signinAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=c0c49a91e6384eadbaa4a565394e21da1733426393114; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTczMzQyNjM5MzE1OSIsImwiOiIwIiwibSI6IjAifQ; l7_az=dcg15.slc; ts=vreXpYrS%3D1764962393%26vteXpYrS%3D1733428193%26vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778%26vtyp%3Dnew; ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778
Source: global traffic	HTTP traffic detected: GET /webcaptcha/grcenterprise_v3_static.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /martech/tm/paypal/mktgtagmanager.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.paypal.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pa/mi/paypal/latmconf.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.paypal.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/browser_modules/dustjs-linkedin/dist/dust-full.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/core/nougat.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/widgets/clientCalLogger.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/widgets/errorDetector.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/shared/paypal-logo-129x32.svg HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/router.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ts?v=1.9.5&t=1733426395344&g=300&e=ac&tsrce=unp&ppid=RT000186&space_key=SKCPAD&utm_source=unp&utm_medium=email&utm_campaign=RT000186&utm_unptid=09b8bd50-b31d-11ef-9fd6-7b2e619a4883&cnac=US&rsta=en_US(en-US)&unptid=09b8bd50-b31d-11ef-9fd6-7b2e619a4883&calc=f8278373e34b4&unp_tpcid=requestmoney-notifications-requestee&page=main%3Aemail%3ART000186&pgrp=main%3Aemail&s=ci&mail=sys&appVersion=1.294.0&xt=145585%2C150948%2C104038&link_ref=www.paypal.com_signin&event_name=external_deep_link_processed HTTP/1.1Host: t.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=c0c49a91e6384eadbaa4a565394e21da1733426393114; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTczMzQyNjM5MzE1OSIsImwiOiIwIiwibSI6IjAifQ; l7_az=dcg15.slc; ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778; ts=vreXpYrS%3D1764962400%26vteXpYrS%3D1733428200%26vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778%26vtyp%3Dnew
Source: global traffic	HTTP traffic detected: GET /webcaptcha/ngrlCaptcha.min.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tags.js HTTP/1.1Host: ddbm2.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=c0c49a91e6384eadbaa4a565394e21da1733426393114; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTczMzQyNjM5MzE1OSIsImwiOiIwIiwibSI6IjAifQ; l7_az=dcg15.slc; ts=vreXpYrS%3D1764962393%26vteXpYrS%3D1733428193%26vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778%26vtyp%3Dnew; ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/widgets/analytics.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/view/mainContentView.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/lib/jquery-3.7.0.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /webcaptcha/grcenterprise_v3_static.html HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /webcaptcha/grcenterprise_v3_static.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pa/mi/paypal/latmconf.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /martech/tm/paypal/mktgtagmanager.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/core/nougat.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/lib/underscore-1.13.6.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/browser_modules/dustjs-linkedin/dist/dust-full.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/router.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pa/3pjs/tl/6.4.65/patleaf.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.paypal.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /martech/tm/paypal/mktconf.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.paypal.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/browser_modules/dust-makara-helpers/browser.amd.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/enterprise.js?render=6LdCCOUUAAAAAHTE-Snr6hi4HJGtJk_d1_ce-gWB&hl=en HTTP/1.1Host: www.recaptcha.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypalobjects.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/browser_modules/dusthelpers-supplement/index.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/widgets/analytics.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/view/mainContentView.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/lib/jquery-3.7.0.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/lib/underscore-1.13.6.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/lib/dustmotes-iterate.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/ HTTP/1.1Host: ddbm2.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=c0c49a91e6384eadbaa4a565394e21da1733426393114; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTczMzQyNjM5MzE1OSIsImwiOiIwIiwibSI6IjAifQ; l7_az=dcg15.slc; ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778; ts=vreXpYrS%3D1764962402%26vteXpYrS%3D1733428202%26vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778%26vtyp%3Dnew; datadome=2EmtQqjYJilU~DXymVMGM0PSTj7xPg6xpxnMifoAxb2eCAfOU9~xrKCHw0QBHLNV80ZXGNoAkLWUXjXjxVHSmJZ7bN5NgKfxUW~zsfs4Hiahu4elkwmhUpp1Lpvp95Vc
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/browser_modules/pulvus-provide/provide.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/browser_modules/dustjs-helpers/dist/dust-helpers.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/browser_modules/dust-makara-helpers/browser.amd.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ts?v=1.9.5&t=1733426405531&g=300&pgrp=main%3Aunifiedlogin%3A%3A%3Alogin&page=main%3Aunifiedlogin%3A%3A%3Alogin%3Alegacy-web-dyn&pgst=1733426393098&calc=f2110553b2e4e&nsid=GW_RscjBMue_uO0mnkc7Z8KQBUhwfX2j&rsta=en_US&pgtf=Nodejs&env=live&s=ci&ccpg=US&csci=c0c49a91e6384eadbaa4a565394e21da&comp=unifiedloginnodeweb&tsrce=unifiedloginnodeweb&cu=0&ef_policy=ccpa&xe=100353%2C106885%2C105604%2C105604%2C105351%2C101126%2C100614%2C101257%2C102153%2C104200%2C104200%2C105352%2C109195%2C104458%2C104458%2C100364%2C105999%2C100885%2C109334%2C109334%2C101270%2C102557%2C102557%2C101408%2C101408%2C104227%2C104227%2C100644%2C105124%2C100391%2C102695%2C100263%2C101031%2C100267%2C108076%2C100527%2C106031%2C106031%2C107054%2C107054%2C106033%2C106033%2C106032%2C106032%2C105392%2C105392%2C106035%2C106035%2C106034%2C106034%2C106036%2C106036%2C105271%2C110648%2C101688%2C101821%2C101820%2C102208%2C105543%2C105544%2C105416%2C105416%2C101064%2C106058%2C104778%2C103119%2C100303%2C100942%2C105553%2C105553%2C105552%2C105552%2C100304%2C105554%2C105554%2C101334%2C100572%2C101215%2C101214%2C101470%2C101216%2C103648%2C101472%2C101090%2C105698%2C102629%2C101735%2C104039%2C104039%2C104038%2C104038%2C101736%2C109931%2C110442%2C108653%2C108652%2C100846%2C109040%2C105843%2C105843%2C101875%2C105845%2C105845%2C105844%2C105844%2C109047%2C102390%2C102390%2C104571%2C104571%2C105340%2C105340%2C107263%2C107263%2C109195%2C108076%2C109047&xt=100886%2C132008%2C124899%2C124899%2C123668%2C103409%2C101617%2C104043%2C107844%2C127485%2C127485%2C123683%2C144027%2C119355%2C119355%2C103733%2C127242%2C102543%2C144768%2C144768%2C106407%2C109630%2C109630%2C104576%2C104576%2C117999%2C117999%2C101702%2C122483%2C100984%2C110241%2C100632%2C102993%2C100641%2C138090%2C101405%2C127662%2C127662%2C132781%2C132781%2C127659%2C127659%2C127666%2C127666%2C123875%2C123875%2C127651%2C127651%2C127655%2C127655%2C127648%2C127648%2C123248%2C152289%2C105645%2C106327%2C106324%2C108106%2C124626%2C124629%2C123994%2C123994%2C103105%2C127563%2C121149%2C112308%2C100722%2C113529%2C124686%2C124686%2C124682%2C124682%2C100727%2C124696%2C124696%2C104357%2C101510%2C103848%2C103847%2C104754%2C103864%2C114559%2C104762%2C103240%2C125356%2C109962%2C105856%2C120731%2C120731%2C120736%2C120736%2C105858%2C147989%2C150775%2C141151%2C141149%2C102359%2C143321%2C126375%2C126375%2C106610%2C126401%2C126401%2C126385%2C126385%2C143343%2C108797%2C108797%2C119908%2C119908%2C123611%2C123611%2C133840%2C133840%2C144027%2C138090%2C143343&obex=p2p&userRedirected=true&post_login_redirect=returnUri&ret_url=%2Fmyaccount%2Ftransfer%2FpayRequest%2FU-09584045BD498740V%2FU-5R763959NX153980F&link=unifiedlogin-login-submit&pglk=main%3Aunifiedlogin%3A%3A%3Alogin%7CbtnLogin&pgln=main%3Aunifiedlogin%3A%3A%3Alogin%3Alegacy-web-dyn%7CbtnLogin&e=cl HTTP/1.1Host: t.paypal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (K
Source: global traffic	HTTP traffic detected: GET /ts?v=1.9.5&t=1733426405534&g=300&pgrp=main%3Aunifiedlogin%3A%3A%3Alogin&page=main%3Aunifiedlogin%3A%3A%3Alogin%3Alegacy-web-dyn&pgst=1733426393098&calc=f2110553b2e4e&nsid=GW_RscjBMue_uO0mnkc7Z8KQBUhwfX2j&rsta=en_US&pgtf=Nodejs&env=live&s=ci&ccpg=US&csci=c0c49a91e6384eadbaa4a565394e21da&comp=unifiedloginnodeweb&tsrce=unifiedloginnodeweb&cu=0&ef_policy=ccpa&xe=100353%2C106885%2C105604%2C105604%2C105351%2C101126%2C100614%2C101257%2C102153%2C104200%2C104200%2C105352%2C109195%2C104458%2C104458%2C100364%2C105999%2C100885%2C109334%2C109334%2C101270%2C102557%2C102557%2C101408%2C101408%2C104227%2C104227%2C100644%2C105124%2C100391%2C102695%2C100263%2C101031%2C100267%2C108076%2C100527%2C106031%2C106031%2C107054%2C107054%2C106033%2C106033%2C106032%2C106032%2C105392%2C105392%2C106035%2C106035%2C106034%2C106034%2C106036%2C106036%2C105271%2C110648%2C101688%2C101821%2C101820%2C102208%2C105543%2C105544%2C105416%2C105416%2C101064%2C106058%2C104778%2C103119%2C100303%2C100942%2C105553%2C105553%2C105552%2C105552%2C100304%2C105554%2C105554%2C101334%2C100572%2C101215%2C101214%2C101470%2C101216%2C103648%2C101472%2C101090%2C105698%2C102629%2C101735%2C104039%2C104039%2C104038%2C104038%2C101736%2C109931%2C110442%2C108653%2C108652%2C100846%2C109040%2C105843%2C105843%2C101875%2C105845%2C105845%2C105844%2C105844%2C109047%2C102390%2C102390%2C104571%2C104571%2C105340%2C105340%2C107263%2C107263%2C109195%2C108076%2C109047&xt=100886%2C132008%2C124899%2C124899%2C123668%2C103409%2C101617%2C104043%2C107844%2C127485%2C127485%2C123683%2C144027%2C119355%2C119355%2C103733%2C127242%2C102543%2C144768%2C144768%2C106407%2C109630%2C109630%2C104576%2C104576%2C117999%2C117999%2C101702%2C122483%2C100984%2C110241%2C100632%2C102993%2C100641%2C138090%2C101405%2C127662%2C127662%2C132781%2C132781%2C127659%2C127659%2C127666%2C127666%2C123875%2C123875%2C127651%2C127651%2C127655%2C127655%2C127648%2C127648%2C123248%2C152289%2C105645%2C106327%2C106324%2C108106%2C124626%2C124629%2C123994%2C123994%2C103105%2C127563%2C121149%2C112308%2C100722%2C113529%2C124686%2C124686%2C124682%2C124682%2C100727%2C124696%2C124696%2C104357%2C101510%2C103848%2C103847%2C104754%2C103864%2C114559%2C104762%2C103240%2C125356%2C109962%2C105856%2C120731%2C120731%2C120736%2C120736%2C105858%2C147989%2C150775%2C141151%2C141149%2C102359%2C143321%2C126375%2C126375%2C106610%2C126401%2C126401%2C126385%2C126385%2C143343%2C108797%2C108797%2C119908%2C119908%2C123611%2C123611%2C133840%2C133840%2C144027%2C138090%2C143343&obex=p2p&userRedirected=true&post_login_redirect=returnUri&ret_url=%2Fmyaccount%2Ftransfer%2FpayRequest%2FU-09584045BD498740V%2FU-5R763959NX153980F&e=im&imsrc=setup&view=%7B%22t10%22%3A1437%2C%22t11%22%3A11487%2C%22tcp%22%3A5214%2C%22et%22%3A%223g%22%2C%22nt%22%3A%22navigate%22%2C%22bt%22%3A1260%7D&cd=24&sw=1280&sh=1024&dw=1280&dh=1024&bw=1280&bh=907&ce=1&t1=1437&t1c=1437&t1d=168&t1s=1226&t2=617&t3=217&t4d=0&t4=0&t4e=7221&tt=0&rdc=0&protocol=http%2F1.1&cdn=fastly&res=%7B%7D&rtt=4361 HTTP/1.1Host: t.paypal.comConnection:
Source: global traffic	HTTP traffic detected: GET /pa/3pjs/tl/6.4.65/patleaf.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /signin/client-log HTTP/1.1Host: www.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=c0c49a91e6384eadbaa4a565394e21da1733426393114; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; nsid=s%3AGW_RscjBMue_uO0mnkc7Z8KQBUhwfX2j.FFWOARB2%2BuuO26tFpElNMknNGOEOXTm%2FpBrBjPfDp7c; l7_az=dcg15.slc; ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778; tcs=main%3Aunifiedlogin%3A%3A%3Alogin%7CbtnLogin; datadome=2EmtQqjYJilU~DXymVMGM0PSTj7xPg6xpxnMifoAxb2eCAfOU9~xrKCHw0QBHLNV80ZXGNoAkLWUXjXjxVHSmJZ7bN5NgKfxUW~zsfs4Hiahu4elkwmhUpp1Lpvp95Vc; x-pp-s=eyJ0IjoiMTczMzQyNjQwNzE1MiIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1764962407%26vteXpYrS%3D1733428207%26vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778%26vtyp%3Dnew
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/css/app.css HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/browser_modules/dusthelpers-supplement/index.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/enterprise.js?render=6LdCCOUUAAAAAHTE-Snr6hi4HJGtJk_d1_ce-gWB&hl=en HTTP/1.1Host: www.recaptcha.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/lib/dustmotes-iterate.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pa/js/pa.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/modernizr-2.6.1.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/require.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /martech/tm/paypal/mktconf.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /signin HTTP/1.1Host: www.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=c0c49a91e6384eadbaa4a565394e21da1733426393114; LANG=en_US%3BUS; nsid=s%3AGW_RscjBMue_uO0mnkc7Z8KQBUhwfX2j.FFWOARB2%2BuuO26tFpElNMknNGOEOXTm%2FpBrBjPfDp7c; l7_az=dcg15.slc; ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778; tcs=main%3Aunifiedlogin%3A%3A%3Alogin%7CbtnLogin; datadome=2EmtQqjYJilU~DXymVMGM0PSTj7xPg6xpxnMifoAxb2eCAfOU9~xrKCHw0QBHLNV80ZXGNoAkLWUXjXjxVHSmJZ7bN5NgKfxUW~zsfs4Hiahu4elkwmhUpp1Lpvp95Vc; tsrce=authchallengenodeweb; x-pp-s=eyJ0IjoiMTczMzQyNjQwOTA4MiIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1764962409%26vteXpYrS%3D1733428209%26vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778%26vtyp%3Dnew
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/authchallenge.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/config.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/modernizr-2.6.1.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/app.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pa/js/pa.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/hcaptcha/hcaptcha_fph.html?siteKey=bf07db68-5c2e-42e8-8779-ea8384890eea&locale.x=en_US&country.x=US&checkConnectionTimeout=10000&domain=hcaptcha.paypal.com&imgsDomain=imgs.hcaptcha.paypal.com&assetsDomain=newassets.hcaptcha.paypal.com&accountsDomain=accounts.hcaptcha.paypal.com&customDomains= HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pa/3pjs/tl/6.4.65/patlcfg.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.paypal.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/shared/momgram@2x.png HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/css/app.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/require.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/config.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/authchallenge.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/core/nougat.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/router.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/api.js?endpoint=https%3A%2F%2Fhcaptcha.paypal.com&assethost=https%3A%2F%2Fnewassets.hcaptcha.paypal.com&imghost=https%3A%2F%2Fimgs.hcaptcha.paypal.com&sentry=false&reportapi=https%3A%2F%2Faccounts.hcaptcha.paypal.com&host=hcaptcha.paypal.com&onload=hCaptchaCallback&render=explicit&hl=en HTTP/1.1Host: hcaptcha.paypal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypalobjects.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=c0c49a91e6384eadbaa4a565394e21da1733426393114; LANG=en_US%3BUS; l7_az=dcg15.slc; ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778; tsrce=authchallengenodeweb; x-pp-s=eyJ0IjoiMTczMzQyNjQwOTA4MiIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1764962409%26vteXpYrS%3D1733428209%26vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778%26vtyp%3Dnew
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/widgets/analytics.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/app.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/opinionLab/opinionLabComponent.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pa/3pjs/tl/6.4.65/patlcfg.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /auth/logclientdata HTTP/1.1Host: www.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=c0c49a91e6384eadbaa4a565394e21da1733426393114; LANG=en_US%3BUS; nsid=s%3AGW_RscjBMue_uO0mnkc7Z8KQBUhwfX2j.FFWOARB2%2BuuO26tFpElNMknNGOEOXTm%2FpBrBjPfDp7c; l7_az=dcg15.slc; ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778; tcs=main%3Aunifiedlogin%3A%3A%3Alogin%7CbtnLogin; tsrce=authchallengenodeweb; datadome=2zSIQ6nLOyseIhoQRSN~ljKzrWXqLOG3PFrB4cQUzhceBqjeCfgVooetsKxKI34oWaTUvfSvwy_YOagypOlf4PEvJsYPbiciz7HvVuQJtF0E6p8pe5nWKIv_E8kuKWlq; ddbc=1; TLTSID=71139903928702455522704624189564; TLTDID=24394070527605051854525965496125; x-pp-s=eyJ0IjoiMTczMzQyNjQxMjg2NSIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1764962412%26vteXpYrS%3D1733428212%26vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778%26vtyp%3Dnew
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/jquery-1.12.4.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ts?v=1.9.5&t=1733426412465&g=300&pgrp=authchallengenodeweb%2Flayouts%2Fmaster.html.dust&page=authchallengenodeweb%2Flayouts%2Fmaster.html.dust&pgst=1733426408434&calc=f876809cfbf28&nsid=GW_RscjBMue_uO0mnkc7Z8KQBUhwfX2j&rsta=en_US&pgtf=Nodejs&env=live&s=ci&ccpg=US&csci=55f3ef6c8bc44e84b7b3591ab89cc647&comp=authchallengenodeweb&tsrce=unifiedloginnodeweb&cu=0&ef_policy=ccpa&xe=109541%2C107585&xt=145835%2C135393&e=im&pglk=main%3Aunifiedlogin%3A%3A%3Alogin%7CbtnLogin&imsrc=setup&view=%7B%22t10%22%3A1356%2C%22t11%22%3A6702%2C%22tcp%22%3A4567%2C%22et%22%3A%223g%22%2C%22nt%22%3A%22navigate%22%2C%22bt%22%3A153%7D&ru=https%3A%2F%2Fwww.paypal.com%2Fsignin%2F%3FreturnUri%3D%252Fmyaccount%252Ftransfer%252FpayRequest%252FU-09584045BD498740V%252FU-5R763959NX153980F%253FclassicUrl%253D%252FUS%252Fcgi-bin%252F%253Fcmd%253D_prq%26id%3DOoO85MXTLVUkAlgY4sey9A8h.NxxqjO.iYbAWg%26expId%3Dp2p%26onboardData%3D%257B%2522signUpRequest%2522%253A%257B%2522method%2522%253A%2522get%2522%252C%2522url%2522%253A%2522https%253A%252F%252Fwww.paypal.com%252Fmyaccount%252Ftransfer%252FguestLogin%252FpayRequest%252FU-09584045BD498740V%252FU-5R763959NX153980F%253FclassicUrl%253D%252FUS%252Fcgi-bin%252F%253Fcmd%253D_prq%2526id%253DOoO85MXTLVUkAlgY4sey9A8h.NxxqjO.iYbAWg%2522%257D%257D%26flowContextData%3DF7WdIOgJmH6-07KTJ7GpdWXhkdDQxLohB4l-G7vuWGaUsw9VWkH3unndZA7YlCRgtETWTIDn9hNnR_R_XfGvdxeCRkDmtXLc6qqtXR9sC3Gp-59lNBELQtpM5xEv0i4rCTpJiBcP2uf4VFrJLL1b5u1XG7JtP5TfW7CNqxSVOxEb9_duKrmtDgpztBtl32bVeoc8BgW5poXyk9lJHcKrYdvBHSdT0mosqrrmaGj2a5uNQdBK70Mwpn9Zddmj0KI1GIZrXWvFcpnuRbvbli2inkizkeV4nR1uyKnBSzFqdPDcK4t7K9B6YiFhb5sS8DaQd7F6oWzSe-J8gPxVURmdwwOxFn1ycN09t9caUdBz1XMuv96GDJywuv2feJdoAI73PNjro1a2cFEKAWnCgtoHqxdBD3A1mVV3OiytkjtEUDdvp0GL3CNOAV9zIrunX_DmbTO6KOe21dniBkeG%26v%3D1%26utm_source%3Dunp%26utm_medium%3Demail%26utm_campaign%3DRT000186%26utm_unptid%3D09b8bd50-b31d-11ef-9fd6-7b2e619a4883%26ppid%3DRT000186%26cnac%3DUS%26rsta%3Den_US%2528en-US%2529%26unptid%3D09b8bd50-b31d-11ef-9fd6-7b2e619a4883%26calc%3Df8278373e34b4%26unp_tpcid%3Drequestmoney-notifications-requestee%26page%3Dmain%253Aemail%253ART000186%26pgrp%3Dmain%253Aemail%26e%3Dcl%26mchn%3Dem%26s%3Dci%26mail%3Dsys%26appVersion%3D1.294.0%26tenant_name%3D%26xt%3D145585%252C150948%252C104038%26link_ref%3Dwww.paypal.com_signin&cd=24&sw=1280&sh=1024&dw=1280&dh=1024&bw=1280&bh=907&ce=1&t1=1356&t1c=1356&t1d=0&t1s=1349&t2=588&t3=49&t4d=0&t4=0&t4e=3538&tt=0&rdc=0&protocol=http%2F1.1&res=%7B%7D HTTP/1.1Host: t.paypal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.paypal.com/signinAccept-Encoding: gzip, deflate, brAccept-Language: en-US,e
Source: global traffic	HTTP traffic detected: GET /images/shared/momgram@2x.png HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/underscore-1.13.4.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/core/nougat.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/dust-core.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /signin HTTP/1.1Host: www.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=c0c49a91e6384eadbaa4a565394e21da1733426393114; LANG=en_US%3BUS; nsid=s%3AGW_RscjBMue_uO0mnkc7Z8KQBUhwfX2j.FFWOARB2%2BuuO26tFpElNMknNGOEOXTm%2FpBrBjPfDp7c; l7_az=dcg15.slc; ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778; tsrce=authchallengenodeweb; datadome=2zSIQ6nLOyseIhoQRSN~ljKzrWXqLOG3PFrB4cQUzhceBqjeCfgVooetsKxKI34oWaTUvfSvwy_YOagypOlf4PEvJsYPbiciz7HvVuQJtF0E6p8pe5nWKIv_E8kuKWlq; ddbc=1; TLTSID=71139903928702455522704624189564; TLTDID=24394070527605051854525965496125; x-pp-s=eyJ0IjoiMTczMzQyNjQxNDgzNSIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1764962414%26vteXpYrS%3D1733428214%26vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778%26vtyp%3Dnew
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/router.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/api.js?endpoint=https%3A%2F%2Fhcaptcha.paypal.com&assethost=https%3A%2F%2Fnewassets.hcaptcha.paypal.com&imghost=https%3A%2F%2Fimgs.hcaptcha.paypal.com&sentry=false&reportapi=https%3A%2F%2Faccounts.hcaptcha.paypal.com&host=hcaptcha.paypal.com&onload=hCaptchaCallback&render=explicit&hl=en HTTP/1.1Host: hcaptcha.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=c0c49a91e6384eadbaa4a565394e21da1733426393114; LANG=en_US%3BUS; l7_az=dcg15.slc; ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778; tsrce=authchallengenodeweb; datadome=2zSIQ6nLOyseIhoQRSN~ljKzrWXqLOG3PFrB4cQUzhceBqjeCfgVooetsKxKI34oWaTUvfSvwy_YOagypOlf4PEvJsYPbiciz7HvVuQJtF0E6p8pe5nWKIv_E8kuKWlq; TLTSID=71139903928702455522704624189564; TLTDID=24394070527605051854525965496125; x-pp-s=eyJ0IjoiMTczMzQyNjQxNDgzNSIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1764962414%26vteXpYrS%3D1733428214%26vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778%26vtyp%3Dnew
Source: global traffic	HTTP traffic detected: GET /ts?v=1.9.5&t=1733426412465&g=300&pgrp=authchallengenodeweb%2Flayouts%2Fmaster.html.dust&page=authchallengenodeweb%2Flayouts%2Fmaster.html.dust&pgst=1733426408434&calc=f876809cfbf28&nsid=GW_RscjBMue_uO0mnkc7Z8KQBUhwfX2j&rsta=en_US&pgtf=Nodejs&env=live&s=ci&ccpg=US&csci=55f3ef6c8bc44e84b7b3591ab89cc647&comp=authchallengenodeweb&tsrce=unifiedloginnodeweb&cu=0&ef_policy=ccpa&xe=109541%2C107585&xt=145835%2C135393&e=im&pglk=main%3Aunifiedlogin%3A%3A%3Alogin%7CbtnLogin&imsrc=setup&view=%7B%22t10%22%3A1356%2C%22t11%22%3A6702%2C%22tcp%22%3A4567%2C%22et%22%3A%223g%22%2C%22nt%22%3A%22navigate%22%2C%22bt%22%3A153%7D&ru=https%3A%2F%2Fwww.paypal.com%2Fsignin%2F%3FreturnUri%3D%252Fmyaccount%252Ftransfer%252FpayRequest%252FU-09584045BD498740V%252FU-5R763959NX153980F%253FclassicUrl%253D%252FUS%252Fcgi-bin%252F%253Fcmd%253D_prq%26id%3DOoO85MXTLVUkAlgY4sey9A8h.NxxqjO.iYbAWg%26expId%3Dp2p%26onboardData%3D%257B%2522signUpRequest%2522%253A%257B%2522method%2522%253A%2522get%2522%252C%2522url%2522%253A%2522https%253A%252F%252Fwww.paypal.com%252Fmyaccount%252Ftransfer%252FguestLogin%252FpayRequest%252FU-09584045BD498740V%252FU-5R763959NX153980F%253FclassicUrl%253D%252FUS%252Fcgi-bin%252F%253Fcmd%253D_prq%2526id%253DOoO85MXTLVUkAlgY4sey9A8h.NxxqjO.iYbAWg%2522%257D%257D%26flowContextData%3DF7WdIOgJmH6-07KTJ7GpdWXhkdDQxLohB4l-G7vuWGaUsw9VWkH3unndZA7YlCRgtETWTIDn9hNnR_R_XfGvdxeCRkDmtXLc6qqtXR9sC3Gp-59lNBELQtpM5xEv0i4rCTpJiBcP2uf4VFrJLL1b5u1XG7JtP5TfW7CNqxSVOxEb9_duKrmtDgpztBtl32bVeoc8BgW5poXyk9lJHcKrYdvBHSdT0mosqrrmaGj2a5uNQdBK70Mwpn9Zddmj0KI1GIZrXWvFcpnuRbvbli2inkizkeV4nR1uyKnBSzFqdPDcK4t7K9B6YiFhb5sS8DaQd7F6oWzSe-J8gPxVURmdwwOxFn1ycN09t9caUdBz1XMuv96GDJywuv2feJdoAI73PNjro1a2cFEKAWnCgtoHqxdBD3A1mVV3OiytkjtEUDdvp0GL3CNOAV9zIrunX_DmbTO6KOe21dniBkeG%26v%3D1%26utm_source%3Dunp%26utm_medium%3Demail%26utm_campaign%3DRT000186%26utm_unptid%3D09b8bd50-b31d-11ef-9fd6-7b2e619a4883%26ppid%3DRT000186%26cnac%3DUS%26rsta%3Den_US%2528en-US%2529%26unptid%3D09b8bd50-b31d-11ef-9fd6-7b2e619a4883%26calc%3Df8278373e34b4%26unp_tpcid%3Drequestmoney-notifications-requestee%26page%3Dmain%253Aemail%253ART000186%26pgrp%3Dmain%253Aemail%26e%3Dcl%26mchn%3Dem%26s%3Dci%26mail%3Dsys%26appVersion%3D1.294.0%26tenant_name%3D%26xt%3D145585%252C150948%252C104038%26link_ref%3Dwww.paypal.com_signin&cd=24&sw=1280&sh=1024&dw=1280&dh=1024&bw=1280&bh=907&ce=1&t1=1356&t1c=1356&t1d=0&t1s=1349&t2=588&t3=49&t4d=0&t4=0&t4e=3538&tt=0&rdc=0&protocol=http%2F1.1&res=%7B%7D HTTP/1.1Host: t.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=c0c49a91e6384eadbaa4a565394e21da1733426393114; LANG=en_US%3BUS; l7_az=dcg15.slc; ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778; tsrce=authcha
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/opinionLab/opinionLab.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/opinionLab/onlineOpinionPopup.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/core/baseView.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/opinionLab/opinionLabComponent.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /captcha/v1/d136a52/static/hcaptcha.html HTTP/1.1Host: newassets.hcaptcha.paypal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.paypalobjects.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=c0c49a91e6384eadbaa4a565394e21da1733426393114; LANG=en_US%3BUS; l7_az=dcg15.slc; ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778; tsrce=authchallengenodeweb; x-pp-s=eyJ0IjoiMTczMzQyNjQxNDgzNSIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1764962414%26vteXpYrS%3D1733428214%26vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778%26vtyp%3Dnew
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/widgets/analytics.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/jquery-1.12.4.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/underscore-1.13.4.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/dust-core.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /auth/logclientdata HTTP/1.1Host: www.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=c0c49a91e6384eadbaa4a565394e21da1733426393114; LANG=en_US%3BUS; nsid=s%3AGW_RscjBMue_uO0mnkc7Z8KQBUhwfX2j.FFWOARB2%2BuuO26tFpElNMknNGOEOXTm%2FpBrBjPfDp7c; l7_az=dcg15.slc; ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778; tsrce=authchallengenodeweb; ddbc=1; TLTSID=71139903928702455522704624189564; TLTDID=24394070527605051854525965496125; datadome=buJ29aABw9ywhcwsxLedKnsC4BAmLRyJrGVvMBQoK~J0j0xnjOkH7nUpkES4yULXec_bkkBjWn~DdWPkGMh7Bdg7HO475FpNdpN2VKAqG6qmkS5tul3JkYU8x_vn1Pe1; x-pp-s=eyJ0IjoiMTczMzQyNjQxNjgwNiIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1764962416%26vteXpYrS%3D1733428216%26vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778%26vtyp%3Dnew
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/backbone-1.5.0.min.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/dust-helpers.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/opinionLab/onlineOpinionPopup.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/opinionLab/opinionLab.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/core/baseView.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /auth/logclientdata HTTP/1.1Host: www.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=c0c49a91e6384eadbaa4a565394e21da1733426393114; LANG=en_US%3BUS; nsid=s%3AGW_RscjBMue_uO0mnkc7Z8KQBUhwfX2j.FFWOARB2%2BuuO26tFpElNMknNGOEOXTm%2FpBrBjPfDp7c; l7_az=dcg15.slc; ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778; tsrce=authchallengenodeweb; ddbc=1; TLTSID=71139903928702455522704624189564; TLTDID=24394070527605051854525965496125; datadome=buJ29aABw9ywhcwsxLedKnsC4BAmLRyJrGVvMBQoK~J0j0xnjOkH7nUpkES4yULXec_bkkBjWn~DdWPkGMh7Bdg7HO475FpNdpN2VKAqG6qmkS5tul3JkYU8x_vn1Pe1; ts=vreXpYrS%3D1764962416%26vteXpYrS%3D1733428216%26vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778%26vtyp%3Dnew; x-pp-s=eyJ0IjoiMTczMzQyNjQxNjgxMCIsImwiOiIwIiwibSI6IjAifQ
Source: global traffic	HTTP traffic detected: GET /signin HTTP/1.1Host: www.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=c0c49a91e6384eadbaa4a565394e21da1733426393114; LANG=en_US%3BUS; nsid=s%3AGW_RscjBMue_uO0mnkc7Z8KQBUhwfX2j.FFWOARB2%2BuuO26tFpElNMknNGOEOXTm%2FpBrBjPfDp7c; l7_az=dcg15.slc; ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778; tsrce=authchallengenodeweb; ddbc=1; TLTSID=71139903928702455522704624189564; TLTDID=24394070527605051854525965496125; datadome=buJ29aABw9ywhcwsxLedKnsC4BAmLRyJrGVvMBQoK~J0j0xnjOkH7nUpkES4yULXec_bkkBjWn~DdWPkGMh7Bdg7HO475FpNdpN2VKAqG6qmkS5tul3JkYU8x_vn1Pe1; x-pp-s=eyJ0IjoiMTczMzQyNjQxODYxNyIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1764962418%26vteXpYrS%3D1733428218%26vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778%26vtyp%3Dnew
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/dust-helpers-supplement.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/dust-helpers.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /checksiteconfig?v=d136a52&host=hcaptcha.paypal.com&sitekey=bf07db68-5c2e-42e8-8779-ea8384890eea&sc=1&swa=1&spst=1 HTTP/1.1Host: hcaptcha.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=c0c49a91e6384eadbaa4a565394e21da1733426393114; LANG=en_US%3BUS; l7_az=dcg15.slc; ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778; tsrce=authchallengenodeweb; TLTSID=71139903928702455522704624189564; TLTDID=24394070527605051854525965496125; datadome=buJ29aABw9ywhcwsxLedKnsC4BAmLRyJrGVvMBQoK~J0j0xnjOkH7nUpkES4yULXec_bkkBjWn~DdWPkGMh7Bdg7HO475FpNdpN2VKAqG6qmkS5tul3JkYU8x_vn1Pe1; x-pp-s=eyJ0IjoiMTczMzQyNjQxODYxNyIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1764962418%26vteXpYrS%3D1733428218%26vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778%26vtyp%3Dnew
Source: global traffic	HTTP traffic detected: GET /c/cc9cbcc44893d9601186ed793b76ac72a56a3e176be51252819b38f7d2f1f97c/hsw.js HTTP/1.1Host: newassets.hcaptcha.paypal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://newassets.hcaptcha.paypal.com/captcha/v1/d136a52/static/hcaptcha.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=c0c49a91e6384eadbaa4a565394e21da1733426393114; LANG=en_US%3BUS; l7_az=dcg15.slc; ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778; tsrce=authchallengenodeweb; x-pp-s=eyJ0IjoiMTczMzQyNjQxODYxNyIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1764962418%26vteXpYrS%3D1733428218%26vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778%26vtyp%3Dnew
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/backbone-1.5.0.min.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /platform/tealeaftarget HTTP/1.1Host: www.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=c0c49a91e6384eadbaa4a565394e21da1733426393114; LANG=en_US%3BUS; nsid=s%3AGW_RscjBMue_uO0mnkc7Z8KQBUhwfX2j.FFWOARB2%2BuuO26tFpElNMknNGOEOXTm%2FpBrBjPfDp7c; l7_az=dcg15.slc; ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778; tsrce=authchallengenodeweb; ddbc=1; TLTSID=71139903928702455522704624189564; TLTDID=24394070527605051854525965496125; datadome=buJ29aABw9ywhcwsxLedKnsC4BAmLRyJrGVvMBQoK~J0j0xnjOkH7nUpkES4yULXec_bkkBjWn~DdWPkGMh7Bdg7HO475FpNdpN2VKAqG6qmkS5tul3JkYU8x_vn1Pe1; x-pp-s=eyJ0IjoiMTczMzQyNjQxODYxNyIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1764962420%26vteXpYrS%3D1733428220%26vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778%26vtyp%3Dnew
Source: global traffic	HTTP traffic detected: GET /signin HTTP/1.1Host: www.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=c0c49a91e6384eadbaa4a565394e21da1733426393114; LANG=en_US%3BUS; nsid=s%3AGW_RscjBMue_uO0mnkc7Z8KQBUhwfX2j.FFWOARB2%2BuuO26tFpElNMknNGOEOXTm%2FpBrBjPfDp7c; l7_az=dcg15.slc; ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778; tsrce=authchallengenodeweb; ddbc=1; TLTSID=71139903928702455522704624189564; TLTDID=24394070527605051854525965496125; ts=vreXpYrS%3D1764962420%26vteXpYrS%3D1733428220%26vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778%26vtyp%3Dnew; datadome=zlCfnW4VK7jZ4nx3Wxq6AKd3Z_~7eyMfMhlNSkGMKu3K4trVcOiYHsbYXb5G7_4qFcXjIsA74xDGn6O_IMMYA5IGahByNnX~gFFzwtJcfNQpoB~xxgh~HvIFEFRl24fv; x-pp-s=eyJ0IjoiMTczMzQyNjQyMDQwMiIsImwiOiIwIiwibSI6IjAifQ
Source: global traffic	HTTP traffic detected: GET /ts?v=1.9.5&t=1733426420899&g=300&page=main%3Aauthchallenge%3A%3Asignin&pgst=1733426408434&calc=f876809cfbf28&nsid=GW_RscjBMue_uO0mnkc7Z8KQBUhwfX2j&rsta=en_US&pgtf=Nodejs&env=live&s=ci&ccpg=US&csci=55f3ef6c8bc44e84b7b3591ab89cc647&comp=authchallengenodeweb&tsrce=unifiedloginnodeweb&cu=0&ef_policy=ccpa&xe=109541%2C107585&xt=145835%2C135393&view=%7B%22t10%22%3A0%2C%22t11%22%3A10703%2C%22nt%22%3A%22manual%22%7D&ads_client_data=Navigator(appCodeName%3DMozilla%7CappName%3DNetscape%7CappVersion%3D5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%7CuserAgent%3DMozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%7Cwebdriverfalse%7CdeviceMemory8%7Cgeolocation(Available)%7Clanguage%3Den-US%7ConLine%3Dtrue%7Cplatform%3DWin32%7Cproduct%3DGecko)%7CHistory(2)%7Cscreen(1280%2C1024%2C1280%2C984%2C24%2C24)%7Cwindow(Width%3D1280%7Cheight%3D907%7CmozRTCPeerConnection%3Dundefined%7CChrome%3D%5Bobject%20Object%5D%7CcallPhantom%3Dundefined%7C_phantom%3Dundefined%7Cstr%3Dundefined%7Clength%3D1%7CdevicePixelRatio%3D1)%7CloginPresent(false)%7CloginTitle()%7Creferrer(https%3A%2F%2Fwww.paypal.com%2Fsignin%2F%3FreturnUri%3D%252Fmyaccount%252Ftransfer%252FpayRequest%252FU-09584045BD498740V%252FU-5R763959NX153980F%253FclassicUrl%253D%252FUS%252Fcgi-bin%252F%253Fcmd%253D_prq%26id%3DOoO85MXTLVUkAlgY4sey9A8h.NxxqjO.iYbAWg%26expId%3Dp2p%26onboardData%3D%257B%2522signUpRequest%2522%253A%257B%2522method%2522%253A%2522get%2522%252C%2522url%2522%253A%2522https%253A%252F%252Fwww.paypal.com%252Fmyaccount%252Ftransfer%252FguestLogin%252FpayRequest%252FU-09584045BD498740V%252FU-5R763959NX153980F%253FclassicUrl%253D%252FUS%252Fcgi-bin%252F%253Fcmd%253D_prq%2526id%253DOoO85MXTLVUkAlgY4sey9A8h.NxxqjO.iYbAWg%2522%257D%257D%26flowContextData%3DF7WdIOgJmH6-07KTJ7GpdWXhkdDQxLohB4l-G7vuWGaUsw9VWkH3unndZA7YlCRgtETWTIDn9hNnR_R_XfGvdxeCRkDmtXLc6qqtXR9sC3Gp-59lNBELQtpM5xEv0i4rCTpJiBcP2uf4VFrJLL1b5u1XG7JtP5TfW7CNqxSVOxEb9_duKrmtDgpztBtl32bVeoc8BgW5poXyk9lJHcKrYdvBHSdT0mosqrrmaGj2a5uNQdBK70Mwpn9Zddmj0KI1GIZrXWvFcpnuRbvbli2inkizkeV4nR1uyKnBSzFqdPDcK4t7K9B6YiFhb5sS8DaQd7F6oWzSe-J8gPxVURmdwwOxFn1ycN09t9caUdBz1XMuv96GDJywuv2feJdoAI73PNjro1a2cFEKAWnCgtoHqxdBD3A1mVV3OiytkjtEUDdvp0GL3CNOAV9zIrunX_DmbTO6KOe21dniBkeG%26v%3D1%26utm_source%3Dunp%26utm_medium%3Demail%26utm_campaign%3DRT000186%26utm_unptid%3D09b8bd50-b31d-11ef-9fd6-7b2e619a4883%26ppid%3DRT000186%26cnac%3DUS%26rsta%3Den_US%2528en-US%2529%26unptid%3D09b8bd50-b31d-11ef-9fd6-7b2e619a4883%26calc%3Df8278373e34b4%26unp_tpcid%3Drequestmoney-notifications-requestee%26page%3Dmain%253Aemail%253ART000186%26pgrp%3Dmain%253Aemail%26e%3Dcl%26mchn%3Dem%26s%3Dci%26mail%3Dsys%26appVersion%3D1.294.0%26tenant_name%3D%26xt%3D145585%252C150948%252C104038%26link_ref%3Dwww.paypal.com_signin)%7Cplugins%3A(PDF%20Viewer%20%7C%20internal-pdf-viewer%20%7C%20Portable%20Document%20Format%20%7C
Source: global traffic	HTTP traffic detected: GET /error?code=404&ref=tealeaf HTTP/1.1Host: www.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=c0c49a91e6384eadbaa4a565394e21da1733426393114; LANG=en_US%3BUS; nsid=s%3AGW_RscjBMue_uO0mnkc7Z8KQBUhwfX2j.FFWOARB2%2BuuO26tFpElNMknNGOEOXTm%2FpBrBjPfDp7c; l7_az=dcg15.slc; ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778; tsrce=authchallengenodeweb; ddbc=1; TLTSID=71139903928702455522704624189564; TLTDID=24394070527605051854525965496125; datadome=zlCfnW4VK7jZ4nx3Wxq6AKd3Z_~7eyMfMhlNSkGMKu3K4trVcOiYHsbYXb5G7_4qFcXjIsA74xDGn6O_IMMYA5IGahByNnX~gFFzwtJcfNQpoB~xxgh~HvIFEFRl24fv; x-pp-s=eyJ0IjoiMTczMzQyNjQyMDQwMiIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1764962421%26vteXpYrS%3D1733428221%26vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778%26vtyp%3Dnew
Source: global traffic	HTTP traffic detected: GET /en_US/i/icon/pp_favicon_x.ico HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/view/authcaptcha.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/dust-helpers-supplement.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c/cc9cbcc44893d9601186ed793b76ac72a56a3e176be51252819b38f7d2f1f97c/hsw.js HTTP/1.1Host: newassets.hcaptcha.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=c0c49a91e6384eadbaa4a565394e21da1733426393114; LANG=en_US%3BUS; l7_az=dcg15.slc; ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778; tsrce=authchallengenodeweb; TLTSID=71139903928702455522704624189564; TLTDID=24394070527605051854525965496125; x-pp-s=eyJ0IjoiMTczMzQyNjQyMDQwMiIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1764962421%26vteXpYrS%3D1733428221%26vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778%26vtyp%3Dnew; datadome=bM~ynBB3bJdLhO16FWg6WKMgmd5XU0mXJDQI5ziGzzaWLLOXMcHObFQdtk_iaOLGL7P8__KdrpkLbWBika1h5rB8Gf~tT1jd~AoCxYQ2IGD0IVgVDDCNYZg3ZjqvvJUH
Source: global traffic	HTTP traffic detected: GET /ts?v=1.9.5&t=1733426420899&g=300&page=main%3Aauthchallenge%3A%3Asignin&pgst=1733426408434&calc=f876809cfbf28&nsid=GW_RscjBMue_uO0mnkc7Z8KQBUhwfX2j&rsta=en_US&pgtf=Nodejs&env=live&s=ci&ccpg=US&csci=55f3ef6c8bc44e84b7b3591ab89cc647&comp=authchallengenodeweb&tsrce=unifiedloginnodeweb&cu=0&ef_policy=ccpa&xe=109541%2C107585&xt=145835%2C135393&view=%7B%22t10%22%3A0%2C%22t11%22%3A10703%2C%22nt%22%3A%22manual%22%7D&ads_client_data=Navigator(appCodeName%3DMozilla%7CappName%3DNetscape%7CappVersion%3D5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%7CuserAgent%3DMozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%7Cwebdriverfalse%7CdeviceMemory8%7Cgeolocation(Available)%7Clanguage%3Den-US%7ConLine%3Dtrue%7Cplatform%3DWin32%7Cproduct%3DGecko)%7CHistory(2)%7Cscreen(1280%2C1024%2C1280%2C984%2C24%2C24)%7Cwindow(Width%3D1280%7Cheight%3D907%7CmozRTCPeerConnection%3Dundefined%7CChrome%3D%5Bobject%20Object%5D%7CcallPhantom%3Dundefined%7C_phantom%3Dundefined%7Cstr%3Dundefined%7Clength%3D1%7CdevicePixelRatio%3D1)%7CloginPresent(false)%7CloginTitle()%7Creferrer(https%3A%2F%2Fwww.paypal.com%2Fsignin%2F%3FreturnUri%3D%252Fmyaccount%252Ftransfer%252FpayRequest%252FU-09584045BD498740V%252FU-5R763959NX153980F%253FclassicUrl%253D%252FUS%252Fcgi-bin%252F%253Fcmd%253D_prq%26id%3DOoO85MXTLVUkAlgY4sey9A8h.NxxqjO.iYbAWg%26expId%3Dp2p%26onboardData%3D%257B%2522signUpRequest%2522%253A%257B%2522method%2522%253A%2522get%2522%252C%2522url%2522%253A%2522https%253A%252F%252Fwww.paypal.com%252Fmyaccount%252Ftransfer%252FguestLogin%252FpayRequest%252FU-09584045BD498740V%252FU-5R763959NX153980F%253FclassicUrl%253D%252FUS%252Fcgi-bin%252F%253Fcmd%253D_prq%2526id%253DOoO85MXTLVUkAlgY4sey9A8h.NxxqjO.iYbAWg%2522%257D%257D%26flowContextData%3DF7WdIOgJmH6-07KTJ7GpdWXhkdDQxLohB4l-G7vuWGaUsw9VWkH3unndZA7YlCRgtETWTIDn9hNnR_R_XfGvdxeCRkDmtXLc6qqtXR9sC3Gp-59lNBELQtpM5xEv0i4rCTpJiBcP2uf4VFrJLL1b5u1XG7JtP5TfW7CNqxSVOxEb9_duKrmtDgpztBtl32bVeoc8BgW5poXyk9lJHcKrYdvBHSdT0mosqrrmaGj2a5uNQdBK70Mwpn9Zddmj0KI1GIZrXWvFcpnuRbvbli2inkizkeV4nR1uyKnBSzFqdPDcK4t7K9B6YiFhb5sS8DaQd7F6oWzSe-J8gPxVURmdwwOxFn1ycN09t9caUdBz1XMuv96GDJywuv2feJdoAI73PNjro1a2cFEKAWnCgtoHqxdBD3A1mVV3OiytkjtEUDdvp0GL3CNOAV9zIrunX_DmbTO6KOe21dniBkeG%26v%3D1%26utm_source%3Dunp%26utm_medium%3Demail%26utm_campaign%3DRT000186%26utm_unptid%3D09b8bd50-b31d-11ef-9fd6-7b2e619a4883%26ppid%3DRT000186%26cnac%3DUS%26rsta%3Den_US%2528en-US%2529%26unptid%3D09b8bd50-b31d-11ef-9fd6-7b2e619a4883%26calc%3Df8278373e34b4%26unp_tpcid%3Drequestmoney-notifications-requestee%26page%3Dmain%253Aemail%253ART000186%26pgrp%3Dmain%253Aemail%26e%3Dcl%26mchn%3Dem%26s%3Dci%26mail%3Dsys%26appVersion%3D1.294.0%26tenant_name%3D%26xt%3D145585%252C150948%252C104038%26link_ref%3Dwww.paypal.com_signin)%7Cplugins%3A(PDF%20Viewer%20%7C%20internal-pdf-viewer%20%7C%20Portable%20Document%20Format%20%7C
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/view/pageView.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/widgets/validation.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/view/authcaptcha.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/widgets/errorDisplay.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en_US/i/icon/pp_favicon_x.ico HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/widgets/validation.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/view/pageView.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/widgets/errorDisplay.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /platform/tealeaftarget HTTP/1.1Host: www.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookie_check=yes; d_id=c0c49a91e6384eadbaa4a565394e21da1733426393114; LANG=en_US%3BUS; nsid=s%3AGW_RscjBMue_uO0mnkc7Z8KQBUhwfX2j.FFWOARB2%2BuuO26tFpElNMknNGOEOXTm%2FpBrBjPfDp7c; ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778; tsrce=authchallengenodeweb; ddbc=1; TLTDID=24394070527605051854525965496125; datadome=bM~ynBB3bJdLhO16FWg6WKMgmd5XU0mXJDQI5ziGzzaWLLOXMcHObFQdtk_iaOLGL7P8__KdrpkLbWBika1h5rB8Gf~tT1jd~AoCxYQ2IGD0IVgVDDCNYZg3ZjqvvJUH; navcmd=_home; consumer_display=USER_HOMEPAGE%3d0%26USER_TARGETPAGE%3d0%26USER_FILTER_CHOICE%3d0%26BALANCE_MODULE_STATE%3d1%26GIFT_BALANCE_MODULE_STATE%3d1%26LAST_SELECTED_ALIAS_ID%3d0%26SELLING_GROUP%3d1%26PAYMENT_AND_RISK_GROUP%3d1%26SHIPPING_GROUP%3d1%26HOME_VERSION%3d1733512824%26MCE2_ELIGIBILITY%3d4294967295; KHcl0EuY7AKSMgfvHl7J5E7hPtK=e8Aybs6oslr-bMqe7Sys4NhzhKpzEuSdnyUDbASsROZPnCvHiWh4vm5ZjAaQ2Qpb8b_2_tcve-m3ViPb; navlns=0.0; cwrClyrK4LoCV1fydGbAxiNL6iG=HQRPk1eznmxkJQ0Lij4aVU8K90Nv6O0-kArU-_XmowhjYl5mYt3HUTkd0ay7I_f1ciUI1SfUoKw50iKNBv5Rl2kqO_s-CM6dnNSaks4pTUFS8MGhVTFs7J_1IBYCsQ5aTjQPX-StBUTbLtrsCh3ItqSKWS3iNKCbgnFtxxz6PzmZnnHcaii2Xn7VyMhjH0v5ruWAQpQSx6X7E968XSz_WjaowAUX_IdrkXB_yV3gI7YRCjpCWqDFCBWFv7yo6GRHz4HJq7bSJwdNF8bRLMBVk3Ve6sDnMdbC7e6SwgapT7n6qjQzmd1beuAYTrrp-srARyi-ZHfK45JC41xdeZidOAWgfKSVoH_Xl7XBd3GeycqlEQcHdQVzFS1hwZu0-9yp8tITGN-8qv21pRG0pekmR3BCek3-JYjRVSV97batBaqoPWnjuLGFUOPIaZe; x-pp-s=eyJ0IjoiMTczMzQyNjQyNDk1NiIsImwiOiIwIiwibSI6IjAifQ; l7_az=dcg01.phx; ts=vreXpYrS%3D1764962442%26vteXpYrS%3D1733428242%26vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778%26vtyp%3Dnew
Source: global traffic	HTTP traffic detected: GET /error?code=404&ref=tealeaf HTTP/1.1Host: www.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookie_check=yes; d_id=c0c49a91e6384eadbaa4a565394e21da1733426393114; LANG=en_US%3BUS; nsid=s%3AGW_RscjBMue_uO0mnkc7Z8KQBUhwfX2j.FFWOARB2%2BuuO26tFpElNMknNGOEOXTm%2FpBrBjPfDp7c; ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778; tsrce=authchallengenodeweb; ddbc=1; TLTDID=24394070527605051854525965496125; datadome=bM~ynBB3bJdLhO16FWg6WKMgmd5XU0mXJDQI5ziGzzaWLLOXMcHObFQdtk_iaOLGL7P8__KdrpkLbWBika1h5rB8Gf~tT1jd~AoCxYQ2IGD0IVgVDDCNYZg3ZjqvvJUH; navcmd=_home; consumer_display=USER_HOMEPAGE%3d0%26USER_TARGETPAGE%3d0%26USER_FILTER_CHOICE%3d0%26BALANCE_MODULE_STATE%3d1%26GIFT_BALANCE_MODULE_STATE%3d1%26LAST_SELECTED_ALIAS_ID%3d0%26SELLING_GROUP%3d1%26PAYMENT_AND_RISK_GROUP%3d1%26SHIPPING_GROUP%3d1%26HOME_VERSION%3d1733512824%26MCE2_ELIGIBILITY%3d4294967295; KHcl0EuY7AKSMgfvHl7J5E7hPtK=e8Aybs6oslr-bMqe7Sys4NhzhKpzEuSdnyUDbASsROZPnCvHiWh4vm5ZjAaQ2Qpb8b_2_tcve-m3ViPb; navlns=0.0; cwrClyrK4LoCV1fydGbAxiNL6iG=HQRPk1eznmxkJQ0Lij4aVU8K90Nv6O0-kArU-_XmowhjYl5mYt3HUTkd0ay7I_f1ciUI1SfUoKw50iKNBv5Rl2kqO_s-CM6dnNSaks4pTUFS8MGhVTFs7J_1IBYCsQ5aTjQPX-StBUTbLtrsCh3ItqSKWS3iNKCbgnFtxxz6PzmZnnHcaii2Xn7VyMhjH0v5ruWAQpQSx6X7E968XSz_WjaowAUX_IdrkXB_yV3gI7YRCjpCWqDFCBWFv7yo6GRHz4HJq7bSJwdNF8bRLMBVk3Ve6sDnMdbC7e6SwgapT7n6qjQzmd1beuAYTrrp-srARyi-ZHfK45JC41xdeZidOAWgfKSVoH_Xl7XBd3GeycqlEQcHdQVzFS1hwZu0-9yp8tITGN-8qv21pRG0pekmR3BCek3-JYjRVSV97batBaqoPWnjuLGFUOPIaZe; x-pp-s=eyJ0IjoiMTczMzQyNjQyNDk1NiIsImwiOiIwIiwibSI6IjAifQ; l7_az=dcg01.phx; ts=vreXpYrS%3D1764962444%26vteXpYrS%3D1733428244%26vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778%26vtyp%3Dnew

Source: chromecache_217.2.dr, chromecache_178.2.dr

String found in binary or memory: 'host': 'www.facebook.com', equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.paypal.com
Source: global traffic	DNS traffic detected: DNS query: ddbm2.paypal.com
Source: global traffic	DNS traffic detected: DNS query: www.paypalobjects.com
Source: global traffic	DNS traffic detected: DNS query: t.paypal.com
Source: global traffic	DNS traffic detected: DNS query: www.recaptcha.net
Source: global traffic	DNS traffic detected: DNS query: hcaptcha.paypal.com
Source: global traffic	DNS traffic detected: DNS query: newassets.hcaptcha.paypal.com

Source: unknown

HTTP traffic detected: POST /js/ HTTP/1.1Host: ddbm2.paypal.comConnection: keep-aliveContent-Length: 5845sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Content-type: application/x-www-form-urlencodedX-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.paypal.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.paypal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenConnection: closeContent-Length: 708Content-Type: text/html;charset=utf-8Server: DataDomeX-DataDome: protectedAccept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-MemoryCharset: utf-8Cache-Control: max-age=0, private, no-cache, no-store, must-revalidatePragma: no-cacheAccess-Control-Allow-Credentials: trueAccess-Control-Expose-Headers: x-dd-b, x-set-cookieAccess-Control-Allow-Origin: *X-DataDome-CID: AHrlqAAAAAMAg8WuNM8BK3AACC575A==X-DD-B: 1Set-Cookie: datadome=2zSIQ6nLOyseIhoQRSN~ljKzrWXqLOG3PFrB4cQUzhceBqjeCfgVooetsKxKI34oWaTUvfSvwy_YOagypOlf4PEvJsYPbiciz7HvVuQJtF0E6p8pe5nWKIv_E8kuKWlq; Max-Age=2592000; Domain=.paypal.com; Path=/; Secure; SameSite=LaxAccept-Ranges: bytesDate: Thu, 05 Dec 2024 19:20:10 GMTVia: 1.1 varnishPaypal-Debug-Id: f9692415ad784Strict-Transport-Security: max-age=63072000; includeSubDomains; preloadX-Served-By: cache-nyc-kteb1890096-NYCX-Cache: MISSX-Cache-Hits: 0X-Timer: S1733426411.805358,VS0,VE18set-cookie: ddbc=1; secure; httponlyServer-Timing: content-encoding;desc="",x-cdn;desc="fastly"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenConnection: closeContent-Length: 708Content-Type: text/html;charset=utf-8Server: DataDomeX-DataDome: protectedAccept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-MemoryCharset: utf-8Cache-Control: max-age=0, private, no-cache, no-store, must-revalidatePragma: no-cacheAccess-Control-Allow-Credentials: trueAccess-Control-Expose-Headers: x-dd-b, x-set-cookieAccess-Control-Allow-Origin: *X-DataDome-CID: AHrlqAAAAAMAg8WuNM8BK3AACC575A==X-DD-B: 1Set-Cookie: datadome=buJ29aABw9ywhcwsxLedKnsC4BAmLRyJrGVvMBQoK~J0j0xnjOkH7nUpkES4yULXec_bkkBjWn~DdWPkGMh7Bdg7HO475FpNdpN2VKAqG6qmkS5tul3JkYU8x_vn1Pe1; Max-Age=2592000; Domain=.paypal.com; Path=/; Secure; SameSite=LaxAccept-Ranges: bytesDate: Thu, 05 Dec 2024 19:20:16 GMTVia: 1.1 varnishPaypal-Debug-Id: f5324031bad47Strict-Transport-Security: max-age=63072000; includeSubDomains; preloadX-Served-By: cache-ewr-kewr1740058-EWRX-Cache: MISSX-Cache-Hits: 0X-Timer: S1733426417.544875,VS0,VE17Server-Timing: content-encoding;desc="",x-cdn;desc="fastly"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenConnection: closeContent-Length: 708Content-Type: text/html;charset=utf-8Server: DataDomeX-DataDome: protectedAccept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-MemoryCharset: utf-8Cache-Control: max-age=0, private, no-cache, no-store, must-revalidatePragma: no-cacheAccess-Control-Allow-Credentials: trueAccess-Control-Expose-Headers: x-dd-b, x-set-cookieAccess-Control-Allow-Origin: *X-DataDome-CID: AHrlqAAAAAMAg8WuNM8BK3AACC575A==X-DD-B: 1Set-Cookie: datadome=zlCfnW4VK7jZ4nx3Wxq6AKd3Z_~7eyMfMhlNSkGMKu3K4trVcOiYHsbYXb5G7_4qFcXjIsA74xDGn6O_IMMYA5IGahByNnX~gFFzwtJcfNQpoB~xxgh~HvIFEFRl24fv; Max-Age=2592000; Domain=.paypal.com; Path=/; Secure; SameSite=LaxAccept-Ranges: bytesDate: Thu, 05 Dec 2024 19:20:20 GMTVia: 1.1 varnishPaypal-Debug-Id: f688039d0ca24Strict-Transport-Security: max-age=63072000; includeSubDomains; preloadX-Served-By: cache-nyc-kteb1890067-NYCX-Cache: MISSX-Cache-Hits: 0X-Timer: S1733426420.321786,VS0,VE34Server-Timing: content-encoding;desc="",x-cdn;desc="fastly"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenConnection: closeContent-Length: 708Content-Type: text/html;charset=utf-8Server: DataDomeX-DataDome: protectedAccept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-MemoryCharset: utf-8Cache-Control: max-age=0, private, no-cache, no-store, must-revalidatePragma: no-cacheAccess-Control-Allow-Credentials: trueAccess-Control-Expose-Headers: x-dd-b, x-set-cookieAccess-Control-Allow-Origin: *X-DataDome-CID: AHrlqAAAAAMAg8WuNM8BK3AACC575A==X-DD-B: 1Set-Cookie: datadome=bM~ynBB3bJdLhO16FWg6WKMgmd5XU0mXJDQI5ziGzzaWLLOXMcHObFQdtk_iaOLGL7P8__KdrpkLbWBika1h5rB8Gf~tT1jd~AoCxYQ2IGD0IVgVDDCNYZg3ZjqvvJUH; Max-Age=2592000; Domain=.paypal.com; Path=/; Secure; SameSite=LaxAccept-Ranges: bytesDate: Thu, 05 Dec 2024 19:20:22 GMTVia: 1.1 varnishPaypal-Debug-Id: f180057d2a50eStrict-Transport-Security: max-age=63072000; includeSubDomains; preloadX-Served-By: cache-ewr-kewr1740055-EWRX-Cache: MISSX-Cache-Hits: 0X-Timer: S1733426422.093055,VS0,VE18Server-Timing: content-encoding;desc="",x-cdn;desc="fastly"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closeAccept-Ch: Sec-CH-UA-FullCache-Control: max-age=0, no-cache, no-store, must-revalidateContent-Type: text/html; charset=UTF-8Origin-Trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==Paypal-Debug-Id: f796849fa010aSet-Cookie: enforce_policy=; expires=Thu, 01 Jan 1970 00:00:00 GMT GMT; domain=.paypal.com; path=/; Secure; SameSite=NoneSet-Cookie: navcmd=_home; domain=.paypal.com; path=/; Secure; HttpOnly; SameSite=NoneSet-Cookie: consumer_display=USER_HOMEPAGE%3d0%26USER_TARGETPAGE%3d0%26USER_FILTER_CHOICE%3d0%26BALANCE_MODULE_STATE%3d1%26GIFT_BALANCE_MODULE_STATE%3d1%26LAST_SELECTED_ALIAS_ID%3d0%26SELLING_GROUP%3d1%26PAYMENT_AND_RISK_GROUP%3d1%26SHIPPING_GROUP%3d1%26HOME_VERSION%3d1733512824%26MCE2_ELIGIBILITY%3d4294967295; expires=Sat, 05 Dec 2026 19:20:24 GMT GMT; domain=.paypal.com; path=/; Secure; HttpOnly; SameSite=NoneSet-Cookie: KHcl0EuY7AKSMgfvHl7J5E7hPtK=e8Aybs6oslr-bMqe7Sys4NhzhKpzEuSdnyUDbASsROZPnCvHiWh4vm5ZjAaQ2Qpb8b_2_tcve-m3ViPb; expires=Sat, 05 Dec 2026 19:20:24 GMT GMT; domain=.paypal.com; path=/; Secure; HttpOnly; SameSite=None
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closeAccept-Ch: Sec-CH-UA-FullCache-Control: max-age=0, no-cache, no-store, must-revalidateContent-Type: text/html; charset=UTF-8Origin-Trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==Paypal-Debug-Id: f97935413da6cSet-Cookie: enforce_policy=; expires=Thu, 01 Jan 1970 00:00:00 GMT GMT; domain=.paypal.com; path=/; Secure; SameSite=NoneSet-Cookie: navcmd=_home; domain=.paypal.com; path=/; Secure; HttpOnly; SameSite=NoneSet-Cookie: consumer_display=USER_HOMEPAGE%3d0%26USER_TARGETPAGE%3d0%26USER_FILTER_CHOICE%3d0%26BALANCE_MODULE_STATE%3d1%26GIFT_BALANCE_MODULE_STATE%3d1%26LAST_SELECTED_ALIAS_ID%3d0%26SELLING_GROUP%3d1%26PAYMENT_AND_RISK_GROUP%3d1%26SHIPPING_GROUP%3d1%26HOME_VERSION%3d1733512847%26MCE2_ELIGIBILITY%3d4294967295; expires=Sat, 05 Dec 2026 19:20:47 GMT GMT; domain=.paypal.com; path=/; Secure; HttpOnly; SameSite=NoneSet-Cookie: navlns=0.0; expires=Sat, 05 Dec 2026 19:20:47 GMT GMT; domain=.paypal.com; path=/; Secure; HttpOnly; SameSite=NoneSet-Cookie: x-pp-s=eyJ0IjoiMTczMzQyNjQ0NzYwOCIsImwiOiIwIiwibSI6IjAifQ; domain=.paypal.com; path=/; Secure; HttpOnly; SameSite=None

Source: chromecache_139.2.dr, chromecache_235.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/12359
Source: chromecache_139.2.dr, chromecache_235.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/13378
Source: chromecache_139.2.dr, chromecache_235.2.dr	String found in binary or memory: http://dev.w3.org/csswg/cssom/#resolved-values
Source: chromecache_202.2.dr, chromecache_231.2.dr	String found in binary or memory: http://dustjs.com/
Source: chromecache_139.2.dr, chromecache_235.2.dr	String found in binary or memory: http://erik.eae.net/archives/2007/07/27/18.54.15/#comment-102291
Source: chromecache_165.2.dr, chromecache_155.2.dr	String found in binary or memory: http://es5.github.com/#x15.4.4.18
Source: chromecache_139.2.dr, chromecache_235.2.dr	String found in binary or memory: http://fluidproject.org/blog/2008/01/09/getting-setting-and-removing-tabindex-values-with-javascript
Source: chromecache_196.2.dr, chromecache_142.2.dr, chromecache_197.2.dr, chromecache_184.2.dr	String found in binary or memory: http://github.com/jrburke/requirejs
Source: chromecache_177.2.dr	String found in binary or memory: http://icreatestuff.co.uk/blog/article/ie9-z-index-stacking-problem-or-something-stranger
Source: chromecache_139.2.dr, chromecache_235.2.dr	String found in binary or memory: http://javascript.nwbox.com/IEContentLoaded/
Source: chromecache_139.2.dr, chromecache_235.2.dr	String found in binary or memory: http://jquery.com/
Source: chromecache_139.2.dr, chromecache_235.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_139.2.dr, chromecache_235.2.dr	String found in binary or memory: http://jsperf.com/getall-vs-sizzle/2
Source: chromecache_156.2.dr, chromecache_208.2.dr	String found in binary or memory: http://jsperf.com/isobject-tests
Source: chromecache_139.2.dr, chromecache_235.2.dr	String found in binary or memory: http://jsperf.com/thor-indexof-vs-for/5
Source: chromecache_135.2.dr, chromecache_192.2.dr	String found in binary or memory: http://linkedin.github.io/dustjs/
Source: chromecache_213.2.dr, chromecache_203.2.dr	String found in binary or memory: http://modernizr.com/download/#-shiv-cssclasses
Source: chromecache_197.2.dr, chromecache_184.2.dr	String found in binary or memory: http://requirejs.org/docs/errors.html#
Source: chromecache_139.2.dr, chromecache_235.2.dr	String found in binary or memory: http://sizzlejs.com/
Source: chromecache_139.2.dr, chromecache_235.2.dr	String found in binary or memory: http://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/
Source: chromecache_139.2.dr, chromecache_235.2.dr	String found in binary or memory: http://weblogs.java.net/blog/driscoll/archive/2009/09/08/eval-javascript-global-context
Source: chromecache_139.2.dr, chromecache_235.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=136851
Source: chromecache_139.2.dr, chromecache_235.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=29084
Source: chromecache_139.2.dr, chromecache_235.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=491668
Source: chromecache_139.2.dr, chromecache_235.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=649285
Source: chromecache_139.2.dr, chromecache_235.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=687787
Source: chromecache_139.2.dr, chromecache_235.2.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=378607
Source: chromecache_139.2.dr, chromecache_235.2.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=449857
Source: chromecache_139.2.dr, chromecache_235.2.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=470258
Source: chromecache_188.2.dr, chromecache_169.2.dr	String found in binary or memory: https://datadome.co
Source: chromecache_171.2.dr, chromecache_137.2.dr	String found in binary or memory: https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Object/assign)
Source: chromecache_139.2.dr, chromecache_235.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/CSS/display
Source: chromecache_139.2.dr, chromecache_235.2.dr	String found in binary or memory: https://developer.mozilla.org/en/Security/CSP)
Source: chromecache_171.2.dr, chromecache_137.2.dr	String found in binary or memory: https://docs.python.org/library/functions.html#range).
Source: chromecache_139.2.dr, chromecache_235.2.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/557)
Source: chromecache_139.2.dr, chromecache_235.2.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/764
Source: chromecache_139.2.dr, chromecache_235.2.dr	String found in binary or memory: https://github.com/jquery/sizzle/pull/225
Source: chromecache_139.2.dr, chromecache_235.2.dr	String found in binary or memory: https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon
Source: chromecache_156.2.dr, chromecache_208.2.dr	String found in binary or memory: https://github.com/linkedin/dustjs-helpers
Source: chromecache_156.2.dr, chromecache_208.2.dr	String found in binary or memory: https://github.com/linkedin/dustjs-helpers/wiki/Deprecated-Features#
Source: chromecache_227.2.dr, chromecache_159.2.dr, chromecache_221.2.dr	String found in binary or memory: https://hcaptcha.com/license
Source: chromecache_139.2.dr, chromecache_235.2.dr	String found in binary or memory: https://html.spec.whatwg.org/#strip-and-collapse-whitespace
Source: chromecache_132.2.dr, chromecache_206.2.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_132.2.dr, chromecache_206.2.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_145.2.dr	String found in binary or memory: https://js.hcaptcha.com/1/api.js?onload=hCaptchaCallback&render=explicit
Source: chromecache_177.2.dr	String found in binary or memory: https://mppnodeweb-staging-10.qa.paypal.com/us/webapps/mpp/fonts-setup#fonts-demo
Source: chromecache_171.2.dr, chromecache_137.2.dr	String found in binary or memory: https://people.mozilla.org/~jorendorff/es6-draft.html#sec-tolength
Source: chromecache_140.2.dr, chromecache_219.2.dr	String found in binary or memory: https://secure.opinionlab.com/ccc01/comment_card.asp?
Source: chromecache_171.2.dr, chromecache_137.2.dr	String found in binary or memory: https://underscorejs.org
Source: chromecache_171.2.dr, chromecache_137.2.dr	String found in binary or memory: https://wiki.ecmascript.org/doku.php?id=harmony:egal).
Source: chromecache_216.2.dr, chromecache_141.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/MskOi9BoTT5Vt82JMh92Dvhu/recaptcha__en.js
Source: chromecache_200.2.dr, chromecache_167.2.dr	String found in binary or memory: https://www.paypalobjects.com
Source: chromecache_177.2.dr	String found in binary or memory: https://www.paypalobjects.com/images/checkout/hermes/icon_ot_spin_lock_skinny.png)
Source: chromecache_177.2.dr	String found in binary or memory: https://www.paypalobjects.com/images/shared//sprite-browsers.png
Source: chromecache_177.2.dr	String found in binary or memory: https://www.paypalobjects.com/images/shared/icon-sprite2-1x.png
Source: chromecache_177.2.dr	String found in binary or memory: https://www.paypalobjects.com/images/shared/icon-sprite2-2x.png
Source: chromecache_177.2.dr	String found in binary or memory: https://www.paypalobjects.com/images/shared/icon-x.svg
Source: chromecache_177.2.dr, chromecache_195.2.dr	String found in binary or memory: https://www.paypalobjects.com/images/shared/icon_alert_sprite-2x.png
Source: chromecache_177.2.dr	String found in binary or memory: https://www.paypalobjects.com/images/shared/icon_profile_placeholder
Source: chromecache_177.2.dr	String found in binary or memory: https://www.paypalobjects.com/images/shared/lg-attention-warning.png
Source: chromecache_177.2.dr, chromecache_195.2.dr	String found in binary or memory: https://www.paypalobjects.com/images/shared/momgram
Source: chromecache_177.2.dr	String found in binary or memory: https://www.paypalobjects.com/images/shared/monogram-small
Source: chromecache_177.2.dr	String found in binary or memory: https://www.paypalobjects.com/images/shared/onetouch-desktop.png
Source: chromecache_177.2.dr	String found in binary or memory: https://www.paypalobjects.com/images/shared/onetouch-desktop_2x.png
Source: chromecache_177.2.dr	String found in binary or memory: https://www.paypalobjects.com/images/shared/onetouch-mobile.png
Source: chromecache_177.2.dr	String found in binary or memory: https://www.paypalobjects.com/images/shared/onetouch-mobile_2x.png
Source: chromecache_177.2.dr	String found in binary or memory: https://www.paypalobjects.com/images/shared/paypal-logo-129x32.png
Source: chromecache_177.2.dr	String found in binary or memory: https://www.paypalobjects.com/images/shared/paypal-logo-129x32.svg
Source: chromecache_177.2.dr	String found in binary or memory: https://www.paypalobjects.com/images/shared/remember-me-Interstitial-image.png
Source: chromecache_177.2.dr	String found in binary or memory: https://www.paypalobjects.com/images/shared/remember-me-Interstitial-image_2x.png
Source: chromecache_195.2.dr	String found in binary or memory: https://www.paypalobjects.com/images/shared/sprite_forms_1x.png
Source: chromecache_177.2.dr	String found in binary or memory: https://www.paypalobjects.com/images/shared/sprite_forms_2x.png
Source: chromecache_177.2.dr	String found in binary or memory: https://www.paypalobjects.com/images/shared/success-animation.gif
Source: chromecache_177.2.dr	String found in binary or memory: https://www.paypalobjects.com/images/shared/success-animation_2x.gif
Source: chromecache_177.2.dr	String found in binary or memory: https://www.paypalobjects.com/images/shared/successCheckmark.png
Source: chromecache_177.2.dr	String found in binary or memory: https://www.paypalobjects.com/images/shared/successCheckmark2x.png
Source: chromecache_217.2.dr, chromecache_178.2.dr	String found in binary or memory: https://www.paypalobjects.com/martech/tm/paypal/3pjs/adobe/alloy.min.js
Source: chromecache_217.2.dr, chromecache_178.2.dr	String found in binary or memory: https://www.paypalobjects.com/martech/tm/paypal/3pjs/gtag/ga4.js
Source: chromecache_217.2.dr, chromecache_178.2.dr	String found in binary or memory: https://www.paypalobjects.com/martech/tm/paypal/3pjs/gtag/gtag.js
Source: chromecache_217.2.dr, chromecache_178.2.dr	String found in binary or memory: https://www.paypalobjects.com/paypalmktg/pardot/pd.js
Source: chromecache_200.2.dr, chromecache_167.2.dr	String found in binary or memory: https://www.paypalobjects.com/webstatic
Source: chromecache_177.2.dr, chromecache_195.2.dr	String found in binary or memory: https://www.paypalobjects.com/webstatic/checkout/hermes/icon_loader_med.gif
Source: chromecache_177.2.dr	String found in binary or memory: https://www.paypalobjects.com/webstatic/fnt/cweb/paypal-icons_1-0-3/PayPalIcons-Regular.eot
Source: chromecache_177.2.dr	String found in binary or memory: https://www.paypalobjects.com/webstatic/fnt/cweb/paypal-icons_1-0-3/PayPalIcons-Regular.eot?#iefix
Source: chromecache_177.2.dr	String found in binary or memory: https://www.paypalobjects.com/webstatic/fnt/cweb/paypal-icons_1-0-3/PayPalIcons-Regular.svg#69ac2c9f
Source: chromecache_177.2.dr	String found in binary or memory: https://www.paypalobjects.com/webstatic/fnt/cweb/paypal-icons_1-0-3/PayPalIcons-Regular.ttf
Source: chromecache_177.2.dr	String found in binary or memory: https://www.paypalobjects.com/webstatic/fnt/cweb/paypal-icons_1-0-3/PayPalIcons-Regular.woff
Source: chromecache_177.2.dr, chromecache_195.2.dr	String found in binary or memory: https://www.paypalobjects.com/webstatic/i/consumer/onboarding/icon_PP_monogram_2x.png
Source: chromecache_177.2.dr, chromecache_195.2.dr	String found in binary or memory: https://www.paypalobjects.com/webstatic/i/consumer/onboarding/sprite_form_2x.png);
Source: chromecache_177.2.dr, chromecache_195.2.dr	String found in binary or memory: https://www.paypalobjects.com/webstatic/mktg/2014design/close_default.png
Source: chromecache_177.2.dr	String found in binary or memory: https://www.paypalobjects.com/webstatic/mktg/2014design/fonts/v1.1/PP-Utility-v1.1.eot?#iefix-acnm6v
Source: chromecache_177.2.dr	String found in binary or memory: https://www.paypalobjects.com/webstatic/mktg/2014design/fonts/v1.1/PP-Utility-v1.1.eot?-acnm6v&_=999
Source: chromecache_177.2.dr	String found in binary or memory: https://www.paypalobjects.com/webstatic/mktg/2014design/fonts/v1.1/PP-Utility-v1.1.svg?-acnm6v&_=999
Source: chromecache_177.2.dr	String found in binary or memory: https://www.paypalobjects.com/webstatic/mktg/2014design/fonts/v1.1/PP-Utility-v1.1.ttf?-acnm6v&_=999
Source: chromecache_177.2.dr	String found in binary or memory: https://www.paypalobjects.com/webstatic/mktg/2014design/fonts/v1.1/PP-Utility-v1.1.woff?-acnm6v&_=99
Source: chromecache_177.2.dr	String found in binary or memory: https://www.paypalobjects.com/webstatic/mktg/2014design/fonts/v1.1/PP-Web-v1.1.eot?#iefix-acnm6v
Source: chromecache_177.2.dr	String found in binary or memory: https://www.paypalobjects.com/webstatic/mktg/2014design/fonts/v1.1/PP-Web-v1.1.eot?-acnm6v&_=999999
Source: chromecache_177.2.dr	String found in binary or memory: https://www.paypalobjects.com/webstatic/mktg/2014design/fonts/v1.1/PP-Web-v1.1.svg?-acnm6v&_=999999#
Source: chromecache_177.2.dr	String found in binary or memory: https://www.paypalobjects.com/webstatic/mktg/2014design/fonts/v1.1/PP-Web-v1.1.ttf?-acnm6v&_=999999
Source: chromecache_177.2.dr	String found in binary or memory: https://www.paypalobjects.com/webstatic/mktg/2014design/fonts/v1.1/PP-Web-v1.1.woff?-acnm6v&_=999999
Source: chromecache_177.2.dr, chromecache_195.2.dr	String found in binary or memory: https://www.paypalobjects.com/webstatic/mktg/consumer/onboarding/ui-sprite.png
Source: chromecache_179.2.dr, chromecache_244.2.dr	String found in binary or memory: https://www.recaptcha.net/recaptcha/enterprise.js?onload=recaptchaEnterpriseCallback&render=explicit
Source: chromecache_180.2.dr	String found in binary or memory: https://www.recaptcha.net/recaptcha/enterprise.js?render=
Source: chromecache_216.2.dr, chromecache_141.2.dr	String found in binary or memory: https://www.recaptcha.net/recaptcha/enterprise/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: classification engine

Classification label: mal48.win@21/183@34/8

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2168 --field-trial-handle=1928,i,14656706162417554829,12577780559382963475,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.paypal.com/signin/?returnUri=%2Fmyaccount%2Ftransfer%2FpayRequest%2FU-09584045BD498740V%2FU-5R763959NX153980F%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq&id=OoO85MXTLVUkAlgY4sey9A8h.NxxqjO.iYbAWg&expId=p2p&onboardData=%7B%22signUpRequest%22%3A%7B%22method%22%3A%22get%22%2C%22url%22%3A%22https%3A%2F%2Fwww.paypal.com%2Fmyaccount%2Ftransfer%2FguestLogin%2FpayRequest%2FU-09584045BD498740V%2FU-5R763959NX153980F%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq%26id%3DOoO85MXTLVUkAlgY4sey9A8h.NxxqjO.iYbAWg%22%7D%7D&flowContextData=F7WdIOgJmH6-07KTJ7GpdWXhkdDQxLohB4l-G7vuWGaUsw9VWkH3unndZA7YlCRgtETWTIDn9hNnR_R_XfGvdxeCRkDmtXLc6qqtXR9sC3Gp-59lNBELQtpM5xEv0i4rCTpJiBcP2uf4VFrJLL1b5u1XG7JtP5TfW7CNqxSVOxEb9_duKrmtDgpztBtl32bVeoc8BgW5poXyk9lJHcKrYdvBHSdT0mosqrrmaGj2a5uNQdBK70Mwpn9Zddmj0KI1GIZrXWvFcpnuRbvbli2inkizkeV4nR1uyKnBSzFqdPDcK4t7K9B6YiFhb5sS8DaQd7F6oWzSe-J8gPxVURmdwwOxFn1ycN09t9caUdBz1XMuv96GDJywuv2feJdoAI73PNjro1a2cFEKAWnCgtoHqxdBD3A1mVV3OiytkjtEUDdvp0GL3CNOAV9zIrunX_DmbTO6KOe21dniBkeG&v=1&utm_source=unp&utm_medium=email&utm_campaign=RT000186&utm_unptid=09b8bd50-b31d-11ef-9fd6-7b2e619a4883&ppid=RT000186&cnac=US&rsta=en_US%28en-US%29&unptid=09b8bd50-b31d-11ef-9fd6-7b2e619a4883&calc=f8278373e34b4&unp_tpcid=requestmoney-notifications-requestee&page=main%3Aemail%3ART000186&pgrp=main%3Aemail&e=cl&mchn=em&s=ci&mail=sys&appVersion=1.294.0&tenant_name=&xt=145585%2C150948%2C104038&link_ref=www.paypal.com_signin"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5560 --field-trial-handle=1928,i,14656706162417554829,12577780559382963475,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5588 --field-trial-handle=1928,i,14656706162417554829,12577780559382963475,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2168 --field-trial-handle=1928,i,14656706162417554829,12577780559382963475,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5560 --field-trial-handle=1928,i,14656706162417554829,12577780559382963475,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5588 --field-trial-handle=1928,i,14656706162417554829,12577780559382963475,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://www.paypal.com/signin/?returnUri=%2Fmyaccount%2Ftransfer%2FpayRequest%2FU-09584045BD498740V%2FU-5R763959NX153980F%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq&id=OoO85MXTLVUkAlgY4sey9A8h.NxxqjO.iYbAWg&expId=p2p&onboardData=%7B%22signUpRequest%22%3A%7B%22method%22%3A%22get%22%2C%22url%22%3A%22https%3A%2F%2Fwww.paypal.com%2Fmyaccount%2Ftransfer%2FguestLogin%2FpayRequest%2FU-09584045BD498740V%2FU-5R763959NX153980F%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq%26id%3DOoO85MXTLVUkAlgY4sey9A8h.NxxqjO.iYbAWg%22%7D%7D&flowContextData=F7WdIOgJmH6-07KTJ7GpdWXhkdDQxLohB4l-G7vuWGaUsw9VWkH3unndZA7YlCRgtETWTIDn9hNnR_R_XfGvdxeCRkDmtXLc6qqtXR9sC3Gp-59lNBELQtpM5xEv0i4rCTpJiBcP2uf4VFrJLL1b5u1XG7JtP5TfW7CNqxSVOxEb9_duKrmtDgpztBtl32bVeoc8BgW5poXyk9lJHcKrYdvBHSdT0mosqrrmaGj2a5uNQdBK70Mwpn9Zddmj0KI1GIZrXWvFcpnuRbvbli2inkizkeV4nR1uyKnBSzFqdPDcK4t7K9B6YiFhb5sS8DaQd7F6oWzSe-J8gPxVURmdwwOxFn1ycN09t9caUdBz1XMuv96GDJywuv2feJdoAI73PNjro1a2cFEKAWnCgtoHqxdBD3A1mVV3OiytkjtEUDdvp0GL3CNOAV9zIrunX_DmbTO6KOe21dniBkeG&v=1&utm_source=unp&utm_medium=email&utm_campaign=RT000186&utm_unptid=09b8bd50-b31d-11ef-9fd6-7b2e619a4883&ppid=RT000186&cnac=US&rsta=en_US%28en-US%29&unptid=09b8bd50-b31d-11ef-9fd6-7b2e619a4883&calc=f8278373e34b4&unp_tpcid=requestmoney-notifications-requestee&page=main%3Aemail%3ART000186&pgrp=main%3Aemail&e=cl&mchn=em&s=ci&mail=sys&appVersion=1.294.0&tenant_name=&xt=145585%2C150948%2C104038&link_ref=www.paypal.com_signin	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://bugs.webkit.org/show_bug.cgi?id=29084	0%	Avira URL Cloud	safe
https://bugs.webkit.org/show_bug.cgi?id=136851	0%	Avira URL Cloud	safe
https://html.spec.whatwg.org/#strip-and-collapse-whitespace	0%	Avira URL Cloud	safe
http://sizzlejs.com/	0%	Avira URL Cloud	safe
http://fluidproject.org/blog/2008/01/09/getting-setting-and-removing-tabindex-values-with-javascript	0%	Avira URL Cloud	safe
http://dev.w3.org/csswg/cssom/#resolved-values	0%	Avira URL Cloud	safe
http://weblogs.java.net/blog/driscoll/archive/2009/09/08/eval-javascript-global-context	0%	Avira URL Cloud	safe
http://jsperf.com/getall-vs-sizzle/2	0%	Avira URL Cloud	safe
http://bugs.jquery.com/ticket/12359	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
paypal-dynamic-cdn.map.fastly.net	151.101.3.1	true	false	high
cs1150.wpc.betacdn.net	192.229.221.25	true	false	high
paypal-dynamic.map.fastly.net	151.101.1.21	true	false	high
www.recaptcha.net	172.217.19.195	true	false	high
www.google.com	172.217.21.36	true	false	high
ddbm2.paypal.com.first-party-js.datadome.co	18.66.161.81	true	false	high
newassets.hcaptcha.paypal.com	unknown	unknown	false	high
hcaptcha.paypal.com	unknown	unknown	false	high
ddbm2.paypal.com	unknown	unknown	false	high
t.paypal.com	unknown	unknown	false	high
www.paypalobjects.com	unknown	unknown	false	high
www.paypal.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/js/lib/underscore-1.13.6.js	false	high
https://www.paypalobjects.com/martech/tm/paypal/mktconf.js	false	high
https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/hcaptcha/hcaptcha_fph.html?siteKey=bf07db68-5c2e-42e8-8779-ea8384890eea&locale.x=en_US&country.x=US&checkConnectionTimeout=10000&domain=hcaptcha.paypal.com&imgsDomain=imgs.hcaptcha.paypal.com&assetsDomain=newassets.hcaptcha.paypal.com&accountsDomain=accounts.hcaptcha.paypal.com&customDomains=	false	high
https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/js/browser_modules/dust-makara-helpers/browser.amd.js	false	high
https://t.paypal.com/ts?v=1.9.5&t=1733426405531&g=300&pgrp=main%3Aunifiedlogin%3A%3A%3Alogin&page=main%3Aunifiedlogin%3A%3A%3Alogin%3Alegacy-web-dyn&pgst=1733426393098&calc=f2110553b2e4e&nsid=GW_RscjBMue_uO0mnkc7Z8KQBUhwfX2j&rsta=en_US&pgtf=Nodejs&env=live&s=ci&ccpg=US&csci=c0c49a91e6384eadbaa4a565394e21da&comp=unifiedloginnodeweb&tsrce=unifiedloginnodeweb&cu=0&ef_policy=ccpa&xe=100353%2C106885%2C105604%2C105604%2C105351%2C101126%2C100614%2C101257%2C102153%2C104200%2C104200%2C105352%2C109195%2C104458%2C104458%2C100364%2C105999%2C100885%2C109334%2C109334%2C101270%2C102557%2C102557%2C101408%2C101408%2C104227%2C104227%2C100644%2C105124%2C100391%2C102695%2C100263%2C101031%2C100267%2C108076%2C100527%2C106031%2C106031%2C107054%2C107054%2C106033%2C106033%2C106032%2C106032%2C105392%2C105392%2C106035%2C106035%2C106034%2C106034%2C106036%2C106036%2C105271%2C110648%2C101688%2C101821%2C101820%2C102208%2C105543%2C105544%2C105416%2C105416%2C101064%2C106058%2C104778%2C103119%2C100303%2C100942%2C105553%2C105553%2C105552%2C105552%2C100304%2C105554%2C105554%2C101334%2C100572%2C101215%2C101214%2C101470%2C101216%2C103648%2C101472%2C101090%2C105698%2C102629%2C101735%2C104039%2C104039%2C104038%2C104038%2C101736%2C109931%2C110442%2C108653%2C108652%2C100846%2C109040%2C105843%2C105843%2C101875%2C105845%2C105845%2C105844%2C105844%2C109047%2C102390%2C102390%2C104571%2C104571%2C105340%2C105340%2C107263%2C107263%2C109195%2C108076%2C109047&xt=100886%2C132008%2C124899%2C124899%2C123668%2C103409%2C101617%2C104043%2C107844%2C127485%2C127485%2C123683%2C144027%2C119355%2C119355%2C103733%2C127242%2C102543%2C144768%2C144768%2C106407%2C109630%2C109630%2C104576%2C104576%2C117999%2C117999%2C101702%2C122483%2C100984%2C110241%2C100632%2C102993%2C100641%2C138090%2C101405%2C127662%2C127662%2C132781%2C132781%2C127659%2C127659%2C127666%2C127666%2C123875%2C123875%2C127651%2C127651%2C127655%2C127655%2C127648%2C127648%2C123248%2C152289%2C105645%2C106327%2C106324%2C108106%2C124626%2C124629%2C123994%2C123994%2C103105%2C127563%2C121149%2C112308%2C100722%2C113529%2C124686%2C124686%2C124682%2C124682%2C100727%2C124696%2C124696%2C104357%2C101510%2C103848%2C103847%2C104754%2C103864%2C114559%2C104762%2C103240%2C125356%2C109962%2C105856%2C120731%2C120731%2C120736%2C120736%2C105858%2C147989%2C150775%2C141151%2C141149%2C102359%2C143321%2C126375%2C126375%2C106610%2C126401%2C126401%2C126385%2C126385%2C143343%2C108797%2C108797%2C119908%2C119908%2C123611%2C123611%2C133840%2C133840%2C144027%2C138090%2C143343&obex=p2p&userRedirected=true&post_login_redirect=returnUri&ret_url=%2Fmyaccount%2Ftransfer%2FpayRequest%2FU-09584045BD498740V%2FU-5R763959NX153980F&link=unifiedlogin-login-submit&pglk=main%3Aunifiedlogin%3A%3A%3Alogin%7CbtnLogin&pgln=main%3Aunifiedlogin%3A%3A%3Alogin%3Alegacy-web-dyn%7CbtnLogin&e=cl	false	high
https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/opinionLab/opinionLab.js	false	high
https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/js/lib/jquery-3.7.0.js	false	high
https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/opinionLab/onlineOpinionPopup.js	false	high
https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/core/baseView.js	false	high
https://ddbm2.paypal.com/tags.js	false	high
https://www.paypal.com/signin	false	high
https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/js/widgets/clientCalLogger.js	false	high
https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/router.js	false	high
https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/dust-helpers.js	false	high
https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/core/nougat.js	false	high
https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/config.js	false	high
https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/underscore-1.13.4.js	false	high
https://www.paypalobjects.com/webcaptcha/grcenterprise_v3_static.js	false	high
https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/view/pageView.js	false	high
https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/backbone-1.5.0.min.js	false	high
https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/authchallenge.js	false	high
https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/js/app.js	false	high
https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/widgets/analytics.js	false	high
https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/widgets/errorDisplay.js	false	high
https://www.paypalobjects.com/images/shared/momgram@2x.png	false	high
https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/view/authcaptcha.js	false	high
https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/js/browser_modules/pulvus-provide/provide.js	false	high
https://www.paypalobjects.com/webcaptcha/ngrlCaptcha.min.js	false	high
https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/app.js	false	high
https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/jquery-1.12.4.js	false	high
https://www.paypal.com/platform/tealeaftarget	false	high
https://www.paypalobjects.com/rdaAssets/fraudnet/sync/fn-sync-telemetry-min.js	false	high
https://www.paypalobjects.com/images/shared/paypal-logo-129x32.svg	false	high
https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/js/widgets/analytics.js	false	high
https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/js/lib/dustmotes-iterate.js	false	high
https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/require.js	false	high
https://www.paypal.com/signin/client-log	false	high
https://newassets.hcaptcha.paypal.com/c/cc9cbcc44893d9601186ed793b76ac72a56a3e176be51252819b38f7d2f1f97c/hsw.js	false	high
https://t.paypal.com/ts?v=1.9.5&t=1733426395344&g=300&e=ac&tsrce=unp&ppid=RT000186&space_key=SKCPAD&utm_source=unp&utm_medium=email&utm_campaign=RT000186&utm_unptid=09b8bd50-b31d-11ef-9fd6-7b2e619a4883&cnac=US&rsta=en_US(en-US)&unptid=09b8bd50-b31d-11ef-9fd6-7b2e619a4883&calc=f8278373e34b4&unp_tpcid=requestmoney-notifications-requestee&page=main%3Aemail%3ART000186&pgrp=main%3Aemail&s=ci&mail=sys&appVersion=1.294.0&xt=145585%2C150948%2C104038&link_ref=www.paypal.com_signin&event_name=external_deep_link_processed	false	high
https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/js/lib/modernizr-2.6.1.js	false	high
https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/js/browser_modules/dustjs-helpers/dist/dust-helpers.js	false	high
https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/js/core/nougat.js	false	high
https://newassets.hcaptcha.paypal.com/captcha/v1/d136a52/static/hcaptcha.html	false	high
https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/js/view/mainContentView.js	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.paypalobjects.com/images/shared/icon-x.svg	chromecache_177.2.dr	false		high
https://www.paypalobjects.com/webstatic/fnt/cweb/paypal-icons_1-0-3/PayPalIcons-Regular.eot?#iefix	chromecache_177.2.dr	false		high
https://code.google.com/p/chromium/issues/detail?id=449857	chromecache_139.2.dr, chromecache_235.2.dr	false		high
https://www.paypalobjects.com/webstatic/mktg/2014design/fonts/v1.1/PP-Web-v1.1.eot?-acnm6v&_=999999	chromecache_177.2.dr	false		high
http://requirejs.org/docs/errors.html#	chromecache_197.2.dr, chromecache_184.2.dr	false		high
http://icreatestuff.co.uk/blog/article/ie9-z-index-stacking-problem-or-something-stranger	chromecache_177.2.dr	false		high
https://www.paypalobjects.com/images/shared/onetouch-mobile_2x.png	chromecache_177.2.dr	false		high
https://www.paypalobjects.com/images/shared/icon_profile_placeholder	chromecache_177.2.dr	false		high
https://code.google.com/p/chromium/issues/detail?id=378607	chromecache_139.2.dr, chromecache_235.2.dr	false		high
https://www.paypalobjects.com/webstatic/mktg/2014design/close_default.png	chromecache_177.2.dr, chromecache_195.2.dr	false		high
https://bugs.webkit.org/show_bug.cgi?id=29084	chromecache_139.2.dr, chromecache_235.2.dr	false	Avira URL Cloud: safe	unknown
http://dev.w3.org/csswg/cssom/#resolved-values	chromecache_139.2.dr, chromecache_235.2.dr	false	Avira URL Cloud: safe	unknown
http://github.com/jrburke/requirejs	chromecache_196.2.dr, chromecache_142.2.dr, chromecache_197.2.dr, chromecache_184.2.dr	false		high
https://datadome.co	chromecache_188.2.dr, chromecache_169.2.dr	false		high
https://github.com/linkedin/dustjs-helpers/wiki/Deprecated-Features#	chromecache_156.2.dr, chromecache_208.2.dr	false		high
https://www.paypalobjects.com/images/shared/paypal-logo-129x32.png	chromecache_177.2.dr	false		high
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	chromecache_139.2.dr, chromecache_235.2.dr	false		high
https://bugzilla.mozilla.org/show_bug.cgi?id=687787	chromecache_139.2.dr, chromecache_235.2.dr	false		high
http://es5.github.com/#x15.4.4.18	chromecache_165.2.dr, chromecache_155.2.dr	false		high
https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Object/assign)	chromecache_171.2.dr, chromecache_137.2.dr	false		high
https://www.paypalobjects.com/martech/tm/paypal/3pjs/gtag/gtag.js	chromecache_217.2.dr, chromecache_178.2.dr	false		high
https://github.com/jquery/jquery/pull/764	chromecache_139.2.dr, chromecache_235.2.dr	false		high
https://wiki.ecmascript.org/doku.php?id=harmony:egal).	chromecache_171.2.dr, chromecache_137.2.dr	false		high
http://dustjs.com/	chromecache_202.2.dr, chromecache_231.2.dr	false		high
https://www.paypalobjects.com/webstatic	chromecache_200.2.dr, chromecache_167.2.dr	false		high
https://github.com/linkedin/dustjs-helpers	chromecache_156.2.dr, chromecache_208.2.dr	false		high
http://bugs.jquery.com/ticket/12359	chromecache_139.2.dr, chromecache_235.2.dr	false	Avira URL Cloud: safe	unknown
https://www.paypalobjects.com/images/shared/icon_alert_sprite-2x.png	chromecache_177.2.dr, chromecache_195.2.dr	false		high
https://hcaptcha.com/license	chromecache_227.2.dr, chromecache_159.2.dr, chromecache_221.2.dr	false		high
https://www.paypalobjects.com/webstatic/mktg/2014design/fonts/v1.1/PP-Web-v1.1.woff?-acnm6v&_=999999	chromecache_177.2.dr	false		high
https://bugzilla.mozilla.org/show_bug.cgi?id=649285	chromecache_139.2.dr, chromecache_235.2.dr	false		high
http://weblogs.java.net/blog/driscoll/archive/2009/09/08/eval-javascript-global-context	chromecache_139.2.dr, chromecache_235.2.dr	false	Avira URL Cloud: safe	unknown
https://developer.mozilla.org/en-US/docs/CSS/display	chromecache_139.2.dr, chromecache_235.2.dr	false		high
https://www.paypalobjects.com/images/shared/sprite_forms_2x.png	chromecache_177.2.dr	false		high
https://jquery.com/	chromecache_132.2.dr, chromecache_206.2.dr	false		high
https://developer.mozilla.org/en/Security/CSP)	chromecache_139.2.dr, chromecache_235.2.dr	false		high
https://www.paypalobjects.com/webstatic/mktg/2014design/fonts/v1.1/PP-Utility-v1.1.woff?-acnm6v&_=99	chromecache_177.2.dr	false		high
https://www.paypalobjects.com/images/shared/onetouch-desktop.png	chromecache_177.2.dr	false		high
https://www.paypalobjects.com/images/shared/remember-me-Interstitial-image_2x.png	chromecache_177.2.dr	false		high
https://www.paypalobjects.com/images/shared/remember-me-Interstitial-image.png	chromecache_177.2.dr	false		high
https://github.com/jquery/sizzle/pull/225	chromecache_139.2.dr, chromecache_235.2.dr	false		high
https://bugzilla.mozilla.org/show_bug.cgi?id=491668	chromecache_139.2.dr, chromecache_235.2.dr	false		high
https://code.google.com/p/chromium/issues/detail?id=470258	chromecache_139.2.dr, chromecache_235.2.dr	false		high
https://bugs.webkit.org/show_bug.cgi?id=136851	chromecache_139.2.dr, chromecache_235.2.dr	false	Avira URL Cloud: safe	unknown
https://www.paypalobjects.com/images/shared/onetouch-desktop_2x.png	chromecache_177.2.dr	false		high
http://jquery.org/license	chromecache_139.2.dr, chromecache_235.2.dr	false		high
https://www.paypalobjects.com/images/shared/icon-sprite2-1x.png	chromecache_177.2.dr	false		high
https://www.paypalobjects.com/webstatic/mktg/2014design/fonts/v1.1/PP-Web-v1.1.eot?#iefix-acnm6v	chromecache_177.2.dr	false		high
http://sizzlejs.com/	chromecache_139.2.dr, chromecache_235.2.dr	false	Avira URL Cloud: safe	unknown
https://html.spec.whatwg.org/#strip-and-collapse-whitespace	chromecache_139.2.dr, chromecache_235.2.dr	false	Avira URL Cloud: safe	unknown
https://www.paypalobjects.com/webstatic/fnt/cweb/paypal-icons_1-0-3/PayPalIcons-Regular.ttf	chromecache_177.2.dr	false		high
https://www.paypalobjects.com/webstatic/fnt/cweb/paypal-icons_1-0-3/PayPalIcons-Regular.woff	chromecache_177.2.dr	false		high
http://jsperf.com/getall-vs-sizzle/2	chromecache_139.2.dr, chromecache_235.2.dr	false	Avira URL Cloud: safe	unknown
http://fluidproject.org/blog/2008/01/09/getting-setting-and-removing-tabindex-values-with-javascript	chromecache_139.2.dr, chromecache_235.2.dr	false	Avira URL Cloud: safe	unknown
https://www.paypalobjects.com/webstatic/mktg/2014design/fonts/v1.1/PP-Web-v1.1.svg?-acnm6v&_=999999#	chromecache_177.2.dr	false		high
https://www.paypalobjects.com/images/shared/icon-sprite2-2x.png	chromecache_177.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
151.101.1.21	paypal-dynamic.map.fastly.net	United States	54113	FASTLYUS	false
192.229.221.25	cs1150.wpc.betacdn.net	United States	15133	EDGECASTUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
172.217.19.195	www.recaptcha.net	United States	15169	GOOGLEUS	false
151.101.3.1	paypal-dynamic-cdn.map.fastly.net	United States	54113	FASTLYUS	false
151.101.131.1	unknown	United States	54113	FASTLYUS	false
18.66.161.81	ddbm2.paypal.com.first-party-js.datadome.co	United States	3	MIT-GATEWAYSUS	false
172.217.21.36	www.google.com	United States	15169	GOOGLEUS	false

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1569539
Start date and time:	2024-12-05 20:18:49 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 23s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://www.paypal.com/signin/?returnUri=%2Fmyaccount%2Ftransfer%2FpayRequest%2FU-09584045BD498740V%2FU-5R763959NX153980F%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq&id=OoO85MXTLVUkAlgY4sey9A8h.NxxqjO.iYbAWg&expId=p2p&onboardData=%7B%22signUpRequest%22%3A%7B%22method%22%3A%22get%22%2C%22url%22%3A%22https%3A%2F%2Fwww.paypal.com%2Fmyaccount%2Ftransfer%2FguestLogin%2FpayRequest%2FU-09584045BD498740V%2FU-5R763959NX153980F%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq%26id%3DOoO85MXTLVUkAlgY4sey9A8h.NxxqjO.iYbAWg%22%7D%7D&flowContextData=F7WdIOgJmH6-07KTJ7GpdWXhkdDQxLohB4l-G7vuWGaUsw9VWkH3unndZA7YlCRgtETWTIDn9hNnR_R_XfGvdxeCRkDmtXLc6qqtXR9sC3Gp-59lNBELQtpM5xEv0i4rCTpJiBcP2uf4VFrJLL1b5u1XG7JtP5TfW7CNqxSVOxEb9_duKrmtDgpztBtl32bVeoc8BgW5poXyk9lJHcKrYdvBHSdT0mosqrrmaGj2a5uNQdBK70Mwpn9Zddmj0KI1GIZrXWvFcpnuRbvbli2inkizkeV4nR1uyKnBSzFqdPDcK4t7K9B6YiFhb5sS8DaQd7F6oWzSe-J8gPxVURmdwwOxFn1ycN09t9caUdBz1XMuv96GDJywuv2feJdoAI73PNjro1a2cFEKAWnCgtoHqxdBD3A1mVV3OiytkjtEUDdvp0GL3CNOAV9zIrunX_DmbTO6KOe21dniBkeG&v=1&utm_source=unp&utm_medium=email&utm_campaign=RT000186&utm_unptid=09b8bd50-b31d-11ef-9fd6-7b2e619a4883&ppid=RT000186&cnac=US&rsta=en_US%28en-US%29&unptid=09b8bd50-b31d-11ef-9fd6-7b2e619a4883&calc=f8278373e34b4&unp_tpcid=requestmoney-notifications-requestee&page=main%3Aemail%3ART000186&pgrp=main%3Aemail&e=cl&mchn=em&s=ci&mail=sys&appVersion=1.294.0&tenant_name=&xt=145585%2C150948%2C104038&link_ref=www.paypal.com_signin
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.win@21/183@34/8
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.21.35, 64.233.161.84, 172.217.19.238, 142.250.181.142, 172.217.17.78, 142.250.181.138, 172.217.17.42, 142.250.181.74, 172.217.19.202, 216.58.208.234, 172.217.21.42, 172.217.19.170, 172.217.19.234, 142.250.181.10, 142.250.181.42, 172.217.17.74, 142.250.181.106, 172.217.17.67
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com, www.gstatic.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://www.paypal.com/signin/?returnUri=%2Fmyaccount%2Ftransfer%2FpayRequest%2FU-09584045BD498740V%2FU-5R763959NX153980F%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq&id=OoO85MXTLVUkAlgY4sey9A8h.NxxqjO.iYbAWg&expId=p2p&onboardData=%7B%22signUpRequest%22%3A%7B%22method%22%3A%22get%22%2C%22url%22%3A%22https%3A%2F%2Fwww.paypal.com%2Fmyaccount%2Ftransfer%2FguestLogin%2FpayRequest%2FU-09584045BD498740V%2FU-5R763959NX153980F%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq%26id%3DOoO85MXTLVUkAlgY4sey9A8h.NxxqjO.iYbAWg%22%7D%7D&flowContextData=F7WdIOgJmH6-07KTJ7GpdWXhkdDQxLohB4l-G7vuWGaUsw9VWkH3unndZA7YlCRgtETWTIDn9hNnR_R_XfGvdxeCRkDmtXLc6qqtXR9sC3Gp-59lNBELQtpM5xEv0i4rCTpJiBcP2uf4VFrJLL1b5u1XG7JtP5TfW7CNqxSVOxEb9_duKrmtDgpztBtl32bVeoc8BgW5poXyk9lJHcKrYdvBHSdT0mosqrrmaGj2a5uNQdBK70Mwpn9Zddmj0KI1GIZrXWvFcpnuRbvbli2inkizkeV4nR1uyKnBSzFqdPDcK4t7K9B6YiFhb5sS8DaQd7F6oWzSe-J8gPxVURmdwwOxFn1ycN09t9caUdBz1XMuv96GDJywuv2feJdoAI73PNjro1a2cFEKAWnCgtoHqxdBD3A1mVV3OiytkjtEUDdvp0GL3CNOAV9zIrunX_DmbTO6KOe21

Input	Output
URL: https://www.paypal.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://www.paypal.com
URL: https://www.paypal.com/signin/?returnUri=%2Fmyaccount%2Ftransfer%2FpayRequest%2FU-09584045BD498740V%2FU-5R763959NX153980F%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq&id=OoO85MXTLVUkAlgY4sey9A8h.NxxqjO.iYbAWg&expId=p2p&onboardData=%7B%22signUpRequest%22 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Don't recognize the seller? Please contact Pay...", "prominent_button_name": "Log In to Pay", "text_input_field_labels": [ "Email", "Password" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://www.paypal.com/signin/?returnUri=%2Fmyaccount%2Ftransfer%2FpayRequest%2FU-09584045BD498740V%2FU-5R763959NX153980F%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq&id=OoO85MXTLVUkAlgY4sey9A8h.NxxqjO.iYbAWg&expId=p2p&onboardData=%7B%22signUpRequest%22 Model: Joe Sandbox AI	{ "brands": [ "PayPal" ] }
	{ "brands": [ "PayPal" ] }
URL: https://www.paypal.com/signin/?returnUri=%2Fmyaccount%2Ftransfer%2FpayRequest%2FU-09584045BD498740V%2FU-5R763959NX153980F%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq&id=OoO85MXTLVUkAlgY4sey9A8h.NxxqjO.iYbAWg&expId=p2p&onboardData=%7B%22signUpRequest%22 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Don't recognize the seller? Please contact Pay...", "prominent_button_name": "Log In to Pay", "text_input_field_labels": [ "t1osqn@xbkd.org", "************" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://www.paypal.com/signin/?returnUri=%2Fmyaccount%2Ftransfer%2FpayRequest%2FU-09584045BD498740V%2FU-5R763959NX153980F%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq&id=OoO85MXTLVUkAlgY4sey9A8h.NxxqjO.iYbAWg&expId=p2p&onboardData=%7B%22signUpRequest%22 Model: Joe Sandbox AI	{ "brands": [ "PayPal" ] }
	{ "brands": [ "PayPal" ] }
URL: https://www.paypal.com/signin/?returnUri=%2Fmyaccount%2Ftransfer%2FpayRequest%2FU-09584045BD498740V%2FU-5R763959NX153980F%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq&id=OoO85MXTLVUkAlgY4sey9A8h.NxxqjO.iYbAWg&expId=p2p&onboardData=%7B%22signUpRequest%22 Model: Joe Sandbox AI	```json{ "legit_domain": "paypal.com", "classification": "wellknown", "reasons": [ "The URL 'www.paypal.com' matches the legitimate domain name for the brand PayPal.", "PayPal is a well-known brand with a strong online presence.", "There are no suspicious elements in the URL such as misspellings, extra characters, or unusual domain extensions.", "The domain is fully matching with the legitimate domain associated with PayPal." ], "riskscore": 1}
URL: www.paypal.com Brands: PayPal Input Fields: t1osqn@xbkd.org, ************
URL: https://www.paypal.com/signin Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Security Challenge", "prominent_button_name": "I am human", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://www.paypal.com/signin Model: Joe Sandbox AI	{ "brands": [ "PayPal" ] }
	{ "brands": [ "PayPal" ] }
URL: https://www.paypal.com/signin Model: Joe Sandbox AI	```json{ "legit_domain": "paypal.com", "classification": "wellknown", "reasons": [ "The URL 'www.paypal.com' matches the legitimate domain name for PayPal.", "PayPal is a well-known brand with a strong online presence.", "There are no suspicious elements in the URL such as misspellings, extra characters, or unusual domain extensions.", "The URL does not contain any additional words or hyphens that could indicate phishing." ], "riskscore": 1}
URL: www.paypal.com Brands: PayPal Input Fields: unknown

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Dec 5 18:19:47 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9862657946947873
Encrypted:	false
SSDEEP:	48:8R0ddjT9lpfHpidAKZdA1oehwiZUklqehSy+3:8RuLs1y
MD5:	094C8E3D1B3B1322CE9FC15F3B064F56
SHA1:	ED8119849030A83B3CF29F0604AD12FE0033FA19
SHA-256:	E5F823FB44250C656A0DA63F50694FA3978696A8BB88C35BA74D3548F8039B2E
SHA-512:	C550A480FB70D1031E461CE3A1189D9BA4C1C27C4B88003875CAE596A59BE7F13622E9E47916CADC53ABD5E38637C969447D4AC79D631845EF9DAE84CB777C14
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....m.JG..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.I.Yv.....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Yv.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Yv.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Yv............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Yx............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Dec 5 18:19:47 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.003799952393942
Encrypted:	false
SSDEEP:	48:8R0ddjT9lpfHpidAKZdA1leh/iZUkAQkqehly+2:8RuL+9Q4y
MD5:	D055EAB997D6B7B1BEB0C0BBC83C1C31
SHA1:	0C3037F4FFFC5ECCEFC5B47C88E61986A0CB99F3
SHA-256:	EB9AC339916F69F016961D935E8D7C46AC8AF8332BDC62333011F7A81B1E5F64
SHA-512:	59946731CC3475498737A9AD4584C919FAFDC0835D34A2E6A05AA563B96CFB955E11A9E04FF6D532337EC1A65EA8ED0DBB260D7EBCC73D14B9B39E0D5A4E4D9F
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Z..JG..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.I.Yv.....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Yv.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Yv.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Yv............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Yx............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 5 07:00:51 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.0106444854610706
Encrypted:	false
SSDEEP:	48:880ddjT9lbHpidAKZdA14t5eh7sFiZUkmgqeh7sry+BX:88uL8npy
MD5:	E4043A4FB6BF2712078F594A2814C970
SHA1:	62D3EB6BD4DBE30936385BB8AF7E3A0A3879050D
SHA-256:	28AB0AAF653F4472A38FDE8E236799DD82102BD9BF369E6AB3C732F3DBF45F57
SHA-512:	48E909B091E12C013D4E274FC8224BDD3688C5C86A0599CFBF7F4CB464B8030B6A69A64D1B76CE3E8F09A416FCFD4A758C5FD9D6028B49B38998B9ADCD17A452
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....C..b...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.I.Yv.....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Yv.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Yv.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Yv............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VEW.@...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Dec 5 18:19:47 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	4.002438035239768
Encrypted:	false
SSDEEP:	48:8S0ddjT9lpfHpidAKZdA16ehDiZUkwqehRy+R:8SuL1Ty
MD5:	B23D74E484DEA8F521B4DA7C815E8BB2
SHA1:	D1CB23818CEA369795D3B3E4774AC513255827DA
SHA-256:	D49B5DBA78CD598DDC7FAD21A98DD45C04F8F375322F99EFE175B794C180BE8B
SHA-512:	3F5339B3251A5F7E32781ABCB7F1BA8E97F7F4C5C9F8549B3333506CC5F1FD9F60AC98DD033C56132F374B09E509D79C4C6EF50228599439F77C4E241166FD99
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....'...JG..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.I.Yv.....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Yv.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Yv.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Yv............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Yx............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Dec 5 18:19:47 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.987961009144029
Encrypted:	false
SSDEEP:	48:8aR0ddjT9lpfHpidAKZdA1UehBiZUk1W1qehfy+C:84uLF9/y
MD5:	2000385DF3727A49860801C13515E54D
SHA1:	09FB2C79D5B183C5821008591FF36A8B8C5BC715
SHA-256:	99EA9DE1AA1DC0F57980EB516E19F5A95B121B2A50C2DEB86F3E31EFAC9F2488
SHA-512:	CA09D7E7EE1BEB6A09D3F9A2CCE70B88CD6A1F3EE1B45FBDF53C6C6B513B898E071B3A738ADCBA3B65F41875973404C55F38F5ABEBDF52251FAF79F7179AE854
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....lF.JG..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.I.Yv.....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Yv.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Yv.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Yv............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Yx............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Dec 5 18:19:47 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	4.00074109982451
Encrypted:	false
SSDEEP:	48:8U0ddjT9lpfHpidAKZdA1duTrehOuTbbiZUk5OjqehOuTbpy+yT+:8UuLSTYTbxWOvTbpy7T
MD5:	328F0B1A3660909C7E1358EA4EE5D0A7
SHA1:	2ED0E358A3A20569011958A5DB5011DC34A604C4
SHA-256:	7E2713A7B62068381423967776558D726FB1E49151A7E47A6ED7500B0BABE6CB
SHA-512:	D97CAF89A65B9563C37EDE087A60CA2A1CF052FEAAD6E499BB1CCF73A34F77CB969A02014067A941FD6FDC1B22323645F966AC68C9A98A6C6FEBBF2981860320
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,........JG..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.I.Yv.....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Yv.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Yv.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Yv............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Yx............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1305), with no line terminators
Category:	dropped
Size (bytes):	1305
Entropy (8bit):	5.114410235023359
Encrypted:	false
SSDEEP:	24:2Q5RCCLxZhLSEZsNA9DBHey1HgWRWUVIoLAGa9SRRqys3KJS7nvLQR/s8eFEmYzM:uIxZYEiNA9DJesHgWwUKLGyS+ysLAvep
MD5:	77318F6FDC00171A089C5A9554C5D77F
SHA1:	C875B8A24BE51AEA1F71C5AAE4F79B76018F1C86
SHA-256:	F92AC1FD655D048DD658EC255FF71A6D409F2DA598B58199EFA67B976BD61057
SHA-512:	CB9BDB5C36A1ED91CA3876A09DE1CB459D336CB08F9A501529DCFE4028BC2188DD6BF7D77C72B1C939353A5ADF37E7BEAED3078B32BCBF4786D9814524784D07
Malicious:	false
Reputation:	low
Preview:	(function(){function f(t){xhr=new XMLHttpRequest,xhr.open("POST","/signin/client-log",!0),xhr.setRequestHeader("Content-Type","application/json;charset=UTF-8");try{xhr.send(JSON.stringify(t)),e.ulData.logRecords=[]}catch(n){}}function l(){var e={ulCorrelationId:t.getAttribute("data-correlation-id")};return t.getAttribute("data-is-inline-ul")&&(e.flowId=t.getAttribute("data-flow-id"),e.clientCorrelationId=t.getAttribute("data-client-correlation-id")),e}var e=window.PAYPAL\|\|{},t=document.getElementsByTagName("body")[0],n=9e3,r=window.attachEvent\|\|window.addEventListener,i=window.attachEvent?"onbeforeunload":"beforeunload",s,o=t.getAttribute("data-enable-client-cal-logging"),u=document.getElementById("token"),a=u&&u.value;o&&(Date.now?s=Date.now():s=(new Date).getTime(),e.ulData=e.ulData\|\|{},e.ulData.logRecords=[{evt:"ul-rendered",ts:s}],e.ulData.saveClientSideLogs=function(){var n;if(!e.ulData.logRecords\|\|e.ulData.logRecords.length<1)return;e.ulData.logRecords.push({evt:"ul-context-name"

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4945
Entropy (8bit):	4.629506414198924
Encrypted:	false
SSDEEP:	96:CXQSfsjFfE77sDwFD3udPJwEym6BxGuJCg6vuIp6v8TqUUwvd:WQAsjFfGML6TGu0ScTN
MD5:	0D105318575EA6A4FC653AA8290A3410
SHA1:	B8EF6C644FFDB3983C518014BC4C0FF4317A011B
SHA-256:	B3CC50B9E94BBECAAEB1079B64B8CA50616D1732824964C1CC2C5422627A0EC5
SHA-512:	8797088012937108ACA1905E27DC49900CE00D5D51DEF982454A4C5389F4301A8857734C4178EF311DAE6AED47F033E1C9DF3D6F6B0B9BEF694D9CE278B3D193
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/images/shared/paypal-logo-129x32.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... width="127.769px" height="31.5px" viewBox="0 0 127.769 31.5" enable-background="new 0 0 127.769 31.5" xml:space="preserve">..<g>...<g>....<g>.....<path fill="#009CDE" d="M98.396,6.933H91.37c-0.479,0-0.89,0.35-0.964,0.824l-2.841,18.015c-0.056,0.355,0.219,0.676,0.579,0.676......h3.604c0.335,0,0.622-0.244,0.674-0.576l0.807-5.107c0.074-0.474,0.483-0.824,0.964-0.824h2.223c4.628,0,7.298-2.239,7.996-6.678......c0.314-1.941,0.014-3.467-0.896-4.535C102.518,7.553,100.746,6.933,98.396,6.933z M99.207,13.512......c-0.384,2.522-2.31,2.522-4.173,2.522h-1.061l0.744-4.708c0.045-0.285,0.29-0.495,0.578-0.495h0.485c1.269,0,2.467,0,3.084,0.723.....

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65508)
Category:	dropped
Size (bytes):	70162
Entropy (8bit):	5.332928547809831
Encrypted:	false
SSDEEP:	1536:ihUQ8vmwdyuwzSpmURvVCzBuOtmfmVaom+gGmtBmxsuRc:iugz7e+KkCr
MD5:	0AF4783054B8E925EC024DC00FCB4510
SHA1:	B43B595D6899229217DA7CA15E8D1A846E93A666
SHA-256:	C3F1981E14042012337C6493597CD362261453611B727E91847A118B2B4CFFB7
SHA-512:	874D73FF48E306FBAC1471DB4F925DF8348F5C3D322AC13D769AF91F6DC67F33F0886674686F8A9F5168910FD8AC160F007423508ED29665E8138EC411C5BE84
Malicious:	false
Reputation:	low
Preview:	/@ 2024 PayPal (v1.9.5) /.!function(){"use strict";function r(t,e,n){(e=function(t){t=function(t,e){if("object"!=typeof t\|\|!t)return t;var n=t[Symbol.toPrimitive];if(void 0===n)return("string"===e?String:Number)(t);t=n.call(t,e\|\|"default");if("object"!=typeof t)return t;throw new TypeError("@@toPrimitive must return a primitive value.")}(t,"string");return"symbol"==typeof t?t:t+""}(e))in t?Object.defineProperty(t,e,{value:n,enumerable:!0,configurable:!0,writable:!0}):t[e]=n}function i(e,t){var n,r=Object.keys(e);return Object.getOwnPropertySymbols&&(n=Object.getOwnPropertySymbols(e),t&&(n=n.filter(function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable})),r.push.apply(r,n)),r}function g(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?i(Object(n),!0).forEach(function(t){r(e,t,n[t])}):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):i(Object(n)).forEach(function(t){Object.defineProperty(e,t,Ob

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65315)
Category:	downloaded
Size (bytes):	88110
Entropy (8bit):	5.276848915126569
Encrypted:	false
SSDEEP:	1536:opEcTreA2vNaZIsKF+HQUXi7VKNVdEUqN992B7TETUu/FZh5C+r:Bcf8Uy7V8VWUqaTEbz5C+r
MD5:	5CB3D10BF1449FB78DADA696632213E8
SHA1:	95752CA4737115A2E82145DCCAF396624E71935E
SHA-256:	B677CDFB9629330AC25C0A07F251DCD072A52537E7C68051A576EE4B27D99AA6
SHA-512:	DAF893B6B84347C28D677F060DE2E9605A7248ED777CD93C3B0730440376B8F7F16FF5EF483D3A182BED2AFA7FCEE5C051359A3C19472DC3B89F79E3459076C7
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/js/lib/jquery-3.7.0.js
Preview:	/!. jQuery JavaScript Library v3.7.0. * https://jquery.com/. . Copyright OpenJS Foundation and other contributors. * Released under the MIT license. * https://jquery.org/license. . Date: 2023-05-11T18:29Z. */..(function(e,t){"use strict";typeof module=="object"&&typeof module.exports=="object"?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)})(typeof window!="undefined"?window:this,function(e,t){"use strict";function y(e,t,n){n=n\|\|m;var r,i,s=n.createElement("script");s.text=e;if(t)for(r in g)i=t[r]\|\|t.getAttribute&&t.getAttribute(r),i&&s.setAttribute(r,i);n.head.appendChild(s).parentNode.removeChild(s)}function b(e){return e==null?e+"":typeof e=="object"\|\|typeof e=="function"?a[f.call(e)]\|\|"object":typeof e}function x(e){var t=!!e&&"length"in e&&e.length,n=b(e);return d(e)\|\|v(e)?!1:n==="array"\|\|t===0\|\|typeof t=="number"&&t>0&&t-1 in e}function T(e,t){return e.nodeName&&e.nodeName.toLower

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	796
Entropy (8bit):	5.825547003439886
Encrypted:	false
SSDEEP:	24:Yjt+S5HXnREv76bxSlAY7dP+Z823mN2cdxLqE1b7Y+ox90NUh:Yjt+mbYAKdOz2N2oYE1YZ9yUh
MD5:	84BB5D2DC79B95E2ADCE97AB3E67B0E6
SHA1:	F044C82C3EDFC6351E6F284318EDB8BD2D7F5F6A
SHA-256:	3E054857F836F807653AF2977FAC3231F6D2C48EA0C020D4CA0C112B7D646F5B
SHA-512:	EF5E2E6A0FB9CEA428122EB9B787C6914A6AB152F843B25FCED37361941CF9385F5F20DDEAA17B6774C318333677CD9632DFDB21D14AF56FB0FAA7A237BB9F2E
Malicious:	false
Reputation:	low
Preview:	{"features":{"custom_theme":true,"enc_get_req":true},"c":{"type":"hsw","req":"eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.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.LB60JZitvzwFOs0rNf6nVTllvzwWY1ToqIty20MsI2w"},"pass":true}

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3133
Entropy (8bit):	5.139941225383131
Encrypted:	false
SSDEEP:	96:6jdrlNAcMAxvrhq2Pi0Bi8TiGMR0beb8Zp0rrQhrU90LSKjEmOOT8jc1dTZrhq22:OdrlTMAxvrhq2PZB+0SwZp0rh6LMc1pw
MD5:	BE3248D30C62F281EB6885A57D98A526
SHA1:	9F45C328C50C26D68341D33B16C7FE7A04FA7F26
SHA-256:	EE8D7EA50B87CF8151107330FF3F0FC610B96A77E7A1A0ED8FCE87CF51610F54
SHA-512:	413022A49030FF1F6BDF673C3496EFBBEC41F7C7B8591E46B4D7F580378D073E6435227485EA833EF02CCDFCA301F40EBD05C60CFFE9FB61C020BFA352D30D1D
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/opinionLab/opinionLabComponent.js
Preview:	define(['opinionLab', 'onlineOpinionPopup'], function(opinionLab, popup) {...'use strict';..window.PAYPAL = window.PAYPAL ? window.PAYPAL : {};..var opVars = window.PAYPAL.opinionLabVars;.../* Defines the referral URL - Verify */..function paypalURL (pagename) {...var paypalURL = 'https://'.......+ opVars.countryCode.......+ '.paypal.com/'.......+ opVars.languageCode.......+ '/00/'.......+ escape(pagename.replace(/\s\|\//g, '_')).......+ '.page';...return paypalURL;..};...function assignSiteCatalystVars() {...if ( typeof opVars.isSiteRedirect !== 'undefined' && typeof opVars.isPaymentFlow !== 'undefined') {....if ( typeof s !== 'undefined') {.....if ( typeof s.pageName !== 'undefined') {......opVars.siteCatalystPageName = s.pageName;.....}.....if ( typeof s.prop7 !== 'undefined') {......opVars.siteCatalystC7 = s.prop7 == "none" ? "Unknown" : s.prop7;.....}.....if ( typeof s.prop5 !== 'undefined') {......opVars.siteCatalystAccountNumber = s.prop5;.....}....}....opinionLab.custom_var = up

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	25417
Entropy (8bit):	4.641664509877341
Encrypted:	false
SSDEEP:	384:fe93jGIJI2AN/yRikI+aDDe2MJS0KYqKDmBVogMorGNq49n7jneB54DpJqhhwAW4:Y4+/KBVC7xVs
MD5:	4FB1FFD27A73E1DBB4DD02355A950A0B
SHA1:	C1124B998C389FB9EE967DCCF276E7AF56F77769
SHA-256:	79C488E61278C71E41B75578042332FB3C44425E7DBB224109368F696C51E779
SHA-512:	77695F1A32BE64925B3564825B7CB69722A2C61B23665D5B80B62DEC5692579C12ACCABB970954F0BF73DFDBF861BF924F7CC1486E754E3A8F594B2969F853F2
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/dust-core.js
Preview:	/! Dust - Asynchronous Templating - v2.6.2. http://linkedin.github.io/dustjs/.* Copyright (c) 2015 Aleksander Williams; Released under the MIT License /.(function (root, factory) {. /global define*/. if (typeof define === 'function' && define.amd && define.amd.dust === true) {. define('dust.core', [], factory);. } else if (typeof exports === 'object') {. module.exports = factory();. } else {. root.dust = factory();. }.}(this, function() {. var dust = {. "version": "2.6.2". },. NONE = 'NONE', ERROR = 'ERROR', WARN = 'WARN', INFO = 'INFO', DEBUG = 'DEBUG',. EMPTY_FUNC = function() {};.. dust.config = {. whitespace: false,. amd: false. };.. // Directive aliases to minify code. dust._aliases = {. "write": "w",. "end": "e",. "map": "m",. "render": "r",. "reference": "f",. "section": "s",. "exists": "x",. "notexists": "nx",. "block": "b",. "partial": "p",. "helper": "h". };.. (function initLogging() {. /

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	730127
Entropy (8bit):	5.580205540014102
Encrypted:	false
SSDEEP:	12288:idEvafWWLLcpOTAeR2LzlbLiQyhGEF5Ndbkrmt6Cbh+O3cZmzGfbKjwfhQMuanJL:U1WkXsyquWbiwML325u1SS1FGqNUwGss
MD5:	6D4021788FF83DAA65EDBBCF68B3BF67
SHA1:	B7D5BA8A893F1E95C1B5C3F5B8F0D905D46717F7
SHA-256:	6CC07180ECDDF179721B2399A06FC9E6CE42D75C20D0EE1C3B121A0A0D883629
SHA-512:	12912DC714DD054543F6B8990683FFA693FD13F7AC359C58F833050691413FCAB516071718AE2176D599139DEDFAAE38E19DF6A1EB961C92134741205B9E8D47
Malicious:	false
Reputation:	low
URL:	https://newassets.hcaptcha.paypal.com/c/cc9cbcc44893d9601186ed793b76ac72a56a3e176be51252819b38f7d2f1f97c/hsw.js
Preview:	var hsw=function YRIR(){"use strict";function A(A,Q,B){return Q<=A&&A<=B}function Q(A){if(void 0===A)return{};if(A===Object(A))return A;throw TypeError("Could not convert argument to dictionary")}var B=function(A){return A>=0&&A<=127},E=-1;function I(A){this.tokens=[].slice.call(A),this.tokens.reverse()}I.prototype={endOfStream:function(){return!this.tokens.length},read:function(){return this.tokens.length?this.tokens.pop():E},prepend:function(A){if(Array.isArray(A))for(var Q=A;Q.length;)this.tokens.push(Q.pop());else this.tokens.push(A)},push:function(A){if(Array.isArray(A))for(var Q=A;Q.length;)this.tokens.unshift(Q.shift());else this.tokens.unshift(A)}};var C=-1;function g(A,Q){if(A)throw TypeError("Decoder error");return Q\|\|65533}function D(A){return A=String(A).trim().toLowerCase(),Object.prototype.hasOwnProperty.call(w,A)?w[A]:null}var w={};[{encodings:[{labels:["unicode-1-1-utf-8","utf-8","utf8"],name:"UTF-8"}],heading:"The Encoding"}].forEach((function(A){A.encodings.forEach((f

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	dropped
Size (bytes):	65441
Entropy (8bit):	5.030761148036821
Encrypted:	false
SSDEEP:	1536:tIipojPGlIr8vKP0DPLX7uE+6ZrstVjIc1s73+lPBfTpErw9JuEHPVoglPdYK5aO:tIip4P8Ir8vKP0DPLX7uE+ustVj11s7S
MD5:	EB3B3278A5766D86F111818071F88058
SHA1:	333152C3D0F530EEE42092B5D0738E5CB1EEFD73
SHA-256:	1203F43C3293903ED6C84739A9AA291970692992E310AAB32520C5CA58001CEA
SHA-512:	DD9DDC1B6A52AD37C647562D42979A331BE6E6D20885B1A690C3AEEE2CFC6F46404B994225D87141CA47D5C9650CC66C72A118B2D269D2F3FDEA52624216E3BC
Malicious:	false
Reputation:	low
Preview:	(function (global, factory) {..typeof exports === 'object' && typeof module !== 'undefined' ? module.exports = factory() :..typeof define === 'function' && define.amd ? define('underscore', factory) :..(global = typeof globalThis !== 'undefined' ? globalThis : global \|\| self, (function () {.. var current = global._;.. var exports = global._ = factory();.. exports.noConflict = function () { global._ = current; return exports; };..}()));. }(this, (function () {..// Underscore.js 1.13.4..// https://underscorejs.org..// (c) 2009-2022 Jeremy Ashkenas, Julian Gonggrijp, and DocumentCloud and Investigative Reporters & Editors..// Underscore may be freely distributed under the MIT license.. ..// Current version...var VERSION = '1.13.4';. ..// Establish the root object, `window` (`self`) in the browser, `global`..// on the server, or `this` in some virtual machines. We use `self`..// instead of `window` for `WebWorker` support...var root = (typeof self == 'object' && self.

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1198
Entropy (8bit):	4.92536183669385
Encrypted:	false
SSDEEP:	24:PzRCvsqk/AMvGGP5Zb0sgK1Z/O7+KU43IYxxqh3snFEPmZwifnmTNK43GNUSoG91:P9wM/tGGBZYsgKPU+KU43s3d+ZwifmTs
MD5:	B625A3DC02E4E9CBCD21AE7E50F331A3
SHA1:	E8A50FA6A995A8BEBEDCD190972644809EE2D089
SHA-256:	4A178734B54E5D15A488E5360123579D7F32AFAE93C18E751790DA8C8B3F8FF1
SHA-512:	F83810E9A023DBDAE40109B349AA37523A8F6AC7CA68C331E5923A1DF88DCBF593A3607A1EC7D5A4F05F509F4EE4ADDC28D1A869AA27B008D9CDD2CCF7E54241
Malicious:	false
Reputation:	low
Preview:	require(['nougat', 'backbone', 'router', 'widgets/analytics', 'underscore', 'opinionLabComponent'],...function (nougat, Backbone, Router, Analytics, _) {....'use strict';...var context, viewName, router;....// Turning Backbone into a pub/sub hub..._.extend(Backbone, Backbone.Events);....// Create instance of the App...var app = {.....initialize : function () {......// Analytics used for tracking links and errors.....Analytics.initialize();......// Grab data from the page context.....nougat.setContext($(document.body).data());......context = nougat.getContext();......viewName = context.viewName;......// Only instantiate the standalone CAPTCHA view but no other views because the Backbone router.....// will never be triggered because the URL in the browser window will not belong to the Auth.....// Challenge application......if (viewName === 'authcaptcha') {......var asyncAssets = [ "view/" + viewName ];.......require(asyncAssets, function (View) {.......if (typeof View === "function") {..

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	293429
Entropy (8bit):	5.083605252332618
Encrypted:	false
SSDEEP:	6144:pCLfh6nicf8Z5wPTdpM4mDoz1EsnFyyyHh3zOxPnS8kVLkIVfzYAK6k1PY:pfw4mDiTFyA6TVfMAKNZY
MD5:	CCD2CA0B9DDB09BD19848D61D1603288
SHA1:	7CB2A2148D29FDD47EAFAEEEE8D6163455AD44BE
SHA-256:	4D0AD40605C44992A4EEB4FC8A0C9BED4F58EFDB678424E929AFABCAAC576877
SHA-512:	E81F44F0BD032E48FEB330A4582D8E94059C5DE69C65CB73D28C9C9E088E6DB3DCB5664FF91487E2BBC9401E3F3BE21970F7108857AB7CED62DE881601277CDD
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/jquery-1.12.4.js
Preview:	/!. jQuery JavaScript Library v1.12.4. * http://jquery.com/. . Includes Sizzle.js. * http://sizzlejs.com/. . Copyright jQuery Foundation and other contributors. * Released under the MIT license. * http://jquery.org/license. . Date: 2016-05-20T17:17Z. */..(function( global, factory ) {...if ( typeof module === "object" && typeof module.exports === "object" ) {...// For CommonJS and CommonJS-like environments where a proper `window`...// is present, execute the factory and get jQuery....// For environments that do not have a `window` with a `document`...// (such as Node.js), expose a factory as module.exports....// This accentuates the need for the creation of a real `window`....// e.g. var jQuery = require("jquery")(window);...// See ticket #14549 for more info....module.exports = global.document ?....factory( global, true ) :....function( w ) {.....if ( !w.document ) {......throw new Error( "jQuery requires a window with a document" );.....}.....return factory( w );....};..

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4315
Entropy (8bit):	5.129546814483834
Encrypted:	false
SSDEEP:	96:jdrlOMQpaKDBiagJAWear9oaadIcDhWSbVn07cfMerbsCC5hftc/U51dK0i4uVGA:jdrlOzBiasAWEaKzDASbVn07uMerbsCL
MD5:	1121A6FAB74DA10B2857594A093EF35C
SHA1:	7DCD1500AD9352769A838E9F8214F5D6F886ACE2
SHA-256:	78EB4ED77419E21A7087B6DFCC34C98F4E57C00274EE93E03934A69518AD917A
SHA-512:	B9EB2CEF0EADD85E61A96440497462C173314E6B076636AD925AF0031541019E30C5AF4C89D4EAFA1C2676416BFECEC56972875155020E457F06568BCA50B587
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/opinionLab/opinionLab.js
Preview:	/. This file contains the javascript functions and snippets. * that are used to introduce the site feedback link in the footer.. * Function O_GoT inserts the link in the footer list and assigns onclick. * for popup window that displays the feedback from from opinionlab site.. /..define([], function () {...'use strict';..window.PAYPAL = window.PAYPAL ? window.PAYPAL : {};..var opVars = window.PAYPAL.opinionLabVars;...var _doc = document,..._w . = window,..._tm = (new Date()).getTime(),..._sH = screen.height,..._sW = screen.width;.../.. This method forms the siteFeedback image tag to be written into the DOM.. * Note: While calling this method, please make sure to check if sitefbIcon is enabled. This is decided by boolean the property 'showSitefbIcon'... * @returns sfimg.. */..function siteFeedBackImage () {...var sfImg = document.createElement('img');...sfImg.setAttribute('src', opVars.sitefb_plus_icon);...sfImg.setAttribute('alt', '');...return sfImg;..}...function popUp (opi

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1931), with no line terminators
Category:	downloaded
Size (bytes):	1931
Entropy (8bit):	5.86879365970491
Encrypted:	false
SSDEEP:	48:iEAhbKo75XI2ovtUjPKtXsDXx/gE1sc/LrwUnG:pAcMI5czjs2suG
MD5:	54AFF6E92DCA1D8575B8425A8993E3F1
SHA1:	7D9AAC64ED3E0E30077E56F147F106289C24A317
SHA-256:	C6EA4E29A6CDF64FAB7C4494B8EDA8E90C6BFD4C03D84DA4210AFCBF0D460655
SHA-512:	FC5CE67E066891A9D31FCB6C9B92BA9D711A7CC248A3CFABA3C469D9691CC43773C688553E0C1E3986F7BB6BE75FC239BE498777FF5F93DD14C4104F37AF9F3A
Malicious:	false
Reputation:	low
URL:	https://www.recaptcha.net/recaptcha/enterprise.js?render=6LdCCOUUAAAAAHTE-Snr6hi4HJGtJk_d1_ce-gWB&hl=en
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var E='enterprise',a=w[N]=w[N]\|\|{},gr=a[E]=a[E]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.recaptcha.net/recaptcha/enterprise/';(cfg['enterprise']=cfg['enterprise']\|\|[]).push(true);(cfg['enterprise2fa']=cfg['enterprise2fa']\|\|[]).push(true);(cfg['render']=cfg['render']\|\|[]).push('6LdCCOUUAAAAAHTE-Snr6hi4HJGtJk_d1_ce-gWB');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A7uxtj3+hJmOcZFooFT0Ps276PuOqGnM1jfoPbFvxWp73VC60LnYGzayHVvcFeEiF0qrwy7fQAL+gGVXU+f9IQcAAACTeyJvcmlnaW4iOiJodHRwczovL3JlY2FwdGNoYS5uZXQ6NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14667)
Category:	downloaded
Size (bytes):	14854
Entropy (8bit):	5.248951222443214
Encrypted:	false
SSDEEP:	384:wMwkQT8rQL29uGTmqvpPEDjIy1wJmYkJs3wzhErIURNve88PMEWuP1:wpT8EYRPEDsy1wJkrVDcNvdEWuP1
MD5:	8EC7CE4519F5C6B2642DCCFE6BDAE23B
SHA1:	667A6CA8F5769BA9B49655E8C6779CECF43A7CBF
SHA-256:	C007D73792AC2D25882BFBB573E700E721A0ADACFAB947E6A0B64A61991FECF0
SHA-512:	F4AA97EE216C5E9BCD6796BE9A3598B6EAF9B55E252001FC35F6117708666190E14838940B9EDCC18867EB3353C149A883BDE02F620289200EE2387EACFE6B36
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/js/lib/require.js
Preview:	/. RequireJS 2.1.6 Copyright (c) 2010-2012, The Dojo Foundation All Rights Reserved.. Available via the MIT or new BSD license.. see: http://github.com/jrburke/requirejs for details./..var requirejs,require,define;(function(ba){function J(e){return"[object Function]"===N.call(e)}function K(e){return"[object Array]"===N.call(e)}function z(e,t){if(e){var n;for(n=0;n<e.length&&(!e[n]\|\|!t(e[n],n,e));n+=1);}}function O(e,t){if(e){var n;for(n=e.length-1;-1<n&&(!e[n]\|\|!t(e[n],n,e));n-=1);}}function t(e,t){return ha.call(e,t)}function m(e,n){return t(e,n)&&e[n]}function H(e,n){for(var r in e)if(t(e,r)&&n(e[r],r))break}function S(e,n,r,i){return n&&H(n,function(n,s){if(r\|\|!t(e,s))i&&"string"!=typeof n?(e[s]\|\|(e[s]={}),S(e[s],n,r,i)):e[s]=n}),e}function v(e,t){return function(){return t.apply(e,arguments)}}function ca(e){throw e}function da(e){if(!e)return e;var t=ba;return z(e.split("."),function(e){t=t[e]}),t}function B(e,t,n,r){return t=Error(t+"\nhttp://requirejs.org/docs/errors.html#"+e),

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15000)
Category:	dropped
Size (bytes):	15045
Entropy (8bit):	5.097122711465238
Encrypted:	false
SSDEEP:	384:ILCLoqKvmwdkPgn/sORxSYLiH0Udhw69cS:ILCLo7vmwdkg/1RxSwiUihw69cS
MD5:	1E4CBFFE3F8F8266818A96094F74EB41
SHA1:	C4EB64737FB1396CAC64B686B4442C3F846BA323
SHA-256:	2383F109C70BB6A1EF525D5D33E5F9332B105D7C622CD93608677E96631DC17C
SHA-512:	6309CE4DDBDAA62A9C35E44BE6889E4772A6BFAFBA5B3939165F9BF28CFD8709A654418FB9F93297569C087230C1D298C0EB36AE02825AF49977200C1CA133AF
Malicious:	false
Reputation:	low
Preview:	/! 2024 dl-pp-latm@paypal.com ver(5.1.1) /.!function(){"use strict";!function(){function e(e,n){(null==n\|\|n>e.length)&&(n=e.length);for(var o=0,a=Array(n);o<n;o++)a[o]=e[o];return a}function n(n,o){return function(e){if(Array.isArray(e))return e}(n)\|\|function(e,n){var o=null==e?null:"undefined"!=typeof Symbol&&e[Symbol.iterator]\|\|e["@@iterator"];if(null!=o){var a,t,d,i,r=[],b=!0,w=!1;try{if(d=(o=o.call(e)).next,0===n){if(Object(o)!==o)return;b=!1}else for(;!(b=(a=d.call(o)).done)&&(r.push(a.value),r.length!==n);b=!0);}catch(e){w=!0,t=e}finally{try{if(!b&&null!=o.return&&(i=o.return(),Object(i)!==i))return}finally{if(w)throw t}}return r}}(n,o)\|\|function(n,o){if(n){if("string"==typeof n)return e(n,o);var a={}.toString.call(n).slice(8,-1);return"Object"===a&&n.constructor&&(a=n.constructor.name),"Map"===a\|\|"Set"===a?Array.from(n):"Arguments"===a\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(a)?e(n,o):void 0}}(n,o)\|\|function(){throw new TypeError("Invalid attempt to destructure non-it

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2341), with no line terminators
Category:	downloaded
Size (bytes):	2341
Entropy (8bit):	5.08135258633511
Encrypted:	false
SSDEEP:	48:oNzDz0BW4FEM3QVOaxWSwaVWx01XP196HLMCiEuEGB2J9XY:oRDzMW4bKOyTwag0JPH6r/TuTs9I
MD5:	FD614191217CAA07489553ECE0A11197
SHA1:	8ECD6CA240C4D95856A24E93B0C13B6265BF3A6E
SHA-256:	4E8EB79476417AE63A24B8B00B1DB0CCD012582A8936137808C592A524C1C68F
SHA-512:	F9162CD8BE5E69372901EA7A37430D2B418E188399AEF0012F679C7866DEE920EDDB0AFE8D47513B057765E6C725A97D193AE3874ED5E27DF883134A659EE896
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/js/app.js
Preview:	requirejs.config({packages:[{name:"dust-makara-helpers",version:"4.2.0",location:"browser_modules/dust-makara-helpers",main:"browser.amd.js"},{name:"dusthelpers-supplement",version:"2.0.1",location:"browser_modules/dusthelpers-supplement",main:"index.js"},{name:"dustjs-helpers",version:"1.6.3",location:"browser_modules/dustjs-helpers",main:"dist/dust-helpers.js"},{name:"dustjs-linkedin",version:"3.0.1",location:"browser_modules/dustjs-linkedin",main:"dist/dust-full.js"},{name:"pulvus-provide",version:"1.0.3",location:"browser_modules/pulvus-provide",main:"provide.js"},{name:"requirejs",version:"2.3.6",location:"browser_modules/requirejs",main:"require.js"}],paths:{_languagepack:document.documentElement.getAttribute("data-langpack"),jquery:"lib/jquery-3.7.0",jqueryUI:"lib/jquery-ui.min",json:typeof JSON=="undefined"?"lib/json2":"empty:",underscore:"lib/underscore-1.13.6",backbone:"lib/backbone-0.9.2",backboneSubroute:"lib/backbone-subroute-0.3.2",BaseView:"core/baseView","dustmotes-iter

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	9329
Entropy (8bit):	5.289117432268145
Encrypted:	false
SSDEEP:	192:TyTHN2gqPk/gBMVyymnt2mZh9rZ+MP7yWktMfgUTQ1YoJ+XbL6:TyTHNlqPkYBMyntbZhJwrztMfgUTQ1Ye
MD5:	CE68CBF34207740F95051F4544CB891C
SHA1:	C42D3BF47D1FDBFE65B99D66891EB33E2CB66B79
SHA-256:	83CDE8296A338000A9957B29BF86EAF7405AE9C881A6C570653659DFE61E6D4C
SHA-512:	2FE649411EBE8EF0C75E78D4E8247401840F2D22BEE9BFA7C75F5F7CC3971FF6580F84517E5BF59633AC35F57BFF98A76DDC53F39CDE2702E0A0508A9FDE192B
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/hcaptcha/hcaptcha_fph.html?siteKey=bf07db68-5c2e-42e8-8779-ea8384890eea&locale.x=en_US&country.x=US&checkConnectionTimeout=10000&domain=hcaptcha.paypal.com&imgsDomain=imgs.hcaptcha.paypal.com&assetsDomain=newassets.hcaptcha.paypal.com&accountsDomain=accounts.hcaptcha.paypal.com&customDomains=
Preview:	<html>..<head>..<style>....spinner:after,....spinner:before {....content: ''...}....#recaptcha {....z-index: 1...}....@-webkit-keyframes rotation {....from {.....-webkit-transform: rotate(0);.....transform: rotate(0)....}.....to {.....-webkit-transform: rotate(359deg);.....transform: rotate(359deg)....}...}....@-moz-keyframes rotation {....from {.....-moz-transform: rotate(0);.....transform: rotate(0)....}.....to {.....-moz-transform: rotate(359deg);.....transform: rotate(359deg)....}...}....@-o-keyframes rotation {....from {.....-o-transform: rotate(0);.....transform: rotate(0)....}.....to {.....-o-transform: rotate(359deg);.....transform: rotate(359deg)....}...}....@keyframes rotation {....from {.....transform: rotate(0)....}.....to {.....transform: rotate(359deg)....}...}.....spinner:before {....display: block;....margin: 40px auto;....width: 34px;....height: 34px;....border-left: 8px solid rgba(0, 0, 0, .2);....border-right: 8px solid rgba(0, 0, 0, .2);....border-bottom: 8px solid

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	730127
Entropy (8bit):	5.580205540014102
Encrypted:	false
SSDEEP:	12288:idEvafWWLLcpOTAeR2LzlbLiQyhGEF5Ndbkrmt6Cbh+O3cZmzGfbKjwfhQMuanJL:U1WkXsyquWbiwML325u1SS1FGqNUwGss
MD5:	6D4021788FF83DAA65EDBBCF68B3BF67
SHA1:	B7D5BA8A893F1E95C1B5C3F5B8F0D905D46717F7
SHA-256:	6CC07180ECDDF179721B2399A06FC9E6CE42D75C20D0EE1C3B121A0A0D883629
SHA-512:	12912DC714DD054543F6B8990683FFA693FD13F7AC359C58F833050691413FCAB516071718AE2176D599139DEDFAAE38E19DF6A1EB961C92134741205B9E8D47
Malicious:	false
Reputation:	low
Preview:	var hsw=function YRIR(){"use strict";function A(A,Q,B){return Q<=A&&A<=B}function Q(A){if(void 0===A)return{};if(A===Object(A))return A;throw TypeError("Could not convert argument to dictionary")}var B=function(A){return A>=0&&A<=127},E=-1;function I(A){this.tokens=[].slice.call(A),this.tokens.reverse()}I.prototype={endOfStream:function(){return!this.tokens.length},read:function(){return this.tokens.length?this.tokens.pop():E},prepend:function(A){if(Array.isArray(A))for(var Q=A;Q.length;)this.tokens.push(Q.pop());else this.tokens.push(A)},push:function(A){if(Array.isArray(A))for(var Q=A;Q.length;)this.tokens.unshift(Q.shift());else this.tokens.unshift(A)}};var C=-1;function g(A,Q){if(A)throw TypeError("Decoder error");return Q\|\|65533}function D(A){return A=String(A).trim().toLowerCase(),Object.prototype.hasOwnProperty.call(w,A)?w[A]:null}var w={};[{encodings:[{labels:["unicode-1-1-utf-8","utf-8","utf8"],name:"UTF-8"}],heading:"The Encoding"}].forEach((function(A){A.encodings.forEach((f

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	2050
Entropy (8bit):	4.751114111932053
Encrypted:	false
SSDEEP:	48:Kvs0QKsLGH7t9I6FdYWGT/aqTTj1RXXGFWAWUW1IJxFIe/Nf12lrlriXe:0sxKsW7t9t6HRaZeIJHIGNt2xxiXe
MD5:	5186E8EFF91DBD2EB4698F91F2761E71
SHA1:	9E6F0A6857E1FDDBAE2454B31B0A037539310E17
SHA-256:	BE90C8D2968F33F3798B013230B6C818AE66B715F7770A7D1D2E73DA26363D87
SHA-512:	4DF411A60D7A6A390936D7AD356DC943F402717F5D808BB70C7D0AC761502E0B56074F296514060D9049F0225EAE3D4BCFA95873029BE4B34C8796A995575B94
Malicious:	false
Reputation:	low
Preview:	/* global define:true /../. Abstract view which enables rendering contents with a template.. /.define([..'nougat',..'underscore',..'backbone'.],..function (nougat, _, Backbone) {....'use strict';.....var BaseView = Backbone.View.extend({...../.... The name of the template that represents this view..... * Must be defined for render to succeed..... /....template: null,...../.... A default implementation of the standard Backbone render method..... * Handles rendering a template with the current view model..... * @returns the current view instance.... /....render: function () {.....var renderer = nougat.viewRenderer,......template = this.template,......data = this.serialize();......_.bindAll(this, '_doRender', 'renderError', 'afterRender');......this.beforeRender();......renderer.render(template, data).......done(this._doRender).......fail(this.renderError).......always(this.afterRender);......return this;....},...../.... 'Protected' imlementation of what to do with tem

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1305), with no line terminators
Category:	downloaded
Size (bytes):	1305
Entropy (8bit):	5.114410235023359
Encrypted:	false
SSDEEP:	24:2Q5RCCLxZhLSEZsNA9DBHey1HgWRWUVIoLAGa9SRRqys3KJS7nvLQR/s8eFEmYzM:uIxZYEiNA9DJesHgWwUKLGyS+ysLAvep
MD5:	77318F6FDC00171A089C5A9554C5D77F
SHA1:	C875B8A24BE51AEA1F71C5AAE4F79B76018F1C86
SHA-256:	F92AC1FD655D048DD658EC255FF71A6D409F2DA598B58199EFA67B976BD61057
SHA-512:	CB9BDB5C36A1ED91CA3876A09DE1CB459D336CB08F9A501529DCFE4028BC2188DD6BF7D77C72B1C939353A5ADF37E7BEAED3078B32BCBF4786D9814524784D07
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/js/widgets/clientCalLogger.js
Preview:	(function(){function f(t){xhr=new XMLHttpRequest,xhr.open("POST","/signin/client-log",!0),xhr.setRequestHeader("Content-Type","application/json;charset=UTF-8");try{xhr.send(JSON.stringify(t)),e.ulData.logRecords=[]}catch(n){}}function l(){var e={ulCorrelationId:t.getAttribute("data-correlation-id")};return t.getAttribute("data-is-inline-ul")&&(e.flowId=t.getAttribute("data-flow-id"),e.clientCorrelationId=t.getAttribute("data-client-correlation-id")),e}var e=window.PAYPAL\|\|{},t=document.getElementsByTagName("body")[0],n=9e3,r=window.attachEvent\|\|window.addEventListener,i=window.attachEvent?"onbeforeunload":"beforeunload",s,o=t.getAttribute("data-enable-client-cal-logging"),u=document.getElementById("token"),a=u&&u.value;o&&(Date.now?s=Date.now():s=(new Date).getTime(),e.ulData=e.ulData\|\|{},e.ulData.logRecords=[{evt:"ul-rendered",ts:s}],e.ulData.saveClientSideLogs=function(){var n;if(!e.ulData.logRecords\|\|e.ulData.logRecords.length<1)return;e.ulData.logRecords.push({evt:"ul-context-name"

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12696), with no line terminators
Category:	downloaded
Size (bytes):	12696
Entropy (8bit):	5.130049969968838
Encrypted:	false
SSDEEP:	192:oLV3zev1o5E6PcoF+kkEBukQBEzmVxastV:oLV3SNSXEkkEBujSzm6WV
MD5:	21BE63CFA9F3A9BEAD27FDC3555D397B
SHA1:	A3AD888102598B9F846045BA5A1D75284B9E155D
SHA-256:	0F3A415DFDA1FFC276D264A1E26D47AB8B480B80219142661E05C75AD35E8CBD
SHA-512:	458192E91CE54129DA8AA0DABEC8C75E8786DC086916C89BEC461018969877477A9EA1035FD38681C8B1BFA29EF748F7DDC97BA4CAE615E7EC7CA4B49CF793A8
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/js/view/mainContentView.js
Preview:	define(["jquery","backbone","newgat","pageView","postMessage","authcaptcha"],function(e,t,n,r,i,s){"use strict";var o=r.extend({el:"#main",rlogIds:[],LOADING:"loading",currentViewTemplate:undefined,previousViewTemplate:"null",currentView:"null",pageName:"null",keepMeLoggedIn:undefined,events:{"submit form.proceed":"proceed","click a.proceed":"proceed"},postCaptchaMessageSent:!1,initialize:function(){var r,s,o,u;this.clientCalLog({evt:"ul-loaded"}),this.model=new t.Model(n.getContext()),this.template=this.model.get("viewName"),this.currentViewTemplate=this.model.get("viewName");if(this.isMiniBrowser()){var a=this;o=window.attachEvent?"onbeforeunload":"beforeunload",u=window.addEventListener\|\|window.attachEvent,u(o,function(t){var n=["eConsent","login"],r=document.getElementById("rememberMe"),i=r&&r.getAttribute("data-maxRMReached"),s=t.target\|\|t.srcElement,o=s&&s.activeElement&&s.activeElement.nodeName;if(n.indexOf(a.currentViewTemplate)>=0){a.sendPostMessage({flowtype:"prox",status:"ex

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	6158
Entropy (8bit):	4.803683897903787
Encrypted:	false
SSDEEP:	192:oHXo3pSW7yiuzvCyBoIQo/ZbTHvUMfItoa39SrWM8N6fG:QopAvCyR/ZbTHvUMfItoa39K8NMG
MD5:	95AA9AA9D26FCCCC5BB228A7A86CAECB
SHA1:	55A5BFC1A1B4192C4FDB480C7E5FDFC0FFD50A44
SHA-256:	75C159C9974A7207171CF1F4ED302F91F90AE95233FDD64E994FD66ADA89AB20
SHA-512:	3598C0552DB1D8039D9F898C14EF1B91E6DA6069B8FD7F53B5D2750EBD1046E7317B18DE4D3D2A307734E4B066E48BDF37B924948BC79B9027CCC2D5A8DE1D17
Malicious:	false
Reputation:	low
Preview:	"use strict";..function init() {. const key = getListenerSearchKey('data-key');. const sessionId = getListenerSearchKey('data-sessionId');. const csrf = getListenerSearchKey('data-csrf');. const action = getListenerSearchKey('data-action');. const src = getListenerSearchKey('data-src');. const submitURL = getListenerSearchKey('data-submitURL');. const startTime = getListenerSearchKey('data-startTime');...renderGRCV3Enterprise({. key,. action,. sessionId,. csrf,. src,. submitURL,. startTime. });.. var eventMethod = window.addEventListener ? "addEventListener" : "attachEvent",. eventer = window[eventMethod],. messageEvent = (eventMethod === "attachEvent") ? "onmessage" : "message",. clickEvent = eventMethod === "attachEvent" ? "onclick" : "click";.. document[eventMethod](clickEvent,resizeWidget);.. eventer(messageEvent, function(e) {. if(!e.data){. return;.

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (981), with no line terminators
Category:	dropped
Size (bytes):	981
Entropy (8bit):	4.987338872723357
Encrypted:	false
SSDEEP:	24:13AQ6l5/Vl6RX6uZ6uClXbIZ6FxqEuZz/fI8cl2T6qEuHmnYC:1w5/qqJysOEszHdrPEJnx
MD5:	2DC7C4277E22248E78386A41C4D0259E
SHA1:	582B7DBF6D93695743C23129DDADBD895D72E2D2
SHA-256:	A4171FB08505D1ED6009AEA69DD817173F0AC2B391BE7131138A7AB53ED589EC
SHA-512:	6C735A991A1FA17B036B6633A8304B8508C19D00B3E2E57DFA9AEEF7D3ECA997140C59B2F2F3CFDC68EDA5153AA5D4F2E1623BAC5B40D07129A4527712571015
Malicious:	false
Reputation:	low
Preview:	define(["jquery","BaseView","newgat"],function(e,t,n){"use strict";var r=t.extend({el:"body",events:{"click a[data-pagename], input[data-pagename], label[data-pagename]":"trackLink"},trackLink:function(t){var n=e(t.currentTarget),r=n.attr("data-pagename")\|\|s.pageName,i=n.attr("data-pagename2")\|\|s.prop25;s&&(s.prop26=n.attr("name")\|\|n.html(),s.prop25=s.eVar25=i,s.prop27=s.pageName+"\|"+s.prop26,s.pageName=r,n.attr("data-transactiondetailslinks")&&(s.prop28=n.attr("data-transactiondetailslinks")),s.tl(),e("#analytics").attr("data-pagename",r).attr("data-c25",i).attr("data-c27",s.prop27))}}),i={view:null,initialize:function(){this.view=new r,n.on("trackError",e.proxy(this.trackError,this))},trackError:function(t){s&&(s.prop25=s.eVar25=t.prop25,s.prop27=s.pageName+"\|"+s.prop26,s.pageName=t.pageName,s.prop14=t.prop14,s.prop15=t.prop15,s.prop29=t.prop29,s.tl(),e("#analytics").attr("data-pagename",s.pageName).attr("data-c25",s.prop25).attr("data-c27",s.prop27))}};return i});

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (981), with no line terminators
Category:	downloaded
Size (bytes):	981
Entropy (8bit):	4.987338872723357
Encrypted:	false
SSDEEP:	24:13AQ6l5/Vl6RX6uZ6uClXbIZ6FxqEuZz/fI8cl2T6qEuHmnYC:1w5/qqJysOEszHdrPEJnx
MD5:	2DC7C4277E22248E78386A41C4D0259E
SHA1:	582B7DBF6D93695743C23129DDADBD895D72E2D2
SHA-256:	A4171FB08505D1ED6009AEA69DD817173F0AC2B391BE7131138A7AB53ED589EC
SHA-512:	6C735A991A1FA17B036B6633A8304B8508C19D00B3E2E57DFA9AEEF7D3ECA997140C59B2F2F3CFDC68EDA5153AA5D4F2E1623BAC5B40D07129A4527712571015
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/js/widgets/analytics.js
Preview:	define(["jquery","BaseView","newgat"],function(e,t,n){"use strict";var r=t.extend({el:"body",events:{"click a[data-pagename], input[data-pagename], label[data-pagename]":"trackLink"},trackLink:function(t){var n=e(t.currentTarget),r=n.attr("data-pagename")\|\|s.pageName,i=n.attr("data-pagename2")\|\|s.prop25;s&&(s.prop26=n.attr("name")\|\|n.html(),s.prop25=s.eVar25=i,s.prop27=s.pageName+"\|"+s.prop26,s.pageName=r,n.attr("data-transactiondetailslinks")&&(s.prop28=n.attr("data-transactiondetailslinks")),s.tl(),e("#analytics").attr("data-pagename",r).attr("data-c25",i).attr("data-c27",s.prop27))}}),i={view:null,initialize:function(){this.view=new r,n.on("trackError",e.proxy(this.trackError,this))},trackError:function(t){s&&(s.prop25=s.eVar25=t.prop25,s.prop27=s.pageName+"\|"+s.prop26,s.pageName=t.pageName,s.prop14=t.prop14,s.prop15=t.prop15,s.prop29=t.prop29,s.tl(),e("#analytics").attr("data-pagename",s.pageName).attr("data-c25",s.prop25).attr("data-c27",s.prop27))}};return i});

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	3824
Entropy (8bit):	5.294305074122082
Encrypted:	false
SSDEEP:	48:SjzdrlxC4UtzM43bHBxn0YEFYGHHoi8MM4nBJAodM4QMhTQYAbbchxnVcJ3ROH8O:wdrlEhLkLtviMBCbcnuAz0hIK5m6mKA
MD5:	6F1A28AC77F6C6F42D972D117BD2169A
SHA1:	6A02B0695794F40631A3F16DA33D4578A9CCF1DC
SHA-256:	3BFDB2200744D989CEAD47443B7720AFF9D032ABD9B412B141BD89BCD7619171
SHA-512:	70F8A714550CDCB7FCDBC3E8BAD372A679DF15382EEBF546B7E5B18CF4BA53EA74AB19BBA154F3FC177F92ED4245A243621927FCF91125911B06E39D58AF7144
Malicious:	false
Reputation:	low
Preview:	/. Spec #22956 OpinionLab. /..define(['opinionLab'], function(opinionLab) {...'use strict';..window.PAYPAL = window.PAYPAL ? window.PAYPAL : {};..var opVars = window.PAYPAL.opinionLabVars;...function showpopup(redirectTo) {...var mywin;...mywin = window.open('', '', 'top=3000,left=3000,width=1,height=1,menubar=0,scrollbars=0,resizeable=1');...if (mywin) {....mywin.document.open....var myURL = ""...../* This JS is customized for sparta because a JS call..... /* Comparing with corresponding XPT code - Removed the External opinionlab js from the popup content as it could not be loaded due to path issue */.....var HTML_txt = "<html><scr" + "ipt language='javascript'>";....HTML_txt = HTML_txt + "_hr='" + opinionLab._hr + "';";....HTML_txt = HTML_txt + "_ht='" + opinionLab._ht + "';";....HTML_txt = HTML_txt + "custom_var='" + opinionLab.custom_var + "';";.....if (( typeof opinionLab.baseurl == 'undefined')) {....} else {.....HTML_txt = HTML_txt + "baseurl='" + opinionLab.baseurl + "';";...

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65508)
Category:	dropped
Size (bytes):	70162
Entropy (8bit):	5.332928547809831
Encrypted:	false
SSDEEP:	1536:ihUQ8vmwdyuwzSpmURvVCzBuOtmfmVaom+gGmtBmxsuRc:iugz7e+KkCr
MD5:	0AF4783054B8E925EC024DC00FCB4510
SHA1:	B43B595D6899229217DA7CA15E8D1A846E93A666
SHA-256:	C3F1981E14042012337C6493597CD362261453611B727E91847A118B2B4CFFB7
SHA-512:	874D73FF48E306FBAC1471DB4F925DF8348F5C3D322AC13D769AF91F6DC67F33F0886674686F8A9F5168910FD8AC160F007423508ED29665E8138EC411C5BE84
Malicious:	false
Reputation:	low
Preview:	/@ 2024 PayPal (v1.9.5) /.!function(){"use strict";function r(t,e,n){(e=function(t){t=function(t,e){if("object"!=typeof t\|\|!t)return t;var n=t[Symbol.toPrimitive];if(void 0===n)return("string"===e?String:Number)(t);t=n.call(t,e\|\|"default");if("object"!=typeof t)return t;throw new TypeError("@@toPrimitive must return a primitive value.")}(t,"string");return"symbol"==typeof t?t:t+""}(e))in t?Object.defineProperty(t,e,{value:n,enumerable:!0,configurable:!0,writable:!0}):t[e]=n}function i(e,t){var n,r=Object.keys(e);return Object.getOwnPropertySymbols&&(n=Object.getOwnPropertySymbols(e),t&&(n=n.filter(function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable})),r.push.apply(r,n)),r}function g(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?i(Object(n),!0).forEach(function(t){r(e,t,n[t])}):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):i(Object(n)).forEach(function(t){Object.defineProperty(e,t,Ob

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	9819
Entropy (8bit):	4.18718488699821
Encrypted:	false
SSDEEP:	192:BjBeEWEqTCqoLOtFrB9CyYMS1yVvdJ6Z/1UNATnxtBvAOs5Gh2Jr7c0lGjc9c03j:xBeEWLvFSkGIKvQZgctKLzV5Dk
MD5:	57FCD74DE28BE72DE4F3E809122CB4B1
SHA1:	E55E9029D883E8CE69CF5C0668FA772232D71996
SHA-256:	8B456FE0F592FD65807C4E1976EF202D010E432B94ABEB0DAFD517857193A056
SHA-512:	02C5D73AF09EABD863EEDBB8C080B4F0576593B70FCA7F62684E3019A981A92588E45DB6739B41B3495018370320F649E3A7D46AF35ACF927A1F21706867EF49
Malicious:	false
Reputation:	low
Preview:	/. nougat.js v0.0.1 - Application Mediator/Sandbox Library. * This module performs the function of mediator/sandbox.. . @author Erik Toth <ertoth@paypal.com>. /../global define:false, requirejs:true /./jslint plusplus:true, nomen:true /..define(['jquery', 'dust', 'dust-helpers-supplement'], function ($, dust) {. 'use strict';.. var ViewRenderer = null,. DustRenderer = null,. Nougat = null;.. /. Creates a new array with all elements that pass the test implemented by the provided function.. * The filter callback receives three arguments: the value of the element, the index of the element,. * and the Array object being traversed.. * @param {Array} arr the array to filter. * @param {Function} fn the function defining the filter test, returning true to keep and false to discard.. * @param {Object} [context] Object to use as this when executing callback.. */. function filter(arr, fn, context) {. if (Array.prototype.f

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Algol 68 source, ASCII text
Category:	downloaded
Size (bytes):	22992
Entropy (8bit):	4.318444249541683
Encrypted:	false
SSDEEP:	384:NjB0PZV5PnJmyymBJERLKDAo00s2kadv9nvMLVAavDAVmm6vi08Bf:pB0VVJmoERLC5xzkaT0imfmt081
MD5:	E2E8FE02355CC8E6F5BD0A4FD61EA1C3
SHA1:	B1853D31FB5B0B964B78A79EEF43DDC6BBB60BBA
SHA-256:	492177839CCABB9A90A35EB4B37E6280D204B8C5F4B3B627E1093AA9DA375326
SHA-512:	7B5FF6C56A0F3BBB3F0733C612B2F7C5BBB4CC98EF7F141A20C2524ED9F86CB934EFEA9F6F0FAEB2BEC25FCB76CF50775BC3D0B712EAAC442E811B304AB87980
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/dust-helpers.js
Preview:	/! dustjs-helpers - v1.5.0. https://github.com/linkedin/dustjs-helpers.* Copyright (c) 2014 Aleksander Williams; Released under the MIT License */.(function(dust){.. // Use dust's built-in logging when available. var _log = dust.log ? function(msg, level) {. level = level \|\| "INFO";. dust.log(msg, level);. } : function() {};. . var _deprecatedCache = {};. function _deprecated(target) {. if(_deprecatedCache[target]) { return; }. _log("Deprecation warning: " + target + " is deprecated and will be removed in a future version of dustjs-helpers", "WARN");. _log("For help and a deprecation timeline, see https://github.com/linkedin/dustjs-helpers/wiki/Deprecated-Features#" + target.replace(/\W+/g, ""), "WARN");. _deprecatedCache[target] = true;. }. . function isSelect(context) {. var value = context.current();. return typeof value === "object" && value.isSelect === true;. }. . // Utility method : toString() equivale

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3807), with no line terminators
Category:	downloaded
Size (bytes):	3807
Entropy (8bit):	5.175114160879721
Encrypted:	false
SSDEEP:	96:Cejna4urzmVcW/vtXwIeg6yGfpyuqQb7lkWTGquqhqXYMKdyqZY:JaWcW/vSIegVmR7bZukNMKdk
MD5:	A635A55DDB6339A3D0D01C641F670753
SHA1:	A6DEE4A1DF6C51B82CE2E67323514E7DE4E165D4
SHA-256:	A6C3BFF965978DF8093C3A29F7071C21D7439A212AF41E7B40CE70D94D6BCC44
SHA-512:	2562CA35BE37BFE0B984EC288E23678BC97BA7A881764044E65914EA013742A5310A5C12839CB8A501A464791BC67868FE6A02AE149DF9329E40562569EBA42D
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/js/lib/modernizr-2.6.1.js
Preview:	window.Modernizr=function(e,t,n){function r(e){d.cssText=e}function i(e,t){return r(prefixes.join(e+";")+(t\|\|""))}function s(e,t){return typeof e===t}function o(e,t){return!!~(""+e).indexOf(t)}function u(e,t,r){for(var i in e){var o=t[e[i]];if(o!==n)return r===!1?e[i]:s(o,"function")?o.bind(r\|\|t):o}return!1}var a="2.6.1",f={},l=!0,c=t.documentElement,h="modernizr",p=t.createElement(h),d=p.style,v,m={}.toString,g={},y={},b={},w=[],E=w.slice,S,x={}.hasOwnProperty,T;!s(x,"undefined")&&!s(x.call,"undefined")?T=function(e,t){return x.call(e,t)}:T=function(e,t){return t in e&&s(e.constructor.prototype[t],"undefined")},Function.prototype.bind\|\|(Function.prototype.bind=function(e){var t=this;if(typeof t!="function")throw new TypeError;var n=E.call(arguments,1),r=function(){if(this instanceof r){var i=function(){};i.prototype=t.prototype;var s=new i,o=t.apply(s,n.concat(E.call(arguments)));return Object(o)===o?o:s}return t.apply(e,n.concat(E.call(arguments)))};return r});for(var N in g)T(g,N)&&

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7202), with no line terminators
Category:	dropped
Size (bytes):	7202
Entropy (8bit):	5.355379827732298
Encrypted:	false
SSDEEP:	192:GeLYFa7EGANz8HbcLvkJ26p0HLlIuAM0NzTKBB0nkV9cofMctaUc:fXoxYHbcLa0HL2uRgWwnsGof9taj
MD5:	CA4C1E3DC374D2C6966967C820647C45
SHA1:	556C0E5DC7ADED4F7D7EF6798D74E79A546A49E8
SHA-256:	B54CD3D43C06F2206B441706CB2100AB2AF2BC09D4780CBE899DE6480041701B
SHA-512:	0912FBF7B5E5B1C2D5F4FB6847F1FF94A9987F5F1408402F2B5D8D2CB7DF81FFDFCA81F5DCF02ACA34184479482AD494824AE9E5CA546ECAD3EC0900644D5443
Malicious:	false
Reputation:	low
Preview:	TLT.addModule("digitalData",function(){return{init:function(){},destroy:function(){},onevent:function(webEvent){if("object"==typeof webEvent&&webEvent.type&&webEvent)switch(webEvent.type){case"load":case"unload":"undefined"!=typeof window.fpti&&(qKeys=window.fpti,TLT.logCustomEvent("FPTI",{description:"FPTI",action:"Retrieve",value:qKeys}))}var qKeys}}}),function(){"use strict";var config,msgPrivacyPatterns,lastMsg,TLT=window.TLT,asyncReqOnUnload=/WebKit/i.test(navigator.userAgent),useFetch=!!window.fetch,useBeacon=!0,useWorker=!1,maxQueueEvents=30,maxQueueSize=3e4,queueTimerInterval=2e4,checkEndpoint=!1,enableDomCapture=!0,domDiffEnabled=!0;if("function"==typeof TLT.isInitialized&&TLT.isInitialized())console.warn("Tealeaf has already been initialized in this page. Aborting this initialization.");else{if(TLT.utils.isLegacyIE)return console&&(console.warn("This version of the UIC does not support Internet Explorer 8."),console.info("Applications requiring Internet Explorer 8 (or below)

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (41625)
Category:	downloaded
Size (bytes):	150639
Entropy (8bit):	5.404664746247825
Encrypted:	false
SSDEEP:	3072:AwlL47MnAPaiA2UudRCe/fX2MkdF5kpjm+L1ZVplqpU:AwlgMgaiA2UuZ/P2MkdF5EL1/plqpU
MD5:	BB579CBAE7BBAE27E2B6C01C48B7F652
SHA1:	9B525B6C77E1950125CFBC15495CA40E5CC98E8F
SHA-256:	38DCECF657BAB9314235BBF0D4C03EA0CC50FF215F59D8DC0310D36B64C5CC78
SHA-512:	6ECF11D4C0DCAC9AB5DED896464D2AEB3DF6739C4771F9D8C29466509763B3CD3DEA2FA35F5BB9AC4528DD853848A33B82A72891E6A562493BF77474AEF9B643
Malicious:	false
Reputation:	low
URL:	https://hcaptcha.paypal.com/1/api.js?endpoint=https%3A%2F%2Fhcaptcha.paypal.com&assethost=https%3A%2F%2Fnewassets.hcaptcha.paypal.com&imghost=https%3A%2F%2Fimgs.hcaptcha.paypal.com&sentry=false&reportapi=https%3A%2F%2Faccounts.hcaptcha.paypal.com&host=hcaptcha.paypal.com&onload=hCaptchaCallback&render=explicit&hl=en
Preview:	/* https://hcaptcha.com/license */.!function(){"use strict";function e(e){var t=this.constructor;return this.then((function(n){return t.resolve(e()).then((function(){return n}))}),(function(n){return t.resolve(e()).then((function(){return t.reject(n)}))}))}function t(e){return new this((function(t,n){if(!e\|\|"undefined"==typeof e.length)return n(new TypeError(typeof e+" "+e+" is not iterable(cannot read property Symbol(Symbol.iterator))"));var r=Array.prototype.slice.call(e);if(0===r.length)return t([]);var i=r.length;function o(e,n){if(n&&("object"==typeof n\|\|"function"==typeof n)){var a=n.then;if("function"==typeof a)return void a.call(n,(function(t){o(e,t)}),(function(n){r[e]={status:"rejected",reason:n},0==--i&&t(r)}))}r[e]={status:"fulfilled",value:n},0==--i&&t(r)}for(var a=0;a<r.length;a++)o(a,r[a])}))}var n=setTimeout,r="undefined"!=typeof setImmediate?setImmediate:null;function i(e){return Boolean(e&&"undefined"!=typeof e.length)}function o(){}function a(e){if(!(this instanceof

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15000)
Category:	downloaded
Size (bytes):	15045
Entropy (8bit):	5.097122711465238
Encrypted:	false
SSDEEP:	384:ILCLoqKvmwdkPgn/sORxSYLiH0Udhw69cS:ILCLo7vmwdkg/1RxSwiUihw69cS
MD5:	1E4CBFFE3F8F8266818A96094F74EB41
SHA1:	C4EB64737FB1396CAC64B686B4442C3F846BA323
SHA-256:	2383F109C70BB6A1EF525D5D33E5F9332B105D7C622CD93608677E96631DC17C
SHA-512:	6309CE4DDBDAA62A9C35E44BE6889E4772A6BFAFBA5B3939165F9BF28CFD8709A654418FB9F93297569C087230C1D298C0EB36AE02825AF49977200C1CA133AF
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/pa/mi/paypal/latmconf.js
Preview:	/! 2024 dl-pp-latm@paypal.com ver(5.1.1) /.!function(){"use strict";!function(){function e(e,n){(null==n\|\|n>e.length)&&(n=e.length);for(var o=0,a=Array(n);o<n;o++)a[o]=e[o];return a}function n(n,o){return function(e){if(Array.isArray(e))return e}(n)\|\|function(e,n){var o=null==e?null:"undefined"!=typeof Symbol&&e[Symbol.iterator]\|\|e["@@iterator"];if(null!=o){var a,t,d,i,r=[],b=!0,w=!1;try{if(d=(o=o.call(e)).next,0===n){if(Object(o)!==o)return;b=!1}else for(;!(b=(a=d.call(o)).done)&&(r.push(a.value),r.length!==n);b=!0);}catch(e){w=!0,t=e}finally{try{if(!b&&null!=o.return&&(i=o.return(),Object(i)!==i))return}finally{if(w)throw t}}return r}}(n,o)\|\|function(n,o){if(n){if("string"==typeof n)return e(n,o);var a={}.toString.call(n).slice(8,-1);return"Object"===a&&n.constructor&&(a=n.constructor.name),"Map"===a\|\|"Set"===a?Array.from(n):"Arguments"===a\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(a)?e(n,o):void 0}}(n,o)\|\|function(){throw new TypeError("Invalid attempt to destructure non-it

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1198
Entropy (8bit):	4.92536183669385
Encrypted:	false
SSDEEP:	24:PzRCvsqk/AMvGGP5Zb0sgK1Z/O7+KU43IYxxqh3snFEPmZwifnmTNK43GNUSoG91:P9wM/tGGBZYsgKPU+KU43s3d+ZwifmTs
MD5:	B625A3DC02E4E9CBCD21AE7E50F331A3
SHA1:	E8A50FA6A995A8BEBEDCD190972644809EE2D089
SHA-256:	4A178734B54E5D15A488E5360123579D7F32AFAE93C18E751790DA8C8B3F8FF1
SHA-512:	F83810E9A023DBDAE40109B349AA37523A8F6AC7CA68C331E5923A1DF88DCBF593A3607A1EC7D5A4F05F509F4EE4ADDC28D1A869AA27B008D9CDD2CCF7E54241
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/app.js
Preview:	require(['nougat', 'backbone', 'router', 'widgets/analytics', 'underscore', 'opinionLabComponent'],...function (nougat, Backbone, Router, Analytics, _) {....'use strict';...var context, viewName, router;....// Turning Backbone into a pub/sub hub..._.extend(Backbone, Backbone.Events);....// Create instance of the App...var app = {.....initialize : function () {......// Analytics used for tracking links and errors.....Analytics.initialize();......// Grab data from the page context.....nougat.setContext($(document.body).data());......context = nougat.getContext();......viewName = context.viewName;......// Only instantiate the standalone CAPTCHA view but no other views because the Backbone router.....// will never be triggered because the URL in the browser window will not belong to the Auth.....// Challenge application......if (viewName === 'authcaptcha') {......var asyncAssets = [ "view/" + viewName ];.......require(asyncAssets, function (View) {.......if (typeof View === "function") {..

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	2974
Entropy (8bit):	4.88985867449781
Encrypted:	false
SSDEEP:	48:Ykrs/BqPgeFo5BwsbQwTIcACGWS29oXuseVzxdor2BFKH9zlnBJN4m:YkqBogKo8skwTIxCK2rsuLKH9JvNP
MD5:	01BC0C36F25B668C2461BD9AA72CBA12
SHA1:	36AA5EFC5A15AF82A9489BB1C34E0C538EE63659
SHA-256:	E991024988B4CD788022C6387E520882D74EDAC454F880738E5B267B50815404
SHA-512:	BF7D8020B63E424E744EE5E11FDB6E5B1AD898CF35248572F1D63A788D70FCF03D2CF833AB950D154AB44830511F12B58E0A1625DDE3188AC428FC49483F55C0
Malicious:	false
Reputation:	low
Preview:	/*. Created by hdoan on 5/5/14.. . Validates form inputs. Will emit Backbone event if input is valid, invalid, or empty.. * The event naming convention is 'valid', 'invalid', or 'empty' followed by the name attribute of the field. . For example, if you are validating the email input, the three possible events are as follows:. * 1. 'validemail'. * 2. 'invalidemail'. * 3. 'emptyemail'. /.define(..[ 'jquery', 'backbone', 'underscore' ],...function($, Backbone, _) {...'use strict';....var validation = {.....init: function(view) {.....var elem = view.$el,......fields = elem.find('.validate');......if (fields.length !== 0) {.......// Find all fields with the 'validate' class and onblur add handler to validate......fields.each(function() {.......$(this).on('blur', function (field) {........validation.doValidation(field.target);.......});......});.....}....},...../.... Performs the validation.... .... @param {Object} target - event object.... */....doValidation: function(targe

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (517), with no line terminators
Category:	downloaded
Size (bytes):	517
Entropy (8bit):	5.39637340288226
Encrypted:	false
SSDEEP:	12:2QAx6qCCLCAQaZhnVV4aQamMKO5OErRUk7Sx93q6MDE5DRRDYAIn:2QAxCCLxZh34aQamQOE1Uk7+q6MDaRRC
MD5:	D721595EDBF992753341DC68FECB1309
SHA1:	CA442A355A15E42ABB0D767C634E0F8FFE252525
SHA-256:	02540177403429B1916502DCF39FD63AE82B4F711B6AE848AE0DBC24820B52C3
SHA-512:	E61FDF09A2B24B8BA7E9388A82E4EB9982D27CDBB797B34AD9B35554B764CF6724504B0327C0789B4CBB70E747FF4151880AE1D23328ABBC1DE110323C980AB9
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/js/widgets/errorDetector.js
Preview:	(function(){function n(e){xhr=new XMLHttpRequest,xhr.open("POST","/signin/client-log",!0),xhr.setRequestHeader("Content-Type","application/json;charset=UTF-8");try{xhr.send(JSON.stringify(e))}catch(t){}}function r(e,r,i,s,o){var u=o&&o.message\|\|"unknown",a=typeof r=="string"&&r.split("js/")[1]\|\|"unknown",f={currentUrl:window.location.href,_csrf:t,logRecords:[{evt:"ERROR_DETECTOR",data:"ERROR_THROWN_FROM_"+a+"_"+u,calEvent:!0}]};return n(f)}var e=document.getElementById("token"),t=e&&e.value;window.onerror=r})();

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2050
Entropy (8bit):	4.751114111932053
Encrypted:	false
SSDEEP:	48:Kvs0QKsLGH7t9I6FdYWGT/aqTTj1RXXGFWAWUW1IJxFIe/Nf12lrlriXe:0sxKsW7t9t6HRaZeIJHIGNt2xxiXe
MD5:	5186E8EFF91DBD2EB4698F91F2761E71
SHA1:	9E6F0A6857E1FDDBAE2454B31B0A037539310E17
SHA-256:	BE90C8D2968F33F3798B013230B6C818AE66B715F7770A7D1D2E73DA26363D87
SHA-512:	4DF411A60D7A6A390936D7AD356DC943F402717F5D808BB70C7D0AC761502E0B56074F296514060D9049F0225EAE3D4BCFA95873029BE4B34C8796A995575B94
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/core/baseView.js
Preview:	/* global define:true /../. Abstract view which enables rendering contents with a template.. /.define([..'nougat',..'underscore',..'backbone'.],..function (nougat, _, Backbone) {....'use strict';.....var BaseView = Backbone.View.extend({...../.... The name of the template that represents this view..... * Must be defined for render to succeed..... /....template: null,...../.... A default implementation of the standard Backbone render method..... * Handles rendering a template with the current view model..... * @returns the current view instance.... /....render: function () {.....var renderer = nougat.viewRenderer,......template = this.template,......data = this.serialize();......_.bindAll(this, '_doRender', 'renderError', 'afterRender');......this.beforeRender();......renderer.render(template, data).......done(this._doRender).......fail(this.renderError).......always(this.afterRender);......return this;....},...../.... 'Protected' imlementation of what to do with tem

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	9819
Entropy (8bit):	4.18718488699821
Encrypted:	false
SSDEEP:	192:BjBeEWEqTCqoLOtFrB9CyYMS1yVvdJ6Z/1UNATnxtBvAOs5Gh2Jr7c0lGjc9c03j:xBeEWLvFSkGIKvQZgctKLzV5Dk
MD5:	57FCD74DE28BE72DE4F3E809122CB4B1
SHA1:	E55E9029D883E8CE69CF5C0668FA772232D71996
SHA-256:	8B456FE0F592FD65807C4E1976EF202D010E432B94ABEB0DAFD517857193A056
SHA-512:	02C5D73AF09EABD863EEDBB8C080B4F0576593B70FCA7F62684E3019A981A92588E45DB6739B41B3495018370320F649E3A7D46AF35ACF927A1F21706867EF49
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/core/nougat.js
Preview:	/. nougat.js v0.0.1 - Application Mediator/Sandbox Library. * This module performs the function of mediator/sandbox.. . @author Erik Toth <ertoth@paypal.com>. /../global define:false, requirejs:true /./jslint plusplus:true, nomen:true /..define(['jquery', 'dust', 'dust-helpers-supplement'], function ($, dust) {. 'use strict';.. var ViewRenderer = null,. DustRenderer = null,. Nougat = null;.. /. Creates a new array with all elements that pass the test implemented by the provided function.. * The filter callback receives three arguments: the value of the element, the index of the element,. * and the Array object being traversed.. * @param {Array} arr the array to filter. * @param {Function} fn the function defining the filter test, returning true to keep and false to discard.. * @param {Object} [context] Object to use as this when executing callback.. */. function filter(arr, fn, context) {. if (Array.prototype.f

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1228), with no line terminators
Category:	downloaded
Size (bytes):	1228
Entropy (8bit):	4.991836041220244
Encrypted:	false
SSDEEP:	24:1UbSjYz0brlna3W8RsdwYU/ImxIlFlbkPIaPBWfIX9SmV5HDUmu+K/L:1ASjk0vkW7+x/pgFh+UfY5WmteL
MD5:	35558E9FA07B2F8F7F6F1A4F6124A0B4
SHA1:	695C51C3667E8DD8FFC9CB202E6399EE5F39C9BB
SHA-256:	B9D410B959D2E1509801C43780835655A35BA6F33D3E471C6B172B31E6E7D916
SHA-512:	82B8A6F5601D9C55CABFB407628E7A247637E76EC6209056C898D086A9043546225F898CF8DB62ED86A2BD33CEDDFE88800A9F4AA66EE72DCC409D041FF4A4D9
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/js/router.js
Preview:	define(["newgat","jquery","backbone"],function(e,t,n){"use strict";var r=["injectIframeTest"],i,s,o,u;return i=n.Router.extend({routes:{"":"showLanding","?queryString":"showLanding","inject/queryString":"showLanding",authorize:"showLanding","authorize?queryString":"showLanding",consent:"showLanding","consent?queryString":"showLanding","consent-cancel":"showLanding","activate-one-touch":"showLanding","activate-one-touch?*queryString":"showLanding","remember-me":"showLanding",econsent:"showLanding",genericError:"showGenericError","remember-me-interstitial":"showLanding"},hasPushState:window.history&&"pushState"in window.history,showLanding:function(){this.showView(this.viewName)},showGenericError:function(){this.showView("genericError")},showView:function(e){var i=e\|\|n.history.fragment\|\|"login",s=["view/"+i];if(t.inArray(i,r)>-1)return;require(s,function(e){typeof e=="function"&&(e=new e({parent:o}))})},start:function(){n.history.start({pushState:this.hasPushState,root:window.locatio

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	4495
Entropy (8bit):	4.231793539683161
Encrypted:	false
SSDEEP:	96:qLlbCe1CypE22uJuXplSlDrACAts8/yRlzUntwRntg1Zy7GbNB:QCgCym2hJuXuACEs8qRlzUtwRteZyCbj
MD5:	2ECD7878D26715C59A1462EA80D20C5B
SHA1:	2A0D2C2703EB290A814AF87EE09FEB9A56316489
SHA-256:	79A837D4EC921084E5CB0663372232B7B739A6AE5F981B00EB79EB3441043FC5
SHA-512:	222472C443ABA64839D4FA561A77541D913F43156083DA507380AC6889FDD237D9B5374E710092DD60B48A5B808CBA12749921C441144C5A429AB28D89D74FB0
Malicious:	false
Reputation:	low
Preview:	var extend = function extend(dust) {.. // Add new dust helpers in this style. dust.helpers.link = function link(chunk, ctx, bodies, params) {. 'use strict';.. var href,. host = ctx.getPath(false, ['context', 'pageInfo', 'hostName']),. production,. stage,. sandbox,. dev,. cobrand,. locale,. pat,. extension,. type,. str;.. // Get trailing part of url and extract extension, if any. if (params) {. if (params.href) {. href = dust.helpers.tap(params.href, chunk, ctx);. href = href.trim();. pat = /\.[0-9a-z]{1,4}$/i;. extension = href.match(pat);. } else {. return chunk.write(''); // if not href, generate empty output. }. if (params.type) {. type = dust.helpers.tap(params.type, chunk, ctx);. if

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23125), with no line terminators
Category:	dropped
Size (bytes):	23125
Entropy (8bit):	5.2464842228013895
Encrypted:	false
SSDEEP:	384:v0Ap5n5P9Nxf4hfWGwR+EkE+n4QnZ/X2NWKW4BCCMHxDkZbaXpweyGobcUWfgMcC:J5n51f4hfWGwR+Tnn4QnZ/b3J7yGQMUE
MD5:	243EDA4543153156C0AE9DF9E8C5833D
SHA1:	DFA372F408889FA3F4A6CA29847F4A379ED246A8
SHA-256:	D81BFEFD8585B694222D3E94E9DEE5D7935049C65355F9FD096800301D51545B
SHA-512:	BC2E170A94BB45624ED4392B2049FA017411C244DC765B5E862093E2264EC9580752A29A86E6739E2ECBA2F16B6880FDBF9AB1ECB6647E739B391B46A5BF9AA9
Malicious:	false
Reputation:	low
Preview:	!function(e){var t={};function n(r){if(t[r])return t[r].exports;var a=t[r]={i:r,l:!1,exports:{}};return e[r].call(a.exports,a,a.exports,n),a.l=!0,a.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var a in e)n.d(r,a,function(t){return e[t]}.bind(null,a));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s=6)}([function(e,t,n){var r=n(1);e.exports.find=function(e,t){if(Array.isArray(e)\|\|void 0!==e.

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65431)
Category:	dropped
Size (bytes):	177743
Entropy (8bit):	4.410090234686878
Encrypted:	false
SSDEEP:	3072:QTY1n3dDEthymN6mNbPoZLEkCgw2MK2xZ1w2pVJMnnnnp3oqSfDXCU:1lOsCj7Qp3EfDn
MD5:	B4F2EDBEA31DCEC5C70F4F1BF574B162
SHA1:	94C164B7A2F52B4FB2A8A61A10ACBB4C2AA4E2B5
SHA-256:	7B093CBB49ADC2923B6EF6B58AD22F87BA4A008E0ECB27665A76CAB5E9DEEB40
SHA-512:	6F66035FBBC99326837C79F92965AF24EBF028AE6CF7BCD532985E6804F76DB7DC2779F8FF24B19D9444E693D5020085EF961B5A87D73E5B6C6CC165782137FA
Malicious:	false
Reputation:	low
Preview:	/** DataDome is a cybersecurity solution to detect bot activity https://datadome.co (version 4.38.0) */ .!function e(t,n,o){function i(r,s){if(!n[r]){if(!t[r]){var d='\x66\x75\x6e\x63\x74\x69\x6f\x6e'==typeof require&&require;if(!s&&d)return d(r,!0);if(a)return a(r,!0);var c=new Error('\x43\x61\x6e\x6e\x6f\x74\x20\x66\x69\x6e\x64\x20\x6d\x6f\x64\x75\x6c\x65\x20\x27'+r+'\x27');throw c[['\x63\x6f\x64\x65']]='\x4d\x4f\x44\x55\x4c\x45\x5f\x4e\x4f\x54\x5f\x46\x4f\x55\x4e\x44',c;}var h=n[r]={exports:{}};t[r][0][['\x63\x61\x6c\x6c']](h[['\x65\x78\x70\x6f\x72\x74\x73']],function(e){return i(t[r][1][e]\|\|e);},h,h[['\x65\x78\x70\x6f\x72\x74\x73']],e,t,n,o);}return n[r][['\x65\x78\x70\x6f\x72\x74\x73']];}for(var a='\x66\x75\x6e\x63\x74\x69\x6f\x6e'==typeof require&&require,r=0;r<o[['\x6c\x65\x6e\x67\x74\x68']];r++)i(o[r]);return i;}({1:[function(e,t,n){t[['\x65\x78\x70\x6f\x72\x74\x73']]=function(){this[['\x65\x6e\x64\x70\x6f\x69\x6e\x74']]='\x68\x74\x74\x70\x73\x3a\x2f\x2f\x61\x70\x69\x2d\x6a\x73

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	92
Entropy (8bit):	4.867532511941353
Encrypted:	false
SSDEEP:	3:+uH2EFlWZNDrNj3XyScspsc4k/d/+rY:RH2qS5jSo/dGM
MD5:	F3198921FEC3D7A136AD9DBF50A88678
SHA1:	F4233823BF114191CB000417D1B97FD0AFC7C89A
SHA-256:	D3D2A0206D9B3B4EFC69B8FC05FB24F4D1269B4B40ABF0183FC6A30CEA31E76A
SHA-512:	3A0CDD23EEFD91681A7D4A0D77A18F9652083AB510079B9D5F50B811BB6D69379AEAA98B50ADA81091EB7CF4A9563CC75FF2FEB7241376472882BC9AA33AACA0
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwmLBRpIV2McThIFDZJqrL4SBQ3Vcgqy?alt=proto
Preview:	CkEKEw2Saqy+GgQICRgBGgQIVhgCIAEKKg3VcgqyGgQISxgCKh0IClIZCg9AISQuIypfPy0mJSsvLCgQARj/////Dw==

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	65441
Entropy (8bit):	5.030761148036821
Encrypted:	false
SSDEEP:	1536:tIipojPGlIr8vKP0DPLX7uE+6ZrstVjIc1s73+lPBfTpErw9JuEHPVoglPdYK5aO:tIip4P8Ir8vKP0DPLX7uE+ustVj11s7S
MD5:	EB3B3278A5766D86F111818071F88058
SHA1:	333152C3D0F530EEE42092B5D0738E5CB1EEFD73
SHA-256:	1203F43C3293903ED6C84739A9AA291970692992E310AAB32520C5CA58001CEA
SHA-512:	DD9DDC1B6A52AD37C647562D42979A331BE6E6D20885B1A690C3AEEE2CFC6F46404B994225D87141CA47D5C9650CC66C72A118B2D269D2F3FDEA52624216E3BC
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/underscore-1.13.4.js
Preview:	(function (global, factory) {..typeof exports === 'object' && typeof module !== 'undefined' ? module.exports = factory() :..typeof define === 'function' && define.amd ? define('underscore', factory) :..(global = typeof globalThis !== 'undefined' ? globalThis : global \|\| self, (function () {.. var current = global._;.. var exports = global._ = factory();.. exports.noConflict = function () { global._ = current; return exports; };..}()));. }(this, (function () {..// Underscore.js 1.13.4..// https://underscorejs.org..// (c) 2009-2022 Jeremy Ashkenas, Julian Gonggrijp, and DocumentCloud and Investigative Reporters & Editors..// Underscore may be freely distributed under the MIT license.. ..// Current version...var VERSION = '1.13.4';. ..// Establish the root object, `window` (`self`) in the browser, `global`..// on the server, or `this` in some virtual machines. We use `self`..// instead of `window` for `WebWorker` support...var root = (typeof self == 'object' && self.

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25467)
Category:	downloaded
Size (bytes):	25508
Entropy (8bit):	5.094451586944145
Encrypted:	false
SSDEEP:	384:HTP8X48LLyEoSsntg1YwDPc4PFNZdcF7a9OOpj6UkeUZrg+y/3Rjqz+jtkd6Pmzq:zP8Xymxke9R04uGmXmH
MD5:	6E28DEAE28590A7A63969BF00512782A
SHA1:	C12712D683FD15FDBBE373180CF0F7C7A5BCDB5E
SHA-256:	BE241A24CAFE282578F2C401F940531631D50F3D0432C43B7ADC76ECA67A8898
SHA-512:	340245FC821DB5227927161A946BFE834C5B9DB1C94DAD16DB81B2DB59C89ADFAC0648D15933A1A28F89010BC2C3D03D5B30899AAFC956E8A382088E92B756D5
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/backbone-1.5.0.min.js
Preview:	(function(r){var n=typeof self=="object"&&self.self===self&&self\|\|typeof global=="object"&&global.global===global&&global;if(typeof define==="function"&&define.amd){define(["underscore","jquery","exports"],function(t,e,i){n.Backbone=r(n,i,t,e)})}else if(typeof exports!=="undefined"){var t=require("underscore"),e;try{e=require("jquery")}catch(t){}r(n,exports,t,e)}else{n.Backbone=r(n,{},n._,n.jQuery\|\|n.Zepto\|\|n.ender\|\|n.$)}})(function(t,h,x,e){var i=t.Backbone;var a=Array.prototype.slice;h.VERSION="1.5.0";h.$=e;h.noConflict=function(){t.Backbone=i;return this};h.emulateHTTP=false;h.emulateJSON=false;var r=h.Events={};var o=/\s+/;var l;var u=function(t,e,i,r,n){var s=0,a;if(i&&typeof i==="object"){if(r!==void 0&&"context"in n&&n.context===void 0)n.context=r;for(a=x.keys(i);s<a.length;s++){e=u(t,e,a[s],i[a[s]],n)}}else if(i&&o.test(i)){for(a=i.split(o);s<a.length;s++){e=t(e,a[s],r,n)}}else{e=t(e,i,r,n)}return e};r.on=function(t,e,i){this._events=u(n,this._events\|\|{},t,e,{context:i,ctx:this

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	4945
Entropy (8bit):	4.629506414198924
Encrypted:	false
SSDEEP:	96:CXQSfsjFfE77sDwFD3udPJwEym6BxGuJCg6vuIp6v8TqUUwvd:WQAsjFfGML6TGu0ScTN
MD5:	0D105318575EA6A4FC653AA8290A3410
SHA1:	B8EF6C644FFDB3983C518014BC4C0FF4317A011B
SHA-256:	B3CC50B9E94BBECAAEB1079B64B8CA50616D1732824964C1CC2C5422627A0EC5
SHA-512:	8797088012937108ACA1905E27DC49900CE00D5D51DEF982454A4C5389F4301A8857734C4178EF311DAE6AED47F033E1C9DF3D6F6B0B9BEF694D9CE278B3D193
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... width="127.769px" height="31.5px" viewBox="0 0 127.769 31.5" enable-background="new 0 0 127.769 31.5" xml:space="preserve">..<g>...<g>....<g>.....<path fill="#009CDE" d="M98.396,6.933H91.37c-0.479,0-0.89,0.35-0.964,0.824l-2.841,18.015c-0.056,0.355,0.219,0.676,0.579,0.676......h3.604c0.335,0,0.622-0.244,0.674-0.576l0.807-5.107c0.074-0.474,0.483-0.824,0.964-0.824h2.223c4.628,0,7.298-2.239,7.996-6.678......c0.314-1.941,0.014-3.467-0.896-4.535C102.518,7.553,100.746,6.933,98.396,6.933z M99.207,13.512......c-0.384,2.522-2.31,2.522-4.173,2.522h-1.061l0.744-4.708c0.045-0.285,0.29-0.495,0.578-0.495h0.485c1.269,0,2.467,0,3.084,0.723.....

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (517), with no line terminators
Category:	dropped
Size (bytes):	517
Entropy (8bit):	5.39637340288226
Encrypted:	false
SSDEEP:	12:2QAx6qCCLCAQaZhnVV4aQamMKO5OErRUk7Sx93q6MDE5DRRDYAIn:2QAxCCLxZh34aQamQOE1Uk7+q6MDaRRC
MD5:	D721595EDBF992753341DC68FECB1309
SHA1:	CA442A355A15E42ABB0D767C634E0F8FFE252525
SHA-256:	02540177403429B1916502DCF39FD63AE82B4F711B6AE848AE0DBC24820B52C3
SHA-512:	E61FDF09A2B24B8BA7E9388A82E4EB9982D27CDBB797B34AD9B35554B764CF6724504B0327C0789B4CBB70E747FF4151880AE1D23328ABBC1DE110323C980AB9
Malicious:	false
Reputation:	low
Preview:	(function(){function n(e){xhr=new XMLHttpRequest,xhr.open("POST","/signin/client-log",!0),xhr.setRequestHeader("Content-Type","application/json;charset=UTF-8");try{xhr.send(JSON.stringify(e))}catch(t){}}function r(e,r,i,s,o){var u=o&&o.message\|\|"unknown",a=typeof r=="string"&&r.split("js/")[1]\|\|"unknown",f={currentUrl:window.location.href,_csrf:t,logRecords:[{evt:"ERROR_DETECTOR",data:"ERROR_THROWN_FROM_"+a+"_"+u,calEvent:!0}]};return n(f)}var e=document.getElementById("token"),t=e&&e.value;window.onerror=r})();

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (705), with no line terminators
Category:	downloaded
Size (bytes):	705
Entropy (8bit):	5.048344747919151
Encrypted:	false
SSDEEP:	12:2aENAZ6DcZ9XJzB/S/Bf6AtnAutR/6w0BTq2qMR8dpMPu4JJZDMV8eaErYQ7a:2qZ6QZ9ZzBkBf6mhtR6BTq2aLM3HW2Hz
MD5:	C8DDDB4FFFA4A0F4360013DC08CAC19F
SHA1:	3D57D17A2B0909B6C686714AA185CCC2195AB863
SHA-256:	07D5BEDAF5859555A55C31E6A8FF04BEE28FB3A3B2F12E45250B50292A2F7FCD
SHA-512:	E190A13A372C53740311DB1ABC2878FAD652654A2E438312384DF6A43500796D19327B78F028F8818675591C043FF8471F36D3175D17F98B08075DBB9FB93CDE
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/js/lib/dustmotes-iterate.js
Preview:	(function(e,t){typeof define=="function"&&define.amd&&define.amd.dust===!0?define(["dust.core"],t):typeof module=="object"?(module.exports=t(require("dustjs-linkedin")),module.exports.registerWith=t):t(e.dust)})(this,function(e){return e.helpers.iterate=function(t,n,r,i){function h(e,t){return e<t?1:e>t?-1:0}function p(e,r){return s(t,n.push({$key:e,$value:r,$type:typeof r}))}var s=r.block,o,u,a,f,l,c;i=i\|\|{};if(i.key){l=e.helpers.tap(i.key,t,n);if(s)if(!i.sort)for(f in l)l.hasOwnProperty(f)&&(t=p(f,l[f]));else{o=e.helpers.tap(i.sort,t,n),u=[];for(f in l)l.hasOwnProperty(f)&&u.push(f);c=n.global[o],!c&&o==="desc"&&(c=h),c?u.sort(c):u.sort();for(a=0;a<u.length;a++)t=p(u[a],l[u[a]])}}return t},e});

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	3824
Entropy (8bit):	5.294305074122082
Encrypted:	false
SSDEEP:	48:SjzdrlxC4UtzM43bHBxn0YEFYGHHoi8MM4nBJAodM4QMhTQYAbbchxnVcJ3ROH8O:wdrlEhLkLtviMBCbcnuAz0hIK5m6mKA
MD5:	6F1A28AC77F6C6F42D972D117BD2169A
SHA1:	6A02B0695794F40631A3F16DA33D4578A9CCF1DC
SHA-256:	3BFDB2200744D989CEAD47443B7720AFF9D032ABD9B412B141BD89BCD7619171
SHA-512:	70F8A714550CDCB7FCDBC3E8BAD372A679DF15382EEBF546B7E5B18CF4BA53EA74AB19BBA154F3FC177F92ED4245A243621927FCF91125911B06E39D58AF7144
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/opinionLab/onlineOpinionPopup.js
Preview:	/. Spec #22956 OpinionLab. /..define(['opinionLab'], function(opinionLab) {...'use strict';..window.PAYPAL = window.PAYPAL ? window.PAYPAL : {};..var opVars = window.PAYPAL.opinionLabVars;...function showpopup(redirectTo) {...var mywin;...mywin = window.open('', '', 'top=3000,left=3000,width=1,height=1,menubar=0,scrollbars=0,resizeable=1');...if (mywin) {....mywin.document.open....var myURL = ""...../* This JS is customized for sparta because a JS call..... /* Comparing with corresponding XPT code - Removed the External opinionlab js from the popup content as it could not be loaded due to path issue */.....var HTML_txt = "<html><scr" + "ipt language='javascript'>";....HTML_txt = HTML_txt + "_hr='" + opinionLab._hr + "';";....HTML_txt = HTML_txt + "_ht='" + opinionLab._ht + "';";....HTML_txt = HTML_txt + "custom_var='" + opinionLab.custom_var + "';";.....if (( typeof opinionLab.baseurl == 'undefined')) {....} else {.....HTML_txt = HTML_txt + "baseurl='" + opinionLab.baseurl + "';";...

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (586)
Category:	downloaded
Size (bytes):	75660
Entropy (8bit):	5.15337403900488
Encrypted:	false
SSDEEP:	1536:jDy9+HLI6EQI6Eo9rqpoNVAZI6EJFvI6EtI6EeAhqVI6EchjUAhHYEJ4i4DyUI6u:fLI6EQI6Eo1qp0eI6E/I6EtI6EAI6EFG
MD5:	DB2426D7967E9AD4A67B032530EC2B07
SHA1:	D7C1D233D5E148D16867C4E0F912E78FA4109F47
SHA-256:	9AB8D53149B7B9E0C76C88E8B8933DCF455551D2BD0D483A764CB85BD37EA1D2
SHA-512:	6EC99A4614901006FB5EEEB6EAE321B20487E13610734996FDAECB02D30241255F94C052FE6647E994D44636C91476373CADF1F0FA98B13AE1F60B1BC26E6111
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/css/app.css
Preview:	/ method responsible for loading the background image set in CSS /.@-webkit-keyframes rotation {. from {. -webkit-transform: rotate(0deg);. transform: rotate(0deg);. }. to {. -webkit-transform: rotate(359deg);. transform: rotate(359deg);. }.}.@-moz-keyframes rotation {. from {. -moz-transform: rotate(0deg);. transform: rotate(0deg);. }. to {. -moz-transform: rotate(359deg);. transform: rotate(359deg);. }.}.@-o-keyframes rotation {. from {. -o-transform: rotate(0deg);. transform: rotate(0deg);. }. to {. -o-transform: rotate(359deg);. transform: rotate(359deg);. }.}.@keyframes rotation {. from {. transform: rotate(0deg);. }. to {. transform: rotate(359deg);. }.}./* Transform */.@-webkit-keyframes rightToLeft {. 0% {. -webkit-transform: translateX(100%);. transform: translateX(100%);. }. 100% {. -webkit-transform: translateX(0%);. transform: translateX(0%);. }.}.@-moz-keyframes rightToLeft {. 0% {. -moz-tran

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3037)
Category:	downloaded
Size (bytes):	582313
Entropy (8bit):	4.346547395512375
Encrypted:	false
SSDEEP:	1536:h0nEz7D7uNrU0UJUbJfaqk7n/bhOG1GmYKz5diPmxBWLA0hhTZoXw/cte/q5XzFw:hffSwuCvL/FYmviPmJA/6tFynZ
MD5:	BC6F4A89EA274CA210F761F33311A8D8
SHA1:	F82ACF5C72C1BD4CF3A775F24D05D09578CC075B
SHA-256:	D69E1263E3C76366DA84F3E93739C8C222260B7E13BE930C1D479C841CDA5E13
SHA-512:	43AF51ECCA3BF5649DB50FBE2E53758F781696807D2CC25A5B282CB24239B28BB34D5D50CF32B298C495A91F865DA540FF666A0EED8A14A25B952A598A0794A9
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/martech/tm/paypal/mktconf.js
Preview:	/! 2024 dl-pp-latm@paypal.com ver(1.1.0) /./. mktconf.js v1.1.0 - 11-18-2024.* Copyright (c) 2024 dl-pp-latm@paypal.com.*/.(function () {. 'use strict';.. (function () {.. function _iterableToArrayLimit(arr, i) {. var _i = null == arr ? null : 'undefined' != typeof Symbol && arr[Symbol.iterator] \|\| arr['@@iterator'];. if (null != _i) {. var _s,. _e,. _x,. _r,. _arr = [],. _n = !0,. _d = !1;. try {. if (_x = (_i = _i.call(arr)).next, 0 === i) {. if (Object(_i) !== _i) return;. _n = !1;. } else for (; !(_n = (_s = _x.call(_i)).done) && (_arr.push(_s.value), _arr.length !== i); _n = !0);. } catch (err) {. _d = !0, _e = err;. } finally {. try {. if (!_n && null != _i["return"] && (_r = _i["return"](), Object(_r) !== _r)) return;. } finally {. if (_d) throw

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (330)
Category:	downloaded
Size (bytes):	29314
Entropy (8bit):	5.449471861492707
Encrypted:	false
SSDEEP:	768:rw6peNonqZ+tOD/CVzJWFStqf9JAtEPmNF5w/WTad0XAK1FIAhUrYiOjHhff9V/G:0OjBff9VkUu3YTWzTr5
MD5:	6AEC50C9157FB0F30DD46B6D01E969EB
SHA1:	444F950B99B1160929B570F8A20A534F9D813CCD
SHA-256:	BC13F30508143C2E941180E85EE9A5768808B38E9E9DDEBC023A623BF33F4545
SHA-512:	A346DBC64A5114A95EBADE8A0307B18BF6D4158C72AB1D936AB9346BBB73502EC05A5AB736D70C866DC549CD5FCD7F1D86F642E1524BCE90F9877092E1681FFC
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/authchallenge.js
Preview:	'use strict';.var autosubmit = false,..recaptchaCallback,..recaptchaEnterpriseCallback;.var ADS_FPTI = (function(){...var adsPluginDiv = document.getElementById('captcha-standalone'),...csrf = adsPluginDiv.getAttribute('data-csrf'),...sessionId = adsPluginDiv.getAttribute('data-sessionid');...var isFPTIEnabled = typeof PAYPAL !== 'undefined' && typeof PAYPAL.analytics !== 'undefined' &&...typeof PAYPAL.analytics.instance !== 'undefined' && typeof fpti !== 'undefined';...if (isFPTIEnabled){...PAYPAL.analytics.startClientErrorTracking();...PAYPAL.analytics.startCPLTracking();..}...var postData = function (data){....var xmlHttpReq = new XMLHttpRequest();...xmlHttpReq.open('POST', '/auth/logclientdata');...xmlHttpReq.setRequestHeader("Content-Type", "application/json;charset=UTF-8");...xmlHttpReq.timeout = 15000; // 15sec....var dataToSend = {....fpti : data,...._csrf : csrf,...._sessionID : sessionId...};....xmlHttpReq.send(JSON.stringify(dataToSend));..};...var customADSFPTITracking = fu

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	6589
Entropy (8bit):	5.004433854328687
Encrypted:	false
SSDEEP:	192:hyatC/3tqt2mZh9rZT+HhbcGNBD7pc/sK7vOavMj:k/3otbZhJh0FesK7A
MD5:	FD7F53B9355D66C97BDF09E80309C704
SHA1:	17BD574B480D827E047FEDBFBE71103A9808AC71
SHA-256:	1DE7DCE113E00547082B160C7E6E08E329E081D6AFC572EE8CCE1105B05F2645
SHA-512:	010A2167E3651F463B6631FD8B269AABB0F655CDACEF5A31A1BA3529F5B41D43CE83EBEA70B717454416BF0C1D535CD7603C6BFC0BF2214FFB210006727BA279
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/webcaptcha/grcenterprise_v3_static.html
Preview:	<html>.<head>..<meta name="viewport" content="width=device-width, initial-scale=1.0">..<style>....grecaptcha-badge{....bottom: 3px !important;...}..</style>..<script>....var pp_loc_map = {"ar_EG":"ar","da_DK":"da","de_DE":"de","de_DE_AT":"de-AT","de_DE_CH":"de-CH","en_AU":"en",...."en_GB":"en-GB","en_US":"en","es_ES":"es","es_XC":"es-419","fr_CA":"fr-CA","fr_FR":"fr",...."fr_XC":"fr","he_IL":"iw","id_ID":"id","it_IT":"it","ja_JP":"ja","ko_KR":"ko","nl_NL":"nl",...."no_NO":"no","pl_PL":"pl","pt_BR":"pt-BR","pt_PT":"pt-PT","ru_RU":"ru","sv_SE":"sv","th_TH":"th",...."tr_TR":"tr","zh_CN":"zh-CN","zh_HK":"zh-HK","zh_TW":"zh-TW","zh_XC":"zh-CN","ar":"ar","da":"da",...."de":"de","en":"en","es":"es","fr":"fr","id":"id","ko":"ko","pt":"pt","ru":"ru","zh":"zh-CN"};.....function getGoogLocale(l,c){....try{.....var loc_lower = l.toLowerCase();.....if(c !== undefined && (c.toLowerCase() === 'at' \|\| c.toLowerCase() === 'ch') && (l === 'de_DE')) {......l = l + '_' + c.toUpperCase();.....}.....if(loc_

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (4455), with no line terminators
Category:	dropped
Size (bytes):	4459
Entropy (8bit):	5.065317516797803
Encrypted:	false
SSDEEP:	96:kc/0LOMPkB9lNkSL5QQncujCxbXABHR8Yxbl4OStqAI:Z/4OM8B9lSSFQQnFexbmZxlqpI
MD5:	95C3DE706B3F56B72C4727B7F1D1BF1B
SHA1:	1395944FBDF8201644DABFAC6CE244710724A06E
SHA-256:	093D776B5560002F1A43CEC835C3C6E76411138A2E8434CB5621C4B221110FC0
SHA-512:	77491352C21DD5C2A8E9B896011AEE4133352B645C8DC9F7CFDA5DEE8D18071BF5CE1D844135E6CCA4BC518FE1D272893AA27BE4402155887C985AEF4329E3F4
Malicious:	false
Reputation:	low
Preview:	define([],function(){return function(e){function n(r){if(t[r])return t[r].exports;var i=t[r]={exports:{},id:r,loaded:!1};return e[r].call(i.exports,i,i.exports,n),i.loaded=!0,i.exports}var t={};return n.m=e,n.c=t,n.p="",n(0)}([function(e,t,n){"use strict";var r=n(1);e.exports=function(e,t){t=t\|\|{},r(e,function(){},t,t.loader)},e.exports.registerWith=e.exports},function(e,t,n){"use strict";function o(e,t,n){var r=e.shiftBlocks,i=e.push;e.shiftBlocks=function(e){return r.call(this,a(e,function(e){return u(e,t,n)}))},e.push=function(){var e=i.apply(this,arguments);return o(e,t,n),e}}function u(e,t,n){return function(r,i){return i=i.push({intl:{messages:t,bundle:n}}),e(r,i)}}function a(e,t){var n={};return Object.keys(e).forEach(function(r){n[r]=t(e[r])}),n}function f(e,t,n){function i(t){if(!t)return null;if(typeof t=="function"&&t.template)return t.template;if(e.isTemplateFn(t))return t}var r=e.onLoad;if(!r)throw new Error("dust.onLoad must be configured to use automatic content loading"

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7845), with no line terminators
Category:	downloaded
Size (bytes):	7845
Entropy (8bit):	5.533132852324268
Encrypted:	false
SSDEEP:	192:uRdzEfNmNutaU+ldy9G++QfXh3D6NhRS3Euq:uDAlm4+ldyAQ29uEz
MD5:	89DDFD249765BDEB5D374267E7DAC475
SHA1:	2DB490F040C27D1EAB5FCBA86E939D6837ACCFD6
SHA-256:	53A9FD4A377A5C66BDCA2C2DAD33EBB8E7387B1F314F42849FD7A1733BF77B6F
SHA-512:	2A39E696B5EBFF972758F6CC17D87187405D04F29A5A34AB1FED806B51301BF67FA40F80631BEAAF53C32BC523EBA3D26F7FC425316F5D1498DCFA30A60DA17E
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/js/browser_modules/dusthelpers-supplement/index.js
Preview:	(function(e,t){typeof define=="function"&&define.amd&&define.amd.dust===!0?define(["dust.core"],t):typeof exports=="object"?module.exports=t(require("dustjs-linkedin")):t(e.dust)})(this,function extend(dust){function tokenize(t){"use strict";var n={"((":1,"))":1,"!!":1,"<!":1,">!":1,">=!":1,"<=!":1,"==!":1,"!=!":1,"&&!":1,"\|\|!":1,"]&&":1,"]\|\|":1,"]>":1,"]<":1,"]<=":1,"]>=":1,"]==":1,"]!=":1,"].":1,"[(":1,"])":1,")&&":1,")\|\|":1,")>":1,")<":1,")<=":1,")>=":1,")==":1,")!=":1,")!":1,")]":1,"]]":1,"&&(":1,"\|\|(":1,">'":1,"<(":1,"<=(":1,">=(":1,"==(":1,"!=(":1,"!(":1},r=[],i=0,s,o,u,a,f,l,c,h,p;if(tokCache[t])return tokCache[t];while(i<t.length){u=i,a=t[i],o=t.charCodeAt(i);if(o===SPACE\|\|o===TAB)i++;else if(o===QUOTE\|\|o===APOS){f=STR,s=a,i++;while(i<t.length){t.charCodeAt(i)===BACKSLASH&&i++,s+=t[i];if(t.charCodeAt(i)===o)break;i++}s.charCodeAt(s.length-1)!==o&&(f=ERR,s='"Unclosed string constant"'),pushToken(r,f,s.slice(1,s.length-1)),i++}else if(o>=ZERO&&o<=NINE\|\|o===MINUS\|\|o===DOT&&t.charC

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19626)
Category:	downloaded
Size (bytes):	19807
Entropy (8bit):	5.222852482936355
Encrypted:	false
SSDEEP:	384:X6mbfNn/COzhRiHbmHKQYVOf/OwJXxshUkk6UXSMxag8ZoCdkw5lPxzavwpfCQ:xbJKOUVVq/dJXxqkF9+bGopqQ
MD5:	FD4D2AC5869B6E52C5205D0D336CF69F
SHA1:	F27BC91E0B46135489CD808261327FF4F92C61D8
SHA-256:	C50F9519695E63EB34CB4740B88BD90FFA7F308094C56208EB1E80D6670DBB3E
SHA-512:	6852405A913D2AB86B670CE01EA9A71311B812068AA4C52C8DFC4C95BDF98E28E639D189A1187C6A074B2B96AA4F341193173857C26BC8BC6A0D78FD639082D2
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/js/lib/underscore-1.13.6.js
Preview:	// (c) 2009-2022 Jeremy Ashkenas, Julian Gonggrijp, and DocumentCloud and Investigative Reporters & Editors..// Underscore may be freely distributed under the MIT license...(function(e,t){typeof exports=="object"&&typeof module!="undefined"?module.exports=t():typeof define=="function"&&define.amd?define("underscore",t):(e=typeof globalThis!="undefined"?globalThis:e\|\|self,function(){var n=e._,r=e._=t();r.noConflict=function(){return e._=n,r}}())})(this,function(){function w(e,t){return t=t==null?e.length-1:+t,function(){var n=Math.max(arguments.length-t,0),r=Array(n),i=0;for(;i<n;i++)r[i]=arguments[i+t];switch(t){case 0:return e.call(this,r);case 1:return e.call(this,arguments[0],r);case 2:return e.call(this,arguments[0],arguments[1],r)}var s=Array(t+1);for(i=0;i<t;i++)s[i]=arguments[i];return s[t]=r,e.apply(this,s)}}function E(e){var t=typeof e;return t==="function"\|\|t==="object"&&!!e}function S(e){return e===null}function x(e){return e===void 0}function T(e){return e===!0\|\|e==

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (528)
Category:	dropped
Size (bytes):	15005
Entropy (8bit):	5.360552389101315
Encrypted:	false
SSDEEP:	384:bSzgUw7DiHCcInRKIlmSBD8FQBa0SwDQWURhU9119z4p:gZw7eHCcMRKwB8QQwDtchU9119z6
MD5:	0CB51C1A5E8E978CBE069C07F3B8D16D
SHA1:	C0A6B1EC034F8569587AEB90169E412AB1F4A495
SHA-256:	9B935BDA7709001067D9F40D0B008CB0C56170776245F4FF90C77156980FF5E9
SHA-512:	F98D0876E9B80F5499DDA72093621588950B9708B4261C8AA55912B7E4851E03596185486AFB3A9A075F90F59552BB9EC9D2E67534A7DEB9652BA794D6EE188D
Malicious:	false
Reputation:	low
Preview:	/. RequireJS 2.1.6 Copyright (c) 2010-2012, The Dojo Foundation All Rights Reserved.. Available via the MIT or new BSD license.. see: http://github.com/jrburke/requirejs for details./.var requirejs,require,define;.(function(ba){function J(b){return"[object Function]"===N.call(b)}function K(b){return"[object Array]"===N.call(b)}function z(b,c){if(b){var d;for(d=0;d<b.length&&(!b[d]\|\|!c(b[d],d,b));d+=1);}}function O(b,c){if(b){var d;for(d=b.length-1;-1<d&&(!b[d]\|\|!c(b[d],d,b));d-=1);}}function t(b,c){return ha.call(b,c)}function m(b,c){return t(b,c)&&b[c]}function H(b,c){for(var d in b)if(t(b,d)&&c(b[d],d))break}function S(b,c,d,m){c&&H(c,function(c,l){if(d\|\|!t(b,l))m&&"string"!==typeof c?(b[l]\|\|(b[l]={}),S(b[l],.c,d,m)):b[l]=c});return b}function v(b,c){return function(){return c.apply(b,arguments)}}function ca(b){throw b;}function da(b){if(!b)return b;var c=ba;z(b.split("."),function(b){c=c[b]});return c}function B(b,c,d,m){c=Error(c+"\nhttp://requirejs.org/docs/errors.html#"+b);c.re

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6564)
Category:	dropped
Size (bytes):	6565
Entropy (8bit):	5.382243764098105
Encrypted:	false
SSDEEP:	96:0vpl2sfWl0basxnWDEIY3gaBHzu0JtVGTHlsqsPlpDklR0klffXYjyEoHBp:k+euW/WDi3RzrSshmR0I3XUuHT
MD5:	5C0B394C3F25CFE7F093C013D9396AD5
SHA1:	6B11C3119C2AF3EB4A979589D765ED70408DC6CD
SHA-256:	CAE0AF2E9035626EBCC82AEDFFE6939E8DE145879607CC94C5F1EA379F94A12B
SHA-512:	9A52E6875C4FA651AE0888B44A2A9ABF93110E3E524F1EEDBEB83FFC1000210EE5F904C5E1CA0E9A82EC642BAE7B90DA9C6020C2CB01D1DEB1E72464BB5A4BAD
Malicious:	false
Reputation:	low
Preview:	var PAYPAL=window.PAYPAL\|\|{};!function(){"use strict";var t=function(t){var e=function(t,e,n){n[0]=(255&(0\|t[e]))<<24\|(255&(0\|t[e+1]))<<16\|(255&(0\|t[e+2]))<<8\|255&(0\|t[e+3])\|0,n[1]=(255&(0\|t[e+4]))<<24\|(255&(0\|t[e+5]))<<16\|(255&(0\|t[e+6]))<<8\|255&(0\|t[e+7])\|0},n=function(t,e){for(var n=32,r=0;n-- >0;)t[0]+=(t[1]<<4^t[1]>>5)+t[1]^r+e[3&r],r+=-1640531527,t[1]+=(t[0]<<4^t[0]>>5)+t[0]^r+e[r>>11&3]},r=function(t){for(var e=0,n=0;n<4;n++)e\|=t.charCodeAt(n)<<8n;return isNaN(e)?0:e},i=function(t,i){var o=new Array(2),a=new Array(8),s=new Array(4),u=0,c=0,d=t.split("").map((function(t){return t.charCodeAt(0)}));for(c=0;c<4;c++)s[c]=r(i.slice(4c,4*(c+1)));for(c=0;c<d.length;c+=8)e(d,c,o),n(o,s),a[u]=o[0],a[u+1]=o[1],u+=2;return a};var o={sh:function(t){for(var e=0,n=0;n<t.length;n++)e+=t.charCodeAt(n);return e&=e},addEventListener:function(t,e,n){void 0!==t.addEventListener?t.addEventListener(e,n,!1):void 0!==t.attachEvent&&t.attachEvent("on"+e,n)},removeEventListener:function(t,e,n){void 0!==

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3175
Entropy (8bit):	5.113464294316265
Encrypted:	false
SSDEEP:	96:nbhJ7QEROj/XoucqKTXXwfcIPpIwx75TNFkbaVyQxI1lxBJw:bXTO/HcqmXj8IwJ5pFkbaYKIFrw
MD5:	2454DC0BF112B2541FBA37CFD2E4CBC5
SHA1:	E8E86957B77AA457C757B9D4231BD46F70176002
SHA-256:	18657DF333EEA496F8322AFC0903F5ABD740A53FDD71B0730F4070911CD704E9
SHA-512:	1AFB2B1C951B1304D00F39BC4E0027F95CD4D9CBF74346305E8604236212E299D5CC50E78128165EF1F46689377209BB645095BEA0C1D8A7378002254CCC27D9
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/view/authcaptcha.js
Preview:	/*. Created by hdoan on 10/8/14.. */..define(['jquery', 'pageView', 'validation', 'errorDisplay'],...function ($, PageView, Validation, ErrorDisplay) {....'use strict';....var View = PageView.extend({.....el: '#captcha-standalone', // The dust template needs a section with id of 'captcha-standalone'.....//initialize form....initialize: function () {......ErrorDisplay.markError(this);......// Set back to hide on the popstate.....$(window).bind('popstate', function (event) {......if (!event.state) {.......$('.modal-overlay,.modal-animate').addClass('hide');......}.....});......// When the form is invalid, focus on the first input with an error.....Validation.on('invalidchallenge', function(form) {......ErrorDisplay.focusError(form);.....}, this);......// Adding handlers to validate form field.....Validation.init(this);......// Setting the page title.....$('title').html(this.$el.attr('data-title'));.....},.....events: {.....'click .captchaRefresh': 'refreshCaptcha',.....'click .captch

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16024)
Category:	downloaded
Size (bytes):	16052
Entropy (8bit):	5.3519984983543845
Encrypted:	false
SSDEEP:	384:XcGfcUvwKvmwdfdx7ACD0TXXIxjecdXJwEf5yFm0txf:OUVvmwdfPOgHdXJJW
MD5:	90355639E97F4CC3725A100B0B33ED19
SHA1:	0F09081F9F58EB793C8F27EAFB90154A04468710
SHA-256:	EFC3AD603DCA3C78E67493ADB079676731FD72C4204DBF7264D22E897A271267
SHA-512:	8003D80291F35C0BA499E3C5FC74FC4506B654FF62CC1D209538D127A26FC9A19882618F49CC17D67FD0E858D736F1A1DF414A39D5562AC620D2571611B44BC0
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/martech/tm/paypal/mktgtagmanager.js
Preview:	/@ 2024 PayPal (v1.0.1) /.!function(){"use strict";function f(t){if(!t\|\|t.constructor!==Object&&t.constructor!==Array)return t;var e,n=t.constructor();for(e in t)n[e]=f(t[e]);return n}function s(t,e){var n;return function(){return t&&(n=t.apply(e\|\|this,arguments),t=null),n}}var e,r={},D=-1,l=(window.PAYPAL=window.PAYPAL\|\|{PubSub:{subscribe:function(t,e){if("function"!=typeof e)return!1;t="symbol"==typeof t?t.toString():t,Object.prototype.hasOwnProperty.call(r,t)\|\|(r[t]={});var n="uid_"+String(++D);return r[t][n]=e,n}}},window.PAYPAL.PubSub),t=(window.fpti=window.fpti\|\|{},function t(){}),n=function n(){return{}},o=("undefined"==typeof JSON&&((JSON={}).stringify=t,JSON.parse=n,window.JSON=JSON),"performance"in window&&window.performance\|\|{}),d=(o&&!o.now&&(e=o.timing,o.now=function(){var t=(new Date).getTime()-(e&&e.navigationStart\|\|0);return 0<t?t:0}),String.prototype.trim\|\|(String.prototype.trim=function(){return this.replace(/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,"")}),Array.prototype

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65431)
Category:	downloaded
Size (bytes):	177743
Entropy (8bit):	4.410090234686878
Encrypted:	false
SSDEEP:	3072:QTY1n3dDEthymN6mNbPoZLEkCgw2MK2xZ1w2pVJMnnnnp3oqSfDXCU:1lOsCj7Qp3EfDn
MD5:	B4F2EDBEA31DCEC5C70F4F1BF574B162
SHA1:	94C164B7A2F52B4FB2A8A61A10ACBB4C2AA4E2B5
SHA-256:	7B093CBB49ADC2923B6EF6B58AD22F87BA4A008E0ECB27665A76CAB5E9DEEB40
SHA-512:	6F66035FBBC99326837C79F92965AF24EBF028AE6CF7BCD532985E6804F76DB7DC2779F8FF24B19D9444E693D5020085EF961B5A87D73E5B6C6CC165782137FA
Malicious:	false
Reputation:	low
URL:	https://ddbm2.paypal.com/tags.js
Preview:	/** DataDome is a cybersecurity solution to detect bot activity https://datadome.co (version 4.38.0) */ .!function e(t,n,o){function i(r,s){if(!n[r]){if(!t[r]){var d='\x66\x75\x6e\x63\x74\x69\x6f\x6e'==typeof require&&require;if(!s&&d)return d(r,!0);if(a)return a(r,!0);var c=new Error('\x43\x61\x6e\x6e\x6f\x74\x20\x66\x69\x6e\x64\x20\x6d\x6f\x64\x75\x6c\x65\x20\x27'+r+'\x27');throw c[['\x63\x6f\x64\x65']]='\x4d\x4f\x44\x55\x4c\x45\x5f\x4e\x4f\x54\x5f\x46\x4f\x55\x4e\x44',c;}var h=n[r]={exports:{}};t[r][0][['\x63\x61\x6c\x6c']](h[['\x65\x78\x70\x6f\x72\x74\x73']],function(e){return i(t[r][1][e]\|\|e);},h,h[['\x65\x78\x70\x6f\x72\x74\x73']],e,t,n,o);}return n[r][['\x65\x78\x70\x6f\x72\x74\x73']];}for(var a='\x66\x75\x6e\x63\x74\x69\x6f\x6e'==typeof require&&require,r=0;r<o[['\x6c\x65\x6e\x67\x74\x68']];r++)i(o[r]);return i;}({1:[function(e,t,n){t[['\x65\x78\x70\x6f\x72\x74\x73']]=function(){this[['\x65\x6e\x64\x70\x6f\x69\x6e\x74']]='\x68\x74\x74\x70\x73\x3a\x2f\x2f\x61\x70\x69\x2d\x6a\x73

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1997
Entropy (8bit):	5.0050192129706
Encrypted:	false
SSDEEP:	48:syq5exVy+GtySao6qP9PGp161pyRDhKOJUoV0gQ84fTbln:7q5eO+GsSao6UGp8rSVKcUo2gp47bl
MD5:	1B66EA06B0CCC5574AA1593988231A8C
SHA1:	FBF4CC6664D86A91D3176E6B2A3DA684FC6E6EDA
SHA-256:	7173550FD32A664B4075E4C34D8BBCFC3725AFB987CF3DBD7FBA10AFA479A6B5
SHA-512:	9BF4C1894C7CFCC65690CC70D5A191C1CF073B39D70C3597790143AFCC0CEECDAB71928FFE49FDFF202312A161F38D2779ACF8B5D6D15B6614326D53A47EA068
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/config.js
Preview:	/* global requirejs:true */.requirejs.config({..deps: ['app'],..paths: {..."jquery":.....'lib/jquery-1.12.4',..."jqueryUI":.....'lib/jquery.ui.mini',..."json":......(typeof JSON === 'undefined') ? 'lib/json2' : 'empty:',..."underscore":....'lib/underscore-1.13.4',..."backbone":.....'lib/backbone-1.5.0.min',..."backboneSubroute":...'lib/backbone-subroute-0.4.5.min',..."dust":......'lib/dust-core',..."nougat":.....'core/nougat',..."BaseView":.....'core/baseView',..."dust-helpers" :...'lib/dust-helpers',..."dust-helpers-supplement":.'lib/dust-helpers-supplement',..."dustmotes-iterate":..'lib/dustmotes-iterate',..."fso-helper":....'lib/fso-helper',..."fso":......'lib/fso',..."browserId":....'lib/bid',...."pageView":.....'view/pageView',..."login":.....'view/login',...'notifications':...'view/notifications',....//Core Components..."lap":......'components/textInput/lap',..."textField":....'components/textInput/textField',...'selectDropdown':...'components/selectDropdown',....//Widgets..."val

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7202), with no line terminators
Category:	downloaded
Size (bytes):	7202
Entropy (8bit):	5.355379827732298
Encrypted:	false
SSDEEP:	192:GeLYFa7EGANz8HbcLvkJ26p0HLlIuAM0NzTKBB0nkV9cofMctaUc:fXoxYHbcLa0HL2uRgWwnsGof9taj
MD5:	CA4C1E3DC374D2C6966967C820647C45
SHA1:	556C0E5DC7ADED4F7D7EF6798D74E79A546A49E8
SHA-256:	B54CD3D43C06F2206B441706CB2100AB2AF2BC09D4780CBE899DE6480041701B
SHA-512:	0912FBF7B5E5B1C2D5F4FB6847F1FF94A9987F5F1408402F2B5D8D2CB7DF81FFDFCA81F5DCF02ACA34184479482AD494824AE9E5CA546ECAD3EC0900644D5443
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/pa/3pjs/tl/6.4.65/patlcfg.js
Preview:	TLT.addModule("digitalData",function(){return{init:function(){},destroy:function(){},onevent:function(webEvent){if("object"==typeof webEvent&&webEvent.type&&webEvent)switch(webEvent.type){case"load":case"unload":"undefined"!=typeof window.fpti&&(qKeys=window.fpti,TLT.logCustomEvent("FPTI",{description:"FPTI",action:"Retrieve",value:qKeys}))}var qKeys}}}),function(){"use strict";var config,msgPrivacyPatterns,lastMsg,TLT=window.TLT,asyncReqOnUnload=/WebKit/i.test(navigator.userAgent),useFetch=!!window.fetch,useBeacon=!0,useWorker=!1,maxQueueEvents=30,maxQueueSize=3e4,queueTimerInterval=2e4,checkEndpoint=!1,enableDomCapture=!0,domDiffEnabled=!0;if("function"==typeof TLT.isInitialized&&TLT.isInitialized())console.warn("Tealeaf has already been initialized in this page. Aborting this initialization.");else{if(TLT.utils.isLegacyIE)return console&&(console.warn("This version of the UIC does not support Internet Explorer 8."),console.info("Applications requiring Internet Explorer 8 (or below)

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 32x32, 32 bits/pixel, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	5430
Entropy (8bit):	3.4364435707992746
Encrypted:	false
SSDEEP:	48:++/pSKnJ/3cCXndBlr9aPZ0M0V+2hDTGlpFRlcPgCOfU:+ASKJPcCXjgZ03Gre9
MD5:	E1528B5176081F0ED963EC8397BC8FD3
SHA1:	FF60AFD001E924511E9B6F12C57B6BF26821FC1E
SHA-256:	1690C4E20869C3763B7FC111E2F94035B0A7EE830311DD680AC91421DAAD3667
SHA-512:	ACF71864E2844907752901EEEAF5C5648D9F6ACF3B73A2FB91E580BEE67A04FFE83BC2C984A9464732123BC43A3594007691653271BA94F95F7E1179F4146212
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/en_US/i/icon/pp_favicon_x.ico
Preview:	...... .... .....&......... .h.......(... ...@..... ............................................................................................................................................................................................................................................................................................................................................................................................................................................................................0...0...0...0.............................................................................................................>..............X...........................................................................................................\.......................................................................................................$...<...:...:...:..d......................................................................................................q

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	25417
Entropy (8bit):	4.641664509877341
Encrypted:	false
SSDEEP:	384:fe93jGIJI2AN/yRikI+aDDe2MJS0KYqKDmBVogMorGNq49n7jneB54DpJqhhwAW4:Y4+/KBVC7xVs
MD5:	4FB1FFD27A73E1DBB4DD02355A950A0B
SHA1:	C1124B998C389FB9EE967DCCF276E7AF56F77769
SHA-256:	79C488E61278C71E41B75578042332FB3C44425E7DBB224109368F696C51E779
SHA-512:	77695F1A32BE64925B3564825B7CB69722A2C61B23665D5B80B62DEC5692579C12ACCABB970954F0BF73DFDBF861BF924F7CC1486E754E3A8F594B2969F853F2
Malicious:	false
Reputation:	low
Preview:	/! Dust - Asynchronous Templating - v2.6.2. http://linkedin.github.io/dustjs/.* Copyright (c) 2015 Aleksander Williams; Released under the MIT License /.(function (root, factory) {. /global define*/. if (typeof define === 'function' && define.amd && define.amd.dust === true) {. define('dust.core', [], factory);. } else if (typeof exports === 'object') {. module.exports = factory();. } else {. root.dust = factory();. }.}(this, function() {. var dust = {. "version": "2.6.2". },. NONE = 'NONE', ERROR = 'ERROR', WARN = 'WARN', INFO = 'INFO', DEBUG = 'DEBUG',. EMPTY_FUNC = function() {};.. dust.config = {. whitespace: false,. amd: false. };.. // Directive aliases to minify code. dust._aliases = {. "write": "w",. "end": "e",. "map": "m",. "render": "r",. "reference": "f",. "section": "s",. "exists": "x",. "notexists": "nx",. "block": "b",. "partial": "p",. "helper": "h". };.. (function initLogging() {. /

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2483), with no line terminators
Category:	dropped
Size (bytes):	2483
Entropy (8bit):	5.014711721076513
Encrypted:	false
SSDEEP:	48:DqHGbpgqYXnOPDi4Ta5eaIqKn61/lq3XAVG+wKgj:DqUJY3OGteTqJlcL9
MD5:	9546C4415837D6088EEA6ED5262F65AE
SHA1:	3D333C384894EDCAFBBBD9E26D22567E74743F43
SHA-256:	A9B59501FACDBA2D613578549A901AFA5F98BBA4D301B3B7C4AF53178E84D75C
SHA-512:	343538B1814EB8C012335490127DA1FFC8ADF8E2C58DA1F18DC3E7F23A396D861229F2381AF4D46E5AC0A0D320A8FE6D96883F5EA2F46085BADF4AF84F502BE4
Malicious:	false
Reputation:	low
Preview:	define("newgat",["jquery","underscore","dustjs-linkedin","dust-makara-helpers","dusthelpers-supplement","dustmotes-iterate","pulvus-provide","dustjs-helpers","_languagepack"],function(e,t,n,r){function u(e,t,n){if(Array.prototype.filter)return e.filter(t);var r=[],i=e.length-1,s=null;while(i>-1)s=e[i],t.call(n,s,i,e)&&r.unshift(s),i--;return r}function a(e,t,n){if(e instanceof Array&&Array.prototype.forEach)return e.forEach(t,n);var r=Object(e),i=null,s=null;for(i in r)if(r.hasOwnProperty(i)){s=t.call(n,r[i],i,r);if(s===!1)break}}function f(e,t){var n=null;for(n in e)e.hasOwnProperty(n)&&(t[n]=e[n]);return t}function l(e){return a(Array.prototype.slice.call(arguments,1),function(t){f(t,e)}),e}r.registerWith(n,{autoloadTemplateContent:!0,loader:function(e,t,n){var r=document.documentElement.getAttribute("locale").replace("_","-");require(["_languagepack"],function(e){n(null,e[r][t])})}});var i=null,s=null,o=null;return i=function(){},i.prototype={render:function(t,n){var r=new e.Deferre

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	2420
Entropy (8bit):	4.972597027356834
Encrypted:	false
SSDEEP:	48:gmlhVeoLah0uOD5hgujkaUhoV0nahQEWcTAjL3CW6lnOiLq7lhQETJN:xIrXOzgibVGlEWc7XlnDETJN
MD5:	E36C272EBDBD82E467534A2B3F156286
SHA1:	BFA08A7B695470FE306A3482D07A5D7C556C7E71
SHA-256:	9292DC752A5B7C7EC21F5A214E61620B387745843BB2A528179939F9E2423665
SHA-512:	173C0F75627B436C3B137286EA636DCAF5445770D89DA77F6F0B416E0E83759879D197A54E15A973D2EB5CAF90B94014DA049DE6CC57DBD63CAB3E2917FBA1BA
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/widgets/analytics.js
Preview:	/global define:true, s:true /../*. @fileOverview Analytics . link and error tracking. * @name Analytics Widget. * @author dquock. /.define(["jquery", "BaseView", "nougat"],..function ($, BaseView, nougat) {..."use strict";....var View = BaseView.extend({.....el: "body",......events: {......// track any link with data-pagename......"click a[data-pagename], input[data-pagename], label[data-pagename]": "trackLink"......},....../..... .Link tracking..... .@linkname = name attribute..... .@pageName = data-pagename the link is going to..... .@pageName2 = data-pagename2 the link is going to..... .@prop27 = pagename(the one you're currently on)\|linkname..... .@prop28 = data-transactiondetailslinks..... .also sets div#analytics prop attrs for automation..... */.....trackLink: function (event) {......var $link = $(event.currentTarget),.......pageName = $link.attr("data-pagename") \|\| s.pageName,.......pageName2 = $link.attr("data-pagename2") \|\| s.prop25;.......if (s) {.......// s

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	33514
Entropy (8bit):	5.060602493646791
Encrypted:	false
SSDEEP:	768:jDy9k42NxFGFsFeesFGFsFeSXqHcFGFsFe6XXqHjFGFsFeF2kFGFsFeFXFGFsFes:jDy9k42NxI6EesI6EMI6E/I6EgkI6EdJ
MD5:	D4BFBFA83C7253FAE8E794B5AC26284A
SHA1:	5D813E61B29C8A7BC85BFB8ACAA5314AEE4103E3
SHA-256:	B0169C2A61B9B0DDC1D677DA884DF7FD4D13CE2FD77255378764CCA9B0AA6BE6
SHA-512:	7D41C055D8AB7CE9E1636E6A2EE005B1857D3CB3E2B7E4B230BBDCC2FC0BA2DA4622EED71B05FB60A98F0CF3CBDA54AC4962BCDB2344EDF9B5DFBCCD87A4925A
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/css/app.css
Preview:	/ method responsible for loading the background image set in CSS /.@-webkit-keyframes rotation {. from {. -webkit-transform: rotate(0deg);. transform: rotate(0deg);. }. to {. -webkit-transform: rotate(359deg);. transform: rotate(359deg);. }.}.@-moz-keyframes rotation {. from {. -moz-transform: rotate(0deg);. transform: rotate(0deg);. }. to {. -moz-transform: rotate(359deg);. transform: rotate(359deg);. }.}.@-o-keyframes rotation {. from {. -o-transform: rotate(0deg);. transform: rotate(0deg);. }. to {. -o-transform: rotate(359deg);. transform: rotate(359deg);. }.}.@keyframes rotation {. from {. transform: rotate(0deg);. }. to {. transform: rotate(359deg);. }.}./* Lib /.#main .headContainer {. margin-bottom: 10px;.}./ mobile ---- /.@media all and (max-width: 767px) {. {. -webkit-tap-highlight-color: transparent;. -webkit-touch-callout: none;. }. header.headContainer {. width: 100%;. }.}./* Animator setting

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14667)
Category:	dropped
Size (bytes):	14854
Entropy (8bit):	5.248951222443214
Encrypted:	false
SSDEEP:	384:wMwkQT8rQL29uGTmqvpPEDjIy1wJmYkJs3wzhErIURNve88PMEWuP1:wpT8EYRPEDsy1wJkrVDcNvdEWuP1
MD5:	8EC7CE4519F5C6B2642DCCFE6BDAE23B
SHA1:	667A6CA8F5769BA9B49655E8C6779CECF43A7CBF
SHA-256:	C007D73792AC2D25882BFBB573E700E721A0ADACFAB947E6A0B64A61991FECF0
SHA-512:	F4AA97EE216C5E9BCD6796BE9A3598B6EAF9B55E252001FC35F6117708666190E14838940B9EDCC18867EB3353C149A883BDE02F620289200EE2387EACFE6B36
Malicious:	false
Reputation:	low
Preview:	/. RequireJS 2.1.6 Copyright (c) 2010-2012, The Dojo Foundation All Rights Reserved.. Available via the MIT or new BSD license.. see: http://github.com/jrburke/requirejs for details./..var requirejs,require,define;(function(ba){function J(e){return"[object Function]"===N.call(e)}function K(e){return"[object Array]"===N.call(e)}function z(e,t){if(e){var n;for(n=0;n<e.length&&(!e[n]\|\|!t(e[n],n,e));n+=1);}}function O(e,t){if(e){var n;for(n=e.length-1;-1<n&&(!e[n]\|\|!t(e[n],n,e));n-=1);}}function t(e,t){return ha.call(e,t)}function m(e,n){return t(e,n)&&e[n]}function H(e,n){for(var r in e)if(t(e,r)&&n(e[r],r))break}function S(e,n,r,i){return n&&H(n,function(n,s){if(r\|\|!t(e,s))i&&"string"!=typeof n?(e[s]\|\|(e[s]={}),S(e[s],n,r,i)):e[s]=n}),e}function v(e,t){return function(){return t.apply(e,arguments)}}function ca(e){throw e}function da(e){if(!e)return e;var t=ba;return z(e.split("."),function(e){t=t[e]}),t}function B(e,t,n,r){return t=Error(t+"\nhttp://requirejs.org/docs/errors.html#"+e),

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (528)
Category:	downloaded
Size (bytes):	15005
Entropy (8bit):	5.360552389101315
Encrypted:	false
SSDEEP:	384:bSzgUw7DiHCcInRKIlmSBD8FQBa0SwDQWURhU9119z4p:gZw7eHCcMRKwB8QQwDtchU9119z6
MD5:	0CB51C1A5E8E978CBE069C07F3B8D16D
SHA1:	C0A6B1EC034F8569587AEB90169E412AB1F4A495
SHA-256:	9B935BDA7709001067D9F40D0B008CB0C56170776245F4FF90C77156980FF5E9
SHA-512:	F98D0876E9B80F5499DDA72093621588950B9708B4261C8AA55912B7E4851E03596185486AFB3A9A075F90F59552BB9EC9D2E67534A7DEB9652BA794D6EE188D
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/require.js
Preview:	/. RequireJS 2.1.6 Copyright (c) 2010-2012, The Dojo Foundation All Rights Reserved.. Available via the MIT or new BSD license.. see: http://github.com/jrburke/requirejs for details./.var requirejs,require,define;.(function(ba){function J(b){return"[object Function]"===N.call(b)}function K(b){return"[object Array]"===N.call(b)}function z(b,c){if(b){var d;for(d=0;d<b.length&&(!b[d]\|\|!c(b[d],d,b));d+=1);}}function O(b,c){if(b){var d;for(d=b.length-1;-1<d&&(!b[d]\|\|!c(b[d],d,b));d-=1);}}function t(b,c){return ha.call(b,c)}function m(b,c){return t(b,c)&&b[c]}function H(b,c){for(var d in b)if(t(b,d)&&c(b[d],d))break}function S(b,c,d,m){c&&H(c,function(c,l){if(d\|\|!t(b,l))m&&"string"!==typeof c?(b[l]\|\|(b[l]={}),S(b[l],.c,d,m)):b[l]=c});return b}function v(b,c){return function(){return c.apply(b,arguments)}}function ca(b){throw b;}function da(b){if(!b)return b;var c=ba;z(b.split("."),function(b){c=c[b]});return c}function B(b,c,d,m){c=Error(c+"\nhttp://requirejs.org/docs/errors.html#"+b);c.re

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	56
Entropy (8bit):	4.7509038602945655
Encrypted:	false
SSDEEP:	3:HhCkuDKj0twO21n:HUkug0E
MD5:	5C0D2F592924CF8640BCC49B50E28E3E
SHA1:	430B6AC0493DEFEB5207AD1E2A8B25F14DD5363F
SHA-256:	A1245B1CDD24538FA2E4B17EC76D2AD453F0073A1E958368AEE3D63AE399B518
SHA-512:	79BF2ADAAEA81BDFEF053985B970CB31E512234A1EC10A71966FBE4D70698F1F1A223EB1E066E09C1696273A79D0F22AB598D15842CEA2D0F7D79BB1A45DCAA0
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwlEHoxwhEK4shIFDVNaR8USBQ2_JFKQEhcJOhT-0ykSeV4SBQ1TWkfFEgUNvyRSkA==?alt=proto
Preview:	ChIKBw1TWkfFGgAKBw2/JFKQGgAKEgoHDVNaR8UaAAoHDb8kUpAaAA==

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	dropped
Size (bytes):	2420
Entropy (8bit):	4.972597027356834
Encrypted:	false
SSDEEP:	48:gmlhVeoLah0uOD5hgujkaUhoV0nahQEWcTAjL3CW6lnOiLq7lhQETJN:xIrXOzgibVGlEWc7XlnDETJN
MD5:	E36C272EBDBD82E467534A2B3F156286
SHA1:	BFA08A7B695470FE306A3482D07A5D7C556C7E71
SHA-256:	9292DC752A5B7C7EC21F5A214E61620B387745843BB2A528179939F9E2423665
SHA-512:	173C0F75627B436C3B137286EA636DCAF5445770D89DA77F6F0B416E0E83759879D197A54E15A973D2EB5CAF90B94014DA049DE6CC57DBD63CAB3E2917FBA1BA
Malicious:	false
Reputation:	low
Preview:	/global define:true, s:true /../*. @fileOverview Analytics . link and error tracking. * @name Analytics Widget. * @author dquock. /.define(["jquery", "BaseView", "nougat"],..function ($, BaseView, nougat) {..."use strict";....var View = BaseView.extend({.....el: "body",......events: {......// track any link with data-pagename......"click a[data-pagename], input[data-pagename], label[data-pagename]": "trackLink"......},....../..... .Link tracking..... .@linkname = name attribute..... .@pageName = data-pagename the link is going to..... .@pageName2 = data-pagename2 the link is going to..... .@prop27 = pagename(the one you're currently on)\|linkname..... .@prop28 = data-transactiondetailslinks..... .also sets div#analytics prop attrs for automation..... */.....trackLink: function (event) {......var $link = $(event.currentTarget),.......pageName = $link.attr("data-pagename") \|\| s.pageName,.......pageName2 = $link.attr("data-pagename2") \|\| s.prop25;.......if (s) {.......// s

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4495
Entropy (8bit):	4.231793539683161
Encrypted:	false
SSDEEP:	96:qLlbCe1CypE22uJuXplSlDrACAts8/yRlzUntwRntg1Zy7GbNB:QCgCym2hJuXuACEs8qRlzUtwRteZyCbj
MD5:	2ECD7878D26715C59A1462EA80D20C5B
SHA1:	2A0D2C2703EB290A814AF87EE09FEB9A56316489
SHA-256:	79A837D4EC921084E5CB0663372232B7B739A6AE5F981B00EB79EB3441043FC5
SHA-512:	222472C443ABA64839D4FA561A77541D913F43156083DA507380AC6889FDD237D9B5374E710092DD60B48A5B808CBA12749921C441144C5A429AB28D89D74FB0
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/dust-helpers-supplement.js
Preview:	var extend = function extend(dust) {.. // Add new dust helpers in this style. dust.helpers.link = function link(chunk, ctx, bodies, params) {. 'use strict';.. var href,. host = ctx.getPath(false, ['context', 'pageInfo', 'hostName']),. production,. stage,. sandbox,. dev,. cobrand,. locale,. pat,. extension,. type,. str;.. // Get trailing part of url and extract extension, if any. if (params) {. if (params.href) {. href = dust.helpers.tap(params.href, chunk, ctx);. href = href.trim();. pat = /\.[0-9a-z]{1,4}$/i;. extension = href.match(pat);. } else {. return chunk.write(''); // if not href, generate empty output. }. if (params.type) {. type = dust.helpers.tap(params.type, chunk, ctx);. if

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65508)
Category:	downloaded
Size (bytes):	70162
Entropy (8bit):	5.332928547809831
Encrypted:	false
SSDEEP:	1536:ihUQ8vmwdyuwzSpmURvVCzBuOtmfmVaom+gGmtBmxsuRc:iugz7e+KkCr
MD5:	0AF4783054B8E925EC024DC00FCB4510
SHA1:	B43B595D6899229217DA7CA15E8D1A846E93A666
SHA-256:	C3F1981E14042012337C6493597CD362261453611B727E91847A118B2B4CFFB7
SHA-512:	874D73FF48E306FBAC1471DB4F925DF8348F5C3D322AC13D769AF91F6DC67F33F0886674686F8A9F5168910FD8AC160F007423508ED29665E8138EC411C5BE84
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/pa/js/min/pa.js
Preview:	/@ 2024 PayPal (v1.9.5) /.!function(){"use strict";function r(t,e,n){(e=function(t){t=function(t,e){if("object"!=typeof t\|\|!t)return t;var n=t[Symbol.toPrimitive];if(void 0===n)return("string"===e?String:Number)(t);t=n.call(t,e\|\|"default");if("object"!=typeof t)return t;throw new TypeError("@@toPrimitive must return a primitive value.")}(t,"string");return"symbol"==typeof t?t:t+""}(e))in t?Object.defineProperty(t,e,{value:n,enumerable:!0,configurable:!0,writable:!0}):t[e]=n}function i(e,t){var n,r=Object.keys(e);return Object.getOwnPropertySymbols&&(n=Object.getOwnPropertySymbols(e),t&&(n=n.filter(function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable})),r.push.apply(r,n)),r}function g(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?i(Object(n),!0).forEach(function(t){r(e,t,n[t])}):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):i(Object(n)).forEach(function(t){Object.defineProperty(e,t,Ob

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (39693)
Category:	dropped
Size (bytes):	39820
Entropy (8bit):	5.232045417014232
Encrypted:	false
SSDEEP:	384:Cv3W0sOjNrHqSXYJ6y5ryBNZ3xBpxzzGSeUUUCSeUUUNUUUUiUUUULUKU0SvGUaT:sW0dxkxMDlrzzkn8wDPMruBb
MD5:	896EEAFD3E90844A3233C95E77C81097
SHA1:	4027BEFB3750417C1CD255F85A1D935B68E742A3
SHA-256:	10BB0A4C3E22BDB9E174F2E7EC6FA149FE8F016903BAEDA72F9B36A8CA8DC0DA
SHA-512:	8C465A446C405D272FD90E3BBCB847ED0ABC3617E98BB158241ED67E065604AC39D3A1D347A0F24F7B4F987147EC5139C482A3137CFE00D168ACF4E8EE0BD371
Malicious:	false
Reputation:	low
Preview:	/! dustjs-linkedin - v3.0.0. http://dustjs.com/.* Copyright (c) 2021 Aleksander Williams; Released under the MIT License */..(function(e,t){typeof define=="function"&&define.amd&&define.amd.dust===!0?define("dust.core",[],t):typeof exports=="object"?module.exports=t():e.dust=t()})(this,function(){function getTemplate(e,t){if(!e)return;if(typeof e=="function"&&e.template)return e.template;if(dust.isTemplateFn(e))return e;if(t!==!1)return dust.cache[e]}function load(e,t,n){if(!e)return t.setError(new Error("No template or template name provided to render"));var r=getTemplate(e,dust.config.cache);return r?r(t,Context.wrap(n,r.templateName)):dust.onLoad?t.map(function(t){function i(e,i){var s;if(e)return t.setError(e);s=getTemplate(i,!1)\|\|getTemplate(r,dust.config.cache);if(!s){if(!dust.compile)return t.setError(new Error("Dust compiler not available"));s=dust.loadSource(dust.compile(i,r))}s(t,Context.wrap(n,s.templateName)).end()}var r=e;dust.onLoad.length===3?dust.onLoad(r,n.options,i)

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3808)
Category:	dropped
Size (bytes):	3916
Entropy (8bit):	5.2749567971703994
Encrypted:	false
SSDEEP:	96:PMcABYAxCMaruyTOXPaJJccTMSeqdq9HVeGXlY:CDCM2RaSJJzASeIUHVS
MD5:	E0463BDE74EF42034671E53BCA8462E9
SHA1:	5EA0E2059A44236EE1E3B632EF001B22D17449F1
SHA-256:	A58147AEB14487FEF56E141EA0659AC604D61F5E682CFE95C05189BE17DF9F27
SHA-512:	1D01F65C6A00E27F60D3A7F642974CE7C2D9E4C1390B4F83C25C462D08D4AB3A0B397690169A81EACA08BEA3AEB55334C829AA77F0DBBAD8789ED247F0870057
Malicious:	false
Reputation:	low
Preview:	/* Modernizr 2.6.1 (Custom Build) \| MIT & BSD. * Build: http://modernizr.com/download/#-shiv-cssclasses. */.;window.Modernizr=function(a,b,c){function u(a){j.cssText=a}function v(a,b){return u(prefixes.join(a+";")+(b\|\|""))}function w(a,b){return typeof a===b}function x(a,b){return!!~(""+a).indexOf(b)}function y(a,b,d){for(var e in a){var f=b[a[e]];if(f!==c)return d===!1?a[e]:w(f,"function")?f.bind(d\|\|b):f}return!1}var d="2.6.1",e={},f=!0,g=b.documentElement,h="modernizr",i=b.createElement(h),j=i.style,k,l={}.toString,m={},n={},o={},p=[],q=p.slice,r,s={}.hasOwnProperty,t;!w(s,"undefined")&&!w(s.call,"undefined")?t=function(a,b){return s.call(a,b)}:t=function(a,b){return b in a&&w(a.constructor.prototype[b],"undefined")},Function.prototype.bind\|\|(Function.prototype.bind=function(b){var c=this;if(typeof c!="function")throw new TypeError;var d=q.call(arguments,1),e=function(){if(this instanceof e){var a=function(){};a.prototype=c.prototype;var f=new a,g=c.apply(f,d.concat(q.call(arguments)

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	6158
Entropy (8bit):	4.803683897903787
Encrypted:	false
SSDEEP:	192:oHXo3pSW7yiuzvCyBoIQo/ZbTHvUMfItoa39SrWM8N6fG:QopAvCyR/ZbTHvUMfItoa39K8NMG
MD5:	95AA9AA9D26FCCCC5BB228A7A86CAECB
SHA1:	55A5BFC1A1B4192C4FDB480C7E5FDFC0FFD50A44
SHA-256:	75C159C9974A7207171CF1F4ED302F91F90AE95233FDD64E994FD66ADA89AB20
SHA-512:	3598C0552DB1D8039D9F898C14EF1B91E6DA6069B8FD7F53B5D2750EBD1046E7317B18DE4D3D2A307734E4B066E48BDF37B924948BC79B9027CCC2D5A8DE1D17
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/webcaptcha/grcenterprise_v3_static.js
Preview:	"use strict";..function init() {. const key = getListenerSearchKey('data-key');. const sessionId = getListenerSearchKey('data-sessionId');. const csrf = getListenerSearchKey('data-csrf');. const action = getListenerSearchKey('data-action');. const src = getListenerSearchKey('data-src');. const submitURL = getListenerSearchKey('data-submitURL');. const startTime = getListenerSearchKey('data-startTime');...renderGRCV3Enterprise({. key,. action,. sessionId,. csrf,. src,. submitURL,. startTime. });.. var eventMethod = window.addEventListener ? "addEventListener" : "attachEvent",. eventer = window[eventMethod],. messageEvent = (eventMethod === "attachEvent") ? "onmessage" : "message",. clickEvent = eventMethod === "attachEvent" ? "onclick" : "click";.. document[eventMethod](clickEvent,resizeWidget);.. eventer(messageEvent, function(e) {. if(!e.data){. return;.

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	6071
Entropy (8bit):	4.961478576775147
Encrypted:	false
SSDEEP:	96:CftkjQu0Q0LCY/TMqqMbFibpR1KO0PT4tWaZSxLakjbBWk/YVGi4inMypJeeYsfA:MoQzj7wyFmnw3EtWaZw+oMCYVlBflKGG
MD5:	812B50931C7ACB37DDFCF2D66CE4F6D9
SHA1:	616C276F6632BE2C9C4F60F8F06582FDE300F9A1
SHA-256:	8B132276A98B7A181026AE1C803C5E060D8FA7A4007BF88F185DC78B7E7B5106
SHA-512:	670A77C041A030AB54CD1740BA69E9FE4C0B1F9531C02F9D37DB6A304052E5F909ED22F771009FE6DA41F6E1046FC6B5A21628E1A2AB7E3BE7F3E2F6397B8CB9
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/widgets/errorDisplay.js
Preview:	/*. Created by hdoan on 5/8/14.. . This is used to hide and show the error associated with an input field.. * Used also to mark the container of the input field with a 'hasError' class so when the input has focus, the error container can be shown. * Used also to focus on the first input with an error when the form is invalid due to empty inputs. /.define(['jquery', 'validation', 'backbone'], function($, Validation, Backbone) {...'use strict';....var errorDisplay = {...../.... Shows the error container AND visual treatment associated with the input field.... .... @param {Object} param - could be an Event object or element.... */....showError: function(param) {.....var $targetElement,......$targetParent;......// If param is an event.....if (param.type === 'focusin') {......$targetElement = $(param.target);......// param is an element.....} else {......$targetElement = param;.....}.....$targetParent = $targetElement.parents('.textInput');......if ($targetParent.hasClass('has

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65315)
Category:	dropped
Size (bytes):	88110
Entropy (8bit):	5.276848915126569
Encrypted:	false
SSDEEP:	1536:opEcTreA2vNaZIsKF+HQUXi7VKNVdEUqN992B7TETUu/FZh5C+r:Bcf8Uy7V8VWUqaTEbz5C+r
MD5:	5CB3D10BF1449FB78DADA696632213E8
SHA1:	95752CA4737115A2E82145DCCAF396624E71935E
SHA-256:	B677CDFB9629330AC25C0A07F251DCD072A52537E7C68051A576EE4B27D99AA6
SHA-512:	DAF893B6B84347C28D677F060DE2E9605A7248ED777CD93C3B0730440376B8F7F16FF5EF483D3A182BED2AFA7FCEE5C051359A3C19472DC3B89F79E3459076C7
Malicious:	false
Reputation:	low
Preview:	/!. jQuery JavaScript Library v3.7.0. * https://jquery.com/. . Copyright OpenJS Foundation and other contributors. * Released under the MIT license. * https://jquery.org/license. . Date: 2023-05-11T18:29Z. */..(function(e,t){"use strict";typeof module=="object"&&typeof module.exports=="object"?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)})(typeof window!="undefined"?window:this,function(e,t){"use strict";function y(e,t,n){n=n\|\|m;var r,i,s=n.createElement("script");s.text=e;if(t)for(r in g)i=t[r]\|\|t.getAttribute&&t.getAttribute(r),i&&s.setAttribute(r,i);n.head.appendChild(s).parentNode.removeChild(s)}function b(e){return e==null?e+"":typeof e=="object"\|\|typeof e=="function"?a[f.call(e)]\|\|"object":typeof e}function x(e){var t=!!e&&"length"in e&&e.length,n=b(e);return d(e)\|\|v(e)?!1:n==="array"\|\|t===0\|\|typeof t=="number"&&t>0&&t-1 in e}function T(e,t){return e.nodeName&&e.nodeName.toLower

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 32x32, 32 bits/pixel, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	5430
Entropy (8bit):	3.4364435707992746
Encrypted:	false
SSDEEP:	48:++/pSKnJ/3cCXndBlr9aPZ0M0V+2hDTGlpFRlcPgCOfU:+ASKJPcCXjgZ03Gre9
MD5:	E1528B5176081F0ED963EC8397BC8FD3
SHA1:	FF60AFD001E924511E9B6F12C57B6BF26821FC1E
SHA-256:	1690C4E20869C3763B7FC111E2F94035B0A7EE830311DD680AC91421DAAD3667
SHA-512:	ACF71864E2844907752901EEEAF5C5648D9F6ACF3B73A2FB91E580BEE67A04FFE83BC2C984A9464732123BC43A3594007691653271BA94F95F7E1179F4146212
Malicious:	false
Reputation:	low
Preview:	...... .... .....&......... .h.......(... ...@..... ............................................................................................................................................................................................................................................................................................................................................................................................................................................................................0...0...0...0.............................................................................................................>..............X...........................................................................................................\.......................................................................................................$...<...:...:...:..d......................................................................................................q

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Algol 68 source, ASCII text
Category:	dropped
Size (bytes):	22992
Entropy (8bit):	4.318444249541683
Encrypted:	false
SSDEEP:	384:NjB0PZV5PnJmyymBJERLKDAo00s2kadv9nvMLVAavDAVmm6vi08Bf:pB0VVJmoERLC5xzkaT0imfmt081
MD5:	E2E8FE02355CC8E6F5BD0A4FD61EA1C3
SHA1:	B1853D31FB5B0B964B78A79EEF43DDC6BBB60BBA
SHA-256:	492177839CCABB9A90A35EB4B37E6280D204B8C5F4B3B627E1093AA9DA375326
SHA-512:	7B5FF6C56A0F3BBB3F0733C612B2F7C5BBB4CC98EF7F141A20C2524ED9F86CB934EFEA9F6F0FAEB2BEC25FCB76CF50775BC3D0B712EAAC442E811B304AB87980
Malicious:	false
Reputation:	low
Preview:	/! dustjs-helpers - v1.5.0. https://github.com/linkedin/dustjs-helpers.* Copyright (c) 2014 Aleksander Williams; Released under the MIT License */.(function(dust){.. // Use dust's built-in logging when available. var _log = dust.log ? function(msg, level) {. level = level \|\| "INFO";. dust.log(msg, level);. } : function() {};. . var _deprecatedCache = {};. function _deprecated(target) {. if(_deprecatedCache[target]) { return; }. _log("Deprecation warning: " + target + " is deprecated and will be removed in a future version of dustjs-helpers", "WARN");. _log("For help and a deprecation timeline, see https://github.com/linkedin/dustjs-helpers/wiki/Deprecated-Features#" + target.replace(/\W+/g, ""), "WARN");. _deprecatedCache[target] = true;. }. . function isSelect(context) {. var value = context.current();. return typeof value === "object" && value.isSelect === true;. }. . // Utility method : toString() equivale

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (705), with no line terminators
Category:	dropped
Size (bytes):	705
Entropy (8bit):	5.048344747919151
Encrypted:	false
SSDEEP:	12:2aENAZ6DcZ9XJzB/S/Bf6AtnAutR/6w0BTq2qMR8dpMPu4JJZDMV8eaErYQ7a:2qZ6QZ9ZzBkBf6mhtR6BTq2aLM3HW2Hz
MD5:	C8DDDB4FFFA4A0F4360013DC08CAC19F
SHA1:	3D57D17A2B0909B6C686714AA185CCC2195AB863
SHA-256:	07D5BEDAF5859555A55C31E6A8FF04BEE28FB3A3B2F12E45250B50292A2F7FCD
SHA-512:	E190A13A372C53740311DB1ABC2878FAD652654A2E438312384DF6A43500796D19327B78F028F8818675591C043FF8471F36D3175D17F98B08075DBB9FB93CDE
Malicious:	false
Reputation:	low
Preview:	(function(e,t){typeof define=="function"&&define.amd&&define.amd.dust===!0?define(["dust.core"],t):typeof module=="object"?(module.exports=t(require("dustjs-linkedin")),module.exports.registerWith=t):t(e.dust)})(this,function(e){return e.helpers.iterate=function(t,n,r,i){function h(e,t){return e<t?1:e>t?-1:0}function p(e,r){return s(t,n.push({$key:e,$value:r,$type:typeof r}))}var s=r.block,o,u,a,f,l,c;i=i\|\|{};if(i.key){l=e.helpers.tap(i.key,t,n);if(s)if(!i.sort)for(f in l)l.hasOwnProperty(f)&&(t=p(f,l[f]));else{o=e.helpers.tap(i.sort,t,n),u=[];for(f in l)l.hasOwnProperty(f)&&u.push(f);c=n.global[o],!c&&o==="desc"&&(c=h),c?u.sort(c):u.sort();for(a=0;a<u.length;a++)t=p(u[a],l[u[a]])}}return t},e});

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25467)
Category:	dropped
Size (bytes):	25508
Entropy (8bit):	5.094451586944145
Encrypted:	false
SSDEEP:	384:HTP8X48LLyEoSsntg1YwDPc4PFNZdcF7a9OOpj6UkeUZrg+y/3Rjqz+jtkd6Pmzq:zP8Xymxke9R04uGmXmH
MD5:	6E28DEAE28590A7A63969BF00512782A
SHA1:	C12712D683FD15FDBBE373180CF0F7C7A5BCDB5E
SHA-256:	BE241A24CAFE282578F2C401F940531631D50F3D0432C43B7ADC76ECA67A8898
SHA-512:	340245FC821DB5227927161A946BFE834C5B9DB1C94DAD16DB81B2DB59C89ADFAC0648D15933A1A28F89010BC2C3D03D5B30899AAFC956E8A382088E92B756D5
Malicious:	false
Reputation:	low
Preview:	(function(r){var n=typeof self=="object"&&self.self===self&&self\|\|typeof global=="object"&&global.global===global&&global;if(typeof define==="function"&&define.amd){define(["underscore","jquery","exports"],function(t,e,i){n.Backbone=r(n,i,t,e)})}else if(typeof exports!=="undefined"){var t=require("underscore"),e;try{e=require("jquery")}catch(t){}r(n,exports,t,e)}else{n.Backbone=r(n,{},n._,n.jQuery\|\|n.Zepto\|\|n.ender\|\|n.$)}})(function(t,h,x,e){var i=t.Backbone;var a=Array.prototype.slice;h.VERSION="1.5.0";h.$=e;h.noConflict=function(){t.Backbone=i;return this};h.emulateHTTP=false;h.emulateJSON=false;var r=h.Events={};var o=/\s+/;var l;var u=function(t,e,i,r,n){var s=0,a;if(i&&typeof i==="object"){if(r!==void 0&&"context"in n&&n.context===void 0)n.context=r;for(a=x.keys(i);s<a.length;s++){e=u(t,e,a[s],i[a[s]],n)}}else if(i&&o.test(i)){for(a=i.split(o);s<a.length;s++){e=t(e,a[s],r,n)}}else{e=t(e,i,r,n)}return e};r.on=function(t,e,i){this._events=u(n,this._events\|\|{},t,e,{context:i,ctx:this

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	157659
Entropy (8bit):	5.346360923811718
Encrypted:	false
SSDEEP:	1536:T1v4ccRr6II4/tlrAGiUzG8tEubGKu/9eNzMZsmB015bRXA60KNrcnViPSHLqQzp:h41/t3LzG8KuruazMsmB0ad9tlJ
MD5:	C8A9A9FB63A37AF421FBB33BE32D26F3
SHA1:	1BE52B0D4207604E2FC8134327F65CB4F2C701CF
SHA-256:	5A0EA7E0EAD74C66F762B54BE56ABACF5A9E284935C07D67E4801BC833AB12CF
SHA-512:	DE8D355145DB5B7A8D9B30F969B00321A2435E3814F37103A2477DEC2DCEEFDDF0F5022794924A680A4D58986954F2F0334461CA37E1C054EDDCAC1E01A35573
Malicious:	false
Reputation:	low
Preview:	if(function(t){window.pako=t()}(function(){return function i(s,h,l){function o(e,t){if(!h[e]){if(!s[e]){var r="function"==typeof require&&require;if(!t&&r)return r(e,!0);if(_)return _(e,!0);throw(r=new Error("Cannot find module '"+e+"'")).code="MODULE_NOT_FOUND",r}r=h[e]={exports:{}},s[e][0].call(r.exports,function(t){return o(s[e][1][t]\|\|t)},r,r.exports,i,s,h,l)}return h[e].exports}for(var _="function"==typeof require&&require,t=0;t<l.length;t++)o(l[t]);return o}({1:[function(t,e,a){"use strict";var n="undefined"!=typeof Uint8Array&&"undefined"!=typeof Uint16Array&&"undefined"!=typeof Int32Array,r=(a.assign=function(t){for(var e,a,n=Array.prototype.slice.call(arguments,1);n.length;){var r=n.shift();if(r){if("object"!=typeof r)throw new TypeError(r+"must be non-object");for(var i in r)e=r,a=i,Object.prototype.hasOwnProperty.call(e,a)&&(t[i]=r[i])}}return t},a.shrinkBuf=function(t,e){return t.length===e?t:t.subarray?t.subarray(0,e):(t.length=e,t)},{arraySet:function(t,e,a,n,r){if(e.suba

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2483), with no line terminators
Category:	downloaded
Size (bytes):	2483
Entropy (8bit):	5.014711721076513
Encrypted:	false
SSDEEP:	48:DqHGbpgqYXnOPDi4Ta5eaIqKn61/lq3XAVG+wKgj:DqUJY3OGteTqJlcL9
MD5:	9546C4415837D6088EEA6ED5262F65AE
SHA1:	3D333C384894EDCAFBBBD9E26D22567E74743F43
SHA-256:	A9B59501FACDBA2D613578549A901AFA5F98BBA4D301B3B7C4AF53178E84D75C
SHA-512:	343538B1814EB8C012335490127DA1FFC8ADF8E2C58DA1F18DC3E7F23A396D861229F2381AF4D46E5AC0A0D320A8FE6D96883F5EA2F46085BADF4AF84F502BE4
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/js/core/nougat.js
Preview:	define("newgat",["jquery","underscore","dustjs-linkedin","dust-makara-helpers","dusthelpers-supplement","dustmotes-iterate","pulvus-provide","dustjs-helpers","_languagepack"],function(e,t,n,r){function u(e,t,n){if(Array.prototype.filter)return e.filter(t);var r=[],i=e.length-1,s=null;while(i>-1)s=e[i],t.call(n,s,i,e)&&r.unshift(s),i--;return r}function a(e,t,n){if(e instanceof Array&&Array.prototype.forEach)return e.forEach(t,n);var r=Object(e),i=null,s=null;for(i in r)if(r.hasOwnProperty(i)){s=t.call(n,r[i],i,r);if(s===!1)break}}function f(e,t){var n=null;for(n in e)e.hasOwnProperty(n)&&(t[n]=e[n]);return t}function l(e){return a(Array.prototype.slice.call(arguments,1),function(t){f(t,e)}),e}r.registerWith(n,{autoloadTemplateContent:!0,loader:function(e,t,n){var r=document.documentElement.getAttribute("locale").replace("_","-");require(["_languagepack"],function(e){n(null,e[r][t])})}});var i=null,s=null,o=null;return i=function(){},i.prototype={render:function(t,n){var r=new e.Deferre

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3808)
Category:	downloaded
Size (bytes):	3916
Entropy (8bit):	5.2749567971703994
Encrypted:	false
SSDEEP:	96:PMcABYAxCMaruyTOXPaJJccTMSeqdq9HVeGXlY:CDCM2RaSJJzASeIUHVS
MD5:	E0463BDE74EF42034671E53BCA8462E9
SHA1:	5EA0E2059A44236EE1E3B632EF001B22D17449F1
SHA-256:	A58147AEB14487FEF56E141EA0659AC604D61F5E682CFE95C05189BE17DF9F27
SHA-512:	1D01F65C6A00E27F60D3A7F642974CE7C2D9E4C1390B4F83C25C462D08D4AB3A0B397690169A81EACA08BEA3AEB55334C829AA77F0DBBAD8789ED247F0870057
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/modernizr-2.6.1.js
Preview:	/* Modernizr 2.6.1 (Custom Build) \| MIT & BSD. * Build: http://modernizr.com/download/#-shiv-cssclasses. */.;window.Modernizr=function(a,b,c){function u(a){j.cssText=a}function v(a,b){return u(prefixes.join(a+";")+(b\|\|""))}function w(a,b){return typeof a===b}function x(a,b){return!!~(""+a).indexOf(b)}function y(a,b,d){for(var e in a){var f=b[a[e]];if(f!==c)return d===!1?a[e]:w(f,"function")?f.bind(d\|\|b):f}return!1}var d="2.6.1",e={},f=!0,g=b.documentElement,h="modernizr",i=b.createElement(h),j=i.style,k,l={}.toString,m={},n={},o={},p=[],q=p.slice,r,s={}.hasOwnProperty,t;!w(s,"undefined")&&!w(s.call,"undefined")?t=function(a,b){return s.call(a,b)}:t=function(a,b){return b in a&&w(a.constructor.prototype[b],"undefined")},Function.prototype.bind\|\|(Function.prototype.bind=function(b){var c=this;if(typeof c!="function")throw new TypeError;var d=q.call(arguments,1),e=function(){if(this instanceof e){var a=function(){};a.prototype=c.prototype;var f=new a,g=c.apply(f,d.concat(q.call(arguments)

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	3175
Entropy (8bit):	5.113464294316265
Encrypted:	false
SSDEEP:	96:nbhJ7QEROj/XoucqKTXXwfcIPpIwx75TNFkbaVyQxI1lxBJw:bXTO/HcqmXj8IwJ5pFkbaYKIFrw
MD5:	2454DC0BF112B2541FBA37CFD2E4CBC5
SHA1:	E8E86957B77AA457C757B9D4231BD46F70176002
SHA-256:	18657DF333EEA496F8322AFC0903F5ABD740A53FDD71B0730F4070911CD704E9
SHA-512:	1AFB2B1C951B1304D00F39BC4E0027F95CD4D9CBF74346305E8604236212E299D5CC50E78128165EF1F46689377209BB645095BEA0C1D8A7378002254CCC27D9
Malicious:	false
Reputation:	low
Preview:	/*. Created by hdoan on 10/8/14.. */..define(['jquery', 'pageView', 'validation', 'errorDisplay'],...function ($, PageView, Validation, ErrorDisplay) {....'use strict';....var View = PageView.extend({.....el: '#captcha-standalone', // The dust template needs a section with id of 'captcha-standalone'.....//initialize form....initialize: function () {......ErrorDisplay.markError(this);......// Set back to hide on the popstate.....$(window).bind('popstate', function (event) {......if (!event.state) {.......$('.modal-overlay,.modal-animate').addClass('hide');......}.....});......// When the form is invalid, focus on the first input with an error.....Validation.on('invalidchallenge', function(form) {......ErrorDisplay.focusError(form);.....}, this);......// Adding handlers to validate form field.....Validation.init(this);......// Setting the page title.....$('title').html(this.$el.attr('data-title'));.....},.....events: {.....'click .captchaRefresh': 'refreshCaptcha',.....'click .captch

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1839
Entropy (8bit):	4.952637178893887
Encrypted:	false
SSDEEP:	48:gKZK68fKSLYBj17ekcLWyWpbwnGD9jH2RqFhmWe:i68fKSEBj17hcL1ewnGDZ2RqFAv
MD5:	E925A9183DDDF6BC1F3C6C21E4FC7F20
SHA1:	F4801E7F36BD3C94E0B3C405FDF5942A0563A91F
SHA-256:	F3A20B45053B0E79F75F12923FC4A7E836BC07F4ECFF2A2FA1F8ECDBA850E85A
SHA-512:	F10EB10B8065C10AE65950DE9EF5F36EC9DF25D764B289530FE2AD3AE97657BD5805E71FED99E58D81D34796A1002419343CCA85CA47EE7A71D6C15855AD9705
Malicious:	false
Reputation:	low
Preview:	/global define:true, console:true, jQuery:true, require:true /..define([ 'jquery', 'backbone'],...function ($, Backbone) {....'use strict';....var router;....router = Backbone.Router.extend({....routes: {.....'': 'showTheView',.....'stepup?queryString': 'showTheView',.....'rendercaptcha': 'showAuthCaptcha',.....'twofactorpath': 'showTheView',.....'resendotp': 'showTheView',.....'switchoption?*queryString': 'showTheView',.....'switchoption': 'showTheView',.....'softtoken': 'showTheView'....},.....hasPushState: window.history && 'pushState' in window.history,.....// this.viewName is only set when app.js is executed. It is never set again, unless app.js is....// requested again like when a page is rendered server-side.....showTheView: function () {.....this.showView(this.viewName);....},.....showAuthCaptcha: function() {.....this.showView('authcaptcha');....},.....showView: function (name) {.....var viewName = name,......asyncAssets = [ "view/" + viewName ];......require(asyncAssets,

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1931), with no line terminators
Category:	dropped
Size (bytes):	1931
Entropy (8bit):	5.86879365970491
Encrypted:	false
SSDEEP:	48:iEAhbKo75XI2ovtUjPKtXsDXx/gE1sc/LrwUnG:pAcMI5czjs2suG
MD5:	54AFF6E92DCA1D8575B8425A8993E3F1
SHA1:	7D9AAC64ED3E0E30077E56F147F106289C24A317
SHA-256:	C6EA4E29A6CDF64FAB7C4494B8EDA8E90C6BFD4C03D84DA4210AFCBF0D460655
SHA-512:	FC5CE67E066891A9D31FCB6C9B92BA9D711A7CC248A3CFABA3C469D9691CC43773C688553E0C1E3986F7BB6BE75FC239BE498777FF5F93DD14C4104F37AF9F3A
Malicious:	false
Reputation:	low
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var E='enterprise',a=w[N]=w[N]\|\|{},gr=a[E]=a[E]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.recaptcha.net/recaptcha/enterprise/';(cfg['enterprise']=cfg['enterprise']\|\|[]).push(true);(cfg['enterprise2fa']=cfg['enterprise2fa']\|\|[]).push(true);(cfg['render']=cfg['render']\|\|[]).push('6LdCCOUUAAAAAHTE-Snr6hi4HJGtJk_d1_ce-gWB');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A7uxtj3+hJmOcZFooFT0Ps276PuOqGnM1jfoPbFvxWp73VC60LnYGzayHVvcFeEiF0qrwy7fQAL+gGVXU+f9IQcAAACTeyJvcmlnaW4iOiJodHRwczovL3JlY2FwdGNoYS5uZXQ6NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3037)
Category:	dropped
Size (bytes):	582313
Entropy (8bit):	4.346547395512375
Encrypted:	false
SSDEEP:	1536:h0nEz7D7uNrU0UJUbJfaqk7n/bhOG1GmYKz5diPmxBWLA0hhTZoXw/cte/q5XzFw:hffSwuCvL/FYmviPmJA/6tFynZ
MD5:	BC6F4A89EA274CA210F761F33311A8D8
SHA1:	F82ACF5C72C1BD4CF3A775F24D05D09578CC075B
SHA-256:	D69E1263E3C76366DA84F3E93739C8C222260B7E13BE930C1D479C841CDA5E13
SHA-512:	43AF51ECCA3BF5649DB50FBE2E53758F781696807D2CC25A5B282CB24239B28BB34D5D50CF32B298C495A91F865DA540FF666A0EED8A14A25B952A598A0794A9
Malicious:	false
Reputation:	low
Preview:	/! 2024 dl-pp-latm@paypal.com ver(1.1.0) /./. mktconf.js v1.1.0 - 11-18-2024.* Copyright (c) 2024 dl-pp-latm@paypal.com.*/.(function () {. 'use strict';.. (function () {.. function _iterableToArrayLimit(arr, i) {. var _i = null == arr ? null : 'undefined' != typeof Symbol && arr[Symbol.iterator] \|\| arr['@@iterator'];. if (null != _i) {. var _s,. _e,. _x,. _r,. _arr = [],. _n = !0,. _d = !1;. try {. if (_x = (_i = _i.call(arr)).next, 0 === i) {. if (Object(_i) !== _i) return;. _n = !1;. } else for (; !(_n = (_s = _x.call(_i)).done) && (_arr.push(_s.value), _arr.length !== i); _n = !0);. } catch (err) {. _d = !0, _e = err;. } finally {. try {. if (!_n && null != _i["return"] && (_r = _i["return"](), Object(_r) !== _r)) return;. } finally {. if (_d) throw

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7845), with no line terminators
Category:	dropped
Size (bytes):	7845
Entropy (8bit):	5.533132852324268
Encrypted:	false
SSDEEP:	192:uRdzEfNmNutaU+ldy9G++QfXh3D6NhRS3Euq:uDAlm4+ldyAQ29uEz
MD5:	89DDFD249765BDEB5D374267E7DAC475
SHA1:	2DB490F040C27D1EAB5FCBA86E939D6837ACCFD6
SHA-256:	53A9FD4A377A5C66BDCA2C2DAD33EBB8E7387B1F314F42849FD7A1733BF77B6F
SHA-512:	2A39E696B5EBFF972758F6CC17D87187405D04F29A5A34AB1FED806B51301BF67FA40F80631BEAAF53C32BC523EBA3D26F7FC425316F5D1498DCFA30A60DA17E
Malicious:	false
Reputation:	low
Preview:	(function(e,t){typeof define=="function"&&define.amd&&define.amd.dust===!0?define(["dust.core"],t):typeof exports=="object"?module.exports=t(require("dustjs-linkedin")):t(e.dust)})(this,function extend(dust){function tokenize(t){"use strict";var n={"((":1,"))":1,"!!":1,"<!":1,">!":1,">=!":1,"<=!":1,"==!":1,"!=!":1,"&&!":1,"\|\|!":1,"]&&":1,"]\|\|":1,"]>":1,"]<":1,"]<=":1,"]>=":1,"]==":1,"]!=":1,"].":1,"[(":1,"])":1,")&&":1,")\|\|":1,")>":1,")<":1,")<=":1,")>=":1,")==":1,")!=":1,")!":1,")]":1,"]]":1,"&&(":1,"\|\|(":1,">'":1,"<(":1,"<=(":1,">=(":1,"==(":1,"!=(":1,"!(":1},r=[],i=0,s,o,u,a,f,l,c,h,p;if(tokCache[t])return tokCache[t];while(i<t.length){u=i,a=t[i],o=t.charCodeAt(i);if(o===SPACE\|\|o===TAB)i++;else if(o===QUOTE\|\|o===APOS){f=STR,s=a,i++;while(i<t.length){t.charCodeAt(i)===BACKSLASH&&i++,s+=t[i];if(t.charCodeAt(i)===o)break;i++}s.charCodeAt(s.length-1)!==o&&(f=ERR,s='"Unclosed string constant"'),pushToken(r,f,s.slice(1,s.length-1)),i++}else if(o>=ZERO&&o<=NINE\|\|o===MINUS\|\|o===DOT&&t.charC

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	4315
Entropy (8bit):	5.129546814483834
Encrypted:	false
SSDEEP:	96:jdrlOMQpaKDBiagJAWear9oaadIcDhWSbVn07cfMerbsCC5hftc/U51dK0i4uVGA:jdrlOzBiasAWEaKzDASbVn07uMerbsCL
MD5:	1121A6FAB74DA10B2857594A093EF35C
SHA1:	7DCD1500AD9352769A838E9F8214F5D6F886ACE2
SHA-256:	78EB4ED77419E21A7087B6DFCC34C98F4E57C00274EE93E03934A69518AD917A
SHA-512:	B9EB2CEF0EADD85E61A96440497462C173314E6B076636AD925AF0031541019E30C5AF4C89D4EAFA1C2676416BFECEC56972875155020E457F06568BCA50B587
Malicious:	false
Reputation:	low
Preview:	/. This file contains the javascript functions and snippets. * that are used to introduce the site feedback link in the footer.. * Function O_GoT inserts the link in the footer list and assigns onclick. * for popup window that displays the feedback from from opinionlab site.. /..define([], function () {...'use strict';..window.PAYPAL = window.PAYPAL ? window.PAYPAL : {};..var opVars = window.PAYPAL.opinionLabVars;...var _doc = document,..._w . = window,..._tm = (new Date()).getTime(),..._sH = screen.height,..._sW = screen.width;.../.. This method forms the siteFeedback image tag to be written into the DOM.. * Note: While calling this method, please make sure to check if sitefbIcon is enabled. This is decided by boolean the property 'showSitefbIcon'... * @returns sfimg.. */..function siteFeedBackImage () {...var sfImg = document.createElement('img');...sfImg.setAttribute('src', opVars.sitefb_plus_icon);...sfImg.setAttribute('alt', '');...return sfImg;..}...function popUp (opi

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	3133
Entropy (8bit):	5.139941225383131
Encrypted:	false
SSDEEP:	96:6jdrlNAcMAxvrhq2Pi0Bi8TiGMR0beb8Zp0rrQhrU90LSKjEmOOT8jc1dTZrhq22:OdrlTMAxvrhq2PZB+0SwZp0rh6LMc1pw
MD5:	BE3248D30C62F281EB6885A57D98A526
SHA1:	9F45C328C50C26D68341D33B16C7FE7A04FA7F26
SHA-256:	EE8D7EA50B87CF8151107330FF3F0FC610B96A77E7A1A0ED8FCE87CF51610F54
SHA-512:	413022A49030FF1F6BDF673C3496EFBBEC41F7C7B8591E46B4D7F580378D073E6435227485EA833EF02CCDFCA301F40EBD05C60CFFE9FB61C020BFA352D30D1D
Malicious:	false
Reputation:	low
Preview:	define(['opinionLab', 'onlineOpinionPopup'], function(opinionLab, popup) {...'use strict';..window.PAYPAL = window.PAYPAL ? window.PAYPAL : {};..var opVars = window.PAYPAL.opinionLabVars;.../* Defines the referral URL - Verify */..function paypalURL (pagename) {...var paypalURL = 'https://'.......+ opVars.countryCode.......+ '.paypal.com/'.......+ opVars.languageCode.......+ '/00/'.......+ escape(pagename.replace(/\s\|\//g, '_')).......+ '.page';...return paypalURL;..};...function assignSiteCatalystVars() {...if ( typeof opVars.isSiteRedirect !== 'undefined' && typeof opVars.isPaymentFlow !== 'undefined') {....if ( typeof s !== 'undefined') {.....if ( typeof s.pageName !== 'undefined') {......opVars.siteCatalystPageName = s.pageName;.....}.....if ( typeof s.prop7 !== 'undefined') {......opVars.siteCatalystC7 = s.prop7 == "none" ? "Unknown" : s.prop7;.....}.....if ( typeof s.prop5 !== 'undefined') {......opVars.siteCatalystAccountNumber = s.prop5;.....}....}....opinionLab.custom_var = up

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (39933)
Category:	downloaded
Size (bytes):	359449
Entropy (8bit):	5.522757235406326
Encrypted:	false
SSDEEP:	6144:yw2/sD7n26XNaS7OflrgBE+MaPP60c8WxQ:MYaSI+
MD5:	295D743DB8526AF7D203302357314A45
SHA1:	269D54917DC6661679DEE08DF9DAAEB2D738C19C
SHA-256:	4E7759C388A65530D1F5B76553D6FBC220650A34676703687114B3B5F4542835
SHA-512:	98E3170398FAFC406185ADD0F3F9B00D43A8CF4932EE5405F09D7536E6DE636523F2B554F81226C0FB346F64B434886129391BBA3AF458FCC4D4BC20006005ED
Malicious:	false
Reputation:	low
URL:	https://newassets.hcaptcha.paypal.com/captcha/v1/d136a52/static/hcaptcha.html
Preview:	<!DOCTYPE html>.<html lang="en" data-id="hcaptcha-frame-d136a52">.<head>. <title>hCaptcha</title>. <meta charset="utf-8">. <meta http-equiv="X-UA-Compatible" content="IE=edge">. <meta http-equiv="Content-Security-Policy" content="object-src 'none'; base-uri 'self'; worker-src blob:; script-src 'self' 'unsafe-eval' 'sha256-Tm5zQMorLXCDQ6jtiJY0QC/9bAUB7fvvvP6WWkohN+s=';">. <style type="text/css">*{-webkit-tap-highlight-color:transparent;-webkit-font-smoothing:antialiased}body,html{margin:0;padding:0;font-family:-apple-system,system-ui,BlinkMacSystemFont,"Segoe UI",Roboto,Oxygen,Ubuntu,"Helvetica Neue",Arial,sans-serif;overflow:hidden;height:100%;width:100%;background-color:rgba(255,255,255,0);background-color:transparent}fieldset{margin:0;padding:15px 20px;border:none}button:focus,input:focus,select:focus,textarea:focus{outline:0}:focus{border:none;outline:0}textarea{border:none;overflow:auto;outline:0;-webkit-box-shadow:none;-moz-box-shadow:none;box-shadow:none;resize:non

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	3564
Entropy (8bit):	4.920420499731642
Encrypted:	false
SSDEEP:	48:gm8sIY/0E8/jFKNGdBr9wFafSzqKo1NX+JiYCHVnb7RzmM6EWclslaEWu+xMRfU6:xpIY98zN9CXzmsPyxbZ2EWaErdNF
MD5:	12E5657A61A6A578E4122B6B5B79348F
SHA1:	2F1DDE1B74A554CBDBF6764C8E84D645EDFA5862
SHA-256:	A3C9F1EE51287C4CEC2F44AE30887B767E0D7B024CE49F5FB7C8C26A337D7E3F
SHA-512:	22D4077F3F27C4F147BA750B4D5859ED36F676FC5B8E54516869C1FE94AECB8C2F1D5933F6993E5F46A838D5D6A66129E191DD03D8219C32E8121DD13509D9C6
Malicious:	false
Reputation:	low
Preview:	/global define:true, s:true /..define(["jquery", "backbone", "BaseView"],...function ($, Backbone, BaseView) {...."use strict";....var PageView = BaseView.extend({.....model: null, // Backbone model.....trackingPrefix: 'main:auth-challenge:::',.....request: function(options) {......return $.ajax({......dataType: "json",......url: options.url,......data: options.params,......type: options.method,......headers: {......."X-CSRF-Token": this.model.get("token") \|\| $(document.body).data("token")......},......timeout: 15000,.......success: function(response) {.......return options.success.apply(null, arguments);......},.......error: function(xhr, textStatus, errorThrown) {.......options.error.apply(null, arguments);......}.....});....},...../*.... Set the footer correctly..... * It should be position: fixed when window is tall enough..... * It should be position: static when window isn't tall enough.... */....setFooterPlacement: function() {.....var totalContentHeight,......windowHeight

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6564)
Category:	downloaded
Size (bytes):	6565
Entropy (8bit):	5.382243764098105
Encrypted:	false
SSDEEP:	96:0vpl2sfWl0basxnWDEIY3gaBHzu0JtVGTHlsqsPlpDklR0klffXYjyEoHBp:k+euW/WDi3RzrSshmR0I3XUuHT
MD5:	5C0B394C3F25CFE7F093C013D9396AD5
SHA1:	6B11C3119C2AF3EB4A979589D765ED70408DC6CD
SHA-256:	CAE0AF2E9035626EBCC82AEDFFE6939E8DE145879607CC94C5F1EA379F94A12B
SHA-512:	9A52E6875C4FA651AE0888B44A2A9ABF93110E3E524F1EEDBEB83FFC1000210EE5F904C5E1CA0E9A82EC642BAE7B90DA9C6020C2CB01D1DEB1E72464BB5A4BAD
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/rdaAssets/fraudnet/sync/fn-sync-telemetry-min.js
Preview:	var PAYPAL=window.PAYPAL\|\|{};!function(){"use strict";var t=function(t){var e=function(t,e,n){n[0]=(255&(0\|t[e]))<<24\|(255&(0\|t[e+1]))<<16\|(255&(0\|t[e+2]))<<8\|255&(0\|t[e+3])\|0,n[1]=(255&(0\|t[e+4]))<<24\|(255&(0\|t[e+5]))<<16\|(255&(0\|t[e+6]))<<8\|255&(0\|t[e+7])\|0},n=function(t,e){for(var n=32,r=0;n-- >0;)t[0]+=(t[1]<<4^t[1]>>5)+t[1]^r+e[3&r],r+=-1640531527,t[1]+=(t[0]<<4^t[0]>>5)+t[0]^r+e[r>>11&3]},r=function(t){for(var e=0,n=0;n<4;n++)e\|=t.charCodeAt(n)<<8n;return isNaN(e)?0:e},i=function(t,i){var o=new Array(2),a=new Array(8),s=new Array(4),u=0,c=0,d=t.split("").map((function(t){return t.charCodeAt(0)}));for(c=0;c<4;c++)s[c]=r(i.slice(4c,4*(c+1)));for(c=0;c<d.length;c+=8)e(d,c,o),n(o,s),a[u]=o[0],a[u+1]=o[1],u+=2;return a};var o={sh:function(t){for(var e=0,n=0;n<t.length;n++)e+=t.charCodeAt(n);return e&=e},addEventListener:function(t,e,n){void 0!==t.addEventListener?t.addEventListener(e,n,!1):void 0!==t.attachEvent&&t.attachEvent("on"+e,n)},removeEventListener:function(t,e,n){void 0!==

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1228), with no line terminators
Category:	dropped
Size (bytes):	1228
Entropy (8bit):	4.991836041220244
Encrypted:	false
SSDEEP:	24:1UbSjYz0brlna3W8RsdwYU/ImxIlFlbkPIaPBWfIX9SmV5HDUmu+K/L:1ASjk0vkW7+x/pgFh+UfY5WmteL
MD5:	35558E9FA07B2F8F7F6F1A4F6124A0B4
SHA1:	695C51C3667E8DD8FFC9CB202E6399EE5F39C9BB
SHA-256:	B9D410B959D2E1509801C43780835655A35BA6F33D3E471C6B172B31E6E7D916
SHA-512:	82B8A6F5601D9C55CABFB407628E7A247637E76EC6209056C898D086A9043546225F898CF8DB62ED86A2BD33CEDDFE88800A9F4AA66EE72DCC409D041FF4A4D9
Malicious:	false
Reputation:	low
Preview:	define(["newgat","jquery","backbone"],function(e,t,n){"use strict";var r=["injectIframeTest"],i,s,o,u;return i=n.Router.extend({routes:{"":"showLanding","?queryString":"showLanding","inject/queryString":"showLanding",authorize:"showLanding","authorize?queryString":"showLanding",consent:"showLanding","consent?queryString":"showLanding","consent-cancel":"showLanding","activate-one-touch":"showLanding","activate-one-touch?*queryString":"showLanding","remember-me":"showLanding",econsent:"showLanding",genericError:"showGenericError","remember-me-interstitial":"showLanding"},hasPushState:window.history&&"pushState"in window.history,showLanding:function(){this.showView(this.viewName)},showGenericError:function(){this.showView("genericError")},showView:function(e){var i=e\|\|n.history.fragment\|\|"login",s=["view/"+i];if(t.inArray(i,r)>-1)return;require(s,function(e){typeof e=="function"&&(e=new e({parent:o}))})},start:function(){n.history.start({pushState:this.hasPushState,root:window.locatio

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23125), with no line terminators
Category:	downloaded
Size (bytes):	23125
Entropy (8bit):	5.2464842228013895
Encrypted:	false
SSDEEP:	384:v0Ap5n5P9Nxf4hfWGwR+EkE+n4QnZ/X2NWKW4BCCMHxDkZbaXpweyGobcUWfgMcC:J5n51f4hfWGwR+Tnn4QnZ/b3J7yGQMUE
MD5:	243EDA4543153156C0AE9DF9E8C5833D
SHA1:	DFA372F408889FA3F4A6CA29847F4A379ED246A8
SHA-256:	D81BFEFD8585B694222D3E94E9DEE5D7935049C65355F9FD096800301D51545B
SHA-512:	BC2E170A94BB45624ED4392B2049FA017411C244DC765B5E862093E2264EC9580752A29A86E6739E2ECBA2F16B6880FDBF9AB1ECB6647E739B391B46A5BF9AA9
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/webcaptcha/ngrlCaptcha.min.js
Preview:	!function(e){var t={};function n(r){if(t[r])return t[r].exports;var a=t[r]={i:r,l:!1,exports:{}};return e[r].call(a.exports,a,a.exports,n),a.l=!0,a.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var a in e)n.d(r,a,function(t){return e[t]}.bind(null,a));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s=6)}([function(e,t,n){var r=n(1);e.exports.find=function(e,t){if(Array.isArray(e)\|\|void 0!==e.

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19626)
Category:	dropped
Size (bytes):	19807
Entropy (8bit):	5.222852482936355
Encrypted:	false
SSDEEP:	384:X6mbfNn/COzhRiHbmHKQYVOf/OwJXxshUkk6UXSMxag8ZoCdkw5lPxzavwpfCQ:xbJKOUVVq/dJXxqkF9+bGopqQ
MD5:	FD4D2AC5869B6E52C5205D0D336CF69F
SHA1:	F27BC91E0B46135489CD808261327FF4F92C61D8
SHA-256:	C50F9519695E63EB34CB4740B88BD90FFA7F308094C56208EB1E80D6670DBB3E
SHA-512:	6852405A913D2AB86B670CE01EA9A71311B812068AA4C52C8DFC4C95BDF98E28E639D189A1187C6A074B2B96AA4F341193173857C26BC8BC6A0D78FD639082D2
Malicious:	false
Reputation:	low
Preview:	// (c) 2009-2022 Jeremy Ashkenas, Julian Gonggrijp, and DocumentCloud and Investigative Reporters & Editors..// Underscore may be freely distributed under the MIT license...(function(e,t){typeof exports=="object"&&typeof module!="undefined"?module.exports=t():typeof define=="function"&&define.amd?define("underscore",t):(e=typeof globalThis!="undefined"?globalThis:e\|\|self,function(){var n=e._,r=e._=t();r.noConflict=function(){return e._=n,r}}())})(this,function(){function w(e,t){return t=t==null?e.length-1:+t,function(){var n=Math.max(arguments.length-t,0),r=Array(n),i=0;for(;i<n;i++)r[i]=arguments[i+t];switch(t){case 0:return e.call(this,r);case 1:return e.call(this,arguments[0],r);case 2:return e.call(this,arguments[0],arguments[1],r)}var s=Array(t+1);for(i=0;i<t;i++)s[i]=arguments[i];return s[t]=r,e.apply(this,s)}}function E(e){var t=typeof e;return t==="function"\|\|t==="object"&&!!e}function S(e){return e===null}function x(e){return e===void 0}function T(e){return e===!0\|\|e==

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (41625)
Category:	dropped
Size (bytes):	150639
Entropy (8bit):	5.404664746247825
Encrypted:	false
SSDEEP:	3072:AwlL47MnAPaiA2UudRCe/fX2MkdF5kpjm+L1ZVplqpU:AwlgMgaiA2UuZ/P2MkdF5EL1/plqpU
MD5:	BB579CBAE7BBAE27E2B6C01C48B7F652
SHA1:	9B525B6C77E1950125CFBC15495CA40E5CC98E8F
SHA-256:	38DCECF657BAB9314235BBF0D4C03EA0CC50FF215F59D8DC0310D36B64C5CC78
SHA-512:	6ECF11D4C0DCAC9AB5DED896464D2AEB3DF6739C4771F9D8C29466509763B3CD3DEA2FA35F5BB9AC4528DD853848A33B82A72891E6A562493BF77474AEF9B643
Malicious:	false
Reputation:	low
Preview:	/* https://hcaptcha.com/license */.!function(){"use strict";function e(e){var t=this.constructor;return this.then((function(n){return t.resolve(e()).then((function(){return n}))}),(function(n){return t.resolve(e()).then((function(){return t.reject(n)}))}))}function t(e){return new this((function(t,n){if(!e\|\|"undefined"==typeof e.length)return n(new TypeError(typeof e+" "+e+" is not iterable(cannot read property Symbol(Symbol.iterator))"));var r=Array.prototype.slice.call(e);if(0===r.length)return t([]);var i=r.length;function o(e,n){if(n&&("object"==typeof n\|\|"function"==typeof n)){var a=n.then;if("function"==typeof a)return void a.call(n,(function(t){o(e,t)}),(function(n){r[e]={status:"rejected",reason:n},0==--i&&t(r)}))}r[e]={status:"fulfilled",value:n},0==--i&&t(r)}for(var a=0;a<r.length;a++)o(a,r[a])}))}var n=setTimeout,r="undefined"!=typeof setImmediate?setImmediate:null;function i(e){return Boolean(e&&"undefined"!=typeof e.length)}function o(){}function a(e){if(!(this instanceof

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	157659
Entropy (8bit):	5.346360923811718
Encrypted:	false
SSDEEP:	1536:T1v4ccRr6II4/tlrAGiUzG8tEubGKu/9eNzMZsmB015bRXA60KNrcnViPSHLqQzp:h41/t3LzG8KuruazMsmB0ad9tlJ
MD5:	C8A9A9FB63A37AF421FBB33BE32D26F3
SHA1:	1BE52B0D4207604E2FC8134327F65CB4F2C701CF
SHA-256:	5A0EA7E0EAD74C66F762B54BE56ABACF5A9E284935C07D67E4801BC833AB12CF
SHA-512:	DE8D355145DB5B7A8D9B30F969B00321A2435E3814F37103A2477DEC2DCEEFDDF0F5022794924A680A4D58986954F2F0334461CA37E1C054EDDCAC1E01A35573
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/pa/3pjs/tl/6.4.65/patleaf.js
Preview:	if(function(t){window.pako=t()}(function(){return function i(s,h,l){function o(e,t){if(!h[e]){if(!s[e]){var r="function"==typeof require&&require;if(!t&&r)return r(e,!0);if(_)return _(e,!0);throw(r=new Error("Cannot find module '"+e+"'")).code="MODULE_NOT_FOUND",r}r=h[e]={exports:{}},s[e][0].call(r.exports,function(t){return o(s[e][1][t]\|\|t)},r,r.exports,i,s,h,l)}return h[e].exports}for(var _="function"==typeof require&&require,t=0;t<l.length;t++)o(l[t]);return o}({1:[function(t,e,a){"use strict";var n="undefined"!=typeof Uint8Array&&"undefined"!=typeof Uint16Array&&"undefined"!=typeof Int32Array,r=(a.assign=function(t){for(var e,a,n=Array.prototype.slice.call(arguments,1);n.length;){var r=n.shift();if(r){if("object"!=typeof r)throw new TypeError(r+"must be non-object");for(var i in r)e=r,a=i,Object.prototype.hasOwnProperty.call(e,a)&&(t[i]=r[i])}}return t},a.shrinkBuf=function(t,e){return t.length===e?t:t.subarray?t.subarray(0,e):(t.length=e,t)},{arraySet:function(t,e,a,n,r){if(e.suba

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 74, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1996
Entropy (8bit):	7.879723323624132
Encrypted:	false
SSDEEP:	48:jFE8mmKQOc1+qfQLUGQ4KZ1X+QTaj1ZiVef5mdQG6wtDbt:Z/2QOc1+a4q15CTqef5mdn6wtDbt
MD5:	826F1C66EDC8D0B4A70F783874430DB5
SHA1:	56B5E2629A384E8AD5FE2FD1D3BBBD9B516B4B0A
SHA-256:	1C9DD1B0663BA2324632F0FFEBB21112A92F039305241661C289C88AF523CB1A
SHA-512:	87446A91F1CF5840230B55D3D0238B17686BC36334059D4F83BEEC90F7146365C395CACE9A3DD866926E095D6AE31CB2D6EDF9FDE586BDAB3E3C3EE38D33ABCF
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/images/shared/momgram@2x.png
Preview:	.PNG........IHDR...<...J......7.....sRGB.........IDATx..[kl.E.....]......Z.......(bE@............%..o..G..&.E...Db......4..Zm...Gk.\-m.z..g.^...s...%............n...T..v7G.F.4........W....z.L...5....3+....P.\..!...\...(.q....rN....t...pZe....M.>....Z.......D..].:...#...mq.(.....[...AU...~......<.G.h..l....^..D..x.i......V.S..`..B.E...;..V0..f'...f.A0i.Y.....[..p...?..9.^.G........uV.\|U. X.&.[q....TZ9.[.}u7/.{b../[.t./0..1_..BA.Kf.,./..[G..6f..6.<`V......4..;.......Z.~..{...K.8Z..To..<....xZ.F.....y....-.#...E..V........=...`.....n#....H....f..{..$..}:n..T0.....yJq8.x.......T0............J..HEg......6..H......}..b2G...x......j..M.........s%.....3I.f.i.C~.(..RI.4q..,....C...u...\}....f.njCI.eO...p$G....U.../.B.;..[....3.9t.(-..%....g(.c.1..z.Q.H..l.`..P0.Tm..a.\......)....F...,).4..Y.k<...\R.........t....\| z!.@..".t.-.G.t\.......S....Lr,h.......PB...L.%\........y....+\|f.Z....B_NC.....T..`.u.q..l..............NB...&.f..a_tc3.

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (4455), with no line terminators
Category:	downloaded
Size (bytes):	4459
Entropy (8bit):	5.065317516797803
Encrypted:	false
SSDEEP:	96:kc/0LOMPkB9lNkSL5QQncujCxbXABHR8Yxbl4OStqAI:Z/4OM8B9lSSFQQnFexbmZxlqpI
MD5:	95C3DE706B3F56B72C4727B7F1D1BF1B
SHA1:	1395944FBDF8201644DABFAC6CE244710724A06E
SHA-256:	093D776B5560002F1A43CEC835C3C6E76411138A2E8434CB5621C4B221110FC0
SHA-512:	77491352C21DD5C2A8E9B896011AEE4133352B645C8DC9F7CFDA5DEE8D18071BF5CE1D844135E6CCA4BC518FE1D272893AA27BE4402155887C985AEF4329E3F4
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/js/browser_modules/dust-makara-helpers/browser.amd.js
Preview:	define([],function(){return function(e){function n(r){if(t[r])return t[r].exports;var i=t[r]={exports:{},id:r,loaded:!1};return e[r].call(i.exports,i,i.exports,n),i.loaded=!0,i.exports}var t={};return n.m=e,n.c=t,n.p="",n(0)}([function(e,t,n){"use strict";var r=n(1);e.exports=function(e,t){t=t\|\|{},r(e,function(){},t,t.loader)},e.exports.registerWith=e.exports},function(e,t,n){"use strict";function o(e,t,n){var r=e.shiftBlocks,i=e.push;e.shiftBlocks=function(e){return r.call(this,a(e,function(e){return u(e,t,n)}))},e.push=function(){var e=i.apply(this,arguments);return o(e,t,n),e}}function u(e,t,n){return function(r,i){return i=i.push({intl:{messages:t,bundle:n}}),e(r,i)}}function a(e,t){var n={};return Object.keys(e).forEach(function(r){n[r]=t(e[r])}),n}function f(e,t,n){function i(t){if(!t)return null;if(typeof t=="function"&&t.template)return t.template;if(e.isTemplateFn(t))return t}var r=e.onLoad;if(!r)throw new Error("dust.onLoad must be configured to use automatic content loading"

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (39693)
Category:	downloaded
Size (bytes):	39820
Entropy (8bit):	5.232045417014232
Encrypted:	false
SSDEEP:	384:Cv3W0sOjNrHqSXYJ6y5ryBNZ3xBpxzzGSeUUUCSeUUUNUUUUiUUUULUKU0SvGUaT:sW0dxkxMDlrzzkn8wDPMruBb
MD5:	896EEAFD3E90844A3233C95E77C81097
SHA1:	4027BEFB3750417C1CD255F85A1D935B68E742A3
SHA-256:	10BB0A4C3E22BDB9E174F2E7EC6FA149FE8F016903BAEDA72F9B36A8CA8DC0DA
SHA-512:	8C465A446C405D272FD90E3BBCB847ED0ABC3617E98BB158241ED67E065604AC39D3A1D347A0F24F7B4F987147EC5139C482A3137CFE00D168ACF4E8EE0BD371
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/js/browser_modules/dustjs-linkedin/dist/dust-full.js
Preview:	/! dustjs-linkedin - v3.0.0. http://dustjs.com/.* Copyright (c) 2021 Aleksander Williams; Released under the MIT License */..(function(e,t){typeof define=="function"&&define.amd&&define.amd.dust===!0?define("dust.core",[],t):typeof exports=="object"?module.exports=t():e.dust=t()})(this,function(){function getTemplate(e,t){if(!e)return;if(typeof e=="function"&&e.template)return e.template;if(dust.isTemplateFn(e))return e;if(t!==!1)return dust.cache[e]}function load(e,t,n){if(!e)return t.setError(new Error("No template or template name provided to render"));var r=getTemplate(e,dust.config.cache);return r?r(t,Context.wrap(n,r.templateName)):dust.onLoad?t.map(function(t){function i(e,i){var s;if(e)return t.setError(e);s=getTemplate(i,!1)\|\|getTemplate(r,dust.config.cache);if(!s){if(!dust.compile)return t.setError(new Error("Dust compiler not available"));s=dust.loadSource(dust.compile(i,r))}s(t,Context.wrap(n,s.templateName)).end()}var r=e;dust.onLoad.length===3?dust.onLoad(r,n.options,i)

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2341), with no line terminators
Category:	dropped
Size (bytes):	2341
Entropy (8bit):	5.08135258633511
Encrypted:	false
SSDEEP:	48:oNzDz0BW4FEM3QVOaxWSwaVWx01XP196HLMCiEuEGB2J9XY:oRDzMW4bKOyTwag0JPH6r/TuTs9I
MD5:	FD614191217CAA07489553ECE0A11197
SHA1:	8ECD6CA240C4D95856A24E93B0C13B6265BF3A6E
SHA-256:	4E8EB79476417AE63A24B8B00B1DB0CCD012582A8936137808C592A524C1C68F
SHA-512:	F9162CD8BE5E69372901EA7A37430D2B418E188399AEF0012F679C7866DEE920EDDB0AFE8D47513B057765E6C725A97D193AE3874ED5E27DF883134A659EE896
Malicious:	false
Reputation:	low
Preview:	requirejs.config({packages:[{name:"dust-makara-helpers",version:"4.2.0",location:"browser_modules/dust-makara-helpers",main:"browser.amd.js"},{name:"dusthelpers-supplement",version:"2.0.1",location:"browser_modules/dusthelpers-supplement",main:"index.js"},{name:"dustjs-helpers",version:"1.6.3",location:"browser_modules/dustjs-helpers",main:"dist/dust-helpers.js"},{name:"dustjs-linkedin",version:"3.0.1",location:"browser_modules/dustjs-linkedin",main:"dist/dust-full.js"},{name:"pulvus-provide",version:"1.0.3",location:"browser_modules/pulvus-provide",main:"provide.js"},{name:"requirejs",version:"2.3.6",location:"browser_modules/requirejs",main:"require.js"}],paths:{_languagepack:document.documentElement.getAttribute("data-langpack"),jquery:"lib/jquery-3.7.0",jqueryUI:"lib/jquery-ui.min",json:typeof JSON=="undefined"?"lib/json2":"empty:",underscore:"lib/underscore-1.13.6",backbone:"lib/backbone-0.9.2",backboneSubroute:"lib/backbone-subroute-0.3.2",BaseView:"core/baseView","dustmotes-iter

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3564
Entropy (8bit):	4.920420499731642
Encrypted:	false
SSDEEP:	48:gm8sIY/0E8/jFKNGdBr9wFafSzqKo1NX+JiYCHVnb7RzmM6EWclslaEWu+xMRfU6:xpIY98zN9CXzmsPyxbZ2EWaErdNF
MD5:	12E5657A61A6A578E4122B6B5B79348F
SHA1:	2F1DDE1B74A554CBDBF6764C8E84D645EDFA5862
SHA-256:	A3C9F1EE51287C4CEC2F44AE30887B767E0D7B024CE49F5FB7C8C26A337D7E3F
SHA-512:	22D4077F3F27C4F147BA750B4D5859ED36F676FC5B8E54516869C1FE94AECB8C2F1D5933F6993E5F46A838D5D6A66129E191DD03D8219C32E8121DD13509D9C6
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/view/pageView.js
Preview:	/global define:true, s:true /..define(["jquery", "backbone", "BaseView"],...function ($, Backbone, BaseView) {...."use strict";....var PageView = BaseView.extend({.....model: null, // Backbone model.....trackingPrefix: 'main:auth-challenge:::',.....request: function(options) {......return $.ajax({......dataType: "json",......url: options.url,......data: options.params,......type: options.method,......headers: {......."X-CSRF-Token": this.model.get("token") \|\| $(document.body).data("token")......},......timeout: 15000,.......success: function(response) {.......return options.success.apply(null, arguments);......},.......error: function(xhr, textStatus, errorThrown) {.......options.error.apply(null, arguments);......}.....});....},...../*.... Set the footer correctly..... * It should be position: fixed when window is tall enough..... * It should be position: static when window isn't tall enough.... */....setFooterPlacement: function() {.....var totalContentHeight,......windowHeight

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 74, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1996
Entropy (8bit):	7.879723323624132
Encrypted:	false
SSDEEP:	48:jFE8mmKQOc1+qfQLUGQ4KZ1X+QTaj1ZiVef5mdQG6wtDbt:Z/2QOc1+a4q15CTqef5mdn6wtDbt
MD5:	826F1C66EDC8D0B4A70F783874430DB5
SHA1:	56B5E2629A384E8AD5FE2FD1D3BBBD9B516B4B0A
SHA-256:	1C9DD1B0663BA2324632F0FFEBB21112A92F039305241661C289C88AF523CB1A
SHA-512:	87446A91F1CF5840230B55D3D0238B17686BC36334059D4F83BEEC90F7146365C395CACE9A3DD866926E095D6AE31CB2D6EDF9FDE586BDAB3E3C3EE38D33ABCF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...<...J......7.....sRGB.........IDATx..[kl.E.....]......Z.......(bE@............%..o..G..&.E...Db......4..Zm...Gk.\-m.z..g.^...s...%............n...T..v7G.F.4........W....z.L...5....3+....P.\..!...\...(.q....rN....t...pZe....M.>....Z.......D..].:...#...mq.(.....[...AU...~......<.G.h..l....^..D..x.i......V.S..`..B.E...;..V0..f'...f.A0i.Y.....[..p...?..9.^.G........uV.\|U. X.&.[q....TZ9.[.}u7/.{b../[.t./0..1_..BA.Kf.,./..[G..6f..6.<`V......4..;.......Z.~..{...K.8Z..To..<....xZ.F.....y....-.#...E..V........=...`.....n#....H....f..{..$..}:n..T0.....yJq8.x.......T0............J..HEg......6..H......}..b2G...x......j..M.........s%.....3I.f.i.C~.(..RI.4q..,....C...u...\}....f.njCI.eO...p$G....U.../.B.;..[....3.9t.(-..%....g(.c.1..z.Q.H..l.`..P0.Tm..a.\......)....F...,).4..Y.k<...\R.........t....\| z!.@..".t.-.G.t\.......S....Lr,h.......PB...L.%\........y....+\|f.Z....B_NC.....T..`.u.q..l..............NB...&.f..a_tc3.

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	293429
Entropy (8bit):	5.083605252332618
Encrypted:	false
SSDEEP:	6144:pCLfh6nicf8Z5wPTdpM4mDoz1EsnFyyyHh3zOxPnS8kVLkIVfzYAK6k1PY:pfw4mDiTFyA6TVfMAKNZY
MD5:	CCD2CA0B9DDB09BD19848D61D1603288
SHA1:	7CB2A2148D29FDD47EAFAEEEE8D6163455AD44BE
SHA-256:	4D0AD40605C44992A4EEB4FC8A0C9BED4F58EFDB678424E929AFABCAAC576877
SHA-512:	E81F44F0BD032E48FEB330A4582D8E94059C5DE69C65CB73D28C9C9E088E6DB3DCB5664FF91487E2BBC9401E3F3BE21970F7108857AB7CED62DE881601277CDD
Malicious:	false
Reputation:	low
Preview:	/!. jQuery JavaScript Library v1.12.4. * http://jquery.com/. . Includes Sizzle.js. * http://sizzlejs.com/. . Copyright jQuery Foundation and other contributors. * Released under the MIT license. * http://jquery.org/license. . Date: 2016-05-20T17:17Z. */..(function( global, factory ) {...if ( typeof module === "object" && typeof module.exports === "object" ) {...// For CommonJS and CommonJS-like environments where a proper `window`...// is present, execute the factory and get jQuery....// For environments that do not have a `window` with a `document`...// (such as Node.js), expose a factory as module.exports....// This accentuates the need for the creation of a real `window`....// e.g. var jQuery = require("jquery")(window);...// See ticket #14549 for more info....module.exports = global.document ?....factory( global, true ) :....function( w ) {.....if ( !w.document ) {......throw new Error( "jQuery requires a window with a document" );.....}.....return factory( w );....};..

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3807), with no line terminators
Category:	dropped
Size (bytes):	3807
Entropy (8bit):	5.175114160879721
Encrypted:	false
SSDEEP:	96:Cejna4urzmVcW/vtXwIeg6yGfpyuqQb7lkWTGquqhqXYMKdyqZY:JaWcW/vSIegVmR7bZukNMKdk
MD5:	A635A55DDB6339A3D0D01C641F670753
SHA1:	A6DEE4A1DF6C51B82CE2E67323514E7DE4E165D4
SHA-256:	A6C3BFF965978DF8093C3A29F7071C21D7439A212AF41E7B40CE70D94D6BCC44
SHA-512:	2562CA35BE37BFE0B984EC288E23678BC97BA7A881764044E65914EA013742A5310A5C12839CB8A501A464791BC67868FE6A02AE149DF9329E40562569EBA42D
Malicious:	false
Reputation:	low
Preview:	window.Modernizr=function(e,t,n){function r(e){d.cssText=e}function i(e,t){return r(prefixes.join(e+";")+(t\|\|""))}function s(e,t){return typeof e===t}function o(e,t){return!!~(""+e).indexOf(t)}function u(e,t,r){for(var i in e){var o=t[e[i]];if(o!==n)return r===!1?e[i]:s(o,"function")?o.bind(r\|\|t):o}return!1}var a="2.6.1",f={},l=!0,c=t.documentElement,h="modernizr",p=t.createElement(h),d=p.style,v,m={}.toString,g={},y={},b={},w=[],E=w.slice,S,x={}.hasOwnProperty,T;!s(x,"undefined")&&!s(x.call,"undefined")?T=function(e,t){return x.call(e,t)}:T=function(e,t){return t in e&&s(e.constructor.prototype[t],"undefined")},Function.prototype.bind\|\|(Function.prototype.bind=function(e){var t=this;if(typeof t!="function")throw new TypeError;var n=E.call(arguments,1),r=function(){if(this instanceof r){var i=function(){};i.prototype=t.prototype;var s=new i,o=t.apply(s,n.concat(E.call(arguments)));return Object(o)===o?o:s}return t.apply(e,n.concat(E.call(arguments)))};return r});for(var N in g)T(g,N)&&

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	6071
Entropy (8bit):	4.961478576775147
Encrypted:	false
SSDEEP:	96:CftkjQu0Q0LCY/TMqqMbFibpR1KO0PT4tWaZSxLakjbBWk/YVGi4inMypJeeYsfA:MoQzj7wyFmnw3EtWaZw+oMCYVlBflKGG
MD5:	812B50931C7ACB37DDFCF2D66CE4F6D9
SHA1:	616C276F6632BE2C9C4F60F8F06582FDE300F9A1
SHA-256:	8B132276A98B7A181026AE1C803C5E060D8FA7A4007BF88F185DC78B7E7B5106
SHA-512:	670A77C041A030AB54CD1740BA69E9FE4C0B1F9531C02F9D37DB6A304052E5F909ED22F771009FE6DA41F6E1046FC6B5A21628E1A2AB7E3BE7F3E2F6397B8CB9
Malicious:	false
Reputation:	low
Preview:	/*. Created by hdoan on 5/8/14.. . This is used to hide and show the error associated with an input field.. * Used also to mark the container of the input field with a 'hasError' class so when the input has focus, the error container can be shown. * Used also to focus on the first input with an error when the form is invalid due to empty inputs. /.define(['jquery', 'validation', 'backbone'], function($, Validation, Backbone) {...'use strict';....var errorDisplay = {...../.... Shows the error container AND visual treatment associated with the input field.... .... @param {Object} param - could be an Event object or element.... */....showError: function(param) {.....var $targetElement,......$targetParent;......// If param is an event.....if (param.type === 'focusin') {......$targetElement = $(param.target);......// param is an element.....} else {......$targetElement = param;.....}.....$targetParent = $targetElement.parents('.textInput');......if ($targetParent.hasClass('has

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16024)
Category:	dropped
Size (bytes):	16052
Entropy (8bit):	5.3519984983543845
Encrypted:	false
SSDEEP:	384:XcGfcUvwKvmwdfdx7ACD0TXXIxjecdXJwEf5yFm0txf:OUVvmwdfPOgHdXJJW
MD5:	90355639E97F4CC3725A100B0B33ED19
SHA1:	0F09081F9F58EB793C8F27EAFB90154A04468710
SHA-256:	EFC3AD603DCA3C78E67493ADB079676731FD72C4204DBF7264D22E897A271267
SHA-512:	8003D80291F35C0BA499E3C5FC74FC4506B654FF62CC1D209538D127A26FC9A19882618F49CC17D67FD0E858D736F1A1DF414A39D5562AC620D2571611B44BC0
Malicious:	false
Reputation:	low
Preview:	/@ 2024 PayPal (v1.0.1) /.!function(){"use strict";function f(t){if(!t\|\|t.constructor!==Object&&t.constructor!==Array)return t;var e,n=t.constructor();for(e in t)n[e]=f(t[e]);return n}function s(t,e){var n;return function(){return t&&(n=t.apply(e\|\|this,arguments),t=null),n}}var e,r={},D=-1,l=(window.PAYPAL=window.PAYPAL\|\|{PubSub:{subscribe:function(t,e){if("function"!=typeof e)return!1;t="symbol"==typeof t?t.toString():t,Object.prototype.hasOwnProperty.call(r,t)\|\|(r[t]={});var n="uid_"+String(++D);return r[t][n]=e,n}}},window.PAYPAL.PubSub),t=(window.fpti=window.fpti\|\|{},function t(){}),n=function n(){return{}},o=("undefined"==typeof JSON&&((JSON={}).stringify=t,JSON.parse=n,window.JSON=JSON),"performance"in window&&window.performance\|\|{}),d=(o&&!o.now&&(e=o.timing,o.now=function(){var t=(new Date).getTime()-(e&&e.navigationStart\|\|0);return 0<t?t:0}),String.prototype.trim\|\|(String.prototype.trim=function(){return this.replace(/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,"")}),Array.prototype

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65508)
Category:	downloaded
Size (bytes):	70162
Entropy (8bit):	5.332928547809831
Encrypted:	false
SSDEEP:	1536:ihUQ8vmwdyuwzSpmURvVCzBuOtmfmVaom+gGmtBmxsuRc:iugz7e+KkCr
MD5:	0AF4783054B8E925EC024DC00FCB4510
SHA1:	B43B595D6899229217DA7CA15E8D1A846E93A666
SHA-256:	C3F1981E14042012337C6493597CD362261453611B727E91847A118B2B4CFFB7
SHA-512:	874D73FF48E306FBAC1471DB4F925DF8348F5C3D322AC13D769AF91F6DC67F33F0886674686F8A9F5168910FD8AC160F007423508ED29665E8138EC411C5BE84
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/pa/js/pa.js
Preview:	/@ 2024 PayPal (v1.9.5) /.!function(){"use strict";function r(t,e,n){(e=function(t){t=function(t,e){if("object"!=typeof t\|\|!t)return t;var n=t[Symbol.toPrimitive];if(void 0===n)return("string"===e?String:Number)(t);t=n.call(t,e\|\|"default");if("object"!=typeof t)return t;throw new TypeError("@@toPrimitive must return a primitive value.")}(t,"string");return"symbol"==typeof t?t:t+""}(e))in t?Object.defineProperty(t,e,{value:n,enumerable:!0,configurable:!0,writable:!0}):t[e]=n}function i(e,t){var n,r=Object.keys(e);return Object.getOwnPropertySymbols&&(n=Object.getOwnPropertySymbols(e),t&&(n=n.filter(function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable})),r.push.apply(r,n)),r}function g(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?i(Object(n),!0).forEach(function(t){r(e,t,n[t])}):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):i(Object(n)).forEach(function(t){Object.defineProperty(e,t,Ob

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1997
Entropy (8bit):	5.0050192129706
Encrypted:	false
SSDEEP:	48:syq5exVy+GtySao6qP9PGp161pyRDhKOJUoV0gQ84fTbln:7q5eO+GsSao6UGp8rSVKcUo2gp47bl
MD5:	1B66EA06B0CCC5574AA1593988231A8C
SHA1:	FBF4CC6664D86A91D3176E6B2A3DA684FC6E6EDA
SHA-256:	7173550FD32A664B4075E4C34D8BBCFC3725AFB987CF3DBD7FBA10AFA479A6B5
SHA-512:	9BF4C1894C7CFCC65690CC70D5A191C1CF073B39D70C3597790143AFCC0CEECDAB71928FFE49FDFF202312A161F38D2779ACF8B5D6D15B6614326D53A47EA068
Malicious:	false
Reputation:	low
Preview:	/* global requirejs:true */.requirejs.config({..deps: ['app'],..paths: {..."jquery":.....'lib/jquery-1.12.4',..."jqueryUI":.....'lib/jquery.ui.mini',..."json":......(typeof JSON === 'undefined') ? 'lib/json2' : 'empty:',..."underscore":....'lib/underscore-1.13.4',..."backbone":.....'lib/backbone-1.5.0.min',..."backboneSubroute":...'lib/backbone-subroute-0.4.5.min',..."dust":......'lib/dust-core',..."nougat":.....'core/nougat',..."BaseView":.....'core/baseView',..."dust-helpers" :...'lib/dust-helpers',..."dust-helpers-supplement":.'lib/dust-helpers-supplement',..."dustmotes-iterate":..'lib/dustmotes-iterate',..."fso-helper":....'lib/fso-helper',..."fso":......'lib/fso',..."browserId":....'lib/bid',...."pageView":.....'view/pageView',..."login":.....'view/login',...'notifications':...'view/notifications',....//Core Components..."lap":......'components/textInput/lap',..."textField":....'components/textInput/textField',...'selectDropdown':...'components/selectDropdown',....//Widgets..."val

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1839
Entropy (8bit):	4.952637178893887
Encrypted:	false
SSDEEP:	48:gKZK68fKSLYBj17ekcLWyWpbwnGD9jH2RqFhmWe:i68fKSEBj17hcL1ewnGDZ2RqFAv
MD5:	E925A9183DDDF6BC1F3C6C21E4FC7F20
SHA1:	F4801E7F36BD3C94E0B3C405FDF5942A0563A91F
SHA-256:	F3A20B45053B0E79F75F12923FC4A7E836BC07F4ECFF2A2FA1F8ECDBA850E85A
SHA-512:	F10EB10B8065C10AE65950DE9EF5F36EC9DF25D764B289530FE2AD3AE97657BD5805E71FED99E58D81D34796A1002419343CCA85CA47EE7A71D6C15855AD9705
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/router.js
Preview:	/global define:true, console:true, jQuery:true, require:true /..define([ 'jquery', 'backbone'],...function ($, Backbone) {....'use strict';....var router;....router = Backbone.Router.extend({....routes: {.....'': 'showTheView',.....'stepup?queryString': 'showTheView',.....'rendercaptcha': 'showAuthCaptcha',.....'twofactorpath': 'showTheView',.....'resendotp': 'showTheView',.....'switchoption?*queryString': 'showTheView',.....'switchoption': 'showTheView',.....'softtoken': 'showTheView'....},.....hasPushState: window.history && 'pushState' in window.history,.....// this.viewName is only set when app.js is executed. It is never set again, unless app.js is....// requested again like when a page is rendered server-side.....showTheView: function () {.....this.showView(this.viewName);....},.....showAuthCaptcha: function() {.....this.showView('authcaptcha');....},.....showView: function (name) {.....var viewName = name,......asyncAssets = [ "view/" + viewName ];......require(asyncAssets,

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12696), with no line terminators
Category:	dropped
Size (bytes):	12696
Entropy (8bit):	5.130049969968838
Encrypted:	false
SSDEEP:	192:oLV3zev1o5E6PcoF+kkEBukQBEzmVxastV:oLV3SNSXEkkEBujSzm6WV
MD5:	21BE63CFA9F3A9BEAD27FDC3555D397B
SHA1:	A3AD888102598B9F846045BA5A1D75284B9E155D
SHA-256:	0F3A415DFDA1FFC276D264A1E26D47AB8B480B80219142661E05C75AD35E8CBD
SHA-512:	458192E91CE54129DA8AA0DABEC8C75E8786DC086916C89BEC461018969877477A9EA1035FD38681C8B1BFA29EF748F7DDC97BA4CAE615E7EC7CA4B49CF793A8
Malicious:	false
Reputation:	low
Preview:	define(["jquery","backbone","newgat","pageView","postMessage","authcaptcha"],function(e,t,n,r,i,s){"use strict";var o=r.extend({el:"#main",rlogIds:[],LOADING:"loading",currentViewTemplate:undefined,previousViewTemplate:"null",currentView:"null",pageName:"null",keepMeLoggedIn:undefined,events:{"submit form.proceed":"proceed","click a.proceed":"proceed"},postCaptchaMessageSent:!1,initialize:function(){var r,s,o,u;this.clientCalLog({evt:"ul-loaded"}),this.model=new t.Model(n.getContext()),this.template=this.model.get("viewName"),this.currentViewTemplate=this.model.get("viewName");if(this.isMiniBrowser()){var a=this;o=window.attachEvent?"onbeforeunload":"beforeunload",u=window.addEventListener\|\|window.attachEvent,u(o,function(t){var n=["eConsent","login"],r=document.getElementById("rememberMe"),i=r&&r.getAttribute("data-maxRMReached"),s=t.target\|\|t.srcElement,o=s&&s.activeElement&&s.activeElement.nodeName;if(n.indexOf(a.currentViewTemplate)>=0){a.sendPostMessage({flowtype:"prox",status:"ex

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2974
Entropy (8bit):	4.88985867449781
Encrypted:	false
SSDEEP:	48:Ykrs/BqPgeFo5BwsbQwTIcACGWS29oXuseVzxdor2BFKH9zlnBJN4m:YkqBogKo8skwTIxCK2rsuLKH9JvNP
MD5:	01BC0C36F25B668C2461BD9AA72CBA12
SHA1:	36AA5EFC5A15AF82A9489BB1C34E0C538EE63659
SHA-256:	E991024988B4CD788022C6387E520882D74EDAC454F880738E5B267B50815404
SHA-512:	BF7D8020B63E424E744EE5E11FDB6E5B1AD898CF35248572F1D63A788D70FCF03D2CF833AB950D154AB44830511F12B58E0A1625DDE3188AC428FC49483F55C0
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/widgets/validation.js
Preview:	/*. Created by hdoan on 5/5/14.. . Validates form inputs. Will emit Backbone event if input is valid, invalid, or empty.. * The event naming convention is 'valid', 'invalid', or 'empty' followed by the name attribute of the field. . For example, if you are validating the email input, the three possible events are as follows:. * 1. 'validemail'. * 2. 'invalidemail'. * 3. 'emptyemail'. /.define(..[ 'jquery', 'backbone', 'underscore' ],...function($, Backbone, _) {...'use strict';....var validation = {.....init: function(view) {.....var elem = view.$el,......fields = elem.find('.validate');......if (fields.length !== 0) {.......// Find all fields with the 'validate' class and onblur add handler to validate......fields.each(function() {.......$(this).on('blur', function (field) {........validation.doValidation(field.target);.......});......});.....}....},...../.... Performs the validation.... .... @param {Object} target - event object.... */....doValidation: function(targe

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (330)
Category:	dropped
Size (bytes):	29314
Entropy (8bit):	5.449471861492707
Encrypted:	false
SSDEEP:	768:rw6peNonqZ+tOD/CVzJWFStqf9JAtEPmNF5w/WTad0XAK1FIAhUrYiOjHhff9V/G:0OjBff9VkUu3YTWzTr5
MD5:	6AEC50C9157FB0F30DD46B6D01E969EB
SHA1:	444F950B99B1160929B570F8A20A534F9D813CCD
SHA-256:	BC13F30508143C2E941180E85EE9A5768808B38E9E9DDEBC023A623BF33F4545
SHA-512:	A346DBC64A5114A95EBADE8A0307B18BF6D4158C72AB1D936AB9346BBB73502EC05A5AB736D70C866DC549CD5FCD7F1D86F642E1524BCE90F9877092E1681FFC
Malicious:	false
Reputation:	low
Preview:	'use strict';.var autosubmit = false,..recaptchaCallback,..recaptchaEnterpriseCallback;.var ADS_FPTI = (function(){...var adsPluginDiv = document.getElementById('captcha-standalone'),...csrf = adsPluginDiv.getAttribute('data-csrf'),...sessionId = adsPluginDiv.getAttribute('data-sessionid');...var isFPTIEnabled = typeof PAYPAL !== 'undefined' && typeof PAYPAL.analytics !== 'undefined' &&...typeof PAYPAL.analytics.instance !== 'undefined' && typeof fpti !== 'undefined';...if (isFPTIEnabled){...PAYPAL.analytics.startClientErrorTracking();...PAYPAL.analytics.startCPLTracking();..}...var postData = function (data){....var xmlHttpReq = new XMLHttpRequest();...xmlHttpReq.open('POST', '/auth/logclientdata');...xmlHttpReq.setRequestHeader("Content-Type", "application/json;charset=UTF-8");...xmlHttpReq.timeout = 15000; // 15sec....var dataToSend = {....fpti : data,...._csrf : csrf,...._sessionID : sessionId...};....xmlHttpReq.send(JSON.stringify(dataToSend));..};...var customADSFPTITracking = fu

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-05T20:20:08.680596+0100	2023760	ET PHISHING Successful Paypal Phish Jan 23 2017	1	192.168.2.8	49780	151.101.1.21	443	TCP
2024-12-05T20:20:08.680596+0100	2024846	ET PHISHING Successful Paypal Phish Oct 16 2017	1	192.168.2.8	49780	151.101.1.21	443	TCP
2024-12-05T20:20:08.680596+0100	2031565	ET PHISHING Successful Paypal Phish M1 Dec 8 2015	1	192.168.2.8	49780	151.101.1.21	443	TCP
2024-12-05T20:20:08.680596+0100	2822573	ETPRO PHISHING Successful Paypal Phish Oct 11 2016	1	192.168.2.8	49780	151.101.1.21	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 5, 2024 20:19:50.742018938 CET	49714	443	192.168.2.8	172.217.21.36
Dec 5, 2024 20:19:50.742053986 CET	443	49714	172.217.21.36	192.168.2.8
Dec 5, 2024 20:19:50.742342949 CET	49714	443	192.168.2.8	172.217.21.36
Dec 5, 2024 20:19:50.742583036 CET	49714	443	192.168.2.8	172.217.21.36
Dec 5, 2024 20:19:50.742594004 CET	443	49714	172.217.21.36	192.168.2.8
Dec 5, 2024 20:19:51.522609949 CET	49716	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:19:51.522660971 CET	443	49716	151.101.1.21	192.168.2.8
Dec 5, 2024 20:19:51.522744894 CET	49716	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:19:51.523549080 CET	49717	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:19:51.523607969 CET	443	49717	151.101.1.21	192.168.2.8
Dec 5, 2024 20:19:51.523916960 CET	49717	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:19:51.524291992 CET	49717	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:19:51.524312019 CET	443	49717	151.101.1.21	192.168.2.8
Dec 5, 2024 20:19:51.524525881 CET	49716	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:19:51.524542093 CET	443	49716	151.101.1.21	192.168.2.8
Dec 5, 2024 20:19:52.441359043 CET	443	49714	172.217.21.36	192.168.2.8
Dec 5, 2024 20:19:52.441680908 CET	49714	443	192.168.2.8	172.217.21.36
Dec 5, 2024 20:19:52.441703081 CET	443	49714	172.217.21.36	192.168.2.8
Dec 5, 2024 20:19:52.442975998 CET	443	49714	172.217.21.36	192.168.2.8
Dec 5, 2024 20:19:52.443036079 CET	49714	443	192.168.2.8	172.217.21.36
Dec 5, 2024 20:19:52.444051981 CET	49714	443	192.168.2.8	172.217.21.36
Dec 5, 2024 20:19:52.444123983 CET	443	49714	172.217.21.36	192.168.2.8
Dec 5, 2024 20:19:52.484610081 CET	49714	443	192.168.2.8	172.217.21.36
Dec 5, 2024 20:19:52.484632969 CET	443	49714	172.217.21.36	192.168.2.8
Dec 5, 2024 20:19:52.530486107 CET	49714	443	192.168.2.8	172.217.21.36
Dec 5, 2024 20:19:52.743531942 CET	443	49717	151.101.1.21	192.168.2.8
Dec 5, 2024 20:19:52.743791103 CET	49717	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:19:52.743804932 CET	443	49717	151.101.1.21	192.168.2.8
Dec 5, 2024 20:19:52.744174004 CET	443	49717	151.101.1.21	192.168.2.8
Dec 5, 2024 20:19:52.744235992 CET	49717	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:19:52.744937897 CET	443	49717	151.101.1.21	192.168.2.8
Dec 5, 2024 20:19:52.744995117 CET	49717	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:19:52.745150089 CET	443	49716	151.101.1.21	192.168.2.8
Dec 5, 2024 20:19:52.745426893 CET	49716	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:19:52.745450974 CET	443	49716	151.101.1.21	192.168.2.8
Dec 5, 2024 20:19:52.745848894 CET	443	49716	151.101.1.21	192.168.2.8
Dec 5, 2024 20:19:52.745909929 CET	49716	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:19:52.746583939 CET	443	49716	151.101.1.21	192.168.2.8
Dec 5, 2024 20:19:52.746639967 CET	49716	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:19:52.750216007 CET	49716	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:19:52.750281096 CET	443	49716	151.101.1.21	192.168.2.8
Dec 5, 2024 20:19:52.750439882 CET	49716	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:19:52.750469923 CET	443	49716	151.101.1.21	192.168.2.8
Dec 5, 2024 20:19:52.751550913 CET	49717	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:19:52.751624107 CET	443	49717	151.101.1.21	192.168.2.8
Dec 5, 2024 20:19:52.800657034 CET	49716	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:19:52.800658941 CET	49717	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:19:52.800674915 CET	443	49717	151.101.1.21	192.168.2.8
Dec 5, 2024 20:19:52.800685883 CET	443	49716	151.101.1.21	192.168.2.8
Dec 5, 2024 20:19:52.846658945 CET	49716	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:19:52.846667051 CET	49717	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:19:53.367574930 CET	443	49716	151.101.1.21	192.168.2.8
Dec 5, 2024 20:19:53.368252039 CET	443	49716	151.101.1.21	192.168.2.8
Dec 5, 2024 20:19:53.368287086 CET	443	49716	151.101.1.21	192.168.2.8
Dec 5, 2024 20:19:53.368320942 CET	49716	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:19:53.368331909 CET	443	49716	151.101.1.21	192.168.2.8
Dec 5, 2024 20:19:53.368356943 CET	443	49716	151.101.1.21	192.168.2.8
Dec 5, 2024 20:19:53.368392944 CET	49716	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:19:53.375566006 CET	443	49716	151.101.1.21	192.168.2.8
Dec 5, 2024 20:19:53.375627041 CET	49716	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:19:53.375643015 CET	443	49716	151.101.1.21	192.168.2.8
Dec 5, 2024 20:19:53.392250061 CET	443	49716	151.101.1.21	192.168.2.8
Dec 5, 2024 20:19:53.392307997 CET	443	49716	151.101.1.21	192.168.2.8
Dec 5, 2024 20:19:53.392324924 CET	49716	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:19:53.392337084 CET	443	49716	151.101.1.21	192.168.2.8
Dec 5, 2024 20:19:53.392384052 CET	49716	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:19:53.400604010 CET	443	49716	151.101.1.21	192.168.2.8
Dec 5, 2024 20:19:53.409023046 CET	443	49716	151.101.1.21	192.168.2.8
Dec 5, 2024 20:19:53.409118891 CET	49716	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:19:53.409128904 CET	443	49716	151.101.1.21	192.168.2.8
Dec 5, 2024 20:19:53.460591078 CET	49716	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:19:53.460616112 CET	443	49716	151.101.1.21	192.168.2.8
Dec 5, 2024 20:19:53.505724907 CET	49716	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:19:53.505762100 CET	443	49716	151.101.1.21	192.168.2.8
Dec 5, 2024 20:19:53.542866945 CET	49719	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:53.542922974 CET	443	49719	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:53.542989969 CET	49719	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:53.543159008 CET	49720	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:53.543200016 CET	443	49720	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:53.543262959 CET	49720	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:53.543785095 CET	49720	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:53.543796062 CET	443	49720	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:53.543932915 CET	49721	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:53.543967009 CET	443	49721	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:53.544054031 CET	49721	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:53.544136047 CET	49719	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:53.544147015 CET	443	49719	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:53.544334888 CET	49721	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:53.544353008 CET	443	49721	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:53.545217991 CET	49716	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:19:53.558969975 CET	443	49716	151.101.1.21	192.168.2.8
Dec 5, 2024 20:19:53.561446905 CET	443	49716	151.101.1.21	192.168.2.8
Dec 5, 2024 20:19:53.561705112 CET	49716	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:19:53.561738014 CET	443	49716	151.101.1.21	192.168.2.8
Dec 5, 2024 20:19:53.567718983 CET	49722	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:53.567728996 CET	443	49722	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:53.567802906 CET	49722	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:53.568280935 CET	49723	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:53.568305969 CET	443	49723	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:53.568402052 CET	49723	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:53.568866968 CET	49724	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:53.568895102 CET	443	49724	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:53.568955898 CET	49722	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:53.568964005 CET	443	49722	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:53.569091082 CET	49724	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:53.569354057 CET	49723	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:53.569365978 CET	443	49723	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:53.569473982 CET	49724	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:53.569497108 CET	443	49724	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:53.575773954 CET	443	49716	151.101.1.21	192.168.2.8
Dec 5, 2024 20:19:53.575826883 CET	49716	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:19:53.575851917 CET	443	49716	151.101.1.21	192.168.2.8
Dec 5, 2024 20:19:53.583892107 CET	443	49716	151.101.1.21	192.168.2.8
Dec 5, 2024 20:19:53.583951950 CET	49716	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:19:53.583961010 CET	443	49716	151.101.1.21	192.168.2.8
Dec 5, 2024 20:19:53.584006071 CET	49716	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:19:53.584130049 CET	49716	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:19:53.584160089 CET	443	49716	151.101.1.21	192.168.2.8
Dec 5, 2024 20:19:53.808871031 CET	49725	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:19:53.808904886 CET	443	49725	18.66.161.81	192.168.2.8
Dec 5, 2024 20:19:53.809132099 CET	49725	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:19:53.809366941 CET	49725	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:19:53.809380054 CET	443	49725	18.66.161.81	192.168.2.8
Dec 5, 2024 20:19:55.364540100 CET	443	49719	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:55.364794970 CET	49719	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:55.364818096 CET	443	49719	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:55.365361929 CET	443	49719	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:55.365423918 CET	49719	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:55.366152048 CET	443	49719	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:55.366199970 CET	49719	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:55.367197037 CET	49719	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:55.367259026 CET	443	49719	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:55.367432117 CET	49719	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:55.367439985 CET	443	49719	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:55.379661083 CET	443	49722	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:55.380681038 CET	49722	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:55.380692959 CET	443	49722	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:55.381166935 CET	443	49722	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:55.381182909 CET	443	49723	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:55.381254911 CET	49722	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:55.381452084 CET	49723	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:55.381462097 CET	443	49723	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:55.381880999 CET	443	49723	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:55.381901026 CET	443	49722	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:55.381942987 CET	49723	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:55.381968975 CET	49722	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:55.382327080 CET	49722	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:55.382376909 CET	443	49722	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:55.382616997 CET	443	49723	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:55.382700920 CET	443	49724	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:55.382740021 CET	49723	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:55.382833958 CET	49722	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:55.382842064 CET	443	49722	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:55.382982016 CET	49724	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:55.383002043 CET	443	49724	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:55.383169889 CET	49723	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:55.383229971 CET	443	49723	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:55.383347034 CET	49723	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:55.383352995 CET	443	49723	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:55.383440971 CET	443	49724	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:55.383527994 CET	49724	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:55.384191036 CET	443	49724	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:55.384329081 CET	49724	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:55.384708881 CET	49724	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:55.384708881 CET	49724	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:55.384726048 CET	443	49724	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:55.384780884 CET	443	49724	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:55.412380934 CET	49719	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:55.427500963 CET	49722	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:55.427555084 CET	49723	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:55.427561998 CET	49724	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:55.427577972 CET	443	49724	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:55.474255085 CET	49724	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:55.545022011 CET	443	49720	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:55.545360088 CET	49720	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:55.545367956 CET	443	49720	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:55.545809984 CET	443	49720	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:55.545870066 CET	49720	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:55.546196938 CET	443	49721	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:55.546448946 CET	49721	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:55.546457052 CET	443	49721	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:55.546506882 CET	443	49720	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:55.546552896 CET	49720	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:55.546762943 CET	49720	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:55.546843052 CET	443	49721	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:55.546900034 CET	49721	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:55.546966076 CET	443	49720	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:55.547068119 CET	49720	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:55.547091007 CET	443	49720	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:55.547542095 CET	443	49721	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:55.547589064 CET	49721	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:55.547873974 CET	49721	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:55.547924042 CET	443	49721	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:55.548048019 CET	49721	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:55.548053980 CET	443	49721	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:55.593903065 CET	49720	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:55.593914032 CET	49721	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:55.896075964 CET	443	49719	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:55.918220997 CET	443	49722	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:55.918323994 CET	443	49723	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:55.919617891 CET	443	49724	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:55.922763109 CET	443	49722	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:55.922847986 CET	49722	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:55.922877073 CET	443	49722	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:55.922925949 CET	443	49722	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:55.922966003 CET	49722	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:55.923010111 CET	49722	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:55.923688889 CET	49722	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:55.923708916 CET	443	49722	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:55.924201012 CET	49726	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:55.924263000 CET	443	49726	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:55.924385071 CET	49726	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:55.925102949 CET	49726	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:55.925118923 CET	443	49726	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:55.939373016 CET	443	49723	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:55.939419985 CET	443	49723	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:55.939446926 CET	49723	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:55.939448118 CET	443	49723	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:55.939507961 CET	49723	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:55.939857960 CET	49723	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:55.939881086 CET	443	49723	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:55.940327883 CET	49727	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:55.940361023 CET	443	49727	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:55.940437078 CET	49727	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:55.940835953 CET	49727	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:55.940845966 CET	443	49727	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:55.948321104 CET	49719	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:55.963788986 CET	49724	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:55.964898109 CET	443	49724	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:55.964912891 CET	443	49724	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:55.964942932 CET	443	49724	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:55.964958906 CET	443	49724	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:55.964981079 CET	49724	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:55.964986086 CET	443	49724	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:55.965023041 CET	443	49724	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:55.965075970 CET	49724	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:55.965075970 CET	49724	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:55.965490103 CET	49724	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:55.965506077 CET	443	49724	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:55.965970039 CET	49728	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:55.965991020 CET	443	49728	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:55.966239929 CET	49728	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:55.966679096 CET	49728	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:55.966690063 CET	443	49728	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:56.040361881 CET	443	49719	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:56.040376902 CET	443	49719	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:56.040414095 CET	443	49719	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:56.040431976 CET	443	49719	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:56.040446997 CET	443	49719	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:56.040457964 CET	49719	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:56.040477991 CET	443	49719	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:56.040496111 CET	49719	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:56.040533066 CET	49719	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:56.067836046 CET	49729	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:56.067877054 CET	443	49729	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:56.067939043 CET	49730	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:56.067975044 CET	49729	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:56.067981958 CET	443	49730	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:56.068042040 CET	49730	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:56.068192959 CET	49731	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:56.068205118 CET	443	49731	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:56.068274975 CET	49731	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:56.068511963 CET	49729	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:56.068526983 CET	443	49729	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:56.068631887 CET	49730	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:56.068645000 CET	443	49730	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:56.068825960 CET	49731	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:56.068836927 CET	443	49731	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:56.085680962 CET	443	49721	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:56.086622953 CET	443	49720	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:56.090631962 CET	443	49720	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:56.090691090 CET	49720	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:56.090723991 CET	443	49720	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:56.091044903 CET	49720	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:56.091087103 CET	443	49720	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:56.091249943 CET	443	49720	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:56.091273069 CET	49720	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:56.091305017 CET	49720	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:56.095021009 CET	49732	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:56.095067024 CET	443	49732	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:56.095143080 CET	49732	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:56.095336914 CET	49732	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:56.095345974 CET	443	49732	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:56.127516031 CET	49721	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:56.140535116 CET	443	49721	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:56.140546083 CET	443	49721	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:56.140574932 CET	443	49721	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:56.140585899 CET	443	49721	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:56.140611887 CET	443	49721	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:56.140638113 CET	49721	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:56.140646935 CET	443	49721	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:56.140678883 CET	49721	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:56.140678883 CET	49721	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:56.140707016 CET	49721	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:56.265480042 CET	443	49719	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:56.265497923 CET	443	49719	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:56.265549898 CET	443	49719	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:56.265600920 CET	49719	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:56.265629053 CET	443	49719	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:56.265645027 CET	49719	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:56.265676975 CET	49719	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:56.302597046 CET	443	49719	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:56.302624941 CET	443	49719	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:56.302687883 CET	49719	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:56.302700996 CET	443	49719	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:56.302751064 CET	49719	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:56.332930088 CET	443	49721	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:56.332964897 CET	443	49721	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:56.333079100 CET	49721	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:56.333079100 CET	49721	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:56.333097935 CET	443	49721	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:56.333283901 CET	49721	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:56.346451998 CET	443	49719	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:56.346487999 CET	443	49719	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:56.346528053 CET	49719	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:56.346543074 CET	443	49719	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:56.346580029 CET	49719	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:56.346595049 CET	49719	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:56.388468981 CET	443	49721	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:56.388498068 CET	443	49721	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:56.388561010 CET	49721	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:56.388571024 CET	443	49721	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:56.388597965 CET	49721	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:56.388628960 CET	49721	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:56.451651096 CET	443	49719	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:56.451713085 CET	443	49719	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:56.451747894 CET	49719	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:56.451749086 CET	443	49719	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:56.451795101 CET	49719	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:56.453562975 CET	49719	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:56.453577995 CET	443	49719	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:56.495667934 CET	443	49721	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:56.495690107 CET	443	49721	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:56.495769024 CET	49721	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:56.495780945 CET	443	49721	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:56.495855093 CET	49721	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:56.499886036 CET	443	49721	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:56.499960899 CET	443	49721	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:56.500001907 CET	49721	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:56.500050068 CET	49721	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:56.502262115 CET	49721	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:56.502280951 CET	443	49721	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:56.507477045 CET	49733	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:56.507533073 CET	443	49733	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:56.507915974 CET	49733	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:56.508147001 CET	49733	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:56.508162022 CET	443	49733	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:56.513470888 CET	49734	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:56.513499022 CET	443	49734	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:56.513613939 CET	49734	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:56.516774893 CET	49734	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:56.516787052 CET	443	49734	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:57.842995882 CET	443	49726	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:57.843467951 CET	49726	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:57.843497992 CET	443	49726	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:57.843966007 CET	443	49726	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:57.844413996 CET	49726	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:57.844489098 CET	443	49726	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:57.844516993 CET	49726	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:57.849095106 CET	443	49727	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:57.849301100 CET	49727	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:57.849320889 CET	443	49727	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:57.849715948 CET	443	49727	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:57.850085020 CET	49727	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:57.850126028 CET	49727	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:57.850141048 CET	443	49727	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:57.880579948 CET	443	49728	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:57.880877972 CET	49728	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:57.880897999 CET	443	49728	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:57.881295919 CET	443	49728	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:57.881373882 CET	49728	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:57.882000923 CET	443	49728	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:57.882052898 CET	49728	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:57.882226944 CET	49728	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:57.882285118 CET	443	49728	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:57.882361889 CET	49728	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:57.882369041 CET	443	49728	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:57.891329050 CET	443	49726	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:57.892136097 CET	49727	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:57.892357111 CET	49726	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:57.922602892 CET	49728	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.031775951 CET	443	49729	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.032115936 CET	49729	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.032143116 CET	443	49729	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.032846928 CET	443	49729	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.032923937 CET	49729	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.033912897 CET	443	49729	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.033967018 CET	49729	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.033974886 CET	443	49730	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.034199953 CET	49729	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.034307003 CET	443	49729	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.034372091 CET	49730	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.034399033 CET	443	49730	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.034528017 CET	49729	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.034542084 CET	443	49729	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.034689903 CET	443	49731	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.034799099 CET	443	49730	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.034872055 CET	49731	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.034888029 CET	443	49731	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.034919977 CET	49730	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.035329103 CET	443	49731	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.035386086 CET	49731	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.035521030 CET	443	49730	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.035572052 CET	49730	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.035701036 CET	49730	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.035759926 CET	443	49730	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.035792112 CET	49730	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.036035061 CET	443	49731	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.036096096 CET	49731	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.036344051 CET	49731	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.036344051 CET	49731	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.036408901 CET	443	49731	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.049134970 CET	443	49732	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.049686909 CET	49732	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.049707890 CET	443	49732	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.050151110 CET	443	49732	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.050302982 CET	49732	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.050910950 CET	443	49732	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.051000118 CET	49732	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.051206112 CET	49732	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.051259995 CET	443	49732	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.051479101 CET	49732	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.077629089 CET	49729	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.077629089 CET	49731	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.077652931 CET	443	49731	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.077687979 CET	49730	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.077714920 CET	443	49730	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.096868038 CET	49732	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.096883059 CET	443	49732	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.127070904 CET	49730	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.127132893 CET	49731	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.142129898 CET	49732	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.499571085 CET	443	49726	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.503078938 CET	443	49726	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.503204107 CET	49726	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.505218983 CET	49726	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.505239010 CET	443	49726	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.509862900 CET	443	49727	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.510010958 CET	443	49727	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.510075092 CET	49727	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.523643970 CET	49727	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.523682117 CET	443	49727	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.528057098 CET	49735	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.528112888 CET	443	49735	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.528218031 CET	49735	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.528601885 CET	49736	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.528654099 CET	443	49736	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.528727055 CET	49736	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.548228025 CET	49737	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.548297882 CET	443	49737	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.548357964 CET	49737	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.548926115 CET	49735	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.548948050 CET	443	49735	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.549734116 CET	49736	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.549755096 CET	443	49736	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.550391912 CET	49737	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.550421953 CET	443	49737	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.556591988 CET	443	49725	18.66.161.81	192.168.2.8
Dec 5, 2024 20:19:58.563926935 CET	49725	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:19:58.563965082 CET	443	49725	18.66.161.81	192.168.2.8
Dec 5, 2024 20:19:58.565238953 CET	443	49725	18.66.161.81	192.168.2.8
Dec 5, 2024 20:19:58.565314054 CET	49725	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:19:58.580199957 CET	49725	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:19:58.580324888 CET	443	49725	18.66.161.81	192.168.2.8
Dec 5, 2024 20:19:58.580444098 CET	443	49728	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.580769062 CET	49725	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:19:58.580785990 CET	443	49725	18.66.161.81	192.168.2.8
Dec 5, 2024 20:19:58.592751026 CET	443	49728	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.592823029 CET	49728	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.592842102 CET	443	49728	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.592891932 CET	49728	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.604871035 CET	49728	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.604897976 CET	443	49728	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.625349998 CET	49725	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:19:58.653676033 CET	49738	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.653731108 CET	443	49738	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.653839111 CET	49738	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.654264927 CET	49739	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.654314995 CET	443	49739	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.654403925 CET	49739	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.654746056 CET	49738	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.654762030 CET	443	49738	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.655031919 CET	49739	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.655045033 CET	443	49739	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.703953028 CET	443	49733	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.705722094 CET	443	49734	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.720772982 CET	49734	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.720784903 CET	443	49734	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.721183062 CET	49733	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.721214056 CET	443	49733	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.721334934 CET	443	49734	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.721415043 CET	49734	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.721736908 CET	443	49733	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.721803904 CET	49733	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.722074986 CET	443	49734	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.722130060 CET	49734	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.722485065 CET	443	49733	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.722534895 CET	49733	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.722661018 CET	49734	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.722724915 CET	443	49734	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.723007917 CET	49734	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.723015070 CET	443	49734	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.723298073 CET	49733	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.723378897 CET	443	49733	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.723618031 CET	49733	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.723630905 CET	443	49733	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.766424894 CET	49733	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.770582914 CET	49734	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.785644054 CET	443	49729	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.787499905 CET	443	49731	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.787914038 CET	443	49730	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.788726091 CET	443	49732	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.789725065 CET	443	49729	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.789856911 CET	49729	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.789885998 CET	443	49729	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.789937973 CET	49729	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.791899920 CET	443	49732	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.791976929 CET	443	49732	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.791985035 CET	49732	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.792032957 CET	49732	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.798520088 CET	443	49729	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.798580885 CET	443	49729	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.798672915 CET	49729	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.808832884 CET	443	49730	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.808844090 CET	443	49730	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.808900118 CET	443	49730	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.808924913 CET	49730	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.808969975 CET	49730	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.835139990 CET	49731	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.908858061 CET	443	49731	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.908879042 CET	443	49731	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.908902884 CET	443	49731	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.908912897 CET	443	49731	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.908925056 CET	49731	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.908937931 CET	443	49731	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.908994913 CET	49731	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.909017086 CET	443	49731	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.909070015 CET	49731	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.909079075 CET	443	49731	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.909135103 CET	49731	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.913425922 CET	49732	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.913444996 CET	443	49732	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.914489985 CET	49731	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.914511919 CET	443	49731	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.920226097 CET	49730	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.920258045 CET	443	49730	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.920855045 CET	49729	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.920871973 CET	443	49729	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.939922094 CET	49741	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.940016985 CET	443	49741	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.940105915 CET	49741	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.940321922 CET	49741	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.940354109 CET	443	49741	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.970858097 CET	49742	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.970909119 CET	443	49742	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.970968008 CET	49742	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.971297979 CET	49743	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.971339941 CET	443	49743	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.971390009 CET	49743	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.971580029 CET	49742	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.971591949 CET	443	49742	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.972270966 CET	49743	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:58.972285986 CET	443	49743	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:58.995629072 CET	49744	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:19:58.995659113 CET	443	49744	151.101.3.1	192.168.2.8
Dec 5, 2024 20:19:58.995923042 CET	49744	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:19:58.996032953 CET	49744	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:19:58.996047020 CET	443	49744	151.101.3.1	192.168.2.8
Dec 5, 2024 20:19:59.232315063 CET	443	49733	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:59.238280058 CET	443	49734	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:59.279745102 CET	49733	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:59.282505035 CET	49734	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:59.284502029 CET	443	49734	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:59.284517050 CET	443	49734	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:59.284569025 CET	443	49734	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:59.284583092 CET	443	49734	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:59.284617901 CET	49734	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:59.284621954 CET	443	49734	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:59.284646988 CET	443	49734	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:59.284666061 CET	49734	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:59.284729958 CET	443	49733	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:59.284743071 CET	49734	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:59.284744978 CET	443	49733	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:59.284766912 CET	443	49733	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:59.284774065 CET	443	49733	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:59.284801960 CET	443	49733	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:59.284821033 CET	49733	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:59.284821033 CET	49733	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:59.284832001 CET	443	49733	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:59.284881115 CET	49733	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:59.284881115 CET	49733	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:59.429949999 CET	443	49734	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:59.430041075 CET	443	49734	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:59.430082083 CET	49734	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:59.430116892 CET	49734	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:59.430932999 CET	49734	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:59.430953026 CET	443	49734	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:59.433650970 CET	49747	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:59.433691978 CET	443	49747	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:59.433753967 CET	49747	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:59.434022903 CET	49747	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:59.434036970 CET	443	49747	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:59.437592030 CET	49748	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:59.437638044 CET	443	49748	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:59.437697887 CET	49748	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:59.437882900 CET	49748	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:59.437896013 CET	443	49748	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:59.453926086 CET	443	49733	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:59.453953028 CET	443	49733	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:59.454066992 CET	49733	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:59.454083920 CET	443	49733	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:59.454130888 CET	49733	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:59.500849009 CET	443	49733	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:59.500880003 CET	443	49733	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:59.501123905 CET	49733	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:59.501144886 CET	443	49733	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:59.501231909 CET	49733	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:59.616455078 CET	443	49733	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:59.616483927 CET	443	49733	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:59.616559982 CET	49733	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:59.616575003 CET	443	49733	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:59.616626978 CET	49733	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:59.616626978 CET	49733	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:59.625058889 CET	443	49733	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:59.625149012 CET	443	49733	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:59.625178099 CET	49733	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:59.625219107 CET	49733	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:59.625514030 CET	49733	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:19:59.625530005 CET	443	49733	192.229.221.25	192.168.2.8
Dec 5, 2024 20:19:59.924644947 CET	443	49725	18.66.161.81	192.168.2.8
Dec 5, 2024 20:19:59.967361927 CET	49725	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:19:59.970364094 CET	443	49725	18.66.161.81	192.168.2.8
Dec 5, 2024 20:19:59.970390081 CET	443	49725	18.66.161.81	192.168.2.8
Dec 5, 2024 20:19:59.970443010 CET	443	49725	18.66.161.81	192.168.2.8
Dec 5, 2024 20:19:59.970458984 CET	49725	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:19:59.970459938 CET	443	49725	18.66.161.81	192.168.2.8
Dec 5, 2024 20:19:59.970506907 CET	49725	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:19:59.970508099 CET	443	49725	18.66.161.81	192.168.2.8
Dec 5, 2024 20:19:59.970520020 CET	443	49725	18.66.161.81	192.168.2.8
Dec 5, 2024 20:19:59.970592022 CET	49725	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:00.167228937 CET	443	49725	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:00.167246103 CET	443	49725	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:00.167321920 CET	49725	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:00.167347908 CET	443	49725	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:00.208120108 CET	443	49725	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:00.208147049 CET	443	49725	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:00.208198071 CET	49725	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:00.208198071 CET	443	49725	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:00.208219051 CET	443	49725	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:00.208250046 CET	49725	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:00.248538017 CET	49725	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:00.375658989 CET	443	49744	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:00.376013994 CET	49744	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:00.376029015 CET	443	49744	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:00.377053976 CET	443	49744	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:00.377238035 CET	49744	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:00.378526926 CET	49744	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:00.378601074 CET	443	49744	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:00.378806114 CET	49744	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:00.378823042 CET	443	49744	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:00.392056942 CET	443	49725	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:00.392070055 CET	443	49725	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:00.392126083 CET	443	49725	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:00.392132044 CET	49725	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:00.392138958 CET	443	49725	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:00.392162085 CET	443	49725	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:00.392201900 CET	49725	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:00.392293930 CET	49725	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:00.403991938 CET	443	49725	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:00.404064894 CET	49725	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:00.421183109 CET	49744	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:00.432157040 CET	443	49725	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:00.432171106 CET	443	49725	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:00.432216883 CET	443	49725	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:00.432235956 CET	49725	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:00.432265043 CET	443	49725	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:00.432288885 CET	49725	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:00.456533909 CET	443	49725	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:00.456564903 CET	443	49725	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:00.456643105 CET	49725	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:00.456672907 CET	443	49725	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:00.456707954 CET	49725	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:00.465708017 CET	443	49735	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:00.466031075 CET	49735	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:00.466051102 CET	443	49735	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:00.466599941 CET	443	49735	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:00.467699051 CET	443	49737	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:00.469593048 CET	443	49736	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:00.470257044 CET	49735	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:00.470380068 CET	443	49735	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:00.470573902 CET	49735	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:00.470820904 CET	49736	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:00.470855951 CET	443	49736	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:00.471030951 CET	49737	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:00.471056938 CET	443	49737	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:00.471298933 CET	443	49736	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:00.471366882 CET	49736	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:00.471527100 CET	443	49737	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:00.471576929 CET	49737	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:00.472033024 CET	443	49736	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:00.472078085 CET	49736	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:00.472352982 CET	443	49737	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:00.472393990 CET	49737	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:00.473040104 CET	49737	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:00.473121881 CET	443	49737	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:00.477847099 CET	49736	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:00.477942944 CET	443	49736	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:00.477992058 CET	49737	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:00.478014946 CET	443	49737	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:00.478230000 CET	49736	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:00.478245020 CET	443	49736	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:00.484606028 CET	443	49725	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:00.484632015 CET	443	49725	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:00.484684944 CET	49725	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:00.484705925 CET	443	49725	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:00.484729052 CET	49725	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:00.515333891 CET	443	49735	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:00.530059099 CET	443	49738	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:00.530365944 CET	49737	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:00.530395031 CET	49736	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:00.530396938 CET	49725	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:00.530653954 CET	49738	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:00.530667067 CET	443	49738	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:00.531088114 CET	443	49738	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:00.531440973 CET	49738	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:00.531460047 CET	443	49739	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:00.531503916 CET	443	49738	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:00.531744957 CET	49739	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:00.531757116 CET	443	49739	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:00.531836987 CET	49738	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:00.532183886 CET	443	49739	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:00.532236099 CET	49739	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:00.532922983 CET	443	49739	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:00.532974958 CET	49739	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:00.533149004 CET	49739	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:00.533205032 CET	443	49739	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:00.533252954 CET	49739	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:00.575368881 CET	443	49738	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:00.576780081 CET	49739	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:00.576817036 CET	443	49739	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:00.619187117 CET	443	49725	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:00.619221926 CET	443	49725	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:00.619298935 CET	49725	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:00.619301081 CET	443	49725	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:00.619326115 CET	443	49725	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:00.619349003 CET	443	49725	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:00.619379997 CET	49725	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:00.619396925 CET	49725	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:00.623383999 CET	49739	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:00.639430046 CET	443	49725	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:00.639461994 CET	443	49725	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:00.639496088 CET	443	49725	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:00.639524937 CET	49725	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:00.639552116 CET	443	49725	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:00.639571905 CET	49725	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:00.639591932 CET	49725	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:00.659621954 CET	443	49725	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:00.659651995 CET	443	49725	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:00.659698963 CET	49725	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:00.659733057 CET	443	49725	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:00.659751892 CET	49725	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:00.659768105 CET	49725	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:00.674037933 CET	443	49725	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:00.674093962 CET	443	49725	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:00.674118042 CET	49725	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:00.674144983 CET	443	49725	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:00.674169064 CET	49725	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:00.676922083 CET	443	49725	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:00.677000046 CET	443	49725	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:00.677026033 CET	49725	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:00.677054882 CET	49725	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:00.677546978 CET	49725	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:00.677568913 CET	443	49725	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:00.831922054 CET	49749	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:00.831979036 CET	443	49749	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:00.832063913 CET	49749	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:00.832242966 CET	49749	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:00.832257986 CET	443	49749	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:00.853764057 CET	443	49741	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:00.854062080 CET	49741	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:00.854095936 CET	443	49741	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:00.854510069 CET	443	49741	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:00.854914904 CET	49741	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:00.854988098 CET	443	49741	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:00.855057955 CET	49741	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:00.882458925 CET	443	49742	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:00.882791996 CET	49742	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:00.882824898 CET	443	49742	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:00.883256912 CET	443	49742	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:00.883579969 CET	49742	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:00.883645058 CET	443	49742	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:00.883887053 CET	49742	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:00.885294914 CET	443	49743	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:00.885485888 CET	49743	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:00.885523081 CET	443	49743	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:00.885963917 CET	443	49743	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:00.886030912 CET	49743	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:00.886756897 CET	443	49743	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:00.886836052 CET	49743	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:00.887094021 CET	49743	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:00.887213945 CET	49743	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:00.887219906 CET	443	49743	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:00.896184921 CET	49741	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:00.896215916 CET	443	49741	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:00.898322105 CET	443	49744	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:00.898478985 CET	443	49744	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:00.898557901 CET	49744	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:00.900377989 CET	49744	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:00.900398970 CET	443	49744	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:00.927341938 CET	443	49743	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:00.927342892 CET	443	49742	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:00.936589956 CET	49743	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:00.936621904 CET	443	49743	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:00.984133005 CET	49743	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:01.001631975 CET	443	49735	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.007047892 CET	443	49737	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.007201910 CET	443	49736	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.014384985 CET	443	49735	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.014470100 CET	443	49735	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.014499903 CET	49735	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:01.014548063 CET	49735	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:01.016248941 CET	49735	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:01.016268015 CET	443	49735	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.055417061 CET	443	49736	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.055432081 CET	443	49736	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.055465937 CET	443	49736	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.055481911 CET	443	49736	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.055491924 CET	443	49736	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.055538893 CET	49736	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:01.055566072 CET	443	49736	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.055578947 CET	443	49736	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.055593014 CET	49736	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:01.055613995 CET	49736	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:01.059550047 CET	49737	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:01.060154915 CET	443	49737	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.060170889 CET	443	49737	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.060209036 CET	443	49737	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.060240984 CET	443	49737	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.060241938 CET	49737	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:01.060267925 CET	443	49737	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.060282946 CET	443	49737	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.060292006 CET	49737	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:01.060322046 CET	49737	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:01.066488981 CET	443	49738	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.066976070 CET	49750	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:01.067019939 CET	443	49750	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:01.067079067 CET	49750	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:01.067481995 CET	49750	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:01.067497015 CET	443	49750	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:01.068680048 CET	443	49739	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.072279930 CET	49751	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:01.072313070 CET	443	49751	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.072371960 CET	49751	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:01.072598934 CET	49751	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:01.072607994 CET	443	49751	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.074086905 CET	49736	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:01.074105024 CET	443	49736	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.077619076 CET	49737	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:01.077646017 CET	443	49737	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.108963013 CET	49739	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:01.111938953 CET	49738	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:01.112801075 CET	49752	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:01.112848997 CET	443	49752	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.112915993 CET	49752	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:01.113615990 CET	49752	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:01.113630056 CET	443	49752	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.120333910 CET	49753	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:01.120388985 CET	443	49753	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.120539904 CET	49753	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:01.120893002 CET	49753	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:01.120903969 CET	443	49753	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.121182919 CET	443	49738	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.121197939 CET	443	49738	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.121215105 CET	443	49738	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.121241093 CET	443	49738	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.121253967 CET	49738	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:01.121279955 CET	443	49738	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.121298075 CET	49738	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:01.121304035 CET	443	49738	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.121583939 CET	49738	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:01.204152107 CET	443	49739	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.204255104 CET	49739	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:01.204267979 CET	443	49739	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.205096960 CET	49739	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:01.255379915 CET	49754	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:01.255409002 CET	443	49754	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.255536079 CET	49754	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:01.257155895 CET	49754	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:01.257170916 CET	443	49754	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.304802895 CET	443	49738	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.304830074 CET	443	49738	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.304915905 CET	49738	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:01.304930925 CET	443	49738	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.304970980 CET	49738	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:01.326767921 CET	443	49738	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.326843023 CET	443	49738	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.326862097 CET	49738	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:01.326913118 CET	49738	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:01.417673111 CET	49739	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:01.417717934 CET	443	49739	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.418859959 CET	49755	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:01.418906927 CET	443	49755	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:01.419095993 CET	49755	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:01.436290979 CET	49755	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:01.436322927 CET	443	49755	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:01.467447042 CET	49738	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:01.467480898 CET	443	49738	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.469692945 CET	49756	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:01.469744921 CET	443	49756	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.469799042 CET	49756	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:01.470544100 CET	49756	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:01.470556021 CET	443	49756	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.483020067 CET	443	49741	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.483125925 CET	443	49741	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.483344078 CET	49741	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:01.490689039 CET	443	49742	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.490799904 CET	443	49742	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.490858078 CET	49742	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:01.504852057 CET	49741	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:01.504882097 CET	443	49741	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.505038023 CET	49742	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:01.505064011 CET	443	49742	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.527791977 CET	49757	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:01.527842999 CET	443	49757	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.528103113 CET	49757	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:01.528373003 CET	49757	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:01.528388977 CET	443	49757	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.541755915 CET	49758	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:01.541799068 CET	443	49758	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.541862965 CET	49758	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:01.542090893 CET	49758	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:01.542102098 CET	443	49758	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.547974110 CET	49759	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:01.548023939 CET	443	49759	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.548080921 CET	49759	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:01.548419952 CET	49759	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:01.548434019 CET	443	49759	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.551253080 CET	49760	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:01.551291943 CET	443	49760	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.551424026 CET	49760	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:01.551616907 CET	49760	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:01.551628113 CET	443	49760	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.596848011 CET	443	49747	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.597124100 CET	49747	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:01.597155094 CET	443	49747	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.597609043 CET	443	49747	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.597980022 CET	49747	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:01.598052025 CET	443	49747	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.598114967 CET	49747	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:01.600701094 CET	443	49743	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.613607883 CET	443	49743	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.613622904 CET	443	49743	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.613693953 CET	443	49743	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.613701105 CET	49743	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:01.613743067 CET	49743	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:01.613972902 CET	49743	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:01.613991022 CET	443	49743	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.614507914 CET	49762	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:01.614554882 CET	443	49762	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.614723921 CET	49762	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:01.615108967 CET	49762	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:01.615123034 CET	443	49762	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:01.639345884 CET	443	49747	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:02.202487946 CET	443	49714	172.217.21.36	192.168.2.8
Dec 5, 2024 20:20:02.202569962 CET	443	49714	172.217.21.36	192.168.2.8
Dec 5, 2024 20:20:02.202635050 CET	49714	443	192.168.2.8	172.217.21.36
Dec 5, 2024 20:20:02.204313040 CET	443	49747	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:02.204427004 CET	443	49747	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:02.204488039 CET	49747	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:02.206967115 CET	49747	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:02.206998110 CET	443	49747	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:02.401937962 CET	49714	443	192.168.2.8	172.217.21.36
Dec 5, 2024 20:20:02.401979923 CET	443	49714	172.217.21.36	192.168.2.8
Dec 5, 2024 20:20:02.402265072 CET	49764	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:02.402293921 CET	443	49764	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:02.402383089 CET	49764	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:02.402988911 CET	49764	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:02.403002977 CET	443	49764	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:02.421574116 CET	443	49750	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:02.424159050 CET	49750	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:02.424192905 CET	443	49750	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:02.425345898 CET	443	49750	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:02.425427914 CET	49750	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:02.426290035 CET	49750	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:02.426362038 CET	443	49750	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:02.426564932 CET	49750	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:02.426577091 CET	443	49750	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:02.466104984 CET	443	49748	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:02.466367006 CET	49748	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:02.466393948 CET	443	49748	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:02.466814995 CET	443	49748	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:02.466869116 CET	49748	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:02.467554092 CET	443	49748	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:02.467624903 CET	49748	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:02.467798948 CET	49748	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:02.467852116 CET	443	49748	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:02.467941046 CET	49748	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:02.468143940 CET	49750	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:02.514285088 CET	49748	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:02.514311075 CET	443	49748	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:02.554363012 CET	49748	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:02.651180029 CET	443	49749	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:02.651737928 CET	49749	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:02.651760101 CET	443	49749	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:02.652854919 CET	443	49749	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:02.652935982 CET	49749	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:02.653547049 CET	49749	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:02.653616905 CET	443	49749	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:02.657998085 CET	49749	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:02.658030987 CET	443	49749	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:02.703306913 CET	49749	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:03.119894981 CET	443	49750	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:03.120034933 CET	443	49750	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:03.120345116 CET	49750	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:03.121872902 CET	49750	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:03.121903896 CET	443	49750	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:03.150803089 CET	443	49751	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:03.151262999 CET	49751	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:03.151285887 CET	443	49751	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:03.151746035 CET	443	49751	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:03.152328968 CET	49751	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:03.152394056 CET	443	49751	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:03.152486086 CET	49751	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:03.168160915 CET	443	49748	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:03.168464899 CET	443	49753	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:03.169579983 CET	443	49752	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:03.169728041 CET	49753	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:03.169756889 CET	443	49753	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:03.169838905 CET	49752	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:03.169862032 CET	443	49752	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:03.170136929 CET	443	49753	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:03.170203924 CET	49753	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:03.170275927 CET	443	49752	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:03.170738935 CET	443	49753	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:03.170794010 CET	49753	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:03.173167944 CET	49752	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:03.173285961 CET	443	49752	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:03.173713923 CET	49753	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:03.173784018 CET	443	49753	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:03.174047947 CET	49752	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:03.174417973 CET	49753	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:03.174436092 CET	443	49753	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:03.195338011 CET	443	49751	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:03.202493906 CET	49751	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:03.214665890 CET	443	49748	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:03.214694977 CET	443	49748	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:03.214703083 CET	443	49748	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:03.214723110 CET	443	49748	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:03.214730978 CET	443	49748	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:03.214766979 CET	49748	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:03.214808941 CET	443	49748	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:03.214831114 CET	49748	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:03.214838982 CET	443	49748	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:03.214848042 CET	49748	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:03.215332031 CET	443	49752	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:03.218449116 CET	49753	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:03.265101910 CET	49748	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:03.364420891 CET	443	49748	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:03.364435911 CET	443	49748	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:03.364483118 CET	443	49748	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:03.364500999 CET	49748	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:03.364515066 CET	443	49748	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:03.364574909 CET	49748	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:03.365092993 CET	49748	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:03.365114927 CET	443	49748	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:03.365597963 CET	49765	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:03.365641117 CET	443	49765	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:03.365727901 CET	49765	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:03.366852045 CET	49765	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:03.366866112 CET	443	49765	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:03.410924911 CET	443	49755	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:03.411288977 CET	49755	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:03.411325932 CET	443	49755	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:03.412396908 CET	443	49755	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:03.412473917 CET	49755	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:03.412863970 CET	49755	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:03.412930965 CET	443	49755	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:03.413330078 CET	49755	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:03.413342953 CET	443	49755	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:03.453489065 CET	49755	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:03.454195023 CET	443	49749	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:03.464538097 CET	443	49754	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:03.464780092 CET	49754	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:03.464808941 CET	443	49754	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:03.465240955 CET	443	49754	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:03.465312958 CET	49754	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:03.465961933 CET	443	49754	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:03.466013908 CET	49754	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:03.466181040 CET	49754	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:03.466239929 CET	443	49754	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:03.472075939 CET	49754	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:03.472104073 CET	443	49754	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:03.496198893 CET	443	49749	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:03.496215105 CET	443	49749	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:03.496227026 CET	443	49749	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:03.496326923 CET	49749	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:03.496373892 CET	443	49749	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:03.496390104 CET	443	49749	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:03.496428967 CET	49749	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:03.520984888 CET	49754	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:03.991529942 CET	443	49749	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:03.991544008 CET	443	49749	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:03.991581917 CET	443	49749	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:03.991601944 CET	443	49749	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:03.991624117 CET	49749	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:03.991653919 CET	443	49749	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:03.991681099 CET	49749	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:03.991700888 CET	49749	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:04.001221895 CET	443	49758	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.001595020 CET	49758	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.001621962 CET	443	49758	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.001863003 CET	443	49760	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.002083063 CET	443	49758	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.002142906 CET	49760	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.002166033 CET	443	49760	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.002569914 CET	49758	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.002640009 CET	443	49760	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.002688885 CET	49760	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.002768040 CET	443	49758	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.002769947 CET	49758	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.003400087 CET	443	49760	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.003454924 CET	49760	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.003674030 CET	49760	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.003746033 CET	443	49760	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.003875971 CET	49760	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.003882885 CET	443	49760	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.004153967 CET	443	49759	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.004338980 CET	443	49757	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.004355907 CET	49759	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.004369974 CET	443	49759	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.004640102 CET	49757	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.004651070 CET	443	49757	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.004780054 CET	443	49759	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.004837990 CET	49759	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.005181074 CET	443	49757	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.005382061 CET	443	49749	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:04.005402088 CET	443	49749	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:04.005436897 CET	49749	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:04.005445004 CET	443	49749	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:04.005471945 CET	49749	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:04.005496025 CET	49749	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:04.005757093 CET	443	49759	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.005778074 CET	49757	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.005794048 CET	49759	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.005891085 CET	443	49757	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.006045103 CET	49759	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.006113052 CET	443	49759	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.006397009 CET	49757	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.006397009 CET	49759	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.006414890 CET	443	49759	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.006947994 CET	443	49751	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.007050991 CET	443	49751	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.007101059 CET	49751	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.007754087 CET	49751	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.007770061 CET	443	49751	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.008317947 CET	443	49752	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.008424044 CET	443	49753	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.012090921 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.012130976 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.012413979 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.012685061 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.012700081 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.014713049 CET	443	49752	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.014744997 CET	443	49752	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.014774084 CET	49752	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.014781952 CET	443	49752	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.014812946 CET	49752	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.014827967 CET	49752	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.015326977 CET	49752	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.015337944 CET	443	49752	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.015445948 CET	443	49753	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.015460014 CET	443	49753	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.015475988 CET	443	49753	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.015515089 CET	49753	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.015549898 CET	443	49753	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.015571117 CET	49753	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.015597105 CET	49753	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.020807028 CET	49767	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.020831108 CET	443	49767	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.020960093 CET	49767	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.021462917 CET	49767	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.021471977 CET	443	49767	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.042512894 CET	49758	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.042536974 CET	443	49758	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.051330090 CET	443	49757	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.057796001 CET	49759	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.057795048 CET	49760	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.119127989 CET	443	49749	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:04.119180918 CET	443	49749	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:04.119208097 CET	49749	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:04.119229078 CET	443	49749	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:04.119266033 CET	49749	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:04.119273901 CET	49749	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:04.142271042 CET	443	49756	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.142587900 CET	49756	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.142613888 CET	443	49756	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.143049955 CET	443	49756	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.143112898 CET	49756	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.143763065 CET	443	49756	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.143810034 CET	49756	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.144007921 CET	49756	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.144072056 CET	443	49756	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.144248962 CET	49756	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.144257069 CET	443	49756	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.155806065 CET	443	49749	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:04.155829906 CET	443	49749	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:04.155873060 CET	49749	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:04.155900002 CET	443	49749	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:04.155925989 CET	49749	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:04.155942917 CET	49749	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:04.192682981 CET	443	49749	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:04.192708015 CET	443	49749	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:04.192779064 CET	49749	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:04.192810059 CET	443	49749	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:04.192974091 CET	49749	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:04.194792986 CET	49756	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.205514908 CET	443	49753	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.205547094 CET	443	49753	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.205590010 CET	49753	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.205621958 CET	443	49753	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.205636024 CET	49753	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.205729008 CET	49753	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.224570990 CET	443	49749	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:04.224591970 CET	443	49749	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:04.224627972 CET	49749	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:04.224643946 CET	443	49749	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:04.224668026 CET	49749	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:04.224689007 CET	49749	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:04.248821974 CET	443	49754	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.255899906 CET	443	49753	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.255932093 CET	443	49753	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.256006956 CET	49753	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.256027937 CET	443	49753	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.256066084 CET	49753	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.261909008 CET	443	49754	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.261919022 CET	443	49754	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.261975050 CET	49754	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.261991978 CET	443	49754	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.262532949 CET	49754	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.270833969 CET	49754	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.270862103 CET	443	49754	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.322556019 CET	443	49749	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:04.322586060 CET	443	49749	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:04.322624922 CET	49749	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:04.322652102 CET	443	49749	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:04.322665930 CET	49749	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:04.322726965 CET	49749	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:04.345689058 CET	443	49755	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:04.345763922 CET	443	49755	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:04.345812082 CET	49755	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:04.346174002 CET	49755	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:04.346189976 CET	443	49755	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:04.347143888 CET	49768	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:04.347179890 CET	443	49768	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:04.347253084 CET	49768	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:04.347695112 CET	49768	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:04.347709894 CET	443	49768	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:04.348064899 CET	49769	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.348109961 CET	443	49769	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.348166943 CET	49769	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.348390102 CET	49769	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.348407984 CET	443	49769	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.365520954 CET	443	49749	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:04.365544081 CET	443	49749	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:04.365576029 CET	49749	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:04.365602016 CET	443	49749	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:04.365622997 CET	49749	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:04.365637064 CET	49749	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:04.366318941 CET	443	49753	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.366348982 CET	443	49753	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.366384983 CET	49753	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.366396904 CET	443	49753	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.366446972 CET	49753	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.366446972 CET	49753	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.390995979 CET	443	49749	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:04.391021967 CET	443	49749	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:04.391061068 CET	49749	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:04.391093016 CET	443	49749	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:04.391115904 CET	49749	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:04.391132116 CET	49749	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:04.403316975 CET	443	49753	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.403333902 CET	443	49753	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.403394938 CET	49753	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.403408051 CET	443	49753	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.403621912 CET	49753	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.415179014 CET	443	49753	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.415241003 CET	49753	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.415268898 CET	443	49753	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.415286064 CET	443	49753	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.415330887 CET	49753	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.415555954 CET	49753	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.415575981 CET	443	49753	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.415592909 CET	49753	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.415613890 CET	49753	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.427855968 CET	443	49749	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:04.427881002 CET	443	49749	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:04.427917957 CET	443	49749	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:04.427930117 CET	49749	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:04.427958965 CET	443	49749	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:04.427974939 CET	49749	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:04.427994967 CET	443	49749	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:04.428031921 CET	49749	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:04.429080963 CET	49749	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:04.429104090 CET	443	49749	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:04.463609934 CET	49770	443	192.168.2.8	172.217.19.195
Dec 5, 2024 20:20:04.463654995 CET	443	49770	172.217.19.195	192.168.2.8
Dec 5, 2024 20:20:04.463721991 CET	49770	443	192.168.2.8	172.217.19.195
Dec 5, 2024 20:20:04.463999033 CET	49770	443	192.168.2.8	172.217.19.195
Dec 5, 2024 20:20:04.464016914 CET	443	49770	172.217.19.195	192.168.2.8
Dec 5, 2024 20:20:04.534378052 CET	443	49758	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.537050962 CET	443	49759	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.538080931 CET	443	49757	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.538558960 CET	443	49760	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.541158915 CET	443	49759	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.541225910 CET	49759	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.541239023 CET	443	49759	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.541460037 CET	49759	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.541508913 CET	443	49759	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.541558027 CET	49759	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.541949034 CET	49771	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.541997910 CET	443	49771	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.542051077 CET	49771	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.542546988 CET	49771	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.542562008 CET	443	49771	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.548644066 CET	443	49758	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.548685074 CET	443	49758	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.548712015 CET	443	49758	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.548717022 CET	49758	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.548752069 CET	49758	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.549536943 CET	49758	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.549555063 CET	443	49758	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.549938917 CET	49772	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.549963951 CET	443	49772	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.550060987 CET	49772	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.551139116 CET	49772	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.551155090 CET	443	49772	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.580019951 CET	49757	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.580127954 CET	49760	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.584482908 CET	443	49757	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.584497929 CET	443	49757	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.584547997 CET	443	49757	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.584570885 CET	443	49757	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.584609032 CET	49757	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.584609985 CET	49757	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.584625006 CET	443	49757	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.584639072 CET	49757	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.584681988 CET	49757	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.585035086 CET	49757	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.585052013 CET	443	49757	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.585462093 CET	49773	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.585485935 CET	443	49773	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.585702896 CET	49773	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.586210012 CET	49773	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.586222887 CET	443	49773	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.587714911 CET	443	49760	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.587726116 CET	443	49760	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.587747097 CET	443	49760	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.587755919 CET	443	49760	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.587775946 CET	443	49760	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.587779045 CET	49760	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.587802887 CET	443	49760	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.587815046 CET	443	49760	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.587830067 CET	49760	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.587861061 CET	49760	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.588103056 CET	49760	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.588118076 CET	443	49760	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.679009914 CET	443	49756	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.701977015 CET	443	49762	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.702209949 CET	49762	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.702230930 CET	443	49762	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.702645063 CET	443	49762	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.702707052 CET	49762	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.703366041 CET	443	49762	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.703428030 CET	49762	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.703574896 CET	49762	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.703636885 CET	443	49762	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.703722000 CET	49762	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.728614092 CET	443	49756	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.728622913 CET	443	49756	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.728647947 CET	443	49756	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.728671074 CET	49756	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.728691101 CET	443	49756	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.728699923 CET	443	49756	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.728729010 CET	49756	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.728760958 CET	49756	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.745107889 CET	443	49756	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.745170116 CET	49756	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.745187998 CET	443	49756	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.745208025 CET	443	49756	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.745229006 CET	49756	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.745265007 CET	49756	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.745601892 CET	49756	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.745615959 CET	443	49756	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.746869087 CET	49762	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.746886015 CET	443	49762	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.752284050 CET	49774	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.752315044 CET	443	49774	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.752368927 CET	49774	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.752623081 CET	49774	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.752635002 CET	443	49774	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.753865957 CET	49775	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.753897905 CET	443	49775	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.753967047 CET	49775	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.754149914 CET	49775	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:04.754162073 CET	443	49775	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:04.795758009 CET	49762	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:05.417082071 CET	443	49762	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:05.464795113 CET	443	49762	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:05.464806080 CET	443	49762	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:05.464837074 CET	443	49762	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:05.464854002 CET	443	49762	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:05.464860916 CET	443	49762	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:05.464864969 CET	49762	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:05.464895964 CET	443	49762	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:05.464904070 CET	49762	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:05.464907885 CET	443	49762	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:05.464931965 CET	49762	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:05.510868073 CET	443	49765	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:05.511118889 CET	49765	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:05.511149883 CET	443	49765	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:05.511578083 CET	443	49765	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:05.511929035 CET	49765	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:05.512001991 CET	443	49765	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:05.512064934 CET	49765	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:05.521723032 CET	443	49764	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:05.521945000 CET	49764	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:05.521975040 CET	443	49764	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:05.522423029 CET	443	49764	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:05.522803068 CET	49764	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:05.522929907 CET	443	49764	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:05.522955894 CET	49764	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:05.559329033 CET	443	49765	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:05.560893059 CET	49765	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:05.563347101 CET	443	49764	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:05.564546108 CET	49764	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:05.656608105 CET	443	49762	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:05.656627893 CET	443	49762	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:05.656667948 CET	443	49762	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:05.656682014 CET	443	49762	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:05.656703949 CET	49762	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:05.656718969 CET	443	49762	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:05.656781912 CET	49762	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:05.672781944 CET	443	49762	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:05.672838926 CET	49762	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:05.672853947 CET	443	49762	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:05.672868013 CET	443	49762	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:05.672909975 CET	49762	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:05.673101902 CET	49762	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:05.673120022 CET	443	49762	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.053121090 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.054786921 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.054816961 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.055253983 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.055979013 CET	443	49767	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.056171894 CET	49767	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.056200981 CET	443	49767	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.056438923 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.056508064 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.056577921 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.056641102 CET	443	49767	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.056998968 CET	49767	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.057074070 CET	443	49767	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.057126045 CET	49767	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.061261892 CET	443	49765	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.061656952 CET	443	49765	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.061722040 CET	49765	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.063399076 CET	443	49764	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.063673019 CET	49765	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.063685894 CET	443	49765	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.099337101 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.099340916 CET	443	49767	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.109021902 CET	49764	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.117965937 CET	443	49764	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.117978096 CET	443	49764	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.118000031 CET	443	49764	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.118006945 CET	443	49764	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.118022919 CET	443	49764	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.118046045 CET	49764	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.118058920 CET	443	49764	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.118114948 CET	49764	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.127429962 CET	443	49768	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:06.127742052 CET	49768	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:06.127764940 CET	443	49768	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:06.128093958 CET	443	49768	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:06.128458023 CET	49768	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:06.128544092 CET	443	49768	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:06.128612995 CET	49768	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:06.128668070 CET	49768	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:06.128693104 CET	443	49768	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:06.286286116 CET	443	49764	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.286303997 CET	443	49764	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.286338091 CET	443	49764	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.286550045 CET	49764	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.286587000 CET	443	49764	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.286633015 CET	49764	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.339162111 CET	443	49764	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.339191914 CET	443	49764	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.339303017 CET	49764	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.339339972 CET	443	49764	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.340301037 CET	49764	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.369287014 CET	443	49770	172.217.19.195	192.168.2.8
Dec 5, 2024 20:20:06.369628906 CET	49770	443	192.168.2.8	172.217.19.195
Dec 5, 2024 20:20:06.369657993 CET	443	49770	172.217.19.195	192.168.2.8
Dec 5, 2024 20:20:06.370204926 CET	443	49770	172.217.19.195	192.168.2.8
Dec 5, 2024 20:20:06.370225906 CET	443	49770	172.217.19.195	192.168.2.8
Dec 5, 2024 20:20:06.370286942 CET	49770	443	192.168.2.8	172.217.19.195
Dec 5, 2024 20:20:06.370301962 CET	443	49770	172.217.19.195	192.168.2.8
Dec 5, 2024 20:20:06.370338917 CET	49770	443	192.168.2.8	172.217.19.195
Dec 5, 2024 20:20:06.370951891 CET	443	49770	172.217.19.195	192.168.2.8
Dec 5, 2024 20:20:06.372025013 CET	49770	443	192.168.2.8	172.217.19.195
Dec 5, 2024 20:20:06.372114897 CET	443	49770	172.217.19.195	192.168.2.8
Dec 5, 2024 20:20:06.372212887 CET	49770	443	192.168.2.8	172.217.19.195
Dec 5, 2024 20:20:06.372234106 CET	443	49770	172.217.19.195	192.168.2.8
Dec 5, 2024 20:20:06.385044098 CET	443	49769	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.385405064 CET	49769	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.385445118 CET	443	49769	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.385867119 CET	443	49769	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.386288881 CET	49769	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.386332035 CET	49769	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.386362076 CET	443	49769	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.421392918 CET	49770	443	192.168.2.8	172.217.19.195
Dec 5, 2024 20:20:06.436053038 CET	49769	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.451284885 CET	443	49764	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.451330900 CET	443	49764	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.451527119 CET	49764	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.451556921 CET	443	49764	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.451601028 CET	49764	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.485724926 CET	443	49764	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.485759020 CET	443	49764	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.485968113 CET	49764	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.485996008 CET	443	49764	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.486042023 CET	49764	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.512336969 CET	443	49764	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.512363911 CET	443	49764	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.512557983 CET	49764	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.512586117 CET	443	49764	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.512629032 CET	49764	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.531430960 CET	443	49764	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.531456947 CET	443	49764	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.531522989 CET	49764	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.531532049 CET	443	49764	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.531588078 CET	49764	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.572567940 CET	443	49764	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.572588921 CET	443	49764	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.572643995 CET	49764	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.572664022 CET	443	49764	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.572705984 CET	49764	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.590555906 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.592530966 CET	443	49767	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.595107079 CET	443	49772	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.595457077 CET	443	49771	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.595686913 CET	49772	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.595705986 CET	443	49772	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.595837116 CET	49771	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.595858097 CET	443	49771	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.596173048 CET	443	49772	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.596265078 CET	443	49771	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.596318960 CET	49771	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.596519947 CET	49772	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.596600056 CET	443	49772	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.596842051 CET	49772	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.596995115 CET	443	49771	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.597038031 CET	49771	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.597224951 CET	49771	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.597280025 CET	443	49771	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.597398996 CET	49771	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.603430033 CET	443	49767	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.603487968 CET	49767	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.603492022 CET	443	49767	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.603581905 CET	49767	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.604032993 CET	49767	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.604049921 CET	443	49767	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.608805895 CET	49776	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.608844042 CET	443	49776	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.609335899 CET	49776	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.610102892 CET	49777	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.610145092 CET	443	49777	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.610481977 CET	49776	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.610491037 CET	443	49776	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.610512018 CET	49777	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.610768080 CET	49777	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.610780001 CET	443	49777	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.614419937 CET	443	49773	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.614619970 CET	49773	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.614638090 CET	443	49773	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.615034103 CET	443	49773	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.615083933 CET	49773	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.615775108 CET	443	49773	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.615816116 CET	49773	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.616085052 CET	49773	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.616085052 CET	49773	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.616132975 CET	443	49773	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.639328003 CET	443	49771	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.640626907 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.640642881 CET	49771	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.640645981 CET	49772	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.640656948 CET	443	49771	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.640661001 CET	443	49772	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.643946886 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.643959045 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.643990040 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.644005060 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.644006014 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.644027948 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.644033909 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.644059896 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.644087076 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.655915022 CET	49773	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.655945063 CET	443	49773	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.659446001 CET	443	49764	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.659472942 CET	443	49764	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.659548044 CET	49764	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.659571886 CET	443	49764	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.660376072 CET	49764	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.668193102 CET	443	49764	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.668261051 CET	49764	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.668267012 CET	443	49764	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.668304920 CET	49764	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.668308973 CET	443	49764	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.668355942 CET	49764	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.668518066 CET	49764	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.668529987 CET	443	49764	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.672521114 CET	49778	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.672548056 CET	443	49778	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.672636032 CET	49778	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.674319029 CET	49778	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.674326897 CET	443	49778	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.677169085 CET	49779	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.677184105 CET	443	49779	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.677247047 CET	49779	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.677438021 CET	49779	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.677449942 CET	443	49779	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.687613010 CET	49771	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.703340054 CET	49773	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.727659941 CET	443	49775	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.729327917 CET	49775	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.729352951 CET	443	49775	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.729787111 CET	443	49775	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.730390072 CET	49775	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.730458021 CET	443	49775	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.730506897 CET	49775	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.730639935 CET	443	49774	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.730814934 CET	49774	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.730834961 CET	443	49774	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.731479883 CET	443	49774	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.731764078 CET	49774	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.731843948 CET	49774	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.731846094 CET	443	49774	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.740179062 CET	49717	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:06.740219116 CET	49717	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:06.740259886 CET	443	49717	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:06.743335009 CET	49780	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:06.743350029 CET	443	49780	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:06.743422985 CET	49780	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:06.743988037 CET	49780	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:06.743998051 CET	443	49780	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:06.750904083 CET	443	49768	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:06.751125097 CET	443	49768	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:06.752042055 CET	49768	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:06.752204895 CET	49768	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:06.752228022 CET	443	49768	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:06.755286932 CET	49781	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:06.755345106 CET	443	49781	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:06.755428076 CET	49781	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:06.755635977 CET	49781	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:06.755650043 CET	443	49781	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:06.771338940 CET	443	49775	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.779320955 CET	443	49774	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.781208992 CET	49774	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.781306982 CET	49775	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.805732965 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.805761099 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.805847883 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.805871010 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.805912018 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.853740931 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.853773117 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.853944063 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.853975058 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.854022980 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.926506042 CET	443	49769	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.945770025 CET	443	49769	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.945786953 CET	443	49769	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.945866108 CET	443	49769	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.946036100 CET	49769	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.946036100 CET	49769	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.946470022 CET	49769	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.946491957 CET	443	49769	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.950674057 CET	49782	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.950722933 CET	443	49782	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.951462984 CET	49782	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.952377081 CET	49782	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.952392101 CET	443	49782	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.979429007 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.979461908 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.979693890 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:06.979731083 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:06.979775906 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.005588055 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.005609989 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.005717993 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.005750895 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.005918980 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.036180019 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.036199093 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.036320925 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.036356926 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.036530018 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.060584068 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.060610056 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.060796022 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.060834885 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.060878992 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.112709045 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.112734079 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.112924099 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.112955093 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.112999916 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.143157959 CET	443	49772	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.143364906 CET	443	49772	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.144448042 CET	49772	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.144833088 CET	49772	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.144851923 CET	443	49772	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.145101070 CET	49783	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.145123959 CET	443	49783	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.145977020 CET	49783	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.146229029 CET	49783	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.146246910 CET	443	49783	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.149281979 CET	443	49771	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.173113108 CET	443	49773	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.187051058 CET	443	49771	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.187067032 CET	443	49771	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.187098980 CET	443	49771	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.187114954 CET	443	49771	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.187127113 CET	443	49771	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.187186003 CET	49771	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.187191963 CET	443	49771	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.187266111 CET	49771	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.187525988 CET	49771	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.187547922 CET	443	49771	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.206762075 CET	443	49770	172.217.19.195	192.168.2.8
Dec 5, 2024 20:20:07.213915110 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.213942051 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.214034081 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.214059114 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.214101076 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.216698885 CET	49773	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.219676018 CET	443	49770	172.217.19.195	192.168.2.8
Dec 5, 2024 20:20:07.219744921 CET	49770	443	192.168.2.8	172.217.19.195
Dec 5, 2024 20:20:07.219772100 CET	443	49770	172.217.19.195	192.168.2.8
Dec 5, 2024 20:20:07.220102072 CET	49770	443	192.168.2.8	172.217.19.195
Dec 5, 2024 20:20:07.220148087 CET	443	49770	172.217.19.195	192.168.2.8
Dec 5, 2024 20:20:07.220199108 CET	49770	443	192.168.2.8	172.217.19.195
Dec 5, 2024 20:20:07.228071928 CET	443	49773	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.228086948 CET	443	49773	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.228122950 CET	443	49773	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.228133917 CET	443	49773	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.228141069 CET	49773	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.228162050 CET	443	49773	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.228173971 CET	443	49773	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.228183985 CET	49773	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.228208065 CET	49773	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.228499889 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.228528023 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.228563070 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.228585958 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.228605986 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.229114056 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.241988897 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.242023945 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.242095947 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.242116928 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.242158890 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.253974915 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.254000902 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.254072905 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.254095078 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.254132032 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.265343904 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.265361071 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.265443087 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.265460014 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.265511036 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.275759935 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.275784969 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.275850058 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.275868893 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.275913000 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.287941933 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.287959099 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.288026094 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.288038015 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.288078070 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.302030087 CET	443	49775	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.303777933 CET	443	49774	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.303910017 CET	443	49774	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.304255009 CET	49774	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.304441929 CET	49774	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.304462910 CET	443	49774	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.307284117 CET	49784	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.307346106 CET	443	49784	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.307423115 CET	49784	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.307827950 CET	49784	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.307837963 CET	443	49784	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.308201075 CET	49785	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.308235884 CET	443	49785	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.308286905 CET	49785	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.308522940 CET	49785	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.308532953 CET	443	49785	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.349483013 CET	443	49717	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:07.349536896 CET	443	49717	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:07.349617958 CET	49717	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:07.349642038 CET	443	49717	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:07.351599932 CET	443	49775	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.351618052 CET	443	49775	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.351634026 CET	443	49775	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.351640940 CET	443	49775	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.351649046 CET	443	49775	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.351661921 CET	49775	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.351680994 CET	443	49775	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.351705074 CET	443	49775	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.351706028 CET	49775	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.351726055 CET	49775	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.357398033 CET	443	49717	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:07.357436895 CET	443	49717	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:07.357479095 CET	49717	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:07.357489109 CET	443	49717	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:07.357532024 CET	49717	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:07.357537985 CET	443	49717	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:07.357573986 CET	49717	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:07.365784883 CET	49717	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:07.365803957 CET	443	49717	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:07.367568970 CET	49787	443	192.168.2.8	172.217.19.195
Dec 5, 2024 20:20:07.367615938 CET	443	49787	172.217.19.195	192.168.2.8
Dec 5, 2024 20:20:07.367671967 CET	49787	443	192.168.2.8	172.217.19.195
Dec 5, 2024 20:20:07.367990971 CET	443	49775	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.368048906 CET	49775	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.368060112 CET	443	49775	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.368077993 CET	443	49775	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.368102074 CET	49775	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.368133068 CET	49775	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.368483067 CET	49788	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.368526936 CET	443	49788	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.368587017 CET	49788	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.369054079 CET	49789	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:07.369090080 CET	443	49789	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:07.369132996 CET	49789	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:07.369429111 CET	49787	443	192.168.2.8	172.217.19.195
Dec 5, 2024 20:20:07.369446993 CET	443	49787	172.217.19.195	192.168.2.8
Dec 5, 2024 20:20:07.369906902 CET	49790	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:07.369923115 CET	443	49790	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:07.369976997 CET	49790	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:07.370078087 CET	49788	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.370093107 CET	443	49788	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.370260954 CET	49789	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:07.370276928 CET	443	49789	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:07.370388985 CET	49775	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.370403051 CET	443	49775	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.370986938 CET	49790	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:07.371009111 CET	443	49790	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:07.393614054 CET	443	49773	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.393640995 CET	443	49773	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.393686056 CET	443	49773	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.393697977 CET	443	49773	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.393891096 CET	49773	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.393891096 CET	49773	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.393913984 CET	443	49773	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.393961906 CET	49773	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.398982048 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.399008989 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.399095058 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.399122953 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.399166107 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.408243895 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.408277035 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.408349037 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.408358097 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.408390045 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.417515039 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.417531967 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.417608976 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.417618036 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.417654037 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.425534964 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.425559044 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.425621986 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.425631046 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.425673008 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.434320927 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.434338093 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.434406996 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.434427023 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.434468985 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.442482948 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.442501068 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.442580938 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.442596912 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.442636013 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.449240923 CET	443	49773	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.449269056 CET	443	49773	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.449376106 CET	49773	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.449413061 CET	443	49773	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.449454069 CET	49773	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.451411009 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.451428890 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.451497078 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.451514959 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.451570988 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.460146904 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.460165024 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.460247040 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.460261106 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.460302114 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.511177063 CET	49791	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:07.511236906 CET	443	49791	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:07.511331081 CET	49791	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:07.511540890 CET	49791	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:07.511549950 CET	443	49791	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:07.557825089 CET	443	49773	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.557868004 CET	443	49773	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.558068037 CET	49773	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.558096886 CET	443	49773	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.558142900 CET	49773	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.590662003 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.590703964 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.590945959 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.590986013 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.591033936 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.597244978 CET	443	49773	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.597275972 CET	443	49773	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.597362041 CET	49773	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.597385883 CET	443	49773	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.597421885 CET	49773	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.597978115 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.598000050 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.598033905 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.598045111 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.598073959 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.598092079 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.605530024 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.605555058 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.605639935 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.605667114 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.605720043 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.608329058 CET	443	49773	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.608417034 CET	49773	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.608427048 CET	443	49773	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.608464956 CET	49773	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.609000921 CET	49773	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.609041929 CET	443	49773	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.609054089 CET	49773	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.609086037 CET	49773	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.613190889 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.613214016 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.613307953 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.613323927 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.613359928 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.619870901 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.619893074 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.619960070 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.619971037 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.620007038 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.627022028 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.627046108 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.627099991 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.627110004 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.627141953 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.627168894 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.634653091 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.634673119 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.634769917 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.634782076 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.634816885 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.642211914 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.642234087 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.642326117 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.642338991 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.642378092 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.783250093 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.783277988 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.783394098 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.783425093 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.783468008 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.790327072 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.790347099 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.790419102 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.790426970 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.790462017 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.797791004 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.797816038 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.797899008 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.797905922 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.797944069 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.805252075 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.805268049 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.805329084 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.805341005 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.805380106 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.808831930 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.808897018 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.808902979 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.808914900 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.808960915 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.809176922 CET	49766	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.809189081 CET	443	49766	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.825014114 CET	49792	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.825064898 CET	443	49792	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.825136900 CET	49792	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.825349092 CET	49792	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.825360060 CET	443	49792	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.825943947 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.825978994 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.826026917 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.826200962 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:07.826215982 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:07.991652966 CET	443	49780	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:08.035329103 CET	49780	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:08.053988934 CET	49780	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:08.054001093 CET	443	49780	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:08.054542065 CET	443	49780	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:08.092603922 CET	49780	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:08.092775106 CET	443	49780	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:08.092850924 CET	49780	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:08.092878103 CET	443	49780	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:08.093498945 CET	49780	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:08.135329962 CET	443	49780	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:08.362551928 CET	443	49781	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:08.362895966 CET	49781	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:08.362916946 CET	443	49781	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:08.363286972 CET	443	49781	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:08.363598108 CET	49781	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:08.363668919 CET	443	49781	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:08.363744020 CET	49781	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:08.411333084 CET	443	49781	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:08.481122017 CET	443	49776	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:08.481519938 CET	49776	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:08.481544971 CET	443	49776	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:08.482002020 CET	443	49776	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:08.482841015 CET	49776	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:08.482920885 CET	443	49776	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:08.483019114 CET	49776	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:08.505326986 CET	443	49778	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:08.505637884 CET	49778	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:08.505671024 CET	443	49778	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:08.506092072 CET	443	49778	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:08.506398916 CET	49778	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:08.506455898 CET	443	49778	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:08.506519079 CET	49778	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:08.506520033 CET	443	49779	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:08.506695032 CET	49779	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:08.506722927 CET	443	49779	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:08.507122040 CET	443	49779	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:08.507404089 CET	49779	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:08.507472038 CET	443	49779	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:08.507492065 CET	49779	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:08.527334929 CET	443	49776	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:08.547339916 CET	443	49778	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:08.551337957 CET	443	49779	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:08.561355114 CET	49779	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:08.586687088 CET	443	49790	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:08.587054014 CET	49790	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:08.587083101 CET	443	49790	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:08.587325096 CET	443	49789	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:08.587461948 CET	443	49790	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:08.587543011 CET	49789	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:08.587568045 CET	443	49789	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:08.587878942 CET	49790	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:08.587929010 CET	443	49789	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:08.587946892 CET	443	49790	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:08.588383913 CET	49789	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:08.588455915 CET	443	49789	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:08.588555098 CET	49790	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:08.588594913 CET	443	49790	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:08.588664055 CET	49789	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:08.588682890 CET	443	49789	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:08.671497107 CET	443	49777	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:08.671786070 CET	49777	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:08.671812057 CET	443	49777	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:08.672219038 CET	443	49777	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:08.672641993 CET	49777	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:08.672704935 CET	443	49777	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:08.672801018 CET	49777	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:08.680627108 CET	443	49780	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:08.680686951 CET	443	49780	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:08.680731058 CET	49780	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:08.680747032 CET	443	49780	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:08.681055069 CET	443	49780	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:08.681118965 CET	49780	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:08.681126118 CET	443	49780	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:08.697240114 CET	49776	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:08.697282076 CET	443	49780	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:08.697330952 CET	443	49776	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:08.697340012 CET	49780	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:08.697367907 CET	443	49780	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:08.697388887 CET	49776	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:08.699996948 CET	49778	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:08.700109959 CET	443	49778	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:08.700151920 CET	49778	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:08.701386929 CET	49794	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:08.701430082 CET	443	49794	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:08.701483965 CET	49794	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:08.703752041 CET	49790	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:08.703835964 CET	443	49790	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:08.703887939 CET	49790	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:08.705612898 CET	443	49780	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:08.705672026 CET	49780	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:08.705694914 CET	443	49780	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:08.705944061 CET	443	49780	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:08.705990076 CET	49780	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:08.705997944 CET	443	49780	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:08.713325977 CET	443	49780	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:08.713409901 CET	49780	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:08.715337992 CET	443	49777	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:08.723582983 CET	443	49791	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:08.728781939 CET	49791	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:08.728806019 CET	443	49791	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:08.729304075 CET	443	49791	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:08.729377031 CET	49791	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:08.729681015 CET	49794	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:08.729711056 CET	443	49794	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:08.729861975 CET	49780	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:08.729896069 CET	443	49780	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:08.730051041 CET	443	49791	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:08.730086088 CET	49791	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:08.735997915 CET	49791	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:08.736378908 CET	443	49791	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:08.737221003 CET	49791	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:08.737231016 CET	443	49791	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:08.742249012 CET	49795	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:08.742295980 CET	443	49795	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:08.742355108 CET	49795	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:08.742805004 CET	49795	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:08.742819071 CET	443	49795	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:08.744868040 CET	49796	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:08.744916916 CET	443	49796	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:08.744977951 CET	49796	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:08.745446920 CET	49796	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:08.745471954 CET	443	49796	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:08.770989895 CET	443	49782	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:08.771291018 CET	49782	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:08.771306038 CET	443	49782	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:08.771724939 CET	443	49782	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:08.772131920 CET	49782	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:08.772245884 CET	443	49782	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:08.772406101 CET	49782	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:08.779331923 CET	49791	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:08.819334984 CET	443	49782	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:08.998822927 CET	443	49783	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:08.999721050 CET	49783	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:08.999753952 CET	443	49783	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.000264883 CET	443	49783	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.000710011 CET	49783	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.000794888 CET	443	49783	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.000868082 CET	49783	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.033473969 CET	443	49781	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:09.033680916 CET	443	49781	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:09.033752918 CET	49781	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:09.034357071 CET	443	49779	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.034575939 CET	49781	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:09.034591913 CET	443	49781	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:09.046885967 CET	443	49779	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.046900988 CET	443	49779	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.046968937 CET	443	49779	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.046969891 CET	49779	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.047018051 CET	49779	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.047329903 CET	443	49783	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.054301977 CET	49779	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.054328918 CET	443	49779	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.066940069 CET	443	49787	172.217.19.195	192.168.2.8
Dec 5, 2024 20:20:09.067181110 CET	49787	443	192.168.2.8	172.217.19.195
Dec 5, 2024 20:20:09.067207098 CET	443	49787	172.217.19.195	192.168.2.8
Dec 5, 2024 20:20:09.067743063 CET	443	49787	172.217.19.195	192.168.2.8
Dec 5, 2024 20:20:09.067759991 CET	443	49787	172.217.19.195	192.168.2.8
Dec 5, 2024 20:20:09.067814112 CET	49787	443	192.168.2.8	172.217.19.195
Dec 5, 2024 20:20:09.067826986 CET	443	49787	172.217.19.195	192.168.2.8
Dec 5, 2024 20:20:09.067859888 CET	49787	443	192.168.2.8	172.217.19.195
Dec 5, 2024 20:20:09.068506002 CET	443	49787	172.217.19.195	192.168.2.8
Dec 5, 2024 20:20:09.068731070 CET	49787	443	192.168.2.8	172.217.19.195
Dec 5, 2024 20:20:09.068815947 CET	443	49787	172.217.19.195	192.168.2.8
Dec 5, 2024 20:20:09.068877935 CET	49787	443	192.168.2.8	172.217.19.195
Dec 5, 2024 20:20:09.068886995 CET	443	49787	172.217.19.195	192.168.2.8
Dec 5, 2024 20:20:09.111336946 CET	49787	443	192.168.2.8	172.217.19.195
Dec 5, 2024 20:20:09.122885942 CET	443	49789	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:09.123234034 CET	443	49789	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:09.123426914 CET	49789	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:09.124772072 CET	49789	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:09.124793053 CET	443	49789	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:09.155823946 CET	443	49785	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.156263113 CET	49785	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.156301022 CET	443	49785	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.156750917 CET	443	49785	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.157144070 CET	49785	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.157164097 CET	443	49784	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.157216072 CET	443	49785	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.157342911 CET	49784	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.157371044 CET	443	49784	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.157427073 CET	49785	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.157804012 CET	443	49784	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.157865047 CET	49784	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.158533096 CET	443	49784	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.158613920 CET	49784	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.159157991 CET	49784	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.159229040 CET	443	49784	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.159418106 CET	49784	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.159423113 CET	443	49784	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.202729940 CET	443	49788	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.203155041 CET	49788	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.203181028 CET	443	49788	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.203332901 CET	443	49785	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.203617096 CET	443	49788	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.203690052 CET	49788	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.204346895 CET	443	49788	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.204394102 CET	49788	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.204565048 CET	49788	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.204638004 CET	443	49788	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.204722881 CET	49784	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.204895973 CET	49788	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.204909086 CET	443	49788	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.208811045 CET	443	49777	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.250853062 CET	49777	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.250857115 CET	49788	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.263268948 CET	443	49777	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.263288021 CET	443	49777	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.263335943 CET	443	49777	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.263366938 CET	443	49777	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.263479948 CET	49777	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.263479948 CET	49777	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.263492107 CET	443	49777	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.263535023 CET	49777	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.278866053 CET	443	49791	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:09.278934956 CET	443	49791	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:09.279002905 CET	49791	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:09.279016972 CET	443	49791	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:09.279412985 CET	443	49791	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:09.279460907 CET	49791	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:09.283179998 CET	49791	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:09.283195019 CET	443	49791	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:09.284174919 CET	49797	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:09.284200907 CET	443	49797	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:09.284270048 CET	49797	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:09.284482002 CET	49797	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:09.284492970 CET	443	49797	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:09.309890985 CET	443	49782	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.363061905 CET	49782	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.415429115 CET	443	49782	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.415441990 CET	443	49782	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.415469885 CET	443	49782	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.415482998 CET	443	49782	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.415489912 CET	443	49782	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.415601969 CET	49782	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.415601969 CET	49782	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.415618896 CET	443	49782	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.415631056 CET	443	49782	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.415683031 CET	49782	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.425893068 CET	443	49777	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.425916910 CET	443	49777	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.426008940 CET	49777	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.426037073 CET	443	49777	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.426208973 CET	49777	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.476753950 CET	443	49777	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.476774931 CET	443	49777	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.476979017 CET	49777	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.477011919 CET	443	49777	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.477077007 CET	49777	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.534184933 CET	443	49783	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.540184975 CET	443	49782	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.540226936 CET	443	49782	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.540265083 CET	443	49782	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.540337086 CET	443	49782	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.540338993 CET	49782	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.540338993 CET	49782	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.540381908 CET	49782	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.540986061 CET	49782	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.541007996 CET	443	49782	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.555690050 CET	443	49783	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.555773020 CET	443	49783	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.555917978 CET	49783	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.555917978 CET	49783	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.556351900 CET	49783	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.556377888 CET	443	49783	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.593049049 CET	443	49777	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.593072891 CET	443	49777	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.593116045 CET	49777	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.593143940 CET	443	49777	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.593168974 CET	49777	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.593189955 CET	49777	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.630913973 CET	443	49777	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.630939960 CET	443	49777	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.631050110 CET	49777	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.631082058 CET	443	49777	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.631118059 CET	49777	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.660759926 CET	443	49777	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.660784960 CET	443	49777	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.660851002 CET	49777	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.660876989 CET	443	49777	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.660919905 CET	49777	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.680754900 CET	443	49777	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.680778980 CET	443	49777	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.680908918 CET	49777	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.680946112 CET	443	49777	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.680988073 CET	49777	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.685169935 CET	443	49792	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.685480118 CET	49792	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.685519934 CET	443	49792	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.685969114 CET	443	49792	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.686028957 CET	49792	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.686727047 CET	443	49792	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.686786890 CET	49792	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.686954975 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.687067986 CET	49792	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.687133074 CET	443	49792	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.687228918 CET	49792	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.687237978 CET	443	49792	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.687395096 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.687427044 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.687853098 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.687910080 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.688560009 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.688607931 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.688714027 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.688765049 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.688889980 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.688896894 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.695342064 CET	443	49784	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.699126005 CET	443	49785	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.701730013 CET	443	49785	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.701822042 CET	49785	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.702347040 CET	49785	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.702367067 CET	443	49785	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.715943098 CET	443	49777	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.715974092 CET	443	49777	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.716036081 CET	49777	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.716067076 CET	443	49777	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.716095924 CET	49777	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.716110945 CET	49777	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.737216949 CET	49792	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.738034010 CET	49784	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.738035917 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.741485119 CET	443	49788	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.743344069 CET	443	49784	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.743361950 CET	443	49784	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.743379116 CET	443	49784	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.743386030 CET	443	49784	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.743410110 CET	443	49784	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.743422985 CET	49784	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.743441105 CET	443	49784	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.743470907 CET	49784	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.743501902 CET	49784	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.745544910 CET	443	49788	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.745614052 CET	443	49788	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.745613098 CET	49788	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.745655060 CET	49788	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.745883942 CET	49788	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.745903969 CET	443	49788	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.749555111 CET	49798	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.749594927 CET	443	49798	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.749665022 CET	49798	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.749898911 CET	49798	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.749912977 CET	443	49798	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.797873020 CET	443	49777	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.797899961 CET	443	49777	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.798012018 CET	49777	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.798042059 CET	443	49777	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.798084974 CET	49777	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.807775974 CET	443	49777	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.807831049 CET	443	49777	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.807863951 CET	49777	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.807871103 CET	443	49777	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.807910919 CET	49777	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.808214903 CET	49777	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.808228016 CET	443	49777	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.892659903 CET	443	49787	172.217.19.195	192.168.2.8
Dec 5, 2024 20:20:09.917567015 CET	443	49787	172.217.19.195	192.168.2.8
Dec 5, 2024 20:20:09.917726994 CET	49787	443	192.168.2.8	172.217.19.195
Dec 5, 2024 20:20:09.917751074 CET	443	49787	172.217.19.195	192.168.2.8
Dec 5, 2024 20:20:09.918046951 CET	49787	443	192.168.2.8	172.217.19.195
Dec 5, 2024 20:20:09.918170929 CET	443	49787	172.217.19.195	192.168.2.8
Dec 5, 2024 20:20:09.918225050 CET	49787	443	192.168.2.8	172.217.19.195
Dec 5, 2024 20:20:09.950175047 CET	443	49784	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.950203896 CET	443	49784	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.950308084 CET	49784	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.950335026 CET	443	49784	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.950376034 CET	49784	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.992635012 CET	443	49784	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.992661953 CET	443	49784	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.992712021 CET	49784	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.992733955 CET	443	49784	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:09.992755890 CET	49784	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:09.992775917 CET	49784	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.111767054 CET	443	49784	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.111793995 CET	443	49784	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.112015009 CET	49784	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.112049103 CET	443	49784	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.112090111 CET	49784	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.120392084 CET	443	49784	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.120455980 CET	49784	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.120465040 CET	443	49784	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.120482922 CET	443	49784	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.120521069 CET	49784	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.120744944 CET	49784	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.120759964 CET	443	49784	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.124897957 CET	49799	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.124943018 CET	443	49799	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.125013113 CET	49799	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.125448942 CET	49799	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.125463963 CET	443	49799	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.129570961 CET	49800	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.129617929 CET	443	49800	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.129674911 CET	49800	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.129869938 CET	49800	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.129882097 CET	443	49800	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.147680998 CET	49801	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.147726059 CET	443	49801	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.147802114 CET	49801	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.147974014 CET	49801	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.147986889 CET	443	49801	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.160320997 CET	49802	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.160381079 CET	443	49802	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.160453081 CET	49802	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.160691023 CET	49802	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.160703897 CET	443	49802	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.215229988 CET	443	49792	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.218616009 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.259727955 CET	443	49792	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.259749889 CET	443	49792	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.259799957 CET	443	49792	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.259824991 CET	49792	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.259861946 CET	443	49792	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.259877920 CET	49792	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.259885073 CET	443	49792	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.259895086 CET	49792	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.259916067 CET	49792	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.261966944 CET	49792	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.261984110 CET	443	49792	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.264326096 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.271166086 CET	49803	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.271219015 CET	443	49803	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.271286011 CET	49803	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.273277998 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.273305893 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.273312092 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.273330927 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.273341894 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.273359060 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.273386002 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.273437023 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.273443937 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.273475885 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.273812056 CET	49803	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.273824930 CET	443	49803	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.276814938 CET	49804	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.276854992 CET	443	49804	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.276921988 CET	49804	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.277112961 CET	49804	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.277127028 CET	443	49804	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.279748917 CET	443	49794	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:10.282282114 CET	49794	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:10.282316923 CET	443	49794	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:10.282749891 CET	443	49794	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:10.283060074 CET	49794	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:10.283123970 CET	443	49794	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:10.283252001 CET	49794	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:10.283287048 CET	49794	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:10.283329010 CET	443	49794	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:10.442828894 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.442845106 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.442892075 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.442935944 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.442972898 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.442986965 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.443006992 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.484735966 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.484762907 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.484899998 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.484934092 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.484975100 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.515063047 CET	443	49797	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:10.542924881 CET	443	49796	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.543750048 CET	443	49795	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.574245930 CET	49797	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:10.585007906 CET	49796	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.585007906 CET	49795	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.603600979 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.603634119 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.603773117 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.603816032 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.603854895 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.639278889 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.639341116 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.639364958 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.639400005 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.639436960 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.639452934 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.646397114 CET	49797	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:10.646442890 CET	443	49797	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:10.646894932 CET	49795	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.646938086 CET	443	49795	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.647027016 CET	49796	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.647053003 CET	443	49796	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.647144079 CET	443	49797	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:10.647484064 CET	49797	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:10.647588968 CET	443	49797	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:10.647592068 CET	443	49795	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.647630930 CET	443	49796	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.647659063 CET	49795	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.647702932 CET	49796	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.647792101 CET	49797	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:10.648315907 CET	443	49795	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.648327112 CET	443	49796	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.648363113 CET	49795	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.648392916 CET	49796	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.648566961 CET	49796	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.648648024 CET	443	49796	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.648813009 CET	49795	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.648900032 CET	443	49795	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.649029016 CET	49796	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.649048090 CET	443	49796	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.649149895 CET	49795	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.649158001 CET	443	49795	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.670938969 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.670978069 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.671045065 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.671073914 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.671111107 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.688357115 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.688396931 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.688452005 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.688483000 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.688524008 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.688541889 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.691339016 CET	443	49797	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:10.702543974 CET	49795	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.702567101 CET	49796	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.806601048 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.806641102 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.806691885 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.806727886 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.806745052 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.806772947 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.823144913 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.823175907 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.823232889 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.823267937 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.823291063 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.823307991 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.837953091 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.837976933 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.838035107 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.838067055 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.838115931 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.851371050 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.851393938 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.851455927 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.851488113 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.851524115 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.866678953 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.866709948 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.866782904 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.866822004 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.866837978 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.866857052 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.880980015 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.881007910 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.881052971 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.881084919 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.881104946 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.881124973 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.913023949 CET	443	49794	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:10.913115025 CET	443	49794	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:10.913173914 CET	49794	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:10.913768053 CET	49794	443	192.168.2.8	18.66.161.81
Dec 5, 2024 20:20:10.913784981 CET	443	49794	18.66.161.81	192.168.2.8
Dec 5, 2024 20:20:10.981925011 CET	443	49797	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:10.982687950 CET	443	49797	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:10.982789993 CET	49797	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:10.984204054 CET	49797	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:10.984226942 CET	443	49797	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:10.994328022 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.994354010 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.994469881 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:10.994492054 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:10.994532108 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.006726980 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.006756067 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.006861925 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.006879091 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.006917000 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.016896963 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.016922951 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.017019033 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.017031908 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.017070055 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.028208971 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.028229952 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.028301001 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.028310061 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.028343916 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.039151907 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.039171934 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.039288998 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.039304018 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.039344072 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.050467014 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.050487041 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.050594091 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.050609112 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.050643921 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.062005043 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.062027931 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.062109947 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.062119007 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.062156916 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.074940920 CET	443	49796	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.075022936 CET	443	49795	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.079401970 CET	443	49795	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.079466105 CET	49795	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.079479933 CET	443	49795	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.079493046 CET	443	49795	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.079534054 CET	49795	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.080100060 CET	49795	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.080117941 CET	443	49795	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.087264061 CET	49805	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.087306976 CET	443	49805	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.087369919 CET	49805	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.089087009 CET	49805	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.089099884 CET	443	49805	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.089684963 CET	49806	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.089732885 CET	443	49806	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.089783907 CET	49806	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.089982033 CET	49806	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.089992046 CET	443	49806	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.122991085 CET	443	49796	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.123004913 CET	443	49796	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.123045921 CET	443	49796	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.123068094 CET	443	49796	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.123074055 CET	443	49796	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.123122931 CET	49796	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.123156071 CET	443	49796	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.123179913 CET	443	49796	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.123182058 CET	49796	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.123200893 CET	49796	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.173510075 CET	49796	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.185483932 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.185508013 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.185580015 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.185594082 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.185628891 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.193977118 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.193993092 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.194078922 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.194094896 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.194133043 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.202733994 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.202749968 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.202832937 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.202838898 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.202872038 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.211596966 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.211611986 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.211673975 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.211679935 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.211714029 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.219402075 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.219417095 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.219476938 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.219481945 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.219650984 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.227626085 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.227642059 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.227698088 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.227704048 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.227732897 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.236754894 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.236769915 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.236824036 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.236829996 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.236870050 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.245301962 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.245318890 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.245376110 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.245382071 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.245412111 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.285702944 CET	443	49796	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.285717964 CET	443	49796	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.285741091 CET	443	49796	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.285748005 CET	443	49796	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.285779953 CET	443	49796	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.285810947 CET	443	49796	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.285828114 CET	49796	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.285926104 CET	49796	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.286310911 CET	49796	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.286338091 CET	443	49796	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.290896893 CET	49807	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:11.290942907 CET	443	49807	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:11.291001081 CET	49807	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:11.291865110 CET	49807	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:11.291876078 CET	443	49807	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:11.292308092 CET	49808	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.292349100 CET	443	49808	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.292402983 CET	49808	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.292591095 CET	49808	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.292603016 CET	443	49808	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.295020103 CET	49809	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.295039892 CET	443	49809	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.295095921 CET	49809	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.295758963 CET	49809	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.295768023 CET	443	49809	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.372100115 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.372132063 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.372250080 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.372278929 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.372318029 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.380148888 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.380168915 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.380239964 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.380258083 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.380305052 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.388426065 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.388439894 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.388484001 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.388503075 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.388546944 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.395659924 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.395673990 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.395735979 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.395756960 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.395792007 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.403809071 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.403825045 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.403877974 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.403901100 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.403940916 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.411715031 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.411729097 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.411786079 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.411798000 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.411848068 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.419800997 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.419814110 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.419864893 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.419888020 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.419925928 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.424496889 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.424566984 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.424576044 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.424614906 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.424810886 CET	49793	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.424832106 CET	443	49793	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.565249920 CET	443	49798	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.565613031 CET	49798	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.565639973 CET	443	49798	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.566051960 CET	443	49798	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.566374063 CET	49798	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.566457987 CET	443	49798	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.566524982 CET	49798	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.607336998 CET	443	49798	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.938105106 CET	443	49799	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.938446999 CET	49799	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.938474894 CET	443	49799	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.938909054 CET	443	49799	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.939325094 CET	49799	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.939405918 CET	443	49799	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.939485073 CET	49799	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.941508055 CET	443	49800	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.941720009 CET	49800	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.941747904 CET	443	49800	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.942159891 CET	443	49800	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.942467928 CET	49800	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.942532063 CET	443	49800	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.942548037 CET	49800	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.963990927 CET	443	49801	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.964865923 CET	49801	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.964879036 CET	443	49801	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.965825081 CET	443	49801	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.966133118 CET	49801	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.966274977 CET	49801	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.966279030 CET	443	49801	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.966346979 CET	443	49801	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.976901054 CET	443	49802	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.977237940 CET	49802	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.977258921 CET	443	49802	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.977674961 CET	443	49802	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.978072882 CET	49802	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.978146076 CET	443	49802	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.978221893 CET	49802	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.982954979 CET	49800	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:11.982978106 CET	443	49800	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:11.987329006 CET	443	49799	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.013746977 CET	49801	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.019331932 CET	443	49802	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.102277040 CET	443	49798	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.103502989 CET	443	49804	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.103761911 CET	49804	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.103781939 CET	443	49804	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.104201078 CET	443	49804	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.104521990 CET	49804	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.104581118 CET	443	49804	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.104638100 CET	49804	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.105364084 CET	443	49803	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.105544090 CET	49803	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.105571032 CET	443	49803	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.105992079 CET	443	49803	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.106059074 CET	49803	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.106718063 CET	443	49803	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.106769085 CET	49803	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.106935024 CET	49803	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.107001066 CET	443	49803	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.107090950 CET	49803	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.107100010 CET	443	49803	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.107139111 CET	443	49798	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.107192993 CET	49798	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.107220888 CET	443	49798	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.107264042 CET	49798	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.109427929 CET	49798	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.109455109 CET	443	49798	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.147331953 CET	443	49804	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.152369022 CET	49803	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.475466013 CET	443	49799	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.475995064 CET	443	49799	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.476087093 CET	49799	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.476330996 CET	49799	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.476351023 CET	443	49799	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.477018118 CET	443	49800	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.482239008 CET	49810	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.482292891 CET	443	49810	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.482367039 CET	49810	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.484057903 CET	49810	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.484096050 CET	443	49810	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.491344929 CET	49811	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.491394997 CET	443	49811	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.491477966 CET	49811	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.492017031 CET	49811	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.492027044 CET	443	49811	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.498677969 CET	443	49801	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.501445055 CET	443	49807	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:12.513001919 CET	443	49802	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.515486956 CET	49807	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:12.515501976 CET	443	49807	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:12.515995979 CET	443	49807	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:12.516689062 CET	49807	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:12.516753912 CET	443	49807	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:12.516880989 CET	49807	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:12.516911030 CET	443	49807	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:12.516915083 CET	49807	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:12.518939972 CET	49800	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.526827097 CET	443	49801	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.526837111 CET	443	49801	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.526885986 CET	443	49801	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.526916027 CET	443	49801	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.526937962 CET	49801	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.526983976 CET	49801	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.527509928 CET	49801	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.527527094 CET	443	49801	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.529695988 CET	443	49800	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.529707909 CET	443	49800	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.529740095 CET	443	49800	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.529757977 CET	443	49800	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.529773951 CET	49800	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.529776096 CET	443	49800	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.529789925 CET	443	49800	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.529833078 CET	49800	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.529863119 CET	49800	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.533921003 CET	443	49802	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.533986092 CET	443	49802	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.533998966 CET	49802	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.534024954 CET	49802	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.539515018 CET	49802	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.539527893 CET	443	49802	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.555713892 CET	49812	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.555757999 CET	443	49812	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.555834055 CET	49812	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.556035995 CET	49812	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.556052923 CET	443	49812	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.563333035 CET	443	49807	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:12.568687916 CET	49813	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.568726063 CET	443	49813	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.568814039 CET	49813	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.568985939 CET	49813	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.568995953 CET	443	49813	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.692774057 CET	443	49800	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.692801952 CET	443	49800	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.692859888 CET	49800	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.692888021 CET	443	49800	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.692914009 CET	49800	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.692933083 CET	49800	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.740164995 CET	443	49800	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.740195036 CET	443	49800	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.740238905 CET	49800	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.740256071 CET	443	49800	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.740299940 CET	49800	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.740844965 CET	443	49803	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.767776966 CET	443	49804	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.782974005 CET	49803	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.787240982 CET	443	49803	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.787261963 CET	443	49803	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.787278891 CET	443	49803	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.787286997 CET	443	49803	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.787307024 CET	49803	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.787323952 CET	443	49803	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.787348032 CET	443	49803	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.787377119 CET	49803	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.787408113 CET	443	49803	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.787451982 CET	49803	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.792970896 CET	49803	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.793010950 CET	443	49803	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.812292099 CET	49804	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.850656986 CET	49815	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:12.850723982 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:12.850802898 CET	49815	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:12.851161957 CET	49815	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:12.851178885 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:12.860888004 CET	443	49800	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.860913038 CET	443	49800	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.860987902 CET	49800	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.861017942 CET	443	49800	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.861064911 CET	49800	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.868108988 CET	443	49800	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.868170023 CET	49800	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.868177891 CET	443	49800	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.868191004 CET	443	49800	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.868249893 CET	49800	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.868937016 CET	49800	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.868954897 CET	443	49800	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.870141983 CET	443	49804	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.870235920 CET	443	49804	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.870279074 CET	49804	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.870279074 CET	49804	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.876280069 CET	49804	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.876297951 CET	443	49804	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.886075974 CET	49816	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.886137962 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.886198997 CET	49816	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.886826992 CET	49816	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.886847973 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.887706041 CET	49817	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.887742043 CET	443	49817	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.887795925 CET	49817	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.888322115 CET	49817	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.888339043 CET	443	49817	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.915375948 CET	443	49805	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.915720940 CET	49805	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.915741920 CET	443	49805	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.916196108 CET	443	49805	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.916256905 CET	49805	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.916963100 CET	443	49805	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.917007923 CET	49805	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.917407990 CET	49805	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.917474985 CET	443	49805	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.918004036 CET	49805	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:12.918014050 CET	443	49805	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:12.970359087 CET	49805	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:13.072252989 CET	443	49807	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:13.072406054 CET	443	49807	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:13.072465897 CET	49807	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:13.072499990 CET	443	49807	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:13.072609901 CET	443	49807	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:13.072654963 CET	49807	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:13.072664022 CET	443	49807	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:13.072835922 CET	443	49807	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:13.072881937 CET	49807	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:13.072890043 CET	443	49807	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:13.077630997 CET	443	49807	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:13.077699900 CET	49807	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:13.106698036 CET	443	49808	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:13.109551907 CET	443	49809	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:13.154822111 CET	49809	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:13.155632973 CET	49808	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:13.207226038 CET	49809	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:13.207257986 CET	443	49809	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:13.207477093 CET	49808	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:13.207514048 CET	443	49808	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:13.207870007 CET	443	49809	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:13.207935095 CET	49809	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:13.208065987 CET	443	49808	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:13.208596945 CET	443	49809	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:13.208642006 CET	49809	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:13.212613106 CET	49807	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:13.212642908 CET	443	49807	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:13.232835054 CET	49808	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:13.232991934 CET	443	49808	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:13.237402916 CET	49809	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:13.237545967 CET	443	49809	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:13.237591028 CET	49808	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:13.237634897 CET	49809	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:13.237646103 CET	443	49809	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:13.253617048 CET	49819	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:13.253679991 CET	443	49819	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:13.253760099 CET	49819	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:13.254178047 CET	49819	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:13.254192114 CET	443	49819	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:13.259814978 CET	49820	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:13.259833097 CET	443	49820	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:13.259888887 CET	49820	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:13.260265112 CET	49820	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:13.260277987 CET	443	49820	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:13.279339075 CET	443	49808	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:13.291194916 CET	49809	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:13.448007107 CET	443	49805	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:13.452009916 CET	443	49805	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:13.452070951 CET	49805	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:13.452101946 CET	443	49805	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:13.452902079 CET	49805	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:13.452941895 CET	443	49805	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:13.453054905 CET	49805	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:13.662189960 CET	49821	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:13.662252903 CET	443	49821	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:13.662334919 CET	49821	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:13.662774086 CET	49821	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:13.662800074 CET	443	49821	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:13.664814949 CET	443	49809	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:13.664993048 CET	443	49808	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:13.689641953 CET	443	49808	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:13.689651966 CET	443	49808	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:13.689692020 CET	443	49808	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:13.689701080 CET	443	49808	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:13.689719915 CET	49808	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:13.689735889 CET	443	49808	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:13.689801931 CET	49808	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:13.690118074 CET	49808	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:13.690135956 CET	443	49808	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:13.696121931 CET	49822	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:13.696166992 CET	443	49822	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:13.696247101 CET	49822	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:13.696468115 CET	49822	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:13.696482897 CET	443	49822	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:13.703095913 CET	49823	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:13.703149080 CET	443	49823	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:13.703216076 CET	49823	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:13.703435898 CET	49823	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:13.703453064 CET	443	49823	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:13.705904961 CET	443	49809	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:13.705914021 CET	443	49809	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:13.705941916 CET	443	49809	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:13.705955029 CET	443	49809	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:13.705971003 CET	443	49809	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:13.705980062 CET	49809	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:13.706001997 CET	443	49809	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:13.706037045 CET	49809	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:13.706121922 CET	49809	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:13.714099884 CET	443	49809	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:13.764173985 CET	49809	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:13.866914034 CET	443	49809	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:13.866929054 CET	443	49809	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:13.866945982 CET	443	49809	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:13.866951942 CET	443	49809	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:13.866978884 CET	443	49809	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:13.866982937 CET	49809	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:13.867026091 CET	443	49809	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:13.867043018 CET	49809	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:13.867077112 CET	49809	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:13.867424011 CET	49809	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:13.867445946 CET	443	49809	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:13.907622099 CET	443	49806	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:13.907875061 CET	49806	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:13.907885075 CET	443	49806	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:13.908251047 CET	443	49806	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:13.908680916 CET	49806	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:13.908725977 CET	443	49806	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:13.908812046 CET	49806	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:13.955339909 CET	443	49806	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:14.104584932 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:14.104850054 CET	49815	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:14.104876995 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:14.105900049 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:14.105963945 CET	49815	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:14.107100010 CET	49815	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:14.107156992 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:14.107336044 CET	49815	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:14.107342005 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:14.156748056 CET	49815	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:14.323266029 CET	443	49810	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:14.325515032 CET	49810	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:14.325544119 CET	443	49810	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:14.325926065 CET	443	49810	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:14.326280117 CET	443	49811	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:14.326387882 CET	49810	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:14.326447964 CET	443	49810	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:14.326678038 CET	49811	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:14.326702118 CET	443	49811	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:14.327069044 CET	443	49811	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:14.327430964 CET	49811	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:14.327483892 CET	443	49811	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:14.327539921 CET	49811	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:14.328514099 CET	49810	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:14.371332884 CET	443	49810	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:14.371334076 CET	443	49811	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:14.381917953 CET	443	49812	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:14.382247925 CET	49812	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:14.382385015 CET	443	49812	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:14.382945061 CET	443	49812	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:14.383275986 CET	49812	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:14.383371115 CET	443	49812	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:14.383402109 CET	49812	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:14.401726007 CET	443	49813	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:14.402100086 CET	49813	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:14.402117968 CET	443	49813	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:14.402513027 CET	443	49813	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:14.402936935 CET	49813	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:14.402951956 CET	49813	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:14.402987957 CET	443	49813	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:14.427325964 CET	443	49812	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:14.433132887 CET	49812	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:14.443216085 CET	443	49806	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:14.447304964 CET	443	49806	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:14.447386980 CET	49806	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:14.447421074 CET	443	49806	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:14.447930098 CET	49806	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:14.447971106 CET	443	49806	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:14.448082924 CET	49806	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:14.450506926 CET	49813	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:14.454509020 CET	49824	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:14.454555035 CET	443	49824	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:14.454653978 CET	49824	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:14.458515882 CET	49824	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:14.458539009 CET	443	49824	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:14.475487947 CET	443	49820	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:14.475760937 CET	49820	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:14.475788116 CET	443	49820	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:14.476135969 CET	443	49820	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:14.476490974 CET	49820	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:14.476545095 CET	443	49820	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:14.476614952 CET	49820	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:14.519335032 CET	443	49820	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:14.580430984 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:14.580902100 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:14.580925941 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:14.580997944 CET	49815	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:14.581024885 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:14.582475901 CET	49815	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:14.582484961 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:14.589260101 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:14.589313984 CET	49815	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:14.589323997 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:14.605691910 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:14.605755091 CET	49815	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:14.605771065 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:14.614053965 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:14.614121914 CET	49815	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:14.614132881 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:14.654772043 CET	49815	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:14.700424910 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:14.725986004 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:14.726313114 CET	49816	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:14.726346970 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:14.726742029 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:14.726804018 CET	49816	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:14.727469921 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:14.727514029 CET	49816	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:14.727675915 CET	49816	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:14.727737904 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:14.727806091 CET	49816	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:14.727814913 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:14.749262094 CET	49815	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:14.749274969 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:14.772706032 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:14.772778034 CET	49815	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:14.772803068 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:14.776530981 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:14.776587963 CET	49815	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:14.776598930 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:14.779396057 CET	49816	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:14.787311077 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:14.787379980 CET	49815	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:14.787395000 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:14.794785023 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:14.798552036 CET	49815	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:14.798566103 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:14.802416086 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:14.802479029 CET	49815	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:14.802488089 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:14.810065031 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:14.810563087 CET	49815	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:14.810573101 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:14.825387955 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:14.825436115 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:14.825505972 CET	49815	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:14.825522900 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:14.826539040 CET	49815	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:14.833034039 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:14.841001987 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:14.841072083 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:14.841152906 CET	49815	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:14.841181993 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:14.841363907 CET	49815	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:14.846977949 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:14.850972891 CET	443	49810	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:14.851077080 CET	443	49810	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:14.851142883 CET	49810	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:14.852745056 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:14.852750063 CET	49810	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:14.852782011 CET	443	49810	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:14.852804899 CET	49815	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:14.852830887 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:14.858887911 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:14.858956099 CET	49815	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:14.858978987 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:14.873888969 CET	443	49821	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:14.874754906 CET	49821	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:14.874768972 CET	443	49821	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:14.875128984 CET	443	49821	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:14.879019976 CET	49821	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:14.879019976 CET	49821	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:14.879043102 CET	443	49821	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:14.879090071 CET	443	49821	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:14.905069113 CET	49815	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:14.908813953 CET	443	49812	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:14.913043022 CET	443	49812	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:14.913124084 CET	443	49812	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:14.913131952 CET	49812	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:14.913173914 CET	49812	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:14.915124893 CET	49812	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:14.915144920 CET	443	49812	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:14.922200918 CET	49821	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:14.922707081 CET	49825	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:14.922770023 CET	443	49825	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:14.922928095 CET	49825	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:14.923214912 CET	49826	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:14.923254013 CET	443	49826	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:14.923327923 CET	49826	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:14.923547029 CET	49825	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:14.923557997 CET	443	49825	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:14.923715115 CET	49826	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:14.923728943 CET	443	49826	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:14.930541039 CET	443	49813	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:14.951138020 CET	443	49811	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:14.951528072 CET	443	49813	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:14.951565027 CET	443	49813	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:14.951611042 CET	443	49813	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:14.951653957 CET	49813	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:14.951653957 CET	49813	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:14.952132940 CET	49813	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:14.952150106 CET	443	49813	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:14.955179930 CET	443	49811	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:14.955230951 CET	443	49811	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:14.955285072 CET	49811	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:14.955607891 CET	49811	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:14.955621958 CET	443	49811	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:14.963193893 CET	49827	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:14.963219881 CET	443	49827	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:14.963285923 CET	49827	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:14.963469028 CET	49827	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:14.963478088 CET	443	49827	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:14.964576006 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:14.966901064 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:14.967030048 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:14.967087030 CET	49815	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:14.967112064 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:14.970551014 CET	49815	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:14.971816063 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:14.976779938 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:14.976902962 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:14.976964951 CET	49815	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:14.976977110 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:14.978543043 CET	49815	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:14.981451988 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:14.985044956 CET	49828	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:14.985084057 CET	443	49828	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:14.985147953 CET	49828	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:14.985372066 CET	49828	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:14.985385895 CET	443	49828	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:14.986118078 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:14.986170053 CET	49815	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:14.986181974 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:14.986298084 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:14.986342907 CET	49815	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:14.986350060 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:14.990093946 CET	49829	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:14.990122080 CET	443	49829	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:14.990354061 CET	49829	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:14.990514994 CET	49829	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:14.990525007 CET	443	49829	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.015681028 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:15.015696049 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:15.015733004 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:15.015749931 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:15.015767097 CET	49815	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:15.015799999 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:15.015811920 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:15.015821934 CET	49815	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:15.015836000 CET	49815	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:15.015852928 CET	49815	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:15.031971931 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:15.032064915 CET	49815	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:15.032085896 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:15.038860083 CET	443	49820	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:15.038911104 CET	443	49820	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:15.038971901 CET	49820	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:15.038996935 CET	443	49820	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:15.039387941 CET	443	49820	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:15.039433956 CET	49820	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:15.039438963 CET	443	49820	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:15.039501905 CET	443	49820	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:15.039534092 CET	49820	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:15.040117979 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:15.040251970 CET	49815	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:15.040265083 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:15.042536020 CET	49815	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:15.052308083 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:15.052375078 CET	49815	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:15.056827068 CET	49820	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:15.056859016 CET	443	49820	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:15.057640076 CET	49830	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:15.057678938 CET	443	49830	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:15.057768106 CET	49830	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:15.057970047 CET	49830	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:15.057977915 CET	443	49830	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:15.060491085 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:15.060540915 CET	49815	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:15.065005064 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:15.065054893 CET	49815	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:15.084005117 CET	443	49819	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.084264040 CET	49819	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.084281921 CET	443	49819	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.084638119 CET	443	49819	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.084939003 CET	49819	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.084989071 CET	443	49819	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.085052967 CET	49819	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.131335974 CET	443	49819	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.161339045 CET	443	49817	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.161690950 CET	49817	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.161717892 CET	443	49817	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.162122011 CET	443	49817	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.162195921 CET	49817	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.162848949 CET	443	49817	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.162904024 CET	49817	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.163053036 CET	49817	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.163252115 CET	49817	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.163260937 CET	443	49817	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.163281918 CET	443	49817	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.164489031 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:15.164565086 CET	49815	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:15.164591074 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:15.167841911 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:15.167906046 CET	49815	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:15.167915106 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:15.168001890 CET	49815	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:15.174398899 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:15.174508095 CET	49815	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:15.177535057 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:15.177628040 CET	49815	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:15.183518887 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:15.183619022 CET	49815	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:15.189218044 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:15.189336061 CET	49815	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:15.197892904 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:15.198090076 CET	49815	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:15.198108912 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:15.203217983 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:15.203290939 CET	49815	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:15.203299999 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:15.203320026 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:15.203361034 CET	49815	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:15.203602076 CET	49815	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:15.203620911 CET	443	49815	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:15.204983950 CET	49817	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.205009937 CET	443	49817	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.214806080 CET	49831	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:15.214864969 CET	443	49831	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:15.214958906 CET	49831	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:15.215435982 CET	49831	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:15.215451956 CET	443	49831	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:15.236510992 CET	49832	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:15.236550093 CET	443	49832	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:15.236624002 CET	49832	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:15.236893892 CET	49832	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:15.236902952 CET	443	49832	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:15.245270014 CET	49817	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.256815910 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.307595015 CET	49816	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.311351061 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.311362982 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.311402082 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.311436892 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.311439991 CET	49816	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.311443090 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.311466932 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.311501980 CET	49816	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.311532021 CET	49816	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.350193977 CET	49834	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:15.350244045 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:15.350315094 CET	49834	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:15.350492001 CET	49834	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:15.350502014 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:15.409847975 CET	443	49821	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:15.409992933 CET	443	49821	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:15.410079002 CET	49821	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:15.411734104 CET	49821	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:15.411751986 CET	443	49821	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:15.415474892 CET	49835	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:15.415515900 CET	443	49835	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:15.415594101 CET	49835	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:15.415801048 CET	49835	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:15.415817976 CET	443	49835	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:15.479815960 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.479834080 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.479899883 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.479932070 CET	49816	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.479959011 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.479986906 CET	49816	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.480004072 CET	49816	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.523004055 CET	443	49822	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.526226997 CET	443	49823	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.538572073 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.538593054 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.538690090 CET	49816	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.538712978 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.538749933 CET	49816	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.568608999 CET	49823	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.569680929 CET	49822	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.571733952 CET	49823	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.571754932 CET	443	49823	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.571885109 CET	49822	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.571897030 CET	443	49822	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.572418928 CET	443	49823	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.572449923 CET	443	49822	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.572920084 CET	49822	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.572999954 CET	443	49822	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.573187113 CET	49823	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.573273897 CET	443	49823	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.573353052 CET	49822	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.573400021 CET	49823	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.615333080 CET	443	49822	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.619333029 CET	443	49823	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.622191906 CET	443	49819	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.626178026 CET	443	49819	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.626360893 CET	443	49819	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.626394987 CET	49819	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.626422882 CET	49819	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.640791893 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.640816927 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.641016960 CET	49816	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.641040087 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.641077042 CET	49816	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.678903103 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.678921938 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.679141045 CET	49816	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.679163933 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.679203033 CET	49816	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.696906090 CET	443	49817	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.709796906 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.709815025 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.709916115 CET	49816	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.709940910 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.709981918 CET	49816	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.728854895 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:15.728913069 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:15.729007006 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:15.729301929 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.729319096 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.729362965 CET	49816	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.729373932 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.729398966 CET	49816	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.729413033 CET	49816	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.729880095 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:15.729893923 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:15.743464947 CET	49817	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.750138998 CET	443	49817	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.750152111 CET	443	49817	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.750195980 CET	443	49817	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.750205040 CET	49817	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.750220060 CET	443	49817	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.750242949 CET	443	49817	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.750258923 CET	443	49817	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.750261068 CET	49817	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.750277042 CET	49817	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.750298977 CET	49817	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.760902882 CET	49819	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.760936022 CET	443	49819	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.848938942 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.848962069 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.849014044 CET	49816	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.849035978 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.849081993 CET	49816	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.862934113 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.862952948 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.863001108 CET	49816	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.863012075 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.863054991 CET	49816	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.876790047 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.876808882 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.876890898 CET	49816	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.876899958 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.876981974 CET	49816	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.890984058 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.891015053 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.891047001 CET	49816	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.891062975 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.891089916 CET	49816	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.891108036 CET	49816	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.903913975 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.903949976 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.903991938 CET	49816	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.904004097 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.904042959 CET	49816	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.909285069 CET	443	49817	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.909297943 CET	443	49817	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.909339905 CET	443	49817	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.909375906 CET	49817	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.909404039 CET	443	49817	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.909420013 CET	49817	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.909440994 CET	49817	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.915268898 CET	443	49817	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.918386936 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.918417931 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.918450117 CET	49816	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.918458939 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.918498039 CET	49816	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.930670023 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.930706024 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.930733919 CET	49816	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.930747032 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.930785894 CET	49816	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.944845915 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.944875002 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.944958925 CET	49816	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.944958925 CET	49816	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.944979906 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.945020914 CET	49816	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.952080965 CET	443	49817	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.952099085 CET	443	49817	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.952142000 CET	49817	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.952162981 CET	443	49817	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:15.952193022 CET	49817	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:15.999448061 CET	49817	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:16.047329903 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.047362089 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.047396898 CET	49816	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:16.047415972 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.047454119 CET	49816	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:16.047473907 CET	49816	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:16.050751925 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.050779104 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.050811052 CET	49816	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:16.050821066 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.050882101 CET	49816	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:16.050882101 CET	49816	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:16.054510117 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.054553986 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.054579973 CET	49816	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:16.054588079 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.054609060 CET	49816	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:16.054637909 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.054680109 CET	49816	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:16.055043936 CET	49816	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:16.055063009 CET	443	49816	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.058032990 CET	443	49822	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.061167002 CET	443	49823	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.069045067 CET	49837	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:16.069102049 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.069161892 CET	49837	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:16.069518089 CET	49837	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:16.069535017 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.081546068 CET	443	49817	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.081559896 CET	443	49817	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.081583023 CET	443	49817	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.081619024 CET	49817	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:16.081625938 CET	443	49817	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.081650019 CET	443	49817	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.081662893 CET	49817	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:16.081680059 CET	443	49817	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.081690073 CET	49817	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:16.081718922 CET	49817	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:16.082211971 CET	49817	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:16.082226992 CET	443	49817	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.087388039 CET	443	49822	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.087421894 CET	443	49822	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.087434053 CET	443	49822	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.087446928 CET	49822	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:16.087477922 CET	443	49822	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.087497950 CET	443	49822	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.087502956 CET	49822	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:16.087512970 CET	49822	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:16.087539911 CET	49822	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:16.087882996 CET	49822	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:16.087903023 CET	443	49822	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.089730024 CET	49838	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:16.089766979 CET	443	49838	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.089821100 CET	49838	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:16.090037107 CET	49838	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:16.090053082 CET	443	49838	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.108546019 CET	49823	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:16.115809917 CET	443	49823	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.115825891 CET	443	49823	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.115844011 CET	443	49823	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.115859985 CET	443	49823	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.115866899 CET	443	49823	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.115870953 CET	49823	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:16.115902901 CET	443	49823	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.115935087 CET	49823	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:16.115952969 CET	49823	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:16.256639004 CET	443	49823	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.256714106 CET	49823	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:16.256747961 CET	443	49823	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.256764889 CET	443	49823	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.256803989 CET	49823	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:16.257544994 CET	49823	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:16.257560015 CET	443	49823	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.264842033 CET	49839	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:16.264878035 CET	443	49839	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.264946938 CET	49839	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:16.265171051 CET	49839	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:16.265181065 CET	443	49839	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.267863035 CET	443	49830	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:16.268110037 CET	49830	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:16.268127918 CET	443	49830	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:16.268496990 CET	443	49830	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:16.268838882 CET	49830	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:16.268919945 CET	443	49830	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:16.268965960 CET	49830	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:16.283849955 CET	443	49824	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.284104109 CET	49824	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:16.284131050 CET	443	49824	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.284528017 CET	443	49824	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.284854889 CET	49824	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:16.284924030 CET	443	49824	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.284970045 CET	49824	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:16.315339088 CET	443	49830	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:16.327332020 CET	443	49824	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.432559013 CET	443	49831	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:16.432810068 CET	49831	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:16.432826996 CET	443	49831	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:16.433202982 CET	443	49831	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:16.433684111 CET	49831	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:16.433763981 CET	443	49831	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:16.433917046 CET	49831	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:16.433933020 CET	49831	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:16.433943987 CET	443	49831	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:16.448961020 CET	443	49832	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:16.449232101 CET	49832	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:16.449249029 CET	443	49832	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:16.449630022 CET	443	49832	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:16.450450897 CET	49832	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:16.450509071 CET	443	49832	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:16.450623989 CET	49832	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:16.450634956 CET	49832	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:16.450648069 CET	443	49832	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:16.561383009 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:16.562159061 CET	49834	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:16.562190056 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:16.564616919 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:16.564729929 CET	49834	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:16.565119028 CET	49834	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:16.565279007 CET	49834	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:16.565284967 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:16.565319061 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:16.607424974 CET	49834	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:16.607434988 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:16.624560118 CET	443	49835	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:16.624794960 CET	49835	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:16.624826908 CET	443	49835	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:16.625220060 CET	443	49835	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:16.625574112 CET	49835	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:16.625678062 CET	443	49835	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:16.625838995 CET	49835	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:16.625870943 CET	443	49835	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:16.653470039 CET	49834	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:16.719623089 CET	443	49830	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:16.719861031 CET	443	49830	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:16.719923973 CET	49830	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:16.720860004 CET	49830	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:16.720874071 CET	443	49830	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:16.739981890 CET	443	49826	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.740298033 CET	49826	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:16.740318060 CET	443	49826	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.740727901 CET	443	49826	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.741079092 CET	49826	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:16.741200924 CET	49826	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:16.741225004 CET	443	49826	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.742671967 CET	443	49825	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.742935896 CET	49825	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:16.742944002 CET	443	49825	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.743379116 CET	443	49825	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.743719101 CET	49825	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:16.743804932 CET	443	49825	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.743833065 CET	49825	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:16.781239986 CET	443	49827	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.781558990 CET	49827	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:16.781567097 CET	443	49827	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.781982899 CET	443	49827	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.782053947 CET	49827	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:16.782705069 CET	443	49827	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.782764912 CET	49827	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:16.782972097 CET	49827	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:16.783035994 CET	443	49827	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.783183098 CET	49827	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:16.787329912 CET	443	49825	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.791749954 CET	49826	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:16.792037964 CET	49825	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:16.807221889 CET	443	49828	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.807476044 CET	49828	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:16.807502031 CET	443	49828	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.808063030 CET	443	49828	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.808419943 CET	49828	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:16.808517933 CET	443	49828	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.808666945 CET	49828	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:16.816718102 CET	443	49824	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.820776939 CET	443	49824	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.820837975 CET	49824	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:16.820852041 CET	443	49824	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.821362972 CET	49824	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:16.821412086 CET	443	49824	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.821463108 CET	49824	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:16.823344946 CET	443	49827	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.828010082 CET	49827	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:16.828037977 CET	443	49827	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.851340055 CET	443	49828	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:16.874408960 CET	49827	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:16.948385000 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:16.948657036 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:16.948681116 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:16.949572086 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:16.949634075 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:16.950716972 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:16.950777054 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:16.950953007 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:16.950959921 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:16.999710083 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:17.000802040 CET	443	49829	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:17.001053095 CET	49829	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:17.001070976 CET	443	49829	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:17.001498938 CET	443	49829	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:17.001570940 CET	49829	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:17.002269983 CET	443	49829	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:17.002358913 CET	49829	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:17.002511024 CET	49829	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:17.002579927 CET	443	49829	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:17.002659082 CET	49829	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:17.009974957 CET	443	49831	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:17.010030985 CET	443	49831	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:17.010091066 CET	49831	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:17.010112047 CET	443	49831	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:17.010482073 CET	443	49831	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:17.010541916 CET	49831	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:17.010548115 CET	443	49831	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:17.010581017 CET	443	49831	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:17.010634899 CET	49831	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:17.010641098 CET	443	49831	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:17.012451887 CET	49831	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:17.012501955 CET	443	49831	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:17.012660980 CET	443	49831	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:17.012690067 CET	49831	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:17.012712002 CET	49831	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:17.013622046 CET	49840	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:17.013676882 CET	443	49840	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:17.013751030 CET	49840	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:17.014266968 CET	49841	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:17.014317036 CET	443	49841	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:17.014374971 CET	49841	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:17.015747070 CET	49840	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:17.015762091 CET	443	49840	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:17.016057014 CET	49841	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:17.016071081 CET	443	49841	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:17.017750978 CET	49842	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:17.017802000 CET	443	49842	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:17.017939091 CET	49842	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:17.018116951 CET	49842	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:17.018132925 CET	443	49842	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:17.021620035 CET	443	49832	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:17.021692991 CET	443	49832	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:17.021743059 CET	49832	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:17.021755934 CET	443	49832	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:17.022173882 CET	443	49832	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:17.022226095 CET	443	49832	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:17.022269964 CET	49832	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:17.022278070 CET	443	49832	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:17.022345066 CET	49832	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:17.023076057 CET	49832	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:17.023099899 CET	443	49832	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:17.023226976 CET	443	49832	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:17.023271084 CET	49832	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:17.023283958 CET	49832	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:17.043333054 CET	443	49829	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:17.045984030 CET	49829	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:17.045998096 CET	443	49829	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:17.050426006 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.050774097 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.051203012 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.051259041 CET	49834	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:17.051278114 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.053781033 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.053841114 CET	49834	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:17.053848028 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.053889990 CET	49834	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:17.062194109 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.070832014 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.070903063 CET	49834	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:17.070909977 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.078083992 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.078144073 CET	49834	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:17.078154087 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.092710018 CET	49829	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:17.124464035 CET	49834	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:17.165803909 CET	443	49835	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:17.165951014 CET	443	49835	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:17.166110039 CET	49835	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:17.166961908 CET	49835	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:17.166982889 CET	443	49835	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:17.170438051 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.217052937 CET	49834	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:17.217075109 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.247044086 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.247230053 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.247356892 CET	49834	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:17.247373104 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.250591993 CET	49834	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:17.254451990 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.261811018 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.261889935 CET	49834	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:17.261900902 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.269642115 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.269712925 CET	49834	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:17.269721031 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.276842117 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.276915073 CET	49834	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:17.276923895 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.284209967 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.284272909 CET	49834	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:17.284279108 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.285667896 CET	443	49826	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:17.286128998 CET	443	49825	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:17.290163994 CET	443	49825	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:17.290230989 CET	443	49825	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:17.290236950 CET	49825	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:17.290299892 CET	49825	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:17.290622950 CET	49825	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:17.290642023 CET	443	49825	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:17.291476965 CET	443	49826	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:17.291543961 CET	443	49826	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:17.291594028 CET	49826	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:17.291786909 CET	49826	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:17.292000055 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.292037964 CET	49834	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:17.292042971 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.293332100 CET	49826	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:17.293346882 CET	443	49826	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:17.297558069 CET	49843	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:17.297601938 CET	443	49843	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:17.297676086 CET	49843	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:17.298044920 CET	49843	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:17.298062086 CET	443	49843	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:17.299036026 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.299082994 CET	49834	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:17.299089909 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.312249899 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.312334061 CET	49834	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:17.312345982 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.318393946 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.318445921 CET	49834	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:17.318453074 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.324385881 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.324440956 CET	49834	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:17.324450016 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.330878973 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.330944061 CET	49834	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:17.330951929 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.338860989 CET	443	49827	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:17.342886925 CET	443	49827	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:17.342957973 CET	49827	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:17.342962027 CET	443	49827	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:17.343023062 CET	49827	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:17.343238115 CET	49827	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:17.343256950 CET	443	49827	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:17.374245882 CET	49834	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:17.374269009 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.375416040 CET	443	49828	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:17.420382023 CET	49834	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:17.420387030 CET	49828	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:17.475660086 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.476990938 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.477072954 CET	49834	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:17.477094889 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.480943918 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.481000900 CET	49834	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:17.481009960 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.488976955 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.489036083 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.489058018 CET	49834	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:17.489064932 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.489077091 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.489113092 CET	49834	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:17.496867895 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.496879101 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.496936083 CET	49834	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:17.512872934 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:17.514123917 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:17.514147043 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:17.514236927 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:17.514256954 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:17.514302015 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:17.521327972 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:17.524969101 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.524981022 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.525003910 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.525019884 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.525037050 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.525054932 CET	49834	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:17.525073051 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.525099993 CET	49834	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:17.525144100 CET	49834	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:17.529614925 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:17.529746056 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:17.529808998 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:17.529818058 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:17.529854059 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:17.538589954 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:17.546551943 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:17.549952984 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.549972057 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.550080061 CET	49834	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:17.550080061 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:17.550096989 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.550110102 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:17.550137043 CET	49834	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:17.593239069 CET	443	49829	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:17.595215082 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:17.597213984 CET	443	49829	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:17.597301006 CET	49829	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:17.597301960 CET	443	49829	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:17.597408056 CET	49829	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:17.597574949 CET	49829	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:17.597593069 CET	443	49829	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:17.597960949 CET	49844	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:17.598006010 CET	443	49844	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:17.598066092 CET	49844	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:17.598556995 CET	49844	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:17.598571062 CET	443	49844	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:17.634032011 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:17.677612066 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.677642107 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.677684069 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.677769899 CET	49834	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:17.677815914 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.677834988 CET	49834	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:17.685127020 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.685210943 CET	49834	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:17.685245037 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.685314894 CET	49834	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:17.687010050 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:17.691895008 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.691970110 CET	49834	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:17.695570946 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.695631027 CET	49834	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:17.702230930 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.702301025 CET	49834	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:17.705271006 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:17.705346107 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:17.705877066 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.705945969 CET	49834	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:17.705945969 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:17.705959082 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:17.712548971 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.712632895 CET	49834	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:17.716645002 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:17.716706038 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:17.716713905 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:17.719202042 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.719274044 CET	49834	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:17.724139929 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:17.724200964 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:17.724210024 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:17.725980997 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.726037979 CET	49834	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:17.729403973 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.729466915 CET	49834	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:17.729475975 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.729487896 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.729531050 CET	49834	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:17.729644060 CET	49834	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:17.729660988 CET	443	49834	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:17.729676008 CET	49834	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:17.729696989 CET	49834	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:17.731796980 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:17.731863976 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:17.731873035 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:17.739644051 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:17.742564917 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:17.742573977 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:17.747412920 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:17.750561953 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:17.750571012 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:17.754975080 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:17.756139994 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:17.756148100 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:17.762687922 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:17.762751102 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:17.762758970 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:17.776339054 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:17.776405096 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:17.776413918 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:17.776489019 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:17.776843071 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:17.776849031 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:17.782483101 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:17.782537937 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:17.782546997 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:17.794462919 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:17.794547081 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:17.794558048 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:17.797800064 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:17.797982931 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:17.797993898 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:17.843554974 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:17.874854088 CET	443	49828	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:17.874955893 CET	443	49828	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:17.874982119 CET	49828	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:17.875013113 CET	49828	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:17.875647068 CET	49828	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:17.875668049 CET	443	49828	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:17.875955105 CET	49845	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:17.875998020 CET	443	49845	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:17.878576994 CET	49845	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:17.878801107 CET	49845	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:17.878813028 CET	443	49845	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:17.897156000 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:17.925075054 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:17.925095081 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:17.925167084 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:17.925192118 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:17.925205946 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:17.925231934 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:17.925273895 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:17.925287008 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:17.925295115 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:17.925328016 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:17.925333023 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:17.933015108 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:17.933105946 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:17.933128119 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:17.933172941 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:17.958605051 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:17.958954096 CET	49837	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:17.959001064 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:17.959367990 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:17.959700108 CET	49837	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:17.959765911 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:17.959831953 CET	49837	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:17.959980965 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:17.960020065 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:17.960068941 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:17.960073948 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:17.960110903 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:17.960130930 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:17.960143089 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:17.960185051 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:17.967538118 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:17.967672110 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:17.967683077 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:17.971298933 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:17.971389055 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:17.971400023 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:17.971446037 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:17.986088037 CET	443	49838	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:17.986737013 CET	49838	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:17.986771107 CET	443	49838	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:17.987183094 CET	443	49838	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:17.987521887 CET	49838	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:17.987590075 CET	443	49838	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:17.987674952 CET	49838	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:18.001667023 CET	49837	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:18.007333040 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.031335115 CET	443	49838	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.089200974 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:18.089227915 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:18.089360952 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:18.089387894 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:18.089442968 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:18.099699974 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:18.099806070 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:18.099817038 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:18.103157997 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:18.103215933 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:18.103228092 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:18.103271961 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:18.122235060 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:18.122265100 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:18.122342110 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:18.122364998 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:18.122409105 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:18.127094030 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:18.127168894 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:18.127178907 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:18.127223969 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:18.129890919 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:18.129947901 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:18.129956007 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:18.129995108 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:18.135031939 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:18.135088921 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:18.135096073 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:18.135140896 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:18.140145063 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:18.140216112 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:18.140222073 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:18.140264034 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:18.143328905 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:18.143394947 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:18.143403053 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:18.143445015 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:18.147866964 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:18.147933006 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:18.147958040 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:18.148005962 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:18.167769909 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:18.167800903 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:18.167885065 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:18.167893887 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:18.167942047 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:18.181885958 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:18.181919098 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:18.181994915 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:18.182004929 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:18.182049990 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:18.200067043 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:18.200097084 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:18.200202942 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:18.200229883 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:18.200275898 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:18.271606922 CET	443	49839	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.272042990 CET	49839	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:18.272083044 CET	443	49839	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.273384094 CET	443	49842	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:18.273639917 CET	49842	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:18.273673058 CET	443	49842	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:18.273884058 CET	443	49839	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.273946047 CET	49839	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:18.274594069 CET	443	49839	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.274646997 CET	49839	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:18.274786949 CET	49839	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:18.274925947 CET	49839	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:18.275018930 CET	443	49842	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:18.275084972 CET	443	49839	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.275321960 CET	49842	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:18.275377989 CET	443	49842	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:18.275449038 CET	49842	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:18.282089949 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:18.282124996 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:18.282227993 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:18.282254934 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:18.282300949 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:18.295300007 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:18.295350075 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:18.295459032 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:18.295485973 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:18.295530081 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:18.307487965 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:18.307528973 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:18.307625055 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:18.307653904 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:18.307665110 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:18.308407068 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:18.319329977 CET	443	49842	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:18.319508076 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:18.319546938 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:18.319612980 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:18.319634914 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:18.319650888 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:18.320686102 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:18.326540947 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:18.326596022 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:18.326627970 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:18.326648951 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:18.326659918 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:18.328439951 CET	49839	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:18.328448057 CET	49842	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:18.328459978 CET	443	49839	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.336253881 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:18.336283922 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:18.336369038 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:18.336389065 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:18.341962099 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:18.341986895 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:18.342046976 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:18.342072964 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:18.342087030 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:18.348309040 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:18.348336935 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:18.348417997 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:18.348434925 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:18.348449945 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:18.374803066 CET	49839	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:18.390181065 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:18.474817991 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:18.474888086 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:18.474950075 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:18.474973917 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:18.474992037 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:18.475004911 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:18.475020885 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:18.475052118 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:18.475440025 CET	49836	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:18.475454092 CET	443	49836	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:18.496304035 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.524492979 CET	443	49838	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.545253038 CET	49837	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:18.547827959 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.547842026 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.547862053 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.547868967 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.547893047 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.547913074 CET	49837	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:18.547928095 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.547986031 CET	49837	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:18.570735931 CET	49838	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:18.576922894 CET	443	49838	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.576936960 CET	443	49838	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.576977015 CET	443	49838	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.577007055 CET	443	49838	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.577033997 CET	49838	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:18.577050924 CET	443	49838	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.577070951 CET	49838	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:18.577099085 CET	49838	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:18.657857895 CET	49846	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:18.657912970 CET	443	49846	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:18.657984972 CET	49846	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:18.658193111 CET	49846	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:18.658205986 CET	443	49846	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:18.690542936 CET	49847	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:18.690612078 CET	443	49847	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:18.690709114 CET	49847	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:18.691349030 CET	49847	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:18.691368103 CET	443	49847	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:18.716672897 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.716692924 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.716744900 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.716844082 CET	49837	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:18.716883898 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.716900110 CET	49837	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:18.716929913 CET	49837	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:18.741930008 CET	443	49838	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.741965055 CET	443	49838	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.742119074 CET	49838	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:18.742150068 CET	443	49838	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.742197990 CET	49838	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:18.757564068 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.757590055 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.757688046 CET	49837	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:18.757723093 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.757776022 CET	49837	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:18.795605898 CET	443	49838	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.795627117 CET	443	49838	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.795768976 CET	49838	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:18.795800924 CET	443	49838	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.795852900 CET	49838	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:18.801580906 CET	443	49839	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.824501038 CET	443	49842	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:18.824556112 CET	443	49842	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:18.824604034 CET	49842	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:18.824621916 CET	443	49842	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:18.824949980 CET	443	49842	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:18.824995041 CET	49842	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:18.825001955 CET	443	49842	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:18.825088978 CET	443	49842	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:18.825133085 CET	49842	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:18.826920986 CET	49848	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:18.826952934 CET	443	49848	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:18.827018023 CET	49848	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:18.828002930 CET	49848	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:18.828022003 CET	443	49848	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:18.828428030 CET	49842	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:18.828438997 CET	443	49842	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:18.829205036 CET	49849	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:18.829240084 CET	443	49849	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:18.829291105 CET	49849	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:18.829673052 CET	49849	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:18.829683065 CET	443	49849	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:18.847203970 CET	49839	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:18.853785992 CET	443	49838	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.853874922 CET	443	49838	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.853885889 CET	49838	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:18.853915930 CET	443	49838	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.853933096 CET	49838	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:18.853945971 CET	443	49838	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.853964090 CET	49838	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:18.854000092 CET	49838	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:18.854197979 CET	49838	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:18.854209900 CET	443	49838	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.854320049 CET	443	49839	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.854335070 CET	443	49839	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.854371071 CET	443	49839	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.854377031 CET	49839	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:18.854403019 CET	443	49839	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.854427099 CET	443	49839	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.854453087 CET	443	49839	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.854454041 CET	49839	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:18.854454041 CET	49839	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:18.854466915 CET	49839	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:18.880670071 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.880707026 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.880806923 CET	49837	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:18.880842924 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.880887985 CET	49837	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:18.901048899 CET	443	49841	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.901362896 CET	49841	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:18.901388884 CET	443	49841	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.901464939 CET	443	49840	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.901741982 CET	49840	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:18.901768923 CET	443	49840	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.901799917 CET	443	49841	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.902129889 CET	49841	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:18.902192116 CET	443	49841	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.902198076 CET	443	49840	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.902260065 CET	49841	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:18.902513027 CET	49840	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:18.902590036 CET	443	49840	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.902610064 CET	49840	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:18.904822111 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.904854059 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.904901028 CET	49837	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:18.904927015 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.904947996 CET	49837	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:18.904967070 CET	49837	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:18.909245014 CET	49839	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:18.929027081 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.929063082 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.929192066 CET	49837	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:18.929230928 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.929280996 CET	49837	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:18.943334103 CET	443	49840	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.943340063 CET	443	49841	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.949098110 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.949137926 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.949237108 CET	49837	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:18.949259996 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.949275970 CET	49837	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:18.949299097 CET	49837	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:18.951955080 CET	49840	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:18.999020100 CET	443	49839	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.999036074 CET	443	49839	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.999085903 CET	443	49839	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.999103069 CET	443	49839	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.999119043 CET	443	49839	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:18.999166012 CET	49839	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:18.999228001 CET	49839	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.000538111 CET	49839	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.000559092 CET	443	49839	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.002564907 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.002592087 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.002662897 CET	49837	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.002672911 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.002722025 CET	49837	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.082412958 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.082441092 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.082515001 CET	49837	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.082545042 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.082588911 CET	49837	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.096184969 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.096201897 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.096303940 CET	49837	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.096317053 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.096358061 CET	49837	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.110063076 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.110084057 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.110189915 CET	49837	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.110233068 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.110276937 CET	49837	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.115938902 CET	443	49843	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.116254091 CET	49843	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.116283894 CET	443	49843	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.116723061 CET	443	49843	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.117063046 CET	49843	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.117146969 CET	443	49843	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.117199898 CET	49843	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.122349024 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.122378111 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.122451067 CET	49837	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.122469902 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.122514963 CET	49837	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.134289980 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.134315968 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.134423018 CET	49837	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.134438992 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.134474039 CET	49837	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.143872976 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.143894911 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.143954992 CET	49837	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.143966913 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.144005060 CET	49837	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.154149055 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.154172897 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.154251099 CET	49837	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.154266119 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.154305935 CET	49837	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.163337946 CET	443	49843	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.265871048 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.265904903 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.266150951 CET	49837	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.266206026 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.266299963 CET	49837	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.274291992 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.274317026 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.274382114 CET	49837	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.274408102 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.274424076 CET	49837	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.274442911 CET	49837	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.281017065 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.281060934 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.281126976 CET	49837	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.281141043 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.281167030 CET	49837	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.281186104 CET	49837	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.282521963 CET	49837	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.282545090 CET	443	49837	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.433517933 CET	443	49844	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.433835030 CET	49844	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.433871984 CET	443	49844	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.434299946 CET	443	49844	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.434676886 CET	49844	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.434746027 CET	443	49844	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.434819937 CET	49844	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.437063932 CET	443	49841	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.439758062 CET	443	49840	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.475358009 CET	443	49844	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.484858990 CET	49841	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.486546993 CET	49840	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.487095118 CET	443	49840	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.487108946 CET	443	49840	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.487165928 CET	443	49840	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.487180948 CET	443	49840	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.487191916 CET	49840	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.487201929 CET	443	49840	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.487210035 CET	443	49840	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.487241983 CET	49840	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.487260103 CET	49840	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.488846064 CET	443	49841	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.488858938 CET	443	49841	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.488873959 CET	443	49841	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.488905907 CET	443	49841	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.488924980 CET	49841	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.488938093 CET	443	49841	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.488948107 CET	49841	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.488956928 CET	49841	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.488974094 CET	49841	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.632200956 CET	443	49840	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.632215977 CET	443	49840	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.632307053 CET	443	49840	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.632324934 CET	49840	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.632369995 CET	49840	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.632817984 CET	49840	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.632842064 CET	443	49840	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.632975101 CET	443	49841	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.633059025 CET	49841	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.633081913 CET	443	49841	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.633095980 CET	443	49841	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.633142948 CET	49841	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.639993906 CET	49841	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.640014887 CET	443	49841	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.644098997 CET	49850	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.644146919 CET	443	49850	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.644246101 CET	49850	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.644437075 CET	49850	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.644457102 CET	443	49850	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.647522926 CET	49851	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.647568941 CET	443	49851	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.647641897 CET	49851	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.647819042 CET	49851	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.647831917 CET	443	49851	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.648982048 CET	49852	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.649015903 CET	443	49852	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.649071932 CET	49852	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.649238110 CET	49852	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.649250031 CET	443	49852	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.652476072 CET	443	49843	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.656661034 CET	443	49843	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.656765938 CET	49843	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.656800985 CET	443	49843	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.656848907 CET	49843	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.657082081 CET	49843	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.657123089 CET	443	49843	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.657177925 CET	49843	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.717372894 CET	443	49845	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.717674017 CET	49845	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.717705011 CET	443	49845	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.718127966 CET	443	49845	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.718190908 CET	49845	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.718877077 CET	443	49845	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.718934059 CET	49845	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.720453024 CET	49845	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.720525026 CET	443	49845	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.720653057 CET	49845	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.720660925 CET	443	49845	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.765134096 CET	49845	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.867572069 CET	443	49846	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:19.867791891 CET	49846	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:19.867805958 CET	443	49846	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:19.868712902 CET	443	49846	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:19.868786097 CET	49846	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:19.869151115 CET	49846	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:19.869220972 CET	443	49846	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:19.869290113 CET	49846	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:19.869293928 CET	443	49846	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:19.904057980 CET	443	49847	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:19.905865908 CET	49847	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:19.905886889 CET	443	49847	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:19.906291008 CET	443	49847	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:19.906383038 CET	49847	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:19.907022953 CET	443	49847	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:19.907078981 CET	49847	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:19.909377098 CET	49847	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:19.909456968 CET	443	49847	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:19.909615040 CET	49847	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:19.909627914 CET	443	49847	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:19.909687042 CET	49847	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:19.909712076 CET	443	49847	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:19.922005892 CET	49846	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:19.959984064 CET	443	49844	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.972522020 CET	443	49844	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.972601891 CET	443	49844	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:19.972632885 CET	49844	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.972682953 CET	49844	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.973047018 CET	49844	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:19.973072052 CET	443	49844	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:20.044773102 CET	443	49849	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:20.046268940 CET	443	49848	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:20.046919107 CET	49849	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:20.046935081 CET	443	49849	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:20.047072887 CET	49848	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:20.047102928 CET	443	49848	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:20.047389984 CET	443	49849	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:20.047568083 CET	443	49848	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:20.047734022 CET	49849	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:20.047802925 CET	443	49849	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:20.048022032 CET	49848	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:20.048108101 CET	443	49848	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:20.048183918 CET	49849	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:20.048243999 CET	49848	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:20.091335058 CET	443	49848	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:20.091339111 CET	443	49849	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:20.252197027 CET	443	49845	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:20.256179094 CET	443	49845	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:20.256266117 CET	49845	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:20.256300926 CET	443	49845	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:20.257695913 CET	443	49845	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:20.257747889 CET	49845	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:20.328908920 CET	49845	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:20.328948021 CET	443	49845	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:20.391652107 CET	443	49846	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:20.391782999 CET	443	49846	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:20.391844988 CET	49846	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:20.392416954 CET	49846	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:20.392432928 CET	443	49846	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:20.396176100 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:20.396224022 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:20.396308899 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:20.396579981 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:20.396593094 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:20.397850990 CET	49854	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:20.397895098 CET	443	49854	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:20.397967100 CET	49854	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:20.398211002 CET	49854	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:20.398224115 CET	443	49854	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:20.447874069 CET	443	49847	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:20.447957039 CET	443	49847	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:20.448004961 CET	49847	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:20.448029041 CET	443	49847	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:20.448044062 CET	443	49847	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:20.448079109 CET	49847	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:20.448817015 CET	49847	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:20.448837996 CET	443	49847	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:20.451838970 CET	49855	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:20.451883078 CET	443	49855	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:20.451951981 CET	49855	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:20.452136040 CET	49855	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:20.452148914 CET	443	49855	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:20.514029980 CET	443	49848	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:20.514148951 CET	443	49848	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:20.514220953 CET	49848	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:20.515007973 CET	49848	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:20.515028954 CET	443	49848	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:20.604614973 CET	443	49849	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:20.604676008 CET	443	49849	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:20.604756117 CET	49849	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:20.604773998 CET	443	49849	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:20.605057955 CET	443	49849	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:20.605123997 CET	49849	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:20.605129004 CET	443	49849	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:20.605184078 CET	443	49849	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:20.605257988 CET	49849	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:20.606833935 CET	49849	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:20.606848955 CET	443	49849	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:20.607718945 CET	49856	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:20.607752085 CET	443	49856	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:20.607825041 CET	49856	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:20.608046055 CET	49856	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:20.608057976 CET	443	49856	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:21.437006950 CET	443	49850	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:21.437361956 CET	49850	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:21.437392950 CET	443	49850	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:21.437813044 CET	443	49850	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:21.438160896 CET	49850	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:21.438229084 CET	443	49850	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:21.438292980 CET	49850	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:21.443065882 CET	443	49852	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:21.443267107 CET	49852	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:21.443283081 CET	443	49852	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:21.443635941 CET	443	49852	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:21.443713903 CET	49852	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:21.444245100 CET	443	49852	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:21.444297075 CET	49852	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:21.444434881 CET	49852	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:21.444494009 CET	443	49852	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:21.444535017 CET	49852	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:21.483330965 CET	443	49850	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:21.485389948 CET	49852	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:21.485414028 CET	443	49852	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:21.531595945 CET	49852	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:21.607942104 CET	443	49854	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:21.608501911 CET	49854	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:21.608536005 CET	443	49854	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:21.608913898 CET	443	49854	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:21.609013081 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:21.609292030 CET	49854	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:21.609380007 CET	443	49854	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:21.609756947 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:21.609776020 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:21.609911919 CET	49854	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:21.610145092 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:21.610445976 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:21.610506058 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:21.610539913 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:21.630381107 CET	443	49851	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:21.630664110 CET	49851	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:21.630691051 CET	443	49851	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:21.631306887 CET	443	49851	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:21.631639004 CET	49851	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:21.631711960 CET	443	49851	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:21.631767035 CET	49851	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:21.651335955 CET	443	49854	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:21.651349068 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:21.656285048 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:21.665668964 CET	443	49855	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:21.665923119 CET	49855	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:21.665946007 CET	443	49855	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:21.666321039 CET	443	49855	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:21.666630030 CET	49855	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:21.666696072 CET	443	49855	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:21.666759014 CET	49855	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:21.675329924 CET	443	49851	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:21.711333990 CET	443	49855	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:21.816553116 CET	443	49856	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:21.816854954 CET	49856	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:21.816879988 CET	443	49856	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:21.817212105 CET	443	49856	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:21.817547083 CET	49856	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:21.817609072 CET	443	49856	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:21.817677975 CET	49856	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:21.863327980 CET	443	49856	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:21.969732046 CET	443	49852	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:21.970369101 CET	443	49850	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:21.982620955 CET	443	49850	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:21.982683897 CET	443	49850	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:21.982692957 CET	49850	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:21.982733011 CET	49850	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:21.984493971 CET	49850	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:21.984519005 CET	443	49850	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:21.989418030 CET	49857	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:21.989451885 CET	443	49857	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:21.989536047 CET	49857	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:21.989720106 CET	49857	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:21.989729881 CET	443	49857	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:22.010879993 CET	49852	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:22.024012089 CET	443	49852	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:22.024023056 CET	443	49852	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:22.024081945 CET	443	49852	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:22.024097919 CET	443	49852	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:22.024111986 CET	443	49852	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:22.024142027 CET	49852	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:22.024178982 CET	443	49852	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:22.024200916 CET	49852	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:22.024230003 CET	49852	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:22.041440964 CET	49858	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:22.041490078 CET	443	49858	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:22.041580915 CET	49858	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:22.041954041 CET	49859	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:22.041992903 CET	443	49859	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:22.042048931 CET	49859	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:22.042176008 CET	49858	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:22.042196989 CET	443	49858	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:22.042315006 CET	49859	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:22.042325974 CET	443	49859	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:22.086173058 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.086283922 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.086339951 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:22.086391926 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.086755991 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.086798906 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:22.086805105 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.094527006 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.094597101 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:22.094624996 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.097853899 CET	49860	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:22.097918034 CET	443	49860	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.098002911 CET	49860	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:22.098280907 CET	49860	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:22.098294020 CET	443	49860	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.103260040 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.103307962 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:22.103322029 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.111326933 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.111371040 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:22.111378908 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.130856037 CET	443	49854	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:22.131172895 CET	443	49854	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:22.131234884 CET	49854	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:22.131716967 CET	49854	443	192.168.2.8	151.101.131.1
Dec 5, 2024 20:20:22.131733894 CET	443	49854	151.101.131.1	192.168.2.8
Dec 5, 2024 20:20:22.159082890 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:22.159099102 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.163362980 CET	443	49851	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:22.164901018 CET	443	49852	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:22.164915085 CET	443	49852	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:22.165002108 CET	443	49852	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:22.165038109 CET	49852	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:22.165066004 CET	49852	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:22.165312052 CET	49852	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:22.165327072 CET	443	49852	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:22.185245037 CET	443	49855	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:22.185317993 CET	443	49855	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:22.185364962 CET	49855	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:22.185389996 CET	443	49855	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:22.185444117 CET	443	49855	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:22.185480118 CET	49855	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:22.186616898 CET	49855	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:22.186633110 CET	443	49855	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:22.188467026 CET	49861	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:22.188507080 CET	443	49861	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:22.188580990 CET	49861	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:22.188950062 CET	49861	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:22.188966990 CET	443	49861	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:22.205822945 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:22.206257105 CET	49851	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:22.206429005 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.216517925 CET	443	49851	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:22.216533899 CET	443	49851	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:22.216573954 CET	443	49851	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:22.216600895 CET	443	49851	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:22.216605902 CET	49851	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:22.216634989 CET	443	49851	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:22.216646910 CET	49851	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:22.216646910 CET	49851	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:22.216676950 CET	49851	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:22.252274036 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:22.269385099 CET	443	49856	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:22.269521952 CET	443	49856	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:22.269582987 CET	49856	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:22.270273924 CET	49856	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:22.270299911 CET	443	49856	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:22.278203011 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.282293081 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.282366037 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:22.282385111 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.290618896 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.290683031 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:22.290693998 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.298813105 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.298881054 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:22.298897028 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.307168961 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.307231903 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:22.307248116 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.315236092 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.315280914 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:22.315296888 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.331834078 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.331880093 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.331892014 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:22.331902027 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.331943989 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:22.340068102 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.348212004 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.348282099 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:22.348297119 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.354907036 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.354967117 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:22.354975939 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.366230011 CET	443	49851	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:22.366332054 CET	49851	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:22.366338968 CET	443	49851	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:22.366389990 CET	49851	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:22.366612911 CET	49851	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:22.366630077 CET	443	49851	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:22.370531082 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.370584965 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:22.370594025 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.421416044 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:22.421458006 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.467833996 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:22.473455906 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.475646973 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.475709915 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:22.475719929 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.481564045 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.481618881 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.481620073 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:22.481633902 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.481669903 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:22.481674910 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.510145903 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.510157108 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.510175943 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.510190964 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.510196924 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.510226011 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:22.510246038 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.510272026 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.510279894 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:22.510297060 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:22.541896105 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.541904926 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.541924953 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.541937113 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.541990042 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:22.542006016 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.542036057 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:22.584121943 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:22.599988937 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.599999905 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.600028038 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.600034952 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.600106955 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:22.600142002 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.600157976 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:22.600182056 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:22.684170961 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.684185028 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.684225082 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.684308052 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:22.684350967 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.684370995 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:22.684390068 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:22.706137896 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.706168890 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.706300020 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:22.706346989 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.706388950 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:22.727041960 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.727092981 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.727111101 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:22.727125883 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.727159023 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:22.727181911 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:22.727185965 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.728928089 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.728980064 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:22.728985071 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.734792948 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.734854937 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:22.734869003 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.748016119 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.748039961 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.748107910 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:22.748117924 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.760433912 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.760449886 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.760525942 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:22.760540962 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.815192938 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:22.860668898 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.860680103 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.860709906 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.860742092 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:22.860763073 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.860800982 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:22.860816956 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:22.872814894 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.872834921 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.872914076 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:22.872927904 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.872971058 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:22.882456064 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.882472992 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.882534027 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:22.882544041 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.882584095 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:22.892580986 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.892597914 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.892646074 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:22.892663002 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.892700911 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:22.892728090 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:22.902048111 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.902064085 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.902102947 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:22.902117014 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.902142048 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:22.902158022 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:22.910928011 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.910943031 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.910991907 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:22.911005020 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.911103964 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:22.915299892 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.915359974 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:22.915368080 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.946604013 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.946621895 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.946676970 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:22.946698904 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:22.946721077 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:22.986427069 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.050298929 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.050324917 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.050394058 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.050446987 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.050462961 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.050481081 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.057683945 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.057722092 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.057765007 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.057796955 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.057857037 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.057857037 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.065905094 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.065927982 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.065963984 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.065978050 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.066031933 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.074198008 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.074215889 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.074265957 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.074280024 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.074328899 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.082626104 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.082643032 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.082680941 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.082685947 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.082731009 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.090904951 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.090935946 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.090965033 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.090972900 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.091010094 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.099042892 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.099060059 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.099102020 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.099114895 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.099147081 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.099165916 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.138823032 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.138854027 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.138896942 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.138919115 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.138947010 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.138976097 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.242875099 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.242903948 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.243022919 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.243052006 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.243098021 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.249910116 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.249926090 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.249958038 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.249991894 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.250001907 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.250025988 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.257802010 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.257828951 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.257865906 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.257882118 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.257903099 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.264595985 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.264612913 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.264683008 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.264693975 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.272353888 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.272373915 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.272432089 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.272443056 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.272453070 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.279625893 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.279642105 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.279719114 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.279731989 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.287555933 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.287576914 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.287631035 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.287642002 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.287658930 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.310076952 CET	443	49860	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.310345888 CET	49860	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.310374975 CET	443	49860	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.310714960 CET	443	49860	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.311197042 CET	49860	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.311289072 CET	443	49860	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.311487913 CET	49860	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.311511040 CET	443	49860	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.332161903 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.332180023 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.332293987 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.332326889 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.377876997 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.399801016 CET	443	49861	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:23.400082111 CET	49861	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:23.400105000 CET	443	49861	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:23.400496960 CET	443	49861	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:23.400827885 CET	49861	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:23.400908947 CET	443	49861	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:23.400984049 CET	49861	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:23.435060978 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.435071945 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.435096979 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.435117960 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.435163975 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.435185909 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.435211897 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.435229063 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.442028046 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.442044020 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.442121983 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.442138910 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.442173004 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.443320990 CET	443	49861	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:23.449657917 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.449690104 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.449740887 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.449757099 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.449768066 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.449793100 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.456252098 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.456269979 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.456345081 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.456357002 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.456393957 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.463985920 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.464009047 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.464097023 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.464112043 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.464157104 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.464852095 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.464934111 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.464941978 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.472268105 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.472285032 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.472335100 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.472348928 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.479676008 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.479698896 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.479731083 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.479748011 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.479764938 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.524467945 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.524482965 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.524566889 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.524589062 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.578362942 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.629180908 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.629193068 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.629221916 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.629297972 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.629326105 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.629343987 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.629363060 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.629395008 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.629626989 CET	49853	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.629643917 CET	443	49853	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.804342985 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.804404020 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.804471970 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.804757118 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.804770947 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.847671986 CET	443	49860	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.847832918 CET	443	49860	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.847897053 CET	49860	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.851562023 CET	49860	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.851577044 CET	443	49860	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.856754065 CET	443	49859	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:23.856997967 CET	49859	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:23.857013941 CET	443	49859	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:23.857491970 CET	443	49858	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:23.857534885 CET	443	49859	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:23.858331919 CET	49858	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:23.858356953 CET	443	49858	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:23.858620882 CET	49859	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:23.858717918 CET	443	49859	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:23.858745098 CET	49859	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:23.858860970 CET	443	49858	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:23.859152079 CET	49858	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:23.859230042 CET	443	49858	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:23.859781981 CET	49858	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:23.899338961 CET	443	49859	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:23.903333902 CET	443	49858	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:23.911680937 CET	49859	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:23.958282948 CET	49863	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.958336115 CET	443	49863	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.958425045 CET	49863	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.959069014 CET	49863	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:23.959095955 CET	443	49863	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:23.996942043 CET	443	49857	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:23.997294903 CET	49857	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:23.997328043 CET	443	49857	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:23.997744083 CET	443	49857	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:23.998217106 CET	49857	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:23.998279095 CET	443	49857	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:23.998378992 CET	49857	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:24.043334007 CET	443	49857	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:24.386375904 CET	443	49859	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:24.387151957 CET	443	49858	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:24.391896009 CET	443	49858	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:24.391963005 CET	443	49858	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:24.391984940 CET	49858	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:24.392025948 CET	49858	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:24.392288923 CET	49858	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:24.392307043 CET	443	49858	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:24.398932934 CET	443	49859	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:24.398947954 CET	443	49859	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:24.399015903 CET	49859	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:24.399022102 CET	443	49859	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:24.399094105 CET	49859	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:24.400445938 CET	49864	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:24.400496006 CET	443	49864	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:24.400568962 CET	49864	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:24.400860071 CET	49865	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:24.400909901 CET	443	49865	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:24.400969028 CET	49865	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:24.401077986 CET	49864	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:24.401093006 CET	443	49864	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:24.401230097 CET	49865	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:24.401242971 CET	443	49865	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:24.401585102 CET	49866	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:24.401599884 CET	443	49866	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:24.401643038 CET	49866	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:24.401778936 CET	49866	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:24.401792049 CET	443	49866	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:24.402226925 CET	49859	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:24.402245045 CET	443	49859	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:24.419822931 CET	49867	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:24.419853926 CET	443	49867	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:24.419924021 CET	49867	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:24.420211077 CET	49867	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:24.420222998 CET	443	49867	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:24.438900948 CET	49868	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:24.438944101 CET	443	49868	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:24.439024925 CET	49868	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:24.439196110 CET	49868	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:24.439208984 CET	443	49868	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:24.530775070 CET	443	49857	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:24.542994976 CET	443	49857	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:24.543065071 CET	443	49857	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:24.543065071 CET	49857	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:24.543107033 CET	49857	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:24.543426037 CET	49857	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:24.543442011 CET	443	49857	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:25.042479992 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:25.043049097 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:25.043093920 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:25.044234037 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:25.044301987 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:25.046576977 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:25.046639919 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:25.047050953 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:25.047059059 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:25.093136072 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:25.161293983 CET	443	49861	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:25.161396980 CET	443	49861	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:25.161458015 CET	49861	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:25.161489964 CET	443	49861	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:25.207204103 CET	49861	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:25.281039953 CET	443	49861	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:25.282483101 CET	443	49863	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:25.304755926 CET	49863	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:25.304785013 CET	443	49863	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:25.305330992 CET	443	49863	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:25.314526081 CET	49863	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:25.314647913 CET	443	49863	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:25.314790964 CET	49863	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:25.314816952 CET	443	49863	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:25.330319881 CET	49861	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:25.400440931 CET	443	49861	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:25.400587082 CET	443	49861	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:25.400664091 CET	49861	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:25.400697947 CET	443	49861	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:25.401319027 CET	443	49861	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:25.401351929 CET	443	49861	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:25.401401997 CET	49861	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:25.401413918 CET	443	49861	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:25.401454926 CET	49861	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:25.574596882 CET	443	49861	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:25.578818083 CET	443	49861	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:25.578907013 CET	49861	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:25.578929901 CET	443	49861	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:25.587142944 CET	443	49861	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:25.587223053 CET	49861	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:25.587243080 CET	443	49861	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:25.595624924 CET	443	49861	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:25.595712900 CET	49861	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:25.595721006 CET	443	49861	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:25.595736980 CET	443	49861	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:25.595803022 CET	49861	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:25.595846891 CET	49861	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:25.595860004 CET	443	49861	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:25.648297071 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:25.648628950 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:25.649113894 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:25.649152994 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:25.649182081 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:25.649210930 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:25.649224997 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:25.660211086 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:25.660286903 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:25.660301924 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:25.668612003 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:25.668670893 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:25.668680906 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:25.676991940 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:25.677057981 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:25.677067995 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:25.677074909 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:25.677496910 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:25.677503109 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:25.717736006 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:25.768641949 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:25.772588015 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:25.772696018 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:25.772713900 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:25.814213037 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:25.819415092 CET	443	49863	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:25.819572926 CET	443	49863	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:25.819776058 CET	49863	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:25.821160078 CET	49863	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:25.821177959 CET	443	49863	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:25.845398903 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:25.849111080 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:25.849181890 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:25.849199057 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:25.856556892 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:25.856686115 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:25.856695890 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:25.863965034 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:25.864016056 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:25.864036083 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:25.878772020 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:25.878834963 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:25.878882885 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:25.878892899 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:25.878978968 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:25.886280060 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:25.895035028 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:25.895068884 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:25.895078897 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:25.895087957 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:25.895153046 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:25.901166916 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:25.908678055 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:25.908729076 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:25.908736944 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:25.914580107 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:25.914655924 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:25.914661884 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:25.920516014 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:25.920591116 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:25.920598030 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:25.920660973 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:25.920701981 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:25.920707941 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:25.932461977 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:25.932508945 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:25.932533026 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:25.938544989 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:25.938641071 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:25.938656092 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:25.938664913 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:25.938715935 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:25.938734055 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:25.984407902 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:25.984431982 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.030778885 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.037792921 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.039593935 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.039654016 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.039666891 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.044101000 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.044152021 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.044162035 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.044254065 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.044295073 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.044300079 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.053011894 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.053122997 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.053131104 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.053177118 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.053212881 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.053217888 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.062021971 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.062030077 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.062087059 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.062097073 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.070369959 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.070421934 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.070427895 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.070485115 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.070489883 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.077701092 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.077758074 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.077764988 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.077827930 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.077831030 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.105006933 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.105019093 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.105053902 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.105062962 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.105067968 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.105221987 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.105242968 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.105298042 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.231307030 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.231328011 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.231365919 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.231390953 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.231467009 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.231506109 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.231523037 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.232222080 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.237808943 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.237880945 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.237889051 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.238234043 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.245702028 CET	443	49864	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:26.246001959 CET	49864	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:26.246035099 CET	443	49864	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:26.246562004 CET	443	49864	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:26.246803999 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.246865988 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.246877909 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.246886015 CET	49864	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:26.246917963 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.247025967 CET	443	49864	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:26.247066975 CET	49864	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:26.247975111 CET	443	49865	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:26.248579025 CET	49865	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:26.248594046 CET	443	49865	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:26.249054909 CET	443	49865	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:26.249387980 CET	49865	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:26.249475002 CET	443	49865	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:26.249495029 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.249520063 CET	49865	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:26.249533892 CET	443	49866	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:26.249552011 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.249557972 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.249603033 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.249607086 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.249727964 CET	49866	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:26.249746084 CET	443	49866	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:26.249821901 CET	443	49867	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:26.250121117 CET	443	49866	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:26.250174046 CET	49866	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:26.250199080 CET	49867	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:26.250209093 CET	443	49867	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:26.250680923 CET	443	49867	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:26.250799894 CET	443	49866	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:26.250849962 CET	49866	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:26.250984907 CET	49867	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:26.251044035 CET	443	49867	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:26.251116991 CET	49866	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:26.251168966 CET	443	49866	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:26.251241922 CET	49867	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:26.251286030 CET	49866	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:26.251292944 CET	443	49866	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:26.252504110 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.252557993 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.252563953 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.252649069 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.261436939 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.261512995 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.261523962 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.266928911 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.266992092 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.267000914 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.267091990 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.278382063 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.278469086 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.278480053 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.281337023 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.281395912 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.281400919 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.281696081 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.281701088 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.287106991 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.287179947 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.287188053 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.287276983 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.291332960 CET	443	49864	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:26.295331001 CET	443	49867	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:26.295345068 CET	443	49865	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:26.301625967 CET	49865	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:26.301635981 CET	49864	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:26.301702023 CET	49866	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:26.307267904 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.307296038 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.307360888 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.307374954 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.308017015 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.327367067 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.327389002 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.327447891 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.327455997 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.327594042 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.339037895 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.339066982 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.339191914 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.339191914 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.339204073 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.393445969 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.422604084 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.422629118 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.422827959 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.422857046 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.422903061 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.438730955 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.438754082 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.438801050 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.438810110 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.438834906 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.438854933 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.445522070 CET	443	49868	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:26.448827982 CET	49868	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:26.448859930 CET	443	49868	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:26.449363947 CET	443	49868	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:26.452987909 CET	49868	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:26.453109026 CET	443	49868	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:26.453131914 CET	49868	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:26.453656912 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.453671932 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.453735113 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.453743935 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.453782082 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.465645075 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.465662003 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.465740919 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.465748072 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.465794086 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.478799105 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.478813887 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.478873968 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.478883028 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.479279041 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.485377073 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.485392094 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.485449076 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.485455036 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.485759020 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.488331079 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.488393068 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.488399982 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.488666058 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.495340109 CET	443	49868	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:26.495383978 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.495402098 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.495449066 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.495456934 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.495784998 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.501290083 CET	49868	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:26.501538038 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.501552105 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.501614094 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.501619101 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.502295971 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.618386984 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.618406057 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.618587971 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.618604898 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.618650913 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.625369072 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.625384092 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.625433922 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.625437975 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.625798941 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.631282091 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.631303072 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.631356001 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.631362915 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.631679058 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.638102055 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.638117075 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.638170958 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.638178110 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.638943911 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.644514084 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.644531012 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.644582033 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.644588947 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.644614935 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.644630909 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.651153088 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.651168108 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.651216984 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.651225090 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.651262045 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.651262045 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.657912970 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.657927990 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.657994986 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.658004999 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.658335924 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.663923979 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.663940907 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.663991928 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.664001942 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.664293051 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.781869888 CET	443	49865	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:26.782862902 CET	443	49864	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:26.783814907 CET	443	49867	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:26.784285069 CET	443	49866	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:26.785973072 CET	443	49865	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:26.786061049 CET	443	49865	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:26.786087036 CET	49865	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:26.786158085 CET	49865	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:26.786864042 CET	49865	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:26.786885977 CET	443	49865	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:26.787199974 CET	443	49864	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:26.787261963 CET	49864	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:26.787293911 CET	443	49864	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:26.787311077 CET	443	49864	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:26.787332058 CET	49864	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:26.787372112 CET	49864	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:26.790348053 CET	49864	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:26.790375948 CET	443	49864	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:26.794680119 CET	443	49867	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:26.794764042 CET	49867	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:26.794769049 CET	443	49867	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:26.794814110 CET	49867	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:26.795241117 CET	49867	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:26.795253992 CET	443	49867	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:26.797137976 CET	443	49866	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:26.797192097 CET	443	49866	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:26.797228098 CET	443	49866	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:26.797233105 CET	49866	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:26.797277927 CET	49866	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:26.802346945 CET	49866	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:26.802371979 CET	443	49866	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:26.803077936 CET	49869	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:26.803129911 CET	443	49869	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:26.803201914 CET	49869	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:26.803555965 CET	49869	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:26.803569078 CET	443	49869	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:26.806328058 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.806416988 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.806428909 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.808605909 CET	49870	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:26.808664083 CET	443	49870	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:26.809942007 CET	49870	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:26.810148001 CET	49870	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:26.810168028 CET	443	49870	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:26.811188936 CET	49871	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:26.811199903 CET	443	49871	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:26.811341047 CET	49871	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:26.811510086 CET	49871	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:26.811527014 CET	443	49871	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:26.812375069 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.812391043 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.812446117 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.812453032 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.812488079 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.819158077 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.819180012 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.819271088 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.819278955 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.826034069 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.826056004 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.826121092 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.826128960 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.832075119 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.832089901 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.832170010 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.832179070 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.839024067 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.839045048 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.839102983 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.839109898 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.845052958 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.845068932 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.845141888 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.845149994 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.851648092 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.851667881 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.851728916 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.851735115 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.904457092 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.983969927 CET	443	49868	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:26.996459007 CET	443	49868	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:26.996470928 CET	443	49868	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:26.996543884 CET	443	49868	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:26.996562958 CET	49868	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:26.996601105 CET	49868	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:26.996831894 CET	49868	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:26.996854067 CET	443	49868	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:26.998660088 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.998670101 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.998698950 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.998756886 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.998783112 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:26.998806953 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:26.998826027 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:27.004384041 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:27.004400969 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:27.004442930 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:27.004447937 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:27.004489899 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:27.011368990 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:27.011387110 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:27.011466980 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:27.011475086 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:27.013261080 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:27.017913103 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:27.017930031 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:27.018007040 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:27.018016100 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:27.022633076 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:27.024919987 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:27.024938107 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:27.025015116 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:27.025024891 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:27.025180101 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:27.030999899 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:27.031034946 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:27.031063080 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:27.031069994 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:27.031094074 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:27.031114101 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:27.036911964 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:27.036927938 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:27.036978006 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:27.036987066 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:27.039643049 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:27.043711901 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:27.043729067 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:27.043781996 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:27.043797016 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:27.044085026 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:27.048415899 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:27.048451900 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:27.048481941 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:27.048487902 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:27.048578978 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:27.048624992 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:27.048872948 CET	49862	443	192.168.2.8	151.101.3.1
Dec 5, 2024 20:20:27.048890114 CET	443	49862	151.101.3.1	192.168.2.8
Dec 5, 2024 20:20:28.617466927 CET	443	49869	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:28.617844105 CET	49869	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:28.617872953 CET	443	49869	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:28.618290901 CET	443	49869	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:28.618624926 CET	49869	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:28.618685961 CET	443	49869	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:28.618767977 CET	49869	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:28.626030922 CET	443	49870	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:28.626799107 CET	443	49871	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:28.627552986 CET	49870	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:28.627588034 CET	443	49870	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:28.627880096 CET	49871	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:28.627904892 CET	443	49871	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:28.628029108 CET	443	49870	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:28.628380060 CET	443	49871	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:28.628454924 CET	49871	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:28.628817081 CET	49870	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:28.628896952 CET	443	49870	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:28.629115105 CET	443	49871	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:28.629149914 CET	49870	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:28.629170895 CET	49871	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:28.629338980 CET	49871	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:28.629404068 CET	443	49871	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:28.629434109 CET	49871	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:28.663340092 CET	443	49869	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:28.674684048 CET	49870	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:28.674691916 CET	49871	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:28.674736023 CET	443	49871	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:28.674736023 CET	443	49870	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:28.721225977 CET	49871	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:29.157907009 CET	443	49869	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:29.162278891 CET	443	49869	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:29.162364006 CET	49869	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:29.162389040 CET	443	49869	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:29.162461042 CET	49869	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:29.162666082 CET	49869	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:29.162707090 CET	443	49869	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:29.162749052 CET	49869	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:29.165915966 CET	443	49871	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:29.172282934 CET	443	49870	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:29.176733017 CET	443	49870	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:29.176800013 CET	443	49870	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:29.176812887 CET	49870	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:29.178531885 CET	49870	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:29.178531885 CET	49870	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:29.221395969 CET	49871	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:29.301407099 CET	443	49871	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:29.301428080 CET	443	49871	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:29.301497936 CET	49871	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:29.301497936 CET	443	49871	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:29.301554918 CET	443	49871	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:29.301939964 CET	49871	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:29.301969051 CET	443	49871	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:29.301984072 CET	49871	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:29.489978075 CET	49870	443	192.168.2.8	192.229.221.25
Dec 5, 2024 20:20:29.490014076 CET	443	49870	192.229.221.25	192.168.2.8
Dec 5, 2024 20:20:40.724416018 CET	49873	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:40.724472046 CET	443	49873	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:40.727719069 CET	49873	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:40.728060007 CET	49873	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:40.728072882 CET	443	49873	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:41.939363956 CET	443	49873	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:41.939655066 CET	49873	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:41.939693928 CET	443	49873	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:41.940068960 CET	443	49873	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:41.940468073 CET	49873	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:41.940555096 CET	443	49873	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:41.940695047 CET	49873	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:41.940721035 CET	443	49873	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:41.940792084 CET	49873	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:41.940826893 CET	443	49873	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:42.485769033 CET	443	49873	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:42.485860109 CET	443	49873	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:42.485928059 CET	49873	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:42.485959053 CET	443	49873	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:42.485975027 CET	443	49873	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:42.486027002 CET	49873	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:42.489583015 CET	49873	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:42.489603996 CET	443	49873	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:42.493050098 CET	49874	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:42.493094921 CET	443	49874	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:42.493158102 CET	49874	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:42.493375063 CET	49874	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:42.493387938 CET	443	49874	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:43.726372004 CET	443	49874	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:43.726684093 CET	49874	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:43.726720095 CET	443	49874	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:43.727091074 CET	443	49874	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:43.727400064 CET	49874	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:43.727461100 CET	443	49874	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:43.727551937 CET	49874	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:43.727689028 CET	443	49874	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:44.251357079 CET	443	49874	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:44.251444101 CET	443	49874	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:44.251545906 CET	443	49874	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:44.251600981 CET	49874	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:44.253029108 CET	49874	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:44.253045082 CET	443	49874	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:44.254024029 CET	49875	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:44.254071951 CET	443	49875	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:44.254163980 CET	49875	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:44.254410028 CET	49875	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:44.254426956 CET	443	49875	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:45.465481043 CET	443	49875	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:45.465861082 CET	49875	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:45.465893984 CET	443	49875	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:45.466288090 CET	443	49875	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:45.466732025 CET	49875	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:45.466800928 CET	443	49875	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:45.466967106 CET	49875	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:45.466986895 CET	443	49875	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:47.819214106 CET	443	49875	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:47.819634914 CET	443	49875	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:47.819673061 CET	443	49875	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:47.819720984 CET	49875	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:47.819751978 CET	443	49875	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:47.820466042 CET	49875	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:47.870575905 CET	443	49875	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:47.874752998 CET	443	49875	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:47.874809027 CET	49875	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:47.874820948 CET	443	49875	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:47.883222103 CET	443	49875	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:47.883266926 CET	443	49875	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:47.883285999 CET	49875	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:47.883295059 CET	443	49875	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:47.883548975 CET	49875	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:48.303204060 CET	443	49875	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:48.306996107 CET	443	49875	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:48.307073116 CET	49875	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:48.307099104 CET	443	49875	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:48.316684961 CET	443	49875	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:48.316747904 CET	49875	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:48.316756964 CET	443	49875	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:48.321486950 CET	443	49875	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:48.321649075 CET	49875	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:48.321655035 CET	443	49875	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:48.325385094 CET	443	49875	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:48.325438976 CET	49875	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:48.325532913 CET	49875	443	192.168.2.8	151.101.1.21
Dec 5, 2024 20:20:48.325547934 CET	443	49875	151.101.1.21	192.168.2.8
Dec 5, 2024 20:20:50.651689053 CET	49877	443	192.168.2.8	172.217.21.36
Dec 5, 2024 20:20:50.651737928 CET	443	49877	172.217.21.36	192.168.2.8
Dec 5, 2024 20:20:50.651820898 CET	49877	443	192.168.2.8	172.217.21.36
Dec 5, 2024 20:20:50.652141094 CET	49877	443	192.168.2.8	172.217.21.36
Dec 5, 2024 20:20:50.652153015 CET	443	49877	172.217.21.36	192.168.2.8
Dec 5, 2024 20:20:52.350707054 CET	443	49877	172.217.21.36	192.168.2.8
Dec 5, 2024 20:20:52.351099014 CET	49877	443	192.168.2.8	172.217.21.36
Dec 5, 2024 20:20:52.351130962 CET	443	49877	172.217.21.36	192.168.2.8
Dec 5, 2024 20:20:52.351645947 CET	443	49877	172.217.21.36	192.168.2.8
Dec 5, 2024 20:20:52.351988077 CET	49877	443	192.168.2.8	172.217.21.36
Dec 5, 2024 20:20:52.352102041 CET	443	49877	172.217.21.36	192.168.2.8
Dec 5, 2024 20:20:52.392323971 CET	49877	443	192.168.2.8	172.217.21.36
Dec 5, 2024 20:21:02.050189972 CET	443	49877	172.217.21.36	192.168.2.8
Dec 5, 2024 20:21:02.050272942 CET	443	49877	172.217.21.36	192.168.2.8
Dec 5, 2024 20:21:02.050385952 CET	49877	443	192.168.2.8	172.217.21.36
Dec 5, 2024 20:21:02.829730988 CET	49877	443	192.168.2.8	172.217.21.36
Dec 5, 2024 20:21:02.829782963 CET	443	49877	172.217.21.36	192.168.2.8

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 5, 2024 20:19:46.079622030 CET	53	58393	1.1.1.1	192.168.2.8
Dec 5, 2024 20:19:46.138506889 CET	53	55230	1.1.1.1	192.168.2.8
Dec 5, 2024 20:19:48.930295944 CET	53	57723	1.1.1.1	192.168.2.8
Dec 5, 2024 20:19:50.597596884 CET	65053	53	192.168.2.8	1.1.1.1
Dec 5, 2024 20:19:50.597862005 CET	65220	53	192.168.2.8	1.1.1.1
Dec 5, 2024 20:19:50.740906000 CET	53	65053	1.1.1.1	192.168.2.8
Dec 5, 2024 20:19:50.740930080 CET	53	65220	1.1.1.1	192.168.2.8
Dec 5, 2024 20:19:51.333468914 CET	58192	53	192.168.2.8	1.1.1.1
Dec 5, 2024 20:19:51.333638906 CET	58584	53	192.168.2.8	1.1.1.1
Dec 5, 2024 20:19:51.471452951 CET	53	58192	1.1.1.1	192.168.2.8
Dec 5, 2024 20:19:51.550128937 CET	53	58584	1.1.1.1	192.168.2.8
Dec 5, 2024 20:19:53.402610064 CET	58999	53	192.168.2.8	1.1.1.1
Dec 5, 2024 20:19:53.402776003 CET	54540	53	192.168.2.8	1.1.1.1
Dec 5, 2024 20:19:53.403743029 CET	59856	53	192.168.2.8	1.1.1.1
Dec 5, 2024 20:19:53.404089928 CET	64280	53	192.168.2.8	1.1.1.1
Dec 5, 2024 20:19:53.540734053 CET	53	59856	1.1.1.1	192.168.2.8
Dec 5, 2024 20:19:53.542359114 CET	53	64280	1.1.1.1	192.168.2.8
Dec 5, 2024 20:19:53.807339907 CET	53	54540	1.1.1.1	192.168.2.8
Dec 5, 2024 20:19:53.808336973 CET	53	58999	1.1.1.1	192.168.2.8
Dec 5, 2024 20:19:55.928752899 CET	53111	53	192.168.2.8	1.1.1.1
Dec 5, 2024 20:19:55.928961039 CET	61363	53	192.168.2.8	1.1.1.1
Dec 5, 2024 20:19:56.067091942 CET	53	53111	1.1.1.1	192.168.2.8
Dec 5, 2024 20:19:56.067397118 CET	53	61363	1.1.1.1	192.168.2.8
Dec 5, 2024 20:19:58.621710062 CET	61675	53	192.168.2.8	1.1.1.1
Dec 5, 2024 20:19:58.622164965 CET	61090	53	192.168.2.8	1.1.1.1
Dec 5, 2024 20:19:58.691481113 CET	53	63276	1.1.1.1	192.168.2.8
Dec 5, 2024 20:19:58.976051092 CET	53	61675	1.1.1.1	192.168.2.8
Dec 5, 2024 20:19:58.994942904 CET	53	61090	1.1.1.1	192.168.2.8
Dec 5, 2024 20:20:00.689496994 CET	55647	53	192.168.2.8	1.1.1.1
Dec 5, 2024 20:20:00.689704895 CET	54027	53	192.168.2.8	1.1.1.1
Dec 5, 2024 20:20:00.828630924 CET	53	54027	1.1.1.1	192.168.2.8
Dec 5, 2024 20:20:00.831379890 CET	53	55647	1.1.1.1	192.168.2.8
Dec 5, 2024 20:20:00.922395945 CET	60644	53	192.168.2.8	1.1.1.1
Dec 5, 2024 20:20:00.922672987 CET	59515	53	192.168.2.8	1.1.1.1
Dec 5, 2024 20:20:01.065911055 CET	53	60644	1.1.1.1	192.168.2.8
Dec 5, 2024 20:20:01.066247940 CET	53	59515	1.1.1.1	192.168.2.8
Dec 5, 2024 20:20:01.073296070 CET	58193	53	192.168.2.8	1.1.1.1
Dec 5, 2024 20:20:01.073676109 CET	60408	53	192.168.2.8	1.1.1.1
Dec 5, 2024 20:20:01.218240976 CET	53	58193	1.1.1.1	192.168.2.8
Dec 5, 2024 20:20:01.219510078 CET	53	60408	1.1.1.1	192.168.2.8
Dec 5, 2024 20:20:04.313290119 CET	55114	53	192.168.2.8	1.1.1.1
Dec 5, 2024 20:20:04.313563108 CET	56559	53	192.168.2.8	1.1.1.1
Dec 5, 2024 20:20:04.454058886 CET	53	55114	1.1.1.1	192.168.2.8
Dec 5, 2024 20:20:04.463184118 CET	53	56559	1.1.1.1	192.168.2.8
Dec 5, 2024 20:20:05.988204002 CET	53	63944	1.1.1.1	192.168.2.8
Dec 5, 2024 20:20:07.222943068 CET	50657	53	192.168.2.8	1.1.1.1
Dec 5, 2024 20:20:07.223192930 CET	56302	53	192.168.2.8	1.1.1.1
Dec 5, 2024 20:20:07.359977961 CET	53	50657	1.1.1.1	192.168.2.8
Dec 5, 2024 20:20:07.360610962 CET	53	56302	1.1.1.1	192.168.2.8
Dec 5, 2024 20:20:07.371521950 CET	56415	53	192.168.2.8	1.1.1.1
Dec 5, 2024 20:20:07.371642113 CET	59100	53	192.168.2.8	1.1.1.1
Dec 5, 2024 20:20:07.510065079 CET	53	56415	1.1.1.1	192.168.2.8
Dec 5, 2024 20:20:07.510585070 CET	53	59100	1.1.1.1	192.168.2.8
Dec 5, 2024 20:20:12.540399075 CET	55465	53	192.168.2.8	1.1.1.1
Dec 5, 2024 20:20:12.540564060 CET	49511	53	192.168.2.8	1.1.1.1
Dec 5, 2024 20:20:12.838218927 CET	53	49511	1.1.1.1	192.168.2.8
Dec 5, 2024 20:20:12.850043058 CET	53	55465	1.1.1.1	192.168.2.8
Dec 5, 2024 20:20:15.208626032 CET	60546	53	192.168.2.8	1.1.1.1
Dec 5, 2024 20:20:15.208761930 CET	64661	53	192.168.2.8	1.1.1.1
Dec 5, 2024 20:20:15.237277985 CET	59767	53	192.168.2.8	1.1.1.1
Dec 5, 2024 20:20:15.237422943 CET	59982	53	192.168.2.8	1.1.1.1
Dec 5, 2024 20:20:15.346478939 CET	53	64661	1.1.1.1	192.168.2.8
Dec 5, 2024 20:20:15.349735975 CET	53	60546	1.1.1.1	192.168.2.8
Dec 5, 2024 20:20:15.595943928 CET	53	59767	1.1.1.1	192.168.2.8
Dec 5, 2024 20:20:15.608580112 CET	53	59982	1.1.1.1	192.168.2.8
Dec 5, 2024 20:20:18.518512964 CET	63495	53	192.168.2.8	1.1.1.1
Dec 5, 2024 20:20:18.518744946 CET	57118	53	192.168.2.8	1.1.1.1
Dec 5, 2024 20:20:18.656955004 CET	53	63495	1.1.1.1	192.168.2.8
Dec 5, 2024 20:20:18.657118082 CET	53	57118	1.1.1.1	192.168.2.8
Dec 5, 2024 20:20:23.661653042 CET	56046	53	192.168.2.8	1.1.1.1
Dec 5, 2024 20:20:23.661812067 CET	57363	53	192.168.2.8	1.1.1.1
Dec 5, 2024 20:20:23.801697016 CET	53	57363	1.1.1.1	192.168.2.8
Dec 5, 2024 20:20:23.801721096 CET	53	56046	1.1.1.1	192.168.2.8
Dec 5, 2024 20:20:24.679533958 CET	53	65120	1.1.1.1	192.168.2.8
Dec 5, 2024 20:20:46.017492056 CET	53	49611	1.1.1.1	192.168.2.8
Dec 5, 2024 20:20:47.715704918 CET	53	62075	1.1.1.1	192.168.2.8

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Dec 5, 2024 20:19:51.550524950 CET	192.168.2.8	1.1.1.1	c263	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 5, 2024 20:19:50.597596884 CET	192.168.2.8	1.1.1.1	0xf688	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 5, 2024 20:19:50.597862005 CET	192.168.2.8	1.1.1.1	0x3790	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 5, 2024 20:19:51.333468914 CET	192.168.2.8	1.1.1.1	0x87ea	Standard query (0)	www.paypal.com	A (IP address)	IN (0x0001)	false
Dec 5, 2024 20:19:51.333638906 CET	192.168.2.8	1.1.1.1	0x957d	Standard query (0)	www.paypal.com	65	IN (0x0001)	false
Dec 5, 2024 20:19:53.402610064 CET	192.168.2.8	1.1.1.1	0xd251	Standard query (0)	ddbm2.paypal.com	A (IP address)	IN (0x0001)	false
Dec 5, 2024 20:19:53.402776003 CET	192.168.2.8	1.1.1.1	0x380e	Standard query (0)	ddbm2.paypal.com	65	IN (0x0001)	false
Dec 5, 2024 20:19:53.403743029 CET	192.168.2.8	1.1.1.1	0xbaf4	Standard query (0)	www.paypalobjects.com	A (IP address)	IN (0x0001)	false
Dec 5, 2024 20:19:53.404089928 CET	192.168.2.8	1.1.1.1	0xb8cb	Standard query (0)	www.paypalobjects.com	65	IN (0x0001)	false
Dec 5, 2024 20:19:55.928752899 CET	192.168.2.8	1.1.1.1	0xbd24	Standard query (0)	www.paypalobjects.com	A (IP address)	IN (0x0001)	false
Dec 5, 2024 20:19:55.928961039 CET	192.168.2.8	1.1.1.1	0x1c0	Standard query (0)	www.paypalobjects.com	65	IN (0x0001)	false
Dec 5, 2024 20:19:58.621710062 CET	192.168.2.8	1.1.1.1	0x3e98	Standard query (0)	t.paypal.com	A (IP address)	IN (0x0001)	false
Dec 5, 2024 20:19:58.622164965 CET	192.168.2.8	1.1.1.1	0x5202	Standard query (0)	t.paypal.com	65	IN (0x0001)	false
Dec 5, 2024 20:20:00.689496994 CET	192.168.2.8	1.1.1.1	0x8b82	Standard query (0)	ddbm2.paypal.com	A (IP address)	IN (0x0001)	false
Dec 5, 2024 20:20:00.689704895 CET	192.168.2.8	1.1.1.1	0xe63	Standard query (0)	ddbm2.paypal.com	65	IN (0x0001)	false
Dec 5, 2024 20:20:00.922395945 CET	192.168.2.8	1.1.1.1	0xecc9	Standard query (0)	t.paypal.com	A (IP address)	IN (0x0001)	false
Dec 5, 2024 20:20:00.922672987 CET	192.168.2.8	1.1.1.1	0x8df7	Standard query (0)	t.paypal.com	65	IN (0x0001)	false
Dec 5, 2024 20:20:01.073296070 CET	192.168.2.8	1.1.1.1	0x59b0	Standard query (0)	www.paypalobjects.com	A (IP address)	IN (0x0001)	false
Dec 5, 2024 20:20:01.073676109 CET	192.168.2.8	1.1.1.1	0xf68a	Standard query (0)	www.paypalobjects.com	65	IN (0x0001)	false
Dec 5, 2024 20:20:04.313290119 CET	192.168.2.8	1.1.1.1	0xc24b	Standard query (0)	www.recaptcha.net	A (IP address)	IN (0x0001)	false
Dec 5, 2024 20:20:04.313563108 CET	192.168.2.8	1.1.1.1	0x3183	Standard query (0)	www.recaptcha.net	65	IN (0x0001)	false
Dec 5, 2024 20:20:07.222943068 CET	192.168.2.8	1.1.1.1	0x27c	Standard query (0)	www.recaptcha.net	A (IP address)	IN (0x0001)	false
Dec 5, 2024 20:20:07.223192930 CET	192.168.2.8	1.1.1.1	0x8b8	Standard query (0)	www.recaptcha.net	65	IN (0x0001)	false
Dec 5, 2024 20:20:07.371521950 CET	192.168.2.8	1.1.1.1	0xb9af	Standard query (0)	www.paypal.com	A (IP address)	IN (0x0001)	false
Dec 5, 2024 20:20:07.371642113 CET	192.168.2.8	1.1.1.1	0x986d	Standard query (0)	www.paypal.com	65	IN (0x0001)	false
Dec 5, 2024 20:20:12.540399075 CET	192.168.2.8	1.1.1.1	0xb2ca	Standard query (0)	hcaptcha.paypal.com	A (IP address)	IN (0x0001)	false
Dec 5, 2024 20:20:12.540564060 CET	192.168.2.8	1.1.1.1	0x4694	Standard query (0)	hcaptcha.paypal.com	65	IN (0x0001)	false
Dec 5, 2024 20:20:15.208626032 CET	192.168.2.8	1.1.1.1	0xdcd3	Standard query (0)	hcaptcha.paypal.com	A (IP address)	IN (0x0001)	false
Dec 5, 2024 20:20:15.208761930 CET	192.168.2.8	1.1.1.1	0xae2d	Standard query (0)	hcaptcha.paypal.com	65	IN (0x0001)	false
Dec 5, 2024 20:20:15.237277985 CET	192.168.2.8	1.1.1.1	0x9f2	Standard query (0)	newassets.hcaptcha.paypal.com	A (IP address)	IN (0x0001)	false
Dec 5, 2024 20:20:15.237422943 CET	192.168.2.8	1.1.1.1	0xd2be	Standard query (0)	newassets.hcaptcha.paypal.com	65	IN (0x0001)	false
Dec 5, 2024 20:20:18.518512964 CET	192.168.2.8	1.1.1.1	0xf2d8	Standard query (0)	hcaptcha.paypal.com	A (IP address)	IN (0x0001)	false
Dec 5, 2024 20:20:18.518744946 CET	192.168.2.8	1.1.1.1	0x42eb	Standard query (0)	hcaptcha.paypal.com	65	IN (0x0001)	false
Dec 5, 2024 20:20:23.661653042 CET	192.168.2.8	1.1.1.1	0xa858	Standard query (0)	newassets.hcaptcha.paypal.com	A (IP address)	IN (0x0001)	false
Dec 5, 2024 20:20:23.661812067 CET	192.168.2.8	1.1.1.1	0xf7ea	Standard query (0)	newassets.hcaptcha.paypal.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 5, 2024 20:19:50.740906000 CET	1.1.1.1	192.168.2.8	0xf688	No error (0)	www.google.com		172.217.21.36	A (IP address)	IN (0x0001)	false
Dec 5, 2024 20:19:50.740930080 CET	1.1.1.1	192.168.2.8	0x3790	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 5, 2024 20:19:51.471452951 CET	1.1.1.1	192.168.2.8	0x87ea	No error (0)	www.paypal.com	www.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 20:19:51.471452951 CET	1.1.1.1	192.168.2.8	0x87ea	No error (0)	www.glb.paypal.com	paypal-dynamic.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 20:19:51.471452951 CET	1.1.1.1	192.168.2.8	0x87ea	No error (0)	paypal-dynamic.map.fastly.net		151.101.1.21	A (IP address)	IN (0x0001)	false
Dec 5, 2024 20:19:51.471452951 CET	1.1.1.1	192.168.2.8	0x87ea	No error (0)	paypal-dynamic.map.fastly.net		151.101.193.21	A (IP address)	IN (0x0001)	false
Dec 5, 2024 20:19:51.471452951 CET	1.1.1.1	192.168.2.8	0x87ea	No error (0)	paypal-dynamic.map.fastly.net		151.101.129.21	A (IP address)	IN (0x0001)	false
Dec 5, 2024 20:19:51.471452951 CET	1.1.1.1	192.168.2.8	0x87ea	No error (0)	paypal-dynamic.map.fastly.net		151.101.65.21	A (IP address)	IN (0x0001)	false
Dec 5, 2024 20:19:51.550128937 CET	1.1.1.1	192.168.2.8	0x957d	No error (0)	www.paypal.com	www.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 20:19:51.550128937 CET	1.1.1.1	192.168.2.8	0x957d	No error (0)	www.glb.paypal.com	paypal-dynamic.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 20:19:53.540734053 CET	1.1.1.1	192.168.2.8	0xbaf4	No error (0)	www.paypalobjects.com	ppo.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 20:19:53.540734053 CET	1.1.1.1	192.168.2.8	0xbaf4	No error (0)	ppo.glb.paypal.com	cs1150.wpc.betacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 20:19:53.540734053 CET	1.1.1.1	192.168.2.8	0xbaf4	No error (0)	cs1150.wpc.betacdn.net		192.229.221.25	A (IP address)	IN (0x0001)	false
Dec 5, 2024 20:19:53.542359114 CET	1.1.1.1	192.168.2.8	0xb8cb	No error (0)	www.paypalobjects.com	ppo.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 20:19:53.542359114 CET	1.1.1.1	192.168.2.8	0xb8cb	No error (0)	ppo.glb.paypal.com	cs1150.wpc.betacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 20:19:53.807339907 CET	1.1.1.1	192.168.2.8	0x380e	No error (0)	ddbm2.paypal.com	ddbm2.paypal.com.first-party-js.datadome.co		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 20:19:53.808336973 CET	1.1.1.1	192.168.2.8	0xd251	No error (0)	ddbm2.paypal.com	ddbm2.paypal.com.first-party-js.datadome.co		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 20:19:53.808336973 CET	1.1.1.1	192.168.2.8	0xd251	No error (0)	ddbm2.paypal.com.first-party-js.datadome.co		18.66.161.81	A (IP address)	IN (0x0001)	false
Dec 5, 2024 20:19:53.808336973 CET	1.1.1.1	192.168.2.8	0xd251	No error (0)	ddbm2.paypal.com.first-party-js.datadome.co		18.66.161.97	A (IP address)	IN (0x0001)	false
Dec 5, 2024 20:19:53.808336973 CET	1.1.1.1	192.168.2.8	0xd251	No error (0)	ddbm2.paypal.com.first-party-js.datadome.co		18.66.161.70	A (IP address)	IN (0x0001)	false
Dec 5, 2024 20:19:53.808336973 CET	1.1.1.1	192.168.2.8	0xd251	No error (0)	ddbm2.paypal.com.first-party-js.datadome.co		18.66.161.65	A (IP address)	IN (0x0001)	false
Dec 5, 2024 20:19:56.067091942 CET	1.1.1.1	192.168.2.8	0xbd24	No error (0)	www.paypalobjects.com	ppo.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 20:19:56.067091942 CET	1.1.1.1	192.168.2.8	0xbd24	No error (0)	ppo.glb.paypal.com	cs1150.wpc.betacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 20:19:56.067091942 CET	1.1.1.1	192.168.2.8	0xbd24	No error (0)	cs1150.wpc.betacdn.net		192.229.221.25	A (IP address)	IN (0x0001)	false
Dec 5, 2024 20:19:56.067397118 CET	1.1.1.1	192.168.2.8	0x1c0	No error (0)	www.paypalobjects.com	ppo.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 20:19:56.067397118 CET	1.1.1.1	192.168.2.8	0x1c0	No error (0)	ppo.glb.paypal.com	cs1150.wpc.betacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 20:19:58.976051092 CET	1.1.1.1	192.168.2.8	0x3e98	No error (0)	t.paypal.com	t.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 20:19:58.976051092 CET	1.1.1.1	192.168.2.8	0x3e98	No error (0)	t.glb.paypal.com	paypal-dynamic-cdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 20:19:58.976051092 CET	1.1.1.1	192.168.2.8	0x3e98	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.3.1	A (IP address)	IN (0x0001)	false
Dec 5, 2024 20:19:58.976051092 CET	1.1.1.1	192.168.2.8	0x3e98	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.67.1	A (IP address)	IN (0x0001)	false
Dec 5, 2024 20:19:58.976051092 CET	1.1.1.1	192.168.2.8	0x3e98	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.131.1	A (IP address)	IN (0x0001)	false
Dec 5, 2024 20:19:58.976051092 CET	1.1.1.1	192.168.2.8	0x3e98	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.195.1	A (IP address)	IN (0x0001)	false
Dec 5, 2024 20:19:58.994942904 CET	1.1.1.1	192.168.2.8	0x5202	No error (0)	t.paypal.com	t.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 20:19:58.994942904 CET	1.1.1.1	192.168.2.8	0x5202	No error (0)	t.glb.paypal.com	cs1150.wpc.betacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 20:20:00.828630924 CET	1.1.1.1	192.168.2.8	0xe63	No error (0)	ddbm2.paypal.com	ddbm2.paypal.com.first-party-js.datadome.co		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 20:20:00.831379890 CET	1.1.1.1	192.168.2.8	0x8b82	No error (0)	ddbm2.paypal.com	ddbm2.paypal.com.first-party-js.datadome.co		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 20:20:00.831379890 CET	1.1.1.1	192.168.2.8	0x8b82	No error (0)	ddbm2.paypal.com.first-party-js.datadome.co		18.66.161.81	A (IP address)	IN (0x0001)	false
Dec 5, 2024 20:20:00.831379890 CET	1.1.1.1	192.168.2.8	0x8b82	No error (0)	ddbm2.paypal.com.first-party-js.datadome.co		18.66.161.97	A (IP address)	IN (0x0001)	false
Dec 5, 2024 20:20:00.831379890 CET	1.1.1.1	192.168.2.8	0x8b82	No error (0)	ddbm2.paypal.com.first-party-js.datadome.co		18.66.161.70	A (IP address)	IN (0x0001)	false
Dec 5, 2024 20:20:00.831379890 CET	1.1.1.1	192.168.2.8	0x8b82	No error (0)	ddbm2.paypal.com.first-party-js.datadome.co		18.66.161.65	A (IP address)	IN (0x0001)	false
Dec 5, 2024 20:20:01.065911055 CET	1.1.1.1	192.168.2.8	0xecc9	No error (0)	t.paypal.com	t.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 20:20:01.065911055 CET	1.1.1.1	192.168.2.8	0xecc9	No error (0)	t.glb.paypal.com	paypal-dynamic-cdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 20:20:01.065911055 CET	1.1.1.1	192.168.2.8	0xecc9	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.3.1	A (IP address)	IN (0x0001)	false
Dec 5, 2024 20:20:01.065911055 CET	1.1.1.1	192.168.2.8	0xecc9	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.67.1	A (IP address)	IN (0x0001)	false
Dec 5, 2024 20:20:01.065911055 CET	1.1.1.1	192.168.2.8	0xecc9	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.131.1	A (IP address)	IN (0x0001)	false
Dec 5, 2024 20:20:01.065911055 CET	1.1.1.1	192.168.2.8	0xecc9	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.195.1	A (IP address)	IN (0x0001)	false
Dec 5, 2024 20:20:01.066247940 CET	1.1.1.1	192.168.2.8	0x8df7	No error (0)	t.paypal.com	t.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 20:20:01.066247940 CET	1.1.1.1	192.168.2.8	0x8df7	No error (0)	t.glb.paypal.com	cs1150.wpc.betacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 20:20:01.218240976 CET	1.1.1.1	192.168.2.8	0x59b0	No error (0)	www.paypalobjects.com	ppo.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 20:20:01.218240976 CET	1.1.1.1	192.168.2.8	0x59b0	No error (0)	ppo.glb.paypal.com	cs1150.wpc.betacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 20:20:01.218240976 CET	1.1.1.1	192.168.2.8	0x59b0	No error (0)	cs1150.wpc.betacdn.net		192.229.221.25	A (IP address)	IN (0x0001)	false
Dec 5, 2024 20:20:01.219510078 CET	1.1.1.1	192.168.2.8	0xf68a	No error (0)	www.paypalobjects.com	ppo.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 20:20:01.219510078 CET	1.1.1.1	192.168.2.8	0xf68a	No error (0)	ppo.glb.paypal.com	cs1150.wpc.betacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 20:20:04.454058886 CET	1.1.1.1	192.168.2.8	0xc24b	No error (0)	www.recaptcha.net		172.217.19.195	A (IP address)	IN (0x0001)	false
Dec 5, 2024 20:20:07.359977961 CET	1.1.1.1	192.168.2.8	0x27c	No error (0)	www.recaptcha.net		172.217.19.195	A (IP address)	IN (0x0001)	false
Dec 5, 2024 20:20:07.510065079 CET	1.1.1.1	192.168.2.8	0xb9af	No error (0)	www.paypal.com	www.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 20:20:07.510065079 CET	1.1.1.1	192.168.2.8	0xb9af	No error (0)	www.glb.paypal.com	paypal-dynamic.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 20:20:07.510065079 CET	1.1.1.1	192.168.2.8	0xb9af	No error (0)	paypal-dynamic.map.fastly.net		151.101.1.21	A (IP address)	IN (0x0001)	false
Dec 5, 2024 20:20:07.510065079 CET	1.1.1.1	192.168.2.8	0xb9af	No error (0)	paypal-dynamic.map.fastly.net		151.101.193.21	A (IP address)	IN (0x0001)	false
Dec 5, 2024 20:20:07.510065079 CET	1.1.1.1	192.168.2.8	0xb9af	No error (0)	paypal-dynamic.map.fastly.net		151.101.129.21	A (IP address)	IN (0x0001)	false
Dec 5, 2024 20:20:07.510065079 CET	1.1.1.1	192.168.2.8	0xb9af	No error (0)	paypal-dynamic.map.fastly.net		151.101.65.21	A (IP address)	IN (0x0001)	false
Dec 5, 2024 20:20:07.510585070 CET	1.1.1.1	192.168.2.8	0x986d	No error (0)	www.paypal.com	www.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 20:20:07.510585070 CET	1.1.1.1	192.168.2.8	0x986d	No error (0)	www.glb.paypal.com	paypal-dynamic.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 20:20:12.838218927 CET	1.1.1.1	192.168.2.8	0x4694	No error (0)	hcaptcha.paypal.com	paypal-dynamic-cdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 20:20:12.850043058 CET	1.1.1.1	192.168.2.8	0xb2ca	No error (0)	hcaptcha.paypal.com	paypal-dynamic-cdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 20:20:12.850043058 CET	1.1.1.1	192.168.2.8	0xb2ca	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.3.1	A (IP address)	IN (0x0001)	false
Dec 5, 2024 20:20:12.850043058 CET	1.1.1.1	192.168.2.8	0xb2ca	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.67.1	A (IP address)	IN (0x0001)	false
Dec 5, 2024 20:20:12.850043058 CET	1.1.1.1	192.168.2.8	0xb2ca	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.131.1	A (IP address)	IN (0x0001)	false
Dec 5, 2024 20:20:12.850043058 CET	1.1.1.1	192.168.2.8	0xb2ca	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.195.1	A (IP address)	IN (0x0001)	false
Dec 5, 2024 20:20:15.346478939 CET	1.1.1.1	192.168.2.8	0xae2d	No error (0)	hcaptcha.paypal.com	paypal-dynamic-cdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 20:20:15.349735975 CET	1.1.1.1	192.168.2.8	0xdcd3	No error (0)	hcaptcha.paypal.com	paypal-dynamic-cdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 20:20:15.349735975 CET	1.1.1.1	192.168.2.8	0xdcd3	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.131.1	A (IP address)	IN (0x0001)	false
Dec 5, 2024 20:20:15.349735975 CET	1.1.1.1	192.168.2.8	0xdcd3	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.67.1	A (IP address)	IN (0x0001)	false
Dec 5, 2024 20:20:15.349735975 CET	1.1.1.1	192.168.2.8	0xdcd3	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.3.1	A (IP address)	IN (0x0001)	false
Dec 5, 2024 20:20:15.349735975 CET	1.1.1.1	192.168.2.8	0xdcd3	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.195.1	A (IP address)	IN (0x0001)	false
Dec 5, 2024 20:20:15.595943928 CET	1.1.1.1	192.168.2.8	0x9f2	No error (0)	newassets.hcaptcha.paypal.com	paypal-dynamic-cdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 20:20:15.595943928 CET	1.1.1.1	192.168.2.8	0x9f2	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.3.1	A (IP address)	IN (0x0001)	false
Dec 5, 2024 20:20:15.595943928 CET	1.1.1.1	192.168.2.8	0x9f2	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.67.1	A (IP address)	IN (0x0001)	false
Dec 5, 2024 20:20:15.595943928 CET	1.1.1.1	192.168.2.8	0x9f2	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.131.1	A (IP address)	IN (0x0001)	false
Dec 5, 2024 20:20:15.595943928 CET	1.1.1.1	192.168.2.8	0x9f2	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.195.1	A (IP address)	IN (0x0001)	false
Dec 5, 2024 20:20:15.608580112 CET	1.1.1.1	192.168.2.8	0xd2be	No error (0)	newassets.hcaptcha.paypal.com	paypal-dynamic-cdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 20:20:18.656955004 CET	1.1.1.1	192.168.2.8	0xf2d8	No error (0)	hcaptcha.paypal.com	paypal-dynamic-cdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 20:20:18.656955004 CET	1.1.1.1	192.168.2.8	0xf2d8	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.131.1	A (IP address)	IN (0x0001)	false
Dec 5, 2024 20:20:18.656955004 CET	1.1.1.1	192.168.2.8	0xf2d8	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.195.1	A (IP address)	IN (0x0001)	false
Dec 5, 2024 20:20:18.656955004 CET	1.1.1.1	192.168.2.8	0xf2d8	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.3.1	A (IP address)	IN (0x0001)	false
Dec 5, 2024 20:20:18.656955004 CET	1.1.1.1	192.168.2.8	0xf2d8	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.67.1	A (IP address)	IN (0x0001)	false
Dec 5, 2024 20:20:18.657118082 CET	1.1.1.1	192.168.2.8	0x42eb	No error (0)	hcaptcha.paypal.com	paypal-dynamic-cdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 20:20:23.801697016 CET	1.1.1.1	192.168.2.8	0xf7ea	No error (0)	newassets.hcaptcha.paypal.com	paypal-dynamic-cdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 20:20:23.801721096 CET	1.1.1.1	192.168.2.8	0xa858	No error (0)	newassets.hcaptcha.paypal.com	paypal-dynamic-cdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 20:20:23.801721096 CET	1.1.1.1	192.168.2.8	0xa858	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.3.1	A (IP address)	IN (0x0001)	false
Dec 5, 2024 20:20:23.801721096 CET	1.1.1.1	192.168.2.8	0xa858	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.195.1	A (IP address)	IN (0x0001)	false
Dec 5, 2024 20:20:23.801721096 CET	1.1.1.1	192.168.2.8	0xa858	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.131.1	A (IP address)	IN (0x0001)	false
Dec 5, 2024 20:20:23.801721096 CET	1.1.1.1	192.168.2.8	0xa858	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.67.1	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

www.paypal.com

https:

www.paypalobjects.com

ddbm2.paypal.com

t.paypal.com

www.recaptcha.net

hcaptcha.paypal.com

newassets.hcaptcha.paypal.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.8	49716	151.101.1.21	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:19:52 UTC	2066	OUT	GET /signin/?returnUri=%2Fmyaccount%2Ftransfer%2FpayRequest%2FU-09584045BD498740V%2FU-5R763959NX153980F%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq&id=OoO85MXTLVUkAlgY4sey9A8h.NxxqjO.iYbAWg&expId=p2p&onboardData=%7B%22signUpRequest%22%3A%7B%22method%22%3A%22get%22%2C%22url%22%3A%22https%3A%2F%2Fwww.paypal.com%2Fmyaccount%2Ftransfer%2FguestLogin%2FpayRequest%2FU-09584045BD498740V%2FU-5R763959NX153980F%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq%26id%3DOoO85MXTLVUkAlgY4sey9A8h.NxxqjO.iYbAWg%22%7D%7D&flowContextData=F7WdIOgJmH6-07KTJ7GpdWXhkdDQxLohB4l-G7vuWGaUsw9VWkH3unndZA7YlCRgtETWTIDn9hNnR_R_XfGvdxeCRkDmtXLc6qqtXR9sC3Gp-59lNBELQtpM5xEv0i4rCTpJiBcP2uf4VFrJLL1b5u1XG7JtP5TfW7CNqxSVOxEb9_duKrmtDgpztBtl32bVeoc8BgW5poXyk9lJHcKrYdvBHSdT0mosqrrmaGj2a5uNQdBK70Mwpn9Zddmj0KI1GIZrXWvFcpnuRbvbli2inkizkeV4nR1uyKnBSzFqdPDcK4t7K9B6YiFhb5sS8DaQd7F6oWzSe-J8gPxVURmdwwOxFn1ycN09t9caUdBz1XMuv96GDJywuv2feJdoAI73PNjro1a2cFEKAWnCgtoHqxdBD3A1mVV3OiytkjtEUDdvp0GL3CNOAV9zIrunX_DmbTO6KOe21dniBkeG&v=1&utm_source=unp&utm_medium=emai [TRUNCATED] Host: www.paypal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:19:53 UTC	299	IN	HTTP/1.1 200 OK Connection: close Content-Length: 22671 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Cache-Control: max-age=0, no-cache, no-store, must-revalidate
2024-12-05 19:19:53 UTC	2385	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6e 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 6f 62 6a 65 63 74 73 2e 70 61 79 70 61 6c 2e 63 6e 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 3b 20 73 63 72 69 70 74 2d 73 72 63 20 27 6e 6f 6e 63 65 2d 59 57 57 2b 6f 64 54 6e 36 68 6f 31 4d 73 46 56 2b 30 36 4a 4b 33 77 68 43 69 4c 48 47 4a 38 75 57 4b 51 7a 33 71 6d 45 35 33 79 32 2b 55 54 45 27 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 68 74 74 Data Ascii: Content-Security-Policy: default-src 'self' https://.paypal.com https://.paypal.cn https://.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; script-src 'nonce-YWW+odTn6ho1MsFV+06JK3whCiLHGJ8uWKQz3qmE53y2+UTE' 'self' https://.paypal.com htt
2024-12-05 19:19:53 UTC	1447	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 64 5f 69 64 3d 63 30 63 34 39 61 39 31 65 36 33 38 34 65 61 64 62 61 61 34 61 35 36 35 33 39 34 65 32 31 64 61 31 37 33 33 34 32 36 33 39 33 31 31 34 3b 20 4d 61 78 2d 41 67 65 3d 33 31 35 35 33 32 37 39 39 3b 20 44 6f 6d 61 69 6e 3d 2e 70 61 79 70 61 6c 2e 63 6f 6d 3b 20 50 61 74 68 3d 2f 3b 20 45 78 70 69 72 65 73 3d 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 33 34 20 31 39 3a 31 39 3a 35 32 20 47 4d 54 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 4c 41 4e 47 3d 65 6e 5f 55 53 25 33 42 55 53 3b 20 4d 61 78 2d 41 67 65 3d 33 31 35 35 36 3b 20 44 6f 6d 61 69 6e 3d 2e 70 61 79 70 61 6c 2e 63 6f 6d 3b 20 50 61 74 68 3d 2f 3b 20 Data Ascii: Set-Cookie: d_id=c0c49a91e6384eadbaa4a565394e21da1733426393114; Max-Age=315532799; Domain=.paypal.com; Path=/; Expires=Tue, 05 Dec 2034 19:19:52 GMT; HttpOnly; Secure; SameSite=NoneSet-Cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/;
2024-12-05 19:19:53 UTC	645	IN	Data Raw: 54 72 61 63 65 70 61 72 65 6e 74 3a 20 30 30 2d 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 66 32 31 31 30 35 35 33 62 32 65 34 65 2d 39 61 61 32 63 37 34 31 39 33 66 61 33 64 62 37 2d 30 31 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 58 2d 46 72 61 6d 65 2d 4f 70 74 69 6f 6e 73 3a 20 53 41 4d 45 4f 52 49 47 49 4e 0d 0a 58 2d 58 73 73 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 44 43 3a 20 63 63 67 31 31 2d 6f 72 69 67 69 6e 2d 77 77 77 2d 31 2e 70 61 79 70 61 6c 2e 63 6f 6d 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 56 69 61 3a 20 31 2e 31 20 76 61 72 6e 69 73 68 2c 20 31 2e 31 20 76 61 72 6e 69 73 68 2c 20 31 2e Data Ascii: Traceparent: 00-0000000000000000000f2110553b2e4e-9aa2c74193fa3db7-01X-Content-Type-Options: nosniffX-Frame-Options: SAMEORIGINX-Xss-Protection: 1; mode=blockDC: ccg11-origin-www-1.paypal.comAccept-Ranges: bytesVia: 1.1 varnish, 1.1 varnish, 1.
2024-12-05 19:19:53 UTC	1378	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 6c 6f 63 61 6c 65 3d 22 65 6e 5f 55 53 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 6c 6f 77 65 72 2d 74 68 61 6e 2d 69 65 39 20 69 65 20 64 65 73 6b 74 6f 70 22 20 64 61 74 61 2d 6c 61 6e 67 70 61 63 6b 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 77 65 62 2f 72 65 73 2f 30 38 37 2f 39 66 37 33 31 64 38 62 63 65 64 64 35 62 37 65 37 61 33 39 37 35 63 30 32 34 32 37 38 2f 65 6e 2d 55 53 2f 5f 6c 61 6e 67 75 61 67 65 70 61 63 6b 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 31 30 5d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e Data Ascii: <!DOCTYPE html>...[if lt IE 9]><html lang="en" locale="en_US" class="no-js lower-than-ie9 ie desktop" data-langpack="https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/en-US/_languagepack"><![endif]-->...[if lt IE 10]><html lang="en
2024-12-05 19:19:53 UTC	1378	IN	Data Raw: 6e 71 61 61 51 68 4c 6e 2f 6e 6d 57 54 38 63 53 55 6a 4f 78 38 39 38 71 6f 59 5a 30 4b 43 68 36 2f 68 32 4f 4e 30 71 59 46 4a 38 37 61 68 54 57 61 49 70 4f 37 70 77 78 76 34 6f 4e 5a 47 37 4a 75 56 72 30 54 4a 67 20 72 6c 6f 67 69 64 20 3a 20 72 5a 4a 76 6e 71 61 61 51 68 4c 6e 25 32 46 6e 6d 57 54 38 63 53 55 6f 74 53 79 6c 4d 47 4f 54 47 6b 52 55 4d 44 70 6d 55 54 76 62 58 64 76 65 76 75 4d 4d 46 41 66 63 38 43 4d 4b 39 63 68 34 4c 59 5a 70 7a 43 76 71 61 4a 38 58 4c 35 6a 5a 70 34 76 51 30 77 42 62 6f 70 70 72 76 77 79 57 30 36 5f 31 39 33 39 38 34 33 62 30 30 61 20 2d 2d 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e Data Ascii: nqaaQhLn/nmWT8cSUjOx898qoYZ0KCh6/h2ON0qYFJ87ahTWaIpO7pwxv4oNZG7JuVr0TJg rlogid : rZJvnqaaQhLn%2FnmWT8cSUotSylMGOTGkRUMDpmUTvbXdvevuMMFAfc8CMK9ch4LYZpzCvqaJ8XL5jZp4vQ0wBbopprvwyW06_1939843b00a --><meta charset="utf-8" /><title></title><meta http-equiv="con
2024-12-05 19:19:53 UTC	1378	IN	Data Raw: 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 69 6d 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 77 65 62 73 74 61 74 69 63 2f 69 63 6f 6e 2f 70 70 32 35 38 2e 70 6e 67 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 77 65 62 2f 72 65 73 2f 30 38 37 2f 39 66 37 33 31 64 38 62 63 65 64 64 35 62 37 65 37 61 33 39 37 35 63 30 32 34 32 37 38 2f 63 73 73 2f 61 70 70 2e 63 Data Ascii: alable=yes" /><meta property="og:image" content="https://www.paypalobjects.com/webstatic/icon/pp258.png" /><meta name="robots" content="noindex"><link rel="stylesheet" href="https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/css/app.c
2024-12-05 19:19:53 UTC	1378	IN	Data Raw: 2d 70 61 74 68 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 77 65 62 2f 72 65 73 2f 30 38 37 2f 39 66 37 33 31 64 38 62 63 65 64 64 35 62 37 65 37 61 33 39 37 35 63 30 32 34 32 37 38 2f 6a 73 2f 74 65 6d 70 6c 61 74 65 73 2f 25 73 22 64 61 74 61 2d 65 6e 61 62 6c 65 2d 63 6c 69 65 6e 74 2d 63 61 6c 2d 6c 6f 67 67 69 6e 67 3d 22 74 72 75 65 22 64 61 74 61 2d 63 6f 72 72 65 6c 61 74 69 6f 6e 2d 69 64 3d 22 66 32 31 31 30 35 35 33 62 32 65 34 65 22 64 61 74 61 2d 63 6c 69 65 6e 74 2d 6e 61 6d 65 3d 22 75 6c 22 64 61 74 61 2d 65 6e 61 62 6c 65 2d 66 6e 2d 62 65 61 63 6f 6e 2d 6f 6e 2d 77 65 62 2d 76 69 65 77 73 3d 22 74 72 75 65 22 64 61 74 61 2d 6e 6f 6e 63 65 3d 22 59 57 57 2b 6f 64 54 6e 36 68 6f 31 4d 73 Data Ascii: -path="https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/js/templates/%s"data-enable-client-cal-logging="true"data-correlation-id="f2110553b2e4e"data-client-name="ul"data-enable-fn-beacon-on-web-views="true"data-nonce="YWW+odTn6ho1Ms
2024-12-05 19:19:53 UTC	1378	IN	Data Raw: 20 37 31 30 2d 35 36 31 32 20 28 54 6f 6c 6c 20 46 72 65 65 29 2e 20 49 66 20 79 6f 75 20 64 6f 20 6e 6f 74 20 72 65 61 63 68 20 6f 75 74 2c 20 77 65 20 77 69 6c 6c 20 70 72 6f 63 65 65 64 20 77 69 74 68 20 74 68 65 20 74 72 61 6e 73 61 63 74 69 6f 6e 2e 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 3c 2f 68 31 3e 3c 64 69 76 20 69 64 3d 22 6e 6f 74 69 66 69 63 61 74 69 6f 6e 73 22 20 63 6c 61 73 73 3d 22 6e 6f 74 69 66 69 63 61 74 69 6f 6e 73 22 3e 3c 2f 64 69 76 3e 3c 66 6f 72 6d 20 61 63 74 69 6f 6e 3d 22 2f 73 69 67 6e 69 6e 22 20 6d 65 74 68 6f 64 3d 22 70 6f 73 74 22 20 63 6c 61 73 73 3d 22 70 72 6f 63 65 65 64 20 6d 61 73 6b 61 62 6c 65 22 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3d 22 6f 66 66 22 20 6e 61 6d 65 3d 22 6c 6f 67 69 6e 22 20 6e 6f 76 61 6c 69 Data Ascii: 710-5612 (Toll Free). If you do not reach out, we will proceed with the transaction.</span></div></h1><div id="notifications" class="notifications"></div><form action="/signin" method="post" class="proceed maskable" autocomplete="off" name="login" novali
2024-12-05 19:19:53 UTC	1378	IN	Data Raw: 6e 5f 65 6d 61 69 6c 22 74 79 70 65 3d 22 65 6d 61 69 6c 22 63 6c 61 73 73 3d 22 68 61 73 48 65 6c 70 20 20 76 61 6c 69 64 61 74 65 45 6d 70 74 79 20 20 20 22 76 61 6c 75 65 3d 22 22 09 09 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3d 09 22 75 73 65 72 6e 61 6d 65 22 09 09 09 70 6c 61 63 65 68 6f 6c 64 65 72 3d 09 22 45 6d 61 69 6c 22 09 09 61 72 69 61 2d 64 65 73 63 72 69 62 65 64 62 79 3d 22 65 6d 61 69 6c 45 72 72 6f 72 4d 65 73 73 61 67 65 22 2f 3e 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 65 6d 61 69 6c 22 20 63 6c 61 73 73 3d 22 66 69 65 6c 64 4c 61 62 65 6c 22 3e 45 6d 61 69 6c 3c 2f 6c 61 62 65 6c 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 72 72 6f 72 4d 65 73 73 61 67 65 22 69 64 3d 22 65 6d 61 69 6c 45 72 72 6f 72 4d 65 73 73 61 67 65 22 20 Data Ascii: n_email"type="email"class="hasHelp validateEmpty "value=""autocomplete="username"placeholder="Email"aria-describedby="emailErrorMessage"/><label for="email" class="fieldLabel">Email</label></div><div class="errorMessage"id="emailErrorMessage"
2024-12-05 19:19:53 UTC	1378	IN	Data Raw: 20 49 6e 20 74 6f 20 50 61 79 3c 2f 62 75 74 74 6f 6e 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6f 72 67 6f 74 4c 69 6e 6b 22 3e 3c 61 20 68 72 65 66 3d 22 2f 61 75 74 68 66 6c 6f 77 2f 70 61 73 73 77 6f 72 64 2d 72 65 63 6f 76 65 72 79 2f 3f 72 65 64 69 72 65 63 74 55 72 69 3d 25 32 35 32 46 73 69 67 6e 69 6e 25 32 35 32 46 25 32 35 33 46 72 65 74 75 72 6e 55 72 69 25 32 35 33 44 25 32 35 32 35 32 46 6d 79 61 63 63 6f 75 6e 74 25 32 35 32 35 32 46 74 72 61 6e 73 66 65 72 25 32 35 32 35 32 46 70 61 79 52 65 71 75 65 73 74 25 32 35 32 35 32 46 55 2d 30 39 35 38 34 30 34 35 42 44 34 39 38 37 34 30 56 25 32 35 32 35 32 46 55 2d 35 52 37 36 33 39 35 39 4e 58 31 35 33 39 38 30 46 25 32 35 32 35 33 46 63 6c 61 73 73 69 63 55 72 6c 25 32 35 32 Data Ascii: In to Pay</button></div><div class="forgotLink"><a href="/authflow/password-recovery/?redirectUri=%252Fsignin%252F%253FreturnUri%253D%25252Fmyaccount%25252Ftransfer%25252FpayRequest%25252FU-09584045BD498740V%25252FU-5R763959NX153980F%25253FclassicUrl%252

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.8	49719	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:19:55 UTC	586	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/css/app.css HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:19:55 UTC	779	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: text/css Date: Thu, 05 Dec 2024 19:19:55 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6737ef0a-1278c" Expires: Fri, 05 Dec 2025 19:19:55 GMT Last-Modified: Sat, 16 Nov 2024 01:02:02 GMT Paypal-Debug-Id: bd5c98c08d7b7 Server: ECAcc (lhd/35CF) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000bd5c98c08d7b7-ae5d808507650231-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 75660 Connection: close
2024-12-05 19:19:56 UTC	16383	IN	Data Raw: 2f 2a 2a 20 6d 65 74 68 6f 64 20 72 65 73 70 6f 6e 73 69 62 6c 65 20 66 6f 72 20 6c 6f 61 64 69 6e 67 20 74 68 65 20 62 61 63 6b 67 72 6f 75 6e 64 20 69 6d 61 67 65 20 73 65 74 20 69 6e 20 43 53 53 20 2a 2a 2f 0a 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 72 6f 74 61 74 69 6f 6e 20 7b 0a 20 20 66 72 6f 6d 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0a 20 20 7d 0a 20 20 74 6f 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 Data Ascii: / method responsible for loading the background image set in CSS /@-webkit-keyframes rotation { from { -webkit-transform: rotate(0deg); transform: rotate(0deg); } to { -webkit-transform: rotate(359deg); transform: rotate(359deg)
2024-12-05 19:19:56 UTC	16383	IN	Data Raw: 66 6c 6f 77 3a 20 76 69 73 69 62 6c 65 3b 0a 20 20 62 6f 72 64 65 72 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6e 6f 6e 65 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 30 30 37 30 62 61 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 48 65 6c 76 65 74 69 63 61 4e 65 75 65 2d 4d 65 64 69 75 6d 2c 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 20 4d 65 64 69 75 6d 22 2c 20 48 65 6c 76 65 74 69 63 61 4e 65 75 65 2c 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 65 6d 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 Data Ascii: flow: visible; border: 0; padding: 0; background: none; color: #0070ba; font-family: HelveticaNeue-Medium, "Helvetica Neue Medium", HelveticaNeue, "Helvetica Neue", Helvetica, Arial, sans-serif; font-size: 1em; text-align: left; text-decor
2024-12-05 19:19:56 UTC	16383	IN	Data Raw: 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 72 69 67 68 74 2c 20 23 43 42 44 32 44 36 20 35 30 25 2c 20 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 29 20 34 30 25 29 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 74 6f 70 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 33 70 78 20 31 70 78 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 72 65 70 65 61 74 2d 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 70 78 3b 0a 20 20 62 6f 72 64 65 72 3a 20 30 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 7d 0a 2e 73 65 6e 74 4d 65 73 73 61 67 65 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 62 39 65 31 62 3b 0a 7d 0a 2e 63 61 70 74 63 68 61 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 Data Ascii: inear-gradient(to right, #CBD2D6 50%, rgba(255, 255, 255, 0) 40%); background-position: top; background-size: 3px 1px; background-repeat: repeat-x; height: 1px; border: 0; margin: 0;}.sentMessage { color: #1b9e1b;}.captcha-container {
2024-12-05 19:19:56 UTC	3	IN	Data Raw: 7d 0a 2e Data Ascii: }.
2024-12-05 19:19:56 UTC	16383	IN	Data Raw: 6f 6e 65 54 6f 75 63 68 52 6d 20 2e 73 74 65 70 73 20 2e 73 74 65 70 73 2d 69 63 6f 6e 2e 69 63 6f 6e 2d 31 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 30 20 2d 34 38 70 78 3b 0a 7d 0a 2e 6f 6e 65 54 6f 75 63 68 52 6d 20 2e 73 74 65 70 73 20 2e 73 74 65 70 73 2d 69 63 6f 6e 2e 69 63 6f 6e 2d 32 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 30 20 2d 39 30 70 78 3b 0a 7d 0a 2e 6f 6e 65 54 6f 75 63 68 52 6d 20 2e 72 65 61 73 73 75 72 65 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 31 35 70 78 20 30 3b 0a 7d 0a 2e 6f 6e 65 54 6f 75 63 68 52 6d 20 2e 73 65 63 6f 6e 64 61 72 79 4c 69 6e 6b 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 32 70 78 3b 0a 7d 0a 2f 2a 2a 0a 2a 20 53 68 61 72 65 64 20 Data Ascii: oneTouchRm .steps .steps-icon.icon-1 { background-position: 0 -48px;}.oneTouchRm .steps .steps-icon.icon-2 { background-position: 0 -90px;}.oneTouchRm .reassure { margin: 15px 0;}.oneTouchRm .secondaryLink { margin-top: 12px;}/*** Shared
2024-12-05 19:19:56 UTC	10125	IN	Data Raw: 2f 69 6d 61 67 65 73 2f 73 68 61 72 65 64 2f 73 75 63 63 65 73 73 2d 61 6e 69 6d 61 74 69 6f 6e 5f 32 78 2e 67 69 66 22 29 20 6e 6f 2d 72 65 70 65 61 74 20 74 6f 70 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 31 30 30 70 78 3b 0a 20 20 7d 0a 7d 0a 2e 67 72 65 79 4f 75 74 2c 0a 61 2e 67 72 65 79 4f 75 74 3a 68 6f 76 65 72 2c 0a 61 2e 67 72 65 79 4f 75 74 3a 6c 69 6e 6b 2c 0a 61 2e 67 72 65 79 4f 75 74 3a 76 69 73 69 74 65 64 2c 0a 61 2e 67 72 65 79 4f 75 74 3a 66 6f 63 75 73 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 64 64 64 3b 0a 7d 0a 2e 67 72 65 79 42 61 63 6b 67 72 6f 75 6e 64 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 64 64 64 3b 0a 7d 0a 62 75 74 74 6f 6e 2e 67 72 65 79 42 61 63 Data Ascii: /images/shared/success-animation_2x.gif") no-repeat top center; background-size: 100px; }}.greyOut,a.greyOut:hover,a.greyOut:link,a.greyOut:visited,a.greyOut:focus { color: #ddd;}.greyBackground { background-color: #ddd;}button.greyBac

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.8	49722	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:19:55 UTC	586	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/lib/modernizr-2.6.1.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:19:55 UTC	790	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:19:55 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6737ef18-edf" Expires: Fri, 05 Dec 2025 19:19:55 GMT Last-Modified: Sat, 16 Nov 2024 01:02:16 GMT Paypal-Debug-Id: 03c808c5966a2 Server: ECAcc (lhd/35D6) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-000000000000000000003c808c5966a2-74300e3f4248e9f9-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 3807 Connection: close
2024-12-05 19:19:55 UTC	3807	IN	Data Raw: 77 69 6e 64 6f 77 2e 4d 6f 64 65 72 6e 69 7a 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 64 2e 63 73 73 54 65 78 74 3d 65 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 72 28 70 72 65 66 69 78 65 73 2e 6a 6f 69 6e 28 65 2b 22 3b 22 29 2b 28 74 7c 7c 22 22 29 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 3d 3d 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 72 65 74 75 72 6e 21 21 7e 28 22 22 2b 65 29 2e 69 6e 64 65 78 4f 66 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 74 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 20 69 6e 20 65 29 7b 76 61 72 20 6f 3d 74 5b 65 5b 69 5d 5d 3b 69 66 28 6f 21 3d 3d 6e 29 72 65 74 75 72 Data Ascii: window.Modernizr=function(e,t,n){function r(e){d.cssText=e}function i(e,t){return r(prefixes.join(e+";")+(t\|\|""))}function s(e,t){return typeof e===t}function o(e,t){return!!~(""+e).indexOf(t)}function u(e,t,r){for(var i in e){var o=t[e[i]];if(o!==n)retur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.8	49723	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:19:55 UTC	567	OUT	GET /rdaAssets/fraudnet/sync/fn-sync-telemetry-min.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:19:55 UTC	754	IN	HTTP/1.1 200 OK Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:19:55 GMT DC: ccg11-origin-www-1.paypal.com Etag: "67230a66-19a5+ident" Expires: Thu, 05 Dec 2024 20:19:55 GMT Last-Modified: Thu, 31 Oct 2024 04:41:10 GMT Paypal-Debug-Id: 672801e377ba4 Server: ECAcc (lhd/35BC) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000672801e377ba4-3e2623f270924a3d-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 6565 Connection: close
2024-12-05 19:19:55 UTC	6565	IN	Data Raw: 76 61 72 20 50 41 59 50 41 4c 3d 77 69 6e 64 6f 77 2e 50 41 59 50 41 4c 7c 7c 7b 7d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 6e 5b 30 5d 3d 28 32 35 35 26 28 30 7c 74 5b 65 5d 29 29 3c 3c 32 34 7c 28 32 35 35 26 28 30 7c 74 5b 65 2b 31 5d 29 29 3c 3c 31 36 7c 28 32 35 35 26 28 30 7c 74 5b 65 2b 32 5d 29 29 3c 3c 38 7c 32 35 35 26 28 30 7c 74 5b 65 2b 33 5d 29 7c 30 2c 6e 5b 31 5d 3d 28 32 35 35 26 28 30 7c 74 5b 65 2b 34 5d 29 29 3c 3c 32 34 7c 28 32 35 35 26 28 30 7c 74 5b 65 2b 35 5d 29 29 3c 3c 31 36 7c 28 32 35 35 26 28 30 7c 74 5b 65 2b 36 5d 29 29 3c 3c 38 7c 32 35 35 26 28 30 7c 74 5b 65 2b 37 Data Ascii: var PAYPAL=window.PAYPAL\|\|{};!function(){"use strict";var t=function(t){var e=function(t,e,n){n[0]=(255&(0\|t[e]))<<24\|(255&(0\|t[e+1]))<<16\|(255&(0\|t[e+2]))<<8\|255&(0\|t[e+3])\|0,n[1]=(255&(0\|t[e+4]))<<24\|(255&(0\|t[e+5]))<<16\|(255&(0\|t[e+6]))<<8\|255&(0\|t[e+7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.8	49724	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:19:55 UTC	578	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/lib/require.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:19:55 UTC	792	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:19:55 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6737ef18-3a06" Expires: Fri, 05 Dec 2025 19:19:55 GMT Last-Modified: Sat, 16 Nov 2024 01:02:16 GMT Paypal-Debug-Id: 3b574d4eb09b4 Server: ECAcc (lhd/35A5) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000003b574d4eb09b4-a704e5c7c7e6a888-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 14854 Connection: close
2024-12-05 19:19:55 UTC	14854	IN	Data Raw: 2f 2a 0a 20 52 65 71 75 69 72 65 4a 53 20 32 2e 31 2e 36 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 30 2d 32 30 31 32 2c 20 54 68 65 20 44 6f 6a 6f 20 46 6f 75 6e 64 61 74 69 6f 6e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 20 41 76 61 69 6c 61 62 6c 65 20 76 69 61 20 74 68 65 20 4d 49 54 20 6f 72 20 6e 65 77 20 42 53 44 20 6c 69 63 65 6e 73 65 2e 0a 20 73 65 65 3a 20 68 74 74 70 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6a 72 62 75 72 6b 65 2f 72 65 71 75 69 72 65 6a 73 20 66 6f 72 20 64 65 74 61 69 6c 73 0a 2a 2f 0a 0a 76 61 72 20 72 65 71 75 69 72 65 6a 73 2c 72 65 71 75 69 72 65 2c 64 65 66 69 6e 65 3b 28 66 75 6e 63 74 69 6f 6e 28 62 61 29 7b 66 75 6e 63 74 69 6f 6e 20 4a 28 65 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a Data Ascii: /* RequireJS 2.1.6 Copyright (c) 2010-2012, The Dojo Foundation All Rights Reserved. Available via the MIT or new BSD license. see: http://github.com/jrburke/requirejs for details*/var requirejs,require,define;(function(ba){function J(e){return"[obj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.8	49720	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:19:55 UTC	570	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/app.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:19:56 UTC	790	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:19:55 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6737ef17-925" Expires: Fri, 05 Dec 2025 19:19:55 GMT Last-Modified: Sat, 16 Nov 2024 01:02:15 GMT Paypal-Debug-Id: f5a6beb75425f Server: ECAcc (lhd/35BD) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000f5a6beb75425f-d7d7db1114ad7125-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 2341 Connection: close
2024-12-05 19:19:56 UTC	2341	IN	Data Raw: 72 65 71 75 69 72 65 6a 73 2e 63 6f 6e 66 69 67 28 7b 70 61 63 6b 61 67 65 73 3a 5b 7b 6e 61 6d 65 3a 22 64 75 73 74 2d 6d 61 6b 61 72 61 2d 68 65 6c 70 65 72 73 22 2c 76 65 72 73 69 6f 6e 3a 22 34 2e 32 2e 30 22 2c 6c 6f 63 61 74 69 6f 6e 3a 22 62 72 6f 77 73 65 72 5f 6d 6f 64 75 6c 65 73 2f 64 75 73 74 2d 6d 61 6b 61 72 61 2d 68 65 6c 70 65 72 73 22 2c 6d 61 69 6e 3a 22 62 72 6f 77 73 65 72 2e 61 6d 64 2e 6a 73 22 7d 2c 7b 6e 61 6d 65 3a 22 64 75 73 74 68 65 6c 70 65 72 73 2d 73 75 70 70 6c 65 6d 65 6e 74 22 2c 76 65 72 73 69 6f 6e 3a 22 32 2e 30 2e 31 22 2c 6c 6f 63 61 74 69 6f 6e 3a 22 62 72 6f 77 73 65 72 5f 6d 6f 64 75 6c 65 73 2f 64 75 73 74 68 65 6c 70 65 72 73 2d 73 75 70 70 6c 65 6d 65 6e 74 22 2c 6d 61 69 6e 3a 22 69 6e 64 65 78 2e 6a 73 22 7d Data Ascii: requirejs.config({packages:[{name:"dust-makara-helpers",version:"4.2.0",location:"browser_modules/dust-makara-helpers",main:"browser.amd.js"},{name:"dusthelpers-supplement",version:"2.0.1",location:"browser_modules/dusthelpers-supplement",main:"index.js"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.8	49721	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:19:55 UTC	534	OUT	GET /pa/js/min/pa.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:19:56 UTC	800	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:19:55 GMT DC: ccg11-origin-www-1.paypal.com Etag: "6735ac2d-11212+ident" Expires: Thu, 05 Dec 2024 20:19:55 GMT Last-Modified: Thu, 14 Nov 2024 07:52:13 GMT Paypal-Debug-Id: f898c5a52e3d2 Server: ECAcc (lhd/35DA) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000f898c5a52e3d2-b1bb2e86a5e09a5f-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 70162 Connection: close
2024-12-05 19:19:56 UTC	16383	IN	Data Raw: 2f 2a 40 20 32 30 32 34 20 50 61 79 50 61 6c 20 28 76 31 2e 39 2e 35 29 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 74 2c 65 2c 6e 29 7b 28 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 74 7c 7c 21 74 29 72 65 74 75 72 6e 20 74 3b 76 61 72 20 6e 3d 74 5b 53 79 6d 62 6f 6c 2e 74 6f 50 72 69 6d 69 74 69 76 65 5d 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6e 29 72 65 74 75 72 6e 28 22 73 74 72 69 6e 67 22 3d 3d 3d 65 3f 53 74 72 69 6e 67 3a 4e 75 6d 62 65 72 29 28 74 29 3b 74 3d 6e 2e 63 61 6c 6c 28 74 2c 65 7c 7c 22 64 65 66 61 75 6c 74 22 29 3b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d Data Ascii: /@ 2024 PayPal (v1.9.5) /!function(){"use strict";function r(t,e,n){(e=function(t){t=function(t,e){if("object"!=typeof t\|\|!t)return t;var n=t[Symbol.toPrimitive];if(void 0===n)return("string"===e?String:Number)(t);t=n.call(t,e\|\|"default");if("object"!=
2024-12-05 19:19:56 UTC	1	IN	Data Raw: 20 Data Ascii:
2024-12-05 19:19:56 UTC	16383	IN	Data Raw: 22 2b 74 5b 72 5d 2e 74 72 69 6d 28 29 2c 72 21 3d 3d 74 2e 6c 65 6e 67 74 68 2d 31 26 26 28 6e 2b 3d 22 2c 20 22 29 7d 65 6c 73 65 20 6e 3d 74 3b 72 65 74 75 72 6e 20 6e 7d 76 61 72 20 5f 65 3d 7b 70 70 3a 2f 5c 2e 70 61 79 70 61 6c 5c 2e 63 6f 6d 24 2f 2c 61 6c 6c 3a 48 7d 3b 66 75 6e 63 74 69 6f 6e 20 50 65 28 74 2c 65 29 7b 76 61 72 20 6e 3d 21 31 2c 65 3d 65 7c 7c 71 3b 72 65 74 75 72 6e 20 6e 3d 5f 65 5b 74 3d 74 7c 7c 22 61 6c 6c 22 5d 2e 74 65 73 74 28 65 29 3f 21 30 3a 6e 7d 66 75 6e 63 74 69 6f 6e 20 45 28 74 2c 65 2c 6e 29 7b 74 72 79 7b 76 61 72 20 72 3d 65 2e 72 65 70 6c 61 63 65 28 22 5b 22 2c 22 2e 22 29 2e 72 65 70 6c 61 63 65 28 22 5d 22 2c 22 22 29 2e 73 70 6c 69 74 28 22 2e 22 29 2e 72 65 64 75 63 65 28 66 75 6e 63 74 69 6f 6e 28 74 2c Data Ascii: "+t[r].trim(),r!==t.length-1&&(n+=", ")}else n=t;return n}var _e={pp:/\.paypal\.com$/,all:H};function Pe(t,e){var n=!1,e=e\|\|q;return n=_e[t=t\|\|"all"].test(e)?!0:n}function E(t,e,n){try{var r=e.replace("[",".").replace("]","").split(".").reduce(function(t,
2024-12-05 19:19:56 UTC	16383	IN	Data Raw: 2c 6f 3d 30 3b 6f 3c 61 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 63 3d 61 5b 6f 5d 2c 75 3d 6b 65 28 22 69 6e 70 75 74 22 2c 63 29 2c 73 3d 75 2e 6c 65 6e 67 74 68 2c 6c 3d 30 3b 6c 3c 73 3b 6c 2b 2b 29 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 68 28 65 2c 22 66 6f 63 75 73 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 5f 6c 61 73 74 46 6f 72 6d 3d 74 2c 72 2e 5f 6c 61 73 74 49 6e 70 75 74 3d 65 2c 72 2e 5f 74 72 61 63 6b 69 6e 67 46 41 7c 7c 28 72 2e 5f 74 72 61 63 6b 69 6e 67 46 41 3d 21 30 2c 22 62 65 66 6f 72 65 75 6e 6c 6f 61 64 2c 68 61 73 68 63 68 61 6e 67 65 22 2e 73 70 6c 69 74 28 22 2c 22 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 68 28 77 69 6e 64 6f 77 2c 74 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 75 Data Ascii: ,o=0;o<a.length;o++)for(var c=a[o],u=ke("input",c),s=u.length,l=0;l<s;l++)!function(t,e){h(e,"focus",function(){r._lastForm=t,r._lastInput=e,r._trackingFA\|\|(r._trackingFA=!0,"beforeunload,hashchange".split(",").forEach(function(t){h(window,t,function(){nu
2024-12-05 19:19:56 UTC	16383	IN	Data Raw: 6c 6f 61 64 56 65 6e 64 6f 72 44 65 66 61 75 6c 74 28 74 2e 6e 61 6d 65 29 7c 7c 7b 7d 2c 74 29 3b 62 72 28 74 29 26 26 28 6d 72 26 26 76 72 5b 65 5d 26 26 2d 31 21 3d 3d 76 72 5b 65 5d 2e 69 6e 64 65 78 4f 66 28 74 2e 6e 61 6d 65 29 3f 75 5b 65 5d 3d 21 31 3a 6e 2e 70 75 73 68 28 74 29 29 7d 29 2c 6e 2e 6c 65 6e 67 74 68 29 26 26 28 69 3d 7b 69 64 3a 65 2c 74 72 69 67 67 65 72 3a 6f 2e 74 72 69 67 67 65 72 2c 63 61 70 74 75 72 65 3a 6f 2e 63 61 70 74 75 72 65 2c 76 65 6e 64 6f 72 73 3a 6e 7d 2c 6f 3d 50 41 59 50 41 4c 2e 61 6e 61 6c 79 74 69 63 73 2e 6c 6f 67 4a 53 45 72 72 6f 72 2c 74 3d 69 2e 74 72 69 67 67 65 72 2e 74 79 70 65 2c 61 3d 69 2e 74 72 69 67 67 65 72 2e 63 6f 6e 64 69 74 69 6f 6e 2c 69 2e 74 72 69 67 67 65 72 2e 68 61 73 4f 77 6e 50 72 6f Data Ascii: loadVendorDefault(t.name)\|\|{},t);br(t)&&(mr&&vr[e]&&-1!==vr[e].indexOf(t.name)?u[e]=!1:n.push(t))}),n.length)&&(i={id:e,trigger:o.trigger,capture:o.capture,vendors:n},o=PAYPAL.analytics.logJSError,t=i.trigger.type,a=i.trigger.condition,i.trigger.hasOwnPro
2024-12-05 19:19:56 UTC	4629	IN	Data Raw: 26 28 61 2e 76 61 6c 75 65 3d 4d 61 74 68 2e 6d 61 78 28 74 2e 73 74 61 72 74 54 69 6d 65 2d 6e 69 28 29 2c 30 29 2c 61 2e 65 6e 74 72 69 65 73 3d 5b 74 5d 2c 6e 28 29 29 7d 29 3b 74 26 26 28 6e 3d 52 28 6f 2c 61 2c 42 69 2c 63 2e 72 65 70 6f 72 74 41 6c 6c 43 68 61 6e 67 65 73 29 2c 72 3d 6f 69 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7a 69 5b 61 2e 69 64 5d 7c 7c 28 65 28 74 2e 74 61 6b 65 52 65 63 6f 72 64 73 28 29 29 2c 74 2e 64 69 73 63 6f 6e 6e 65 63 74 28 29 2c 7a 69 5b 61 2e 69 64 5d 3d 21 30 2c 6e 28 21 30 29 29 7d 29 2c 5b 22 6b 65 79 64 6f 77 6e 22 2c 22 63 6c 69 63 6b 22 5d 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 Data Ascii: &(a.value=Math.max(t.startTime-ni(),0),a.entries=[t],n())});t&&(n=R(o,a,Bi,c.reportAllChanges),r=oi(function(){zi[a.id]\|\|(e(t.takeRecords()),t.disconnect(),zi[a.id]=!0,n(!0))}),["keydown","click"].forEach(function(t){addEventListener(t,function(){return s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.8	49726	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:19:57 UTC	590	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/widgets/clientCalLogger.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:19:58 UTC	790	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:19:58 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6737ef1a-519" Expires: Fri, 05 Dec 2025 19:19:58 GMT Last-Modified: Sat, 16 Nov 2024 01:02:18 GMT Paypal-Debug-Id: 6240ddfabb5ae Server: ECAcc (lhd/35B2) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000006240ddfabb5ae-45725653d5931af3-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 1305 Connection: close
2024-12-05 19:19:58 UTC	1305	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 66 28 74 29 7b 78 68 72 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 2c 78 68 72 2e 6f 70 65 6e 28 22 50 4f 53 54 22 2c 22 2f 73 69 67 6e 69 6e 2f 63 6c 69 65 6e 74 2d 6c 6f 67 22 2c 21 30 29 2c 78 68 72 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 29 3b 74 72 79 7b 78 68 72 2e 73 65 6e 64 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 74 29 29 2c 65 2e 75 6c 44 61 74 61 2e 6c 6f 67 52 65 63 6f 72 64 73 3d 5b 5d 7d 63 61 74 63 68 28 6e 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 76 61 72 20 65 3d 7b 75 6c 43 6f 72 72 65 6c 61 Data Ascii: (function(){function f(t){xhr=new XMLHttpRequest,xhr.open("POST","/signin/client-log",!0),xhr.setRequestHeader("Content-Type","application/json;charset=UTF-8");try{xhr.send(JSON.stringify(t)),e.ulData.logRecords=[]}catch(n){}}function l(){var e={ulCorrela

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.8	49727	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:19:57 UTC	588	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/widgets/errorDetector.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:19:58 UTC	789	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:19:58 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6737ef1a-205" Expires: Fri, 05 Dec 2025 19:19:58 GMT Last-Modified: Sat, 16 Nov 2024 01:02:18 GMT Paypal-Debug-Id: 3cba9f6cd4663 Server: ECAcc (lhd/35FD) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000003cba9f6cd4663-d43ec0cd1b219f50-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 517 Connection: close
2024-12-05 19:19:58 UTC	517	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 78 68 72 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 2c 78 68 72 2e 6f 70 65 6e 28 22 50 4f 53 54 22 2c 22 2f 73 69 67 6e 69 6e 2f 63 6c 69 65 6e 74 2d 6c 6f 67 22 2c 21 30 29 2c 78 68 72 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 29 3b 74 72 79 7b 78 68 72 2e 73 65 6e 64 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 29 29 7d 63 61 74 63 68 28 74 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 72 2c 69 2c 73 2c 6f 29 7b 76 61 72 20 75 3d 6f 26 26 6f 2e 6d 65 73 73 61 67 65 7c 7c 22 75 6e 6b 6e 6f 77 6e 22 2c Data Ascii: (function(){function n(e){xhr=new XMLHttpRequest,xhr.open("POST","/signin/client-log",!0),xhr.setRequestHeader("Content-Type","application/json;charset=UTF-8");try{xhr.send(JSON.stringify(e))}catch(t){}}function r(e,r,i,s,o){var u=o&&o.message\|\|"unknown",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.8	49728	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:19:57 UTC	675	OUT	GET /images/shared/paypal-logo-129x32.svg HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/css/app.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:19:58 UTC	706	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: image/svg+xml Date: Thu, 05 Dec 2024 19:19:58 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"544ad849-1351" Expires: Thu, 05 Dec 2024 20:19:58 GMT Last-Modified: Fri, 24 Oct 2014 22:52:57 GMT Paypal-Debug-Id: a9274e1a826b2 Server: ECAcc (lhd/3598) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000a9274e1a826b2-d020aa44b15f9c8c-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 4945 Connection: close
2024-12-05 19:19:58 UTC	4945	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 36 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg version="1.1"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.8	49729	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:19:58 UTC	412	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/lib/modernizr-2.6.1.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:19:58 UTC	790	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:19:58 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6737ef18-edf" Expires: Fri, 05 Dec 2025 19:19:58 GMT Last-Modified: Sat, 16 Nov 2024 01:02:16 GMT Paypal-Debug-Id: 03c808c5966a2 Server: ECAcc (lhd/35D6) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-000000000000000000003c808c5966a2-74300e3f4248e9f9-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 3807 Connection: close
2024-12-05 19:19:58 UTC	3807	IN	Data Raw: 77 69 6e 64 6f 77 2e 4d 6f 64 65 72 6e 69 7a 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 64 2e 63 73 73 54 65 78 74 3d 65 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 72 28 70 72 65 66 69 78 65 73 2e 6a 6f 69 6e 28 65 2b 22 3b 22 29 2b 28 74 7c 7c 22 22 29 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 3d 3d 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 72 65 74 75 72 6e 21 21 7e 28 22 22 2b 65 29 2e 69 6e 64 65 78 4f 66 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 74 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 20 69 6e 20 65 29 7b 76 61 72 20 6f 3d 74 5b 65 5b 69 5d 5d 3b 69 66 28 6f 21 3d 3d 6e 29 72 65 74 75 72 Data Ascii: window.Modernizr=function(e,t,n){function r(e){d.cssText=e}function i(e,t){return r(prefixes.join(e+";")+(t\|\|""))}function s(e,t){return typeof e===t}function o(e,t){return!!~(""+e).indexOf(t)}function u(e,t,r){for(var i in e){var o=t[e[i]];if(o!==n)retur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.8	49730	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:19:58 UTC	393	OUT	GET /rdaAssets/fraudnet/sync/fn-sync-telemetry-min.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:19:58 UTC	754	IN	HTTP/1.1 200 OK Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:19:58 GMT DC: ccg11-origin-www-1.paypal.com Etag: "67230a66-19a5+ident" Expires: Thu, 05 Dec 2024 20:19:58 GMT Last-Modified: Thu, 31 Oct 2024 04:41:10 GMT Paypal-Debug-Id: 672801e377ba4 Server: ECAcc (lhd/35BC) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000672801e377ba4-3e2623f270924a3d-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 6565 Connection: close
2024-12-05 19:19:58 UTC	6565	IN	Data Raw: 76 61 72 20 50 41 59 50 41 4c 3d 77 69 6e 64 6f 77 2e 50 41 59 50 41 4c 7c 7c 7b 7d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 6e 5b 30 5d 3d 28 32 35 35 26 28 30 7c 74 5b 65 5d 29 29 3c 3c 32 34 7c 28 32 35 35 26 28 30 7c 74 5b 65 2b 31 5d 29 29 3c 3c 31 36 7c 28 32 35 35 26 28 30 7c 74 5b 65 2b 32 5d 29 29 3c 3c 38 7c 32 35 35 26 28 30 7c 74 5b 65 2b 33 5d 29 7c 30 2c 6e 5b 31 5d 3d 28 32 35 35 26 28 30 7c 74 5b 65 2b 34 5d 29 29 3c 3c 32 34 7c 28 32 35 35 26 28 30 7c 74 5b 65 2b 35 5d 29 29 3c 3c 31 36 7c 28 32 35 35 26 28 30 7c 74 5b 65 2b 36 5d 29 29 3c 3c 38 7c 32 35 35 26 28 30 7c 74 5b 65 2b 37 Data Ascii: var PAYPAL=window.PAYPAL\|\|{};!function(){"use strict";var t=function(t){var e=function(t,e,n){n[0]=(255&(0\|t[e]))<<24\|(255&(0\|t[e+1]))<<16\|(255&(0\|t[e+2]))<<8\|255&(0\|t[e+3])\|0,n[1]=(255&(0\|t[e+4]))<<24\|(255&(0\|t[e+5]))<<16\|(255&(0\|t[e+6]))<<8\|255&(0\|t[e+7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.8	49731	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:19:58 UTC	404	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/lib/require.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:19:58 UTC	792	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:19:58 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6737ef18-3a06" Expires: Fri, 05 Dec 2025 19:19:58 GMT Last-Modified: Sat, 16 Nov 2024 01:02:16 GMT Paypal-Debug-Id: 3b574d4eb09b4 Server: ECAcc (lhd/35A5) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000003b574d4eb09b4-a704e5c7c7e6a888-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 14854 Connection: close
2024-12-05 19:19:58 UTC	14854	IN	Data Raw: 2f 2a 0a 20 52 65 71 75 69 72 65 4a 53 20 32 2e 31 2e 36 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 30 2d 32 30 31 32 2c 20 54 68 65 20 44 6f 6a 6f 20 46 6f 75 6e 64 61 74 69 6f 6e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 20 41 76 61 69 6c 61 62 6c 65 20 76 69 61 20 74 68 65 20 4d 49 54 20 6f 72 20 6e 65 77 20 42 53 44 20 6c 69 63 65 6e 73 65 2e 0a 20 73 65 65 3a 20 68 74 74 70 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6a 72 62 75 72 6b 65 2f 72 65 71 75 69 72 65 6a 73 20 66 6f 72 20 64 65 74 61 69 6c 73 0a 2a 2f 0a 0a 76 61 72 20 72 65 71 75 69 72 65 6a 73 2c 72 65 71 75 69 72 65 2c 64 65 66 69 6e 65 3b 28 66 75 6e 63 74 69 6f 6e 28 62 61 29 7b 66 75 6e 63 74 69 6f 6e 20 4a 28 65 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a Data Ascii: /* RequireJS 2.1.6 Copyright (c) 2010-2012, The Dojo Foundation All Rights Reserved. Available via the MIT or new BSD license. see: http://github.com/jrburke/requirejs for details*/var requirejs,require,define;(function(ba){function J(e){return"[obj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.8	49732	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:19:58 UTC	396	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/app.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:19:58 UTC	790	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:19:58 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6737ef17-925" Expires: Fri, 05 Dec 2025 19:19:58 GMT Last-Modified: Sat, 16 Nov 2024 01:02:15 GMT Paypal-Debug-Id: f5a6beb75425f Server: ECAcc (lhd/35BD) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000f5a6beb75425f-d7d7db1114ad7125-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 2341 Connection: close
2024-12-05 19:19:58 UTC	2341	IN	Data Raw: 72 65 71 75 69 72 65 6a 73 2e 63 6f 6e 66 69 67 28 7b 70 61 63 6b 61 67 65 73 3a 5b 7b 6e 61 6d 65 3a 22 64 75 73 74 2d 6d 61 6b 61 72 61 2d 68 65 6c 70 65 72 73 22 2c 76 65 72 73 69 6f 6e 3a 22 34 2e 32 2e 30 22 2c 6c 6f 63 61 74 69 6f 6e 3a 22 62 72 6f 77 73 65 72 5f 6d 6f 64 75 6c 65 73 2f 64 75 73 74 2d 6d 61 6b 61 72 61 2d 68 65 6c 70 65 72 73 22 2c 6d 61 69 6e 3a 22 62 72 6f 77 73 65 72 2e 61 6d 64 2e 6a 73 22 7d 2c 7b 6e 61 6d 65 3a 22 64 75 73 74 68 65 6c 70 65 72 73 2d 73 75 70 70 6c 65 6d 65 6e 74 22 2c 76 65 72 73 69 6f 6e 3a 22 32 2e 30 2e 31 22 2c 6c 6f 63 61 74 69 6f 6e 3a 22 62 72 6f 77 73 65 72 5f 6d 6f 64 75 6c 65 73 2f 64 75 73 74 68 65 6c 70 65 72 73 2d 73 75 70 70 6c 65 6d 65 6e 74 22 2c 6d 61 69 6e 3a 22 69 6e 64 65 78 2e 6a 73 22 7d Data Ascii: requirejs.config({packages:[{name:"dust-makara-helpers",version:"4.2.0",location:"browser_modules/dust-makara-helpers",main:"browser.amd.js"},{name:"dusthelpers-supplement",version:"2.0.1",location:"browser_modules/dusthelpers-supplement",main:"index.js"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.8	49725	18.66.161.81	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:19:58 UTC	966	OUT	GET /tags.js HTTP/1.1 Host: ddbm2.paypal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=c0c49a91e6384eadbaa4a565394e21da1733426393114; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTczMzQyNjM5MzE1OSIsImwiOiIwIiwibSI6IjAifQ; l7_az=dcg15.slc; ts=vreXpYrS%3D1764962393%26vteXpYrS%3D1733428193%26vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778%26vtyp%3Dnew; ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778
2024-12-05 19:19:59 UTC	708	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 177743 Connection: close Last-Modified: Wed, 04 Dec 2024 11:03:19 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: fRdxQZTwv7aUXeF3zxmAg.EIiFr7SoNp Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 05 Dec 2024 19:20:00 GMT Cache-Control: max-age=3600, public ETag: "b4f2edbea31dcec5c70f4f1bf574b162" X-Cache: RefreshHit from cloudfront Via: 1.1 91c765f98e441d70899402f8a830d8b2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH52-C1 X-Amz-Cf-Id: JMaSDwkUeXp4MSPTSGuDX4efRl_rmRrTTZaqzvq1kAd9w9cRPZxjLw== X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Vary: Origin
2024-12-05 19:19:59 UTC	16384	IN	Data Raw: 2f 2a 2a 20 44 61 74 61 44 6f 6d 65 20 69 73 20 61 20 63 79 62 65 72 73 65 63 75 72 69 74 79 20 73 6f 6c 75 74 69 6f 6e 20 74 6f 20 64 65 74 65 63 74 20 62 6f 74 20 61 63 74 69 76 69 74 79 20 68 74 74 70 73 3a 2f 2f 64 61 74 61 64 6f 6d 65 2e 63 6f 20 28 76 65 72 73 69 6f 6e 20 34 2e 33 38 2e 30 29 20 2a 2f 20 0a 21 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 6e 2c 6f 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 72 2c 73 29 7b 69 66 28 21 6e 5b 72 5d 29 7b 69 66 28 21 74 5b 72 5d 29 7b 76 61 72 20 64 3d 27 5c 78 36 36 5c 78 37 35 5c 78 36 65 5c 78 36 33 5c 78 37 34 5c 78 36 39 5c 78 36 66 5c 78 36 65 27 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 26 26 72 65 71 75 69 72 65 3b 69 66 28 21 73 26 26 64 29 72 65 74 75 72 6e 20 64 28 72 2c 21 30 29 3b 69 66 28 61 29 Data Ascii: /** DataDome is a cybersecurity solution to detect bot activity https://datadome.co (version 4.38.0) */ !function e(t,n,o){function i(r,s){if(!n[r]){if(!t[r]){var d='\x66\x75\x6e\x63\x74\x69\x6f\x6e'==typeof require&&require;if(!s&&d)return d(r,!0);if(a)
2024-12-05 19:20:00 UTC	9200	IN	Data Raw: 6e 2c 6f 29 7b 65 5b 5b 27 5c 78 37 32 5c 78 36 35 5c 78 36 64 5c 78 36 66 5c 78 37 36 5c 78 36 35 5c 78 34 35 5c 78 37 36 5c 78 36 35 5c 78 36 65 5c 78 37 34 5c 78 34 63 5c 78 36 39 5c 78 37 33 5c 78 37 34 5c 78 36 35 5c 78 36 65 5c 78 36 35 5c 78 37 32 27 5d 5d 3f 65 5b 5b 27 5c 78 37 32 5c 78 36 35 5c 78 36 64 5c 78 36 66 5c 78 37 36 5c 78 36 35 5c 78 34 35 5c 78 37 36 5c 78 36 35 5c 78 36 65 5c 78 37 34 5c 78 34 63 5c 78 36 39 5c 78 37 33 5c 78 37 34 5c 78 36 35 5c 78 36 65 5c 78 36 35 5c 78 37 32 27 5d 5d 28 74 2c 6e 2c 6f 29 3a 65 5b 5b 27 5c 78 36 34 5c 78 36 35 5c 78 37 34 5c 78 36 31 5c 78 36 33 5c 78 36 38 5c 78 34 35 5c 78 37 36 5c 78 36 35 5c 78 36 65 5c 78 37 34 27 5d 5d 26 26 65 5b 5b 27 5c 78 36 34 5c 78 36 35 5c 78 37 34 5c 78 36 31 5c 78 Data Ascii: n,o){e[['\x72\x65\x6d\x6f\x76\x65\x45\x76\x65\x6e\x74\x4c\x69\x73\x74\x65\x6e\x65\x72']]?e[['\x72\x65\x6d\x6f\x76\x65\x45\x76\x65\x6e\x74\x4c\x69\x73\x74\x65\x6e\x65\x72']](t,n,o):e[['\x64\x65\x74\x61\x63\x68\x45\x76\x65\x6e\x74']]&&e[['\x64\x65\x74\x61\x
2024-12-05 19:20:00 UTC	16384	IN	Data Raw: 78 33 61 5c 78 32 66 5c 78 32 66 27 3b 72 65 74 75 72 6e 27 5c 78 37 33 5c 78 37 34 5c 78 37 32 5c 78 36 39 5c 78 36 65 5c 78 36 37 27 21 3d 74 79 70 65 6f 66 20 65 7c 7c 30 21 3d 3d 65 5b 5b 27 5c 78 36 39 5c 78 36 65 5c 78 36 34 5c 78 36 35 5c 78 37 38 5c 78 34 66 5c 78 36 36 27 5d 5d 28 74 29 3f 27 27 3a 65 5b 5b 27 5c 78 37 32 5c 78 36 35 5c 78 37 30 5c 78 36 63 5c 78 36 31 5c 78 36 33 5c 78 36 35 27 5d 5d 28 74 2c 27 27 29 5b 5b 27 5c 78 37 33 5c 78 37 30 5c 78 36 63 5c 78 36 39 5c 78 37 34 27 5d 5d 28 27 5c 78 32 66 27 29 5b 30 5d 3b 7d 2c 73 68 6f 75 6c 64 43 68 65 63 6b 46 70 4f 72 69 67 69 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 64 5b 5b 27 5c 78 36 39 5c 78 36 65 5c 78 36 34 5c 78 36 35 5c 78 37 38 5c 78 34 66 5c 78 36 36 Data Ascii: x3a\x2f\x2f';return'\x73\x74\x72\x69\x6e\x67'!=typeof e\|\|0!==e[['\x69\x6e\x64\x65\x78\x4f\x66']](t)?'':e[['\x72\x65\x70\x6c\x61\x63\x65']](t,'')[['\x73\x70\x6c\x69\x74']]('\x2f')[0];},shouldCheckFpOrigin:function(e){return d[['\x69\x6e\x64\x65\x78\x4f\x66
2024-12-05 19:20:00 UTC	16384	IN	Data Raw: 5c 78 37 32 5c 78 34 63 5c 78 37 32 5c 78 37 37 5c 78 35 38 5c 78 34 63 5c 78 34 32 5c 78 37 37 5c 78 37 36 5c 78 35 35 5c 78 34 34 5c 78 36 31 27 2c 27 5c 78 37 61 5c 78 36 37 5c 78 33 39 5c 78 34 61 5c 78 34 34 5c 78 37 37 5c 78 33 31 5c 78 34 63 5c 78 34 32 5c 78 34 65 5c 78 37 31 27 2c 27 5c 78 37 39 5c 78 37 37 5c 78 37 32 5c 78 34 62 5c 78 37 32 5c 78 37 38 5c 78 37 61 5c 78 34 63 5c 78 34 32 5c 78 34 65 5c 78 37 32 5c 78 36 64 5c 78 34 31 5c 78 37 38 5c 78 36 65 5c 78 33 30 5c 78 37 61 5c 78 37 37 5c 78 33 35 5c 78 34 63 5c 78 34 33 5c 78 34 37 27 2c 27 5c 78 34 31 5c 78 36 37 5c 78 36 65 5c 78 35 36 5c 78 34 34 5c 78 34 64 5c 78 37 32 5c 78 35 39 5c 78 36 64 5c 78 34 37 27 2c 27 5c 78 34 33 5c 78 36 37 5c 78 35 38 5c 78 34 65 5c 78 37 61 5c 78 33 Data Ascii: \x72\x4c\x72\x77\x58\x4c\x42\x77\x76\x55\x44\x61','\x7a\x67\x39\x4a\x44\x77\x31\x4c\x42\x4e\x71','\x79\x77\x72\x4b\x72\x78\x7a\x4c\x42\x4e\x72\x6d\x41\x78\x6e\x30\x7a\x77\x35\x4c\x43\x47','\x41\x67\x6e\x56\x44\x4d\x72\x59\x6d\x47','\x43\x67\x58\x4e\x7a\x3
2024-12-05 19:20:00 UTC	6249	IN	Data Raw: 5c 78 34 34 5c 78 35 66 5c 78 35 36 5c 78 34 35 5c 78 34 65 5c 78 34 34 5c 78 34 66 5c 78 35 32 5c 78 35 66 5c 78 35 37 5c 78 34 35 5c 78 34 32 5c 78 34 37 5c 78 34 63 5c 78 32 63 5c 78 36 35 5c 78 32 65 5c 78 35 35 5c 78 34 65 5c 78 34 64 5c 78 34 31 5c 78 35 33 5c 78 34 62 5c 78 34 35 5c 78 34 34 5c 78 35 66 5c 78 35 32 5c 78 34 35 5c 78 34 65 5c 78 34 34 5c 78 34 35 5c 78 35 32 5c 78 34 35 5c 78 35 32 5c 78 35 66 5c 78 35 37 5c 78 34 35 5c 78 34 32 5c 78 34 37 5c 78 34 63 5c 78 32 39 5c 78 32 63 5c 78 37 34 5c 78 32 65 5c 78 37 36 5c 78 36 34 5c 78 33 64 5c 78 37 32 5c 78 32 65 5c 78 36 37 5c 78 36 35 5c 78 37 34 5c 78 35 30 5c 78 36 31 5c 78 37 32 5c 78 36 31 5c 78 36 64 5c 78 36 35 5c 78 37 34 5c 78 36 35 5c 78 37 32 5c 78 32 38 5c 78 36 31 5c 78 32 Data Ascii: \x44\x5f\x56\x45\x4e\x44\x4f\x52\x5f\x57\x45\x42\x47\x4c\x2c\x65\x2e\x55\x4e\x4d\x41\x53\x4b\x45\x44\x5f\x52\x45\x4e\x44\x45\x52\x45\x52\x5f\x57\x45\x42\x47\x4c\x29\x2c\x74\x2e\x76\x64\x3d\x72\x2e\x67\x65\x74\x50\x61\x72\x61\x6d\x65\x74\x65\x72\x28\x61\x2
2024-12-05 19:20:00 UTC	16384	IN	Data Raw: 34 5c 78 35 66 5c 78 36 32 27 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 2c 6e 3d 64 6f 63 75 6d 65 6e 74 5b 27 5c 78 36 33 5c 78 37 32 5c 78 36 35 5c 78 36 31 5c 78 37 34 5c 78 36 35 5c 78 34 35 5c 78 36 63 5c 78 36 35 5c 78 36 64 5c 78 36 35 5c 78 36 65 5c 78 37 34 27 5d 28 27 5c 78 36 39 5c 78 36 36 5c 78 37 32 5c 78 36 31 5c 78 36 64 5c 78 36 35 27 29 3b 6e 5b 27 5c 78 37 33 5c 78 37 32 5c 78 36 33 5c 78 36 34 5c 78 36 66 5c 78 36 33 27 5d 3d 65 28 35 30 38 29 2c 6e 5b 65 28 36 38 35 29 5d 5b 65 28 36 36 31 29 5d 3d 27 5c 78 36 65 5c 78 36 66 5c 78 36 65 5c 78 36 35 27 2c 64 6f 63 75 6d 65 6e 74 26 26 64 6f 63 75 6d 65 6e 74 5b 65 28 36 32 35 29 5d 26 26 28 64 6f 63 75 6d 65 6e 74 5b 65 28 36 32 35 29 5d 5b 27 5c 78 36 31 5c 78 37 30 Data Ascii: 4\x5f\x62']=function(){var e=t,n=document['\x63\x72\x65\x61\x74\x65\x45\x6c\x65\x6d\x65\x6e\x74']('\x69\x66\x72\x61\x6d\x65');n['\x73\x72\x63\x64\x6f\x63']=e(508),n[e(685)][e(661)]='\x6e\x6f\x6e\x65',document&&document[e(625)]&&(document[e(625)]['\x61\x70
2024-12-05 19:20:00 UTC	16384	IN	Data Raw: 5c 78 36 33 5c 78 36 64 5c 78 37 30 5c 78 33 33 27 5d 3d 6f 5b 6e 28 34 35 35 29 5d 28 6e 28 34 39 36 29 29 2c 65 5b 27 5c 78 36 31 5c 78 36 33 5c 78 36 64 5c 78 37 30 5c 78 33 33 5c 78 37 34 5c 78 37 33 27 5d 3d 69 5b 6e 28 36 33 37 29 5d 28 6e 28 34 39 36 29 29 2c 65 5b 27 5c 78 36 31 5c 78 36 33 5c 78 37 37 5c 78 36 64 27 5d 3d 6f 5b 27 5c 78 36 33 5c 78 36 31 5c 78 36 65 5c 78 35 30 5c 78 36 63 5c 78 36 31 5c 78 37 39 5c 78 35 34 5c 78 37 39 5c 78 37 30 5c 78 36 35 27 5d 28 6e 28 36 35 36 29 29 2c 65 5b 27 5c 78 36 31 5c 78 36 33 5c 78 37 37 5c 78 36 64 5c 78 37 34 5c 78 37 33 27 5d 3d 69 5b 6e 28 36 33 37 29 5d 28 6e 28 36 35 36 29 29 2c 65 5b 27 5c 78 36 66 5c 78 36 33 5c 78 37 30 5c 78 37 34 27 5d 3d 2d 31 3d 3d 3d 6f 5b 27 5c 78 36 33 5c 78 36 31 Data Ascii: \x63\x6d\x70\x33']=o[n(455)](n(496)),e['\x61\x63\x6d\x70\x33\x74\x73']=i[n(637)](n(496)),e['\x61\x63\x77\x6d']=o['\x63\x61\x6e\x50\x6c\x61\x79\x54\x79\x70\x65'](n(656)),e['\x61\x63\x77\x6d\x74\x73']=i[n(637)](n(656)),e['\x6f\x63\x70\x74']=-1===o['\x63\x61
2024-12-05 19:20:00 UTC	16384	IN	Data Raw: 30 3b 75 3c 68 5b 27 5c 78 36 63 5c 78 36 35 5c 78 36 65 5c 78 36 37 5c 78 37 34 5c 78 36 38 27 5d 3b 75 2b 2b 29 7b 73 3d 68 5b 75 5d 2c 64 3d 76 6f 69 64 20 30 2c 6e 5b 28 64 3d 6f 29 28 36 38 35 29 5d 5b 27 5c 78 36 36 5c 78 36 66 5c 78 36 65 5c 78 37 34 5c 78 34 36 5c 78 36 31 5c 78 36 64 5c 78 36 39 5c 78 36 63 5c 78 37 39 27 5d 3d 73 2b 27 5c 78 32 63 5c 78 32 30 27 2b 69 2c 6e 5b 64 28 34 39 35 29 5d 21 3d 61 26 26 28 6c 2b 3d 75 2b 27 5c 78 32 63 27 29 3b 7d 63 3d 6f 2c 64 6f 63 75 6d 65 6e 74 5b 27 5c 78 36 32 5c 78 36 66 5c 78 36 34 5c 78 37 39 27 5d 5b 63 28 36 36 35 29 5d 28 6e 29 2c 65 5b 27 5c 78 36 39 5c 78 36 36 5c 78 37 34 5c 78 37 33 27 5d 3d 6c 3b 7d 2c 74 68 69 73 5b 27 5c 78 36 34 5c 78 36 34 5c 78 35 66 5c 78 36 31 5c 78 36 65 27 5d Data Ascii: 0;u<h['\x6c\x65\x6e\x67\x74\x68'];u++){s=h[u],d=void 0,n[(d=o)(685)]['\x66\x6f\x6e\x74\x46\x61\x6d\x69\x6c\x79']=s+'\x2c\x20'+i,n[d(495)]!=a&&(l+=u+'\x2c');}c=o,document['\x62\x6f\x64\x79'][c(665)](n),e['\x69\x66\x74\x73']=l;},this['\x64\x64\x5f\x61\x6e']
2024-12-05 19:20:00 UTC	14808	IN	Data Raw: 64 27 29 2c 6f 3d 65 5b 5b 27 5c 78 36 33 5c 78 36 66 5c 78 36 66 5c 78 36 62 5c 78 36 39 5c 78 36 35 27 5d 5d 5b 5b 27 5c 78 36 39 5c 78 36 65 5c 78 36 34 5c 78 36 35 5c 78 37 38 5c 78 34 66 5c 78 36 36 27 5d 5d 28 27 5c 78 35 30 5c 78 36 31 5c 78 37 34 5c 78 36 38 5c 78 33 64 27 29 2c 69 3d 65 5b 5b 27 5c 78 36 33 5c 78 36 66 5c 78 36 66 5c 78 36 62 5c 78 36 39 5c 78 36 35 27 5d 5d 5b 5b 27 5c 78 37 33 5c 78 36 63 5c 78 36 39 5c 78 36 33 5c 78 36 35 27 5d 5d 28 6e 2b 27 5c 78 34 34 5c 78 36 66 5c 78 36 64 5c 78 36 31 5c 78 36 39 5c 78 36 65 5c 78 33 64 27 5b 5b 27 5c 78 36 63 5c 78 36 35 5c 78 36 65 5c 78 36 37 5c 78 37 34 5c 78 36 38 27 5d 5d 2c 6f 2d 27 5c 78 33 62 5c 78 32 30 27 5b 5b 27 5c 78 36 63 5c 78 36 35 5c 78 36 65 5c 78 36 37 5c 78 37 34 5c Data Ascii: d'),o=e[['\x63\x6f\x6f\x6b\x69\x65']][['\x69\x6e\x64\x65\x78\x4f\x66']]('\x50\x61\x74\x68\x3d'),i=e[['\x63\x6f\x6f\x6b\x69\x65']][['\x73\x6c\x69\x63\x65']](n+'\x44\x6f\x6d\x61\x69\x6e\x3d'[['\x6c\x65\x6e\x67\x74\x68']],o-'\x3b\x20'[['\x6c\x65\x6e\x67\x74\
2024-12-05 19:20:00 UTC	1576	IN	Data Raw: 78 36 66 5c 78 37 33 5c 78 37 34 5c 78 34 64 5c 78 36 35 5c 78 37 33 5c 78 37 33 5c 78 36 31 5c 78 36 37 5c 78 36 35 27 5d 5d 28 74 5b 5b 27 5c 78 36 35 5c 78 37 36 5c 78 36 35 5c 78 36 65 5c 78 37 34 5c 78 34 65 5c 78 36 31 5c 78 36 64 5c 78 36 35 5c 78 37 33 27 5d 5d 5b 5b 27 5c 78 36 33 5c 78 36 31 5c 78 37 30 5c 78 37 34 5c 78 36 33 5c 78 36 38 5c 78 36 31 5c 78 35 30 5c 78 36 31 5c 78 37 33 5c 78 37 33 5c 78 36 35 5c 78 36 34 27 5d 5d 2c 77 69 6e 64 6f 77 5b 5b 27 5c 78 36 66 5c 78 37 32 5c 78 36 39 5c 78 36 37 5c 78 36 39 5c 78 36 65 27 5d 5d 29 2c 73 26 26 74 5b 5b 27 5c 78 36 34 5c 78 36 39 5c 78 37 33 5c 78 37 30 5c 78 36 31 5c 78 37 34 5c 78 36 33 5c 78 36 38 5c 78 34 35 5c 78 37 36 5c 78 36 35 5c 78 36 65 5c 78 37 34 27 5d 5d 28 74 5b 5b 27 5c Data Ascii: x6f\x73\x74\x4d\x65\x73\x73\x61\x67\x65']](t[['\x65\x76\x65\x6e\x74\x4e\x61\x6d\x65\x73']][['\x63\x61\x70\x74\x63\x68\x61\x50\x61\x73\x73\x65\x64']],window[['\x6f\x72\x69\x67\x69\x6e']]),s&&t[['\x64\x69\x73\x70\x61\x74\x63\x68\x45\x76\x65\x6e\x74']](t[['\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.8	49734	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:19:58 UTC	548	OUT	GET /webcaptcha/ngrlCaptcha.min.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:19:59 UTC	684	IN	HTTP/1.1 200 OK Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:19:59 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6697f682-5a55" Expires: Thu, 05 Dec 2024 20:19:59 GMT Last-Modified: Wed, 17 Jul 2024 16:51:14 GMT Paypal-Debug-Id: 12e4091c01e73 Server: ECAcc (lhd/3597) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-000000000000000000012e4091c01e73-51d8654737e0dd92-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 23125 Connection: close
2024-12-05 19:19:59 UTC	16383	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 61 3d 74 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 61 2e 65 78 70 6f 72 74 73 2c 61 2c 61 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 61 2e 6c 3d 21 30 2c 61 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 65 2c 6e 2e 63 3d 74 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 6e 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 72 7d 29 7d 2c 6e 2e 72 3d 66 75 6e Data Ascii: !function(e){var t={};function n(r){if(t[r])return t[r].exports;var a=t[r]={i:r,l:!1,exports:{}};return e[r].call(a.exports,a,a.exports,n),a.l=!0,a.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=fun
2024-12-05 19:19:59 UTC	6742	IN	Data Raw: 6c 65 64 3d 21 30 29 7d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 61 75 74 6f 73 75 62 6d 69 74 26 26 21 30 3d 3d 3d 61 75 74 6f 73 75 62 6d 69 74 3f 28 61 2e 74 72 69 67 67 65 72 43 75 73 74 6f 6d 54 72 61 63 6b 69 6e 67 28 7b 61 64 73 43 61 70 74 63 68 61 3a 22 73 69 6c 65 6e 74 22 7d 29 2c 6e 28 29 29 3a 28 68 3f 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 6c 69 63 6b 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 61 2e 74 72 69 67 67 65 72 43 75 73 74 6f 6d 54 72 61 63 6b 69 6e 67 28 7b 61 64 73 43 61 70 74 63 68 61 3a 22 72 65 63 61 70 74 63 68 61 22 7d 29 2c 6e 28 29 2c 74 2e 6f 6e 28 22 63 68 61 6c 6c 65 6e 67 65 53 6f 6c 76 65 64 22 2c 66 75 6e 63 74 69 6f 6e Data Ascii: led=!0)}"undefined"!=typeof autosubmit&&!0===autosubmit?(a.triggerCustomTracking({adsCaptcha:"silent"}),n()):(h?e.addEventListener("click",function(e){e.preventDefault(),a.triggerCustomTracking({adsCaptcha:"recaptcha"}),n(),t.on("challengeSolved",function

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.8	49733	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:19:58 UTC	360	OUT	GET /pa/js/min/pa.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:19:59 UTC	800	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:19:59 GMT DC: ccg11-origin-www-1.paypal.com Etag: "6735ac2d-11212+ident" Expires: Thu, 05 Dec 2024 20:19:59 GMT Last-Modified: Thu, 14 Nov 2024 07:52:13 GMT Paypal-Debug-Id: f898c5a52e3d2 Server: ECAcc (lhd/35DA) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000f898c5a52e3d2-b1bb2e86a5e09a5f-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 70162 Connection: close
2024-12-05 19:19:59 UTC	16383	IN	Data Raw: 2f 2a 40 20 32 30 32 34 20 50 61 79 50 61 6c 20 28 76 31 2e 39 2e 35 29 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 74 2c 65 2c 6e 29 7b 28 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 74 7c 7c 21 74 29 72 65 74 75 72 6e 20 74 3b 76 61 72 20 6e 3d 74 5b 53 79 6d 62 6f 6c 2e 74 6f 50 72 69 6d 69 74 69 76 65 5d 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6e 29 72 65 74 75 72 6e 28 22 73 74 72 69 6e 67 22 3d 3d 3d 65 3f 53 74 72 69 6e 67 3a 4e 75 6d 62 65 72 29 28 74 29 3b 74 3d 6e 2e 63 61 6c 6c 28 74 2c 65 7c 7c 22 64 65 66 61 75 6c 74 22 29 3b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d Data Ascii: /@ 2024 PayPal (v1.9.5) /!function(){"use strict";function r(t,e,n){(e=function(t){t=function(t,e){if("object"!=typeof t\|\|!t)return t;var n=t[Symbol.toPrimitive];if(void 0===n)return("string"===e?String:Number)(t);t=n.call(t,e\|\|"default");if("object"!=
2024-12-05 19:19:59 UTC	16383	IN	Data Raw: 20 22 2b 74 5b 72 5d 2e 74 72 69 6d 28 29 2c 72 21 3d 3d 74 2e 6c 65 6e 67 74 68 2d 31 26 26 28 6e 2b 3d 22 2c 20 22 29 7d 65 6c 73 65 20 6e 3d 74 3b 72 65 74 75 72 6e 20 6e 7d 76 61 72 20 5f 65 3d 7b 70 70 3a 2f 5c 2e 70 61 79 70 61 6c 5c 2e 63 6f 6d 24 2f 2c 61 6c 6c 3a 48 7d 3b 66 75 6e 63 74 69 6f 6e 20 50 65 28 74 2c 65 29 7b 76 61 72 20 6e 3d 21 31 2c 65 3d 65 7c 7c 71 3b 72 65 74 75 72 6e 20 6e 3d 5f 65 5b 74 3d 74 7c 7c 22 61 6c 6c 22 5d 2e 74 65 73 74 28 65 29 3f 21 30 3a 6e 7d 66 75 6e 63 74 69 6f 6e 20 45 28 74 2c 65 2c 6e 29 7b 74 72 79 7b 76 61 72 20 72 3d 65 2e 72 65 70 6c 61 63 65 28 22 5b 22 2c 22 2e 22 29 2e 72 65 70 6c 61 63 65 28 22 5d 22 2c 22 22 29 2e 73 70 6c 69 74 28 22 2e 22 29 2e 72 65 64 75 63 65 28 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: "+t[r].trim(),r!==t.length-1&&(n+=", ")}else n=t;return n}var _e={pp:/\.paypal\.com$/,all:H};function Pe(t,e){var n=!1,e=e\|\|q;return n=_e[t=t\|\|"all"].test(e)?!0:n}function E(t,e,n){try{var r=e.replace("[",".").replace("]","").split(".").reduce(function(t
2024-12-05 19:19:59 UTC	16383	IN	Data Raw: 29 2c 6f 3d 30 3b 6f 3c 61 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 63 3d 61 5b 6f 5d 2c 75 3d 6b 65 28 22 69 6e 70 75 74 22 2c 63 29 2c 73 3d 75 2e 6c 65 6e 67 74 68 2c 6c 3d 30 3b 6c 3c 73 3b 6c 2b 2b 29 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 68 28 65 2c 22 66 6f 63 75 73 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 5f 6c 61 73 74 46 6f 72 6d 3d 74 2c 72 2e 5f 6c 61 73 74 49 6e 70 75 74 3d 65 2c 72 2e 5f 74 72 61 63 6b 69 6e 67 46 41 7c 7c 28 72 2e 5f 74 72 61 63 6b 69 6e 67 46 41 3d 21 30 2c 22 62 65 66 6f 72 65 75 6e 6c 6f 61 64 2c 68 61 73 68 63 68 61 6e 67 65 22 2e 73 70 6c 69 74 28 22 2c 22 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 68 28 77 69 6e 64 6f 77 2c 74 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e Data Ascii: ),o=0;o<a.length;o++)for(var c=a[o],u=ke("input",c),s=u.length,l=0;l<s;l++)!function(t,e){h(e,"focus",function(){r._lastForm=t,r._lastInput=e,r._trackingFA\|\|(r._trackingFA=!0,"beforeunload,hashchange".split(",").forEach(function(t){h(window,t,function(){n
2024-12-05 19:19:59 UTC	16383	IN	Data Raw: 2e 6c 6f 61 64 56 65 6e 64 6f 72 44 65 66 61 75 6c 74 28 74 2e 6e 61 6d 65 29 7c 7c 7b 7d 2c 74 29 3b 62 72 28 74 29 26 26 28 6d 72 26 26 76 72 5b 65 5d 26 26 2d 31 21 3d 3d 76 72 5b 65 5d 2e 69 6e 64 65 78 4f 66 28 74 2e 6e 61 6d 65 29 3f 75 5b 65 5d 3d 21 31 3a 6e 2e 70 75 73 68 28 74 29 29 7d 29 2c 6e 2e 6c 65 6e 67 74 68 29 26 26 28 69 3d 7b 69 64 3a 65 2c 74 72 69 67 67 65 72 3a 6f 2e 74 72 69 67 67 65 72 2c 63 61 70 74 75 72 65 3a 6f 2e 63 61 70 74 75 72 65 2c 76 65 6e 64 6f 72 73 3a 6e 7d 2c 6f 3d 50 41 59 50 41 4c 2e 61 6e 61 6c 79 74 69 63 73 2e 6c 6f 67 4a 53 45 72 72 6f 72 2c 74 3d 69 2e 74 72 69 67 67 65 72 2e 74 79 70 65 2c 61 3d 69 2e 74 72 69 67 67 65 72 2e 63 6f 6e 64 69 74 69 6f 6e 2c 69 2e 74 72 69 67 67 65 72 2e 68 61 73 4f 77 6e 50 72 Data Ascii: .loadVendorDefault(t.name)\|\|{},t);br(t)&&(mr&&vr[e]&&-1!==vr[e].indexOf(t.name)?u[e]=!1:n.push(t))}),n.length)&&(i={id:e,trigger:o.trigger,capture:o.capture,vendors:n},o=PAYPAL.analytics.logJSError,t=i.trigger.type,a=i.trigger.condition,i.trigger.hasOwnPr
2024-12-05 19:19:59 UTC	4630	IN	Data Raw: 26 26 28 61 2e 76 61 6c 75 65 3d 4d 61 74 68 2e 6d 61 78 28 74 2e 73 74 61 72 74 54 69 6d 65 2d 6e 69 28 29 2c 30 29 2c 61 2e 65 6e 74 72 69 65 73 3d 5b 74 5d 2c 6e 28 29 29 7d 29 3b 74 26 26 28 6e 3d 52 28 6f 2c 61 2c 42 69 2c 63 2e 72 65 70 6f 72 74 41 6c 6c 43 68 61 6e 67 65 73 29 2c 72 3d 6f 69 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7a 69 5b 61 2e 69 64 5d 7c 7c 28 65 28 74 2e 74 61 6b 65 52 65 63 6f 72 64 73 28 29 29 2c 74 2e 64 69 73 63 6f 6e 6e 65 63 74 28 29 2c 7a 69 5b 61 2e 69 64 5d 3d 21 30 2c 6e 28 21 30 29 29 7d 29 2c 5b 22 6b 65 79 64 6f 77 6e 22 2c 22 63 6c 69 63 6b 22 5d 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 Data Ascii: &&(a.value=Math.max(t.startTime-ni(),0),a.entries=[t],n())});t&&(n=R(o,a,Bi,c.reportAllChanges),r=oi(function(){zi[a.id]\|\|(e(t.takeRecords()),t.disconnect(),zi[a.id]=!0,n(!0))}),["keydown","click"].forEach(function(t){addEventListener(t,function(){return

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.8	49744	151.101.3.1	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:00 UTC	2919	OUT	GET /ts?v=1.9.5&t=1733426395344&g=300&e=ac&tsrce=unp&ppid=RT000186&space_key=SKCPAD&utm_source=unp&utm_medium=email&utm_campaign=RT000186&utm_unptid=09b8bd50-b31d-11ef-9fd6-7b2e619a4883&cnac=US&rsta=en_US(en-US)&unptid=09b8bd50-b31d-11ef-9fd6-7b2e619a4883&calc=f8278373e34b4&unp_tpcid=requestmoney-notifications-requestee&page=main%3Aemail%3ART000186&pgrp=main%3Aemail&s=ci&mail=sys&appVersion=1.294.0&xt=145585%2C150948%2C104038&link_ref=www.paypal.com_signin&event_name=external_deep_link_processed HTTP/1.1 Host: t.paypal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.paypal.com/signin/?returnUri=%2Fmyaccount%2Ftransfer%2FpayRequest%2FU-09584045BD498740V%2FU-5R763959NX153980F%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq&id=OoO85MXTLVUkAlgY4sey9A8h.NxxqjO.iYbAWg&expId=p2p&onboardData=%7B%22signUpRequest%22%3A%7B%22method%22%3A%22get%22%2C%22url%22%3A%22https%3A%2F%2Fwww.paypal.com%2Fmyaccount%2Ftransfer%2FguestLogin%2FpayRequest%2FU-09584045BD498740V%2FU-5R763959NX153980F%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq%26id%3DOoO85MXTLVUkAlgY4sey9A8h.NxxqjO.iYbAWg%22%7D%7D&flowContextData=F7WdIOgJmH6-07KTJ7GpdWXhkdDQxLohB4l-G7vuWGaUsw9VWkH3unndZA7YlCRgtETWTIDn9hNnR_R_XfGvdxeCRkDmtXLc6qqtXR9sC3Gp-59lNBELQtpM5xEv0i4rCTpJiBcP2uf4VFrJLL1b5u1XG7JtP5TfW7CNqxSVOxEb9_duKrmtDgpztBtl32bVeoc8BgW5poXyk9lJHcKrYdvBHSdT0mosqrrmaGj2a5uNQdBK70Mwpn9Zddmj0KI1GIZrXWvFcpnuRbvbli2inkizkeV4nR1uyKnBSzFqdPDcK4t7K9B6YiFhb5sS8DaQd7F6oWzSe-J8gPxVURmdwwOxFn1ycN09t9caUdBz1XMuv96GDJywuv2feJdoAI73PNjro1a2cFEKAWnCgtoHqxdBD3A1mVV3OiytkjtEUDdvp0GL3CNOAV9zIrunX_DmbTO6KOe21dniBkeG&v=1&utm [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=c0c49a91e6384eadbaa4a565394e21da1733426393114; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTczMzQyNjM5MzE1OSIsImwiOiIwIiwibSI6IjAifQ; l7_az=dcg15.slc; ts=vreXpYrS%3D1764962393%26vteXpYrS%3D1733428193%26vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778%26vtyp%3Dnew; ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778
2024-12-05 19:20:00 UTC	1360	IN	HTTP/1.1 200 OK Connection: close Access-Control-Expose-Headers: Server-Timing CORRELATION-ID: 5c4738879ab7f Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Type: image/gif Expires: Thu, 05 Dec 2024 19:20:00 GMT P3p: CP="CAO IND OUR SAM UNI STA COR COM" Paypal-Debug-Id: 5c4738879ab7f Pragma: no-cache Set-Cookie: ts=vreXpYrS%3D1764962400%26vteXpYrS%3D1733428200%26vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778%26vtyp%3Dnew;Expires=Fri, 05 Dec 2025 19:20:00 GMT;domain=.paypal.com;path=/;secure;HttpOnly;SameSite=None; Set-Cookie: ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778;Expires=Fri, 05 Dec 2025 19:20:00 GMT;domain=.paypal.com;path=/;secure;SameSite=None; Traceparent: 00-00000000000000000005c4738879ab7f-f23971465d606b30-01 Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Date: Thu, 05 Dec 2024 19:20:00 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Served-By: cache-iad-kcgs7200099-IAD, cache-ewr-kewr1740039-EWR X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1733426401.646699,VS0,VE94 vary: Accept-Encoding Server-Timing: "traceparent;desc="00-00000000000000000005c4738879ab7f-435e33195972f7ae-01"";content-encoding;desc="",x-cdn;desc="fastly" Timing-Allow-Origin: * transfer-encoding: chunked
2024-12-05 19:20:00 UTC	4	IN	Data Raw: 32 61 0d 0a Data Ascii: 2a
2024-12-05 19:20:00 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 01 01 32 00 3b Data Ascii: GIF89a!,2;
2024-12-05 19:20:00 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.8	49735	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:00 UTC	556	OUT	GET /webcaptcha/grcenterprise_v3_static.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:00 UTC	683	IN	HTTP/1.1 200 OK Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:00 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"65f1e42c-180e" Expires: Thu, 05 Dec 2024 20:20:00 GMT Last-Modified: Wed, 13 Mar 2024 17:36:44 GMT Paypal-Debug-Id: b3ccb366af5af Server: ECAcc (lhd/35E9) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000b3ccb366af5af-57e51581fae364c4-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 6158 Connection: close
2024-12-05 19:20:01 UTC	6158	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 69 6e 69 74 28 29 20 7b 0a 20 20 20 20 63 6f 6e 73 74 20 6b 65 79 20 3d 20 67 65 74 4c 69 73 74 65 6e 65 72 53 65 61 72 63 68 4b 65 79 28 27 64 61 74 61 2d 6b 65 79 27 29 3b 0a 20 20 20 20 63 6f 6e 73 74 20 73 65 73 73 69 6f 6e 49 64 20 3d 20 67 65 74 4c 69 73 74 65 6e 65 72 53 65 61 72 63 68 4b 65 79 28 27 64 61 74 61 2d 73 65 73 73 69 6f 6e 49 64 27 29 3b 0a 20 20 20 20 63 6f 6e 73 74 20 63 73 72 66 20 3d 20 67 65 74 4c 69 73 74 65 6e 65 72 53 65 61 72 63 68 4b 65 79 28 27 64 61 74 61 2d 63 73 72 66 27 29 3b 0a 20 20 20 20 63 6f 6e 73 74 20 61 63 74 69 6f 6e 20 3d 20 67 65 74 4c 69 73 74 65 6e 65 72 53 65 61 72 63 68 4b 65 79 28 27 64 61 74 61 2d 61 63 74 69 6f 6e 27 29 3b 0a 20 20 Data Ascii: "use strict";function init() { const key = getListenerSearchKey('data-key'); const sessionId = getListenerSearchKey('data-sessionId'); const csrf = getListenerSearchKey('data-csrf'); const action = getListenerSearchKey('data-action');

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.8	49737	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:00 UTC	583	OUT	GET /martech/tm/paypal/mktgtagmanager.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.paypal.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:01 UTC	795	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:00 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"67042d91-3eb4" Expires: Thu, 05 Dec 2024 20:20:00 GMT Last-Modified: Mon, 07 Oct 2024 18:50:57 GMT Paypal-Debug-Id: 43977cf5beaba Server: ECAcc (lhd/35D1) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-000000000000000000043977cf5beaba-bf7373f9bbb8911f-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 16052 Connection: close
2024-12-05 19:20:01 UTC	16052	IN	Data Raw: 2f 2a 40 20 32 30 32 34 20 50 61 79 50 61 6c 20 28 76 31 2e 30 2e 31 29 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 66 28 74 29 7b 69 66 28 21 74 7c 7c 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 21 3d 3d 4f 62 6a 65 63 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 21 3d 3d 41 72 72 61 79 29 72 65 74 75 72 6e 20 74 3b 76 61 72 20 65 2c 6e 3d 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 3b 66 6f 72 28 65 20 69 6e 20 74 29 6e 5b 65 5d 3d 66 28 74 5b 65 5d 29 3b 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 73 28 74 2c 65 29 7b 76 61 72 20 6e 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 26 26 28 6e 3d 74 2e 61 70 70 6c 79 28 65 7c 7c 74 68 69 73 2c Data Ascii: /@ 2024 PayPal (v1.0.1) /!function(){"use strict";function f(t){if(!t\|\|t.constructor!==Object&&t.constructor!==Array)return t;var e,n=t.constructor();for(e in t)n[e]=f(t[e]);return n}function s(t,e){var n;return function(){return t&&(n=t.apply(e\|\|this,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.8	49736	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:00 UTC	572	OUT	GET /pa/mi/paypal/latmconf.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.paypal.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:01 UTC	799	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:00 GMT DC: ccg11-origin-www-1.paypal.com Etag: "6735ac2d-3ac5+ident" Expires: Thu, 05 Dec 2024 20:20:00 GMT Last-Modified: Thu, 14 Nov 2024 07:52:13 GMT Paypal-Debug-Id: 8ca3f04ae1eca Server: ECAcc (lhd/35E2) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000008ca3f04ae1eca-7b6be631e999b634-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 15045 Connection: close
2024-12-05 19:20:01 UTC	15045	IN	Data Raw: 2f 2a 21 20 32 30 32 34 20 64 6c 2d 70 70 2d 6c 61 74 6d 40 70 61 79 70 61 6c 2e 63 6f 6d 20 76 65 72 28 35 2e 31 2e 31 29 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 6e 29 7b 28 6e 75 6c 6c 3d 3d 6e 7c 7c 6e 3e 65 2e 6c 65 6e 67 74 68 29 26 26 28 6e 3d 65 2e 6c 65 6e 67 74 68 29 3b 66 6f 72 28 76 61 72 20 6f 3d 30 2c 61 3d 41 72 72 61 79 28 6e 29 3b 6f 3c 6e 3b 6f 2b 2b 29 61 5b 6f 5d 3d 65 5b 6f 5d 3b 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 72 65 74 75 72 6e 20 65 7d 28 6e 29 7c 7c 66 75 Data Ascii: /! 2024 dl-pp-latm@paypal.com ver(5.1.1) /!function(){"use strict";!function(){function e(e,n){(null==n\|\|n>e.length)&&(n=e.length);for(var o=0,a=Array(n);o<n;o++)a[o]=e[o];return a}function n(n,o){return function(e){if(Array.isArray(e))return e}(n)\|\|fu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.8	49738	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:00 UTC	613	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/browser_modules/dustjs-linkedin/dist/dust-full.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:01 UTC	792	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:00 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6737ef18-9b8c" Expires: Fri, 05 Dec 2025 19:20:00 GMT Last-Modified: Sat, 16 Nov 2024 01:02:16 GMT Paypal-Debug-Id: 02b62f46403a9 Server: ECAcc (lhd/35F9) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-000000000000000000002b62f46403a9-f37761ce0b0bcd6f-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 39820 Connection: close
2024-12-05 19:20:01 UTC	16383	IN	Data Raw: 2f 2a 21 20 64 75 73 74 6a 73 2d 6c 69 6e 6b 65 64 69 6e 20 2d 20 76 33 2e 30 2e 30 0a 2a 20 68 74 74 70 3a 2f 2f 64 75 73 74 6a 73 2e 63 6f 6d 2f 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 32 31 20 41 6c 65 6b 73 61 6e 64 65 72 20 57 69 6c 6c 69 61 6d 73 3b 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 2a 2f 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 79 70 65 6f 66 20 64 65 66 69 6e 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 64 65 66 69 6e 65 2e 61 6d 64 26 26 64 65 66 69 6e 65 2e 61 6d 64 2e 64 75 73 74 3d 3d 3d 21 30 3f 64 65 66 69 6e 65 28 22 64 75 73 74 2e 63 6f 72 65 22 2c 5b 5d 2c 74 29 3a 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3d 3d 22 6f 62 6a 65 63 74 22 3f 6d 6f 64 Data Ascii: /! dustjs-linkedin - v3.0.0 http://dustjs.com/* Copyright (c) 2021 Aleksander Williams; Released under the MIT License */(function(e,t){typeof define=="function"&&define.amd&&define.amd.dust===!0?define("dust.core",[],t):typeof exports=="object"?mod
2024-12-05 19:20:01 UTC	1	IN	Data Raw: 3a Data Ascii: :
2024-12-05 19:20:01 UTC	16383	IN	Data Raw: 28 4c 6e 3d 74 2c 74 3d 69 29 29 3a 28 4c 6e 3d 74 2c 74 3d 69 29 7d 65 6c 73 65 20 4c 6e 3d 74 2c 74 3d 69 3b 69 66 28 74 3d 3d 3d 69 29 7b 74 3d 4c 6e 2c 6e 3d 24 6e 28 29 3b 69 66 28 6e 21 3d 3d 69 29 7b 72 3d 5b 5d 2c 73 3d 4e 72 28 29 3b 77 68 69 6c 65 28 73 21 3d 3d 69 29 72 2e 70 75 73 68 28 73 29 2c 73 3d 4e 72 28 29 3b 72 21 3d 3d 69 3f 28 65 2e 63 68 61 72 43 6f 64 65 41 74 28 4c 6e 29 3d 3d 3d 34 37 3f 28 73 3d 63 2c 4c 6e 2b 2b 29 3a 28 73 3d 69 2c 44 6e 3d 3d 3d 30 26 26 52 6e 28 68 29 29 2c 73 21 3d 3d 69 3f 28 6f 3d 45 72 28 29 2c 6f 21 3d 3d 69 3f 28 41 6e 3d 74 2c 6e 3d 70 28 6e 29 2c 74 3d 6e 29 3a 28 4c 6e 3d 74 2c 74 3d 69 29 29 3a 28 4c 6e 3d 74 2c 74 3d 69 29 29 3a 28 4c 6e 3d 74 2c 74 3d 69 29 7d 65 6c 73 65 20 4c 6e 3d 74 2c 74 3d Data Ascii: (Ln=t,t=i)):(Ln=t,t=i)}else Ln=t,t=i;if(t===i){t=Ln,n=$n();if(n!==i){r=[],s=Nr();while(s!==i)r.push(s),s=Nr();r!==i?(e.charCodeAt(Ln)===47?(s=c,Ln++):(s=i,Dn===0&&Rn(h)),s!==i?(o=Er(),o!==i?(An=t,n=p(n),t=n):(Ln=t,t=i)):(Ln=t,t=i)):(Ln=t,t=i)}else Ln=t,t=
2024-12-05 19:20:01 UTC	7053	IN	Data Raw: 22 2c 76 61 6c 75 65 3a 22 7b 21 22 2c 64 65 73 63 72 69 70 74 69 6f 6e 3a 27 22 7b 21 22 27 7d 2c 6e 6e 3d 22 21 7d 22 2c 72 6e 3d 7b 74 79 70 65 3a 22 6c 69 74 65 72 61 6c 22 2c 76 61 6c 75 65 3a 22 21 7d 22 2c 64 65 73 63 72 69 70 74 69 6f 6e 3a 27 22 21 7d 22 27 7d 2c 73 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6b 72 28 5b 22 63 6f 6d 6d 65 6e 74 22 2c 65 2e 6a 6f 69 6e 28 22 22 29 5d 29 7d 2c 6f 6e 3d 2f 5e 5b 23 3f 5c 5e 3e 3c 2b 25 3a 40 5c 2f 7e 25 5d 2f 2c 75 6e 3d 7b 74 79 70 65 3a 22 63 6c 61 73 73 22 2c 76 61 6c 75 65 3a 22 5b 23 3f 5e 3e 3c 2b 25 3a 40 2f 7e 25 5d 22 2c 64 65 73 63 72 69 70 74 69 6f 6e 3a 22 5b 23 3f 5e 3e 3c 2b 25 3a 40 2f 7e 25 5d 22 7d 2c 61 6e 3d 22 7b 22 2c 66 6e 3d 7b 74 79 70 65 3a 22 6c 69 74 65 Data Ascii: ",value:"{!",description:'"{!"'},nn="!}",rn={type:"literal",value:"!}",description:'"!}"'},sn=function(e){return kr(["comment",e.join("")])},on=/^[#?\^><+%:@\/~%]/,un={type:"class",value:"[#?^><+%:@/~%]",description:"[#?^><+%:@/~%]"},an="{",fn={type:"lite

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.8	49739	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:00 UTC	578	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/core/nougat.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:01 UTC	790	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:00 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6737ef18-9b3" Expires: Fri, 05 Dec 2025 19:20:00 GMT Last-Modified: Sat, 16 Nov 2024 01:02:16 GMT Paypal-Debug-Id: e81745789613f Server: ECAcc (lhd/3595) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000e81745789613f-d26269e48de18176-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 2483 Connection: close
2024-12-05 19:20:01 UTC	2483	IN	Data Raw: 64 65 66 69 6e 65 28 22 6e 65 77 67 61 74 22 2c 5b 22 6a 71 75 65 72 79 22 2c 22 75 6e 64 65 72 73 63 6f 72 65 22 2c 22 64 75 73 74 6a 73 2d 6c 69 6e 6b 65 64 69 6e 22 2c 22 64 75 73 74 2d 6d 61 6b 61 72 61 2d 68 65 6c 70 65 72 73 22 2c 22 64 75 73 74 68 65 6c 70 65 72 73 2d 73 75 70 70 6c 65 6d 65 6e 74 22 2c 22 64 75 73 74 6d 6f 74 65 73 2d 69 74 65 72 61 74 65 22 2c 22 70 75 6c 76 75 73 2d 70 72 6f 76 69 64 65 22 2c 22 64 75 73 74 6a 73 2d 68 65 6c 70 65 72 73 22 2c 22 5f 6c 61 6e 67 75 61 67 65 70 61 63 6b 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 74 2c 6e 29 7b 69 66 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 74 65 72 29 72 65 74 75 72 6e 20 65 2e 66 69 6c 74 65 72 28 74 29 Data Ascii: define("newgat",["jquery","underscore","dustjs-linkedin","dust-makara-helpers","dusthelpers-supplement","dustmotes-iterate","pulvus-provide","dustjs-helpers","_languagepack"],function(e,t,n,r){function u(e,t,n){if(Array.prototype.filter)return e.filter(t)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.8	49741	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:00 UTC	416	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/widgets/clientCalLogger.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:01 UTC	790	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:01 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6737ef1a-519" Expires: Fri, 05 Dec 2025 19:20:01 GMT Last-Modified: Sat, 16 Nov 2024 01:02:18 GMT Paypal-Debug-Id: 6240ddfabb5ae Server: ECAcc (lhd/35B2) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000006240ddfabb5ae-45725653d5931af3-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 1305 Connection: close
2024-12-05 19:20:01 UTC	1305	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 66 28 74 29 7b 78 68 72 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 2c 78 68 72 2e 6f 70 65 6e 28 22 50 4f 53 54 22 2c 22 2f 73 69 67 6e 69 6e 2f 63 6c 69 65 6e 74 2d 6c 6f 67 22 2c 21 30 29 2c 78 68 72 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 29 3b 74 72 79 7b 78 68 72 2e 73 65 6e 64 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 74 29 29 2c 65 2e 75 6c 44 61 74 61 2e 6c 6f 67 52 65 63 6f 72 64 73 3d 5b 5d 7d 63 61 74 63 68 28 6e 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 76 61 72 20 65 3d 7b 75 6c 43 6f 72 72 65 6c 61 Data Ascii: (function(){function f(t){xhr=new XMLHttpRequest,xhr.open("POST","/signin/client-log",!0),xhr.setRequestHeader("Content-Type","application/json;charset=UTF-8");try{xhr.send(JSON.stringify(t)),e.ulData.logRecords=[]}catch(n){}}function l(){var e={ulCorrela

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.8	49742	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:00 UTC	414	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/widgets/errorDetector.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:01 UTC	789	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:01 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6737ef1a-205" Expires: Fri, 05 Dec 2025 19:20:01 GMT Last-Modified: Sat, 16 Nov 2024 01:02:18 GMT Paypal-Debug-Id: 3cba9f6cd4663 Server: ECAcc (lhd/35FD) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000003cba9f6cd4663-d43ec0cd1b219f50-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 517 Connection: close
2024-12-05 19:20:01 UTC	517	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 78 68 72 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 2c 78 68 72 2e 6f 70 65 6e 28 22 50 4f 53 54 22 2c 22 2f 73 69 67 6e 69 6e 2f 63 6c 69 65 6e 74 2d 6c 6f 67 22 2c 21 30 29 2c 78 68 72 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 29 3b 74 72 79 7b 78 68 72 2e 73 65 6e 64 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 29 29 7d 63 61 74 63 68 28 74 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 72 2c 69 2c 73 2c 6f 29 7b 76 61 72 20 75 3d 6f 26 26 6f 2e 6d 65 73 73 61 67 65 7c 7c 22 75 6e 6b 6e 6f 77 6e 22 2c Data Ascii: (function(){function n(e){xhr=new XMLHttpRequest,xhr.open("POST","/signin/client-log",!0),xhr.setRequestHeader("Content-Type","application/json;charset=UTF-8");try{xhr.send(JSON.stringify(e))}catch(t){}}function r(e,r,i,s,o){var u=o&&o.message\|\|"unknown",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.8	49743	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:00 UTC	381	OUT	GET /images/shared/paypal-logo-129x32.svg HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:01 UTC	706	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: image/svg+xml Date: Thu, 05 Dec 2024 19:20:01 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"544ad849-1351" Expires: Thu, 05 Dec 2024 20:20:01 GMT Last-Modified: Fri, 24 Oct 2014 22:52:57 GMT Paypal-Debug-Id: a9274e1a826b2 Server: ECAcc (lhd/3598) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000a9274e1a826b2-d020aa44b15f9c8c-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 4945 Connection: close
2024-12-05 19:20:01 UTC	4945	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 36 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg version="1.1"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.8	49747	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:01 UTC	573	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/router.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:02 UTC	790	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:01 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6737ef17-4cc" Expires: Fri, 05 Dec 2025 19:20:01 GMT Last-Modified: Sat, 16 Nov 2024 01:02:15 GMT Paypal-Debug-Id: 60ef7b5f28cf2 Server: ECAcc (lhd/35FB) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-000000000000000000060ef7b5f28cf2-18d543d6ddf101d6-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 1228 Connection: close
2024-12-05 19:20:02 UTC	1228	IN	Data Raw: 64 65 66 69 6e 65 28 5b 22 6e 65 77 67 61 74 22 2c 22 6a 71 75 65 72 79 22 2c 22 62 61 63 6b 62 6f 6e 65 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 5b 22 69 6e 6a 65 63 74 49 66 72 61 6d 65 54 65 73 74 22 5d 2c 69 2c 73 2c 6f 2c 75 3b 72 65 74 75 72 6e 20 69 3d 6e 2e 52 6f 75 74 65 72 2e 65 78 74 65 6e 64 28 7b 72 6f 75 74 65 73 3a 7b 22 22 3a 22 73 68 6f 77 4c 61 6e 64 69 6e 67 22 2c 22 3f 2a 71 75 65 72 79 53 74 72 69 6e 67 22 3a 22 73 68 6f 77 4c 61 6e 64 69 6e 67 22 2c 22 69 6e 6a 65 63 74 2f 2a 71 75 65 72 79 53 74 72 69 6e 67 22 3a 22 73 68 6f 77 4c 61 6e 64 69 6e 67 22 2c 61 75 74 68 6f 72 69 7a 65 3a 22 73 68 6f 77 4c 61 6e 64 69 6e 67 22 2c 22 61 75 74 68 6f 72 69 7a 65 3f 2a Data Ascii: define(["newgat","jquery","backbone"],function(e,t,n){"use strict";var r=["injectIframeTest"],i,s,o,u;return i=n.Router.extend({routes:{"":"showLanding","?queryString":"showLanding","inject/queryString":"showLanding",authorize:"showLanding","authorize?*

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.8	49750	151.101.3.1	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:02 UTC	1277	OUT	GET /ts?v=1.9.5&t=1733426395344&g=300&e=ac&tsrce=unp&ppid=RT000186&space_key=SKCPAD&utm_source=unp&utm_medium=email&utm_campaign=RT000186&utm_unptid=09b8bd50-b31d-11ef-9fd6-7b2e619a4883&cnac=US&rsta=en_US(en-US)&unptid=09b8bd50-b31d-11ef-9fd6-7b2e619a4883&calc=f8278373e34b4&unp_tpcid=requestmoney-notifications-requestee&page=main%3Aemail%3ART000186&pgrp=main%3Aemail&s=ci&mail=sys&appVersion=1.294.0&xt=145585%2C150948%2C104038&link_ref=www.paypal.com_signin&event_name=external_deep_link_processed HTTP/1.1 Host: t.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=c0c49a91e6384eadbaa4a565394e21da1733426393114; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTczMzQyNjM5MzE1OSIsImwiOiIwIiwibSI6IjAifQ; l7_az=dcg15.slc; ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778; ts=vreXpYrS%3D1764962400%26vteXpYrS%3D1733428200%26vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778%26vtyp%3Dnew
2024-12-05 19:20:03 UTC	1360	IN	HTTP/1.1 200 OK Connection: close Access-Control-Expose-Headers: Server-Timing CORRELATION-ID: 072dc2869de7a Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Type: image/gif Expires: Thu, 05 Dec 2024 19:20:02 GMT P3p: CP="CAO IND OUR SAM UNI STA COR COM" Paypal-Debug-Id: 072dc2869de7a Pragma: no-cache Set-Cookie: ts=vreXpYrS%3D1764962402%26vteXpYrS%3D1733428202%26vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778%26vtyp%3Dnew;Expires=Fri, 05 Dec 2025 19:20:02 GMT;domain=.paypal.com;path=/;secure;HttpOnly;SameSite=None; Set-Cookie: ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778;Expires=Fri, 05 Dec 2025 19:20:02 GMT;domain=.paypal.com;path=/;secure;SameSite=None; Traceparent: 00-0000000000000000000072dc2869de7a-27588f18006a1df2-01 Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Date: Thu, 05 Dec 2024 19:20:02 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Served-By: cache-iad-kcgs7200099-IAD, cache-nyc-kteb1890070-NYC X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1733426403.876466,VS0,VE83 vary: Accept-Encoding Server-Timing: "traceparent;desc="00-0000000000000000000072dc2869de7a-41b9f3e066db89bc-01"";content-encoding;desc="",x-cdn;desc="fastly" Timing-Allow-Origin: * transfer-encoding: chunked
2024-12-05 19:20:03 UTC	4	IN	Data Raw: 32 61 0d 0a Data Ascii: 2a
2024-12-05 19:20:03 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 01 01 32 00 3b Data Ascii: GIF89a!,2;
2024-12-05 19:20:03 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.8	49748	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:02 UTC	374	OUT	GET /webcaptcha/ngrlCaptcha.min.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:03 UTC	684	IN	HTTP/1.1 200 OK Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:02 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6697f682-5a55" Expires: Thu, 05 Dec 2024 20:20:02 GMT Last-Modified: Wed, 17 Jul 2024 16:51:14 GMT Paypal-Debug-Id: 12e4091c01e73 Server: ECAcc (lhd/3597) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-000000000000000000012e4091c01e73-51d8654737e0dd92-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 23125 Connection: close
2024-12-05 19:20:03 UTC	16383	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 61 3d 74 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 61 2e 65 78 70 6f 72 74 73 2c 61 2c 61 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 61 2e 6c 3d 21 30 2c 61 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 65 2c 6e 2e 63 3d 74 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 6e 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 72 7d 29 7d 2c 6e 2e 72 3d 66 75 6e Data Ascii: !function(e){var t={};function n(r){if(t[r])return t[r].exports;var a=t[r]={i:r,l:!1,exports:{}};return e[r].call(a.exports,a,a.exports,n),a.l=!0,a.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=fun
2024-12-05 19:20:03 UTC	6742	IN	Data Raw: 6c 65 64 3d 21 30 29 7d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 61 75 74 6f 73 75 62 6d 69 74 26 26 21 30 3d 3d 3d 61 75 74 6f 73 75 62 6d 69 74 3f 28 61 2e 74 72 69 67 67 65 72 43 75 73 74 6f 6d 54 72 61 63 6b 69 6e 67 28 7b 61 64 73 43 61 70 74 63 68 61 3a 22 73 69 6c 65 6e 74 22 7d 29 2c 6e 28 29 29 3a 28 68 3f 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 6c 69 63 6b 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 61 2e 74 72 69 67 67 65 72 43 75 73 74 6f 6d 54 72 61 63 6b 69 6e 67 28 7b 61 64 73 43 61 70 74 63 68 61 3a 22 72 65 63 61 70 74 63 68 61 22 7d 29 2c 6e 28 29 2c 74 2e 6f 6e 28 22 63 68 61 6c 6c 65 6e 67 65 53 6f 6c 76 65 64 22 2c 66 75 6e 63 74 69 6f 6e Data Ascii: led=!0)}"undefined"!=typeof autosubmit&&!0===autosubmit?(a.triggerCustomTracking({adsCaptcha:"silent"}),n()):(h?e.addEventListener("click",function(e){e.preventDefault(),a.triggerCustomTracking({adsCaptcha:"recaptcha"}),n(),t.on("challengeSolved",function

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.8	49749	18.66.161.81	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:02 UTC	793	OUT	GET /tags.js HTTP/1.1 Host: ddbm2.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=c0c49a91e6384eadbaa4a565394e21da1733426393114; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTczMzQyNjM5MzE1OSIsImwiOiIwIiwibSI6IjAifQ; l7_az=dcg15.slc; ts=vreXpYrS%3D1764962393%26vteXpYrS%3D1733428193%26vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778%26vtyp%3Dnew; ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778
2024-12-05 19:20:03 UTC	709	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 177743 Connection: close Last-Modified: Wed, 04 Dec 2024 11:03:19 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: fRdxQZTwv7aUXeF3zxmAg.EIiFr7SoNp Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 05 Dec 2024 19:20:00 GMT Cache-Control: max-age=3600, public ETag: "b4f2edbea31dcec5c70f4f1bf574b162" X-Cache: Hit from cloudfront Via: 1.1 c8e9349b8673f322913cb659e1d72ada.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH52-C1 X-Amz-Cf-Id: 6hXokcz-ouZumg2Vl93suQ8j51DC7ADnh1EQBdqOdvVGeNqe0AzXRw== Age: 4 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Vary: Origin
2024-12-05 19:20:03 UTC	16384	IN	Data Raw: 2f 2a 2a 20 44 61 74 61 44 6f 6d 65 20 69 73 20 61 20 63 79 62 65 72 73 65 63 75 72 69 74 79 20 73 6f 6c 75 74 69 6f 6e 20 74 6f 20 64 65 74 65 63 74 20 62 6f 74 20 61 63 74 69 76 69 74 79 20 68 74 74 70 73 3a 2f 2f 64 61 74 61 64 6f 6d 65 2e 63 6f 20 28 76 65 72 73 69 6f 6e 20 34 2e 33 38 2e 30 29 20 2a 2f 20 0a 21 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 6e 2c 6f 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 72 2c 73 29 7b 69 66 28 21 6e 5b 72 5d 29 7b 69 66 28 21 74 5b 72 5d 29 7b 76 61 72 20 64 3d 27 5c 78 36 36 5c 78 37 35 5c 78 36 65 5c 78 36 33 5c 78 37 34 5c 78 36 39 5c 78 36 66 5c 78 36 65 27 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 26 26 72 65 71 75 69 72 65 3b 69 66 28 21 73 26 26 64 29 72 65 74 75 72 6e 20 64 28 72 2c 21 30 29 3b 69 66 28 61 29 Data Ascii: /** DataDome is a cybersecurity solution to detect bot activity https://datadome.co (version 4.38.0) */ !function e(t,n,o){function i(r,s){if(!n[r]){if(!t[r]){var d='\x66\x75\x6e\x63\x74\x69\x6f\x6e'==typeof require&&require;if(!s&&d)return d(r,!0);if(a)
2024-12-05 19:20:03 UTC	16384	IN	Data Raw: 6e 2c 6f 29 7b 65 5b 5b 27 5c 78 37 32 5c 78 36 35 5c 78 36 64 5c 78 36 66 5c 78 37 36 5c 78 36 35 5c 78 34 35 5c 78 37 36 5c 78 36 35 5c 78 36 65 5c 78 37 34 5c 78 34 63 5c 78 36 39 5c 78 37 33 5c 78 37 34 5c 78 36 35 5c 78 36 65 5c 78 36 35 5c 78 37 32 27 5d 5d 3f 65 5b 5b 27 5c 78 37 32 5c 78 36 35 5c 78 36 64 5c 78 36 66 5c 78 37 36 5c 78 36 35 5c 78 34 35 5c 78 37 36 5c 78 36 35 5c 78 36 65 5c 78 37 34 5c 78 34 63 5c 78 36 39 5c 78 37 33 5c 78 37 34 5c 78 36 35 5c 78 36 65 5c 78 36 35 5c 78 37 32 27 5d 5d 28 74 2c 6e 2c 6f 29 3a 65 5b 5b 27 5c 78 36 34 5c 78 36 35 5c 78 37 34 5c 78 36 31 5c 78 36 33 5c 78 36 38 5c 78 34 35 5c 78 37 36 5c 78 36 35 5c 78 36 65 5c 78 37 34 27 5d 5d 26 26 65 5b 5b 27 5c 78 36 34 5c 78 36 35 5c 78 37 34 5c 78 36 31 5c 78 Data Ascii: n,o){e[['\x72\x65\x6d\x6f\x76\x65\x45\x76\x65\x6e\x74\x4c\x69\x73\x74\x65\x6e\x65\x72']]?e[['\x72\x65\x6d\x6f\x76\x65\x45\x76\x65\x6e\x74\x4c\x69\x73\x74\x65\x6e\x65\x72']](t,n,o):e[['\x64\x65\x74\x61\x63\x68\x45\x76\x65\x6e\x74']]&&e[['\x64\x65\x74\x61\x
2024-12-05 19:20:04 UTC	16384	IN	Data Raw: 35 39 5c 78 36 66 5c 78 34 39 5c 78 36 31 27 2c 27 5c 78 37 61 5c 78 36 37 5c 78 37 32 5c 78 34 36 5c 78 37 32 5c 78 34 37 27 2c 27 5c 78 37 39 5c 78 33 32 5c 78 33 39 5c 78 35 35 5c 78 34 33 5c 78 33 32 5c 78 33 39 5c 78 35 33 5c 78 37 61 5c 78 37 31 27 2c 27 5c 78 37 61 5c 78 34 65 5c 78 37 32 5c 78 35 61 5c 78 34 32 5c 78 33 33 5c 78 37 61 5c 78 34 62 5c 78 34 33 5c 78 34 37 27 2c 27 5c 78 37 38 5c 78 33 31 5c 78 33 39 5c 78 33 33 5c 78 37 61 5c 78 37 37 5c 78 36 61 5c 78 34 62 5c 78 34 33 5c 78 34 64 5c 78 34 63 5c 78 33 32 5c 78 37 61 5c 78 37 38 5c 78 36 61 5c 78 34 36 5c 78 37 61 5c 78 37 38 5c 78 37 61 5c 78 34 38 5c 78 34 32 5c 78 36 38 5c 78 37 36 5c 78 34 38 5c 78 34 34 5c 78 36 37 5c 78 37 35 27 2c 27 5c 78 37 32 5c 78 37 34 5c 78 37 31 5c 78 Data Ascii: 59\x6f\x49\x61','\x7a\x67\x72\x46\x72\x47','\x79\x32\x39\x55\x43\x32\x39\x53\x7a\x71','\x7a\x4e\x72\x5a\x42\x33\x7a\x4b\x43\x47','\x78\x31\x39\x33\x7a\x77\x6a\x4b\x43\x4d\x4c\x32\x7a\x78\x6a\x46\x7a\x78\x7a\x48\x42\x68\x76\x48\x44\x67\x75','\x72\x74\x71\x
2024-12-05 19:20:04 UTC	13369	IN	Data Raw: 36 39 5c 78 36 65 5c 78 36 34 5c 78 36 35 5c 78 37 38 5c 78 34 66 5c 78 36 36 27 5d 28 65 28 35 39 38 29 29 29 3b 74 68 69 73 5b 27 5c 78 36 33 5c 78 36 38 5c 78 36 35 5c 78 36 33 5c 78 36 62 5c 78 34 64 5c 78 36 66 5c 78 37 35 5c 78 37 33 5c 78 36 35 5c 78 35 30 5c 78 36 66 5c 78 37 33 5c 78 36 39 5c 78 37 34 5c 78 36 39 5c 78 36 66 5c 78 36 65 27 5d 28 29 2c 74 68 69 73 5b 27 5c 78 36 31 5c 78 37 33 5c 78 37 39 5c 78 36 65 5c 78 36 33 5c 78 36 38 5c 78 37 32 5c 78 36 66 5c 78 36 65 5c 78 36 39 5c 78 37 61 5c 78 36 35 5c 78 35 34 5c 78 36 31 5c 78 37 33 5c 78 36 62 27 5d 28 74 68 69 73 5b 27 5c 78 36 34 5c 78 36 34 5c 78 35 66 5c 78 36 31 27 5d 29 2c 2d 31 3d 3d 3d 72 5b 27 5c 78 36 39 5c 78 36 65 5c 78 36 34 5c 78 36 35 5c 78 37 38 5c 78 34 66 5c 78 36 Data Ascii: 69\x6e\x64\x65\x78\x4f\x66'](e(598)));this['\x63\x68\x65\x63\x6b\x4d\x6f\x75\x73\x65\x50\x6f\x73\x69\x74\x69\x6f\x6e'](),this['\x61\x73\x79\x6e\x63\x68\x72\x6f\x6e\x69\x7a\x65\x54\x61\x73\x6b'](this['\x64\x64\x5f\x61']),-1===r['\x69\x6e\x64\x65\x78\x4f\x6
2024-12-05 19:20:04 UTC	16384	IN	Data Raw: 27 5c 78 34 65 5c 78 34 31 27 3d 3d 65 29 72 65 74 75 72 6e 27 5c 78 34 65 5c 78 34 31 30 27 3b 66 6f 72 28 76 61 72 20 6f 3d 27 5c 78 33 37 5c 78 33 33 5c 78 33 38 5c 78 33 31 5c 78 33 32 5c 78 33 31 5c 78 33 31 5c 78 33 39 5c 78 33 35 5c 78 33 39 27 2c 69 3d 28 65 3d 65 5b 27 5c 78 37 34 5c 78 36 66 5c 78 35 33 5c 78 37 34 5c 78 37 32 5c 78 36 39 5c 78 36 65 5c 78 36 37 27 5d 28 29 5b 27 5c 78 37 33 5c 78 37 30 5c 78 36 63 5c 78 36 39 5c 78 37 34 27 5d 28 27 27 29 29 5b 27 5c 78 36 39 5c 78 36 65 5c 78 36 34 5c 78 36 35 5c 78 37 38 5c 78 34 66 5c 78 36 36 27 5d 28 27 5c 78 32 65 27 29 2c 61 3d 30 3b 61 3c 6f 5b 6e 28 37 34 38 29 5d 3b 61 2b 2b 29 65 5b 69 2b 31 2b 61 5d 3d 6f 5b 61 5d 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 5c Data Ascii: '\x4e\x41'==e)return'\x4e\x410';for(var o='\x37\x33\x38\x31\x32\x31\x31\x39\x35\x39',i=(e=e['\x74\x6f\x53\x74\x72\x69\x6e\x67']()['\x73\x70\x6c\x69\x74'](''))['\x69\x6e\x64\x65\x78\x4f\x66']('\x2e'),a=0;a<o[n(748)];a++)e[i+1+a]=o[a];return parseFloat(e['\
2024-12-05 19:20:04 UTC	16384	IN	Data Raw: 5c 78 36 32 27 5d 3b 7d 2c 74 68 69 73 5b 27 5c 78 36 34 5c 78 36 34 5c 78 35 66 5c 78 34 62 27 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 74 3b 65 5b 6e 28 36 32 36 29 5d 3d 27 5c 78 36 34 5c 78 36 66 5c 78 36 64 5c 78 34 31 5c 78 37 35 5c 78 37 34 5c 78 36 66 5c 78 36 64 5c 78 36 31 5c 78 37 34 5c 78 36 39 5c 78 36 66 5c 78 36 65 27 69 6e 20 77 69 6e 64 6f 77 7c 7c 6e 28 36 36 36 29 69 6e 20 77 69 6e 64 6f 77 3b 7d 2c 74 68 69 73 5b 74 28 36 32 38 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 5b 74 28 35 35 39 29 5d 5b 27 5c 78 36 64 5c 78 36 35 5c 78 36 34 5c 78 36 39 5c 78 36 31 5c 78 34 34 5c 78 36 35 5c 78 37 36 5c 78 36 39 5c 78 36 33 5c 78 36 35 5c 78 37 33 27 5d 3f 65 5b 27 5c 78 36 64 5c 78 36 35 5c 78 36 34 27 5d 3d Data Ascii: \x62'];},this['\x64\x64\x5f\x4b']=function(){var n=t;e[n(626)]='\x64\x6f\x6d\x41\x75\x74\x6f\x6d\x61\x74\x69\x6f\x6e'in window\|\|n(666)in window;},this[t(628)]=function(){window[t(559)]['\x6d\x65\x64\x69\x61\x44\x65\x76\x69\x63\x65\x73']?e['\x6d\x65\x64']=
2024-12-05 19:20:04 UTC	16384	IN	Data Raw: 61 72 49 6e 74 65 72 76 61 6c 28 73 29 29 3b 7d 63 61 74 63 68 28 65 29 7b 7d 7d 7d 7d 2c 35 30 30 29 3b 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 73 29 3b 7d 2c 31 30 30 30 30 29 3b 7d 2c 74 68 69 73 5b 27 5c 78 36 34 5c 78 36 34 5c 78 35 66 5c 78 36 31 5c 78 36 31 27 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 74 3b 65 5b 6e 28 34 37 37 29 5d 3d 74 79 70 65 6f 66 20 6f 62 6a 65 63 74 54 6f 49 6e 73 70 65 63 74 21 3d 3d 6e 28 37 38 35 29 26 26 6e 75 6c 6c 3d 3d 3d 6f 62 6a 65 63 74 54 6f 49 6e 73 70 65 63 74 26 26 27 5c 78 37 35 5c 78 36 65 5c 78 36 34 5c 78 36 35 5c 78 36 36 5c 78 36 39 5c 78 36 65 5c 78 36 35 5c 78 36 34 27 21 3d 74 79 70 65 6f 66 20 72 65 73 75 6c 74 26 26 Data Ascii: arInterval(s));}catch(e){}}}},500);setTimeout(function(){clearInterval(s);},10000);},this['\x64\x64\x5f\x61\x61']=function(){var n=t;e[n(477)]=typeof objectToInspect!==n(785)&&null===objectToInspect&&'\x75\x6e\x64\x65\x66\x69\x6e\x65\x64'!=typeof result&&
2024-12-05 19:20:04 UTC	16384	IN	Data Raw: 34 5c 78 36 31 5c 78 37 34 5c 78 36 31 5c 78 34 34 5c 78 36 66 5c 78 36 64 5c 78 36 35 5c 78 34 66 5c 78 37 30 5c 78 37 34 5c 78 36 39 5c 78 36 66 5c 78 36 65 5c 78 37 33 27 5d 5d 5b 5b 27 5c 78 36 35 5c 78 36 65 5c 78 36 31 5c 78 36 32 5c 78 36 63 5c 78 36 35 5c 78 35 34 5c 78 36 31 5c 78 36 37 5c 78 34 35 5c 78 37 36 5c 78 36 35 5c 78 36 65 5c 78 37 34 5c 78 37 33 27 5d 5d 26 26 73 5b 5b 27 5c 78 36 34 5c 78 36 39 5c 78 37 33 5c 78 37 30 5c 78 36 31 5c 78 37 34 5c 78 36 33 5c 78 36 38 5c 78 34 35 5c 78 37 36 5c 78 36 35 5c 78 36 65 5c 78 37 34 27 5d 5d 28 73 5b 5b 27 5c 78 36 35 5c 78 37 36 5c 78 36 35 5c 78 36 65 5c 78 37 34 5c 78 34 65 5c 78 36 31 5c 78 36 64 5c 78 36 35 5c 78 37 33 27 5d 5d 5b 5b 27 5c 78 37 30 5c 78 36 66 5c 78 37 33 5c 78 37 34 5c Data Ascii: 4\x61\x74\x61\x44\x6f\x6d\x65\x4f\x70\x74\x69\x6f\x6e\x73']][['\x65\x6e\x61\x62\x6c\x65\x54\x61\x67\x45\x76\x65\x6e\x74\x73']]&&s[['\x64\x69\x73\x70\x61\x74\x63\x68\x45\x76\x65\x6e\x74']](s[['\x65\x76\x65\x6e\x74\x4e\x61\x6d\x65\x73']][['\x70\x6f\x73\x74\
2024-12-05 19:20:04 UTC	16384	IN	Data Raw: 78 37 30 5c 78 36 31 5c 78 37 32 5c 78 36 35 5c 78 36 65 5c 78 37 34 5c 78 34 65 5c 78 36 66 5c 78 36 34 5c 78 36 35 27 5d 5d 5b 5b 27 5c 78 37 32 5c 78 36 35 5c 78 36 64 5c 78 36 66 5c 78 37 36 5c 78 36 35 5c 78 34 33 5c 78 36 38 5c 78 36 39 5c 78 36 63 5c 78 36 34 27 5d 5d 28 61 29 2c 77 69 6e 64 6f 77 5b 5b 27 5c 78 34 34 5c 78 36 31 5c 78 37 34 5c 78 36 31 5c 78 34 34 5c 78 36 66 5c 78 36 64 5c 78 36 35 5c 78 34 33 5c 78 36 31 5c 78 37 30 5c 78 37 34 5c 78 36 33 5c 78 36 38 5c 78 36 31 5c 78 34 34 5c 78 36 39 5c 78 37 33 5c 78 37 30 5c 78 36 63 5c 78 36 31 5c 78 37 39 5c 78 36 35 5c 78 36 34 27 5d 5d 3d 21 31 2c 77 69 6e 64 6f 77 5b 5b 27 5c 78 34 34 5c 78 36 31 5c 78 37 34 5c 78 36 31 5c 78 34 34 5c 78 36 66 5c 78 36 64 5c 78 36 35 5c 78 35 32 5c 78 Data Ascii: x70\x61\x72\x65\x6e\x74\x4e\x6f\x64\x65']][['\x72\x65\x6d\x6f\x76\x65\x43\x68\x69\x6c\x64']](a),window[['\x44\x61\x74\x61\x44\x6f\x6d\x65\x43\x61\x70\x74\x63\x68\x61\x44\x69\x73\x70\x6c\x61\x79\x65\x64']]=!1,window[['\x44\x61\x74\x61\x44\x6f\x6d\x65\x52\x
2024-12-05 19:20:04 UTC	16384	IN	Data Raw: 33 5c 78 36 38 5c 78 36 35 5c 78 36 34 27 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 77 69 6e 64 6f 77 5b 5b 27 5c 78 36 34 5c 78 36 31 5c 78 37 34 5c 78 36 31 5c 78 34 34 5c 78 36 66 5c 78 36 64 5c 78 36 35 5c 78 34 66 5c 78 37 30 5c 78 37 34 5c 78 36 39 5c 78 36 66 5c 78 36 65 5c 78 37 33 27 5d 5d 26 26 74 5b 5b 27 5c 78 37 32 5c 78 36 35 5c 78 37 31 5c 78 37 35 5c 78 36 35 5c 78 37 33 5c 78 37 34 5c 78 34 31 5c 78 37 30 5c 78 36 39 27 5d 5d 28 77 69 6e 64 6f 77 5b 5b 27 5c 78 36 34 5c 78 36 34 5c 78 36 61 5c 78 37 33 5c 78 36 62 5c 78 36 35 5c 78 37 39 27 5d 5d 2c 65 2c 5b 5d 2c 77 69 6e 64 6f 77 5b 5b 27 5c 78 36 34 5c 78 36 31 5c 78 37 34 5c 78 36 31 5c 78 34 34 5c 78 36 66 5c 78 36 64 5c 78 36 35 5c 78 34 66 5c 78 37 30 5c 78 37 34 5c 78 36 39 5c 78 36 Data Ascii: 3\x68\x65\x64',function(n){window[['\x64\x61\x74\x61\x44\x6f\x6d\x65\x4f\x70\x74\x69\x6f\x6e\x73']]&&t[['\x72\x65\x71\x75\x65\x73\x74\x41\x70\x69']](window[['\x64\x64\x6a\x73\x6b\x65\x79']],e,[],window[['\x64\x61\x74\x61\x44\x6f\x6d\x65\x4f\x70\x74\x69\x6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.8	49751	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:03 UTC	584	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/widgets/analytics.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:04 UTC	796	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:03 GMT DC: ccg11-origin-www-1.paypal.com Etag: "6737ef1a-3d5+br+ident" Expires: Fri, 05 Dec 2025 19:20:03 GMT Last-Modified: Sat, 16 Nov 2024 01:02:18 GMT Paypal-Debug-Id: a1053b5757c62 Server: ECAcc (lhd/3585) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000a1053b5757c62-38fa3fd4665235ef-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 981 Connection: close
2024-12-05 19:20:04 UTC	981	IN	Data Raw: 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 2c 22 42 61 73 65 56 69 65 77 22 2c 22 6e 65 77 67 61 74 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 74 2e 65 78 74 65 6e 64 28 7b 65 6c 3a 22 62 6f 64 79 22 2c 65 76 65 6e 74 73 3a 7b 22 63 6c 69 63 6b 20 61 5b 64 61 74 61 2d 70 61 67 65 6e 61 6d 65 5d 2c 20 69 6e 70 75 74 5b 64 61 74 61 2d 70 61 67 65 6e 61 6d 65 5d 2c 20 6c 61 62 65 6c 5b 64 61 74 61 2d 70 61 67 65 6e 61 6d 65 5d 22 3a 22 74 72 61 63 6b 4c 69 6e 6b 22 7d 2c 74 72 61 63 6b 4c 69 6e 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 65 28 74 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 29 2c 72 3d 6e 2e 61 74 74 72 28 22 64 61 74 61 2d 70 61 67 65 6e 61 6d 65 22 29 Data Ascii: define(["jquery","BaseView","newgat"],function(e,t,n){"use strict";var r=t.extend({el:"body",events:{"click a[data-pagename], input[data-pagename], label[data-pagename]":"trackLink"},trackLink:function(t){var n=e(t.currentTarget),r=n.attr("data-pagename")

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.8	49752	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:03 UTC	587	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/view/mainContentView.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:04 UTC	792	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:03 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6737ef1a-3198" Expires: Fri, 05 Dec 2025 19:20:03 GMT Last-Modified: Sat, 16 Nov 2024 01:02:18 GMT Paypal-Debug-Id: b209a03ca3fe4 Server: ECAcc (lhd/35E6) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000b209a03ca3fe4-4cd3bdd512c7387f-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 12696 Connection: close
2024-12-05 19:20:04 UTC	12696	IN	Data Raw: 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 2c 22 62 61 63 6b 62 6f 6e 65 22 2c 22 6e 65 77 67 61 74 22 2c 22 70 61 67 65 56 69 65 77 22 2c 22 70 6f 73 74 4d 65 73 73 61 67 65 22 2c 22 61 75 74 68 63 61 70 74 63 68 61 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 69 2c 73 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6f 3d 72 2e 65 78 74 65 6e 64 28 7b 65 6c 3a 22 23 6d 61 69 6e 22 2c 72 6c 6f 67 49 64 73 3a 5b 5d 2c 4c 4f 41 44 49 4e 47 3a 22 6c 6f 61 64 69 6e 67 22 2c 63 75 72 72 65 6e 74 56 69 65 77 54 65 6d 70 6c 61 74 65 3a 75 6e 64 65 66 69 6e 65 64 2c 70 72 65 76 69 6f 75 73 56 69 65 77 54 65 6d 70 6c 61 74 65 3a 22 6e 75 6c 6c 22 2c 63 75 72 72 65 6e 74 56 69 65 77 3a 22 6e 75 6c 6c 22 2c 70 61 67 65 4e 61 6d 65 3a 22 Data Ascii: define(["jquery","backbone","newgat","pageView","postMessage","authcaptcha"],function(e,t,n,r,i,s){"use strict";var o=r.extend({el:"#main",rlogIds:[],LOADING:"loading",currentViewTemplate:undefined,previousViewTemplate:"null",currentView:"null",pageName:"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.8	49753	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:03 UTC	583	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/lib/jquery-3.7.0.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:04 UTC	793	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:03 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6737ef18-1582e" Expires: Fri, 05 Dec 2025 19:20:03 GMT Last-Modified: Sat, 16 Nov 2024 01:02:16 GMT Paypal-Debug-Id: 02b62f404330d Server: ECAcc (lhd/35FB) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-000000000000000000002b62f404330d-ab43c07b79a698aa-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 88110 Connection: close
2024-12-05 19:20:04 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 33 2e 37 2e 30 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 32 33 2d 30 35 2d 31 31 54 31 38 3a 32 39 5a 0a 20 2a 2f 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 79 70 65 6f 66 20 6d Data Ascii: /! jQuery JavaScript Library v3.7.0 * https://jquery.com/ * * Copyright OpenJS Foundation and other contributors * Released under the MIT license * https://jquery.org/license * * Date: 2023-05-11T18:29Z */(function(e,t){"use strict";typeof m
2024-12-05 19:20:04 UTC	1	IN	Data Raw: 65 Data Ascii: e
2024-12-05 19:20:04 UTC	16383	IN	Data Raw: 6c 73 65 20 66 6f 72 28 72 20 69 6e 20 65 29 69 66 28 74 2e 63 61 6c 6c 28 65 5b 72 5d 2c 72 2c 65 5b 72 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 65 7d 2c 74 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3d 22 22 2c 72 3d 30 2c 69 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 21 69 29 77 68 69 6c 65 28 74 3d 65 5b 72 2b 2b 5d 29 6e 2b 3d 53 2e 74 65 78 74 28 74 29 3b 65 6c 73 65 7b 69 66 28 69 3d 3d 3d 31 7c 7c 69 3d 3d 3d 39 7c 7c 69 3d 3d 3d 31 31 29 72 65 74 75 72 6e 20 65 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3b 69 66 28 69 3d 3d 3d 33 7c 7c 69 3d 3d 3d 34 29 72 65 74 75 72 6e 20 65 2e 6e 6f 64 65 56 61 6c 75 65 7d 72 65 74 75 72 6e 20 6e 7d 2c 6d 61 6b 65 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 Data Ascii: lse for(r in e)if(t.call(e[r],r,e[r])===!1)break;return e},text:function(e){var t,n="",r=0,i=e.nodeType;if(!i)while(t=e[r++])n+=S.text(t);else{if(i===1\|\|i===9\|\|i===11)return e.textContent;if(i===3\|\|i===4)return e.nodeValue}return n},makeArray:function(e,t
2024-12-05 19:20:04 UTC	16383	IN	Data Raw: 64 49 6e 64 65 78 2c 65 2e 73 65 6c 65 63 74 65 64 3d 3d 3d 21 30 7d 2c 65 6d 70 74 79 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 65 3d 65 2e 66 69 72 73 74 43 68 69 6c 64 3b 65 3b 65 3d 65 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 69 66 28 65 2e 6e 6f 64 65 54 79 70 65 3c 36 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 70 61 72 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 72 2e 70 73 65 75 64 6f 73 2e 65 6d 70 74 79 28 65 29 7d 2c 68 65 61 64 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 2e 74 65 73 74 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7d 2c 69 6e 70 75 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 58 2e 74 65 73 74 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7d 2c 62 75 74 74 Data Ascii: dIndex,e.selected===!0},empty:function(e){for(e=e.firstChild;e;e=e.nextSibling)if(e.nodeType<6)return!1;return!0},parent:function(e){return!r.pseudos.empty(e)},header:function(e){return V.test(e.nodeName)},input:function(e){return X.test(e.nodeName)},butt
2024-12-05 19:20:04 UTC	16383	IN	Data Raw: 2e 68 61 6e 64 6c 65 72 73 5b 6e 2b 2b 5d 29 26 26 21 61 2e 69 73 49 6d 6d 65 64 69 61 74 65 50 72 6f 70 61 67 61 74 69 6f 6e 53 74 6f 70 70 65 64 28 29 29 69 66 28 21 61 2e 72 6e 61 6d 65 73 70 61 63 65 7c 7c 73 2e 6e 61 6d 65 73 70 61 63 65 3d 3d 3d 21 31 7c 7c 61 2e 72 6e 61 6d 65 73 70 61 63 65 2e 74 65 73 74 28 73 2e 6e 61 6d 65 73 70 61 63 65 29 29 61 2e 68 61 6e 64 6c 65 4f 62 6a 3d 73 2c 61 2e 64 61 74 61 3d 73 2e 64 61 74 61 2c 72 3d 28 28 53 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 5b 73 2e 6f 72 69 67 54 79 70 65 5d 7c 7c 7b 7d 29 2e 68 61 6e 64 6c 65 7c 7c 73 2e 68 61 6e 64 6c 65 72 29 2e 61 70 70 6c 79 28 69 2e 65 6c 65 6d 2c 75 29 2c 72 21 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 28 61 2e 72 65 73 75 6c 74 3d 72 29 3d 3d 3d 21 31 26 26 28 61 Data Ascii: .handlers[n++])&&!a.isImmediatePropagationStopped())if(!a.rnamespace\|\|s.namespace===!1\|\|a.rnamespace.test(s.namespace))a.handleObj=s,a.data=s.data,r=((S.event.special[s.origType]\|\|{}).handle\|\|s.handler).apply(i.elem,u),r!==undefined&&(a.result=r)===!1&&(a
2024-12-05 19:20:04 UTC	16383	IN	Data Raw: 2c 53 2e 66 78 2e 69 6e 74 65 72 76 61 6c 3d 31 33 2c 53 2e 66 78 2e 73 74 61 72 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 70 6e 29 72 65 74 75 72 6e 3b 70 6e 3d 21 30 2c 6d 6e 28 29 7d 2c 53 2e 66 78 2e 73 74 6f 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 70 6e 3d 6e 75 6c 6c 7d 2c 53 2e 66 78 2e 73 70 65 65 64 73 3d 7b 73 6c 6f 77 3a 36 30 30 2c 66 61 73 74 3a 32 30 30 2c 5f 64 65 66 61 75 6c 74 3a 34 30 30 7d 2c 53 2e 66 6e 2e 64 65 6c 61 79 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 74 3d 53 2e 66 78 3f 53 2e 66 78 2e 73 70 65 65 64 73 5b 74 5d 7c 7c 74 3a 74 2c 6e 3d 6e 7c 7c 22 66 78 22 2c 74 68 69 73 2e 71 75 65 75 65 28 6e 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 29 7b 76 61 72 20 69 3d 65 2e 73 65 74 54 69 6d 65 6f 75 74 28 Data Ascii: ,S.fx.interval=13,S.fx.start=function(){if(pn)return;pn=!0,mn()},S.fx.stop=function(){pn=null},S.fx.speeds={slow:600,fast:200,_default:400},S.fn.delay=function(t,n){return t=S.fx?S.fx.speeds[t]\|\|t:t,n=n\|\|"fx",this.queue(n,function(n,r){var i=e.setTimeout(
2024-12-05 19:20:04 UTC	6194	IN	Data Raw: 69 70 74 3e 22 29 2e 61 74 74 72 28 65 2e 73 63 72 69 70 74 41 74 74 72 73 7c 7c 7b 7d 29 2e 70 72 6f 70 28 7b 63 68 61 72 73 65 74 3a 65 2e 73 63 72 69 70 74 43 68 61 72 73 65 74 2c 73 72 63 3a 65 2e 75 72 6c 7d 29 2e 6f 6e 28 22 6c 6f 61 64 20 65 72 72 6f 72 22 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 2e 72 65 6d 6f 76 65 28 29 2c 6e 3d 6e 75 6c 6c 2c 65 26 26 69 28 65 2e 74 79 70 65 3d 3d 3d 22 65 72 72 6f 72 22 3f 34 30 34 3a 32 30 30 2c 65 2e 74 79 70 65 29 7d 29 2c 6d 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 5b 30 5d 29 7d 2c 61 62 6f 72 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 26 26 6e 28 29 7d 7d 7d 7d 29 3b 76 61 72 20 73 72 3d 5b 5d 2c 6f 72 3d 2f 28 3d 29 5c 3f 28 3f 3d 26 7c 24 29 7c 5c 3f 5c 3f 2f 3b 53 2e 61 6a 61 78 Data Ascii: ipt>").attr(e.scriptAttrs\|\|{}).prop({charset:e.scriptCharset,src:e.url}).on("load error",n=function(e){t.remove(),n=null,e&&i(e.type==="error"?404:200,e.type)}),m.head.appendChild(t[0])},abort:function(){n&&n()}}}});var sr=[],or=/(=)\?(?=&\|$)\|\?\?/;S.ajax

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.8	49755	18.66.161.81	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:03 UTC	505	OUT	OPTIONS /js/ HTTP/1.1 Host: ddbm2.paypal.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-requested-with Origin: https://www.paypal.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:04 UTC	602	IN	HTTP/1.1 200 OK Content-Length: 0 Connection: close Date: Thu, 05 Dec 2024 19:20:04 GMT X-Cache: Miss from cloudfront Via: 1.1 f6cdebe4ad9c464f69da269c3379dd86.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH52-C1 X-Amz-Cf-Id: RfSbyaCMq114n-E5hCJHADdvaJpfHe9v4llq1x99ietW5j1QJfiQTA== X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Access-Control-Max-Age: 600 Access-Control-Allow-Headers: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.8	49754	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:03 UTC	721	OUT	GET /webcaptcha/grcenterprise_v3_static.html HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:04 UTC	679	IN	HTTP/1.1 200 OK Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: text/html Date: Thu, 05 Dec 2024 19:20:03 GMT DC: ccg11-origin-www-1.paypal.com Etag: "6633898b-19bd+gzip+ident" Expires: Thu, 05 Dec 2024 20:20:03 GMT Last-Modified: Thu, 02 May 2024 12:39:39 GMT Paypal-Debug-Id: 3e337e25f1733 Server: ECAcc (lhd/35E9) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000003e337e25f1733-5972509d51136c7e-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 6589 Connection: close
2024-12-05 19:20:04 UTC	6589	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 73 74 79 6c 65 3e 0a 09 09 2e 67 72 65 63 61 70 74 63 68 61 2d 62 61 64 67 65 7b 0a 09 09 09 62 6f 74 74 6f 6d 3a 20 33 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 7d 0a 09 3c 2f 73 74 79 6c 65 3e 0a 09 3c 73 63 72 69 70 74 3e 0a 0a 09 09 76 61 72 20 70 70 5f 6c 6f 63 5f 6d 61 70 20 3d 20 7b 22 61 72 5f 45 47 22 3a 22 61 72 22 2c 22 64 61 5f 44 4b 22 3a 22 64 61 22 2c 22 64 65 5f 44 45 22 3a 22 64 65 22 2c 22 64 65 5f 44 45 5f 41 54 22 3a 22 64 65 2d 41 54 22 2c 22 64 65 5f 44 45 5f 43 48 Data Ascii: <html><head><meta name="viewport" content="width=device-width, initial-scale=1.0"><style>.grecaptcha-badge{bottom: 3px !important;}</style><script>var pp_loc_map = {"ar_EG":"ar","da_DK":"da","de_DE":"de","de_DE_AT":"de-AT","de_DE_CH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.8	49758	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:03 UTC	382	OUT	GET /webcaptcha/grcenterprise_v3_static.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:04 UTC	683	IN	HTTP/1.1 200 OK Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:04 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"65f1e42c-180e" Expires: Thu, 05 Dec 2024 20:20:04 GMT Last-Modified: Wed, 13 Mar 2024 17:36:44 GMT Paypal-Debug-Id: b3ccb366af5af Server: ECAcc (lhd/35E9) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000b3ccb366af5af-57e51581fae364c4-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 6158 Connection: close
2024-12-05 19:20:04 UTC	6158	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 69 6e 69 74 28 29 20 7b 0a 20 20 20 20 63 6f 6e 73 74 20 6b 65 79 20 3d 20 67 65 74 4c 69 73 74 65 6e 65 72 53 65 61 72 63 68 4b 65 79 28 27 64 61 74 61 2d 6b 65 79 27 29 3b 0a 20 20 20 20 63 6f 6e 73 74 20 73 65 73 73 69 6f 6e 49 64 20 3d 20 67 65 74 4c 69 73 74 65 6e 65 72 53 65 61 72 63 68 4b 65 79 28 27 64 61 74 61 2d 73 65 73 73 69 6f 6e 49 64 27 29 3b 0a 20 20 20 20 63 6f 6e 73 74 20 63 73 72 66 20 3d 20 67 65 74 4c 69 73 74 65 6e 65 72 53 65 61 72 63 68 4b 65 79 28 27 64 61 74 61 2d 63 73 72 66 27 29 3b 0a 20 20 20 20 63 6f 6e 73 74 20 61 63 74 69 6f 6e 20 3d 20 67 65 74 4c 69 73 74 65 6e 65 72 53 65 61 72 63 68 4b 65 79 28 27 64 61 74 61 2d 61 63 74 69 6f 6e 27 29 3b 0a 20 20 Data Ascii: "use strict";function init() { const key = getListenerSearchKey('data-key'); const sessionId = getListenerSearchKey('data-sessionId'); const csrf = getListenerSearchKey('data-csrf'); const action = getListenerSearchKey('data-action');

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.8	49760	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:04 UTC	369	OUT	GET /pa/mi/paypal/latmconf.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:04 UTC	799	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:04 GMT DC: ccg11-origin-www-1.paypal.com Etag: "6735ac2d-3ac5+ident" Expires: Thu, 05 Dec 2024 20:20:04 GMT Last-Modified: Thu, 14 Nov 2024 07:52:13 GMT Paypal-Debug-Id: 8ca3f04ae1eca Server: ECAcc (lhd/35E2) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000008ca3f04ae1eca-7b6be631e999b634-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 15045 Connection: close
2024-12-05 19:20:04 UTC	15045	IN	Data Raw: 2f 2a 21 20 32 30 32 34 20 64 6c 2d 70 70 2d 6c 61 74 6d 40 70 61 79 70 61 6c 2e 63 6f 6d 20 76 65 72 28 35 2e 31 2e 31 29 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 6e 29 7b 28 6e 75 6c 6c 3d 3d 6e 7c 7c 6e 3e 65 2e 6c 65 6e 67 74 68 29 26 26 28 6e 3d 65 2e 6c 65 6e 67 74 68 29 3b 66 6f 72 28 76 61 72 20 6f 3d 30 2c 61 3d 41 72 72 61 79 28 6e 29 3b 6f 3c 6e 3b 6f 2b 2b 29 61 5b 6f 5d 3d 65 5b 6f 5d 3b 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 72 65 74 75 72 6e 20 65 7d 28 6e 29 7c 7c 66 75 Data Ascii: /! 2024 dl-pp-latm@paypal.com ver(5.1.1) /!function(){"use strict";!function(){function e(e,n){(null==n\|\|n>e.length)&&(n=e.length);for(var o=0,a=Array(n);o<n;o++)a[o]=e[o];return a}function n(n,o){return function(e){if(Array.isArray(e))return e}(n)\|\|fu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.8	49757	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:04 UTC	380	OUT	GET /martech/tm/paypal/mktgtagmanager.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:04 UTC	795	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:04 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"67042d91-3eb4" Expires: Thu, 05 Dec 2024 20:20:04 GMT Last-Modified: Mon, 07 Oct 2024 18:50:57 GMT Paypal-Debug-Id: 43977cf5beaba Server: ECAcc (lhd/35D1) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-000000000000000000043977cf5beaba-bf7373f9bbb8911f-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 16052 Connection: close
2024-12-05 19:20:04 UTC	16052	IN	Data Raw: 2f 2a 40 20 32 30 32 34 20 50 61 79 50 61 6c 20 28 76 31 2e 30 2e 31 29 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 66 28 74 29 7b 69 66 28 21 74 7c 7c 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 21 3d 3d 4f 62 6a 65 63 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 21 3d 3d 41 72 72 61 79 29 72 65 74 75 72 6e 20 74 3b 76 61 72 20 65 2c 6e 3d 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 3b 66 6f 72 28 65 20 69 6e 20 74 29 6e 5b 65 5d 3d 66 28 74 5b 65 5d 29 3b 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 73 28 74 2c 65 29 7b 76 61 72 20 6e 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 26 26 28 6e 3d 74 2e 61 70 70 6c 79 28 65 7c 7c 74 68 69 73 2c Data Ascii: /@ 2024 PayPal (v1.0.1) /!function(){"use strict";function f(t){if(!t\|\|t.constructor!==Object&&t.constructor!==Array)return t;var e,n=t.constructor();for(e in t)n[e]=f(t[e]);return n}function s(t,e){var n;return function(){return t&&(n=t.apply(e\|\|this,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.8	49759	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:04 UTC	404	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/core/nougat.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:04 UTC	790	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:04 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6737ef18-9b3" Expires: Fri, 05 Dec 2025 19:20:04 GMT Last-Modified: Sat, 16 Nov 2024 01:02:16 GMT Paypal-Debug-Id: e81745789613f Server: ECAcc (lhd/3595) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000e81745789613f-d26269e48de18176-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 2483 Connection: close
2024-12-05 19:20:04 UTC	2483	IN	Data Raw: 64 65 66 69 6e 65 28 22 6e 65 77 67 61 74 22 2c 5b 22 6a 71 75 65 72 79 22 2c 22 75 6e 64 65 72 73 63 6f 72 65 22 2c 22 64 75 73 74 6a 73 2d 6c 69 6e 6b 65 64 69 6e 22 2c 22 64 75 73 74 2d 6d 61 6b 61 72 61 2d 68 65 6c 70 65 72 73 22 2c 22 64 75 73 74 68 65 6c 70 65 72 73 2d 73 75 70 70 6c 65 6d 65 6e 74 22 2c 22 64 75 73 74 6d 6f 74 65 73 2d 69 74 65 72 61 74 65 22 2c 22 70 75 6c 76 75 73 2d 70 72 6f 76 69 64 65 22 2c 22 64 75 73 74 6a 73 2d 68 65 6c 70 65 72 73 22 2c 22 5f 6c 61 6e 67 75 61 67 65 70 61 63 6b 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 74 2c 6e 29 7b 69 66 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 74 65 72 29 72 65 74 75 72 6e 20 65 2e 66 69 6c 74 65 72 28 74 29 Data Ascii: define("newgat",["jquery","underscore","dustjs-linkedin","dust-makara-helpers","dusthelpers-supplement","dustmotes-iterate","pulvus-provide","dustjs-helpers","_languagepack"],function(e,t,n,r){function u(e,t,n){if(Array.prototype.filter)return e.filter(t)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.8	49756	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:04 UTC	588	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/lib/underscore-1.13.6.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:04 UTC	792	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:04 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6737ef18-4d5f" Expires: Fri, 05 Dec 2025 19:20:04 GMT Last-Modified: Sat, 16 Nov 2024 01:02:16 GMT Paypal-Debug-Id: da5f9cc121722 Server: ECAcc (lhd/35C7) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000da5f9cc121722-9f60941d6d26c99b-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 19807 Connection: close
2024-12-05 19:20:04 UTC	16383	IN	Data Raw: 2f 2f 20 20 20 20 20 28 63 29 20 32 30 30 39 2d 32 30 32 32 20 4a 65 72 65 6d 79 20 41 73 68 6b 65 6e 61 73 2c 20 4a 75 6c 69 61 6e 20 47 6f 6e 67 67 72 69 6a 70 2c 20 61 6e 64 20 44 6f 63 75 6d 65 6e 74 43 6c 6f 75 64 20 61 6e 64 20 49 6e 76 65 73 74 69 67 61 74 69 76 65 20 52 65 70 6f 72 74 65 72 73 20 26 20 45 64 69 74 6f 72 73 0a 0a 2f 2f 20 20 20 20 20 55 6e 64 65 72 73 63 6f 72 65 20 6d 61 79 20 62 65 20 66 72 65 65 6c 79 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3d 3d 22 6f 62 6a 65 63 74 22 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 6d 6f 64 75 6c 65 Data Ascii: // (c) 2009-2022 Jeremy Ashkenas, Julian Gonggrijp, and DocumentCloud and Investigative Reporters & Editors// Underscore may be freely distributed under the MIT license.(function(e,t){typeof exports=="object"&&typeof module!="undefined"?module
2024-12-05 19:20:04 UTC	3424	IN	Data Raw: 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 42 69 6e 64 20 6d 75 73 74 20 62 65 20 63 61 6c 6c 65 64 20 6f 6e 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 76 61 72 20 72 3d 77 28 66 75 6e 63 74 69 6f 6e 28 69 29 7b 72 65 74 75 72 6e 20 53 6e 28 65 2c 72 2c 74 2c 74 68 69 73 2c 6e 2e 63 6f 6e 63 61 74 28 69 29 29 7d 29 3b 72 65 74 75 72 6e 20 72 7d 29 2c 4e 6e 3d 51 28 72 74 29 2c 6b 6e 3d 77 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 3d 43 6e 28 74 2c 21 31 2c 21 31 29 3b 76 61 72 20 6e 3d 74 2e 6c 65 6e 67 74 68 3b 69 66 28 6e 3c 31 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 62 69 6e 64 41 6c 6c 20 6d 75 73 74 20 62 65 20 70 61 73 73 65 64 20 66 75 6e 63 74 69 6f 6e 20 6e 61 6d 65 73 22 29 3b 77 68 69 6c 65 28 6e 2d Data Ascii: ))throw new TypeError("Bind must be called on a function");var r=w(function(i){return Sn(e,r,t,this,n.concat(i))});return r}),Nn=Q(rt),kn=w(function(e,t){t=Cn(t,!1,!1);var n=t.length;if(n<1)throw new Error("bindAll must be passed function names");while(n-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.8	49762	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:04 UTC	439	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/browser_modules/dustjs-linkedin/dist/dust-full.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:05 UTC	792	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:05 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6737ef18-9b8c" Expires: Fri, 05 Dec 2025 19:20:05 GMT Last-Modified: Sat, 16 Nov 2024 01:02:16 GMT Paypal-Debug-Id: 02b62f46403a9 Server: ECAcc (lhd/35F9) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-000000000000000000002b62f46403a9-f37761ce0b0bcd6f-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 39820 Connection: close
2024-12-05 19:20:05 UTC	16383	IN	Data Raw: 2f 2a 21 20 64 75 73 74 6a 73 2d 6c 69 6e 6b 65 64 69 6e 20 2d 20 76 33 2e 30 2e 30 0a 2a 20 68 74 74 70 3a 2f 2f 64 75 73 74 6a 73 2e 63 6f 6d 2f 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 32 31 20 41 6c 65 6b 73 61 6e 64 65 72 20 57 69 6c 6c 69 61 6d 73 3b 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 2a 2f 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 79 70 65 6f 66 20 64 65 66 69 6e 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 64 65 66 69 6e 65 2e 61 6d 64 26 26 64 65 66 69 6e 65 2e 61 6d 64 2e 64 75 73 74 3d 3d 3d 21 30 3f 64 65 66 69 6e 65 28 22 64 75 73 74 2e 63 6f 72 65 22 2c 5b 5d 2c 74 29 3a 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3d 3d 22 6f 62 6a 65 63 74 22 3f 6d 6f 64 Data Ascii: /! dustjs-linkedin - v3.0.0 http://dustjs.com/* Copyright (c) 2021 Aleksander Williams; Released under the MIT License */(function(e,t){typeof define=="function"&&define.amd&&define.amd.dust===!0?define("dust.core",[],t):typeof exports=="object"?mod
2024-12-05 19:20:05 UTC	16383	IN	Data Raw: 3a 28 4c 6e 3d 74 2c 74 3d 69 29 29 3a 28 4c 6e 3d 74 2c 74 3d 69 29 7d 65 6c 73 65 20 4c 6e 3d 74 2c 74 3d 69 3b 69 66 28 74 3d 3d 3d 69 29 7b 74 3d 4c 6e 2c 6e 3d 24 6e 28 29 3b 69 66 28 6e 21 3d 3d 69 29 7b 72 3d 5b 5d 2c 73 3d 4e 72 28 29 3b 77 68 69 6c 65 28 73 21 3d 3d 69 29 72 2e 70 75 73 68 28 73 29 2c 73 3d 4e 72 28 29 3b 72 21 3d 3d 69 3f 28 65 2e 63 68 61 72 43 6f 64 65 41 74 28 4c 6e 29 3d 3d 3d 34 37 3f 28 73 3d 63 2c 4c 6e 2b 2b 29 3a 28 73 3d 69 2c 44 6e 3d 3d 3d 30 26 26 52 6e 28 68 29 29 2c 73 21 3d 3d 69 3f 28 6f 3d 45 72 28 29 2c 6f 21 3d 3d 69 3f 28 41 6e 3d 74 2c 6e 3d 70 28 6e 29 2c 74 3d 6e 29 3a 28 4c 6e 3d 74 2c 74 3d 69 29 29 3a 28 4c 6e 3d 74 2c 74 3d 69 29 29 3a 28 4c 6e 3d 74 2c 74 3d 69 29 7d 65 6c 73 65 20 4c 6e 3d 74 2c 74 Data Ascii: :(Ln=t,t=i)):(Ln=t,t=i)}else Ln=t,t=i;if(t===i){t=Ln,n=$n();if(n!==i){r=[],s=Nr();while(s!==i)r.push(s),s=Nr();r!==i?(e.charCodeAt(Ln)===47?(s=c,Ln++):(s=i,Dn===0&&Rn(h)),s!==i?(o=Er(),o!==i?(An=t,n=p(n),t=n):(Ln=t,t=i)):(Ln=t,t=i)):(Ln=t,t=i)}else Ln=t,t
2024-12-05 19:20:05 UTC	7054	IN	Data Raw: 6c 22 2c 76 61 6c 75 65 3a 22 7b 21 22 2c 64 65 73 63 72 69 70 74 69 6f 6e 3a 27 22 7b 21 22 27 7d 2c 6e 6e 3d 22 21 7d 22 2c 72 6e 3d 7b 74 79 70 65 3a 22 6c 69 74 65 72 61 6c 22 2c 76 61 6c 75 65 3a 22 21 7d 22 2c 64 65 73 63 72 69 70 74 69 6f 6e 3a 27 22 21 7d 22 27 7d 2c 73 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6b 72 28 5b 22 63 6f 6d 6d 65 6e 74 22 2c 65 2e 6a 6f 69 6e 28 22 22 29 5d 29 7d 2c 6f 6e 3d 2f 5e 5b 23 3f 5c 5e 3e 3c 2b 25 3a 40 5c 2f 7e 25 5d 2f 2c 75 6e 3d 7b 74 79 70 65 3a 22 63 6c 61 73 73 22 2c 76 61 6c 75 65 3a 22 5b 23 3f 5e 3e 3c 2b 25 3a 40 2f 7e 25 5d 22 2c 64 65 73 63 72 69 70 74 69 6f 6e 3a 22 5b 23 3f 5e 3e 3c 2b 25 3a 40 2f 7e 25 5d 22 7d 2c 61 6e 3d 22 7b 22 2c 66 6e 3d 7b 74 79 70 65 3a 22 6c 69 74 Data Ascii: l",value:"{!",description:'"{!"'},nn="!}",rn={type:"literal",value:"!}",description:'"!}"'},sn=function(e){return kr(["comment",e.join("")])},on=/^[#?\^><+%:@\/~%]/,un={type:"class",value:"[#?^><+%:@/~%]",description:"[#?^><+%:@/~%]"},an="{",fn={type:"lit

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.8	49765	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:05 UTC	399	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/router.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:06 UTC	790	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:05 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6737ef17-4cc" Expires: Fri, 05 Dec 2025 19:20:05 GMT Last-Modified: Sat, 16 Nov 2024 01:02:15 GMT Paypal-Debug-Id: 60ef7b5f28cf2 Server: ECAcc (lhd/35FB) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-000000000000000000060ef7b5f28cf2-18d543d6ddf101d6-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 1228 Connection: close
2024-12-05 19:20:06 UTC	1228	IN	Data Raw: 64 65 66 69 6e 65 28 5b 22 6e 65 77 67 61 74 22 2c 22 6a 71 75 65 72 79 22 2c 22 62 61 63 6b 62 6f 6e 65 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 5b 22 69 6e 6a 65 63 74 49 66 72 61 6d 65 54 65 73 74 22 5d 2c 69 2c 73 2c 6f 2c 75 3b 72 65 74 75 72 6e 20 69 3d 6e 2e 52 6f 75 74 65 72 2e 65 78 74 65 6e 64 28 7b 72 6f 75 74 65 73 3a 7b 22 22 3a 22 73 68 6f 77 4c 61 6e 64 69 6e 67 22 2c 22 3f 2a 71 75 65 72 79 53 74 72 69 6e 67 22 3a 22 73 68 6f 77 4c 61 6e 64 69 6e 67 22 2c 22 69 6e 6a 65 63 74 2f 2a 71 75 65 72 79 53 74 72 69 6e 67 22 3a 22 73 68 6f 77 4c 61 6e 64 69 6e 67 22 2c 61 75 74 68 6f 72 69 7a 65 3a 22 73 68 6f 77 4c 61 6e 64 69 6e 67 22 2c 22 61 75 74 68 6f 72 69 7a 65 3f 2a Data Ascii: define(["newgat","jquery","backbone"],function(e,t,n){"use strict";var r=["injectIframeTest"],i,s,o,u;return i=n.Router.extend({routes:{"":"showLanding","?queryString":"showLanding","inject/queryString":"showLanding",authorize:"showLanding","authorize?*

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.8	49764	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:05 UTC	576	OUT	GET /pa/3pjs/tl/6.4.65/patleaf.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.paypal.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:06 UTC	801	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:05 GMT DC: ccg11-origin-www-1.paypal.com Etag: "6735ac2d-267db+ident" Expires: Thu, 05 Dec 2024 20:20:05 GMT Last-Modified: Thu, 14 Nov 2024 07:52:13 GMT Paypal-Debug-Id: 00ad561ff8f4d Server: ECAcc (lhd/35C9) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-000000000000000000000ad561ff8f4d-9cda0a0444205ecc-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 157659 Connection: close
2024-12-05 19:20:06 UTC	16383	IN	Data Raw: 69 66 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 77 69 6e 64 6f 77 2e 70 61 6b 6f 3d 74 28 29 7d 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 69 28 73 2c 68 2c 6c 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 69 66 28 21 68 5b 65 5d 29 7b 69 66 28 21 73 5b 65 5d 29 7b 76 61 72 20 72 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 26 26 72 65 71 75 69 72 65 3b 69 66 28 21 74 26 26 72 29 72 65 74 75 72 6e 20 72 28 65 2c 21 30 29 3b 69 66 28 5f 29 72 65 74 75 72 6e 20 5f 28 65 2c 21 30 29 3b 74 68 72 6f 77 28 72 3d 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 6d 6f 64 75 6c 65 20 27 22 2b 65 2b 22 27 22 29 29 2e 63 6f 64 65 3d 22 4d 4f 44 55 4c 45 5f 4e 4f 54 Data Ascii: if(function(t){window.pako=t()}(function(){return function i(s,h,l){function o(e,t){if(!h[e]){if(!s[e]){var r="function"==typeof require&&require;if(!t&&r)return r(e,!0);if(_)return _(e,!0);throw(r=new Error("Cannot find module '"+e+"'")).code="MODULE_NOT
2024-12-05 19:20:06 UTC	16383	IN	Data Raw: 77 72 61 70 3c 3d 30 29 26 26 28 32 3d 3d 3d 6e 2e 77 72 61 70 3f 28 4c 28 6e 2c 32 35 35 26 74 2e 61 64 6c 65 72 29 2c 4c 28 6e 2c 74 2e 61 64 6c 65 72 3e 3e 38 26 32 35 35 29 2c 4c 28 6e 2c 74 2e 61 64 6c 65 72 3e 3e 31 36 26 32 35 35 29 2c 4c 28 6e 2c 74 2e 61 64 6c 65 72 3e 3e 32 34 26 32 35 35 29 2c 4c 28 6e 2c 32 35 35 26 74 2e 74 6f 74 61 6c 5f 69 6e 29 2c 4c 28 6e 2c 74 2e 74 6f 74 61 6c 5f 69 6e 3e 3e 38 26 32 35 35 29 2c 4c 28 6e 2c 74 2e 74 6f 74 61 6c 5f 69 6e 3e 3e 31 36 26 32 35 35 29 2c 4c 28 6e 2c 74 2e 74 6f 74 61 6c 5f 69 6e 3e 3e 32 34 26 32 35 35 29 29 3a 28 4e 28 6e 2c 74 2e 61 64 6c 65 72 3e 3e 3e 31 36 29 2c 4e 28 6e 2c 36 35 35 33 35 26 74 2e 61 64 6c 65 72 29 29 2c 71 28 74 29 2c 30 3c 6e 2e 77 72 61 70 26 26 28 6e 2e 77 72 61 70 Data Ascii: wrap<=0)&&(2===n.wrap?(L(n,255&t.adler),L(n,t.adler>>8&255),L(n,t.adler>>16&255),L(n,t.adler>>24&255),L(n,255&t.total_in),L(n,t.total_in>>8&255),L(n,t.total_in>>16&255),L(n,t.total_in>>24&255)):(N(n,t.adler>>>16),N(n,65535&t.adler)),q(t),0<n.wrap&&(n.wrap
2024-12-05 19:20:06 UTC	2	IN	Data Raw: 65 22 Data Ascii: e"
2024-12-05 19:20:06 UTC	16383	IN	Data Raw: 29 3b 72 65 74 75 72 6e 20 75 2e 67 65 74 28 65 29 2e 73 65 74 28 74 2c 6e 29 2c 63 2e 67 65 74 28 65 29 2e 70 75 73 68 28 74 29 2c 6e 7d 28 6e 2c 65 29 29 7d 29 2c 69 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 74 2c 6e 75 6c 6c 29 2c 6f 2e 6f 62 73 65 72 76 65 28 69 2c 70 29 2c 6e 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 4f 28 74 2c 78 28 74 2c 65 29 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 52 28 74 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 6e 2e 73 68 65 65 74 73 3d 5b 5d 2c 68 2e 73 65 74 28 6e 2c 74 29 2c 6d 2e 73 65 74 28 6e 2c 5b 5d 29 2c 79 2e 73 65 74 28 6e 2c 6e 65 77 20 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6f 29 7b 64 6f 63 75 6d 65 6e 74 3f 74 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 Data Ascii: );return u.get(e).set(t,n),c.get(e).push(t),n}(n,e))}),i.insertBefore(t,null),o.observe(i,p),n.forEach(function(t){O(t,x(t,e))})}function R(t){var n=this;n.sheets=[],h.set(n,t),m.set(n,[]),y.set(n,new MutationObserver(function(t,o){document?t.forEach(func
2024-12-05 19:20:06 UTC	16383	IN	Data Raw: 6c 28 65 29 3b 66 6f 72 28 74 3d 30 2c 6f 3d 69 3f 69 2e 6c 65 6e 67 74 68 3a 30 3b 74 3c 6f 3b 74 2b 3d 31 29 69 66 28 69 5b 74 5d 26 26 69 5b 74 5d 3d 3d 3d 45 29 7b 68 3d 21 30 3b 62 72 65 61 6b 7d 7d 29 29 2c 21 68 29 29 26 26 28 6b 2e 69 73 55 6e 6c 6f 61 64 28 65 29 26 26 28 78 3d 22 75 6e 6c 6f 61 64 69 6e 67 22 29 2c 22 63 68 61 6e 67 65 22 21 3d 3d 65 2e 74 79 70 65 7c 7c 21 64 2e 69 73 4c 65 67 61 63 79 49 45 7c 7c 22 63 68 65 63 6b 62 6f 78 22 21 3d 3d 65 2e 74 61 72 67 65 74 2e 65 6c 65 6d 65 6e 74 2e 74 79 70 65 26 26 22 72 61 64 69 6f 22 21 3d 3d 65 2e 74 61 72 67 65 74 2e 65 6c 65 6d 65 6e 74 2e 74 79 70 65 29 29 7b 69 66 28 22 70 72 6f 70 65 72 74 79 63 68 61 6e 67 65 22 3d 3d 3d 65 2e 74 79 70 65 29 7b 69 66 28 22 63 68 65 63 6b 65 64 22 Data Ascii: l(e);for(t=0,o=i?i.length:0;t<o;t+=1)if(i[t]&&i[t]===E){h=!0;break}})),!h))&&(k.isUnload(e)&&(x="unloading"),"change"!==e.type\|\|!d.isLegacyIE\|\|"checkbox"!==e.target.element.type&&"radio"!==e.target.element.type)){if("propertychange"===e.type){if("checked"
2024-12-05 19:20:06 UTC	16383	IN	Data Raw: 72 69 65 6e 74 61 74 69 6f 6e 29 7b 63 61 73 65 22 6c 61 6e 64 73 63 61 70 65 2d 70 72 69 6d 61 72 79 22 3a 63 61 73 65 22 6c 61 6e 64 73 63 61 70 65 2d 73 65 63 6f 6e 64 61 72 79 22 3a 65 3d 39 30 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 65 3d 30 7d 72 65 74 75 72 6e 20 65 7d 2c 63 6c 6f 67 3a 28 77 69 6e 64 6f 77 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2c 74 72 69 6d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 74 6f 53 74 72 69 6e 67 3f 65 2e 74 72 69 6d 3f 65 2e 74 72 69 6d 28 29 3a 65 2e 74 6f 53 74 72 69 6e 67 28 29 2e 72 65 70 6c 61 63 65 28 2f 5e 5c 73 2b 7c 5c 73 2b 24 2f 67 2c 22 22 29 3a 65 7d 2c 6c 74 72 69 6d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 74 6f 53 74 72 69 6e 67 Data Ascii: rientation){case"landscape-primary":case"landscape-secondary":e=90;break;default:e=0}return e},clog:(window,function(){}),trim:function(e){return e&&e.toString?e.trim?e.trim():e.toString().replace(/^\s+\|\s+$/g,""):e},ltrim:function(e){return e&&e.toString
2024-12-05 19:20:06 UTC	16383	IN	Data Raw: 74 54 6f 50 61 72 65 6e 74 4c 69 6e 6b 22 2c 21 30 29 2c 75 3d 6e 2e 67 65 74 56 61 6c 75 65 28 61 2c 22 6c 6f 67 41 74 74 72 69 62 75 74 65 73 22 2c 5b 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 74 29 7b 6c 65 74 20 6e 2c 6f 2c 69 3b 69 66 28 21 65 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 69 66 28 21 28 69 3d 76 6f 69 64 20 30 21 3d 3d 74 3f 74 3a 65 2e 69 64 29 7c 7c 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 69 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 66 6f 72 28 6e 3d 30 2c 6f 3d 73 2e 6c 65 6e 67 74 68 3b 6e 3c 6f 3b 6e 2b 3d 31 29 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 73 5b 6e 5d 29 7b 69 66 28 69 3d 3d 3d 73 5b 6e 5d 29 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 65 6c 73 65 20 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 Data Ascii: tToParentLink",!0),u=n.getValue(a,"logAttributes",[])}function m(e,t){let n,o,i;if(!e)return null;if(!(i=void 0!==t?t:e.id)\|\|"string"!=typeof i)return null;for(n=0,o=s.length;n<o;n+=1)if("string"==typeof s[n]){if(i===s[n])return null}else if("object"==typ
2024-12-05 19:20:06 UTC	16383	IN	Data Raw: 72 67 65 74 28 73 29 3a 73 3d 6e 75 6c 6c 29 2c 65 2e 61 74 74 72 69 62 75 74 65 73 3d 5b 7b 6e 61 6d 65 3a 63 2c 6f 6c 64 56 61 6c 75 65 3a 74 2e 6f 6c 64 56 61 6c 75 65 2c 76 61 6c 75 65 3a 73 3f 73 2e 63 75 72 72 53 74 61 74 65 2e 76 61 6c 75 65 3a 74 2e 74 61 72 67 65 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 63 29 7d 5d 3b 76 61 72 20 75 3d 65 2e 61 74 74 72 69 62 75 74 65 73 5b 30 5d 3b 69 66 28 75 2e 6f 6c 64 56 61 6c 75 65 21 3d 3d 75 2e 76 61 6c 75 65 29 7b 66 6f 72 28 6f 3d 30 2c 69 3d 79 2e 6c 65 6e 67 74 68 2c 61 3d 21 31 3b 6f 3c 69 3b 6f 2b 3d 31 29 69 66 28 73 3d 79 5b 6f 5d 2c 65 2e 69 73 53 61 6d 65 28 73 29 29 7b 73 2e 61 74 74 72 69 62 75 74 65 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 6c 65 74 20 6e 2c 6f 2c 69 2c 72 3b 66 6f Data Ascii: rget(s):s=null),e.attributes=[{name:c,oldValue:t.oldValue,value:s?s.currState.value:t.target.getAttribute(c)}];var u=e.attributes[0];if(u.oldValue!==u.value){for(o=0,i=y.length,a=!1;o<i;o+=1)if(s=y[o],e.isSame(s)){s.attributes=function(e,t){let n,o,i,r;fo
2024-12-05 19:20:06 UTC	16383	IN	Data Raw: 6c 65 6e 67 74 68 3b 74 3c 6f 3b 74 2b 3d 31 29 6c 5b 74 5d 2e 72 6f 6f 74 26 26 28 63 2b 3d 6c 5b 74 5d 2e 72 6f 6f 74 2e 6c 65 6e 67 74 68 29 7d 72 65 74 75 72 6e 20 63 7d 28 61 29 29 3e 74 2e 6d 61 78 4c 65 6e 67 74 68 26 26 28 61 3d 7b 65 72 72 6f 72 43 6f 64 65 3a 31 30 31 2c 65 72 72 6f 72 3a 22 43 61 70 74 75 72 65 64 20 6c 65 6e 67 74 68 20 28 22 2b 73 2b 22 29 20 65 78 63 65 65 64 65 64 20 6c 69 6d 69 74 20 28 22 2b 74 2e 6d 61 78 4c 65 6e 67 74 68 2b 22 29 2e 22 7d 29 7d 72 65 74 75 72 6e 20 61 7d 7d 7d 29 2c 54 4c 54 2e 61 64 64 53 65 72 76 69 63 65 28 22 65 6e 63 6f 64 65 72 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6c 65 74 20 74 3d 7b 7d 2c 6e 3d 6e 75 6c 6c 2c 6f 3d 6e 75 6c 6c 2c 69 3d 21 31 3b 66 75 Data Ascii: length;t<o;t+=1)l[t].root&&(c+=l[t].root.length)}return c}(a))>t.maxLength&&(a={errorCode:101,error:"Captured length ("+s+") exceeded limit ("+t.maxLength+")."})}return a}}}),TLT.addService("encoder",function(e){"use strict";let t={},n=null,o=null,i=!1;fu
2024-12-05 19:20:06 UTC	16383	IN	Data Raw: 3a 28 6c 3d 74 2e 6c 65 6e 67 74 68 2c 76 28 65 2c 74 29 29 7d 2c 65 29 7d 28 32 35 2c 65 29 7d 2c 33 30 30 29 7d 29 3a 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 65 7c 7c 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 7c 7c 6e 75 6c 6c 3d 3d 3d 65 7c 7c 6e 65 77 20 50 72 6f 78 79 28 65 2c 7b 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 79 28 29 2c 21 30 7d 7d 29 26 26 79 28 29 29 7d 72 65 74 75 72 6e 7b 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 3d 65 2e 67 65 74 43 6f 6e 66 69 67 28 29 2c 6f 3d 21 30 2c 61 3d 5b 5d 2c 74 2e 64 61 74 61 4f 62 6a 65 63 74 73 29 66 6f 72 28 63 6f 6e 73 74 20 65 20 6f 66 20 61 3d 74 2e 64 61 74 61 4f 62 6a 65 63 74 73 29 69 66 28 65 2e 72 75 6c 65 73 26 26 65 2e Data Ascii: :(l=t.length,v(e,t))},e)}(25,e)},300)}):"object"!=typeof e\|\|Array.isArray(e)\|\|null===e\|\|new Proxy(e,{set:function(e,t,n){return y(),!0}})&&y())}return{init:function(){if(t=e.getConfig(),o=!0,a=[],t.dataObjects)for(const e of a=t.dataObjects)if(e.rules&&e.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.8	49766	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:06 UTC	576	OUT	GET /martech/tm/paypal/mktconf.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.paypal.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:06 UTC	797	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:06 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"673b68e7-8e2a9" Expires: Thu, 05 Dec 2024 20:20:06 GMT Last-Modified: Mon, 18 Nov 2024 16:18:47 GMT Paypal-Debug-Id: 5a5b15fcc5fdc Server: ECAcc (lhd/3586) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000005a5b15fcc5fdc-4fc7c3425c896b48-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 582313 Connection: close
2024-12-05 19:20:06 UTC	16383	IN	Data Raw: 2f 2a 21 20 32 30 32 34 20 64 6c 2d 70 70 2d 6c 61 74 6d 40 70 61 79 70 61 6c 2e 63 6f 6d 20 76 65 72 28 31 2e 31 2e 30 29 20 2a 2f 0a 2f 2a 0a 2a 20 6d 6b 74 63 6f 6e 66 2e 6a 73 20 76 31 2e 31 2e 30 20 2d 20 31 31 2d 31 38 2d 32 30 32 34 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 32 34 20 64 6c 2d 70 70 2d 6c 61 74 6d 40 70 61 79 70 61 6c 2e 63 6f 6d 0a 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 0a 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 5f 69 74 65 72 61 62 6c 65 54 6f 41 72 72 61 79 4c 69 6d 69 74 28 61 72 72 2c 20 69 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 5f 69 20 3d 20 6e 75 6c 6c 20 3d 3d 20 61 72 Data Ascii: /! 2024 dl-pp-latm@paypal.com ver(1.1.0) //** mktconf.js v1.1.0 - 11-18-2024* Copyright (c) 2024 dl-pp-latm@paypal.com*/(function () { 'use strict'; (function () { function _iterableToArrayLimit(arr, i) { var _i = null == ar
2024-12-05 19:20:06 UTC	16383	IN	Data Raw: 64 7c 69 6e 7c 6a 70 7c 6b 72 7c 6d 79 7c 6e 7a 7c 70 68 7c 73 67 7c 74 68 7c 74 77 7c 76 6e 27 2c 20 27 66 65 74 63 68 43 6f 75 6e 74 72 79 27 5d 0a 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 27 76 61 72 73 27 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 73 65 6e 64 5f 74 6f 27 3a 20 27 41 57 2d 39 36 35 33 35 32 38 36 30 2f 6c 46 56 39 43 4f 65 34 76 39 67 42 45 4a 79 37 71 4d 77 44 27 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 2c 20 7b 0a 20 20 20 20 20 20 20 20 20 20 27 6e 61 6d 65 27 3a 20 27 67 61 27 2c 0a 20 20 20 20 20 20 20 20 20 20 27 76 61 72 73 27 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 73 65 6e 64 5f 74 6f 27 3a 20 27 55 41 2d 35 33 33 38 39 37 31 38 2d 31 32 27 2c 0a 20 20 20 Data Ascii: d\|in\|jp\|kr\|my\|nz\|ph\|sg\|th\|tw\|vn', 'fetchCountry'] }, 'vars': { 'send_to': 'AW-965352860/lFV9COe4v9gBEJy7qMwD' } }, { 'name': 'ga', 'vars': { 'send_to': 'UA-53389718-12',
2024-12-05 19:20:06 UTC	16383	IN	Data Raw: 20 20 20 20 20 27 64 65 66 61 75 6c 74 56 61 6c 27 3a 20 27 27 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 65 76 65 6e 74 5f 6c 61 62 65 6c 27 3a 20 27 73 74 65 70 20 37 3a 20 65 6e 74 65 72 20 70 65 72 73 6f 6e 61 6c 20 69 6e 66 6f 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 70 61 67 65 5f 70 61 74 68 27 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 27 74 79 70 65 27 3a 20 27 76 61 72 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 27 70 61 74 68 27 3a 20 27 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 27 64 65 66 61 75 6c 74 56 61 6c 27 3a 20 27 27 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 70 61 Data Ascii: 'defaultVal': '' }, 'event_label': 'step 7: enter personal info', 'page_path': { 'type': 'var', 'path': 'location.pathname', 'defaultVal': '' }, 'pa
2024-12-05 19:20:06 UTC	3	IN	Data Raw: 73 6f 6e Data Ascii: son
2024-12-05 19:20:06 UTC	16383	IN	Data Raw: 61 6c 3a 70 72 6f 64 75 63 74 3a 64 69 67 69 74 61 6c 2d 77 61 6c 6c 65 74 2d 73 65 6e 64 2d 72 65 63 65 69 76 65 2d 6d 6f 6e 65 79 2f 73 74 61 72 74 2d 73 65 6c 6c 69 6e 67 3a 3a 3a 7c 6d 61 69 6e 3a 6d 6b 74 67 3a 70 65 72 73 6f 6e 61 6c 3a 70 72 6f 64 75 63 74 3a 64 69 67 69 74 61 6c 2d 77 61 6c 6c 65 74 2d 6d 61 6e 61 67 65 2d 6d 6f 6e 65 79 3a 3a 3a 7c 6d 61 69 6e 3a 6d 6b 74 67 3a 70 65 72 73 6f 6e 61 6c 3a 70 72 6f 64 75 63 74 3a 64 69 67 69 74 61 6c 2d 77 61 6c 6c 65 74 2d 77 61 79 73 2d 74 6f 2d 70 61 79 2f 61 64 64 2d 70 61 79 6d 65 6e 74 2d 6d 65 74 68 6f 64 3a 3a 3a 7c 6d 61 69 6e 3a 6d 6b 74 67 3a 70 65 72 73 6f 6e 61 6c 3a 73 65 63 75 72 69 74 79 3a 64 69 67 69 74 61 6c 2d 77 61 6c 6c 65 74 2d 73 65 63 75 72 69 74 79 2d 61 6e 64 2d 70 72 6f Data Ascii: al:product:digital-wallet-send-receive-money/start-selling:::\|main:mktg:personal:product:digital-wallet-manage-money:::\|main:mktg:personal:product:digital-wallet-ways-to-pay/add-payment-method:::\|main:mktg:personal:security:digital-wallet-security-and-pro
2024-12-05 19:20:07 UTC	16383	IN	Data Raw: 20 20 20 20 27 64 65 66 61 75 6c 74 56 61 6c 27 3a 20 27 27 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 2c 20 7b 0a 20 20 20 20 20 20 20 20 20 20 27 6e 61 6d 65 27 3a 20 27 67 61 27 2c 0a 20 20 20 20 20 20 20 20 20 20 27 76 61 72 73 27 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 73 65 6e 64 5f 74 6f 27 3a 20 27 55 41 2d 35 33 33 38 39 37 31 38 2d 31 32 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 68 69 74 54 79 70 65 27 3a 20 27 65 76 65 6e 74 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 65 76 65 6e 74 5f 63 61 74 65 67 6f 72 79 27 3a 20 27 63 6f 6e 73 75 6d 65 72 20 63 72 65 64 69 74 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 65 76 65 6e 74 5f 61 63 74 69 6f 6e 27 3a 20 27 Data Ascii: 'defaultVal': '' } } }, { 'name': 'ga', 'vars': { 'send_to': 'UA-53389718-12', 'hitType': 'event', 'event_category': 'consumer credit', 'event_action': '
2024-12-05 19:20:07 UTC	16383	IN	Data Raw: 20 27 74 79 70 65 27 3a 20 27 66 6e 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 6e 61 6d 65 27 3a 20 27 63 6f 6e 64 69 74 69 6f 6e 61 6c 56 61 6c 75 65 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 61 72 67 73 27 3a 20 5b 27 61 75 7c 63 32 7c 63 6e 7c 68 6b 7c 69 64 7c 69 6e 7c 6a 70 7c 6b 72 7c 6d 79 7c 6e 7a 7c 70 68 7c 73 67 7c 74 68 7c 74 77 7c 76 6e 27 2c 20 27 66 65 74 63 68 43 6f 75 6e 74 72 79 27 5d 0a 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 27 76 61 72 73 27 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 73 65 6e 64 5f 74 6f 27 3a 20 27 41 57 2d 39 36 35 33 35 32 38 36 30 2f 59 49 52 42 43 4b 6a 70 36 2d 41 42 45 4a 79 37 71 4d 77 44 27 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 2c 20 Data Ascii: 'type': 'fn', 'name': 'conditionalValue', 'args': ['au\|c2\|cn\|hk\|id\|in\|jp\|kr\|my\|nz\|ph\|sg\|th\|tw\|vn', 'fetchCountry'] }, 'vars': { 'send_to': 'AW-965352860/YIRBCKjp6-ABEJy7qMwD' } },
2024-12-05 19:20:07 UTC	16383	IN	Data Raw: 64 6d 7c 64 6f 7c 65 63 7c 66 6b 7c 67 64 7c 67 74 7c 67 79 7c 68 6e 7c 6a 6d 7c 6b 6e 7c 6b 79 7c 6c 63 7c 6d 73 7c 6d 78 7c 6e 69 7c 70 61 7c 70 65 7c 70 79 7c 73 72 7c 73 76 7c 74 63 7c 74 74 7c 75 79 7c 76 63 7c 76 65 7c 76 67 27 2c 20 27 66 65 74 63 68 43 6f 75 6e 74 72 79 27 5d 0a 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 27 76 61 72 73 27 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 73 65 6e 64 5f 74 6f 27 3a 20 27 41 57 2d 39 39 33 37 30 31 30 34 35 2f 46 76 37 37 43 49 33 6e 32 70 63 59 45 4c 58 5a 36 74 6b 44 27 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 2c 20 7b 0a 20 20 20 20 20 20 20 20 20 20 27 6e 61 6d 65 27 3a 20 27 67 61 64 73 27 2c 0a 20 20 20 20 20 20 20 20 20 20 27 65 6e 61 62 6c Data Ascii: dm\|do\|ec\|fk\|gd\|gt\|gy\|hn\|jm\|kn\|ky\|lc\|ms\|mx\|ni\|pa\|pe\|py\|sr\|sv\|tc\|tt\|uy\|vc\|ve\|vg', 'fetchCountry'] }, 'vars': { 'send_to': 'AW-993701045/Fv77CI3n2pcYELXZ6tkD' } }, { 'name': 'gads', 'enabl
2024-12-05 19:20:07 UTC	16383	IN	Data Raw: 20 20 20 20 20 20 20 20 20 27 76 61 72 73 27 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 73 65 6e 64 5f 74 6f 27 3a 20 27 41 57 2d 39 39 33 37 30 31 30 34 35 2f 58 68 49 34 43 4d 62 51 36 49 41 43 45 4c 58 5a 36 74 6b 44 27 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 2c 20 7b 0a 20 20 20 20 20 20 20 20 20 20 27 6e 61 6d 65 27 3a 20 27 67 61 64 73 27 2c 0a 20 20 20 20 20 20 20 20 20 20 27 65 6e 61 62 6c 65 27 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 74 79 70 65 27 3a 20 27 66 6e 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 6e 61 6d 65 27 3a 20 27 63 6f 6e 64 69 74 69 6f 6e 61 6c 56 61 6c 75 65 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 61 72 67 73 27 3a 20 5b 27 61 64 7c 61 65 7c 61 66 7c 61 6c 7c 61 6d 7c 61 Data Ascii: 'vars': { 'send_to': 'AW-993701045/XhI4CMbQ6IACELXZ6tkD' } }, { 'name': 'gads', 'enable': { 'type': 'fn', 'name': 'conditionalValue', 'args': ['ad\|ae\|af\|al\|am\|a
2024-12-05 19:20:07 UTC	16383	IN	Data Raw: 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 73 65 6e 64 5f 74 6f 27 3a 20 27 55 41 2d 35 33 33 38 39 37 31 38 2d 31 32 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 68 69 74 54 79 70 65 27 3a 20 27 65 76 65 6e 74 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 65 76 65 6e 74 5f 63 61 74 65 67 6f 72 79 27 3a 20 27 44 43 4d 3a 20 50 50 43 72 65 64 69 74 41 70 70 46 69 6e 44 65 63 6c 69 6e 65 64 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 65 76 65 6e 74 5f 61 63 74 69 6f 6e 27 3a 20 27 66 69 6e 69 73 68 20 64 65 63 6c 69 6e 65 64 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 65 76 65 6e 74 5f 6c 61 62 65 6c 27 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 27 74 79 70 65 27 3a 20 27 76 61 72 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: { 'send_to': 'UA-53389718-12', 'hitType': 'event', 'event_category': 'DCM: PPCreditAppFinDeclined', 'event_action': 'finish declined', 'event_label': { 'type': 'var',

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.8	49767	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:06 UTC	614	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/browser_modules/dust-makara-helpers/browser.amd.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:06 UTC	791	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:06 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6737ef17-116b" Expires: Fri, 05 Dec 2025 19:20:06 GMT Last-Modified: Sat, 16 Nov 2024 01:02:15 GMT Paypal-Debug-Id: 8607a2cd8ed8e Server: ECAcc (lhd/35C5) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000008607a2cd8ed8e-2aba28ff7051934c-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 4459 Connection: close
2024-12-05 19:20:06 UTC	4459	IN	Data Raw: 64 65 66 69 6e 65 28 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 74 5b 72 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 72 2c 6c 6f 61 64 65 64 3a 21 31 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 69 2e 6c 6f 61 64 65 64 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 74 3d 7b 7d 3b 72 65 74 75 72 6e 20 6e 2e 6d 3d 65 2c 6e 2e 63 3d 74 2c 6e 2e 70 3d 22 22 2c 6e 28 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 Data Ascii: define([],function(){return function(e){function n(r){if(t[r])return t[r].exports;var i=t[r]={exports:{},id:r,loaded:!1};return e[r].call(i.exports,i,i.exports,n),i.loaded=!0,i.exports}var t={};return n.m=e,n.c=t,n.p="",n(0)}([function(e,t,n){"use strict"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.8	49768	18.66.161.81	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:06 UTC	650	OUT	POST /js/ HTTP/1.1 Host: ddbm2.paypal.com Connection: keep-alive Content-Length: 5845 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.paypal.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:06 UTC	5845	OUT	Data Raw: 6a 73 44 61 74 61 3d 25 37 42 25 32 32 74 74 73 74 25 32 32 25 33 41 31 32 2e 32 39 39 39 39 39 39 39 39 39 35 39 32 35 35 25 32 43 25 32 32 69 66 6f 76 25 32 32 25 33 41 66 61 6c 73 65 25 32 43 25 32 32 62 72 5f 68 25 32 32 25 33 41 39 30 37 25 32 43 25 32 32 62 72 5f 77 25 32 32 25 33 41 31 32 38 30 25 32 43 25 32 32 69 73 66 25 32 32 25 33 41 66 61 6c 73 65 25 32 43 25 32 32 6e 64 64 63 25 32 32 25 33 41 30 25 32 43 25 32 32 72 73 5f 68 25 32 32 25 33 41 31 30 32 34 25 32 43 25 32 32 72 73 5f 77 25 32 32 25 33 41 31 32 38 30 25 32 43 25 32 32 72 73 5f 63 64 25 32 32 25 33 41 32 34 25 32 43 25 32 32 70 68 65 25 32 32 25 33 41 66 61 6c 73 65 25 32 43 25 32 32 6e 6d 25 32 32 25 33 41 66 61 6c 73 65 25 32 43 25 32 32 6a 73 66 25 32 32 25 33 41 66 61 6c 73 Data Ascii: jsData=%7B%22ttst%22%3A12.299999999959255%2C%22ifov%22%3Afalse%2C%22br_h%22%3A907%2C%22br_w%22%3A1280%2C%22isf%22%3Afalse%2C%22nddc%22%3A0%2C%22rs_h%22%3A1024%2C%22rs_w%22%3A1280%2C%22rs_cd%22%3A24%2C%22phe%22%3Afalse%2C%22nm%22%3Afalse%2C%22jsf%22%3Afals
2024-12-05 19:20:06 UTC	577	IN	HTTP/1.1 200 OK Content-Type: application/json;charset=utf-8 Content-Length: 230 Connection: close Date: Thu, 05 Dec 2024 19:20:06 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: DataDome Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate Expires: 0 X-Cache: Miss from cloudfront Via: 1.1 b4620d66a028319b68950536b2441dc8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH52-C1 X-Amz-Cf-Id: TsyLnO6XJ7-H6vMkPcjW9R3grqQsX7FxVYay9vG6adxvWg5Yk2Eq1g== X-Content-Type-Options: nosniff Access-Control-Allow-Origin: *
2024-12-05 19:20:06 UTC	230	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 63 6f 6f 6b 69 65 22 3a 22 64 61 74 61 64 6f 6d 65 3d 32 45 6d 74 51 71 6a 59 4a 69 6c 55 7e 44 58 79 6d 56 4d 47 4d 30 50 53 54 6a 37 78 50 67 36 78 70 78 6e 4d 69 66 6f 41 78 62 32 65 43 41 66 4f 55 39 7e 78 72 4b 43 48 77 30 51 42 48 4c 4e 56 38 30 5a 58 47 4e 6f 41 6b 4c 57 55 58 6a 58 6a 78 56 48 53 6d 4a 5a 37 62 4e 35 4e 67 4b 66 78 55 57 7e 7a 73 66 73 34 48 69 61 68 75 34 65 6c 6b 77 6d 68 55 70 70 31 4c 70 76 70 39 35 56 63 3b 20 4d 61 78 2d 41 67 65 3d 32 35 39 32 30 30 30 3b 20 44 6f 6d 61 69 6e 3d 2e 70 61 79 70 61 6c 2e 63 6f 6d 3b 20 50 61 74 68 3d 2f 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4c 61 78 22 7d Data Ascii: {"status":200,"cookie":"datadome=2EmtQqjYJilU~DXymVMGM0PSTj7xPg6xpxnMifoAxb2eCAfOU9~xrKCHw0QBHLNV80ZXGNoAkLWUXjXjxVHSmJZ7bN5NgKfxUW~zsfs4Hiahu4elkwmhUpp1Lpvp95Vc; Max-Age=2592000; Domain=.paypal.com; Path=/; Secure; SameSite=Lax"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.8	49770	172.217.19.195	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:06 UTC	599	OUT	GET /recaptcha/enterprise.js?render=6LdCCOUUAAAAAHTE-Snr6hi4HJGtJk_d1_ce-gWB&hl=en HTTP/1.1 Host: www.recaptcha.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypalobjects.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:07 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Thu, 05 Dec 2024 19:20:06 GMT Date: Thu, 05 Dec 2024 19:20:06 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-05 19:20:07 UTC	641	IN	Data Raw: 37 38 62 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 45 3d 27 65 6e 74 65 72 70 72 69 73 65 27 2c 61 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 2c 67 72 3d 61 5b 45 5d 3d 61 5b 45 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f Data Ascii: 78b/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var E='enterprise',a=w[N]=w[N]\|\|{},gr=a[E]=a[E]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['_
2024-12-05 19:20:07 UTC	1297	IN	Data Raw: 63 68 61 72 73 65 74 3d 27 75 74 66 2d 38 27 3b 76 61 72 20 76 3d 77 2e 6e 61 76 69 67 61 74 6f 72 2c 6d 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 6d 65 74 61 27 29 3b 6d 2e 68 74 74 70 45 71 75 69 76 3d 27 6f 72 69 67 69 6e 2d 74 72 69 61 6c 27 3b 6d 2e 63 6f 6e 74 65 6e 74 3d 27 41 37 75 78 74 6a 33 2b 68 4a 6d 4f 63 5a 46 6f 6f 46 54 30 50 73 32 37 36 50 75 4f 71 47 6e 4d 31 6a 66 6f 50 62 46 76 78 57 70 37 33 56 43 36 30 4c 6e 59 47 7a 61 79 48 56 76 63 46 65 45 69 46 30 71 72 77 79 37 66 51 41 4c 2b 67 47 56 58 55 2b 66 39 49 51 63 41 41 41 43 54 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 33 4a 6c 59 32 46 77 64 47 4e 6f 59 53 35 75 5a 58 51 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 Data Ascii: charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A7uxtj3+hJmOcZFooFT0Ps276PuOqGnM1jfoPbFvxWp73VC60LnYGzayHVvcFeEiF0qrwy7fQAL+gGVXU+f9IQcAAACTeyJvcmlnaW4iOiJodHRwczovL3JlY2FwdGNoYS5uZXQ6NDQzIiwiZmVhdHVyZSI6I
2024-12-05 19:20:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.8	49769	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:06 UTC	611	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/browser_modules/dusthelpers-supplement/index.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:06 UTC	791	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:06 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6737ef17-1ea5" Expires: Fri, 05 Dec 2025 19:20:06 GMT Last-Modified: Sat, 16 Nov 2024 01:02:15 GMT Paypal-Debug-Id: d7a85a1b94a33 Server: ECAcc (lhd/35A5) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000d7a85a1b94a33-c8e3a5fea2514cc8-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 7845 Connection: close
2024-12-05 19:20:06 UTC	7845	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 79 70 65 6f 66 20 64 65 66 69 6e 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 64 65 66 69 6e 65 2e 61 6d 64 26 26 64 65 66 69 6e 65 2e 61 6d 64 2e 64 75 73 74 3d 3d 3d 21 30 3f 64 65 66 69 6e 65 28 5b 22 64 75 73 74 2e 63 6f 72 65 22 5d 2c 74 29 3a 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3d 3d 22 6f 62 6a 65 63 74 22 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 72 65 71 75 69 72 65 28 22 64 75 73 74 6a 73 2d 6c 69 6e 6b 65 64 69 6e 22 29 29 3a 74 28 65 2e 64 75 73 74 29 7d 29 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 20 65 78 74 65 6e 64 28 64 75 73 74 29 7b 66 75 6e 63 74 69 6f 6e 20 74 6f 6b 65 6e 69 7a 65 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 7b 22 28 28 22 3a 31 Data Ascii: (function(e,t){typeof define=="function"&&define.amd&&define.amd.dust===!0?define(["dust.core"],t):typeof exports=="object"?module.exports=t(require("dustjs-linkedin")):t(e.dust)})(this,function extend(dust){function tokenize(t){"use strict";var n={"((":1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.8	49772	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:06 UTC	410	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/widgets/analytics.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:07 UTC	796	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:06 GMT DC: ccg11-origin-www-1.paypal.com Etag: "6737ef1a-3d5+br+ident" Expires: Fri, 05 Dec 2025 19:20:06 GMT Last-Modified: Sat, 16 Nov 2024 01:02:18 GMT Paypal-Debug-Id: a1053b5757c62 Server: ECAcc (lhd/3585) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000a1053b5757c62-38fa3fd4665235ef-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 981 Connection: close
2024-12-05 19:20:07 UTC	981	IN	Data Raw: 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 2c 22 42 61 73 65 56 69 65 77 22 2c 22 6e 65 77 67 61 74 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 74 2e 65 78 74 65 6e 64 28 7b 65 6c 3a 22 62 6f 64 79 22 2c 65 76 65 6e 74 73 3a 7b 22 63 6c 69 63 6b 20 61 5b 64 61 74 61 2d 70 61 67 65 6e 61 6d 65 5d 2c 20 69 6e 70 75 74 5b 64 61 74 61 2d 70 61 67 65 6e 61 6d 65 5d 2c 20 6c 61 62 65 6c 5b 64 61 74 61 2d 70 61 67 65 6e 61 6d 65 5d 22 3a 22 74 72 61 63 6b 4c 69 6e 6b 22 7d 2c 74 72 61 63 6b 4c 69 6e 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 65 28 74 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 29 2c 72 3d 6e 2e 61 74 74 72 28 22 64 61 74 61 2d 70 61 67 65 6e 61 6d 65 22 29 Data Ascii: define(["jquery","BaseView","newgat"],function(e,t,n){"use strict";var r=t.extend({el:"body",events:{"click a[data-pagename], input[data-pagename], label[data-pagename]":"trackLink"},trackLink:function(t){var n=e(t.currentTarget),r=n.attr("data-pagename")

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.8	49771	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:06 UTC	413	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/view/mainContentView.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:07 UTC	792	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:06 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6737ef1a-3198" Expires: Fri, 05 Dec 2025 19:20:06 GMT Last-Modified: Sat, 16 Nov 2024 01:02:18 GMT Paypal-Debug-Id: b209a03ca3fe4 Server: ECAcc (lhd/35E6) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000b209a03ca3fe4-4cd3bdd512c7387f-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 12696 Connection: close
2024-12-05 19:20:07 UTC	12696	IN	Data Raw: 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 2c 22 62 61 63 6b 62 6f 6e 65 22 2c 22 6e 65 77 67 61 74 22 2c 22 70 61 67 65 56 69 65 77 22 2c 22 70 6f 73 74 4d 65 73 73 61 67 65 22 2c 22 61 75 74 68 63 61 70 74 63 68 61 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 69 2c 73 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6f 3d 72 2e 65 78 74 65 6e 64 28 7b 65 6c 3a 22 23 6d 61 69 6e 22 2c 72 6c 6f 67 49 64 73 3a 5b 5d 2c 4c 4f 41 44 49 4e 47 3a 22 6c 6f 61 64 69 6e 67 22 2c 63 75 72 72 65 6e 74 56 69 65 77 54 65 6d 70 6c 61 74 65 3a 75 6e 64 65 66 69 6e 65 64 2c 70 72 65 76 69 6f 75 73 56 69 65 77 54 65 6d 70 6c 61 74 65 3a 22 6e 75 6c 6c 22 2c 63 75 72 72 65 6e 74 56 69 65 77 3a 22 6e 75 6c 6c 22 2c 70 61 67 65 4e 61 6d 65 3a 22 Data Ascii: define(["jquery","backbone","newgat","pageView","postMessage","authcaptcha"],function(e,t,n,r,i,s){"use strict";var o=r.extend({el:"#main",rlogIds:[],LOADING:"loading",currentViewTemplate:undefined,previousViewTemplate:"null",currentView:"null",pageName:"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.8	49773	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:06 UTC	409	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/lib/jquery-3.7.0.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:07 UTC	793	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:06 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6737ef18-1582e" Expires: Fri, 05 Dec 2025 19:20:06 GMT Last-Modified: Sat, 16 Nov 2024 01:02:16 GMT Paypal-Debug-Id: 02b62f404330d Server: ECAcc (lhd/35FB) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-000000000000000000002b62f404330d-ab43c07b79a698aa-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 88110 Connection: close
2024-12-05 19:20:07 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 33 2e 37 2e 30 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 32 33 2d 30 35 2d 31 31 54 31 38 3a 32 39 5a 0a 20 2a 2f 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 79 70 65 6f 66 20 6d Data Ascii: /! jQuery JavaScript Library v3.7.0 * https://jquery.com/ * * Copyright OpenJS Foundation and other contributors * Released under the MIT license * https://jquery.org/license * * Date: 2023-05-11T18:29Z */(function(e,t){"use strict";typeof m
2024-12-05 19:20:07 UTC	1	IN	Data Raw: 65 Data Ascii: e
2024-12-05 19:20:07 UTC	16383	IN	Data Raw: 6c 73 65 20 66 6f 72 28 72 20 69 6e 20 65 29 69 66 28 74 2e 63 61 6c 6c 28 65 5b 72 5d 2c 72 2c 65 5b 72 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 65 7d 2c 74 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3d 22 22 2c 72 3d 30 2c 69 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 21 69 29 77 68 69 6c 65 28 74 3d 65 5b 72 2b 2b 5d 29 6e 2b 3d 53 2e 74 65 78 74 28 74 29 3b 65 6c 73 65 7b 69 66 28 69 3d 3d 3d 31 7c 7c 69 3d 3d 3d 39 7c 7c 69 3d 3d 3d 31 31 29 72 65 74 75 72 6e 20 65 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3b 69 66 28 69 3d 3d 3d 33 7c 7c 69 3d 3d 3d 34 29 72 65 74 75 72 6e 20 65 2e 6e 6f 64 65 56 61 6c 75 65 7d 72 65 74 75 72 6e 20 6e 7d 2c 6d 61 6b 65 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 Data Ascii: lse for(r in e)if(t.call(e[r],r,e[r])===!1)break;return e},text:function(e){var t,n="",r=0,i=e.nodeType;if(!i)while(t=e[r++])n+=S.text(t);else{if(i===1\|\|i===9\|\|i===11)return e.textContent;if(i===3\|\|i===4)return e.nodeValue}return n},makeArray:function(e,t
2024-12-05 19:20:07 UTC	16383	IN	Data Raw: 64 49 6e 64 65 78 2c 65 2e 73 65 6c 65 63 74 65 64 3d 3d 3d 21 30 7d 2c 65 6d 70 74 79 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 65 3d 65 2e 66 69 72 73 74 43 68 69 6c 64 3b 65 3b 65 3d 65 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 69 66 28 65 2e 6e 6f 64 65 54 79 70 65 3c 36 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 70 61 72 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 72 2e 70 73 65 75 64 6f 73 2e 65 6d 70 74 79 28 65 29 7d 2c 68 65 61 64 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 2e 74 65 73 74 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7d 2c 69 6e 70 75 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 58 2e 74 65 73 74 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7d 2c 62 75 74 74 Data Ascii: dIndex,e.selected===!0},empty:function(e){for(e=e.firstChild;e;e=e.nextSibling)if(e.nodeType<6)return!1;return!0},parent:function(e){return!r.pseudos.empty(e)},header:function(e){return V.test(e.nodeName)},input:function(e){return X.test(e.nodeName)},butt
2024-12-05 19:20:07 UTC	2	IN	Data Raw: 2e 68 Data Ascii: .h
2024-12-05 19:20:07 UTC	16383	IN	Data Raw: 61 6e 64 6c 65 72 73 5b 6e 2b 2b 5d 29 26 26 21 61 2e 69 73 49 6d 6d 65 64 69 61 74 65 50 72 6f 70 61 67 61 74 69 6f 6e 53 74 6f 70 70 65 64 28 29 29 69 66 28 21 61 2e 72 6e 61 6d 65 73 70 61 63 65 7c 7c 73 2e 6e 61 6d 65 73 70 61 63 65 3d 3d 3d 21 31 7c 7c 61 2e 72 6e 61 6d 65 73 70 61 63 65 2e 74 65 73 74 28 73 2e 6e 61 6d 65 73 70 61 63 65 29 29 61 2e 68 61 6e 64 6c 65 4f 62 6a 3d 73 2c 61 2e 64 61 74 61 3d 73 2e 64 61 74 61 2c 72 3d 28 28 53 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 5b 73 2e 6f 72 69 67 54 79 70 65 5d 7c 7c 7b 7d 29 2e 68 61 6e 64 6c 65 7c 7c 73 2e 68 61 6e 64 6c 65 72 29 2e 61 70 70 6c 79 28 69 2e 65 6c 65 6d 2c 75 29 2c 72 21 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 28 61 2e 72 65 73 75 6c 74 3d 72 29 3d 3d 3d 21 31 26 26 28 61 2e 70 Data Ascii: andlers[n++])&&!a.isImmediatePropagationStopped())if(!a.rnamespace\|\|s.namespace===!1\|\|a.rnamespace.test(s.namespace))a.handleObj=s,a.data=s.data,r=((S.event.special[s.origType]\|\|{}).handle\|\|s.handler).apply(i.elem,u),r!==undefined&&(a.result=r)===!1&&(a.p
2024-12-05 19:20:07 UTC	16383	IN	Data Raw: 2e 66 78 2e 69 6e 74 65 72 76 61 6c 3d 31 33 2c 53 2e 66 78 2e 73 74 61 72 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 70 6e 29 72 65 74 75 72 6e 3b 70 6e 3d 21 30 2c 6d 6e 28 29 7d 2c 53 2e 66 78 2e 73 74 6f 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 70 6e 3d 6e 75 6c 6c 7d 2c 53 2e 66 78 2e 73 70 65 65 64 73 3d 7b 73 6c 6f 77 3a 36 30 30 2c 66 61 73 74 3a 32 30 30 2c 5f 64 65 66 61 75 6c 74 3a 34 30 30 7d 2c 53 2e 66 6e 2e 64 65 6c 61 79 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 74 3d 53 2e 66 78 3f 53 2e 66 78 2e 73 70 65 65 64 73 5b 74 5d 7c 7c 74 3a 74 2c 6e 3d 6e 7c 7c 22 66 78 22 2c 74 68 69 73 2e 71 75 65 75 65 28 6e 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 29 7b 76 61 72 20 69 3d 65 2e 73 65 74 54 69 6d 65 6f 75 74 28 6e 2c Data Ascii: .fx.interval=13,S.fx.start=function(){if(pn)return;pn=!0,mn()},S.fx.stop=function(){pn=null},S.fx.speeds={slow:600,fast:200,_default:400},S.fn.delay=function(t,n){return t=S.fx?S.fx.speeds[t]\|\|t:t,n=n\|\|"fx",this.queue(n,function(n,r){var i=e.setTimeout(n,
2024-12-05 19:20:07 UTC	6192	IN	Data Raw: 74 3e 22 29 2e 61 74 74 72 28 65 2e 73 63 72 69 70 74 41 74 74 72 73 7c 7c 7b 7d 29 2e 70 72 6f 70 28 7b 63 68 61 72 73 65 74 3a 65 2e 73 63 72 69 70 74 43 68 61 72 73 65 74 2c 73 72 63 3a 65 2e 75 72 6c 7d 29 2e 6f 6e 28 22 6c 6f 61 64 20 65 72 72 6f 72 22 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 2e 72 65 6d 6f 76 65 28 29 2c 6e 3d 6e 75 6c 6c 2c 65 26 26 69 28 65 2e 74 79 70 65 3d 3d 3d 22 65 72 72 6f 72 22 3f 34 30 34 3a 32 30 30 2c 65 2e 74 79 70 65 29 7d 29 2c 6d 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 5b 30 5d 29 7d 2c 61 62 6f 72 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 26 26 6e 28 29 7d 7d 7d 7d 29 3b 76 61 72 20 73 72 3d 5b 5d 2c 6f 72 3d 2f 28 3d 29 5c 3f 28 3f 3d 26 7c 24 29 7c 5c 3f 5c 3f 2f 3b 53 2e 61 6a 61 78 53 65 Data Ascii: t>").attr(e.scriptAttrs\|\|{}).prop({charset:e.scriptCharset,src:e.url}).on("load error",n=function(e){t.remove(),n=null,e&&i(e.type==="error"?404:200,e.type)}),m.head.appendChild(t[0])},abort:function(){n&&n()}}}});var sr=[],or=/(=)\?(?=&\|$)\|\?\?/;S.ajaxSe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.8	49775	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:06 UTC	414	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/lib/underscore-1.13.6.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:07 UTC	792	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:07 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6737ef18-4d5f" Expires: Fri, 05 Dec 2025 19:20:07 GMT Last-Modified: Sat, 16 Nov 2024 01:02:16 GMT Paypal-Debug-Id: da5f9cc121722 Server: ECAcc (lhd/35C7) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000da5f9cc121722-9f60941d6d26c99b-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 19807 Connection: close
2024-12-05 19:20:07 UTC	16383	IN	Data Raw: 2f 2f 20 20 20 20 20 28 63 29 20 32 30 30 39 2d 32 30 32 32 20 4a 65 72 65 6d 79 20 41 73 68 6b 65 6e 61 73 2c 20 4a 75 6c 69 61 6e 20 47 6f 6e 67 67 72 69 6a 70 2c 20 61 6e 64 20 44 6f 63 75 6d 65 6e 74 43 6c 6f 75 64 20 61 6e 64 20 49 6e 76 65 73 74 69 67 61 74 69 76 65 20 52 65 70 6f 72 74 65 72 73 20 26 20 45 64 69 74 6f 72 73 0a 0a 2f 2f 20 20 20 20 20 55 6e 64 65 72 73 63 6f 72 65 20 6d 61 79 20 62 65 20 66 72 65 65 6c 79 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3d 3d 22 6f 62 6a 65 63 74 22 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 6d 6f 64 75 6c 65 Data Ascii: // (c) 2009-2022 Jeremy Ashkenas, Julian Gonggrijp, and DocumentCloud and Investigative Reporters & Editors// Underscore may be freely distributed under the MIT license.(function(e,t){typeof exports=="object"&&typeof module!="undefined"?module
2024-12-05 19:20:07 UTC	1	IN	Data Raw: 29 Data Ascii: )
2024-12-05 19:20:07 UTC	3423	IN	Data Raw: 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 42 69 6e 64 20 6d 75 73 74 20 62 65 20 63 61 6c 6c 65 64 20 6f 6e 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 76 61 72 20 72 3d 77 28 66 75 6e 63 74 69 6f 6e 28 69 29 7b 72 65 74 75 72 6e 20 53 6e 28 65 2c 72 2c 74 2c 74 68 69 73 2c 6e 2e 63 6f 6e 63 61 74 28 69 29 29 7d 29 3b 72 65 74 75 72 6e 20 72 7d 29 2c 4e 6e 3d 51 28 72 74 29 2c 6b 6e 3d 77 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 3d 43 6e 28 74 2c 21 31 2c 21 31 29 3b 76 61 72 20 6e 3d 74 2e 6c 65 6e 67 74 68 3b 69 66 28 6e 3c 31 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 62 69 6e 64 41 6c 6c 20 6d 75 73 74 20 62 65 20 70 61 73 73 65 64 20 66 75 6e 63 74 69 6f 6e 20 6e 61 6d 65 73 22 29 3b 77 68 69 6c 65 28 6e 2d 2d Data Ascii: )throw new TypeError("Bind must be called on a function");var r=w(function(i){return Sn(e,r,t,this,n.concat(i))});return r}),Nn=Q(rt),kn=w(function(e,t){t=Cn(t,!1,!1);var n=t.length;if(n<1)throw new Error("bindAll must be passed function names");while(n--

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.8	49774	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:06 UTC	588	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/lib/dustmotes-iterate.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:07 UTC	789	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:07 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6737ef18-2c1" Expires: Fri, 05 Dec 2025 19:20:07 GMT Last-Modified: Sat, 16 Nov 2024 01:02:16 GMT Paypal-Debug-Id: f04b9eefd7cae Server: ECAcc (lhd/35B7) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000f04b9eefd7cae-2e74c7830acf12e6-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 705 Connection: close
2024-12-05 19:20:07 UTC	705	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 79 70 65 6f 66 20 64 65 66 69 6e 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 64 65 66 69 6e 65 2e 61 6d 64 26 26 64 65 66 69 6e 65 2e 61 6d 64 2e 64 75 73 74 3d 3d 3d 21 30 3f 64 65 66 69 6e 65 28 5b 22 64 75 73 74 2e 63 6f 72 65 22 5d 2c 74 29 3a 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3d 3d 22 6f 62 6a 65 63 74 22 3f 28 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 72 65 71 75 69 72 65 28 22 64 75 73 74 6a 73 2d 6c 69 6e 6b 65 64 69 6e 22 29 29 2c 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 2e 72 65 67 69 73 74 65 72 57 69 74 68 3d 74 29 3a 74 28 65 2e 64 75 73 74 29 7d 29 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 68 65 6c 70 65 72 73 2e 69 74 65 72 61 74 65 3d 66 Data Ascii: (function(e,t){typeof define=="function"&&define.amd&&define.amd.dust===!0?define(["dust.core"],t):typeof module=="object"?(module.exports=t(require("dustjs-linkedin")),module.exports.registerWith=t):t(e.dust)})(this,function(e){return e.helpers.iterate=f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.8	49717	151.101.1.21	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:06 UTC	2950	OUT	POST /signin/client-log HTTP/1.1 Host: www.paypal.com Connection: keep-alive Content-Length: 1697 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/json;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Requested-With: XMLHttpRequest sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.paypal.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.paypal.com/signin/?returnUri=%2Fmyaccount%2Ftransfer%2FpayRequest%2FU-09584045BD498740V%2FU-5R763959NX153980F%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq&id=OoO85MXTLVUkAlgY4sey9A8h.NxxqjO.iYbAWg&expId=p2p&onboardData=%7B%22signUpRequest%22%3A%7B%22method%22%3A%22get%22%2C%22url%22%3A%22https%3A%2F%2Fwww.paypal.com%2Fmyaccount%2Ftransfer%2FguestLogin%2FpayRequest%2FU-09584045BD498740V%2FU-5R763959NX153980F%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq%26id%3DOoO85MXTLVUkAlgY4sey9A8h.NxxqjO.iYbAWg%22%7D%7D&flowContextData=F7WdIOgJmH6-07KTJ7GpdWXhkdDQxLohB4l-G7vuWGaUsw9VWkH3unndZA7YlCRgtETWTIDn9hNnR_R_XfGvdxeCRkDmtXLc6qqtXR9sC3Gp-59lNBELQtpM5xEv0i4rCTpJiBcP2uf4VFrJLL1b5u1XG7JtP5TfW7CNqxSVOxEb9_duKrmtDgpztBtl32bVeoc8BgW5poXyk9lJHcKrYdvBHSdT0mosqrrmaGj2a5uNQdBK70Mwpn9Zddmj0KI1GIZrXWvFcpnuRbvbli2inkizkeV4nR1uyKnBSzFqdPDcK4t7K9B6YiFhb5sS8DaQd7F6oWzSe-J8gPxVURmdwwOxFn1ycN09t9caUdBz1XMuv96GDJywuv2feJdoAI73PNjro1a2cFEKAWnCgtoHqxdBD3A1mVV3OiytkjtEUDdvp0GL3CNOAV9zIrunX_DmbTO6KOe21dniBkeG&v=1&utm [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=c0c49a91e6384eadbaa4a565394e21da1733426393114; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTczMzQyNjM5MzE1OSIsImwiOiIwIiwibSI6IjAifQ; nsid=s%3AGW_RscjBMue_uO0mnkc7Z8KQBUhwfX2j.FFWOARB2%2BuuO26tFpElNMknNGOEOXTm%2FpBrBjPfDp7c; l7_az=dcg15.slc; ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778; ts=vreXpYrS%3D1764962402%26vteXpYrS%3D1733428202%26vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778%26vtyp%3Dnew; tcs=main%3Aunifiedlogin%3A%3A%3Alogin%7CbtnLogin
2024-12-05 19:20:06 UTC	1697	OUT	Data Raw: 7b 22 63 75 72 72 65 6e 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 2e 63 6f 6d 2f 73 69 67 6e 69 6e 2f 3f 72 65 74 75 72 6e 55 72 69 3d 25 32 46 6d 79 61 63 63 6f 75 6e 74 25 32 46 74 72 61 6e 73 66 65 72 25 32 46 70 61 79 52 65 71 75 65 73 74 25 32 46 55 2d 30 39 35 38 34 30 34 35 42 44 34 39 38 37 34 30 56 25 32 46 55 2d 35 52 37 36 33 39 35 39 4e 58 31 35 33 39 38 30 46 25 33 46 63 6c 61 73 73 69 63 55 72 6c 25 33 44 25 32 46 55 53 25 32 46 63 67 69 2d 62 69 6e 25 32 46 25 33 46 63 6d 64 25 33 44 5f 70 72 71 26 69 64 3d 4f 6f 4f 38 35 4d 58 54 4c 56 55 6b 41 6c 67 59 34 73 65 79 39 41 38 68 2e 4e 78 78 71 6a 4f 2e 69 59 62 41 57 67 26 65 78 70 49 64 3d 70 32 70 26 6f 6e 62 6f 61 72 64 44 61 74 61 3d 25 37 42 25 32 32 73 Data Ascii: {"currentUrl":"https://www.paypal.com/signin/?returnUri=%2Fmyaccount%2Ftransfer%2FpayRequest%2FU-09584045BD498740V%2FU-5R763959NX153980F%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq&id=OoO85MXTLVUkAlgY4sey9A8h.NxxqjO.iYbAWg&expId=p2p&onboardData=%7B%22s
2024-12-05 19:20:07 UTC	298	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1852 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Cache-Control: max-age=0, no-cache, no-store, must-revalidate
2024-12-05 19:20:07 UTC	2386	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6e 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 6f 62 6a 65 63 74 73 2e 70 61 79 70 61 6c 2e 63 6e 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 3b 20 73 63 72 69 70 74 2d 73 72 63 20 27 6e 6f 6e 63 65 2d 6c 43 35 71 63 63 70 4a 55 72 65 46 38 78 54 41 53 68 32 65 6f 76 64 4f 38 51 78 66 49 2f 5a 56 53 41 2b 52 6f 76 4e 53 5a 36 68 2b 48 52 78 55 27 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 68 74 74 Data Ascii: Content-Security-Policy: default-src 'self' https://.paypal.com https://.paypal.cn https://.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; script-src 'nonce-lC5qccpJUreF8xTASh2eovdO8QxfI/ZVSA+RovNSZ6h+HRxU' 'self' https://.paypal.com htt
2024-12-05 19:20:07 UTC	1344	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 78 2d 70 70 2d 73 3d 65 79 4a 30 49 6a 6f 69 4d 54 63 7a 4d 7a 51 79 4e 6a 51 77 4e 7a 45 31 4d 69 49 73 49 6d 77 69 4f 69 49 77 49 69 77 69 62 53 49 36 49 6a 41 69 66 51 3b 20 44 6f 6d 61 69 6e 3d 2e 70 61 79 70 61 6c 2e 63 6f 6d 3b 20 50 61 74 68 3d 2f 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 37 5f 61 7a 3d 64 63 67 31 35 2e 73 6c 63 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 70 61 79 70 61 6c 2e 63 6f 6d 3b 20 45 78 70 69 72 65 73 3d 54 68 75 2c 20 30 35 20 44 65 63 20 32 30 32 34 20 31 39 3a 35 30 3a 30 37 20 47 4d 54 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e Data Ascii: Set-Cookie: x-pp-s=eyJ0IjoiMTczMzQyNjQwNzE1MiIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=NoneSet-Cookie: l7_az=dcg15.slc; Path=/; Domain=paypal.com; Expires=Thu, 05 Dec 2024 19:50:07 GMT; HttpOnly; Secure; SameSite=N
2024-12-05 19:20:07 UTC	1378	IN	Data Raw: 7b 22 63 64 6e 48 6f 73 74 4e 61 6d 65 22 3a 22 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 22 2c 22 70 61 79 70 61 6c 44 6f 6d 61 69 6e 22 3a 22 70 61 79 70 61 6c 2e 63 6f 6d 22 2c 22 6c 61 79 6f 75 74 22 3a 22 6c 61 79 6f 75 74 73 2f 65 6d 70 74 79 22 2c 22 73 79 73 22 3a 7b 22 6c 69 6e 6b 73 22 3a 7b 22 6a 73 42 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 77 65 62 2f 72 65 73 2f 30 38 37 2f 39 66 37 33 31 64 38 62 63 65 64 64 35 62 37 65 37 61 33 39 37 35 63 30 32 34 32 37 38 2f 6a 73 22 2c 22 63 73 73 42 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 77 65 62 2f 72 65 73 2f 30 38 37 2f 39 66 Data Ascii: {"cdnHostName":"www.paypalobjects.com","paypalDomain":"paypal.com","layout":"layouts/empty","sys":{"links":{"jsBaseUrl":"https://www.paypalobjects.com/web/res/087/9f731d8bcedd5b7e7a3975c024278/js","cssBaseUrl":"https://www.paypalobjects.com/web/res/087/9f
2024-12-05 19:20:07 UTC	474	IN	Data Raw: 64 77 69 64 65 3c 2f 61 3e 22 7d 7d 2c 22 74 72 61 63 6b 69 6e 67 22 3a 7b 22 66 70 74 69 22 3a 7b 22 6e 61 6d 65 22 3a 22 70 74 61 22 2c 22 6a 73 55 52 4c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 22 2c 22 73 65 72 76 65 72 55 52 4c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 2e 70 61 79 70 61 6c 2e 63 6f 6d 2f 74 73 22 2c 22 64 61 74 61 53 74 72 69 6e 67 22 3a 22 70 67 72 70 3d 75 6e 69 66 69 65 64 6c 6f 67 69 6e 6e 6f 64 65 77 65 62 25 32 46 2e 64 75 73 74 26 70 61 67 65 3d 75 6e 69 66 69 65 64 6c 6f 67 69 6e 6e 6f 64 65 77 65 62 25 32 46 2e 64 75 73 74 26 70 67 73 74 3d 31 37 33 33 34 32 36 34 30 37 31 31 36 26 63 61 6c 63 3d 66 32 33 31 37 33 38 62 66 37 36 66 63 26 6e 73 69 64 3d 47 57 5f 52 73 63 6a 42 Data Ascii: dwide</a>"}},"tracking":{"fpti":{"name":"pta","jsURL":"https://www.paypalobjects.com","serverURL":"https://t.paypal.com/ts","dataString":"pgrp=unifiedloginnodeweb%2F.dust&page=unifiedloginnodeweb%2F.dust&pgst=1733426407116&calc=f231738bf76fc&nsid=GW_RscjB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.8	49780	151.101.1.21	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:08 UTC	3122	OUT	POST /signin HTTP/1.1 Host: www.paypal.com Connection: keep-alive Content-Length: 823 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-wow64: ?0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" Upgrade-Insecure-Requests: 1 Origin: https://www.paypal.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://www.paypal.com/signin/?returnUri=%2Fmyaccount%2Ftransfer%2FpayRequest%2FU-09584045BD498740V%2FU-5R763959NX153980F%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq&id=OoO85MXTLVUkAlgY4sey9A8h.NxxqjO.iYbAWg&expId=p2p&onboardData=%7B%22signUpRequest%22%3A%7B%22method%22%3A%22get%22%2C%22url%22%3A%22https%3A%2F%2Fwww.paypal.com%2Fmyaccount%2Ftransfer%2FguestLogin%2FpayRequest%2FU-09584045BD498740V%2FU-5R763959NX153980F%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq%26id%3DOoO85MXTLVUkAlgY4sey9A8h.NxxqjO.iYbAWg%22%7D%7D&flowContextData=F7WdIOgJmH6-07KTJ7GpdWXhkdDQxLohB4l-G7vuWGaUsw9VWkH3unndZA7YlCRgtETWTIDn9hNnR_R_XfGvdxeCRkDmtXLc6qqtXR9sC3Gp-59lNBELQtpM5xEv0i4rCTpJiBcP2uf4VFrJLL1b5u1XG7JtP5TfW7CNqxSVOxEb9_duKrmtDgpztBtl32bVeoc8BgW5poXyk9lJHcKrYdvBHSdT0mosqrrmaGj2a5uNQdBK70Mwpn9Zddmj0KI1GIZrXWvFcpnuRbvbli2inkizkeV4nR1uyKnBSzFqdPDcK4t7K9B6YiFhb5sS8DaQd7F6oWzSe-J8gPxVURmdwwOxFn1ycN09t9caUdBz1XMuv96GDJywuv2feJdoAI73PNjro1a2cFEKAWnCgtoHqxdBD3A1mVV3OiytkjtEUDdvp0GL3CNOAV9zIrunX_DmbTO6KOe21dniBkeG&v=1&utm [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=c0c49a91e6384eadbaa4a565394e21da1733426393114; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTczMzQyNjM5MzE1OSIsImwiOiIwIiwibSI6IjAifQ; nsid=s%3AGW_RscjBMue_uO0mnkc7Z8KQBUhwfX2j.FFWOARB2%2BuuO26tFpElNMknNGOEOXTm%2FpBrBjPfDp7c; l7_az=dcg15.slc; ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778; ts=vreXpYrS%3D1764962402%26vteXpYrS%3D1733428202%26vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778%26vtyp%3Dnew; tcs=main%3Aunifiedlogin%3A%3A%3Alogin%7CbtnLogin
2024-12-05 19:20:08 UTC	823	OUT	Data Raw: 5f 63 73 72 66 3d 31 4f 4a 61 61 74 61 71 52 79 72 31 78 53 71 32 38 74 74 33 62 57 57 39 39 6a 25 32 42 31 76 65 50 52 4a 49 75 6d 41 25 33 44 26 6c 6f 63 61 6c 65 2e 78 3d 65 6e 5f 55 53 26 70 72 6f 63 65 73 73 53 69 67 6e 69 6e 3d 6d 61 69 6e 26 66 6c 6f 77 4e 61 6d 65 3d 70 32 70 26 66 6c 6f 77 43 6f 6e 74 65 78 74 44 61 74 61 3d 46 37 57 64 49 4f 67 4a 6d 48 36 2d 30 37 4b 54 4a 37 47 70 64 57 58 68 6b 64 44 51 78 4c 6f 68 42 34 6c 2d 47 37 76 75 57 47 61 55 73 77 39 56 57 6b 48 33 75 6e 6e 64 5a 41 37 59 6c 43 52 67 74 45 54 57 54 49 44 6e 39 68 4e 6e 52 5f 52 5f 58 66 47 76 64 78 65 43 52 6b 44 6d 74 58 4c 63 36 71 71 74 58 52 39 73 43 33 47 70 2d 35 39 6c 4e 42 45 4c 51 74 70 4d 35 78 45 76 30 69 34 72 43 54 70 4a 69 42 63 50 32 75 66 34 56 46 72 Data Ascii: _csrf=1OJaataqRyr1xSq28tt3bWW99j%2B1vePRJIumA%3D&locale.x=en_US&processSignin=main&flowName=p2p&flowContextData=F7WdIOgJmH6-07KTJ7GpdWXhkdDQxLohB4l-G7vuWGaUsw9VWkH3unndZA7YlCRgtETWTIDn9hNnR_R_XfGvdxeCRkDmtXLc6qqtXR9sC3Gp-59lNBELQtpM5xEv0i4rCTpJiBcP2uf4VFr
2024-12-05 19:20:08 UTC	344	IN	HTTP/1.1 200 OK Connection: close Content-Length: 7053 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Access-Control-Expose-Headers: Server-Timing Cache-Control: max-age=0, no-cache, no-store, must-revalidate
2024-12-05 19:20:08 UTC	2106	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6e 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 6f 62 6a 65 63 74 73 2e 70 61 79 70 61 6c 2e 63 6e 3b 20 73 63 72 69 70 74 2d 73 72 63 20 27 6e 6f 6e 63 65 2d 6c 61 66 63 66 70 46 53 4c 32 51 2f 63 78 6f 44 71 64 36 2b 6f 6c 35 46 6e 4f 62 34 30 6f 4b 47 35 73 59 47 43 73 76 30 48 69 74 33 57 4d 49 72 27 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6e Data Ascii: Content-Security-Policy: default-src 'self' https://.paypal.com https://.paypal.cn https://.paypalobjects.com https://objects.paypal.cn; script-src 'nonce-lafcfpFSL2Q/cxoDqd6+ol5FnOb40oKG5sYGCsv0Hit3WMIr' 'self' https://.paypal.com https://*.paypal.cn
2024-12-05 19:20:08 UTC	1658	IN	Data Raw: 50 65 72 6d 69 73 73 69 6f 6e 73 2d 50 6f 6c 69 63 79 3a 20 63 68 2d 75 61 2d 70 6c 61 74 66 6f 72 6d 2d 76 65 72 73 69 6f 6e 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 61 72 63 68 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 77 6f 77 36 34 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 6d 6f 64 65 6c 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 66 75 6c 6c 2d 76 65 Data Ascii: Permissions-Policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-ve
2024-12-05 19:20:08 UTC	623	IN	Data Raw: 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 58 2d 58 73 73 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 44 43 3a 20 63 63 67 31 31 2d 6f 72 69 67 69 6e 2d 77 77 77 2d 31 2e 70 61 79 70 61 6c 2e 63 6f 6d 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 56 69 61 3a 20 31 2e 31 20 76 61 72 6e 69 73 68 2c 20 31 2e 31 20 76 61 72 6e 69 73 68 2c 20 31 2e 31 20 76 61 72 6e 69 73 68 0d 0a 44 61 74 65 3a 20 54 68 75 2c 20 30 35 20 44 65 63 20 32 30 32 34 20 31 39 3a 32 30 3a 30 38 20 47 4d 54 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 33 30 37 32 30 30 30 3b 20 69 6e 63 6c 75 64 Data Ascii: X-Content-Type-Options: nosniffX-Xss-Protection: 1; mode=blockDC: ccg11-origin-www-1.paypal.comAccept-Ranges: bytesVia: 1.1 varnish, 1.1 varnish, 1.1 varnishDate: Thu, 05 Dec 2024 19:20:08 GMTStrict-Transport-Security: max-age=63072000; includ
2024-12-05 19:20:08 UTC	1378	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 6c 6f 77 65 72 2d 74 68 61 6e 2d 69 65 39 22 20 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 31 30 5d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 6c 6f 77 65 72 2d 74 68 61 6e 2d 69 65 31 30 22 20 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 21 49 45 5d 3e 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 3e 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 0a 20 Data Ascii: <!DOCTYPE html>...[if lt IE 9]><html lang="en" class="no-js lower-than-ie9" ><![endif]-->...[if lt IE 10]><html lang="en" class="no-js lower-than-ie10" ><![endif]-->...[if !IE]>--><html lang="en" class="no-js" >...<![endif]--> <head>
2024-12-05 19:20:08 UTC	1378	IN	Data Raw: 37 33 33 34 32 36 34 30 38 34 33 34 26 63 61 6c 63 3d 66 38 37 36 38 30 39 63 66 62 66 32 38 26 6e 73 69 64 3d 47 57 5f 52 73 63 6a 42 4d 75 65 5f 75 4f 30 6d 6e 6b 63 37 5a 38 4b 51 42 55 68 77 66 58 32 6a 26 72 73 74 61 3d 65 6e 5f 55 53 26 70 67 74 66 3d 4e 6f 64 65 6a 73 26 65 6e 76 3d 6c 69 76 65 26 73 3d 63 69 26 63 63 70 67 3d 55 53 26 63 73 63 69 3d 35 35 66 33 65 66 36 63 38 62 63 34 34 65 38 34 62 37 62 33 35 39 31 61 62 38 39 63 63 36 34 37 26 63 6f 6d 70 3d 61 75 74 68 63 68 61 6c 6c 65 6e 67 65 6e 6f 64 65 77 65 62 26 74 73 72 63 65 3d 75 6e 69 66 69 65 64 6c 6f 67 69 6e 6e 6f 64 65 77 65 62 26 63 75 3d 30 26 65 66 5f 70 6f 6c 69 63 79 3d 63 63 70 61 26 78 65 3d 31 30 39 35 34 31 25 32 43 31 30 37 35 38 35 26 78 74 3d 31 34 35 38 33 35 25 32 Data Ascii: 733426408434&calc=f876809cfbf28&nsid=GW_RscjBMue_uO0mnkc7Z8KQBUhwfX2j&rsta=en_US&pgtf=Nodejs&env=live&s=ci&ccpg=US&csci=55f3ef6c8bc44e84b7b3591ab89cc647&comp=authchallengenodeweb&tsrce=unifiedloginnodeweb&cu=0&ef_policy=ccpa&xe=109541%2C107585&xt=145835%2
2024-12-05 19:20:08 UTC	1378	IN	Data Raw: 65 6e 74 3d 22 6e 61 6d 65 3d 52 65 71 75 65 73 74 20 4d 6f 6e 65 79 3b 61 63 74 69 6f 6e 2d 75 72 69 3d 68 74 74 70 73 3a 2f 2f 70 65 72 73 6f 6e 61 6c 2e 70 61 79 70 61 6c 2e 63 6f 6d 2f 63 67 69 2d 62 69 6e 2f 3f 63 6d 64 3d 5f 72 65 6e 64 65 72 2d 63 6f 6e 74 65 6e 74 26 61 6d 70 3b 63 6f 6e 74 65 6e 74 5f 49 44 3d 6d 61 72 6b 65 74 69 6e 67 5f 75 73 2f 72 65 71 75 65 73 74 5f 6d 6f 6e 65 79 3b 69 63 6f 6e 2d 75 72 69 3d 68 74 74 70 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 65 6e 5f 55 53 2f 69 2f 69 63 6f 6e 2f 70 70 5f 66 61 76 69 63 6f 6e 5f 78 2e 69 63 6f 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6b 65 79 77 6f 72 64 73 22 20 63 6f 6e 74 65 6e 74 3d 22 74 72 61 6e 73 66 65 72 20 6d 6f 6e 65 79 2c 20 65 6d 61 Data Ascii: ent="name=Request Money;action-uri=https://personal.paypal.com/cgi-bin/?cmd=_render-content&content_ID=marketing_us/request_money;icon-uri=http://www.paypalobjects.com/en_US/i/icon/pp_favicon_x.ico" /><meta name="keywords" content="transfer money, ema
2024-12-05 19:20:08 UTC	1378	IN	Data Raw: 31 30 38 33 37 37 63 63 33 39 37 35 32 2f 74 65 6d 70 6c 61 74 65 73 2f 55 53 2f 65 6e 2f 25 73 2e 6a 73 22 0a 20 20 20 20 64 61 74 61 2d 63 73 72 66 2d 74 6f 6b 65 6e 3d 22 75 75 75 73 65 69 42 62 6a 79 33 42 43 75 2f 48 72 65 73 45 34 6a 31 71 6d 75 48 63 33 45 4b 48 71 58 46 55 73 3d 22 20 20 0a 20 20 20 20 64 61 74 61 2d 6c 6f 63 61 6c 65 3d 22 65 6e 5f 55 53 22 3e 0a 20 20 20 20 20 20 20 20 3c 6e 6f 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 6e 6f 6e 6a 73 41 6c 65 72 74 22 20 72 6f 6c 65 3d 22 61 6c 65 72 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 4e 4f 54 45 3a 20 4d 61 6e 79 20 66 65 61 74 75 72 65 73 20 6f 6e 20 74 68 65 20 50 61 79 50 61 6c 20 57 65 62 20 73 69 74 65 20 72 65 71 75 Data Ascii: 108377cc39752/templates/US/en/%s.js" data-csrf-token="uuuseiBbjy3BCu/HresE4j1qmuHc3EKHqXFUs=" data-locale="en_US"> <noscript> <p class="nonjsAlert" role="alert"> NOTE: Many features on the PayPal Web site requ
2024-12-05 19:20:08 UTC	1378	IN	Data Raw: 79 70 61 6c 2e 63 6f 6d 26 61 63 63 6f 75 6e 74 73 44 6f 6d 61 69 6e 3d 61 63 63 6f 75 6e 74 73 2e 68 63 61 70 74 63 68 61 2e 70 61 79 70 61 6c 2e 63 6f 6d 26 63 75 73 74 6f 6d 44 6f 6d 61 69 6e 73 3d 22 20 68 65 69 67 68 74 3d 22 35 30 30 22 20 77 69 64 74 68 3d 22 31 30 30 25 32 35 22 20 6e 61 6d 65 3d 22 72 65 63 61 70 74 63 68 61 22 20 61 6c 69 67 6e 3d 22 6d 69 64 64 6c 65 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 61 6e 64 62 6f 78 3d 22 61 6c 6c 6f 77 2d 73 63 72 69 70 74 73 20 61 6c 6c 6f 77 2d 73 61 6d 65 2d 6f 72 69 67 69 6e 20 61 6c 6c 6f 77 2d 70 6f 70 75 70 73 20 61 6c 6c 6f 77 2d 66 6f 72 6d 73 22 3e 3c 2f 69 66 72 61 6d 65 3e 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 61 63 74 69 6f 6e 73 22 3e 3c 62 75 74 74 6f 6e 20 63 6c 61 Data Ascii: ypal.com&accountsDomain=accounts.hcaptcha.paypal.com&customDomains=" height="500" width="100%25" name="recaptcha" align="middle" frameborder="0" sandbox="allow-scripts allow-same-origin allow-popups allow-forms"></iframe> <div class="actions"><button cla
2024-12-05 19:20:08 UTC	163	IN	Data Raw: 30 34 62 65 31 30 38 33 37 37 63 63 33 39 37 35 32 2f 6a 73 2f 63 6f 6e 66 69 67 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 77 65 62 2f 72 65 73 2f 35 63 30 2f 36 65 65 36 64 30 38 38 30 64 61 63 30 34 62 65 31 30 38 33 37 37 63 63 33 39 37 35 32 2f 6a 73 2f 6c 69 62 2f 72 65 71 75 69 72 65 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 20 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: 04be108377cc39752/js/config" src="https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/require.js"></script> </body> </html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.8	49781	18.66.161.81	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:08 UTC	928	OUT	GET /js/ HTTP/1.1 Host: ddbm2.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=c0c49a91e6384eadbaa4a565394e21da1733426393114; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTczMzQyNjM5MzE1OSIsImwiOiIwIiwibSI6IjAifQ; l7_az=dcg15.slc; ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778; ts=vreXpYrS%3D1764962402%26vteXpYrS%3D1733428202%26vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778%26vtyp%3Dnew; datadome=2EmtQqjYJilU~DXymVMGM0PSTj7xPg6xpxnMifoAxb2eCAfOU9~xrKCHw0QBHLNV80ZXGNoAkLWUXjXjxVHSmJZ7bN5NgKfxUW~zsfs4Hiahu4elkwmhUpp1Lpvp95Vc
2024-12-05 19:20:09 UTC	524	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html;charset=iso-8859-1 Content-Length: 319 Connection: close Date: Thu, 05 Dec 2024 19:20:08 GMT Cache-Control: must-revalidate,no-cache,no-store X-Cache: Error from cloudfront Via: 1.1 82fec2aceb4f253124bcc9517017dc20.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH52-C1 X-Amz-Cf-Id: RLEh1BqgRCYlj1jcbrj2QYDLZgRRPJ0KjR1qvPrTiMIuUJG26ARilw== X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Vary: Origin
2024-12-05 19:20:09 UTC	319	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 3c 2f 68 32 3e 0a 3c 70 3e 50 72 6f 62 6c 65 6d 20 61 63 63 65 73 73 69 6e 67 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 20 52 65 61 73 6f 6e 3a 0a 3c 70 72 65 3e 20 20 20 20 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 70 72 Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405</title></title></head><body><h2>HTTP ERROR 405</h2><p>Problem accessing this resource. Reason:<pre> HTTP method GET is not supported by this URL</pr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.8	49776	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:08 UTC	605	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/browser_modules/pulvus-provide/provide.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.8	49778	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:08 UTC	615	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/browser_modules/dustjs-helpers/dist/dust-helpers.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.8	49779	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:08 UTC	440	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/browser_modules/dust-makara-helpers/browser.amd.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:09 UTC	791	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:08 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6737ef17-116b" Expires: Fri, 05 Dec 2025 19:20:08 GMT Last-Modified: Sat, 16 Nov 2024 01:02:15 GMT Paypal-Debug-Id: 8607a2cd8ed8e Server: ECAcc (lhd/35C5) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000008607a2cd8ed8e-2aba28ff7051934c-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 4459 Connection: close
2024-12-05 19:20:09 UTC	4459	IN	Data Raw: 64 65 66 69 6e 65 28 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 74 5b 72 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 72 2c 6c 6f 61 64 65 64 3a 21 31 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 69 2e 6c 6f 61 64 65 64 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 74 3d 7b 7d 3b 72 65 74 75 72 6e 20 6e 2e 6d 3d 65 2c 6e 2e 63 3d 74 2c 6e 2e 70 3d 22 22 2c 6e 28 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 Data Ascii: define([],function(){return function(e){function n(r){if(t[r])return t[r].exports;var i=t[r]={exports:{},id:r,loaded:!1};return e[r].call(i.exports,i,i.exports,n),i.loaded=!0,i.exports}var t={};return n.m=e,n.c=t,n.p="",n(0)}([function(e,t,n){"use strict"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.8	49790	151.101.3.1	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:08 UTC	5329	OUT	GET /ts?v=1.9.5&t=1733426405531&g=300&pgrp=main%3Aunifiedlogin%3A%3A%3Alogin&page=main%3Aunifiedlogin%3A%3A%3Alogin%3Alegacy-web-dyn&pgst=1733426393098&calc=f2110553b2e4e&nsid=GW_RscjBMue_uO0mnkc7Z8KQBUhwfX2j&rsta=en_US&pgtf=Nodejs&env=live&s=ci&ccpg=US&csci=c0c49a91e6384eadbaa4a565394e21da&comp=unifiedloginnodeweb&tsrce=unifiedloginnodeweb&cu=0&ef_policy=ccpa&xe=100353%2C106885%2C105604%2C105604%2C105351%2C101126%2C100614%2C101257%2C102153%2C104200%2C104200%2C105352%2C109195%2C104458%2C104458%2C100364%2C105999%2C100885%2C109334%2C109334%2C101270%2C102557%2C102557%2C101408%2C101408%2C104227%2C104227%2C100644%2C105124%2C100391%2C102695%2C100263%2C101031%2C100267%2C108076%2C100527%2C106031%2C106031%2C107054%2C107054%2C106033%2C106033%2C106032%2C106032%2C105392%2C105392%2C106035%2C106035%2C106034%2C106034%2C106036%2C106036%2C105271%2C110648%2C101688%2C101821%2C101820%2C102208%2C105543%2C105544%2C105416%2C105416%2C101064%2C106058%2C104778%2C103119%2C100303%2C100942%2C105553%2C105553%2C105552%2C105552%2C100304%2C1 [TRUNCATED] Host: t.paypal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.paypal.com/signin/?returnUri=%2Fmyaccount%2Ftransfer%2FpayRequest%2FU-09584045BD498740V%2FU-5R763959NX153980F%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq&id=OoO85MXTLVUkAlgY4sey9A8h.NxxqjO.iYbAWg&expId=p2p&onboardData=%7B%22signUpRequest%22%3A%7B%22method%22%3A%22get%22%2C%22url%22%3A%22https%3A%2F%2Fwww.paypal.com%2Fmyaccount%2Ftransfer%2FguestLogin%2FpayRequest%2FU-09584045BD498740V%2FU-5R763959NX153980F%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq%26id%3DOoO85MXTLVUkAlgY4sey9A8h.NxxqjO.iYbAWg%22%7D%7D&flowContextData=F7WdIOgJmH6-07KTJ7GpdWXhkdDQxLohB4l-G7vuWGaUsw9VWkH3unndZA7YlCRgtETWTIDn9hNnR_R_XfGvdxeCRkDmtXLc6qqtXR9sC3Gp-59lNBELQtpM5xEv0i4rCTpJiBcP2uf4VFrJLL1b5u1XG7JtP5TfW7CNqxSVOxEb9_duKrmtDgpztBtl32bVeoc8BgW5poXyk9lJHcKrYdvBHSdT0mosqrrmaGj2a5uNQdBK70Mwpn9Zddmj0KI1GIZrXWvFcpnuRbvbli2inkizkeV4nR1uyKnBSzFqdPDcK4t7K9B6YiFhb5sS8DaQd7F6oWzSe-J8gPxVURmdwwOxFn1ycN09t9caUdBz1XMuv96GDJywuv2feJdoAI73PNjro1a2cFEKAWnCgtoHqxdBD3A1mVV3OiytkjtEUDdvp0GL3CNOAV9zIrunX_DmbTO6KOe21dniBkeG&v=1&utm [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=c0c49a91e6384eadbaa4a565394e21da1733426393114; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; l7_az=dcg15.slc; ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778; datadome=2EmtQqjYJilU~DXymVMGM0PSTj7xPg6xpxnMifoAxb2eCAfOU9~xrKCHw0QBHLNV80ZXGNoAkLWUXjXjxVHSmJZ7bN5NgKfxUW~zsfs4Hiahu4elkwmhUpp1Lpvp95Vc; x-pp-s=eyJ0IjoiMTczMzQyNjQwNzE1MiIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1764962407%26vteXpYrS%3D1733428207%26vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778%26vtyp%3Dnew

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.8	49789	151.101.3.1	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:08 UTC	5481	OUT	GET /ts?v=1.9.5&t=1733426405534&g=300&pgrp=main%3Aunifiedlogin%3A%3A%3Alogin&page=main%3Aunifiedlogin%3A%3A%3Alogin%3Alegacy-web-dyn&pgst=1733426393098&calc=f2110553b2e4e&nsid=GW_RscjBMue_uO0mnkc7Z8KQBUhwfX2j&rsta=en_US&pgtf=Nodejs&env=live&s=ci&ccpg=US&csci=c0c49a91e6384eadbaa4a565394e21da&comp=unifiedloginnodeweb&tsrce=unifiedloginnodeweb&cu=0&ef_policy=ccpa&xe=100353%2C106885%2C105604%2C105604%2C105351%2C101126%2C100614%2C101257%2C102153%2C104200%2C104200%2C105352%2C109195%2C104458%2C104458%2C100364%2C105999%2C100885%2C109334%2C109334%2C101270%2C102557%2C102557%2C101408%2C101408%2C104227%2C104227%2C100644%2C105124%2C100391%2C102695%2C100263%2C101031%2C100267%2C108076%2C100527%2C106031%2C106031%2C107054%2C107054%2C106033%2C106033%2C106032%2C106032%2C105392%2C105392%2C106035%2C106035%2C106034%2C106034%2C106036%2C106036%2C105271%2C110648%2C101688%2C101821%2C101820%2C102208%2C105543%2C105544%2C105416%2C105416%2C101064%2C106058%2C104778%2C103119%2C100303%2C100942%2C105553%2C105553%2C105552%2C105552%2C100304%2C1 [TRUNCATED] Host: t.paypal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Cache-Control: max-age=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.paypal.com/signin/?returnUri=%2Fmyaccount%2Ftransfer%2FpayRequest%2FU-09584045BD498740V%2FU-5R763959NX153980F%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq&id=OoO85MXTLVUkAlgY4sey9A8h.NxxqjO.iYbAWg&expId=p2p&onboardData=%7B%22signUpRequest%22%3A%7B%22method%22%3A%22get%22%2C%22url%22%3A%22https%3A%2F%2Fwww.paypal.com%2Fmyaccount%2Ftransfer%2FguestLogin%2FpayRequest%2FU-09584045BD498740V%2FU-5R763959NX153980F%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq%26id%3DOoO85MXTLVUkAlgY4sey9A8h.NxxqjO.iYbAWg%22%7D%7D&flowContextData=F7WdIOgJmH6-07KTJ7GpdWXhkdDQxLohB4l-G7vuWGaUsw9VWkH3unndZA7YlCRgtETWTIDn9hNnR_R_XfGvdxeCRkDmtXLc6qqtXR9sC3Gp-59lNBELQtpM5xEv0i4rCTpJiBcP2uf4VFrJLL1b5u1XG7JtP5TfW7CNqxSVOxEb9_duKrmtDgpztBtl32bVeoc8BgW5poXyk9lJHcKrYdvBHSdT0mosqrrmaGj2a5uNQdBK70Mwpn9Zddmj0KI1GIZrXWvFcpnuRbvbli2inkizkeV4nR1uyKnBSzFqdPDcK4t7K9B6YiFhb5sS8DaQd7F6oWzSe-J8gPxVURmdwwOxFn1ycN09t9caUdBz1XMuv96GDJywuv2feJdoAI73PNjro1a2cFEKAWnCgtoHqxdBD3A1mVV3OiytkjtEUDdvp0GL3CNOAV9zIrunX_DmbTO6KOe21dniBkeG&v=1&utm [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=c0c49a91e6384eadbaa4a565394e21da1733426393114; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; l7_az=dcg15.slc; ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778; datadome=2EmtQqjYJilU~DXymVMGM0PSTj7xPg6xpxnMifoAxb2eCAfOU9~xrKCHw0QBHLNV80ZXGNoAkLWUXjXjxVHSmJZ7bN5NgKfxUW~zsfs4Hiahu4elkwmhUpp1Lpvp95Vc; x-pp-s=eyJ0IjoiMTczMzQyNjQwNzE1MiIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1764962407%26vteXpYrS%3D1733428207%26vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778%26vtyp%3Dnew
2024-12-05 19:20:09 UTC	1361	IN	HTTP/1.1 200 OK Connection: close Access-Control-Expose-Headers: Server-Timing CORRELATION-ID: d9943bd72874b Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Type: image/gif Expires: Thu, 05 Dec 2024 19:20:08 GMT P3p: CP="CAO IND OUR SAM UNI STA COR COM" Paypal-Debug-Id: d9943bd72874b Pragma: no-cache Set-Cookie: ts=vreXpYrS%3D1764962408%26vteXpYrS%3D1733428208%26vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778%26vtyp%3Dnew;Expires=Fri, 05 Dec 2025 19:20:08 GMT;domain=.paypal.com;path=/;secure;HttpOnly;SameSite=None; Set-Cookie: ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778;Expires=Fri, 05 Dec 2025 19:20:08 GMT;domain=.paypal.com;path=/;secure;SameSite=None; Traceparent: 00-0000000000000000000d9943bd72874b-25e8d702cf6b0912-01 Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Date: Thu, 05 Dec 2024 19:20:08 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Served-By: cache-iad-kcgs7200053-IAD, cache-nyc-kteb1890038-NYC X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1733426409.863538,VS0,VE101 vary: Accept-Encoding Server-Timing: "traceparent;desc="00-0000000000000000000d9943bd72874b-f825c1c5b4f79875-01"";content-encoding;desc="",x-cdn;desc="fastly" Timing-Allow-Origin: * transfer-encoding: chunked
2024-12-05 19:20:09 UTC	4	IN	Data Raw: 32 61 0d 0a Data Ascii: 2a
2024-12-05 19:20:09 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 01 01 32 00 3b Data Ascii: GIF89a!,2;
2024-12-05 19:20:09 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.8	49777	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:08 UTC	373	OUT	GET /pa/3pjs/tl/6.4.65/patleaf.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:09 UTC	801	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:08 GMT DC: ccg11-origin-www-1.paypal.com Etag: "6735ac2d-267db+ident" Expires: Thu, 05 Dec 2024 20:20:08 GMT Last-Modified: Thu, 14 Nov 2024 07:52:13 GMT Paypal-Debug-Id: 00ad561ff8f4d Server: ECAcc (lhd/35C9) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-000000000000000000000ad561ff8f4d-9cda0a0444205ecc-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 157659 Connection: close
2024-12-05 19:20:09 UTC	16383	IN	Data Raw: 69 66 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 77 69 6e 64 6f 77 2e 70 61 6b 6f 3d 74 28 29 7d 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 69 28 73 2c 68 2c 6c 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 69 66 28 21 68 5b 65 5d 29 7b 69 66 28 21 73 5b 65 5d 29 7b 76 61 72 20 72 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 26 26 72 65 71 75 69 72 65 3b 69 66 28 21 74 26 26 72 29 72 65 74 75 72 6e 20 72 28 65 2c 21 30 29 3b 69 66 28 5f 29 72 65 74 75 72 6e 20 5f 28 65 2c 21 30 29 3b 74 68 72 6f 77 28 72 3d 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 6d 6f 64 75 6c 65 20 27 22 2b 65 2b 22 27 22 29 29 2e 63 6f 64 65 3d 22 4d 4f 44 55 4c 45 5f 4e 4f 54 Data Ascii: if(function(t){window.pako=t()}(function(){return function i(s,h,l){function o(e,t){if(!h[e]){if(!s[e]){var r="function"==typeof require&&require;if(!t&&r)return r(e,!0);if(_)return _(e,!0);throw(r=new Error("Cannot find module '"+e+"'")).code="MODULE_NOT
2024-12-05 19:20:09 UTC	1	IN	Data Raw: 77 Data Ascii: w
2024-12-05 19:20:09 UTC	16383	IN	Data Raw: 72 61 70 3c 3d 30 29 26 26 28 32 3d 3d 3d 6e 2e 77 72 61 70 3f 28 4c 28 6e 2c 32 35 35 26 74 2e 61 64 6c 65 72 29 2c 4c 28 6e 2c 74 2e 61 64 6c 65 72 3e 3e 38 26 32 35 35 29 2c 4c 28 6e 2c 74 2e 61 64 6c 65 72 3e 3e 31 36 26 32 35 35 29 2c 4c 28 6e 2c 74 2e 61 64 6c 65 72 3e 3e 32 34 26 32 35 35 29 2c 4c 28 6e 2c 32 35 35 26 74 2e 74 6f 74 61 6c 5f 69 6e 29 2c 4c 28 6e 2c 74 2e 74 6f 74 61 6c 5f 69 6e 3e 3e 38 26 32 35 35 29 2c 4c 28 6e 2c 74 2e 74 6f 74 61 6c 5f 69 6e 3e 3e 31 36 26 32 35 35 29 2c 4c 28 6e 2c 74 2e 74 6f 74 61 6c 5f 69 6e 3e 3e 32 34 26 32 35 35 29 29 3a 28 4e 28 6e 2c 74 2e 61 64 6c 65 72 3e 3e 3e 31 36 29 2c 4e 28 6e 2c 36 35 35 33 35 26 74 2e 61 64 6c 65 72 29 29 2c 71 28 74 29 2c 30 3c 6e 2e 77 72 61 70 26 26 28 6e 2e 77 72 61 70 3d Data Ascii: rap<=0)&&(2===n.wrap?(L(n,255&t.adler),L(n,t.adler>>8&255),L(n,t.adler>>16&255),L(n,t.adler>>24&255),L(n,255&t.total_in),L(n,t.total_in>>8&255),L(n,t.total_in>>16&255),L(n,t.total_in>>24&255)):(N(n,t.adler>>>16),N(n,65535&t.adler)),q(t),0<n.wrap&&(n.wrap=
2024-12-05 19:20:09 UTC	1	IN	Data Raw: 22 Data Ascii: "
2024-12-05 19:20:09 UTC	16383	IN	Data Raw: 29 3b 72 65 74 75 72 6e 20 75 2e 67 65 74 28 65 29 2e 73 65 74 28 74 2c 6e 29 2c 63 2e 67 65 74 28 65 29 2e 70 75 73 68 28 74 29 2c 6e 7d 28 6e 2c 65 29 29 7d 29 2c 69 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 74 2c 6e 75 6c 6c 29 2c 6f 2e 6f 62 73 65 72 76 65 28 69 2c 70 29 2c 6e 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 4f 28 74 2c 78 28 74 2c 65 29 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 52 28 74 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 6e 2e 73 68 65 65 74 73 3d 5b 5d 2c 68 2e 73 65 74 28 6e 2c 74 29 2c 6d 2e 73 65 74 28 6e 2c 5b 5d 29 2c 79 2e 73 65 74 28 6e 2c 6e 65 77 20 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6f 29 7b 64 6f 63 75 6d 65 6e 74 3f 74 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 Data Ascii: );return u.get(e).set(t,n),c.get(e).push(t),n}(n,e))}),i.insertBefore(t,null),o.observe(i,p),n.forEach(function(t){O(t,x(t,e))})}function R(t){var n=this;n.sheets=[],h.set(n,t),m.set(n,[]),y.set(n,new MutationObserver(function(t,o){document?t.forEach(func
2024-12-05 19:20:09 UTC	16383	IN	Data Raw: 6c 28 65 29 3b 66 6f 72 28 74 3d 30 2c 6f 3d 69 3f 69 2e 6c 65 6e 67 74 68 3a 30 3b 74 3c 6f 3b 74 2b 3d 31 29 69 66 28 69 5b 74 5d 26 26 69 5b 74 5d 3d 3d 3d 45 29 7b 68 3d 21 30 3b 62 72 65 61 6b 7d 7d 29 29 2c 21 68 29 29 26 26 28 6b 2e 69 73 55 6e 6c 6f 61 64 28 65 29 26 26 28 78 3d 22 75 6e 6c 6f 61 64 69 6e 67 22 29 2c 22 63 68 61 6e 67 65 22 21 3d 3d 65 2e 74 79 70 65 7c 7c 21 64 2e 69 73 4c 65 67 61 63 79 49 45 7c 7c 22 63 68 65 63 6b 62 6f 78 22 21 3d 3d 65 2e 74 61 72 67 65 74 2e 65 6c 65 6d 65 6e 74 2e 74 79 70 65 26 26 22 72 61 64 69 6f 22 21 3d 3d 65 2e 74 61 72 67 65 74 2e 65 6c 65 6d 65 6e 74 2e 74 79 70 65 29 29 7b 69 66 28 22 70 72 6f 70 65 72 74 79 63 68 61 6e 67 65 22 3d 3d 3d 65 2e 74 79 70 65 29 7b 69 66 28 22 63 68 65 63 6b 65 64 22 Data Ascii: l(e);for(t=0,o=i?i.length:0;t<o;t+=1)if(i[t]&&i[t]===E){h=!0;break}})),!h))&&(k.isUnload(e)&&(x="unloading"),"change"!==e.type\|\|!d.isLegacyIE\|\|"checkbox"!==e.target.element.type&&"radio"!==e.target.element.type)){if("propertychange"===e.type){if("checked"
2024-12-05 19:20:09 UTC	2	IN	Data Raw: 72 69 Data Ascii: ri
2024-12-05 19:20:09 UTC	16383	IN	Data Raw: 65 6e 74 61 74 69 6f 6e 29 7b 63 61 73 65 22 6c 61 6e 64 73 63 61 70 65 2d 70 72 69 6d 61 72 79 22 3a 63 61 73 65 22 6c 61 6e 64 73 63 61 70 65 2d 73 65 63 6f 6e 64 61 72 79 22 3a 65 3d 39 30 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 65 3d 30 7d 72 65 74 75 72 6e 20 65 7d 2c 63 6c 6f 67 3a 28 77 69 6e 64 6f 77 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2c 74 72 69 6d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 74 6f 53 74 72 69 6e 67 3f 65 2e 74 72 69 6d 3f 65 2e 74 72 69 6d 28 29 3a 65 2e 74 6f 53 74 72 69 6e 67 28 29 2e 72 65 70 6c 61 63 65 28 2f 5e 5c 73 2b 7c 5c 73 2b 24 2f 67 2c 22 22 29 3a 65 7d 2c 6c 74 72 69 6d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 74 6f 53 74 72 69 6e 67 3f 65 Data Ascii: entation){case"landscape-primary":case"landscape-secondary":e=90;break;default:e=0}return e},clog:(window,function(){}),trim:function(e){return e&&e.toString?e.trim?e.trim():e.toString().replace(/^\s+\|\s+$/g,""):e},ltrim:function(e){return e&&e.toString?e
2024-12-05 19:20:09 UTC	16383	IN	Data Raw: 6f 50 61 72 65 6e 74 4c 69 6e 6b 22 2c 21 30 29 2c 75 3d 6e 2e 67 65 74 56 61 6c 75 65 28 61 2c 22 6c 6f 67 41 74 74 72 69 62 75 74 65 73 22 2c 5b 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 74 29 7b 6c 65 74 20 6e 2c 6f 2c 69 3b 69 66 28 21 65 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 69 66 28 21 28 69 3d 76 6f 69 64 20 30 21 3d 3d 74 3f 74 3a 65 2e 69 64 29 7c 7c 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 69 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 66 6f 72 28 6e 3d 30 2c 6f 3d 73 2e 6c 65 6e 67 74 68 3b 6e 3c 6f 3b 6e 2b 3d 31 29 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 73 5b 6e 5d 29 7b 69 66 28 69 3d 3d 3d 73 5b 6e 5d 29 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 65 6c 73 65 20 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f Data Ascii: oParentLink",!0),u=n.getValue(a,"logAttributes",[])}function m(e,t){let n,o,i;if(!e)return null;if(!(i=void 0!==t?t:e.id)\|\|"string"!=typeof i)return null;for(n=0,o=s.length;n<o;n+=1)if("string"==typeof s[n]){if(i===s[n])return null}else if("object"==typeo
2024-12-05 19:20:09 UTC	16383	IN	Data Raw: 65 74 28 73 29 3a 73 3d 6e 75 6c 6c 29 2c 65 2e 61 74 74 72 69 62 75 74 65 73 3d 5b 7b 6e 61 6d 65 3a 63 2c 6f 6c 64 56 61 6c 75 65 3a 74 2e 6f 6c 64 56 61 6c 75 65 2c 76 61 6c 75 65 3a 73 3f 73 2e 63 75 72 72 53 74 61 74 65 2e 76 61 6c 75 65 3a 74 2e 74 61 72 67 65 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 63 29 7d 5d 3b 76 61 72 20 75 3d 65 2e 61 74 74 72 69 62 75 74 65 73 5b 30 5d 3b 69 66 28 75 2e 6f 6c 64 56 61 6c 75 65 21 3d 3d 75 2e 76 61 6c 75 65 29 7b 66 6f 72 28 6f 3d 30 2c 69 3d 79 2e 6c 65 6e 67 74 68 2c 61 3d 21 31 3b 6f 3c 69 3b 6f 2b 3d 31 29 69 66 28 73 3d 79 5b 6f 5d 2c 65 2e 69 73 53 61 6d 65 28 73 29 29 7b 73 2e 61 74 74 72 69 62 75 74 65 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 6c 65 74 20 6e 2c 6f 2c 69 2c 72 3b 66 6f 72 28 Data Ascii: et(s):s=null),e.attributes=[{name:c,oldValue:t.oldValue,value:s?s.currState.value:t.target.getAttribute(c)}];var u=e.attributes[0];if(u.oldValue!==u.value){for(o=0,i=y.length,a=!1;o<i;o+=1)if(s=y[o],e.isSame(s)){s.attributes=function(e,t){let n,o,i,r;for(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.8	49791	151.101.1.21	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:08 UTC	1081	OUT	GET /signin/client-log HTTP/1.1 Host: www.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=c0c49a91e6384eadbaa4a565394e21da1733426393114; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; nsid=s%3AGW_RscjBMue_uO0mnkc7Z8KQBUhwfX2j.FFWOARB2%2BuuO26tFpElNMknNGOEOXTm%2FpBrBjPfDp7c; l7_az=dcg15.slc; ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778; tcs=main%3Aunifiedlogin%3A%3A%3Alogin%7CbtnLogin; datadome=2EmtQqjYJilU~DXymVMGM0PSTj7xPg6xpxnMifoAxb2eCAfOU9~xrKCHw0QBHLNV80ZXGNoAkLWUXjXjxVHSmJZ7bN5NgKfxUW~zsfs4Hiahu4elkwmhUpp1Lpvp95Vc; x-pp-s=eyJ0IjoiMTczMzQyNjQwNzE1MiIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1764962407%26vteXpYrS%3D1733428207%26vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778%26vtyp%3Dnew
2024-12-05 19:20:09 UTC	299	IN	HTTP/1.1 302 Found Connection: close Content-Length: 29 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Cache-Control: max-age=0, no-cache, no-store, must-revalidate
2024-12-05 19:20:09 UTC	2356	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6e 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 6f 62 6a 65 63 74 73 2e 70 61 79 70 61 6c 2e 63 6e 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 3b 20 73 63 72 69 70 74 2d 73 72 63 20 27 6e 6f 6e 63 65 2d 49 71 41 32 47 33 45 68 6e 61 37 76 57 57 76 7a 51 78 77 2f 4e 45 49 2b 79 63 7a 57 72 64 2f 64 66 79 5a 52 74 61 50 6f 50 68 30 49 4e 6a 48 67 27 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 68 74 74 Data Ascii: Content-Security-Policy: default-src 'self' https://.paypal.com https://.paypal.cn https://.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; script-src 'nonce-IqA2G3Ehna7vWWvzQxw/NEI+yczWrd/dfyZRtaPoPh0INjHg' 'self' https://.paypal.com htt
2024-12-05 19:20:09 UTC	1321	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 78 2d 70 70 2d 73 3d 65 79 4a 30 49 6a 6f 69 4d 54 63 7a 4d 7a 51 79 4e 6a 51 77 4f 54 41 34 4d 69 49 73 49 6d 77 69 4f 69 49 77 49 69 77 69 62 53 49 36 49 6a 41 69 66 51 3b 20 44 6f 6d 61 69 6e 3d 2e 70 61 79 70 61 6c 2e 63 6f 6d 3b 20 50 61 74 68 3d 2f 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 37 5f 61 7a 3d 64 63 67 31 35 2e 73 6c 63 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 70 61 79 70 61 6c 2e 63 6f 6d 3b 20 45 78 70 69 72 65 73 3d 54 68 75 2c 20 30 35 20 44 65 63 20 32 30 32 34 20 31 39 3a 35 30 3a 30 39 20 47 4d 54 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e Data Ascii: Set-Cookie: x-pp-s=eyJ0IjoiMTczMzQyNjQwOTA4MiIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=NoneSet-Cookie: l7_az=dcg15.slc; Path=/; Domain=paypal.com; Expires=Thu, 05 Dec 2024 19:50:09 GMT; HttpOnly; Secure; SameSite=N
2024-12-05 19:20:09 UTC	29	IN	Data Raw: 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 2f 73 69 67 6e 69 6e Data Ascii: Found. Redirecting to /signin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.8	49782	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:08 UTC	586	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/css/app.css HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:09 UTC	778	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: text/css Date: Thu, 05 Dec 2024 19:20:09 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-82ea" Expires: Fri, 05 Dec 2025 19:20:09 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 414af756eff5e Server: ECAcc (lhd/35D0) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000414af756eff5e-f68c17da8c00886f-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 33514 Connection: close
2024-12-05 19:20:09 UTC	16383	IN	Data Raw: 2f 2a 2a 20 6d 65 74 68 6f 64 20 72 65 73 70 6f 6e 73 69 62 6c 65 20 66 6f 72 20 6c 6f 61 64 69 6e 67 20 74 68 65 20 62 61 63 6b 67 72 6f 75 6e 64 20 69 6d 61 67 65 20 73 65 74 20 69 6e 20 43 53 53 20 2a 2a 2f 0a 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 72 6f 74 61 74 69 6f 6e 20 7b 0a 20 20 66 72 6f 6d 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0a 20 20 7d 0a 20 20 74 6f 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 Data Ascii: / method responsible for loading the background image set in CSS /@-webkit-keyframes rotation { from { -webkit-transform: rotate(0deg); transform: rotate(0deg); } to { -webkit-transform: rotate(359deg); transform: rotate(359deg)
2024-12-05 19:20:09 UTC	1	IN	Data Raw: 0a Data Ascii:
2024-12-05 19:20:09 UTC	16383	IN	Data Raw: 7d 0a 2f 2a 20 4c 41 50 20 2d 20 6d 65 64 69 75 6d 20 2a 2f 0a 2e 6a 73 20 2e 6c 61 70 20 2e 74 65 78 74 49 6e 70 75 74 2e 6d 65 64 69 75 6d 2c 0a 2e 6a 73 20 64 69 76 2e 6c 61 70 2e 74 65 78 74 49 6e 70 75 74 2e 6d 65 64 69 75 6d 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 7d 0a 2e 6a 73 20 2e 6c 61 70 20 2e 74 65 78 74 49 6e 70 75 74 2e 6d 65 64 69 75 6d 20 6c 61 62 65 6c 2e 66 6f 63 75 73 2c 0a 2e 6a 73 20 2e 66 6f 72 6d 4d 65 64 69 75 6d 20 64 69 76 2e 6c 61 70 2e 74 65 78 74 49 6e 70 75 74 2e 6d 65 64 69 75 6d 20 6c 61 62 65 6c 2e 66 6f 63 75 73 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 62 33 62 33 62 33 3b 0a 7d 0a 2e 6a 73 20 2e 6c 61 70 20 2e 74 65 78 74 49 6e 70 75 74 2e 6d 65 Data Ascii: }/* LAP - medium */.js .lap .textInput.medium,.js div.lap.textInput.medium { padding: 0; position: relative;}.js .lap .textInput.medium label.focus,.js .formMedium div.lap.textInput.medium label.focus { color: #b3b3b3;}.js .lap .textInput.me
2024-12-05 19:20:09 UTC	747	IN	Data Raw: 77 69 64 74 68 3a 20 37 36 37 70 78 29 20 7b 0a 20 20 2e 69 64 65 6e 74 69 74 79 46 6f 6f 74 65 72 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 35 30 70 78 3b 0a 20 20 7d 0a 7d 0a 2f 2a 20 70 61 67 65 20 2a 2f 0a 2f 2a 20 50 61 67 65 20 73 70 65 63 69 66 69 63 20 43 53 53 20 66 69 6c 65 73 20 2a 2f 0a 23 6c 6f 67 69 6e 20 2e 66 6f 72 67 6f 74 4c 69 6e 6b 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 32 35 70 78 20 61 75 74 6f 20 33 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 32 35 70 78 3b 0a 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 43 42 44 32 44 36 3b 0a 7d 0a 2f 2a 20 6d 6f 62 69 6c 65 20 2d 2d 2d 2d 20 2a 2f 0a 40 6d 65 64 69 61 20 61 6c 6c 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 Data Ascii: width: 767px) { .identityFooter { margin-top: 50px; }}/* page // Page specific CSS files /#login .forgotLink { margin: 25px auto 30px; padding-bottom: 25px; border-bottom: 1px solid #CBD2D6;}/ mobile ---- */@media all and (max-wid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.8	49783	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:08 UTC	437	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/browser_modules/dusthelpers-supplement/index.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:09 UTC	791	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:09 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6737ef17-1ea5" Expires: Fri, 05 Dec 2025 19:20:09 GMT Last-Modified: Sat, 16 Nov 2024 01:02:15 GMT Paypal-Debug-Id: d7a85a1b94a33 Server: ECAcc (lhd/35A5) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000d7a85a1b94a33-c8e3a5fea2514cc8-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 7845 Connection: close
2024-12-05 19:20:09 UTC	7845	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 79 70 65 6f 66 20 64 65 66 69 6e 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 64 65 66 69 6e 65 2e 61 6d 64 26 26 64 65 66 69 6e 65 2e 61 6d 64 2e 64 75 73 74 3d 3d 3d 21 30 3f 64 65 66 69 6e 65 28 5b 22 64 75 73 74 2e 63 6f 72 65 22 5d 2c 74 29 3a 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3d 3d 22 6f 62 6a 65 63 74 22 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 72 65 71 75 69 72 65 28 22 64 75 73 74 6a 73 2d 6c 69 6e 6b 65 64 69 6e 22 29 29 3a 74 28 65 2e 64 75 73 74 29 7d 29 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 20 65 78 74 65 6e 64 28 64 75 73 74 29 7b 66 75 6e 63 74 69 6f 6e 20 74 6f 6b 65 6e 69 7a 65 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 7b 22 28 28 22 3a 31 Data Ascii: (function(e,t){typeof define=="function"&&define.amd&&define.amd.dust===!0?define(["dust.core"],t):typeof exports=="object"?module.exports=t(require("dustjs-linkedin")):t(e.dust)})(this,function extend(dust){function tokenize(t){"use strict";var n={"((":1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.8	49787	172.217.19.195	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:09 UTC	418	OUT	GET /recaptcha/enterprise.js?render=6LdCCOUUAAAAAHTE-Snr6hi4HJGtJk_d1_ce-gWB&hl=en HTTP/1.1 Host: www.recaptcha.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:09 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Thu, 05 Dec 2024 19:20:09 GMT Date: Thu, 05 Dec 2024 19:20:09 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-05 19:20:09 UTC	641	IN	Data Raw: 37 38 62 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 45 3d 27 65 6e 74 65 72 70 72 69 73 65 27 2c 61 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 2c 67 72 3d 61 5b 45 5d 3d 61 5b 45 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f Data Ascii: 78b/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var E='enterprise',a=w[N]=w[N]\|\|{},gr=a[E]=a[E]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['_
2024-12-05 19:20:09 UTC	1297	IN	Data Raw: 63 68 61 72 73 65 74 3d 27 75 74 66 2d 38 27 3b 76 61 72 20 76 3d 77 2e 6e 61 76 69 67 61 74 6f 72 2c 6d 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 6d 65 74 61 27 29 3b 6d 2e 68 74 74 70 45 71 75 69 76 3d 27 6f 72 69 67 69 6e 2d 74 72 69 61 6c 27 3b 6d 2e 63 6f 6e 74 65 6e 74 3d 27 41 37 75 78 74 6a 33 2b 68 4a 6d 4f 63 5a 46 6f 6f 46 54 30 50 73 32 37 36 50 75 4f 71 47 6e 4d 31 6a 66 6f 50 62 46 76 78 57 70 37 33 56 43 36 30 4c 6e 59 47 7a 61 79 48 56 76 63 46 65 45 69 46 30 71 72 77 79 37 66 51 41 4c 2b 67 47 56 58 55 2b 66 39 49 51 63 41 41 41 43 54 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 33 4a 6c 59 32 46 77 64 47 4e 6f 59 53 35 75 5a 58 51 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 Data Ascii: charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A7uxtj3+hJmOcZFooFT0Ps276PuOqGnM1jfoPbFvxWp73VC60LnYGzayHVvcFeEiF0qrwy7fQAL+gGVXU+f9IQcAAACTeyJvcmlnaW4iOiJodHRwczovL3JlY2FwdGNoYS5uZXQ6NDQzIiwiZmVhdHVyZSI6I
2024-12-05 19:20:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.8	49785	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:09 UTC	414	OUT	GET /web/res/087/9f731d8bcedd5b7e7a3975c024278/js/lib/dustmotes-iterate.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:09 UTC	789	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:09 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6737ef18-2c1" Expires: Fri, 05 Dec 2025 19:20:09 GMT Last-Modified: Sat, 16 Nov 2024 01:02:16 GMT Paypal-Debug-Id: f04b9eefd7cae Server: ECAcc (lhd/35B7) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000f04b9eefd7cae-2e74c7830acf12e6-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 705 Connection: close
2024-12-05 19:20:09 UTC	705	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 79 70 65 6f 66 20 64 65 66 69 6e 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 64 65 66 69 6e 65 2e 61 6d 64 26 26 64 65 66 69 6e 65 2e 61 6d 64 2e 64 75 73 74 3d 3d 3d 21 30 3f 64 65 66 69 6e 65 28 5b 22 64 75 73 74 2e 63 6f 72 65 22 5d 2c 74 29 3a 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3d 3d 22 6f 62 6a 65 63 74 22 3f 28 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 72 65 71 75 69 72 65 28 22 64 75 73 74 6a 73 2d 6c 69 6e 6b 65 64 69 6e 22 29 29 2c 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 2e 72 65 67 69 73 74 65 72 57 69 74 68 3d 74 29 3a 74 28 65 2e 64 75 73 74 29 7d 29 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 68 65 6c 70 65 72 73 2e 69 74 65 72 61 74 65 3d 66 Data Ascii: (function(e,t){typeof define=="function"&&define.amd&&define.amd.dust===!0?define(["dust.core"],t):typeof module=="object"?(module.exports=t(require("dustjs-linkedin")),module.exports.registerWith=t):t(e.dust)})(this,function(e){return e.helpers.iterate=f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.8	49784	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:09 UTC	530	OUT	GET /pa/js/pa.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:09 UTC	800	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:09 GMT DC: ccg11-origin-www-1.paypal.com Etag: "6735ac2d-11212+ident" Expires: Thu, 05 Dec 2024 20:20:09 GMT Last-Modified: Thu, 14 Nov 2024 07:52:13 GMT Paypal-Debug-Id: a700c3e2ec03a Server: ECAcc (lhd/35C1) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000a700c3e2ec03a-a040008f3221dba8-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 70162 Connection: close
2024-12-05 19:20:09 UTC	16383	IN	Data Raw: 2f 2a 40 20 32 30 32 34 20 50 61 79 50 61 6c 20 28 76 31 2e 39 2e 35 29 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 74 2c 65 2c 6e 29 7b 28 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 74 7c 7c 21 74 29 72 65 74 75 72 6e 20 74 3b 76 61 72 20 6e 3d 74 5b 53 79 6d 62 6f 6c 2e 74 6f 50 72 69 6d 69 74 69 76 65 5d 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6e 29 72 65 74 75 72 6e 28 22 73 74 72 69 6e 67 22 3d 3d 3d 65 3f 53 74 72 69 6e 67 3a 4e 75 6d 62 65 72 29 28 74 29 3b 74 3d 6e 2e 63 61 6c 6c 28 74 2c 65 7c 7c 22 64 65 66 61 75 6c 74 22 29 3b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d Data Ascii: /@ 2024 PayPal (v1.9.5) /!function(){"use strict";function r(t,e,n){(e=function(t){t=function(t,e){if("object"!=typeof t\|\|!t)return t;var n=t[Symbol.toPrimitive];if(void 0===n)return("string"===e?String:Number)(t);t=n.call(t,e\|\|"default");if("object"!=
2024-12-05 19:20:09 UTC	16383	IN	Data Raw: 20 22 2b 74 5b 72 5d 2e 74 72 69 6d 28 29 2c 72 21 3d 3d 74 2e 6c 65 6e 67 74 68 2d 31 26 26 28 6e 2b 3d 22 2c 20 22 29 7d 65 6c 73 65 20 6e 3d 74 3b 72 65 74 75 72 6e 20 6e 7d 76 61 72 20 5f 65 3d 7b 70 70 3a 2f 5c 2e 70 61 79 70 61 6c 5c 2e 63 6f 6d 24 2f 2c 61 6c 6c 3a 48 7d 3b 66 75 6e 63 74 69 6f 6e 20 50 65 28 74 2c 65 29 7b 76 61 72 20 6e 3d 21 31 2c 65 3d 65 7c 7c 71 3b 72 65 74 75 72 6e 20 6e 3d 5f 65 5b 74 3d 74 7c 7c 22 61 6c 6c 22 5d 2e 74 65 73 74 28 65 29 3f 21 30 3a 6e 7d 66 75 6e 63 74 69 6f 6e 20 45 28 74 2c 65 2c 6e 29 7b 74 72 79 7b 76 61 72 20 72 3d 65 2e 72 65 70 6c 61 63 65 28 22 5b 22 2c 22 2e 22 29 2e 72 65 70 6c 61 63 65 28 22 5d 22 2c 22 22 29 2e 73 70 6c 69 74 28 22 2e 22 29 2e 72 65 64 75 63 65 28 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: "+t[r].trim(),r!==t.length-1&&(n+=", ")}else n=t;return n}var _e={pp:/\.paypal\.com$/,all:H};function Pe(t,e){var n=!1,e=e\|\|q;return n=_e[t=t\|\|"all"].test(e)?!0:n}function E(t,e,n){try{var r=e.replace("[",".").replace("]","").split(".").reduce(function(t
2024-12-05 19:20:09 UTC	16383	IN	Data Raw: 29 2c 6f 3d 30 3b 6f 3c 61 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 63 3d 61 5b 6f 5d 2c 75 3d 6b 65 28 22 69 6e 70 75 74 22 2c 63 29 2c 73 3d 75 2e 6c 65 6e 67 74 68 2c 6c 3d 30 3b 6c 3c 73 3b 6c 2b 2b 29 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 68 28 65 2c 22 66 6f 63 75 73 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 5f 6c 61 73 74 46 6f 72 6d 3d 74 2c 72 2e 5f 6c 61 73 74 49 6e 70 75 74 3d 65 2c 72 2e 5f 74 72 61 63 6b 69 6e 67 46 41 7c 7c 28 72 2e 5f 74 72 61 63 6b 69 6e 67 46 41 3d 21 30 2c 22 62 65 66 6f 72 65 75 6e 6c 6f 61 64 2c 68 61 73 68 63 68 61 6e 67 65 22 2e 73 70 6c 69 74 28 22 2c 22 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 68 28 77 69 6e 64 6f 77 2c 74 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e Data Ascii: ),o=0;o<a.length;o++)for(var c=a[o],u=ke("input",c),s=u.length,l=0;l<s;l++)!function(t,e){h(e,"focus",function(){r._lastForm=t,r._lastInput=e,r._trackingFA\|\|(r._trackingFA=!0,"beforeunload,hashchange".split(",").forEach(function(t){h(window,t,function(){n
2024-12-05 19:20:10 UTC	16383	IN	Data Raw: 2e 6c 6f 61 64 56 65 6e 64 6f 72 44 65 66 61 75 6c 74 28 74 2e 6e 61 6d 65 29 7c 7c 7b 7d 2c 74 29 3b 62 72 28 74 29 26 26 28 6d 72 26 26 76 72 5b 65 5d 26 26 2d 31 21 3d 3d 76 72 5b 65 5d 2e 69 6e 64 65 78 4f 66 28 74 2e 6e 61 6d 65 29 3f 75 5b 65 5d 3d 21 31 3a 6e 2e 70 75 73 68 28 74 29 29 7d 29 2c 6e 2e 6c 65 6e 67 74 68 29 26 26 28 69 3d 7b 69 64 3a 65 2c 74 72 69 67 67 65 72 3a 6f 2e 74 72 69 67 67 65 72 2c 63 61 70 74 75 72 65 3a 6f 2e 63 61 70 74 75 72 65 2c 76 65 6e 64 6f 72 73 3a 6e 7d 2c 6f 3d 50 41 59 50 41 4c 2e 61 6e 61 6c 79 74 69 63 73 2e 6c 6f 67 4a 53 45 72 72 6f 72 2c 74 3d 69 2e 74 72 69 67 67 65 72 2e 74 79 70 65 2c 61 3d 69 2e 74 72 69 67 67 65 72 2e 63 6f 6e 64 69 74 69 6f 6e 2c 69 2e 74 72 69 67 67 65 72 2e 68 61 73 4f 77 6e 50 72 Data Ascii: .loadVendorDefault(t.name)\|\|{},t);br(t)&&(mr&&vr[e]&&-1!==vr[e].indexOf(t.name)?u[e]=!1:n.push(t))}),n.length)&&(i={id:e,trigger:o.trigger,capture:o.capture,vendors:n},o=PAYPAL.analytics.logJSError,t=i.trigger.type,a=i.trigger.condition,i.trigger.hasOwnPr
2024-12-05 19:20:10 UTC	4630	IN	Data Raw: 26 26 28 61 2e 76 61 6c 75 65 3d 4d 61 74 68 2e 6d 61 78 28 74 2e 73 74 61 72 74 54 69 6d 65 2d 6e 69 28 29 2c 30 29 2c 61 2e 65 6e 74 72 69 65 73 3d 5b 74 5d 2c 6e 28 29 29 7d 29 3b 74 26 26 28 6e 3d 52 28 6f 2c 61 2c 42 69 2c 63 2e 72 65 70 6f 72 74 41 6c 6c 43 68 61 6e 67 65 73 29 2c 72 3d 6f 69 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7a 69 5b 61 2e 69 64 5d 7c 7c 28 65 28 74 2e 74 61 6b 65 52 65 63 6f 72 64 73 28 29 29 2c 74 2e 64 69 73 63 6f 6e 6e 65 63 74 28 29 2c 7a 69 5b 61 2e 69 64 5d 3d 21 30 2c 6e 28 21 30 29 29 7d 29 2c 5b 22 6b 65 79 64 6f 77 6e 22 2c 22 63 6c 69 63 6b 22 5d 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 Data Ascii: &&(a.value=Math.max(t.startTime-ni(),0),a.entries=[t],n())});t&&(n=R(o,a,Bi,c.reportAllChanges),r=oi(function(){zi[a.id]\|\|(e(t.takeRecords()),t.disconnect(),zi[a.id]=!0,n(!0))}),["keydown","click"].forEach(function(t){addEventListener(t,function(){return

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.8	49788	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:09 UTC	586	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/modernizr-2.6.1.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:09 UTC	790	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:09 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-f4c" Expires: Fri, 05 Dec 2025 19:20:09 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: f3a81dc494ff5 Server: ECAcc (lhd/3589) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000f3a81dc494ff5-3633b02f256b70a9-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 3916 Connection: close
2024-12-05 19:20:09 UTC	3916	IN	Data Raw: 2f 2a 20 4d 6f 64 65 72 6e 69 7a 72 20 32 2e 36 2e 31 20 28 43 75 73 74 6f 6d 20 42 75 69 6c 64 29 20 7c 20 4d 49 54 20 26 20 42 53 44 0a 20 2a 20 42 75 69 6c 64 3a 20 68 74 74 70 3a 2f 2f 6d 6f 64 65 72 6e 69 7a 72 2e 63 6f 6d 2f 64 6f 77 6e 6c 6f 61 64 2f 23 2d 73 68 69 76 2d 63 73 73 63 6c 61 73 73 65 73 0a 20 2a 2f 0a 3b 77 69 6e 64 6f 77 2e 4d 6f 64 65 72 6e 69 7a 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 66 75 6e 63 74 69 6f 6e 20 75 28 61 29 7b 6a 2e 63 73 73 54 65 78 74 3d 61 7d 66 75 6e 63 74 69 6f 6e 20 76 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 75 28 70 72 65 66 69 78 65 73 2e 6a 6f 69 6e 28 61 2b 22 3b 22 29 2b 28 62 7c 7c 22 22 29 29 7d 66 75 6e 63 74 69 6f 6e 20 77 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 3d Data Ascii: /* Modernizr 2.6.1 (Custom Build) \| MIT & BSD * Build: http://modernizr.com/download/#-shiv-cssclasses */;window.Modernizr=function(a,b,c){function u(a){j.cssText=a}function v(a,b){return u(prefixes.join(a+";")+(b\|\|""))}function w(a,b){return typeof a=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.8	49792	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:09 UTC	578	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/require.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:10 UTC	792	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:10 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-3a9d" Expires: Fri, 05 Dec 2025 19:20:10 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 0bb0259cc63ed Server: ECAcc (lhd/35B9) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000000bb0259cc63ed-34afe1882060ee0e-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 15005 Connection: close
2024-12-05 19:20:10 UTC	15005	IN	Data Raw: 2f 2a 0a 20 52 65 71 75 69 72 65 4a 53 20 32 2e 31 2e 36 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 30 2d 32 30 31 32 2c 20 54 68 65 20 44 6f 6a 6f 20 46 6f 75 6e 64 61 74 69 6f 6e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 20 41 76 61 69 6c 61 62 6c 65 20 76 69 61 20 74 68 65 20 4d 49 54 20 6f 72 20 6e 65 77 20 42 53 44 20 6c 69 63 65 6e 73 65 2e 0a 20 73 65 65 3a 20 68 74 74 70 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6a 72 62 75 72 6b 65 2f 72 65 71 75 69 72 65 6a 73 20 66 6f 72 20 64 65 74 61 69 6c 73 0a 2a 2f 0a 76 61 72 20 72 65 71 75 69 72 65 6a 73 2c 72 65 71 75 69 72 65 2c 64 65 66 69 6e 65 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 62 61 29 7b 66 75 6e 63 74 69 6f 6e 20 4a 28 62 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a Data Ascii: /* RequireJS 2.1.6 Copyright (c) 2010-2012, The Dojo Foundation All Rights Reserved. Available via the MIT or new BSD license. see: http://github.com/jrburke/requirejs for details*/var requirejs,require,define;(function(ba){function J(b){return"[obj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.8	49793	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:09 UTC	373	OUT	GET /martech/tm/paypal/mktconf.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:10 UTC	797	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:10 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"673b68e7-8e2a9" Expires: Thu, 05 Dec 2024 20:20:10 GMT Last-Modified: Mon, 18 Nov 2024 16:18:47 GMT Paypal-Debug-Id: 5a5b15fcc5fdc Server: ECAcc (lhd/3586) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000005a5b15fcc5fdc-4fc7c3425c896b48-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 582313 Connection: close
2024-12-05 19:20:10 UTC	16383	IN	Data Raw: 2f 2a 21 20 32 30 32 34 20 64 6c 2d 70 70 2d 6c 61 74 6d 40 70 61 79 70 61 6c 2e 63 6f 6d 20 76 65 72 28 31 2e 31 2e 30 29 20 2a 2f 0a 2f 2a 0a 2a 20 6d 6b 74 63 6f 6e 66 2e 6a 73 20 76 31 2e 31 2e 30 20 2d 20 31 31 2d 31 38 2d 32 30 32 34 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 32 34 20 64 6c 2d 70 70 2d 6c 61 74 6d 40 70 61 79 70 61 6c 2e 63 6f 6d 0a 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 0a 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 5f 69 74 65 72 61 62 6c 65 54 6f 41 72 72 61 79 4c 69 6d 69 74 28 61 72 72 2c 20 69 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 5f 69 20 3d 20 6e 75 6c 6c 20 3d 3d 20 61 72 Data Ascii: /! 2024 dl-pp-latm@paypal.com ver(1.1.0) //** mktconf.js v1.1.0 - 11-18-2024* Copyright (c) 2024 dl-pp-latm@paypal.com*/(function () { 'use strict'; (function () { function _iterableToArrayLimit(arr, i) { var _i = null == ar
2024-12-05 19:20:10 UTC	16383	IN	Data Raw: 64 7c 69 6e 7c 6a 70 7c 6b 72 7c 6d 79 7c 6e 7a 7c 70 68 7c 73 67 7c 74 68 7c 74 77 7c 76 6e 27 2c 20 27 66 65 74 63 68 43 6f 75 6e 74 72 79 27 5d 0a 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 27 76 61 72 73 27 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 73 65 6e 64 5f 74 6f 27 3a 20 27 41 57 2d 39 36 35 33 35 32 38 36 30 2f 6c 46 56 39 43 4f 65 34 76 39 67 42 45 4a 79 37 71 4d 77 44 27 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 2c 20 7b 0a 20 20 20 20 20 20 20 20 20 20 27 6e 61 6d 65 27 3a 20 27 67 61 27 2c 0a 20 20 20 20 20 20 20 20 20 20 27 76 61 72 73 27 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 73 65 6e 64 5f 74 6f 27 3a 20 27 55 41 2d 35 33 33 38 39 37 31 38 2d 31 32 27 2c 0a 20 20 20 Data Ascii: d\|in\|jp\|kr\|my\|nz\|ph\|sg\|th\|tw\|vn', 'fetchCountry'] }, 'vars': { 'send_to': 'AW-965352860/lFV9COe4v9gBEJy7qMwD' } }, { 'name': 'ga', 'vars': { 'send_to': 'UA-53389718-12',
2024-12-05 19:20:10 UTC	16383	IN	Data Raw: 20 20 20 20 20 27 64 65 66 61 75 6c 74 56 61 6c 27 3a 20 27 27 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 65 76 65 6e 74 5f 6c 61 62 65 6c 27 3a 20 27 73 74 65 70 20 37 3a 20 65 6e 74 65 72 20 70 65 72 73 6f 6e 61 6c 20 69 6e 66 6f 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 70 61 67 65 5f 70 61 74 68 27 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 27 74 79 70 65 27 3a 20 27 76 61 72 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 27 70 61 74 68 27 3a 20 27 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 27 64 65 66 61 75 6c 74 56 61 6c 27 3a 20 27 27 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 70 61 Data Ascii: 'defaultVal': '' }, 'event_label': 'step 7: enter personal info', 'page_path': { 'type': 'var', 'path': 'location.pathname', 'defaultVal': '' }, 'pa
2024-12-05 19:20:10 UTC	16383	IN	Data Raw: 73 6f 6e 61 6c 3a 70 72 6f 64 75 63 74 3a 64 69 67 69 74 61 6c 2d 77 61 6c 6c 65 74 2d 73 65 6e 64 2d 72 65 63 65 69 76 65 2d 6d 6f 6e 65 79 2f 73 74 61 72 74 2d 73 65 6c 6c 69 6e 67 3a 3a 3a 7c 6d 61 69 6e 3a 6d 6b 74 67 3a 70 65 72 73 6f 6e 61 6c 3a 70 72 6f 64 75 63 74 3a 64 69 67 69 74 61 6c 2d 77 61 6c 6c 65 74 2d 6d 61 6e 61 67 65 2d 6d 6f 6e 65 79 3a 3a 3a 7c 6d 61 69 6e 3a 6d 6b 74 67 3a 70 65 72 73 6f 6e 61 6c 3a 70 72 6f 64 75 63 74 3a 64 69 67 69 74 61 6c 2d 77 61 6c 6c 65 74 2d 77 61 79 73 2d 74 6f 2d 70 61 79 2f 61 64 64 2d 70 61 79 6d 65 6e 74 2d 6d 65 74 68 6f 64 3a 3a 3a 7c 6d 61 69 6e 3a 6d 6b 74 67 3a 70 65 72 73 6f 6e 61 6c 3a 73 65 63 75 72 69 74 79 3a 64 69 67 69 74 61 6c 2d 77 61 6c 6c 65 74 2d 73 65 63 75 72 69 74 79 2d 61 6e 64 2d Data Ascii: sonal:product:digital-wallet-send-receive-money/start-selling:::\|main:mktg:personal:product:digital-wallet-manage-money:::\|main:mktg:personal:product:digital-wallet-ways-to-pay/add-payment-method:::\|main:mktg:personal:security:digital-wallet-security-and-
2024-12-05 19:20:10 UTC	16383	IN	Data Raw: 20 20 20 20 20 20 20 27 64 65 66 61 75 6c 74 56 61 6c 27 3a 20 27 27 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 2c 20 7b 0a 20 20 20 20 20 20 20 20 20 20 27 6e 61 6d 65 27 3a 20 27 67 61 27 2c 0a 20 20 20 20 20 20 20 20 20 20 27 76 61 72 73 27 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 73 65 6e 64 5f 74 6f 27 3a 20 27 55 41 2d 35 33 33 38 39 37 31 38 2d 31 32 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 68 69 74 54 79 70 65 27 3a 20 27 65 76 65 6e 74 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 65 76 65 6e 74 5f 63 61 74 65 67 6f 72 79 27 3a 20 27 63 6f 6e 73 75 6d 65 72 20 63 72 65 64 69 74 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 65 76 65 6e 74 5f 61 63 74 69 6f 6e 27 Data Ascii: 'defaultVal': '' } } }, { 'name': 'ga', 'vars': { 'send_to': 'UA-53389718-12', 'hitType': 'event', 'event_category': 'consumer credit', 'event_action'
2024-12-05 19:20:10 UTC	16383	IN	Data Raw: 20 20 20 20 27 74 79 70 65 27 3a 20 27 66 6e 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 6e 61 6d 65 27 3a 20 27 63 6f 6e 64 69 74 69 6f 6e 61 6c 56 61 6c 75 65 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 61 72 67 73 27 3a 20 5b 27 61 75 7c 63 32 7c 63 6e 7c 68 6b 7c 69 64 7c 69 6e 7c 6a 70 7c 6b 72 7c 6d 79 7c 6e 7a 7c 70 68 7c 73 67 7c 74 68 7c 74 77 7c 76 6e 27 2c 20 27 66 65 74 63 68 43 6f 75 6e 74 72 79 27 5d 0a 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 27 76 61 72 73 27 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 73 65 6e 64 5f 74 6f 27 3a 20 27 41 57 2d 39 36 35 33 35 32 38 36 30 2f 59 49 52 42 43 4b 6a 70 36 2d 41 42 45 4a 79 37 71 4d 77 44 27 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 Data Ascii: 'type': 'fn', 'name': 'conditionalValue', 'args': ['au\|c2\|cn\|hk\|id\|in\|jp\|kr\|my\|nz\|ph\|sg\|th\|tw\|vn', 'fetchCountry'] }, 'vars': { 'send_to': 'AW-965352860/YIRBCKjp6-ABEJy7qMwD' }
2024-12-05 19:20:10 UTC	16383	IN	Data Raw: 63 72 7c 64 6d 7c 64 6f 7c 65 63 7c 66 6b 7c 67 64 7c 67 74 7c 67 79 7c 68 6e 7c 6a 6d 7c 6b 6e 7c 6b 79 7c 6c 63 7c 6d 73 7c 6d 78 7c 6e 69 7c 70 61 7c 70 65 7c 70 79 7c 73 72 7c 73 76 7c 74 63 7c 74 74 7c 75 79 7c 76 63 7c 76 65 7c 76 67 27 2c 20 27 66 65 74 63 68 43 6f 75 6e 74 72 79 27 5d 0a 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 27 76 61 72 73 27 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 73 65 6e 64 5f 74 6f 27 3a 20 27 41 57 2d 39 39 33 37 30 31 30 34 35 2f 46 76 37 37 43 49 33 6e 32 70 63 59 45 4c 58 5a 36 74 6b 44 27 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 2c 20 7b 0a 20 20 20 20 20 20 20 20 20 20 27 6e 61 6d 65 27 3a 20 27 67 61 64 73 27 2c 0a 20 20 20 20 20 20 20 20 20 20 27 65 6e Data Ascii: cr\|dm\|do\|ec\|fk\|gd\|gt\|gy\|hn\|jm\|kn\|ky\|lc\|ms\|mx\|ni\|pa\|pe\|py\|sr\|sv\|tc\|tt\|uy\|vc\|ve\|vg', 'fetchCountry'] }, 'vars': { 'send_to': 'AW-993701045/Fv77CI3n2pcYELXZ6tkD' } }, { 'name': 'gads', 'en
2024-12-05 19:20:10 UTC	16383	IN	Data Raw: 2c 0a 20 20 20 20 20 20 20 20 20 20 27 76 61 72 73 27 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 73 65 6e 64 5f 74 6f 27 3a 20 27 41 57 2d 39 39 33 37 30 31 30 34 35 2f 58 68 49 34 43 4d 62 51 36 49 41 43 45 4c 58 5a 36 74 6b 44 27 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 2c 20 7b 0a 20 20 20 20 20 20 20 20 20 20 27 6e 61 6d 65 27 3a 20 27 67 61 64 73 27 2c 0a 20 20 20 20 20 20 20 20 20 20 27 65 6e 61 62 6c 65 27 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 74 79 70 65 27 3a 20 27 66 6e 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 6e 61 6d 65 27 3a 20 27 63 6f 6e 64 69 74 69 6f 6e 61 6c 56 61 6c 75 65 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 61 72 67 73 27 3a 20 5b 27 61 64 7c 61 65 7c 61 66 7c 61 6c 7c 61 Data Ascii: , 'vars': { 'send_to': 'AW-993701045/XhI4CMbQ6IACELXZ6tkD' } }, { 'name': 'gads', 'enable': { 'type': 'fn', 'name': 'conditionalValue', 'args': ['ad\|ae\|af\|al\|a
2024-12-05 19:20:10 UTC	16383	IN	Data Raw: 27 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 73 65 6e 64 5f 74 6f 27 3a 20 27 55 41 2d 35 33 33 38 39 37 31 38 2d 31 32 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 68 69 74 54 79 70 65 27 3a 20 27 65 76 65 6e 74 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 65 76 65 6e 74 5f 63 61 74 65 67 6f 72 79 27 3a 20 27 44 43 4d 3a 20 50 50 43 72 65 64 69 74 41 70 70 46 69 6e 44 65 63 6c 69 6e 65 64 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 65 76 65 6e 74 5f 61 63 74 69 6f 6e 27 3a 20 27 66 69 6e 69 73 68 20 64 65 63 6c 69 6e 65 64 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 65 76 65 6e 74 5f 6c 61 62 65 6c 27 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 27 74 79 70 65 27 3a 20 27 76 61 72 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ': { 'send_to': 'UA-53389718-12', 'hitType': 'event', 'event_category': 'DCM: PPCreditAppFinDeclined', 'event_action': 'finish declined', 'event_label': { 'type': 'var',
2024-12-05 19:20:10 UTC	16383	IN	Data Raw: 66 78 7c 67 61 7c 67 62 7c 67 65 7c 67 66 7c 67 67 7c 67 68 7c 67 69 7c 67 6c 7c 67 6d 7c 67 6e 7c 67 70 7c 67 71 7c 67 72 7c 67 77 7c 68 6d 7c 68 72 7c 68 75 7c 69 65 7c 69 6c 7c 69 6d 7c 69 71 7c 69 72 7c 69 73 7c 69 74 7c 6a 65 7c 6a 6f 7c 6b 65 7c 6b 67 7c 6b 6d 7c 6b 77 7c 6b 7a 7c 6c 62 7c 6c 69 7c 6c 72 7c 6c 73 7c 6c 74 7c 6c 75 7c 6c 76 7c 6c 79 7c 6d 61 7c 6d 63 7c 6d 64 7c 6d 65 7c 6d 67 7c 6d 6b 7c 6d 6c 7c 6d 71 7c 6d 72 7c 6d 74 7c 6d 75 7c 6d 77 7c 6d 7a 7c 6e 61 7c 6e 63 7c 6e 65 7c 6e 67 7c 6e 6c 7c 6e 6f 7c 6f 6d 7c 70 66 7c 70 6c 7c 70 6d 7c 70 73 7c 70 74 7c 71 61 7c 72 65 7c 72 6f 7c 72 73 7c 72 75 7c 72 77 7c 73 61 7c 73 63 7c 73 64 7c 73 65 7c 73 68 7c 73 69 7c 73 6a 7c 73 6b 7c 73 6c 7c 73 6d 7c 73 6e 7c 73 6f 7c 73 74 7c 73 79 7c Data Ascii: fx\|ga\|gb\|ge\|gf\|gg\|gh\|gi\|gl\|gm\|gn\|gp\|gq\|gr\|gw\|hm\|hr\|hu\|ie\|il\|im\|iq\|ir\|is\|it\|je\|jo\|ke\|kg\|km\|kw\|kz\|lb\|li\|lr\|ls\|lt\|lu\|lv\|ly\|ma\|mc\|md\|me\|mg\|mk\|ml\|mq\|mr\|mt\|mu\|mw\|mz\|na\|nc\|ne\|ng\|nl\|no\|om\|pf\|pl\|pm\|ps\|pt\|qa\|re\|ro\|rs\|ru\|rw\|sa\|sc\|sd\|se\|sh\|si\|sj\|sk\|sl\|sm\|sn\|so\|st\|sy\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.8	49794	18.66.161.81	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:10 UTC	1219	OUT	POST /js/ HTTP/1.1 Host: ddbm2.paypal.com Connection: keep-alive Content-Length: 6859 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: https://www.paypal.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=c0c49a91e6384eadbaa4a565394e21da1733426393114; LANG=en_US%3BUS; l7_az=dcg15.slc; ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778; datadome=2EmtQqjYJilU~DXymVMGM0PSTj7xPg6xpxnMifoAxb2eCAfOU9~xrKCHw0QBHLNV80ZXGNoAkLWUXjXjxVHSmJZ7bN5NgKfxUW~zsfs4Hiahu4elkwmhUpp1Lpvp95Vc; tsrce=authchallengenodeweb; x-pp-s=eyJ0IjoiMTczMzQyNjQwODQ4MCIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1764962408%26vteXpYrS%3D1733428208%26vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778%26vtyp%3Dnew
2024-12-05 19:20:10 UTC	6859	OUT	Data Raw: 6a 73 44 61 74 61 3d 25 37 42 25 32 32 74 74 73 74 25 32 32 25 33 41 31 32 2e 32 39 39 39 39 39 39 39 39 39 35 39 32 35 35 25 32 43 25 32 32 69 66 6f 76 25 32 32 25 33 41 66 61 6c 73 65 25 32 43 25 32 32 62 72 5f 68 25 32 32 25 33 41 39 30 37 25 32 43 25 32 32 62 72 5f 77 25 32 32 25 33 41 31 32 38 30 25 32 43 25 32 32 69 73 66 25 32 32 25 33 41 66 61 6c 73 65 25 32 43 25 32 32 6e 64 64 63 25 32 32 25 33 41 30 25 32 43 25 32 32 72 73 5f 68 25 32 32 25 33 41 31 30 32 34 25 32 43 25 32 32 72 73 5f 77 25 32 32 25 33 41 31 32 38 30 25 32 43 25 32 32 72 73 5f 63 64 25 32 32 25 33 41 32 34 25 32 43 25 32 32 70 68 65 25 32 32 25 33 41 66 61 6c 73 65 25 32 43 25 32 32 6e 6d 25 32 32 25 33 41 66 61 6c 73 65 25 32 43 25 32 32 6a 73 66 25 32 32 25 33 41 66 61 6c 73 Data Ascii: jsData=%7B%22ttst%22%3A12.299999999959255%2C%22ifov%22%3Afalse%2C%22br_h%22%3A907%2C%22br_w%22%3A1280%2C%22isf%22%3Afalse%2C%22nddc%22%3A0%2C%22rs_h%22%3A1024%2C%22rs_w%22%3A1280%2C%22rs_cd%22%3A24%2C%22phe%22%3Afalse%2C%22nm%22%3Afalse%2C%22jsf%22%3Afals
2024-12-05 19:20:10 UTC	577	IN	HTTP/1.1 200 OK Content-Type: application/json;charset=utf-8 Content-Length: 230 Connection: close Date: Thu, 05 Dec 2024 19:20:10 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: DataDome Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate Expires: 0 X-Cache: Miss from cloudfront Via: 1.1 4371cafb5460b704999500649b09e390.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH52-C1 X-Amz-Cf-Id: GXO-3mjcPl-jCi7ty5474T69FCLBGTqo1cFx61feSjU8dSRJBZ2MJQ== X-Content-Type-Options: nosniff Access-Control-Allow-Origin: *
2024-12-05 19:20:10 UTC	230	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 63 6f 6f 6b 69 65 22 3a 22 64 61 74 61 64 6f 6d 65 3d 45 4f 52 78 6a 4e 69 51 77 64 7a 76 64 45 74 66 49 57 67 59 64 6f 38 32 58 41 67 5f 34 43 66 38 66 47 4d 77 4e 44 51 72 78 43 79 51 46 63 6a 34 44 4c 72 32 39 73 55 6e 6b 58 35 4a 4d 31 72 65 66 32 59 4f 77 72 31 4d 62 4f 5f 64 48 4e 58 56 73 4d 38 64 57 51 48 31 6f 4d 6a 61 7e 65 5f 36 67 4b 68 76 61 59 64 4a 5a 46 37 59 7a 54 33 79 5a 37 5f 63 42 6d 79 44 75 47 69 53 38 39 6e 6b 3b 20 4d 61 78 2d 41 67 65 3d 32 35 39 32 30 30 30 3b 20 44 6f 6d 61 69 6e 3d 2e 70 61 79 70 61 6c 2e 63 6f 6d 3b 20 50 61 74 68 3d 2f 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4c 61 78 22 7d Data Ascii: {"status":200,"cookie":"datadome=EORxjNiQwdzvdEtfIWgYdo82XAg_4Cf8fGMwNDQrxCyQFcj4DLr29sUnkX5JM1ref2YOwr1MbO_dHNXVsM8dWQH1oMja~e_6gKhvaYdJZF7YzT3yZ7_cBmyDuGiS89nk; Max-Age=2592000; Domain=.paypal.com; Path=/; Secure; SameSite=Lax"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.8	49797	151.101.1.21	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:10 UTC	1071	OUT	GET /signin HTTP/1.1 Host: www.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=c0c49a91e6384eadbaa4a565394e21da1733426393114; LANG=en_US%3BUS; nsid=s%3AGW_RscjBMue_uO0mnkc7Z8KQBUhwfX2j.FFWOARB2%2BuuO26tFpElNMknNGOEOXTm%2FpBrBjPfDp7c; l7_az=dcg15.slc; ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778; tcs=main%3Aunifiedlogin%3A%3A%3Alogin%7CbtnLogin; datadome=2EmtQqjYJilU~DXymVMGM0PSTj7xPg6xpxnMifoAxb2eCAfOU9~xrKCHw0QBHLNV80ZXGNoAkLWUXjXjxVHSmJZ7bN5NgKfxUW~zsfs4Hiahu4elkwmhUpp1Lpvp95Vc; tsrce=authchallengenodeweb; x-pp-s=eyJ0IjoiMTczMzQyNjQwOTA4MiIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1764962409%26vteXpYrS%3D1733428209%26vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778%26vtyp%3Dnew
2024-12-05 19:20:10 UTC	1185	IN	HTTP/1.1 403 Forbidden Connection: close Content-Length: 708 Content-Type: text/html;charset=utf-8 Server: DataDome X-DataDome: protected Accept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory Charset: utf-8 Cache-Control: max-age=0, private, no-cache, no-store, must-revalidate Pragma: no-cache Access-Control-Allow-Credentials: true Access-Control-Expose-Headers: x-dd-b, x-set-cookie Access-Control-Allow-Origin: * X-DataDome-CID: AHrlqAAAAAMAg8WuNM8BK3AACC575A== X-DD-B: 1 Set-Cookie: datadome=2zSIQ6nLOyseIhoQRSN~ljKzrWXqLOG3PFrB4cQUzhceBqjeCfgVooetsKxKI34oWaTUvfSvwy_YOagypOlf4PEvJsYPbiciz7HvVuQJtF0E6p8pe5nWKIv_E8kuKWlq; Max-Age=2592000; Domain=.paypal.com; Path=/; Secure; SameSite=Lax Accept-Ranges: bytes Date: Thu, 05 Dec 2024 19:20:10 GMT Via: 1.1 varnish Paypal-Debug-Id: f9692415ad784 Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Served-By: cache-nyc-kteb1890096-NYC X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1733426411.805358,VS0,VE18 set-cookie: ddbc=1; secure; httponly Server-Timing: content-encoding;desc="",x-cdn;desc="fastly"
2024-12-05 19:20:10 UTC	708	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 70 61 79 70 61 6c 2e 63 6f 6d 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 23 63 6d 73 67 7b 61 6e 69 6d 61 74 69 6f 6e 3a 20 41 20 31 2e 35 73 3b 7d 40 6b 65 79 66 72 61 6d 65 73 20 41 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 3b 7d 39 39 25 7b 6f 70 61 63 69 74 79 3a 30 3b 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 31 3b 7d 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 30 22 3e 3c 70 20 69 64 3d 22 63 6d 73 67 22 3e 50 6c 65 61 73 65 20 65 6e 61 62 6c 65 20 4a 53 20 61 6e 64 20 64 69 73 61 62 6c 65 20 61 6e 79 20 61 64 20 62 6c 6f 63 6b 65 72 3c 2f 70 3e 3c 73 63 72 69 70 74 20 64 61 74 61 2d 63 66 61 73 79 6e 63 3d 22 66 61 6c 73 65 22 3e Data Ascii: <html><head><title>paypal.com</title><style>#cmsg{animation: A 1.5s;}@keyframes A{0%{opacity:0;}99%{opacity:0;}100%{opacity:1;}}</style></head><body style="margin:0"><p id="cmsg">Please enable JS and disable any ad blocker</p><script data-cfasync="false">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.8	49796	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:10 UTC	580	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/authchallenge.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:11 UTC	792	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:10 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-7282" Expires: Fri, 05 Dec 2025 19:20:10 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 327630712f131 Server: ECAcc (lhd/35FD) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000327630712f131-7c8448a56651b410-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 29314 Connection: close
2024-12-05 19:20:11 UTC	16383	IN	Data Raw: 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 76 61 72 20 61 75 74 6f 73 75 62 6d 69 74 20 3d 20 66 61 6c 73 65 2c 0a 09 72 65 63 61 70 74 63 68 61 43 61 6c 6c 62 61 63 6b 2c 0a 09 72 65 63 61 70 74 63 68 61 45 6e 74 65 72 70 72 69 73 65 43 61 6c 6c 62 61 63 6b 3b 0a 76 61 72 20 41 44 53 5f 46 50 54 49 20 3d 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 0a 09 76 61 72 20 61 64 73 50 6c 75 67 69 6e 44 69 76 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 63 61 70 74 63 68 61 2d 73 74 61 6e 64 61 6c 6f 6e 65 27 29 2c 0a 09 09 63 73 72 66 20 3d 20 61 64 73 50 6c 75 67 69 6e 44 69 76 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 27 64 61 74 61 2d 63 73 72 66 27 29 2c 0a 09 09 73 65 73 73 69 6f 6e 49 64 20 3d 20 61 64 73 50 6c 75 67 69 Data Ascii: 'use strict';var autosubmit = false,recaptchaCallback,recaptchaEnterpriseCallback;var ADS_FPTI = (function(){var adsPluginDiv = document.getElementById('captcha-standalone'),csrf = adsPluginDiv.getAttribute('data-csrf'),sessionId = adsPlugi
2024-12-05 19:20:11 UTC	12931	IN	Data Raw: 63 68 61 20 28 4c 49 2d 36 33 32 33 38 29 0a 0a 09 09 09 09 61 70 70 65 6e 64 49 6e 70 75 74 45 6c 65 6d 65 6e 74 54 6f 46 6f 72 6d 28 20 63 61 70 74 63 68 61 54 79 70 65 20 3d 3d 3d 20 27 61 72 6b 6f 73 65 27 3f 20 27 61 72 6b 6f 73 65 27 20 3a 20 63 61 70 74 63 68 61 54 79 70 65 20 3d 3d 3d 20 41 44 53 5f 46 50 54 49 2e 43 41 50 54 43 48 41 5f 54 59 50 45 2e 48 43 41 50 54 43 48 41 20 3f 20 41 44 53 5f 46 50 54 49 2e 43 41 50 54 43 48 41 5f 54 59 50 45 2e 48 43 41 50 54 43 48 41 3a 20 63 61 70 74 63 68 61 54 79 70 65 20 3d 3d 3d 20 41 44 53 5f 46 50 54 49 2e 43 41 50 54 43 48 41 5f 54 59 50 45 2e 47 4f 4f 47 4c 45 5f 52 45 43 41 50 54 43 48 41 56 33 20 3f 20 27 67 72 63 56 33 45 6e 74 54 6f 6b 65 6e 27 20 3a 20 63 61 70 74 63 68 61 54 79 70 65 20 3d 3d Data Ascii: cha (LI-63238)appendInputElementToForm( captchaType === 'arkose'? 'arkose' : captchaType === ADS_FPTI.CAPTCHA_TYPE.HCAPTCHA ? ADS_FPTI.CAPTCHA_TYPE.HCAPTCHA: captchaType === ADS_FPTI.CAPTCHA_TYPE.GOOGLE_RECAPTCHAV3 ? 'grcV3EntToken' : captchaType ==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.8	49795	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:10 UTC	573	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/config.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:11 UTC	790	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:10 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-7cd" Expires: Fri, 05 Dec 2025 19:20:10 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 8653374dc5fdc Server: ECAcc (lhd/35D5) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000008653374dc5fdc-6f7d76958421d6bd-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 1997 Connection: close
2024-12-05 19:20:11 UTC	1997	IN	Data Raw: 2f 2a 20 67 6c 6f 62 61 6c 20 72 65 71 75 69 72 65 6a 73 3a 74 72 75 65 20 2a 2f 0a 72 65 71 75 69 72 65 6a 73 2e 63 6f 6e 66 69 67 28 7b 0a 09 64 65 70 73 3a 20 5b 27 61 70 70 27 5d 2c 0a 09 70 61 74 68 73 3a 20 7b 0a 09 09 22 6a 71 75 65 72 79 22 3a 09 09 09 09 09 27 6c 69 62 2f 6a 71 75 65 72 79 2d 31 2e 31 32 2e 34 27 2c 0a 09 09 22 6a 71 75 65 72 79 55 49 22 3a 09 09 09 09 09 27 6c 69 62 2f 6a 71 75 65 72 79 2e 75 69 2e 6d 69 6e 69 27 2c 0a 09 09 22 6a 73 6f 6e 22 3a 09 09 09 09 09 09 28 74 79 70 65 6f 66 20 4a 53 4f 4e 20 3d 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 3f 20 27 6c 69 62 2f 6a 73 6f 6e 32 27 20 3a 20 27 65 6d 70 74 79 3a 27 2c 0a 09 09 22 75 6e 64 65 72 73 63 6f 72 65 22 3a 09 09 09 09 27 6c 69 62 2f 75 6e 64 65 72 73 63 6f 72 65 Data Ascii: /* global requirejs:true */requirejs.config({deps: ['app'],paths: {"jquery":'lib/jquery-1.12.4',"jqueryUI":'lib/jquery.ui.mini',"json":(typeof JSON === 'undefined') ? 'lib/json2' : 'empty:',"underscore":'lib/underscore

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.8	49798	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:11 UTC	412	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/modernizr-2.6.1.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:12 UTC	790	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:11 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-f4c" Expires: Fri, 05 Dec 2025 19:20:11 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: f3a81dc494ff5 Server: ECAcc (lhd/3589) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000f3a81dc494ff5-3633b02f256b70a9-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 3916 Connection: close
2024-12-05 19:20:12 UTC	3916	IN	Data Raw: 2f 2a 20 4d 6f 64 65 72 6e 69 7a 72 20 32 2e 36 2e 31 20 28 43 75 73 74 6f 6d 20 42 75 69 6c 64 29 20 7c 20 4d 49 54 20 26 20 42 53 44 0a 20 2a 20 42 75 69 6c 64 3a 20 68 74 74 70 3a 2f 2f 6d 6f 64 65 72 6e 69 7a 72 2e 63 6f 6d 2f 64 6f 77 6e 6c 6f 61 64 2f 23 2d 73 68 69 76 2d 63 73 73 63 6c 61 73 73 65 73 0a 20 2a 2f 0a 3b 77 69 6e 64 6f 77 2e 4d 6f 64 65 72 6e 69 7a 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 66 75 6e 63 74 69 6f 6e 20 75 28 61 29 7b 6a 2e 63 73 73 54 65 78 74 3d 61 7d 66 75 6e 63 74 69 6f 6e 20 76 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 75 28 70 72 65 66 69 78 65 73 2e 6a 6f 69 6e 28 61 2b 22 3b 22 29 2b 28 62 7c 7c 22 22 29 29 7d 66 75 6e 63 74 69 6f 6e 20 77 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 3d Data Ascii: /* Modernizr 2.6.1 (Custom Build) \| MIT & BSD * Build: http://modernizr.com/download/#-shiv-cssclasses */;window.Modernizr=function(a,b,c){function u(a){j.cssText=a}function v(a,b){return u(prefixes.join(a+";")+(b\|\|""))}function w(a,b){return typeof a=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.8	49799	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:11 UTC	570	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/app.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:12 UTC	797	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:12 GMT DC: ccg11-origin-www-1.paypal.com Etag: "6736db9f-4ae+br+ident" Expires: Fri, 05 Dec 2025 19:20:12 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 4e55a848c934a Server: ECAcc (lhd/35A5) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000004e55a848c934a-0939ca7ca05aa86c-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 1198 Connection: close
2024-12-05 19:20:12 UTC	1198	IN	Data Raw: 72 65 71 75 69 72 65 28 5b 27 6e 6f 75 67 61 74 27 2c 20 27 62 61 63 6b 62 6f 6e 65 27 2c 20 27 72 6f 75 74 65 72 27 2c 20 27 77 69 64 67 65 74 73 2f 61 6e 61 6c 79 74 69 63 73 27 2c 20 27 75 6e 64 65 72 73 63 6f 72 65 27 2c 20 27 6f 70 69 6e 69 6f 6e 4c 61 62 43 6f 6d 70 6f 6e 65 6e 74 27 5d 2c 0a 0a 09 66 75 6e 63 74 69 6f 6e 20 28 6e 6f 75 67 61 74 2c 20 42 61 63 6b 62 6f 6e 65 2c 20 52 6f 75 74 65 72 2c 20 41 6e 61 6c 79 74 69 63 73 2c 20 5f 29 20 7b 0a 0a 09 09 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 09 09 76 61 72 20 63 6f 6e 74 65 78 74 2c 20 76 69 65 77 4e 61 6d 65 2c 20 72 6f 75 74 65 72 3b 0a 0a 09 09 2f 2f 20 54 75 72 6e 69 6e 67 20 42 61 63 6b 62 6f 6e 65 20 69 6e 74 6f 20 61 20 70 75 62 2f 73 75 62 20 68 75 62 0a 09 09 5f 2e 65 78 74 65 6e Data Ascii: require(['nougat', 'backbone', 'router', 'widgets/analytics', 'underscore', 'opinionLabComponent'],function (nougat, Backbone, Router, Analytics, _) {'use strict';var context, viewName, router;// Turning Backbone into a pub/sub hub_.exten

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.8	49800	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:11 UTC	356	OUT	GET /pa/js/pa.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:12 UTC	800	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:12 GMT DC: ccg11-origin-www-1.paypal.com Etag: "6735ac2d-11212+ident" Expires: Thu, 05 Dec 2024 20:20:12 GMT Last-Modified: Thu, 14 Nov 2024 07:52:13 GMT Paypal-Debug-Id: a700c3e2ec03a Server: ECAcc (lhd/35C1) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000a700c3e2ec03a-a040008f3221dba8-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 70162 Connection: close
2024-12-05 19:20:12 UTC	16383	IN	Data Raw: 2f 2a 40 20 32 30 32 34 20 50 61 79 50 61 6c 20 28 76 31 2e 39 2e 35 29 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 74 2c 65 2c 6e 29 7b 28 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 74 7c 7c 21 74 29 72 65 74 75 72 6e 20 74 3b 76 61 72 20 6e 3d 74 5b 53 79 6d 62 6f 6c 2e 74 6f 50 72 69 6d 69 74 69 76 65 5d 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6e 29 72 65 74 75 72 6e 28 22 73 74 72 69 6e 67 22 3d 3d 3d 65 3f 53 74 72 69 6e 67 3a 4e 75 6d 62 65 72 29 28 74 29 3b 74 3d 6e 2e 63 61 6c 6c 28 74 2c 65 7c 7c 22 64 65 66 61 75 6c 74 22 29 3b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d Data Ascii: /@ 2024 PayPal (v1.9.5) /!function(){"use strict";function r(t,e,n){(e=function(t){t=function(t,e){if("object"!=typeof t\|\|!t)return t;var n=t[Symbol.toPrimitive];if(void 0===n)return("string"===e?String:Number)(t);t=n.call(t,e\|\|"default");if("object"!=
2024-12-05 19:20:12 UTC	16383	IN	Data Raw: 20 22 2b 74 5b 72 5d 2e 74 72 69 6d 28 29 2c 72 21 3d 3d 74 2e 6c 65 6e 67 74 68 2d 31 26 26 28 6e 2b 3d 22 2c 20 22 29 7d 65 6c 73 65 20 6e 3d 74 3b 72 65 74 75 72 6e 20 6e 7d 76 61 72 20 5f 65 3d 7b 70 70 3a 2f 5c 2e 70 61 79 70 61 6c 5c 2e 63 6f 6d 24 2f 2c 61 6c 6c 3a 48 7d 3b 66 75 6e 63 74 69 6f 6e 20 50 65 28 74 2c 65 29 7b 76 61 72 20 6e 3d 21 31 2c 65 3d 65 7c 7c 71 3b 72 65 74 75 72 6e 20 6e 3d 5f 65 5b 74 3d 74 7c 7c 22 61 6c 6c 22 5d 2e 74 65 73 74 28 65 29 3f 21 30 3a 6e 7d 66 75 6e 63 74 69 6f 6e 20 45 28 74 2c 65 2c 6e 29 7b 74 72 79 7b 76 61 72 20 72 3d 65 2e 72 65 70 6c 61 63 65 28 22 5b 22 2c 22 2e 22 29 2e 72 65 70 6c 61 63 65 28 22 5d 22 2c 22 22 29 2e 73 70 6c 69 74 28 22 2e 22 29 2e 72 65 64 75 63 65 28 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: "+t[r].trim(),r!==t.length-1&&(n+=", ")}else n=t;return n}var _e={pp:/\.paypal\.com$/,all:H};function Pe(t,e){var n=!1,e=e\|\|q;return n=_e[t=t\|\|"all"].test(e)?!0:n}function E(t,e,n){try{var r=e.replace("[",".").replace("]","").split(".").reduce(function(t
2024-12-05 19:20:12 UTC	16383	IN	Data Raw: 29 2c 6f 3d 30 3b 6f 3c 61 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 63 3d 61 5b 6f 5d 2c 75 3d 6b 65 28 22 69 6e 70 75 74 22 2c 63 29 2c 73 3d 75 2e 6c 65 6e 67 74 68 2c 6c 3d 30 3b 6c 3c 73 3b 6c 2b 2b 29 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 68 28 65 2c 22 66 6f 63 75 73 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 5f 6c 61 73 74 46 6f 72 6d 3d 74 2c 72 2e 5f 6c 61 73 74 49 6e 70 75 74 3d 65 2c 72 2e 5f 74 72 61 63 6b 69 6e 67 46 41 7c 7c 28 72 2e 5f 74 72 61 63 6b 69 6e 67 46 41 3d 21 30 2c 22 62 65 66 6f 72 65 75 6e 6c 6f 61 64 2c 68 61 73 68 63 68 61 6e 67 65 22 2e 73 70 6c 69 74 28 22 2c 22 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 68 28 77 69 6e 64 6f 77 2c 74 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e Data Ascii: ),o=0;o<a.length;o++)for(var c=a[o],u=ke("input",c),s=u.length,l=0;l<s;l++)!function(t,e){h(e,"focus",function(){r._lastForm=t,r._lastInput=e,r._trackingFA\|\|(r._trackingFA=!0,"beforeunload,hashchange".split(",").forEach(function(t){h(window,t,function(){n
2024-12-05 19:20:12 UTC	16383	IN	Data Raw: 2e 6c 6f 61 64 56 65 6e 64 6f 72 44 65 66 61 75 6c 74 28 74 2e 6e 61 6d 65 29 7c 7c 7b 7d 2c 74 29 3b 62 72 28 74 29 26 26 28 6d 72 26 26 76 72 5b 65 5d 26 26 2d 31 21 3d 3d 76 72 5b 65 5d 2e 69 6e 64 65 78 4f 66 28 74 2e 6e 61 6d 65 29 3f 75 5b 65 5d 3d 21 31 3a 6e 2e 70 75 73 68 28 74 29 29 7d 29 2c 6e 2e 6c 65 6e 67 74 68 29 26 26 28 69 3d 7b 69 64 3a 65 2c 74 72 69 67 67 65 72 3a 6f 2e 74 72 69 67 67 65 72 2c 63 61 70 74 75 72 65 3a 6f 2e 63 61 70 74 75 72 65 2c 76 65 6e 64 6f 72 73 3a 6e 7d 2c 6f 3d 50 41 59 50 41 4c 2e 61 6e 61 6c 79 74 69 63 73 2e 6c 6f 67 4a 53 45 72 72 6f 72 2c 74 3d 69 2e 74 72 69 67 67 65 72 2e 74 79 70 65 2c 61 3d 69 2e 74 72 69 67 67 65 72 2e 63 6f 6e 64 69 74 69 6f 6e 2c 69 2e 74 72 69 67 67 65 72 2e 68 61 73 4f 77 6e 50 72 Data Ascii: .loadVendorDefault(t.name)\|\|{},t);br(t)&&(mr&&vr[e]&&-1!==vr[e].indexOf(t.name)?u[e]=!1:n.push(t))}),n.length)&&(i={id:e,trigger:o.trigger,capture:o.capture,vendors:n},o=PAYPAL.analytics.logJSError,t=i.trigger.type,a=i.trigger.condition,i.trigger.hasOwnPr
2024-12-05 19:20:12 UTC	4630	IN	Data Raw: 26 26 28 61 2e 76 61 6c 75 65 3d 4d 61 74 68 2e 6d 61 78 28 74 2e 73 74 61 72 74 54 69 6d 65 2d 6e 69 28 29 2c 30 29 2c 61 2e 65 6e 74 72 69 65 73 3d 5b 74 5d 2c 6e 28 29 29 7d 29 3b 74 26 26 28 6e 3d 52 28 6f 2c 61 2c 42 69 2c 63 2e 72 65 70 6f 72 74 41 6c 6c 43 68 61 6e 67 65 73 29 2c 72 3d 6f 69 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7a 69 5b 61 2e 69 64 5d 7c 7c 28 65 28 74 2e 74 61 6b 65 52 65 63 6f 72 64 73 28 29 29 2c 74 2e 64 69 73 63 6f 6e 6e 65 63 74 28 29 2c 7a 69 5b 61 2e 69 64 5d 3d 21 30 2c 6e 28 21 30 29 29 7d 29 2c 5b 22 6b 65 79 64 6f 77 6e 22 2c 22 63 6c 69 63 6b 22 5d 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 Data Ascii: &&(a.value=Math.max(t.startTime-ni(),0),a.entries=[t],n())});t&&(n=R(o,a,Bi,c.reportAllChanges),r=oi(function(){zi[a.id]\|\|(e(t.takeRecords()),t.disconnect(),zi[a.id]=!0,n(!0))}),["keydown","click"].forEach(function(t){addEventListener(t,function(){return

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.8	49801	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:11 UTC	1017	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/hcaptcha/hcaptcha_fph.html?siteKey=bf07db68-5c2e-42e8-8779-ea8384890eea&locale.x=en_US&country.x=US&checkConnectionTimeout=10000&domain=hcaptcha.paypal.com&imgsDomain=imgs.hcaptcha.paypal.com&assetsDomain=newassets.hcaptcha.paypal.com&accountsDomain=accounts.hcaptcha.paypal.com&customDomains= HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:12 UTC	667	IN	HTTP/1.1 200 OK Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: text/html Date: Thu, 05 Dec 2024 19:20:12 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-2471" Expires: Fri, 05 Dec 2025 19:20:12 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 484a4088f052e Server: ECAcc (lhd/35BD) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000484a4088f052e-892d97c2e0d7f7f0-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 9329 Connection: close
2024-12-05 19:20:12 UTC	9329	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 0a 3c 68 65 61 64 3e 0a 09 3c 73 74 79 6c 65 3e 0a 09 09 2e 73 70 69 6e 6e 65 72 3a 61 66 74 65 72 2c 0a 09 09 2e 73 70 69 6e 6e 65 72 3a 62 65 66 6f 72 65 20 7b 0a 09 09 09 63 6f 6e 74 65 6e 74 3a 20 27 27 0a 09 09 7d 0a 0a 09 09 23 72 65 63 61 70 74 63 68 61 20 7b 0a 09 09 09 7a 2d 69 6e 64 65 78 3a 20 31 0a 09 09 7d 0a 0a 09 09 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 72 6f 74 61 74 69 6f 6e 20 7b 0a 09 09 09 66 72 6f 6d 20 7b 0a 09 09 09 09 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 29 3b 0a 09 09 09 09 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 29 0a 09 09 09 7d 0a 0a 09 09 09 74 6f 20 7b 0a 09 09 09 09 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 Data Ascii: <html><head><style>.spinner:after,.spinner:before {content: ''}#recaptcha {z-index: 1}@-webkit-keyframes rotation {from {-webkit-transform: rotate(0);transform: rotate(0)}to {-webkit-transform: r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.8	49802	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:11 UTC	576	OUT	GET /pa/3pjs/tl/6.4.65/patlcfg.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.paypal.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:12 UTC	798	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:12 GMT DC: ccg11-origin-www-1.paypal.com Etag: "6735ac2d-1c22+ident" Expires: Thu, 05 Dec 2024 20:20:12 GMT Last-Modified: Thu, 14 Nov 2024 07:52:13 GMT Paypal-Debug-Id: 9b17caaea01e4 Server: ECAcc (lhd/3599) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000009b17caaea01e4-07280370cdd6793c-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 7202 Connection: close
2024-12-05 19:20:12 UTC	7202	IN	Data Raw: 54 4c 54 2e 61 64 64 4d 6f 64 75 6c 65 28 22 64 69 67 69 74 61 6c 44 61 74 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 64 65 73 74 72 6f 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 6f 6e 65 76 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 77 65 62 45 76 65 6e 74 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 65 62 45 76 65 6e 74 26 26 77 65 62 45 76 65 6e 74 2e 74 79 70 65 26 26 77 65 62 45 76 65 6e 74 29 73 77 69 74 63 68 28 77 65 62 45 76 65 6e 74 2e 74 79 70 65 29 7b 63 61 73 65 22 6c 6f 61 64 22 3a 63 61 73 65 22 75 6e 6c 6f 61 64 22 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 66 70 74 69 26 26 28 71 4b 65 79 73 3d 77 69 6e Data Ascii: TLT.addModule("digitalData",function(){return{init:function(){},destroy:function(){},onevent:function(webEvent){if("object"==typeof webEvent&&webEvent.type&&webEvent)switch(webEvent.type){case"load":case"unload":"undefined"!=typeof window.fpti&&(qKeys=win

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.8	49804	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:12 UTC	667	OUT	GET /images/shared/momgram@2x.png HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.paypalobjects.com/web/res/5c0/6ee6d0880dac04be108377cc39752/css/app.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:12 UTC	720	IN	HTTP/1.1 200 OK Accept-CH: DPR, Viewport-Width, Width, ECT, Downlink Accept-Ranges: bytes Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: image/png Date: Thu, 05 Dec 2024 19:20:12 GMT DC: ccg11-origin-www-1.paypal.com Etag: "60271b47-7cc" Expires: Thu, 05 Dec 2024 20:20:12 GMT Last-Modified: Sat, 13 Feb 2021 00:20:23 GMT Paypal-Debug-Id: 2eaa78d91a263 Server: ECAcc (lhd/3589) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000002eaa78d91a263-d83d0b679a1b6a66-01 X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 1996 Connection: close
2024-12-05 19:20:12 UTC	1996	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 4a 08 06 00 00 00 e7 87 37 ae 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 07 86 49 44 41 54 78 01 ed 5b 6b 6c 14 45 1c ff cf ec ee 5d f7 fa e0 da d2 96 16 5a 8e d2 04 b5 b4 94 12 28 62 45 40 fd a2 89 9a 18 08 88 18 8d af 84 00 25 c4 c4 6f d6 c7 47 04 84 26 f0 45 bf 18 df 44 62 0c 9a f8 88 8f 18 34 1a 83 5a 6d 04 0d 86 47 6b 9f 5c 2d 6d ef 7a fb 1a 67 db 5e bd de ed 73 b6 bd ee 25 ce 97 dd 9b f9 ff fe f3 fb ed cc ec cc 7f 6e 16 81 8b 54 d3 d4 76 37 47 d0 46 82 34 ec 02 e6 cc 94 a0 04 00 e9 57 08 f4 02 d1 7a 88 4c fe ee b9 d0 35 02 f0 95 e2 cc 81 33 2b e4 c4 ac aa ea a9 50 a0 5c fc 03 21 b4 d4 89 fd 5c d9 10 9a 28 c1 71 02 e8 12 02 72 4e d3 d4 f7 af 74 f6 7f 0d 70 5a 65 ad c3 91 e0 e5 4d Data Ascii: PNGIHDR<J7sRGBIDATx[klE]Z(bE@%oG&EDb4ZmGk\-mzg^s%nTv7GF4WzL53+P\!\(qrNtpZeM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.8	49803	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:12 UTC	404	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/require.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:12 UTC	792	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:12 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-3a9d" Expires: Fri, 05 Dec 2025 19:20:12 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 0bb0259cc63ed Server: ECAcc (lhd/35B9) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000000bb0259cc63ed-34afe1882060ee0e-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 15005 Connection: close
2024-12-05 19:20:12 UTC	15005	IN	Data Raw: 2f 2a 0a 20 52 65 71 75 69 72 65 4a 53 20 32 2e 31 2e 36 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 30 2d 32 30 31 32 2c 20 54 68 65 20 44 6f 6a 6f 20 46 6f 75 6e 64 61 74 69 6f 6e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 20 41 76 61 69 6c 61 62 6c 65 20 76 69 61 20 74 68 65 20 4d 49 54 20 6f 72 20 6e 65 77 20 42 53 44 20 6c 69 63 65 6e 73 65 2e 0a 20 73 65 65 3a 20 68 74 74 70 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6a 72 62 75 72 6b 65 2f 72 65 71 75 69 72 65 6a 73 20 66 6f 72 20 64 65 74 61 69 6c 73 0a 2a 2f 0a 76 61 72 20 72 65 71 75 69 72 65 6a 73 2c 72 65 71 75 69 72 65 2c 64 65 66 69 6e 65 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 62 61 29 7b 66 75 6e 63 74 69 6f 6e 20 4a 28 62 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a Data Ascii: /* RequireJS 2.1.6 Copyright (c) 2010-2012, The Dojo Foundation All Rights Reserved. Available via the MIT or new BSD license. see: http://github.com/jrburke/requirejs for details*/var requirejs,require,define;(function(ba){function J(b){return"[obj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.8	49807	151.101.1.21	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:12 UTC	1661	OUT	POST /auth/logclientdata HTTP/1.1 Host: www.paypal.com Connection: keep-alive Content-Length: 549 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: application/json;charset=UTF-8 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.paypal.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.paypal.com/signin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=c0c49a91e6384eadbaa4a565394e21da1733426393114; LANG=en_US%3BUS; nsid=s%3AGW_RscjBMue_uO0mnkc7Z8KQBUhwfX2j.FFWOARB2%2BuuO26tFpElNMknNGOEOXTm%2FpBrBjPfDp7c; l7_az=dcg15.slc; ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778; tcs=main%3Aunifiedlogin%3A%3A%3Alogin%7CbtnLogin; tsrce=authchallengenodeweb; x-pp-s=eyJ0IjoiMTczMzQyNjQwOTA4MiIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1764962409%26vteXpYrS%3D1733428209%26vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778%26vtyp%3Dnew; datadome=2zSIQ6nLOyseIhoQRSN~ljKzrWXqLOG3PFrB4cQUzhceBqjeCfgVooetsKxKI34oWaTUvfSvwy_YOagypOlf4PEvJsYPbiciz7HvVuQJtF0E6p8pe5nWKIv_E8kuKWlq; ddbc=1
2024-12-05 19:20:12 UTC	549	OUT	Data Raw: 7b 22 66 70 74 69 22 3a 7b 22 70 67 72 70 22 3a 22 6d 61 69 6e 3a 61 75 74 68 63 68 61 6c 6c 65 6e 67 65 3a 3a 73 69 67 6e 69 6e 22 2c 22 70 61 67 65 22 3a 22 6d 61 69 6e 3a 61 75 74 68 63 68 61 6c 6c 65 6e 67 65 3a 3a 73 69 67 6e 69 6e 22 2c 22 70 67 73 74 22 3a 22 31 37 33 33 34 32 36 34 30 38 34 33 34 22 2c 22 63 61 6c 63 22 3a 22 66 38 37 36 38 30 39 63 66 62 66 32 38 22 2c 22 6e 73 69 64 22 3a 22 47 57 5f 52 73 63 6a 42 4d 75 65 5f 75 4f 30 6d 6e 6b 63 37 5a 38 4b 51 42 55 68 77 66 58 32 6a 22 2c 22 72 73 74 61 22 3a 22 65 6e 5f 55 53 22 2c 22 70 67 74 66 22 3a 22 4e 6f 64 65 6a 73 22 2c 22 65 6e 76 22 3a 22 6c 69 76 65 22 2c 22 73 22 3a 22 63 69 22 2c 22 63 63 70 67 22 3a 22 55 53 22 2c 22 63 73 63 69 22 3a 22 35 35 66 33 65 66 36 63 38 62 63 34 34 Data Ascii: {"fpti":{"pgrp":"main:authchallenge::signin","page":"main:authchallenge::signin","pgst":"1733426408434","calc":"f876809cfbf28","nsid":"GW_RscjBMue_uO0mnkc7Z8KQBUhwfX2j","rsta":"en_US","pgtf":"Nodejs","env":"live","s":"ci","ccpg":"US","csci":"55f3ef6c8bc44
2024-12-05 19:20:13 UTC	344	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1925 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Access-Control-Expose-Headers: Server-Timing Cache-Control: max-age=0, no-cache, no-store, must-revalidate
2024-12-05 19:20:13 UTC	2112	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6e 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 6f 62 6a 65 63 74 73 2e 70 61 79 70 61 6c 2e 63 6e 3b 20 73 63 72 69 70 74 2d 73 72 63 20 27 6e 6f 6e 63 65 2d 65 70 42 47 68 6e 76 45 64 5a 6d 64 41 73 79 68 38 73 74 61 6c 76 36 34 6f 34 63 4f 32 56 54 37 6d 51 32 32 68 78 2b 66 4b 79 52 44 58 7a 38 56 27 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6e Data Ascii: Content-Security-Policy: default-src 'self' https://.paypal.com https://.paypal.cn https://.paypalobjects.com https://objects.paypal.cn; script-src 'nonce-epBGhnvEdZmdAsyh8stalv64o4cO2VT7mQ22hx+fKyRDXz8V' 'self' https://.paypal.com https://*.paypal.cn
2024-12-05 19:20:13 UTC	1677	IN	Data Raw: 50 65 72 6d 69 73 73 69 6f 6e 73 2d 50 6f 6c 69 63 79 3a 20 63 68 2d 75 61 2d 70 6c 61 74 66 6f 72 6d 2d 76 65 72 73 69 6f 6e 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 61 72 63 68 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 77 6f 77 36 34 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 6d 6f 64 65 6c 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 66 75 6c 6c 2d 76 65 Data Ascii: Permissions-Policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-ve
2024-12-05 19:20:13 UTC	346	IN	Data Raw: 58 2d 53 65 72 76 65 64 2d 42 79 3a 20 63 61 63 68 65 2d 69 61 64 2d 6b 63 67 73 37 32 30 30 30 39 38 2d 49 41 44 2c 20 63 61 63 68 65 2d 6e 79 63 2d 6b 74 65 62 31 38 39 30 30 37 36 2d 4e 59 43 2c 20 63 61 63 68 65 2d 6e 79 63 2d 6b 74 65 62 31 38 39 30 30 37 36 2d 4e 59 43 0d 0a 58 2d 43 61 63 68 65 3a 20 4d 49 53 53 2c 20 4d 49 53 53 2c 20 4d 49 53 53 0d 0a 58 2d 43 61 63 68 65 2d 48 69 74 73 3a 20 30 2c 20 30 2c 20 30 0d 0a 58 2d 54 69 6d 65 72 3a 20 53 31 37 33 33 34 32 36 34 31 33 2e 37 37 37 34 35 34 2c 56 53 30 2c 56 45 31 33 36 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 53 65 72 76 65 72 2d 54 69 6d 69 6e 67 3a 20 22 74 72 61 63 65 70 61 72 65 6e 74 3b 64 65 73 63 3d 22 30 30 2d 30 30 30 30 30 30 30 30 30 30 30 30 Data Ascii: X-Served-By: cache-iad-kcgs7200098-IAD, cache-nyc-kteb1890076-NYC, cache-nyc-kteb1890076-NYCX-Cache: MISS, MISS, MISSX-Cache-Hits: 0, 0, 0X-Timer: S1733426413.777454,VS0,VE136Vary: Accept-EncodingServer-Timing: "traceparent;desc="00-000000000000
2024-12-05 19:20:13 UTC	1378	IN	Data Raw: 7b 22 69 73 43 6f 6f 6b 69 65 44 69 73 61 6c 62 65 64 22 3a 74 72 75 65 2c 22 63 6f 6f 6b 69 65 44 69 73 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 6f 42 72 61 6e 64 22 3a 22 75 73 22 2c 22 73 79 73 22 3a 7b 22 6c 6f 63 61 6c 69 74 79 22 3a 7b 22 74 69 6d 65 7a 6f 6e 65 22 3a 7b 22 64 65 74 65 72 6d 69 6e 65 72 22 3a 22 76 69 61 43 6f 77 50 72 69 6d 61 72 79 22 2c 22 76 61 6c 75 65 22 3a 22 41 6d 65 72 69 63 61 2f 4c 6f 73 5f 41 6e 67 65 6c 65 73 22 7d 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 5f 55 53 22 2c 22 6c 61 6e 67 75 61 67 65 22 3a 22 65 6e 22 2c 22 64 69 72 65 63 74 69 6f 6e 61 6c 69 74 79 22 3a 22 6c 74 72 22 7d 2c 22 6c 69 6e 6b 73 22 3a 7b 22 6a 73 42 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f Data Ascii: {"isCookieDisalbed":true,"cookieDisabled":false,"coBrand":"us","sys":{"locality":{"timezone":{"determiner":"viaCowPrimary","value":"America/Los_Angeles"},"country":"US","locale":"en_US","language":"en","directionality":"ltr"},"links":{"jsBaseUrl":"https:/
2024-12-05 19:20:13 UTC	547	IN	Data Raw: 6c 5c 22 3e 50 6f 6c 69 63 79 20 55 70 64 61 74 65 73 3c 2f 61 3e 22 2c 22 77 6f 72 6c 64 77 69 64 65 22 3a 22 3c 61 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 20 68 72 65 66 3d 5c 22 2f 75 73 2f 77 65 62 61 70 70 73 2f 6d 70 70 2f 63 6f 75 6e 74 72 79 2d 77 6f 72 6c 64 77 69 64 65 5c 22 3e 57 6f 72 6c 64 77 69 64 65 3c 2f 61 3e 22 7d 7d 2c 22 74 72 61 63 6b 69 6e 67 22 3a 7b 22 66 70 74 69 22 3a 7b 22 6e 61 6d 65 22 3a 22 70 74 61 22 2c 22 6a 73 55 52 4c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 22 2c 22 73 65 72 76 65 72 55 52 4c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 2e 70 61 79 70 61 6c 2e 63 6f 6d 2f 74 73 22 2c 22 64 61 74 61 53 74 72 69 6e 67 22 3a 22 70 67 72 70 3d 61 75 74 68 63 68 61 Data Ascii: l\">Policy Updates</a>","worldwide":"<a target=\"_blank\" href=\"/us/webapps/mpp/country-worldwide\">Worldwide</a>"}},"tracking":{"fpti":{"name":"pta","jsURL":"https://www.paypalobjects.com","serverURL":"https://t.paypal.com/ts","dataString":"pgrp=authcha

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.8	49805	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:12 UTC	399	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/config.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:13 UTC	790	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:13 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-7cd" Expires: Fri, 05 Dec 2025 19:20:13 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 8653374dc5fdc Server: ECAcc (lhd/35D5) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000008653374dc5fdc-6f7d76958421d6bd-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 1997 Connection: close
2024-12-05 19:20:13 UTC	1997	IN	Data Raw: 2f 2a 20 67 6c 6f 62 61 6c 20 72 65 71 75 69 72 65 6a 73 3a 74 72 75 65 20 2a 2f 0a 72 65 71 75 69 72 65 6a 73 2e 63 6f 6e 66 69 67 28 7b 0a 09 64 65 70 73 3a 20 5b 27 61 70 70 27 5d 2c 0a 09 70 61 74 68 73 3a 20 7b 0a 09 09 22 6a 71 75 65 72 79 22 3a 09 09 09 09 09 27 6c 69 62 2f 6a 71 75 65 72 79 2d 31 2e 31 32 2e 34 27 2c 0a 09 09 22 6a 71 75 65 72 79 55 49 22 3a 09 09 09 09 09 27 6c 69 62 2f 6a 71 75 65 72 79 2e 75 69 2e 6d 69 6e 69 27 2c 0a 09 09 22 6a 73 6f 6e 22 3a 09 09 09 09 09 09 28 74 79 70 65 6f 66 20 4a 53 4f 4e 20 3d 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 3f 20 27 6c 69 62 2f 6a 73 6f 6e 32 27 20 3a 20 27 65 6d 70 74 79 3a 27 2c 0a 09 09 22 75 6e 64 65 72 73 63 6f 72 65 22 3a 09 09 09 09 27 6c 69 62 2f 75 6e 64 65 72 73 63 6f 72 65 Data Ascii: /* global requirejs:true */requirejs.config({deps: ['app'],paths: {"jquery":'lib/jquery-1.12.4',"jqueryUI":'lib/jquery.ui.mini',"json":(typeof JSON === 'undefined') ? 'lib/json2' : 'empty:',"underscore":'lib/underscore

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.8	49809	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:13 UTC	406	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/authchallenge.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:13 UTC	792	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:13 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-7282" Expires: Fri, 05 Dec 2025 19:20:13 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 327630712f131 Server: ECAcc (lhd/35FD) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000327630712f131-7c8448a56651b410-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 29314 Connection: close
2024-12-05 19:20:13 UTC	15610	IN	Data Raw: 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 76 61 72 20 61 75 74 6f 73 75 62 6d 69 74 20 3d 20 66 61 6c 73 65 2c 0a 09 72 65 63 61 70 74 63 68 61 43 61 6c 6c 62 61 63 6b 2c 0a 09 72 65 63 61 70 74 63 68 61 45 6e 74 65 72 70 72 69 73 65 43 61 6c 6c 62 61 63 6b 3b 0a 76 61 72 20 41 44 53 5f 46 50 54 49 20 3d 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 0a 09 76 61 72 20 61 64 73 50 6c 75 67 69 6e 44 69 76 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 63 61 70 74 63 68 61 2d 73 74 61 6e 64 61 6c 6f 6e 65 27 29 2c 0a 09 09 63 73 72 66 20 3d 20 61 64 73 50 6c 75 67 69 6e 44 69 76 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 27 64 61 74 61 2d 63 73 72 66 27 29 2c 0a 09 09 73 65 73 73 69 6f 6e 49 64 20 3d 20 61 64 73 50 6c 75 67 69 Data Ascii: 'use strict';var autosubmit = false,recaptchaCallback,recaptchaEnterpriseCallback;var ADS_FPTI = (function(){var adsPluginDiv = document.getElementById('captcha-standalone'),csrf = adsPluginDiv.getAttribute('data-csrf'),sessionId = adsPlugi
2024-12-05 19:20:13 UTC	774	IN	Data Raw: 0a 09 09 09 09 09 69 66 28 63 68 61 6c 6c 65 6e 67 65 41 6e 73 77 65 72 20 3d 3d 3d 20 41 44 53 5f 46 50 54 49 2e 52 45 4e 44 45 52 5f 46 41 49 4c 55 52 45 29 7b 0a 09 09 09 09 09 09 63 6c 69 65 6e 74 53 74 61 74 65 20 3d 20 41 44 53 5f 46 50 54 49 2e 53 54 41 54 45 53 2e 48 43 41 50 54 43 48 41 5f 50 41 53 53 49 56 45 5f 52 45 4e 44 45 52 5f 46 41 49 4c 55 52 45 0a 09 09 09 09 09 7d 20 65 6c 73 65 20 69 66 28 63 68 61 6c 6c 65 6e 67 65 41 6e 73 77 65 72 20 3d 3d 3d 20 41 44 53 5f 46 50 54 49 2e 4e 4f 54 5f 52 45 41 43 48 41 42 4c 45 29 7b 0a 09 09 09 09 09 09 63 6c 69 65 6e 74 53 74 61 74 65 20 3d 20 41 44 53 5f 46 50 54 49 2e 53 54 41 54 45 53 2e 48 43 41 50 54 43 48 41 5f 50 41 53 53 49 56 45 5f 4e 4f 54 5f 52 45 41 43 48 41 42 4c 45 0a 09 09 09 09 09 Data Ascii: if(challengeAnswer === ADS_FPTI.RENDER_FAILURE){clientState = ADS_FPTI.STATES.HCAPTCHA_PASSIVE_RENDER_FAILURE} else if(challengeAnswer === ADS_FPTI.NOT_REACHABLE){clientState = ADS_FPTI.STATES.HCAPTCHA_PASSIVE_NOT_REACHABLE
2024-12-05 19:20:13 UTC	12930	IN	Data Raw: 68 61 20 28 4c 49 2d 36 33 32 33 38 29 0a 0a 09 09 09 09 61 70 70 65 6e 64 49 6e 70 75 74 45 6c 65 6d 65 6e 74 54 6f 46 6f 72 6d 28 20 63 61 70 74 63 68 61 54 79 70 65 20 3d 3d 3d 20 27 61 72 6b 6f 73 65 27 3f 20 27 61 72 6b 6f 73 65 27 20 3a 20 63 61 70 74 63 68 61 54 79 70 65 20 3d 3d 3d 20 41 44 53 5f 46 50 54 49 2e 43 41 50 54 43 48 41 5f 54 59 50 45 2e 48 43 41 50 54 43 48 41 20 3f 20 41 44 53 5f 46 50 54 49 2e 43 41 50 54 43 48 41 5f 54 59 50 45 2e 48 43 41 50 54 43 48 41 3a 20 63 61 70 74 63 68 61 54 79 70 65 20 3d 3d 3d 20 41 44 53 5f 46 50 54 49 2e 43 41 50 54 43 48 41 5f 54 59 50 45 2e 47 4f 4f 47 4c 45 5f 52 45 43 41 50 54 43 48 41 56 33 20 3f 20 27 67 72 63 56 33 45 6e 74 54 6f 6b 65 6e 27 20 3a 20 63 61 70 74 63 68 61 54 79 70 65 20 3d 3d 3d Data Ascii: ha (LI-63238)appendInputElementToForm( captchaType === 'arkose'? 'arkose' : captchaType === ADS_FPTI.CAPTCHA_TYPE.HCAPTCHA ? ADS_FPTI.CAPTCHA_TYPE.HCAPTCHA: captchaType === ADS_FPTI.CAPTCHA_TYPE.GOOGLE_RECAPTCHAV3 ? 'grcV3EntToken' : captchaType ===

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.8	49808	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:13 UTC	578	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/core/nougat.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:13 UTC	791	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:13 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-265b" Expires: Fri, 05 Dec 2025 19:20:13 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 5c26ec02595df Server: ECAcc (lhd/35B7) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000005c26ec02595df-de7e93c56ef83a33-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 9819 Connection: close
2024-12-05 19:20:13 UTC	9819	IN	Data Raw: 2f 2a 0a 20 2a 20 6e 6f 75 67 61 74 2e 6a 73 20 76 30 2e 30 2e 31 20 2d 20 41 70 70 6c 69 63 61 74 69 6f 6e 20 4d 65 64 69 61 74 6f 72 2f 53 61 6e 64 62 6f 78 20 4c 69 62 72 61 72 79 0a 20 2a 20 54 68 69 73 20 6d 6f 64 75 6c 65 20 70 65 72 66 6f 72 6d 73 20 74 68 65 20 66 75 6e 63 74 69 6f 6e 20 6f 66 20 6d 65 64 69 61 74 6f 72 2f 73 61 6e 64 62 6f 78 2e 0a 20 2a 0a 20 2a 20 40 61 75 74 68 6f 72 20 45 72 69 6b 20 54 6f 74 68 20 3c 65 72 74 6f 74 68 40 70 61 79 70 61 6c 2e 63 6f 6d 3e 0a 20 2a 2f 0a 0a 2f 2a 67 6c 6f 62 61 6c 20 64 65 66 69 6e 65 3a 66 61 6c 73 65 2c 20 72 65 71 75 69 72 65 6a 73 3a 74 72 75 65 20 2a 2f 0a 2f 2a 6a 73 6c 69 6e 74 20 70 6c 75 73 70 6c 75 73 3a 74 72 75 65 2c 20 6e 6f 6d 65 6e 3a 74 72 75 65 20 2a 2f 0a 0a 64 65 66 69 6e 65 Data Ascii: /* * nougat.js v0.0.1 - Application Mediator/Sandbox Library * This module performs the function of mediator/sandbox. * * @author Erik Toth <ertoth@paypal.com> //global define:false, requirejs:true //jslint plusplus:true, nomen:true */define

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.8	49806	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:13 UTC	573	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/router.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:14 UTC	790	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:14 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-72f" Expires: Fri, 05 Dec 2025 19:20:14 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 4574b38a25485 Server: ECAcc (lhd/35D0) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000004574b38a25485-d2bf40bded9091a5-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 1839 Connection: close
2024-12-05 19:20:14 UTC	1839	IN	Data Raw: 2f 2a 67 6c 6f 62 61 6c 20 64 65 66 69 6e 65 3a 74 72 75 65 2c 20 63 6f 6e 73 6f 6c 65 3a 74 72 75 65 2c 20 6a 51 75 65 72 79 3a 74 72 75 65 2c 20 72 65 71 75 69 72 65 3a 74 72 75 65 20 2a 2f 0a 0a 64 65 66 69 6e 65 28 5b 20 27 6a 71 75 65 72 79 27 2c 20 27 62 61 63 6b 62 6f 6e 65 27 5d 2c 0a 0a 09 66 75 6e 63 74 69 6f 6e 20 28 24 2c 20 42 61 63 6b 62 6f 6e 65 29 20 7b 0a 0a 09 09 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 09 09 76 61 72 20 72 6f 75 74 65 72 3b 0a 0a 09 09 72 6f 75 74 65 72 20 3d 20 42 61 63 6b 62 6f 6e 65 2e 52 6f 75 74 65 72 2e 65 78 74 65 6e 64 28 7b 0a 09 09 09 72 6f 75 74 65 73 3a 20 7b 0a 09 09 09 09 27 27 3a 20 27 73 68 6f 77 54 68 65 56 69 65 77 27 2c 0a 09 09 09 09 27 73 74 65 70 75 70 3f 2a 71 75 65 72 79 53 74 72 69 6e 67 27 Data Ascii: /global define:true, console:true, jQuery:true, require:true /define([ 'jquery', 'backbone'],function ($, Backbone) {'use strict';var router;router = Backbone.Router.extend({routes: {'': 'showTheView','stepup?*queryString'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.8	49815	151.101.3.1	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:14 UTC	1260	OUT	GET /1/api.js?endpoint=https%3A%2F%2Fhcaptcha.paypal.com&assethost=https%3A%2F%2Fnewassets.hcaptcha.paypal.com&imghost=https%3A%2F%2Fimgs.hcaptcha.paypal.com&sentry=false&reportapi=https%3A%2F%2Faccounts.hcaptcha.paypal.com&host=hcaptcha.paypal.com&onload=hCaptchaCallback&render=explicit&hl=en HTTP/1.1 Host: hcaptcha.paypal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypalobjects.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=c0c49a91e6384eadbaa4a565394e21da1733426393114; LANG=en_US%3BUS; l7_az=dcg15.slc; ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778; tsrce=authchallengenodeweb; x-pp-s=eyJ0IjoiMTczMzQyNjQwOTA4MiIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1764962409%26vteXpYrS%3D1733428209%26vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778%26vtyp%3Dnew
2024-12-05 19:20:14 UTC	637	IN	HTTP/1.1 200 OK Connection: close Content-Length: 150639 server: cloudflare etag: W/"6266f4e068faf5f1e1e5dce33fe9f2c7" cf-ray: 8ed664720a6942be-EWR cf-cache-status: HIT content-type: application/javascript x-content-type-options: nosniff age: 0 cache-control: private, max-age=300 cross-origin-resource-policy: cross-origin Accept-Ranges: bytes Date: Thu, 05 Dec 2024 19:20:14 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740061-EWR, cache-ewr-kewr1740061-EWR X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1733426414.375594,VS0,VE47 Vary: Origin, Accept-Encoding Strict-Transport-Security: max-age=31557600
2024-12-05 19:20:14 UTC	1378	IN	Data Raw: 2f 2a 20 68 74 74 70 73 3a 2f 2f 68 63 61 70 74 63 68 61 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 2e 72 65 73 6f 6c 76 65 28 65 28 29 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 7d 29 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 2e 72 65 73 6f 6c 76 65 28 65 28 29 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 72 65 6a 65 63 74 28 6e 29 7d 29 29 7d 29 Data Ascii: /* https://hcaptcha.com/license */!function(){"use strict";function e(e){var t=this.constructor;return this.then((function(n){return t.resolve(e()).then((function(){return n}))}),(function(n){return t.resolve(e()).then((function(){return t.reject(n)}))})
2024-12-05 19:20:14 UTC	1378	IN	Data Raw: 3d 6e 28 65 2e 5f 76 61 6c 75 65 29 7d 63 61 74 63 68 28 69 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 6c 28 74 2e 70 72 6f 6d 69 73 65 2c 69 29 7d 63 28 74 2e 70 72 6f 6d 69 73 65 2c 72 29 7d 65 6c 73 65 28 31 3d 3d 3d 65 2e 5f 73 74 61 74 65 3f 63 3a 6c 29 28 74 2e 70 72 6f 6d 69 73 65 2c 65 2e 5f 76 61 6c 75 65 29 7d 29 29 29 3a 65 2e 5f 64 65 66 65 72 72 65 64 73 2e 70 75 73 68 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 74 72 79 7b 69 66 28 74 3d 3d 3d 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 20 70 72 6f 6d 69 73 65 20 63 61 6e 6e 6f 74 20 62 65 20 72 65 73 6f 6c 76 65 64 20 77 69 74 68 20 69 74 73 65 6c 66 2e 22 29 3b 69 66 28 74 26 26 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 7c 7c 22 66 Data Ascii: =n(e._value)}catch(i){return void l(t.promise,i)}c(t.promise,r)}else(1===e._state?c:l)(t.promise,e._value)}))):e._deferreds.push(t)}function c(e,t){try{if(t===e)throw new TypeError("A promise cannot be resolved with itself.");if(t&&("object"==typeof t\|\|"f
2024-12-05 19:20:14 UTC	1378	IN	Data Raw: 26 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 69 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 29 29 7b 76 61 72 20 73 3d 69 2e 74 68 65 6e 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 29 72 65 74 75 72 6e 20 76 6f 69 64 20 73 2e 63 61 6c 6c 28 69 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 61 28 65 2c 74 29 7d 29 2c 6e 29 7d 72 5b 65 5d 3d 69 2c 30 3d 3d 2d 2d 6f 26 26 74 28 72 29 7d 63 61 74 63 68 28 63 29 7b 6e 28 63 29 7d 7d 66 6f 72 28 76 61 72 20 73 3d 30 3b 73 3c 72 2e 6c 65 6e 67 74 68 3b 73 2b 2b 29 61 28 73 2c 72 5b 73 5d 29 7d 29 29 7d 2c 61 2e 61 6c 6c 53 65 74 74 6c 65 64 3d 74 2c 61 2e 72 65 73 6f 6c 76 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 6f 62 6a Data Ascii: &("object"==typeof i\|\|"function"==typeof i)){var s=i.then;if("function"==typeof s)return void s.call(i,(function(t){a(e,t)}),n)}r[e]=i,0==--o&&t(r)}catch(c){n(c)}}for(var s=0;s<r.length;s++)a(s,r[s])}))},a.allSettled=t,a.resolve=function(e){return e&&"obj
2024-12-05 19:20:14 UTC	1378	IN	Data Raw: 72 73 65 28 29 7d 76 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 65 6e 64 4f 66 53 74 72 65 61 6d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 74 68 69 73 2e 74 6f 6b 65 6e 73 2e 6c 65 6e 67 74 68 7d 2c 72 65 61 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 6f 6b 65 6e 73 2e 6c 65 6e 67 74 68 3f 74 68 69 73 2e 74 6f 6b 65 6e 73 2e 70 6f 70 28 29 3a 79 7d 2c 70 72 65 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 66 6f 72 28 76 61 72 20 74 3d 65 3b 74 2e 6c 65 6e 67 74 68 3b 29 74 68 69 73 2e 74 6f 6b 65 6e 73 2e 70 75 73 68 28 74 2e 70 6f 70 28 29 29 3b 65 6c 73 65 20 74 68 69 73 2e 74 6f 6b 65 6e 73 2e 70 75 73 68 28 65 29 7d 2c 70 75 73 68 3a 66 75 6e 63 Data Ascii: rse()}v.prototype={endOfStream:function(){return!this.tokens.length},read:function(){return this.tokens.length?this.tokens.pop():y},prepend:function(e){if(Array.isArray(e))for(var t=e;t.length;)this.tokens.push(t.pop());else this.tokens.push(e)},push:func
2024-12-05 19:20:14 UTC	1378	IN	Data Raw: 74 2e 69 67 6e 6f 72 65 42 4f 4d 26 26 28 72 2e 5f 69 67 6e 6f 72 65 42 4f 4d 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 7c 7c 28 74 68 69 73 2e 65 6e 63 6f 64 69 6e 67 3d 72 2e 5f 65 6e 63 6f 64 69 6e 67 2e 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 74 68 69 73 2e 66 61 74 61 6c 3d 22 66 61 74 61 6c 22 3d 3d 3d 72 2e 5f 65 72 72 6f 72 5f 6d 6f 64 65 2c 74 68 69 73 2e 69 67 6e 6f 72 65 42 4f 4d 3d 72 2e 5f 69 67 6e 6f 72 65 42 4f 4d 29 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 41 28 65 2c 74 29 7b 69 66 28 21 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 29 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6c 6c 65 64 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 2e 20 44 69 64 20 79 6f 75 20 66 6f Data Ascii: t.ignoreBOM&&(r._ignoreBOM=!0),Object.defineProperty\|\|(this.encoding=r._encoding.name.toLowerCase(),this.fatal="fatal"===r._error_mode,this.ignoreBOM=r._ignoreBOM),r}function A(e,t){if(!(this instanceof A))throw TypeError("Called as a function. Did you fo
2024-12-05 19:20:14 UTC	1378	IN	Data Raw: 3f 28 6e 3d 32 2c 72 3d 32 32 34 29 3a 70 28 74 2c 36 35 35 33 36 2c 31 31 31 34 31 31 31 29 26 26 28 6e 3d 33 2c 72 3d 32 34 30 29 3b 66 6f 72 28 76 61 72 20 69 3d 5b 28 74 3e 3e 36 2a 6e 29 2b 72 5d 3b 6e 3e 30 3b 29 7b 76 61 72 20 6f 3d 74 3e 3e 36 2a 28 6e 2d 31 29 3b 69 2e 70 75 73 68 28 31 32 38 7c 36 33 26 6f 29 2c 6e 2d 3d 31 7d 72 65 74 75 72 6e 20 69 7d 7d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 26 26 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 4f 2e 70 72 6f 74 6f 74 79 70 65 2c 22 65 6e 63 6f 64 69 6e 67 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 65 6e 63 6f 64 69 6e 67 2e 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 7d 29 2c 4f 62 6a Data Ascii: ?(n=2,r=224):p(t,65536,1114111)&&(n=3,r=240);for(var i=[(t>>6n)+r];n>0;){var o=t>>6(n-1);i.push(128\|63&o),n-=1}return i}}Object.defineProperty&&(Object.defineProperty(O.prototype,"encoding",{get:function(){return this._encoding.name.toLowerCase()}}),Obj
2024-12-05 19:20:14 UTC	1378	IN	Data Raw: 68 69 73 2e 5f 42 4f 4d 73 65 65 6e 3d 21 30 29 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 22 22 2c 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 2b 2b 6e 29 7b 76 61 72 20 72 3d 65 5b 6e 5d 3b 72 3c 3d 36 35 35 33 35 3f 74 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 72 29 3a 28 72 2d 3d 36 35 35 33 36 2c 74 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 35 35 32 39 36 2b 28 72 3e 3e 31 30 29 2c 35 36 33 32 30 2b 28 31 30 32 33 26 72 29 29 29 7d 72 65 74 75 72 6e 20 74 7d 28 65 29 7d 2e 63 61 6c 6c 28 74 68 69 73 2c 6f 29 7d 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 41 2e 70 72 6f 74 6f 74 79 Data Ascii: his._BOMseen=!0)),function(e){for(var t="",n=0;n<e.length;++n){var r=e[n];r<=65535?t+=String.fromCharCode(r):(r-=65536,t+=String.fromCharCode(55296+(r>>10),56320+(1023&r)))}return t}(e)}.call(this,o)},Object.defineProperty&&Object.defineProperty(A.prototy
2024-12-05 19:20:14 UTC	1378	IN	Data Raw: 75 62 74 6c 65 7c 7c 74 2e 77 65 62 6b 69 74 53 75 62 74 6c 65 3b 69 66 28 6e 29 7b 76 61 72 20 72 3d 65 2e 43 72 79 70 74 6f 7c 7c 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 7c 7c 4f 62 6a 65 63 74 2c 69 3d 65 2e 53 75 62 74 6c 65 43 72 79 70 74 6f 7c 7c 6e 2e 63 6f 6e 73 74 72 75 63 74 6f 72 7c 7c 4f 62 6a 65 63 74 2c 6f 3d 28 65 2e 43 72 79 70 74 6f 4b 65 79 7c 7c 65 2e 4b 65 79 2c 65 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 69 6e 64 65 78 4f 66 28 22 45 64 67 65 2f 22 29 3e 2d 31 29 2c 61 3d 21 21 65 2e 6d 73 43 72 79 70 74 6f 26 26 21 6f 2c 73 3d 21 74 2e 73 75 62 74 6c 65 26 26 21 21 74 2e 77 65 62 6b 69 74 53 75 62 74 6c 65 3b 69 66 28 61 7c 7c 73 29 7b 76 61 72 20 63 3d 7b 4b 6f 5a 49 68 76 63 4e 41 51 45 42 3a 22 31 2e 32 2e 38 Data Ascii: ubtle\|\|t.webkitSubtle;if(n){var r=e.Crypto\|\|t.constructor\|\|Object,i=e.SubtleCrypto\|\|n.constructor\|\|Object,o=(e.CryptoKey\|\|e.Key,e.navigator.userAgent.indexOf("Edge/")>-1),a=!!e.msCrypto&&!o,s=!t.subtle&&!!t.webkitSubtle;if(a\|\|s){var c={KoZIhvcNAQEB:"1.2.8
2024-12-05 19:20:14 UTC	1378	IN	Data Raw: 2e 6b 65 79 5f 6f 70 73 29 2c 6e 2e 69 6d 70 6f 72 74 4b 65 79 28 22 6a 77 6b 22 2c 65 5b 31 5d 2c 6c 2c 75 2c 65 5b 31 5d 2e 6b 65 79 5f 6f 70 73 29 5d 29 7d 29 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 7b 70 75 62 6c 69 63 4b 65 79 3a 65 5b 30 5d 2c 70 72 69 76 61 74 65 4b 65 79 3a 65 5b 31 5d 7d 7d 29 29 3b 69 66 28 28 73 7c 7c 61 26 26 22 53 48 41 2d 31 22 3d 3d 3d 28 6c 2e 68 61 73 68 7c 7c 7b 7d 29 2e 6e 61 6d 65 29 26 26 22 69 6d 70 6f 72 74 4b 65 79 22 3d 3d 3d 65 26 26 22 6a 77 6b 22 3d 3d 3d 69 26 26 22 48 4d 41 43 22 3d 3d 3d 6c 2e 6e 61 6d 65 26 26 22 6f 63 74 22 3d 3d 3d 6f 2e 6b 74 79 29 72 65 74 75 72 6e 20 6e 2e 69 6d 70 6f 72 74 4b 65 79 28 22 72 61 77 22 2c 66 28 64 28 6f 2e 6b 29 29 2c 63 2c 62 5b 33 Data Ascii: .key_ops),n.importKey("jwk",e[1],l,u,e[1].key_ops)])})).then((function(e){return{publicKey:e[0],privateKey:e[1]}}));if((s\|\|a&&"SHA-1"===(l.hash\|\|{}).name)&&"importKey"===e&&"jwk"===i&&"HMAC"===l.name&&"oct"===o.kty)return n.importKey("raw",f(d(o.k)),c,b[3
2024-12-05 19:20:14 UTC	1378	IN	Data Raw: 72 74 4b 65 79 22 21 3d 3d 65 7c 7c 22 73 70 6b 69 22 21 3d 3d 72 26 26 22 70 6b 63 73 38 22 21 3d 3d 72 7c 7c 28 6c 5b 30 5d 3d 22 6a 77 6b 22 29 2c 61 26 26 22 77 72 61 70 4b 65 79 22 3d 3d 3d 65 29 72 65 74 75 72 6e 20 6e 2e 65 78 70 6f 72 74 4b 65 79 28 72 2c 69 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 6a 77 6b 22 3d 3d 3d 72 26 26 28 65 3d 66 28 75 6e 65 73 63 61 70 65 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 79 28 65 29 29 29 29 29 29 2c 6e 2e 65 6e 63 72 79 70 74 28 6c 5b 33 5d 2c 6f 2c 65 29 7d 29 29 3b 74 72 79 7b 63 3d 74 2e 61 70 70 6c 79 28 6e 2c 6c 29 7d 63 61 74 63 68 28 75 29 7b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 65 6a 65 63 Data Ascii: rtKey"!==e\|\|"spki"!==r&&"pkcs8"!==r\|\|(l[0]="jwk"),a&&"wrapKey"===e)return n.exportKey(r,i).then((function(e){return"jwk"===r&&(e=f(unescape(encodeURIComponent(JSON.stringify(y(e)))))),n.encrypt(l[3],o,e)}));try{c=t.apply(n,l)}catch(u){return Promise.rejec

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.8	49811	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:14 UTC	584	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/widgets/analytics.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:14 UTC	797	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:14 GMT DC: ccg11-origin-www-1.paypal.com Etag: "6736db9f-974+br+ident" Expires: Fri, 05 Dec 2025 19:20:14 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 088a9c2792b80 Server: ECAcc (lhd/3588) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000088a9c2792b80-2445d6753c41ca91-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 2420 Connection: close
2024-12-05 19:20:14 UTC	2420	IN	Data Raw: 2f 2a 67 6c 6f 62 61 6c 20 64 65 66 69 6e 65 3a 74 72 75 65 2c 20 73 3a 74 72 75 65 20 2a 2f 0a 0a 2f 2a 2a 0a 20 2a 20 40 66 69 6c 65 4f 76 65 72 76 69 65 77 20 41 6e 61 6c 79 74 69 63 73 20 e2 80 93 20 6c 69 6e 6b 20 61 6e 64 20 65 72 72 6f 72 20 74 72 61 63 6b 69 6e 67 0a 20 2a 20 40 6e 61 6d 65 20 41 6e 61 6c 79 74 69 63 73 20 57 69 64 67 65 74 0a 20 2a 20 40 61 75 74 68 6f 72 20 64 71 75 6f 63 6b 0a 20 2a 2f 0a 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 2c 20 22 42 61 73 65 56 69 65 77 22 2c 20 22 6e 6f 75 67 61 74 22 5d 2c 0a 09 66 75 6e 63 74 69 6f 6e 20 28 24 2c 20 42 61 73 65 56 69 65 77 2c 20 6e 6f 75 67 61 74 29 20 7b 0a 09 09 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 09 09 76 61 72 20 56 69 65 77 20 3d 20 42 61 73 65 56 69 65 77 2e 65 Data Ascii: /global define:true, s:true //** * @fileOverview Analytics link and error tracking * @name Analytics Widget * @author dquock */define(["jquery", "BaseView", "nougat"],function ($, BaseView, nougat) {"use strict";var View = BaseView.e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.8	49810	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:14 UTC	396	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/app.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:14 UTC	797	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:14 GMT DC: ccg11-origin-www-1.paypal.com Etag: "6736db9f-4ae+br+ident" Expires: Fri, 05 Dec 2025 19:20:14 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 4e55a848c934a Server: ECAcc (lhd/35A5) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000004e55a848c934a-0939ca7ca05aa86c-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 1198 Connection: close
2024-12-05 19:20:14 UTC	1198	IN	Data Raw: 72 65 71 75 69 72 65 28 5b 27 6e 6f 75 67 61 74 27 2c 20 27 62 61 63 6b 62 6f 6e 65 27 2c 20 27 72 6f 75 74 65 72 27 2c 20 27 77 69 64 67 65 74 73 2f 61 6e 61 6c 79 74 69 63 73 27 2c 20 27 75 6e 64 65 72 73 63 6f 72 65 27 2c 20 27 6f 70 69 6e 69 6f 6e 4c 61 62 43 6f 6d 70 6f 6e 65 6e 74 27 5d 2c 0a 0a 09 66 75 6e 63 74 69 6f 6e 20 28 6e 6f 75 67 61 74 2c 20 42 61 63 6b 62 6f 6e 65 2c 20 52 6f 75 74 65 72 2c 20 41 6e 61 6c 79 74 69 63 73 2c 20 5f 29 20 7b 0a 0a 09 09 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 09 09 76 61 72 20 63 6f 6e 74 65 78 74 2c 20 76 69 65 77 4e 61 6d 65 2c 20 72 6f 75 74 65 72 3b 0a 0a 09 09 2f 2f 20 54 75 72 6e 69 6e 67 20 42 61 63 6b 62 6f 6e 65 20 69 6e 74 6f 20 61 20 70 75 62 2f 73 75 62 20 68 75 62 0a 09 09 5f 2e 65 78 74 65 6e Data Ascii: require(['nougat', 'backbone', 'router', 'widgets/analytics', 'underscore', 'opinionLabComponent'],function (nougat, Backbone, Router, Analytics, _) {'use strict';var context, viewName, router;// Turning Backbone into a pub/sub hub_.exten

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.8	49812	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:14 UTC	597	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/opinionLab/opinionLabComponent.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:14 UTC	790	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:14 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-c3d" Expires: Fri, 05 Dec 2025 19:20:14 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 21f72a8abbe45 Server: ECAcc (lhd/35ED) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-000000000000000000021f72a8abbe45-97a297d03a7ff37c-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 3133 Connection: close
2024-12-05 19:20:14 UTC	3133	IN	Data Raw: 64 65 66 69 6e 65 28 5b 27 6f 70 69 6e 69 6f 6e 4c 61 62 27 2c 20 27 6f 6e 6c 69 6e 65 4f 70 69 6e 69 6f 6e 50 6f 70 75 70 27 5d 2c 20 66 75 6e 63 74 69 6f 6e 28 6f 70 69 6e 69 6f 6e 4c 61 62 2c 20 70 6f 70 75 70 29 20 7b 0a 0a 09 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 09 77 69 6e 64 6f 77 2e 50 41 59 50 41 4c 20 3d 20 77 69 6e 64 6f 77 2e 50 41 59 50 41 4c 20 3f 20 77 69 6e 64 6f 77 2e 50 41 59 50 41 4c 20 3a 20 7b 7d 3b 0a 09 76 61 72 20 6f 70 56 61 72 73 20 3d 20 77 69 6e 64 6f 77 2e 50 41 59 50 41 4c 2e 6f 70 69 6e 69 6f 6e 4c 61 62 56 61 72 73 3b 0a 0a 09 2f 2a 20 44 65 66 69 6e 65 73 20 74 68 65 20 72 65 66 65 72 72 61 6c 20 55 52 4c 20 2d 20 56 65 72 69 66 79 20 2a 2f 0a 09 66 75 6e 63 74 69 6f 6e 20 70 61 79 70 61 6c 55 52 4c 20 28 70 61 67 65 Data Ascii: define(['opinionLab', 'onlineOpinionPopup'], function(opinionLab, popup) {'use strict';window.PAYPAL = window.PAYPAL ? window.PAYPAL : {};var opVars = window.PAYPAL.opinionLabVars;/* Defines the referral URL - Verify */function paypalURL (page

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.8	49813	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:14 UTC	373	OUT	GET /pa/3pjs/tl/6.4.65/patlcfg.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:14 UTC	798	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:14 GMT DC: ccg11-origin-www-1.paypal.com Etag: "6735ac2d-1c22+ident" Expires: Thu, 05 Dec 2024 20:20:14 GMT Last-Modified: Thu, 14 Nov 2024 07:52:13 GMT Paypal-Debug-Id: 9b17caaea01e4 Server: ECAcc (lhd/3599) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000009b17caaea01e4-07280370cdd6793c-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 7202 Connection: close
2024-12-05 19:20:14 UTC	7202	IN	Data Raw: 54 4c 54 2e 61 64 64 4d 6f 64 75 6c 65 28 22 64 69 67 69 74 61 6c 44 61 74 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 64 65 73 74 72 6f 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 6f 6e 65 76 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 77 65 62 45 76 65 6e 74 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 65 62 45 76 65 6e 74 26 26 77 65 62 45 76 65 6e 74 2e 74 79 70 65 26 26 77 65 62 45 76 65 6e 74 29 73 77 69 74 63 68 28 77 65 62 45 76 65 6e 74 2e 74 79 70 65 29 7b 63 61 73 65 22 6c 6f 61 64 22 3a 63 61 73 65 22 75 6e 6c 6f 61 64 22 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 66 70 74 69 26 26 28 71 4b 65 79 73 3d 77 69 6e Data Ascii: TLT.addModule("digitalData",function(){return{init:function(){},destroy:function(){},onevent:function(webEvent){if("object"==typeof webEvent&&webEvent.type&&webEvent)switch(webEvent.type){case"load":case"unload":"undefined"!=typeof window.fpti&&(qKeys=win

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.8	49820	151.101.1.21	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:14 UTC	1173	OUT	GET /auth/logclientdata HTTP/1.1 Host: www.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=c0c49a91e6384eadbaa4a565394e21da1733426393114; LANG=en_US%3BUS; nsid=s%3AGW_RscjBMue_uO0mnkc7Z8KQBUhwfX2j.FFWOARB2%2BuuO26tFpElNMknNGOEOXTm%2FpBrBjPfDp7c; l7_az=dcg15.slc; ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778; tcs=main%3Aunifiedlogin%3A%3A%3Alogin%7CbtnLogin; tsrce=authchallengenodeweb; datadome=2zSIQ6nLOyseIhoQRSN~ljKzrWXqLOG3PFrB4cQUzhceBqjeCfgVooetsKxKI34oWaTUvfSvwy_YOagypOlf4PEvJsYPbiciz7HvVuQJtF0E6p8pe5nWKIv_E8kuKWlq; ddbc=1; TLTSID=71139903928702455522704624189564; TLTDID=24394070527605051854525965496125; x-pp-s=eyJ0IjoiMTczMzQyNjQxMjg2NSIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1764962412%26vteXpYrS%3D1733428212%26vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778%26vtyp%3Dnew
2024-12-05 19:20:15 UTC	345	IN	HTTP/1.1 302 Found Connection: close Content-Length: 29 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Access-Control-Expose-Headers: Server-Timing Cache-Control: max-age=0, no-cache, no-store, must-revalidate
2024-12-05 19:20:15 UTC	2082	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6e 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 6f 62 6a 65 63 74 73 2e 70 61 79 70 61 6c 2e 63 6e 3b 20 73 63 72 69 70 74 2d 73 72 63 20 27 6e 6f 6e 63 65 2d 63 48 5a 36 34 4a 49 30 4f 70 6f 5a 2f 6a 34 6c 70 65 39 4c 30 66 39 4f 39 46 37 33 61 71 41 4d 54 61 65 57 6e 39 4f 76 68 31 51 76 34 50 56 64 27 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6e Data Ascii: Content-Security-Policy: default-src 'self' https://.paypal.com https://.paypal.cn https://.paypalobjects.com https://objects.paypal.cn; script-src 'nonce-cHZ64JI0OpoZ/j4lpe9L0f9O9F73aqAMTaeWn9Ovh1Qv4PVd' 'self' https://.paypal.com https://*.paypal.cn
2024-12-05 19:20:15 UTC	1690	IN	Data Raw: 50 65 72 6d 69 73 73 69 6f 6e 73 2d 50 6f 6c 69 63 79 3a 20 63 68 2d 75 61 2d 70 6c 61 74 66 6f 72 6d 2d 76 65 72 73 69 6f 6e 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 61 72 63 68 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 77 6f 77 36 34 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 6d 6f 64 65 6c 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 66 75 6c 6c 2d 76 65 Data Ascii: Permissions-Policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-ve
2024-12-05 19:20:15 UTC	396	IN	Data Raw: 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 33 30 37 32 30 30 30 3b 20 69 6e 63 6c 75 64 65 53 75 62 44 6f 6d 61 69 6e 73 3b 20 70 72 65 6c 6f 61 64 0d 0a 58 2d 53 65 72 76 65 64 2d 42 79 3a 20 63 61 63 68 65 2d 69 61 64 2d 6b 69 61 64 37 30 30 30 30 38 35 2d 49 41 44 2c 20 63 61 63 68 65 2d 65 77 72 2d 6b 65 77 72 31 37 34 30 30 36 33 2d 45 57 52 2c 20 63 61 63 68 65 2d 65 77 72 2d 6b 65 77 72 31 37 34 30 30 36 33 2d 45 57 52 0d 0a 58 2d 43 61 63 68 65 3a 20 4d 49 53 53 2c 20 4d 49 53 53 2c 20 4d 49 53 53 0d 0a 58 2d 43 61 63 68 65 2d 48 69 74 73 3a 20 30 2c 20 30 2c 20 30 0d 0a 58 2d 54 69 6d 65 72 3a 20 53 31 37 33 33 34 32 36 34 31 35 2e 37 35 31 31 31 34 2c 56 53 30 2c 56 45 31 33 30 0d Data Ascii: Strict-Transport-Security: max-age=63072000; includeSubDomains; preloadX-Served-By: cache-iad-kiad7000085-IAD, cache-ewr-kewr1740063-EWR, cache-ewr-kewr1740063-EWRX-Cache: MISS, MISS, MISSX-Cache-Hits: 0, 0, 0X-Timer: S1733426415.751114,VS0,VE130
2024-12-05 19:20:15 UTC	29	IN	Data Raw: 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 2f 73 69 67 6e 69 6e Data Ascii: Found. Redirecting to /signin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.8	49816	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:14 UTC	584	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/jquery-1.12.4.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:15 UTC	794	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:15 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-47a35" Expires: Fri, 05 Dec 2025 19:20:15 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 88a2afba9a3a8 Server: ECAcc (lhd/35A2) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-000000000000000000088a2afba9a3a8-fc1ef7f35a139c0e-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 293429 Connection: close
2024-12-05 19:20:15 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 31 2e 31 32 2e 34 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 36 2d 30 35 2d 32 30 54 Data Ascii: /! jQuery JavaScript Library v1.12.4 * http://jquery.com/ * * Includes Sizzle.js * http://sizzlejs.com/ * * Copyright jQuery Foundation and other contributors * Released under the MIT license * http://jquery.org/license * * Date: 2016-05-20T
2024-12-05 19:20:15 UTC	16383	IN	Data Raw: 5c 5c 5c 28 29 5b 5c 5c 5d 5d 7c 22 20 2b 20 61 74 74 72 69 62 75 74 65 73 20 2b 20 22 29 2a 29 7c 22 20 2b 0a 09 09 2f 2f 20 33 2e 20 61 6e 79 74 68 69 6e 67 20 65 6c 73 65 20 28 63 61 70 74 75 72 65 20 32 29 0a 09 09 22 2e 2a 22 20 2b 0a 09 09 22 29 5c 5c 29 7c 29 22 2c 0a 0a 09 2f 2f 20 4c 65 61 64 69 6e 67 20 61 6e 64 20 6e 6f 6e 2d 65 73 63 61 70 65 64 20 74 72 61 69 6c 69 6e 67 20 77 68 69 74 65 73 70 61 63 65 2c 20 63 61 70 74 75 72 69 6e 67 20 73 6f 6d 65 20 6e 6f 6e 2d 77 68 69 74 65 73 70 61 63 65 20 63 68 61 72 61 63 74 65 72 73 20 70 72 65 63 65 64 69 6e 67 20 74 68 65 20 6c 61 74 74 65 72 0a 09 72 77 68 69 74 65 73 70 61 63 65 20 3d 20 6e 65 77 20 52 65 67 45 78 70 28 20 77 68 69 74 65 73 70 61 63 65 20 2b 20 22 2b 22 2c 20 22 67 22 20 29 2c Data Ascii: \\$)[\\]]\|" + attributes + "))\|" +// 3. anything else (capture 2)"." +")\$\|)",// Leading and non-escaped trailing whitespace, capturing some non-whitespace characters preceding the latterrwhitespace = new RegExp( whitespace + "+", "g" ),
2024-12-05 19:20:15 UTC	16383	IN	Data Raw: 63 74 6f 72 41 6c 6c 28 22 5b 6d 73 61 6c 6c 6f 77 63 61 70 74 75 72 65 5e 3d 27 27 5d 22 29 2e 6c 65 6e 67 74 68 20 29 20 7b 0a 09 09 09 09 72 62 75 67 67 79 51 53 41 2e 70 75 73 68 28 20 22 5b 2a 5e 24 5d 3d 22 20 2b 20 77 68 69 74 65 73 70 61 63 65 20 2b 20 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 20 29 3b 0a 09 09 09 7d 0a 0a 09 09 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 49 45 38 0a 09 09 09 2f 2f 20 42 6f 6f 6c 65 61 6e 20 61 74 74 72 69 62 75 74 65 73 20 61 6e 64 20 22 76 61 6c 75 65 22 20 61 72 65 20 6e 6f 74 20 74 72 65 61 74 65 64 20 63 6f 72 72 65 63 74 6c 79 0a 09 09 09 69 66 20 28 20 21 64 69 76 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 73 65 6c 65 63 74 65 64 5d 22 29 2e 6c 65 6e 67 74 68 20 29 20 7b 0a 09 09 09 09 72 62 75 Data Ascii: ctorAll("[msallowcapture^='']").length ) {rbuggyQSA.push( "[^$]=" + whitespace + "(?:''\|\"\")" );}// Support: IE8// Boolean attributes and "value" are not treated correctlyif ( !div.querySelectorAll("[selected]").length ) {rbu
2024-12-05 19:20:15 UTC	16383	IN	Data Raw: 65 78 20 3d 20 30 29 20 7c 7c 20 73 74 61 72 74 2e 70 6f 70 28 29 29 20 29 20 7b 0a 0a 09 09 09 09 09 09 09 09 09 69 66 20 28 20 28 20 6f 66 54 79 70 65 20 3f 0a 09 09 09 09 09 09 09 09 09 09 6e 6f 64 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 20 3d 3d 3d 20 6e 61 6d 65 20 3a 0a 09 09 09 09 09 09 09 09 09 09 6e 6f 64 65 2e 6e 6f 64 65 54 79 70 65 20 3d 3d 3d 20 31 20 29 20 26 26 0a 09 09 09 09 09 09 09 09 09 09 2b 2b 64 69 66 66 20 29 20 7b 0a 0a 09 09 09 09 09 09 09 09 09 09 2f 2f 20 43 61 63 68 65 20 74 68 65 20 69 6e 64 65 78 20 6f 66 20 65 61 63 68 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 65 6c 65 6d 65 6e 74 0a 09 09 09 09 09 09 09 09 09 09 69 66 20 28 20 75 73 65 43 61 63 68 65 20 29 20 7b 0a 09 09 09 09 09 09 09 09 09 09 Data Ascii: ex = 0) \|\| start.pop()) ) {if ( ( ofType ?node.nodeName.toLowerCase() === name :node.nodeType === 1 ) &&++diff ) {// Cache the index of each encountered elementif ( useCache ) {
2024-12-05 19:20:15 UTC	16383	IN	Data Raw: 29 3b 0a 0a 09 09 09 2f 2f 20 52 65 74 75 72 6e 20 73 70 65 63 69 61 6c 20 75 70 6f 6e 20 73 65 65 69 6e 67 20 61 20 70 6f 73 69 74 69 6f 6e 61 6c 20 6d 61 74 63 68 65 72 0a 09 09 09 69 66 20 28 20 6d 61 74 63 68 65 72 5b 20 65 78 70 61 6e 64 6f 20 5d 20 29 20 7b 0a 09 09 09 09 2f 2f 20 46 69 6e 64 20 74 68 65 20 6e 65 78 74 20 72 65 6c 61 74 69 76 65 20 6f 70 65 72 61 74 6f 72 20 28 69 66 20 61 6e 79 29 20 66 6f 72 20 70 72 6f 70 65 72 20 68 61 6e 64 6c 69 6e 67 0a 09 09 09 09 6a 20 3d 20 2b 2b 69 3b 0a 09 09 09 09 66 6f 72 20 28 20 3b 20 6a 20 3c 20 6c 65 6e 3b 20 6a 2b 2b 20 29 20 7b 0a 09 09 09 09 09 69 66 20 28 20 45 78 70 72 2e 72 65 6c 61 74 69 76 65 5b 20 74 6f 6b 65 6e 73 5b 6a 5d 2e 74 79 70 65 20 5d 20 29 20 7b 0a 09 09 09 09 09 09 62 72 65 61 Data Ascii: );// Return special upon seeing a positional matcherif ( matcher[ expando ] ) {// Find the next relative operator (if any) for proper handlingj = ++i;for ( ; j < len; j++ ) {if ( Expr.relative[ tokens[j].type ] ) {brea
2024-12-05 19:20:15 UTC	16383	IN	Data Raw: 41 6c 6c 29 29 2f 2c 0a 0a 09 2f 2f 20 6d 65 74 68 6f 64 73 20 67 75 61 72 61 6e 74 65 65 64 20 74 6f 20 70 72 6f 64 75 63 65 20 61 20 75 6e 69 71 75 65 20 73 65 74 20 77 68 65 6e 20 73 74 61 72 74 69 6e 67 20 66 72 6f 6d 20 61 20 75 6e 69 71 75 65 20 73 65 74 0a 09 67 75 61 72 61 6e 74 65 65 64 55 6e 69 71 75 65 20 3d 20 7b 0a 09 09 63 68 69 6c 64 72 65 6e 3a 20 74 72 75 65 2c 0a 09 09 63 6f 6e 74 65 6e 74 73 3a 20 74 72 75 65 2c 0a 09 09 6e 65 78 74 3a 20 74 72 75 65 2c 0a 09 09 70 72 65 76 3a 20 74 72 75 65 0a 09 7d 3b 0a 0a 6a 51 75 65 72 79 2e 66 6e 2e 65 78 74 65 6e 64 28 20 7b 0a 09 68 61 73 3a 20 66 75 6e 63 74 69 6f 6e 28 20 74 61 72 67 65 74 20 29 20 7b 0a 09 09 76 61 72 20 69 2c 0a 09 09 09 74 61 72 67 65 74 73 20 3d 20 6a 51 75 65 72 79 28 20 Data Ascii: All))/,// methods guaranteed to produce a unique set when starting from a unique setguaranteedUnique = {children: true,contents: true,next: true,prev: true};jQuery.fn.extend( {has: function( target ) {var i,targets = jQuery(
2024-12-05 19:20:15 UTC	16383	IN	Data Raw: 75 74 20 73 61 66 65 20 61 6c 73 6f 20 66 6f 72 20 69 66 72 61 6d 65 73 0a 09 09 09 64 6f 63 75 6d 65 6e 74 2e 61 74 74 61 63 68 45 76 65 6e 74 28 20 22 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 22 2c 20 63 6f 6d 70 6c 65 74 65 64 20 29 3b 0a 0a 09 09 09 2f 2f 20 41 20 66 61 6c 6c 62 61 63 6b 20 74 6f 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 2c 20 74 68 61 74 20 77 69 6c 6c 20 61 6c 77 61 79 73 20 77 6f 72 6b 0a 09 09 09 77 69 6e 64 6f 77 2e 61 74 74 61 63 68 45 76 65 6e 74 28 20 22 6f 6e 6c 6f 61 64 22 2c 20 63 6f 6d 70 6c 65 74 65 64 20 29 3b 0a 0a 09 09 09 2f 2f 20 49 66 20 49 45 20 61 6e 64 20 6e 6f 74 20 61 20 66 72 61 6d 65 0a 09 09 09 2f 2f 20 63 6f 6e 74 69 6e 75 61 6c 6c 79 20 63 68 65 63 6b 20 74 6f 20 73 65 65 20 69 66 20 74 68 65 Data Ascii: ut safe also for iframesdocument.attachEvent( "onreadystatechange", completed );// A fallback to window.onload, that will always workwindow.attachEvent( "onload", completed );// If IE and not a frame// continually check to see if the
2024-12-05 19:20:15 UTC	16383	IN	Data Raw: 65 50 61 72 74 73 2c 20 74 77 65 65 6e 20 29 20 7b 0a 09 76 61 72 20 61 64 6a 75 73 74 65 64 2c 0a 09 09 73 63 61 6c 65 20 3d 20 31 2c 0a 09 09 6d 61 78 49 74 65 72 61 74 69 6f 6e 73 20 3d 20 32 30 2c 0a 09 09 63 75 72 72 65 6e 74 56 61 6c 75 65 20 3d 20 74 77 65 65 6e 20 3f 0a 09 09 09 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 72 65 74 75 72 6e 20 74 77 65 65 6e 2e 63 75 72 28 29 3b 20 7d 20 3a 0a 09 09 09 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 72 65 74 75 72 6e 20 6a 51 75 65 72 79 2e 63 73 73 28 20 65 6c 65 6d 2c 20 70 72 6f 70 2c 20 22 22 20 29 3b 20 7d 2c 0a 09 09 69 6e 69 74 69 61 6c 20 3d 20 63 75 72 72 65 6e 74 56 61 6c 75 65 28 29 2c 0a 09 09 75 6e 69 74 20 3d 20 76 61 6c 75 65 50 61 72 74 73 20 26 26 20 76 61 6c 75 65 50 61 72 74 73 5b 20 33 20 5d Data Ascii: eParts, tween ) {var adjusted,scale = 1,maxIterations = 20,currentValue = tween ?function() { return tween.cur(); } :function() { return jQuery.css( elem, prop, "" ); },initial = currentValue(),unit = valueParts && valueParts[ 3 ]
2024-12-05 19:20:15 UTC	16383	IN	Data Raw: 74 48 61 6e 64 6c 65 20 29 20 3d 3d 3d 20 66 61 6c 73 65 20 29 20 7b 0a 0a 09 09 09 09 09 2f 2f 20 42 69 6e 64 20 74 68 65 20 67 6c 6f 62 61 6c 20 65 76 65 6e 74 20 68 61 6e 64 6c 65 72 20 74 6f 20 74 68 65 20 65 6c 65 6d 65 6e 74 0a 09 09 09 09 09 69 66 20 28 20 65 6c 65 6d 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 20 29 20 7b 0a 09 09 09 09 09 09 65 6c 65 6d 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 20 74 79 70 65 2c 20 65 76 65 6e 74 48 61 6e 64 6c 65 2c 20 66 61 6c 73 65 20 29 3b 0a 0a 09 09 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 20 65 6c 65 6d 2e 61 74 74 61 63 68 45 76 65 6e 74 20 29 20 7b 0a 09 09 09 09 09 09 65 6c 65 6d 2e 61 74 74 61 63 68 45 76 65 6e 74 28 20 22 6f 6e 22 20 2b 20 74 79 70 65 2c 20 65 76 65 6e 74 48 61 6e Data Ascii: tHandle ) === false ) {// Bind the global event handler to the elementif ( elem.addEventListener ) {elem.addEventListener( type, eventHandle, false );} else if ( elem.attachEvent ) {elem.attachEvent( "on" + type, eventHan
2024-12-05 19:20:15 UTC	16383	IN	Data Raw: 76 65 45 76 65 6e 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 20 3f 0a 09 66 75 6e 63 74 69 6f 6e 28 20 65 6c 65 6d 2c 20 74 79 70 65 2c 20 68 61 6e 64 6c 65 20 29 20 7b 0a 0a 09 09 2f 2f 20 54 68 69 73 20 22 69 66 22 20 69 73 20 6e 65 65 64 65 64 20 66 6f 72 20 70 6c 61 69 6e 20 6f 62 6a 65 63 74 73 0a 09 09 69 66 20 28 20 65 6c 65 6d 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 20 29 20 7b 0a 09 09 09 65 6c 65 6d 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 20 74 79 70 65 2c 20 68 61 6e 64 6c 65 20 29 3b 0a 09 09 7d 0a 09 7d 20 3a 0a 09 66 75 6e 63 74 69 6f 6e 28 20 65 6c 65 6d 2c 20 74 79 70 65 2c 20 68 61 6e 64 6c 65 20 29 20 7b 0a 09 09 76 61 72 20 6e 61 6d 65 20 3d Data Ascii: veEvent = document.removeEventListener ?function( elem, type, handle ) {// This "if" is needed for plain objectsif ( elem.removeEventListener ) {elem.removeEventListener( type, handle );}} :function( elem, type, handle ) {var name =

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.8	49821	151.101.3.1	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:14 UTC	3679	OUT	GET /ts?v=1.9.5&t=1733426412465&g=300&pgrp=authchallengenodeweb%2Flayouts%2Fmaster.html.dust&page=authchallengenodeweb%2Flayouts%2Fmaster.html.dust&pgst=1733426408434&calc=f876809cfbf28&nsid=GW_RscjBMue_uO0mnkc7Z8KQBUhwfX2j&rsta=en_US&pgtf=Nodejs&env=live&s=ci&ccpg=US&csci=55f3ef6c8bc44e84b7b3591ab89cc647&comp=authchallengenodeweb&tsrce=unifiedloginnodeweb&cu=0&ef_policy=ccpa&xe=109541%2C107585&xt=145835%2C135393&e=im&pglk=main%3Aunifiedlogin%3A%3A%3Alogin%7CbtnLogin&imsrc=setup&view=%7B%22t10%22%3A1356%2C%22t11%22%3A6702%2C%22tcp%22%3A4567%2C%22et%22%3A%223g%22%2C%22nt%22%3A%22navigate%22%2C%22bt%22%3A153%7D&ru=https%3A%2F%2Fwww.paypal.com%2Fsignin%2F%3FreturnUri%3D%252Fmyaccount%252Ftransfer%252FpayRequest%252FU-09584045BD498740V%252FU-5R763959NX153980F%253FclassicUrl%253D%252FUS%252Fcgi-bin%252F%253Fcmd%253D_prq%26id%3DOoO85MXTLVUkAlgY4sey9A8h.NxxqjO.iYbAWg%26expId%3Dp2p%26onboardData%3D%257B%2522signUpRequest%2522%253A%257B%2522method%2522%253A%2522get%2522%252C%2522url%2522%253A%2522https%253A%252F%252Fw [TRUNCATED] Host: t.paypal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.paypal.com/signin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=c0c49a91e6384eadbaa4a565394e21da1733426393114; LANG=en_US%3BUS; l7_az=dcg15.slc; ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778; tsrce=authchallengenodeweb; datadome=2zSIQ6nLOyseIhoQRSN~ljKzrWXqLOG3PFrB4cQUzhceBqjeCfgVooetsKxKI34oWaTUvfSvwy_YOagypOlf4PEvJsYPbiciz7HvVuQJtF0E6p8pe5nWKIv_E8kuKWlq; TLTSID=71139903928702455522704624189564; TLTDID=24394070527605051854525965496125; x-pp-s=eyJ0IjoiMTczMzQyNjQxMjg2NSIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1764962412%26vteXpYrS%3D1733428212%26vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778%26vtyp%3Dnew
2024-12-05 19:20:15 UTC	1361	IN	HTTP/1.1 200 OK Connection: close Access-Control-Expose-Headers: Server-Timing CORRELATION-ID: 7133f153739ea Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Type: image/gif Expires: Thu, 05 Dec 2024 19:20:15 GMT P3p: CP="CAO IND OUR SAM UNI STA COR COM" Paypal-Debug-Id: 7133f153739ea Pragma: no-cache Set-Cookie: ts=vreXpYrS%3D1764962415%26vteXpYrS%3D1733428215%26vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778%26vtyp%3Dnew;Expires=Fri, 05 Dec 2025 19:20:15 GMT;domain=.paypal.com;path=/;secure;HttpOnly;SameSite=None; Set-Cookie: ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778;Expires=Fri, 05 Dec 2025 19:20:15 GMT;domain=.paypal.com;path=/;secure;SameSite=None; Traceparent: 00-00000000000000000007133f153739ea-82d717ac856f1196-01 Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Date: Thu, 05 Dec 2024 19:20:15 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Served-By: cache-iad-kiad7000144-IAD, cache-ewr-kewr1740046-EWR X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1733426415.149521,VS0,VE102 vary: Accept-Encoding Server-Timing: "traceparent;desc="00-00000000000000000007133f153739ea-9a85c2de09aba29b-01"";content-encoding;desc="",x-cdn;desc="fastly" Timing-Allow-Origin: * transfer-encoding: chunked
2024-12-05 19:20:15 UTC	4	IN	Data Raw: 32 61 0d 0a Data Ascii: 2a
2024-12-05 19:20:15 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 01 01 32 00 3b Data Ascii: GIF89a!,2;
2024-12-05 19:20:15 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.8	49819	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:15 UTC	373	OUT	GET /images/shared/momgram@2x.png HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:15 UTC	720	IN	HTTP/1.1 200 OK Accept-CH: DPR, Viewport-Width, Width, ECT, Downlink Accept-Ranges: bytes Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: image/png Date: Thu, 05 Dec 2024 19:20:15 GMT DC: ccg11-origin-www-1.paypal.com Etag: "60271b47-7cc" Expires: Thu, 05 Dec 2024 20:20:15 GMT Last-Modified: Sat, 13 Feb 2021 00:20:23 GMT Paypal-Debug-Id: 2eaa78d91a263 Server: ECAcc (lhd/3589) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000002eaa78d91a263-d83d0b679a1b6a66-01 X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 1996 Connection: close
2024-12-05 19:20:15 UTC	1996	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 4a 08 06 00 00 00 e7 87 37 ae 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 07 86 49 44 41 54 78 01 ed 5b 6b 6c 14 45 1c ff cf ec ee 5d f7 fa e0 da d2 96 16 5a 8e d2 04 b5 b4 94 12 28 62 45 40 fd a2 89 9a 18 08 88 18 8d af 84 00 25 c4 c4 6f d6 c7 47 04 84 26 f0 45 bf 18 df 44 62 0c 9a f8 88 8f 18 34 1a 83 5a 6d 04 0d 86 47 6b 9f 5c 2d 6d ef 7a fb 1a 67 db 5e bd de ed 73 b6 bd ee 25 ce 97 dd 9b f9 ff fe f3 fb ed cc ec cc 7f 6e 16 81 8b 54 d3 d4 76 37 47 d0 46 82 34 ec 02 e6 cc 94 a0 04 00 e9 57 08 f4 02 d1 7a 88 4c fe ee b9 d0 35 02 f0 95 e2 cc 81 33 2b e4 c4 ac aa ea a9 50 a0 5c fc 03 21 b4 d4 89 fd 5c d9 10 9a 28 c1 71 02 e8 12 02 72 4e d3 d4 f7 af 74 f6 7f 0d 70 5a 65 ad c3 91 e0 e5 4d Data Ascii: PNGIHDR<J7sRGBIDATx[klE]Z(bE@%oG&EDb4ZmGk\-mzg^s%nTv7GF4WzL53+P\!\(qrNtpZeM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.8	49817	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:15 UTC	588	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/underscore-1.13.4.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:15 UTC	792	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:15 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-ffa1" Expires: Fri, 05 Dec 2025 19:20:15 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 74daf48a20eec Server: ECAcc (lhd/35A9) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-000000000000000000074daf48a20eec-95d4c89ec21fba24-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 65441 Connection: close
2024-12-05 19:20:15 UTC	16383	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 67 6c 6f 62 61 6c 2c 20 66 61 63 74 6f 72 79 29 20 7b 0a 09 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 20 3d 3d 3d 20 27 6f 62 6a 65 63 74 27 20 26 26 20 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 3f 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 20 3d 20 66 61 63 74 6f 72 79 28 29 20 3a 0a 09 74 79 70 65 6f 66 20 64 65 66 69 6e 65 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 20 26 26 20 64 65 66 69 6e 65 2e 61 6d 64 20 3f 20 64 65 66 69 6e 65 28 27 75 6e 64 65 72 73 63 6f 72 65 27 2c 20 66 61 63 74 6f 72 79 29 20 3a 0a 09 28 67 6c 6f 62 61 6c 20 3d 20 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 3f 20 67 6c 6f 62 61 6c 54 Data Ascii: (function (global, factory) {typeof exports === 'object' && typeof module !== 'undefined' ? module.exports = factory() :typeof define === 'function' && define.amd ? define('underscore', factory) :(global = typeof globalThis !== 'undefined' ? globalT
2024-12-05 19:20:15 UTC	16383	IN	Data Raw: 65 70 20 65 71 75 61 6c 69 74 79 2e 0a 09 09 69 66 20 28 6b 65 79 73 28 62 29 2e 6c 65 6e 67 74 68 20 21 3d 3d 20 6c 65 6e 67 74 68 29 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 09 09 77 68 69 6c 65 20 28 6c 65 6e 67 74 68 2d 2d 29 20 7b 0a 09 09 20 20 2f 2f 20 44 65 65 70 20 63 6f 6d 70 61 72 65 20 65 61 63 68 20 6d 65 6d 62 65 72 0a 09 09 20 20 6b 65 79 20 3d 20 5f 6b 65 79 73 5b 6c 65 6e 67 74 68 5d 3b 0a 09 09 20 20 69 66 20 28 21 28 68 61 73 24 31 28 62 2c 20 6b 65 79 29 20 26 26 20 65 71 28 61 5b 6b 65 79 5d 2c 20 62 5b 6b 65 79 5d 2c 20 61 53 74 61 63 6b 2c 20 62 53 74 61 63 6b 29 29 29 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 09 09 7d 0a 09 20 20 7d 0a 09 20 20 2f 2f 20 52 65 6d 6f 76 65 20 74 68 65 20 66 69 72 73 74 20 6f 62 6a 65 63 74 20 Data Ascii: ep equality.if (keys(b).length !== length) return false;while (length--) { // Deep compare each member key = _keys[length]; if (!(has$1(b, key) && eq(a[key], b[key], aStack, bStack))) return false;} } // Remove the first object
2024-12-05 19:20:15 UTC	2	IN	Data Raw: 20 3f Data Ascii: ?
2024-12-05 19:20:15 UTC	16383	IN	Data Raw: 20 70 72 65 66 69 78 20 2b 20 69 64 20 3a 20 69 64 3b 0a 09 7d 0a 20 20 0a 09 2f 2f 20 53 74 61 72 74 20 63 68 61 69 6e 69 6e 67 20 61 20 77 72 61 70 70 65 64 20 55 6e 64 65 72 73 63 6f 72 65 20 6f 62 6a 65 63 74 2e 0a 09 66 75 6e 63 74 69 6f 6e 20 63 68 61 69 6e 28 6f 62 6a 29 20 7b 0a 09 20 20 76 61 72 20 69 6e 73 74 61 6e 63 65 20 3d 20 5f 24 31 28 6f 62 6a 29 3b 0a 09 20 20 69 6e 73 74 61 6e 63 65 2e 5f 63 68 61 69 6e 20 3d 20 74 72 75 65 3b 0a 09 20 20 72 65 74 75 72 6e 20 69 6e 73 74 61 6e 63 65 3b 0a 09 7d 0a 20 20 0a 09 2f 2f 20 49 6e 74 65 72 6e 61 6c 20 66 75 6e 63 74 69 6f 6e 20 74 6f 20 65 78 65 63 75 74 65 20 60 73 6f 75 72 63 65 46 75 6e 63 60 20 62 6f 75 6e 64 20 74 6f 20 60 63 6f 6e 74 65 78 74 60 20 77 69 74 68 20 6f 70 74 69 6f 6e 61 6c Data Ascii: prefix + id : id;} // Start chaining a wrapped Underscore object.function chain(obj) { var instance = _$1(obj); instance._chain = true; return instance;} // Internal function to execute `sourceFunc` bound to `context` with optional
2024-12-05 19:20:16 UTC	16290	IN	Data Raw: 7c 20 28 74 79 70 65 6f 66 20 69 74 65 72 61 74 65 65 20 3d 3d 20 27 6e 75 6d 62 65 72 27 20 26 26 20 74 79 70 65 6f 66 20 6f 62 6a 5b 30 5d 20 21 3d 20 27 6f 62 6a 65 63 74 27 20 26 26 20 6f 62 6a 20 21 3d 20 6e 75 6c 6c 29 29 20 7b 0a 09 09 6f 62 6a 20 3d 20 69 73 41 72 72 61 79 4c 69 6b 65 28 6f 62 6a 29 20 3f 20 6f 62 6a 20 3a 20 76 61 6c 75 65 73 28 6f 62 6a 29 3b 0a 09 09 66 6f 72 20 28 76 61 72 20 69 20 3d 20 30 2c 20 6c 65 6e 67 74 68 20 3d 20 6f 62 6a 2e 6c 65 6e 67 74 68 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0a 09 09 20 20 76 61 6c 75 65 20 3d 20 6f 62 6a 5b 69 5d 3b 0a 09 09 20 20 69 66 20 28 76 61 6c 75 65 20 21 3d 20 6e 75 6c 6c 20 26 26 20 76 61 6c 75 65 20 3e 20 72 65 73 75 6c 74 29 20 7b 0a 09 09 09 72 65 73 75 6c 74 Data Ascii: \| (typeof iteratee == 'number' && typeof obj[0] != 'object' && obj != null)) {obj = isArrayLike(obj) ? obj : values(obj);for (var i = 0, length = obj.length; i < length; i++) { value = obj[i]; if (value != null && value > result) {result

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.8	49822	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:15 UTC	404	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/core/nougat.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:16 UTC	791	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:15 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-265b" Expires: Fri, 05 Dec 2025 19:20:15 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 5c26ec02595df Server: ECAcc (lhd/35B7) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000005c26ec02595df-de7e93c56ef83a33-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 9819 Connection: close
2024-12-05 19:20:16 UTC	9819	IN	Data Raw: 2f 2a 0a 20 2a 20 6e 6f 75 67 61 74 2e 6a 73 20 76 30 2e 30 2e 31 20 2d 20 41 70 70 6c 69 63 61 74 69 6f 6e 20 4d 65 64 69 61 74 6f 72 2f 53 61 6e 64 62 6f 78 20 4c 69 62 72 61 72 79 0a 20 2a 20 54 68 69 73 20 6d 6f 64 75 6c 65 20 70 65 72 66 6f 72 6d 73 20 74 68 65 20 66 75 6e 63 74 69 6f 6e 20 6f 66 20 6d 65 64 69 61 74 6f 72 2f 73 61 6e 64 62 6f 78 2e 0a 20 2a 0a 20 2a 20 40 61 75 74 68 6f 72 20 45 72 69 6b 20 54 6f 74 68 20 3c 65 72 74 6f 74 68 40 70 61 79 70 61 6c 2e 63 6f 6d 3e 0a 20 2a 2f 0a 0a 2f 2a 67 6c 6f 62 61 6c 20 64 65 66 69 6e 65 3a 66 61 6c 73 65 2c 20 72 65 71 75 69 72 65 6a 73 3a 74 72 75 65 20 2a 2f 0a 2f 2a 6a 73 6c 69 6e 74 20 70 6c 75 73 70 6c 75 73 3a 74 72 75 65 2c 20 6e 6f 6d 65 6e 3a 74 72 75 65 20 2a 2f 0a 0a 64 65 66 69 6e 65 Data Ascii: /* * nougat.js v0.0.1 - Application Mediator/Sandbox Library * This module performs the function of mediator/sandbox. * * @author Erik Toth <ertoth@paypal.com> //global define:false, requirejs:true //jslint plusplus:true, nomen:true */define

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.8	49823	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:15 UTC	580	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/dust-core.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:16 UTC	792	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:15 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-6349" Expires: Fri, 05 Dec 2025 19:20:15 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 0245db07d3e50 Server: ECAcc (lhd/3729) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000000245db07d3e50-e96d030c9b1c9b9f-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 25417 Connection: close
2024-12-05 19:20:16 UTC	16383	IN	Data Raw: 2f 2a 21 20 44 75 73 74 20 2d 20 41 73 79 6e 63 68 72 6f 6e 6f 75 73 20 54 65 6d 70 6c 61 74 69 6e 67 20 2d 20 76 32 2e 36 2e 32 0a 2a 20 68 74 74 70 3a 2f 2f 6c 69 6e 6b 65 64 69 6e 2e 67 69 74 68 75 62 2e 69 6f 2f 64 75 73 74 6a 73 2f 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 35 20 41 6c 65 6b 73 61 6e 64 65 72 20 57 69 6c 6c 69 61 6d 73 3b 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 20 28 72 6f 6f 74 2c 20 66 61 63 74 6f 72 79 29 20 7b 0a 20 20 2f 2a 67 6c 6f 62 61 6c 20 64 65 66 69 6e 65 2a 2f 0a 20 20 69 66 20 28 74 79 70 65 6f 66 20 64 65 66 69 6e 65 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 20 26 26 20 64 65 66 69 6e 65 2e 61 6d 64 20 26 26 Data Ascii: /! Dust - Asynchronous Templating - v2.6.2 http://linkedin.github.io/dustjs/* Copyright (c) 2015 Aleksander Williams; Released under the MIT License /(function (root, factory) { /global define*/ if (typeof define === 'function' && define.amd &&
2024-12-05 19:20:16 UTC	9034	IN	Data Raw: 74 65 78 74 29 3b 0a 20 20 7d 3b 0a 0a 20 20 43 68 75 6e 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 66 65 72 65 6e 63 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 65 6c 65 6d 2c 20 63 6f 6e 74 65 78 74 2c 20 61 75 74 6f 2c 20 66 69 6c 74 65 72 73 29 20 7b 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 65 6c 65 6d 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 0a 20 20 20 20 20 20 65 6c 65 6d 20 3d 20 65 6c 65 6d 2e 61 70 70 6c 79 28 63 6f 6e 74 65 78 74 2e 63 75 72 72 65 6e 74 28 29 2c 20 5b 74 68 69 73 2c 20 63 6f 6e 74 65 78 74 2c 20 6e 75 6c 6c 2c 20 7b 61 75 74 6f 3a 20 61 75 74 6f 2c 20 66 69 6c 74 65 72 73 3a 20 66 69 6c 74 65 72 73 7d 5d 29 3b 0a 20 20 20 20 20 20 69 66 20 28 65 6c 65 6d 20 69 6e 73 74 61 6e 63 65 6f 66 20 43 68 75 6e 6b 29 20 7b Data Ascii: text); }; Chunk.prototype.reference = function(elem, context, auto, filters) { if (typeof elem === 'function') { elem = elem.apply(context.current(), [this, context, null, {auto: auto, filters: filters}]); if (elem instanceof Chunk) {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.8	49830	151.101.1.21	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:16 UTC	1111	OUT	GET /signin HTTP/1.1 Host: www.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=c0c49a91e6384eadbaa4a565394e21da1733426393114; LANG=en_US%3BUS; nsid=s%3AGW_RscjBMue_uO0mnkc7Z8KQBUhwfX2j.FFWOARB2%2BuuO26tFpElNMknNGOEOXTm%2FpBrBjPfDp7c; l7_az=dcg15.slc; ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778; tsrce=authchallengenodeweb; datadome=2zSIQ6nLOyseIhoQRSN~ljKzrWXqLOG3PFrB4cQUzhceBqjeCfgVooetsKxKI34oWaTUvfSvwy_YOagypOlf4PEvJsYPbiciz7HvVuQJtF0E6p8pe5nWKIv_E8kuKWlq; ddbc=1; TLTSID=71139903928702455522704624189564; TLTDID=24394070527605051854525965496125; x-pp-s=eyJ0IjoiMTczMzQyNjQxNDgzNSIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1764962414%26vteXpYrS%3D1733428214%26vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778%26vtyp%3Dnew
2024-12-05 19:20:16 UTC	1147	IN	HTTP/1.1 403 Forbidden Connection: close Content-Length: 708 Content-Type: text/html;charset=utf-8 Server: DataDome X-DataDome: protected Accept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory Charset: utf-8 Cache-Control: max-age=0, private, no-cache, no-store, must-revalidate Pragma: no-cache Access-Control-Allow-Credentials: true Access-Control-Expose-Headers: x-dd-b, x-set-cookie Access-Control-Allow-Origin: * X-DataDome-CID: AHrlqAAAAAMAg8WuNM8BK3AACC575A== X-DD-B: 1 Set-Cookie: datadome=buJ29aABw9ywhcwsxLedKnsC4BAmLRyJrGVvMBQoK~J0j0xnjOkH7nUpkES4yULXec_bkkBjWn~DdWPkGMh7Bdg7HO475FpNdpN2VKAqG6qmkS5tul3JkYU8x_vn1Pe1; Max-Age=2592000; Domain=.paypal.com; Path=/; Secure; SameSite=Lax Accept-Ranges: bytes Date: Thu, 05 Dec 2024 19:20:16 GMT Via: 1.1 varnish Paypal-Debug-Id: f5324031bad47 Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Served-By: cache-ewr-kewr1740058-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1733426417.544875,VS0,VE17 Server-Timing: content-encoding;desc="",x-cdn;desc="fastly"
2024-12-05 19:20:16 UTC	708	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 70 61 79 70 61 6c 2e 63 6f 6d 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 23 63 6d 73 67 7b 61 6e 69 6d 61 74 69 6f 6e 3a 20 41 20 31 2e 35 73 3b 7d 40 6b 65 79 66 72 61 6d 65 73 20 41 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 3b 7d 39 39 25 7b 6f 70 61 63 69 74 79 3a 30 3b 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 31 3b 7d 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 30 22 3e 3c 70 20 69 64 3d 22 63 6d 73 67 22 3e 50 6c 65 61 73 65 20 65 6e 61 62 6c 65 20 4a 53 20 61 6e 64 20 64 69 73 61 62 6c 65 20 61 6e 79 20 61 64 20 62 6c 6f 63 6b 65 72 3c 2f 70 3e 3c 73 63 72 69 70 74 20 64 61 74 61 2d 63 66 61 73 79 6e 63 3d 22 66 61 6c 73 65 22 3e Data Ascii: <html><head><title>paypal.com</title><style>#cmsg{animation: A 1.5s;}@keyframes A{0%{opacity:0;}99%{opacity:0;}100%{opacity:1;}}</style></head><body style="margin:0"><p id="cmsg">Please enable JS and disable any ad blocker</p><script data-cfasync="false">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.8	49824	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:16 UTC	399	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/router.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:16 UTC	790	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:16 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-72f" Expires: Fri, 05 Dec 2025 19:20:16 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 4574b38a25485 Server: ECAcc (lhd/35D0) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000004574b38a25485-d2bf40bded9091a5-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 1839 Connection: close
2024-12-05 19:20:16 UTC	1839	IN	Data Raw: 2f 2a 67 6c 6f 62 61 6c 20 64 65 66 69 6e 65 3a 74 72 75 65 2c 20 63 6f 6e 73 6f 6c 65 3a 74 72 75 65 2c 20 6a 51 75 65 72 79 3a 74 72 75 65 2c 20 72 65 71 75 69 72 65 3a 74 72 75 65 20 2a 2f 0a 0a 64 65 66 69 6e 65 28 5b 20 27 6a 71 75 65 72 79 27 2c 20 27 62 61 63 6b 62 6f 6e 65 27 5d 2c 0a 0a 09 66 75 6e 63 74 69 6f 6e 20 28 24 2c 20 42 61 63 6b 62 6f 6e 65 29 20 7b 0a 0a 09 09 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 09 09 76 61 72 20 72 6f 75 74 65 72 3b 0a 0a 09 09 72 6f 75 74 65 72 20 3d 20 42 61 63 6b 62 6f 6e 65 2e 52 6f 75 74 65 72 2e 65 78 74 65 6e 64 28 7b 0a 09 09 09 72 6f 75 74 65 73 3a 20 7b 0a 09 09 09 09 27 27 3a 20 27 73 68 6f 77 54 68 65 56 69 65 77 27 2c 0a 09 09 09 09 27 73 74 65 70 75 70 3f 2a 71 75 65 72 79 53 74 72 69 6e 67 27 Data Ascii: /global define:true, console:true, jQuery:true, require:true /define([ 'jquery', 'backbone'],function ($, Backbone) {'use strict';var router;router = Backbone.Router.extend({routes: {'': 'showTheView','stepup?*queryString'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.8	49831	151.101.1.21	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:16 UTC	1693	OUT	POST /auth/logclientdata HTTP/1.1 Host: www.paypal.com Connection: keep-alive Content-Length: 569 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: application/json;charset=UTF-8 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.paypal.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.paypal.com/signin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=c0c49a91e6384eadbaa4a565394e21da1733426393114; LANG=en_US%3BUS; nsid=s%3AGW_RscjBMue_uO0mnkc7Z8KQBUhwfX2j.FFWOARB2%2BuuO26tFpElNMknNGOEOXTm%2FpBrBjPfDp7c; l7_az=dcg15.slc; ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778; tsrce=authchallengenodeweb; datadome=2zSIQ6nLOyseIhoQRSN~ljKzrWXqLOG3PFrB4cQUzhceBqjeCfgVooetsKxKI34oWaTUvfSvwy_YOagypOlf4PEvJsYPbiciz7HvVuQJtF0E6p8pe5nWKIv_E8kuKWlq; ddbc=1; TLTSID=71139903928702455522704624189564; TLTDID=24394070527605051854525965496125; x-pp-s=eyJ0IjoiMTczMzQyNjQxNDgzNSIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1764962414%26vteXpYrS%3D1733428214%26vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778%26vtyp%3Dnew
2024-12-05 19:20:16 UTC	569	OUT	Data Raw: 7b 22 66 70 74 69 22 3a 7b 22 70 67 72 70 22 3a 22 6d 61 69 6e 3a 61 75 74 68 63 68 61 6c 6c 65 6e 67 65 3a 3a 73 69 67 6e 69 6e 22 2c 22 70 61 67 65 22 3a 22 6d 61 69 6e 3a 61 75 74 68 63 68 61 6c 6c 65 6e 67 65 3a 3a 73 69 67 6e 69 6e 22 2c 22 70 67 73 74 22 3a 22 31 37 33 33 34 32 36 34 30 38 34 33 34 22 2c 22 63 61 6c 63 22 3a 22 66 38 37 36 38 30 39 63 66 62 66 32 38 22 2c 22 6e 73 69 64 22 3a 22 47 57 5f 52 73 63 6a 42 4d 75 65 5f 75 4f 30 6d 6e 6b 63 37 5a 38 4b 51 42 55 68 77 66 58 32 6a 22 2c 22 72 73 74 61 22 3a 22 65 6e 5f 55 53 22 2c 22 70 67 74 66 22 3a 22 4e 6f 64 65 6a 73 22 2c 22 65 6e 76 22 3a 22 6c 69 76 65 22 2c 22 73 22 3a 22 63 69 22 2c 22 63 63 70 67 22 3a 22 55 53 22 2c 22 63 73 63 69 22 3a 22 35 35 66 33 65 66 36 63 38 62 63 34 34 Data Ascii: {"fpti":{"pgrp":"main:authchallenge::signin","page":"main:authchallenge::signin","pgst":"1733426408434","calc":"f876809cfbf28","nsid":"GW_RscjBMue_uO0mnkc7Z8KQBUhwfX2j","rsta":"en_US","pgtf":"Nodejs","env":"live","s":"ci","ccpg":"US","csci":"55f3ef6c8bc44
2024-12-05 19:20:17 UTC	344	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1925 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Access-Control-Expose-Headers: Server-Timing Cache-Control: max-age=0, no-cache, no-store, must-revalidate
2024-12-05 19:20:17 UTC	2112	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6e 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 6f 62 6a 65 63 74 73 2e 70 61 79 70 61 6c 2e 63 6e 3b 20 73 63 72 69 70 74 2d 73 72 63 20 27 6e 6f 6e 63 65 2d 6e 6a 73 45 71 43 65 77 5a 74 37 53 50 43 74 44 31 4c 55 45 4b 52 39 67 42 46 41 36 79 48 6b 42 6b 5a 75 4b 6a 48 56 44 33 31 78 45 6a 62 65 47 27 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6e Data Ascii: Content-Security-Policy: default-src 'self' https://.paypal.com https://.paypal.cn https://.paypalobjects.com https://objects.paypal.cn; script-src 'nonce-njsEqCewZt7SPCtD1LUEKR9gBFA6yHkBkZuKjHVD31xEjbeG' 'self' https://.paypal.com https://*.paypal.cn
2024-12-05 19:20:17 UTC	1653	IN	Data Raw: 50 65 72 6d 69 73 73 69 6f 6e 73 2d 50 6f 6c 69 63 79 3a 20 63 68 2d 75 61 2d 70 6c 61 74 66 6f 72 6d 2d 76 65 72 73 69 6f 6e 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 61 72 63 68 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 77 6f 77 36 34 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 6d 6f 64 65 6c 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 66 75 6c 6c 2d 76 65 Data Ascii: Permissions-Policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-ve
2024-12-05 19:20:17 UTC	456	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 30 35 20 44 65 63 20 32 30 32 34 20 31 39 3a 32 30 3a 31 36 20 47 4d 54 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 33 30 37 32 30 30 30 3b 20 69 6e 63 6c 75 64 65 53 75 62 44 6f 6d 61 69 6e 73 3b 20 70 72 65 6c 6f 61 64 0d 0a 58 2d 53 65 72 76 65 64 2d 42 79 3a 20 63 61 63 68 65 2d 69 61 64 2d 6b 6a 79 6f 37 31 30 30 30 38 33 2d 49 41 44 2c 20 63 61 63 68 65 2d 65 77 72 2d 6b 65 77 72 31 37 34 30 30 33 38 2d 45 57 52 2c 20 63 61 63 68 65 2d 65 77 72 2d 6b 65 77 72 31 37 34 30 30 33 38 2d 45 57 52 0d 0a 58 2d 43 61 63 68 65 3a 20 4d 49 53 53 2c 20 4d 49 53 53 2c 20 4d 49 53 53 0d 0a 58 2d 43 61 63 68 65 2d 48 69 74 73 3a 20 30 2c 20 30 2c 20 30 0d 0a 58 Data Ascii: Date: Thu, 05 Dec 2024 19:20:16 GMTStrict-Transport-Security: max-age=63072000; includeSubDomains; preloadX-Served-By: cache-iad-kjyo7100083-IAD, cache-ewr-kewr1740038-EWR, cache-ewr-kewr1740038-EWRX-Cache: MISS, MISS, MISSX-Cache-Hits: 0, 0, 0X
2024-12-05 19:20:17 UTC	1378	IN	Data Raw: 7b 22 69 73 43 6f 6f 6b 69 65 44 69 73 61 6c 62 65 64 22 3a 74 72 75 65 2c 22 63 6f 6f 6b 69 65 44 69 73 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 6f 42 72 61 6e 64 22 3a 22 75 73 22 2c 22 73 79 73 22 3a 7b 22 6c 6f 63 61 6c 69 74 79 22 3a 7b 22 74 69 6d 65 7a 6f 6e 65 22 3a 7b 22 64 65 74 65 72 6d 69 6e 65 72 22 3a 22 76 69 61 43 6f 77 50 72 69 6d 61 72 79 22 2c 22 76 61 6c 75 65 22 3a 22 41 6d 65 72 69 63 61 2f 4c 6f 73 5f 41 6e 67 65 6c 65 73 22 7d 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 5f 55 53 22 2c 22 6c 61 6e 67 75 61 67 65 22 3a 22 65 6e 22 2c 22 64 69 72 65 63 74 69 6f 6e 61 6c 69 74 79 22 3a 22 6c 74 72 22 7d 2c 22 6c 69 6e 6b 73 22 3a 7b 22 6a 73 42 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f Data Ascii: {"isCookieDisalbed":true,"cookieDisabled":false,"coBrand":"us","sys":{"locality":{"timezone":{"determiner":"viaCowPrimary","value":"America/Los_Angeles"},"country":"US","locale":"en_US","language":"en","directionality":"ltr"},"links":{"jsBaseUrl":"https:/
2024-12-05 19:20:17 UTC	547	IN	Data Raw: 6c 5c 22 3e 50 6f 6c 69 63 79 20 55 70 64 61 74 65 73 3c 2f 61 3e 22 2c 22 77 6f 72 6c 64 77 69 64 65 22 3a 22 3c 61 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 20 68 72 65 66 3d 5c 22 2f 75 73 2f 77 65 62 61 70 70 73 2f 6d 70 70 2f 63 6f 75 6e 74 72 79 2d 77 6f 72 6c 64 77 69 64 65 5c 22 3e 57 6f 72 6c 64 77 69 64 65 3c 2f 61 3e 22 7d 7d 2c 22 74 72 61 63 6b 69 6e 67 22 3a 7b 22 66 70 74 69 22 3a 7b 22 6e 61 6d 65 22 3a 22 70 74 61 22 2c 22 6a 73 55 52 4c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 22 2c 22 73 65 72 76 65 72 55 52 4c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 2e 70 61 79 70 61 6c 2e 63 6f 6d 2f 74 73 22 2c 22 64 61 74 61 53 74 72 69 6e 67 22 3a 22 70 67 72 70 3d 61 75 74 68 63 68 61 Data Ascii: l\">Policy Updates</a>","worldwide":"<a target=\"_blank\" href=\"/us/webapps/mpp/country-worldwide\">Worldwide</a>"}},"tracking":{"fpti":{"name":"pta","jsURL":"https://www.paypalobjects.com","serverURL":"https://t.paypal.com/ts","dataString":"pgrp=authcha

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.8	49832	151.101.1.21	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:16 UTC	1693	OUT	POST /auth/logclientdata HTTP/1.1 Host: www.paypal.com Connection: keep-alive Content-Length: 565 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: application/json;charset=UTF-8 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.paypal.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.paypal.com/signin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=c0c49a91e6384eadbaa4a565394e21da1733426393114; LANG=en_US%3BUS; nsid=s%3AGW_RscjBMue_uO0mnkc7Z8KQBUhwfX2j.FFWOARB2%2BuuO26tFpElNMknNGOEOXTm%2FpBrBjPfDp7c; l7_az=dcg15.slc; ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778; tsrce=authchallengenodeweb; datadome=2zSIQ6nLOyseIhoQRSN~ljKzrWXqLOG3PFrB4cQUzhceBqjeCfgVooetsKxKI34oWaTUvfSvwy_YOagypOlf4PEvJsYPbiciz7HvVuQJtF0E6p8pe5nWKIv_E8kuKWlq; ddbc=1; TLTSID=71139903928702455522704624189564; TLTDID=24394070527605051854525965496125; x-pp-s=eyJ0IjoiMTczMzQyNjQxNDgzNSIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1764962414%26vteXpYrS%3D1733428214%26vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778%26vtyp%3Dnew
2024-12-05 19:20:16 UTC	565	OUT	Data Raw: 7b 22 66 70 74 69 22 3a 7b 22 70 67 72 70 22 3a 22 6d 61 69 6e 3a 61 75 74 68 63 68 61 6c 6c 65 6e 67 65 3a 3a 73 69 67 6e 69 6e 22 2c 22 70 61 67 65 22 3a 22 6d 61 69 6e 3a 61 75 74 68 63 68 61 6c 6c 65 6e 67 65 3a 3a 73 69 67 6e 69 6e 22 2c 22 70 67 73 74 22 3a 22 31 37 33 33 34 32 36 34 30 38 34 33 34 22 2c 22 63 61 6c 63 22 3a 22 66 38 37 36 38 30 39 63 66 62 66 32 38 22 2c 22 6e 73 69 64 22 3a 22 47 57 5f 52 73 63 6a 42 4d 75 65 5f 75 4f 30 6d 6e 6b 63 37 5a 38 4b 51 42 55 68 77 66 58 32 6a 22 2c 22 72 73 74 61 22 3a 22 65 6e 5f 55 53 22 2c 22 70 67 74 66 22 3a 22 4e 6f 64 65 6a 73 22 2c 22 65 6e 76 22 3a 22 6c 69 76 65 22 2c 22 73 22 3a 22 63 69 22 2c 22 63 63 70 67 22 3a 22 55 53 22 2c 22 63 73 63 69 22 3a 22 35 35 66 33 65 66 36 63 38 62 63 34 34 Data Ascii: {"fpti":{"pgrp":"main:authchallenge::signin","page":"main:authchallenge::signin","pgst":"1733426408434","calc":"f876809cfbf28","nsid":"GW_RscjBMue_uO0mnkc7Z8KQBUhwfX2j","rsta":"en_US","pgtf":"Nodejs","env":"live","s":"ci","ccpg":"US","csci":"55f3ef6c8bc44
2024-12-05 19:20:17 UTC	344	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1927 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Access-Control-Expose-Headers: Server-Timing Cache-Control: max-age=0, no-cache, no-store, must-revalidate
2024-12-05 19:20:17 UTC	2112	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6e 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 6f 62 6a 65 63 74 73 2e 70 61 79 70 61 6c 2e 63 6e 3b 20 73 63 72 69 70 74 2d 73 72 63 20 27 6e 6f 6e 63 65 2d 59 64 38 77 46 57 4c 6e 54 36 56 57 59 56 33 73 54 65 55 6a 69 35 38 58 77 4e 64 6c 31 2b 75 41 79 5a 53 51 50 37 44 59 6e 36 61 4c 4d 79 2f 44 27 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6e Data Ascii: Content-Security-Policy: default-src 'self' https://.paypal.com https://.paypal.cn https://.paypalobjects.com https://objects.paypal.cn; script-src 'nonce-Yd8wFWLnT6VWYV3sTeUji58XwNdl1+uAyZSQP7DYn6aLMy/D' 'self' https://.paypal.com https://*.paypal.cn
2024-12-05 19:20:17 UTC	1653	IN	Data Raw: 50 65 72 6d 69 73 73 69 6f 6e 73 2d 50 6f 6c 69 63 79 3a 20 63 68 2d 75 61 2d 70 6c 61 74 66 6f 72 6d 2d 76 65 72 73 69 6f 6e 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 61 72 63 68 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 77 6f 77 36 34 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 6d 6f 64 65 6c 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 66 75 6c 6c 2d 76 65 Data Ascii: Permissions-Policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-ve
2024-12-05 19:20:17 UTC	456	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 30 35 20 44 65 63 20 32 30 32 34 20 31 39 3a 32 30 3a 31 36 20 47 4d 54 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 33 30 37 32 30 30 30 3b 20 69 6e 63 6c 75 64 65 53 75 62 44 6f 6d 61 69 6e 73 3b 20 70 72 65 6c 6f 61 64 0d 0a 58 2d 53 65 72 76 65 64 2d 42 79 3a 20 63 61 63 68 65 2d 69 61 64 2d 6b 69 61 64 37 30 30 30 31 30 30 2d 49 41 44 2c 20 63 61 63 68 65 2d 65 77 72 2d 6b 65 77 72 31 37 34 30 30 35 33 2d 45 57 52 2c 20 63 61 63 68 65 2d 65 77 72 2d 6b 65 77 72 31 37 34 30 30 35 33 2d 45 57 52 0d 0a 58 2d 43 61 63 68 65 3a 20 4d 49 53 53 2c 20 4d 49 53 53 2c 20 4d 49 53 53 0d 0a 58 2d 43 61 63 68 65 2d 48 69 74 73 3a 20 30 2c 20 30 2c 20 30 0d 0a 58 Data Ascii: Date: Thu, 05 Dec 2024 19:20:16 GMTStrict-Transport-Security: max-age=63072000; includeSubDomains; preloadX-Served-By: cache-iad-kiad7000100-IAD, cache-ewr-kewr1740053-EWR, cache-ewr-kewr1740053-EWRX-Cache: MISS, MISS, MISSX-Cache-Hits: 0, 0, 0X
2024-12-05 19:20:17 UTC	1378	IN	Data Raw: 7b 22 69 73 43 6f 6f 6b 69 65 44 69 73 61 6c 62 65 64 22 3a 74 72 75 65 2c 22 63 6f 6f 6b 69 65 44 69 73 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 6f 42 72 61 6e 64 22 3a 22 75 73 22 2c 22 73 79 73 22 3a 7b 22 6c 6f 63 61 6c 69 74 79 22 3a 7b 22 74 69 6d 65 7a 6f 6e 65 22 3a 7b 22 64 65 74 65 72 6d 69 6e 65 72 22 3a 22 76 69 61 43 6f 77 50 72 69 6d 61 72 79 22 2c 22 76 61 6c 75 65 22 3a 22 41 6d 65 72 69 63 61 2f 4c 6f 73 5f 41 6e 67 65 6c 65 73 22 7d 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 5f 55 53 22 2c 22 6c 61 6e 67 75 61 67 65 22 3a 22 65 6e 22 2c 22 64 69 72 65 63 74 69 6f 6e 61 6c 69 74 79 22 3a 22 6c 74 72 22 7d 2c 22 6c 69 6e 6b 73 22 3a 7b 22 6a 73 42 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f Data Ascii: {"isCookieDisalbed":true,"cookieDisabled":false,"coBrand":"us","sys":{"locality":{"timezone":{"determiner":"viaCowPrimary","value":"America/Los_Angeles"},"country":"US","locale":"en_US","language":"en","directionality":"ltr"},"links":{"jsBaseUrl":"https:/
2024-12-05 19:20:17 UTC	549	IN	Data Raw: 75 6c 6c 5c 22 3e 50 6f 6c 69 63 79 20 55 70 64 61 74 65 73 3c 2f 61 3e 22 2c 22 77 6f 72 6c 64 77 69 64 65 22 3a 22 3c 61 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 20 68 72 65 66 3d 5c 22 2f 75 73 2f 77 65 62 61 70 70 73 2f 6d 70 70 2f 63 6f 75 6e 74 72 79 2d 77 6f 72 6c 64 77 69 64 65 5c 22 3e 57 6f 72 6c 64 77 69 64 65 3c 2f 61 3e 22 7d 7d 2c 22 74 72 61 63 6b 69 6e 67 22 3a 7b 22 66 70 74 69 22 3a 7b 22 6e 61 6d 65 22 3a 22 70 74 61 22 2c 22 6a 73 55 52 4c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 22 2c 22 73 65 72 76 65 72 55 52 4c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 2e 70 61 79 70 61 6c 2e 63 6f 6d 2f 74 73 22 2c 22 64 61 74 61 53 74 72 69 6e 67 22 3a 22 70 67 72 70 3d 61 75 74 68 63 Data Ascii: ull\">Policy Updates</a>","worldwide":"<a target=\"_blank\" href=\"/us/webapps/mpp/country-worldwide\">Worldwide</a>"}},"tracking":{"fpti":{"name":"pta","jsURL":"https://www.paypalobjects.com","serverURL":"https://t.paypal.com/ts","dataString":"pgrp=authc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.8	49834	151.101.131.1	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:16 UTC	1300	OUT	GET /1/api.js?endpoint=https%3A%2F%2Fhcaptcha.paypal.com&assethost=https%3A%2F%2Fnewassets.hcaptcha.paypal.com&imghost=https%3A%2F%2Fimgs.hcaptcha.paypal.com&sentry=false&reportapi=https%3A%2F%2Faccounts.hcaptcha.paypal.com&host=hcaptcha.paypal.com&onload=hCaptchaCallback&render=explicit&hl=en HTTP/1.1 Host: hcaptcha.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=c0c49a91e6384eadbaa4a565394e21da1733426393114; LANG=en_US%3BUS; l7_az=dcg15.slc; ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778; tsrce=authchallengenodeweb; datadome=2zSIQ6nLOyseIhoQRSN~ljKzrWXqLOG3PFrB4cQUzhceBqjeCfgVooetsKxKI34oWaTUvfSvwy_YOagypOlf4PEvJsYPbiciz7HvVuQJtF0E6p8pe5nWKIv_E8kuKWlq; TLTSID=71139903928702455522704624189564; TLTDID=24394070527605051854525965496125; x-pp-s=eyJ0IjoiMTczMzQyNjQxNDgzNSIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1764962414%26vteXpYrS%3D1733428214%26vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778%26vtyp%3Dnew
2024-12-05 19:20:17 UTC	637	IN	HTTP/1.1 200 OK Connection: close Content-Length: 150639 etag: W/"6266f4e068faf5f1e1e5dce33fe9f2c7" age: 0 server: cloudflare cross-origin-resource-policy: cross-origin cf-ray: 8ed664816f01189d-EWR cf-cache-status: HIT cache-control: private, max-age=300 x-content-type-options: nosniff content-type: application/javascript Accept-Ranges: bytes Date: Thu, 05 Dec 2024 19:20:16 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740061-EWR, cache-ewr-kewr1740061-EWR X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1733426417.840771,VS0,VE52 Vary: Origin, Accept-Encoding Strict-Transport-Security: max-age=31557600
2024-12-05 19:20:17 UTC	1378	IN	Data Raw: 2f 2a 20 68 74 74 70 73 3a 2f 2f 68 63 61 70 74 63 68 61 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 2e 72 65 73 6f 6c 76 65 28 65 28 29 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 7d 29 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 2e 72 65 73 6f 6c 76 65 28 65 28 29 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 72 65 6a 65 63 74 28 6e 29 7d 29 29 7d 29 Data Ascii: /* https://hcaptcha.com/license */!function(){"use strict";function e(e){var t=this.constructor;return this.then((function(n){return t.resolve(e()).then((function(){return n}))}),(function(n){return t.resolve(e()).then((function(){return t.reject(n)}))})
2024-12-05 19:20:17 UTC	1378	IN	Data Raw: 3d 6e 28 65 2e 5f 76 61 6c 75 65 29 7d 63 61 74 63 68 28 69 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 6c 28 74 2e 70 72 6f 6d 69 73 65 2c 69 29 7d 63 28 74 2e 70 72 6f 6d 69 73 65 2c 72 29 7d 65 6c 73 65 28 31 3d 3d 3d 65 2e 5f 73 74 61 74 65 3f 63 3a 6c 29 28 74 2e 70 72 6f 6d 69 73 65 2c 65 2e 5f 76 61 6c 75 65 29 7d 29 29 29 3a 65 2e 5f 64 65 66 65 72 72 65 64 73 2e 70 75 73 68 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 74 72 79 7b 69 66 28 74 3d 3d 3d 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 20 70 72 6f 6d 69 73 65 20 63 61 6e 6e 6f 74 20 62 65 20 72 65 73 6f 6c 76 65 64 20 77 69 74 68 20 69 74 73 65 6c 66 2e 22 29 3b 69 66 28 74 26 26 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 7c 7c 22 66 Data Ascii: =n(e._value)}catch(i){return void l(t.promise,i)}c(t.promise,r)}else(1===e._state?c:l)(t.promise,e._value)}))):e._deferreds.push(t)}function c(e,t){try{if(t===e)throw new TypeError("A promise cannot be resolved with itself.");if(t&&("object"==typeof t\|\|"f
2024-12-05 19:20:17 UTC	1378	IN	Data Raw: 26 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 69 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 29 29 7b 76 61 72 20 73 3d 69 2e 74 68 65 6e 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 29 72 65 74 75 72 6e 20 76 6f 69 64 20 73 2e 63 61 6c 6c 28 69 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 61 28 65 2c 74 29 7d 29 2c 6e 29 7d 72 5b 65 5d 3d 69 2c 30 3d 3d 2d 2d 6f 26 26 74 28 72 29 7d 63 61 74 63 68 28 63 29 7b 6e 28 63 29 7d 7d 66 6f 72 28 76 61 72 20 73 3d 30 3b 73 3c 72 2e 6c 65 6e 67 74 68 3b 73 2b 2b 29 61 28 73 2c 72 5b 73 5d 29 7d 29 29 7d 2c 61 2e 61 6c 6c 53 65 74 74 6c 65 64 3d 74 2c 61 2e 72 65 73 6f 6c 76 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 6f 62 6a Data Ascii: &("object"==typeof i\|\|"function"==typeof i)){var s=i.then;if("function"==typeof s)return void s.call(i,(function(t){a(e,t)}),n)}r[e]=i,0==--o&&t(r)}catch(c){n(c)}}for(var s=0;s<r.length;s++)a(s,r[s])}))},a.allSettled=t,a.resolve=function(e){return e&&"obj
2024-12-05 19:20:17 UTC	1378	IN	Data Raw: 72 73 65 28 29 7d 76 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 65 6e 64 4f 66 53 74 72 65 61 6d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 74 68 69 73 2e 74 6f 6b 65 6e 73 2e 6c 65 6e 67 74 68 7d 2c 72 65 61 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 6f 6b 65 6e 73 2e 6c 65 6e 67 74 68 3f 74 68 69 73 2e 74 6f 6b 65 6e 73 2e 70 6f 70 28 29 3a 79 7d 2c 70 72 65 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 66 6f 72 28 76 61 72 20 74 3d 65 3b 74 2e 6c 65 6e 67 74 68 3b 29 74 68 69 73 2e 74 6f 6b 65 6e 73 2e 70 75 73 68 28 74 2e 70 6f 70 28 29 29 3b 65 6c 73 65 20 74 68 69 73 2e 74 6f 6b 65 6e 73 2e 70 75 73 68 28 65 29 7d 2c 70 75 73 68 3a 66 75 6e 63 Data Ascii: rse()}v.prototype={endOfStream:function(){return!this.tokens.length},read:function(){return this.tokens.length?this.tokens.pop():y},prepend:function(e){if(Array.isArray(e))for(var t=e;t.length;)this.tokens.push(t.pop());else this.tokens.push(e)},push:func
2024-12-05 19:20:17 UTC	1378	IN	Data Raw: 74 2e 69 67 6e 6f 72 65 42 4f 4d 26 26 28 72 2e 5f 69 67 6e 6f 72 65 42 4f 4d 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 7c 7c 28 74 68 69 73 2e 65 6e 63 6f 64 69 6e 67 3d 72 2e 5f 65 6e 63 6f 64 69 6e 67 2e 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 74 68 69 73 2e 66 61 74 61 6c 3d 22 66 61 74 61 6c 22 3d 3d 3d 72 2e 5f 65 72 72 6f 72 5f 6d 6f 64 65 2c 74 68 69 73 2e 69 67 6e 6f 72 65 42 4f 4d 3d 72 2e 5f 69 67 6e 6f 72 65 42 4f 4d 29 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 41 28 65 2c 74 29 7b 69 66 28 21 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 29 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6c 6c 65 64 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 2e 20 44 69 64 20 79 6f 75 20 66 6f Data Ascii: t.ignoreBOM&&(r._ignoreBOM=!0),Object.defineProperty\|\|(this.encoding=r._encoding.name.toLowerCase(),this.fatal="fatal"===r._error_mode,this.ignoreBOM=r._ignoreBOM),r}function A(e,t){if(!(this instanceof A))throw TypeError("Called as a function. Did you fo
2024-12-05 19:20:17 UTC	1378	IN	Data Raw: 3f 28 6e 3d 32 2c 72 3d 32 32 34 29 3a 70 28 74 2c 36 35 35 33 36 2c 31 31 31 34 31 31 31 29 26 26 28 6e 3d 33 2c 72 3d 32 34 30 29 3b 66 6f 72 28 76 61 72 20 69 3d 5b 28 74 3e 3e 36 2a 6e 29 2b 72 5d 3b 6e 3e 30 3b 29 7b 76 61 72 20 6f 3d 74 3e 3e 36 2a 28 6e 2d 31 29 3b 69 2e 70 75 73 68 28 31 32 38 7c 36 33 26 6f 29 2c 6e 2d 3d 31 7d 72 65 74 75 72 6e 20 69 7d 7d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 26 26 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 4f 2e 70 72 6f 74 6f 74 79 70 65 2c 22 65 6e 63 6f 64 69 6e 67 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 65 6e 63 6f 64 69 6e 67 2e 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 7d 29 2c 4f 62 6a Data Ascii: ?(n=2,r=224):p(t,65536,1114111)&&(n=3,r=240);for(var i=[(t>>6n)+r];n>0;){var o=t>>6(n-1);i.push(128\|63&o),n-=1}return i}}Object.defineProperty&&(Object.defineProperty(O.prototype,"encoding",{get:function(){return this._encoding.name.toLowerCase()}}),Obj
2024-12-05 19:20:17 UTC	1378	IN	Data Raw: 68 69 73 2e 5f 42 4f 4d 73 65 65 6e 3d 21 30 29 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 22 22 2c 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 2b 2b 6e 29 7b 76 61 72 20 72 3d 65 5b 6e 5d 3b 72 3c 3d 36 35 35 33 35 3f 74 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 72 29 3a 28 72 2d 3d 36 35 35 33 36 2c 74 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 35 35 32 39 36 2b 28 72 3e 3e 31 30 29 2c 35 36 33 32 30 2b 28 31 30 32 33 26 72 29 29 29 7d 72 65 74 75 72 6e 20 74 7d 28 65 29 7d 2e 63 61 6c 6c 28 74 68 69 73 2c 6f 29 7d 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 41 2e 70 72 6f 74 6f 74 79 Data Ascii: his._BOMseen=!0)),function(e){for(var t="",n=0;n<e.length;++n){var r=e[n];r<=65535?t+=String.fromCharCode(r):(r-=65536,t+=String.fromCharCode(55296+(r>>10),56320+(1023&r)))}return t}(e)}.call(this,o)},Object.defineProperty&&Object.defineProperty(A.prototy
2024-12-05 19:20:17 UTC	1378	IN	Data Raw: 75 62 74 6c 65 7c 7c 74 2e 77 65 62 6b 69 74 53 75 62 74 6c 65 3b 69 66 28 6e 29 7b 76 61 72 20 72 3d 65 2e 43 72 79 70 74 6f 7c 7c 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 7c 7c 4f 62 6a 65 63 74 2c 69 3d 65 2e 53 75 62 74 6c 65 43 72 79 70 74 6f 7c 7c 6e 2e 63 6f 6e 73 74 72 75 63 74 6f 72 7c 7c 4f 62 6a 65 63 74 2c 6f 3d 28 65 2e 43 72 79 70 74 6f 4b 65 79 7c 7c 65 2e 4b 65 79 2c 65 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 69 6e 64 65 78 4f 66 28 22 45 64 67 65 2f 22 29 3e 2d 31 29 2c 61 3d 21 21 65 2e 6d 73 43 72 79 70 74 6f 26 26 21 6f 2c 73 3d 21 74 2e 73 75 62 74 6c 65 26 26 21 21 74 2e 77 65 62 6b 69 74 53 75 62 74 6c 65 3b 69 66 28 61 7c 7c 73 29 7b 76 61 72 20 63 3d 7b 4b 6f 5a 49 68 76 63 4e 41 51 45 42 3a 22 31 2e 32 2e 38 Data Ascii: ubtle\|\|t.webkitSubtle;if(n){var r=e.Crypto\|\|t.constructor\|\|Object,i=e.SubtleCrypto\|\|n.constructor\|\|Object,o=(e.CryptoKey\|\|e.Key,e.navigator.userAgent.indexOf("Edge/")>-1),a=!!e.msCrypto&&!o,s=!t.subtle&&!!t.webkitSubtle;if(a\|\|s){var c={KoZIhvcNAQEB:"1.2.8
2024-12-05 19:20:17 UTC	800	IN	Data Raw: 2e 6b 65 79 5f 6f 70 73 29 2c 6e 2e 69 6d 70 6f 72 74 4b 65 79 28 22 6a 77 6b 22 2c 65 5b 31 5d 2c 6c 2c 75 2c 65 5b 31 5d 2e 6b 65 79 5f 6f 70 73 29 5d 29 7d 29 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 7b 70 75 62 6c 69 63 4b 65 79 3a 65 5b 30 5d 2c 70 72 69 76 61 74 65 4b 65 79 3a 65 5b 31 5d 7d 7d 29 29 3b 69 66 28 28 73 7c 7c 61 26 26 22 53 48 41 2d 31 22 3d 3d 3d 28 6c 2e 68 61 73 68 7c 7c 7b 7d 29 2e 6e 61 6d 65 29 26 26 22 69 6d 70 6f 72 74 4b 65 79 22 3d 3d 3d 65 26 26 22 6a 77 6b 22 3d 3d 3d 69 26 26 22 48 4d 41 43 22 3d 3d 3d 6c 2e 6e 61 6d 65 26 26 22 6f 63 74 22 3d 3d 3d 6f 2e 6b 74 79 29 72 65 74 75 72 6e 20 6e 2e 69 6d 70 6f 72 74 4b 65 79 28 22 72 61 77 22 2c 66 28 64 28 6f 2e 6b 29 29 2c 63 2c 62 5b 33 Data Ascii: .key_ops),n.importKey("jwk",e[1],l,u,e[1].key_ops)])})).then((function(e){return{publicKey:e[0],privateKey:e[1]}}));if((s\|\|a&&"SHA-1"===(l.hash\|\|{}).name)&&"importKey"===e&&"jwk"===i&&"HMAC"===l.name&&"oct"===o.kty)return n.importKey("raw",f(d(o.k)),c,b[3
2024-12-05 19:20:17 UTC	1369	IN	Data Raw: 69 63 4b 65 79 7c 7c 65 29 2e 61 6c 67 6f 72 69 74 68 6d 2e 6d 6f 64 75 6c 75 73 4c 65 6e 67 74 68 29 2c 6c 2e 70 75 62 6c 69 63 45 78 70 6f 6e 65 6e 74 7c 7c 28 6c 2e 70 75 62 6c 69 63 45 78 70 6f 6e 65 6e 74 3d 28 65 2e 70 75 62 6c 69 63 4b 65 79 7c 7c 65 29 2e 61 6c 67 6f 72 69 74 68 6d 2e 70 75 62 6c 69 63 45 78 70 6f 6e 65 6e 74 29 29 2c 65 3d 65 2e 70 75 62 6c 69 63 4b 65 79 26 26 65 2e 70 72 69 76 61 74 65 4b 65 79 3f 7b 70 75 62 6c 69 63 4b 65 79 3a 6e 65 77 20 78 28 65 2e 70 75 62 6c 69 63 4b 65 79 2c 6c 2c 75 2c 68 2e 66 69 6c 74 65 72 28 45 29 29 2c 70 72 69 76 61 74 65 4b 65 79 3a 6e 65 77 20 78 28 65 2e 70 72 69 76 61 74 65 4b 65 79 2c 6c 2c 75 2c 68 2e 66 69 6c 74 65 72 28 43 29 29 7d 3a 6e 65 77 20 78 28 65 2c 6c 2c 75 2c 68 29 7d 29 29 7d Data Ascii: icKey\|\|e).algorithm.modulusLength),l.publicExponent\|\|(l.publicExponent=(e.publicKey\|\|e).algorithm.publicExponent)),e=e.publicKey&&e.privateKey?{publicKey:new x(e.publicKey,l,u,h.filter(E)),privateKey:new x(e.privateKey,l,u,h.filter(C))}:new x(e,l,u,h)}))}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.8	49835	151.101.3.1	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:16 UTC	3440	OUT	GET /ts?v=1.9.5&t=1733426412465&g=300&pgrp=authchallengenodeweb%2Flayouts%2Fmaster.html.dust&page=authchallengenodeweb%2Flayouts%2Fmaster.html.dust&pgst=1733426408434&calc=f876809cfbf28&nsid=GW_RscjBMue_uO0mnkc7Z8KQBUhwfX2j&rsta=en_US&pgtf=Nodejs&env=live&s=ci&ccpg=US&csci=55f3ef6c8bc44e84b7b3591ab89cc647&comp=authchallengenodeweb&tsrce=unifiedloginnodeweb&cu=0&ef_policy=ccpa&xe=109541%2C107585&xt=145835%2C135393&e=im&pglk=main%3Aunifiedlogin%3A%3A%3Alogin%7CbtnLogin&imsrc=setup&view=%7B%22t10%22%3A1356%2C%22t11%22%3A6702%2C%22tcp%22%3A4567%2C%22et%22%3A%223g%22%2C%22nt%22%3A%22navigate%22%2C%22bt%22%3A153%7D&ru=https%3A%2F%2Fwww.paypal.com%2Fsignin%2F%3FreturnUri%3D%252Fmyaccount%252Ftransfer%252FpayRequest%252FU-09584045BD498740V%252FU-5R763959NX153980F%253FclassicUrl%253D%252FUS%252Fcgi-bin%252F%253Fcmd%253D_prq%26id%3DOoO85MXTLVUkAlgY4sey9A8h.NxxqjO.iYbAWg%26expId%3Dp2p%26onboardData%3D%257B%2522signUpRequest%2522%253A%257B%2522method%2522%253A%2522get%2522%252C%2522url%2522%253A%2522https%253A%252F%252Fw [TRUNCATED] Host: t.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=c0c49a91e6384eadbaa4a565394e21da1733426393114; LANG=en_US%3BUS; l7_az=dcg15.slc; ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778; tsrce=authchallengenodeweb; datadome=2zSIQ6nLOyseIhoQRSN~ljKzrWXqLOG3PFrB4cQUzhceBqjeCfgVooetsKxKI34oWaTUvfSvwy_YOagypOlf4PEvJsYPbiciz7HvVuQJtF0E6p8pe5nWKIv_E8kuKWlq; TLTSID=71139903928702455522704624189564; TLTDID=24394070527605051854525965496125; x-pp-s=eyJ0IjoiMTczMzQyNjQxNDgzNSIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1764962415%26vteXpYrS%3D1733428215%26vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778%26vtyp%3Dnew
2024-12-05 19:20:17 UTC	1361	IN	HTTP/1.1 200 OK Connection: close Access-Control-Expose-Headers: Server-Timing CORRELATION-ID: 6a37c5f99390f Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Type: image/gif Expires: Thu, 05 Dec 2024 19:20:16 GMT P3p: CP="CAO IND OUR SAM UNI STA COR COM" Paypal-Debug-Id: 6a37c5f99390f Pragma: no-cache Set-Cookie: ts=vreXpYrS%3D1764962416%26vteXpYrS%3D1733428216%26vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778%26vtyp%3Dnew;Expires=Fri, 05 Dec 2025 19:20:16 GMT;domain=.paypal.com;path=/;secure;HttpOnly;SameSite=None; Set-Cookie: ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778;Expires=Fri, 05 Dec 2025 19:20:16 GMT;domain=.paypal.com;path=/;secure;SameSite=None; Traceparent: 00-00000000000000000006a37c5f99390f-caec233e4eaec299-01 Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Date: Thu, 05 Dec 2024 19:20:17 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Served-By: cache-iad-kiad7000063-IAD, cache-ewr-kewr1740053-EWR X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1733426417.901289,VS0,VE106 vary: Accept-Encoding Server-Timing: "traceparent;desc="00-00000000000000000006a37c5f99390f-8c6ad52c9a74b120-01"";content-encoding;desc="",x-cdn;desc="fastly" Timing-Allow-Origin: * transfer-encoding: chunked
2024-12-05 19:20:17 UTC	4	IN	Data Raw: 32 61 0d 0a Data Ascii: 2a
2024-12-05 19:20:17 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 01 01 32 00 3b Data Ascii: GIF89a!,2;
2024-12-05 19:20:17 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.8	49826	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:16 UTC	588	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/opinionLab/opinionLab.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:17 UTC	798	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:17 GMT DC: ccg11-origin-www-1.paypal.com Etag: "6736db9f-10db+br+ident" Expires: Fri, 05 Dec 2025 19:20:17 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 33840520f9c7e Server: ECAcc (lhd/35F2) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-000000000000000000033840520f9c7e-d6a66713f67e83d2-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 4315 Connection: close
2024-12-05 19:20:17 UTC	4315	IN	Data Raw: 2f 2a 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 63 6f 6e 74 61 69 6e 73 20 74 68 65 20 6a 61 76 61 73 63 72 69 70 74 20 66 75 6e 63 74 69 6f 6e 73 20 61 6e 64 20 73 6e 69 70 70 65 74 73 0a 20 2a 20 74 68 61 74 20 61 72 65 20 75 73 65 64 20 74 6f 20 69 6e 74 72 6f 64 75 63 65 20 74 68 65 20 73 69 74 65 20 66 65 65 64 62 61 63 6b 20 6c 69 6e 6b 20 69 6e 20 74 68 65 20 66 6f 6f 74 65 72 2e 0a 20 2a 20 46 75 6e 63 74 69 6f 6e 20 4f 5f 47 6f 54 20 69 6e 73 65 72 74 73 20 74 68 65 20 6c 69 6e 6b 20 69 6e 20 74 68 65 20 66 6f 6f 74 65 72 20 6c 69 73 74 20 61 6e 64 20 61 73 73 69 67 6e 73 20 6f 6e 63 6c 69 63 6b 0a 20 2a 20 66 6f 72 20 70 6f 70 75 70 20 77 69 6e 64 6f 77 20 74 68 61 74 20 64 69 73 70 6c 61 79 73 20 74 68 65 20 66 65 65 64 62 61 63 6b 20 66 72 6f Data Ascii: /* * This file contains the javascript functions and snippets * that are used to introduce the site feedback link in the footer. * Function O_GoT inserts the link in the footer list and assigns onclick * for popup window that displays the feedback fro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.8	49825	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:16 UTC	596	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/opinionLab/onlineOpinionPopup.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:17 UTC	790	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:17 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-ef0" Expires: Fri, 05 Dec 2025 19:20:17 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: c2024eeaab32c Server: ECAcc (lhd/35F6) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000c2024eeaab32c-8176a71871a3efa2-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 3824 Connection: close
2024-12-05 19:20:17 UTC	3824	IN	Data Raw: 2f 2a 0a 20 53 70 65 63 20 23 32 32 39 35 36 20 4f 70 69 6e 69 6f 6e 4c 61 62 0a 20 2a 2f 0a 0a 64 65 66 69 6e 65 28 5b 27 6f 70 69 6e 69 6f 6e 4c 61 62 27 5d 2c 20 66 75 6e 63 74 69 6f 6e 28 6f 70 69 6e 69 6f 6e 4c 61 62 29 20 7b 0a 0a 09 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 09 77 69 6e 64 6f 77 2e 50 41 59 50 41 4c 20 3d 20 77 69 6e 64 6f 77 2e 50 41 59 50 41 4c 20 3f 20 77 69 6e 64 6f 77 2e 50 41 59 50 41 4c 20 3a 20 7b 7d 3b 0a 09 76 61 72 20 6f 70 56 61 72 73 20 3d 20 77 69 6e 64 6f 77 2e 50 41 59 50 41 4c 2e 6f 70 69 6e 69 6f 6e 4c 61 62 56 61 72 73 3b 0a 0a 09 66 75 6e 63 74 69 6f 6e 20 73 68 6f 77 70 6f 70 75 70 28 72 65 64 69 72 65 63 74 54 6f 29 20 7b 0a 09 09 76 61 72 20 6d 79 77 69 6e 3b 0a 09 09 6d 79 77 69 6e 20 3d 20 77 69 6e 64 6f 77 Data Ascii: /* Spec #22956 OpinionLab */define(['opinionLab'], function(opinionLab) {'use strict';window.PAYPAL = window.PAYPAL ? window.PAYPAL : {};var opVars = window.PAYPAL.opinionLabVars;function showpopup(redirectTo) {var mywin;mywin = window

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.8	49827	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:16 UTC	580	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/core/baseView.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:17 UTC	797	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:17 GMT DC: ccg11-origin-www-1.paypal.com Etag: "6736db9f-802+br+ident" Expires: Fri, 05 Dec 2025 19:20:17 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: e7e1b5d32ba47 Server: ECAcc (lhd/35C1) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000e7e1b5d32ba47-611ca1a3b2e10145-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 2050 Connection: close
2024-12-05 19:20:17 UTC	2050	IN	Data Raw: 2f 2a 20 67 6c 6f 62 61 6c 20 64 65 66 69 6e 65 3a 74 72 75 65 20 2a 2f 0a 0a 2f 2a 2a 0a 20 2a 20 41 62 73 74 72 61 63 74 20 76 69 65 77 20 77 68 69 63 68 20 65 6e 61 62 6c 65 73 20 72 65 6e 64 65 72 69 6e 67 20 63 6f 6e 74 65 6e 74 73 20 77 69 74 68 20 61 20 74 65 6d 70 6c 61 74 65 2e 0a 20 2a 2f 0a 64 65 66 69 6e 65 28 5b 0a 09 27 6e 6f 75 67 61 74 27 2c 0a 09 27 75 6e 64 65 72 73 63 6f 72 65 27 2c 0a 09 27 62 61 63 6b 62 6f 6e 65 27 0a 5d 2c 0a 09 66 75 6e 63 74 69 6f 6e 20 28 6e 6f 75 67 61 74 2c 20 5f 2c 20 42 61 63 6b 62 6f 6e 65 29 20 7b 0a 0a 09 09 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 0a 09 09 76 61 72 20 42 61 73 65 56 69 65 77 20 3d 20 42 61 63 6b 62 6f 6e 65 2e 56 69 65 77 2e 65 78 74 65 6e 64 28 7b 0a 0a 09 09 09 2f 2a 2a 0a 09 09 09 Data Ascii: /* global define:true //* * Abstract view which enables rendering contents with a template. /define(['nougat','underscore','backbone'],function (nougat, _, Backbone) {'use strict';var BaseView = Backbone.View.extend({/*

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.8	49828	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:16 UTC	423	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/opinionLab/opinionLabComponent.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:17 UTC	790	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:17 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-c3d" Expires: Fri, 05 Dec 2025 19:20:17 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 21f72a8abbe45 Server: ECAcc (lhd/35ED) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-000000000000000000021f72a8abbe45-97a297d03a7ff37c-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 3133 Connection: close
2024-12-05 19:20:17 UTC	3133	IN	Data Raw: 64 65 66 69 6e 65 28 5b 27 6f 70 69 6e 69 6f 6e 4c 61 62 27 2c 20 27 6f 6e 6c 69 6e 65 4f 70 69 6e 69 6f 6e 50 6f 70 75 70 27 5d 2c 20 66 75 6e 63 74 69 6f 6e 28 6f 70 69 6e 69 6f 6e 4c 61 62 2c 20 70 6f 70 75 70 29 20 7b 0a 0a 09 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 09 77 69 6e 64 6f 77 2e 50 41 59 50 41 4c 20 3d 20 77 69 6e 64 6f 77 2e 50 41 59 50 41 4c 20 3f 20 77 69 6e 64 6f 77 2e 50 41 59 50 41 4c 20 3a 20 7b 7d 3b 0a 09 76 61 72 20 6f 70 56 61 72 73 20 3d 20 77 69 6e 64 6f 77 2e 50 41 59 50 41 4c 2e 6f 70 69 6e 69 6f 6e 4c 61 62 56 61 72 73 3b 0a 0a 09 2f 2a 20 44 65 66 69 6e 65 73 20 74 68 65 20 72 65 66 65 72 72 61 6c 20 55 52 4c 20 2d 20 56 65 72 69 66 79 20 2a 2f 0a 09 66 75 6e 63 74 69 6f 6e 20 70 61 79 70 61 6c 55 52 4c 20 28 70 61 67 65 Data Ascii: define(['opinionLab', 'onlineOpinionPopup'], function(opinionLab, popup) {'use strict';window.PAYPAL = window.PAYPAL ? window.PAYPAL : {};var opVars = window.PAYPAL.opinionLabVars;/* Defines the referral URL - Verify */function paypalURL (page

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.8	49836	151.101.3.1	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:16 UTC	1183	OUT	GET /captcha/v1/d136a52/static/hcaptcha.html HTTP/1.1 Host: newassets.hcaptcha.paypal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.paypalobjects.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=c0c49a91e6384eadbaa4a565394e21da1733426393114; LANG=en_US%3BUS; l7_az=dcg15.slc; ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778; tsrce=authchallengenodeweb; x-pp-s=eyJ0IjoiMTczMzQyNjQxNDgzNSIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1764962414%26vteXpYrS%3D1733428214%26vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778%26vtyp%3Dnew
2024-12-05 19:20:17 UTC	711	IN	HTTP/1.1 200 OK Connection: close cf-ray: 8ed664840aaa0f99-EWR server: cloudflare cf-cache-status: HIT content-type: text/html x-content-type-options: nosniff cache-control: max-age=3600 content-security-policy: report-uri https://sentry.hcaptcha.com/api/6/security/?sentry_key=30910f52569b4c17b1081ead2dae43b4&sentry_environment=prod&sentry_release=csp1; Accept-Ranges: bytes Date: Thu, 05 Dec 2024 19:20:17 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740039-EWR, cache-ewr-kewr1740039-EWR X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1733426417.265078,VS0,VE45 Vary: accept-encoding, Origin, Accept-Encoding Strict-Transport-Security: max-age=31557600 transfer-encoding: chunked
2024-12-05 19:20:17 UTC	6	IN	Data Raw: 34 38 39 37 0d 0a Data Ascii: 4897
2024-12-05 19:20:17 UTC	1378	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 61 74 61 2d 69 64 3d 22 68 63 61 70 74 63 68 61 2d 66 72 61 6d 65 2d 64 31 33 36 61 35 32 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 68 43 61 70 74 63 68 61 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 22 20 63 6f 6e 74 65 6e 74 3d 22 6f 62 6a 65 63 74 2d 73 72 63 20 27 6e Data Ascii: <!DOCTYPE html><html lang="en" data-id="hcaptcha-frame-d136a52"><head> <title>hCaptcha</title> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Security-Policy" content="object-src 'n
2024-12-05 19:20:17 UTC	1378	IN	Data Raw: 63 61 6c 65 28 31 29 7d 7d 40 2d 6f 2d 6b 65 79 66 72 61 6d 65 73 20 70 6f 70 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 29 7d 37 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 2e 38 29 7d 38 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 36 29 7d 31 30 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 70 6f 70 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 29 7d 37 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 2e 38 29 7d 38 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 36 29 7d 31 30 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 7d 7d 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 Data Ascii: cale(1)}}@-o-keyframes pop{0%{transform:scale(0)}70%{transform:scale(1.8)}80%{transform:scale(.6)}100%{transform:scale(1)}}@keyframes pop{0%{transform:scale(0)}70%{transform:scale(1.8)}80%{transform:scale(.6)}100%{transform:scale(1)}}</style></head><bod
2024-12-05 19:20:17 UTC	1378	IN	Data Raw: 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 6e 6f 74 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 74 68 69 73 2e 5f 73 74 61 74 65 3d 30 2c 74 68 69 73 2e 5f 68 61 6e 64 6c 65 64 3d 21 31 2c 74 68 69 73 2e 5f 76 61 6c 75 65 3d 75 6e 64 65 66 69 6e 65 64 2c 74 68 69 73 2e 5f 64 65 66 65 72 72 65 64 73 3d 5b 5d 2c 66 28 74 2c 74 68 69 73 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 74 2c 65 29 7b 66 6f 72 28 3b 33 3d 3d 3d 74 2e 5f 73 74 61 74 65 3b 29 74 3d 74 2e 5f 76 61 6c 75 65 3b 30 21 3d 3d 74 2e 5f 73 74 61 74 65 3f 28 74 2e 5f 68 61 6e 64 6c 65 64 3d 21 30 2c 73 2e 5f 69 6d 6d 65 64 69 61 74 65 46 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 3d 31 3d 3d 3d 74 Data Ascii: f("function"!=typeof t)throw new TypeError("not a function");this._state=0,this._handled=!1,this._value=undefined,this._deferreds=[],f(t,this)}function a(t,e){for(;3===t._state;)t=t._value;0!==t._state?(t._handled=!0,s._immediateFn((function(){var i=1===t
2024-12-05 19:20:17 UTC	1378	IN	Data Raw: 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 3d 6e 65 77 20 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 6f 29 3b 72 65 74 75 72 6e 20 61 28 74 68 69 73 2c 6e 65 77 20 75 28 74 2c 65 2c 69 29 29 2c 69 7d 2c 73 2e 70 72 6f 74 6f 74 79 70 65 5b 22 66 69 6e 61 6c 6c 79 22 5d 3d 74 2c 73 2e 61 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 73 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 69 29 7b 69 66 28 21 72 28 74 29 29 72 65 74 75 72 6e 20 69 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 50 72 6f 6d 69 73 65 2e 61 6c 6c 20 61 63 63 65 70 74 73 20 61 6e 20 61 72 72 61 79 22 29 29 3b 76 61 72 20 6e 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 29 3b 69 66 28 30 3d 3d 3d 6e 2e 6c Data Ascii: nction(t,e){var i=new this.constructor(o);return a(this,new u(t,e,i)),i},s.prototype["finally"]=t,s.all=function(t){return new s((function(e,i){if(!r(t))return i(new TypeError("Promise.all accepts an array"));var n=Array.prototype.slice.call(t);if(0===n.l
2024-12-05 19:20:17 UTC	1378	IN	Data Raw: 54 79 70 65 45 72 72 6f 72 28 22 43 6f 75 6c 64 20 6e 6f 74 20 63 6f 6e 76 65 72 74 20 61 72 67 75 6d 65 6e 74 20 74 6f 20 64 69 63 74 69 6f 6e 61 72 79 22 29 7d 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 64 2e 50 72 6f 6d 69 73 65 3f 64 2e 50 72 6f 6d 69 73 65 3d 73 3a 28 64 2e 50 72 6f 6d 69 73 65 2e 70 72 6f 74 6f 74 79 70 65 5b 22 66 69 6e 61 6c 6c 79 22 5d 7c 7c 28 64 2e 50 72 6f 6d 69 73 65 2e 70 72 6f 74 6f 74 79 70 65 5b 22 66 69 6e 61 6c 6c 79 22 5d 3d 74 29 2c 64 2e 50 72 6f 6d 69 73 65 2e 61 6c 6c 53 65 74 74 6c 65 64 7c 7c 28 64 2e 50 72 6f 6d 69 73 65 2e 61 6c 6c 53 65 74 74 6c 65 64 3d 65 29 29 3b 76 61 72 20 6d 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3e 3d 30 26 26 74 3c 3d 31 32 37 7d 2c 67 3d 2d 31 3b Data Ascii: TypeError("Could not convert argument to dictionary")}"function"!=typeof d.Promise?d.Promise=s:(d.Promise.prototype["finally"]\|\|(d.Promise.prototype["finally"]=t),d.Promise.allSettled\|\|(d.Promise.allSettled=e));var m=function(t){return t>=0&&t<=127},g=-1;
2024-12-05 19:20:17 UTC	1378	IN	Data Raw: 6e 3d 21 31 2c 74 68 69 73 2e 5f 65 72 72 6f 72 5f 6d 6f 64 65 3d 22 72 65 70 6c 61 63 65 6d 65 6e 74 22 2c 74 68 69 73 2e 5f 64 6f 5f 6e 6f 74 5f 66 6c 75 73 68 3d 21 31 3b 76 61 72 20 69 3d 78 28 74 29 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 69 7c 7c 22 72 65 70 6c 61 63 65 6d 65 6e 74 22 3d 3d 3d 69 2e 6e 61 6d 65 29 74 68 72 6f 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 55 6e 6b 6e 6f 77 6e 20 65 6e 63 6f 64 69 6e 67 3a 20 22 2b 74 29 3b 69 66 28 21 45 5b 69 2e 6e 61 6d 65 5d 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 44 65 63 6f 64 65 72 20 6e 6f 74 20 70 72 65 73 65 6e 74 2e 20 44 69 64 20 79 6f 75 20 66 6f 72 67 65 74 20 74 6f 20 69 6e 63 6c 75 64 65 20 65 6e 63 6f 64 69 6e 67 2d 69 6e 64 65 78 65 73 2e 6a 73 20 66 69 72 73 74 3f 22 29 3b 76 61 72 20 6e 3d Data Ascii: n=!1,this._error_mode="replacement",this._do_not_flush=!1;var i=x(t);if(null===i\|\|"replacement"===i.name)throw RangeError("Unknown encoding: "+t);if(!E[i.name])throw Error("Decoder not present. Did you forget to include encoding-indexes.js first?");var n=
2024-12-05 19:20:17 UTC	1378	IN	Data Raw: 28 6f 3d 31 34 34 29 2c 32 34 34 3d 3d 3d 61 26 26 28 73 3d 31 34 33 29 2c 72 3d 33 2c 69 3d 37 26 61 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 69 66 28 21 70 28 61 2c 6f 2c 73 29 29 72 65 74 75 72 6e 20 69 3d 72 3d 6e 3d 30 2c 6f 3d 31 32 38 2c 73 3d 31 39 31 2c 74 2e 70 72 65 70 65 6e 64 28 61 29 2c 77 28 65 29 3b 69 66 28 6f 3d 31 32 38 2c 73 3d 31 39 31 2c 69 3d 69 3c 3c 36 7c 36 33 26 61 2c 28 6e 2b 3d 31 29 21 3d 3d 72 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 6c 3d 69 3b 72 65 74 75 72 6e 20 69 3d 72 3d 6e 3d 30 2c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 54 28 74 29 7b 74 2e 66 61 74 61 6c 3b 74 68 69 73 2e 68 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 65 3d 3d 3d 67 29 72 65 74 75 72 6e 20 62 3b 69 66 28 6d 28 65 29 Data Ascii: (o=144),244===a&&(s=143),r=3,i=7&a}return null}if(!p(a,o,s))return i=r=n=0,o=128,s=191,t.prepend(a),w(e);if(o=128,s=191,i=i<<6\|63&a,(n+=1)!==r)return null;var l=i;return i=r=n=0,l}}function T(t){t.fatal;this.handler=function(t,e){if(e===g)return b;if(m(e)
2024-12-05 19:20:17 UTC	1378	IN	Data Raw: 65 61 6b 3b 6e 75 6c 6c 21 3d 3d 6e 26 26 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 6e 29 3f 6f 2e 70 75 73 68 2e 61 70 70 6c 79 28 6f 2c 6e 29 3a 6f 2e 70 75 73 68 28 6e 29 29 7d 77 68 69 6c 65 28 21 72 2e 65 6e 64 4f 66 53 74 72 65 61 6d 28 29 29 3b 74 68 69 73 2e 5f 64 65 63 6f 64 65 72 3d 6e 75 6c 6c 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 69 3b 72 65 74 75 72 6e 20 65 3d 5b 22 55 54 46 2d 38 22 2c 22 55 54 46 2d 31 36 4c 45 22 2c 22 55 54 46 2d 31 36 42 45 22 5d 2c 69 3d 74 68 69 73 2e 5f 65 6e 63 6f 64 69 6e 67 2e 6e 61 6d 65 2c 2d 31 3d 3d 3d 65 2e 69 6e 64 65 78 4f 66 28 69 29 7c 7c 74 68 69 73 2e 5f 69 67 6e 6f 72 65 42 4f 4d 7c 7c 74 68 69 73 2e 5f 42 4f 4d 73 65 65 6e 7c 7c 28 74 2e 6c 65 6e 67 74 68 3e Data Ascii: eak;null!==n&&(Array.isArray(n)?o.push.apply(o,n):o.push(n))}while(!r.endOfStream());this._decoder=null}return function(t){var e,i;return e=["UTF-8","UTF-16LE","UTF-16BE"],i=this._encoding.name,-1===e.indexOf(i)\|\|this._ignoreBOM\|\|this._BOMseen\|\|(t.length>
2024-12-05 19:20:17 UTC	1378	IN	Data Raw: 6c 65 72 28 6e 2c 6e 2e 72 65 61 64 28 29 29 29 21 3d 3d 62 3b 29 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 69 29 3f 72 2e 70 75 73 68 2e 61 70 70 6c 79 28 72 2c 69 29 3a 72 2e 70 75 73 68 28 69 29 3b 74 68 69 73 2e 5f 65 6e 63 6f 64 65 72 3d 6e 75 6c 6c 7d 72 65 74 75 72 6e 20 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 72 29 7d 2c 77 69 6e 64 6f 77 2e 54 65 78 74 44 65 63 6f 64 65 72 7c 7c 28 77 69 6e 64 6f 77 2e 54 65 78 74 44 65 63 6f 64 65 72 3d 53 29 2c 77 69 6e 64 6f 77 2e 54 65 78 74 45 6e 63 6f 64 65 72 7c 7c 28 77 69 6e 64 6f 77 2e 54 65 78 74 45 6e 63 6f 64 65 72 3d 42 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 50 72 6f 6d 69 73 65 29 74 68 72 6f 77 22 50 72 6f 6d 69 73 65 20 73 Data Ascii: ler(n,n.read()))!==b;)Array.isArray(i)?r.push.apply(r,i):r.push(i);this._encoder=null}return new Uint8Array(r)},window.TextDecoder\|\|(window.TextDecoder=S),window.TextEncoder\|\|(window.TextEncoder=B),function(t){if("function"!=typeof Promise)throw"Promise s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.8	49829	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:16 UTC	410	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/widgets/analytics.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:17 UTC	797	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:17 GMT DC: ccg11-origin-www-1.paypal.com Etag: "6736db9f-974+br+ident" Expires: Fri, 05 Dec 2025 19:20:17 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 088a9c2792b80 Server: ECAcc (lhd/3588) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000088a9c2792b80-2445d6753c41ca91-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 2420 Connection: close
2024-12-05 19:20:17 UTC	2420	IN	Data Raw: 2f 2a 67 6c 6f 62 61 6c 20 64 65 66 69 6e 65 3a 74 72 75 65 2c 20 73 3a 74 72 75 65 20 2a 2f 0a 0a 2f 2a 2a 0a 20 2a 20 40 66 69 6c 65 4f 76 65 72 76 69 65 77 20 41 6e 61 6c 79 74 69 63 73 20 e2 80 93 20 6c 69 6e 6b 20 61 6e 64 20 65 72 72 6f 72 20 74 72 61 63 6b 69 6e 67 0a 20 2a 20 40 6e 61 6d 65 20 41 6e 61 6c 79 74 69 63 73 20 57 69 64 67 65 74 0a 20 2a 20 40 61 75 74 68 6f 72 20 64 71 75 6f 63 6b 0a 20 2a 2f 0a 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 2c 20 22 42 61 73 65 56 69 65 77 22 2c 20 22 6e 6f 75 67 61 74 22 5d 2c 0a 09 66 75 6e 63 74 69 6f 6e 20 28 24 2c 20 42 61 73 65 56 69 65 77 2c 20 6e 6f 75 67 61 74 29 20 7b 0a 09 09 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 09 09 76 61 72 20 56 69 65 77 20 3d 20 42 61 73 65 56 69 65 77 2e 65 Data Ascii: /global define:true, s:true //** * @fileOverview Analytics link and error tracking * @name Analytics Widget * @author dquock */define(["jquery", "BaseView", "nougat"],function ($, BaseView, nougat) {"use strict";var View = BaseView.e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.8	49837	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:17 UTC	410	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/jquery-1.12.4.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:18 UTC	794	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:18 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-47a35" Expires: Fri, 05 Dec 2025 19:20:18 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 88a2afba9a3a8 Server: ECAcc (lhd/35A2) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-000000000000000000088a2afba9a3a8-fc1ef7f35a139c0e-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 293429 Connection: close
2024-12-05 19:20:18 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 31 2e 31 32 2e 34 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 36 2d 30 35 2d 32 30 54 Data Ascii: /! jQuery JavaScript Library v1.12.4 * http://jquery.com/ * * Includes Sizzle.js * http://sizzlejs.com/ * * Copyright jQuery Foundation and other contributors * Released under the MIT license * http://jquery.org/license * * Date: 2016-05-20T
2024-12-05 19:20:18 UTC	16383	IN	Data Raw: 5c 5c 5c 28 29 5b 5c 5c 5d 5d 7c 22 20 2b 20 61 74 74 72 69 62 75 74 65 73 20 2b 20 22 29 2a 29 7c 22 20 2b 0a 09 09 2f 2f 20 33 2e 20 61 6e 79 74 68 69 6e 67 20 65 6c 73 65 20 28 63 61 70 74 75 72 65 20 32 29 0a 09 09 22 2e 2a 22 20 2b 0a 09 09 22 29 5c 5c 29 7c 29 22 2c 0a 0a 09 2f 2f 20 4c 65 61 64 69 6e 67 20 61 6e 64 20 6e 6f 6e 2d 65 73 63 61 70 65 64 20 74 72 61 69 6c 69 6e 67 20 77 68 69 74 65 73 70 61 63 65 2c 20 63 61 70 74 75 72 69 6e 67 20 73 6f 6d 65 20 6e 6f 6e 2d 77 68 69 74 65 73 70 61 63 65 20 63 68 61 72 61 63 74 65 72 73 20 70 72 65 63 65 64 69 6e 67 20 74 68 65 20 6c 61 74 74 65 72 0a 09 72 77 68 69 74 65 73 70 61 63 65 20 3d 20 6e 65 77 20 52 65 67 45 78 70 28 20 77 68 69 74 65 73 70 61 63 65 20 2b 20 22 2b 22 2c 20 22 67 22 20 29 2c Data Ascii: \\$)[\\]]\|" + attributes + "))\|" +// 3. anything else (capture 2)"." +")\$\|)",// Leading and non-escaped trailing whitespace, capturing some non-whitespace characters preceding the latterrwhitespace = new RegExp( whitespace + "+", "g" ),
2024-12-05 19:20:18 UTC	2	IN	Data Raw: 63 74 Data Ascii: ct
2024-12-05 19:20:18 UTC	16383	IN	Data Raw: 6f 72 41 6c 6c 28 22 5b 6d 73 61 6c 6c 6f 77 63 61 70 74 75 72 65 5e 3d 27 27 5d 22 29 2e 6c 65 6e 67 74 68 20 29 20 7b 0a 09 09 09 09 72 62 75 67 67 79 51 53 41 2e 70 75 73 68 28 20 22 5b 2a 5e 24 5d 3d 22 20 2b 20 77 68 69 74 65 73 70 61 63 65 20 2b 20 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 20 29 3b 0a 09 09 09 7d 0a 0a 09 09 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 49 45 38 0a 09 09 09 2f 2f 20 42 6f 6f 6c 65 61 6e 20 61 74 74 72 69 62 75 74 65 73 20 61 6e 64 20 22 76 61 6c 75 65 22 20 61 72 65 20 6e 6f 74 20 74 72 65 61 74 65 64 20 63 6f 72 72 65 63 74 6c 79 0a 09 09 09 69 66 20 28 20 21 64 69 76 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 73 65 6c 65 63 74 65 64 5d 22 29 2e 6c 65 6e 67 74 68 20 29 20 7b 0a 09 09 09 09 72 62 75 67 67 Data Ascii: orAll("[msallowcapture^='']").length ) {rbuggyQSA.push( "[^$]=" + whitespace + "(?:''\|\"\")" );}// Support: IE8// Boolean attributes and "value" are not treated correctlyif ( !div.querySelectorAll("[selected]").length ) {rbugg
2024-12-05 19:20:18 UTC	1	IN	Data Raw: 20 Data Ascii:
2024-12-05 19:20:18 UTC	16383	IN	Data Raw: 3d 20 30 29 20 7c 7c 20 73 74 61 72 74 2e 70 6f 70 28 29 29 20 29 20 7b 0a 0a 09 09 09 09 09 09 09 09 09 69 66 20 28 20 28 20 6f 66 54 79 70 65 20 3f 0a 09 09 09 09 09 09 09 09 09 09 6e 6f 64 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 20 3d 3d 3d 20 6e 61 6d 65 20 3a 0a 09 09 09 09 09 09 09 09 09 09 6e 6f 64 65 2e 6e 6f 64 65 54 79 70 65 20 3d 3d 3d 20 31 20 29 20 26 26 0a 09 09 09 09 09 09 09 09 09 09 2b 2b 64 69 66 66 20 29 20 7b 0a 0a 09 09 09 09 09 09 09 09 09 09 2f 2f 20 43 61 63 68 65 20 74 68 65 20 69 6e 64 65 78 20 6f 66 20 65 61 63 68 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 65 6c 65 6d 65 6e 74 0a 09 09 09 09 09 09 09 09 09 09 69 66 20 28 20 75 73 65 43 61 63 68 65 20 29 20 7b 0a 09 09 09 09 09 09 09 09 09 09 09 6f 75 Data Ascii: = 0) \|\| start.pop()) ) {if ( ( ofType ?node.nodeName.toLowerCase() === name :node.nodeType === 1 ) &&++diff ) {// Cache the index of each encountered elementif ( useCache ) {ou
2024-12-05 19:20:18 UTC	1	IN	Data Raw: 0a Data Ascii:
2024-12-05 19:20:18 UTC	16383	IN	Data Raw: 09 09 09 2f 2f 20 52 65 74 75 72 6e 20 73 70 65 63 69 61 6c 20 75 70 6f 6e 20 73 65 65 69 6e 67 20 61 20 70 6f 73 69 74 69 6f 6e 61 6c 20 6d 61 74 63 68 65 72 0a 09 09 09 69 66 20 28 20 6d 61 74 63 68 65 72 5b 20 65 78 70 61 6e 64 6f 20 5d 20 29 20 7b 0a 09 09 09 09 2f 2f 20 46 69 6e 64 20 74 68 65 20 6e 65 78 74 20 72 65 6c 61 74 69 76 65 20 6f 70 65 72 61 74 6f 72 20 28 69 66 20 61 6e 79 29 20 66 6f 72 20 70 72 6f 70 65 72 20 68 61 6e 64 6c 69 6e 67 0a 09 09 09 09 6a 20 3d 20 2b 2b 69 3b 0a 09 09 09 09 66 6f 72 20 28 20 3b 20 6a 20 3c 20 6c 65 6e 3b 20 6a 2b 2b 20 29 20 7b 0a 09 09 09 09 09 69 66 20 28 20 45 78 70 72 2e 72 65 6c 61 74 69 76 65 5b 20 74 6f 6b 65 6e 73 5b 6a 5d 2e 74 79 70 65 20 5d 20 29 20 7b 0a 09 09 09 09 09 09 62 72 65 61 6b 3b 0a 09 Data Ascii: // Return special upon seeing a positional matcherif ( matcher[ expando ] ) {// Find the next relative operator (if any) for proper handlingj = ++i;for ( ; j < len; j++ ) {if ( Expr.relative[ tokens[j].type ] ) {break;
2024-12-05 19:20:18 UTC	1	IN	Data Raw: 29 Data Ascii: )
2024-12-05 19:20:18 UTC	16383	IN	Data Raw: 2f 2c 0a 0a 09 2f 2f 20 6d 65 74 68 6f 64 73 20 67 75 61 72 61 6e 74 65 65 64 20 74 6f 20 70 72 6f 64 75 63 65 20 61 20 75 6e 69 71 75 65 20 73 65 74 20 77 68 65 6e 20 73 74 61 72 74 69 6e 67 20 66 72 6f 6d 20 61 20 75 6e 69 71 75 65 20 73 65 74 0a 09 67 75 61 72 61 6e 74 65 65 64 55 6e 69 71 75 65 20 3d 20 7b 0a 09 09 63 68 69 6c 64 72 65 6e 3a 20 74 72 75 65 2c 0a 09 09 63 6f 6e 74 65 6e 74 73 3a 20 74 72 75 65 2c 0a 09 09 6e 65 78 74 3a 20 74 72 75 65 2c 0a 09 09 70 72 65 76 3a 20 74 72 75 65 0a 09 7d 3b 0a 0a 6a 51 75 65 72 79 2e 66 6e 2e 65 78 74 65 6e 64 28 20 7b 0a 09 68 61 73 3a 20 66 75 6e 63 74 69 6f 6e 28 20 74 61 72 67 65 74 20 29 20 7b 0a 09 09 76 61 72 20 69 2c 0a 09 09 09 74 61 72 67 65 74 73 20 3d 20 6a 51 75 65 72 79 28 20 74 61 72 67 65 Data Ascii: /,// methods guaranteed to produce a unique set when starting from a unique setguaranteedUnique = {children: true,contents: true,next: true,prev: true};jQuery.fn.extend( {has: function( target ) {var i,targets = jQuery( targe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.8	49838	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:17 UTC	414	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/underscore-1.13.4.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:18 UTC	792	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:18 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-ffa1" Expires: Fri, 05 Dec 2025 19:20:18 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 74daf48a20eec Server: ECAcc (lhd/35A9) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-000000000000000000074daf48a20eec-95d4c89ec21fba24-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 65441 Connection: close
2024-12-05 19:20:18 UTC	16383	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 67 6c 6f 62 61 6c 2c 20 66 61 63 74 6f 72 79 29 20 7b 0a 09 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 20 3d 3d 3d 20 27 6f 62 6a 65 63 74 27 20 26 26 20 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 3f 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 20 3d 20 66 61 63 74 6f 72 79 28 29 20 3a 0a 09 74 79 70 65 6f 66 20 64 65 66 69 6e 65 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 20 26 26 20 64 65 66 69 6e 65 2e 61 6d 64 20 3f 20 64 65 66 69 6e 65 28 27 75 6e 64 65 72 73 63 6f 72 65 27 2c 20 66 61 63 74 6f 72 79 29 20 3a 0a 09 28 67 6c 6f 62 61 6c 20 3d 20 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 3f 20 67 6c 6f 62 61 6c 54 Data Ascii: (function (global, factory) {typeof exports === 'object' && typeof module !== 'undefined' ? module.exports = factory() :typeof define === 'function' && define.amd ? define('underscore', factory) :(global = typeof globalThis !== 'undefined' ? globalT
2024-12-05 19:20:18 UTC	1	IN	Data Raw: 65 Data Ascii: e
2024-12-05 19:20:18 UTC	16383	IN	Data Raw: 70 20 65 71 75 61 6c 69 74 79 2e 0a 09 09 69 66 20 28 6b 65 79 73 28 62 29 2e 6c 65 6e 67 74 68 20 21 3d 3d 20 6c 65 6e 67 74 68 29 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 09 09 77 68 69 6c 65 20 28 6c 65 6e 67 74 68 2d 2d 29 20 7b 0a 09 09 20 20 2f 2f 20 44 65 65 70 20 63 6f 6d 70 61 72 65 20 65 61 63 68 20 6d 65 6d 62 65 72 0a 09 09 20 20 6b 65 79 20 3d 20 5f 6b 65 79 73 5b 6c 65 6e 67 74 68 5d 3b 0a 09 09 20 20 69 66 20 28 21 28 68 61 73 24 31 28 62 2c 20 6b 65 79 29 20 26 26 20 65 71 28 61 5b 6b 65 79 5d 2c 20 62 5b 6b 65 79 5d 2c 20 61 53 74 61 63 6b 2c 20 62 53 74 61 63 6b 29 29 29 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 09 09 7d 0a 09 20 20 7d 0a 09 20 20 2f 2f 20 52 65 6d 6f 76 65 20 74 68 65 20 66 69 72 73 74 20 6f 62 6a 65 63 74 20 66 Data Ascii: p equality.if (keys(b).length !== length) return false;while (length--) { // Deep compare each member key = _keys[length]; if (!(has$1(b, key) && eq(a[key], b[key], aStack, bStack))) return false;} } // Remove the first object f
2024-12-05 19:20:18 UTC	16383	IN	Data Raw: 3f 20 70 72 65 66 69 78 20 2b 20 69 64 20 3a 20 69 64 3b 0a 09 7d 0a 20 20 0a 09 2f 2f 20 53 74 61 72 74 20 63 68 61 69 6e 69 6e 67 20 61 20 77 72 61 70 70 65 64 20 55 6e 64 65 72 73 63 6f 72 65 20 6f 62 6a 65 63 74 2e 0a 09 66 75 6e 63 74 69 6f 6e 20 63 68 61 69 6e 28 6f 62 6a 29 20 7b 0a 09 20 20 76 61 72 20 69 6e 73 74 61 6e 63 65 20 3d 20 5f 24 31 28 6f 62 6a 29 3b 0a 09 20 20 69 6e 73 74 61 6e 63 65 2e 5f 63 68 61 69 6e 20 3d 20 74 72 75 65 3b 0a 09 20 20 72 65 74 75 72 6e 20 69 6e 73 74 61 6e 63 65 3b 0a 09 7d 0a 20 20 0a 09 2f 2f 20 49 6e 74 65 72 6e 61 6c 20 66 75 6e 63 74 69 6f 6e 20 74 6f 20 65 78 65 63 75 74 65 20 60 73 6f 75 72 63 65 46 75 6e 63 60 20 62 6f 75 6e 64 20 74 6f 20 60 63 6f 6e 74 65 78 74 60 20 77 69 74 68 20 6f 70 74 69 6f 6e 61 Data Ascii: ? prefix + id : id;} // Start chaining a wrapped Underscore object.function chain(obj) { var instance = _$1(obj); instance._chain = true; return instance;} // Internal function to execute `sourceFunc` bound to `context` with optiona
2024-12-05 19:20:18 UTC	16291	IN	Data Raw: 7c 7c 20 28 74 79 70 65 6f 66 20 69 74 65 72 61 74 65 65 20 3d 3d 20 27 6e 75 6d 62 65 72 27 20 26 26 20 74 79 70 65 6f 66 20 6f 62 6a 5b 30 5d 20 21 3d 20 27 6f 62 6a 65 63 74 27 20 26 26 20 6f 62 6a 20 21 3d 20 6e 75 6c 6c 29 29 20 7b 0a 09 09 6f 62 6a 20 3d 20 69 73 41 72 72 61 79 4c 69 6b 65 28 6f 62 6a 29 20 3f 20 6f 62 6a 20 3a 20 76 61 6c 75 65 73 28 6f 62 6a 29 3b 0a 09 09 66 6f 72 20 28 76 61 72 20 69 20 3d 20 30 2c 20 6c 65 6e 67 74 68 20 3d 20 6f 62 6a 2e 6c 65 6e 67 74 68 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0a 09 09 20 20 76 61 6c 75 65 20 3d 20 6f 62 6a 5b 69 5d 3b 0a 09 09 20 20 69 66 20 28 76 61 6c 75 65 20 21 3d 20 6e 75 6c 6c 20 26 26 20 76 61 6c 75 65 20 3e 20 72 65 73 75 6c 74 29 20 7b 0a 09 09 09 72 65 73 75 6c Data Ascii: \|\| (typeof iteratee == 'number' && typeof obj[0] != 'object' && obj != null)) {obj = isArrayLike(obj) ? obj : values(obj);for (var i = 0, length = obj.length; i < length; i++) { value = obj[i]; if (value != null && value > result) {resul

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.8	49839	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:18 UTC	406	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/dust-core.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:18 UTC	792	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:18 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-6349" Expires: Fri, 05 Dec 2025 19:20:18 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 0245db07d3e50 Server: ECAcc (lhd/3729) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000000245db07d3e50-e96d030c9b1c9b9f-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 25417 Connection: close
2024-12-05 19:20:18 UTC	15610	IN	Data Raw: 2f 2a 21 20 44 75 73 74 20 2d 20 41 73 79 6e 63 68 72 6f 6e 6f 75 73 20 54 65 6d 70 6c 61 74 69 6e 67 20 2d 20 76 32 2e 36 2e 32 0a 2a 20 68 74 74 70 3a 2f 2f 6c 69 6e 6b 65 64 69 6e 2e 67 69 74 68 75 62 2e 69 6f 2f 64 75 73 74 6a 73 2f 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 35 20 41 6c 65 6b 73 61 6e 64 65 72 20 57 69 6c 6c 69 61 6d 73 3b 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 20 28 72 6f 6f 74 2c 20 66 61 63 74 6f 72 79 29 20 7b 0a 20 20 2f 2a 67 6c 6f 62 61 6c 20 64 65 66 69 6e 65 2a 2f 0a 20 20 69 66 20 28 74 79 70 65 6f 66 20 64 65 66 69 6e 65 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 20 26 26 20 64 65 66 69 6e 65 2e 61 6d 64 20 26 26 Data Ascii: /! Dust - Asynchronous Templating - v2.6.2 http://linkedin.github.io/dustjs/* Copyright (c) 2015 Aleksander Williams; Released under the MIT License /(function (root, factory) { /global define*/ if (typeof define === 'function' && define.amd &&
2024-12-05 19:20:18 UTC	9807	IN	Data Raw: 3d 20 74 72 75 65 3b 0a 20 20 20 20 74 68 69 73 2e 72 6f 6f 74 2e 66 6c 75 73 68 28 29 3b 0a 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 3b 0a 20 20 7d 3b 0a 0a 20 20 43 68 75 6e 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 61 70 20 3d 20 66 75 6e 63 74 69 6f 6e 28 63 61 6c 6c 62 61 63 6b 29 20 7b 0a 20 20 20 20 76 61 72 20 63 75 72 73 6f 72 20 3d 20 6e 65 77 20 43 68 75 6e 6b 28 74 68 69 73 2e 72 6f 6f 74 2c 20 74 68 69 73 2e 6e 65 78 74 2c 20 74 68 69 73 2e 74 61 70 73 29 2c 0a 20 20 20 20 20 20 20 20 62 72 61 6e 63 68 20 3d 20 6e 65 77 20 43 68 75 6e 6b 28 74 68 69 73 2e 72 6f 6f 74 2c 20 63 75 72 73 6f 72 2c 20 74 68 69 73 2e 74 61 70 73 29 3b 0a 0a 20 20 20 20 74 68 69 73 2e 6e 65 78 74 20 3d 20 62 72 61 6e 63 68 3b 0a 20 20 20 20 74 68 69 73 2e 66 6c 75 Data Ascii: = true; this.root.flush(); return this; }; Chunk.prototype.map = function(callback) { var cursor = new Chunk(this.root, this.next, this.taps), branch = new Chunk(this.root, cursor, this.taps); this.next = branch; this.flu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.8	49842	151.101.1.21	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:18 UTC	1123	OUT	GET /auth/logclientdata HTTP/1.1 Host: www.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=c0c49a91e6384eadbaa4a565394e21da1733426393114; LANG=en_US%3BUS; nsid=s%3AGW_RscjBMue_uO0mnkc7Z8KQBUhwfX2j.FFWOARB2%2BuuO26tFpElNMknNGOEOXTm%2FpBrBjPfDp7c; l7_az=dcg15.slc; ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778; tsrce=authchallengenodeweb; ddbc=1; TLTSID=71139903928702455522704624189564; TLTDID=24394070527605051854525965496125; datadome=buJ29aABw9ywhcwsxLedKnsC4BAmLRyJrGVvMBQoK~J0j0xnjOkH7nUpkES4yULXec_bkkBjWn~DdWPkGMh7Bdg7HO475FpNdpN2VKAqG6qmkS5tul3JkYU8x_vn1Pe1; x-pp-s=eyJ0IjoiMTczMzQyNjQxNjgwNiIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1764962416%26vteXpYrS%3D1733428216%26vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778%26vtyp%3Dnew
2024-12-05 19:20:18 UTC	345	IN	HTTP/1.1 302 Found Connection: close Content-Length: 29 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Access-Control-Expose-Headers: Server-Timing Cache-Control: max-age=0, no-cache, no-store, must-revalidate
2024-12-05 19:20:18 UTC	2082	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6e 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 6f 62 6a 65 63 74 73 2e 70 61 79 70 61 6c 2e 63 6e 3b 20 73 63 72 69 70 74 2d 73 72 63 20 27 6e 6f 6e 63 65 2d 65 77 53 4c 67 55 38 37 49 57 6b 6c 79 62 7a 5a 76 39 78 51 69 4b 35 32 7a 6b 75 6d 4b 53 4b 6d 43 39 64 7a 6d 55 42 73 61 4b 6c 34 42 53 44 6f 27 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6e Data Ascii: Content-Security-Policy: default-src 'self' https://.paypal.com https://.paypal.cn https://.paypalobjects.com https://objects.paypal.cn; script-src 'nonce-ewSLgU87IWklybzZv9xQiK52zkumKSKmC9dzmUBsaKl4BSDo' 'self' https://.paypal.com https://*.paypal.cn
2024-12-05 19:20:18 UTC	1690	IN	Data Raw: 50 65 72 6d 69 73 73 69 6f 6e 73 2d 50 6f 6c 69 63 79 3a 20 63 68 2d 75 61 2d 70 6c 61 74 66 6f 72 6d 2d 76 65 72 73 69 6f 6e 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 61 72 63 68 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 77 6f 77 36 34 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 6d 6f 64 65 6c 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 66 75 6c 6c 2d 76 65 Data Ascii: Permissions-Policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-ve
2024-12-05 19:20:18 UTC	396	IN	Data Raw: 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 33 30 37 32 30 30 30 3b 20 69 6e 63 6c 75 64 65 53 75 62 44 6f 6d 61 69 6e 73 3b 20 70 72 65 6c 6f 61 64 0d 0a 58 2d 53 65 72 76 65 64 2d 42 79 3a 20 63 61 63 68 65 2d 69 61 64 2d 6b 69 61 64 37 30 30 30 31 33 35 2d 49 41 44 2c 20 63 61 63 68 65 2d 65 77 72 2d 6b 65 77 72 31 37 34 30 30 34 32 2d 45 57 52 2c 20 63 61 63 68 65 2d 65 77 72 2d 6b 65 77 72 31 37 34 30 30 34 32 2d 45 57 52 0d 0a 58 2d 43 61 63 68 65 3a 20 4d 49 53 53 2c 20 4d 49 53 53 2c 20 4d 49 53 53 0d 0a 58 2d 43 61 63 68 65 2d 48 69 74 73 3a 20 30 2c 20 30 2c 20 30 0d 0a 58 2d 54 69 6d 65 72 3a 20 53 31 37 33 33 34 32 36 34 31 39 2e 35 34 39 33 35 30 2c 56 53 30 2c 56 45 31 31 35 0d Data Ascii: Strict-Transport-Security: max-age=63072000; includeSubDomains; preloadX-Served-By: cache-iad-kiad7000135-IAD, cache-ewr-kewr1740042-EWR, cache-ewr-kewr1740042-EWRX-Cache: MISS, MISS, MISSX-Cache-Hits: 0, 0, 0X-Timer: S1733426419.549350,VS0,VE115
2024-12-05 19:20:18 UTC	29	IN	Data Raw: 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 2f 73 69 67 6e 69 6e Data Ascii: Found. Redirecting to /signin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.8	49841	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:18 UTC	589	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/backbone-1.5.0.min.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:19 UTC	792	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:19 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-63a4" Expires: Fri, 05 Dec 2025 19:20:19 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 15a9fd45211c5 Server: ECAcc (lhd/35DA) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-000000000000000000015a9fd45211c5-5a3b9c0c9eb2d1be-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 25508 Connection: close
2024-12-05 19:20:19 UTC	16383	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 6e 3d 74 79 70 65 6f 66 20 73 65 6c 66 3d 3d 22 6f 62 6a 65 63 74 22 26 26 73 65 6c 66 2e 73 65 6c 66 3d 3d 3d 73 65 6c 66 26 26 73 65 6c 66 7c 7c 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3d 3d 22 6f 62 6a 65 63 74 22 26 26 67 6c 6f 62 61 6c 2e 67 6c 6f 62 61 6c 3d 3d 3d 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 3b 69 66 28 74 79 70 65 6f 66 20 64 65 66 69 6e 65 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 64 65 66 69 6e 65 2e 61 6d 64 29 7b 64 65 66 69 6e 65 28 5b 22 75 6e 64 65 72 73 63 6f 72 65 22 2c 22 6a 71 75 65 72 79 22 2c 22 65 78 70 6f 72 74 73 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 6e 2e 42 61 63 6b 62 6f 6e 65 3d 72 28 6e 2c 69 2c 74 2c 65 29 7d 29 7d 65 6c 73 65 20 69 66 28 74 Data Ascii: (function(r){var n=typeof self=="object"&&self.self===self&&self\|\|typeof global=="object"&&global.global===global&&global;if(typeof define==="function"&&define.amd){define(["underscore","jquery","exports"],function(t,e,i){n.Backbone=r(n,i,t,e)})}else if(t
2024-12-05 19:20:19 UTC	9125	IN	Data Raw: 2b 22 2e 64 65 6c 65 67 61 74 65 45 76 65 6e 74 73 22 2b 74 68 69 73 2e 63 69 64 2c 65 2c 69 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 5f 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 74 29 7d 2c 5f 65 6e 73 75 72 65 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 74 68 69 73 2e 65 6c 29 7b 76 61 72 20 74 3d 78 2e 65 78 74 65 6e 64 28 7b 7d 2c 78 2e 72 65 73 75 6c 74 28 74 68 69 73 2c 22 61 74 74 72 69 62 75 74 65 73 22 29 29 3b 69 66 28 74 68 69 73 2e 69 64 29 74 2e 69 64 3d 78 2e 72 65 73 75 6c 74 28 74 68 69 73 2c 22 69 64 22 29 3b 69 66 28 74 68 69 73 2e 63 6c 61 73 73 4e 61 6d 65 29 74 5b 22 63 6c 61 73 73 Data Ascii: +".delegateEvents"+this.cid,e,i);return this},_createElement:function(t){return document.createElement(t)},_ensureElement:function(){if(!this.el){var t=x.extend({},x.result(this,"attributes"));if(this.id)t.id=x.result(this,"id");if(this.className)t["class

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.8	49840	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:18 UTC	583	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/dust-helpers.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:19 UTC	792	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:19 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-59d0" Expires: Fri, 05 Dec 2025 19:20:19 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 983e94fba8cf5 Server: ECAcc (lhd/35E9) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000983e94fba8cf5-6db7af5735060ca5-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 22992 Connection: close
2024-12-05 19:20:19 UTC	15610	IN	Data Raw: 2f 2a 21 20 64 75 73 74 6a 73 2d 68 65 6c 70 65 72 73 20 2d 20 76 31 2e 35 2e 30 0a 2a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6c 69 6e 6b 65 64 69 6e 2f 64 75 73 74 6a 73 2d 68 65 6c 70 65 72 73 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 34 20 41 6c 65 6b 73 61 6e 64 65 72 20 57 69 6c 6c 69 61 6d 73 3b 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 64 75 73 74 29 7b 0a 0a 20 20 20 20 2f 2f 20 55 73 65 20 64 75 73 74 27 73 20 62 75 69 6c 74 2d 69 6e 20 6c 6f 67 67 69 6e 67 20 77 68 65 6e 20 61 76 61 69 6c 61 62 6c 65 0a 20 20 20 20 76 61 72 20 5f 6c 6f 67 20 3d 20 64 75 73 74 2e 6c 6f 67 20 3f 20 66 75 6e 63 74 69 6f 6e 28 6d 73 67 Data Ascii: /! dustjs-helpers - v1.5.0 https://github.com/linkedin/dustjs-helpers* Copyright (c) 2014 Aleksander Williams; Released under the MIT License */(function(dust){ // Use dust's built-in logging when available var _log = dust.log ? function(msg
2024-12-05 19:20:19 UTC	7382	IN	Data Raw: 2c 20 20 54 68 65 20 61 63 74 75 61 6c 20 6b 65 79 20 74 6f 20 62 65 20 63 6f 6d 70 61 72 65 64 20 28 20 6f 70 74 69 6f 6e 61 6c 20 77 68 65 6e 20 68 65 6c 70 65 72 20 75 73 65 64 20 69 6e 20 63 6f 6e 6a 75 6e 63 74 69 6f 6e 20 77 69 74 68 20 73 65 6c 65 63 74 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 69 74 68 65 72 20 61 20 73 74 72 69 6e 67 20 6c 69 74 65 72 61 6c 20 76 61 6c 75 65 20 6f 72 20 61 20 64 75 73 74 20 72 65 66 65 72 65 6e 63 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 20 73 74 72 69 6e 67 20 6c 69 74 65 72 61 6c 20 76 61 6c 75 65 2c 20 69 73 20 65 6e 63 6c 6f 73 65 64 20 69 6e 20 64 6f 75 62 6c 65 20 71 75 6f 74 65 73 2c 20 65 2e 67 2e 20 6b 65 79 3d 22 66 6f 6f 22 0a 20 20 20 20 20 20 20 Data Ascii: , The actual key to be compared ( optional when helper used in conjunction with select) either a string literal value or a dust reference a string literal value, is enclosed in double quotes, e.g. key="foo"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.8	49843	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:19 UTC	422	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/opinionLab/onlineOpinionPopup.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:19 UTC	790	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:19 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-ef0" Expires: Fri, 05 Dec 2025 19:20:19 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: c2024eeaab32c Server: ECAcc (lhd/35F6) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000c2024eeaab32c-8176a71871a3efa2-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 3824 Connection: close
2024-12-05 19:20:19 UTC	3824	IN	Data Raw: 2f 2a 0a 20 53 70 65 63 20 23 32 32 39 35 36 20 4f 70 69 6e 69 6f 6e 4c 61 62 0a 20 2a 2f 0a 0a 64 65 66 69 6e 65 28 5b 27 6f 70 69 6e 69 6f 6e 4c 61 62 27 5d 2c 20 66 75 6e 63 74 69 6f 6e 28 6f 70 69 6e 69 6f 6e 4c 61 62 29 20 7b 0a 0a 09 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 09 77 69 6e 64 6f 77 2e 50 41 59 50 41 4c 20 3d 20 77 69 6e 64 6f 77 2e 50 41 59 50 41 4c 20 3f 20 77 69 6e 64 6f 77 2e 50 41 59 50 41 4c 20 3a 20 7b 7d 3b 0a 09 76 61 72 20 6f 70 56 61 72 73 20 3d 20 77 69 6e 64 6f 77 2e 50 41 59 50 41 4c 2e 6f 70 69 6e 69 6f 6e 4c 61 62 56 61 72 73 3b 0a 0a 09 66 75 6e 63 74 69 6f 6e 20 73 68 6f 77 70 6f 70 75 70 28 72 65 64 69 72 65 63 74 54 6f 29 20 7b 0a 09 09 76 61 72 20 6d 79 77 69 6e 3b 0a 09 09 6d 79 77 69 6e 20 3d 20 77 69 6e 64 6f 77 Data Ascii: /* Spec #22956 OpinionLab */define(['opinionLab'], function(opinionLab) {'use strict';window.PAYPAL = window.PAYPAL ? window.PAYPAL : {};var opVars = window.PAYPAL.opinionLabVars;function showpopup(redirectTo) {var mywin;mywin = window

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.8	49844	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:19 UTC	414	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/opinionLab/opinionLab.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:19 UTC	798	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:19 GMT DC: ccg11-origin-www-1.paypal.com Etag: "6736db9f-10db+br+ident" Expires: Fri, 05 Dec 2025 19:20:19 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 33840520f9c7e Server: ECAcc (lhd/35F2) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-000000000000000000033840520f9c7e-d6a66713f67e83d2-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 4315 Connection: close
2024-12-05 19:20:19 UTC	4315	IN	Data Raw: 2f 2a 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 63 6f 6e 74 61 69 6e 73 20 74 68 65 20 6a 61 76 61 73 63 72 69 70 74 20 66 75 6e 63 74 69 6f 6e 73 20 61 6e 64 20 73 6e 69 70 70 65 74 73 0a 20 2a 20 74 68 61 74 20 61 72 65 20 75 73 65 64 20 74 6f 20 69 6e 74 72 6f 64 75 63 65 20 74 68 65 20 73 69 74 65 20 66 65 65 64 62 61 63 6b 20 6c 69 6e 6b 20 69 6e 20 74 68 65 20 66 6f 6f 74 65 72 2e 0a 20 2a 20 46 75 6e 63 74 69 6f 6e 20 4f 5f 47 6f 54 20 69 6e 73 65 72 74 73 20 74 68 65 20 6c 69 6e 6b 20 69 6e 20 74 68 65 20 66 6f 6f 74 65 72 20 6c 69 73 74 20 61 6e 64 20 61 73 73 69 67 6e 73 20 6f 6e 63 6c 69 63 6b 0a 20 2a 20 66 6f 72 20 70 6f 70 75 70 20 77 69 6e 64 6f 77 20 74 68 61 74 20 64 69 73 70 6c 61 79 73 20 74 68 65 20 66 65 65 64 62 61 63 6b 20 66 72 6f Data Ascii: /* * This file contains the javascript functions and snippets * that are used to introduce the site feedback link in the footer. * Function O_GoT inserts the link in the footer list and assigns onclick * for popup window that displays the feedback fro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.8	49845	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:19 UTC	406	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/core/baseView.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:20 UTC	797	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:20 GMT DC: ccg11-origin-www-1.paypal.com Etag: "6736db9f-802+br+ident" Expires: Fri, 05 Dec 2025 19:20:20 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: e7e1b5d32ba47 Server: ECAcc (lhd/35C1) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000e7e1b5d32ba47-611ca1a3b2e10145-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 2050 Connection: close
2024-12-05 19:20:20 UTC	2050	IN	Data Raw: 2f 2a 20 67 6c 6f 62 61 6c 20 64 65 66 69 6e 65 3a 74 72 75 65 20 2a 2f 0a 0a 2f 2a 2a 0a 20 2a 20 41 62 73 74 72 61 63 74 20 76 69 65 77 20 77 68 69 63 68 20 65 6e 61 62 6c 65 73 20 72 65 6e 64 65 72 69 6e 67 20 63 6f 6e 74 65 6e 74 73 20 77 69 74 68 20 61 20 74 65 6d 70 6c 61 74 65 2e 0a 20 2a 2f 0a 64 65 66 69 6e 65 28 5b 0a 09 27 6e 6f 75 67 61 74 27 2c 0a 09 27 75 6e 64 65 72 73 63 6f 72 65 27 2c 0a 09 27 62 61 63 6b 62 6f 6e 65 27 0a 5d 2c 0a 09 66 75 6e 63 74 69 6f 6e 20 28 6e 6f 75 67 61 74 2c 20 5f 2c 20 42 61 63 6b 62 6f 6e 65 29 20 7b 0a 0a 09 09 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 0a 09 09 76 61 72 20 42 61 73 65 56 69 65 77 20 3d 20 42 61 63 6b 62 6f 6e 65 2e 56 69 65 77 2e 65 78 74 65 6e 64 28 7b 0a 0a 09 09 09 2f 2a 2a 0a 09 09 09 Data Ascii: /* global define:true //* * Abstract view which enables rendering contents with a template. /define(['nougat','underscore','backbone'],function (nougat, _, Backbone) {'use strict';var BaseView = Backbone.View.extend({/*

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.8	49846	151.101.131.1	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:19 UTC	1193	OUT	POST /checksiteconfig?v=d136a52&host=hcaptcha.paypal.com&sitekey=bf07db68-5c2e-42e8-8779-ea8384890eea&sc=1&swa=1&spst=1 HTTP/1.1 Host: hcaptcha.paypal.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json Content-Type: text/plain sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://newassets.hcaptcha.paypal.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://newassets.hcaptcha.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=c0c49a91e6384eadbaa4a565394e21da1733426393114; LANG=en_US%3BUS; l7_az=dcg15.slc; ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778; tsrce=authchallengenodeweb; ts=vreXpYrS%3D1764962416%26vteXpYrS%3D1733428216%26vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778%26vtyp%3Dnew; x-pp-s=eyJ0IjoiMTczMzQyNjQxNjgxMCIsImwiOiIwIiwibSI6IjAifQ
2024-12-05 19:20:20 UTC	722	IN	HTTP/1.1 200 OK Connection: close Content-Length: 796 access-control-allow-headers: Cache-Control, Content-Type, DNT, Referer, User-Agent cf-ray: 8ed664960c951839-EWR server: cloudflare access-control-allow-credentials: true access-control-allow-methods: GET, HEAD, POST, OPTIONS content-type: application/json x-content-type-options: nosniff access-control-allow-origin: https://newassets.hcaptcha.paypal.com Accept-Ranges: bytes Date: Thu, 05 Dec 2024 19:20:20 GMT Via: 1.1 varnish X-Served-By: cache-nyc-kteb1890048-NYC, cache-nyc-kteb1890048-NYC X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1733426420.143792,VS0,VE90 Vary: Origin, Accept-Encoding Strict-Transport-Security: max-age=31557600
2024-12-05 19:20:20 UTC	796	IN	Data Raw: 7b 22 66 65 61 74 75 72 65 73 22 3a 7b 22 63 75 73 74 6f 6d 5f 74 68 65 6d 65 22 3a 74 72 75 65 2c 22 65 6e 63 5f 67 65 74 5f 72 65 71 22 3a 74 72 75 65 7d 2c 22 63 22 3a 7b 22 74 79 70 65 22 3a 22 68 73 77 22 2c 22 72 65 71 22 3a 22 65 79 4a 30 65 58 41 69 4f 69 4a 4b 56 31 51 69 4c 43 4a 68 62 47 63 69 4f 69 4a 49 55 7a 49 31 4e 69 4a 39 2e 65 79 4a 6d 49 6a 6f 77 4c 43 4a 7a 49 6a 6f 79 4c 43 4a 30 49 6a 6f 69 64 79 49 73 49 6d 51 69 4f 69 4a 53 4e 6a 68 57 4f 53 74 78 4f 45 63 35 54 30 78 73 55 6b 6c 76 5a 6e 55 72 52 6d 38 79 61 46 56 42 61 56 46 46 57 55 70 53 61 33 49 30 59 31 42 6e 4f 45 31 32 61 54 46 44 51 6a 4e 44 53 6e 52 77 53 57 51 34 54 44 4e 73 57 6c 56 33 53 6d 51 34 65 6e 5a 7a 55 6d 39 49 65 6d 5a 36 55 32 39 75 57 55 49 33 53 6c 56 51 Data Ascii: {"features":{"custom_theme":true,"enc_get_req":true},"c":{"type":"hsw","req":"eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJmIjowLCJzIjoyLCJ0IjoidyIsImQiOiJSNjhWOStxOEc5T0xsUklvZnUrRm8yaFVBaVFFWUpSa3I0Y1BnOE12aTFDQjNDSnRwSWQ4TDNsWlV3SmQ4enZzUm9IemZ6U29uWUI3SlVQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.8	49847	151.101.1.21	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:19 UTC	2092	OUT	POST /platform/tealeaftarget HTTP/1.1 Host: www.paypal.com Connection: keep-alive Content-Length: 3049 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Encoding: gzip X-Tealeaf-SyncXHR: false X-Tealeaf-MessageTypes: 12 sec-ch-ua-arch: "x86" sec-ch-ua-platform-version: "10.0.0" X-Tealeaf-SaaS-AppKey: 76938917d7504ff7a962174c021690bd X-Tealeaf-SaaS-TLTSID: 71139903928702455522704624189564 X-Requested-With: fetch sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" X-Tealeaf-SaaS-TLTDID: 24394070527605051854525965496125 X-Tealeaf: device (UIC) Lib/6.4.65 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json sec-ch-ua-full-version: "117.0.5938.132" X-TealeafType: GUI X-PageId: P.SUWBKH6YCS3P87H2K9RELBLBULMP X-TeaLeaf-Page-Url: /signin Accept: / Origin: https://www.paypal.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.paypal.com/signin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=c0c49a91e6384eadbaa4a565394e21da1733426393114; LANG=en_US%3BUS; nsid=s%3AGW_RscjBMue_uO0mnkc7Z8KQBUhwfX2j.FFWOARB2%2BuuO26tFpElNMknNGOEOXTm%2FpBrBjPfDp7c; l7_az=dcg15.slc; ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778; tsrce=authchallengenodeweb; ddbc=1; TLTSID=71139903928702455522704624189564; TLTDID=24394070527605051854525965496125; datadome=buJ29aABw9ywhcwsxLedKnsC4BAmLRyJrGVvMBQoK~J0j0xnjOkH7nUpkES4yULXec_bkkBjWn~DdWPkGMh7Bdg7HO475FpNdpN2VKAqG6qmkS5tul3JkYU8x_vn1Pe1; ts=vreXpYrS%3D1764962416%26vteXpYrS%3D1733428216%26vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778%26vtyp%3Dnew; x-pp-s=eyJ0IjoiMTczMzQyNjQxNjgxMCIsImwiOiIwIiwibSI6IjAifQ
2024-12-05 19:20:19 UTC	3049	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 c5 19 6b 77 e2 3a ee af 64 39 a7 7c 6a 20 09 81 24 9d d2 db 52 fa a4 2d 1d 1e 85 99 9d 7b 38 4e 62 c0 25 89 d3 d8 e1 d1 39 f3 df 57 76 12 0a 9d c7 7d 9c bb bb d0 12 5b 96 64 59 92 25 d9 f9 5a 0a 31 63 68 86 9f 70 c2 08 8d 4a 47 25 bd 56 d1 c4 b7 74 58 62 38 21 28 78 48 43 17 27 a5 23 5d 00 98 c0 62 a5 a3 7f 7f 2d 11 1f b0 1f 2b fd e1 a8 d5 b9 6e 7c 3a ef d7 1e 6d eb da e8 38 bd 8b bb d6 5d 6b 78 77 ff 08 3c 38 72 6f 04 a2 d1 33 ae 04 4b 8e 12 3e 20 21 06 7e 56 ad 66 1a 0d 53 ab d7 6b 16 20 02 f0 95 46 b8 3b 9d 32 cc 4b 47 35 4d 3b 2c a4 cb 26 e4 9b 58 90 19 87 25 9a e3 e8 ba 53 07 2c e6 25 18 47 4b 82 57 05 31 00 3d 9a 46 5c 4a 3d 4d 68 38 c2 6e e9 88 27 29 3e 2c f9 34 3c 47 31 4f 13 60 f6 b5 44 13 32 23 11 0a fa e4 55 30 d7 Data Ascii: kw:d9\|j $R-{8Nb%9Wv}[dY%Z1chpJG%VtXb8!(xHC'#]b-+n\|:m8]kxw<8ro3K> !~VfSk F;2KG5M;,&X%S,%GKW1=F\J=Mh8n')>,4<G1O`D2#U0
2024-12-05 19:20:20 UTC	1096	IN	HTTP/1.1 200 OK Connection: close Content-Length: 39 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Security-Policy: default-src 'self' https://.paypal.com https://.paypalobjects.com 'unsafe-inline'; script-src 'self' https://.paypal.com https://.paypalobjects.com; img-src 'self' https:; object-src 'none'; form-action 'self' https://.paypal.com; base-uri 'self' https://.paypal.com; font-src 'self' https://.paypalobjects.com https://.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp Content-Type: application/json; charset=utf-8 Etag: W/"27-EZtUcyDsJwT1ozWcL/MdagQCFZ8" Origin-Trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ== Paypal-Debug-Id: f68803982126d
2024-12-05 19:20:20 UTC	1558	IN	Data Raw: 50 65 72 6d 69 73 73 69 6f 6e 73 2d 50 6f 6c 69 63 79 3a 20 63 68 2d 75 61 2d 70 6c 61 74 66 6f 72 6d 2d 76 65 72 73 69 6f 6e 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 61 72 63 68 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 77 6f 77 36 34 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 6d 6f 64 65 6c 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 66 75 6c 6c 2d 76 65 Data Ascii: Permissions-Policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-ve
2024-12-05 19:20:20 UTC	39	IN	Data Raw: 7b 22 74 61 72 67 65 74 56 65 72 73 69 6f 6e 22 3a 22 31 22 2c 22 69 64 22 3a 39 39 31 31 30 34 31 35 32 37 38 30 7d Data Ascii: {"targetVersion":"1","id":991104152780}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.8	49849	151.101.1.21	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:20 UTC	1123	OUT	GET /auth/logclientdata HTTP/1.1 Host: www.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=c0c49a91e6384eadbaa4a565394e21da1733426393114; LANG=en_US%3BUS; nsid=s%3AGW_RscjBMue_uO0mnkc7Z8KQBUhwfX2j.FFWOARB2%2BuuO26tFpElNMknNGOEOXTm%2FpBrBjPfDp7c; l7_az=dcg15.slc; ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778; tsrce=authchallengenodeweb; ddbc=1; TLTSID=71139903928702455522704624189564; TLTDID=24394070527605051854525965496125; datadome=buJ29aABw9ywhcwsxLedKnsC4BAmLRyJrGVvMBQoK~J0j0xnjOkH7nUpkES4yULXec_bkkBjWn~DdWPkGMh7Bdg7HO475FpNdpN2VKAqG6qmkS5tul3JkYU8x_vn1Pe1; ts=vreXpYrS%3D1764962416%26vteXpYrS%3D1733428216%26vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778%26vtyp%3Dnew; x-pp-s=eyJ0IjoiMTczMzQyNjQxNjgxMCIsImwiOiIwIiwibSI6IjAifQ
2024-12-05 19:20:20 UTC	345	IN	HTTP/1.1 302 Found Connection: close Content-Length: 29 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Access-Control-Expose-Headers: Server-Timing Cache-Control: max-age=0, no-cache, no-store, must-revalidate
2024-12-05 19:20:20 UTC	2082	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6e 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 6f 62 6a 65 63 74 73 2e 70 61 79 70 61 6c 2e 63 6e 3b 20 73 63 72 69 70 74 2d 73 72 63 20 27 6e 6f 6e 63 65 2d 79 55 31 68 6d 4c 47 75 52 6e 42 4e 78 46 75 53 6e 51 4a 58 65 2f 4f 72 33 57 6a 65 4a 63 4c 2b 73 4c 5a 52 4f 34 4b 62 54 55 41 4e 68 66 44 36 27 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6e Data Ascii: Content-Security-Policy: default-src 'self' https://.paypal.com https://.paypal.cn https://.paypalobjects.com https://objects.paypal.cn; script-src 'nonce-yU1hmLGuRnBNxFuSnQJXe/Or3WjeJcL+sLZRO4KbTUANhfD6' 'self' https://.paypal.com https://*.paypal.cn
2024-12-05 19:20:20 UTC	1690	IN	Data Raw: 50 65 72 6d 69 73 73 69 6f 6e 73 2d 50 6f 6c 69 63 79 3a 20 63 68 2d 75 61 2d 70 6c 61 74 66 6f 72 6d 2d 76 65 72 73 69 6f 6e 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 61 72 63 68 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 77 6f 77 36 34 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 6d 6f 64 65 6c 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 66 75 6c 6c 2d 76 65 Data Ascii: Permissions-Policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-ve
2024-12-05 19:20:20 UTC	396	IN	Data Raw: 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 33 30 37 32 30 30 30 3b 20 69 6e 63 6c 75 64 65 53 75 62 44 6f 6d 61 69 6e 73 3b 20 70 72 65 6c 6f 61 64 0d 0a 58 2d 53 65 72 76 65 64 2d 42 79 3a 20 63 61 63 68 65 2d 69 61 64 2d 6b 69 61 64 37 30 30 30 30 34 37 2d 49 41 44 2c 20 63 61 63 68 65 2d 6e 79 63 2d 6b 74 65 62 31 38 39 30 30 38 39 2d 4e 59 43 2c 20 63 61 63 68 65 2d 6e 79 63 2d 6b 74 65 62 31 38 39 30 30 38 39 2d 4e 59 43 0d 0a 58 2d 43 61 63 68 65 3a 20 4d 49 53 53 2c 20 4d 49 53 53 2c 20 4d 49 53 53 0d 0a 58 2d 43 61 63 68 65 2d 48 69 74 73 3a 20 30 2c 20 30 2c 20 30 0d 0a 58 2d 54 69 6d 65 72 3a 20 53 31 37 33 33 34 32 36 34 32 30 2e 33 32 30 36 35 30 2c 56 53 30 2c 56 45 31 32 36 0d Data Ascii: Strict-Transport-Security: max-age=63072000; includeSubDomains; preloadX-Served-By: cache-iad-kiad7000047-IAD, cache-nyc-kteb1890089-NYC, cache-nyc-kteb1890089-NYCX-Cache: MISS, MISS, MISSX-Cache-Hits: 0, 0, 0X-Timer: S1733426420.320650,VS0,VE126
2024-12-05 19:20:20 UTC	29	IN	Data Raw: 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 2f 73 69 67 6e 69 6e Data Ascii: Found. Redirecting to /signin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.8	49848	151.101.1.21	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:20 UTC	1111	OUT	GET /signin HTTP/1.1 Host: www.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=c0c49a91e6384eadbaa4a565394e21da1733426393114; LANG=en_US%3BUS; nsid=s%3AGW_RscjBMue_uO0mnkc7Z8KQBUhwfX2j.FFWOARB2%2BuuO26tFpElNMknNGOEOXTm%2FpBrBjPfDp7c; l7_az=dcg15.slc; ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778; tsrce=authchallengenodeweb; ddbc=1; TLTSID=71139903928702455522704624189564; TLTDID=24394070527605051854525965496125; datadome=buJ29aABw9ywhcwsxLedKnsC4BAmLRyJrGVvMBQoK~J0j0xnjOkH7nUpkES4yULXec_bkkBjWn~DdWPkGMh7Bdg7HO475FpNdpN2VKAqG6qmkS5tul3JkYU8x_vn1Pe1; x-pp-s=eyJ0IjoiMTczMzQyNjQxODYxNyIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1764962418%26vteXpYrS%3D1733428218%26vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778%26vtyp%3Dnew
2024-12-05 19:20:20 UTC	1147	IN	HTTP/1.1 403 Forbidden Connection: close Content-Length: 708 Content-Type: text/html;charset=utf-8 Server: DataDome X-DataDome: protected Accept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory Charset: utf-8 Cache-Control: max-age=0, private, no-cache, no-store, must-revalidate Pragma: no-cache Access-Control-Allow-Credentials: true Access-Control-Expose-Headers: x-dd-b, x-set-cookie Access-Control-Allow-Origin: * X-DataDome-CID: AHrlqAAAAAMAg8WuNM8BK3AACC575A== X-DD-B: 1 Set-Cookie: datadome=zlCfnW4VK7jZ4nx3Wxq6AKd3Z_~7eyMfMhlNSkGMKu3K4trVcOiYHsbYXb5G7_4qFcXjIsA74xDGn6O_IMMYA5IGahByNnX~gFFzwtJcfNQpoB~xxgh~HvIFEFRl24fv; Max-Age=2592000; Domain=.paypal.com; Path=/; Secure; SameSite=Lax Accept-Ranges: bytes Date: Thu, 05 Dec 2024 19:20:20 GMT Via: 1.1 varnish Paypal-Debug-Id: f688039d0ca24 Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Served-By: cache-nyc-kteb1890067-NYC X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1733426420.321786,VS0,VE34 Server-Timing: content-encoding;desc="",x-cdn;desc="fastly"
2024-12-05 19:20:20 UTC	708	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 70 61 79 70 61 6c 2e 63 6f 6d 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 23 63 6d 73 67 7b 61 6e 69 6d 61 74 69 6f 6e 3a 20 41 20 31 2e 35 73 3b 7d 40 6b 65 79 66 72 61 6d 65 73 20 41 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 3b 7d 39 39 25 7b 6f 70 61 63 69 74 79 3a 30 3b 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 31 3b 7d 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 30 22 3e 3c 70 20 69 64 3d 22 63 6d 73 67 22 3e 50 6c 65 61 73 65 20 65 6e 61 62 6c 65 20 4a 53 20 61 6e 64 20 64 69 73 61 62 6c 65 20 61 6e 79 20 61 64 20 62 6c 6f 63 6b 65 72 3c 2f 70 3e 3c 73 63 72 69 70 74 20 64 61 74 61 2d 63 66 61 73 79 6e 63 3d 22 66 61 6c 73 65 22 3e Data Ascii: <html><head><title>paypal.com</title><style>#cmsg{animation: A 1.5s;}@keyframes A{0%{opacity:0;}99%{opacity:0;}100%{opacity:1;}}</style></head><body style="margin:0"><p id="cmsg">Please enable JS and disable any ad blocker</p><script data-cfasync="false">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.8	49850	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:21 UTC	594	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/dust-helpers-supplement.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:21 UTC	791	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:21 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-118f" Expires: Fri, 05 Dec 2025 19:20:21 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: c4494514b3b7f Server: ECAcc (lhd/35A0) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000c4494514b3b7f-17e7acea67a0f445-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 4495 Connection: close
2024-12-05 19:20:21 UTC	4495	IN	Data Raw: 76 61 72 20 65 78 74 65 6e 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 65 78 74 65 6e 64 28 64 75 73 74 29 20 7b 0a 0a 20 20 20 20 2f 2f 20 41 64 64 20 6e 65 77 20 64 75 73 74 20 68 65 6c 70 65 72 73 20 69 6e 20 74 68 69 73 20 73 74 79 6c 65 0a 20 20 20 20 64 75 73 74 2e 68 65 6c 70 65 72 73 2e 6c 69 6e 6b 20 3d 20 66 75 6e 63 74 69 6f 6e 20 6c 69 6e 6b 28 63 68 75 6e 6b 2c 20 63 74 78 2c 20 62 6f 64 69 65 73 2c 20 70 61 72 61 6d 73 29 20 7b 0a 20 20 20 20 20 20 20 20 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 20 20 20 20 20 20 20 20 76 61 72 20 68 72 65 66 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 6f 73 74 20 3d 20 63 74 78 2e 67 65 74 50 61 74 68 28 66 61 6c 73 65 2c 20 5b 27 63 6f 6e 74 65 78 74 27 2c 20 27 70 61 67 65 49 6e 66 6f 27 2c 20 27 68 6f 73 Data Ascii: var extend = function extend(dust) { // Add new dust helpers in this style dust.helpers.link = function link(chunk, ctx, bodies, params) { 'use strict'; var href, host = ctx.getPath(false, ['context', 'pageInfo', 'hos

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.8	49852	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:21 UTC	409	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/dust-helpers.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:21 UTC	792	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:21 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-59d0" Expires: Fri, 05 Dec 2025 19:20:21 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 983e94fba8cf5 Server: ECAcc (lhd/35E9) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000983e94fba8cf5-6db7af5735060ca5-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 22992 Connection: close
2024-12-05 19:20:22 UTC	16383	IN	Data Raw: 2f 2a 21 20 64 75 73 74 6a 73 2d 68 65 6c 70 65 72 73 20 2d 20 76 31 2e 35 2e 30 0a 2a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6c 69 6e 6b 65 64 69 6e 2f 64 75 73 74 6a 73 2d 68 65 6c 70 65 72 73 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 34 20 41 6c 65 6b 73 61 6e 64 65 72 20 57 69 6c 6c 69 61 6d 73 3b 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 64 75 73 74 29 7b 0a 0a 20 20 20 20 2f 2f 20 55 73 65 20 64 75 73 74 27 73 20 62 75 69 6c 74 2d 69 6e 20 6c 6f 67 67 69 6e 67 20 77 68 65 6e 20 61 76 61 69 6c 61 62 6c 65 0a 20 20 20 20 76 61 72 20 5f 6c 6f 67 20 3d 20 64 75 73 74 2e 6c 6f 67 20 3f 20 66 75 6e 63 74 69 6f 6e 28 6d 73 67 Data Ascii: /! dustjs-helpers - v1.5.0 https://github.com/linkedin/dustjs-helpers* Copyright (c) 2014 Aleksander Williams; Released under the MIT License */(function(dust){ // Use dust's built-in logging when available var _log = dust.log ? function(msg
2024-12-05 19:20:22 UTC	1	IN	Data Raw: 3d Data Ascii: =
2024-12-05 19:20:22 UTC	6608	IN	Data Raw: 20 22 6e 65 22 3b 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 69 6c 74 65 72 28 63 68 75 6e 6b 2c 20 63 6f 6e 74 65 78 74 2c 20 62 6f 64 69 65 73 2c 20 70 61 72 61 6d 73 2c 20 66 75 6e 63 74 69 6f 6e 28 65 78 70 65 63 74 65 64 2c 20 61 63 74 75 61 6c 29 20 7b 20 72 65 74 75 72 6e 20 61 63 74 75 61 6c 20 21 3d 3d 20 65 78 70 65 63 74 65 64 3b 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 63 68 75 6e 6b 3b 0a 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 0a 20 20 20 20 20 20 2f 2a 2a 0a 20 20 20 20 20 20 20 6c 74 20 68 65 6c 70 65 72 20 63 6f 6d 70 61 72 65 73 20 74 68 65 20 67 69 76 65 6e 20 6b 65 79 20 69 73 20 6c 65 73 73 20 74 68 61 6e 20 74 68 65 20 65 78 70 65 63 74 65 64 20 76 61 6c 75 65 0a 20 20 20 Data Ascii: "ne"; return filter(chunk, context, bodies, params, function(expected, actual) { return actual !== expected; }); } return chunk; }, /** lt helper compares the given key is less than the expected value

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.8	49854	151.101.131.1	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:21 UTC	1124	OUT	GET /checksiteconfig?v=d136a52&host=hcaptcha.paypal.com&sitekey=bf07db68-5c2e-42e8-8779-ea8384890eea&sc=1&swa=1&spst=1 HTTP/1.1 Host: hcaptcha.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=c0c49a91e6384eadbaa4a565394e21da1733426393114; LANG=en_US%3BUS; l7_az=dcg15.slc; ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778; tsrce=authchallengenodeweb; TLTSID=71139903928702455522704624189564; TLTDID=24394070527605051854525965496125; datadome=buJ29aABw9ywhcwsxLedKnsC4BAmLRyJrGVvMBQoK~J0j0xnjOkH7nUpkES4yULXec_bkkBjWn~DdWPkGMh7Bdg7HO475FpNdpN2VKAqG6qmkS5tul3JkYU8x_vn1Pe1; x-pp-s=eyJ0IjoiMTczMzQyNjQxODYxNyIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1764962418%26vteXpYrS%3D1733428218%26vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778%26vtyp%3Dnew
2024-12-05 19:20:22 UTC	654	IN	HTTP/1.1 200 OK Connection: close Content-Length: 796 access-control-allow-methods: GET, HEAD, POST, OPTIONS access-control-allow-credentials: true server: cloudflare cf-ray: 8ed664a0ffff4255-EWR x-content-type-options: nosniff access-control-allow-headers: Cache-Control, Content-Type, DNT, Referer, User-Agent content-type: application/json Accept-Ranges: bytes Date: Thu, 05 Dec 2024 19:20:21 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740024-EWR, cache-ewr-kewr1740024-EWR X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1733426422.883230,VS0,VE90 Vary: Origin, Accept-Encoding Strict-Transport-Security: max-age=31557600
2024-12-05 19:20:22 UTC	796	IN	Data Raw: 7b 22 66 65 61 74 75 72 65 73 22 3a 7b 22 63 75 73 74 6f 6d 5f 74 68 65 6d 65 22 3a 74 72 75 65 2c 22 65 6e 63 5f 67 65 74 5f 72 65 71 22 3a 74 72 75 65 7d 2c 22 63 22 3a 7b 22 74 79 70 65 22 3a 22 68 73 77 22 2c 22 72 65 71 22 3a 22 65 79 4a 30 65 58 41 69 4f 69 4a 4b 56 31 51 69 4c 43 4a 68 62 47 63 69 4f 69 4a 49 55 7a 49 31 4e 69 4a 39 2e 65 79 4a 6d 49 6a 6f 77 4c 43 4a 7a 49 6a 6f 79 4c 43 4a 30 49 6a 6f 69 64 79 49 73 49 6d 51 69 4f 69 49 76 52 53 39 77 62 55 70 43 4d 58 42 56 55 31 46 56 54 31 5a 54 5a 30 64 4c 51 54 59 32 62 6c 56 47 55 47 5a 5a 61 33 68 33 52 48 46 6b 5a 44 55 7a 56 47 39 79 57 6b 31 77 61 57 51 33 64 48 70 31 51 6e 4a 6a 4e 6d 70 77 56 6d 6c 6f 65 6c 4a 4b 55 54 6c 46 61 55 67 35 52 31 4e 46 57 6e 6c 32 52 31 52 4f 62 56 52 49 Data Ascii: {"features":{"custom_theme":true,"enc_get_req":true},"c":{"type":"hsw","req":"eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJmIjowLCJzIjoyLCJ0IjoidyIsImQiOiIvRS9wbUpCMXBVU1FVT1ZTZ0dLQTY2blVGUGZZa3h3RHFkZDUzVG9yWk1waWQ3dHp1QnJjNmpwVmloelJKUTlFaUg5R1NFWnl2R1RObVRI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.8	49853	151.101.3.1	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:21 UTC	1102	OUT	GET /c/cc9cbcc44893d9601186ed793b76ac72a56a3e176be51252819b38f7d2f1f97c/hsw.js HTTP/1.1 Host: newassets.hcaptcha.paypal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://newassets.hcaptcha.paypal.com/captcha/v1/d136a52/static/hcaptcha.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=c0c49a91e6384eadbaa4a565394e21da1733426393114; LANG=en_US%3BUS; l7_az=dcg15.slc; ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778; tsrce=authchallengenodeweb; x-pp-s=eyJ0IjoiMTczMzQyNjQxODYxNyIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1764962418%26vteXpYrS%3D1733428218%26vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778%26vtyp%3Dnew
2024-12-05 19:20:22 UTC	601	IN	HTTP/1.1 200 OK Connection: close cf-ray: 8ed664a0e94a4232-EWR server: cloudflare etag: W/"6d4021788ff83daa65edbbcf68b3bf67" cf-cache-status: HIT content-type: application/javascript x-content-type-options: nosniff cache-control: max-age=3024000 Accept-Ranges: bytes Date: Thu, 05 Dec 2024 19:20:21 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740047-EWR, cache-ewr-kewr1740047-EWR X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1733426422.884666,VS0,VE43 Vary: accept-encoding, Origin, Accept-Encoding Strict-Transport-Security: max-age=31557600 transfer-encoding: chunked
2024-12-05 19:20:22 UTC	6	IN	Data Raw: 62 66 63 65 0d 0a Data Ascii: bfce
2024-12-05 19:20:22 UTC	1378	IN	Data Raw: 76 61 72 20 68 73 77 3d 66 75 6e 63 74 69 6f 6e 20 59 52 49 52 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 41 28 41 2c 51 2c 42 29 7b 72 65 74 75 72 6e 20 51 3c 3d 41 26 26 41 3c 3d 42 7d 66 75 6e 63 74 69 6f 6e 20 51 28 41 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 41 29 72 65 74 75 72 6e 7b 7d 3b 69 66 28 41 3d 3d 3d 4f 62 6a 65 63 74 28 41 29 29 72 65 74 75 72 6e 20 41 3b 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 6f 75 6c 64 20 6e 6f 74 20 63 6f 6e 76 65 72 74 20 61 72 67 75 6d 65 6e 74 20 74 6f 20 64 69 63 74 69 6f 6e 61 72 79 22 29 7d 76 61 72 20 42 3d 66 75 6e 63 74 69 6f 6e 28 41 29 7b 72 65 74 75 72 6e 20 41 3e 3d 30 26 26 41 3c 3d 31 32 37 7d 2c 45 3d 2d 31 3b 66 75 6e 63 74 69 6f 6e 20 49 28 41 29 7b 74 Data Ascii: var hsw=function YRIR(){"use strict";function A(A,Q,B){return Q<=A&&A<=B}function Q(A){if(void 0===A)return{};if(A===Object(A))return A;throw TypeError("Could not convert argument to dictionary")}var B=function(A){return A>=0&&A<=127},E=-1;function I(A){t
2024-12-05 19:20:22 UTC	1378	IN	Data Raw: 5f 6d 6f 64 65 3d 22 72 65 70 6c 61 63 65 6d 65 6e 74 22 2c 74 68 69 73 2e 5f 64 6f 5f 6e 6f 74 5f 66 6c 75 73 68 3d 21 31 3b 76 61 72 20 45 3d 44 28 41 29 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 45 7c 7c 22 72 65 70 6c 61 63 65 6d 65 6e 74 22 3d 3d 3d 45 2e 6e 61 6d 65 29 74 68 72 6f 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 55 6e 6b 6e 6f 77 6e 20 65 6e 63 6f 64 69 6e 67 3a 20 22 2b 41 29 3b 69 66 28 21 4d 5b 45 2e 6e 61 6d 65 5d 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 44 65 63 6f 64 65 72 20 6e 6f 74 20 70 72 65 73 65 6e 74 2e 20 44 69 64 20 79 6f 75 20 66 6f 72 67 65 74 20 74 6f 20 69 6e 63 6c 75 64 65 20 65 6e 63 6f 64 69 6e 67 2d 69 6e 64 65 78 65 73 2e 6a 73 20 66 69 72 73 74 3f 22 29 3b 76 61 72 20 49 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 49 2e 5f 65 Data Ascii: _mode="replacement",this._do_not_flush=!1;var E=D(A);if(null===E\|\|"replacement"===E.name)throw RangeError("Unknown encoding: "+A);if(!M[E.name])throw Error("Decoder not present. Did you forget to include encoding-indexes.js first?");var I=this;return I._e
2024-12-05 19:20:22 UTC	1378	IN	Data Raw: 3d 31 34 33 29 2c 77 3d 33 2c 49 3d 37 26 6b 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 69 66 28 21 41 28 6b 2c 68 2c 69 29 29 72 65 74 75 72 6e 20 49 3d 77 3d 44 3d 30 2c 68 3d 31 32 38 2c 69 3d 31 39 31 2c 51 2e 70 72 65 70 65 6e 64 28 6b 29 2c 67 28 42 29 3b 69 66 28 68 3d 31 32 38 2c 69 3d 31 39 31 2c 49 3d 49 3c 3c 36 7c 36 33 26 6b 2c 28 44 2b 3d 31 29 21 3d 3d 77 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 4d 3d 49 3b 72 65 74 75 72 6e 20 49 3d 77 3d 44 3d 30 2c 4d 7d 7d 66 75 6e 63 74 69 6f 6e 20 4c 28 51 29 7b 51 2e 66 61 74 61 6c 2c 74 68 69 73 2e 68 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 51 2c 49 29 7b 69 66 28 49 3d 3d 3d 45 29 72 65 74 75 72 6e 20 43 3b 69 66 28 42 28 49 29 29 72 65 74 75 72 6e 20 49 3b 76 61 72 20 67 2c 44 3b 41 Data Ascii: =143),w=3,I=7&k}return null}if(!A(k,h,i))return I=w=D=0,h=128,i=191,Q.prepend(k),g(B);if(h=128,i=191,I=I<<6\|63&k,(D+=1)!==w)return null;var M=I;return I=w=D=0,M}}function L(Q){Q.fatal,this.handler=function(Q,I){if(I===E)return C;if(B(I))return I;var g,D;A
2024-12-05 19:20:22 UTC	1378	IN	Data Raw: 79 2e 69 73 41 72 72 61 79 28 44 29 3f 68 2e 70 75 73 68 2e 61 70 70 6c 79 28 68 2c 44 29 3a 68 2e 70 75 73 68 28 44 29 29 7d 77 68 69 6c 65 28 21 77 2e 65 6e 64 4f 66 53 74 72 65 61 6d 28 29 29 3b 74 68 69 73 2e 5f 64 65 63 6f 64 65 72 3d 6e 75 6c 6c 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 41 29 7b 76 61 72 20 51 2c 42 3b 72 65 74 75 72 6e 20 51 3d 5b 22 55 54 46 2d 38 22 2c 22 55 54 46 2d 31 36 4c 45 22 2c 22 55 54 46 2d 31 36 42 45 22 5d 2c 42 3d 74 68 69 73 2e 5f 65 6e 63 6f 64 69 6e 67 2e 6e 61 6d 65 2c 2d 31 3d 3d 3d 51 2e 69 6e 64 65 78 4f 66 28 42 29 7c 7c 74 68 69 73 2e 5f 69 67 6e 6f 72 65 42 4f 4d 7c 7c 74 68 69 73 2e 5f 42 4f 4d 73 65 65 6e 7c 7c 28 41 2e 6c 65 6e 67 74 68 3e 30 26 26 36 35 32 37 39 3d 3d 3d 41 5b 30 5d 3f 28 74 68 Data Ascii: y.isArray(D)?h.push.apply(h,D):h.push(D))}while(!w.endOfStream());this._decoder=null}return function(A){var Q,B;return Q=["UTF-8","UTF-16LE","UTF-16BE"],B=this._encoding.name,-1===Q.indexOf(B)\|\|this._ignoreBOM\|\|this._BOMseen\|\|(A.length>0&&65279===A[0]?(th
2024-12-05 19:20:22 UTC	1378	IN	Data Raw: 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 67 29 3f 77 2e 70 75 73 68 2e 61 70 70 6c 79 28 77 2c 67 29 3a 77 2e 70 75 73 68 28 67 29 3b 74 68 69 73 2e 5f 65 6e 63 6f 64 65 72 3d 6e 75 6c 6c 7d 72 65 74 75 72 6e 20 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 77 29 7d 2c 77 69 6e 64 6f 77 2e 54 65 78 74 44 65 63 6f 64 65 72 7c 7c 28 77 69 6e 64 6f 77 2e 54 65 78 74 44 65 63 6f 64 65 72 3d 47 29 2c 77 69 6e 64 6f 77 2e 54 65 78 74 45 6e 63 6f 64 65 72 7c 7c 28 77 69 6e 64 6f 77 2e 54 65 78 74 45 6e 63 6f 64 65 72 3d 79 29 2c 68 3d 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2f 3d 22 2c 69 3d 2f 5e 28 3f 3a 5b 41 Data Ascii: Array.isArray(g)?w.push.apply(w,g):w.push(g);this._encoder=null}return new Uint8Array(w)},window.TextDecoder\|\|(window.TextDecoder=G),window.TextEncoder\|\|(window.TextEncoder=y),h="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",i=/^(?:[A
2024-12-05 19:20:22 UTC	1378	IN	Data Raw: 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 41 29 7b 69 66 28 6e 75 6c 6c 3d 3d 74 68 69 73 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 74 68 69 73 20 69 73 20 6e 75 6c 6c 20 6f 72 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 3b 66 6f 72 28 76 61 72 20 51 3d 4f 62 6a 65 63 74 28 74 68 69 73 29 2c 42 3d 51 2e 6c 65 6e 67 74 68 3e 3e 3e 30 2c 45 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 7c 30 2c 49 3d 45 3c 30 3f 4d 61 74 68 2e 6d 61 78 28 42 2b 45 2c 30 29 3a 4d 61 74 68 2e 6d 69 6e 28 45 2c 42 29 2c 43 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 67 3d 76 6f 69 64 20 30 3d 3d 3d 43 3f 42 3a 43 7c 30 2c 44 3d 67 3c 30 3f 4d 61 74 68 2e 6d 61 78 28 42 2b 67 2c 30 29 3a 4d 61 74 68 2e 6d 69 6e 28 67 2c 42 29 3b 49 3c 44 3b 29 51 5b 49 5d 3d 41 2c Data Ascii: alue:function(A){if(null==this)throw new TypeError("this is null or not defined");for(var Q=Object(this),B=Q.length>>>0,E=arguments[1]\|0,I=E<0?Math.max(B+E,0):Math.min(E,B),C=arguments[2],g=void 0===C?B:C\|0,D=g<0?Math.max(B+g,0):Math.min(g,B);I<D;)Q[I]=A,
2024-12-05 19:20:22 UTC	1378	IN	Data Raw: 65 74 75 72 6e 20 74 68 69 73 7d 29 2c 44 3b 66 75 6e 63 74 69 6f 6e 20 77 28 43 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 77 29 7b 76 61 72 20 68 3d 37 31 36 2c 69 3d 34 30 36 2c 6b 3d 32 33 39 2c 4d 3d 35 37 34 2c 4a 3d 36 38 34 2c 47 3d 32 36 32 2c 79 3d 33 36 30 2c 73 3d 35 32 31 2c 4c 3d 33 36 30 2c 46 3d 34 30 36 2c 48 3d 34 39 38 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 43 29 7b 76 61 72 20 77 3d 76 41 3b 69 66 28 42 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 47 65 6e 65 72 61 74 6f 72 20 69 73 20 61 6c 72 65 61 64 79 20 65 78 65 63 75 74 69 6e 67 2e 22 29 3b 66 6f 72 28 3b 44 26 26 28 44 3d 30 2c 43 5b 30 5d 26 26 28 67 3d 30 29 29 2c 67 3b 29 74 72 79 7b 69 66 28 42 3d 31 2c 45 26 26 28 49 3d 32 26 43 Data Ascii: eturn this}),D;function w(C){return function(w){var h=716,i=406,k=239,M=574,J=684,G=262,y=360,s=521,L=360,F=406,H=498;return function(C){var w=vA;if(B)throw new TypeError("Generator is already executing.");for(;D&&(D=0,C[0]&&(g=0)),g;)try{if(B=1,E&&(I=2&C
2024-12-05 19:20:22 UTC	1378	IN	Data Raw: 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 28 34 30 39 29 29 2f 35 2b 70 61 72 73 65 49 6e 74 28 67 28 32 33 37 29 29 2f 36 2a 28 70 61 72 73 65 49 6e 74 28 67 28 36 33 32 29 29 2f 37 29 2b 70 61 72 73 65 49 6e 74 28 67 28 49 29 29 2f 38 2a 28 70 61 72 73 65 49 6e 74 28 67 28 35 39 37 29 29 2f 39 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 28 32 32 34 29 29 2f 31 30 2b 2d 70 61 72 73 65 49 6e 74 28 67 28 32 37 36 29 29 2f 31 31 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 28 43 29 29 2f 31 32 29 29 62 72 65 61 6b 3b 44 2e 70 75 73 68 28 44 2e 73 68 69 66 74 28 29 29 7d 63 61 74 63 68 28 41 29 7b 44 2e 70 75 73 68 28 44 2e 73 68 69 66 74 28 29 29 7d 7d 28 41 41 29 2c 48 28 32 36 38 29 3d 3d 74 79 70 65 6f 66 20 53 75 70 70 72 65 73 73 65 64 45 72 72 6f 72 26 26 53 75 70 Data Ascii: )+-parseInt(g(409))/5+parseInt(g(237))/6(parseInt(g(632))/7)+parseInt(g(I))/8(parseInt(g(597))/9)+-parseInt(g(224))/10+-parseInt(g(276))/11*(-parseInt(g(C))/12))break;D.push(D.shift())}catch(A){D.push(D.shift())}}(AA),H(268)==typeof SuppressedError&&Sup
2024-12-05 19:20:22 UTC	1378	IN	Data Raw: 26 26 2f 43 72 4f 53 2f 5b 48 28 32 39 35 29 5d 28 5a 29 2c 57 3d 75 26 26 5b 22 43 6f 6e 74 65 6e 74 49 6e 64 65 78 22 69 6e 20 77 69 6e 64 6f 77 2c 22 43 6f 6e 74 61 63 74 73 4d 61 6e 61 67 65 72 22 69 6e 20 77 69 6e 64 6f 77 2c 21 28 48 28 32 34 38 29 69 6e 20 77 69 6e 64 6f 77 29 2c 4b 5d 5b 48 28 33 32 38 29 5d 28 28 66 75 6e 63 74 69 6f 6e 28 41 29 7b 72 65 74 75 72 6e 20 41 7d 29 29 2e 6c 65 6e 67 74 68 3e 3d 32 2c 58 3d 50 26 26 75 26 26 4f 26 26 62 3c 31 32 38 30 26 26 2f 41 6e 64 72 6f 69 64 2f 5b 48 28 32 39 35 29 5d 28 5a 29 26 26 48 28 31 35 38 29 3d 3d 74 79 70 65 6f 66 20 76 26 26 28 31 3d 3d 3d 76 7c 7c 32 3d 3d 3d 76 7c 7c 35 3d 3d 3d 76 29 2c 5f 3d 57 7c 7c 58 7c 7c 54 7c 7c 71 7c 7c 6d 7c 7c 78 3b 66 75 6e 63 74 69 6f 6e 20 24 28 41 29 Data Ascii: &&/CrOS/[H(295)](Z),W=u&&["ContentIndex"in window,"ContactsManager"in window,!(H(248)in window),K][H(328)]((function(A){return A})).length>=2,X=P&&u&&O&&b<1280&&/Android/[H(295)](Z)&&H(158)==typeof v&&(1===v\|\|2===v\|\|5===v),_=W\|\|X\|\|T\|\|q\|\|m\|\|x;function $(A)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.8	49851	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:21 UTC	415	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/backbone-1.5.0.min.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:22 UTC	792	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:21 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-63a4" Expires: Fri, 05 Dec 2025 19:20:21 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 15a9fd45211c5 Server: ECAcc (lhd/35DA) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-000000000000000000015a9fd45211c5-5a3b9c0c9eb2d1be-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 25508 Connection: close
2024-12-05 19:20:22 UTC	16383	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 6e 3d 74 79 70 65 6f 66 20 73 65 6c 66 3d 3d 22 6f 62 6a 65 63 74 22 26 26 73 65 6c 66 2e 73 65 6c 66 3d 3d 3d 73 65 6c 66 26 26 73 65 6c 66 7c 7c 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3d 3d 22 6f 62 6a 65 63 74 22 26 26 67 6c 6f 62 61 6c 2e 67 6c 6f 62 61 6c 3d 3d 3d 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 3b 69 66 28 74 79 70 65 6f 66 20 64 65 66 69 6e 65 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 64 65 66 69 6e 65 2e 61 6d 64 29 7b 64 65 66 69 6e 65 28 5b 22 75 6e 64 65 72 73 63 6f 72 65 22 2c 22 6a 71 75 65 72 79 22 2c 22 65 78 70 6f 72 74 73 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 6e 2e 42 61 63 6b 62 6f 6e 65 3d 72 28 6e 2c 69 2c 74 2c 65 29 7d 29 7d 65 6c 73 65 20 69 66 28 74 Data Ascii: (function(r){var n=typeof self=="object"&&self.self===self&&self\|\|typeof global=="object"&&global.global===global&&global;if(typeof define==="function"&&define.amd){define(["underscore","jquery","exports"],function(t,e,i){n.Backbone=r(n,i,t,e)})}else if(t
2024-12-05 19:20:22 UTC	9125	IN	Data Raw: 2b 22 2e 64 65 6c 65 67 61 74 65 45 76 65 6e 74 73 22 2b 74 68 69 73 2e 63 69 64 2c 65 2c 69 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 5f 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 74 29 7d 2c 5f 65 6e 73 75 72 65 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 74 68 69 73 2e 65 6c 29 7b 76 61 72 20 74 3d 78 2e 65 78 74 65 6e 64 28 7b 7d 2c 78 2e 72 65 73 75 6c 74 28 74 68 69 73 2c 22 61 74 74 72 69 62 75 74 65 73 22 29 29 3b 69 66 28 74 68 69 73 2e 69 64 29 74 2e 69 64 3d 78 2e 72 65 73 75 6c 74 28 74 68 69 73 2c 22 69 64 22 29 3b 69 66 28 74 68 69 73 2e 63 6c 61 73 73 4e 61 6d 65 29 74 5b 22 63 6c 61 73 73 Data Ascii: +".delegateEvents"+this.cid,e,i);return this},_createElement:function(t){return document.createElement(t)},_ensureElement:function(){if(!this.el){var t=x.extend({},x.result(this,"attributes"));if(this.id)t.id=x.result(this,"id");if(this.className)t["class

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.8	49855	151.101.1.21	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:21 UTC	1127	OUT	GET /platform/tealeaftarget HTTP/1.1 Host: www.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=c0c49a91e6384eadbaa4a565394e21da1733426393114; LANG=en_US%3BUS; nsid=s%3AGW_RscjBMue_uO0mnkc7Z8KQBUhwfX2j.FFWOARB2%2BuuO26tFpElNMknNGOEOXTm%2FpBrBjPfDp7c; l7_az=dcg15.slc; ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778; tsrce=authchallengenodeweb; ddbc=1; TLTSID=71139903928702455522704624189564; TLTDID=24394070527605051854525965496125; datadome=buJ29aABw9ywhcwsxLedKnsC4BAmLRyJrGVvMBQoK~J0j0xnjOkH7nUpkES4yULXec_bkkBjWn~DdWPkGMh7Bdg7HO475FpNdpN2VKAqG6qmkS5tul3JkYU8x_vn1Pe1; x-pp-s=eyJ0IjoiMTczMzQyNjQxODYxNyIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1764962420%26vteXpYrS%3D1733428220%26vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778%26vtyp%3Dnew
2024-12-05 19:20:22 UTC	1112	IN	HTTP/1.1 302 Found Connection: close Content-Length: 71 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Security-Policy: default-src 'self' https://.paypal.com https://.paypalobjects.com 'unsafe-inline'; script-src 'self' https://.paypal.com https://.paypalobjects.com; img-src 'self' https:; object-src 'none'; form-action 'self' https://.paypal.com; base-uri 'self' https://.paypal.com; font-src 'self' https://.paypalobjects.com https://.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp Content-Type: text/plain; charset=utf-8 Location: https://www.paypal.com/error?code=404&ref=tealeaf Origin-Trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ== Paypal-Debug-Id: f180057b849e3
2024-12-05 19:20:22 UTC	1534	IN	Data Raw: 50 65 72 6d 69 73 73 69 6f 6e 73 2d 50 6f 6c 69 63 79 3a 20 63 68 2d 75 61 2d 70 6c 61 74 66 6f 72 6d 2d 76 65 72 73 69 6f 6e 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 61 72 63 68 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 77 6f 77 36 34 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 6d 6f 64 65 6c 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 66 75 6c 6c 2d 76 65 Data Ascii: Permissions-Policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-ve
2024-12-05 19:20:22 UTC	71	IN	Data Raw: 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 2e 63 6f 6d 2f 65 72 72 6f 72 3f 63 6f 64 65 3d 34 30 34 26 72 65 66 3d 74 65 61 6c 65 61 66 Data Ascii: Found. Redirecting to https://www.paypal.com/error?code=404&ref=tealeaf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.8	49856	151.101.1.21	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:21 UTC	1111	OUT	GET /signin HTTP/1.1 Host: www.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=c0c49a91e6384eadbaa4a565394e21da1733426393114; LANG=en_US%3BUS; nsid=s%3AGW_RscjBMue_uO0mnkc7Z8KQBUhwfX2j.FFWOARB2%2BuuO26tFpElNMknNGOEOXTm%2FpBrBjPfDp7c; l7_az=dcg15.slc; ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778; tsrce=authchallengenodeweb; ddbc=1; TLTSID=71139903928702455522704624189564; TLTDID=24394070527605051854525965496125; ts=vreXpYrS%3D1764962420%26vteXpYrS%3D1733428220%26vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778%26vtyp%3Dnew; datadome=zlCfnW4VK7jZ4nx3Wxq6AKd3Z_~7eyMfMhlNSkGMKu3K4trVcOiYHsbYXb5G7_4qFcXjIsA74xDGn6O_IMMYA5IGahByNnX~gFFzwtJcfNQpoB~xxgh~HvIFEFRl24fv; x-pp-s=eyJ0IjoiMTczMzQyNjQyMDQwMiIsImwiOiIwIiwibSI6IjAifQ
2024-12-05 19:20:22 UTC	1147	IN	HTTP/1.1 403 Forbidden Connection: close Content-Length: 708 Content-Type: text/html;charset=utf-8 Server: DataDome X-DataDome: protected Accept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory Charset: utf-8 Cache-Control: max-age=0, private, no-cache, no-store, must-revalidate Pragma: no-cache Access-Control-Allow-Credentials: true Access-Control-Expose-Headers: x-dd-b, x-set-cookie Access-Control-Allow-Origin: * X-DataDome-CID: AHrlqAAAAAMAg8WuNM8BK3AACC575A== X-DD-B: 1 Set-Cookie: datadome=bM~ynBB3bJdLhO16FWg6WKMgmd5XU0mXJDQI5ziGzzaWLLOXMcHObFQdtk_iaOLGL7P8__KdrpkLbWBika1h5rB8Gf~tT1jd~AoCxYQ2IGD0IVgVDDCNYZg3ZjqvvJUH; Max-Age=2592000; Domain=.paypal.com; Path=/; Secure; SameSite=Lax Accept-Ranges: bytes Date: Thu, 05 Dec 2024 19:20:22 GMT Via: 1.1 varnish Paypal-Debug-Id: f180057d2a50e Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Served-By: cache-ewr-kewr1740055-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1733426422.093055,VS0,VE18 Server-Timing: content-encoding;desc="",x-cdn;desc="fastly"
2024-12-05 19:20:22 UTC	708	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 70 61 79 70 61 6c 2e 63 6f 6d 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 23 63 6d 73 67 7b 61 6e 69 6d 61 74 69 6f 6e 3a 20 41 20 31 2e 35 73 3b 7d 40 6b 65 79 66 72 61 6d 65 73 20 41 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 3b 7d 39 39 25 7b 6f 70 61 63 69 74 79 3a 30 3b 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 31 3b 7d 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 30 22 3e 3c 70 20 69 64 3d 22 63 6d 73 67 22 3e 50 6c 65 61 73 65 20 65 6e 61 62 6c 65 20 4a 53 20 61 6e 64 20 64 69 73 61 62 6c 65 20 61 6e 79 20 61 64 20 62 6c 6f 63 6b 65 72 3c 2f 70 3e 3c 73 63 72 69 70 74 20 64 61 74 61 2d 63 66 61 73 79 6e 63 3d 22 66 61 6c 73 65 22 3e Data Ascii: <html><head><title>paypal.com</title><style>#cmsg{animation: A 1.5s;}@keyframes A{0%{opacity:0;}99%{opacity:0;}100%{opacity:1;}}</style></head><body style="margin:0"><p id="cmsg">Please enable JS and disable any ad blocker</p><script data-cfasync="false">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.8	49860	151.101.3.1	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:23 UTC	4873	OUT	GET /ts?v=1.9.5&t=1733426420899&g=300&page=main%3Aauthchallenge%3A%3Asignin&pgst=1733426408434&calc=f876809cfbf28&nsid=GW_RscjBMue_uO0mnkc7Z8KQBUhwfX2j&rsta=en_US&pgtf=Nodejs&env=live&s=ci&ccpg=US&csci=55f3ef6c8bc44e84b7b3591ab89cc647&comp=authchallengenodeweb&tsrce=unifiedloginnodeweb&cu=0&ef_policy=ccpa&xe=109541%2C107585&xt=145835%2C135393&view=%7B%22t10%22%3A0%2C%22t11%22%3A10703%2C%22nt%22%3A%22manual%22%7D&ads_client_data=Navigator(appCodeName%3DMozilla%7CappName%3DNetscape%7CappVersion%3D5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%7CuserAgent%3DMozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%7Cwebdriverfalse%7CdeviceMemory8%7Cgeolocation(Available)%7Clanguage%3Den-US%7ConLine%3Dtrue%7Cplatform%3DWin32%7Cproduct%3DGecko)%7CHistory(2)%7Cscreen(1280%2C1024%2C1280%2C984%2C24%2C24)%7Cwindow(Width%3D1280%7Cheight%3D90 [TRUNCATED] Host: t.paypal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.paypal.com/signin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=c0c49a91e6384eadbaa4a565394e21da1733426393114; LANG=en_US%3BUS; l7_az=dcg15.slc; ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778; tsrce=authchallengenodeweb; TLTSID=71139903928702455522704624189564; TLTDID=24394070527605051854525965496125; ts=vreXpYrS%3D1764962420%26vteXpYrS%3D1733428220%26vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778%26vtyp%3Dnew; datadome=zlCfnW4VK7jZ4nx3Wxq6AKd3Z_~7eyMfMhlNSkGMKu3K4trVcOiYHsbYXb5G7_4qFcXjIsA74xDGn6O_IMMYA5IGahByNnX~gFFzwtJcfNQpoB~xxgh~HvIFEFRl24fv; x-pp-s=eyJ0IjoiMTczMzQyNjQyMDQwMiIsImwiOiIwIiwibSI6IjAifQ
2024-12-05 19:20:23 UTC	1360	IN	HTTP/1.1 200 OK Connection: close Access-Control-Expose-Headers: Server-Timing CORRELATION-ID: e85a92ec334fc Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Type: image/gif Expires: Thu, 05 Dec 2024 19:20:23 GMT P3p: CP="CAO IND OUR SAM UNI STA COR COM" Paypal-Debug-Id: e85a92ec334fc Pragma: no-cache Set-Cookie: ts=vreXpYrS%3D1764962423%26vteXpYrS%3D1733428223%26vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778%26vtyp%3Dnew;Expires=Fri, 05 Dec 2025 19:20:23 GMT;domain=.paypal.com;path=/;secure;HttpOnly;SameSite=None; Set-Cookie: ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778;Expires=Fri, 05 Dec 2025 19:20:23 GMT;domain=.paypal.com;path=/;secure;SameSite=None; Traceparent: 00-0000000000000000000e85a92ec334fc-77e81667e61c1226-01 Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Date: Thu, 05 Dec 2024 19:20:23 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Served-By: cache-iad-kcgs7200155-IAD, cache-ewr-kewr1740076-EWR X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1733426424.586213,VS0,VE97 vary: Accept-Encoding Server-Timing: "traceparent;desc="00-0000000000000000000e85a92ec334fc-065951ddce644bea-01"";content-encoding;desc="",x-cdn;desc="fastly" Timing-Allow-Origin: * transfer-encoding: chunked
2024-12-05 19:20:23 UTC	4	IN	Data Raw: 32 61 0d 0a Data Ascii: 2a
2024-12-05 19:20:23 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 01 01 32 00 3b Data Ascii: GIF89a!,2;
2024-12-05 19:20:23 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.8	49861	151.101.1.21	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:23 UTC	1131	OUT	GET /error?code=404&ref=tealeaf HTTP/1.1 Host: www.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=c0c49a91e6384eadbaa4a565394e21da1733426393114; LANG=en_US%3BUS; nsid=s%3AGW_RscjBMue_uO0mnkc7Z8KQBUhwfX2j.FFWOARB2%2BuuO26tFpElNMknNGOEOXTm%2FpBrBjPfDp7c; l7_az=dcg15.slc; ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778; tsrce=authchallengenodeweb; ddbc=1; TLTSID=71139903928702455522704624189564; TLTDID=24394070527605051854525965496125; datadome=zlCfnW4VK7jZ4nx3Wxq6AKd3Z_~7eyMfMhlNSkGMKu3K4trVcOiYHsbYXb5G7_4qFcXjIsA74xDGn6O_IMMYA5IGahByNnX~gFFzwtJcfNQpoB~xxgh~HvIFEFRl24fv; x-pp-s=eyJ0IjoiMTczMzQyNjQyMDQwMiIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1764962421%26vteXpYrS%3D1733428221%26vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778%26vtyp%3Dnew
2024-12-05 19:20:25 UTC	1290	IN	HTTP/1.1 404 Not Found Connection: close Accept-Ch: Sec-CH-UA-Full Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Type: text/html; charset=UTF-8 Origin-Trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ== Paypal-Debug-Id: f796849fa010a Set-Cookie: enforce_policy=; expires=Thu, 01 Jan 1970 00:00:00 GMT GMT; domain=.paypal.com; path=/; Secure; SameSite=None Set-Cookie: navcmd=_home; domain=.paypal.com; path=/; Secure; HttpOnly; SameSite=None Set-Cookie: consumer_display=USER_HOMEPAGE%3d0%26USER_TARGETPAGE%3d0%26USER_FILTER_CHOICE%3d0%26BALANCE_MODULE_STATE%3d1%26GIFT_BALANCE_MODULE_STATE%3d1%26LAST_SELECTED_ALIAS_ID%3d0%26SELLING_GROUP%3d1%26PAYMENT_AND_RISK_GROUP%3d1%26SHIPPING_GROUP%3d1%26HOME_VERSION%3d1733512824%26MCE2_ELIGIBILITY%3d4294967295; expires=Sat, 05 Dec 2026 19:20:24 GMT GMT; domain=.paypal.com; path=/; Secure; HttpOnly; SameSite=None Set-Cookie: KHcl0EuY7AKSMgfvHl7J5E7hPtK=e8Aybs6oslr-bMqe7Sys4NhzhKpzEuSdnyUDbASsROZPnCvHiWh4vm5ZjAaQ2Qpb8b_2_tcve-m3ViPb; expires=Sat, 05 Dec 2026 19:20:24 GMT GMT; domain=.paypal.com; path=/; Secure; HttpOnly; SameSite=None
2024-12-05 19:20:25 UTC	1313	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6e 61 76 6c 6e 73 3d 30 2e 30 3b 20 65 78 70 69 72 65 73 3d 53 61 74 2c 20 30 35 20 44 65 63 20 32 30 32 36 20 31 39 3a 32 30 3a 32 34 20 47 4d 54 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 70 61 79 70 61 6c 2e 63 6f 6d 3b 20 70 61 74 68 3d 2f 3b 20 53 65 63 75 72 65 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 63 77 72 43 6c 79 72 4b 34 4c 6f 43 56 31 66 79 64 47 62 41 78 69 4e 4c 36 69 47 3d 48 51 52 50 6b 31 65 7a 6e 6d 78 6b 4a 51 30 4c 69 6a 34 61 56 55 38 4b 39 30 4e 76 36 4f 30 2d 6b 41 72 55 2d 5f 58 6d 6f 77 68 6a 59 6c 35 6d 59 74 33 48 55 54 6b 64 30 61 79 37 49 5f 66 31 63 69 55 49 31 53 66 55 6f 4b 77 35 30 69 4b 4e 42 76 35 52 6c 32 6b Data Ascii: Set-Cookie: navlns=0.0; expires=Sat, 05 Dec 2026 19:20:24 GMT GMT; domain=.paypal.com; path=/; Secure; HttpOnly; SameSite=NoneSet-Cookie: cwrClyrK4LoCV1fydGbAxiNL6iG=HQRPk1eznmxkJQ0Lij4aVU8K90Nv6O0-kArU-_XmowhjYl5mYt3HUTkd0ay7I_f1ciUI1SfUoKw50iKNBv5Rl2k
2024-12-05 19:20:25 UTC	793	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 74 73 5f 63 3d 76 72 25 33 44 39 38 34 33 61 66 65 38 31 39 33 30 61 64 31 30 33 64 31 62 35 66 63 38 66 37 33 39 39 37 37 39 25 32 36 76 74 25 33 44 39 38 34 33 61 66 65 38 31 39 33 30 61 64 31 30 33 64 31 62 35 66 63 38 66 37 33 39 39 37 37 38 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 70 61 79 70 61 6c 2e 63 6f 6d 3b 20 45 78 70 69 72 65 73 3d 46 72 69 2c 20 30 35 20 44 65 63 20 32 30 32 35 20 31 39 3a 32 30 3a 32 34 20 47 4d 54 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 54 72 61 63 65 70 61 72 65 6e 74 3a 20 30 30 2d 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 66 37 39 36 38 34 39 66 61 30 31 30 61 2d 61 39 38 64 35 34 62 62 33 35 63 30 39 61 62 64 2d 30 31 0d 0a Data Ascii: Set-Cookie: ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778; Path=/; Domain=paypal.com; Expires=Fri, 05 Dec 2025 19:20:24 GMT; Secure; SameSite=NoneTraceparent: 00-0000000000000000000f796849fa010a-a98d54bb35c09abd-01
2024-12-05 19:20:25 UTC	5	IN	Data Raw: 66 66 61 0d 0a Data Ascii: ffa
2024-12-05 19:20:25 UTC	1378	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3a 6e 73 31 3d 22 6f 67 22 20 6c 61 6e 67 3d 22 65 6e 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6e 73 31 3a 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html xmlns:ns1="og" lang="en" xmlns="http://www.w3.org/1999/xhtml" ns1:xmlns="http://ogp.me/ns#"><head><meta http-equiv="Content-Type" content="text/ht
2024-12-05 19:20:25 UTC	1378	IN	Data Raw: 3b 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 26 23 78 32 65 3b 63 6f 6d 26 23 78 32 66 3b 57 45 42 53 43 52 26 23 78 32 64 3b 36 34 30 26 23 78 32 64 3b 32 30 31 38 30 32 32 35 26 23 78 32 64 3b 31 2f 63 73 73 2f 62 72 6f 77 73 65 72 73 2f 69 65 38 2e 63 73 73 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 3c 6c 69 6e 6b 20 6d 65 64 69 61 3d 22 73 63 72 65 65 6e 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 26 23 78 33 61 3b 26 23 78 32 66 3b 26 23 78 32 66 3b 77 77 77 26 23 78 32 65 3b 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 26 23 78 32 65 3b 63 6f 6d 26 23 78 32 66 3b 57 45 42 53 43 52 26 23 78 32 64 3b 36 34 30 26 23 78 32 Data Ascii: ;paypalobjects.com/WEBSCR-640-20180225-1/css/browsers/ie8.css"><![endif]-->...[if IE 7]><link media="screen" rel="stylesheet" type="text/css" href="https://www.paypalobjects.com/WEBSCR-640&#x2
2024-12-05 19:20:25 UTC	1334	IN	Data Raw: 45 42 53 43 52 5c 78 32 64 36 34 30 5c 78 32 64 32 30 31 38 30 32 32 35 5c 78 32 64 31 27 3b 3c 2f 73 63 72 69 70 74 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 26 23 78 33 61 3b 26 23 78 32 66 3b 26 23 78 32 66 3b 77 77 77 26 23 78 32 65 3b 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 26 23 78 32 65 3b 63 6f 6d 26 23 78 32 66 3b 65 6e 26 23 78 35 66 3b 55 53 26 23 78 32 66 3b 69 26 23 78 32 66 3b 69 63 6f 6e 26 23 78 32 66 3b 70 70 26 23 78 35 66 3b 66 61 76 69 63 6f 6e 26 23 78 35 66 3b 78 26 23 78 32 65 3b 69 63 6f 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 26 23 78 33 61 3b 26 23 78 32 66 3b 26 23 78 32 66 Data Ascii: EBSCR\x2d640\x2d20180225\x2d1';</script><link rel="shortcut icon" href="https://www.paypalobjects.com/en_US/i/icon/pp_favicon_x.ico"><link rel="apple-touch-icon" href="https:/&#x2f
2024-12-05 19:20:25 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-05 19:20:25 UTC	3	IN	Data Raw: 36 0d 0a Data Ascii: 6
2024-12-05 19:20:25 UTC	6	IN	Data Raw: 77 77 77 2e 70 61 Data Ascii: www.pa
2024-12-05 19:20:25 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.8	49859	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:23 UTC	608	OUT	GET /en_US/i/icon/pp_favicon_x.ico HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:24 UTC	673	IN	HTTP/1.1 200 OK Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: image/x-icon Date: Thu, 05 Dec 2024 19:20:24 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"5d5637bd-1536" Expires: Thu, 05 Dec 2024 20:20:24 GMT Last-Modified: Fri, 16 Aug 2019 04:57:33 GMT Paypal-Debug-Id: 24d3439d2f8c5 Server: ECAcc (lhd/3593) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-000000000000000000024d3439d2f8c5-1240c8c31ae4cbf8-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 5430 Connection: close
2024-12-05 19:20:24 UTC	5430	IN	Data Raw: 00 00 01 00 02 00 20 20 00 00 01 00 20 00 a8 10 00 00 26 00 00 00 10 10 00 00 01 00 20 00 68 04 00 00 ce 10 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff Data Ascii: & h( @

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.8	49858	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:23 UTC	583	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/view/authcaptcha.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:24 UTC	797	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:24 GMT DC: ccg11-origin-www-1.paypal.com Etag: "6736db9f-c67+br+ident" Expires: Fri, 05 Dec 2025 19:20:24 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: a356a1588855a Server: ECAcc (lhd/35E3) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000a356a1588855a-c76a3a7fb3f531e8-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 3175 Connection: close
2024-12-05 19:20:24 UTC	3175	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 43 72 65 61 74 65 64 20 62 79 20 68 64 6f 61 6e 20 6f 6e 20 31 30 2f 38 2f 31 34 2e 0a 20 2a 2f 0a 0a 64 65 66 69 6e 65 28 5b 27 6a 71 75 65 72 79 27 2c 20 27 70 61 67 65 56 69 65 77 27 2c 20 27 76 61 6c 69 64 61 74 69 6f 6e 27 2c 20 27 65 72 72 6f 72 44 69 73 70 6c 61 79 27 5d 2c 0a 0a 09 66 75 6e 63 74 69 6f 6e 20 28 24 2c 20 50 61 67 65 56 69 65 77 2c 20 56 61 6c 69 64 61 74 69 6f 6e 2c 20 45 72 72 6f 72 44 69 73 70 6c 61 79 29 20 7b 0a 0a 09 09 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 09 09 76 61 72 20 56 69 65 77 20 3d 20 50 61 67 65 56 69 65 77 2e 65 78 74 65 6e 64 28 7b 0a 0a 09 09 09 65 6c 3a 20 27 23 63 61 70 74 63 68 61 2d 73 74 61 6e 64 61 6c 6f 6e 65 27 2c 20 20 2f 2f 20 54 68 65 20 64 75 73 74 20 74 65 6d 70 6c 61 74 Data Ascii: /** * Created by hdoan on 10/8/14. */define(['jquery', 'pageView', 'validation', 'errorDisplay'],function ($, PageView, Validation, ErrorDisplay) {'use strict';var View = PageView.extend({el: '#captcha-standalone', // The dust templat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.8	49857	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:23 UTC	420	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/lib/dust-helpers-supplement.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:24 UTC	791	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:24 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-118f" Expires: Fri, 05 Dec 2025 19:20:24 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: c4494514b3b7f Server: ECAcc (lhd/35A0) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000c4494514b3b7f-17e7acea67a0f445-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 4495 Connection: close
2024-12-05 19:20:24 UTC	4495	IN	Data Raw: 76 61 72 20 65 78 74 65 6e 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 65 78 74 65 6e 64 28 64 75 73 74 29 20 7b 0a 0a 20 20 20 20 2f 2f 20 41 64 64 20 6e 65 77 20 64 75 73 74 20 68 65 6c 70 65 72 73 20 69 6e 20 74 68 69 73 20 73 74 79 6c 65 0a 20 20 20 20 64 75 73 74 2e 68 65 6c 70 65 72 73 2e 6c 69 6e 6b 20 3d 20 66 75 6e 63 74 69 6f 6e 20 6c 69 6e 6b 28 63 68 75 6e 6b 2c 20 63 74 78 2c 20 62 6f 64 69 65 73 2c 20 70 61 72 61 6d 73 29 20 7b 0a 20 20 20 20 20 20 20 20 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 20 20 20 20 20 20 20 20 76 61 72 20 68 72 65 66 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 6f 73 74 20 3d 20 63 74 78 2e 67 65 74 50 61 74 68 28 66 61 6c 73 65 2c 20 5b 27 63 6f 6e 74 65 78 74 27 2c 20 27 70 61 67 65 49 6e 66 6f 27 2c 20 27 68 6f 73 Data Ascii: var extend = function extend(dust) { // Add new dust helpers in this style dust.helpers.link = function link(chunk, ctx, bodies, params) { 'use strict'; var href, host = ctx.getPath(false, ['context', 'pageInfo', 'hos

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.8	49862	151.101.3.1	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:25 UTC	1094	OUT	GET /c/cc9cbcc44893d9601186ed793b76ac72a56a3e176be51252819b38f7d2f1f97c/hsw.js HTTP/1.1 Host: newassets.hcaptcha.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=c0c49a91e6384eadbaa4a565394e21da1733426393114; LANG=en_US%3BUS; l7_az=dcg15.slc; ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778; tsrce=authchallengenodeweb; TLTSID=71139903928702455522704624189564; TLTDID=24394070527605051854525965496125; x-pp-s=eyJ0IjoiMTczMzQyNjQyMDQwMiIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1764962421%26vteXpYrS%3D1733428221%26vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778%26vtyp%3Dnew; datadome=bM~ynBB3bJdLhO16FWg6WKMgmd5XU0mXJDQI5ziGzzaWLLOXMcHObFQdtk_iaOLGL7P8__KdrpkLbWBika1h5rB8Gf~tT1jd~AoCxYQ2IGD0IVgVDDCNYZg3ZjqvvJUH
2024-12-05 19:20:25 UTC	601	IN	HTTP/1.1 200 OK Connection: close etag: W/"6d4021788ff83daa65edbbcf68b3bf67" server: cloudflare cf-ray: 8ed664b72d918c0b-EWR cf-cache-status: HIT x-content-type-options: nosniff cache-control: max-age=3024000 content-type: application/javascript Accept-Ranges: bytes Date: Thu, 05 Dec 2024 19:20:25 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740066-EWR, cache-ewr-kewr1740066-EWR X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1733426425.436671,VS0,VE54 Vary: accept-encoding, Origin, Accept-Encoding Strict-Transport-Security: max-age=31557600 transfer-encoding: chunked
2024-12-05 19:20:25 UTC	6	IN	Data Raw: 33 38 66 61 0d 0a Data Ascii: 38fa
2024-12-05 19:20:25 UTC	1378	IN	Data Raw: 76 61 72 20 68 73 77 3d 66 75 6e 63 74 69 6f 6e 20 59 52 49 52 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 41 28 41 2c 51 2c 42 29 7b 72 65 74 75 72 6e 20 51 3c 3d 41 26 26 41 3c 3d 42 7d 66 75 6e 63 74 69 6f 6e 20 51 28 41 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 41 29 72 65 74 75 72 6e 7b 7d 3b 69 66 28 41 3d 3d 3d 4f 62 6a 65 63 74 28 41 29 29 72 65 74 75 72 6e 20 41 3b 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 6f 75 6c 64 20 6e 6f 74 20 63 6f 6e 76 65 72 74 20 61 72 67 75 6d 65 6e 74 20 74 6f 20 64 69 63 74 69 6f 6e 61 72 79 22 29 7d 76 61 72 20 42 3d 66 75 6e 63 74 69 6f 6e 28 41 29 7b 72 65 74 75 72 6e 20 41 3e 3d 30 26 26 41 3c 3d 31 32 37 7d 2c 45 3d 2d 31 3b 66 75 6e 63 74 69 6f 6e 20 49 28 41 29 7b 74 Data Ascii: var hsw=function YRIR(){"use strict";function A(A,Q,B){return Q<=A&&A<=B}function Q(A){if(void 0===A)return{};if(A===Object(A))return A;throw TypeError("Could not convert argument to dictionary")}var B=function(A){return A>=0&&A<=127},E=-1;function I(A){t
2024-12-05 19:20:25 UTC	1378	IN	Data Raw: 5f 6d 6f 64 65 3d 22 72 65 70 6c 61 63 65 6d 65 6e 74 22 2c 74 68 69 73 2e 5f 64 6f 5f 6e 6f 74 5f 66 6c 75 73 68 3d 21 31 3b 76 61 72 20 45 3d 44 28 41 29 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 45 7c 7c 22 72 65 70 6c 61 63 65 6d 65 6e 74 22 3d 3d 3d 45 2e 6e 61 6d 65 29 74 68 72 6f 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 55 6e 6b 6e 6f 77 6e 20 65 6e 63 6f 64 69 6e 67 3a 20 22 2b 41 29 3b 69 66 28 21 4d 5b 45 2e 6e 61 6d 65 5d 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 44 65 63 6f 64 65 72 20 6e 6f 74 20 70 72 65 73 65 6e 74 2e 20 44 69 64 20 79 6f 75 20 66 6f 72 67 65 74 20 74 6f 20 69 6e 63 6c 75 64 65 20 65 6e 63 6f 64 69 6e 67 2d 69 6e 64 65 78 65 73 2e 6a 73 20 66 69 72 73 74 3f 22 29 3b 76 61 72 20 49 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 49 2e 5f 65 Data Ascii: _mode="replacement",this._do_not_flush=!1;var E=D(A);if(null===E\|\|"replacement"===E.name)throw RangeError("Unknown encoding: "+A);if(!M[E.name])throw Error("Decoder not present. Did you forget to include encoding-indexes.js first?");var I=this;return I._e
2024-12-05 19:20:25 UTC	1378	IN	Data Raw: 3d 31 34 33 29 2c 77 3d 33 2c 49 3d 37 26 6b 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 69 66 28 21 41 28 6b 2c 68 2c 69 29 29 72 65 74 75 72 6e 20 49 3d 77 3d 44 3d 30 2c 68 3d 31 32 38 2c 69 3d 31 39 31 2c 51 2e 70 72 65 70 65 6e 64 28 6b 29 2c 67 28 42 29 3b 69 66 28 68 3d 31 32 38 2c 69 3d 31 39 31 2c 49 3d 49 3c 3c 36 7c 36 33 26 6b 2c 28 44 2b 3d 31 29 21 3d 3d 77 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 4d 3d 49 3b 72 65 74 75 72 6e 20 49 3d 77 3d 44 3d 30 2c 4d 7d 7d 66 75 6e 63 74 69 6f 6e 20 4c 28 51 29 7b 51 2e 66 61 74 61 6c 2c 74 68 69 73 2e 68 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 51 2c 49 29 7b 69 66 28 49 3d 3d 3d 45 29 72 65 74 75 72 6e 20 43 3b 69 66 28 42 28 49 29 29 72 65 74 75 72 6e 20 49 3b 76 61 72 20 67 2c 44 3b 41 Data Ascii: =143),w=3,I=7&k}return null}if(!A(k,h,i))return I=w=D=0,h=128,i=191,Q.prepend(k),g(B);if(h=128,i=191,I=I<<6\|63&k,(D+=1)!==w)return null;var M=I;return I=w=D=0,M}}function L(Q){Q.fatal,this.handler=function(Q,I){if(I===E)return C;if(B(I))return I;var g,D;A
2024-12-05 19:20:25 UTC	1378	IN	Data Raw: 79 2e 69 73 41 72 72 61 79 28 44 29 3f 68 2e 70 75 73 68 2e 61 70 70 6c 79 28 68 2c 44 29 3a 68 2e 70 75 73 68 28 44 29 29 7d 77 68 69 6c 65 28 21 77 2e 65 6e 64 4f 66 53 74 72 65 61 6d 28 29 29 3b 74 68 69 73 2e 5f 64 65 63 6f 64 65 72 3d 6e 75 6c 6c 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 41 29 7b 76 61 72 20 51 2c 42 3b 72 65 74 75 72 6e 20 51 3d 5b 22 55 54 46 2d 38 22 2c 22 55 54 46 2d 31 36 4c 45 22 2c 22 55 54 46 2d 31 36 42 45 22 5d 2c 42 3d 74 68 69 73 2e 5f 65 6e 63 6f 64 69 6e 67 2e 6e 61 6d 65 2c 2d 31 3d 3d 3d 51 2e 69 6e 64 65 78 4f 66 28 42 29 7c 7c 74 68 69 73 2e 5f 69 67 6e 6f 72 65 42 4f 4d 7c 7c 74 68 69 73 2e 5f 42 4f 4d 73 65 65 6e 7c 7c 28 41 2e 6c 65 6e 67 74 68 3e 30 26 26 36 35 32 37 39 3d 3d 3d 41 5b 30 5d 3f 28 74 68 Data Ascii: y.isArray(D)?h.push.apply(h,D):h.push(D))}while(!w.endOfStream());this._decoder=null}return function(A){var Q,B;return Q=["UTF-8","UTF-16LE","UTF-16BE"],B=this._encoding.name,-1===Q.indexOf(B)\|\|this._ignoreBOM\|\|this._BOMseen\|\|(A.length>0&&65279===A[0]?(th
2024-12-05 19:20:25 UTC	1378	IN	Data Raw: 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 67 29 3f 77 2e 70 75 73 68 2e 61 70 70 6c 79 28 77 2c 67 29 3a 77 2e 70 75 73 68 28 67 29 3b 74 68 69 73 2e 5f 65 6e 63 6f 64 65 72 3d 6e 75 6c 6c 7d 72 65 74 75 72 6e 20 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 77 29 7d 2c 77 69 6e 64 6f 77 2e 54 65 78 74 44 65 63 6f 64 65 72 7c 7c 28 77 69 6e 64 6f 77 2e 54 65 78 74 44 65 63 6f 64 65 72 3d 47 29 2c 77 69 6e 64 6f 77 2e 54 65 78 74 45 6e 63 6f 64 65 72 7c 7c 28 77 69 6e 64 6f 77 2e 54 65 78 74 45 6e 63 6f 64 65 72 3d 79 29 2c 68 3d 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2f 3d 22 2c 69 3d 2f 5e 28 3f 3a 5b 41 Data Ascii: Array.isArray(g)?w.push.apply(w,g):w.push(g);this._encoder=null}return new Uint8Array(w)},window.TextDecoder\|\|(window.TextDecoder=G),window.TextEncoder\|\|(window.TextEncoder=y),h="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",i=/^(?:[A
2024-12-05 19:20:25 UTC	1378	IN	Data Raw: 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 41 29 7b 69 66 28 6e 75 6c 6c 3d 3d 74 68 69 73 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 74 68 69 73 20 69 73 20 6e 75 6c 6c 20 6f 72 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 3b 66 6f 72 28 76 61 72 20 51 3d 4f 62 6a 65 63 74 28 74 68 69 73 29 2c 42 3d 51 2e 6c 65 6e 67 74 68 3e 3e 3e 30 2c 45 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 7c 30 2c 49 3d 45 3c 30 3f 4d 61 74 68 2e 6d 61 78 28 42 2b 45 2c 30 29 3a 4d 61 74 68 2e 6d 69 6e 28 45 2c 42 29 2c 43 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 67 3d 76 6f 69 64 20 30 3d 3d 3d 43 3f 42 3a 43 7c 30 2c 44 3d 67 3c 30 3f 4d 61 74 68 2e 6d 61 78 28 42 2b 67 2c 30 29 3a 4d 61 74 68 2e 6d 69 6e 28 67 2c 42 29 3b 49 3c 44 3b 29 51 5b 49 5d 3d 41 2c Data Ascii: alue:function(A){if(null==this)throw new TypeError("this is null or not defined");for(var Q=Object(this),B=Q.length>>>0,E=arguments[1]\|0,I=E<0?Math.max(B+E,0):Math.min(E,B),C=arguments[2],g=void 0===C?B:C\|0,D=g<0?Math.max(B+g,0):Math.min(g,B);I<D;)Q[I]=A,
2024-12-05 19:20:25 UTC	1378	IN	Data Raw: 65 74 75 72 6e 20 74 68 69 73 7d 29 2c 44 3b 66 75 6e 63 74 69 6f 6e 20 77 28 43 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 77 29 7b 76 61 72 20 68 3d 37 31 36 2c 69 3d 34 30 36 2c 6b 3d 32 33 39 2c 4d 3d 35 37 34 2c 4a 3d 36 38 34 2c 47 3d 32 36 32 2c 79 3d 33 36 30 2c 73 3d 35 32 31 2c 4c 3d 33 36 30 2c 46 3d 34 30 36 2c 48 3d 34 39 38 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 43 29 7b 76 61 72 20 77 3d 76 41 3b 69 66 28 42 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 47 65 6e 65 72 61 74 6f 72 20 69 73 20 61 6c 72 65 61 64 79 20 65 78 65 63 75 74 69 6e 67 2e 22 29 3b 66 6f 72 28 3b 44 26 26 28 44 3d 30 2c 43 5b 30 5d 26 26 28 67 3d 30 29 29 2c 67 3b 29 74 72 79 7b 69 66 28 42 3d 31 2c 45 26 26 28 49 3d 32 26 43 Data Ascii: eturn this}),D;function w(C){return function(w){var h=716,i=406,k=239,M=574,J=684,G=262,y=360,s=521,L=360,F=406,H=498;return function(C){var w=vA;if(B)throw new TypeError("Generator is already executing.");for(;D&&(D=0,C[0]&&(g=0)),g;)try{if(B=1,E&&(I=2&C
2024-12-05 19:20:25 UTC	1378	IN	Data Raw: 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 28 34 30 39 29 29 2f 35 2b 70 61 72 73 65 49 6e 74 28 67 28 32 33 37 29 29 2f 36 2a 28 70 61 72 73 65 49 6e 74 28 67 28 36 33 32 29 29 2f 37 29 2b 70 61 72 73 65 49 6e 74 28 67 28 49 29 29 2f 38 2a 28 70 61 72 73 65 49 6e 74 28 67 28 35 39 37 29 29 2f 39 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 28 32 32 34 29 29 2f 31 30 2b 2d 70 61 72 73 65 49 6e 74 28 67 28 32 37 36 29 29 2f 31 31 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 28 43 29 29 2f 31 32 29 29 62 72 65 61 6b 3b 44 2e 70 75 73 68 28 44 2e 73 68 69 66 74 28 29 29 7d 63 61 74 63 68 28 41 29 7b 44 2e 70 75 73 68 28 44 2e 73 68 69 66 74 28 29 29 7d 7d 28 41 41 29 2c 48 28 32 36 38 29 3d 3d 74 79 70 65 6f 66 20 53 75 70 70 72 65 73 73 65 64 45 72 72 6f 72 26 26 53 75 70 Data Ascii: )+-parseInt(g(409))/5+parseInt(g(237))/6(parseInt(g(632))/7)+parseInt(g(I))/8(parseInt(g(597))/9)+-parseInt(g(224))/10+-parseInt(g(276))/11*(-parseInt(g(C))/12))break;D.push(D.shift())}catch(A){D.push(D.shift())}}(AA),H(268)==typeof SuppressedError&&Sup
2024-12-05 19:20:25 UTC	1378	IN	Data Raw: 26 26 2f 43 72 4f 53 2f 5b 48 28 32 39 35 29 5d 28 5a 29 2c 57 3d 75 26 26 5b 22 43 6f 6e 74 65 6e 74 49 6e 64 65 78 22 69 6e 20 77 69 6e 64 6f 77 2c 22 43 6f 6e 74 61 63 74 73 4d 61 6e 61 67 65 72 22 69 6e 20 77 69 6e 64 6f 77 2c 21 28 48 28 32 34 38 29 69 6e 20 77 69 6e 64 6f 77 29 2c 4b 5d 5b 48 28 33 32 38 29 5d 28 28 66 75 6e 63 74 69 6f 6e 28 41 29 7b 72 65 74 75 72 6e 20 41 7d 29 29 2e 6c 65 6e 67 74 68 3e 3d 32 2c 58 3d 50 26 26 75 26 26 4f 26 26 62 3c 31 32 38 30 26 26 2f 41 6e 64 72 6f 69 64 2f 5b 48 28 32 39 35 29 5d 28 5a 29 26 26 48 28 31 35 38 29 3d 3d 74 79 70 65 6f 66 20 76 26 26 28 31 3d 3d 3d 76 7c 7c 32 3d 3d 3d 76 7c 7c 35 3d 3d 3d 76 29 2c 5f 3d 57 7c 7c 58 7c 7c 54 7c 7c 71 7c 7c 6d 7c 7c 78 3b 66 75 6e 63 74 69 6f 6e 20 24 28 41 29 Data Ascii: &&/CrOS/[H(295)](Z),W=u&&["ContentIndex"in window,"ContactsManager"in window,!(H(248)in window),K][H(328)]((function(A){return A})).length>=2,X=P&&u&&O&&b<1280&&/Android/[H(295)](Z)&&H(158)==typeof v&&(1===v\|\|2===v\|\|5===v),_=W\|\|X\|\|T\|\|q\|\|m\|\|x;function $(A)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.8	49863	151.101.3.1	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:25 UTC	4634	OUT	GET /ts?v=1.9.5&t=1733426420899&g=300&page=main%3Aauthchallenge%3A%3Asignin&pgst=1733426408434&calc=f876809cfbf28&nsid=GW_RscjBMue_uO0mnkc7Z8KQBUhwfX2j&rsta=en_US&pgtf=Nodejs&env=live&s=ci&ccpg=US&csci=55f3ef6c8bc44e84b7b3591ab89cc647&comp=authchallengenodeweb&tsrce=unifiedloginnodeweb&cu=0&ef_policy=ccpa&xe=109541%2C107585&xt=145835%2C135393&view=%7B%22t10%22%3A0%2C%22t11%22%3A10703%2C%22nt%22%3A%22manual%22%7D&ads_client_data=Navigator(appCodeName%3DMozilla%7CappName%3DNetscape%7CappVersion%3D5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%7CuserAgent%3DMozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%7Cwebdriverfalse%7CdeviceMemory8%7Cgeolocation(Available)%7Clanguage%3Den-US%7ConLine%3Dtrue%7Cplatform%3DWin32%7Cproduct%3DGecko)%7CHistory(2)%7Cscreen(1280%2C1024%2C1280%2C984%2C24%2C24)%7Cwindow(Width%3D1280%7Cheight%3D90 [TRUNCATED] Host: t.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=c0c49a91e6384eadbaa4a565394e21da1733426393114; LANG=en_US%3BUS; l7_az=dcg15.slc; ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778; tsrce=authchallengenodeweb; TLTSID=71139903928702455522704624189564; TLTDID=24394070527605051854525965496125; x-pp-s=eyJ0IjoiMTczMzQyNjQyMDQwMiIsImwiOiIwIiwibSI6IjAifQ; datadome=bM~ynBB3bJdLhO16FWg6WKMgmd5XU0mXJDQI5ziGzzaWLLOXMcHObFQdtk_iaOLGL7P8__KdrpkLbWBika1h5rB8Gf~tT1jd~AoCxYQ2IGD0IVgVDDCNYZg3ZjqvvJUH; ts=vreXpYrS%3D1764962423%26vteXpYrS%3D1733428223%26vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778%26vtyp%3Dnew
2024-12-05 19:20:25 UTC	1361	IN	HTTP/1.1 200 OK Connection: close Access-Control-Expose-Headers: Server-Timing CORRELATION-ID: e774d6b0fe21a Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Type: image/gif Expires: Thu, 05 Dec 2024 19:20:25 GMT P3p: CP="CAO IND OUR SAM UNI STA COR COM" Paypal-Debug-Id: e774d6b0fe21a Pragma: no-cache Set-Cookie: ts=vreXpYrS%3D1764962425%26vteXpYrS%3D1733428225%26vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778%26vtyp%3Dnew;Expires=Fri, 05 Dec 2025 19:20:25 GMT;domain=.paypal.com;path=/;secure;HttpOnly;SameSite=None; Set-Cookie: ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778;Expires=Fri, 05 Dec 2025 19:20:25 GMT;domain=.paypal.com;path=/;secure;SameSite=None; Traceparent: 00-0000000000000000000e774d6b0fe21a-d2bd5b0977a2158a-01 Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Date: Thu, 05 Dec 2024 19:20:25 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Served-By: cache-iad-kjyo7100024-IAD, cache-ewr-kewr1740036-EWR X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1733426426.557882,VS0,VE103 vary: Accept-Encoding Server-Timing: "traceparent;desc="00-0000000000000000000e774d6b0fe21a-7c4f5f63ede455be-01"";content-encoding;desc="",x-cdn;desc="fastly" Timing-Allow-Origin: * transfer-encoding: chunked
2024-12-05 19:20:25 UTC	4	IN	Data Raw: 32 61 0d 0a Data Ascii: 2a
2024-12-05 19:20:25 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 01 01 32 00 3b Data Ascii: GIF89a!,2;
2024-12-05 19:20:25 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.8	49864	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:26 UTC	580	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/view/pageView.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:26 UTC	790	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:26 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-dec" Expires: Fri, 05 Dec 2025 19:20:26 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 117e1cde0ef9c Server: ECAcc (lhd/35FD) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000117e1cde0ef9c-764af4184ccc916a-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 3564 Connection: close
2024-12-05 19:20:26 UTC	3564	IN	Data Raw: 2f 2a 67 6c 6f 62 61 6c 20 64 65 66 69 6e 65 3a 74 72 75 65 2c 20 73 3a 74 72 75 65 20 2a 2f 0a 0a 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 2c 20 22 62 61 63 6b 62 6f 6e 65 22 2c 20 22 42 61 73 65 56 69 65 77 22 5d 2c 0a 0a 09 66 75 6e 63 74 69 6f 6e 20 28 24 2c 20 42 61 63 6b 62 6f 6e 65 2c 20 42 61 73 65 56 69 65 77 29 20 7b 0a 0a 09 09 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 09 09 76 61 72 20 50 61 67 65 56 69 65 77 20 3d 20 42 61 73 65 56 69 65 77 2e 65 78 74 65 6e 64 28 7b 0a 0a 09 09 09 6d 6f 64 65 6c 3a 20 6e 75 6c 6c 2c 20 20 2f 2f 20 42 61 63 6b 62 6f 6e 65 20 6d 6f 64 65 6c 0a 0a 09 09 09 74 72 61 63 6b 69 6e 67 50 72 65 66 69 78 3a 20 27 6d 61 69 6e 3a 61 75 74 68 2d 63 68 61 6c 6c 65 6e 67 65 3a 3a 3a 27 2c 0a 0a 09 09 09 72 65 71 Data Ascii: /global define:true, s:true /define(["jquery", "backbone", "BaseView"],function ($, Backbone, BaseView) {"use strict";var PageView = BaseView.extend({model: null, // Backbone modeltrackingPrefix: 'main:auth-challenge:::',req

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.8	49865	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:26 UTC	585	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/widgets/validation.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:26 UTC	790	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:26 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-b9e" Expires: Fri, 05 Dec 2025 19:20:26 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: afd44ceabbff1 Server: ECAcc (lhd/35A9) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000afd44ceabbff1-7b8babdff303de49-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 2974 Connection: close
2024-12-05 19:20:26 UTC	2974	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 43 72 65 61 74 65 64 20 62 79 20 68 64 6f 61 6e 20 6f 6e 20 35 2f 35 2f 31 34 2e 0a 20 2a 0a 20 2a 20 56 61 6c 69 64 61 74 65 73 20 66 6f 72 6d 20 69 6e 70 75 74 73 2e 20 57 69 6c 6c 20 65 6d 69 74 20 42 61 63 6b 62 6f 6e 65 20 65 76 65 6e 74 20 69 66 20 69 6e 70 75 74 20 69 73 20 76 61 6c 69 64 2c 20 69 6e 76 61 6c 69 64 2c 20 6f 72 20 65 6d 70 74 79 2e 0a 20 2a 20 54 68 65 20 65 76 65 6e 74 20 6e 61 6d 69 6e 67 20 63 6f 6e 76 65 6e 74 69 6f 6e 20 69 73 20 27 76 61 6c 69 64 27 2c 20 27 69 6e 76 61 6c 69 64 27 2c 20 6f 72 20 27 65 6d 70 74 79 27 20 66 6f 6c 6c 6f 77 65 64 20 62 79 20 74 68 65 20 6e 61 6d 65 20 61 74 74 72 69 62 75 74 65 20 6f 66 20 74 68 65 20 66 69 65 6c 64 0a 20 2a 0a 20 2a 20 46 6f 72 20 65 78 61 6d 70 6c 65 2c 20 Data Ascii: /** * Created by hdoan on 5/5/14. * * Validates form inputs. Will emit Backbone event if input is valid, invalid, or empty. * The event naming convention is 'valid', 'invalid', or 'empty' followed by the name attribute of the field * * For example,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.8	49867	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:26 UTC	409	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/view/authcaptcha.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:26 UTC	797	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:26 GMT DC: ccg11-origin-www-1.paypal.com Etag: "6736db9f-c67+br+ident" Expires: Fri, 05 Dec 2025 19:20:26 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: a356a1588855a Server: ECAcc (lhd/35E3) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000a356a1588855a-c76a3a7fb3f531e8-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 3175 Connection: close
2024-12-05 19:20:26 UTC	3175	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 43 72 65 61 74 65 64 20 62 79 20 68 64 6f 61 6e 20 6f 6e 20 31 30 2f 38 2f 31 34 2e 0a 20 2a 2f 0a 0a 64 65 66 69 6e 65 28 5b 27 6a 71 75 65 72 79 27 2c 20 27 70 61 67 65 56 69 65 77 27 2c 20 27 76 61 6c 69 64 61 74 69 6f 6e 27 2c 20 27 65 72 72 6f 72 44 69 73 70 6c 61 79 27 5d 2c 0a 0a 09 66 75 6e 63 74 69 6f 6e 20 28 24 2c 20 50 61 67 65 56 69 65 77 2c 20 56 61 6c 69 64 61 74 69 6f 6e 2c 20 45 72 72 6f 72 44 69 73 70 6c 61 79 29 20 7b 0a 0a 09 09 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 09 09 76 61 72 20 56 69 65 77 20 3d 20 50 61 67 65 56 69 65 77 2e 65 78 74 65 6e 64 28 7b 0a 0a 09 09 09 65 6c 3a 20 27 23 63 61 70 74 63 68 61 2d 73 74 61 6e 64 61 6c 6f 6e 65 27 2c 20 20 2f 2f 20 54 68 65 20 64 75 73 74 20 74 65 6d 70 6c 61 74 Data Ascii: /** * Created by hdoan on 10/8/14. */define(['jquery', 'pageView', 'validation', 'errorDisplay'],function ($, PageView, Validation, ErrorDisplay) {'use strict';var View = PageView.extend({el: '#captcha-standalone', // The dust templat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.8	49866	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:26 UTC	587	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/widgets/errorDisplay.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:26 UTC	791	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:26 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-17b7" Expires: Fri, 05 Dec 2025 19:20:26 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 1dcbd97b11e63 Server: ECAcc (lhd/35EC) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000001dcbd97b11e63-6b10064ef2b6324b-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 6071 Connection: close
2024-12-05 19:20:26 UTC	6071	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 43 72 65 61 74 65 64 20 62 79 20 68 64 6f 61 6e 20 6f 6e 20 35 2f 38 2f 31 34 2e 0a 20 2a 0a 20 2a 20 54 68 69 73 20 69 73 20 75 73 65 64 20 74 6f 20 68 69 64 65 20 61 6e 64 20 73 68 6f 77 20 74 68 65 20 65 72 72 6f 72 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 61 6e 20 69 6e 70 75 74 20 66 69 65 6c 64 2e 0a 20 2a 20 55 73 65 64 20 61 6c 73 6f 20 74 6f 20 6d 61 72 6b 20 74 68 65 20 63 6f 6e 74 61 69 6e 65 72 20 6f 66 20 74 68 65 20 69 6e 70 75 74 20 66 69 65 6c 64 20 77 69 74 68 20 61 20 27 68 61 73 45 72 72 6f 72 27 20 63 6c 61 73 73 20 73 6f 20 77 68 65 6e 20 74 68 65 20 69 6e 70 75 74 20 68 61 73 20 66 6f 63 75 73 2c 20 74 68 65 20 65 72 72 6f 72 20 63 6f 6e 74 61 69 6e 65 72 20 63 61 6e 20 62 65 20 73 68 6f 77 6e 0a 20 2a Data Ascii: /** * Created by hdoan on 5/8/14. * * This is used to hide and show the error associated with an input field. * Used also to mark the container of the input field with a 'hasError' class so when the input has focus, the error container can be shown *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.8	49868	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:26 UTC	374	OUT	GET /en_US/i/icon/pp_favicon_x.ico HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:26 UTC	673	IN	HTTP/1.1 200 OK Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: image/x-icon Date: Thu, 05 Dec 2024 19:20:26 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"5d5637bd-1536" Expires: Thu, 05 Dec 2024 20:20:26 GMT Last-Modified: Fri, 16 Aug 2019 04:57:33 GMT Paypal-Debug-Id: 24d3439d2f8c5 Server: ECAcc (lhd/3593) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-000000000000000000024d3439d2f8c5-1240c8c31ae4cbf8-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 5430 Connection: close
2024-12-05 19:20:26 UTC	5430	IN	Data Raw: 00 00 01 00 02 00 20 20 00 00 01 00 20 00 a8 10 00 00 26 00 00 00 10 10 00 00 01 00 20 00 68 04 00 00 ce 10 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff Data Ascii: & h( @

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.8	49869	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:28 UTC	411	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/widgets/validation.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:29 UTC	790	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:28 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-b9e" Expires: Fri, 05 Dec 2025 19:20:28 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: afd44ceabbff1 Server: ECAcc (lhd/35A9) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000afd44ceabbff1-7b8babdff303de49-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 2974 Connection: close
2024-12-05 19:20:29 UTC	2974	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 43 72 65 61 74 65 64 20 62 79 20 68 64 6f 61 6e 20 6f 6e 20 35 2f 35 2f 31 34 2e 0a 20 2a 0a 20 2a 20 56 61 6c 69 64 61 74 65 73 20 66 6f 72 6d 20 69 6e 70 75 74 73 2e 20 57 69 6c 6c 20 65 6d 69 74 20 42 61 63 6b 62 6f 6e 65 20 65 76 65 6e 74 20 69 66 20 69 6e 70 75 74 20 69 73 20 76 61 6c 69 64 2c 20 69 6e 76 61 6c 69 64 2c 20 6f 72 20 65 6d 70 74 79 2e 0a 20 2a 20 54 68 65 20 65 76 65 6e 74 20 6e 61 6d 69 6e 67 20 63 6f 6e 76 65 6e 74 69 6f 6e 20 69 73 20 27 76 61 6c 69 64 27 2c 20 27 69 6e 76 61 6c 69 64 27 2c 20 6f 72 20 27 65 6d 70 74 79 27 20 66 6f 6c 6c 6f 77 65 64 20 62 79 20 74 68 65 20 6e 61 6d 65 20 61 74 74 72 69 62 75 74 65 20 6f 66 20 74 68 65 20 66 69 65 6c 64 0a 20 2a 0a 20 2a 20 46 6f 72 20 65 78 61 6d 70 6c 65 2c 20 Data Ascii: /** * Created by hdoan on 5/5/14. * * Validates form inputs. Will emit Backbone event if input is valid, invalid, or empty. * The event naming convention is 'valid', 'invalid', or 'empty' followed by the name attribute of the field * * For example,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.8	49870	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:28 UTC	406	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/view/pageView.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:29 UTC	790	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:28 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-dec" Expires: Fri, 05 Dec 2025 19:20:28 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 117e1cde0ef9c Server: ECAcc (lhd/35FD) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000117e1cde0ef9c-764af4184ccc916a-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 3564 Connection: close
2024-12-05 19:20:29 UTC	3564	IN	Data Raw: 2f 2a 67 6c 6f 62 61 6c 20 64 65 66 69 6e 65 3a 74 72 75 65 2c 20 73 3a 74 72 75 65 20 2a 2f 0a 0a 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 2c 20 22 62 61 63 6b 62 6f 6e 65 22 2c 20 22 42 61 73 65 56 69 65 77 22 5d 2c 0a 0a 09 66 75 6e 63 74 69 6f 6e 20 28 24 2c 20 42 61 63 6b 62 6f 6e 65 2c 20 42 61 73 65 56 69 65 77 29 20 7b 0a 0a 09 09 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 09 09 76 61 72 20 50 61 67 65 56 69 65 77 20 3d 20 42 61 73 65 56 69 65 77 2e 65 78 74 65 6e 64 28 7b 0a 0a 09 09 09 6d 6f 64 65 6c 3a 20 6e 75 6c 6c 2c 20 20 2f 2f 20 42 61 63 6b 62 6f 6e 65 20 6d 6f 64 65 6c 0a 0a 09 09 09 74 72 61 63 6b 69 6e 67 50 72 65 66 69 78 3a 20 27 6d 61 69 6e 3a 61 75 74 68 2d 63 68 61 6c 6c 65 6e 67 65 3a 3a 3a 27 2c 0a 0a 09 09 09 72 65 71 Data Ascii: /global define:true, s:true /define(["jquery", "backbone", "BaseView"],function ($, Backbone, BaseView) {"use strict";var PageView = BaseView.extend({model: null, // Backbone modeltrackingPrefix: 'main:auth-challenge:::',req

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.8	49871	192.229.221.25	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:28 UTC	413	OUT	GET /web/res/5c0/6ee6d0880dac04be108377cc39752/js/widgets/errorDisplay.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 19:20:29 UTC	791	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: x-csrf-token Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, s-maxage=31536000 Content-Type: application/javascript Date: Thu, 05 Dec 2024 19:20:28 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"6736db9f-17b7" Expires: Fri, 05 Dec 2025 19:20:28 GMT Last-Modified: Fri, 15 Nov 2024 05:26:55 GMT Paypal-Debug-Id: 1dcbd97b11e63 Server: ECAcc (lhd/35EC) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000001dcbd97b11e63-6b10064ef2b6324b-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 6071 Connection: close
2024-12-05 19:20:29 UTC	6071	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 43 72 65 61 74 65 64 20 62 79 20 68 64 6f 61 6e 20 6f 6e 20 35 2f 38 2f 31 34 2e 0a 20 2a 0a 20 2a 20 54 68 69 73 20 69 73 20 75 73 65 64 20 74 6f 20 68 69 64 65 20 61 6e 64 20 73 68 6f 77 20 74 68 65 20 65 72 72 6f 72 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 61 6e 20 69 6e 70 75 74 20 66 69 65 6c 64 2e 0a 20 2a 20 55 73 65 64 20 61 6c 73 6f 20 74 6f 20 6d 61 72 6b 20 74 68 65 20 63 6f 6e 74 61 69 6e 65 72 20 6f 66 20 74 68 65 20 69 6e 70 75 74 20 66 69 65 6c 64 20 77 69 74 68 20 61 20 27 68 61 73 45 72 72 6f 72 27 20 63 6c 61 73 73 20 73 6f 20 77 68 65 6e 20 74 68 65 20 69 6e 70 75 74 20 68 61 73 20 66 6f 63 75 73 2c 20 74 68 65 20 65 72 72 6f 72 20 63 6f 6e 74 61 69 6e 65 72 20 63 61 6e 20 62 65 20 73 68 6f 77 6e 0a 20 2a Data Ascii: /** * Created by hdoan on 5/8/14. * * This is used to hide and show the error associated with an input field. * Used also to mark the container of the input field with a 'hasError' class so when the input has focus, the error container can be shown *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.8	49873	151.101.1.21	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:41 UTC	2959	OUT	POST /platform/tealeaftarget HTTP/1.1 Host: www.paypal.com Connection: keep-alive Content-Length: 4601 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Encoding: gzip X-Tealeaf-SyncXHR: false X-Tealeaf-MessageTypes: 1,2,4,5,7,12,14,17,18 sec-ch-ua-arch: "x86" sec-ch-ua-platform-version: "10.0.0" X-Tealeaf-SaaS-AppKey: 76938917d7504ff7a962174c021690bd X-Tealeaf-SaaS-TLTSID: 71139903928702455522704624189564 X-Requested-With: fetch sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" X-Tealeaf-SaaS-TLTDID: 24394070527605051854525965496125 X-Tealeaf: device (UIC) Lib/6.4.65 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json sec-ch-ua-full-version: "117.0.5938.132" X-TealeafType: GUI X-PageId: P.SUWBKH6YCS3P87H2K9RELBLBULMP X-TeaLeaf-Page-Url: /signin Accept: / Origin: https://www.paypal.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.paypal.com/signin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cookie_check=yes; d_id=c0c49a91e6384eadbaa4a565394e21da1733426393114; LANG=en_US%3BUS; nsid=s%3AGW_RscjBMue_uO0mnkc7Z8KQBUhwfX2j.FFWOARB2%2BuuO26tFpElNMknNGOEOXTm%2FpBrBjPfDp7c; ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778; tsrce=authchallengenodeweb; ddbc=1; TLTDID=24394070527605051854525965496125; datadome=bM~ynBB3bJdLhO16FWg6WKMgmd5XU0mXJDQI5ziGzzaWLLOXMcHObFQdtk_iaOLGL7P8__KdrpkLbWBika1h5rB8Gf~tT1jd~AoCxYQ2IGD0IVgVDDCNYZg3ZjqvvJUH; navcmd=_home; consumer_display=USER_HOMEPAGE%3d0%26USER_TARGETPAGE%3d0%26USER_FILTER_CHOICE%3d0%26BALANCE_MODULE_STATE%3d1%26GIFT_BALANCE_MODULE_STATE%3d1%26LAST_SELECTED_ALIAS_ID%3d0%26SELLING_GROUP%3d1%26PAYMENT_AND_RISK_GROUP%3d1%26SHIPPING_GROUP%3d1%26HOME_VERSION%3d1733512824%26MCE2_ELIGIBILITY%3d4294967295; KHcl0EuY7AKSMgfvHl7J5E7hPtK=e8Aybs6oslr-bMqe7Sys4NhzhKpzEuSdnyUDbASsROZPnCvHiWh4vm5ZjAaQ2Qpb8b_2_tcve-m3ViPb; navlns=0.0; cwrClyrK4LoCV1fydGbAxiNL6iG=HQRPk1eznmxkJQ0Lij4aVU8K90Nv6O0-kArU-_XmowhjYl5mYt3HUTkd0ay7I_f1ciUI1SfUo [TRUNCATED]
2024-12-05 19:20:41 UTC	4601	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 c5 3a 69 73 1a 39 d3 7f 85 97 aa f8 93 07 e6 3e bc 26 1b 63 7c e0 0b c7 c6 36 ce 26 45 cd a1 01 99 b9 3c 07 86 a4 b2 bf fd ed 96 66 60 b0 e3 64 b3 fb 64 d7 07 48 ad 56 4b ea 5b c7 97 66 48 b2 cc 9e 90 5b 92 66 34 8e 9a 3b 4d 49 69 89 f8 db dc 6e 66 24 a5 76 70 51 84 0e 49 9b 3b 32 02 32 c4 ca 9a 3b 7f 7c 69 52 0f b0 2f 5b d7 37 77 dd d3 63 fd 7e ff 5a b9 34 8d 63 f9 d4 ba 3a 38 eb 9e 75 6f ce ce 2f 81 46 6e 3b 7d 44 94 af e4 23 24 99 db 69 3e a4 21 69 ee 48 86 a2 a8 b2 ae 8a 9a a6 18 80 08 c0 cf 71 44 06 be 9f 91 bc b9 a3 88 e2 76 35 3b 3e 60 be 4c b0 9b b9 dd 8c 4b 1c 49 b2 74 c0 ca dc 94 90 68 4e c9 53 d5 19 80 6e 5c 44 39 9b b5 9f c6 e1 1d 71 9a 3b 79 5a 10 a0 19 17 19 09 e3 39 d0 fa d2 24 01 09 49 94 d7 56 f4 c7 1f 1f a1 Data Ascii: :is9>&c\|6&E<f`ddHVK[fH[f4;MIinf$vpQI;22;\|iR/[7wc~Z4c:8uo/Fn;}D#$i>!iHqDv5;>`LKIthNSn\D9q;yZ9$IV
2024-12-05 19:20:42 UTC	1096	IN	HTTP/1.1 200 OK Connection: close Content-Length: 39 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Security-Policy: default-src 'self' https://.paypal.com https://.paypalobjects.com 'unsafe-inline'; script-src 'self' https://.paypal.com https://.paypalobjects.com; img-src 'self' https:; object-src 'none'; form-action 'self' https://.paypal.com; base-uri 'self' https://.paypal.com; font-src 'self' https://.paypalobjects.com https://.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp Content-Type: application/json; charset=utf-8 Etag: W/"27-jfZ5Oxs4p//NxAhj71kGMnkJNVs" Origin-Trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ== Paypal-Debug-Id: f196145bc63bd
2024-12-05 19:20:42 UTC	1558	IN	Data Raw: 50 65 72 6d 69 73 73 69 6f 6e 73 2d 50 6f 6c 69 63 79 3a 20 63 68 2d 75 61 2d 70 6c 61 74 66 6f 72 6d 2d 76 65 72 73 69 6f 6e 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 61 72 63 68 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 77 6f 77 36 34 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 6d 6f 64 65 6c 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 66 75 6c 6c 2d 76 65 Data Ascii: Permissions-Policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-ve
2024-12-05 19:20:42 UTC	39	IN	Data Raw: 7b 22 74 61 72 67 65 74 56 65 72 73 69 6f 6e 22 3a 22 31 22 2c 22 69 64 22 3a 34 38 38 38 34 36 38 36 31 37 30 32 7d Data Ascii: {"targetVersion":"1","id":488846861702}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.8	49874	151.101.1.21	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:43 UTC	1975	OUT	GET /platform/tealeaftarget HTTP/1.1 Host: www.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cookie_check=yes; d_id=c0c49a91e6384eadbaa4a565394e21da1733426393114; LANG=en_US%3BUS; nsid=s%3AGW_RscjBMue_uO0mnkc7Z8KQBUhwfX2j.FFWOARB2%2BuuO26tFpElNMknNGOEOXTm%2FpBrBjPfDp7c; ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778; tsrce=authchallengenodeweb; ddbc=1; TLTDID=24394070527605051854525965496125; datadome=bM~ynBB3bJdLhO16FWg6WKMgmd5XU0mXJDQI5ziGzzaWLLOXMcHObFQdtk_iaOLGL7P8__KdrpkLbWBika1h5rB8Gf~tT1jd~AoCxYQ2IGD0IVgVDDCNYZg3ZjqvvJUH; navcmd=_home; consumer_display=USER_HOMEPAGE%3d0%26USER_TARGETPAGE%3d0%26USER_FILTER_CHOICE%3d0%26BALANCE_MODULE_STATE%3d1%26GIFT_BALANCE_MODULE_STATE%3d1%26LAST_SELECTED_ALIAS_ID%3d0%26SELLING_GROUP%3d1%26PAYMENT_AND_RISK_GROUP%3d1%26SHIPPING_GROUP%3d1%26HOME_VERSION%3d1733512824%26MCE2_ELIGIBILITY%3d4294967295; KHcl0EuY7AKSMgfvHl7J5E7hPtK=e8Aybs6oslr-bMqe7Sys4NhzhKpzEuSdnyUDbASsROZPnCvHiWh4vm5ZjAaQ2Qpb8b_2_tcve-m3ViPb; navlns=0.0; cwrClyrK4LoCV1fydGbAxiNL6iG=HQRPk1eznmxkJQ0Lij4aVU8K90Nv6O0-kArU-_XmowhjYl5mYt3HUTkd0ay7I_f1ciUI1SfUo [TRUNCATED]
2024-12-05 19:20:44 UTC	1112	IN	HTTP/1.1 302 Found Connection: close Content-Length: 71 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Security-Policy: default-src 'self' https://.paypal.com https://.paypalobjects.com 'unsafe-inline'; script-src 'self' https://.paypal.com https://.paypalobjects.com; img-src 'self' https:; object-src 'none'; form-action 'self' https://.paypal.com; base-uri 'self' https://.paypal.com; font-src 'self' https://.paypalobjects.com https://.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp Content-Type: text/plain; charset=utf-8 Location: https://www.paypal.com/error?code=404&ref=tealeaf Origin-Trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ== Paypal-Debug-Id: f6465611b7c39
2024-12-05 19:20:44 UTC	1534	IN	Data Raw: 50 65 72 6d 69 73 73 69 6f 6e 73 2d 50 6f 6c 69 63 79 3a 20 63 68 2d 75 61 2d 70 6c 61 74 66 6f 72 6d 2d 76 65 72 73 69 6f 6e 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 61 72 63 68 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 77 6f 77 36 34 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 6d 6f 64 65 6c 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 66 75 6c 6c 2d 76 65 Data Ascii: Permissions-Policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-ve
2024-12-05 19:20:44 UTC	71	IN	Data Raw: 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 2e 63 6f 6d 2f 65 72 72 6f 72 3f 63 6f 64 65 3d 34 30 34 26 72 65 66 3d 74 65 61 6c 65 61 66 Data Ascii: Found. Redirecting to https://www.paypal.com/error?code=404&ref=tealeaf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.8	49875	151.101.1.21	443	5444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 19:20:45 UTC	1979	OUT	GET /error?code=404&ref=tealeaf HTTP/1.1 Host: www.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cookie_check=yes; d_id=c0c49a91e6384eadbaa4a565394e21da1733426393114; LANG=en_US%3BUS; nsid=s%3AGW_RscjBMue_uO0mnkc7Z8KQBUhwfX2j.FFWOARB2%2BuuO26tFpElNMknNGOEOXTm%2FpBrBjPfDp7c; ts_c=vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1b5fc8f7399778; tsrce=authchallengenodeweb; ddbc=1; TLTDID=24394070527605051854525965496125; datadome=bM~ynBB3bJdLhO16FWg6WKMgmd5XU0mXJDQI5ziGzzaWLLOXMcHObFQdtk_iaOLGL7P8__KdrpkLbWBika1h5rB8Gf~tT1jd~AoCxYQ2IGD0IVgVDDCNYZg3ZjqvvJUH; navcmd=_home; consumer_display=USER_HOMEPAGE%3d0%26USER_TARGETPAGE%3d0%26USER_FILTER_CHOICE%3d0%26BALANCE_MODULE_STATE%3d1%26GIFT_BALANCE_MODULE_STATE%3d1%26LAST_SELECTED_ALIAS_ID%3d0%26SELLING_GROUP%3d1%26PAYMENT_AND_RISK_GROUP%3d1%26SHIPPING_GROUP%3d1%26HOME_VERSION%3d1733512824%26MCE2_ELIGIBILITY%3d4294967295; KHcl0EuY7AKSMgfvHl7J5E7hPtK=e8Aybs6oslr-bMqe7Sys4NhzhKpzEuSdnyUDbASsROZPnCvHiWh4vm5ZjAaQ2Qpb8b_2_tcve-m3ViPb; navlns=0.0; cwrClyrK4LoCV1fydGbAxiNL6iG=HQRPk1eznmxkJQ0Lij4aVU8K90Nv6O0-kArU-_XmowhjYl5mYt3HUTkd0ay7I_f1ciUI1SfUo [TRUNCATED]
2024-12-05 19:20:47 UTC	1324	IN	HTTP/1.1 404 Not Found Connection: close Accept-Ch: Sec-CH-UA-Full Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Type: text/html; charset=UTF-8 Origin-Trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ== Paypal-Debug-Id: f97935413da6c Set-Cookie: enforce_policy=; expires=Thu, 01 Jan 1970 00:00:00 GMT GMT; domain=.paypal.com; path=/; Secure; SameSite=None Set-Cookie: navcmd=_home; domain=.paypal.com; path=/; Secure; HttpOnly; SameSite=None Set-Cookie: consumer_display=USER_HOMEPAGE%3d0%26USER_TARGETPAGE%3d0%26USER_FILTER_CHOICE%3d0%26BALANCE_MODULE_STATE%3d1%26GIFT_BALANCE_MODULE_STATE%3d1%26LAST_SELECTED_ALIAS_ID%3d0%26SELLING_GROUP%3d1%26PAYMENT_AND_RISK_GROUP%3d1%26SHIPPING_GROUP%3d1%26HOME_VERSION%3d1733512847%26MCE2_ELIGIBILITY%3d4294967295; expires=Sat, 05 Dec 2026 19:20:47 GMT GMT; domain=.paypal.com; path=/; Secure; HttpOnly; SameSite=None Set-Cookie: navlns=0.0; expires=Sat, 05 Dec 2026 19:20:47 GMT GMT; domain=.paypal.com; path=/; Secure; HttpOnly; SameSite=None Set-Cookie: x-pp-s=eyJ0IjoiMTczMzQyNjQ0NzYwOCIsImwiOiIwIiwibSI6IjAifQ; domain=.paypal.com; path=/; Secure; HttpOnly; SameSite=None
2024-12-05 19:20:47 UTC	1175	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 37 5f 61 7a 3d 63 63 67 30 31 2e 70 68 78 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 70 61 79 70 61 6c 2e 63 6f 6d 3b 20 45 78 70 69 72 65 73 3d 54 68 75 2c 20 30 35 20 44 65 63 20 32 30 32 34 20 31 39 3a 35 30 3a 34 37 20 47 4d 54 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 74 73 3d 76 72 65 58 70 59 72 53 25 33 44 31 37 36 34 39 36 32 34 34 35 25 32 36 76 74 65 58 70 59 72 53 25 33 44 31 37 33 33 34 32 38 32 34 35 25 32 36 76 72 25 33 44 39 38 34 33 61 66 65 38 31 39 33 30 61 64 31 30 33 64 31 62 35 66 63 38 66 37 33 39 39 37 37 39 25 32 36 76 74 25 33 44 39 38 34 33 61 66 65 38 31 39 33 30 61 64 31 30 33 64 31 Data Ascii: Set-Cookie: l7_az=ccg01.phx; Path=/; Domain=paypal.com; Expires=Thu, 05 Dec 2024 19:50:47 GMT; HttpOnly; Secure; SameSite=NoneSet-Cookie: ts=vreXpYrS%3D1764962445%26vteXpYrS%3D1733428245%26vr%3D9843afe81930ad103d1b5fc8f7399779%26vt%3D9843afe81930ad103d1
2024-12-05 19:20:47 UTC	5	IN	Data Raw: 37 64 37 0d 0a Data Ascii: 7d7
2024-12-05 19:20:47 UTC	1378	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3a 6e 73 31 3d 22 6f 67 22 20 6c 61 6e 67 3d 22 65 6e 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6e 73 31 3a 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html xmlns:ns1="og" lang="en" xmlns="http://www.w3.org/1999/xhtml" ns1:xmlns="http://ogp.me/ns#"><head><meta http-equiv="Content-Type" content="text/ht
2024-12-05 19:20:47 UTC	629	IN	Data Raw: 61 6c 6f 62 6a 65 63 74 73 26 23 78 32 65 3b 63 6f 6d 26 23 78 32 66 3b 57 45 42 53 43 52 26 23 78 32 64 3b 36 34 30 26 23 78 32 64 3b 32 30 31 38 30 32 32 35 26 23 78 32 64 3b 31 2f 63 73 73 2f 62 72 6f 77 73 65 72 73 2f 69 65 38 2e 63 73 73 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 3c 6c 69 6e 6b 20 6d 65 64 69 61 3d 22 73 63 72 65 65 6e 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 26 23 78 33 61 3b 26 23 78 32 66 3b 26 23 78 32 66 3b 77 77 77 26 23 78 32 65 3b 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 26 23 78 32 65 3b 63 6f 6d 26 23 78 32 66 3b 57 45 42 53 43 52 26 23 78 32 64 3b 36 34 30 26 23 78 32 64 3b 32 30 31 Data Ascii: alobjects.com/WEBSCR-640-20180225-1/css/browsers/ie8.css"><![endif]-->...[if IE 7]><link media="screen" rel="stylesheet" type="text/css" href="https://www.paypalobjects.com/WEBSCR-640-201
2024-12-05 19:20:47 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-05 19:20:47 UTC	6	IN	Data Raw: 31 38 32 39 0d 0a Data Ascii: 1829
2024-12-05 19:20:47 UTC	1378	IN	Data Raw: 78 32 66 3b 57 45 42 53 43 52 26 23 78 32 64 3b 36 34 30 26 23 78 32 64 3b 32 30 31 38 30 32 32 35 26 23 78 32 64 3b 31 2f 63 73 73 2f 63 6f 72 65 2f 70 72 69 6e 74 2e 63 73 73 22 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 23 6d 61 69 6e 20 7b 77 69 64 74 68 3a 37 35 25 3b 70 61 64 64 69 6e 67 3a 30 20 31 32 2e 35 25 3b 20 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 69 64 3d 22 61 6e 74 69 43 6c 69 63 6b 6a 61 63 6b 22 3e 62 6f 64 79 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 Data Ascii: x2f;WEBSCR-640-20180225-1/css/core/print.css"><style type="text/css">#main {width:75%;padding:0 12.5%; text-align:center;}</style><style type="text/css" id="antiClickjack">body{display:none !important;}</style><script type="text/javascript"
2024-12-05 19:20:47 UTC	1378	IN	Data Raw: 79 6f 75 72 20 69 6e 74 65 72 6e 65 74 20 62 72 6f 77 73 65 72 3c 2f 61 3e 2e 3c 2f 70 3e 3c 2f 6e 6f 73 63 72 69 70 74 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 22 20 69 64 3d 22 70 61 67 65 22 3e 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 3c 64 69 76 20 69 64 3d 22 68 65 61 64 6c 69 6e 65 22 20 63 6c 61 73 73 3d 22 61 63 63 65 73 73 41 69 64 22 3e 3c 68 32 3e 50 61 67 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0a 3c 2f 64 69 76 3e 3c 64 69 76 20 69 64 3d 22 6d 65 73 73 61 67 65 42 6f 78 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 69 64 3d 22 6d 61 69 6e 22 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 Data Ascii: your internet browser</a>.</p></noscript><div class="" id="page"><div id="content"><div id="headline" class="accessAid"><h2>Page Not Found</h2></div><div id="messageBox"></div><div id="main"><script type="text/javascript">window.location.href="https://ww
2024-12-05 19:20:47 UTC	1378	IN	Data Raw: 70 74 22 3e 0a 09 09 09 76 61 72 20 66 65 65 64 62 61 63 6b 5f 6c 69 6e 6b 3d 27 53 69 74 65 20 46 65 65 64 62 61 63 6b 27 3b 09 4f 5f 47 6f 54 28 66 65 65 64 62 61 63 6b 5f 6c 69 6e 6b 29 3b 63 75 73 74 6f 6d 5f 76 61 72 3d 65 73 63 61 70 65 28 27 55 6a 77 36 36 71 48 64 35 45 45 6b 44 31 39 50 72 49 43 36 64 58 4e 4a 4b 6b 45 74 64 78 69 42 78 59 39 46 4b 5a 49 36 30 70 44 71 72 47 56 38 52 75 45 58 6c 41 5c 78 32 35 33 64 5c 78 32 35 33 64 5c 78 35 66 31 39 33 39 38 34 34 38 31 39 65 27 29 2b 27 7c 27 3b 63 75 73 74 6f 6d 5f 76 61 72 2b 3d 27 55 6e 6b 6e 6f 77 6e 7c 5c 78 35 66 68 6f 6d 65 5c 78 33 61 5c 78 33 61 5c 78 35 66 68 6f 6d 65 7c 55 53 7c 65 6e 5f 55 53 7c 55 6e 6b 6e 6f 77 6e 7c 55 6e 6b 6e 6f 77 6e 27 3b 2f 2f 20 50 61 79 70 61 6c 20 43 75 Data Ascii: pt">var feedback_link='Site Feedback';O_GoT(feedback_link);custom_var=escape('Ujw66qHd5EEkD19PrIC6dXNJKkEtdxiBxY9FKZI60pDqrGV8RuEXlA\x253d\x253d\x5f1939844819e')+'\|';custom_var+='Unknown\|\x5fhome\x3a\x3a\x5fhome\|US\|en_US\|Unknown\|Unknown';// Paypal Cu
2024-12-05 19:20:47 UTC	1378	IN	Data Raw: 3d 78 70 74 2f 4d 61 72 6b 65 74 69 6e 67 2f 67 65 6e 65 72 61 6c 2f 53 69 74 65 4d 61 70 2d 6f 75 74 73 69 64 65 22 3e 53 69 74 65 20 4d 61 70 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 20 63 6c 61 73 73 3d 22 6c 61 73 74 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 65 62 61 79 2e 63 6f 6d 2f 22 3e 65 42 61 79 3c 2f 61 3e 3c 2f 6c 69 3e 3c 2f 75 6c 3e 3c 70 20 69 64 3d 22 6c 65 67 61 6c 22 3e 43 6f 70 79 72 69 67 68 74 20 c2 a9 20 31 39 39 39 2d 32 30 32 34 20 50 61 79 50 61 6c 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 3c 2f 70 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 72 6f 6c 65 3d 22 6e 61 76 69 67 61 74 69 6f 6e 22 20 69 64 3d 22 6e 61 76 46 75 6c 6c 22 3e 3c 75 6c 3e 3c 6c 69 20 63 6c 61 73 73 3d 22 61 63 74 69 76 65 Data Ascii: =xpt/Marketing/general/SiteMap-outside">Site Map</a></li><li class="last"><a href="http://www.ebay.com/">eBay</a></li></ul><p id="legal">Copyright 1999-2024 PayPal. All rights reserved.</p></div><div role="navigation" id="navFull"><ul><li class="active

Target ID:	0
Start time:	14:19:39
Start date:	05/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff678760000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	14:19:44
Start date:	05/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2168 --field-trial-handle=1928,i,14656706162417554829,12577780559382963475,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff678760000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	14:19:50
Start date:	05/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.paypal.com/signin/?returnUri=%2Fmyaccount%2Ftransfer%2FpayRequest%2FU-09584045BD498740V%2FU-5R763959NX153980F%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq&id=OoO85MXTLVUkAlgY4sey9A8h.NxxqjO.iYbAWg&expId=p2p&onboardData=%7B%22signUpRequest%22%3A%7B%22method%22%3A%22get%22%2C%22url%22%3A%22https%3A%2F%2Fwww.paypal.com%2Fmyaccount%2Ftransfer%2FguestLogin%2FpayRequest%2FU-09584045BD498740V%2FU-5R763959NX153980F%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq%26id%3DOoO85MXTLVUkAlgY4sey9A8h.NxxqjO.iYbAWg%22%7D%7D&flowContextData=F7WdIOgJmH6-07KTJ7GpdWXhkdDQxLohB4l-G7vuWGaUsw9VWkH3unndZA7YlCRgtETWTIDn9hNnR_R_XfGvdxeCRkDmtXLc6qqtXR9sC3Gp-59lNBELQtpM5xEv0i4rCTpJiBcP2uf4VFrJLL1b5u1XG7JtP5TfW7CNqxSVOxEb9_duKrmtDgpztBtl32bVeoc8BgW5poXyk9lJHcKrYdvBHSdT0mosqrrmaGj2a5uNQdBK70Mwpn9Zddmj0KI1GIZrXWvFcpnuRbvbli2inkizkeV4nR1uyKnBSzFqdPDcK4t7K9B6YiFhb5sS8DaQd7F6oWzSe-J8gPxVURmdwwOxFn1ycN09t9caUdBz1XMuv96GDJywuv2feJdoAI73PNjro1a2cFEKAWnCgtoHqxdBD3A1mVV3OiytkjtEUDdvp0GL3CNOAV9zIrunX_DmbTO6KOe21dniBkeG&v=1&utm_source=unp&utm_medium=email&utm_campaign=RT000186&utm_unptid=09b8bd50-b31d-11ef-9fd6-7b2e619a4883&ppid=RT000186&cnac=US&rsta=en_US%28en-US%29&unptid=09b8bd50-b31d-11ef-9fd6-7b2e619a4883&calc=f8278373e34b4&unp_tpcid=requestmoney-notifications-requestee&page=main%3Aemail%3ART000186&pgrp=main%3Aemail&e=cl&mchn=em&s=ci&mail=sys&appVersion=1.294.0&tenant_name=&xt=145585%2C150948%2C104038&link_ref=www.paypal.com_signin"
Imagebase:	0x7ff678760000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	14:19:59
Start date:	05/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5560 --field-trial-handle=1928,i,14656706162417554829,12577780559382963475,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff678760000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	7
Start time:	14:19:59
Start date:	05/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5588 --field-trial-handle=1928,i,14656706162417554829,12577780559382963475,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff678760000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Chrome Cache Entry: 150

Chrome Cache Entry: 151

Chrome Cache Entry: 152