Edit tour

Windows Analysis Report
https://mail.donotreply.biz/XWW04VVZpU2JyWTFmVy96T2RUOUEvcEhyMWhFSm5uZElnVUlmb2dTZEdMRFdGSU1UV2V3S3RUNGdrNmNQRFJ4WTFPRHdYYlkraDV3S1YyVVpuU3E3K2p1bWowcEt3M24ySVBLanRDUkwyYitYWExuYTB5YlhVTUhySWZKbGJCTE9oRHl2RCtjR29BbEk3ZEwxZFJaNmNoK29ESk0vTGcxSmtyK0FWTExLWTdxYlQ1Yys1bjNiTUczY0RnPT0tLTU2R0pFM1VwZFRnVnd

Overview

General Information

Sample URL:	https://mail.donotreply.biz/XWW04VVZpU2JyWTFmVy96T2RUOUEvcEhyMWhFSm5uZElnVUlmb2dTZEdMRFdGSU1UV2V3S3RUNGdrNmNQRFJ4WTFPRHdYYlkraDV3S1YyVVpuU3E3K2p1bWowcEt3M24ySVBLanRDUkwyYitYWExuYTB5YlhVTUhySWZKbGJCTE9
Analysis ID:	1577046
Infos:

Detection

KnowBe4

Score:	52
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Yara detected KnowBe4 simulated phishing

AI detected suspicious Javascript

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1696 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4296 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2032 --field-trial-handle=1952,i,6186034482215152150,8721965914843378123,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6524 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://mail.donotreply.biz/XWW04VVZpU2JyWTFmVy96T2RUOUEvcEhyMWhFSm5uZElnVUlmb2dTZEdMRFdGSU1UV2V3S3RUNGdrNmNQRFJ4WTFPRHdYYlkraDV3S1YyVVpuU3E3K2p1bWowcEt3M24ySVBLanRDUkwyYitYWExuYTB5YlhVTUhySWZKbGJCTE9oRHl2RCtjR29BbEk3ZEwxZFJaNmNoK29ESk0vTGcxSmtyK0FWTExLWTdxYlQ1Yys1bjNiTUczY0RnPT0tLTU2R0pFM1VwZFRnVndZSWktLXptU2lWOHlQdjR0eGI1K09OQVZtRnc9PQ==?cid=2315575162" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
1.0.pages.csv	JoeSecurity_KnowBe4	Yara detected KnowBe4 simulated phishing	Joe Security

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

Yara detected KnowBe4 simulated phishing

Source: Yara match

File source: 1.0.pages.csv, type: HTML

AI detected suspicious Javascript

Source: 0.0.id.script.csv

Joe Sandbox AI: Detected suspicious JavaScript with source url: https://mail.donotreply.biz/XWW04VVZpU2JyWTFmVy96T... This script exhibits several high-risk behaviors, including the use of an obfuscated URL that redirects to a suspicious domain ('https://secured-login.net'). The obfuscated URL suggests an attempt to hide the true destination, which is a common tactic in phishing and malware attacks. Additionally, the script is likely attempting to collect sensitive user data, such as login credentials, which is a clear indicator of malicious intent. Overall, this script poses a high risk and should be treated with caution.

Source: https://secured-login.net/pages/5b6e2d87961b/XWW04VVZpU2JyWTFmVy96T2RUOUEvcEhyMWhFSm5uZElnVUlmb2dTZEdMRFdGSU1UV2V3S3RUNGdrNmNQRFJ4WTFPRHdYYlkraDV3S1YyVVpuU3E3K2p1bWowcEt3M24ySVBLanRDUkwyYitYWExuYTB5YlhVTUhySWZKbGJCTE9oRHl2RCtjR29BbEk3ZEwxZFJaNmNoK29ESk0vTGcxSmtyK0FWTExLWTdxYlQ1Yys1bjNiTUczY0RnPT0tLTU2R0pFM1VwZFRnVndZSWktLXptU2lWOHlQdjR0eGI1K09OQVZtRnc9PQ==

HTTP Parser: No favicon

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 2.22.50.131
Source: unknown	TCP traffic detected without corresponding DNS query: 2.22.50.131
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /XWW04VVZpU2JyWTFmVy96T2RUOUEvcEhyMWhFSm5uZElnVUlmb2dTZEdMRFdGSU1UV2V3S3RUNGdrNmNQRFJ4WTFPRHdYYlkraDV3S1YyVVpuU3E3K2p1bWowcEt3M24ySVBLanRDUkwyYitYWExuYTB5YlhVTUhySWZKbGJCTE9oRHl2RCtjR29BbEk3ZEwxZFJaNmNoK29ESk0vTGcxSmtyK0FWTExLWTdxYlQ1Yys1bjNiTUczY0RnPT0tLTU2R0pFM1VwZFRnVndZSWktLXptU2lWOHlQdjR0eGI1K09OQVZtRnc9PQ==?cid=2315575162 HTTP/1.1Host: mail.donotreply.bizConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pages/5b6e2d87961b/XWW04VVZpU2JyWTFmVy96T2RUOUEvcEhyMWhFSm5uZElnVUlmb2dTZEdMRFdGSU1UV2V3S3RUNGdrNmNQRFJ4WTFPRHdYYlkraDV3S1YyVVpuU3E3K2p1bWowcEt3M24ySVBLanRDUkwyYitYWExuYTB5YlhVTUhySWZKbGJCTE9oRHl2RCtjR29BbEk3ZEwxZFJaNmNoK29ESk0vTGcxSmtyK0FWTExLWTdxYlQ1Yys1bjNiTUczY0RnPT0tLTU2R0pFM1VwZFRnVndZSWktLXptU2lWOHlQdjR0eGI1K09OQVZtRnc9PQ== HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://mail.donotreply.biz/XWW04VVZpU2JyWTFmVy96T2RUOUEvcEhyMWhFSm5uZElnVUlmb2dTZEdMRFdGSU1UV2V3S3RUNGdrNmNQRFJ4WTFPRHdYYlkraDV3S1YyVVpuU3E3K2p1bWowcEt3M24ySVBLanRDUkwyYitYWExuYTB5YlhVTUhySWZKbGJCTE9oRHl2RCtjR29BbEk3ZEwxZFJaNmNoK29ESk0vTGcxSmtyK0FWTExLWTdxYlQ1Yys1bjNiTUczY0RnPT0tLTU2R0pFM1VwZFRnVndZSWktLXptU2lWOHlQdjR0eGI1K09OQVZtRnc9PQ==?cid=2315575162Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/landing-watermark-8487e36eef1bec74f06631f19fea0aa171c208e2976373cda5bd0a4b9e230903.css HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://secured-login.net/pages/5b6e2d87961b/XWW04VVZpU2JyWTFmVy96T2RUOUEvcEhyMWhFSm5uZElnVUlmb2dTZEdMRFdGSU1UV2V3S3RUNGdrNmNQRFJ4WTFPRHdYYlkraDV3S1YyVVpuU3E3K2p1bWowcEt3M24ySVBLanRDUkwyYitYWExuYTB5YlhVTUhySWZKbGJCTE9oRHl2RCtjR29BbEk3ZEwxZFJaNmNoK29ESk0vTGcxSmtyK0FWTExLWTdxYlQ1Yys1bjNiTUczY0RnPT0tLTU2R0pFM1VwZFRnVndZSWktLXptU2lWOHlQdjR0eGI1K09OQVZtRnc9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/sei-styles-1837e0b6e1baaf1af90438028a176241b70a365a8a09ff4bf668cf3bf9e3c759.css HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://secured-login.net/pages/5b6e2d87961b/XWW04VVZpU2JyWTFmVy96T2RUOUEvcEhyMWhFSm5uZElnVUlmb2dTZEdMRFdGSU1UV2V3S3RUNGdrNmNQRFJ4WTFPRHdYYlkraDV3S1YyVVpuU3E3K2p1bWowcEt3M24ySVBLanRDUkwyYitYWExuYTB5YlhVTUhySWZKbGJCTE9oRHl2RCtjR29BbEk3ZEwxZFJaNmNoK29ESk0vTGcxSmtyK0FWTExLWTdxYlQ1Yys1bjNiTUczY0RnPT0tLTU2R0pFM1VwZFRnVndZSWktLXptU2lWOHlQdjR0eGI1K09OQVZtRnc9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/landing-watermark-16f13e16a7ef02fb6f94250aa1931ded83dbee5d9fad278e33dd5792d085194f.css HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://secured-login.net/pages/5b6e2d87961b/XWW04VVZpU2JyWTFmVy96T2RUOUEvcEhyMWhFSm5uZElnVUlmb2dTZEdMRFdGSU1UV2V3S3RUNGdrNmNQRFJ4WTFPRHdYYlkraDV3S1YyVVpuU3E3K2p1bWowcEt3M24ySVBLanRDUkwyYitYWExuYTB5YlhVTUhySWZKbGJCTE9oRHl2RCtjR29BbEk3ZEwxZFJaNmNoK29ESk0vTGcxSmtyK0FWTExLWTdxYlQ1Yys1bjNiTUczY0RnPT0tLTU2R0pFM1VwZFRnVndZSWktLXptU2lWOHlQdjR0eGI1K09OQVZtRnc9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/application-237cb5c4f318687625f8ccf2f42de3fc20238bfe267384653491a6bba8c8f6f5.js HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secured-login.net/pages/5b6e2d87961b/XWW04VVZpU2JyWTFmVy96T2RUOUEvcEhyMWhFSm5uZElnVUlmb2dTZEdMRFdGSU1UV2V3S3RUNGdrNmNQRFJ4WTFPRHdYYlkraDV3S1YyVVpuU3E3K2p1bWowcEt3M24ySVBLanRDUkwyYitYWExuYTB5YlhVTUhySWZKbGJCTE9oRHl2RCtjR29BbEk3ZEwxZFJaNmNoK29ESk0vTGcxSmtyK0FWTExLWTdxYlQ1Yys1bjNiTUczY0RnPT0tLTU2R0pFM1VwZFRnVndZSWktLXptU2lWOHlQdjR0eGI1K09OQVZtRnc9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/application-3ab7c63a41a8761925d45817a71fb79e0ef7208b59de505ac640c8a2a183ec19.js HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secured-login.net/pages/5b6e2d87961b/XWW04VVZpU2JyWTFmVy96T2RUOUEvcEhyMWhFSm5uZElnVUlmb2dTZEdMRFdGSU1UV2V3S3RUNGdrNmNQRFJ4WTFPRHdYYlkraDV3S1YyVVpuU3E3K2p1bWowcEt3M24ySVBLanRDUkwyYitYWExuYTB5YlhVTUhySWZKbGJCTE9oRHl2RCtjR29BbEk3ZEwxZFJaNmNoK29ESk0vTGcxSmtyK0FWTExLWTdxYlQ1Yys1bjNiTUczY0RnPT0tLTU2R0pFM1VwZFRnVndZSWktLXptU2lWOHlQdjR0eGI1K09OQVZtRnc9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/twitter-bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://secured-login.net/pages/5b6e2d87961b/XWW04VVZpU2JyWTFmVy96T2RUOUEvcEhyMWhFSm5uZElnVUlmb2dTZEdMRFdGSU1UV2V3S3RUNGdrNmNQRFJ4WTFPRHdYYlkraDV3S1YyVVpuU3E3K2p1bWowcEt3M24ySVBLanRDUkwyYitYWExuYTB5YlhVTUhySWZKbGJCTE9oRHl2RCtjR29BbEk3ZEwxZFJaNmNoK29ESk0vTGcxSmtyK0FWTExLWTdxYlQ1Yys1bjNiTUczY0RnPT0tLTU2R0pFM1VwZFRnVndZSWktLXptU2lWOHlQdjR0eGI1K09OQVZtRnc9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hubfs/241394/html_file/files/img/KB4-logo.png HTTP/1.1Host: cdn2.hubspot.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secured-login.net/pages/5b6e2d87961b/XWW04VVZpU2JyWTFmVy96T2RUOUEvcEhyMWhFSm5uZElnVUlmb2dTZEdMRFdGSU1UV2V3S3RUNGdrNmNQRFJ4WTFPRHdYYlkraDV3S1YyVVpuU3E3K2p1bWowcEt3M24ySVBLanRDUkwyYitYWExuYTB5YlhVTUhySWZKbGJCTE9oRHl2RCtjR29BbEk3ZEwxZFJaNmNoK29ESk0vTGcxSmtyK0FWTExLWTdxYlQ1Yys1bjNiTUczY0RnPT0tLTU2R0pFM1VwZFRnVndZSWktLXptU2lWOHlQdjR0eGI1K09OQVZtRnc9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /packs/js/vendor-69f70dd3792dc7287ac8.js HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secured-login.net/pages/5b6e2d87961b/XWW04VVZpU2JyWTFmVy96T2RUOUEvcEhyMWhFSm5uZElnVUlmb2dTZEdMRFdGSU1UV2V3S3RUNGdrNmNQRFJ4WTFPRHdYYlkraDV3S1YyVVpuU3E3K2p1bWowcEt3M24ySVBLanRDUkwyYitYWExuYTB5YlhVTUhySWZKbGJCTE9oRHl2RCtjR29BbEk3ZEwxZFJaNmNoK29ESk0vTGcxSmtyK0FWTExLWTdxYlQ1Yys1bjNiTUczY0RnPT0tLTU2R0pFM1VwZFRnVndZSWktLXptU2lWOHlQdjR0eGI1K09OQVZtRnc9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/modernizr-654222debe8018b12f1993ceddff30dc163a7d5008d79869c399d6d167321f97.js HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secured-login.net/pages/5b6e2d87961b/XWW04VVZpU2JyWTFmVy96T2RUOUEvcEhyMWhFSm5uZElnVUlmb2dTZEdMRFdGSU1UV2V3S3RUNGdrNmNQRFJ4WTFPRHdYYlkraDV3S1YyVVpuU3E3K2p1bWowcEt3M24ySVBLanRDUkwyYitYWExuYTB5YlhVTUhySWZKbGJCTE9oRHl2RCtjR29BbEk3ZEwxZFJaNmNoK29ESk0vTGcxSmtyK0FWTExLWTdxYlQ1Yys1bjNiTUczY0RnPT0tLTU2R0pFM1VwZFRnVndZSWktLXptU2lWOHlQdjR0eGI1K09OQVZtRnc9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /helpimg/landing_pages/css/dd.css HTTP/1.1Host: s3.amazonaws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://secured-login.net/pages/5b6e2d87961b/XWW04VVZpU2JyWTFmVy96T2RUOUEvcEhyMWhFSm5uZElnVUlmb2dTZEdMRFdGSU1UV2V3S3RUNGdrNmNQRFJ4WTFPRHdYYlkraDV3S1YyVVpuU3E3K2p1bWowcEt3M24ySVBLanRDUkwyYitYWExuYTB5YlhVTUhySWZKbGJCTE9oRHl2RCtjR29BbEk3ZEwxZFJaNmNoK29ESk0vTGcxSmtyK0FWTExLWTdxYlQ1Yys1bjNiTUczY0RnPT0tLTU2R0pFM1VwZFRnVndZSWktLXptU2lWOHlQdjR0eGI1K09OQVZtRnc9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /QRF01zv.png HTTP/1.1Host: i.imgur.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secured-login.net/pages/5b6e2d87961b/XWW04VVZpU2JyWTFmVy96T2RUOUEvcEhyMWhFSm5uZElnVUlmb2dTZEdMRFdGSU1UV2V3S3RUNGdrNmNQRFJ4WTFPRHdYYlkraDV3S1YyVVpuU3E3K2p1bWowcEt3M24ySVBLanRDUkwyYitYWExuYTB5YlhVTUhySWZKbGJCTE9oRHl2RCtjR29BbEk3ZEwxZFJaNmNoK29ESk0vTGcxSmtyK0FWTExLWTdxYlQ1Yys1bjNiTUczY0RnPT0tLTU2R0pFM1VwZFRnVndZSWktLXptU2lWOHlQdjR0eGI1K09OQVZtRnc9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hubfs/241394/html_file/files/img/KB4-logo.png HTTP/1.1Host: cdn2.hubspot.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=w92ZkZiwXH9vnZEaH_kzofHwC9W34MLiDd0dMRe64sE-1734470159-1.0.1.1-Pkc4ye6p3RxqgwElCoGPIojTAVO74OkNAnY7zkp4mMVe9eb8JAaDxtdwQGg2.HU0bLnfj4mxQFfhluolzq4UOw
Source: global traffic	HTTP traffic detected: GET /QRF01zv.png HTTP/1.1Host: i.imgur.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/landing-watermark-16f13e16a7ef02fb6f94250aa1931ded83dbee5d9fad278e33dd5792d085194f.css HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://secured-login.net/pages/5b6e2d87961b/XWW04VVZpU2JyWTFmVy96T2RUOUEvcEhyMWhFSm5uZElnVUlmb2dTZEdMRFdGSU1UV2V3S3RUNGdrNmNQRFJ4WTFPRHdYYlkraDV3S1YyVVpuU3E3K2p1bWowcEt3M24ySVBLanRDUkwyYitYWExuYTB5YlhVTUhySWZKbGJCTE9oRHl2RCtjR29BbEk3ZEwxZFJaNmNoK29ESk0vTGcxSmtyK0FWTExLWTdxYlQ1Yys1bjNiTUczY0RnPT0tLTU2R0pFM1VwZFRnVndZSWktLXptU2lWOHlQdjR0eGI1K09OQVZtRnc9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/application-237cb5c4f318687625f8ccf2f42de3fc20238bfe267384653491a6bba8c8f6f5.js HTTP/1.1Host: secured-login.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/sei-flag-90af55d793544fe1893f26677661a4252761afbe811fab0eced85c67bc82f984.png HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secured-login.net/assets/sei-styles-1837e0b6e1baaf1af90438028a176241b70a365a8a09ff4bf668cf3bf9e3c759.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/sei-flag-90af55d793544fe1893f26677661a4252761afbe811fab0eced85c67bc82f984.png HTTP/1.1Host: secured-login.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secured-login.net/pages/5b6e2d87961b/XWW04VVZpU2JyWTFmVy96T2RUOUEvcEhyMWhFSm5uZElnVUlmb2dTZEdMRFdGSU1UV2V3S3RUNGdrNmNQRFJ4WTFPRHdYYlkraDV3S1YyVVpuU3E3K2p1bWowcEt3M24ySVBLanRDUkwyYitYWExuYTB5YlhVTUhySWZKbGJCTE9oRHl2RCtjR29BbEk3ZEwxZFJaNmNoK29ESk0vTGcxSmtyK0FWTExLWTdxYlQ1Yys1bjNiTUczY0RnPT0tLTU2R0pFM1VwZFRnVndZSWktLXptU2lWOHlQdjR0eGI1K09OQVZtRnc9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: secured-login.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: mail.donotreply.biz
Source: global traffic	DNS traffic detected: DNS query: secured-login.net
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: s3.amazonaws.com
Source: global traffic	DNS traffic detected: DNS query: cdn2.hubspot.net
Source: global traffic	DNS traffic detected: DNS query: i.imgur.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 17 Dec 2024 21:15:59 GMTContent-Type: text/plain; charset=utf-8Content-Length: 9Connection: closeX-Frame-Options: SAMEORIGINX-XSS-Protection: 0X-Content-Type-Options: nosniffX-Permitted-Cross-Domain-Policies: noneReferrer-Policy: strict-origin-when-cross-originCache-Control: no-cacheContent-Security-Policy: X-Request-Id: 273997f5-805f-40ee-a4b5-1b916dd324bbX-Runtime: 0.022598Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 17 Dec 2024 21:15:59 GMTContent-Type: text/plain; charset=utf-8Content-Length: 9Connection: closeX-Frame-Options: SAMEORIGINX-XSS-Protection: 0X-Content-Type-Options: nosniffX-Permitted-Cross-Domain-Policies: noneReferrer-Policy: strict-origin-when-cross-originCache-Control: no-cacheContent-Security-Policy: X-Request-Id: 6fc8421f-cf6b-4740-bb39-32ed06862aeeX-Runtime: 0.015284Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 17 Dec 2024 21:15:59 GMTContent-Type: text/plain; charset=utf-8Content-Length: 9Connection: closeX-Frame-Options: SAMEORIGINX-XSS-Protection: 0X-Content-Type-Options: nosniffX-Permitted-Cross-Domain-Policies: noneReferrer-Policy: strict-origin-when-cross-originCache-Control: no-cacheContent-Security-Policy: X-Request-Id: 218dfca7-a3f4-4199-ab84-a1e00e14a1a0X-Runtime: 0.064116Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 17 Dec 2024 21:15:59 GMTContent-Type: text/plain; charset=utf-8Content-Length: 9Connection: closeX-Frame-Options: SAMEORIGINX-XSS-Protection: 0X-Content-Type-Options: nosniffX-Permitted-Cross-Domain-Policies: noneReferrer-Policy: strict-origin-when-cross-originCache-Control: no-cacheContent-Security-Policy: X-Request-Id: 0379e3a3-1694-4e11-b22f-0e40da18756cX-Runtime: 0.013118Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 17 Dec 2024 21:16:02 GMTContent-Type: text/plain; charset=utf-8Content-Length: 9Connection: closeX-Frame-Options: SAMEORIGINX-XSS-Protection: 0X-Content-Type-Options: nosniffX-Permitted-Cross-Domain-Policies: noneReferrer-Policy: strict-origin-when-cross-originCache-Control: no-cacheContent-Security-Policy: X-Request-Id: af7407a5-116d-4fac-a7fe-2d55433708b0X-Runtime: 0.100648Strict-Transport-Security: max-age=63113904; includeSubDomains; preload

Source: chromecache_58.2.dr	String found in binary or memory: http://getbootstrap.com)
Source: chromecache_60.2.dr	String found in binary or memory: http://preview.training.knowbe4.com/XSUg3bVVIWWxnQzBmYWpPNFo4Qk1GVEdFdlBGMG44Q1pSZ1VOcGZjRU15M1pPOVd
Source: chromecache_60.2.dr	String found in binary or memory: https://cdn2.hubspot.net/hubfs/241394/html_file/files/img/KB4-logo.png
Source: chromecache_60.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/3.3.7/css/bootstrap.min.css
Source: chromecache_60.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Open
Source: chromecache_54.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI
Source: chromecache_54.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4iaVI
Source: chromecache_54.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4jaVI
Source: chromecache_54.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4kaVI
Source: chromecache_54.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4saVI
Source: chromecache_54.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4taVI
Source: chromecache_54.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4uaVI
Source: chromecache_54.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4vaVI
Source: chromecache_54.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B5OaVI
Source: chromecache_54.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B5caVI
Source: chromecache_58.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_60.2.dr	String found in binary or memory: https://i.imgur.com/QRF01zv.png
Source: chromecache_60.2.dr	String found in binary or memory: https://s3.amazonaws.com/helpimg/landing_pages/css/dd.css
Source: chromecache_73.2.dr	String found in binary or memory: https://secured-login.net/pages/5b6e2d87961b/XWW04VVZpU2JyWTFmVy96T2RUOUEvcEhyMWhFSm5uZElnVUlmb2dTZE

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: classification engine

Classification label: mal52.phis.win@17/44@20/10

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2032 --field-trial-handle=1952,i,6186034482215152150,8721965914843378123,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://mail.donotreply.biz/XWW04VVZpU2JyWTFmVy96T2RUOUEvcEhyMWhFSm5uZElnVUlmb2dTZEdMRFdGSU1UV2V3S3RUNGdrNmNQRFJ4WTFPRHdYYlkraDV3S1YyVVpuU3E3K2p1bWowcEt3M24ySVBLanRDUkwyYitYWExuYTB5YlhVTUhySWZKbGJCTE9oRHl2RCtjR29BbEk3ZEwxZFJaNmNoK29ESk0vTGcxSmtyK0FWTExLWTdxYlQ1Yys1bjNiTUczY0RnPT0tLTU2R0pFM1VwZFRnVndZSWktLXptU2lWOHlQdjR0eGI1K09OQVZtRnc9PQ==?cid=2315575162"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2032 --field-trial-handle=1952,i,6186034482215152150,8721965914843378123,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://mail.donotreply.biz/XWW04VVZpU2JyWTFmVy96T2RUOUEvcEhyMWhFSm5uZElnVUlmb2dTZEdMRFdGSU1UV2V3S3RUNGdrNmNQRFJ4WTFPRHdYYlkraDV3S1YyVVpuU3E3K2p1bWowcEt3M24ySVBLanRDUkwyYitYWExuYTB5YlhVTUhySWZKbGJCTE9oRHl2RCtjR29BbEk3ZEwxZFJaNmNoK29ESk0vTGcxSmtyK0FWTExLWTdxYlQ1Yys1bjNiTUczY0RnPT0tLTU2R0pFM1VwZFRnVndZSWktLXptU2lWOHlQdjR0eGI1K09OQVZtRnc9PQ==?cid=2315575162	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label	Link
http://preview.training.knowbe4.com/XSUg3bVVIWWxnQzBmYWpPNFo4Qk1GVEdFdlBGMG44Q1pSZ1VOcGZjRU15M1pPOVd	0%	Avira URL Cloud	safe
https://s3.amazonaws.com/helpimg/landing_pages/css/dd.css	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
cdn2.hubspot.net	104.18.87.62	true	false	high
s3.amazonaws.com	52.216.115.77	true	false	high
cdnjs.cloudflare.com	104.17.25.14	true	false	high
www.google.com	142.250.181.132	true	false	high
mail.donotreply.biz	52.1.199.240	true	true	unknown
secured-login.net	34.225.242.38	true	false	high
ipv4.imgur.map.fastly.net	199.232.192.193	true	false	high
i.imgur.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://secured-login.net/assets/application-3ab7c63a41a8761925d45817a71fb79e0ef7208b59de505ac640c8a2a183ec19.js	false		high
https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/3.3.7/css/bootstrap.min.css	false		high
https://secured-login.net/packs/js/vendor-69f70dd3792dc7287ac8.js	false		high
https://secured-login.net/assets/landing-watermark-16f13e16a7ef02fb6f94250aa1931ded83dbee5d9fad278e33dd5792d085194f.css	false		high
https://secured-login.net/assets/landing-watermark-8487e36eef1bec74f06631f19fea0aa171c208e2976373cda5bd0a4b9e230903.css	false		high
https://secured-login.net/assets/sei-flag-90af55d793544fe1893f26677661a4252761afbe811fab0eced85c67bc82f984.png	false		high
https://secured-login.net/assets/sei-styles-1837e0b6e1baaf1af90438028a176241b70a365a8a09ff4bf668cf3bf9e3c759.css	false		high
https://secured-login.net/favicon.ico	false		high
https://secured-login.net/assets/modernizr-654222debe8018b12f1993ceddff30dc163a7d5008d79869c399d6d167321f97.js	false		high
https://secured-login.net/assets/application-237cb5c4f318687625f8ccf2f42de3fc20238bfe267384653491a6bba8c8f6f5.js	false		high
https://s3.amazonaws.com/helpimg/landing_pages/css/dd.css	false	Avira URL Cloud: safe	unknown
https://cdn2.hubspot.net/hubfs/241394/html_file/files/img/KB4-logo.png	false		high
https://i.imgur.com/QRF01zv.png	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://secured-login.net/pages/5b6e2d87961b/XWW04VVZpU2JyWTFmVy96T2RUOUEvcEhyMWhFSm5uZElnVUlmb2dTZE	chromecache_73.2.dr	false		high
http://getbootstrap.com)	chromecache_58.2.dr	false		high
http://preview.training.knowbe4.com/XSUg3bVVIWWxnQzBmYWpPNFo4Qk1GVEdFdlBGMG44Q1pSZ1VOcGZjRU15M1pPOVd	chromecache_60.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_58.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.87.62	cdn2.hubspot.net	United States	13335	CLOUDFLARENETUS	false
52.1.199.240	mail.donotreply.biz	United States	14618	AMAZON-AESUS	true
52.216.115.77	s3.amazonaws.com	United States	16509	AMAZON-02US	false
34.225.242.38	secured-login.net	United States	14618	AMAZON-AESUS	false
199.232.192.193	ipv4.imgur.map.fastly.net	United States	54113	FASTLYUS	false
104.18.91.62	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.181.132	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1577046
Start date and time:	2024-12-17 22:14:40 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 8s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://mail.donotreply.biz/XWW04VVZpU2JyWTFmVy96T2RUOUEvcEhyMWhFSm5uZElnVUlmb2dTZEdMRFdGSU1UV2V3S3RUNGdrNmNQRFJ4WTFPRHdYYlkraDV3S1YyVVpuU3E3K2p1bWowcEt3M24ySVBLanRDUkwyYitYWExuYTB5YlhVTUhySWZKbGJCTE9oRHl2RCtjR29BbEk3ZEwxZFJaNmNoK29ESk0vTGcxSmtyK0FWTExLWTdxYlQ1Yys1bjNiTUczY0RnPT0tLTU2R0pFM1VwZFRnVndZSWktLXptU2lWOHlQdjR0eGI1K09OQVZtRnc9PQ==?cid=2315575162
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal52.phis.win@17/44@20/10

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.19.206, 64.233.163.84, 172.217.21.35, 142.250.181.142, 2.22.50.144, 172.217.19.10, 192.229.221.95, 142.250.181.99, 217.20.58.99, 172.217.17.35, 23.218.208.109, 4.245.163.56, 13.107.246.63
Excluded domains from analysis (whitelisted): fonts.googleapis.com, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, otelrules.azureedge.net, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://mail.donotreply.biz/XWW04VVZpU2JyWTFmVy96T2RUOUEvcEhyMWhFSm5uZElnVUlmb2dTZEdMRFdGSU1UV2V3S3RUNGdrNmNQRFJ4WTFPRHdYYlkraDV3S1YyVVpuU3E3K2p1bWowcEt3M24ySVBLanRDUkwyYitYWExuYTB5YlhVTUhySWZKbGJCTE9oRHl2RCtjR29BbEk3ZEwxZFJaNmNoK29ESk0vTGcxSmtyK0FWTExLWTdxYlQ1Yys1bjNiTUczY0RnPT0tLTU2R0pFM1VwZFRnVndZSWktLXptU2lWOHlQdjR0eGI1K09OQVZtRnc9PQ==?cid=2315575162

Input	Output
URL: https://mail.donotreply.biz Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": true, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": true, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://mail.donotreply.biz
URL: https://mail.donotreply.biz/XWW04VVZpU2JyWTFmVy96T... Model: Joe Sandbox AI	{ "risk_score": 9, "reasoning": "This script exhibits several high-risk behaviors, including the use of an obfuscated URL that redirects to a suspicious domain ('https://secured-login.net'). The obfuscated URL suggests an attempt to hide the true destination, which is a common tactic in phishing and malware attacks. Additionally, the script is likely attempting to collect sensitive user data, such as login credentials, which is a clear indicator of malicious intent. Overall, this script poses a high risk and should be treated with caution." }
window.location.href = 'https://secured-login.net/pages/5b6e2d87961b/XWW04VVZpU2JyWTFmVy96T2RUOUEvcEhyMWhFSm5uZElnVUlmb2dTZEdMRFdGSU1UV2V3S3RUNGdrNmNQRFJ4WTFPRHdYYlkraDV3S1YyVVpuU3E3K2p1bWowcEt3M24ySVBLanRDUkwyYitYWExuYTB5YlhVTUhySWZKbGJCTE9oRHl2RCtjR29BbEk3ZEwxZFJaNmNoK29ESk0vTGcxSmtyK0FWTExLWTdxYlQ1Yys1bjNiTUczY0RnPT0tLTU2R0pFM1VwZFRnVndZSWktLXptU2lWOHlQdjR0eGI1K09OQVZtRnc9PQ==';
URL: https://secured-login.net/pages/5b6e2d87961b/XWW04VVZpU2JyWTFmVy96T2RUOUEvcEhyMWhFSm5uZElnVUlmb2dTZEdMRFdGSU1UV2V3S3RUNGdrNmNQRFJ4WTFPRHdYYlkraDV3S1YyVVpuU3E3K2p1bWowcEt3M24ySVBLanRDUkwyYitYWExuYTB5YlhVTUhySWZKbGJCTE9oRHl2RCtjR29BbEk3ZEwxZFJaNmNoK29ESk0vT Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Oops! You clicked on a simulated phishing test!", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://secured-login.net/pages/5b6e2d87961b/XWW04VVZpU2JyWTFmVy96T2RUOUEvcEhyMWhFSm5uZElnVUlmb2dTZEdMRFdGSU1UV2V3S3RUNGdrNmNQRFJ4WTFPRHdYYlkraDV3S1YyVVpuU3E3K2p1bWowcEt3M24ySVBLanRDUkwyYitYWExuYTB5YlhVTUhySWZKbGJCTE9oRHl2RCtjR29BbEk3ZEwxZFJaNmNoK29ESk0vT Model: Joe Sandbox AI	{ "brands": [ "KnowBe4" ] }
	{ "brands": [ "KnowBe4" ] }

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	2368
Entropy (8bit):	7.857782123483033
Encrypted:	false
SSDEEP:	48:eN+jd/MwX0F4lR7ZlqMmlNl08Q0+mNUjxulVE2Uh9wg0n:Njd/M62KJZVmlDJQ0+mGxykh9wg0
MD5:	402214A564EAB22101571DF8C6E30B79
SHA1:	D5E452981A5C325383F92BFB964BA28ECEA6FFA6
SHA-256:	8D63A7ED00572C8B418FF91F5B2E5CD667AA7226CE280E48FC8FE9D58A4D98AC
SHA-512:	D7FD2C24B182ACEA57713FB9EFD19371802B1AE748F7B01FA82D822A86F70267D94C5105FB6BD1967BCDBC1FC43DE484F2B647DFD1EC729531BD4E89814CA42C
Malicious:	false
Reputation:	low
URL:	https://cdn2.hubspot.net/hubfs/241394/html_file/files/img/KB4-logo.png
Preview:	RIFF8...WEBPVP8L,.../.@...0..M._.w..1..WVaU.W,K..m..}.J.]...=..:].Dz.=....~......M.O.PneX(.......3.4..........;.f;..I2..L.....$[J....wA.a....,....@.$.].m.m.m..l.N.mcO..l.-....[t...5....-.%.....A.f ..D.`._@+.q.?.....8...(..-.^.i.,...]f..a...i....Tw.p..B....."...J'......O..J9..L.%P...{..H..JP.jP-.Cu...P{jFU..%.P[.%B....3....X.'PO.Y.....bE....P........?J.U...P!......O5.M..rT./LQ"JI..uCR...BR...S...-U.].YR...(..R..t4.....J...c..J1)\|....) ^.C....=`.bR..~+.h.5.T......".....GS.u..\|.._Dj..".D....,.7....<1.PU.t...X}.[8H1;T!+....H...R..I.\..f..V..P.S..+...m..s.659FlS.I....Ph.).....GhV.v+...&......l...K.^Q.)...7....5.<....a..%.t....<.(.....;2.n....K...9.J.B....Lf...T..!a..(....0H....E1......Qn.+.j.....v.R6.1G..?B......~.....&R....F...2.....}.(m.....).....]..I.....~.e.Z.T..U..C.OE.[......Zq..F.hc.W..,E.\|.Bu..SQ;..`.a.......\|..?..}..COX4.....!{'P..J.8:..U...\..S.{8U1......J.P.N*._...9L......#<...v..n...M...8..##.r..]\..e\|.....D.t.@...

Chrome Cache Entry: 51

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 9344, version 1.0
Category:	downloaded
Size (bytes):	9344
Entropy (8bit):	7.975595436620788
Encrypted:	false
SSDEEP:	192:iy1J4xqYLC2akqiC1YV/R582UeGFc/AUGlF0djsT7qWPcC/Cdv:D2J7h5bV/37WUFGT7lPcC/Cdv
MD5:	CBCA61F27F93FD71171FE8D314C66AB9
SHA1:	C46A51672FFFF100945F84C3EB87826B7844A1E2
SHA-256:	F9A9A7A4B9D40BCC3047928DFA60695D53E6AE1D6EE699EA70146E171322ACAD
SHA-512:	7F9E8520DFB64197CE233AF7671A5A5643AE116478C6E2F5F67FBD8A092117126ADF1E2EDDA13FF1C19D68AEA3D04288310A2109D7C81183330F2B8DAD0785D4
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4jaVIGxA.woff2
Preview:	wOF2......$.......A`..$..........................L.. ....`?STAT^.t..\|.......t.Z..N..6.$.... ..x..h....B;%c[.08.@D..=.E...O...q2.0..i......v.p.0......Y. ..P)......N.C...K,.W!.Wutp..I.2...6.....Y..X...W..z.U.nq.j^;.8.zO..gw.d.^U?p.........7.. ....S..d......d./.-.7....$...V(V(\|.........c~........B[H.D(.$2.1<....N7..n.9k...D.@.(.(...H.D....qsQ."..O..{Oh..r.T.Iw..9I...rq.2.n....SW.O..\b5B.n..M.06.j..L.Sx?.........t.\|z}..V...G..J....x..Co].5HC..6p..,.2..&..}`.I.n......S}'....$..iV.[.....W......6...m.I'M...a......c...\|.a.FK.d.zW9xi'Y8v..lWi....T-..F\...^p.<.TT!wvQ.i0.0.f.\.A.. .Hq..J...=/.....\.]..Dq...:..+...W..]4uZ.._.l...e-..........k..."p....c......X..=.9..1.....2.......],.....R\|J......r.x./...pa...ef.......{..&.........=.5..>....5@...x.v..o.Io.L.t[Wu^.=..Z.r?xV..V..jV..`...+.2..8..P....[.r.....4.,Y....&.\|.W<..7..Y.s.=,2..A.i..je..P..`pV..!VW-...`.>YBRJY[...!rY5...l........Z.5_..B.....cP.....v1....(.5...[....n.....vlx=I.*1..9R....=..2..u\..p...iFD...

Chrome Cache Entry: 52

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	9
Entropy (8bit):	2.725480556997868
Encrypted:	false
SSDEEP:	3:Y/B:Y/B
MD5:	D8F4A1993546CC4B850CDE3599E27AEC
SHA1:	094B763B4CFCC0B05E5D040581CD513C3CA08067
SHA-256:	907BA78B4545338D3539683E63ECB51CF51C10ADC9DABD86E92BD52339F298B9
SHA-512:	7C696247F98AA6FE4E1DF001FD6029ABBBCCF45B122D65DFDEDE8F8A400CDA775387C657F96BD1E4E52DA7409187892B1F0786C54D835D2E44227B2E1335EAF6
Malicious:	false
Reputation:	low
URL:	https://secured-login.net/assets/landing-watermark-16f13e16a7ef02fb6f94250aa1931ded83dbee5d9fad278e33dd5792d085194f.css
Preview:	not found

Chrome Cache Entry: 53

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	380848
Entropy (8bit):	5.202109831427653
Encrypted:	false
SSDEEP:	3072:sHNwcv9VBQpLl88SMBQ47GKYQa8ITLYI9fB8NJOD3EAjV2Uc9M1U+/uz+rSLyCAV:sHWK9VC78UBQ47GKXIvd9sOVAqtNX
MD5:	67A0C4DBD69561F3226243034423F1ED
SHA1:	88C1B5C7EBBFA24D8196290206BF544F28EEB406
SHA-256:	74B9F1CFE7CAD31AE1C1901200890B76676E6D92AC817641F5EF9BFD552F2110
SHA-512:	D5326C46E2FC443AA0C75DB573B39957514BD025235ADB5F16797133394E1AFD0A6458B38DA8220BF7558333E8F2334532FBCC4CD9DD4DD5811AAC403B498542
Malicious:	false
Reputation:	low
URL:	https://secured-login.net/assets/application-237cb5c4f318687625f8ccf2f42de3fc20238bfe267384653491a6bba8c8f6f5.js
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 54

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	6193
Entropy (8bit):	5.401714743814202
Encrypted:	false
SSDEEP:	96:ZOEbaJJOEbaiDFZ8OEbaXkOEbahYOEbalOEba5y+aZjzBrWOEbafubqGIFuV4UOQ:aJKAXzhXm5qJ2bqGIwV4jlZYF
MD5:	F2D1D2937C3546E15C471236646AC74E
SHA1:	DD8D90F6D4AC8D72C718C10424788612689D89DB
SHA-256:	719D2FC548145FA8D8361205F6FCB49EEFC54C71FBB18E6320A60A263F40637A
SHA-512:	7B400281407249F805AB4695E0B7D3CDF4F7F5F776F9F7E60872D5208B7324DADDDAD79D76AC9991C74563520FB6BFF3A6343C8C10591C9EB5682733592668A4
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Open+Sans&display=swap
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 400;. font-stretch: 100%;. font-display: swap;. src: url(https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4taVIGxA.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 400;. font-stretch: 100%;. font-display: swap;. src: url(https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4kaVIGxA.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext */.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 400;. font-stretch: 100%;. font-display: swap;. src: url(https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4saVIGxA.woff2) for

Chrome Cache Entry: 55

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	9
Entropy (8bit):	2.725480556997868
Encrypted:	false
SSDEEP:	3:Y/B:Y/B
MD5:	D8F4A1993546CC4B850CDE3599E27AEC
SHA1:	094B763B4CFCC0B05E5D040581CD513C3CA08067
SHA-256:	907BA78B4545338D3539683E63ECB51CF51C10ADC9DABD86E92BD52339F298B9
SHA-512:	7C696247F98AA6FE4E1DF001FD6029ABBBCCF45B122D65DFDEDE8F8A400CDA775387C657F96BD1E4E52DA7409187892B1F0786C54D835D2E44227B2E1335EAF6
Malicious:	false
Reputation:	low
URL:	https://secured-login.net/assets/modernizr-654222debe8018b12f1993ceddff30dc163a7d5008d79869c399d6d167321f97.js
Preview:	not found

Chrome Cache Entry: 56

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 17576, version 1.0
Category:	downloaded
Size (bytes):	17576
Entropy (8bit):	7.986135354736866
Encrypted:	false
SSDEEP:	384:9FlzBIAFMur/ziLBGLlbxN8j/70j6vmoXB:bIEbXiNhP0+mox
MD5:	EFB3F28447C9EF35FD5882FB763B37C3
SHA1:	158DDD8C0348DEFA3192F26DA60A746727F4A8A3
SHA-256:	6D4370B59E36AC955C8B97F12FD5E86F7D3E80285D6AF2BFF0DAFA8E122D3C3B
SHA-512:	C0521D7C7BE4F635F70F0F466BC7A179C647C43C5AB400C8E490466BDDDE7175809B594C3D7B1A2F2AE9841CDE2F9AABFB8A967618FFB2CC7456A9B3231E0CDD
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B5caVIGxA.woff2
Preview:	wOF2......D.......}...D=.........................N.......`?STAT^.....\|........<.....T..6.$..$. ..x........n'...........#.`.........9IE.LZLJ....Cf.`....0....I.Y\|...`.{j.K....EW..zG=xA..P.6....6..n.+V....+..J.. ........ ..6~.f.....o.........}.H?..1.j^.^..?...z^.J.X.6.._...I....."..5..3<Bc.......oI.av}.s.{>.. z.c...........&@-w.S..P_.~..f..~..'+.....m..s...`D..(.....`.b...U.Vcn:..5.\.j.......v.. .I..K..mS#.=...w.%[.}I..>.O..'.k.k..}Gh...v..eB.....E..'"!.I...I.D...jo2.X.U.....OC.......H......8..[.... @..M.....=U/...E<.BH.I}h.j..H'..R.&O...i...kE%.....oTns.U..9.7...._....fL8....Um.@...g.[...%...0vU_.<.........Mp.."R.l.A....t..&..... X@.P..o..wI..4...c.........n.~9....U.`....gj...pu.... ..'.B,..C.\T!.v.......x.b...(0(....J......2...$...'..+..s.u]..m.E]....QS.......}.Z=.$.....q.0..2.kKK.....[.\|kg.....y....`DZGC.....A8....'.....,.Iy...h.K#........)r.P)~...!o.2t........._AAvQ~.!.@hy;c.-....p.'...:4...5......!..yS4A..........yD...T..A.!......dK

Chrome Cache Entry: 57

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7728, version 1.0
Category:	downloaded
Size (bytes):	7728
Entropy (8bit):	7.973684421983582
Encrypted:	false
SSDEEP:	192:RqbUht1WYnRpoFA36C6PZgm9hGwy+ymZMcVB:Q4h3WIoKqxPZp9hDy8ZMcVB
MD5:	80210D1FF4DE56C6704607F3831E8F6C
SHA1:	32FB4E1E177D5DE97AAD6E0D57100755D8DD2CFD
SHA-256:	F515A6F8BAE422286936B110653FB8EE0F58FE32D61390EE5DE77029BE23EFD6
SHA-512:	E24520E29F2073F03A0FF1E72EB632CCFB6FC1451BCB0735671EAE03CAFFB1CA6731050318F43544CC99AC7127015664464A0DEF587058535F9F7F743F166713
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4iaVIGxA.woff2
Preview:	wOF2.......0......:..............................V..\..f.`?STAT^..4..\|............$..6.$..D. ..x..,.....4%...<...}G.H..T.0...L.F...._[e.'.B"...).J...55. ).M.u..J}bV.,.q.#.I.C.(O....0.J....$...c...}.E'/.n.k...A..#m..d...9{.fV...!..[qj.,5...P..u..p.T.N\...{...d...f+.pt...+..y.A...Z.3&..H.VuX...^..R9.q@...s...]...c.pMS .GH...z..e?.n.....Z...V........,.8..t......p....X..i.w.....j.....2]sP.%Z.....XQU.....7..3.u.]...+.I.....!......c.ey...b_...M.....aXp: ..$.....^........8+..Z.~.!..BXR..E#WbC....1..P;@...e...c....&<0.(..2..,.e.....n..C.`....n,7\.DV.B..._.=...Ko}..O......A.......@C.}I}.....z.8._J....5.t....&.$....a.PS.}.....^....$..@...;.<.'.F.t.....\........~.w."..w...7...8..-r...r.Z.`.K..Y.R8.#R.....Ijz.vc.Xk....g..E.n...Q.x........>....gH..t...:Z..v..+.z.^H..A.@.....\|W9.}+.Ury.......Q,@...!.. .'kN..X..RA.oHWF$O...<..r.....\|N..!.fT...F.....~.....1..(jD...e..i..!....cD.h.Y.....A....r.dfD5.P..x...g.../@..._g\.h....pH..~..e..../MR.....).]

Chrome Cache Entry: 58

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65371)
Category:	downloaded
Size (bytes):	121200
Entropy (8bit):	5.0982146191887106
Encrypted:	false
SSDEEP:	768:Vy3Gxw/Vc/QWlJxtQOIuiHlq5mzI4X8OAduFKbv2ctg2Bd8JP7ecQVvH1FS:nw/a1fIuiHlq5mN8lDbNmPbh
MD5:	EC3BB52A00E176A7181D454DFFAEA219
SHA1:	6527D8BF3E1E9368BAB8C7B60F56BC01FA3AFD68
SHA-256:	F75E846CC83BD11432F4B1E21A45F31BC85283D11D372F7B19ACCD1BF6A2635C
SHA-512:	E8C5DAF01EAE68ED7C1E277A6E544C7AD108A0FA877FB531D6D9F2210769B7DA88E4E002C7B0BE3B72154EBF7CBF01A795C8342CE2DAD368BD6351E956195F8B
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/3.3.7/css/bootstrap.min.css
Preview:	/!. Bootstrap v3.3.7 (http://getbootstrap.com). * Copyright 2011-2016 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). //! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css */html{font-family:sans-serif;-webkit-text-size-adjust:100%;-ms-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background-color:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:700}dfn{font-style:italic}h1{margin:.67em 0;font-size:2em}mark{color:#000;background:#ff0}small{font-size:80%}sub,sup{position:relative;font-size:75%;line-height:0;vertical-align:baseline}sup{top:-.5em}sub{bottom:-.25em}img{border:0}svg:not(:root){overflow:hidden}figure{margin:1em 40px}hr

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 8572, version 1.0
Category:	downloaded
Size (bytes):	8572
Entropy (8bit):	7.968224802101464
Encrypted:	false
SSDEEP:	192:7kVuVBCnQlLJQwaKzxipCMvtCYuZQ9lABAbdsPyY5pfFqC:7+uVKI9OOMnuZQIBcb0Th
MD5:	776FDC253D54124DD63F274BF5EA35F0
SHA1:	7761DAC9A7FBB2814989092003506BA594C6EE45
SHA-256:	0B81CC8358F236821ADA286C94726C7FEBC9CAD8BD4F59FB39C515956B644E99
SHA-512:	4689A0D6723243E796D5DC1B031F5E1E8CE1D038921F1CC612169F179147DFC1B74CCA87CD7E2C8BEB38D9A8ED99F42FF369BDCB2FA9EA80B1BC00CC36CAEB10
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4vaVIGxA.woff2
Preview:	wOF2......!\|......G@..!..........................j..l..&.`?STAT^..8..\|.......$."..&..6.$..H. ..x..T.....A...........ZuVQ.......Kn..`...%.$T6I....\G.Q.X9uK8.ct?..........P.\5..;.I{...r}E......?.E7....8A..R.k."....^.4..^..j?.2h..bg.8.5.....7;..I..JH..j...4B!jI_v....=..S.."+eQX....h...X11........t.....rw-.2..X..J..z@.8@.a.........+JCV..df.p.4..B.U ....]..n. ...u..+..d.C.P8.,.8F.P.L.bL...=..=...5..O..T.<..I...].....O...`.Q.9....WT...r.>.b...3U..`.&.. .<..X-.'.s-....E;?.T."c.%4....ue.>...0A+`.X/.y..T.......O`...sHEE8E>...f...........%.p.t ....RrH.Sy!..)...Z....E...w^....V"..z..=O....B.........&XV..{..B.....>...=........]..Z.._..c.I.....U.^..j...B..A....Z.......T..N.F822.....G......h.(.`'E1..;..)...q.....%........... uK......@...7..DEd....N.l..,.,....oI...z... .eq.t:.HG/;4..3.F+...A........WFNm..._.\|-! Y.Utv.},......,..G.O.#...w.G..?.C..5_.)O{.G<.^.u..b..p,...P.MR.... ./C.)...s..{.,.}..z.....L..A...~..J..W.)}....r/u..:Q..aM......W...

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (2164)
Category:	downloaded
Size (bytes):	66775
Entropy (8bit):	6.133912929854724
Encrypted:	false
SSDEEP:	1536:dfOPSmaCJuuqJ0+GutFIDFzFv7aaXVVoi7fyPw+uzukA13AK:5isYjnK
MD5:	328F6CE8940CFF3E403CCD1BB297737D
SHA1:	D99380DFD1FFB811FAF123F41DFF5D01F662779C
SHA-256:	8BA93F5109B32572B7D4AA92A704C39ECB45B2A9851F8A74B26AE8AA47AFA09A
SHA-512:	82C80C9E8BBDA175E1BA74532C69EA77CD42A7629508EAEE6AB178A2DB4414DBA89ABEEBDB03963C252B6A556D06F06136560DFF371DAFFCD1B30BD5E05238AC
Malicious:	false
Reputation:	low
URL:	https://secured-login.net/pages/5b6e2d87961b/XWW04VVZpU2JyWTFmVy96T2RUOUEvcEhyMWhFSm5uZElnVUlmb2dTZEdMRFdGSU1UV2V3S3RUNGdrNmNQRFJ4WTFPRHdYYlkraDV3S1YyVVpuU3E3K2p1bWowcEt3M24ySVBLanRDUkwyYitYWExuYTB5YlhVTUhySWZKbGJCTE9oRHl2RCtjR29BbEk3ZEwxZFJaNmNoK29ESk0vTGcxSmtyK0FWTExLWTdxYlQ1Yys1bjNiTUczY0RnPT0tLTU2R0pFM1VwZFRnVndZSWktLXptU2lWOHlQdjR0eGI1K09OQVZtRnc9PQ==
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN". "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">..<html xmlns="http://www.w3.org/1999/xhtml">. <meta name="IMPORTANT" content="This page is part of a simulated phishing attack initiated by KnowBe4 on behalf of its customers." />. <meta name="IMPORTANT" content="If you have any questions please contact support@knowbe4.com." />. <meta content="IE=edge,chrome=1" http-equiv="X-UA-Compatible"/>. <meta name="robots" content="noindex, nofollow" />.. <head>. <script src="/assets/application-237cb5c4f318687625f8ccf2f42de3fc20238bfe267384653491a6bba8c8f6f5.js"></script>.. <link rel="stylesheet" href="/assets/landing-watermark-8487e36eef1bec74f06631f19fea0aa171c208e2976373cda5bd0a4b9e230903.css" media="all" />. <link rel="stylesheet" href="/assets/sei-styles-1837e0b6e1baaf1af90438028a176241b70a365a8a09ff4bf668cf3bf9e3c759.css" media="all" />.. <script>.//<![CDATA[.. $(document).ready(function() {.

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3168
Entropy (8bit):	7.704911325185365
Encrypted:	false
SSDEEP:	48:37TcgUFv95NwPpK+adjaoVaqzGfYdIO+bExaLM2uO+xVwvpoP:ftUFvdy8dXVaGNdIb1Lz8PwvpY
MD5:	A907E6E737788176B026FA71DFE8AFFE
SHA1:	6844236F638CEDCD652EB0A805476A1A13376CF5
SHA-256:	FC5E7621BA0E98C5C6728E3B2BDF802311C0A0953A05E60A7551CB0C7BED00A9
SHA-512:	3A17E66931A15B5C6553DAE241C5A7BB40240699F0608F92ED940CB203CBEA3031CB0FAC23F9C962F50D573F56DB27A3369F1A38ED1AEA0168D7E707803CA27A
Malicious:	false
Reputation:	low
URL:	https://secured-login.net/assets/sei-flag-90af55d793544fe1893f26677661a4252761afbe811fab0eced85c67bc82f984.png
Preview:	.PNG........IHDR.............>U....'IDATx..].\...e.!.H..B/J."""R..R....E)"../..".H..3s......&.O....d.QJ.L......P.m.U..u.Q..$.....}.5..M.....{.y.!A...\|.\|...3{.-M....m..~~....0.a...0..`...0........C...!`...0.a...0..<.z......w.tt<X.f..f.O.f./.(QK&s.t.{..z+.T..J..r.....3.....<r..../..Z.}.`..^.gGF6....p%.y^.,.R.....dr.c6/....w_[^........#G.j.7x...?.N.l..k.}...0< a..'.M...XO&g.....to......B..q~.......{....:...^H*QT..m..x.'..K}}.eu.&a........a..{...o..8.".-`Yi.p..zs........l........X-..tt<..=N&...H....&^...eE^M.9...U..gd..D;....gw.xL{.E.1..}}.+Q..U.......x.rO....V.8.,.n.p{...+............m...V.8.\|~``.\.........[.......>s...r......v$.+ctq...B{.A....L...j..T..K...b.V.y.M.Z....7T..8...e-.>...u...&`)..\|...... .....2...d....=:.N.~.....g%..x..5...7..-.l.e.........Y.u..=..l-...s.&.......r.vx.....{..e....).<1S(.\{>j.....+5.....kO...\|"Q-.r.k.I..........]i..!...W..._...=7[.[uo....sk....t[..B.a....\...X......7..\.96...F..]..]...M{.6..!..lv...V..C..p5..q.f

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15368, version 1.0
Category:	downloaded
Size (bytes):	15368
Entropy (8bit):	7.986184968554377
Encrypted:	false
SSDEEP:	384:nTJg6Q5K8YWSW9moijiyOckZiSFQsiEVxU1L:nTJH0K7iUoaOfZigxBe
MD5:	BE7B70AB1265B1047BD93422397C655E
SHA1:	E10BBC7D8529AE3E64D8B08C9F7CD55C98F83D60
SHA-256:	B452C0F212E8BF33965905032F5BA1FAE29CD6F9539DCBC673704E66CE943B2B
SHA-512:	A9A913559EFE29685B7C12456326C3F8C7053D639B849261108A69348EEA02C617BA923561C1CDBE36082B2CEC1C0ADCC22511389791DB328ABC99A57F011F5A
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4uaVIGxA.woff2
Preview:	wOF2......<.......x0..;...........................>..\..\|.`?STAT^..J..\|........\.i.....6.$..,. ..x........l..]{N..#R.-...0.Q.%.T.......Q...U...L..R.)KFQ0.)p..L%d......!3..;..v8..9.........A..'..........v5D80.......&...M...}....g.6.'N..M.y......gk....B.{....}.....q>j...].......o!..AL....b.....f......F..FE,@.Q..cF..6n....g.....Ey..O....^.3...P.)U...AH.y..Z...'%.?8/.......T.S............S..8.w 7..>`.5...........0#.._..(_.P.W....s=......i+i.....`Dn.)k.$.....G...]..=.....w.....n..\|."..4.g.....H.2M..P.(oRg..l~G..dJ.<.U..q..u..4%......<...`.-$.....$[..".....TuM.V..7.[.{.l.. ,....>.&...P9].....S.lg.B.tK..B..\..z..RS.i....3.D."u..Bz..T.E^R.=m...U.\.X...IZ....n]....]...}i.......K.kL.D.6.".5..V..u.....?...\|.a.=.;..0..cL..HpU..t.p)1.k.....^G..:.u.q(E.Q5.o.k.1.0..R....c..`.....A..3.g.0&....$....\| .....C.H....(..F.. .::.......&.$Z4...$N....$.<.%.A6..y.1.?.......w...}....~$....V..Q......x..A'......+...I<n. .......t@...w$ ...@...9..H.h..B...Q

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3168
Entropy (8bit):	7.704911325185365
Encrypted:	false
SSDEEP:	48:37TcgUFv95NwPpK+adjaoVaqzGfYdIO+bExaLM2uO+xVwvpoP:ftUFvdy8dXVaGNdIb1Lz8PwvpY
MD5:	A907E6E737788176B026FA71DFE8AFFE
SHA1:	6844236F638CEDCD652EB0A805476A1A13376CF5
SHA-256:	FC5E7621BA0E98C5C6728E3B2BDF802311C0A0953A05E60A7551CB0C7BED00A9
SHA-512:	3A17E66931A15B5C6553DAE241C5A7BB40240699F0608F92ED940CB203CBEA3031CB0FAC23F9C962F50D573F56DB27A3369F1A38ED1AEA0168D7E707803CA27A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............>U....'IDATx..].\...e.!.H..B/J."""R..R....E)"../..".H..3s......&.O....d.QJ.L......P.m.U..u.Q..$.....}.5..M.....{.y.!A...\|.\|...3{.-M....m..~~....0.a...0..`...0........C...!`...0.a...0..<.z......w.tt<X.f..f.O.f./.(QK&s.t.{..z+.T..J..r.....3.....<r..../..Z.}.`..^.gGF6....p%.y^.,.R.....dr.c6/....w_[^........#G.j.7x...?.N.l..k.}...0< a..'.M...XO&g.....to......B..q~.......{....:...^H*QT..m..x.'..K}}.eu.&a........a..{...o..8.".-`Yi.p..zs........l........X-..tt<..=N&...H....&^...eE^M.9...U..gd..D;....gw.xL{.E.1..}}.+Q..U.......x.rO....V.8.,.n.p{...+............m...V.8.\|~``.\.........[.......>s...r......v$.+ctq...B{.A....L...j..T..K...b.V.y.M.Z....7T..8...e-.>...u...&`)..\|...... .....2...d....=:.N.~.....g%..x..5...7..-.l.e.........Y.u..=..l-...s.&.......r.vx.....{..e....).<1S(.\{>j.....+5.....kO...\|"Q-.r.k.I..........]i..!...W..._...=7[.[uo....sk....t[..B.a....\...X......7..\.96...F..]..]...M{.6..!..lv...V..C..p5..q.f

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5934
Entropy (8bit):	4.931906350831601
Encrypted:	false
SSDEEP:	96:fiIg+VsCy59sZUAcYLoX9U0JePXOBaxAzi80JeaOV7Fzu/B3qn6dk/nGgje/mPFd:fiP+VbyPsZxcYLot7SXsaCQuu/Nq66/v
MD5:	134D934420B13974981A9634B7380865
SHA1:	18C01D3711CF8C21C1CD0CF544002358C1C929C6
SHA-256:	B3C447F15FCE33DFA869B9D2190364509EDE3937AE05B51BA394A78E28C244BA
SHA-512:	7FAE93AD1895DCF7CC58FC2C477BA51D3EB7D7B2884FE117E21C0A7E0160981EB53D23A6ACDA07DA594AF6984F52E1B57B6F157F84220729C7EEBF9AE062C092
Malicious:	false
Reputation:	low
URL:	https://secured-login.net/assets/sei-styles-1837e0b6e1baaf1af90438028a176241b70a365a8a09ff4bf668cf3bf9e3c759.css
Preview:	/* line 2, app/assets/stylesheets/sei-styles.scss /.x-sei.sei-flag {. border-bottom: 2px solid tomato;. padding-left: 3px;.}../ line 6, app/assets/stylesheets/sei-styles.scss /.x-sei.sei-flag::before {. content: ' ';. display: inline-block;. background: url(/assets/sei-flag-90af55d793544fe1893f26677661a4252761afbe811fab0eced85c67bc82f984.png) no-repeat;. background-size: contain;. height: 12px;. width: 12px;. margin: 0 .1rem;.}../ line 16, app/assets/stylesheets/sei-styles.scss /.x-sei.sei-flag[generic='true'] {. display: block;. border-bottom: 0px;.}../ line 21, app/assets/stylesheets/sei-styles.scss /.x-sei.sei-flag[generic='true']::after {. font-family: "Courier New", Courier, monospace;. line-height: 1.8;. color: #b65555;. font-weight: bold;. content: attr(data-original-title);.}../ line 29, app/assets/stylesheets/sei-styles.scss */.x-sei.sei-flag[generic='true']::before {. content: ' ';. display: inline-block;. background: url(/assets/dark-flag-2846d82c5

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18668, version 1.0
Category:	downloaded
Size (bytes):	18668
Entropy (8bit):	7.988119248989337
Encrypted:	false
SSDEEP:	384:1stcBfAVaR8i6XzMsb4fcjakBudFyBqrgeU0hipgwfqj09nOt/a:1k0F6Xz1bFjaPbyBqr9hIgkM3Fa
MD5:	8655D20BBCC8CDBFAB17B6BE6CF55DF3
SHA1:	90EDBFA9A7DABB185487B4774076F82EB6412270
SHA-256:	E7AF9D60D875EB1C1B1037BBBFDEC41FCB096D0EBCF98A48717AD8B07906CED6
SHA-512:	47308DE25BD7E4CA27F59A2AE681BA64393FE4070E730C1F00C4053BAC956A9B4F7C0763C04145BC50A5F91C12A0BF80BDD4B03EECC2036CD56B2DB31494CBAF
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2
Preview:	wOF2......H...........H..........................\|.....h.`?STAT^..0..\|...........+..2..6.$..`. ..x........z'o..w;....6.E....6....E...'$H.#.....n1X..JU/.d.O..JC.'J".v.v.l.h.....u.S...SY.....B.hz.o.}......W......%m6...A..=....\..m. .]..~.[..........]...I..h.=.....6.xt..F....Lt...Qs-.7..{...~BI.".F.Q......F...P..dMw..#I2........Rq.Q&.0@.;..;...3VG..:c.nki..-Q..2##e.u...8n....\?....T..b....^..#...../.J\|OM..St....e.S.}!.....>..i.T/a.ES%.W.P3..`..a.R.A.....!~g..74.np8o.....d[6?.P.4)P.....AG.3.......;#0.y....M..O/2.@.4..N.vA$.:M&H,.AT".........@..a.~..L->...0@h...~.._..N"......t......C./g7..............2E.N.J...TW.F..."A.B...n.......i.?.{\.L.!.B..x...S..!........?.\,... .@.....y"xw.A8.w..!E..-^P O..+.T.r.R.zz..K..].E.....Ri.)g.P...j..w..c.M.F.v../........Q....'...(....X..;.K.!BZ3.........f.....N.A(....cA`.b'...`.~sa^.....?..../.L.S......t..`@h..C.....>N.W...;>..._h.+~=\|......uOGA{.7.....h....q.d.4$.x<.....^0\|...@....@Q[RC.0....b....'...RID

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1666
Entropy (8bit):	7.843362903299294
Encrypted:	false
SSDEEP:	48:1E3hTvNbvJkGGv0nnr5I2rk5boP0gD6EaTMN:1ERb+cr5Z1P0gD6/a
MD5:	29D583007FCD677AA31CA849478BC17A
SHA1:	F354E323218A450060852C344927C3E79D8E7B66
SHA-256:	120EE096F38C1E21083054C15F0F8CFBB02B6740A01D98068E3BE9581E83D453
SHA-512:	4AFC2641D96D1C372D091FD795D39C1AF12149B5EB30DA7BEE6FBFEA0650841067B7D259473BF65706CDD42D1EDF1CC5673B5F5556D1E91F8AE32976490A7E4D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...<...<.....:..r...IIDATh..{.VE.....Y.E.......Uv.B....=. {....ee....G.%....H/).UR1[.G...d...._m......~:.\|.13..~.e.;s...;g......&g.@..w.G..K......{.u+..^...k.....s+...e..R.z...."..............l.z......C.......V.#.}.5(..f5.N`.......e&3".x..g..w..C.......T\|...v"w..Q>-(/2.x.A.L..!....r..noB..g\|...\|.\....U.T...<3.N-...rU.bp%.<.CE........k....0C..\|.Sw~.g....!....uf+y.KG.O+Y.h&.....F.......sB...7.\|;.r\|..\o......;.$...i.wC.ICO.n.h....AJ.N.+.T).........)9..y..?.hs%.".B..k....#.S.....:..!o..Z...\|.w2....a..+y.e;..A...x.p+2G/!..1..jTr.S...S.....D.<.G.z.+2..E..>.Z6L.......e.2..R..3...~..%.C.!..f..s.'.;.M...5..k.1..L._B.vA_\|.c{......{.......d...Y.'Q.TS:.7.......\|...,.:..-...#.V.*NA..&...iO.....SEE.kW!.y.p.y.m..6b..@=.,.n..i,....q..W...w.f..bg.`\|......3.:.K.<..I.[....a..}..%_....{...~..j...)......n}m[...u...._....{....,.t.[ ..g.....&.v.j..2.r5.r5.B..jp..v-.j./.....c.s..$q@..z...oo..g?.z...%..gW.......}.6h....U....o.u.])]..@B);.o.V

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 11116, version 1.0
Category:	downloaded
Size (bytes):	11116
Entropy (8bit):	7.977966003020195
Encrypted:	false
SSDEEP:	192:c5J6FUS8z9yKW3C62e9A3+t4q965ElM9FxWuPpZ6LpjKQZtX9MRFTj1EHUgaflbN:c5J6FDS9yhyy9Dt4265ElM9FxtPT69H6
MD5:	7E05F5267BBA1AA9FB260096F923BDB7
SHA1:	44E5FE17DC41EB94BB2FE85D77C0904AC766325D
SHA-256:	21E75944D3F77408D1F5F2FAB67C89C7FC43F4A80A3B8E4DCF38185F9D9F46E6
SHA-512:	E3442FC98D171DFE08614751267C2023BF6DE2A2E42BE7B7CB54E15DDBE028534D193D93B086A75549432B2818B0EC1824D2BDBB848B00A9329F22C5DDDE619F
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4kaVIGxA.woff2
Preview:	wOF2......+l......Q...+..........................>.....X.`?STAT^.."..\|.......(.%.....6.$..6. ..x..R.....Iu...8@.}.G"....~x5.`....J.......t.Tm.....".......e..........C..9.9..R...F?..x.i...._.x.<%2R...d...y........{.om......Oe..u..3Z.....x...#4.I..ES...8=........,...Y.^ ...2.=@...a...a..0.P..#w3.'F...b.,l.........1..".......IB.....b.......e......X....?D.[...iK.....$.F.......nM......4..@M......u../.#.C.X.TC3z.n.Wx...........=...@...t.I..UR....6.v...3...X.~i+..s..J.V.Y...g..Kun.IZ,....%O.u..3.(.+B~.)....M(6r.m......>x..p.MZL....P.Z>....@.*..M.0..5....@\.D.&..H. 2M...N..f.E.UM....B).).m.1.J......'.=D....Z.6.{.5..q......4.T.$:=...r....5..3s..zD[.i ......x.Mtq.\|.#G......._.9P=}..PG.a......l8V.m...P.#..5..6R....`.<K}k.a..a....D.6..A.l...e.F...Z..0...7.0...^.....n`p..o.`.........4F.....H.1.).lh.....u..3WB4.$.............E......Z.{..{.[]...E.m.{.V^kZ..J.y?.w.m......o.k.j<.}...g. 7...-3}C?....<..\..ld9s..p...p..3%....>...F;...6..h.Z..GKh>...k.S..V....

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	380848
Entropy (8bit):	5.202109831427653
Encrypted:	false
SSDEEP:	3072:sHNwcv9VBQpLl88SMBQ47GKYQa8ITLYI9fB8NJOD3EAjV2Uc9M1U+/uz+rSLyCAV:sHWK9VC78UBQ47GKXIvd9sOVAqtNX
MD5:	67A0C4DBD69561F3226243034423F1ED
SHA1:	88C1B5C7EBBFA24D8196290206BF544F28EEB406
SHA-256:	74B9F1CFE7CAD31AE1C1901200890B76676E6D92AC817641F5EF9BFD552F2110
SHA-512:	D5326C46E2FC443AA0C75DB573B39957514BD025235ADB5F16797133394E1AFD0A6458B38DA8220BF7558333E8F2334532FBCC4CD9DD4DD5811AAC403B498542
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1471
Entropy (8bit):	4.754611179426391
Encrypted:	false
SSDEEP:	24:y40r8CQo40agx40mC400XLaR404hZYmx40vGk40vG/I40vGhH40VhZ40UrCmn:xdDgCFEiBZgnTOHTn
MD5:	15E89F9684B18EC43EE51F8D62A787C3
SHA1:	9CBAAACEAE96845ECD3497F41EE3B02588ABEC11
SHA-256:	16F13E16A7EF02FB6F94250AA1931DED83DBEE5D9FAD278E33DD5792D085194F
SHA-512:	79E0110A045F28437D192290AC9789270CB0D4E676A985564746DB439992D867BA89639D7738E2A7F7D83BBF37D9A02CAA2AE1DC4E0EE2519797E5840A47FABE
Malicious:	false
Reputation:	low
URL:	https://secured-login.net/assets/landing-watermark-8487e36eef1bec74f06631f19fea0aa171c208e2976373cda5bd0a4b9e230903.css
Preview:	/* line 1, app/assets/stylesheets/landing-watermark.scss /..watermark {. -webkit-writing-mode: vertical-rl;. -ms-writing-mode: tb-rl;. writing-mode: vertical-rl;. text-orientation: sideways;.}../ line 4, app/assets/stylesheets/landing-watermark.scss /..watermark.left {. left: 0;.}../ line 7, app/assets/stylesheets/landing-watermark.scss /..watermark.right {. right: 0;.}../ line 10, app/assets/stylesheets/landing-watermark.scss /..watermark.top {. text-align: center;. -webkit-writing-mode: horizontal-tb;. -ms-writing-mode: lr-tb;. writing-mode: horizontal-tb;. top: -38px;.}../ line 15, app/assets/stylesheets/landing-watermark.scss /..watermark h1 {. -webkit-user-select: none;. -moz-user-select: none;. -ms-user-select: none;. user-select: none;. font-size: 15px;. color: #fdfdfa;. font-weight: bold;.}../ line 24, app/assets/stylesheets/landing-watermark.scss /.#template_sei .watermark.left {. margin-left: -10px;.}../ li

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 38, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3014
Entropy (8bit):	7.902919939139106
Encrypted:	false
SSDEEP:	48:vnJJCJaqcfDoxU8qAg6opvwr+FYc1lWO1pPGDfMexqwFYRFlIe9BhGtAHIWVRs:vnJJ8CESXp66vwPuGDfMexqwALvhTFTs
MD5:	E154B58FD2CD3F1F2E2C6C810BB1E65B
SHA1:	CAEF301E8550A910909ECE9471669DA0C32EA6F0
SHA-256:	E8C5A2C9860C1A6CC7C949B9D7C793E5E435D75996DEBEB295A959F3D09831C0
SHA-512:	464EC940E824EAB8B7F83EB40852DD3019E84BE7B1A0F75AF288656605426B2EE386FA7FF102E0144AA065F053E88E8356E7C185B4DC393CC4D8EB0ADC877312
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......&........l....IDATx...{h.U..q...Ms"e.ej,..M.,](&..B...)G.F...2.22oY......L.%...iF......L.e.dsn.Oo.@..?...........y...s...=...D-jQ.D..&C1..Mr_9.n...p.8.W...x....8d..Nl.b..=h...b<.`...W .GI...S.Q....l..b ....G.F2.+ ...C..u...2j.?Z.).....!-...d)2]..d.;p.,.t@>F>.3}9....... ......v@.>4.= ..B.5H..e.....5i.?NP....<.Y.LWx.a.>8..?.M.$S> .C...r...:.,...OLWx.a.v8.....c.....Z../...M........m.,..Rl..1.X.Y........j@.@.%.2l....YJR..?.....5 ..G.d.BF./.L\........,J..~...0]...,...q.7x....h}.m..#...."<...0q....8.9.`...e...EV...m..p.M}H.y...H..l.~...x..0...<.....d..Xh.1.~.Y.M`.].Q....:...8.....M1.'..~.h...g{..OD..f.Hc.g.(..)....,.y.w.\.....HO" /A.\..Z@...$...].,.<.G..WavB...q....\...H..<.t=d...-VWTC.I........jv...!....N@..0..M...."._B....%X.R.q.....W.'WAL..'m].+.j.pF.8,...V.Jc..@....E...\|L...=.[..2&^......y....X..1..(.F..,..f.5..dT...b>..q>.;..d....:.O..)N. ..\.......s..R...UcD..d;ct.,+<.c;.W...!K.$..... .g.../.,5.T..g7l.,...p. .8.]...C_4...?

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	4524
Entropy (8bit):	5.108931295370594
Encrypted:	false
SSDEEP:	96:AG5XS7vBkRVkhmRaM44/HLPRaByA+zBRNI:AG5XABkAhmRaM44/H1CyrBRNI
MD5:	DD05B711E15EF201B07E20CB5C87F5D8
SHA1:	41B818B243140D90DA4CA917D454335B603A6BDA
SHA-256:	617F793D125F780AB7BB7C9E92AB427D9E757083E7368E241E8E8FA69F013E4F
SHA-512:	243C149BB8AAF5376EEBAC49833A59F75BA26BEC098AFD8A167D12BDACD3E80D98EE1DA1D82915CC7E4C7FAC747FBFF5D2D687D97F20BDF5C81D67CFA0620F39
Malicious:	false
Reputation:	low
URL:	https://s3.amazonaws.com/helpimg/landing_pages/css/dd.css
Preview:	.borderRadius{-moz-border-radius:5px; border-radius:5px; }...borderRadiusTp{-moz-border-radius:5px 5px 0 0; border-radius:5px 5px 5px 5px;}...borderRadiusBtm{-moz-border-radius:0 0 5px 5px ; border-radius:5px 5px 5px 5px;}.....ddcommon {position:relative;display:-moz-inline-stack; zoom:1; display:inline-block; display:inline; cursor:default;}...ddcommon ul{padding:0;margin:0;}...ddcommon ul li{list-style-type:none;}...borderRadiusTp ul li:last-child{-moz-border-radius:0 0 5px 5px ; border-radius:0 0 5px 5px;border-bottom:0 none #c3c3c3; }...borderRadiusBtm ul li:first-child{-moz-border-radius:5px 5px 0 0; border-radius:5px 5px 0 0 ;border-bottom:1 solid #c3c3c3; }.....ddcommon .disabled img, .ddcommon .disabled span, .ddcommon.disabledAll{..opacity: .5; / standard: ff gt 1.5, opera, safari /..-ms-filter:"alpha(opacity=50)"; / ie 8 /..filter:alpha(opacity=50); / ie lt 7 /..-khtml-opacity:.5; / safari 1.x /..-moz-opacity:.5; / ff lt 1.5, netscape */..color:#999999;..}...ddcommo

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1666
Entropy (8bit):	7.843362903299294
Encrypted:	false
SSDEEP:	48:1E3hTvNbvJkGGv0nnr5I2rk5boP0gD6EaTMN:1ERb+cr5Z1P0gD6/a
MD5:	29D583007FCD677AA31CA849478BC17A
SHA1:	F354E323218A450060852C344927C3E79D8E7B66
SHA-256:	120EE096F38C1E21083054C15F0F8CFBB02B6740A01D98068E3BE9581E83D453
SHA-512:	4AFC2641D96D1C372D091FD795D39C1AF12149B5EB30DA7BEE6FBFEA0650841067B7D259473BF65706CDD42D1EDF1CC5673B5F5556D1E91F8AE32976490A7E4D
Malicious:	false
Reputation:	low
URL:	https://i.imgur.com/QRF01zv.png
Preview:	.PNG........IHDR...<...<.....:..r...IIDATh..{.VE.....Y.E.......Uv.B....=. {....ee....G.%....H/).UR1[.G...d...._m......~:.\|.13..~.e.;s...;g......&g.@..w.G..K......{.u+..^...k.....s+...e..R.z...."..............l.z......C.......V.#.}.5(..f5.N`.......e&3".x..g..w..C.......T\|...v"w..Q>-(/2.x.A.L..!....r..noB..g\|...\|.\....U.T...<3.N-...rU.bp%.<.CE........k....0C..\|.Sw~.g....!....uf+y.KG.O+Y.h&.....F.......sB...7.\|;.r\|..\o......;.$...i.wC.ICO.n.h....AJ.N.+.T).........)9..y..?.hs%.".B..k....#.S.....:..!o..Z...\|.w2....a..+y.e;..A...x.p+2G/!..1..jTr.S...S.....D.<.G.z.+2..E..>.Z6L.......e.2..R..3...~..%.C.!..f..s.'.;.M...5..k.1..L._B.vA_\|.c{......{.......d...Y.'Q.TS:.7.......\|...,.:..-...#.V.*NA..&...iO.....SEE.kW!.y.p.y.m..6b..@=.,.n..i,....q..W...w.f..bg.`\|......3.:.K.<..I.[....a..}..%_....{...~..j...)......n}m[...u...._....{....,.t.[ ..g.....&.v.j..2.r5.r5.B..jp..v-.j./.....c.s..$q@..z...oo..g?.z...%..gW.......}.6h....U....o.u.])]..@B);.o.V

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (407)
Category:	downloaded
Size (bytes):	461
Entropy (8bit):	5.842401584877004
Encrypted:	false
SSDEEP:	12:3R+xnllyLrVwGwKcUfQj7DZbFs4AEdeIQL:3EQyGhcUfCDRFsNEkj
MD5:	6B88F2F938DD2E595690C4AA9D98F032
SHA1:	EAAE55D93FAFCF67DEC63646D6510245889D7512
SHA-256:	AA1293A3DF253C859A1948732F75EA48835B9CE6648D61AC839930C6B691CC9F
SHA-512:	DBD8F9F472018BE0D5561BA4834411DF9A65FFFF199F0B314198F371BB056885EAE7C49E1EB68681DA786FD04662706525F1FA3BC398875E6A6D08695E817B0C
Malicious:	false
Reputation:	low
URL:	https://mail.donotreply.biz/XWW04VVZpU2JyWTFmVy96T2RUOUEvcEhyMWhFSm5uZElnVUlmb2dTZEdMRFdGSU1UV2V3S3RUNGdrNmNQRFJ4WTFPRHdYYlkraDV3S1YyVVpuU3E3K2p1bWowcEt3M24ySVBLanRDUkwyYitYWExuYTB5YlhVTUhySWZKbGJCTE9oRHl2RCtjR29BbEk3ZEwxZFJaNmNoK29ESk0vTGcxSmtyK0FWTExLWTdxYlQ1Yys1bjNiTUczY0RnPT0tLTU2R0pFM1VwZFRnVndZSWktLXptU2lWOHlQdjR0eGI1K09OQVZtRnc9PQ==?cid=2315575162
Preview:	<html>. <head>. <script>window.location.href = 'https://secured-login.net/pages/5b6e2d87961b/XWW04VVZpU2JyWTFmVy96T2RUOUEvcEhyMWhFSm5uZElnVUlmb2dTZEdMRFdGSU1UV2V3S3RUNGdrNmNQRFJ4WTFPRHdYYlkraDV3S1YyVVpuU3E3K2p1bWowcEt3M24ySVBLanRDUkwyYitYWExuYTB5YlhVTUhySWZKbGJCTE9oRHl2RCtjR29BbEk3ZEwxZFJaNmNoK29ESk0vTGcxSmtyK0FWTExLWTdxYlQ1Yys1bjNiTUczY0RnPT0tLTU2R0pFM1VwZFRnVndZSWktLXptU2lWOHlQdjR0eGI1K09OQVZtRnc9PQ==';</script>. </head>. <body>. </body>.</html>.

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 17, 2024 22:15:39.379081011 CET	49675	443	192.168.2.4	173.222.162.32
Dec 17, 2024 22:15:48.596344948 CET	49738	443	192.168.2.4	142.250.181.132
Dec 17, 2024 22:15:48.596388102 CET	443	49738	142.250.181.132	192.168.2.4
Dec 17, 2024 22:15:48.596451044 CET	49738	443	192.168.2.4	142.250.181.132
Dec 17, 2024 22:15:48.596728086 CET	49738	443	192.168.2.4	142.250.181.132
Dec 17, 2024 22:15:48.596744061 CET	443	49738	142.250.181.132	192.168.2.4
Dec 17, 2024 22:15:50.509207964 CET	443	49738	142.250.181.132	192.168.2.4
Dec 17, 2024 22:15:50.509486914 CET	49738	443	192.168.2.4	142.250.181.132
Dec 17, 2024 22:15:50.509506941 CET	443	49738	142.250.181.132	192.168.2.4
Dec 17, 2024 22:15:50.510941982 CET	443	49738	142.250.181.132	192.168.2.4
Dec 17, 2024 22:15:50.511007071 CET	49738	443	192.168.2.4	142.250.181.132
Dec 17, 2024 22:15:50.512118101 CET	49738	443	192.168.2.4	142.250.181.132
Dec 17, 2024 22:15:50.512202978 CET	443	49738	142.250.181.132	192.168.2.4
Dec 17, 2024 22:15:50.565521955 CET	49738	443	192.168.2.4	142.250.181.132
Dec 17, 2024 22:15:50.565545082 CET	443	49738	142.250.181.132	192.168.2.4
Dec 17, 2024 22:15:50.613930941 CET	49738	443	192.168.2.4	142.250.181.132
Dec 17, 2024 22:15:50.994683981 CET	49740	443	192.168.2.4	52.1.199.240
Dec 17, 2024 22:15:50.994723082 CET	443	49740	52.1.199.240	192.168.2.4
Dec 17, 2024 22:15:50.994795084 CET	49740	443	192.168.2.4	52.1.199.240
Dec 17, 2024 22:15:50.994996071 CET	49740	443	192.168.2.4	52.1.199.240
Dec 17, 2024 22:15:50.995012999 CET	443	49740	52.1.199.240	192.168.2.4
Dec 17, 2024 22:15:50.995254993 CET	49741	443	192.168.2.4	52.1.199.240
Dec 17, 2024 22:15:50.995290995 CET	443	49741	52.1.199.240	192.168.2.4
Dec 17, 2024 22:15:50.995358944 CET	49741	443	192.168.2.4	52.1.199.240
Dec 17, 2024 22:15:50.995538950 CET	49741	443	192.168.2.4	52.1.199.240
Dec 17, 2024 22:15:50.995548964 CET	443	49741	52.1.199.240	192.168.2.4
Dec 17, 2024 22:15:52.838278055 CET	443	49741	52.1.199.240	192.168.2.4
Dec 17, 2024 22:15:52.838485956 CET	443	49740	52.1.199.240	192.168.2.4
Dec 17, 2024 22:15:52.838582993 CET	49741	443	192.168.2.4	52.1.199.240
Dec 17, 2024 22:15:52.838608980 CET	443	49741	52.1.199.240	192.168.2.4
Dec 17, 2024 22:15:52.838702917 CET	49740	443	192.168.2.4	52.1.199.240
Dec 17, 2024 22:15:52.838742018 CET	443	49740	52.1.199.240	192.168.2.4
Dec 17, 2024 22:15:52.838998079 CET	443	49741	52.1.199.240	192.168.2.4
Dec 17, 2024 22:15:52.839054108 CET	49741	443	192.168.2.4	52.1.199.240
Dec 17, 2024 22:15:52.839138985 CET	443	49740	52.1.199.240	192.168.2.4
Dec 17, 2024 22:15:52.839194059 CET	49740	443	192.168.2.4	52.1.199.240
Dec 17, 2024 22:15:52.839718103 CET	443	49741	52.1.199.240	192.168.2.4
Dec 17, 2024 22:15:52.839771986 CET	49741	443	192.168.2.4	52.1.199.240
Dec 17, 2024 22:15:52.839879990 CET	443	49740	52.1.199.240	192.168.2.4
Dec 17, 2024 22:15:52.839922905 CET	49740	443	192.168.2.4	52.1.199.240
Dec 17, 2024 22:15:52.841018915 CET	49741	443	192.168.2.4	52.1.199.240
Dec 17, 2024 22:15:52.841080904 CET	443	49741	52.1.199.240	192.168.2.4
Dec 17, 2024 22:15:52.841350079 CET	49741	443	192.168.2.4	52.1.199.240
Dec 17, 2024 22:15:52.841356039 CET	443	49741	52.1.199.240	192.168.2.4
Dec 17, 2024 22:15:52.844427109 CET	49740	443	192.168.2.4	52.1.199.240
Dec 17, 2024 22:15:52.844563007 CET	443	49740	52.1.199.240	192.168.2.4
Dec 17, 2024 22:15:52.886461973 CET	49740	443	192.168.2.4	52.1.199.240
Dec 17, 2024 22:15:52.886507988 CET	443	49740	52.1.199.240	192.168.2.4
Dec 17, 2024 22:15:52.886507988 CET	49741	443	192.168.2.4	52.1.199.240
Dec 17, 2024 22:15:52.926033020 CET	49740	443	192.168.2.4	52.1.199.240
Dec 17, 2024 22:15:53.407896042 CET	443	49741	52.1.199.240	192.168.2.4
Dec 17, 2024 22:15:53.408003092 CET	443	49741	52.1.199.240	192.168.2.4
Dec 17, 2024 22:15:53.408051968 CET	49741	443	192.168.2.4	52.1.199.240
Dec 17, 2024 22:15:53.408787966 CET	49741	443	192.168.2.4	52.1.199.240
Dec 17, 2024 22:15:53.408803940 CET	443	49741	52.1.199.240	192.168.2.4
Dec 17, 2024 22:15:53.843939066 CET	49744	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:53.843996048 CET	443	49744	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:53.844077110 CET	49744	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:53.844599009 CET	49745	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:53.844638109 CET	443	49745	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:53.844686985 CET	49745	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:53.844871998 CET	49744	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:53.844888926 CET	443	49744	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:53.845172882 CET	49745	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:53.845185041 CET	443	49745	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:55.639298916 CET	443	49744	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:55.639602900 CET	49744	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:55.639643908 CET	443	49744	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:55.639740944 CET	443	49745	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:55.639904022 CET	49745	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:55.639935970 CET	443	49745	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:55.640683889 CET	443	49744	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:55.640750885 CET	49744	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:55.641262054 CET	443	49745	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:55.641319036 CET	49745	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:55.642069101 CET	49744	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:55.642152071 CET	443	49744	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:55.642411947 CET	49744	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:55.642429113 CET	443	49744	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:55.642560005 CET	49745	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:55.642683029 CET	443	49745	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:55.690792084 CET	49744	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:55.691364050 CET	49745	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:55.691374063 CET	443	49745	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:55.736960888 CET	49745	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:56.500794888 CET	49723	80	192.168.2.4	2.22.50.131
Dec 17, 2024 22:15:56.620775938 CET	80	49723	2.22.50.131	192.168.2.4
Dec 17, 2024 22:15:56.620892048 CET	49723	80	192.168.2.4	2.22.50.131
Dec 17, 2024 22:15:57.666408062 CET	443	49744	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:57.666438103 CET	443	49744	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:57.666480064 CET	443	49744	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:57.666501999 CET	443	49744	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:57.666522980 CET	443	49744	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:57.666544914 CET	49744	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:57.666579962 CET	443	49744	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:57.666600943 CET	49744	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:57.666629076 CET	49744	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:57.697379112 CET	49749	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:57.697438955 CET	443	49749	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:57.697510958 CET	49749	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:57.698508024 CET	49750	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:57.698612928 CET	443	49750	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:57.698685884 CET	49750	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:57.699213028 CET	49745	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:57.700045109 CET	49749	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:57.700061083 CET	443	49749	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:57.700552940 CET	49750	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:57.700568914 CET	443	49750	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:57.705355883 CET	49751	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:57.705372095 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:57.705456018 CET	49751	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:57.705790997 CET	49752	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:57.705827951 CET	443	49752	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:57.705893040 CET	49752	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:57.706854105 CET	49751	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:57.706867933 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:57.707034111 CET	49752	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:57.707046986 CET	443	49752	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:57.743331909 CET	443	49745	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:57.841773987 CET	49753	443	192.168.2.4	104.17.25.14
Dec 17, 2024 22:15:57.841829062 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:15:57.841895103 CET	49753	443	192.168.2.4	104.17.25.14
Dec 17, 2024 22:15:57.842221975 CET	49753	443	192.168.2.4	104.17.25.14
Dec 17, 2024 22:15:57.842233896 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:15:57.847754002 CET	443	49744	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:57.847784042 CET	443	49744	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:57.847857952 CET	49744	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:57.847889900 CET	443	49744	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:57.847935915 CET	49744	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:57.901242018 CET	443	49744	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:57.901267052 CET	443	49744	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:57.901463985 CET	49744	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:57.901495934 CET	443	49744	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:57.901607037 CET	49744	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:57.934935093 CET	49755	443	192.168.2.4	52.216.115.77
Dec 17, 2024 22:15:57.934976101 CET	443	49755	52.216.115.77	192.168.2.4
Dec 17, 2024 22:15:57.935292006 CET	49755	443	192.168.2.4	52.216.115.77
Dec 17, 2024 22:15:57.935530901 CET	49755	443	192.168.2.4	52.216.115.77
Dec 17, 2024 22:15:57.935549974 CET	443	49755	52.216.115.77	192.168.2.4
Dec 17, 2024 22:15:57.993465900 CET	49756	443	192.168.2.4	104.18.87.62
Dec 17, 2024 22:15:57.993499041 CET	443	49756	104.18.87.62	192.168.2.4
Dec 17, 2024 22:15:57.993573904 CET	49756	443	192.168.2.4	104.18.87.62
Dec 17, 2024 22:15:57.993928909 CET	49756	443	192.168.2.4	104.18.87.62
Dec 17, 2024 22:15:57.993941069 CET	443	49756	104.18.87.62	192.168.2.4
Dec 17, 2024 22:15:58.020314932 CET	443	49744	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:58.020340919 CET	443	49744	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:58.020463943 CET	49744	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:58.020482063 CET	443	49744	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:58.020539045 CET	49744	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:58.026501894 CET	443	49744	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:58.026597977 CET	443	49744	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:58.026602030 CET	49744	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:58.026696920 CET	49744	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:58.027266979 CET	49757	443	192.168.2.4	199.232.192.193
Dec 17, 2024 22:15:58.027370930 CET	443	49757	199.232.192.193	192.168.2.4
Dec 17, 2024 22:15:58.027461052 CET	49757	443	192.168.2.4	199.232.192.193
Dec 17, 2024 22:15:58.027507067 CET	49744	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:58.027524948 CET	443	49744	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:58.027826071 CET	49758	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:58.027884007 CET	443	49758	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:58.027955055 CET	49758	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:58.028619051 CET	49757	443	192.168.2.4	199.232.192.193
Dec 17, 2024 22:15:58.028637886 CET	443	49757	199.232.192.193	192.168.2.4
Dec 17, 2024 22:15:58.028922081 CET	49758	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:58.028929949 CET	443	49758	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:58.150780916 CET	443	49745	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:58.150841951 CET	443	49745	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:58.150913954 CET	49745	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:58.150945902 CET	443	49745	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:58.151021004 CET	443	49745	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:58.151082039 CET	49745	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:58.151755095 CET	49745	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:58.151770115 CET	443	49745	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:58.152321100 CET	49759	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:58.152354002 CET	443	49759	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:58.152431965 CET	49759	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:58.152935982 CET	49759	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:58.152951002 CET	443	49759	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:58.918734074 CET	443	49749	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:58.919076920 CET	49749	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:58.919106007 CET	443	49749	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:58.919163942 CET	443	49750	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:58.919353962 CET	49750	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:58.919370890 CET	443	49750	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:58.919653893 CET	443	49749	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:58.920013905 CET	49749	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:58.920113087 CET	443	49749	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:58.920137882 CET	49749	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:58.920713902 CET	443	49750	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:58.921009064 CET	49750	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:58.921092033 CET	49750	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:58.921097040 CET	443	49750	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:58.921426058 CET	443	49750	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:58.934266090 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:58.934489012 CET	49751	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:58.934499979 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:58.935563087 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:58.935627937 CET	443	49752	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:58.935635090 CET	49751	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:58.936199903 CET	49751	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:58.936266899 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:58.936358929 CET	49752	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:58.936377048 CET	443	49752	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:58.936451912 CET	49751	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:58.936460972 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:58.939951897 CET	443	49752	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:58.940062046 CET	49752	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:58.943238020 CET	49752	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:58.943367004 CET	49752	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:58.943371058 CET	443	49752	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:58.943455935 CET	443	49752	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:58.967334986 CET	443	49749	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:58.971333027 CET	49749	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:58.974025011 CET	49750	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:58.988836050 CET	49751	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:58.988837957 CET	49752	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:58.988862038 CET	443	49752	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:59.036863089 CET	49752	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:59.055212021 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:15:59.055486917 CET	49753	443	192.168.2.4	104.17.25.14
Dec 17, 2024 22:15:59.055505037 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:15:59.056485891 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:15:59.056543112 CET	49753	443	192.168.2.4	104.17.25.14
Dec 17, 2024 22:15:59.058254957 CET	49753	443	192.168.2.4	104.17.25.14
Dec 17, 2024 22:15:59.058325052 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:15:59.058763027 CET	49753	443	192.168.2.4	104.17.25.14
Dec 17, 2024 22:15:59.058770895 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:15:59.113581896 CET	49753	443	192.168.2.4	104.17.25.14
Dec 17, 2024 22:15:59.208154917 CET	443	49756	104.18.87.62	192.168.2.4
Dec 17, 2024 22:15:59.247898102 CET	443	49758	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:59.262736082 CET	49756	443	192.168.2.4	104.18.87.62
Dec 17, 2024 22:15:59.304845095 CET	49758	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:59.353861094 CET	443	49755	52.216.115.77	192.168.2.4
Dec 17, 2024 22:15:59.361183882 CET	49756	443	192.168.2.4	104.18.87.62
Dec 17, 2024 22:15:59.361215115 CET	443	49756	104.18.87.62	192.168.2.4
Dec 17, 2024 22:15:59.361377001 CET	49758	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:59.361413002 CET	443	49758	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:59.361572027 CET	49755	443	192.168.2.4	52.216.115.77
Dec 17, 2024 22:15:59.361598015 CET	443	49755	52.216.115.77	192.168.2.4
Dec 17, 2024 22:15:59.362281084 CET	443	49756	104.18.87.62	192.168.2.4
Dec 17, 2024 22:15:59.362294912 CET	443	49756	104.18.87.62	192.168.2.4
Dec 17, 2024 22:15:59.362349987 CET	49756	443	192.168.2.4	104.18.87.62
Dec 17, 2024 22:15:59.362360001 CET	443	49756	104.18.87.62	192.168.2.4
Dec 17, 2024 22:15:59.362426996 CET	49756	443	192.168.2.4	104.18.87.62
Dec 17, 2024 22:15:59.363579035 CET	443	49758	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:59.363603115 CET	443	49758	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:59.363636971 CET	49758	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:59.366118908 CET	443	49755	52.216.115.77	192.168.2.4
Dec 17, 2024 22:15:59.366226912 CET	49755	443	192.168.2.4	52.216.115.77
Dec 17, 2024 22:15:59.366249084 CET	443	49755	52.216.115.77	192.168.2.4
Dec 17, 2024 22:15:59.366300106 CET	49755	443	192.168.2.4	52.216.115.77
Dec 17, 2024 22:15:59.371200085 CET	443	49759	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:59.393260002 CET	443	49750	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:59.393455982 CET	443	49750	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:59.393517971 CET	49750	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:59.393878937 CET	443	49749	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:59.393913031 CET	443	49749	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:59.393922091 CET	443	49749	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:59.393975973 CET	49749	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:59.393990040 CET	443	49749	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:59.394038916 CET	49749	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:59.398870945 CET	49756	443	192.168.2.4	104.18.87.62
Dec 17, 2024 22:15:59.398957014 CET	443	49756	104.18.87.62	192.168.2.4
Dec 17, 2024 22:15:59.399214983 CET	49759	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:59.399230003 CET	443	49759	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:59.400341034 CET	443	49759	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:59.400403976 CET	49759	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:59.400703907 CET	49758	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:59.400893927 CET	443	49758	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:59.401727915 CET	49755	443	192.168.2.4	52.216.115.77
Dec 17, 2024 22:15:59.402045012 CET	443	49755	52.216.115.77	192.168.2.4
Dec 17, 2024 22:15:59.402760029 CET	49759	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:59.402826071 CET	443	49759	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:59.403287888 CET	49756	443	192.168.2.4	104.18.87.62
Dec 17, 2024 22:15:59.403301001 CET	443	49756	104.18.87.62	192.168.2.4
Dec 17, 2024 22:15:59.403362989 CET	49758	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:59.403377056 CET	443	49758	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:59.403646946 CET	49755	443	192.168.2.4	52.216.115.77
Dec 17, 2024 22:15:59.403656006 CET	443	49755	52.216.115.77	192.168.2.4
Dec 17, 2024 22:15:59.403714895 CET	49759	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:59.403723955 CET	443	49759	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:59.410101891 CET	49750	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:59.410128117 CET	443	49750	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:59.438631058 CET	49749	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:59.438652992 CET	443	49749	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:59.457007885 CET	49755	443	192.168.2.4	52.216.115.77
Dec 17, 2024 22:15:59.457035065 CET	49759	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:59.457036972 CET	49756	443	192.168.2.4	104.18.87.62
Dec 17, 2024 22:15:59.457040071 CET	49758	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:59.501482010 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:15:59.501523018 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:15:59.501555920 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:15:59.501569986 CET	49753	443	192.168.2.4	104.17.25.14
Dec 17, 2024 22:15:59.501581907 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:15:59.501617908 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:15:59.501645088 CET	49753	443	192.168.2.4	104.17.25.14
Dec 17, 2024 22:15:59.501671076 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:15:59.501708984 CET	49753	443	192.168.2.4	104.17.25.14
Dec 17, 2024 22:15:59.501723051 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:15:59.509648085 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:15:59.509723902 CET	49753	443	192.168.2.4	104.17.25.14
Dec 17, 2024 22:15:59.509757042 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:15:59.517976999 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:15:59.518028975 CET	49753	443	192.168.2.4	104.17.25.14
Dec 17, 2024 22:15:59.518053055 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:15:59.559546947 CET	443	49757	199.232.192.193	192.168.2.4
Dec 17, 2024 22:15:59.559864998 CET	49757	443	192.168.2.4	199.232.192.193
Dec 17, 2024 22:15:59.559900045 CET	443	49757	199.232.192.193	192.168.2.4
Dec 17, 2024 22:15:59.560877085 CET	443	49757	199.232.192.193	192.168.2.4
Dec 17, 2024 22:15:59.560934067 CET	49757	443	192.168.2.4	199.232.192.193
Dec 17, 2024 22:15:59.562340975 CET	49757	443	192.168.2.4	199.232.192.193
Dec 17, 2024 22:15:59.562407970 CET	443	49757	199.232.192.193	192.168.2.4
Dec 17, 2024 22:15:59.562724113 CET	49757	443	192.168.2.4	199.232.192.193
Dec 17, 2024 22:15:59.562733889 CET	443	49757	199.232.192.193	192.168.2.4
Dec 17, 2024 22:15:59.567524910 CET	49753	443	192.168.2.4	104.17.25.14
Dec 17, 2024 22:15:59.567533970 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:15:59.585141897 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:59.585164070 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:59.585171938 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:59.585196018 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:59.585206985 CET	49751	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:59.585227966 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:59.585239887 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:59.585258007 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:59.585283041 CET	49751	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:59.585283041 CET	49751	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:59.585298061 CET	49751	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:59.585298061 CET	49751	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:59.585309982 CET	49751	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:59.614865065 CET	49757	443	192.168.2.4	199.232.192.193
Dec 17, 2024 22:15:59.615472078 CET	49753	443	192.168.2.4	104.17.25.14
Dec 17, 2024 22:15:59.635468960 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:59.635494947 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:59.635550022 CET	49751	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:59.635561943 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:59.635605097 CET	49751	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:59.635605097 CET	49751	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:59.708600044 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:15:59.712498903 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:15:59.712583065 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:15:59.712743998 CET	49753	443	192.168.2.4	104.17.25.14
Dec 17, 2024 22:15:59.712781906 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:15:59.712829113 CET	49753	443	192.168.2.4	104.17.25.14
Dec 17, 2024 22:15:59.720444918 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:15:59.731481075 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:15:59.731553078 CET	49753	443	192.168.2.4	104.17.25.14
Dec 17, 2024 22:15:59.731564999 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:15:59.739466906 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:15:59.739522934 CET	49753	443	192.168.2.4	104.17.25.14
Dec 17, 2024 22:15:59.739533901 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:15:59.747598886 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:15:59.747631073 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:15:59.747694969 CET	49753	443	192.168.2.4	104.17.25.14
Dec 17, 2024 22:15:59.747706890 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:15:59.747832060 CET	49753	443	192.168.2.4	104.17.25.14
Dec 17, 2024 22:15:59.755420923 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:15:59.757819891 CET	443	49758	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:59.757917881 CET	443	49758	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:59.757976055 CET	49758	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:59.763525009 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:15:59.763596058 CET	49753	443	192.168.2.4	104.17.25.14
Dec 17, 2024 22:15:59.763607979 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:15:59.764267921 CET	443	49752	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:59.764456987 CET	443	49752	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:59.764519930 CET	49752	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:59.771375895 CET	443	49756	104.18.87.62	192.168.2.4
Dec 17, 2024 22:15:59.771445036 CET	443	49756	104.18.87.62	192.168.2.4
Dec 17, 2024 22:15:59.771466017 CET	443	49756	104.18.87.62	192.168.2.4
Dec 17, 2024 22:15:59.771502018 CET	49756	443	192.168.2.4	104.18.87.62
Dec 17, 2024 22:15:59.771509886 CET	443	49756	104.18.87.62	192.168.2.4
Dec 17, 2024 22:15:59.771528006 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:15:59.771553040 CET	49756	443	192.168.2.4	104.18.87.62
Dec 17, 2024 22:15:59.771558046 CET	443	49756	104.18.87.62	192.168.2.4
Dec 17, 2024 22:15:59.771572113 CET	443	49756	104.18.87.62	192.168.2.4
Dec 17, 2024 22:15:59.771580935 CET	49753	443	192.168.2.4	104.17.25.14
Dec 17, 2024 22:15:59.771600008 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:15:59.771610975 CET	49756	443	192.168.2.4	104.18.87.62
Dec 17, 2024 22:15:59.777935982 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:59.777956963 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:59.778054953 CET	49751	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:59.778084993 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:59.778157949 CET	49751	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:59.779434919 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:15:59.779485941 CET	49753	443	192.168.2.4	104.17.25.14
Dec 17, 2024 22:15:59.779495001 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:15:59.786840916 CET	49758	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:59.786863089 CET	443	49758	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:59.787060976 CET	49752	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:59.787091970 CET	443	49752	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:59.789011002 CET	49756	443	192.168.2.4	104.18.87.62
Dec 17, 2024 22:15:59.789025068 CET	443	49756	104.18.87.62	192.168.2.4
Dec 17, 2024 22:15:59.810250998 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:59.810273886 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:59.810372114 CET	49751	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:59.810399055 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:59.810445070 CET	49751	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:59.818850994 CET	443	49755	52.216.115.77	192.168.2.4
Dec 17, 2024 22:15:59.826035023 CET	49753	443	192.168.2.4	104.17.25.14
Dec 17, 2024 22:15:59.826054096 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:15:59.826931953 CET	443	49759	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:59.827158928 CET	443	49759	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:59.827178001 CET	443	49755	52.216.115.77	192.168.2.4
Dec 17, 2024 22:15:59.827195883 CET	443	49755	52.216.115.77	192.168.2.4
Dec 17, 2024 22:15:59.827231884 CET	49759	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:59.827264071 CET	49755	443	192.168.2.4	52.216.115.77
Dec 17, 2024 22:15:59.827280998 CET	443	49755	52.216.115.77	192.168.2.4
Dec 17, 2024 22:15:59.827292919 CET	443	49755	52.216.115.77	192.168.2.4
Dec 17, 2024 22:15:59.827332020 CET	49755	443	192.168.2.4	52.216.115.77
Dec 17, 2024 22:15:59.827703953 CET	49755	443	192.168.2.4	52.216.115.77
Dec 17, 2024 22:15:59.827714920 CET	443	49755	52.216.115.77	192.168.2.4
Dec 17, 2024 22:15:59.829746008 CET	49759	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:59.829765081 CET	443	49759	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:59.841128111 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:59.841147900 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:59.841214895 CET	49751	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:59.841240883 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:59.841280937 CET	49751	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:59.871726990 CET	49753	443	192.168.2.4	104.17.25.14
Dec 17, 2024 22:15:59.878096104 CET	443	49757	199.232.192.193	192.168.2.4
Dec 17, 2024 22:15:59.878164053 CET	443	49757	199.232.192.193	192.168.2.4
Dec 17, 2024 22:15:59.878247976 CET	443	49757	199.232.192.193	192.168.2.4
Dec 17, 2024 22:15:59.878281116 CET	49757	443	192.168.2.4	199.232.192.193
Dec 17, 2024 22:15:59.878298044 CET	49757	443	192.168.2.4	199.232.192.193
Dec 17, 2024 22:15:59.879520893 CET	49757	443	192.168.2.4	199.232.192.193
Dec 17, 2024 22:15:59.879543066 CET	443	49757	199.232.192.193	192.168.2.4
Dec 17, 2024 22:15:59.900667906 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:15:59.903279066 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:15:59.903372049 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:15:59.903476954 CET	49753	443	192.168.2.4	104.17.25.14
Dec 17, 2024 22:15:59.903490067 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:15:59.904045105 CET	49753	443	192.168.2.4	104.17.25.14
Dec 17, 2024 22:15:59.908516884 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:15:59.913813114 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:15:59.913897991 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:15:59.913988113 CET	49753	443	192.168.2.4	104.17.25.14
Dec 17, 2024 22:15:59.914000034 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:15:59.916430950 CET	49753	443	192.168.2.4	104.17.25.14
Dec 17, 2024 22:15:59.919276953 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:15:59.929265022 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:15:59.929275036 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:15:59.929351091 CET	49753	443	192.168.2.4	104.17.25.14
Dec 17, 2024 22:15:59.929363012 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:15:59.939516068 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:15:59.939587116 CET	49753	443	192.168.2.4	104.17.25.14
Dec 17, 2024 22:15:59.939595938 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:15:59.939712048 CET	49753	443	192.168.2.4	104.17.25.14
Dec 17, 2024 22:15:59.941157103 CET	49761	443	192.168.2.4	104.18.91.62
Dec 17, 2024 22:15:59.941195965 CET	443	49761	104.18.91.62	192.168.2.4
Dec 17, 2024 22:15:59.941262007 CET	49761	443	192.168.2.4	104.18.91.62
Dec 17, 2024 22:15:59.941468954 CET	49761	443	192.168.2.4	104.18.91.62
Dec 17, 2024 22:15:59.941479921 CET	443	49761	104.18.91.62	192.168.2.4
Dec 17, 2024 22:15:59.944428921 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:15:59.949680090 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:15:59.949748039 CET	49753	443	192.168.2.4	104.17.25.14
Dec 17, 2024 22:15:59.949755907 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:15:59.949858904 CET	49753	443	192.168.2.4	104.17.25.14
Dec 17, 2024 22:15:59.959625959 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:15:59.959634066 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:15:59.959716082 CET	49753	443	192.168.2.4	104.17.25.14
Dec 17, 2024 22:15:59.966761112 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:59.966787100 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:59.966881037 CET	49751	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:59.966907024 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:59.966955900 CET	49751	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:59.969801903 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:15:59.969811916 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:15:59.969866037 CET	49753	443	192.168.2.4	104.17.25.14
Dec 17, 2024 22:15:59.974889040 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:15:59.974975109 CET	49753	443	192.168.2.4	104.17.25.14
Dec 17, 2024 22:15:59.985095978 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:15:59.985176086 CET	49753	443	192.168.2.4	104.17.25.14
Dec 17, 2024 22:15:59.986666918 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:59.986689091 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:59.986752033 CET	49751	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:59.986768961 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:15:59.986814022 CET	49751	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:15:59.995455027 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:15:59.995548010 CET	49753	443	192.168.2.4	104.17.25.14
Dec 17, 2024 22:16:00.007930040 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:00.007953882 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:00.008080006 CET	49751	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:00.008095026 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:00.008148909 CET	49751	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:00.026104927 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:00.026124954 CET	49762	443	192.168.2.4	199.232.192.193
Dec 17, 2024 22:16:00.026128054 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:00.026168108 CET	443	49762	199.232.192.193	192.168.2.4
Dec 17, 2024 22:16:00.026182890 CET	49751	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:00.026199102 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:00.026226997 CET	49751	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:00.026257038 CET	49762	443	192.168.2.4	199.232.192.193
Dec 17, 2024 22:16:00.026279926 CET	49751	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:00.026478052 CET	49762	443	192.168.2.4	199.232.192.193
Dec 17, 2024 22:16:00.026492119 CET	443	49762	199.232.192.193	192.168.2.4
Dec 17, 2024 22:16:00.048655033 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:00.048675060 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:00.048753977 CET	49751	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:00.048769951 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:00.048813105 CET	49751	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:00.049514055 CET	443	49738	142.250.181.132	192.168.2.4
Dec 17, 2024 22:16:00.049597025 CET	443	49738	142.250.181.132	192.168.2.4
Dec 17, 2024 22:16:00.049659967 CET	49738	443	192.168.2.4	142.250.181.132
Dec 17, 2024 22:16:00.067040920 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:00.067070007 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:00.067219019 CET	49751	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:00.067279100 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:00.067337036 CET	49751	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:00.093983889 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:16:00.094049931 CET	49753	443	192.168.2.4	104.17.25.14
Dec 17, 2024 22:16:00.102233887 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:16:00.102296114 CET	49753	443	192.168.2.4	104.17.25.14
Dec 17, 2024 22:16:00.106645107 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:16:00.106690884 CET	49753	443	192.168.2.4	104.17.25.14
Dec 17, 2024 22:16:00.114547968 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:16:00.114625931 CET	49753	443	192.168.2.4	104.17.25.14
Dec 17, 2024 22:16:00.122143030 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:16:00.122200966 CET	49753	443	192.168.2.4	104.17.25.14
Dec 17, 2024 22:16:00.129508018 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:16:00.129568100 CET	49753	443	192.168.2.4	104.17.25.14
Dec 17, 2024 22:16:00.133389950 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:16:00.133455038 CET	49753	443	192.168.2.4	104.17.25.14
Dec 17, 2024 22:16:00.140377998 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:16:00.140453100 CET	49753	443	192.168.2.4	104.17.25.14
Dec 17, 2024 22:16:00.140464067 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:16:00.140499115 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:16:00.140542984 CET	49753	443	192.168.2.4	104.17.25.14
Dec 17, 2024 22:16:00.140677929 CET	49753	443	192.168.2.4	104.17.25.14
Dec 17, 2024 22:16:00.140693903 CET	443	49753	104.17.25.14	192.168.2.4
Dec 17, 2024 22:16:00.171998024 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:00.172029972 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:00.172101021 CET	49751	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:00.172132969 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:00.172183990 CET	49751	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:00.187400103 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:00.187417984 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:00.187475920 CET	49751	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:00.187489033 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:00.187545061 CET	49751	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:00.199876070 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:00.199892044 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:00.199943066 CET	49751	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:00.199949980 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:00.199981928 CET	49751	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:00.214188099 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:00.214204073 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:00.214272022 CET	49751	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:00.214277983 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:00.214318037 CET	49751	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:00.227540970 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:00.227559090 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:00.227596998 CET	49751	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:00.227603912 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:00.227633953 CET	49751	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:00.227653027 CET	49751	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:00.241935968 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:00.241956949 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:00.242022991 CET	49751	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:00.242029905 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:00.242093086 CET	49751	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:00.256278992 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:00.256298065 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:00.256351948 CET	49751	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:00.256361008 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:00.256397009 CET	49751	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:00.350822926 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:00.350851059 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:00.350895882 CET	49751	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:00.350909948 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:00.350966930 CET	49751	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:00.359679937 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:00.359697104 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:00.359749079 CET	49751	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:00.359755993 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:00.359795094 CET	49751	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:00.370114088 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:00.370127916 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:00.370188951 CET	49751	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:00.370194912 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:00.370412111 CET	49751	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:00.379982948 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:00.380004883 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:00.380062103 CET	49751	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:00.380081892 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:00.380120039 CET	49751	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:00.389364004 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:00.389384031 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:00.389430046 CET	49751	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:00.389441013 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:00.389489889 CET	49751	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:00.390721083 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:00.390777111 CET	49751	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:00.390784979 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:00.390805960 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:00.390827894 CET	49751	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:00.390855074 CET	49751	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:00.391170979 CET	49751	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:00.391190052 CET	443	49751	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:00.402111053 CET	49738	443	192.168.2.4	142.250.181.132
Dec 17, 2024 22:16:00.402156115 CET	443	49738	142.250.181.132	192.168.2.4
Dec 17, 2024 22:16:00.436063051 CET	49763	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:00.436127901 CET	443	49763	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:00.436206102 CET	49763	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:00.436467886 CET	49763	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:00.436475039 CET	443	49763	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:00.540435076 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:00.540491104 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:00.540560961 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:00.540747881 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:00.540766001 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:01.153794050 CET	443	49761	104.18.91.62	192.168.2.4
Dec 17, 2024 22:16:01.154112101 CET	49761	443	192.168.2.4	104.18.91.62
Dec 17, 2024 22:16:01.154126883 CET	443	49761	104.18.91.62	192.168.2.4
Dec 17, 2024 22:16:01.155131102 CET	443	49761	104.18.91.62	192.168.2.4
Dec 17, 2024 22:16:01.155210018 CET	49761	443	192.168.2.4	104.18.91.62
Dec 17, 2024 22:16:01.155219078 CET	443	49761	104.18.91.62	192.168.2.4
Dec 17, 2024 22:16:01.155265093 CET	49761	443	192.168.2.4	104.18.91.62
Dec 17, 2024 22:16:01.155622005 CET	49761	443	192.168.2.4	104.18.91.62
Dec 17, 2024 22:16:01.155683994 CET	443	49761	104.18.91.62	192.168.2.4
Dec 17, 2024 22:16:01.155761957 CET	49761	443	192.168.2.4	104.18.91.62
Dec 17, 2024 22:16:01.203334093 CET	443	49761	104.18.91.62	192.168.2.4
Dec 17, 2024 22:16:01.208292961 CET	49761	443	192.168.2.4	104.18.91.62
Dec 17, 2024 22:16:01.208301067 CET	443	49761	104.18.91.62	192.168.2.4
Dec 17, 2024 22:16:01.255553961 CET	49761	443	192.168.2.4	104.18.91.62
Dec 17, 2024 22:16:01.549526930 CET	443	49762	199.232.192.193	192.168.2.4
Dec 17, 2024 22:16:01.552406073 CET	49762	443	192.168.2.4	199.232.192.193
Dec 17, 2024 22:16:01.552421093 CET	443	49762	199.232.192.193	192.168.2.4
Dec 17, 2024 22:16:01.556126118 CET	443	49762	199.232.192.193	192.168.2.4
Dec 17, 2024 22:16:01.556214094 CET	49762	443	192.168.2.4	199.232.192.193
Dec 17, 2024 22:16:01.556607962 CET	49762	443	192.168.2.4	199.232.192.193
Dec 17, 2024 22:16:01.556751966 CET	49762	443	192.168.2.4	199.232.192.193
Dec 17, 2024 22:16:01.556783915 CET	443	49762	199.232.192.193	192.168.2.4
Dec 17, 2024 22:16:01.615427017 CET	49762	443	192.168.2.4	199.232.192.193
Dec 17, 2024 22:16:01.615438938 CET	443	49762	199.232.192.193	192.168.2.4
Dec 17, 2024 22:16:01.646356106 CET	443	49761	104.18.91.62	192.168.2.4
Dec 17, 2024 22:16:01.646461010 CET	443	49761	104.18.91.62	192.168.2.4
Dec 17, 2024 22:16:01.646507978 CET	443	49761	104.18.91.62	192.168.2.4
Dec 17, 2024 22:16:01.646522999 CET	49761	443	192.168.2.4	104.18.91.62
Dec 17, 2024 22:16:01.646542072 CET	443	49761	104.18.91.62	192.168.2.4
Dec 17, 2024 22:16:01.646620035 CET	443	49761	104.18.91.62	192.168.2.4
Dec 17, 2024 22:16:01.646671057 CET	49761	443	192.168.2.4	104.18.91.62
Dec 17, 2024 22:16:01.647763968 CET	49761	443	192.168.2.4	104.18.91.62
Dec 17, 2024 22:16:01.647777081 CET	443	49761	104.18.91.62	192.168.2.4
Dec 17, 2024 22:16:01.662069082 CET	49762	443	192.168.2.4	199.232.192.193
Dec 17, 2024 22:16:01.672292948 CET	443	49763	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:01.672547102 CET	49763	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:01.672559023 CET	443	49763	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:01.672926903 CET	443	49763	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:01.673238993 CET	49763	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:01.673304081 CET	443	49763	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:01.673360109 CET	49763	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:01.715339899 CET	443	49763	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:01.759147882 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:01.759417057 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:01.759453058 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:01.760530949 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:01.760605097 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:01.760936975 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:01.760999918 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:01.761082888 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:01.802453041 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:01.802475929 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:01.846595049 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:01.871364117 CET	443	49762	199.232.192.193	192.168.2.4
Dec 17, 2024 22:16:01.871561050 CET	443	49762	199.232.192.193	192.168.2.4
Dec 17, 2024 22:16:01.871628046 CET	49762	443	192.168.2.4	199.232.192.193
Dec 17, 2024 22:16:01.871643066 CET	443	49762	199.232.192.193	192.168.2.4
Dec 17, 2024 22:16:01.871762037 CET	443	49762	199.232.192.193	192.168.2.4
Dec 17, 2024 22:16:01.871819973 CET	49762	443	192.168.2.4	199.232.192.193
Dec 17, 2024 22:16:01.872253895 CET	49762	443	192.168.2.4	199.232.192.193
Dec 17, 2024 22:16:01.872267008 CET	443	49762	199.232.192.193	192.168.2.4
Dec 17, 2024 22:16:02.242666006 CET	443	49763	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:02.242748976 CET	443	49763	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:02.242826939 CET	49763	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:02.243510008 CET	49763	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:02.243525982 CET	443	49763	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:02.394119978 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:02.394151926 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:02.394159079 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:02.394191980 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:02.394210100 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:02.394218922 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:02.394249916 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:02.394273043 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:02.394303083 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:02.394325972 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:02.446685076 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:02.446712017 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:02.446811914 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:02.446834087 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:02.446883917 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:02.592447996 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:02.592478991 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:02.592617035 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:02.592668056 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:02.592719078 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:02.625541925 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:02.625588894 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:02.625673056 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:02.625711918 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:02.625741959 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:02.625768900 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:02.650723934 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:02.650772095 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:02.650855064 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:02.650887012 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:02.650902033 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:02.650934935 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:02.707607985 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:02.707659006 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:02.707734108 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:02.707782030 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:02.707799911 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:02.707837105 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:02.788533926 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:02.788615942 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:02.788625002 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:02.788657904 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:02.788692951 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:02.788717031 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:02.789952040 CET	49772	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:02.789982080 CET	443	49772	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:02.790045977 CET	49772	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:02.790237904 CET	49772	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:02.790250063 CET	443	49772	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:02.806154013 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:02.806212902 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:02.806272030 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:02.806299925 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:02.806330919 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:02.806350946 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:02.823244095 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:02.823437929 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:02.823448896 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:02.823468924 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:02.823503971 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:02.823529959 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:02.836728096 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:02.836775064 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:02.836826086 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:02.836833954 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:02.836883068 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:02.836883068 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:02.849642992 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:02.849685907 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:02.849735975 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:02.849759102 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:02.849776983 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:02.849808931 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:02.970468044 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:02.970510006 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:02.970591068 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:02.970624924 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:02.970746994 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:02.970746994 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:02.980513096 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:02.980545044 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:02.980619907 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:02.980637074 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:02.980787039 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:02.990221977 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:02.990262985 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:02.990324974 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:02.990345955 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:02.990375042 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:02.990391016 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:02.998362064 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:02.998420954 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:02.998445034 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:02.998452902 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:02.998486996 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:02.998500109 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:03.007955074 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:03.007998943 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:03.008048058 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:03.008057117 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:03.008088112 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:03.008104086 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:03.016755104 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:03.016793966 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:03.016921997 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:03.016933918 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:03.016988039 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:03.026274920 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:03.026309967 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:03.026505947 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:03.026540041 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:03.026599884 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:03.035722971 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:03.035748959 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:03.035845995 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:03.035857916 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:03.035995960 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:03.163326025 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:03.163367987 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:03.163485050 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:03.163523912 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:03.163577080 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:03.171649933 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:03.171681881 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:03.171760082 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:03.171767950 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:03.171822071 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:03.178893089 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:03.178925991 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:03.178986073 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:03.178993940 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:03.179018021 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:03.179039001 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:03.187278032 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:03.187324047 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:03.187369108 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:03.187380075 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:03.187407970 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:03.187433958 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:03.189481020 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:03.189568043 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:03.189579964 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:03.189596891 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:03.189630985 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:03.189661980 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:03.189745903 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:03.189764977 CET	443	49765	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:03.189778090 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:03.189811945 CET	49765	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:04.018078089 CET	443	49772	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:04.021317959 CET	49772	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:04.021352053 CET	443	49772	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:04.021720886 CET	443	49772	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:04.022125006 CET	49772	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:04.022190094 CET	443	49772	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:04.022253990 CET	49772	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:04.063327074 CET	443	49772	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:04.677208900 CET	443	49772	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:04.677238941 CET	443	49772	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:04.677320957 CET	443	49772	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:04.677344084 CET	49772	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:04.677392006 CET	49772	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:04.678512096 CET	49772	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:04.678539038 CET	443	49772	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:04.681874990 CET	49774	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:04.681911945 CET	443	49774	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:04.681987047 CET	49774	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:04.682234049 CET	49774	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:04.682246923 CET	443	49774	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:05.913008928 CET	443	49774	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:05.913341045 CET	49774	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:05.913373947 CET	443	49774	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:05.914539099 CET	443	49774	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:05.914885998 CET	49774	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:05.915000916 CET	49774	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:05.915074110 CET	443	49774	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:05.959371090 CET	49774	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:06.116563082 CET	49775	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:06.116600037 CET	443	49775	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:06.117016077 CET	49775	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:06.119330883 CET	49775	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:06.119344950 CET	443	49775	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:06.357278109 CET	443	49774	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:06.357336998 CET	443	49774	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:06.357490063 CET	49774	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:06.357492924 CET	443	49774	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:06.357552052 CET	49774	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:06.466880083 CET	49774	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:06.466914892 CET	443	49774	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:07.352438927 CET	443	49775	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:07.354681969 CET	49775	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:07.354697943 CET	443	49775	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:07.355894089 CET	443	49775	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:07.356213093 CET	49775	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:07.356354952 CET	49775	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:07.356359959 CET	443	49775	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:07.356386900 CET	443	49775	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:07.408751011 CET	49775	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:07.794358015 CET	443	49775	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:07.794459105 CET	443	49775	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:07.794522047 CET	49775	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:07.795002937 CET	49775	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:07.795023918 CET	443	49775	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:07.795033932 CET	49775	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:07.795073032 CET	49775	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:07.797972918 CET	49776	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:07.798016071 CET	443	49776	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:07.798085928 CET	49776	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:07.798315048 CET	49776	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:07.798327923 CET	443	49776	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:09.016668081 CET	443	49776	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:09.017024994 CET	49776	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:09.017051935 CET	443	49776	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:09.017554045 CET	443	49776	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:09.041861057 CET	49776	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:09.041990042 CET	443	49776	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:09.042026043 CET	49776	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:09.083338022 CET	443	49776	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:09.096790075 CET	49776	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:09.471237898 CET	443	49776	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:09.471468925 CET	443	49776	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:09.471525908 CET	49776	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:09.471947908 CET	49776	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:09.471971989 CET	443	49776	34.225.242.38	192.168.2.4
Dec 17, 2024 22:16:09.471982002 CET	49776	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:09.472035885 CET	49776	443	192.168.2.4	34.225.242.38
Dec 17, 2024 22:16:37.893687963 CET	49740	443	192.168.2.4	52.1.199.240
Dec 17, 2024 22:16:37.893724918 CET	443	49740	52.1.199.240	192.168.2.4
Dec 17, 2024 22:16:47.120774031 CET	443	49740	52.1.199.240	192.168.2.4
Dec 17, 2024 22:16:47.120862961 CET	443	49740	52.1.199.240	192.168.2.4
Dec 17, 2024 22:16:47.120925903 CET	49740	443	192.168.2.4	52.1.199.240
Dec 17, 2024 22:16:47.411106110 CET	49740	443	192.168.2.4	52.1.199.240
Dec 17, 2024 22:16:47.411129951 CET	443	49740	52.1.199.240	192.168.2.4
Dec 17, 2024 22:16:48.520339966 CET	49815	443	192.168.2.4	142.250.181.132
Dec 17, 2024 22:16:48.520390987 CET	443	49815	142.250.181.132	192.168.2.4
Dec 17, 2024 22:16:48.520463943 CET	49815	443	192.168.2.4	142.250.181.132
Dec 17, 2024 22:16:48.520704031 CET	49815	443	192.168.2.4	142.250.181.132
Dec 17, 2024 22:16:48.520715952 CET	443	49815	142.250.181.132	192.168.2.4
Dec 17, 2024 22:16:50.253004074 CET	443	49815	142.250.181.132	192.168.2.4
Dec 17, 2024 22:16:50.253492117 CET	49815	443	192.168.2.4	142.250.181.132
Dec 17, 2024 22:16:50.253525972 CET	443	49815	142.250.181.132	192.168.2.4
Dec 17, 2024 22:16:50.253921032 CET	443	49815	142.250.181.132	192.168.2.4
Dec 17, 2024 22:16:50.254271984 CET	49815	443	192.168.2.4	142.250.181.132
Dec 17, 2024 22:16:50.254337072 CET	443	49815	142.250.181.132	192.168.2.4
Dec 17, 2024 22:16:50.299858093 CET	49815	443	192.168.2.4	142.250.181.132
Dec 17, 2024 22:16:59.959737062 CET	443	49815	142.250.181.132	192.168.2.4
Dec 17, 2024 22:16:59.959821939 CET	443	49815	142.250.181.132	192.168.2.4
Dec 17, 2024 22:16:59.959881067 CET	49815	443	192.168.2.4	142.250.181.132
Dec 17, 2024 22:17:01.411230087 CET	49815	443	192.168.2.4	142.250.181.132
Dec 17, 2024 22:17:01.411268950 CET	443	49815	142.250.181.132	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 17, 2024 22:15:44.846110106 CET	53	53623	1.1.1.1	192.168.2.4
Dec 17, 2024 22:15:44.900698900 CET	53	52543	1.1.1.1	192.168.2.4
Dec 17, 2024 22:15:47.974786997 CET	53	54343	1.1.1.1	192.168.2.4
Dec 17, 2024 22:15:48.457818031 CET	62260	53	192.168.2.4	1.1.1.1
Dec 17, 2024 22:15:48.457986116 CET	57662	53	192.168.2.4	1.1.1.1
Dec 17, 2024 22:15:48.594717026 CET	53	62260	1.1.1.1	192.168.2.4
Dec 17, 2024 22:15:48.595166922 CET	53	57662	1.1.1.1	192.168.2.4
Dec 17, 2024 22:15:50.416490078 CET	49955	53	192.168.2.4	1.1.1.1
Dec 17, 2024 22:15:50.416970968 CET	57897	53	192.168.2.4	1.1.1.1
Dec 17, 2024 22:15:50.993503094 CET	53	57897	1.1.1.1	192.168.2.4
Dec 17, 2024 22:15:50.994043112 CET	53	49955	1.1.1.1	192.168.2.4
Dec 17, 2024 22:15:53.459800005 CET	60371	53	192.168.2.4	1.1.1.1
Dec 17, 2024 22:15:53.459986925 CET	63028	53	192.168.2.4	1.1.1.1
Dec 17, 2024 22:15:53.843111038 CET	53	60371	1.1.1.1	192.168.2.4
Dec 17, 2024 22:15:53.843403101 CET	53	63028	1.1.1.1	192.168.2.4
Dec 17, 2024 22:15:54.250313044 CET	138	138	192.168.2.4	192.168.2.255
Dec 17, 2024 22:15:57.703730106 CET	61051	53	192.168.2.4	1.1.1.1
Dec 17, 2024 22:15:57.703893900 CET	53351	53	192.168.2.4	1.1.1.1
Dec 17, 2024 22:15:57.704720974 CET	50994	53	192.168.2.4	1.1.1.1
Dec 17, 2024 22:15:57.704886913 CET	53595	53	192.168.2.4	1.1.1.1
Dec 17, 2024 22:15:57.840650082 CET	53	61051	1.1.1.1	192.168.2.4
Dec 17, 2024 22:15:57.840769053 CET	53	53351	1.1.1.1	192.168.2.4
Dec 17, 2024 22:15:57.845788002 CET	53	53390	1.1.1.1	192.168.2.4
Dec 17, 2024 22:15:57.847268105 CET	53	53595	1.1.1.1	192.168.2.4
Dec 17, 2024 22:15:57.851855993 CET	63953	53	192.168.2.4	1.1.1.1
Dec 17, 2024 22:15:57.852055073 CET	49612	53	192.168.2.4	1.1.1.1
Dec 17, 2024 22:15:57.852502108 CET	61648	53	192.168.2.4	1.1.1.1
Dec 17, 2024 22:15:57.852654934 CET	51932	53	192.168.2.4	1.1.1.1
Dec 17, 2024 22:15:57.934217930 CET	53	50994	1.1.1.1	192.168.2.4
Dec 17, 2024 22:15:57.989996910 CET	53	61648	1.1.1.1	192.168.2.4
Dec 17, 2024 22:15:57.992263079 CET	53	63953	1.1.1.1	192.168.2.4
Dec 17, 2024 22:15:57.992486954 CET	53	49612	1.1.1.1	192.168.2.4
Dec 17, 2024 22:15:58.059072971 CET	53	51932	1.1.1.1	192.168.2.4
Dec 17, 2024 22:15:59.793180943 CET	50222	53	192.168.2.4	1.1.1.1
Dec 17, 2024 22:15:59.793361902 CET	62520	53	192.168.2.4	1.1.1.1
Dec 17, 2024 22:15:59.885272980 CET	56329	53	192.168.2.4	1.1.1.1
Dec 17, 2024 22:15:59.885404110 CET	62437	53	192.168.2.4	1.1.1.1
Dec 17, 2024 22:15:59.929996967 CET	53	50222	1.1.1.1	192.168.2.4
Dec 17, 2024 22:15:59.939790964 CET	53	62520	1.1.1.1	192.168.2.4
Dec 17, 2024 22:16:00.023057938 CET	53	56329	1.1.1.1	192.168.2.4
Dec 17, 2024 22:16:00.025621891 CET	53	62437	1.1.1.1	192.168.2.4
Dec 17, 2024 22:16:00.402422905 CET	53846	53	192.168.2.4	1.1.1.1
Dec 17, 2024 22:16:00.402659893 CET	55787	53	192.168.2.4	1.1.1.1
Dec 17, 2024 22:16:00.539645910 CET	53	55787	1.1.1.1	192.168.2.4
Dec 17, 2024 22:16:00.539943933 CET	53	53846	1.1.1.1	192.168.2.4
Dec 17, 2024 22:16:04.877083063 CET	53	53035	1.1.1.1	192.168.2.4
Dec 17, 2024 22:16:23.860843897 CET	53	49570	1.1.1.1	192.168.2.4
Dec 17, 2024 22:16:44.555253029 CET	53	61850	1.1.1.1	192.168.2.4
Dec 17, 2024 22:16:46.491008997 CET	53	59923	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Dec 17, 2024 22:15:58.059170961 CET	192.168.2.4	1.1.1.1	c242	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 17, 2024 22:15:48.457818031 CET	192.168.2.4	1.1.1.1	0x2562	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:15:48.457986116 CET	192.168.2.4	1.1.1.1	0x3040	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 17, 2024 22:15:50.416490078 CET	192.168.2.4	1.1.1.1	0x9d9c	Standard query (0)	mail.donotreply.biz	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:15:50.416970968 CET	192.168.2.4	1.1.1.1	0x87b	Standard query (0)	mail.donotreply.biz	65	IN (0x0001)	false
Dec 17, 2024 22:15:53.459800005 CET	192.168.2.4	1.1.1.1	0x39c5	Standard query (0)	secured-login.net	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:15:53.459986925 CET	192.168.2.4	1.1.1.1	0x3d1b	Standard query (0)	secured-login.net	65	IN (0x0001)	false
Dec 17, 2024 22:15:57.703730106 CET	192.168.2.4	1.1.1.1	0x7565	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:15:57.703893900 CET	192.168.2.4	1.1.1.1	0x885a	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Dec 17, 2024 22:15:57.704720974 CET	192.168.2.4	1.1.1.1	0x13ff	Standard query (0)	s3.amazonaws.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:15:57.704886913 CET	192.168.2.4	1.1.1.1	0x524a	Standard query (0)	s3.amazonaws.com	65	IN (0x0001)	false
Dec 17, 2024 22:15:57.851855993 CET	192.168.2.4	1.1.1.1	0x6a5e	Standard query (0)	cdn2.hubspot.net	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:15:57.852055073 CET	192.168.2.4	1.1.1.1	0x5f7f	Standard query (0)	cdn2.hubspot.net	65	IN (0x0001)	false
Dec 17, 2024 22:15:57.852502108 CET	192.168.2.4	1.1.1.1	0xf6c	Standard query (0)	i.imgur.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:15:57.852654934 CET	192.168.2.4	1.1.1.1	0xf843	Standard query (0)	i.imgur.com	65	IN (0x0001)	false
Dec 17, 2024 22:15:59.793180943 CET	192.168.2.4	1.1.1.1	0x5706	Standard query (0)	cdn2.hubspot.net	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:15:59.793361902 CET	192.168.2.4	1.1.1.1	0xd44e	Standard query (0)	cdn2.hubspot.net	65	IN (0x0001)	false
Dec 17, 2024 22:15:59.885272980 CET	192.168.2.4	1.1.1.1	0xe987	Standard query (0)	i.imgur.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:15:59.885404110 CET	192.168.2.4	1.1.1.1	0xc861	Standard query (0)	i.imgur.com	65	IN (0x0001)	false
Dec 17, 2024 22:16:00.402422905 CET	192.168.2.4	1.1.1.1	0x826b	Standard query (0)	secured-login.net	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:16:00.402659893 CET	192.168.2.4	1.1.1.1	0x78	Standard query (0)	secured-login.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 17, 2024 22:15:48.594717026 CET	1.1.1.1	192.168.2.4	0x2562	No error (0)	www.google.com		142.250.181.132	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:15:48.595166922 CET	1.1.1.1	192.168.2.4	0x3040	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 17, 2024 22:15:50.994043112 CET	1.1.1.1	192.168.2.4	0x9d9c	No error (0)	mail.donotreply.biz		52.1.199.240	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:15:50.994043112 CET	1.1.1.1	192.168.2.4	0x9d9c	No error (0)	mail.donotreply.biz		34.225.242.38	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:15:50.994043112 CET	1.1.1.1	192.168.2.4	0x9d9c	No error (0)	mail.donotreply.biz		107.22.218.230	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:15:50.994043112 CET	1.1.1.1	192.168.2.4	0x9d9c	No error (0)	mail.donotreply.biz		3.228.205.88	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:15:50.994043112 CET	1.1.1.1	192.168.2.4	0x9d9c	No error (0)	mail.donotreply.biz		54.209.10.133	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:15:50.994043112 CET	1.1.1.1	192.168.2.4	0x9d9c	No error (0)	mail.donotreply.biz		52.45.73.21	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:15:53.843111038 CET	1.1.1.1	192.168.2.4	0x39c5	No error (0)	secured-login.net		34.225.242.38	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:15:53.843111038 CET	1.1.1.1	192.168.2.4	0x39c5	No error (0)	secured-login.net		107.22.218.230	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:15:53.843111038 CET	1.1.1.1	192.168.2.4	0x39c5	No error (0)	secured-login.net		52.1.199.240	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:15:53.843111038 CET	1.1.1.1	192.168.2.4	0x39c5	No error (0)	secured-login.net		54.209.10.133	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:15:53.843111038 CET	1.1.1.1	192.168.2.4	0x39c5	No error (0)	secured-login.net		3.228.205.88	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:15:53.843111038 CET	1.1.1.1	192.168.2.4	0x39c5	No error (0)	secured-login.net		52.45.73.21	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:15:57.840650082 CET	1.1.1.1	192.168.2.4	0x7565	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:15:57.840650082 CET	1.1.1.1	192.168.2.4	0x7565	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:15:57.840769053 CET	1.1.1.1	192.168.2.4	0x885a	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Dec 17, 2024 22:15:57.934217930 CET	1.1.1.1	192.168.2.4	0x13ff	No error (0)	s3.amazonaws.com		52.216.115.77	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:15:57.934217930 CET	1.1.1.1	192.168.2.4	0x13ff	No error (0)	s3.amazonaws.com		3.5.12.49	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:15:57.934217930 CET	1.1.1.1	192.168.2.4	0x13ff	No error (0)	s3.amazonaws.com		52.217.138.176	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:15:57.934217930 CET	1.1.1.1	192.168.2.4	0x13ff	No error (0)	s3.amazonaws.com		16.182.37.240	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:15:57.934217930 CET	1.1.1.1	192.168.2.4	0x13ff	No error (0)	s3.amazonaws.com		54.231.229.128	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:15:57.934217930 CET	1.1.1.1	192.168.2.4	0x13ff	No error (0)	s3.amazonaws.com		16.182.65.104	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:15:57.934217930 CET	1.1.1.1	192.168.2.4	0x13ff	No error (0)	s3.amazonaws.com		54.231.132.200	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:15:57.934217930 CET	1.1.1.1	192.168.2.4	0x13ff	No error (0)	s3.amazonaws.com		16.15.184.221	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:15:57.989996910 CET	1.1.1.1	192.168.2.4	0xf6c	No error (0)	i.imgur.com	ipv4.imgur.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 22:15:57.989996910 CET	1.1.1.1	192.168.2.4	0xf6c	No error (0)	ipv4.imgur.map.fastly.net		199.232.192.193	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:15:57.989996910 CET	1.1.1.1	192.168.2.4	0xf6c	No error (0)	ipv4.imgur.map.fastly.net		199.232.196.193	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:15:57.992263079 CET	1.1.1.1	192.168.2.4	0x6a5e	No error (0)	cdn2.hubspot.net		104.18.87.62	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:15:57.992263079 CET	1.1.1.1	192.168.2.4	0x6a5e	No error (0)	cdn2.hubspot.net		104.18.88.62	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:15:57.992263079 CET	1.1.1.1	192.168.2.4	0x6a5e	No error (0)	cdn2.hubspot.net		104.18.89.62	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:15:57.992263079 CET	1.1.1.1	192.168.2.4	0x6a5e	No error (0)	cdn2.hubspot.net		104.18.90.62	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:15:57.992263079 CET	1.1.1.1	192.168.2.4	0x6a5e	No error (0)	cdn2.hubspot.net		104.18.91.62	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:15:57.992486954 CET	1.1.1.1	192.168.2.4	0x5f7f	No error (0)	cdn2.hubspot.net			65	IN (0x0001)	false
Dec 17, 2024 22:15:58.059072971 CET	1.1.1.1	192.168.2.4	0xf843	No error (0)	i.imgur.com	ipv4.imgur.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 22:15:59.929996967 CET	1.1.1.1	192.168.2.4	0x5706	No error (0)	cdn2.hubspot.net		104.18.91.62	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:15:59.929996967 CET	1.1.1.1	192.168.2.4	0x5706	No error (0)	cdn2.hubspot.net		104.18.88.62	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:15:59.929996967 CET	1.1.1.1	192.168.2.4	0x5706	No error (0)	cdn2.hubspot.net		104.18.89.62	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:15:59.929996967 CET	1.1.1.1	192.168.2.4	0x5706	No error (0)	cdn2.hubspot.net		104.18.87.62	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:15:59.929996967 CET	1.1.1.1	192.168.2.4	0x5706	No error (0)	cdn2.hubspot.net		104.18.90.62	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:15:59.939790964 CET	1.1.1.1	192.168.2.4	0xd44e	No error (0)	cdn2.hubspot.net			65	IN (0x0001)	false
Dec 17, 2024 22:16:00.023057938 CET	1.1.1.1	192.168.2.4	0xe987	No error (0)	i.imgur.com	ipv4.imgur.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 22:16:00.023057938 CET	1.1.1.1	192.168.2.4	0xe987	No error (0)	ipv4.imgur.map.fastly.net		199.232.192.193	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:16:00.023057938 CET	1.1.1.1	192.168.2.4	0xe987	No error (0)	ipv4.imgur.map.fastly.net		199.232.196.193	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:16:00.025621891 CET	1.1.1.1	192.168.2.4	0xc861	No error (0)	i.imgur.com	ipv4.imgur.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 22:16:00.539943933 CET	1.1.1.1	192.168.2.4	0x826b	No error (0)	secured-login.net		34.225.242.38	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:16:00.539943933 CET	1.1.1.1	192.168.2.4	0x826b	No error (0)	secured-login.net		3.228.205.88	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:16:00.539943933 CET	1.1.1.1	192.168.2.4	0x826b	No error (0)	secured-login.net		52.1.199.240	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:16:00.539943933 CET	1.1.1.1	192.168.2.4	0x826b	No error (0)	secured-login.net		54.209.10.133	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:16:00.539943933 CET	1.1.1.1	192.168.2.4	0x826b	No error (0)	secured-login.net		107.22.218.230	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:16:00.539943933 CET	1.1.1.1	192.168.2.4	0x826b	No error (0)	secured-login.net		52.45.73.21	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

mail.donotreply.biz

https:

secured-login.net

cdnjs.cloudflare.com

cdn2.hubspot.net

s3.amazonaws.com

i.imgur.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49741	52.1.199.240	443	4296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:15:52 UTC	990	OUT	GET /XWW04VVZpU2JyWTFmVy96T2RUOUEvcEhyMWhFSm5uZElnVUlmb2dTZEdMRFdGSU1UV2V3S3RUNGdrNmNQRFJ4WTFPRHdYYlkraDV3S1YyVVpuU3E3K2p1bWowcEt3M24ySVBLanRDUkwyYitYWExuYTB5YlhVTUhySWZKbGJCTE9oRHl2RCtjR29BbEk3ZEwxZFJaNmNoK29ESk0vTGcxSmtyK0FWTExLWTdxYlQ1Yys1bjNiTUczY0RnPT0tLTU2R0pFM1VwZFRnVndZSWktLXptU2lWOHlQdjR0eGI1K09OQVZtRnc9PQ==?cid=2315575162 HTTP/1.1 Host: mail.donotreply.biz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 21:15:53 UTC	574	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 21:15:53 GMT Content-Type: text/html; charset=utf-8 Content-Length: 461 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 0 X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: no-referrer-when-downgrade ETag: W/"aa1293a3df253c859a1948732f75ea48" Cache-Control: max-age=0, private, must-revalidate Content-Security-Policy: X-Request-Id: c7250d7c-6a65-45a7-9002-633c9401973f X-Runtime: 0.119898 Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
2024-12-17 21:15:53 UTC	461	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 20 3d 20 27 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 64 2d 6c 6f 67 69 6e 2e 6e 65 74 2f 70 61 67 65 73 2f 35 62 36 65 32 64 38 37 39 36 31 62 2f 58 57 57 30 34 56 56 5a 70 55 32 4a 79 57 54 46 6d 56 79 39 36 54 32 52 55 4f 55 45 76 63 45 68 79 4d 57 68 46 53 6d 35 75 5a 45 6c 6e 56 55 6c 6d 62 32 64 54 5a 45 64 4d 52 46 64 47 53 55 31 55 56 32 56 33 53 33 52 55 4e 47 64 72 4e 6d 4e 51 52 46 4a 34 57 54 46 50 52 48 64 59 59 6c 6b 72 61 44 56 33 53 31 59 79 56 56 70 75 55 33 45 33 4b 32 70 31 62 57 6f 77 63 45 74 33 4d 32 34 79 53 56 42 4c 61 6e 52 44 55 6b 77 79 59 69 74 59 57 45 78 75 59 54 42 35 59 6c 68 Data Ascii: <html> <head> <script>window.location.href = 'https://secured-login.net/pages/5b6e2d87961b/XWW04VVZpU2JyWTFmVy96T2RUOUEvcEhyMWhFSm5uZElnVUlmb2dTZEdMRFdGSU1UV2V3S3RUNGdrNmNQRFJ4WTFPRHdYYlkraDV3S1YyVVpuU3E3K2p1bWowcEt3M24ySVBLanRDUkwyYitYWExuYTB5Ylh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49744	34.225.242.38	443	4296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:15:55 UTC	1345	OUT	GET /pages/5b6e2d87961b/XWW04VVZpU2JyWTFmVy96T2RUOUEvcEhyMWhFSm5uZElnVUlmb2dTZEdMRFdGSU1UV2V3S3RUNGdrNmNQRFJ4WTFPRHdYYlkraDV3S1YyVVpuU3E3K2p1bWowcEt3M24ySVBLanRDUkwyYitYWExuYTB5YlhVTUhySWZKbGJCTE9oRHl2RCtjR29BbEk3ZEwxZFJaNmNoK29ESk0vTGcxSmtyK0FWTExLWTdxYlQ1Yys1bjNiTUczY0RnPT0tLTU2R0pFM1VwZFRnVndZSWktLXptU2lWOHlQdjR0eGI1K09OQVZtRnc9PQ== HTTP/1.1 Host: secured-login.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://mail.donotreply.biz/XWW04VVZpU2JyWTFmVy96T2RUOUEvcEhyMWhFSm5uZElnVUlmb2dTZEdMRFdGSU1UV2V3S3RUNGdrNmNQRFJ4WTFPRHdYYlkraDV3S1YyVVpuU3E3K2p1bWowcEt3M24ySVBLanRDUkwyYitYWExuYTB5YlhVTUhySWZKbGJCTE9oRHl2RCtjR29BbEk3ZEwxZFJaNmNoK29ESk0vTGcxSmtyK0FWTExLWTdxYlQ1Yys1bjNiTUczY0RnPT0tLTU2R0pFM1VwZFRnVndZSWktLXptU2lWOHlQdjR0eGI1K09OQVZtRnc9PQ==?cid=2315575162 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 21:15:57 UTC	954	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 21:15:57 GMT Content-Type: text/html; charset=utf-8 Content-Length: 66775 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 0 X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: no-referrer-when-downgrade Link: </assets/landing-watermark-8487e36eef1bec74f06631f19fea0aa171c208e2976373cda5bd0a4b9e230903.css>; rel=preload; as=style; nopush,</assets/sei-styles-1837e0b6e1baaf1af90438028a176241b70a365a8a09ff4bf668cf3bf9e3c759.css>; rel=preload; as=style; nopush,</assets/application-237cb5c4f318687625f8ccf2f42de3fc20238bfe267384653491a6bba8c8f6f5.js>; rel=preload; as=script; nopush ETag: W/"8ba93f5109b32572b7d4aa92a704c39e" Cache-Control: max-age=0, private, must-revalidate Content-Security-Policy: X-Request-Id: a10a76b5-139b-4a56-8e8b-1fe238ddb262 X-Runtime: 1.522089 Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
2024-12-17 21:15:57 UTC	15430	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 0a 20 20 20 20 20 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0a 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 49 4d 50 4f 52 54 41 4e 54 22 20 63 6f 6e 74 65 6e 74 3d 22 54 68 69 73 20 70 61 67 65 20 69 73 20 70 61 72 74 20 6f 66 20 61 20 73 69 6d 75 6c 61 74 65 64 20 70 68 69 73 68 69 6e 67 20 61 74 74 61 63 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"> <meta name="IMPORTANT" content="This page is part of a simulated phishing attac
2024-12-17 21:15:57 UTC	16384	IN	Data Raw: 2e 36 35 2d 31 37 30 2e 32 38 2d 31 34 2e 39 2d 31 34 39 2e 38 36 2d 32 34 38 2e 33 34 63 31 38 2e 32 35 2d 32 31 31 2e 32 35 2c 35 33 2e 33 32 2d 31 36 37 2e 31 35 2c 37 30 2e 30 38 2d 31 34 38 2e 32 6c 34 2e 33 35 2d 33 36 2e 34 35 0a 09 09 09 09 09 63 33 2e 32 39 2d 32 36 2e 39 39 2c 36 37 2e 32 34 2d 31 39 2e 37 36 2c 36 35 2e 33 38 2c 31 2e 35 32 6c 33 2e 31 34 2d 33 33 2e 33 63 33 2e 33 33 2d 33 35 2e 33 38 2c 37 37 2e 32 37 2d 32 35 2e 31 38 2c 37 35 2e 36 39 2d 31 2e 37 37 6c 2d 32 2e 38 33 2c 34 35 2e 36 38 63 32 2e 39 34 2d 32 35 2e 36 32 2c 36 31 2e 34 2d 33 30 2e 33 2c 35 38 2e 38 38 2c 31 39 2e 38 34 0a 09 09 09 09 09 63 2d 36 2e 38 2c 37 37 2e 37 34 2d 31 34 2e 38 32 2c 31 36 31 2e 34 33 2d 31 37 2e 39 34 2c 31 38 36 2e 33 34 63 32 37 2e 31 Data Ascii: .65-170.28-14.9-149.86-248.34c18.25-211.25,53.32-167.15,70.08-148.2l4.35-36.45c3.29-26.99,67.24-19.76,65.38,1.52l3.14-33.3c3.33-35.38,77.27-25.18,75.69-1.77l-2.83,45.68c2.94-25.62,61.4-30.3,58.88,19.84c-6.8,77.74-14.82,161.43-17.94,186.34c27.1
2024-12-17 21:15:57 UTC	56	IN	Data Raw: e0 a5 87 20 e0 a4 b9 e0 a4 ae e0 a5 87 e0 a4 b6 e0 a4 be 20 e0 a4 a7 e0 a5 8d e2 80 8d e0 a4 af e0 a4 be e0 a4 a8 20 e0 a4 a6 e0 a5 87 e0 a4 82 21 3c 2f 73 70 61 6e 3e Data Ascii: !</span>
2024-12-17 21:15:57 UTC	16384	IN	Data Raw: 3c 2f 68 32 3e 0a 0a 09 09 09 3c 68 32 20 63 6c 61 73 73 3d 22 53 45 49 68 6f 76 65 72 22 20 74 6b 65 79 3d 22 53 45 49 68 6f 76 65 72 22 3e e0 a4 b5 e0 a4 bf e0 a4 b8 e0 a5 8d e0 a4 a4 e0 a5 83 e0 a4 a4 20 e0 a4 b8 e0 a5 82 e0 a4 9a e0 a4 a8 e0 a4 be 20 e0 a4 a6 e0 a5 87 e0 a4 96 e0 a4 a8 e0 a5 87 20 e0 a4 95 e0 a5 87 20 e0 a4 b2 e0 a4 bf e0 a4 8f 20 e0 a4 b2 e0 a4 be e0 a4 b2 20 e0 a4 a7 e0 a5 8d e0 a4 b5 e0 a4 9c e0 a5 8b e0 a4 82 20 e0 a4 aa e0 a4 b0 20 e0 a4 b9 e0 a5 8b e0 a4 b5 e0 a4 b0 20 e0 a4 95 e0 a4 b0 e0 a5 87 e0 a4 82 3a 3c 2f 68 32 3e 0a 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 3c 2f 73 65 63 74 69 6f 6e 3e 0a 0a 09 09 09 3c 73 65 63 74 69 6f 6e 20 63 6c 61 73 73 3d 22 6f 70 74 69 6f 6e 73 20 68 75 22 3e 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 Data Ascii: </h2><h2 class="SEIhover" tkey="SEIhover"> :</h2></div></section><section class="options hu"><div clas
2024-12-17 21:15:58 UTC	16384	IN	Data Raw: 64 65 20 65 6d 70 72 65 73 61 73 20 64 65 20 63 6f 6e 66 69 61 6e 7a 61 2e 3c 2f 73 70 61 6e 3e 3c 2f 70 3e 0a 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 3c 2f 73 65 63 74 69 6f 6e 3e 0a 0a 09 09 09 3c 73 65 63 74 69 6f 6e 20 63 6c 61 73 73 3d 22 6f 70 74 69 6f 6e 73 20 6d 78 22 3e 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 64 69 73 63 6c 61 69 6d 65 72 22 3e 0a 09 09 09 3c 70 20 74 6b 65 79 3d 22 64 69 73 63 6c 61 69 6d 65 72 2d 31 22 3e 54 65 6e 67 61 20 65 6e 20 63 75 65 6e 74 61 20 6c 6f 20 73 69 67 75 69 65 6e 74 65 3a 20 45 73 74 65 20 6d 65 6e 73 61 6a 65 20 70 72 6f 76 69 65 6e 65 20 64 65 20 4b 6e 6f 77 42 65 34 2c 20 49 6e 63 2e 20 4c 61 73 20 6f 72 67 61 6e 69 7a 61 63 69 6f 6e 65 73 20 61 20 6c 61 73 20 71 75 65 20 73 65 20 68 61 63 65 20 72 Data Ascii: de empresas de confianza.</span></p></div></section><section class="options mx"><div class="disclaimer"><p tkey="disclaimer-1">Tenga en cuenta lo siguiente: Este mensaje proviene de KnowBe4, Inc. Las organizaciones a las que se hace r
2024-12-17 21:15:58 UTC	2137	IN	Data Raw: 22 3e 52 65 70 6c 79 2d 74 6f 3a 26 6e 62 73 70 3b 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 20 48 65 6c 70 20 44 65 73 6b 20 26 6c 74 69 74 40 68 6f 6c 6c 6d 61 6e 2e 63 6f 6d 26 67 74 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 3e 3c 73 74 72 6f 6e 67 3e 53 75 62 6a 65 63 74 3a 26 6e 62 73 70 3b 3c 2f 73 74 72 6f 6e 67 3e 20 41 6e 6e 6f 75 6e 63 65 6d 65 6e 74 73 3c 2f 64 69 76 3e 0a 0a 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 77 61 74 65 72 6d 61 72 6b 20 74 6f 70 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 31 3e 43 52 32 33 31 35 35 37 35 31 36 32 3c 2f 68 31 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 6d 6f 64 61 6c 2d 62 6f 64 79 22 20 Data Ascii: ">Reply-to: </strong></span> Help Desk &ltit@hollman.com&gt</div> <div><strong>Subject: </strong> Announcements</div> </div> <div class="watermark top"> <h1>CR2315575162</h1> </div> <div id="modal-body"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49745	34.225.242.38	443	4296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:15:57 UTC	958	OUT	GET /assets/landing-watermark-8487e36eef1bec74f06631f19fea0aa171c208e2976373cda5bd0a4b9e230903.css HTTP/1.1 Host: secured-login.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://secured-login.net/pages/5b6e2d87961b/XWW04VVZpU2JyWTFmVy96T2RUOUEvcEhyMWhFSm5uZElnVUlmb2dTZEdMRFdGSU1UV2V3S3RUNGdrNmNQRFJ4WTFPRHdYYlkraDV3S1YyVVpuU3E3K2p1bWowcEt3M24ySVBLanRDUkwyYitYWExuYTB5YlhVTUhySWZKbGJCTE9oRHl2RCtjR29BbEk3ZEwxZFJaNmNoK29ESk0vTGcxSmtyK0FWTExLWTdxYlQ1Yys1bjNiTUczY0RnPT0tLTU2R0pFM1VwZFRnVndZSWktLXptU2lWOHlQdjR0eGI1K09OQVZtRnc9PQ== Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 21:15:58 UTC	263	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 21:15:58 GMT Content-Type: text/css Content-Length: 1471 Connection: close Last-Modified: Tue, 17 Dec 2024 18:56:58 GMT Vary: accept-encoding Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
2024-12-17 21:15:58 UTC	1471	IN	Data Raw: 2f 2a 20 6c 69 6e 65 20 31 2c 20 61 70 70 2f 61 73 73 65 74 73 2f 73 74 79 6c 65 73 68 65 65 74 73 2f 6c 61 6e 64 69 6e 67 2d 77 61 74 65 72 6d 61 72 6b 2e 73 63 73 73 20 2a 2f 0a 2e 77 61 74 65 72 6d 61 72 6b 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 77 72 69 74 69 6e 67 2d 6d 6f 64 65 3a 20 76 65 72 74 69 63 61 6c 2d 72 6c 3b 0a 20 20 20 20 20 20 2d 6d 73 2d 77 72 69 74 69 6e 67 2d 6d 6f 64 65 3a 20 74 62 2d 72 6c 3b 0a 20 20 20 20 20 20 20 20 20 20 77 72 69 74 69 6e 67 2d 6d 6f 64 65 3a 20 76 65 72 74 69 63 61 6c 2d 72 6c 3b 0a 20 20 74 65 78 74 2d 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 20 73 69 64 65 77 61 79 73 3b 0a 7d 0a 0a 2f 2a 20 6c 69 6e 65 20 34 2c 20 61 70 70 2f 61 73 73 65 74 73 2f 73 74 79 6c 65 73 68 65 65 74 73 2f 6c 61 6e 64 69 6e 67 2d 77 61 Data Ascii: /* line 1, app/assets/stylesheets/landing-watermark.scss /.watermark { -webkit-writing-mode: vertical-rl; -ms-writing-mode: tb-rl; writing-mode: vertical-rl; text-orientation: sideways;}/ line 4, app/assets/stylesheets/landing-wa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49749	34.225.242.38	443	4296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:15:58 UTC	951	OUT	GET /assets/sei-styles-1837e0b6e1baaf1af90438028a176241b70a365a8a09ff4bf668cf3bf9e3c759.css HTTP/1.1 Host: secured-login.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://secured-login.net/pages/5b6e2d87961b/XWW04VVZpU2JyWTFmVy96T2RUOUEvcEhyMWhFSm5uZElnVUlmb2dTZEdMRFdGSU1UV2V3S3RUNGdrNmNQRFJ4WTFPRHdYYlkraDV3S1YyVVpuU3E3K2p1bWowcEt3M24ySVBLanRDUkwyYitYWExuYTB5YlhVTUhySWZKbGJCTE9oRHl2RCtjR29BbEk3ZEwxZFJaNmNoK29ESk0vTGcxSmtyK0FWTExLWTdxYlQ1Yys1bjNiTUczY0RnPT0tLTU2R0pFM1VwZFRnVndZSWktLXptU2lWOHlQdjR0eGI1K09OQVZtRnc9PQ== Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 21:15:59 UTC	263	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 21:15:59 GMT Content-Type: text/css Content-Length: 5934 Connection: close Last-Modified: Tue, 17 Dec 2024 18:56:58 GMT Vary: accept-encoding Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
2024-12-17 21:15:59 UTC	5934	IN	Data Raw: 2f 2a 20 6c 69 6e 65 20 32 2c 20 61 70 70 2f 61 73 73 65 74 73 2f 73 74 79 6c 65 73 68 65 65 74 73 2f 73 65 69 2d 73 74 79 6c 65 73 2e 73 63 73 73 20 2a 2f 0a 78 2d 73 65 69 2e 73 65 69 2d 66 6c 61 67 20 7b 0a 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 32 70 78 20 73 6f 6c 69 64 20 74 6f 6d 61 74 6f 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 33 70 78 3b 0a 7d 0a 0a 2f 2a 20 6c 69 6e 65 20 36 2c 20 61 70 70 2f 61 73 73 65 74 73 2f 73 74 79 6c 65 73 68 65 65 74 73 2f 73 65 69 2d 73 74 79 6c 65 73 2e 73 63 73 73 20 2a 2f 0a 78 2d 73 65 69 2e 73 65 69 2d 66 6c 61 67 3a 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 27 20 27 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 62 61 63 6b 67 Data Ascii: /* line 2, app/assets/stylesheets/sei-styles.scss /x-sei.sei-flag { border-bottom: 2px solid tomato; padding-left: 3px;}/ line 6, app/assets/stylesheets/sei-styles.scss */x-sei.sei-flag::before { content: ' '; display: inline-block; backg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49750	34.225.242.38	443	4296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:15:58 UTC	958	OUT	GET /assets/landing-watermark-16f13e16a7ef02fb6f94250aa1931ded83dbee5d9fad278e33dd5792d085194f.css HTTP/1.1 Host: secured-login.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://secured-login.net/pages/5b6e2d87961b/XWW04VVZpU2JyWTFmVy96T2RUOUEvcEhyMWhFSm5uZElnVUlmb2dTZEdMRFdGSU1UV2V3S3RUNGdrNmNQRFJ4WTFPRHdYYlkraDV3S1YyVVpuU3E3K2p1bWowcEt3M24ySVBLanRDUkwyYitYWExuYTB5YlhVTUhySWZKbGJCTE9oRHl2RCtjR29BbEk3ZEwxZFJaNmNoK29ESk0vTGcxSmtyK0FWTExLWTdxYlQ1Yys1bjNiTUczY0RnPT0tLTU2R0pFM1VwZFRnVndZSWktLXptU2lWOHlQdjR0eGI1K09OQVZtRnc9PQ== Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 21:15:59 UTC	514	IN	HTTP/1.1 404 Not Found Date: Tue, 17 Dec 2024 21:15:59 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 9 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 0 X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Cache-Control: no-cache Content-Security-Policy: X-Request-Id: 273997f5-805f-40ee-a4b5-1b916dd324bb X-Runtime: 0.022598 Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
2024-12-17 21:15:59 UTC	9	IN	Data Raw: 6e 6f 74 20 66 6f 75 6e 64 Data Ascii: not found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49751	34.225.242.38	443	4296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:15:58 UTC	937	OUT	GET /assets/application-237cb5c4f318687625f8ccf2f42de3fc20238bfe267384653491a6bba8c8f6f5.js HTTP/1.1 Host: secured-login.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secured-login.net/pages/5b6e2d87961b/XWW04VVZpU2JyWTFmVy96T2RUOUEvcEhyMWhFSm5uZElnVUlmb2dTZEdMRFdGSU1UV2V3S3RUNGdrNmNQRFJ4WTFPRHdYYlkraDV3S1YyVVpuU3E3K2p1bWowcEt3M24ySVBLanRDUkwyYitYWExuYTB5YlhVTUhySWZKbGJCTE9oRHl2RCtjR29BbEk3ZEwxZFJaNmNoK29ESk0vTGcxSmtyK0FWTExLWTdxYlQ1Yys1bjNiTUczY0RnPT0tLTU2R0pFM1VwZFRnVndZSWktLXptU2lWOHlQdjR0eGI1K09OQVZtRnc9PQ== Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 21:15:59 UTC	279	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 21:15:59 GMT Content-Type: application/javascript Content-Length: 380848 Connection: close Last-Modified: Tue, 17 Dec 2024 18:56:58 GMT Vary: accept-encoding Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
2024-12-17 21:15:59 UTC	16105	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 37 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-12-17 21:15:59 UTC	16384	IN	Data Raw: 4e 61 6d 65 29 7d 2c 69 6e 70 75 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4e 2e 74 65 73 74 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7d 2c 62 75 74 74 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 65 28 65 2c 22 69 6e 70 75 74 22 29 26 26 22 62 75 74 74 6f 6e 22 3d 3d 3d 65 2e 74 79 70 65 7c 7c 66 65 28 65 2c 22 62 75 74 74 6f 6e 22 29 7d 2c 74 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 20 66 65 28 65 2c 22 69 6e 70 75 74 22 29 26 26 22 74 65 78 74 22 3d 3d 3d 65 2e 74 79 70 65 26 26 28 6e 75 6c 6c 3d 3d 28 74 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 29 29 7c 7c 22 74 65 78 74 22 3d 3d 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7d 2c 66 69 72 Data Ascii: Name)},input:function(e){return N.test(e.nodeName)},button:function(e){return fe(e,"input")&&"button"===e.type\|\|fe(e,"button")},text:function(e){var t;return fe(e,"input")&&"text"===e.type&&(null==(t=e.getAttribute("type"))\|\|"text"===t.toLowerCase())},fir
2024-12-17 21:15:59 UTC	56	IN	Data Raw: 28 65 2c 6e 29 7c 7c 5f 2e 61 63 63 65 73 73 28 65 2c 6e 2c 7b 65 6d 70 74 79 3a 63 65 2e 43 61 6c 6c 62 61 63 6b 73 28 22 6f 6e 63 65 20 6d 65 6d 6f 72 79 22 29 2e 61 Data Ascii: (e,n)\|\|_.access(e,n,{empty:ce.Callbacks("once memory").a
2024-12-17 21:15:59 UTC	16384	IN	Data Raw: 64 64 28 66 75 6e 63 74 69 6f 6e 28 29 7b 5f 2e 72 65 6d 6f 76 65 28 65 2c 5b 74 2b 22 71 75 65 75 65 22 2c 6e 5d 29 7d 29 7d 29 7d 7d 29 2c 63 65 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 71 75 65 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 65 3d 32 3b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 26 26 28 6e 3d 74 2c 74 3d 22 66 78 22 2c 65 2d 2d 29 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3c 65 3f 63 65 2e 71 75 65 75 65 28 74 68 69 73 5b 30 5d 2c 74 29 3a 76 6f 69 64 20 30 3d 3d 3d 6e 3f 74 68 69 73 3a 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 63 65 2e 71 75 65 75 65 28 74 68 69 73 2c 74 2c 6e 29 3b 63 65 2e 5f 71 75 65 75 65 48 6f 6f 6b 73 28 74 68 69 73 2c 74 29 Data Ascii: dd(function(){_.remove(e,[t+"queue",n])})})}}),ce.fn.extend({queue:function(t,n){var e=2;return"string"!=typeof t&&(n=t,t="fx",e--),arguments.length<e?ce.queue(this[0],t):void 0===n?this:this.each(function(){var e=ce.queue(this,t,n);ce._queueHooks(this,t)
2024-12-17 21:15:59 UTC	16384	IN	Data Raw: 74 68 69 73 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 63 65 2e 69 6e 41 72 72 61 79 28 74 68 69 73 2c 6e 29 3c 30 26 26 28 63 65 2e 63 6c 65 61 6e 44 61 74 61 28 53 65 28 74 68 69 73 29 29 2c 74 26 26 74 2e 72 65 70 6c 61 63 65 43 68 69 6c 64 28 65 2c 74 68 69 73 29 29 7d 2c 6e 29 7d 7d 29 2c 63 65 2e 65 61 63 68 28 7b 61 70 70 65 6e 64 54 6f 3a 22 61 70 70 65 6e 64 22 2c 70 72 65 70 65 6e 64 54 6f 3a 22 70 72 65 70 65 6e 64 22 2c 69 6e 73 65 72 74 42 65 66 6f 72 65 3a 22 62 65 66 6f 72 65 22 2c 69 6e 73 65 72 74 41 66 74 65 72 3a 22 61 66 74 65 72 22 2c 72 65 70 6c 61 63 65 41 6c 6c 3a 22 72 65 70 6c 61 63 65 57 69 74 68 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 61 29 7b 63 65 2e 66 6e 5b 65 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 Data Ascii: this.parentNode;ce.inArray(this,n)<0&&(ce.cleanData(Se(this)),t&&t.replaceChild(e,this))},n)}}),ce.each({appendTo:"append",prependTo:"prepend",insertBefore:"before",insertAfter:"after",replaceAll:"replaceWith"},function(e,a){ce.fn[e]=function(e){for(var t
2024-12-17 21:15:59 UTC	16384	IN	Data Raw: 28 72 3d 69 2e 73 65 74 28 65 2c 6e 2c 74 29 29 3f 72 3a 65 5b 74 5d 3d 6e 3a 69 26 26 22 67 65 74 22 69 6e 20 69 26 26 6e 75 6c 6c 21 3d 3d 28 72 3d 69 2e 67 65 74 28 65 2c 74 29 29 3f 72 3a 65 5b 74 5d 7d 2c 70 72 6f 70 48 6f 6f 6b 73 3a 7b 74 61 62 49 6e 64 65 78 3a 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 63 65 2e 66 69 6e 64 2e 61 74 74 72 28 65 2c 22 74 61 62 69 6e 64 65 78 22 29 3b 72 65 74 75 72 6e 20 74 3f 70 61 72 73 65 49 6e 74 28 74 2c 31 30 29 3a 62 74 2e 74 65 73 74 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7c 7c 77 74 2e 74 65 73 74 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 26 26 65 2e 68 72 65 66 3f 30 3a 2d 31 7d 7d 7d 2c 70 72 6f 70 46 69 78 3a 7b 22 66 6f 72 22 3a 22 68 74 6d 6c 46 6f 72 22 2c 22 63 6c 61 73 73 22 3a 22 Data Ascii: (r=i.set(e,n,t))?r:e[t]=n:i&&"get"in i&&null!==(r=i.get(e,t))?r:e[t]},propHooks:{tabIndex:{get:function(e){var t=ce.find.attr(e,"tabindex");return t?parseInt(t,10):bt.test(e.nodeName)\|\|wt.test(e.nodeName)&&e.href?0:-1}}},propFix:{"for":"htmlFor","class":"
2024-12-17 21:15:59 UTC	16384	IN	Data Raw: 65 66 69 6c 74 65 72 28 22 6a 73 6f 6e 20 6a 73 6f 6e 70 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 2c 61 3d 21 31 21 3d 3d 65 2e 6a 73 6f 6e 70 26 26 28 5a 74 2e 74 65 73 74 28 65 2e 75 72 6c 29 3f 22 75 72 6c 22 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 2e 64 61 74 61 26 26 30 3d 3d 3d 28 65 2e 63 6f 6e 74 65 6e 74 54 79 70 65 7c 7c 22 22 29 2e 69 6e 64 65 78 4f 66 28 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 22 29 26 26 5a 74 2e 74 65 73 74 28 65 2e 64 61 74 61 29 26 26 22 64 61 74 61 22 29 3b 69 66 28 61 7c 7c 22 6a 73 6f 6e 70 22 3d 3d 3d 65 2e 64 61 74 61 54 79 70 65 73 5b 30 5d 29 72 65 74 75 72 6e 20 72 3d 65 2e 6a 73 6f 6e 70 43 61 6c Data Ascii: efilter("json jsonp",function(e,t,n){var r,i,o,a=!1!==e.jsonp&&(Zt.test(e.url)?"url":"string"==typeof e.data&&0===(e.contentType\|\|"").indexOf("application/x-www-form-urlencoded")&&Zt.test(e.data)&&"data");if(a\|\|"jsonp"===e.dataTypes[0])return r=e.jsonpCal
2024-12-17 21:15:59 UTC	16384	IN	Data Raw: 74 65 72 22 2c 69 5b 31 5d 3d 6c 2e 74 65 73 74 28 69 5b 31 5d 29 3f 69 5b 31 5d 3a 22 63 65 6e 74 65 72 22 2c 74 3d 68 2e 65 78 65 63 28 69 5b 30 5d 29 2c 65 3d 68 2e 65 78 65 63 28 69 5b 31 5d 29 2c 77 5b 74 68 69 73 5d 3d 5b 74 3f 74 5b 30 5d 3a 30 2c 65 3f 65 5b 30 5d 3a 30 5d 2c 75 5b 74 68 69 73 5d 3d 5b 63 2e 65 78 65 63 28 69 5b 30 5d 29 5b 30 5d 2c 63 2e 65 78 65 63 28 69 5b 31 5d 29 5b 30 5d 5d 7d 29 2c 31 3d 3d 3d 79 2e 6c 65 6e 67 74 68 26 26 28 79 5b 31 5d 3d 79 5b 30 5d 29 2c 22 72 69 67 68 74 22 3d 3d 3d 75 2e 61 74 5b 30 5d 3f 6d 2e 6c 65 66 74 2b 3d 70 3a 22 63 65 6e 74 65 72 22 3d 3d 3d 75 2e 61 74 5b 30 5d 26 26 28 6d 2e 6c 65 66 74 2b 3d 70 2f 32 29 2c 22 62 6f 74 74 6f 6d 22 3d 3d 3d 75 2e 61 74 5b 31 5d 3f 6d 2e 74 6f 70 2b 3d 66 3a Data Ascii: ter",i[1]=l.test(i[1])?i[1]:"center",t=h.exec(i[0]),e=h.exec(i[1]),w[this]=[t?t[0]:0,e?e[0]:0],u[this]=[c.exec(i[0])[0],c.exec(i[1])[0]]}),1===y.length&&(y[1]=y[0]),"right"===u.at[0]?m.left+=p:"center"===u.at[0]&&(m.left+=p/2),"bottom"===u.at[1]?m.top+=f:
2024-12-17 21:16:00 UTC	16384	IN	Data Raw: 66 66 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 6f 66 66 73 65 74 50 61 72 65 6e 74 2e 6f 66 66 73 65 74 28 29 2c 65 3d 74 68 69 73 2e 64 6f 63 75 6d 65 6e 74 5b 30 5d 3b 72 65 74 75 72 6e 22 61 62 73 6f 6c 75 74 65 22 3d 3d 3d 74 68 69 73 2e 63 73 73 50 6f 73 69 74 69 6f 6e 26 26 74 68 69 73 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 5b 30 5d 21 3d 3d 65 26 26 56 2e 63 6f 6e 74 61 69 6e 73 28 74 68 69 73 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 5b 30 5d 2c 74 68 69 73 2e 6f 66 66 73 65 74 50 61 72 65 6e 74 5b 30 5d 29 26 26 28 74 2e 6c 65 66 74 2b 3d 74 68 69 73 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 2e 73 63 72 6f 6c 6c 4c 65 66 74 28 29 2c 74 2e 74 6f 70 2b 3d 74 68 69 73 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 2e 73 63 72 Data Ascii: ffset:function(){var t=this.offsetParent.offset(),e=this.document[0];return"absolute"===this.cssPosition&&this.scrollParent[0]!==e&&V.contains(this.scrollParent[0],this.offsetParent[0])&&(t.left+=this.scrollParent.scrollLeft(),t.top+=this.scrollParent.scr
2024-12-17 21:16:00 UTC	16384	IN	Data Raw: 74 2e 6f 66 66 73 65 74 28 29 2c 6e 5b 69 5d 2e 70 72 6f 70 6f 72 74 69 6f 6e 73 28 7b 77 69 64 74 68 3a 6e 5b 69 5d 2e 65 6c 65 6d 65 6e 74 5b 30 5d 2e 6f 66 66 73 65 74 57 69 64 74 68 2c 68 65 69 67 68 74 3a 6e 5b 69 5d 2e 65 6c 65 6d 65 6e 74 5b 30 5d 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7d 29 29 7d 7d 2c 64 72 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 3d 21 31 3b 72 65 74 75 72 6e 20 56 2e 65 61 63 68 28 28 56 2e 75 69 2e 64 64 6d 61 6e 61 67 65 72 2e 64 72 6f 70 70 61 62 6c 65 73 5b 74 2e 6f 70 74 69 6f 6e 73 2e 73 63 6f 70 65 5d 7c 7c 5b 5d 29 2e 73 6c 69 63 65 28 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6f 70 74 69 6f 6e 73 26 26 28 21 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 64 69 73 61 62 6c 65 64 26 26 74 68 Data Ascii: t.offset(),n[i].proportions({width:n[i].element[0].offsetWidth,height:n[i].element[0].offsetHeight}))}},drop:function(t,e){var i=!1;return V.each((V.ui.ddmanager.droppables[t.options.scope]\|\|[]).slice(),function(){this.options&&(!this.options.disabled&&th

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49752	34.225.242.38	443	4296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:15:58 UTC	937	OUT	GET /assets/application-3ab7c63a41a8761925d45817a71fb79e0ef7208b59de505ac640c8a2a183ec19.js HTTP/1.1 Host: secured-login.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secured-login.net/pages/5b6e2d87961b/XWW04VVZpU2JyWTFmVy96T2RUOUEvcEhyMWhFSm5uZElnVUlmb2dTZEdMRFdGSU1UV2V3S3RUNGdrNmNQRFJ4WTFPRHdYYlkraDV3S1YyVVpuU3E3K2p1bWowcEt3M24ySVBLanRDUkwyYitYWExuYTB5YlhVTUhySWZKbGJCTE9oRHl2RCtjR29BbEk3ZEwxZFJaNmNoK29ESk0vTGcxSmtyK0FWTExLWTdxYlQ1Yys1bjNiTUczY0RnPT0tLTU2R0pFM1VwZFRnVndZSWktLXptU2lWOHlQdjR0eGI1K09OQVZtRnc9PQ== Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 21:15:59 UTC	514	IN	HTTP/1.1 404 Not Found Date: Tue, 17 Dec 2024 21:15:59 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 9 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 0 X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Cache-Control: no-cache Content-Security-Policy: X-Request-Id: 218dfca7-a3f4-4199-ab84-a1e00e14a1a0 X-Runtime: 0.064116 Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
2024-12-17 21:15:59 UTC	9	IN	Data Raw: 6e 6f 74 20 66 6f 75 6e 64 Data Ascii: not found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49753	104.17.25.14	443	4296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:15:59 UTC	922	OUT	GET /ajax/libs/twitter-bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://secured-login.net/pages/5b6e2d87961b/XWW04VVZpU2JyWTFmVy96T2RUOUEvcEhyMWhFSm5uZElnVUlmb2dTZEdMRFdGSU1UV2V3S3RUNGdrNmNQRFJ4WTFPRHdYYlkraDV3S1YyVVpuU3E3K2p1bWowcEt3M24ySVBLanRDUkwyYitYWExuYTB5YlhVTUhySWZKbGJCTE9oRHl2RCtjR29BbEk3ZEwxZFJaNmNoK29ESk0vTGcxSmtyK0FWTExLWTdxYlQ1Yys1bjNiTUczY0RnPT0tLTU2R0pFM1VwZFRnVndZSWktLXptU2lWOHlQdjR0eGI1K09OQVZtRnc9PQ== Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 21:15:59 UTC	954	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 21:15:59 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb04010-1d970" Last-Modified: Mon, 04 May 2020 16:17:20 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 1691264 Expires: Sun, 07 Dec 2025 21:15:59 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vqdusWLGNjGvSiTls5LszrHmQVBpbVgg047XyPvXBtiBghHMAV%2BeaMgVuwMG50%2BavG7BtmvQSZshjw%2B7atnO9DLwMpj79vCbHSF%2Bmu4Aibxm%2BJ%2F4u3cj%2Fc7ts0ik5PMT6SNZT3Lg"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8f39ee7ffc251a30-EWR alt-svc: h3=":443"; ma=86400
2024-12-17 21:15:59 UTC	415	IN	Data Raw: 37 62 66 36 0d 0a 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 33 2e 37 20 28 68 74 74 70 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 36 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 33 2e 30 2e 33 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 6e 65 63 6f 6c 61 73 2f 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 2a 2f 68 74 6d 6c 7b Data Ascii: 7bf6/! Bootstrap v3.3.7 (http://getbootstrap.com) * Copyright 2011-2016 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) //! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css */html{
2024-12-17 21:15:59 UTC	1369	IN	Data Raw: 65 6e 75 2c 6e 61 76 2c 73 65 63 74 69 6f 6e 2c 73 75 6d 6d 61 72 79 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 61 75 64 69 6f 2c 63 61 6e 76 61 73 2c 70 72 6f 67 72 65 73 73 2c 76 69 64 65 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 7d 61 75 64 69 6f 3a 6e 6f 74 28 5b 63 6f 6e 74 72 6f 6c 73 5d 29 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 68 65 69 67 68 74 3a 30 7d 5b 68 69 64 64 65 6e 5d 2c 74 65 6d 70 6c 61 74 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 61 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 61 3a 61 63 74 69 76 65 2c 61 3a 68 6f 76 65 72 7b 6f 75 74 6c 69 6e 65 3a 30 7d 61 62 62 72 5b 74 69 74 6c 65 5d Data Ascii: enu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background-color:transparent}a:active,a:hover{outline:0}abbr[title]
2024-12-17 21:15:59 UTC	1369	IN	Data Raw: 6f 6e 7b 68 65 69 67 68 74 3a 61 75 74 6f 7d 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 74 65 78 74 66 69 65 6c 64 7d 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 3a 3a 2d 77 65 62 6b 69 74 2d 73 65 61 72 63 68 2d 63 61 6e 63 65 6c 2d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 3a 3a 2d 77 65 62 6b 69 74 2d 73 65 61 72 63 68 2d 64 65 63 6f 72 61 74 69 6f 6e 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 Data Ascii: on{height:auto}input[type=search]{-webkit-box-sizing:content-box;-moz-box-sizing:content-box;box-sizing:content-box;-webkit-appearance:textfield}input[type=search]::-webkit-search-cancel-button,input[type=search]::-webkit-search-decoration{-webkit-appeara
2024-12-17 21:15:59 UTC	1369	IN	Data Raw: 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 64 64 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 47 6c 79 70 68 69 63 6f 6e 73 20 48 61 6c 66 6c 69 6e 67 73 27 3b 73 72 63 3a 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 67 6c 79 70 68 69 63 6f 6e 73 2d 68 61 6c 66 6c 69 6e 67 73 2d 72 65 67 75 6c 61 72 2e 65 6f 74 29 3b 73 72 63 3a 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 67 6c 79 70 68 69 63 6f 6e 73 2d 68 61 6c 66 6c 69 6e 67 73 2d 72 65 67 75 6c 61 72 2e 65 6f 74 3f 23 69 65 66 69 78 29 20 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 27 29 2c 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 67 6c 79 70 68 69 63 6f 6e 73 2d 68 61 6c 66 6c 69 6e 67 73 2d 72 65 67 75 6c 61 72 2e 77 Data Ascii: er:1px solid #ddd!important}}@font-face{font-family:'Glyphicons Halflings';src:url(../fonts/glyphicons-halflings-regular.eot);src:url(../fonts/glyphicons-halflings-regular.eot?#iefix) format('embedded-opentype'),url(../fonts/glyphicons-halflings-regular.w
2024-12-17 21:15:59 UTC	1369	IN	Data Raw: 3a 22 5c 65 30 31 30 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 31 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 68 2d 6c 69 73 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 32 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6f 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 33 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 72 65 6d 6f 76 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 34 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 7a 6f 6f 6d 2d 69 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 7a 6f 6f 6d 2d 6f 75 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 36 22 7d 2e 67 6c 79 Data Ascii: :"\e010"}.glyphicon-th:before{content:"\e011"}.glyphicon-th-list:before{content:"\e012"}.glyphicon-ok:before{content:"\e013"}.glyphicon-remove:before{content:"\e014"}.glyphicon-zoom-in:before{content:"\e015"}.glyphicon-zoom-out:before{content:"\e016"}.gly
2024-12-17 21:15:59 UTC	1369	IN	Data Raw: 68 69 63 6f 6e 2d 62 6f 6f 6b 6d 61 72 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 34 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 70 72 69 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 61 6d 65 72 61 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 36 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 6f 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 37 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 62 6f 6c 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 38 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 69 74 61 6c 69 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 39 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 65 78 74 2d 68 Data Ascii: hicon-bookmark:before{content:"\e044"}.glyphicon-print:before{content:"\e045"}.glyphicon-camera:before{content:"\e046"}.glyphicon-font:before{content:"\e047"}.glyphicon-bold:before{content:"\e048"}.glyphicon-italic:before{content:"\e049"}.glyphicon-text-h
2024-12-17 21:15:59 UTC	1369	IN	Data Raw: 6c 79 70 68 69 63 6f 6e 2d 73 74 65 70 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 37 37 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 65 6a 65 63 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 37 38 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 37 39 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 38 30 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 70 6c 75 73 2d 73 69 67 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 38 31 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6d 69 6e 75 73 2d 73 69 67 6e 3a 62 65 66 6f 72 65 7b 63 6f Data Ascii: lyphicon-step-forward:before{content:"\e077"}.glyphicon-eject:before{content:"\e078"}.glyphicon-chevron-left:before{content:"\e079"}.glyphicon-chevron-right:before{content:"\e080"}.glyphicon-plus-sign:before{content:"\e081"}.glyphicon-minus-sign:before{co
2024-12-17 21:15:59 UTC	1369	IN	Data Raw: 31 30 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 6f 6d 6d 65 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 31 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6d 61 67 6e 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 32 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 33 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 34 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 72 65 74 77 65 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 73 68 6f 70 70 69 6e 67 2d 63 61 72 74 3a 62 65 66 6f 72 65 7b 63 6f Data Ascii: 10"}.glyphicon-comment:before{content:"\e111"}.glyphicon-magnet:before{content:"\e112"}.glyphicon-chevron-up:before{content:"\e113"}.glyphicon-chevron-down:before{content:"\e114"}.glyphicon-retweet:before{content:"\e115"}.glyphicon-shopping-cart:before{co
2024-12-17 21:15:59 UTC	1369	IN	Data Raw: 6f 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 31 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 70 61 70 65 72 63 6c 69 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 32 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 68 65 61 72 74 2d 65 6d 70 74 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 33 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6c 69 6e 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 34 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 70 68 6f 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 70 75 73 68 70 69 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 36 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 75 73 64 3a 62 Data Ascii: oard:before{content:"\e141"}.glyphicon-paperclip:before{content:"\e142"}.glyphicon-heart-empty:before{content:"\e143"}.glyphicon-link:before{content:"\e144"}.glyphicon-phone:before{content:"\e145"}.glyphicon-pushpin:before{content:"\e146"}.glyphicon-usd:b
2024-12-17 21:15:59 UTC	1369	IN	Data Raw: 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 37 33 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 6c 6f 70 70 79 2d 72 65 6d 6f 76 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 37 34 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 6c 6f 70 70 79 2d 73 61 76 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 37 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 6c 6f 70 70 79 2d 6f 70 65 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 37 36 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 72 65 64 69 74 2d 63 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 37 37 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 72 61 6e 73 66 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 37 38 22 7d 2e 67 6c 79 70 Data Ascii: fore{content:"\e173"}.glyphicon-floppy-remove:before{content:"\e174"}.glyphicon-floppy-save:before{content:"\e175"}.glyphicon-floppy-open:before{content:"\e176"}.glyphicon-credit-card:before{content:"\e177"}.glyphicon-transfer:before{content:"\e178"}.glyp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49756	104.18.87.62	443	4296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:15:59 UTC	954	OUT	GET /hubfs/241394/html_file/files/img/KB4-logo.png HTTP/1.1 Host: cdn2.hubspot.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secured-login.net/pages/5b6e2d87961b/XWW04VVZpU2JyWTFmVy96T2RUOUEvcEhyMWhFSm5uZElnVUlmb2dTZEdMRFdGSU1UV2V3S3RUNGdrNmNQRFJ4WTFPRHdYYlkraDV3S1YyVVpuU3E3K2p1bWowcEt3M24ySVBLanRDUkwyYitYWExuYTB5YlhVTUhySWZKbGJCTE9oRHl2RCtjR29BbEk3ZEwxZFJaNmNoK29ESk0vTGcxSmtyK0FWTExLWTdxYlQ1Yys1bjNiTUczY0RnPT0tLTU2R0pFM1VwZFRnVndZSWktLXptU2lWOHlQdjR0eGI1K09OQVZtRnc9PQ== Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 21:15:59 UTC	1331	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 21:15:59 GMT Content-Type: image/webp Content-Length: 2368 Connection: close CF-Ray: 8f39ee816f0df78f-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 293028 Cache-Control: s-maxage=2592000, max-age=1209600, stale-while-revalidate=900 Content-Disposition: inline; filename="KB4-logo.webp" ETag: "ddf47be00ad3eebaabd63fec4c5733f2" Last-Modified: Fri, 29 Mar 2024 19:46:11 GMT Vary: Accept Via: 1.1 dd462bc6996e0000e9b2cde9e1f25e20.cloudfront.net (CloudFront) Access-Control-Allow-Methods: GET cache-tag: F-3711502880,FD-3711502755,P-241394,FLS-ALL Cf-Bgj: imgq:85,h2pri Cf-Polished: origFmt=png, origSize=3873 Edge-Cache-Tag: F-3711502880,FD-3711502755,P-241394,FLS-ALL Timing-Allow-Origin: cdn2.hubspot.net X-Amz-Cf-Id: QKqrrk-o8hm4YOAc5hd22S53yFm2LEefdoJC-8A90IP2gpZ2suQ3fg== X-Amz-Cf-Pop: BOS50-P1 x-amz-id-2: jJtNu4bygFgZzqCYwDHQJVMDWNLrbBdcG7C+9mPmBg6z1SbJnfrVy8hgqaOpvZ3rFjX7G28zb3o= x-amz-meta-access-tag: public-not-indexable x-amz-meta-cache-tag: F-3711502880,FD-3711502755,P-241394,FLS-ALL x-amz-meta-created-unix-time-millis: 1447343595191 x-amz-meta-index-tag: none x-amz-replication-status: COMPLETED x-amz-request-id: 5T65YXZ9JEV92BRD x-amz-server-side-encryption: AES256 x-amz-storage-class: INTELLIGENT_TIERING
2024-12-17 21:15:59 UTC	857	IN	Data Raw: 78 2d 61 6d 7a 2d 76 65 72 73 69 6f 6e 2d 69 64 3a 20 47 4f 75 41 4a 7a 41 31 2e 62 6f 31 76 6a 6f 74 5f 48 73 71 30 6f 77 45 59 39 38 58 6a 59 48 39 0d 0a 58 2d 43 61 63 68 65 3a 20 52 65 66 72 65 73 68 48 69 74 20 66 72 6f 6d 20 63 6c 6f 75 64 66 72 6f 6e 74 0d 0a 58 2d 48 53 2d 43 46 2d 4c 61 6d 62 64 61 3a 20 75 73 2d 65 61 73 74 2d 31 2e 45 6e 66 6f 72 63 65 41 63 6c 46 6f 72 52 65 61 64 73 20 33 0d 0a 58 2d 48 53 2d 43 46 2d 4c 61 6d 62 64 61 2d 45 6e 66 6f 72 63 65 3a 20 75 73 2d 65 61 73 74 2d 31 2e 45 6e 66 6f 72 63 65 41 63 6c 46 6f 72 52 65 61 64 73 20 33 0d 0a 58 2d 52 6f 62 6f 74 73 2d 54 61 67 3a 20 6e 6f 6e 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 77 39 32 5a 6b 5a 69 77 58 48 39 76 6e 5a 45 61 48 5f 6b 7a 6f 66 Data Ascii: x-amz-version-id: GOuAJzA1.bo1vjot_Hsq0owEY98XjYH9X-Cache: RefreshHit from cloudfrontX-HS-CF-Lambda: us-east-1.EnforceAclForReads 3X-HS-CF-Lambda-Enforce: us-east-1.EnforceAclForReads 3X-Robots-Tag: noneSet-Cookie: __cf_bm=w92ZkZiwXH9vnZEaH_kzof
2024-12-17 21:15:59 UTC	550	IN	Data Raw: 52 49 46 46 38 09 00 00 57 45 42 50 56 50 38 4c 2c 09 00 00 2f c7 40 09 10 e2 30 90 b6 4d e3 5f f8 77 07 11 31 01 e9 57 56 61 55 0f 57 2c 4b db b6 fe 6d 93 a3 7d bc 4a da 5d 8f 80 97 3d 83 ee 3a 5d f7 44 7a 0e 3d 80 9e 01 fd 7e bf ef f7 fd ff 1e 4d b7 4f c9 50 6e 65 58 28 0c e6 e0 bf 0c f2 84 99 93 7f 33 d6 34 cc cc cc cc 8c 8a 03 0a 93 1c 86 3b 8c 66 3b 9c 98 49 32 d3 df 4c 1a cf fc b3 89 24 5b 4a ff 1f df f9 77 41 91 61 00 1d e4 97 05 2c e1 04 11 d8 40 02 24 db a6 5d d9 b6 6d db b6 6d db b6 6d db b6 ed a4 6c db 4e be 6d 63 4f 00 d4 6c db 96 2d db fe b8 bb 5b 74 a9 ae dd 35 b9 bb d3 dc 2d b9 25 97 01 fe 01 d8 82 41 1c 66 20 f9 0a 44 16 60 02 5f 40 2b c7 71 b5 3f fd 03 e0 f5 e9 38 0c d0 7f 28 b6 b5 2d ab 5e dc 69 96 2c b9 0e c0 5d 66 a0 c9 61 0c d0 a0 d1 Data Ascii: RIFF8WEBPVP8L,/@0M_w1WVaUW,Km}J]=:]Dz=~MOPneX(34;f;I2L$[JwAa,@$]mmmlNmcOl-[t5-%Af D`_@+q?8(-^i,]fa
2024-12-17 21:15:59 UTC	1369	IN	Data Raw: 58 7d d5 5b 38 48 31 3b 54 21 2b 02 85 93 a6 48 94 81 8a 52 d9 2a b5 49 e9 5c 91 af 66 9a ea 56 c0 07 50 c0 53 c0 fe 2b 8c ac 9a 6d ae c8 73 c5 36 35 39 46 6c 53 13 49 f9 02 eb e4 50 68 db 29 ef 8e aa f4 e5 87 cb 17 47 68 56 d7 a0 76 2b b1 9a d5 26 a0 0c 1d dc 06 9a 6c df b6 9e fa 4b ea 8e aa 5e 51 86 29 94 ff ab 37 04 aa 17 9b 35 a6 3c a7 fe c3 d5 61 93 00 25 1f 74 0a a0 a8 e3 3c 0f 28 a3 a0 99 fd d5 3b 32 cf af 6e cc a3 c2 81 b7 1d 4b 95 01 1f 39 97 4a b1 42 7f 99 d0 b3 a6 4c 66 c0 f6 e4 54 1b 8a 21 61 b5 02 28 f2 90 f9 00 aa 30 48 8d c0 9f 1d 45 31 aa 9f f0 8c c2 0e 51 6e ea 2b c1 6a eb e3 b0 99 ea 0b a8 76 c7 52 36 c0 31 47 e6 eb 3f 42 cd 02 a8 1d d5 dc 7e f2 f9 00 97 a9 26 52 e2 c7 01 ad 46 f8 e6 15 32 d2 9a 17 86 de 0d 7d e8 be 28 6d 09 0b d2 a7 02 Data Ascii: X}[8H1;T!+HR*I\fVPS+ms659FlSIPh)GhVv+&lK^Q)75<a%t<(;2nK9JBLfT!a(0HE1Qn+jvR61G?B~&RF2}(m
2024-12-17 21:15:59 UTC	449	IN	Data Raw: 4a ec 9f 7b 4d 40 d5 f5 ef df bf bf 8a ce 63 15 0c ac 7d 7a 11 1c a9 6e f3 79 e8 8c 7c eb b9 31 65 82 c3 ef b4 e3 e1 7c df 0c fd 9c 39 04 16 35 1e 0f fb 14 66 02 30 23 b1 0c f8 77 8c 98 8b 81 4e 4e e6 b2 6a 00 36 50 84 85 f3 96 f9 f0 73 70 92 00 14 d0 ca f4 35 80 43 1e 80 89 59 af 00 cb fe 0c db 15 64 1a 70 a1 62 49 94 4e 86 96 65 ad 59 f3 54 60 97 c6 c2 f9 d6 7c 49 55 ee cc 92 7a 02 97 b7 d0 ab 6b 96 1f 07 d5 da c2 59 95 02 94 6a db 01 2f 3b 75 57 60 91 e2 6f bd 7c c2 4d 40 c7 22 d8 77 41 8c 81 cd 59 56 a5 50 0f fb 39 50 65 92 54 35 8e d6 f5 b5 a9 00 0f d4 a4 b9 1b 50 df a5 26 e4 c8 95 45 e7 ee f5 80 b2 2e 9c 47 7c 92 6f e3 1a 07 2a 55 92 75 21 4a 32 e5 c6 3c 9d 57 28 d3 4b eb 6e 54 26 2f ed b3 4b 3d c9 81 57 38 b3 f9 50 80 67 46 be 7b d5 ca f1 9d ee 57 Data Ascii: J{M@c}zny\|1e\|95f0#wNNj6Psp5CYdpbINeYT`\|IUzkYj/;uW`o\|M@"wAYVP9PeT5P&E.G\|o*Uu!J2<W(KnT&/K=W8PgF{W

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49758	34.225.242.38	443	4296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:15:59 UTC	890	OUT	GET /packs/js/vendor-69f70dd3792dc7287ac8.js HTTP/1.1 Host: secured-login.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secured-login.net/pages/5b6e2d87961b/XWW04VVZpU2JyWTFmVy96T2RUOUEvcEhyMWhFSm5uZElnVUlmb2dTZEdMRFdGSU1UV2V3S3RUNGdrNmNQRFJ4WTFPRHdYYlkraDV3S1YyVVpuU3E3K2p1bWowcEt3M24ySVBLanRDUkwyYitYWExuYTB5YlhVTUhySWZKbGJCTE9oRHl2RCtjR29BbEk3ZEwxZFJaNmNoK29ESk0vTGcxSmtyK0FWTExLWTdxYlQ1Yys1bjNiTUczY0RnPT0tLTU2R0pFM1VwZFRnVndZSWktLXptU2lWOHlQdjR0eGI1K09OQVZtRnc9PQ== Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 21:15:59 UTC	514	IN	HTTP/1.1 404 Not Found Date: Tue, 17 Dec 2024 21:15:59 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 9 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 0 X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Cache-Control: no-cache Content-Security-Policy: X-Request-Id: 6fc8421f-cf6b-4740-bb39-32ed06862aee X-Runtime: 0.015284 Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
2024-12-17 21:15:59 UTC	9	IN	Data Raw: 6e 6f 74 20 66 6f 75 6e 64 Data Ascii: not found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49759	34.225.242.38	443	4296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:15:59 UTC	935	OUT	GET /assets/modernizr-654222debe8018b12f1993ceddff30dc163a7d5008d79869c399d6d167321f97.js HTTP/1.1 Host: secured-login.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secured-login.net/pages/5b6e2d87961b/XWW04VVZpU2JyWTFmVy96T2RUOUEvcEhyMWhFSm5uZElnVUlmb2dTZEdMRFdGSU1UV2V3S3RUNGdrNmNQRFJ4WTFPRHdYYlkraDV3S1YyVVpuU3E3K2p1bWowcEt3M24ySVBLanRDUkwyYitYWExuYTB5YlhVTUhySWZKbGJCTE9oRHl2RCtjR29BbEk3ZEwxZFJaNmNoK29ESk0vTGcxSmtyK0FWTExLWTdxYlQ1Yys1bjNiTUczY0RnPT0tLTU2R0pFM1VwZFRnVndZSWktLXptU2lWOHlQdjR0eGI1K09OQVZtRnc9PQ== Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 21:15:59 UTC	514	IN	HTTP/1.1 404 Not Found Date: Tue, 17 Dec 2024 21:15:59 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 9 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 0 X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Cache-Control: no-cache Content-Security-Policy: X-Request-Id: 0379e3a3-1694-4e11-b22f-0e40da18756c X-Runtime: 0.013118 Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
2024-12-17 21:15:59 UTC	9	IN	Data Raw: 6e 6f 74 20 66 6f 75 6e 64 Data Ascii: not found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49755	52.216.115.77	443	4296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:15:59 UTC	895	OUT	GET /helpimg/landing_pages/css/dd.css HTTP/1.1 Host: s3.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://secured-login.net/pages/5b6e2d87961b/XWW04VVZpU2JyWTFmVy96T2RUOUEvcEhyMWhFSm5uZElnVUlmb2dTZEdMRFdGSU1UV2V3S3RUNGdrNmNQRFJ4WTFPRHdYYlkraDV3S1YyVVpuU3E3K2p1bWowcEt3M24ySVBLanRDUkwyYitYWExuYTB5YlhVTUhySWZKbGJCTE9oRHl2RCtjR29BbEk3ZEwxZFJaNmNoK29ESk0vTGcxSmtyK0FWTExLWTdxYlQ1Yys1bjNiTUczY0RnPT0tLTU2R0pFM1VwZFRnVndZSWktLXptU2lWOHlQdjR0eGI1K09OQVZtRnc9PQ== Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 21:15:59 UTC	436	IN	HTTP/1.1 200 OK x-amz-id-2: ZAq6P80ck2GC98Xhr62wOaIMg3KUpinL8dKa25UvIZhUFKLTZ4Y3VgrnyfjIuOWxVrKFzyIBEI0= x-amz-request-id: K6V6GN2PGRW813JE Date: Tue, 17 Dec 2024 21:16:00 GMT x-amz-replication-status: COMPLETED Last-Modified: Tue, 08 Aug 2017 20:12:22 GMT ETag: "dd05b711e15ef201b07e20cb5c87f5d8" x-amz-version-id: null Accept-Ranges: bytes Content-Type: text/css Content-Length: 4524 Server: AmazonS3 Connection: close
2024-12-17 21:15:59 UTC	4524	IN	Data Raw: 2e 62 6f 72 64 65 72 52 61 64 69 75 73 7b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 20 7d 0d 0a 2e 62 6f 72 64 65 72 52 61 64 69 75 73 54 70 7b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 20 35 70 78 20 30 20 30 3b 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 20 35 70 78 20 35 70 78 20 35 70 78 3b 7d 0d 0a 2e 62 6f 72 64 65 72 52 61 64 69 75 73 42 74 6d 7b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 20 30 20 35 70 78 20 35 70 78 20 3b 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 20 35 70 78 20 35 70 78 20 35 70 78 3b 7d 0d 0a 0d 0a 2e 64 64 63 6f 6d 6d 6f 6e 20 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b Data Ascii: .borderRadius{-moz-border-radius:5px; border-radius:5px; }.borderRadiusTp{-moz-border-radius:5px 5px 0 0; border-radius:5px 5px 5px 5px;}.borderRadiusBtm{-moz-border-radius:0 0 5px 5px ; border-radius:5px 5px 5px 5px;}.ddcommon {position:relative;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49757	199.232.192.193	443	4296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:15:59 UTC	915	OUT	GET /QRF01zv.png HTTP/1.1 Host: i.imgur.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secured-login.net/pages/5b6e2d87961b/XWW04VVZpU2JyWTFmVy96T2RUOUEvcEhyMWhFSm5uZElnVUlmb2dTZEdMRFdGSU1UV2V3S3RUNGdrNmNQRFJ4WTFPRHdYYlkraDV3S1YyVVpuU3E3K2p1bWowcEt3M24ySVBLanRDUkwyYitYWExuYTB5YlhVTUhySWZKbGJCTE9oRHl2RCtjR29BbEk3ZEwxZFJaNmNoK29ESk0vTGcxSmtyK0FWTExLWTdxYlQ1Yys1bjNiTUczY0RnPT0tLTU2R0pFM1VwZFRnVndZSWktLXptU2lWOHlQdjR0eGI1K09OQVZtRnc9PQ== Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 21:15:59 UTC	724	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1666 Content-Type: image/png Last-Modified: Wed, 17 Jul 2019 19:34:43 GMT ETag: "29d583007fcd677aa31ca849478bc17a" X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: 5txwq_d814LMpzvKk9tCLaABYqTKmZQSSRgOwKbBjllsq_MWet_LDw== cache-control: public, max-age=31536000 Accept-Ranges: bytes Age: 1173253 Date: Tue, 17 Dec 2024 21:15:59 GMT X-Served-By: cache-iad-kiad7000070-IAD, cache-nyc-kteb1890090-NYC X-Cache: Miss from cloudfront, HIT, HIT X-Cache-Hits: 5433, 0 X-Timer: S1734470160.743306,VS0,VE1 Strict-Transport-Security: max-age=300 Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Allow-Origin: * Server: cat factory 1.0 X-Content-Type-Options: nosniff
2024-12-17 21:15:59 UTC	1371	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 3c 08 06 00 00 00 3a fc d9 72 00 00 06 49 49 44 41 54 68 81 e5 9b 7b 88 56 45 14 c0 7f fb ed aa 59 a2 45 b9 bd b4 a7 95 8f b4 55 76 15 42 c9 f2 91 d4 1a 3d a8 20 2a 7b a8 f5 a7 19 65 65 a4 a5 92 f9 47 12 25 84 9a 88 a6 48 2f 29 92 55 52 31 5b c9 47 99 94 99 64 c6 1a be 12 5f 6d 19 d5 da d6 1f e7 7e 3a f7 7c f7 31 33 f7 1a 7e f4 83 65 ef 99 3b 73 ee 9c ef de 3b 67 e6 cc b9 15 0b 17 2e 26 67 0a 40 05 f0 77 c4 b9 47 81 e7 81 4b 81 7f 80 ef 80 c9 c0 7b 11 75 2b 81 d6 a0 5e ae 9d cb 93 6b 80 c5 c0 c0 88 73 2b 81 b9 c0 65 c8 0f 52 00 7a 01 ef 02 8b 22 ea 8f 04 16 00 17 e4 d9 c1 bc 0c be 05 d8 04 6c 07 7a 00 9f aa f3 ef 03 43 12 da df 07 bc a9 ca 56 01 23 80 7d c8 8f 35 28 8f 8e 66 35 f8 4e 60 Data Ascii: PNGIHDR<<:rIIDATh{VEYEUvB= *{eeG%H/)UR1[Gd_m~:\|13~e;s;g.&g@wGK{u+^ks+eRz"lzCV#}5(f5N`
2024-12-17 21:15:59 UTC	295	IN	Data Raw: 65 c8 bb 93 94 4c 52 4f 78 cb 66 11 fe 81 05 90 dc 2f 33 f3 6e 10 c9 23 f4 7e e0 5a 2c 26 3e b6 8b 87 46 e4 5b 85 6f 13 ea 3c a4 e4 59 96 ba a3 78 55 c9 a3 13 ea ae 21 bd 6f 27 70 59 2d 1d 42 7e c5 39 31 e7 47 23 33 a1 22 6f 10 5e b8 db b2 81 70 b2 ea 25 c8 37 11 51 4c 41 e6 ee d6 e1 25 9f e5 e1 58 64 4f 59 af 88 3a 13 76 05 2d 44 24 86 59 a0 13 e3 9e a0 74 dd be 17 71 87 2f b8 2a f7 5d 0f 7f 88 84 4c c6 10 0e f5 4c 25 1c 6f 5a 80 7c ba 63 cb 8b 48 0a 70 91 de 84 3f fc d8 03 dc 8b ec 17 af 75 d0 7b 82 ac 01 80 b9 48 6e d7 38 64 0b f3 4c 60 a1 aa 33 06 f8 cc 42 d7 52 4a 13 42 df 0e fe 37 21 af 4c 17 82 65 9e 2f 79 45 3c 5e 43 ee ec 08 a0 1d a5 33 a2 7a 24 4d 3f 8e 46 4a 3f f5 a9 47 fc ea 40 24 9f e3 ad 3c 3a 9a 77 88 67 05 32 88 68 f7 d0 8c 2c 25 a7 23 91 Data Ascii: eLROxf/3n#~Z,&>F[o<YxU!o'pY-B~91G#3"o^p%7QLA%XdOY:v-D$Ytq/*]LL%oZ\|cHp?u{Hn8dL`3BRJB7!Le/yE<^C3z$M?FJ?G@$<:wg2h,%#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49761	104.18.91.62	443	4296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:16:01 UTC	552	OUT	GET /hubfs/241394/html_file/files/img/KB4-logo.png HTTP/1.1 Host: cdn2.hubspot.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=w92ZkZiwXH9vnZEaH_kzofHwC9W34MLiDd0dMRe64sE-1734470159-1.0.1.1-Pkc4ye6p3RxqgwElCoGPIojTAVO74OkNAnY7zkp4mMVe9eb8JAaDxtdwQGg2.HU0bLnfj4mxQFfhluolzq4UOw
2024-12-17 21:16:01 UTC	1351	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 21:16:01 GMT Content-Type: image/png Content-Length: 3014 Connection: close CF-Ray: 8f39ee8d183915cb-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 118502 Cache-Control: s-maxage=2592000, max-age=1209600, stale-while-revalidate=900 ETag: "ddf47be00ad3eebaabd63fec4c5733f2" Last-Modified: Fri, 29 Mar 2024 19:46:11 GMT Vary: Accept Via: 1.1 dd462bc6996e0000e9b2cde9e1f25e20.cloudfront.net (CloudFront) Access-Control-Allow-Methods: GET cache-tag: F-3711502880,FD-3711502755,P-241394,FLS-ALL Cf-Bgj: imgq:85,h2pri Cf-Polished: origSize=3873 Edge-Cache-Tag: F-3711502880,FD-3711502755,P-241394,FLS-ALL Timing-Allow-Origin: cdn2.hubspot.net X-Amz-Cf-Id: QKqrrk-o8hm4YOAc5hd22S53yFm2LEefdoJC-8A90IP2gpZ2suQ3fg== X-Amz-Cf-Pop: BOS50-P1 x-amz-id-2: jJtNu4bygFgZzqCYwDHQJVMDWNLrbBdcG7C+9mPmBg6z1SbJnfrVy8hgqaOpvZ3rFjX7G28zb3o= x-amz-meta-access-tag: public-not-indexable x-amz-meta-cache-tag: F-3711502880,FD-3711502755,P-241394,FLS-ALL x-amz-meta-created-unix-time-millis: 1447343595191 x-amz-meta-index-tag: none x-amz-replication-status: COMPLETED x-amz-request-id: 5T65YXZ9JEV92BRD x-amz-server-side-encryption: AES256 x-amz-storage-class: INTELLIGENT_TIERING x-amz-version-id: GOuAJzA1.bo1vjot_Hsq0owEY98XjYH9 X-Cache: RefreshHit from cloudfront
2024-12-17 21:16:01 UTC	506	IN	Data Raw: 58 2d 48 53 2d 43 46 2d 4c 61 6d 62 64 61 3a 20 75 73 2d 65 61 73 74 2d 31 2e 45 6e 66 6f 72 63 65 41 63 6c 46 6f 72 52 65 61 64 73 20 33 0d 0a 58 2d 48 53 2d 43 46 2d 4c 61 6d 62 64 61 2d 45 6e 66 6f 72 63 65 3a 20 75 73 2d 65 61 73 74 2d 31 2e 45 6e 66 6f 72 63 65 41 63 6c 46 6f 72 52 65 61 64 73 20 33 0d 0a 58 2d 52 6f 62 6f 74 73 2d 54 61 67 3a 20 6e 6f 6e 65 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 44 33 25 32 42 66 49 70 4a 33 32 66 56 4a 47 37 45 69 54 61 71 37 78 63 55 6d 73 70 6f 77 4f 4f 54 45 5a 65 25 32 42 68 72 30 32 6d 48 6a 6e 37 4f 62 62 4a 79 Data Ascii: X-HS-CF-Lambda: us-east-1.EnforceAclForReads 3X-HS-CF-Lambda-Enforce: us-east-1.EnforceAclForReads 3X-Robots-Tag: noneReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D3%2BfIpJ32fVJG7EiTaq7xcUmspowOOTEZe%2Bhr02mHjn7ObbJy
2024-12-17 21:16:01 UTC	881	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 26 08 06 00 00 00 81 16 d4 6c 00 00 0b 8d 49 44 41 54 78 da ec da 7b 68 97 55 1c c7 71 f7 9b b7 4d 73 22 65 a9 65 6a 2c bb 98 4d cc 2c 5d 28 26 d4 e8 42 17 b0 12 29 47 e2 46 9a b8 84 32 f3 32 32 6f 59 ce d4 c2 14 91 d4 4c 12 25 c3 b4 0b 16 69 46 a6 a5 2e 99 97 92 4c a7 65 da 98 64 73 6e ce 4f 6f f0 40 a7 83 3f f7 9c df cf 07 f6 1b cf 81 d7 1f db 79 be cf d9 73 9e f3 f9 3d 97 fd 9a 44 2d 6a 51 bb 44 d3 c8 26 43 31 dc c8 4d 72 5f 39 18 6e e9 1e cd 70 83 38 c7 57 a1 00 c5 78 17 eb b0 05 a5 38 64 ec c7 4e 6c c2 62 8c c5 3d 68 d6 08 e7 62 3c 16 60 06 ba d7 57 20 cb 47 49 0c 9c 8d 53 90 51 8e f6 d1 f2 6c 10 8b 62 20 94 a0 0a cc 47 e7 46 32 17 2b 20 a3 12 ed 43 0f 08 75 99 f8 09 32 6a d1 3f 5a Data Ascii: PNGIHDR&lIDATx{hUqMs"eej,M,](&B)GF222oYL%iF.LedsnOo@?ys=D-jQD&C1Mr_9np8Wx8dNlb=hb<`W GISQlb GF2+ Cu2j?Z
2024-12-17 21:16:01 UTC	1369	IN	Data Raw: 02 62 3e e1 fe 71 3e b9 3b 9a ee 64 03 b2 10 1f 3a b7 4f b3 d0 29 4e ed 20 94 fb 5c c9 e8 bf 05 95 10 80 d7 73 a5 f2 52 d5 db aa 2a a5 55 63 44 98 dc 90 64 3b 63 74 87 2c 2b 3c e6 63 3b 04 57 ef 80 f5 83 21 4b cf 24 02 e2 d6 dd 86 ef 20 cb 67 88 05 ac 2f 80 2c 35 98 54 cf f3 67 37 6c 84 2c 07 90 19 70 cc bb 20 cb 94 38 db 5d 83 fe c8 43 5f 34 f7 0e 08 3f 5f 81 03 90 51 87 7b 4d 77 d2 01 71 1e f8 cb d1 33 40 fd ad a8 81 8c 0a b4 8c b3 6d 2b ec 83 00 b0 e0 75 be 4e 12 ed 5c 8d b4 ed 7d 69 c9 30 69 6a 2f e9 d5 db a5 f9 0f 48 1b a6 4b 15 47 64 da 85 2b ca e8 4c 7b 9e 76 a3 a5 33 d6 5e e7 53 2f 16 e0 58 ae 85 2c 76 90 a7 06 9c cf 39 90 f1 6b c0 b7 58 b3 91 03 57 2e 1e c6 64 7c 03 39 d6 7a 2c d4 6e ce 6d 59 35 06 05 ac 8d 61 31 64 99 1e a4 ce 79 4e fe 0d 19 71 Data Ascii: b>q>;d:O)N \sR*UcDd;ct,+<c;W!K$ g/,5Tg7l,p 8]C_4?_Q{Mwq3@m+uN\}i0ij/HKGd+L{v3^S/X,v9kXW.d\|9z,nmY5a1dyNq
2024-12-17 21:16:01 UTC	764	IN	Data Raw: 55 82 05 92 85 81 44 b0 a7 c1 b7 df b1 00 c4 71 17 6c 31 08 8a 4e 13 81 e0 3c b3 07 da be 9c 22 02 c1 11 d8 9e cd 25 24 c5 f9 bb 9a 9b e4 96 1e 0e 7d dc ef 92 b3 35 3d 46 34 9a 14 66 2b f1 a9 6e 86 84 82 04 0b 24 0f 63 63 9a 3a 2d ea ba 81 c9 f0 51 1c 69 90 40 19 24 5d c6 02 01 9f ff 15 98 0b cf 49 21 81 2c 64 c8 0e f1 84 75 b6 93 53 7e fa 8a 0c e2 1c 27 21 e3 18 b3 7e ff 62 42 31 9e f1 18 ba d6 c5 93 44 c2 d9 44 6d b9 1d 22 d6 f3 9d a6 4e 0d d4 99 e6 f3 01 70 1b 99 1a 4b 50 64 3b 35 75 d6 d9 9e 8b b5 1a da f7 32 85 29 22 90 0c e6 17 6b 81 bc 75 df 60 8a 49 f7 ef 4e 2c c4 6b 7e 91 44 ab 49 38 a5 f1 ba 6c f3 f0 8c 6b 21 cd 3e 04 fd 56 27 41 20 75 d0 d7 6b 1e 72 e5 f6 5e 93 f4 12 fc 22 dd ad fd 2e e8 a3 95 19 9b 24 81 60 9d 79 0c 59 b3 63 11 d1 c6 22 fc f9 Data Ascii: UDql1N<"%$}5=F4f+n$cc:-Qi@$]I!,duS~'!~bB1DDm"NpKPd;5u2)"ku`IN,k~DI8lk!>V'A ukr^".$`yYc"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49762	199.232.192.193	443	4296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:16:01 UTC	346	OUT	GET /QRF01zv.png HTTP/1.1 Host: i.imgur.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 21:16:01 UTC	725	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1666 Content-Type: image/png Last-Modified: Wed, 17 Jul 2019 19:34:43 GMT ETag: "29d583007fcd677aa31ca849478bc17a" X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: 5txwq_d814LMpzvKk9tCLaABYqTKmZQSSRgOwKbBjllsq_MWet_LDw== cache-control: public, max-age=31536000 Accept-Ranges: bytes Date: Tue, 17 Dec 2024 21:16:01 GMT Age: 3683138 X-Served-By: cache-iad-kiad7000070-IAD, cache-ewr-kewr1740077-EWR X-Cache: Miss from cloudfront, HIT, HIT X-Cache-Hits: 28643, 4 X-Timer: S1734470162.737197,VS0,VE0 Strict-Transport-Security: max-age=300 Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Allow-Origin: * Server: cat factory 1.0 X-Content-Type-Options: nosniff
2024-12-17 21:16:01 UTC	1371	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 3c 08 06 00 00 00 3a fc d9 72 00 00 06 49 49 44 41 54 68 81 e5 9b 7b 88 56 45 14 c0 7f fb ed aa 59 a2 45 b9 bd b4 a7 95 8f b4 55 76 15 42 c9 f2 91 d4 1a 3d a8 20 2a 7b a8 f5 a7 19 65 65 a4 a5 92 f9 47 12 25 84 9a 88 a6 48 2f 29 92 55 52 31 5b c9 47 99 94 99 64 c6 1a be 12 5f 6d 19 d5 da d6 1f e7 7e 3a f7 7c f7 31 33 f7 1a 7e f4 83 65 ef 99 3b 73 ee 9c ef de 3b 67 e6 cc b9 15 0b 17 2e 26 67 0a 40 05 f0 77 c4 b9 47 81 e7 81 4b 81 7f 80 ef 80 c9 c0 7b 11 75 2b 81 d6 a0 5e ae 9d cb 93 6b 80 c5 c0 c0 88 73 2b 81 b9 c0 65 c8 0f 52 00 7a 01 ef 02 8b 22 ea 8f 04 16 00 17 e4 d9 c1 bc 0c be 05 d8 04 6c 07 7a 00 9f aa f3 ef 03 43 12 da df 07 bc a9 ca 56 01 23 80 7d c8 8f 35 28 8f 8e 66 35 f8 4e 60 Data Ascii: PNGIHDR<<:rIIDATh{VEYEUvB= *{eeG%H/)UR1[Gd_m~:\|13~e;s;g.&g@wGK{u+^ks+eRz"lzCV#}5(f5N`
2024-12-17 21:16:01 UTC	295	IN	Data Raw: 65 c8 bb 93 94 4c 52 4f 78 cb 66 11 fe 81 05 90 dc 2f 33 f3 6e 10 c9 23 f4 7e e0 5a 2c 26 3e b6 8b 87 46 e4 5b 85 6f 13 ea 3c a4 e4 59 96 ba a3 78 55 c9 a3 13 ea ae 21 bd 6f 27 70 59 2d 1d 42 7e c5 39 31 e7 47 23 33 a1 22 6f 10 5e b8 db b2 81 70 b2 ea 25 c8 37 11 51 4c 41 e6 ee d6 e1 25 9f e5 e1 58 64 4f 59 af 88 3a 13 76 05 2d 44 24 86 59 a0 13 e3 9e a0 74 dd be 17 71 87 2f b8 2a f7 5d 0f 7f 88 84 4c c6 10 0e f5 4c 25 1c 6f 5a 80 7c ba 63 cb 8b 48 0a 70 91 de 84 3f fc d8 03 dc 8b ec 17 af 75 d0 7b 82 ac 01 80 b9 48 6e d7 38 64 0b f3 4c 60 a1 aa 33 06 f8 cc 42 d7 52 4a 13 42 df 0e fe 37 21 af 4c 17 82 65 9e 2f 79 45 3c 5e 43 ee ec 08 a0 1d a5 33 a2 7a 24 4d 3f 8e 46 4a 3f f5 a9 47 fc ea 40 24 9f e3 ad 3c 3a 9a 77 88 67 05 32 88 68 f7 d0 8c 2c 25 a7 23 91 Data Ascii: eLROxf/3n#~Z,&>F[o<YxU!o'pY-B~91G#3"o^p%7QLA%XdOY:v-D$Ytq/*]LL%oZ\|cHp?u{Hn8dL`3BRJB7!Le/yE<^C3z$M?FJ?G@$<:wg2h,%#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49763	34.225.242.38	443	4296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:16:01 UTC	958	OUT	GET /assets/landing-watermark-16f13e16a7ef02fb6f94250aa1931ded83dbee5d9fad278e33dd5792d085194f.css HTTP/1.1 Host: secured-login.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://secured-login.net/pages/5b6e2d87961b/XWW04VVZpU2JyWTFmVy96T2RUOUEvcEhyMWhFSm5uZElnVUlmb2dTZEdMRFdGSU1UV2V3S3RUNGdrNmNQRFJ4WTFPRHdYYlkraDV3S1YyVVpuU3E3K2p1bWowcEt3M24ySVBLanRDUkwyYitYWExuYTB5YlhVTUhySWZKbGJCTE9oRHl2RCtjR29BbEk3ZEwxZFJaNmNoK29ESk0vTGcxSmtyK0FWTExLWTdxYlQ1Yys1bjNiTUczY0RnPT0tLTU2R0pFM1VwZFRnVndZSWktLXptU2lWOHlQdjR0eGI1K09OQVZtRnc9PQ== Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 21:16:02 UTC	514	IN	HTTP/1.1 404 Not Found Date: Tue, 17 Dec 2024 21:16:02 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 9 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 0 X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Cache-Control: no-cache Content-Security-Policy: X-Request-Id: af7407a5-116d-4fac-a7fe-2d55433708b0 X-Runtime: 0.100648 Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
2024-12-17 21:16:02 UTC	9	IN	Data Raw: 6e 6f 74 20 66 6f 75 6e 64 Data Ascii: not found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49765	34.225.242.38	443	4296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:16:01 UTC	427	OUT	GET /assets/application-237cb5c4f318687625f8ccf2f42de3fc20238bfe267384653491a6bba8c8f6f5.js HTTP/1.1 Host: secured-login.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 21:16:02 UTC	279	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 21:16:02 GMT Content-Type: application/javascript Content-Length: 380848 Connection: close Last-Modified: Tue, 17 Dec 2024 18:56:58 GMT Vary: accept-encoding Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
2024-12-17 21:16:02 UTC	16105	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 37 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-12-17 21:16:02 UTC	16384	IN	Data Raw: 4e 61 6d 65 29 7d 2c 69 6e 70 75 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4e 2e 74 65 73 74 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7d 2c 62 75 74 74 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 65 28 65 2c 22 69 6e 70 75 74 22 29 26 26 22 62 75 74 74 6f 6e 22 3d 3d 3d 65 2e 74 79 70 65 7c 7c 66 65 28 65 2c 22 62 75 74 74 6f 6e 22 29 7d 2c 74 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 20 66 65 28 65 2c 22 69 6e 70 75 74 22 29 26 26 22 74 65 78 74 22 3d 3d 3d 65 2e 74 79 70 65 26 26 28 6e 75 6c 6c 3d 3d 28 74 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 29 29 7c 7c 22 74 65 78 74 22 3d 3d 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7d 2c 66 69 72 Data Ascii: Name)},input:function(e){return N.test(e.nodeName)},button:function(e){return fe(e,"input")&&"button"===e.type\|\|fe(e,"button")},text:function(e){var t;return fe(e,"input")&&"text"===e.type&&(null==(t=e.getAttribute("type"))\|\|"text"===t.toLowerCase())},fir
2024-12-17 21:16:02 UTC	56	IN	Data Raw: 28 65 2c 6e 29 7c 7c 5f 2e 61 63 63 65 73 73 28 65 2c 6e 2c 7b 65 6d 70 74 79 3a 63 65 2e 43 61 6c 6c 62 61 63 6b 73 28 22 6f 6e 63 65 20 6d 65 6d 6f 72 79 22 29 2e 61 Data Ascii: (e,n)\|\|_.access(e,n,{empty:ce.Callbacks("once memory").a
2024-12-17 21:16:02 UTC	16384	IN	Data Raw: 64 64 28 66 75 6e 63 74 69 6f 6e 28 29 7b 5f 2e 72 65 6d 6f 76 65 28 65 2c 5b 74 2b 22 71 75 65 75 65 22 2c 6e 5d 29 7d 29 7d 29 7d 7d 29 2c 63 65 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 71 75 65 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 65 3d 32 3b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 26 26 28 6e 3d 74 2c 74 3d 22 66 78 22 2c 65 2d 2d 29 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3c 65 3f 63 65 2e 71 75 65 75 65 28 74 68 69 73 5b 30 5d 2c 74 29 3a 76 6f 69 64 20 30 3d 3d 3d 6e 3f 74 68 69 73 3a 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 63 65 2e 71 75 65 75 65 28 74 68 69 73 2c 74 2c 6e 29 3b 63 65 2e 5f 71 75 65 75 65 48 6f 6f 6b 73 28 74 68 69 73 2c 74 29 Data Ascii: dd(function(){_.remove(e,[t+"queue",n])})})}}),ce.fn.extend({queue:function(t,n){var e=2;return"string"!=typeof t&&(n=t,t="fx",e--),arguments.length<e?ce.queue(this[0],t):void 0===n?this:this.each(function(){var e=ce.queue(this,t,n);ce._queueHooks(this,t)
2024-12-17 21:16:02 UTC	16384	IN	Data Raw: 74 68 69 73 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 63 65 2e 69 6e 41 72 72 61 79 28 74 68 69 73 2c 6e 29 3c 30 26 26 28 63 65 2e 63 6c 65 61 6e 44 61 74 61 28 53 65 28 74 68 69 73 29 29 2c 74 26 26 74 2e 72 65 70 6c 61 63 65 43 68 69 6c 64 28 65 2c 74 68 69 73 29 29 7d 2c 6e 29 7d 7d 29 2c 63 65 2e 65 61 63 68 28 7b 61 70 70 65 6e 64 54 6f 3a 22 61 70 70 65 6e 64 22 2c 70 72 65 70 65 6e 64 54 6f 3a 22 70 72 65 70 65 6e 64 22 2c 69 6e 73 65 72 74 42 65 66 6f 72 65 3a 22 62 65 66 6f 72 65 22 2c 69 6e 73 65 72 74 41 66 74 65 72 3a 22 61 66 74 65 72 22 2c 72 65 70 6c 61 63 65 41 6c 6c 3a 22 72 65 70 6c 61 63 65 57 69 74 68 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 61 29 7b 63 65 2e 66 6e 5b 65 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 Data Ascii: this.parentNode;ce.inArray(this,n)<0&&(ce.cleanData(Se(this)),t&&t.replaceChild(e,this))},n)}}),ce.each({appendTo:"append",prependTo:"prepend",insertBefore:"before",insertAfter:"after",replaceAll:"replaceWith"},function(e,a){ce.fn[e]=function(e){for(var t
2024-12-17 21:16:02 UTC	16384	IN	Data Raw: 28 72 3d 69 2e 73 65 74 28 65 2c 6e 2c 74 29 29 3f 72 3a 65 5b 74 5d 3d 6e 3a 69 26 26 22 67 65 74 22 69 6e 20 69 26 26 6e 75 6c 6c 21 3d 3d 28 72 3d 69 2e 67 65 74 28 65 2c 74 29 29 3f 72 3a 65 5b 74 5d 7d 2c 70 72 6f 70 48 6f 6f 6b 73 3a 7b 74 61 62 49 6e 64 65 78 3a 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 63 65 2e 66 69 6e 64 2e 61 74 74 72 28 65 2c 22 74 61 62 69 6e 64 65 78 22 29 3b 72 65 74 75 72 6e 20 74 3f 70 61 72 73 65 49 6e 74 28 74 2c 31 30 29 3a 62 74 2e 74 65 73 74 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7c 7c 77 74 2e 74 65 73 74 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 26 26 65 2e 68 72 65 66 3f 30 3a 2d 31 7d 7d 7d 2c 70 72 6f 70 46 69 78 3a 7b 22 66 6f 72 22 3a 22 68 74 6d 6c 46 6f 72 22 2c 22 63 6c 61 73 73 22 3a 22 Data Ascii: (r=i.set(e,n,t))?r:e[t]=n:i&&"get"in i&&null!==(r=i.get(e,t))?r:e[t]},propHooks:{tabIndex:{get:function(e){var t=ce.find.attr(e,"tabindex");return t?parseInt(t,10):bt.test(e.nodeName)\|\|wt.test(e.nodeName)&&e.href?0:-1}}},propFix:{"for":"htmlFor","class":"
2024-12-17 21:16:02 UTC	16384	IN	Data Raw: 65 66 69 6c 74 65 72 28 22 6a 73 6f 6e 20 6a 73 6f 6e 70 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 2c 61 3d 21 31 21 3d 3d 65 2e 6a 73 6f 6e 70 26 26 28 5a 74 2e 74 65 73 74 28 65 2e 75 72 6c 29 3f 22 75 72 6c 22 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 2e 64 61 74 61 26 26 30 3d 3d 3d 28 65 2e 63 6f 6e 74 65 6e 74 54 79 70 65 7c 7c 22 22 29 2e 69 6e 64 65 78 4f 66 28 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 22 29 26 26 5a 74 2e 74 65 73 74 28 65 2e 64 61 74 61 29 26 26 22 64 61 74 61 22 29 3b 69 66 28 61 7c 7c 22 6a 73 6f 6e 70 22 3d 3d 3d 65 2e 64 61 74 61 54 79 70 65 73 5b 30 5d 29 72 65 74 75 72 6e 20 72 3d 65 2e 6a 73 6f 6e 70 43 61 6c Data Ascii: efilter("json jsonp",function(e,t,n){var r,i,o,a=!1!==e.jsonp&&(Zt.test(e.url)?"url":"string"==typeof e.data&&0===(e.contentType\|\|"").indexOf("application/x-www-form-urlencoded")&&Zt.test(e.data)&&"data");if(a\|\|"jsonp"===e.dataTypes[0])return r=e.jsonpCal
2024-12-17 21:16:02 UTC	16384	IN	Data Raw: 74 65 72 22 2c 69 5b 31 5d 3d 6c 2e 74 65 73 74 28 69 5b 31 5d 29 3f 69 5b 31 5d 3a 22 63 65 6e 74 65 72 22 2c 74 3d 68 2e 65 78 65 63 28 69 5b 30 5d 29 2c 65 3d 68 2e 65 78 65 63 28 69 5b 31 5d 29 2c 77 5b 74 68 69 73 5d 3d 5b 74 3f 74 5b 30 5d 3a 30 2c 65 3f 65 5b 30 5d 3a 30 5d 2c 75 5b 74 68 69 73 5d 3d 5b 63 2e 65 78 65 63 28 69 5b 30 5d 29 5b 30 5d 2c 63 2e 65 78 65 63 28 69 5b 31 5d 29 5b 30 5d 5d 7d 29 2c 31 3d 3d 3d 79 2e 6c 65 6e 67 74 68 26 26 28 79 5b 31 5d 3d 79 5b 30 5d 29 2c 22 72 69 67 68 74 22 3d 3d 3d 75 2e 61 74 5b 30 5d 3f 6d 2e 6c 65 66 74 2b 3d 70 3a 22 63 65 6e 74 65 72 22 3d 3d 3d 75 2e 61 74 5b 30 5d 26 26 28 6d 2e 6c 65 66 74 2b 3d 70 2f 32 29 2c 22 62 6f 74 74 6f 6d 22 3d 3d 3d 75 2e 61 74 5b 31 5d 3f 6d 2e 74 6f 70 2b 3d 66 3a Data Ascii: ter",i[1]=l.test(i[1])?i[1]:"center",t=h.exec(i[0]),e=h.exec(i[1]),w[this]=[t?t[0]:0,e?e[0]:0],u[this]=[c.exec(i[0])[0],c.exec(i[1])[0]]}),1===y.length&&(y[1]=y[0]),"right"===u.at[0]?m.left+=p:"center"===u.at[0]&&(m.left+=p/2),"bottom"===u.at[1]?m.top+=f:
2024-12-17 21:16:02 UTC	16384	IN	Data Raw: 66 66 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 6f 66 66 73 65 74 50 61 72 65 6e 74 2e 6f 66 66 73 65 74 28 29 2c 65 3d 74 68 69 73 2e 64 6f 63 75 6d 65 6e 74 5b 30 5d 3b 72 65 74 75 72 6e 22 61 62 73 6f 6c 75 74 65 22 3d 3d 3d 74 68 69 73 2e 63 73 73 50 6f 73 69 74 69 6f 6e 26 26 74 68 69 73 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 5b 30 5d 21 3d 3d 65 26 26 56 2e 63 6f 6e 74 61 69 6e 73 28 74 68 69 73 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 5b 30 5d 2c 74 68 69 73 2e 6f 66 66 73 65 74 50 61 72 65 6e 74 5b 30 5d 29 26 26 28 74 2e 6c 65 66 74 2b 3d 74 68 69 73 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 2e 73 63 72 6f 6c 6c 4c 65 66 74 28 29 2c 74 2e 74 6f 70 2b 3d 74 68 69 73 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 2e 73 63 72 Data Ascii: ffset:function(){var t=this.offsetParent.offset(),e=this.document[0];return"absolute"===this.cssPosition&&this.scrollParent[0]!==e&&V.contains(this.scrollParent[0],this.offsetParent[0])&&(t.left+=this.scrollParent.scrollLeft(),t.top+=this.scrollParent.scr
2024-12-17 21:16:02 UTC	16384	IN	Data Raw: 74 2e 6f 66 66 73 65 74 28 29 2c 6e 5b 69 5d 2e 70 72 6f 70 6f 72 74 69 6f 6e 73 28 7b 77 69 64 74 68 3a 6e 5b 69 5d 2e 65 6c 65 6d 65 6e 74 5b 30 5d 2e 6f 66 66 73 65 74 57 69 64 74 68 2c 68 65 69 67 68 74 3a 6e 5b 69 5d 2e 65 6c 65 6d 65 6e 74 5b 30 5d 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7d 29 29 7d 7d 2c 64 72 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 3d 21 31 3b 72 65 74 75 72 6e 20 56 2e 65 61 63 68 28 28 56 2e 75 69 2e 64 64 6d 61 6e 61 67 65 72 2e 64 72 6f 70 70 61 62 6c 65 73 5b 74 2e 6f 70 74 69 6f 6e 73 2e 73 63 6f 70 65 5d 7c 7c 5b 5d 29 2e 73 6c 69 63 65 28 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6f 70 74 69 6f 6e 73 26 26 28 21 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 64 69 73 61 62 6c 65 64 26 26 74 68 Data Ascii: t.offset(),n[i].proportions({width:n[i].element[0].offsetWidth,height:n[i].element[0].offsetHeight}))}},drop:function(t,e){var i=!1;return V.each((V.ui.ddmanager.droppables[t.options.scope]\|\|[]).slice(),function(){this.options&&(!this.options.disabled&&th

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49772	34.225.242.38	443	4296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:16:04 UTC	749	OUT	GET /assets/sei-flag-90af55d793544fe1893f26677661a4252761afbe811fab0eced85c67bc82f984.png HTTP/1.1 Host: secured-login.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secured-login.net/assets/sei-styles-1837e0b6e1baaf1af90438028a176241b70a365a8a09ff4bf668cf3bf9e3c759.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 21:16:04 UTC	241	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 21:16:04 GMT Content-Type: image/png Content-Length: 3168 Connection: close Last-Modified: Tue, 17 Dec 2024 18:56:58 GMT Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
2024-12-17 21:16:04 UTC	3168	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 f0 08 06 00 00 00 3e 55 e9 92 00 00 0c 27 49 44 41 54 78 da ed 9d 5d 88 5c e5 19 80 65 09 21 88 48 90 10 42 2f 4a 08 22 22 22 52 8a 84 52 a4 88 14 e9 45 29 22 d2 0b 2f 8a 17 22 e2 85 48 10 11 33 73 e6 cc 99 99 9d cc fe 26 ec 4f c2 0e 9b dd 64 0d 51 4a 13 4c 8c 89 11 11 1b ac 50 ed 85 6d a5 55 bb 8d 75 b3 51 b3 99 24 9b ec ee fc ad 7d bf 35 17 a9 4d 9c dd ec ec bc df 7b f6 79 e0 21 41 e2 ce 9c ef 7c cf 7c df d9 d9 33 7b cb 2d 4d e6 db ed db bf 6d a6 cd 7e 7e 00 f0 03 10 30 80 61 08 18 c0 30 04 0c 60 18 02 06 30 0c 01 03 18 86 80 01 0c 43 c0 00 86 21 60 00 c3 10 30 80 61 08 18 c0 30 04 bc 3c fe 7a fc f8 ba 0b 03 03 77 cd 74 74 3c 58 ce 66 1f ab 66 b3 4f cd 66 b3 2f d6 a2 28 51 4b 26 73 e5 Data Ascii: PNGIHDR>U'IDATx]\e!HB/J"""RRE)"/"H3s&OdQJLPmUuQ$}5M{y!A\|\|3{-Mm~~0a0`0C!`0a0<zwtt<XffOf/(QK&s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49774	34.225.242.38	443	4296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:16:05 UTC	425	OUT	GET /assets/sei-flag-90af55d793544fe1893f26677661a4252761afbe811fab0eced85c67bc82f984.png HTTP/1.1 Host: secured-login.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 21:16:06 UTC	241	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 21:16:06 GMT Content-Type: image/png Content-Length: 3168 Connection: close Last-Modified: Tue, 17 Dec 2024 18:56:58 GMT Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
2024-12-17 21:16:06 UTC	3168	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 f0 08 06 00 00 00 3e 55 e9 92 00 00 0c 27 49 44 41 54 78 da ed 9d 5d 88 5c e5 19 80 65 09 21 88 48 90 10 42 2f 4a 08 22 22 22 52 8a 84 52 a4 88 14 e9 45 29 22 d2 0b 2f 8a 17 22 e2 85 48 10 11 33 73 e6 cc 99 99 9d cc fe 26 ec 4f c2 0e 9b dd 64 0d 51 4a 13 4c 8c 89 11 11 1b ac 50 ed 85 6d a5 55 bb 8d 75 b3 51 b3 99 24 9b ec ee fc ad 7d bf 35 17 a9 4d 9c dd ec ec bc df 7b f6 79 e0 21 41 e2 ce 9c ef 7c cf 7c df d9 d9 33 7b cb 2d 4d e6 db ed db bf 6d a6 cd 7e 7e 00 f0 03 10 30 80 61 08 18 c0 30 04 0c 60 18 02 06 30 0c 01 03 18 86 80 01 0c 43 c0 00 86 21 60 00 c3 10 30 80 61 08 18 c0 30 04 bc 3c fe 7a fc f8 ba 0b 03 03 77 cd 74 74 3c 58 ce 66 1f ab 66 b3 4f cd 66 b3 2f d6 a2 28 51 4b 26 73 e5 Data Ascii: PNGIHDR>U'IDATx]\e!HB/J"""RRE)"/"H3s&OdQJLPmUuQ$}5M{y!A\|\|3{-Mm~~0a0`0C!`0a0<zwtt<XffOf/(QK&s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49775	34.225.242.38	443	4296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:16:07 UTC	922	OUT	GET /favicon.ico HTTP/1.1 Host: secured-login.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secured-login.net/pages/5b6e2d87961b/XWW04VVZpU2JyWTFmVy96T2RUOUEvcEhyMWhFSm5uZElnVUlmb2dTZEdMRFdGSU1UV2V3S3RUNGdrNmNQRFJ4WTFPRHdYYlkraDV3S1YyVVpuU3E3K2p1bWowcEt3M24ySVBLanRDUkwyYitYWExuYTB5YlhVTUhySWZKbGJCTE9oRHl2RCtjR29BbEk3ZEwxZFJaNmNoK29ESk0vTGcxSmtyK0FWTExLWTdxYlQ1Yys1bjNiTUczY0RnPT0tLTU2R0pFM1VwZFRnVndZSWktLXptU2lWOHlQdjR0eGI1K09OQVZtRnc9PQ== Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 21:16:07 UTC	253	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 21:16:07 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 0 Connection: close Last-Modified: Tue, 17 Dec 2024 18:57:56 GMT Strict-Transport-Security: max-age=63113904; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49776	34.225.242.38	443	4296	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:16:09 UTC	352	OUT	GET /favicon.ico HTTP/1.1 Host: secured-login.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 21:16:09 UTC	253	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 21:16:09 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 0 Connection: close Last-Modified: Tue, 17 Dec 2024 18:57:56 GMT Strict-Transport-Security: max-age=63113904; includeSubDomains; preload

Target ID:	0
Start time:	16:15:38
Start date:	17/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	16:15:42
Start date:	17/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2032 --field-trial-handle=1952,i,6186034482215152150,8721965914843378123,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	16:15:49
Start date:	17/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://mail.donotreply.biz/XWW04VVZpU2JyWTFmVy96T2RUOUEvcEhyMWhFSm5uZElnVUlmb2dTZEdMRFdGSU1UV2V3S3RUNGdrNmNQRFJ4WTFPRHdYYlkraDV3S1YyVVpuU3E3K2p1bWowcEt3M24ySVBLanRDUkwyYitYWExuYTB5YlhVTUhySWZKbGJCTE9oRHl2RCtjR29BbEk3ZEwxZFJaNmNoK29ESk0vTGcxSmtyK0FWTExLWTdxYlQ1Yys1bjNiTUczY0RnPT0tLTU2R0pFM1VwZFRnVndZSWktLXptU2lWOHlQdjR0eGI1K09OQVZtRnc9PQ==?cid=2315575162"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 50

Chrome Cache Entry: 51

Chrome Cache Entry: 52

Chrome Cache Entry: 53

Chrome Cache Entry: 54

Chrome Cache Entry: 55

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets