Edit tour

Windows Analysis Report
https://creditunions.taplink.ws

Overview

General Information

Sample URL:	https://creditunions.taplink.ws
Analysis ID:	1585531
Infos:

Detection

HTMLPhisher

Score:	68
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Suricata IDS alerts for network traffic

Yara detected HtmlPhish54

AI detected suspicious URL

Detected non-DNS traffic on DNS port

HTML body contains low number of good links

HTML page contains hidden javascript code

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5332 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3060 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2520 --field-trial-handle=2328,i,13374789021789178064,4621055915112058383,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6544 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://creditunions.taplink.ws" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author
0.5.id.script.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
0.11.id.script.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
2.2.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
3.3.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
3.4.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
3.6.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
3.8.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
Click to see the 2 entries

Suricata Signatures

ETPRO PHISHING JS/PsyduckPockeball Payload Inbound

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-07T19:40:34.744989+0100	2857090	1	Successful Credential Theft Detected	198.58.107.108	443	192.168.2.4	60215	TCP

String found in binary or memory: a-zA-Z]{2,})(\/[^\s"'<]*)?/g,(e,t,i,n,s)=>{let o=i+"://"+n+(s||"");switch(n){case"www.youtube.com":case"youtube.com":if(a)return o=o.replace("/watch?v=","/embed/"),t+l.replace("{{1}}",o);case"youtu.be":if(a)return t+l.replace("{{1}}","https://youtube.com/embed/"+s);break;default:return t+"<"+r+' href="'+o+'" rel="'+this.$page.rel+'" target="_blank" style="color: inherit" class="link">'+o+"</"+r+">"}}))},s.filter("sprintf",(e,t)=>t.replace("%s",e)),s.filter("replace",function(){var e=arguments;return e[0].replace(e[1],e[2])}),s.filter("format",t),s.filter("nl2br",d),s.filter("escape",u),s.filter("lowercase",e=>e.toString().toLowerCase()),s.filter("uppercase",e=>e.toString().toUpperCase()),s.prototype.$nl2br=d,s.prototype.$format=t,s.prototype.$escape=u,s.prototype.$clone=e=>JSON.parse(JSON.stringify(e)),s.filter("join",function(e,t){return e&&e.join(t)}),s.prototype.$getDaysNames=()=>_.map([" equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: creditunions.taplink.ws
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: mc.yandex.ru
Source: global traffic	DNS traffic detected: DNS query: taplink.st
Source: global traffic	DNS traffic detected: DNS query: membersourcecu.paolayjon.us
Source: global traffic	DNS traffic detected: DNS query: 423377fa-8849d407.paolayjon.us
Source: global traffic	DNS traffic detected: DNS query: 253eeb81-8849d407.paolayjon.us
Source: global traffic	DNS traffic detected: DNS query: l1ve.paolayjon.us
Source: global traffic	DNS traffic detected: DNS query: 64c2b783-8849d407.paolayjon.us
Source: global traffic	DNS traffic detected: DNS query: 1b4ddfb2-8849d407.paolayjon.us

Source: unknown

HTTP traffic detected: POST /report/v4?s=RCthQibdhKiT2oy837jrtvUaFVHG8d8%2Bp0vmAAd%2FuXmx%2FZwP%2BfRAUH7LClhVScVkXgU6y2gxmvdupLivB0XIMvcSdFAqYyks26cqwu6suRyCYQEv4pAHqH0jmvXnySSZXekRLvkfXpm9 HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 490Content-Type: application/reports+jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 07 Jan 2025 18:40:43 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 63290b0c-7faf-4676-b8b8-a8f73c5bce00x-ms-ests-server: 2.1.19683.3 - FRC ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://1b4ddfb2-8849d407.paolayjon.us/api/report?catId=GW+estsfd+ams2"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 07 Jan 2025 18:40:43 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 8d4ba726-f0a0-4c1f-be52-0c014f112e00x-ms-ests-server: 2.1.19683.6 - SEC ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://1b4ddfb2-8849d407.paolayjon.us/api/report?catId=GW+estsfd+ams2"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 07 Jan 2025 18:40:50 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 029f051e-f7e8-4aa2-8549-c1f56e962300x-ms-ests-server: 2.1.19683.6 - FRC ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://1b4ddfb2-8849d407.paolayjon.us/api/report?catId=GW+estsfd+ams2"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 07 Jan 2025 18:40:52 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: no-store, no-cachex-ms-correlation-id: 17395aba-1058-49f8-9d45-a483ba74e23fx-ua-compatible: IE=Edgex-cache: CONFIG_NOCACHEx-msedge-ref: Ref A: 339CFB91A8BF4B30A43D8D7ECEE82ABA Ref B: DFW311000106017 Ref C: 2025-01-07T18:40:51Zaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 07 Jan 2025 18:40:55 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 59029445-4120-4f83-964b-970f1b6a1f00x-ms-ests-server: 2.1.19683.6 - SEC ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://1b4ddfb2-8849d407.paolayjon.us/api/report?catId=GW+estsfd+ams2"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 07 Jan 2025 18:41:01 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 88567f46-75b8-420b-bbd4-e8b939c32300x-ms-ests-server: 2.1.19683.6 - FRC ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://1b4ddfb2-8849d407.paolayjon.us/api/report?catId=GW+estsfd+ams2"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 07 Jan 2025 18:41:10 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: ce1fae53-f282-4015-b5e6-8bc532db0702x-ms-ests-server: 2.1.19683.6 - WEULR1 ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://1b4ddfb2-8849d407.paolayjon.us/api/report?catId=GW+estsfd+ams2"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 07 Jan 2025 18:41:20 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 7e273d41-e867-4731-8b24-9dadb54c4201x-ms-ests-server: 2.1.19683.6 - WEULR1 ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://1b4ddfb2-8849d407.paolayjon.us/api/report?catId=GW+estsfd+ams2"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 07 Jan 2025 18:41:33 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 2b828c68-d963-4ea9-b8b0-2beea22c2200x-ms-ests-server: 2.1.19683.6 - FRC ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://1b4ddfb2-8849d407.paolayjon.us/api/report?catId=GW+estsfd+ams2"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:

Source: chromecache_102.2.dr	String found in binary or memory: http://ogp.me/ns#
Source: chromecache_98.2.dr, chromecache_81.2.dr	String found in binary or memory: https://audiomack.com/embed/
Source: chromecache_102.2.dr	String found in binary or memory: https://creditunions.taplink.ws
Source: chromecache_102.2.dr	String found in binary or memory: https://creditunions.taplink.ws/
Source: chromecache_104.2.dr	String found in binary or memory: https://creditunions.taplink.ws?from=app
Source: chromecache_98.2.dr, chromecache_81.2.dr	String found in binary or memory: https://embed.beatport.com/?id=
Source: chromecache_98.2.dr, chromecache_81.2.dr	String found in binary or memory: https://embed.music.apple.com/
Source: chromecache_98.2.dr, chromecache_81.2.dr	String found in binary or memory: https://m.taplink.st/
Source: chromecache_98.2.dr, chromecache_81.2.dr	String found in binary or memory: https://maps.google.com/?q=
Source: chromecache_102.2.dr	String found in binary or memory: https://membersourcecu.paolayjon.us/?KDnq=vxU7AS
Source: chromecache_81.2.dr	String found in binary or memory: https://music.yandex.
Source: chromecache_98.2.dr, chromecache_81.2.dr	String found in binary or memory: https://open.spotify.com/embed/
Source: chromecache_102.2.dr, chromecache_104.2.dr	String found in binary or memory: https://taplink.st/a/9/8/8/2/c3da8e.png?1
Source: chromecache_98.2.dr, chromecache_81.2.dr	String found in binary or memory: https://w.soundcloud.com/player/?url=
Source: chromecache_98.2.dr, chromecache_81.2.dr	String found in binary or memory: https://widget.anghami.com/
Source: chromecache_98.2.dr, chromecache_81.2.dr	String found in binary or memory: https://widget.deezer.com/widget/auto/
Source: chromecache_98.2.dr, chromecache_81.2.dr	String found in binary or memory: https://www.openstreetmap.org/copyright
Source: chromecache_98.2.dr, chromecache_81.2.dr	String found in binary or memory: https://youtube.com/embed/
Source: chromecache_98.2.dr, chromecache_81.2.dr	String found in binary or memory: https://zvuk.com/embed/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60255
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60254
Source: unknown	Network traffic detected: HTTP traffic on port 60263 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60253
Source: unknown	Network traffic detected: HTTP traffic on port 60320 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60252
Source: unknown	Network traffic detected: HTTP traffic on port 60389 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60234 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60228 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60220 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60268
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60389
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60300
Source: unknown	Network traffic detected: HTTP traffic on port 60239 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60263
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60262
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60231 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60242 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60236 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60315
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60253 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60222 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60320
Source: unknown	Network traffic detected: HTTP traffic on port 60233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60216 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60244 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60315 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60229 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60238 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60218
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60217
Source: unknown	Network traffic detected: HTTP traffic on port 60230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60216
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60215
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60336
Source: unknown	Network traffic detected: HTTP traffic on port 60215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60249 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60224 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60224
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60223
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60222
Source: unknown	Network traffic detected: HTTP traffic on port 60262 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60221
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60220
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60229
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60228
Source: unknown	Network traffic detected: HTTP traffic on port 60218 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60227
Source: unknown	Network traffic detected: HTTP traffic on port 60235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60226
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60225
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60246 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60336 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60235
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60234
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60233
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60232
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60231
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60230
Source: unknown	Network traffic detected: HTTP traffic on port 60217 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60239
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60238
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60237
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60232 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60236
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 60226 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 60268 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60246
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60245
Source: unknown	Network traffic detected: HTTP traffic on port 60237 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60244
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60243
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60242
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60240
Source: unknown	Network traffic detected: HTTP traffic on port 60300 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 60254 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60249
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60247

Source: classification engine

Classification label: mal68.phis.win@17/57@32/11

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2520 --field-trial-handle=2328,i,13374789021789178064,4621055915112058383,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://creditunions.taplink.ws"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2520 --field-trial-handle=2328,i,13374789021789178064,4621055915112058383,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://creditunions.taplink.ws	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://creditunions.taplink.ws/3d10566912835470.webmanifest	0%	Avira URL Cloud	safe
https://membersourcecu.paolayjon.us/common/GetCredentialType?mkt=en-US	0%	Avira URL Cloud	safe
https://423377fa-8849d407.paolayjon.us/shared/1.0/content/js/ConvergedLogin_PCore_kAx9qZOSH4g90FNHstHMCA2.js	0%	Avira URL Cloud	safe
https://membersourcecu.paolayjon.us/8849d4073e484f32a09666330dcd3f78/	0%	Avira URL Cloud	safe
https://widget.deezer.com/widget/auto/	0%	Avira URL Cloud	safe
https://423377fa-8849d407.paolayjon.us/shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js	0%	Avira URL Cloud	safe
https://music.yandex.	0%	Avira URL Cloud	safe
https://embed.beatport.com/?id=	0%	Avira URL Cloud	safe
https://423377fa-8849d407.paolayjon.us/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico	0%	Avira URL Cloud	safe
https://423377fa-8849d407.paolayjon.us/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg	0%	Avira URL Cloud	safe
https://423377fa-8849d407.paolayjon.us/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg	0%	Avira URL Cloud	safe
https://1b4ddfb2-8849d407.paolayjon.us/api/report?catId=GW+estsfd+ams2	0%	Avira URL Cloud	safe
https://widget.anghami.com/	0%	Avira URL Cloud	safe
https://423377fa-8849d407.paolayjon.us/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_cc2c59f5ef2c09e14b08.js	0%	Avira URL Cloud	safe
https://423377fa-8849d407.paolayjon.us/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif	0%	Avira URL Cloud	safe
https://creditunions.taplink.ws/s/css/frontend.css?1.2.9105	0%	Avira URL Cloud	safe
https://creditunions.taplink.ws/s/fonts/google/css/woff2/roboto.css?1.2.9105	0%	Avira URL Cloud	safe
https://creditunions.taplink.ws?from=app	0%	Avira URL Cloud	safe
https://creditunions.taplink.ws/s/js/frontend.js?1.2.9105	0%	Avira URL Cloud	safe
https://423377fa-8849d407.paolayjon.us/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_27cef08ca792f8e8b149.js	0%	Avira URL Cloud	safe
https://creditunions.taplink.ws/s/js/locales.pages.en.js?1.2.9105	0%	Avira URL Cloud	safe
https://membersourcecu.paolayjon.us/favicon.ico	0%	Avira URL Cloud	safe
https://423377fa-8849d407.paolayjon.us/ests/2.1/content/cdnbundles/converged.v2.login.min_81imvbluez-v5hbzpkxfcg2.css	0%	Avira URL Cloud	safe
https://m.taplink.st/	0%	Avira URL Cloud	safe
https://423377fa-8849d407.paolayjon.us/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg	0%	Avira URL Cloud	safe
https://64c2b783-8849d407.paolayjon.us/Prefetch/Prefetch.aspx	0%	Avira URL Cloud	safe
https://423377fa-8849d407.paolayjon.us/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif	0%	Avira URL Cloud	safe
https://423377fa-8849d407.paolayjon.us/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_i8f-75gfk3tbsm8bmatnqa2.js	0%	Avira URL Cloud	safe
https://423377fa-8849d407.paolayjon.us/shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js	0%	Avira URL Cloud	safe
https://l1ve.paolayjon.us/Me.htm?v=3	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
mc.yandex.ru	87.250.250.119	true	false	high
423377fa-8849d407.paolayjon.us	198.58.107.108	true	true	unknown
1b4ddfb2-8849d407.paolayjon.us	198.58.107.108	true	true	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	high
taplink.st	104.26.3.150	true	false	high
64c2b783-8849d407.paolayjon.us	198.58.107.108	true	true	unknown
www.google.com	142.250.186.68	true	false	high
membersourcecu.paolayjon.us	198.58.107.108	true	true	unknown
l1ve.paolayjon.us	198.58.107.108	true	true	unknown
253eeb81-8849d407.paolayjon.us	198.58.107.108	true	true	unknown
taplink.me	104.26.10.47	true	false	unknown
creditunions.taplink.ws	unknown	unknown	true	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://423377fa-8849d407.paolayjon.us/shared/1.0/content/js/ConvergedLogin_PCore_kAx9qZOSH4g90FNHstHMCA2.js	true	Avira URL Cloud: safe	unknown
https://423377fa-8849d407.paolayjon.us/shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js	true	Avira URL Cloud: safe	unknown
https://membersourcecu.paolayjon.us/common/GetCredentialType?mkt=en-US	true	Avira URL Cloud: safe	unknown
https://mc.yandex.ru/watch/84470437?page-ref=&page-url=https%3A%2F%2Ftaplink.cloud%2Fpages%2Fc3da8e%2Ff3b4f3%2F%3Ffrom%3Dbr&browser-info=la%3Aen-US&rn=0.24886923640989056	false		high
https://mc.yandex.ru/watch/44929738/1?page-ref&page-url=https%3A%2F%2Fcreditunions.taplink.ws%2F&browser-info=la%3Aen-US&rn=0.842207389920755&redirnss=1	false		high
https://mc.yandex.ru/watch/44929738?page-ref=&page-url=https%3A%2F%2Fcreditunions.taplink.ws%2F&browser-info=la%3Aen-US&rn=0.842207389920755	false		high
https://creditunions.taplink.ws/3d10566912835470.webmanifest	false	Avira URL Cloud: safe	unknown
https://membersourcecu.paolayjon.us/8849d4073e484f32a09666330dcd3f78/	true	Avira URL Cloud: safe	unknown
https://423377fa-8849d407.paolayjon.us/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg	true	Avira URL Cloud: safe	unknown
https://taplink.st/a/9/8/8/2/c3da8e.png?1	false		high
https://423377fa-8849d407.paolayjon.us/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico	true	Avira URL Cloud: safe	unknown
https://423377fa-8849d407.paolayjon.us/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg	true	Avira URL Cloud: safe	unknown
https://1b4ddfb2-8849d407.paolayjon.us/api/report?catId=GW+estsfd+ams2	true	Avira URL Cloud: safe	unknown
https://creditunions.taplink.ws/s/css/frontend.css?1.2.9105	false	Avira URL Cloud: safe	unknown
https://423377fa-8849d407.paolayjon.us/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_cc2c59f5ef2c09e14b08.js	true	Avira URL Cloud: safe	unknown
https://creditunions.taplink.ws/s/fonts/google/css/woff2/roboto.css?1.2.9105	false	Avira URL Cloud: safe	unknown
https://membersourcecu.paolayjon.us/?KDnq=vxU7AS	false		unknown
https://423377fa-8849d407.paolayjon.us/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_27cef08ca792f8e8b149.js	true	Avira URL Cloud: safe	unknown
https://creditunions.taplink.ws/s/js/frontend.js?1.2.9105	false	Avira URL Cloud: safe	unknown
https://mc.yandex.ru/watch/84470437/1?page-ref&page-url=https%3A%2F%2Ftaplink.cloud%2Fpages%2Fc3da8e%2Ff3b4f3%2F%3Ffrom%3Dbr&browser-info=la%3Aen-US&rn=0.24886923640989056&redirnss=1	false		high
https://creditunions.taplink.ws/	false		unknown
https://423377fa-8849d407.paolayjon.us/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif	true	Avira URL Cloud: safe	unknown
https://creditunions.taplink.ws/s/js/locales.pages.en.js?1.2.9105	false	Avira URL Cloud: safe	unknown
https://membersourcecu.paolayjon.us/favicon.ico	true	Avira URL Cloud: safe	unknown
https://423377fa-8849d407.paolayjon.us/ests/2.1/content/cdnbundles/converged.v2.login.min_81imvbluez-v5hbzpkxfcg2.css	true	Avira URL Cloud: safe	unknown
https://membersourcecu.paolayjon.us/?KDnq=vxU7AS&sso_reload=true	true		unknown
https://423377fa-8849d407.paolayjon.us/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg	true	Avira URL Cloud: safe	unknown
https://423377fa-8849d407.paolayjon.us/shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js	true	Avira URL Cloud: safe	unknown
https://64c2b783-8849d407.paolayjon.us/Prefetch/Prefetch.aspx	true	Avira URL Cloud: safe	unknown
https://423377fa-8849d407.paolayjon.us/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif	true	Avira URL Cloud: safe	unknown
https://l1ve.paolayjon.us/Me.htm?v=3	true	Avira URL Cloud: safe	unknown
https://423377fa-8849d407.paolayjon.us/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_i8f-75gfk3tbsm8bmatnqa2.js	true	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://audiomack.com/embed/	chromecache_98.2.dr, chromecache_81.2.dr	false		high
https://youtube.com/embed/	chromecache_98.2.dr, chromecache_81.2.dr	false		high
https://embed.beatport.com/?id=	chromecache_98.2.dr, chromecache_81.2.dr	false	Avira URL Cloud: safe	unknown
https://creditunions.taplink.ws	chromecache_102.2.dr	true		unknown
https://widget.deezer.com/widget/auto/	chromecache_98.2.dr, chromecache_81.2.dr	false	Avira URL Cloud: safe	unknown
https://music.yandex.	chromecache_81.2.dr	false	Avira URL Cloud: safe	unknown
https://widget.anghami.com/	chromecache_98.2.dr, chromecache_81.2.dr	false	Avira URL Cloud: safe	unknown
https://zvuk.com/embed/	chromecache_98.2.dr, chromecache_81.2.dr	false		high
https://creditunions.taplink.ws?from=app	chromecache_104.2.dr	false	Avira URL Cloud: safe	unknown
https://open.spotify.com/embed/	chromecache_98.2.dr, chromecache_81.2.dr	false		high
https://w.soundcloud.com/player/?url=	chromecache_98.2.dr, chromecache_81.2.dr	false		high
https://www.openstreetmap.org/copyright	chromecache_98.2.dr, chromecache_81.2.dr	false		high
http://ogp.me/ns#	chromecache_102.2.dr	false		high
https://maps.google.com/?q=	chromecache_98.2.dr, chromecache_81.2.dr	false		high
https://m.taplink.st/	chromecache_98.2.dr, chromecache_81.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.68	www.google.com	United States	15169	GOOGLEUS	false
104.26.2.150	unknown	United States	13335	CLOUDFLARENETUS	false
104.26.3.150	taplink.st	United States	13335	CLOUDFLARENETUS	false
87.250.250.119	mc.yandex.ru	Russian Federation	13238	YANDEXRU	false
104.26.10.47	taplink.me	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
93.158.134.119	unknown	Russian Federation	13238	YANDEXRU	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
198.58.107.108	423377fa-8849d407.paolayjon.us	United States	63949	LINODE-APLinodeLLCUS	true
172.67.74.23	unknown	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1585531
Start date and time:	2025-01-07 19:39:20 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 12s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://creditunions.taplink.ws
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal68.phis.win@17/57@32/11
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.174, 74.125.71.84, 142.250.185.99, 142.250.186.110, 216.58.212.174, 142.250.74.206, 199.232.214.172, 192.229.221.95, 172.217.16.142, 172.217.18.14, 142.250.185.78, 142.250.185.238, 172.217.16.138, 172.217.18.106, 142.250.186.42, 142.250.184.202, 142.250.186.138, 216.58.206.42, 172.217.23.106, 216.58.206.74, 172.217.16.202, 142.250.185.74, 172.217.18.10, 142.250.74.202, 142.250.181.234, 142.250.184.234, 216.58.212.138, 142.250.186.106, 142.250.186.99, 142.250.184.238, 23.56.254.164, 4.245.163.56, 13.107.246.45
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, dns.msftncsi.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://creditunions.taplink.ws

Input	Output
URL: https://creditunions.taplink.ws Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": true, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": true, "third_party_hosting": true }
URL: https://creditunions.taplink.ws
URL: https://membersourcecu.paolayjon.us/?KDnq=vxU7AS&s... Model: Joe Sandbox AI	{ "risk_score": 6, "reasoning": "The script demonstrates moderate-risk behaviors, including redirecting the user to a potentially untrusted domain and modifying the URL with query parameters. While the intent is not entirely clear, the script's behavior could be used for malicious purposes such as tracking or phishing. Further investigation is recommended." }
//<![CDATA[ !function(){var e=window,s=e.document,i=e.$Config\|\|{};if(true){s&&s.body&&(s.body.style.display="block")}else if(false){var o,t,r,f,n,d;if(i.fAddTryCatchForIFrameRedirects){try{o=e.self.location.href,t=o.indexOf("#"),r=-1!==t,f=o.indexOf("?"),n=r?t:o.length,d=-1===f\|\|r&&f>t?"?":"&",o=o.substr(0,n)+d+"iframe-request-id="+i.sessionId+o.substr(n),e.top.location=o}catch(e){}}else{o=e.self.location.href,t=o.indexOf("#"),r=-1!==t,f=o.indexOf("?"),n=r?t:o.length,d=-1===f\|\|r&&f>t?"?":"&", o=o.substr(0,n)+d+"iframe-request-id="+i.sessionId+o.substr(n),e.top.location=o}}}(); //
URL: https://membersourcecu.paolayjon.us/?KDnq=vxU7AS... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be a part of a larger library or framework, likely related to WebSocket or Observable functionality. While it contains some potentially risky behaviors, such as dynamic code execution and data transmission, the overall context suggests these are likely part of legitimate functionality rather than malicious intent. The script does not exhibit clear signs of malicious behavior, and the risk factors can be mitigated by proper implementation and usage within a trusted environment." }
function a0B4(){var Sr=['nEPwr','vKlXX','str','ping','destination','Aojhv','BtkyZ','apply','notified','div','wbhAA','CONSTRUCTOR','scheduler','Dispatch','subscribe','complete','Null','_innerSubscribe','createEvent','hasError','4343672BLsliT','AnDcc','schedulerActionCtor','min','ownKeys','Jhadk','jysAC','7183967lXdHyV','yESrJ','_complete','onerror','SMFiB','rGqYJ','cVLvs','push','stack','hVtoG','fail','KvbLu','reject','species','closeObserver','6985552EAMbDx','[object\x20z]','gilGP','open','unscopables','GixYE','toStringTag','errors','nhUAA','ScbtQ','{}.constructor(\x22return\x20this\x22)(\x20)','observers','add','eIwwK','useDeprecatedNextContext','createTextNode','inspectSource','max','GSsSX','$(?!\x5cs)','(?:\x20','WebSocketSubject.error\x20must\x20be\x20called\x20with\x20an\x20object\x20with\x20an\x20error\x20code,\x20and\x20an\x20optional\x20reason:\x20{\x20code:\x20number,\x20reason:\x20string\x20}','forced','OJhlg','bind','__proto__','MYRdx','onmessage','QUbVp','Cannot\x20convert\x20a\x20Symbol\x20value\x20to\x20a\x20string','raw','xjegD','clearImmediate','keys','499024Aemode','JIvSL','You\x20provided\x20','protocol','no\x20WebSocket\x20constructor\x20can\x20be\x20found','UFZPb','Math','match','navigator','95zKrUxU','432uNmBiV','LFCpg','test','Symbol.asyncIterator\x20is\x20not\x20defined.','setTimeout','execute','$<a>','yggKv','Object\x20already\x20initialized','getOwnPropertyDescriptor','rHXMv','BROWSER','dispatchEvent','kWYXk','XStDx','VPtKN','hasOwnProperty','mxqKA','yHbsF','parentWindow','return\x20this','work','IYvIY','_removeParent','asyncIterator','WRtPC','juibp','wDoLb','delegate','SursS','hEjfh','port2','faLqZ','shfuq','DtLcf','mWRNt','head','_execute','TypeError','get','abcd','isStopped','aetEY','DTZoN','869396RdtkrO','oqImI','clearInterval','Object','_trimBuffer','arity','gxbhK','hasIndices','remove','FnWky','UQQQr','76120oEtsHm','resolve','zCqWD','error','Incorrect\x20invocation','','401292lDeTQK','jgNMb','onFinalize','yRdCw','Symbol(','userAgent','Whyxn','readyState','xuHEe','done','shift','includes','PromiseRejectionEvent','DwWyh','rEjGp','OSYDA','4gQJCFg','tmkpX','LRWGa','UstaU','ops','string','NATIVE','source','isArray','dotAll','\x20is\x20not\x20a\x20constructor\x20or\x20null','uwElT','symbol','object','asObservable','PPrXY','','QqAky','valueOf','java','Can\x27t\x20convert\x20object\x20to\x20primitive\x20value','_next','viqjM','parse','IS_ITERATOR','create','rejectionHandled','35aWAEwx','bsWqt','return\x20(function()\x20','cHczp','Promise\x20can\x27t\x20be\x20resolved\x20itself','schedule','Yuzvv','Bun','dxrYf','134QDzbaa','target','hDLjt','multiplex','useDeprecatedSynchronousErrorHandling','qvtgh','Symbol.iterator\x20is\x20not\x20defined.','thrownError','SiJZn','yTmNE','trunc','BROKEN_CARET','Symbol','(?<a>b)','errorThrown','lWwib','_connectSocket','toLocaleString','indexOf','CLOUDFLARE','trys','reactions','AegwJ','closingObserver','iSQPz','input','Promise-chain\x20cycle','url','replace','123684MljNAg','eqXTw','String','top','hZviO','HoQMq','OnPEP','1279198RdXiIa','find','Pwnyy','retBZ','ukyMo','toPromise','xGTNm','then','callee','Scheduled\x20action\x20threw\x20falsy\x20error','Array','uGNwT','_resetState','ceil','wbhgs','domain','gnYks','dbVTK','getReader','ralza','stringify','qJFCG','exec','documentElement','zZCzC','version','message','propertyIsEnumerable','26073htKtec','hzcQc','facade','Promise','RdXLH','KrULa','gTdht','487880gBdORZ','native-string-replace','\x20required','_output','HLfmO','has','oKFMi','IS_RECORD','status','promise','\x20where\x20a\x20stream\x20was\x20expected.\x20You\x20can\x20provide\x20an\x20Observable,\x20Promise,\x20ReadableStream,\x20Array,\x20AsyncIterable,\x20or\x20Iterable.','construct','hphAB','IsTSD','catch','addEventListener','Iterable\x20cannot\x20be\x20null','_checkFinalizedStatuses','tPiAY','_config','_error','Generator\x20is\x20already\x20executing.','next','_buffer','setInterval','toLowerCase','charCodeAt','JsbyY','onUnhandledError','getOwnPropertySymbols','wGTBs',
URL: https://membersourcecu.paolayjon.us/?KDnq=vxU7AS... Model: Joe Sandbox AI	{ "risk_score": 4, "reasoning": "The provided JavaScript snippet contains a mix of behaviors that require further review. While it includes some legitimate functionality like analytics and telemetry, it also exhibits moderate-risk indicators such as external data transmission and the use of fallback domains. Additionally, the presence of obfuscated URLs and the interaction with domains of unknown reputation raise some concerns. Overall, the script requires closer inspection to determine the full extent of its behavior and potential risks." }
//<![CDATA[ $Config={"iMaxStackForKnockoutAsyncComponents":10000,"fShowButtons":true,"urlCdn":"https://423377fa-8849d407.paolayjon.us/shared/1.0/","urlDefaultFavicon":"https://423377fa-8849d407.paolayjon.us/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico","urlPost":"/login.srf?KDnq=vxU7AS\u0026client-request-id=4cbaf1b3-75b8-496a-99ee-b27ee70d3229\u0026sso_reload=True","iPawnIcon":0,"sPOST_Username":"","sFTName":"flowToken","fEnableOneDSClientTelemetry":true,"dynamicTenantBranding":null,"staticTenantBranding":null,"oAppCobranding":{},"iBackgroundImage":2,"fApplicationInsightsEnabled":false,"iApplicationInsightsEnabledPercentage":0,"urlSetDebugMode":"https://membersourcecu.paolayjon.us/common/debugmode","fEnableCssAnimation":true,"fAllowGrayOutLightBox":true,"fUseMsaSessionState":true,"fIsRemoteNGCSupported":true,"desktopSsoConfig":{"isEdgeAnaheimAllowed":true,"iwaEndpointUrlFormat":"https://62ce5f25-8849d407.paolayjon.us/{0}/winauth/sso?client-request-id=4cbaf1b3-75b8-496a-99ee-b27ee70d3229","iwaSsoProbeUrlFormat":"https://62ce5f25-8849d407.paolayjon.us/{0}/winauth/ssoprobe?client-request-id=4cbaf1b3-75b8-496a-99ee-b27ee70d3229","iwaIFrameUrlFormat":"https://62ce5f25-8849d407.paolayjon.us/{0}/winauth/iframe?client-request-id=4cbaf1b3-75b8-496a-99ee-b27ee70d3229\u0026isAdalRequest=False","iwaRequestTimeoutInMs":10000,"startDesktopSsoOnPageLoad":false,"progressAnimationTimeout":10000,"isEdgeAllowed":false,"minDssoEdgeVersion":"17","isSafariAllowed":true,"redirectUri":"","isIEAllowedForSsoProbe":true,"edgeRedirectUri":"https://62ce5f25-8849d407.paolayjon.us/common/winauth/sso/edgeredirect?client-request-id=4cbaf1b3-75b8-496a-99ee-b27ee70d3229\u0026origin=login.microsoftonline.com\u0026is_redirected=1","isFlowTokenPassedInEdge":true},"iSessionPullType":2,"fUseSameSite":true,"isGlobalTenant":true,"uiflavor":1001,"fOfflineAccountVisible":false,"fEnableUserStateFix":true,"fShowAccessPassPeek":true,"fUpdateSessionPollingLogic":true,"fEnableShowPickerCredObservable":true,"fFetchSessionsSkipDsso":true,"fUseNonMicrosoftDefaultBrandingForCiam":true,"fRemoveCustomCss":true,"fFixUICrashForApiRequestHandler":true,"fShowUpdatedKoreanPrivacyFooter":true,"fUsePostCssHotfix":true,"fFixUserFlowBranding":true,"fEnablePasskeyNullFix":true,"fEnableRefreshCookiesFix":true,"scid":2001,"hpgact":2101,"hpgid":6,"apiCanary":"PAQABDgEAAADW6jl31mB3T7ugrWTT8pFeD2Z_UuVHcPZGBJzMkU-nTpSromYixLC4c_JtAq76V3CC2CBrFet0pofRgiiT9osp8cG4T63WkNkgeLuZCS9Tx_9yS1Ad23y7anXzFhNiPfurHSep5lXppdchxW9YU3WWRQsa1l0lphIWcJO9c5zxeSh5t1Kn14GyYIo7kfPra499Y50nLu6hXMyOJ0jDGkMH_h3sJtF2M9l3HDByGAOb_SAA","canary":"+v8oY1M6SpTsCF6qKi7jR2zKsDV8M6eXWUJeAZNXroc=3:1:CANARY:LliTNlfoozhDim6/MJ/TFp1+3v14OOrATIuu+GDjiVA=","sCanaryTokenName":"canary","fSkipRenderingNewCanaryToken":false,"fEnableNewCsrfProtection":true,"correlationId":"4cbaf1b3-75b8-496a-99ee-b27ee70d3229","sessionId":"5cd0a04f-9973-4464-a86f-dfd0fe0f0401","locale":{"mkt":"en-US","lcid":1033},"slMaxRetry":2,"slReportFailure":true,"strings":{"desktopsso":{"authenticatingmessage":"Trying to sign you in"}},"enums":{"ClientMetricsModes":{"None":0,"SubmitOnPost":1,"SubmitOnRedirect":2,"InstrumentPlt":4}},"urls":{"instr":{"pageload":"https://membersourcecu.paolayjon.us/common/instrumentation/reportpageload","dssostatus":"https://membersourcecu.paolayjon.us/common/instrumentation/dssostatus"}},"browser":{"ltr":1,"Chrome":1,"_Win":1,"_M117":1,"_D0":1,"Full":1,"Win81":1,"RE_WebKit":1,"b":{"name":"Chrome","major":117,"minor":0},"os":{"name":"Windows","version":"10.0"},"V":"117.0"},"watson":{"url":"/common/handlers/watson","bundle":"https://423377fa-8849d407.paolayjon.us/ests/2.1/content/cdnbundles/watson.min_q5ptmu8aniymd4ftuqdkda2.js","sbundle":"https://423377fa-8849d407.paolayjon.us/ests/2.1/content/cdnbundles/watsonsupportwithjquery.3.5.min_dc940oomzau4rsu8qesnvg2.js","fbundle":"https://423377fa-8849d407.paolayjon.us/ests/2.1/content/cdnbundles/frameworksupport.min_oadrnc13magb009k4d20lg2.js","resetErrorPeriod":5,"maxCorsEr
URL: https://membersourcecu.paolayjon.us/?KDnq=vxU7AS&s... Model: Joe Sandbox AI	{ "risk_score": 6, "reasoning": "The provided JavaScript snippet contains several behaviors that raise moderate security concerns. It includes external data transmission to potentially untrusted domains, the use of obfuscated URLs, and the presence of fallback domains. While the intent may be legitimate, such as for authentication or analytics purposes, the lack of transparency and the use of questionable practices warrant further review. The overall risk score is in the medium range, indicating the need for closer inspection to ensure the script's safety and alignment with security best practices." }
//<![CDATA[ $Config={"fShowPersistentCookiesWarning":false,"urlMsaSignUp":"https://l1ve.paolayjon.us/oauth20_authorize.srf?scope=openid+profile+email+offline_access\u0026response_type=code\u0026client_id=51483342-085c-4d86-bf88-cf50c7252078\u0026response_mode=form_post\u0026redirect_uri=https%3a%2f%2fmembersourcecu.paolayjon.us%2fcommon%2ffederation%2foauth2msa\u0026state=rQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuATsXjVN77hm7rt-yuIXZ5re_5_FyBmfk1kGVrmKUZmwcfoXGBlfMDLeYhL0L0r3TAkvdktNSS1KLMnMz7vAIvCKhceA2YqDg0uAQYJBgeEHC-MiVqCtR3VXxAmuznacr6Ktk_hRluEUq752mUV-pKGvWXBBSLGzm1mhd6Z5VpBRlXexS5iFr1lqRHioV6pjlF9EUX6yraWV4QQ2oQlsTKfYGD6wMXawM8xiZzjAybiBh_EAL8MPvrZp56-veXn6nccrfp0Usypv71JT99zQgMKQdP2csGCD0pBUf8PiEpdkyyovEydvE_eUcvdkR3dH2w0CDA8EGAA1\u0026estsfed=1\u0026uaid=9782ea3ed6884d37af94a3e8cc82efff\u0026signup=1\u0026lw=1\u0026fl=easi2\u0026fci=https%3a%2f%2f6ba64eb6-8849d407.paolayjon.us","urlMsaLogout":"https://l1ve.paolayjon.us/logout.srf?iframed_by=https%3a%2f%2fmembersourcecu.paolayjon.us","urlOtherIdpForget":"https://l1ve.paolayjon.us/forgetme.srf?iframed_by=https%3a%2f%2fmembersourcecu.paolayjon.us","showCantAccessAccountLink":true,"urlGitHubFed":"https://l1ve.paolayjon.us/oauth20_authorize.srf?scope=openid+profile+email+offline_access\u0026response_type=code\u0026client_id=51483342-085c-4d86-bf88-cf50c7252078\u0026response_mode=form_post\u0026redirect_uri=https%3a%2f%2fmembersourcecu.paolayjon.us%2fcommon%2ffederation%2foauth2msa\u0026state=rQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuATsXjVN77hm7rt-yuIXZ5re_5_FyBmfk1kGVrmKUZmwcfoXGBlfMDLeYhL0L0r3TAkvdktNSS1KLMnMz7vAIvCKhceA2YqDg0uAQYJBgeEHC-MiVqCtR3VXxAmuznacr6Ktk_hRluEUq752mUV-pKGvWXBBSLGzm1mhd6Z5VpBRlXexS5iFr1lqRHioV6pjlF9EUX6yraWV4QQ2oQlsTKfYGD6wMXawM8xiZzjAybiBh_EAL8MPvrZp56-veXn6nccrfp0Usypv71JT99zQgMKQdP2csGCD0pBUf8PiEpdkyyovEydvE_eUcvdkR3dH2w0CDA8EGAA1\u0026estsfed=1\u0026uaid=9782ea3ed6884d37af94a3e8cc82efff\u0026fci=https%3a%2f%2f6ba64eb6-8849d407.paolayjon.us\u0026idp_hint=github.paolayjon.us","arrExternalTrustedRealmFederatedIdps":[],"fShowSignInWithGitHubOnlyOnCredPicker":true,"fEnableShowResendCode":true,"iShowResendCodeDelay":90000,"sSMSCtryPhoneData":"AF~Afghanistan~93!!!AX~land Islands~358!!!AL~Albania~355!!!DZ~Algeria~213!!!AS~American Samoa~1!!!AD~Andorra~376!!!AO~Angola~244!!!AI~Anguilla~1!!!AG~Antigua and Barbuda~1!!!AR~Argentina~54!!!AM~Armenia~374!!!AW~Aruba~297!!!AC~Ascension Island~247!!!AU~Australia~61!!!AT~Austria~43!!!AZ~Azerbaijan~994!!!BS~Bahamas~1!!!BH~Bahrain~973!!!BD~Bangladesh~880!!!BB~Barbados~1!!!BY~Belarus~375!!!BE~Belgium~32!!!BZ~Belize~501!!!BJ~Benin~229!!!BM~Bermuda~1!!!BT~Bhutan~975!!!BO~Bolivia~591!!!BQ~Bonaire~599!!!BA~Bosnia and Herzegovina~387!!!BW~Botswana~267!!!BR~Brazil~55!!!IO~British Indian Ocean Territory~246!!!VG~British Virgin Islands~1!!!BN~Brunei~673!!!BG~Bulgaria~359!!!BF~Burkina Faso~226!!!BI~Burundi~257!!!CV~Cabo Verde~238!!!KH~Cambodia~855!!!CM~Cameroon~237!!!CA~Canada~1!!!KY~Cayman Islands~1!!!CF~Central African Republic~236!!!TD~Chad~235!!!CL~Chile~56!!!CN~China~86!!!CX~Christmas Island~61!!!CC~Cocos (Keeling) Islands~61!!!CO~Colombia~57!!!KM~Comoros~269!!!CG~Congo~242!!!CD~Congo (DRC)~243!!!CK~Cook Islands~682!!!CR~Costa Rica~506!!!CI~Cte d\u0027Ivoire~225!!!HR~Croatia~385!!!CU~Cuba~53!!!CW~Curaao~599!!!CY~Cyprus~357!!!CZ~Czechia~420!!!DK~Denmark~45!!!DJ~Djibouti~253!!!DM~Dominica~1!!!DO~Dominican Republic~1!!!EC~Ecuador~593!!!EG~Egypt~20!!!SV~El Salvador~503!!!GQ~Equatorial Guinea~240!!!ER~Eritrea~291!!!EE~Estonia~372!!!ET~Ethiopia~251!!!FK~Falkland Islands~500!!!FO~Faroe Islands~298!!!FJ~Fiji~679!!!FI~Finland~358!!!FR~France~33!!!GF~French Guiana~594!!!PF~French Polynesia~689!!!GA~Gabon~241!!!GM~Gambia~220!!!GE~Georgia~995!!!DE~Germany~49!!!GH~Ghana~233!!!GI~Gibraltar~350!!!GR~Greece~30!!!GL~Greenland~299!!!GD~Grenada~1!!!GP~Guadeloupe~590!!!GU~Guam~1!!!GT~Guatemala~502!!!GG~Guernsey~44!!!GN~Guinea~224!!!GW~Guinea-Bissau~245!!!GY~Guyana~592!!!HT~H
URL: https://membersourcecu.paolayjon.us/?KDnq=vxU7AS... Model: Joe Sandbox AI	{ "risk_score": 6, "reasoning": "The provided JavaScript snippet exhibits several behaviors that raise moderate security concerns. While it does not contain any clear indicators of malicious intent, the use of dynamic code execution, external data transmission, and aggressive DOM manipulation warrant further investigation. The script appears to be using obfuscated code, which can be a tactic to conceal potentially harmful activities. Additionally, the presence of fallback domains and the lack of transparency around the data being sent to external servers contribute to the overall risk profile of this script. Overall, this script requires closer scrutiny to determine its true purpose and ensure it does not pose a significant security risk." }
!function(){"use strict";var t=function(e,r){return t=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r])},t(e,r)};function e(e,r){if("function"!=typeof r&&null!==r)throw new TypeError("Class extends value "+String(r)+" is not a constructor or null");function n(){this.constructor=e}t(e,r),e.prototype=null===r?Object.create(r):(n.prototype=r.prototype,new n)}function r(t,e,r,n){return new(r\|\|(r=Promise))((function(o,i){function u(t){try{s(n.next(t))}catch(t){i(t)}}function c(t){try{s(n.throw(t))}catch(t){i(t)}}function s(t){var e;t.done?o(t.value):(e=t.value,e instanceof r?e:new r((function(t){t(e)}))).then(u,c)}s((n=n.apply(t,e\|\|[])).next())}))}function n(t,e){var r,n,o,i,u={label:0,sent:function(){if(1&o[0])throw o[1];return o[1]},trys:[],ops:[]};return i={next:c(0),throw:c(1),return:c(2)},"function"==typeof Symbol&&(i[Symbol.iterator]=function(){return this}),i;function c(c){return function(s){return function(c){if(r)throw new TypeError("Generator is already executing.");for(;i&&(i=0,c[0]&&(u=0)),u;)try{if(r=1,n&&(o=2&c[0]?n.return:c[0]?n.throw\|\|((o=n.return)&&o.call(n),0):n.next)&&!(o=o.call(n,c[1])).done)return o;switch(n=0,o&&(c=[2&c[0],o.value]),c[0]){case 0:case 1:o=c;break;case 4:return u.label++,{value:c[1],done:!1};case 5:u.label++,n=c[1],c=[0];continue;case 7:c=u.ops.pop(),u.trys.pop();continue;default:if(!(o=u.trys,(o=o.length>0&&o[o.length-1])\|\|6!==c[0]&&2!==c[0])){u=0;continue}if(3===c[0]&&(!o\|\|c[1]>o[0]&&c[1]<o[3])){u.label=c[1];break}if(6===c[0]&&u.label<o[1]){u.label=o[1],o=c;break}if(o&&u.label<o[2]){u.label=o[2],u.ops.push(c);break}o[2]&&u.ops.pop(),u.trys.pop();continue}c=e.call(t,u)}catch(t){c=[6,t],n=0}finally{r=o=0}if(5&c[0])throw c[1];return{value:c[0]?c[1]:void 0,done:!0}}([c,s])}}}Object.create;function o(t){var e="function"==typeof Symbol&&Symbol.iterator,r=e&&t[e],n=0;if(r)return r.call(t);if(t&&"number"==typeof t.length)return{next:function(){return t&&n>=t.length&&(t=void 0),{value:t&&t[n++],done:!t}}};throw new TypeError(e?"Object is not iterable.":"Symbol.iterator is not defined.")}function i(t,e){var r="function"==typeof Symbol&&t[Symbol.iterator];if(!r)return t;var n,o,i=r.call(t),u=[];try{for(;(void 0===e\|\|e-- >0)&&!(n=i.next()).done;)u.push(n.value)}catch(t){o={error:t}}finally{try{n&&!n.done&&(r=i.return)&&r.call(i)}finally{if(o)throw o.error}}return u}function u(t,e,r){if(r\|\|2===arguments.length)for(var n,o=0,i=e.length;o<i;o++)!n&&o in e\|\|(n\|\|(n=Array.prototype.slice.call(e,0,o)),n[o]=e[o]);return t.concat(n\|\|Array.prototype.slice.call(e))}function c(t){return this instanceof c?(this.v=t,this):new c(t)}function s(t,e,r){if(!Symbol.asyncIterator)throw new TypeError("Symbol.asyncIterator is not defined.");var n,o=r.apply(t,e\|\|[]),i=[];return n={},u("next"),u("throw"),u("return",(function(t){return function(e){return Promise.resolve(e).then(t,l)}})),n[Symbol.asyncIterator]=function(){return this},n;function u(t,e){o[t]&&(n[t]=function(e){return new Promise((function(r,n){i.push([t,e,r,n])>1\|\|s(t,e)}))},e&&(n[t]=e(n[t])))}function s(t,e){try{(r=o[t](e)).value instanceof c?Promise.resolve(r.value.v).then(a,l):f(i[0][2],r)}catch(t){f(i[0][3],t)}var r}function a(t){s("next",t)}function l(t){s("throw",t)}function f(t,e){t(e),i.shift(),i.length&&s(i[0][0],i[0][1])}}function a(t){if(!Symbol.asyncIterator)throw new TypeError("Symbol.asyncIterator is not defined.");var e,r=t[Symbol.asyncIterator];return r?r.call(t):(t=o(t),e={},n("next"),n("throw"),n("return"),e[Symbol.asyncIterator]=function(){return this},e);function n(r){e[r]=t[r]&&function(e){return new Promise((function(n,o){(function(t,e,r,n){Promise.resolve(n).then((function(e){t({value:e,done:r})}),e)})(n,o,(e=t[r](e)).done,e.value)}))}}}Object.create;"function"==typeof SuppressedError&&SuppressedError;function l(t){return"function"==typeof t}var f,h=((f=function(t){return function(e){t(this),this.message=e?e.length+" errors oc
URL: https://423377fa-8849d407.paolayjon.us/shared/1.0/... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be a polyfill for the Promise API, which is a common and legitimate practice. While it uses some legacy APIs like `XDomainRequest`, the overall behavior is benign and focused on providing a consistent Promise implementation across different environments. There are no clear indicators of malicious intent or data exfiltration, so the risk score is relatively low." }
/! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise. * * json2.js (2016-05-01) * https://github.paolayjon.us/douglascrockford/JSON-js * License: Public Domain * * Provided for Informational Purposes Only * * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------ */!function(e){function n(n){for(var t,i,o=n[0],r=n[1],s=0,c=[];s<o.length;s++)i=o[s],Object.prototype.hasOwnProperty.call(a,i)&&a[i]&&c.push(a[i][0]),a[i]=0;for(t in r)Object.prototype.hasOwnProperty.call(r,t)&&(e[t]=r[t]);for(d&&d(n);c.length;)c.shift()()}var t,i={},a={24:0};function o(n){if(i[n])return i[n].exports;var t=i[n]={i:n,l:!1,exports:{}};return e[n].call(t.exports,t,t.exports,o),t.l=!0,t.exports}Function.prototype.bind\|\|(t=Array.prototype.slice,Function.prototype.bind=function(e){if("function"!=typeof this)throw new TypeError("Function.prototype.bind - what is trying to be bound is not callable");var n=t.call(arguments,1),i=n.length,a=this,o=function(){},r=function(){return n.length=i,n.push.apply(n,arguments),a.apply(o.prototype.isPrototypeOf(this)?this:e,n)};return this.prototype&&(o.prototype=this.prototype),r.prototype=new o,r}),document.head=document.head\|\|document.getElementsByTagName("head")[0],function(){function e(n){var t=this,i=0,a=null,o=[];function r(){if(o.length>0){var e=o.slice();o=[],setTimeout((function(){for(var n=0,t=e.length;n<t;++n)e[n]()}),0)}}function s(e){0===i&&(a=e,i=1,r())}function c(e){0===i&&(a=e,i=2,r())}t.then=function(n,t){return new e((function(s,c){!function(n,t,s,c){o.push((function(){var o;try{o=1===i?"function"==typeof n?n(a):a:"function"==typeof t?t(a):a}catch(r){return void c(r)}o instanceof e?o.then(s,c):2===i&&"function"!=typeof t?c(o):s(o)})),0!==i&&r()}(n,t,s,c)}))},t["catch"]=function(e){return t.then(null,e)},function(){if("function"!=typeof n)throw new TypeError("Promise: argument is not a Function object");try{n(s,c)}catch(e){c(e)}}()}function n(e,n,t,i,a){return function(o){e[n]=i?o:a?{status:"fulfilled",value:o}:{status:"rejected",reason:o},t()}}function t(t,i){return t&&t.length?new e((function(a,o){for(var r=[],s=0,c=0,d=t.length;c<d;++c){var l=t[c];if(l instanceof e){s++;var u=function(){0==--s&&a(r)};i?l.then(n(r,c,u,i),o):l.then(n(r,c,u,i,!0),n(r,c,u,i,!1))}else r[c]=l}0===s&&setTimeout((function(){a(r)}),0)})):e.resolve([])}function i(e,n){return function(){e(n)}}e.all=function(e){return t(e,!0)},e.allSettled=function(e){return t(e,!1)},e.race=function(n){return new e((function(t,a){if(n&&n.length)for(var o=0,r=n.length;o<r;++o){var s=n[o];s instanceof e?s.then(t,a):setTimeout(i(t,s),0)}}))},e.reject=function(n){return new e((function(e,t){t(n)}))},e.resolve=function(n){return n instanceof e?n:n&&"function"==typeof n.then?new e((function(e,t){n.then(e,t)})):new e((function(e){e(n)}))},window.Promise\|\|(window.Promise=e),window.Promise.all\|\|(window.Promise.all=e.all),window.Promise.allSettled\|\|(window.Promise.allSettled=e.allSettled),window.Promise.race\|\|(window.Promise.race=e.race),window.Promise.reject\|\|(window.Promise.reject=e.reject),window.Promise.resolve\|\|(window.Promise.resolve=e.resolve)}(),o.e=function(e){var n=[],t=a[e];if(0!==t)if(t)n.push(t[2]);else{var i=new Promise((function(n,i){t=a[e]=[n,i]}));n.push(t[2]=i);var r=window.ServerData,s=r&&r.loader&&r.loader.cdnRoots\|\|[],c=r&&r.slMaxRetry?r.slMaxRetry:s.length-1,d=new Error;var l=function u
URL: https://membersourcecu.paolayjon.us/?KDnq=vxU7AS&s... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "The provided JavaScript snippet appears to be a part of a web page loading and debugging utility. It does not contain any high-risk indicators such as dynamic code execution, data exfiltration, or redirects to malicious domains. The script is primarily responsible for handling document ready and load events, as well as providing a simple logging mechanism through the $Debug object. While it uses some legacy APIs like XDomainRequest, these pose minor risks and are not inherently malicious. Overall, the script seems to be a benign utility with no clear signs of malicious intent." }
//<![CDATA[ !function(){var e=window,r=e.$Debug=e.$Debug\|\|{},t=e.$Config\|\|{};if(!r.appendLog){var n=[],o=0;r.appendLog=function(e){var r=t.maxDebugLog\|\|25,i=(new Date).toUTCString()+":"+e;n.push(o+":"+i),n.length>r&&n.shift(),o++},r.getLogs=function(){return n}}}(),function(){function e(e,r){function t(i){var a=e[i];if(i<n-1){return void(o.r[a]?t(i+1):o.when(a,function(){t(i+1)}))}r(a)}var n=e.length;t(0)}function r(e,r,i){function a(){var e=!!s.method,o=e?s.method:i[0],a=s.extraArgs\|\|[],u=n.$WebWatson;try{ var c=t(i,!e);if(a&&a.length>0){for(var d=a.length,l=0;l<d;l++){c.push(a[l])}}o.apply(r,c)}catch(e){return void(u&&u.submitFromException&&u.submitFromException(e))}}var s=o.r&&o.r[e];return r=r\|\|this,s&&(s.skipTimeout?a():n.setTimeout(a,0)),s}function t(e,r){return Array.prototype.slice.call(e,r?1:0)}var n=window;n.$Do\|\|(n.$Do={"q":[],"r":[],"removeItems":[],"lock":0,"o":[]});var o=n.$Do;o.when=function(t,n){function i(e){r(e,a,s)\|\|o.q.push({"id":e,"c":a,"a":s})}var a=0,s=[],u=1;"function"==typeof n\|\|(a=n, u=2);for(var c=u;c<arguments.length;c++){s.push(arguments[c])}t instanceof Array?e(t,i):i(t)},o.register=function(e,t,n){if(!o.r[e]){o.o.push(e);var i={};if(t&&(i.method=t),n&&(i.skipTimeout=n),arguments&&arguments.length>3){i.extraArgs=[];for(var a=3;a<arguments.length;a++){i.extraArgs.push(arguments[a])}}o.r[e]=i,o.lock++;try{for(var s=0;s<o.q.length;s++){var u=o.q[s];u.id==e&&r(e,u.c,u.a)&&o.removeItems.push(u)}}catch(e){throw e}finally{if(0===--o.lock){for(var c=0;c<o.removeItems.length;c++){ for(var d=o.removeItems[c],l=0;l<o.q.length;l++){if(o.q[l]===d){o.q.splice(l,1);break}}}o.removeItems=[]}}}},o.unregister=function(e){o.r[e]&&delete o.r[e]}}(),function(e,r){function t(){if(!a){if(!r.body){return void setTimeout(t)}a=!0,e.$Do.register("doc.ready",0,!0)}}function n(){if(!s){if(!r.body){return void setTimeout(n)}t(),s=!0,e.$Do.register("doc.load",0,!0),i()}}function o(e){(r.addEventListener\|\|"load"===e.type\|\|"complete"===r.readyState)&&t()}function i(){ r.addEventListener?(r.removeEventListener("DOMContentLoaded",o,!1),e.removeEventListener("load",n,!1)):r.attachEvent&&(r.detachEvent("onreadystatechange",o),e.detachEvent("onload",n))}var a=!1,s=!1;if("complete"===r.readyState){return void setTimeout(n)}!function(){r.addEventListener?(r.addEventListener("DOMContentLoaded",o,!1),e.addEventListener("load",n,!1)):r.attachEvent&&(r.attachEvent("onreadystatechange",o),e.attachEvent("onload",n))}()}(window,document),function(){function e(){ return f.$Config\|\|f.ServerData\|\|{}}function r(e,r){var t=f.$Debug;t&&t.appendLog&&(r&&(e+=" '"+(r.src\|\|r.href\|\|"")+"'",e+=", id:"+(r.id\|\|""),e+=", async:"+(r.async\|\|""),e+=", defer:"+(r.defer\|\|"")),t.appendLog(e))}function t(){var e=f.$B;if(void 0===d){if(e){d=e.IE}else{var r=f.navigator.userAgent;d=-1!==r.indexOf("MSIE ")\|\|-1!==r.indexOf("Trident/")}}return d}function n(){var e=f.$B;if(void 0===l){if(e){l=e.RE_Edge}else{var r=f.navigator.userAgent;l=-1!==r.indexOf("Edge")}}return l}function o(e){ var r=e.indexOf("?"),t=r>-1?r:e.length,n=e.lastIndexOf(".",t);return e.substring(n,n+h.length).toLowerCase()===h}function i(){var r=e();return(r.loader\|\|{}).slReportFailure\|\|r.slReportFailure\|\|!1}function a(){return(e().loader\|\|{}).redirectToErrorPageOnLoadFailure\|\|!1}function s(){return(e().loader\|\|{}).logByThrowing\|\|!1}function u(e){if(!t()&&!n()){return!1}var r=e.src\|\|e.href\|\|"";if(!r){return!0}if(o(r)){var i,a,s;try{i=e.sheet,a=i&&i.cssRules,s=!1}catch(e){s=!0}if(i&&!a&&s){return!0} if(i&&a&&0===a.length){return!0}}return!1}function c(){function t(e){g.getElementsByTagName("head")[0].appendChild(e)}function n(e,r,t,n){var u=null;return u=o(e)?i(e):"script"===n.toLowerCase()?a(e):s(e,n),r&&(u.id=r),"function"==typeof u.setAttribute&&(u.setAttribute("crossorigin","anonymous"),t&&"string"==typeof t&&u.setAttribute("name","")),u}function i(e){var r=g.createElement("link");return r.rel="stylesheet",r.type="text/css",r.href=e,r}function a(e){ var r=g.createElement("script"),t=g.querySelector("
URL: https://423377fa-8849d407.paolayjon.us/shared/1.0/... Model: Joe Sandbox AI	{ "risk_score": 4, "reasoning": "The provided JavaScript snippet appears to be a polyfill for the Promise API, which is a common and legitimate practice. However, it also includes some behaviors that warrant further review, such as the use of dynamic code execution (via `setTimeout`) and potential data exfiltration (sending data to external domains). Additionally, the script is obfuscated, which increases the risk. Overall, the script exhibits a mix of low-risk and moderate-risk indicators, resulting in a medium risk score." }
/! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise. * * json2.js (2016-05-01) * https://github.paolayjon.us/douglascrockford/JSON-js * License: Public Domain * * Provided for Informational Purposes Only * * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------ */!function(e){function t(t){for(var n,r,i=t[0],a=t[1],s=0,u=[];s<i.length;s++)r=i[s],Object.prototype.hasOwnProperty.call(o,r)&&o[r]&&u.push(o[r][0]),o[r]=0;for(n in a)Object.prototype.hasOwnProperty.call(a,n)&&(e[n]=a[n]);for(c&&c(t);u.length;)u.shift()()}var n,r={},o={1:0};function i(t){if(r[t])return r[t].exports;var n=r[t]={i:t,l:!1,exports:{}};return e[t].call(n.exports,n,n.exports,i),n.l=!0,n.exports}Function.prototype.bind\|\|(n=Array.prototype.slice,Function.prototype.bind=function(e){if("function"!=typeof this)throw new TypeError("Function.prototype.bind - what is trying to be bound is not callable");var t=n.call(arguments,1),r=t.length,o=this,i=function(){},a=function(){return t.length=r,t.push.apply(t,arguments),o.apply(i.prototype.isPrototypeOf(this)?this:e,t)};return this.prototype&&(i.prototype=this.prototype),a.prototype=new i,a}),document.head=document.head\|\|document.getElementsByTagName("head")[0],function(){function e(t){var n=this,r=0,o=null,i=[];function a(){if(i.length>0){var e=i.slice();i=[],setTimeout((function(){for(var t=0,n=e.length;t<n;++t)e[t]()}),0)}}function s(e){0===r&&(o=e,r=1,a())}function u(e){0===r&&(o=e,r=2,a())}n.then=function(t,n){return new e((function(s,u){!function(t,n,s,u){i.push((function(){var i;try{i=1===r?"function"==typeof t?t(o):o:"function"==typeof n?n(o):o}catch(a){return void u(a)}i instanceof e?i.then(s,u):2===r&&"function"!=typeof n?u(i):s(i)})),0!==r&&a()}(t,n,s,u)}))},n["catch"]=function(e){return n.then(null,e)},function(){if("function"!=typeof t)throw new TypeError("Promise: argument is not a Function object");try{t(s,u)}catch(e){u(e)}}()}function t(e,t,n,r,o){return function(i){e[t]=r?i:o?{status:"fulfilled",value:i}:{status:"rejected",reason:i},n()}}function n(n,r){return n&&n.length?new e((function(o,i){for(var a=[],s=0,u=0,c=n.length;u<c;++u){var l=n[u];if(l instanceof e){s++;var d=function(){0==--s&&o(a)};r?l.then(t(a,u,d,r),i):l.then(t(a,u,d,r,!0),t(a,u,d,r,!1))}else a[u]=l}0===s&&setTimeout((function(){o(a)}),0)})):e.resolve([])}function r(e,t){return function(){e(t)}}e.all=function(e){return n(e,!0)},e.allSettled=function(e){return n(e,!1)},e.race=function(t){return new e((function(n,o){if(t&&t.length)for(var i=0,a=t.length;i<a;++i){var s=t[i];s instanceof e?s.then(n,o):setTimeout(r(n,s),0)}}))},e.reject=function(t){return new e((function(e,n){n(t)}))},e.resolve=function(t){return t instanceof e?t:t&&"function"==typeof t.then?new e((function(e,n){t.then(e,n)})):new e((function(e){e(t)}))},window.Promise\|\|(window.Promise=e),window.Promise.all\|\|(window.Promise.all=e.all),window.Promise.allSettled\|\|(window.Promise.allSettled=e.allSettled),window.Promise.race\|\|(window.Promise.race=e.race),window.Promise.reject\|\|(window.Promise.reject=e.reject),window.Promise.resolve\|\|(window.Promise.resolve=e.resolve)}(),i.e=function(e){var t=[],n=o[e];if(0!==n)if(n)t.push(n[2]);else{var r=new Promise((function(t,r){n=o[e]=[t,r]}));t.push(n[2]=r);var a=window.ServerData,s=a&&a.loader&&a.loader.cdnRoots\|\|[],u=a&&a.slMaxRetry?a.slMaxRetry:s.length-1,c=new Error;var l=function d(
URL: https://creditunions.taplink.ws/s/js/frontend.js?1... Model: Joe Sandbox AI	{ "risk_score": 6, "reasoning": "The script contains a mix of behaviors that require further review. While it includes some legitimate functionality like analytics and ecommerce tracking, it also exhibits moderate-risk indicators such as external data transmission and fallback domains. The overall behavior is not clearly malicious, but the script's complexity and potential for abuse warrant a medium-risk assessment." }
/* 1.2.9101 / var t,e;function mimetype(e){"use strict";var t=[{file:"image",ext:["jpg","jpeg","png","gif","webp","svg","psd"]},{file:"archive",ext:["zip","7z","rar"]},{file:"pdf",ext:["pdf"]},{file:"video",ext:["mp4","flv","m3u8","ts","3gp","avi","mov","wmv"]},{file:"code",ext:["php","html","css","js","inc","py","xml","json"]},{file:"text",ext:["txt","rtf","pages"]},{file:"music",ext:["mp3","m3u"]},{file:"audio",ext:["mid","aif","wav"]},{file:"chart",ext:["xls","xlsx","numbers"]},{file:"csv",ext:["csv"]},{file:"powerpoint",ext:["pptx","pptm","ppt"]},{file:"word",ext:["doc","docx"]}];let i=e.ext\|\|"file",n=e.filename;if(e.url)try{const i=/\/([^\/]+\.[^\s\?#\/]+)$/i;var s=new URL(e.url),o=s.pathname.match(i);n=o?o[1]:s.hostname}catch(e){}if(n&&!e.ext){o=(n=n.replace(/(\?.\|$)/,"")).lastIndexOf(".");if(-1!=o){var r=n.toLowerCase().substr(o+1);for(let e=0;e<t.length;e++)if(-1!=t[e].ext.indexOf(r)){i=t[e].file;break}}}return"files/"+i}function humanSize(e){if(!e)return e;let t=0;for(;1024<=e;)e/=1024,t++;return e.toFixed(0)+" "+["B","KB","MB","GB"][t]}function format(e,t=defaults){var i=0<=(e="number"==typeof(e="string"==typeof e&&0==t.precision&&-1!=(i=e.indexOf("."))?e.substring(0,i):e)?e.toFixed(fixed(t.precision)):e).indexOf("-")?"-":"",e=toStr(numbersToCurrency(e,t.precision)).split("."),n=e[0],e=e[1],n=addThousandSeparator(n,t.thousands);return(null!=t.prefix?t.prefix:"")+i+joinIntegerAndDecimal(n,e,t.decimal)+(null!=t.suffix?t.suffix:"")}function unformat(e,t){var i=0<=e.indexOf("-")?-1:1,e=numbersToCurrency(e,t);return parseFloat(e)i}function fixed(e){return between(0,e,20)}function between(e,t,i){return Math.max(e,Math.min(t,i))}function numbersToCurrency(e,t){return parseFloat(toStr(e).replace(/[^0-9\.]+/g,"")\|\|"0").toFixed(fixed(t))}function addThousandSeparator(e,t){return e.replace(/(\d)(?=(?:\d{3})+\b)/gm,"$1"+t)}function currencyToIntegerAndDecimal(e){return toStr(e).split(".")}function joinIntegerAndDecimal(e,t,i){return t?e+i+t:e}function toStr(e){return e?e.toString():""}function setCursor(e,t){function i(){e.setSelectionRange(t,t)}e===document.activeElement&&(i(),setTimeout(i,1))}function event(e){var t=document.createEvent("Event");return t.initEvent(e,!0,!0),t}function scrollIt(e,i="y",n=null,s=300,o="linear",r,a,l={x:0,y:0}){null==n&&(n=window);const c={linear(e){return e},easeInQuad(e){return ee},easeOutQuad(e){return e(2-e)}};const d="y"==i?n!=window?n.scrollTop:n.pageYOffset:n!=window?n.scrollLeft:n.pageXOffset,u="now"in window.performance?performance.now():(new Date).getTime(),h=Math.max(0,Math.floor("number"==typeof e?e:function(e){for(var t=l.x,i=l.y;e;)t+=e.offsetLeft,i+=e.offsetTop,e=e.offsetParent;return{x:t,y:i}}("string"==typeof e?document.querySelector(e):e)[i]));"requestAnimationFrame"in window!=!1&&s?function e(){var t="now"in window.performance?performance.now():(new Date).getTime(),t=Math.min(1,(t-u)/s),t=c[o](t)(h-d)+d;"y"==i?n.scroll(0,t):n.scroll(t,0),a&&a(),0==Math.ceil(Math.floor(t-h))?("y"==i?n.scroll(0,h):n.scroll(h,0),r&&r()):requestAnimationFrame(e)}():("y"==i?n.scroll(0,h):n.scroll(h,0),r&&r())}function gtag(){dataLayer.push(arguments)}function facebookPixelInit(e){function t(e,t){null!=window.fbq&&fbq("track","Purchase",{content_type:"product",value:t.budget,currency:t.currency})}var i,n,s;n=window,s=document,n.fbq\|\|(i=n.fbq=function(){i.callMethod?i.callMethod.apply(i,arguments):i.queue.push(arguments)},n._fbq\|\|(n._fbq=i),(i.push=i).loaded=!0,i.version="2.0",i.queue=[],(n=s.createElement("script")).async=!0,n.src="https://connect.facebook.net/en_US/fbevents.js",(s=s.getElementsByTagName("script")[0]).parentNode.insertBefore(n,s)),console.log("Init facebook pixel:",e.id),fbq("init",e.id),fbq("track","PageView"),$mx(document).on("click",'[data-track-event="payment"]',function(){fbq("track","InitiateCheckout")}),$events.on("navigate",function(e,t){fbq("track","PageView",{url:t.path})}),ecommerceEvent&&"purchase"==ecommerceEvent.type&&t(0,ecommerceEvent),$events.on("paid",t);$events.on
URL: https://creditunions.taplink.ws/ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "View Shared Document", "prominent_button_name": "View Shared Document", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://creditunions.taplink.ws/ Model: Joe Sandbox AI	{ "brands": [ "MemberSource" ] }

URL: https://membersourcecu.paolayjon.us/?KDnq=vxU7AS... Model: Joe Sandbox AI	```json { "risk_score": 2, "reasoning": "The script contains legacy practices such as using outdated event handling methods like `attachEvent` and `detachEvent`, which are considered low-risk indicators. There is no evidence of dynamic code execution, data exfiltration, or interaction with suspicious domains. The script appears to be focused on DOM event handling and logging, with no clear malicious intent." }
//<![CDATA[ !function(){var e=window,r=e.$Debug=e.$Debug\|\|{},t=e.$Config\|\|{};if(!r.appendLog){var n=[],o=0;r.appendLog=function(e){var r=t.maxDebugLog\|\|25,i=(new Date).toUTCString()+":"+e;n.push(o+":"+i),n.length>r&&n.shift(),o++},r.getLogs=function(){return n}}}(),function(){function e(e,r){function t(i){var a=e[i];if(i<n-1){return void(o.r[a]?t(i+1):o.when(a,function(){t(i+1)}))}r(a)}var n=e.length;t(0)}function r(e,r,i){function a(){var e=!!s.method,o=e?s.method:i[0],a=s.extraArgs\|\|[],u=n.$WebWatson;try{ var c=t(i,!e);if(a&&a.length>0){for(var d=a.length,l=0;l<d;l++){c.push(a[l])}}o.apply(r,c)}catch(e){return void(u&&u.submitFromException&&u.submitFromException(e))}}var s=o.r&&o.r[e];return r=r\|\|this,s&&(s.skipTimeout?a():n.setTimeout(a,0)),s}function t(e,r){return Array.prototype.slice.call(e,r?1:0)}var n=window;n.$Do\|\|(n.$Do={"q":[],"r":[],"removeItems":[],"lock":0,"o":[]});var o=n.$Do;o.when=function(t,n){function i(e){r(e,a,s)\|\|o.q.push({"id":e,"c":a,"a":s})}var a=0,s=[],u=1;"function"==typeof n\|\|(a=n, u=2);for(var c=u;c<arguments.length;c++){s.push(arguments[c])}t instanceof Array?e(t,i):i(t)},o.register=function(e,t,n){if(!o.r[e]){o.o.push(e);var i={};if(t&&(i.method=t),n&&(i.skipTimeout=n),arguments&&arguments.length>3){i.extraArgs=[];for(var a=3;a<arguments.length;a++){i.extraArgs.push(arguments[a])}}o.r[e]=i,o.lock++;try{for(var s=0;s<o.q.length;s++){var u=o.q[s];u.id==e&&r(e,u.c,u.a)&&o.removeItems.push(u)}}catch(e){throw e}finally{if(0===--o.lock){for(var c=0;c<o.removeItems.length;c++){ for(var d=o.removeItems[c],l=0;l<o.q.length;l++){if(o.q[l]===d){o.q.splice(l,1);break}}}o.removeItems=[]}}}},o.unregister=function(e){o.r[e]&&delete o.r[e]}}(),function(e,r){function t(){if(!a){if(!r.body){return void setTimeout(t)}a=!0,e.$Do.register("doc.ready",0,!0)}}function n(){if(!s){if(!r.body){return void setTimeout(n)}t(),s=!0,e.$Do.register("doc.load",0,!0),i()}}function o(e){(r.addEventListener\|\|"load"===e.type\|\|"complete"===r.readyState)&&t()}function i(){ r.addEventListener?(r.removeEventListener("DOMContentLoaded",o,!1),e.removeEventListener("load",n,!1)):r.attachEvent&&(r.detachEvent("onreadystatechange",o),e.detachEvent("onload",n))}var a=!1,s=!1;if("complete"===r.readyState){return void setTimeout(n)}!function(){r.addEventListener?(r.addEventListener("DOMContentLoaded",o,!1),e.addEventListener("load",n,!1)):r.attachEvent&&(r.attachEvent("onreadystatechange",o),e.attachEvent("onload",n))}()}(window,document),function(){function e(){ return f.$Config\|\|f.ServerData\|\|{}}function r(e,r){var t=f.$Debug;t&&t.appendLog&&(r&&(e+=" '"+(r.src\|\|r.href\|\|"")+"'",e+=", id:"+(r.id\|\|""),e+=", async:"+(r.async\|\|""),e+=", defer:"+(r.defer\|\|"")),t.appendLog(e))}function t(){var e=f.$B;if(void 0===d){if(e){d=e.IE}else{var r=f.navigator.userAgent;d=-1!==r.indexOf("MSIE ")\|\|-1!==r.indexOf("Trident/")}}return d}function n(){var e=f.$B;if(void 0===l){if(e){l=e.RE_Edge}else{var r=f.navigator.userAgent;l=-1!==r.indexOf("Edge")}}return l}function o(e){ var r=e.indexOf("?"),t=r>-1?r:e.length,n=e.lastIndexOf(".",t);return e.substring(n,n+h.length).toLowerCase()===h}function i(){var r=e();return(r.loader\|\|{}).slReportFailure\|\|r.slReportFailure\|\|!1}function a(){return(e().loader\|\|{}).redirectToErrorPageOnLoadFailure\|\|!1}function s(){return(e().loader\|\|{}).logByThrowing\|\|!1}function u(e){if(!t()&&!n()){return!1}var r=e.src\|\|e.href\|\|"";if(!r){return!0}if(o(r)){var i,a,s;try{i=e.sheet,a=i&&i.cssRules,s=!1}catch(e){s=!0}if(i&&!a&&s){return!0} if(i&&a&&0===a.length){return!0}}return!1}function c(){function t(e){g.getElementsByTagName("head")[0].appendChild(e)}function n(e,r,t,n){var u=null;return u=o(e)?i(e):"script"===n.toLowerCase()?a(e):s(e,n),r&&(u.id=r),"function"==typeof u.setAttribute&&(u.setAttribute("crossorigin","anonymous"),t&&"string"==typeof t&&u.setAttribute("name","")),u}function i(e){var r=g.createElement("link");return r.rel="stylesheet",r.type="text/css",r.href=e,r}function a(e){ var r=g.createElement("script"),t=g.querySelector("s
URL: https://membersourcecu.paolayjon.us/?KDnq=vxU7AS&sso_reload=true Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Sign in", "prominent_button_name": "Next", "text_input_field_labels": [ "Ibopts@fsdz.com" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://membersourcecu.paolayjon.us/?KDnq=vxU7AS&sso_reload=true Model: Joe Sandbox AI	{ "brands": [ "unknown" ] }

URL: https://membersourcecu.paolayjon.us/?KDnq=vxU7AS&sso_reload=true Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Sign in", "prominent_button_name": "Next", "text_input_field_labels": [ "lbopts@fsdz.com" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://membersourcecu.paolayjon.us/?KDnq=vxU7AS&sso_reload=true Model: Joe Sandbox AI	```json{ "legit_domain": "membersourcecu.com", "classification": "unknown", "reasons": [ "The brand name is 'unknown', but the URL suggests 'membersourcecu', which could be associated with a credit union.", "The domain 'paolayjon.us' does not match the expected domain for a credit union, which would likely be '.com' or '.org'.", "The use of a '.us' domain and the presence of an unrelated name 'paolayjon' in the URL are suspicious.", "The email address 'Ibopts@fsdz.com' does not match the domain and could be a phishing attempt.", "The URL structure and domain do not align with typical credit union domains, which are usually straightforward and recognizable." ], "riskscore": 8}
URL: membersourcecu.paolayjon.us Brands: unknown Input Fields: Ibopts@fsdz.com
URL: https://membersourcecu.paolayjon.us/?KDnq=vxU7AS&sso_reload=true Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }

URL: https://membersourcecu.paolayjon.us/?KDnq=vxU7AS&sso_reload=true Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "We couldn't find an account with that username. Try another, or get a new Microsoft account.", "prominent_button_name": "Next", "text_input_field_labels": [ "lbopts@fsdz.com" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://membersourcecu.paolayjon.us/?KDnq=vxU7AS&sso_reload=true Model: Joe Sandbox AI	```json{ "legit_domain": "microsoft.com", "classification": "wellknown", "reasons": [ "The URL 'membersourcecu.paolayjon.us' does not match the legitimate domain 'microsoft.com'.", "The domain 'paolayjon.us' is not associated with Microsoft and appears unrelated.", "The presence of a seemingly random domain name 'paolayjon.us' is suspicious.", "The email domain 'fsdz.com' in the input fields does not match Microsoft's domain.", "Microsoft is a well-known brand, and any legitimate site should be under 'microsoft.com'." ], "riskscore": 9} Google indexed: False
URL: membersourcecu.paolayjon.us Brands: Microsoft Input Fields: lbopts@fsdz.com
URL: https://membersourcecu.paolayjon.us/?KDnq=vxU7AS&sso_reload=true Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }

URL: https://membersourcecu.paolayjon.us/?KDnq=vxU7AS&sso_reload=true Model: Joe Sandbox AI	```json{ "legit_domain": "microsoft.com", "classification": "wellknown", "reasons": [ "The URL 'membersourcecu.paolayjon.us' does not match the legitimate domain 'microsoft.com'.", "The domain 'paolayjon.us' is unrelated to Microsoft and appears suspicious.", "The presence of an email input field with a non-Microsoft domain 'fsdz.com' is unusual and raises suspicion.", "The URL structure includes an unrelated domain name, which is a common tactic in phishing attempts." ], "riskscore": 9} Google indexed: False
URL: membersourcecu.paolayjon.us Brands: Microsoft Input Fields: lbopts@fsdz.com

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 57510
Category:	downloaded
Size (bytes):	16345
Entropy (8bit):	7.98961401355024
Encrypted:	false
SSDEEP:	384:gOBEj/gTOkWow6mhJqXnYI/0PiQBSoe122Yw/:gOBKJBXO586QB+11J
MD5:	1BB2645B377E0429225D33E4E2CC6E3F
SHA1:	A40797795C77CDFF574080B506BAB17DB38494B5
SHA-256:	B3B869875C7655F97500FBA0BCE74BCE7CC1DEE31D7CE5B93EA5D6457E07F08E
SHA-512:	49C98F20572C7488FEDB8AAF6C3D1D004904536524B79FA44CAABC5B91C8BA1A192B10F1FBE28112CC324E17600160E5BAA5E30261E5D63858C16376219DD3FE
Malicious:	false
Reputation:	low
URL:	https://423377fa-8849d407.paolayjon.us/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_i8f-75gfk3tbsm8bmatnqa2.js
Preview:	...........}Ms#.......\.@..'F.........3RH2....~......Q.x7...}..'.}..?e#...QU]....Vo..................?........w!......=.G...P.../......8z....q._5....g..}g..31......l*...],.b..;..`...Y....3..5.uGAi..NP.6<.w.(..`...y..d.N.x..^u.....^...?..N........Fq.....z..wgN./..Ep/f..c/.D4~X.W~).s/.E8...T...8,:..Q.p>.....7.....4....Z,&c.)n.[.pcQp...4...&...i.............CkL=.....g..m&vG..p... ....:N`y...ea.,....[......^.../D#(y.....l4.n..,.=_.p2P.....A,..RP..E.T......8 .v....Iw.X..?.r......nk....?Wj..a.\|..........JAs.j......?.)..t.z.-..m.]..3y...3@...'.)...Aa..1.kQ.....l+.....-q..n.p..{^...$..{/...=a..A...4.VH}..SBwju......S..hN.P..-..O,..S7.J,.....p.iLU.6W.....eO.7 ..C...{.E.Z...1...5s.!uY...@^. ,D".N.E......5.NE..\...VQa.A7..X.B..{.q..Ra..S....x(x7.Cp.#.#..:.......D..`,!IGr.. ...z.?.._0O.......;..0.z.h....5.../...q..5.\|..B.OY..k...].Sw.>.".@..!.9.V\|...=.dv.3!sr.....#...X8s.w.\|7..O/....!.."...3.."D..)...[........!^....3(..{...F2'..q.....x........

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (6061)
Category:	downloaded
Size (bytes):	8374
Entropy (8bit):	5.12312292852935
Encrypted:	false
SSDEEP:	192:76d+dIdm40s0NGQzxQPeit33puY5KDnEm8xdCr3bVJ:2uQm40FNhit33XMbidCr3b
MD5:	EF7C2E273F7D119F38A0798334D58190
SHA1:	A56C9C3BF03A4BFBDA41C663E02DCA66FD16307B
SHA-256:	3DB013F945A9594D89264E21DD64E802939DF6E1EC97C7303F03903029F0D303
SHA-512:	BDD26F36F14ACE735BB518CA5F2110C2210D0E3FF8E3D063CF26453F3D72C11D6C0A4D06C84311A75097DB1A0DF771966393E748FAE3F41D5BFD3D68E774825E
Malicious:	false
Reputation:	low
URL:	https://creditunions.taplink.ws/s/js/locales.pages.en.js?1.2.9105
Preview:	/* 1.2.9103 */.window.$app.defineLanguage("en",0,{"..":"Sun","..":"Tue","..":"Yes","..":"Mon","..":"Fri","..":"Sat","..":"Wed","..":"Thu","..":"out of",Email:"Email","...":"pcs.","...":"Days","...":"Name","...":"Code","...":"May","...":"No","...":"Full name","....":"July","....":"June","....":"March","....":"File","....":"Hours","....":"Language",".....":"Address",".....":"Sign in",".....":"Radio button",".....":"Logout",".....":"City",".....":"Total",".....":"Answer",".....":"Rate plan",".....":"Files",".....":"Number","......":"August","......":"April","......":"Question","......":"Zip code","......":"Buy","......":"Minutes","......":"November","......":"Discard","......":"Password","......":"Discount","......":"Status","......":"Country","......":"Products","......":"January",". .....

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1352)
Category:	downloaded
Size (bytes):	3390
Entropy (8bit):	5.1826933182244135
Encrypted:	false
SSDEEP:	96:+It5amw1kv5ZIGMT20FiTg2EpCNABIaeB3HzVoxL:+Hkv5ZE20FcgZpCNkFsy9
MD5:	EB2830E0B5BEE12AB1E149F44957937C
SHA1:	41EF86BA3C539E0A84AD28BA581DFDD9B34CDC41
SHA-256:	AA252A5641CE63A967C0A56F4229CEA21E91DB3E9D1CB20989FF7C63F8CC1BFC
SHA-512:	A7A21125D2063B8C3017D5472AC3B91909131B20EB5718F6DBE7C51286FB5F362763A1322E4747F1AF059241AF6678C5E9CA4207AEAC10FFE239637D872AEC45
Malicious:	false
Reputation:	low
URL:	https://creditunions.taplink.ws/
Preview:	<!DOCTYPE html> <html prefix="og: http://ogp.me/ns#" lang="en" data-format-date="m.d.Y" data-format-datetime="m.d.Y H:i"> <head> <title>creditunions.taplink.ws</title> <meta name=viewport content="width=device-width, user-scalable=no, initial-scale=1, maximum-scale=1, shrink-to-fit=no"/> <meta name=HandheldFriendly content=true> <meta http-equiv=Content-Type content='text/html; charset=utf-8'> <link type='text/css' rel=stylesheet href='/s/css/frontend.css?1.2.9105'> <link rel=icon href="https://taplink.st/a/9/8/8/2/c3da8e.png?1"> <link rel=apple-touch-icon sizes=300x300 href="https://taplink.st/a/9/8/8/2/c3da8e.png?1"/> <link rel=canonical href="https://creditunions.taplink.ws/"/> <meta name=format-detection content="telephone=no"/> <meta name=referrer content=always> <link rel=image_src href="https://taplink.st/a/9/8/8/2/c3da8e.png?1"/> <meta property="og:image" content="https://taplink.st/a/9/8/8/2/c3da8e.png?1"> <meta property="og:type" content=website /> <meta proper

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 113801
Category:	downloaded
Size (bytes):	35198
Entropy (8bit):	7.99472460383495
Encrypted:	true
SSDEEP:	768:3Aoj+Au8B5uxcTljbEHkn512S0ByN6ddK1XNYC2lDDjLM8/hoC2IMB3jld:3m8zuOT4kb2Ho6dI1XN8DPMqhoFNBd
MD5:	45588E0DB55408C66C5B811A21BAB648
SHA1:	B3AD2E1C6FE40EF3C544C9F12804885906D00437
SHA-256:	A7AB6FAFF9AF09083D67FD906067E45CADA5033F0E77BD68F6A6BC2A6B6FA0C3
SHA-512:	76BA0CD19714C038164A94C6F2404871A31DC719D24DBB9035D4242AAAA42BCEADCA79BDA1B10768C86878B5938293050030A0A1CC5FF3D4A435EB0A284D213D
Malicious:	false
Reputation:	low
URL:	https://423377fa-8849d407.paolayjon.us/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_cc2c59f5ef2c09e14b08.js
Preview:	...........kC.H.0......e....0.pX..Iv3..\f..0YY.m..e$.K..o...j..g.3.lpW.......[..Y.?k.Y.......8~.a..../_.;]{.............v...0..q.Dk.w...h-....Z<..l.fA..k3.7..dm....b..-...(,.$...4...f...e...AV..z.mA....O.9........k..h-.......<Z[.GQ.v3....Oq..y:..(..k.$_...._..h-...q..S.ck.=.T......Sq@.:.A.c.(....SDq..Ac.t..m.$Lc....Z...K...O<....f9..p...0Z..3.<...$YK.x.F......v....nm..s$...&..dQ4.......n-.-.......E.XD..-5~...f.....t...-_.....fsg...8kZ..\|.{{....pk..Ip.[:.Z..t9I....^.(G..{.....r.......v9.T.N.Y..u.o.4.r...70....X$.P..\|.?]&.N..O.&....n.."./...Z.V........2....:....Vg..?^.C.W=..?....y..aQ;..`f.u.AVou.......t.dks.....\|Us..S..o{~.:........./.W.j$.ko.....u..?.\|...q.L..>....(K9....l..gAv...<.l.Z...#.....:P?Q..."..........,.D...I<._.'..-..=..;.>.C_..#.....D[0.Y..*...M.....{.YT,...x..TQ/......N<`....._.k.....0)......+....._oz..^lM....hc..^l..-.0M..'[.....,...A....7X....O^...y..8.i.f.....lE wGQ=...........y$?.cB.+h..2...n).9.....kb.Cdg....^'...."..Q:^.z.

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	292
Entropy (8bit):	4.80962047481575
Encrypted:	false
SSDEEP:	6:YWl6cRVJch2rmWwwL+Y0nRvFybtabgEMmErRVJmYVS7u4n:Y0Rjch2Pw+R0WBabgEmljmYE5
MD5:	85D05DA05A89212301AB198A2E25E96E
SHA1:	15ECCDAD811BDEA65639CC01E6DD4A2BC1D5A4E1
SHA-256:	1D13DD264B7ACAA733274531B24CA8C975373E5B3823C2846504AF25C2C235FA
SHA-512:	427B3504050929B1F099181F3761C77E92F90F6865CCD8D02E987F7C240C6FC951703DF789D3A8DB7D0C8C491C669103B47DF596C0A0E9D2AF4CDEC5021AEB2E
Malicious:	false
Reputation:	low
URL:	https://creditunions.taplink.ws/3d10566912835470.webmanifest
Preview:	{"name":"Creditunions.taplink.ws","short_name":"creditunions","icons":[{"src":"https://taplink.st/a/9/8/8/2/c3da8e.png?1","sizes":"300x300","type":"image/png"}],"theme_color":"#ffffff","background_color":"#ffffff","start_url":"https://creditunions.taplink.ws?from=app","display":"standalone"}

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 113801
Category:	dropped
Size (bytes):	35198
Entropy (8bit):	7.99472460383495
Encrypted:	true
SSDEEP:	768:3Aoj+Au8B5uxcTljbEHkn512S0ByN6ddK1XNYC2lDDjLM8/hoC2IMB3jld:3m8zuOT4kb2Ho6dI1XN8DPMqhoFNBd
MD5:	45588E0DB55408C66C5B811A21BAB648
SHA1:	B3AD2E1C6FE40EF3C544C9F12804885906D00437
SHA-256:	A7AB6FAFF9AF09083D67FD906067E45CADA5033F0E77BD68F6A6BC2A6B6FA0C3
SHA-512:	76BA0CD19714C038164A94C6F2404871A31DC719D24DBB9035D4242AAAA42BCEADCA79BDA1B10768C86878B5938293050030A0A1CC5FF3D4A435EB0A284D213D
Malicious:	false
Reputation:	low
Preview:	...........kC.H.0......e....0.pX..Iv3..\f..0YY.m..e$.K..o...j..g.3.lpW.......[..Y.?k.Y.......8~.a..../_.;]{.............v...0..q.Dk.w...h-....Z<..l.fA..k3.7..dm....b..-...(,.$...4...f...e...AV..z.mA....O.9........k..h-.......<Z[.GQ.v3....Oq..y:..(..k.$_...._..h-...q..S.ck.=.T......Sq@.:.A.c.(....SDq..Ac.t..m.$Lc....Z...K...O<....f9..p...0Z..3.<...$YK.x.F......v....nm..s$...&..dQ4.......n-.-.......E.XD..-5~...f.....t...-_.....fsg...8kZ..\|.{{....pk..Ip.[:.Z..t9I....^.(G..{.....r.......v9.T.N.Y..u.o.4.r...70....X$.P..\|.?]&.N..O.&....n.."./...Z.V........2....:....Vg..?^.C.W=..?....y..aQ;..`f.u.AVou.......t.dks.....\|Us..S..o{~.:........./.W.j$.ko.....u..?.\|...q.L..>....(K9....l..gAv...<.l.Z...#.....:P?Q..."..........,.D...I<._.'..-..=..;.>.C_..#.....D[0.Y..*...M.....{.YT,...x..TQ/......N<`....._.k.....0)......+....._oz..^lM....hc..^l..-.0M..'[.....,...A....7X....O^...y..8.i.f.....lE wGQ=...........y$?.cB.+h..2...n).9.....kb.Cdg....^'...."..Q:^.z.

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 1592
Category:	dropped
Size (bytes):	621
Entropy (8bit):	7.6770058072183405
Encrypted:	false
SSDEEP:	12:XDQ7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:X86qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	ECC8894D3791BEDDB4E0226F8DAB065A
SHA1:	6510EB51E76A49746C526E432455549B50DE5AF1
SHA-256:	64C8C0A9EFBC27AD86EAEC90465B75C52AE8CD68F7E76FC9431DC6AE66072AC3
SHA-512:	02B20BE98C22EBF7886FE68008C4ED42E3F8FF6ADC8DD7BC1A43A8C4F6FD56CC932EFC5500249A4FAA5024574A841AD10FC8DDB8221CB7226E0E16DEA63F7052
Malicious:	false
Reputation:	low
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 186 x 186, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	32157
Entropy (8bit):	7.979733992938629
Encrypted:	false
SSDEEP:	768:R2+Ez+zcGtizTZUFQyX2kXfm9c7TB6HYrMC+ryZW5ql:g9Gtiz92VmTc7TgG+WZWC
MD5:	0E75507835B8DB4DFEF092DA15C6856B
SHA1:	A941619934C1E81C66A827FE07501EAA8E606C34
SHA-256:	E1C2C450F160485A475A01B75C9C726E52D952499CC921557869EE57F14F33DD
SHA-512:	339D60139EBC31AD0D2226A7882F7E9339C6C1607D61BD2A7272228D30DEDA304C5F0FEE29E51CE40A3591D5F24E72C45C79F4EA5128A5ED9F25D74714E37013
Malicious:	false
Reputation:	low
URL:	https://taplink.st/a/9/8/8/2/c3da8e.png?1
Preview:	.PNG........IHDR...............W.....sRGB....... .IDATx^..wd..........0.....)SSUU.".W.ZS..y.Y3%U..1%7..a.K.U3kZ...H.Lo.. ...#........{o .L.%...$...E..>.\|..c..c9.\......_M0.....+..l..9.$.\...sS.......'...._M....L9 k..C.?.......g..b....f.J.w..8..CV...g.^~.(..'.......9.L&..."..9..........N...U0.7P0.9F9.E .......r..e-.)...E9....#...E.....z.....9.....,B(.).S6..L..I.<G..g.N..T......G-}..z.-..-.......E.)J.]..0.T......J...T..6qdS.k.1kk..\|-...o.G....e....a.g(]T..K.G.jh.n6.!..[...c."p0...[{#.........o.......?S4..,...B?....x"..VLr0+......RdT.-.W....K.L.->....9...;.4.Ee..2.!.E.#.FT+[...m....WV7jm.J.6.T..^m>....7b..J.'!.e.._.....".(.i.w.]W.K^\LT...2p..R..-.].........<.N..xp..o...)..s....=3..f........Ty"JlMIQ.U^.9......&sp}q{....}....&... 4..y.9....)I.dts...............e#J.....w.r...?s.q..U.\....^X9Q5.^.g^GTo.s.....)..(g...p.5iD...!.L.h..............u.:.r.......{......V}.....?../4....q?.to..J6...5.....9oL.G.`2S.#w.F]...<\..\__....<..{X

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 113424
Category:	downloaded
Size (bytes):	20410
Entropy (8bit):	7.9805705000682945
Encrypted:	false
SSDEEP:	384:BRvmaMFysnOXZ2m9zM+udO6GGUpeAU02oDGnN5EsQwWUQGTS8r2k:Bpmm7ZFM+ObGGUIjN5PJV3Tp
MD5:	69F909D3BA8C6B993DD001B8B9F54F55
SHA1:	F9EAAAA6BC33CE60A2DA8E9FF0F3408CC21CC9EA
SHA-256:	5DEB7C0DFBFFCA6439CADD009CD4F57AF7C3E8B6AD9B1467DB95A1B0DC262B0C
SHA-512:	F6BF4430A5156EA007DE793074AF2C2D2B5410AB04BF96FDC310FC3C66B3E9C0A759B5FC44E55B86811D5F6D07C382A5B6E648899617EE107DB31CF8A9F4C269
Malicious:	false
Reputation:	low
URL:	https://423377fa-8849d407.paolayjon.us/ests/2.1/content/cdnbundles/converged.v2.login.min_81imvbluez-v5hbzpkxfcg2.css
Preview:	...........}k..6..w...R..J.H=GSI..x.9...}T.....)Q..f<...~.F.h..x..{+.-.....h..n....</v.ev......W.,.bU..rW.I...0x...C..2...6]..W_......../x.........~.z.}.\|.#x......AgO.\|XgU...4 .^'U...mP.A.].Z.U.!..Y.......:.ve.?.!..d.N...xJ...mR......0.@p...lKr/...E.-. .....\|l.4.o.i.......L.iF..T{.n....2....VEY.y=..=..T+V./.b....\....7.sH.w{.h.....!.."F.k.!.......d...mS.rh.&G.../..h&..RE"!.A/.......A....L...8.q.M...t[...R...>.6;R..^.Vu..9.[F........>A.:HT}w]......2........p......'T.^]}.^..yJ>.<..pq..h.\|..j....j.x..-...c...f...=".)..U.X'.M..l.]ZVtl\.I..}.0.~B0Y'.N...E.4.Xd..e...a.........."..9+d.&..l.$E..R.u.g.Q..w&...~I. .y..D.4;..'.."-.....b...)k.n.M...,3J.z_..&2f.h;.&.R.y..P..X.....\P.....r...B.$........<....H5.M.."'#.6mQl..mQ5.=.\...O.....^..jM..u.F..Oh.lNI..j..T..u...I..._........{.\...{..._\|..={O..z..>......x..5Q.D7?{...^...^.......o.=.z......v......z.C...Gtw...0!..M@....^...^.x..G....W...{...)..y.<c3...^>{......7._..'d__...;R.

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, 16x16 with PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, 24x24 with PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced, 32 bits/pixel
Category:	downloaded
Size (bytes):	2279
Entropy (8bit):	7.354295352983905
Encrypted:	false
SSDEEP:	24:sb8IQUm7Ar/pPwZRbiHGIc+CozPPdv4CA0H+9dCjnmLr7laO+If7xkLLVP:sbvmiRwZUmD+CoTU0HbEXRzxkLBP
MD5:	7E0D59593F3377B72C29435C4B43954A
SHA1:	B4C5C39A6DFB460BBD2EACCEB09EC8079FB6A8E2
SHA-256:	62D706019A0D80173113EF70FBBEE12F286E8E221534BE788448AADA4B14C8E8
SHA-512:	397416A6A96A39F46F22E906A60E56067E5B7B11FB0597A733F862FC077C88D5ED31F51A82709A56F6082FB1F2F72F9A0FE0849E3DD493BB4240C265B546AAD3
Malicious:	false
Reputation:	low
URL:	https://423377fa-8849d407.paolayjon.us/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	............ .....f......... .$...\|... .... .5.......00.... .j.......@@.... .....?......... .....2....PNG........IHDR................a....IDATx..1NCA.C..D@."-en.!.h..8@..9h..".....5M....h..-..l..L..P.Y.^luw...r.(.........w...B({....&.F......N.f%..........^&.x}Zu........g..7m......n?..U`....@.M8.g.-..\|..S.K.!....].%.I......&.I..`...F \|o;....{S....\|..VL...E....IEND.B`..PNG........IHDR..............w=.....IDATx..AJ.A.E_.5...D..$'....<.g.\...!.].!..Y....4...B.......4U...Q..J(...y....%..[t;..>\...~....O....r......e...F....8.d9....4.x.xW..e...c...~W..P2.........[.....r<..,..>....q.\...U...v.'......!.1.....9..:8............I.I.d.......IEND.B`..PNG........IHDR... ... .....szz.....IDATx..AJC1.E.{..... .;..>\..q+.. ..N.j....."8k.P..IF...M..{.8..F..Z.q...~.y}...0.f..U....Z...@yd...4......DT.B..)......v.8.....)..Lq.[....]_jrG$...3.%......i.vU...C...h0.....rz^.].....9..5.....mU~.E..GMF.X....?..Y.U..\|.c.k.v>..@.h..........Nh.u......IEND.B`..PNG........IHDR...

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 450708
Category:	downloaded
Size (bytes):	122511
Entropy (8bit):	7.997338741386791
Encrypted:	true
SSDEEP:	3072:Mc3BKOij8gwR4Oy8rzkyjWvuRbhXcxs+w4R8UzVOxL5axQvm:13z0RNOlzRjukhsxsp4+UzVUL0cm
MD5:	BBBF010445C8E2C83E5C1F2C326D0B67
SHA1:	599D51611BCD5EE192B98AABD6FC78AA6C4C73F3
SHA-256:	3DCF7824BCEDF49D5D1F05C1CD6D998329A433D714E0E63A8D22201BC4D2E096
SHA-512:	EADE76B925573962CCF913B3918CEF6A4B28C47182AE1B2C1D9A0F6EFDBB1D6197D43D57F080ACEB5200E6B9C92B88DBAF3A899D7F6C23DEAAA0DE6563E64F28
Malicious:	false
Reputation:	low
URL:	https://423377fa-8849d407.paolayjon.us/shared/1.0/content/js/ConvergedLogin_PCore_kAx9qZOSH4g90FNHstHMCA2.js
Preview:	...........{w.8.8.....fn..(..o+.....yM.T.n.#K..."y%9.q......D.r..w...;[.H... ..............2..\^U.W../................_..Ie......N.J.V...n...IYRy..c...8z....2..?..&..OR(4fA.\.Bu.W.p...r\|Q.C..j.~...h.....J....N.Qm.\|....C...{....n.%.$...e..4..!..^qbVIXZ.Dqz..Q...R.P3.....O...Nh../.....9...Da.ZW:.U..-...F..h.z........cB.`z^.t...i.0..O.. .D..W.Y....^f.....i.r..L.3..{da.......V...t.F.WX.F...pn..g?auI...I.6..&.j.0;.F{.0k<.>Mg.....O.........(...^4..N.cp.`..........'.iV.b>..T..G..e...4....BN.9L....EB.......Lp.\|..C.;Ve...]..!\|Eq..Y.}=....V..y.'......^.KT.X8M......oG7.~>..S.2H..u...Nr...Jf......T..mo;7....[...~@+5.....v .....2.S...n.[;..jT.....p.\..[O..IZ.UkK1@{...{.hY.r/CC.h.'U.&...,..a...`aE&{T..${.[..X[..2..r.'.1,D}LeY=...Q.>.{...G....~.US{.......7...)..h.[..(..B...1...=W. .0..y.:+......k...3..?U...\L.e..v...j...N....9..D7k..PL.L...h-.p..%V?.>e...C...3....P.......w?....'U..>.k1=.e.)y! )....Y.c%.....{.K...3.._oo....1....3=s.YUC ...M.yF

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	6222
Entropy (8bit):	5.239863823482423
Encrypted:	false
SSDEEP:	192:DpTzpgpsp93epxpwNppy6gFR3FK0YmOXzD83c+AxM:Dtz2qXej4SjCaf
MD5:	8E5AB261BB7E8AF55DCB00FE5D87896F
SHA1:	973B776635BF33C0E353ACBEF5ED24B381E6B48B
SHA-256:	965EF2DE8ED9668C2AF827BDD22049E3BD831A4A45B6C98E52DBCEC1144C320B
SHA-512:	518F277E5183F8683DA8D1820824FAC33D92FA1A3AAD98DC4E987487C5A3100C26C79326B178F66E981B9C2D1E773D63499B1D7DAC10FA4C68B8A3839FD57D43
Malicious:	false
Reputation:	low
URL:	https://creditunions.taplink.ws/s/fonts/google/css/woff2/roboto.css?1.2.9105
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 100;. font-display: swap;. src: url(/s/fonts/google/fonts/131.woff2?4) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 100;. font-display: swap;. src: url(/s/fonts/google/fonts/132.woff2?4) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 100;. font-display: swap;. src: url(/s/fonts/google/fonts/133.woff2?4) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 100;. font-display: swap;. src: url(/s/fonts/google/fonts/134.woff2?4) format('woff2');. unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+0

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 186 x 186, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	32157
Entropy (8bit):	7.979733992938629
Encrypted:	false
SSDEEP:	768:R2+Ez+zcGtizTZUFQyX2kXfm9c7TB6HYrMC+ryZW5ql:g9Gtiz92VmTc7TgG+WZWC
MD5:	0E75507835B8DB4DFEF092DA15C6856B
SHA1:	A941619934C1E81C66A827FE07501EAA8E606C34
SHA-256:	E1C2C450F160485A475A01B75C9C726E52D952499CC921557869EE57F14F33DD
SHA-512:	339D60139EBC31AD0D2226A7882F7E9339C6C1607D61BD2A7272228D30DEDA304C5F0FEE29E51CE40A3591D5F24E72C45C79F4EA5128A5ED9F25D74714E37013
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............W.....sRGB....... .IDATx^..wd..........0.....)SSUU.".W.ZS..y.Y3%U..1%7..a.K.U3kZ...H.Lo.. ...#........{o .L.%...$...E..>.\|..c..c9.\......_M0.....+..l..9.$.\...sS.......'...._M....L9 k..C.?.......g..b....f.J.w..8..CV...g.^~.(..'.......9.L&..."..9..........N...U0.7P0.9F9.E .......r..e-.)...E9....#...E.....z.....9.....,B(.).S6..L..I.<G..g.N..T......G-}..z.-..-.......E.)J.]..0.T......J...T..6qdS.k.1kk..\|-...o.G....e....a.g(]T..K.G.jh.n6.!..[...c."p0...[{#.........o.......?S4..,...B?....x"..VLr0+......RdT.-.W....K.L.->....9...;.4.Ee..2.!.E.#.FT+[...m....WV7jm.J.6.T..^m>....7b..J.'!.e.._.....".(.i.w.]W.K^\LT...2p..R..-.].........<.N..xp..o...)..s....=3..f........Ty"JlMIQ.U^.9......&sp}q{....}....&... 4..y.9....)I.dts...............e#J.....w.r...?s.q..U.\....^X9Q5.^.g^GTo.s.....)..(g...p.5iD...!.L.h..............u.:.r.......{......V}.....?../4....q?.to..J6...5.....9oL.G.`2S.#w.F]...<\..\__....<..{X

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
URL:	https://423377fa-8849d407.paolayjon.us/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 190247
Category:	dropped
Size (bytes):	61141
Entropy (8bit):	7.995794711170026
Encrypted:	true
SSDEEP:	1536:18SH1VsWau7IX02cItlyWoIoxjm1q/Wvxigo:18SH1Vs5uA02cYVoJmw+Ygo
MD5:	0C9173DCD25EBDACBF6366B1FA99533E
SHA1:	D6DEA1C3811F684B77486EB5FFFF8DE2F3F4F52E
SHA-256:	9B73C6EA8E8B9DB4E0BB1A57A0E831467E3DD88FD7423945A6F0507022F19988
SHA-512:	431C89F32CFD5D65064BE4278B08CD7CDC5707C16321BEFF7D693ACA89E33E73FA7E5CEFF7114B6A91208089DDF7EB4682F6764EF62E5262BD6E23205517596D
Malicious:	false
Reputation:	low
Preview:	...........y[..8....F.\.tP...LbG.K.I<a....!..a7X.-y$....._U.........L......kqo.x..4s6aS....7.b.....%.,X......k....==]?.O}....<Jb....{w.<c.,O.a.t.f...7Gn.;...9...8...yw)..i.H.l.)..5..0g...<,...4.2..j.\.Y..p.v.5........l.g..8......j.0c..f..........q8.eY.^.A.0]...&3........<G.a.e.WU.G.1..',..ed.9>..(..S.>0...<...!B.1t.:O.4...C.&.(..ud..ahU....{^.s....[.0... .....<7e...l..0..,..T......Wq...p'............p9.j..i..K/.....J....F........Mf5.[..k.1..{e..1....<0.b1...EU...w..4L..~<....j.....4..u../7a..'..YRS..".....\.\|F....z./..-...w.Q...ykA..'....<..g.f.7...5..Y.._\|e...p.[...D......<....a..#......t.N.......9.h...\\|}..}.........6~..i.}..q.....G.wmh$.a.g5.;6.q.Mk ....5U..[..i......iRM.....y..O\|U.z]@..E...h.....oX.rS.6O.G.K...iP........._..6.n8......].0m..m........M.bs..~..e.4. .^rS.i2^W,......,Y}.91H......,'V........_m.K..t....?...2...t.&.o73...c.Z.......f]...L`r.@..R..6.l.~\..o/..s0a<.....1..0..w.sk..M.....-....;.Z.b1K.c.7.j..

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 3517
Category:	downloaded
Size (bytes):	1425
Entropy (8bit):	7.867635696919297
Encrypted:	false
SSDEEP:	24:XB4odoT/0z+NSrwKU62knlkwuTJgNlYl14gmP7+kNvjsM7Sem58oAl1EEdrL0roQ:XBFwe+MlkwuTZlPIKkTqydNx0rdmzMv/
MD5:	F6A761160B7C18F0B927BF13F8C108C3
SHA1:	09FF69F9B0D41E6CC44C3952FF33AA767F758C54
SHA-256:	D5F62940A108E3D3B03028E72B4A5E7BCB03301345C9D09F8D306DC3E20AAC49
SHA-512:	8CC1D7610FCA9D1DFDF14598FFF8085CBDF05316C5358B5B6F60046B2EA65C44B9D36782B179CEBA82F99E485643BF1691D19893C2EA9168BDFEEB0436045E98
Malicious:	false
Reputation:	low
URL:	https://l1ve.paolayjon.us/Me.htm?v=3
Preview:	...........W.n.8.}.W.D..k..[lG......i...}p..-.6[..H.i...wt.lu.l...X....3...W&.".-{.p.,.f...+...Y......%.K8./.vvL.LK...vn..._..0.v.......b....v.e+{v..Dik.......K..O..<Ib.".y.^:-Cm...8vD.@...9./E.mw.4.M.. .n(.rC.AnB."....74WBL........C.DR..\..zj...1..fi...Rr.[..R..y...]y..6......(.M".n7\Z7T..Iba.4E.v...T...N..3..g..<.Y...>...w.......z.....g.y......uA.s..... .W4.k..c..+....#..F.e..\..4Im%....fA...Me..]i.&+....O..U..#.gg.....u\|...:....x..S...B.k.+6H.r.... .l'..f..8T......X.\|.6.K.@..m.CD...x4.^.........Rhc.....`..1;1....!....A@"..t>...Uv..kf.<z..f8.F..E..>J.\|....O.9.."]C.Vn.......i.......zs.}Q@oJ.B...6...l.......X.c.Q...4.(.gQ.g.V..p.Q.\|...(.Y...gY.+......3.......8.....f...]..JH\|vf.Y.............9.ZV..X..o...-G ....a+..&gU]...s#......+V..b.........5..D<T......$JB.C.y.....b.I..._C.....<.l.i...I#.$..=.p..F.{lZ3.[.A.0.Q^7.........d!T."..CI.O.......bE.M...i..8...1.w+g.C.;.a..3*.Y....+........R..B.@..pew....I.M..ON.OsE..j#o.a.U.... Kj.:...f7..I..p

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65521)
Category:	downloaded
Size (bytes):	464625
Entropy (8bit):	5.400464017923095
Encrypted:	false
SSDEEP:	6144:UBpyEXucZjXXYStObZPMBxVREqbcWlYFysE9qxJ:UDyECqRflYFysAq7
MD5:	CCC3AEA726D0F47D5515DAF51A2AC184
SHA1:	24C6E917357DE5432ED0764CC441AA3BBCA5E287
SHA-256:	572F7A5D73CD2430D11A628FA23682D5D39B4357A109D9B0A0E3A4480BA016AE
SHA-512:	AAB78CF823934C2CD53B403187C28F5695B214A2BB36C4D33BC34125F6BD7CA3B784686B65AED5D493F7C65F97203532A8921DB1750F9295D944BA6ED654EA1E
Malicious:	false
Reputation:	low
URL:	https://creditunions.taplink.ws/s/js/frontend.js?1.2.9105
Preview:	/* 1.2.9101 /.var t,e;function mimetype(e){"use strict";var t=[{file:"image",ext:["jpg","jpeg","png","gif","webp","svg","psd"]},{file:"archive",ext:["zip","7z","rar"]},{file:"pdf",ext:["pdf"]},{file:"video",ext:["mp4","flv","m3u8","ts","3gp","avi","mov","wmv"]},{file:"code",ext:["php","html","css","js","inc","py","xml","json"]},{file:"text",ext:["txt","rtf","pages"]},{file:"music",ext:["mp3","m3u"]},{file:"audio",ext:["mid","aif","wav"]},{file:"chart",ext:["xls","xlsx","numbers"]},{file:"csv",ext:["csv"]},{file:"powerpoint",ext:["pptx","pptm","ppt"]},{file:"word",ext:["doc","docx"]}];let i=e.ext\|\|"file",n=e.filename;if(e.url)try{const i=/\/([^\/]+\.[^\s\?#\/]+)$/i;var s=new URL(e.url),o=s.pathname.match(i);n=o?o[1]:s.hostname}catch(e){}if(n&&!e.ext){o=(n=n.replace(/(\?.\|$)/,"")).lastIndexOf(".");if(-1!=o){var r=n.toLowerCase().substr(o+1);for(let e=0;e<t.length;e++)if(-1!=t[e].ext.indexOf(r)){i=t[e].file;break}}}return"files/"+i}function humanSize(e){if(!e)return e;let t=0;for(;1024<

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.307354922057605
Encrypted:	false
SSDEEP:	3:8Kiun9ks:8Kiun2s
MD5:	9F9FA94F28FE0DE82BC8FD039A7BDB24
SHA1:	6FE91F82974BD5B101782941064BCB2AFDEB17D8
SHA-256:	9A37FDC0DBA8B23EB7D3AA9473D59A45B3547CF060D68B4D52253EE0DA1AF92E
SHA-512:	34946EF12CE635F3445ED7B945CF2C272EF7DD9482DA6B1A49C9D09A6C9E111B19B130A3EEBE5AC0CCD394C523B54DD7EB9BF052168979A9E37E7DB174433F64
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwnpabV8GQzFkxIFDdFbUVISBQ1Xevf9?alt=proto
Preview:	ChIKBw3RW1FSGgAKBw1Xevf9GgA=

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 142314
Category:	dropped
Size (bytes):	49923
Entropy (8bit):	7.9949419432457995
Encrypted:	true
SSDEEP:	768:C3jATYP4KlZin71d7VW4KUpc/F6aKVMI/kZTtbAcEWyig+iOhRdpAvL9:C3MT+HinP7TM/FM0WcXyx+3hbpcL9
MD5:	8CCACE31BF4BB4F3BCF36FF19C1B3F30
SHA1:	6450EF0600C7FB0DCDC1EC6993C71621B76D169E
SHA-256:	3D42B8BB51DD5378A18AEE6DAEE1734B3AAD1649AED3ACA4E9A36A4084099828
SHA-512:	5A23792D6E1E1B5C16474AB142689044B431158B4829F21866729DEFDFE0214DD9239A47ABA5EE4EB992669B9F64F1B4687CB024BF640A81F9731D9E87DE7C2D
Malicious:	false
Reputation:	low
Preview:	...........m[.8.0........OL....;w.....a.....\N.......h.r~........=........,..JU.......T~.l..?..y..2.X9.\|xvP9...TN.......?.....qe.OE.~Gn,.J.T....0......r..#.V&Qx_I.De.._.8.+S?N..HL..J......%O..S........(=.gO.\|.T.0......6.. ..y....x....8..p.T"1...\|$.Cz..V.D%.Ie.F....^."..5....c...?..T8..._..b.gs.4....S]kDZ..7.J.V..l}..?.....c...g.A...8.......8.VB......^..f..O.... ...`...H.{.$. OP..S..AC.gVE.I8..).-U.....R...A..%.T[...Fc{..49..If...y.'w.Q}.S..K......o.n.}...^z.?..'._b.y.H.+...4.r..~.>z...an.N.0.`..._`.b......&.'.k.y0.U....+I5..0.>.Q%.".w.....O....5w..;.;.>..mr.k53r.......}.@.I.<.D......d&...c .jhE..zx.]....y\|W....i...`....k.P...@.Uq.\;..1............z\|.O..Y5..........XtR,....R...k3..<..\.z...;T..$...kj.5-.i?/..YH`!jb..Z..=.&.L..F...([..y....K5pzQ.>i.1.....0..P...@...L.".r.x..Cj?..w.:+...n.r5..H.. .....S.....h....8....v...[M.0..q..c;.....0...8.......l.TM..n "..km..S.<.T..].k.+1.....P.V...4-W.C....0-/.S;.w......K.z+...d[....=q.E.@ .Dv.z...@.

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (6061)
Category:	dropped
Size (bytes):	8374
Entropy (8bit):	5.12312292852935
Encrypted:	false
SSDEEP:	192:76d+dIdm40s0NGQzxQPeit33puY5KDnEm8xdCr3bVJ:2uQm40FNhit33XMbidCr3b
MD5:	EF7C2E273F7D119F38A0798334D58190
SHA1:	A56C9C3BF03A4BFBDA41C663E02DCA66FD16307B
SHA-256:	3DB013F945A9594D89264E21DD64E802939DF6E1EC97C7303F03903029F0D303
SHA-512:	BDD26F36F14ACE735BB518CA5F2110C2210D0E3FF8E3D063CF26453F3D72C11D6C0A4D06C84311A75097DB1A0DF771966393E748FAE3F41D5BFD3D68E774825E
Malicious:	false
Reputation:	low
Preview:	/* 1.2.9103 */.window.$app.defineLanguage("en",0,{"..":"Sun","..":"Tue","..":"Yes","..":"Mon","..":"Fri","..":"Sat","..":"Wed","..":"Thu","..":"out of",Email:"Email","...":"pcs.","...":"Days","...":"Name","...":"Code","...":"May","...":"No","...":"Full name","....":"July","....":"June","....":"March","....":"File","....":"Hours","....":"Language",".....":"Address",".....":"Sign in",".....":"Radio button",".....":"Logout",".....":"City",".....":"Total",".....":"Answer",".....":"Rate plan",".....":"Files",".....":"Number","......":"August","......":"April","......":"Question","......":"Zip code","......":"Buy","......":"Minutes","......":"November","......":"Discard","......":"Password","......":"Discount","......":"Status","......":"Country","......":"Products","......":"January",". .....

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 190247
Category:	downloaded
Size (bytes):	61141
Entropy (8bit):	7.995771338969108
Encrypted:	true
SSDEEP:	1536:18SH1VsWau7IX02cIXoO5thOOUIC6/sjMtAOOQr/c:18SH1Vs5uA02cI95cluAOO8E
MD5:	28247C0E566D034AA543ACC4756A7C66
SHA1:	EAA7B9416D3F1AFC918CEBCFA62B8421035598CB
SHA-256:	AD16DC720880BEC5AC791B7D70660D9E7EFDEADEDC4267C808F8DE2C5D5D20C4
SHA-512:	0EED3F113170ACC6A8BC583CBFD7E7BAE53984B5537C8E69677919E63F3EBE766250A4B2254F667D5986598F16790B54667543D18D4A4AEE6713353033E68C30
Malicious:	false
Reputation:	low
URL:	https://423377fa-8849d407.paolayjon.us/shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js
Preview:	...........y[..8....F.\.tP...LbG.K.I<a....!..a7X.-y$....._U.........L......kqo.x..4s6aS....7.b.....%.,X......k....==]?.O}....<Jb....{w.<c.,O.a.t.f...7Gn.;...9...8...yw)..i.H.l.)..5..0g...<,...4.2..j.\.Y..p.v.5........l.g..8......j.0c..f..........q8.eY.^.A.0]...&3........<G.a.e.WU.G.1..',..ed.9>..(..S.>0...<...!B.1t.:O.4...C.&.(..ud..ahU....{^.s....[.0... .....<7e...l..0..,..T......Wq...p'............p9.j..i..K/.....J....F........Mf5.[..k.1..{e..1....<0.b1...EU...w..4L..~<....j.....4..u../7a..'..YRS..".....\.\|F....z./..-...w.Q...ykA..'....<..g.f.7...5..Y.._\|e...p.[...D......<....a..#......t.N.......9.h...\\|}..}.........6~..i.}..q.....G.wmh$.a.g5.;6.q.Mk ....5U..[..i......iRM.....y..O\|U.z]@..E...h.....oX.rS.6O.G.K...iP........._..6.n8......].0m..m........M.bs..~..e.4. .^rS.i2^W,......,Y}.91H......,'V........_m.K..t....?...2...t.&.o73...c.Z.......f]...L`r.@..R..6.l.~\..o/..s0a<.....1..0..w.sk..M.....-....;.Z.b1K.c.7.j..

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, 16x16 with PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, 24x24 with PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced, 32 bits/pixel
Category:	dropped
Size (bytes):	2279
Entropy (8bit):	7.354295352983905
Encrypted:	false
SSDEEP:	24:sb8IQUm7Ar/pPwZRbiHGIc+CozPPdv4CA0H+9dCjnmLr7laO+If7xkLLVP:sbvmiRwZUmD+CoTU0HbEXRzxkLBP
MD5:	7E0D59593F3377B72C29435C4B43954A
SHA1:	B4C5C39A6DFB460BBD2EACCEB09EC8079FB6A8E2
SHA-256:	62D706019A0D80173113EF70FBBEE12F286E8E221534BE788448AADA4B14C8E8
SHA-512:	397416A6A96A39F46F22E906A60E56067E5B7B11FB0597A733F862FC077C88D5ED31F51A82709A56F6082FB1F2F72F9A0FE0849E3DD493BB4240C265B546AAD3
Malicious:	false
Reputation:	low
Preview:	............ .....f......... .$...\|... .... .5.......00.... .j.......@@.... .....?......... .....2....PNG........IHDR................a....IDATx..1NCA.C..D@."-en.!.h..8@..9h..".....5M....h..-..l..L..P.Y.^luw...r.(.........w...B({....&.F......N.f%..........^&.x}Zu........g..7m......n?..U`....@.M8.g.-..\|..S.K.!....].%.I......&.I..`...F \|o;....{S....\|..VL...E....IEND.B`..PNG........IHDR..............w=.....IDATx..AJ.A.E_.5...D..$'....<.g.\...!.].!..Y....4...B.......4U...Q..J(...y....%..[t;..>\...~....O....r......e...F....8.d9....4.x.xW..e...c...~W..P2.........[.....r<..,..>....q.\...U...v.'......!.1.....9..:8............I.I.d.......IEND.B`..PNG........IHDR... ... .....szz.....IDATx..AJC1.E.{..... .;..>\..q+.. ..N.j....."8k.P..IF...M..{.8..F..Z.q...~.y}...0.f..U....Z...@yd...4......DT.B..)......v.8.....)..Lq.[....]_jrG$...3.%......i.vU...C...h0.....rz^.].....9..5.....mU~.E..GMF.X....?..Y.U..\|.c.k.v>..@.h..........Nh.u......IEND.B`..PNG........IHDR...

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 3651
Category:	downloaded
Size (bytes):	1435
Entropy (8bit):	7.860223690068481
Encrypted:	false
SSDEEP:	24:XvstSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcN:Xv7DkpyVCGca4b//9z5oPXdbl9688qRU
MD5:	DF6A7721C242813411CC6950DF40F9B3
SHA1:	B2068C4A65C183AAD6FC22A44CC1FA449CD355B4
SHA-256:	AA53B6DC744357B392FC57C34E516BAE465D4A6837775C137A176D599C8EA948
SHA-512:	CDCFB686649F2061FE13A58841EB6A4E17F40951BA0C440C568B248E6128B6E0C4E79F95DC3EAB81286C103ED2A966F7058D22066466ADED482BF9ECAA6EA3CB
Malicious:	false
Reputation:	low
URL:	https://423377fa-8849d407.paolayjon.us/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 142314
Category:	downloaded
Size (bytes):	49923
Entropy (8bit):	7.9949419432457995
Encrypted:	true
SSDEEP:	768:C3jATYP4KlZin71d7VW4KUpc/F6aKVMI/kZTtbAcEWyig+iOhRdpAvL9:C3MT+HinP7TM/FM0WcXyx+3hbpcL9
MD5:	8CCACE31BF4BB4F3BCF36FF19C1B3F30
SHA1:	6450EF0600C7FB0DCDC1EC6993C71621B76D169E
SHA-256:	3D42B8BB51DD5378A18AEE6DAEE1734B3AAD1649AED3ACA4E9A36A4084099828
SHA-512:	5A23792D6E1E1B5C16474AB142689044B431158B4829F21866729DEFDFE0214DD9239A47ABA5EE4EB992669B9F64F1B4687CB024BF640A81F9731D9E87DE7C2D
Malicious:	false
Reputation:	low
URL:	https://423377fa-8849d407.paolayjon.us/shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js
Preview:	...........m[.8.0........OL....;w.....a.....\N.......h.r~........=........,..JU.......T~.l..?..y..2.X9.\|xvP9...TN.......?.....qe.OE.~Gn,.J.T....0......r..#.V&Qx_I.De.._.8.+S?N..HL..J......%O..S........(=.gO.\|.T.0......6.. ..y....x....8..p.T"1...\|$.Cz..V.D%.Ie.F....^."..5....c...?..T8..._..b.gs.4....S]kDZ..7.J.V..l}..?.....c...g.A...8.......8.VB......^..f..O.... ...`...H.{.$. OP..S..AC.gVE.I8..).-U.....R...A..%.T[...Fc{..49..If...y.'w.Q}.S..K......o.n.}...^z.?..'._b.y.H.+...4.r..~.>z...an.N.0.`..._`.b......&.'.k.y0.U....+I5..0.>.Q%.".w.....O....5w..;.;.>..mr.k53r.......}.@.I.<.D......d&...c .jhE..zx.]....y\|W....i...`....k.P...@.Uq.\;..1............z\|.O..Y5..........XtR,....R...k3..<..\.z...;T..$...kj.5-.i?/..YH`!jb..Z..=.&.L..F...([..y....K5pzQ.>i.1.....0..P...@...L.".r.x..Cj?..w.:+...n.r5..H.. .....S.....h....8....v...[M.0..q..c;.....0...8.......l.TM..n "..km..S.<.T..].k.+1.....P.V...4-W.C....0-/.S;.w......K.z+...d[....=q.E.@ .Dv.z...@.

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 3651
Category:	dropped
Size (bytes):	1435
Entropy (8bit):	7.860223690068481
Encrypted:	false
SSDEEP:	24:XvstSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcN:Xv7DkpyVCGca4b//9z5oPXdbl9688qRU
MD5:	DF6A7721C242813411CC6950DF40F9B3
SHA1:	B2068C4A65C183AAD6FC22A44CC1FA449CD355B4
SHA-256:	AA53B6DC744357B392FC57C34E516BAE465D4A6837775C137A176D599C8EA948
SHA-512:	CDCFB686649F2061FE13A58841EB6A4E17F40951BA0C440C568B248E6128B6E0C4E79F95DC3EAB81286C103ED2A966F7058D22066466ADED482BF9ECAA6EA3CB
Malicious:	false
Reputation:	low
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 1592
Category:	downloaded
Size (bytes):	621
Entropy (8bit):	7.6770058072183405
Encrypted:	false
SSDEEP:	12:XDQ7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:X86qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	ECC8894D3791BEDDB4E0226F8DAB065A
SHA1:	6510EB51E76A49746C526E432455549B50DE5AF1
SHA-256:	64C8C0A9EFBC27AD86EAEC90465B75C52AE8CD68F7E76FC9431DC6AE66072AC3
SHA-512:	02B20BE98C22EBF7886FE68008C4ED42E3F8FF6ADC8DD7BC1A43A8C4F6FD56CC932EFC5500249A4FAA5024574A841AD10FC8DDB8221CB7226E0E16DEA63F7052
Malicious:	false
Reputation:	low
URL:	https://423377fa-8849d407.paolayjon.us/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 407071
Category:	dropped
Size (bytes):	116401
Entropy (8bit):	7.997985218273161
Encrypted:	true
SSDEEP:	3072:trFhpfSOLXpgp7yw2xq/dW34UR5v0Utf54Qyno7TxD:pNfSOkqq/dW34Uv/f5XynoZ
MD5:	99C7E9AE9005283BC08DA323E55A0DE6
SHA1:	DAF47254DD5F17C030726BA1274EEBC81F8FA79E
SHA-256:	E59F915E5E0E6513CC8E297B3A544F07F6E91C1D94030C9CB9D17E40E2C98806
SHA-512:	629C139351C935F6E548F056908A35D5DCFED5B96E176221950E9F415A8E090C90EE6B62D20BB11386753C0D5A228DA1626C069DD109DD5FB39543421792B30B
Malicious:	false
Reputation:	low
Preview:	...........k[.H.(.}..[..-..c.c....0......!L.a...#yt......k...J..&...........^.~...._..j...W;;?8=.........m...~.}<>?zs.~=.(.;..qm.Oy.~....jaP......h.F^......\|oZ.G.M-...,...a..~..GW\|...L....N.(y...X-..Cm......p.......?.5/.QmS..b^K...jw..8.}..Q.....!.o..8...&X.x-.Im.F.D..U;.....-.T.:...1........8Ka..M.L.ZZ'....>........x....v.S;.<...0J.I.0.G.....B.F..c.k.~....C.:...r..,.w.q~....q......#42V.q..f\|.kK...1o.mP.}.......N..m..7.%^M.d.;...~2I.Z3/.z._....0..z1.a..F9..........4.v.^AWjo....T.'.2....D-.1,...CB......{L.l..y..#.Vw.j......j.V<../...,.'....%;."....ze..a.+a^..`.c4..Yd=.zQ-p#.c.......b..X.?v....W[V.eC.o.%.l.7)....M.w.F......C.......En.........v&>U...I.4.j......O?x..<....v........#.0..\|..Zl.Y]..Em...x.5O>ES'a0U.l...w......."...63..[..].g....a.8[...\.....y..%r......Z...O.W....^00y..v=l....Gfj...#.iYN...........r-8\|.6..,..e.b..Y,/.}i..q.....YoS..5.m.&..<r./).>s.Vx.+.]M.....k\|...../....%e.U.....*.?.T...]m..x3...6t.........h...q>.w...

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 407071
Category:	downloaded
Size (bytes):	116401
Entropy (8bit):	7.997985218273161
Encrypted:	true
SSDEEP:	3072:trFhpfSOLXpgp7yw2xq/dW34UR5v0Utf54Qyno7TxD:pNfSOkqq/dW34Uv/f5XynoZ
MD5:	99C7E9AE9005283BC08DA323E55A0DE6
SHA1:	DAF47254DD5F17C030726BA1274EEBC81F8FA79E
SHA-256:	E59F915E5E0E6513CC8E297B3A544F07F6E91C1D94030C9CB9D17E40E2C98806
SHA-512:	629C139351C935F6E548F056908A35D5DCFED5B96E176221950E9F415A8E090C90EE6B62D20BB11386753C0D5A228DA1626C069DD109DD5FB39543421792B30B
Malicious:	false
Reputation:	low
URL:	https://423377fa-8849d407.paolayjon.us/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_27cef08ca792f8e8b149.js
Preview:	...........k[.H.(.}..[..-..c.c....0......!L.a...#yt......k...J..&...........^.~...._..j...W;;?8=.........m...~.}<>?zs.~=.(.;..qm.Oy.~....jaP......h.F^......\|oZ.G.M-...,...a..~..GW\|...L....N.(y...X-..Cm......p.......?.5/.QmS..b^K...jw..8.}..Q.....!.o..8...&X.x-.Im.F.D..U;.....-.T.:...1........8Ka..M.L.ZZ'....>........x....v.S;.<...0J.I.0.G.....B.F..c.k.~....C.:...r..,.w.q~....q......#42V.q..f\|.kK...1o.mP.}.......N..m..7.%^M.d.;...~2I.Z3/.z._....0..z1.a..F9..........4.v.^AWjo....T.'.2....D-.1,...CB......{L.l..y..#.Vw.j......j.V<../...,.'....%;."....ze..a.+a^..`.c4..Yd=.zQ-p#.c.......b..X.?v....W[V.eC.o.%.l.7)....M.w.F......C.......En.........v&>U...I.4.j......O?x..<....v........#.0..\|..Zl.Y]..Em...x.5O>ES'a0U.l...w......."...63..[..].g....a.8[...\.....y..%r......Z...O.W....^00y..v=l....Gfj...#.iYN...........r-8\|.6..,..e.b..Y,/.}i..q.....YoS..5.m.&..<r./).>s.Vx.+.]M.....k\|...../....%e.U.....*.?.T...]m..x3...6t.........h...q>.w...

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 1864
Category:	dropped
Size (bytes):	673
Entropy (8bit):	7.6584200238076905
Encrypted:	false
SSDEEP:	12:XRt8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:X+UVpkNK0Rwid81p6btk7LqZ6D
MD5:	2D2CBA7D7DC75F3BA9DC756738D41A6E
SHA1:	F87FD26066ED5E52A65DEE0ED2D581D3C3EA15AC
SHA-256:	00E21864CF1BC70302EBB5B496C6C471A7DA8CBF600630B478A3E2376ED20EA2
SHA-512:	46F17658CA247C02F612213025350390D8F62179C8DE26725EB17F5CCFAFDD63F2149DA1765D3C2F3A12FE85EF29CAC58457B0D5C2F8DA8DED6E1231A35F199D
Malicious:	false
Reputation:	low
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 57510
Category:	dropped
Size (bytes):	16345
Entropy (8bit):	7.98961401355024
Encrypted:	false
SSDEEP:	384:gOBEj/gTOkWow6mhJqXnYI/0PiQBSoe122Yw/:gOBKJBXO586QB+11J
MD5:	1BB2645B377E0429225D33E4E2CC6E3F
SHA1:	A40797795C77CDFF574080B506BAB17DB38494B5
SHA-256:	B3B869875C7655F97500FBA0BCE74BCE7CC1DEE31D7CE5B93EA5D6457E07F08E
SHA-512:	49C98F20572C7488FEDB8AAF6C3D1D004904536524B79FA44CAABC5B91C8BA1A192B10F1FBE28112CC324E17600160E5BAA5E30261E5D63858C16376219DD3FE
Malicious:	false
Reputation:	low
Preview:	...........}Ms#.......\.@..'F.........3RH2....~......Q.x7...}..'.}..?e#...QU]....Vo..................?........w!......=.G...P.../......8z....q._5....g..}g..31......l*...],.b..;..`...Y....3..5.uGAi..NP.6<.w.(..`...y..d.N.x..^u.....^...?..N........Fq.....z..wgN./..Ep/f..c/.D4~X.W~).s/.E8...T...8,:..Q.p>.....7.....4....Z,&c.)n.[.pcQp...4...&...i.............CkL=.....g..m&vG..p... ....:N`y...ea.,....[......^.../D#(y.....l4.n..,.=_.p2P.....A,..RP..E.T......8 .v....Iw.X..?.r......nk....?Wj..a.\|..........JAs.j......?.)..t.z.-..m.]..3y...3@...'.)...Aa..1.kQ.....l+.....-q..n.p..{^...$..{/...=a..A...4.VH}..SBwju......S..hN.P..-..O,..S7.J,.....p.iLU.6W.....eO.7 ..C...{.E.Z...1...5s.!uY...@^. ,D".N.E......5.NE..\...VQa.A7..X.B..{.q..Ra..S....x(x7.Cp.#.#..:.......D..`,!IGr.. ...z.?.._0O.......;..0.z.h....5.../...q..5.\|..B.OY..k...].Sw.>.".@..!.9.V\|...=.dv.3!sr.....#...X8s.w.\|7..O/....!.."...3.."D..)...[........!^....3(..{...F2'..q.....x........

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 450708
Category:	dropped
Size (bytes):	122511
Entropy (8bit):	7.997338741386791
Encrypted:	true
SSDEEP:	3072:Mc3BKOij8gwR4Oy8rzkyjWvuRbhXcxs+w4R8UzVOxL5axQvm:13z0RNOlzRjukhsxsp4+UzVUL0cm
MD5:	BBBF010445C8E2C83E5C1F2C326D0B67
SHA1:	599D51611BCD5EE192B98AABD6FC78AA6C4C73F3
SHA-256:	3DCF7824BCEDF49D5D1F05C1CD6D998329A433D714E0E63A8D22201BC4D2E096
SHA-512:	EADE76B925573962CCF913B3918CEF6A4B28C47182AE1B2C1D9A0F6EFDBB1D6197D43D57F080ACEB5200E6B9C92B88DBAF3A899D7F6C23DEAAA0DE6563E64F28
Malicious:	false
Reputation:	low
Preview:	...........{w.8.8.....fn..(..o+.....yM.T.n.#K..."y%9.q......D.r..w...;[.H... ..............2..\^U.W../................_..Ie......N.J.V...n...IYRy..c...8z....2..?..&..OR(4fA.\.Bu.W.p...r\|Q.C..j.~...h.....J....N.Qm.\|....C...{....n.%.$...e..4..!..^qbVIXZ.Dqz..Q...R.P3.....O...Nh../.....9...Da.ZW:.U..-...F..h.z........cB.`z^.t...i.0..O.. .D..W.Y....^f.....i.r..L.3..{da.......V...t.F.WX.F...pn..g?auI...I.6..&.j.0;.F{.0k<.>Mg.....O.........(...^4..N.cp.`..........'.iV.b>..T..G..e...4....BN.9L....EB.......Lp.\|..C.;Ve...]..!\|Eq..Y.}=....V..y.'......^.KT.X8M......oG7.~>..S.2H..u...Nr...Jf......T..mo;7....[...~@+5.....v .....2.S...n.[;..jT.....p.\..[O..IZ.UkK1@{...{.hY.r/CC.h.'U.&...,..a...`aE&{T..${.[..X[..2..r.'.1,D}LeY=...Q.>.{...G....~.US{.......7...)..h.[..(..B...1...=W. .0..y.:+......k...3..?U...\L.e..v...j...N....9..D7k..PL.L...h-.p..%V?.>e...C...3....P.......w?....'U..>.k1=.e.)y! )....Y.c%.....{.K...3.._oo....1....3=s.YUC ...M.yF

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
URL:	https://423377fa-8849d407.paolayjon.us/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65521)
Category:	dropped
Size (bytes):	464625
Entropy (8bit):	5.400464017923095
Encrypted:	false
SSDEEP:	6144:UBpyEXucZjXXYStObZPMBxVREqbcWlYFysE9qxJ:UDyECqRflYFysAq7
MD5:	CCC3AEA726D0F47D5515DAF51A2AC184
SHA1:	24C6E917357DE5432ED0764CC441AA3BBCA5E287
SHA-256:	572F7A5D73CD2430D11A628FA23682D5D39B4357A109D9B0A0E3A4480BA016AE
SHA-512:	AAB78CF823934C2CD53B403187C28F5695B214A2BB36C4D33BC34125F6BD7CA3B784686B65AED5D493F7C65F97203532A8921DB1750F9295D944BA6ED654EA1E
Malicious:	false
Reputation:	low
Preview:	/* 1.2.9101 /.var t,e;function mimetype(e){"use strict";var t=[{file:"image",ext:["jpg","jpeg","png","gif","webp","svg","psd"]},{file:"archive",ext:["zip","7z","rar"]},{file:"pdf",ext:["pdf"]},{file:"video",ext:["mp4","flv","m3u8","ts","3gp","avi","mov","wmv"]},{file:"code",ext:["php","html","css","js","inc","py","xml","json"]},{file:"text",ext:["txt","rtf","pages"]},{file:"music",ext:["mp3","m3u"]},{file:"audio",ext:["mid","aif","wav"]},{file:"chart",ext:["xls","xlsx","numbers"]},{file:"csv",ext:["csv"]},{file:"powerpoint",ext:["pptx","pptm","ppt"]},{file:"word",ext:["doc","docx"]}];let i=e.ext\|\|"file",n=e.filename;if(e.url)try{const i=/\/([^\/]+\.[^\s\?#\/]+)$/i;var s=new URL(e.url),o=s.pathname.match(i);n=o?o[1]:s.hostname}catch(e){}if(n&&!e.ext){o=(n=n.replace(/(\?.\|$)/,"")).lastIndexOf(".");if(-1!=o){var r=n.toLowerCase().substr(o+1);for(let e=0;e<t.length;e++)if(-1!=t[e].ext.indexOf(r)){i=t[e].file;break}}}return"files/"+i}function humanSize(e){if(!e)return e;let t=0;for(;1024<

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 1864
Category:	downloaded
Size (bytes):	673
Entropy (8bit):	7.6584200238076905
Encrypted:	false
SSDEEP:	12:XRt8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:X+UVpkNK0Rwid81p6btk7LqZ6D
MD5:	2D2CBA7D7DC75F3BA9DC756738D41A6E
SHA1:	F87FD26066ED5E52A65DEE0ED2D581D3C3EA15AC
SHA-256:	00E21864CF1BC70302EBB5B496C6C471A7DA8CBF600630B478A3E2376ED20EA2
SHA-512:	46F17658CA247C02F612213025350390D8F62179C8DE26725EB17F5CCFAFDD63F2149DA1765D3C2F3A12FE85EF29CAC58457B0D5C2F8DA8DED6E1231A35F199D
Malicious:	false
Reputation:	low
URL:	https://423377fa-8849d407.paolayjon.us/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2025-01-07T19:40:34.744989+0100	2857090	ETPRO PHISHING JS/PsyduckPockeball Payload Inbound	1	198.58.107.108	443	192.168.2.4	60215	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 7, 2025 19:40:03.897202015 CET	49675	443	192.168.2.4	173.222.162.32
Jan 7, 2025 19:40:13.632241964 CET	49675	443	192.168.2.4	173.222.162.32
Jan 7, 2025 19:40:16.279937983 CET	49738	443	192.168.2.4	142.250.186.68
Jan 7, 2025 19:40:16.279961109 CET	443	49738	142.250.186.68	192.168.2.4
Jan 7, 2025 19:40:16.280020952 CET	49738	443	192.168.2.4	142.250.186.68
Jan 7, 2025 19:40:16.280242920 CET	49738	443	192.168.2.4	142.250.186.68
Jan 7, 2025 19:40:16.280260086 CET	443	49738	142.250.186.68	192.168.2.4
Jan 7, 2025 19:40:17.077606916 CET	443	49738	142.250.186.68	192.168.2.4
Jan 7, 2025 19:40:17.078061104 CET	49738	443	192.168.2.4	142.250.186.68
Jan 7, 2025 19:40:17.078078032 CET	443	49738	142.250.186.68	192.168.2.4
Jan 7, 2025 19:40:17.078939915 CET	443	49738	142.250.186.68	192.168.2.4
Jan 7, 2025 19:40:17.079001904 CET	49738	443	192.168.2.4	142.250.186.68
Jan 7, 2025 19:40:17.080070972 CET	49738	443	192.168.2.4	142.250.186.68
Jan 7, 2025 19:40:17.080132008 CET	443	49738	142.250.186.68	192.168.2.4
Jan 7, 2025 19:40:17.130700111 CET	49738	443	192.168.2.4	142.250.186.68
Jan 7, 2025 19:40:17.130709887 CET	443	49738	142.250.186.68	192.168.2.4
Jan 7, 2025 19:40:17.177583933 CET	49738	443	192.168.2.4	142.250.186.68
Jan 7, 2025 19:40:17.560911894 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:17.560945988 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:17.561002970 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:17.561172962 CET	49741	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:17.561202049 CET	443	49741	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:17.561261892 CET	49741	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:17.561463118 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:17.561479092 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:17.561691046 CET	49741	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:17.561706066 CET	443	49741	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.040972948 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.043040991 CET	443	49741	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.094008923 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:18.099704027 CET	49741	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:18.190521955 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:18.190531969 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.190653086 CET	49741	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:18.190665007 CET	443	49741	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.191725016 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.191737890 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.191782951 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:18.191874027 CET	443	49741	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.191885948 CET	443	49741	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.191926956 CET	49741	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:18.199135065 CET	49741	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:18.199282885 CET	443	49741	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.199451923 CET	49741	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:18.199459076 CET	443	49741	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.200813055 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:18.200896025 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.241308928 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:18.241309881 CET	49741	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:18.241317987 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.288141012 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:18.623001099 CET	443	49741	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.623043060 CET	443	49741	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.623069048 CET	443	49741	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.623121977 CET	49741	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:18.623143911 CET	443	49741	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.623214960 CET	49741	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:18.623228073 CET	443	49741	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.623269081 CET	49741	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:18.629652023 CET	49741	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:18.629667044 CET	443	49741	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.667352915 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:18.667378902 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.667475939 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:18.667599916 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:18.667793036 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:18.667813063 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.711332083 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.789937019 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.789984941 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.790014029 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.790036917 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.790064096 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.790064096 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:18.790091991 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.790096998 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:18.790179014 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.790200949 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:18.790210962 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.790277004 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:18.790564060 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.790942907 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.791034937 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:18.791040897 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.794719934 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.794761896 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:18.794770002 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.838651896 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:18.880642891 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.880713940 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.880749941 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.880759954 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:18.880769968 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.880810976 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:18.880934954 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.881011963 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.881043911 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.881062031 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:18.881068945 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.881098032 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.881125927 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:18.881134987 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.881200075 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:18.881757975 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.881839037 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.881942034 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.881958008 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:18.881964922 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.882019043 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.882056952 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:18.882065058 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.882154942 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:18.882788897 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.882849932 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.882894993 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.882901907 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:18.882909060 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.882961988 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.882987022 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:18.882994890 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.883121014 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:18.883532047 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.926384926 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.926440954 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:18.926449060 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.971122980 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.971170902 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:18.971180916 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.971393108 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.971400976 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.971455097 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:18.971462011 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.971951962 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.971987963 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.971998930 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:18.972006083 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.972048044 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:18.972048044 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:18.972590923 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.972599030 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.972645044 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:18.972655058 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.972696066 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:18.973157883 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.973210096 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:18.973289967 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.973346949 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:18.974097013 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.974148035 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:18.974180937 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.974225044 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:18.975012064 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.975048065 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.975081921 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:18.975089073 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.975101948 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:18.975123882 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:18.975164890 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.975209951 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:18.975930929 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.976003885 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:18.976062059 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:18.976108074 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.061883926 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.061943054 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.062050104 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.062093973 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.062190056 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.062233925 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.062441111 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.062500000 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.062802076 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.062849045 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.062977076 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.063028097 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.063739061 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.063790083 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.063927889 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.063971996 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.064085960 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.064132929 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.064672947 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.064733028 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.064827919 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.064872980 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.065624952 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.065674067 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.065716028 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.065763950 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.065862894 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.065910101 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.066618919 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.066663027 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.066667080 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.066673994 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.066705942 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.067451954 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.067516088 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.067537069 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.067579985 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.068317890 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.068386078 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.068479061 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.068514109 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.068522930 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.068531036 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.068572998 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.069256067 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.069307089 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.069372892 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.069425106 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.070161104 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.070208073 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.070319891 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.070379019 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.071005106 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.071062088 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.107722044 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.107729912 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.107758045 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.107781887 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.107788086 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.107825994 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.123661041 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.123889923 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.123903036 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.124311924 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.124675989 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.124733925 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.124836922 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.150898933 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.153012037 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.153021097 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.153048992 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.153069973 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.153078079 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.153110027 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.153127909 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.153637886 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.153656960 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.153695107 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.153707027 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.153846979 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.153995991 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.154012918 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.154057980 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.154064894 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.154114008 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.154900074 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.154916048 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.154970884 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.154977083 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.155195951 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.155411959 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.155482054 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.155527115 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.155618906 CET	49740	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.155630112 CET	443	49740	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.166578054 CET	49744	443	192.168.2.4	35.190.80.1
Jan 7, 2025 19:40:19.166620970 CET	443	49744	35.190.80.1	192.168.2.4
Jan 7, 2025 19:40:19.166675091 CET	49744	443	192.168.2.4	35.190.80.1
Jan 7, 2025 19:40:19.166906118 CET	49744	443	192.168.2.4	35.190.80.1
Jan 7, 2025 19:40:19.166920900 CET	443	49744	35.190.80.1	192.168.2.4
Jan 7, 2025 19:40:19.171331882 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.172343969 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.258976936 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.259027958 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.259059906 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.259107113 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.259134054 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.259145021 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.259176970 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.259201050 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.259208918 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.259243011 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.259267092 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.259274960 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.259799004 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.263505936 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.263660908 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.263667107 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.263693094 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.264081001 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.264089108 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.309767962 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.364064932 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.364463091 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.364566088 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.364593983 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.364603043 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.364696026 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.364723921 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.364729881 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.364820957 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.364826918 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.365248919 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.365372896 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.365402937 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.365406990 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.365417957 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.365495920 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.365526915 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.365540028 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.365560055 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.366097927 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.366134882 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.366267920 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.366276026 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.366563082 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.366570950 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.366597891 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.366645098 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.366686106 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.366719007 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.366744995 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.366754055 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.366878986 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.366883993 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.416867018 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.416877031 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.455446005 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.455485106 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.455527067 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.455554962 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.455569029 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.455596924 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.455647945 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.455740929 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.455748081 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.455809116 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.455826998 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.455836058 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.455856085 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.456079006 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.456161976 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.456172943 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.456238985 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.456248045 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.456374884 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.456404924 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.456407070 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.456418037 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.456435919 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.456459045 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.456712008 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.456854105 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.456892014 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.456937075 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.457055092 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.457139015 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.457247972 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.457278013 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.457295895 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.457309961 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.457334995 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.457627058 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.457773924 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.457779884 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.457815886 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.457842112 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.457849026 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.457874060 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.458054066 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.458332062 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.458339930 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.458498955 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.541585922 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.541676998 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.541701078 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.541877985 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.541903973 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.541912079 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.541934013 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.542073011 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.542170048 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.542176962 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.542269945 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.542316914 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.542396069 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.542500973 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.542666912 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.542692900 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.542876005 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.542906046 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.542912006 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.542937994 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.543041945 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.543346882 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.543353081 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.543390989 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.543745995 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.543777943 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.543807983 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.543814898 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.543840885 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.543921947 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.543946028 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.543955088 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.543968916 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.543977976 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.544020891 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.544025898 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.544101954 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.544351101 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.544491053 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.544539928 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.544611931 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.544636011 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.544641972 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.544665098 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.546576023 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.546607971 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.546677113 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.546677113 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.546684980 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.546902895 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.546936989 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.546966076 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.546967030 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.546977043 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.546996117 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.547216892 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.547240973 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.547254086 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.547278881 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.547405005 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.547436953 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.547468901 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.547476053 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.547501087 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.547708035 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.547800064 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.547806978 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.547902107 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.641247988 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.641314983 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.641349077 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.641360998 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.641386986 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.641613007 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.641630888 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.641663074 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.641670942 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.641700983 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.642112017 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.642126083 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.642201900 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.642201900 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.642210960 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.643198967 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.643214941 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.643318892 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.643332005 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.643332005 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.643347979 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.643475056 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.643485069 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.644320965 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.644335985 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.644465923 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.644479036 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.648029089 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.648042917 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.648133993 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.648145914 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.648149014 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.648163080 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.648194075 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.648281097 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.654727936 CET	443	49744	35.190.80.1	192.168.2.4
Jan 7, 2025 19:40:19.654963970 CET	49744	443	192.168.2.4	35.190.80.1
Jan 7, 2025 19:40:19.654990911 CET	443	49744	35.190.80.1	192.168.2.4
Jan 7, 2025 19:40:19.656024933 CET	443	49744	35.190.80.1	192.168.2.4
Jan 7, 2025 19:40:19.656112909 CET	49744	443	192.168.2.4	35.190.80.1
Jan 7, 2025 19:40:19.657196999 CET	49744	443	192.168.2.4	35.190.80.1
Jan 7, 2025 19:40:19.657255888 CET	443	49744	35.190.80.1	192.168.2.4
Jan 7, 2025 19:40:19.657399893 CET	49744	443	192.168.2.4	35.190.80.1
Jan 7, 2025 19:40:19.657407999 CET	443	49744	35.190.80.1	192.168.2.4
Jan 7, 2025 19:40:19.709014893 CET	49744	443	192.168.2.4	35.190.80.1
Jan 7, 2025 19:40:19.714471102 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.714489937 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.714549065 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.714559078 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.714617968 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.714999914 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.715017080 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.715090990 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.715090990 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.715099096 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.715835094 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.715854883 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.715863943 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.715869904 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.715886116 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.715959072 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.715965033 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.716131926 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.716145992 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.716187954 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.716196060 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.716217041 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.717097044 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.717117071 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.717185020 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.717185020 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.717191935 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.717256069 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.717269897 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.717323065 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.717323065 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.717330933 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.718197107 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.718216896 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.718283892 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.718300104 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.718300104 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.718307972 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.718334913 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.718368053 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.719434977 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.721084118 CET	49743	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.721100092 CET	443	49743	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.768316031 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:19.768352985 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:19.768657923 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:19.768657923 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:19.768692970 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:19.775044918 CET	49746	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.775053024 CET	443	49746	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.775113106 CET	49746	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.775367975 CET	49746	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.775377989 CET	443	49746	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.779983044 CET	443	49744	35.190.80.1	192.168.2.4
Jan 7, 2025 19:40:19.780061960 CET	443	49744	35.190.80.1	192.168.2.4
Jan 7, 2025 19:40:19.780587912 CET	49747	443	192.168.2.4	35.190.80.1
Jan 7, 2025 19:40:19.780587912 CET	49744	443	192.168.2.4	35.190.80.1
Jan 7, 2025 19:40:19.780595064 CET	443	49747	35.190.80.1	192.168.2.4
Jan 7, 2025 19:40:19.780613899 CET	443	49744	35.190.80.1	192.168.2.4
Jan 7, 2025 19:40:19.780631065 CET	49744	443	192.168.2.4	35.190.80.1
Jan 7, 2025 19:40:19.780683041 CET	49744	443	192.168.2.4	35.190.80.1
Jan 7, 2025 19:40:19.780684948 CET	49747	443	192.168.2.4	35.190.80.1
Jan 7, 2025 19:40:19.781024933 CET	49747	443	192.168.2.4	35.190.80.1
Jan 7, 2025 19:40:19.781035900 CET	443	49747	35.190.80.1	192.168.2.4
Jan 7, 2025 19:40:19.784235954 CET	49748	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.784264088 CET	443	49748	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.784609079 CET	49748	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.784841061 CET	49748	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:19.784857035 CET	443	49748	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:19.791966915 CET	49749	443	192.168.2.4	87.250.250.119
Jan 7, 2025 19:40:19.791985989 CET	443	49749	87.250.250.119	192.168.2.4
Jan 7, 2025 19:40:19.792200089 CET	49749	443	192.168.2.4	87.250.250.119
Jan 7, 2025 19:40:19.792200089 CET	49749	443	192.168.2.4	87.250.250.119
Jan 7, 2025 19:40:19.792226076 CET	443	49749	87.250.250.119	192.168.2.4
Jan 7, 2025 19:40:20.236661911 CET	443	49746	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:20.237601042 CET	49746	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:20.237611055 CET	443	49746	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:20.237998962 CET	443	49746	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:20.241559029 CET	49746	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:20.241612911 CET	443	49746	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:20.241707087 CET	49746	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:20.243765116 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.243920088 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.243927002 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.244764090 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.244817972 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.245102882 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.245151043 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.245193005 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.253971100 CET	443	49747	35.190.80.1	192.168.2.4
Jan 7, 2025 19:40:20.256601095 CET	49747	443	192.168.2.4	35.190.80.1
Jan 7, 2025 19:40:20.256608963 CET	443	49747	35.190.80.1	192.168.2.4
Jan 7, 2025 19:40:20.256972075 CET	443	49747	35.190.80.1	192.168.2.4
Jan 7, 2025 19:40:20.257536888 CET	49747	443	192.168.2.4	35.190.80.1
Jan 7, 2025 19:40:20.257622004 CET	443	49747	35.190.80.1	192.168.2.4
Jan 7, 2025 19:40:20.257642031 CET	49747	443	192.168.2.4	35.190.80.1
Jan 7, 2025 19:40:20.264642000 CET	443	49748	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:20.267482996 CET	49748	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:20.267497063 CET	443	49748	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:20.267837048 CET	443	49748	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:20.269810915 CET	49748	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:20.269869089 CET	443	49748	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:20.269922972 CET	49748	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:20.283329010 CET	443	49746	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:20.286456108 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.286463022 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.302515984 CET	49747	443	192.168.2.4	35.190.80.1
Jan 7, 2025 19:40:20.302521944 CET	443	49747	35.190.80.1	192.168.2.4
Jan 7, 2025 19:40:20.315330982 CET	443	49748	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:20.319124937 CET	49748	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:20.333659887 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.385806084 CET	443	49747	35.190.80.1	192.168.2.4
Jan 7, 2025 19:40:20.385901928 CET	443	49747	35.190.80.1	192.168.2.4
Jan 7, 2025 19:40:20.385978937 CET	49747	443	192.168.2.4	35.190.80.1
Jan 7, 2025 19:40:20.386182070 CET	49747	443	192.168.2.4	35.190.80.1
Jan 7, 2025 19:40:20.386189938 CET	443	49747	35.190.80.1	192.168.2.4
Jan 7, 2025 19:40:20.391690016 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.391731977 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.391761065 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.391794920 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.391802073 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.391848087 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.391953945 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.392020941 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.392060995 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.392066956 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.392447948 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.392476082 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.392522097 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.392527103 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.392566919 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.392571926 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.396509886 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.397280931 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.397285938 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.402647972 CET	443	49746	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:20.402705908 CET	443	49746	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:20.402740002 CET	443	49746	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:20.402786016 CET	49746	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:20.402791977 CET	443	49746	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:20.402841091 CET	49746	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:20.402869940 CET	443	49746	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:20.403345108 CET	443	49746	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:20.403783083 CET	443	49746	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:20.403847933 CET	49746	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:20.404685020 CET	49746	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:20.404690027 CET	443	49746	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:20.407830954 CET	443	49748	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:20.407891035 CET	443	49748	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:20.407927036 CET	443	49748	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:20.407964945 CET	443	49748	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:20.407977104 CET	49748	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:20.407987118 CET	443	49748	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:20.408015013 CET	49748	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:20.408032894 CET	443	49748	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:20.408070087 CET	443	49748	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:20.408071995 CET	49748	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:20.408078909 CET	443	49748	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:20.408122063 CET	49748	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:20.408127069 CET	443	49748	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:20.408183098 CET	443	49748	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:20.409280062 CET	49748	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:20.416675091 CET	49748	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:20.416692019 CET	443	49748	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:20.467086077 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.482048988 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.482194901 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.482227087 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.482256889 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.482270956 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.482276917 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.482330084 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.482336998 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.482378960 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.482672930 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.482901096 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.483222961 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.483253956 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.483272076 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.483277082 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.483309031 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.483339071 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.483378887 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.483385086 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.483808041 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.483906984 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.483944893 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.483964920 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.483971119 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.484000921 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.484021902 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.484076977 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.484081984 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.484716892 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.484749079 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.484803915 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.484808922 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.484848976 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.487310886 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.496567965 CET	443	49749	87.250.250.119	192.168.2.4
Jan 7, 2025 19:40:20.531337023 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.547086954 CET	49749	443	192.168.2.4	87.250.250.119
Jan 7, 2025 19:40:20.572561026 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.572640896 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.572669983 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.572696924 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.572820902 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.572820902 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.572829008 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.572988033 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.573045969 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.573050976 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.573090076 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.573191881 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.573240042 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.573247910 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.573295116 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.573441029 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.573487997 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.573802948 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.573853016 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.574028015 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.574073076 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.574214935 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.574245930 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.574266911 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.574271917 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.574282885 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.574310064 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.574721098 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.574770927 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.574845076 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.574894905 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.575007915 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.575059891 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.575067043 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.575110912 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.575587034 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.575634956 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.575757980 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.575808048 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.610606909 CET	49750	443	192.168.2.4	87.250.250.119
Jan 7, 2025 19:40:20.610619068 CET	443	49750	87.250.250.119	192.168.2.4
Jan 7, 2025 19:40:20.610683918 CET	49750	443	192.168.2.4	87.250.250.119
Jan 7, 2025 19:40:20.663184881 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.663244963 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.663332939 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.663381100 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.663594007 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.663635969 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.663721085 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.663772106 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.663896084 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.663959980 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.664005041 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.664068937 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.664285898 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.664338112 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.664412022 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.664462090 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.664581060 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.664633989 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.664767027 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.664822102 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.664992094 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.665050030 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.665050983 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.665059090 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.665097952 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.665117979 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.665349960 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.665410042 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.665534973 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.665585995 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.665747881 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.665785074 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.665801048 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.665807962 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.665817022 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.665843964 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.665870905 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.665874958 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.668006897 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.668071985 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.668076992 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.668131113 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.668159962 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.668220043 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.668330908 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.668390036 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.668414116 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.668454885 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.668680906 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.668730021 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.668879986 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.668930054 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.669054031 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.669097900 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.669145107 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.669193029 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.669471025 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.669512033 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.669900894 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.669907093 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.669944048 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.669956923 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.669962883 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.669992924 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.690723896 CET	49750	443	192.168.2.4	87.250.250.119
Jan 7, 2025 19:40:20.690735102 CET	443	49750	87.250.250.119	192.168.2.4
Jan 7, 2025 19:40:20.691026926 CET	49749	443	192.168.2.4	87.250.250.119
Jan 7, 2025 19:40:20.691042900 CET	443	49749	87.250.250.119	192.168.2.4
Jan 7, 2025 19:40:20.691994905 CET	443	49749	87.250.250.119	192.168.2.4
Jan 7, 2025 19:40:20.692012072 CET	443	49749	87.250.250.119	192.168.2.4
Jan 7, 2025 19:40:20.692069054 CET	49749	443	192.168.2.4	87.250.250.119
Jan 7, 2025 19:40:20.693864107 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.694807053 CET	49749	443	192.168.2.4	87.250.250.119
Jan 7, 2025 19:40:20.694866896 CET	443	49749	87.250.250.119	192.168.2.4
Jan 7, 2025 19:40:20.694957018 CET	49749	443	192.168.2.4	87.250.250.119
Jan 7, 2025 19:40:20.694964886 CET	443	49749	87.250.250.119	192.168.2.4
Jan 7, 2025 19:40:20.708249092 CET	49751	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.708275080 CET	443	49751	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.708421946 CET	49751	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.709892988 CET	49752	443	192.168.2.4	104.26.3.150
Jan 7, 2025 19:40:20.709919930 CET	443	49752	104.26.3.150	192.168.2.4
Jan 7, 2025 19:40:20.710047960 CET	49752	443	192.168.2.4	104.26.3.150
Jan 7, 2025 19:40:20.710374117 CET	49751	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.710387945 CET	443	49751	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.710546017 CET	49752	443	192.168.2.4	104.26.3.150
Jan 7, 2025 19:40:20.710558891 CET	443	49752	104.26.3.150	192.168.2.4
Jan 7, 2025 19:40:20.737474918 CET	49749	443	192.168.2.4	87.250.250.119
Jan 7, 2025 19:40:20.754152060 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.754172087 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.754211903 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.754219055 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.754256964 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.754271030 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.754925013 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.754945040 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.755004883 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.755011082 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.755039930 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.755059004 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.755469084 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.755482912 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.755536079 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.755542040 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.755582094 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.755992889 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.756016016 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.756057978 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.756062031 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.756114960 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.756721973 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.756740093 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.756761074 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.756766081 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.756777048 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.756824970 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.757410049 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.757424116 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.757488966 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.757493973 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.757538080 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.758471012 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.758486986 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.758554935 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.758560896 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.758601904 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.844562054 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.844578981 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.844640017 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.844646931 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.844686031 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.845206022 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.845220089 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.845257044 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.845261097 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.845293999 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.845315933 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.845624924 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.845639944 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.845700979 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.845706940 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.845746994 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.845913887 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.846225977 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.846240044 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.846272945 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.846277952 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.846304893 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.846920013 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.846937895 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.846966028 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.846971989 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.847007036 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.847745895 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.847758055 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.847821951 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.847829103 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.848484039 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.848500013 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.848532915 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.848537922 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.848565102 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.848567009 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.848617077 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.848620892 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.848635912 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.848656893 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.848687887 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.849005938 CET	49745	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:20.849011898 CET	443	49745	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:20.914467096 CET	443	49749	87.250.250.119	192.168.2.4
Jan 7, 2025 19:40:20.914525032 CET	49749	443	192.168.2.4	87.250.250.119
Jan 7, 2025 19:40:20.914539099 CET	443	49749	87.250.250.119	192.168.2.4
Jan 7, 2025 19:40:20.914843082 CET	49749	443	192.168.2.4	87.250.250.119
Jan 7, 2025 19:40:20.916610003 CET	49749	443	192.168.2.4	87.250.250.119
Jan 7, 2025 19:40:20.916629076 CET	443	49749	87.250.250.119	192.168.2.4
Jan 7, 2025 19:40:20.918112993 CET	49753	443	192.168.2.4	87.250.250.119
Jan 7, 2025 19:40:20.918137074 CET	443	49753	87.250.250.119	192.168.2.4
Jan 7, 2025 19:40:20.918279886 CET	49753	443	192.168.2.4	87.250.250.119
Jan 7, 2025 19:40:20.918591022 CET	49753	443	192.168.2.4	87.250.250.119
Jan 7, 2025 19:40:20.918601990 CET	443	49753	87.250.250.119	192.168.2.4
Jan 7, 2025 19:40:21.198924065 CET	443	49751	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:21.199455976 CET	49751	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:21.199476004 CET	443	49751	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:21.199850082 CET	443	49751	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:21.200190067 CET	49751	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:21.200247049 CET	443	49751	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:21.200339079 CET	49751	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:21.226197004 CET	443	49752	104.26.3.150	192.168.2.4
Jan 7, 2025 19:40:21.226404905 CET	49752	443	192.168.2.4	104.26.3.150
Jan 7, 2025 19:40:21.226425886 CET	443	49752	104.26.3.150	192.168.2.4
Jan 7, 2025 19:40:21.227427959 CET	443	49752	104.26.3.150	192.168.2.4
Jan 7, 2025 19:40:21.227492094 CET	49752	443	192.168.2.4	104.26.3.150
Jan 7, 2025 19:40:21.228374958 CET	49752	443	192.168.2.4	104.26.3.150
Jan 7, 2025 19:40:21.228441954 CET	443	49752	104.26.3.150	192.168.2.4
Jan 7, 2025 19:40:21.228524923 CET	49752	443	192.168.2.4	104.26.3.150
Jan 7, 2025 19:40:21.243335962 CET	443	49751	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:21.275329113 CET	443	49752	104.26.3.150	192.168.2.4
Jan 7, 2025 19:40:21.276494980 CET	49752	443	192.168.2.4	104.26.3.150
Jan 7, 2025 19:40:21.276501894 CET	443	49752	104.26.3.150	192.168.2.4
Jan 7, 2025 19:40:21.323647022 CET	49752	443	192.168.2.4	104.26.3.150
Jan 7, 2025 19:40:21.355299950 CET	443	49751	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:21.355417013 CET	443	49751	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:21.355458975 CET	443	49751	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:21.355474949 CET	49751	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:21.355493069 CET	443	49751	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:21.355530024 CET	443	49751	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:21.355537891 CET	49751	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:21.355544090 CET	443	49751	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:21.355581999 CET	443	49751	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:21.355591059 CET	49751	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:21.355600119 CET	443	49751	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:21.355634928 CET	49751	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:21.355643034 CET	443	49751	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:21.355659008 CET	443	49751	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:21.355700016 CET	49751	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:21.356498957 CET	49751	443	192.168.2.4	172.67.74.23
Jan 7, 2025 19:40:21.356513977 CET	443	49751	172.67.74.23	192.168.2.4
Jan 7, 2025 19:40:21.381287098 CET	443	49752	104.26.3.150	192.168.2.4
Jan 7, 2025 19:40:21.381328106 CET	443	49752	104.26.3.150	192.168.2.4
Jan 7, 2025 19:40:21.381376028 CET	49752	443	192.168.2.4	104.26.3.150
Jan 7, 2025 19:40:21.381385088 CET	443	49752	104.26.3.150	192.168.2.4
Jan 7, 2025 19:40:21.381422043 CET	443	49752	104.26.3.150	192.168.2.4
Jan 7, 2025 19:40:21.381457090 CET	443	49752	104.26.3.150	192.168.2.4
Jan 7, 2025 19:40:21.381469965 CET	49752	443	192.168.2.4	104.26.3.150
Jan 7, 2025 19:40:21.381479025 CET	443	49752	104.26.3.150	192.168.2.4
Jan 7, 2025 19:40:21.381524086 CET	49752	443	192.168.2.4	104.26.3.150
Jan 7, 2025 19:40:21.382065058 CET	443	49752	104.26.3.150	192.168.2.4
Jan 7, 2025 19:40:21.382296085 CET	443	49752	104.26.3.150	192.168.2.4
Jan 7, 2025 19:40:21.382338047 CET	49752	443	192.168.2.4	104.26.3.150
Jan 7, 2025 19:40:21.382345915 CET	443	49752	104.26.3.150	192.168.2.4
Jan 7, 2025 19:40:21.386025906 CET	443	49752	104.26.3.150	192.168.2.4
Jan 7, 2025 19:40:21.386058092 CET	443	49752	104.26.3.150	192.168.2.4
Jan 7, 2025 19:40:21.386094093 CET	49752	443	192.168.2.4	104.26.3.150
Jan 7, 2025 19:40:21.386104107 CET	443	49752	104.26.3.150	192.168.2.4
Jan 7, 2025 19:40:21.386146069 CET	49752	443	192.168.2.4	104.26.3.150
Jan 7, 2025 19:40:21.409190893 CET	443	49750	87.250.250.119	192.168.2.4
Jan 7, 2025 19:40:21.409425974 CET	49750	443	192.168.2.4	87.250.250.119
Jan 7, 2025 19:40:21.409439087 CET	443	49750	87.250.250.119	192.168.2.4
Jan 7, 2025 19:40:21.410438061 CET	443	49750	87.250.250.119	192.168.2.4
Jan 7, 2025 19:40:21.410501003 CET	49750	443	192.168.2.4	87.250.250.119
Jan 7, 2025 19:40:21.410814047 CET	49750	443	192.168.2.4	87.250.250.119
Jan 7, 2025 19:40:21.410872936 CET	443	49750	87.250.250.119	192.168.2.4
Jan 7, 2025 19:40:21.410918951 CET	49750	443	192.168.2.4	87.250.250.119
Jan 7, 2025 19:40:21.410924911 CET	443	49750	87.250.250.119	192.168.2.4
Jan 7, 2025 19:40:21.460678101 CET	49750	443	192.168.2.4	87.250.250.119
Jan 7, 2025 19:40:21.473602057 CET	443	49752	104.26.3.150	192.168.2.4
Jan 7, 2025 19:40:21.473665953 CET	443	49752	104.26.3.150	192.168.2.4
Jan 7, 2025 19:40:21.473712921 CET	49752	443	192.168.2.4	104.26.3.150
Jan 7, 2025 19:40:21.473718882 CET	443	49752	104.26.3.150	192.168.2.4
Jan 7, 2025 19:40:21.473793983 CET	443	49752	104.26.3.150	192.168.2.4
Jan 7, 2025 19:40:21.473828077 CET	49752	443	192.168.2.4	104.26.3.150
Jan 7, 2025 19:40:21.473835945 CET	443	49752	104.26.3.150	192.168.2.4
Jan 7, 2025 19:40:21.474148035 CET	443	49752	104.26.3.150	192.168.2.4
Jan 7, 2025 19:40:21.474183083 CET	443	49752	104.26.3.150	192.168.2.4
Jan 7, 2025 19:40:21.474190950 CET	49752	443	192.168.2.4	104.26.3.150
Jan 7, 2025 19:40:21.474198103 CET	443	49752	104.26.3.150	192.168.2.4
Jan 7, 2025 19:40:21.474237919 CET	49752	443	192.168.2.4	104.26.3.150
Jan 7, 2025 19:40:21.474553108 CET	443	49752	104.26.3.150	192.168.2.4
Jan 7, 2025 19:40:21.474625111 CET	443	49752	104.26.3.150	192.168.2.4
Jan 7, 2025 19:40:21.474667072 CET	49752	443	192.168.2.4	104.26.3.150
Jan 7, 2025 19:40:21.474673033 CET	443	49752	104.26.3.150	192.168.2.4
Jan 7, 2025 19:40:21.474742889 CET	443	49752	104.26.3.150	192.168.2.4
Jan 7, 2025 19:40:21.474782944 CET	49752	443	192.168.2.4	104.26.3.150
Jan 7, 2025 19:40:21.474788904 CET	443	49752	104.26.3.150	192.168.2.4
Jan 7, 2025 19:40:21.474798918 CET	443	49752	104.26.3.150	192.168.2.4
Jan 7, 2025 19:40:21.474836111 CET	49752	443	192.168.2.4	104.26.3.150
Jan 7, 2025 19:40:21.475167990 CET	49752	443	192.168.2.4	104.26.3.150
Jan 7, 2025 19:40:21.475176096 CET	443	49752	104.26.3.150	192.168.2.4
Jan 7, 2025 19:40:21.486229897 CET	49754	443	192.168.2.4	104.26.2.150
Jan 7, 2025 19:40:21.486248016 CET	443	49754	104.26.2.150	192.168.2.4
Jan 7, 2025 19:40:21.486305952 CET	49754	443	192.168.2.4	104.26.2.150
Jan 7, 2025 19:40:21.486488104 CET	49754	443	192.168.2.4	104.26.2.150
Jan 7, 2025 19:40:21.486499071 CET	443	49754	104.26.2.150	192.168.2.4
Jan 7, 2025 19:40:21.653858900 CET	443	49753	87.250.250.119	192.168.2.4
Jan 7, 2025 19:40:21.654118061 CET	49753	443	192.168.2.4	87.250.250.119
Jan 7, 2025 19:40:21.654128075 CET	443	49753	87.250.250.119	192.168.2.4
Jan 7, 2025 19:40:21.654419899 CET	443	49753	87.250.250.119	192.168.2.4
Jan 7, 2025 19:40:21.654722929 CET	49753	443	192.168.2.4	87.250.250.119
Jan 7, 2025 19:40:21.654773951 CET	443	49753	87.250.250.119	192.168.2.4
Jan 7, 2025 19:40:21.654848099 CET	49753	443	192.168.2.4	87.250.250.119
Jan 7, 2025 19:40:21.695333004 CET	443	49753	87.250.250.119	192.168.2.4
Jan 7, 2025 19:40:21.775646925 CET	443	49750	87.250.250.119	192.168.2.4
Jan 7, 2025 19:40:21.775765896 CET	443	49750	87.250.250.119	192.168.2.4
Jan 7, 2025 19:40:21.775834084 CET	49750	443	192.168.2.4	87.250.250.119
Jan 7, 2025 19:40:21.776319027 CET	49750	443	192.168.2.4	87.250.250.119
Jan 7, 2025 19:40:21.776326895 CET	443	49750	87.250.250.119	192.168.2.4
Jan 7, 2025 19:40:21.783559084 CET	49755	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:21.783582926 CET	443	49755	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:21.783641100 CET	49755	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:21.783848047 CET	49755	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:21.783859968 CET	443	49755	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:21.797560930 CET	49756	443	192.168.2.4	93.158.134.119
Jan 7, 2025 19:40:21.797596931 CET	443	49756	93.158.134.119	192.168.2.4
Jan 7, 2025 19:40:21.797667980 CET	49756	443	192.168.2.4	93.158.134.119
Jan 7, 2025 19:40:21.797843933 CET	49756	443	192.168.2.4	93.158.134.119
Jan 7, 2025 19:40:21.797858953 CET	443	49756	93.158.134.119	192.168.2.4
Jan 7, 2025 19:40:21.938693047 CET	443	49754	104.26.2.150	192.168.2.4
Jan 7, 2025 19:40:21.938941956 CET	49754	443	192.168.2.4	104.26.2.150
Jan 7, 2025 19:40:21.938961983 CET	443	49754	104.26.2.150	192.168.2.4
Jan 7, 2025 19:40:21.939965010 CET	443	49754	104.26.2.150	192.168.2.4
Jan 7, 2025 19:40:21.940026045 CET	49754	443	192.168.2.4	104.26.2.150
Jan 7, 2025 19:40:21.940371037 CET	49754	443	192.168.2.4	104.26.2.150
Jan 7, 2025 19:40:21.940433979 CET	443	49754	104.26.2.150	192.168.2.4
Jan 7, 2025 19:40:21.940500021 CET	49754	443	192.168.2.4	104.26.2.150
Jan 7, 2025 19:40:21.940507889 CET	443	49754	104.26.2.150	192.168.2.4
Jan 7, 2025 19:40:21.990339994 CET	49754	443	192.168.2.4	104.26.2.150
Jan 7, 2025 19:40:22.019365072 CET	443	49753	87.250.250.119	192.168.2.4
Jan 7, 2025 19:40:22.019438982 CET	443	49753	87.250.250.119	192.168.2.4
Jan 7, 2025 19:40:22.019495964 CET	49753	443	192.168.2.4	87.250.250.119
Jan 7, 2025 19:40:22.021126986 CET	49753	443	192.168.2.4	87.250.250.119
Jan 7, 2025 19:40:22.021138906 CET	443	49753	87.250.250.119	192.168.2.4
Jan 7, 2025 19:40:22.021830082 CET	49757	443	192.168.2.4	87.250.250.119
Jan 7, 2025 19:40:22.021857977 CET	443	49757	87.250.250.119	192.168.2.4
Jan 7, 2025 19:40:22.021915913 CET	49757	443	192.168.2.4	87.250.250.119
Jan 7, 2025 19:40:22.022119999 CET	49757	443	192.168.2.4	87.250.250.119
Jan 7, 2025 19:40:22.022133112 CET	443	49757	87.250.250.119	192.168.2.4
Jan 7, 2025 19:40:22.079154015 CET	443	49754	104.26.2.150	192.168.2.4
Jan 7, 2025 19:40:22.079217911 CET	443	49754	104.26.2.150	192.168.2.4
Jan 7, 2025 19:40:22.079260111 CET	443	49754	104.26.2.150	192.168.2.4
Jan 7, 2025 19:40:22.079282045 CET	49754	443	192.168.2.4	104.26.2.150
Jan 7, 2025 19:40:22.079292059 CET	443	49754	104.26.2.150	192.168.2.4
Jan 7, 2025 19:40:22.079324007 CET	49754	443	192.168.2.4	104.26.2.150
Jan 7, 2025 19:40:22.079329967 CET	443	49754	104.26.2.150	192.168.2.4
Jan 7, 2025 19:40:22.079380035 CET	443	49754	104.26.2.150	192.168.2.4
Jan 7, 2025 19:40:22.079411030 CET	443	49754	104.26.2.150	192.168.2.4
Jan 7, 2025 19:40:22.079420090 CET	49754	443	192.168.2.4	104.26.2.150
Jan 7, 2025 19:40:22.079427958 CET	443	49754	104.26.2.150	192.168.2.4
Jan 7, 2025 19:40:22.079468012 CET	49754	443	192.168.2.4	104.26.2.150
Jan 7, 2025 19:40:22.079473019 CET	443	49754	104.26.2.150	192.168.2.4
Jan 7, 2025 19:40:22.083807945 CET	443	49754	104.26.2.150	192.168.2.4
Jan 7, 2025 19:40:22.083873987 CET	49754	443	192.168.2.4	104.26.2.150
Jan 7, 2025 19:40:22.083883047 CET	443	49754	104.26.2.150	192.168.2.4
Jan 7, 2025 19:40:22.130841017 CET	49754	443	192.168.2.4	104.26.2.150
Jan 7, 2025 19:40:22.165334940 CET	443	49754	104.26.2.150	192.168.2.4
Jan 7, 2025 19:40:22.165527105 CET	443	49754	104.26.2.150	192.168.2.4
Jan 7, 2025 19:40:22.165592909 CET	49754	443	192.168.2.4	104.26.2.150
Jan 7, 2025 19:40:22.165605068 CET	443	49754	104.26.2.150	192.168.2.4
Jan 7, 2025 19:40:22.165719986 CET	443	49754	104.26.2.150	192.168.2.4
Jan 7, 2025 19:40:22.165767908 CET	49754	443	192.168.2.4	104.26.2.150
Jan 7, 2025 19:40:22.165774107 CET	443	49754	104.26.2.150	192.168.2.4
Jan 7, 2025 19:40:22.165787935 CET	443	49754	104.26.2.150	192.168.2.4
Jan 7, 2025 19:40:22.165826082 CET	49754	443	192.168.2.4	104.26.2.150
Jan 7, 2025 19:40:22.165920973 CET	443	49754	104.26.2.150	192.168.2.4
Jan 7, 2025 19:40:22.166028023 CET	443	49754	104.26.2.150	192.168.2.4
Jan 7, 2025 19:40:22.166069984 CET	49754	443	192.168.2.4	104.26.2.150
Jan 7, 2025 19:40:22.166076899 CET	443	49754	104.26.2.150	192.168.2.4
Jan 7, 2025 19:40:22.166491985 CET	443	49754	104.26.2.150	192.168.2.4
Jan 7, 2025 19:40:22.166533947 CET	49754	443	192.168.2.4	104.26.2.150
Jan 7, 2025 19:40:22.166536093 CET	443	49754	104.26.2.150	192.168.2.4
Jan 7, 2025 19:40:22.166546106 CET	443	49754	104.26.2.150	192.168.2.4
Jan 7, 2025 19:40:22.166580915 CET	49754	443	192.168.2.4	104.26.2.150
Jan 7, 2025 19:40:22.166589975 CET	443	49754	104.26.2.150	192.168.2.4
Jan 7, 2025 19:40:22.166645050 CET	443	49754	104.26.2.150	192.168.2.4
Jan 7, 2025 19:40:22.166690111 CET	49754	443	192.168.2.4	104.26.2.150
Jan 7, 2025 19:40:22.170962095 CET	49754	443	192.168.2.4	104.26.2.150
Jan 7, 2025 19:40:22.170980930 CET	443	49754	104.26.2.150	192.168.2.4
Jan 7, 2025 19:40:22.244177103 CET	443	49755	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:22.244417906 CET	49755	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:22.244430065 CET	443	49755	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:22.245451927 CET	443	49755	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:22.245513916 CET	49755	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:22.245843887 CET	49755	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:22.245902061 CET	443	49755	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:22.245953083 CET	49755	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:22.245958090 CET	443	49755	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:22.286103010 CET	49755	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:22.546391964 CET	443	49756	93.158.134.119	192.168.2.4
Jan 7, 2025 19:40:22.546659946 CET	49756	443	192.168.2.4	93.158.134.119
Jan 7, 2025 19:40:22.546684027 CET	443	49756	93.158.134.119	192.168.2.4
Jan 7, 2025 19:40:22.547671080 CET	443	49756	93.158.134.119	192.168.2.4
Jan 7, 2025 19:40:22.547729969 CET	49756	443	192.168.2.4	93.158.134.119
Jan 7, 2025 19:40:22.548070908 CET	49756	443	192.168.2.4	93.158.134.119
Jan 7, 2025 19:40:22.548126936 CET	443	49756	93.158.134.119	192.168.2.4
Jan 7, 2025 19:40:22.548214912 CET	49756	443	192.168.2.4	93.158.134.119
Jan 7, 2025 19:40:22.548221111 CET	443	49756	93.158.134.119	192.168.2.4
Jan 7, 2025 19:40:22.599200964 CET	49756	443	192.168.2.4	93.158.134.119
Jan 7, 2025 19:40:22.711922884 CET	443	49755	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:22.712040901 CET	443	49755	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:22.712105036 CET	49755	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:22.713646889 CET	49755	443	192.168.2.4	104.26.10.47
Jan 7, 2025 19:40:22.713665009 CET	443	49755	104.26.10.47	192.168.2.4
Jan 7, 2025 19:40:22.741914034 CET	443	49757	87.250.250.119	192.168.2.4
Jan 7, 2025 19:40:22.742150068 CET	49757	443	192.168.2.4	87.250.250.119
Jan 7, 2025 19:40:22.742167950 CET	443	49757	87.250.250.119	192.168.2.4
Jan 7, 2025 19:40:22.742469072 CET	443	49757	87.250.250.119	192.168.2.4
Jan 7, 2025 19:40:22.742772102 CET	49757	443	192.168.2.4	87.250.250.119
Jan 7, 2025 19:40:22.742829084 CET	443	49757	87.250.250.119	192.168.2.4
Jan 7, 2025 19:40:22.742907047 CET	49757	443	192.168.2.4	87.250.250.119
Jan 7, 2025 19:40:22.783337116 CET	443	49757	87.250.250.119	192.168.2.4
Jan 7, 2025 19:40:22.923664093 CET	443	49756	93.158.134.119	192.168.2.4
Jan 7, 2025 19:40:22.923777103 CET	443	49756	93.158.134.119	192.168.2.4
Jan 7, 2025 19:40:22.923839092 CET	49756	443	192.168.2.4	93.158.134.119
Jan 7, 2025 19:40:22.979257107 CET	49756	443	192.168.2.4	93.158.134.119
Jan 7, 2025 19:40:22.979285955 CET	443	49756	93.158.134.119	192.168.2.4
Jan 7, 2025 19:40:23.101644039 CET	443	49757	87.250.250.119	192.168.2.4
Jan 7, 2025 19:40:23.101727009 CET	443	49757	87.250.250.119	192.168.2.4
Jan 7, 2025 19:40:23.101798058 CET	49757	443	192.168.2.4	87.250.250.119
Jan 7, 2025 19:40:23.162290096 CET	49757	443	192.168.2.4	87.250.250.119
Jan 7, 2025 19:40:23.162311077 CET	443	49757	87.250.250.119	192.168.2.4
Jan 7, 2025 19:40:26.811949968 CET	443	49738	142.250.186.68	192.168.2.4
Jan 7, 2025 19:40:26.812005997 CET	443	49738	142.250.186.68	192.168.2.4
Jan 7, 2025 19:40:26.812079906 CET	49738	443	192.168.2.4	142.250.186.68
Jan 7, 2025 19:40:28.759689093 CET	49738	443	192.168.2.4	142.250.186.68
Jan 7, 2025 19:40:28.759712934 CET	443	49738	142.250.186.68	192.168.2.4
Jan 7, 2025 19:40:29.498992920 CET	60214	53	192.168.2.4	1.1.1.1
Jan 7, 2025 19:40:29.503968954 CET	53	60214	1.1.1.1	192.168.2.4
Jan 7, 2025 19:40:29.504306078 CET	60214	53	192.168.2.4	1.1.1.1
Jan 7, 2025 19:40:29.509350061 CET	53	60214	1.1.1.1	192.168.2.4
Jan 7, 2025 19:40:30.147948027 CET	60214	53	192.168.2.4	1.1.1.1
Jan 7, 2025 19:40:30.153016090 CET	53	60214	1.1.1.1	192.168.2.4
Jan 7, 2025 19:40:30.153568983 CET	60214	53	192.168.2.4	1.1.1.1
Jan 7, 2025 19:40:33.132456064 CET	60215	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:33.132496119 CET	443	60215	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:33.132549047 CET	60215	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:33.132824898 CET	60215	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:33.132838964 CET	443	60215	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:33.160487890 CET	60216	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:33.160535097 CET	443	60216	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:33.160614967 CET	60216	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:33.160844088 CET	60216	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:33.160860062 CET	443	60216	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:33.658483028 CET	443	60215	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:33.658724070 CET	60215	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:33.658749104 CET	443	60215	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:33.659626961 CET	443	60215	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:33.659687042 CET	60215	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:33.660670042 CET	60215	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:33.660729885 CET	443	60215	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:33.660825968 CET	60215	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:33.660834074 CET	443	60215	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:33.697468042 CET	443	60216	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:33.697684050 CET	60216	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:33.697702885 CET	443	60216	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:33.698555946 CET	443	60216	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:33.698728085 CET	60216	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:33.698913097 CET	60216	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:33.698967934 CET	443	60216	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:33.700609922 CET	60215	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:33.748276949 CET	60216	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:33.748291969 CET	443	60216	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:33.794537067 CET	60216	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:34.532704115 CET	443	60215	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:34.532732964 CET	443	60215	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:34.532740116 CET	443	60215	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:34.532751083 CET	443	60215	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:34.532780886 CET	443	60215	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:34.532782078 CET	60215	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:34.532809019 CET	443	60215	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:34.532824039 CET	60215	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:34.532862902 CET	60215	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:34.533739090 CET	443	60215	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:34.533778906 CET	443	60215	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:34.533807993 CET	60215	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:34.533813953 CET	443	60215	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:34.533827066 CET	60215	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:34.571929932 CET	443	60215	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:34.571945906 CET	443	60215	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:34.572129965 CET	60215	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:34.572145939 CET	443	60215	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:34.615717888 CET	60215	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:34.619230032 CET	443	60215	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:34.619240999 CET	443	60215	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:34.619275093 CET	443	60215	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:34.619304895 CET	60215	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:34.619318962 CET	443	60215	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:34.619350910 CET	60215	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:34.619369030 CET	60215	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:34.657546997 CET	443	60215	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:34.657562971 CET	443	60215	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:34.657744884 CET	60215	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:34.657756090 CET	443	60215	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:34.657794952 CET	60215	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:34.659038067 CET	443	60215	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:34.659053087 CET	443	60215	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:34.659118891 CET	60215	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:34.659126997 CET	443	60215	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:34.659164906 CET	60215	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:34.697876930 CET	443	60215	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:34.697897911 CET	443	60215	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:34.697978020 CET	60215	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:34.697985888 CET	443	60215	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:34.698020935 CET	60215	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:34.705672026 CET	443	60215	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:34.705688953 CET	443	60215	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:34.705768108 CET	60215	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:34.705775023 CET	443	60215	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:34.705815077 CET	60215	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:34.707509041 CET	443	60215	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:34.707525015 CET	443	60215	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:34.707583904 CET	60215	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:34.707590103 CET	443	60215	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:34.707627058 CET	60215	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:34.744860888 CET	443	60215	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:34.744880915 CET	443	60215	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:34.744941950 CET	60215	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:34.744956017 CET	443	60215	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:34.744995117 CET	60215	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:34.744997978 CET	443	60215	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:34.745009899 CET	443	60215	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:34.745052099 CET	60215	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:34.745057106 CET	443	60215	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:34.745110989 CET	443	60215	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:34.745150089 CET	60215	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:34.781650066 CET	60215	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:34.785299063 CET	60215	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:34.785310984 CET	443	60215	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:35.290375948 CET	60216	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:35.290419102 CET	60216	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:35.290452003 CET	443	60216	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:35.291373014 CET	60217	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:35.291402102 CET	443	60217	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:35.291461945 CET	60217	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:35.291768074 CET	60217	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:35.291779995 CET	443	60217	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:35.826108932 CET	443	60217	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:35.826447010 CET	60217	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:35.826467991 CET	443	60217	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:35.826750040 CET	443	60217	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:35.827049971 CET	60217	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:35.827101946 CET	443	60217	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:35.838232040 CET	443	60216	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:35.838294983 CET	443	60216	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:35.838345051 CET	60216	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:35.839050055 CET	60216	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:35.839067936 CET	443	60216	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:35.839076996 CET	60216	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:35.839121103 CET	60216	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:35.840857029 CET	60217	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:35.883333921 CET	443	60217	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:38.351449013 CET	443	60217	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:38.351469040 CET	443	60217	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:38.351496935 CET	443	60217	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:38.351552010 CET	60217	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:38.351577997 CET	443	60217	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:38.351592064 CET	60217	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:38.351622105 CET	60217	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:38.352479935 CET	443	60217	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:38.352520943 CET	443	60217	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:38.352546930 CET	60217	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:38.352552891 CET	443	60217	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:38.352566004 CET	60217	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:38.352590084 CET	60217	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:38.379287958 CET	60218	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:38.379331112 CET	443	60218	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:38.379390001 CET	60218	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:38.380085945 CET	60218	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:38.380101919 CET	443	60218	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:38.382148027 CET	443	60217	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:38.382164001 CET	443	60217	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:38.382225037 CET	60217	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:38.382231951 CET	443	60217	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:38.382272005 CET	60217	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:38.438977003 CET	443	60217	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:38.439016104 CET	443	60217	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:38.439053059 CET	443	60217	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:38.439054012 CET	60217	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:38.439101934 CET	60217	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:38.439465046 CET	60217	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:38.439476967 CET	443	60217	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:38.903412104 CET	443	60218	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:38.903652906 CET	60218	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:38.903677940 CET	443	60218	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:38.904532909 CET	443	60218	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:38.904588938 CET	60218	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:38.905571938 CET	60218	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:38.905627966 CET	443	60218	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:38.905793905 CET	60218	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:38.905802011 CET	443	60218	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:38.960907936 CET	60218	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:41.016869068 CET	443	60218	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:41.016890049 CET	443	60218	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:41.016896963 CET	443	60218	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:41.016930103 CET	443	60218	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:41.016943932 CET	443	60218	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:41.016956091 CET	443	60218	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:41.016961098 CET	60218	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:41.016990900 CET	443	60218	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:41.017007113 CET	60218	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:41.060374022 CET	60218	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:41.104458094 CET	443	60218	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:41.104466915 CET	443	60218	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:41.104505062 CET	443	60218	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:41.104533911 CET	443	60218	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:41.104557991 CET	60218	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:41.104578972 CET	443	60218	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:41.104598999 CET	60218	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:41.104621887 CET	60218	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:41.139343977 CET	443	60218	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:41.139362097 CET	443	60218	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:41.139436007 CET	60218	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:41.139450073 CET	443	60218	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:41.139496088 CET	60218	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:41.190694094 CET	443	60218	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:41.190762043 CET	443	60218	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:41.190774918 CET	60218	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:41.190824032 CET	60218	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:41.191102028 CET	60218	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:41.191116095 CET	443	60218	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:41.208493948 CET	60220	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:41.208523989 CET	443	60220	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:41.208590031 CET	60220	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:41.208797932 CET	60220	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:41.208810091 CET	443	60220	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:41.217447042 CET	60221	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:41.217484951 CET	443	60221	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:41.217555046 CET	60221	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:41.218338013 CET	60221	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:41.218353987 CET	443	60221	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:41.236938000 CET	60222	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:41.236963034 CET	443	60222	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:41.237045050 CET	60222	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:41.237202883 CET	60223	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:41.237221956 CET	443	60223	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:41.237287045 CET	60223	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:41.237508059 CET	60222	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:41.237524033 CET	443	60222	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:41.237915039 CET	60223	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:41.237930059 CET	443	60223	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:41.239492893 CET	60224	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:41.239500999 CET	443	60224	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:41.239566088 CET	60224	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:41.239734888 CET	60224	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:41.239744902 CET	443	60224	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:41.748847008 CET	443	60220	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:41.755842924 CET	60220	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:41.755857944 CET	443	60220	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:41.760538101 CET	443	60220	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:41.760605097 CET	60220	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:41.761115074 CET	60220	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:41.761255026 CET	60220	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:41.761260033 CET	443	60220	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:41.761476994 CET	443	60220	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:41.778009892 CET	443	60221	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:41.778935909 CET	443	60222	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:41.779162884 CET	60221	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:41.779181957 CET	443	60221	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:41.779489994 CET	443	60221	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:41.779558897 CET	60222	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:41.779567957 CET	443	60222	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:41.779670000 CET	443	60223	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:41.779902935 CET	443	60222	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:41.780116081 CET	60221	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:41.780180931 CET	443	60221	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:41.780534983 CET	60223	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:41.780543089 CET	443	60223	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:41.781035900 CET	60222	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:41.781102896 CET	443	60222	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:41.781388044 CET	443	60223	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:41.781443119 CET	60223	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:41.781873941 CET	60221	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:41.781946898 CET	60222	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:41.782769918 CET	60223	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:41.782828093 CET	443	60223	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:41.782901049 CET	60223	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:41.782908916 CET	443	60223	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:41.787501097 CET	443	60224	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:41.789462090 CET	60224	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:41.789469957 CET	443	60224	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:41.790486097 CET	443	60224	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:41.790534973 CET	60224	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:41.790900946 CET	60224	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:41.790954113 CET	443	60224	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:41.809242010 CET	60220	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:41.809247971 CET	443	60220	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:41.824899912 CET	60223	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:41.827331066 CET	443	60221	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:41.827332973 CET	443	60222	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:41.834489107 CET	60224	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:41.834496021 CET	443	60224	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:41.850322962 CET	60220	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:41.881501913 CET	60224	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:43.846330881 CET	443	60223	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:43.846409082 CET	443	60223	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:43.846498013 CET	60223	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:43.847039938 CET	60223	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:43.847060919 CET	443	60223	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:43.855246067 CET	443	60221	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:43.855310917 CET	443	60221	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:43.855369091 CET	60221	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:43.855438948 CET	60221	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:43.855446100 CET	443	60221	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:43.855469942 CET	60221	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:43.855494022 CET	60221	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:44.346738100 CET	443	60222	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:44.346765995 CET	443	60222	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:44.346779108 CET	443	60222	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:44.346936941 CET	60222	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:44.346956015 CET	443	60222	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:44.347016096 CET	60222	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:44.347326040 CET	443	60222	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:44.347363949 CET	443	60222	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:44.347385883 CET	60222	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:44.347392082 CET	443	60222	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:44.347419024 CET	60222	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:44.364053011 CET	60225	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:44.364078999 CET	443	60225	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:44.364156961 CET	60225	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:44.364397049 CET	60225	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:44.364408016 CET	443	60225	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:44.367137909 CET	60226	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:44.367170095 CET	443	60226	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:44.367228031 CET	60226	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:44.368383884 CET	60227	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:44.368392944 CET	443	60227	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:44.368458986 CET	60227	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:44.369481087 CET	60226	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:44.369497061 CET	443	60226	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:44.369817019 CET	60227	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:44.369827032 CET	443	60227	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:44.387957096 CET	443	60222	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:44.387974024 CET	443	60222	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:44.388022900 CET	60222	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:44.388037920 CET	443	60222	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:44.435662031 CET	443	60220	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:44.435683966 CET	443	60220	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:44.435691118 CET	443	60220	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:44.435714960 CET	443	60220	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:44.435724974 CET	443	60220	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:44.435734034 CET	443	60220	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:44.435748100 CET	60220	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:44.435754061 CET	443	60220	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:44.435914993 CET	60220	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:44.438160896 CET	443	60222	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:44.438182116 CET	443	60222	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:44.438230991 CET	60222	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:44.438240051 CET	443	60222	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:44.438265085 CET	60222	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:44.438285112 CET	443	60222	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:44.438333988 CET	60222	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:44.438941956 CET	60222	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:44.438950062 CET	443	60222	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:44.522712946 CET	443	60220	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:44.522722960 CET	443	60220	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:44.522759914 CET	443	60220	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:44.522789001 CET	443	60220	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:44.522908926 CET	60220	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:44.522908926 CET	60220	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:44.522913933 CET	443	60220	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:44.522955894 CET	60220	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:44.566380978 CET	443	60220	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:44.566400051 CET	443	60220	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:44.566488028 CET	60220	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:44.566493034 CET	443	60220	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:44.566540003 CET	60220	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:44.608118057 CET	443	60220	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:44.608179092 CET	60220	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:44.608182907 CET	443	60220	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:44.608192921 CET	443	60220	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:44.608231068 CET	60220	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:44.608264923 CET	60220	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:44.608414888 CET	60220	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:44.608422041 CET	443	60220	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:44.890173912 CET	443	60225	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:44.890585899 CET	60225	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:44.890605927 CET	443	60225	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:44.890892982 CET	443	60225	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:44.891014099 CET	443	60226	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:44.891206980 CET	60225	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:44.891261101 CET	443	60225	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:44.891336918 CET	60226	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:44.891354084 CET	443	60226	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:44.891463995 CET	60225	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:44.891638994 CET	443	60226	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:44.891904116 CET	60226	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:44.891966105 CET	443	60226	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:44.891983986 CET	60226	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:44.911221981 CET	443	60227	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:44.911587954 CET	60227	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:44.911595106 CET	443	60227	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:44.912475109 CET	443	60227	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:44.912548065 CET	60227	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:44.912890911 CET	60227	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:44.912945986 CET	443	60227	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:44.913008928 CET	60227	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:44.913013935 CET	443	60227	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:44.935333014 CET	443	60225	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:44.935334921 CET	443	60226	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:44.940810919 CET	60226	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:44.956295967 CET	60227	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:46.822876930 CET	443	60227	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:46.822896957 CET	443	60227	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:46.822904110 CET	443	60227	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:46.822937965 CET	443	60227	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:46.822959900 CET	60227	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:46.822969913 CET	443	60227	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:46.822983980 CET	443	60227	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:46.822995901 CET	60227	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:46.823014975 CET	60227	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:46.823036909 CET	60227	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:46.877492905 CET	443	60227	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:46.877578020 CET	443	60227	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:46.877691031 CET	60227	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:46.878228903 CET	60227	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:46.878242970 CET	443	60227	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:46.884274006 CET	60228	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:46.884311914 CET	443	60228	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:46.884375095 CET	60228	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:46.884712934 CET	60228	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:46.884726048 CET	443	60228	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:47.411439896 CET	443	60225	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:47.411458969 CET	443	60225	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:47.411473036 CET	443	60225	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:47.411673069 CET	60225	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:47.411688089 CET	443	60225	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:47.411755085 CET	60225	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:47.412081957 CET	443	60228	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:47.412391901 CET	60228	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:47.412404060 CET	443	60228	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:47.412694931 CET	443	60228	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:47.413741112 CET	60228	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:47.413793087 CET	443	60228	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:47.413965940 CET	60228	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:47.415034056 CET	60225	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:47.415044069 CET	443	60225	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:47.440633059 CET	60229	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:47.440670967 CET	443	60229	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:47.440871954 CET	60229	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:47.440926075 CET	60229	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:47.440938950 CET	443	60229	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:47.455341101 CET	443	60228	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:47.521433115 CET	443	60226	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:47.521451950 CET	443	60226	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:47.521459103 CET	443	60226	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:47.521487951 CET	443	60226	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:47.521514893 CET	443	60226	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:47.521637917 CET	60226	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:47.521637917 CET	60226	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:47.521647930 CET	443	60226	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:47.521693945 CET	60226	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:47.522541046 CET	443	60226	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:47.522572041 CET	443	60226	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:47.522610903 CET	60226	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:47.522615910 CET	443	60226	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:47.522639036 CET	60226	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:47.562410116 CET	443	60226	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:47.562437057 CET	443	60226	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:47.562630892 CET	60226	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:47.562644958 CET	443	60226	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:47.606163979 CET	60226	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:47.608779907 CET	443	60226	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:47.608788013 CET	443	60226	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:47.608829975 CET	443	60226	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:47.608871937 CET	60226	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:47.608879089 CET	443	60226	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:47.608921051 CET	60226	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:47.647751093 CET	443	60226	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:47.647768021 CET	443	60226	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:47.647845030 CET	443	60226	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:47.647846937 CET	60226	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:47.647857904 CET	443	60226	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:47.648010015 CET	60226	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:47.688241005 CET	443	60226	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:47.688287973 CET	443	60226	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:47.688312054 CET	60226	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:47.688317060 CET	443	60226	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:47.688369989 CET	60226	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:47.694879055 CET	443	60226	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:47.694895029 CET	443	60226	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:47.694967985 CET	60226	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:47.694974899 CET	443	60226	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:47.695014000 CET	60226	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:47.695470095 CET	443	60226	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:47.695533037 CET	60226	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:47.695533991 CET	443	60226	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:47.695574999 CET	60226	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:47.697438955 CET	60226	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:47.697453022 CET	443	60226	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:47.704076052 CET	60230	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:47.704104900 CET	443	60230	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:47.704161882 CET	60230	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:47.704370022 CET	60230	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:47.704382896 CET	443	60230	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:47.708290100 CET	60224	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:47.732736111 CET	60231	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:47.732774019 CET	443	60231	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:47.732978106 CET	60231	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:47.733472109 CET	60231	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:47.733485937 CET	443	60231	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:47.751329899 CET	443	60224	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:47.976200104 CET	443	60229	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:47.976479053 CET	60229	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:47.976496935 CET	443	60229	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:47.977377892 CET	443	60229	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:47.977453947 CET	60229	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:47.978420019 CET	60229	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:47.978486061 CET	443	60229	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:47.978579998 CET	60229	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:47.978588104 CET	443	60229	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:48.020576000 CET	60229	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:48.244440079 CET	443	60230	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:48.248301983 CET	60230	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:48.248317003 CET	443	60230	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:48.248665094 CET	443	60230	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:48.249392986 CET	60230	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:48.249438047 CET	60230	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:48.249459982 CET	443	60230	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:48.302256107 CET	60230	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:48.438150883 CET	443	60231	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:48.438568115 CET	60231	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:48.438587904 CET	443	60231	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:48.438870907 CET	443	60231	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:48.439182997 CET	60231	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:48.439254999 CET	443	60231	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:48.439363956 CET	60231	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:48.487333059 CET	443	60231	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:49.516366959 CET	443	60228	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:49.516388893 CET	443	60228	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:49.516405106 CET	443	60228	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:49.516480923 CET	60228	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:49.516499043 CET	443	60228	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:49.516515017 CET	60228	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:49.516556025 CET	60228	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:49.517764091 CET	60228	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:49.517774105 CET	443	60228	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:49.790775061 CET	443	60224	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:49.790802002 CET	443	60224	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:49.790810108 CET	443	60224	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:49.790826082 CET	443	60224	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:49.790837049 CET	443	60224	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:49.790843964 CET	443	60224	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:49.790965080 CET	60224	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:49.790965080 CET	60224	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:49.791009903 CET	443	60224	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:49.832458019 CET	60224	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:49.883537054 CET	443	60224	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:49.883546114 CET	443	60224	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:49.883564949 CET	443	60224	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:49.883572102 CET	443	60224	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:49.883712053 CET	60224	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:49.883712053 CET	60224	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:49.883727074 CET	443	60224	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:49.883764982 CET	60224	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:49.918467045 CET	443	60224	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:49.918488979 CET	443	60224	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:49.918534040 CET	60224	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:49.918544054 CET	443	60224	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:49.918590069 CET	60224	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:49.975202084 CET	443	60224	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:49.975250959 CET	443	60224	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:49.975361109 CET	443	60224	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:49.975378036 CET	60224	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:49.975378036 CET	60224	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:49.975400925 CET	60224	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:49.975727081 CET	60224	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:49.975743055 CET	443	60224	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:50.000797033 CET	60232	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:50.000849962 CET	443	60232	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:50.000921965 CET	60232	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:50.001543999 CET	60232	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:50.001555920 CET	443	60232	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:50.013350964 CET	60233	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:50.013382912 CET	443	60233	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:50.013484001 CET	60233	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:50.013684988 CET	60233	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:50.013700008 CET	443	60233	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:50.077902079 CET	443	60229	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:50.078183889 CET	443	60229	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:50.078231096 CET	60229	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:50.078233004 CET	443	60229	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:50.078279972 CET	60229	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:50.085721016 CET	60229	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:50.085738897 CET	443	60229	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:50.087918043 CET	60234	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:50.087944031 CET	443	60234	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:50.088009119 CET	60234	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:50.088300943 CET	60234	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:50.088315010 CET	443	60234	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:50.522221088 CET	443	60231	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:50.522488117 CET	443	60231	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:50.522660971 CET	60231	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:50.525309086 CET	60231	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:50.525326967 CET	443	60231	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:50.537333012 CET	443	60233	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:50.538471937 CET	60233	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:50.538489103 CET	443	60233	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:50.538821936 CET	443	60233	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:50.539235115 CET	60233	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:50.539298058 CET	443	60233	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:50.539387941 CET	60233	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:50.550852060 CET	443	60232	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:50.551013947 CET	60232	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:50.551028967 CET	443	60232	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:50.551325083 CET	443	60232	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:50.551748037 CET	60232	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:50.551748991 CET	60232	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:50.551806927 CET	443	60232	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:50.587337017 CET	443	60233	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:50.606030941 CET	60232	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:50.608289003 CET	443	60234	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:50.617163897 CET	60234	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:50.617178917 CET	443	60234	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:50.618043900 CET	443	60234	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:50.618113995 CET	60234	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:50.619123936 CET	60234	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:50.619179010 CET	443	60234	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:50.619405985 CET	60234	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:50.619415045 CET	443	60234	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:50.666737080 CET	60234	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:50.969960928 CET	443	60230	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:50.969988108 CET	443	60230	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:50.969995975 CET	443	60230	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:50.970029116 CET	443	60230	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:50.970046997 CET	443	60230	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:50.970061064 CET	443	60230	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:50.970072031 CET	60230	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:50.970083952 CET	443	60230	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:50.970093966 CET	60230	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:50.970102072 CET	60230	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:50.970124006 CET	60230	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:50.971046925 CET	443	60230	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:50.971081018 CET	443	60230	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:50.971108913 CET	60230	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:50.971112967 CET	443	60230	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:50.971152067 CET	60230	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:51.006819963 CET	443	60230	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:51.006844044 CET	443	60230	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:51.006884098 CET	60230	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:51.006896019 CET	443	60230	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:51.006927013 CET	60230	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:51.051776886 CET	60230	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:51.061811924 CET	443	60230	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:51.061826944 CET	443	60230	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:51.061850071 CET	443	60230	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:51.061891079 CET	60230	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:51.061896086 CET	443	60230	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:51.061928034 CET	60230	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:51.061949015 CET	60230	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:51.088020086 CET	443	60230	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:51.088037968 CET	443	60230	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:51.088082075 CET	60230	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:51.088088989 CET	443	60230	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:51.088114023 CET	60230	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:51.088135004 CET	60230	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:51.088141918 CET	443	60230	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:51.088184118 CET	60230	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:51.117537975 CET	443	60230	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:51.117568970 CET	443	60230	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:51.117595911 CET	60230	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:51.117602110 CET	443	60230	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:51.117638111 CET	60230	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:51.117657900 CET	60230	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:51.151277065 CET	443	60230	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:51.151297092 CET	443	60230	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:51.151350975 CET	60230	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:51.151356936 CET	443	60230	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:51.151396036 CET	60230	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:51.151813984 CET	443	60230	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:51.151851892 CET	60230	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:51.151861906 CET	443	60230	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:51.151895046 CET	443	60230	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:51.151935101 CET	60230	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:51.152559996 CET	60230	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:51.152570009 CET	443	60230	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:52.290199041 CET	443	60234	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:52.290317059 CET	443	60234	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:52.290489912 CET	60234	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:52.303741932 CET	60234	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:52.303766966 CET	443	60234	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:52.525361061 CET	60235	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:52.525388956 CET	443	60235	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:52.525480986 CET	60235	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:52.525728941 CET	60235	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:52.525739908 CET	443	60235	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:52.716197968 CET	443	60232	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:52.716217995 CET	443	60232	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:52.716224909 CET	443	60232	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:52.716253042 CET	443	60232	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:52.716270924 CET	443	60232	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:52.716278076 CET	443	60232	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:52.716398001 CET	60232	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:52.716398001 CET	60232	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:52.716408968 CET	443	60232	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:52.764846087 CET	60232	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:52.827970028 CET	443	60232	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:52.827979088 CET	443	60232	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:52.828005075 CET	443	60232	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:52.828013897 CET	443	60232	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:52.828156948 CET	60232	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:52.828156948 CET	60232	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:52.828162909 CET	443	60232	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:52.828702927 CET	60232	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:52.845434904 CET	443	60232	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:52.845449924 CET	443	60232	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:52.845510960 CET	60232	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:52.845520020 CET	443	60232	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:52.845915079 CET	60232	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:52.920017004 CET	443	60232	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:52.920049906 CET	443	60232	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:52.920084000 CET	443	60232	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:52.920201063 CET	60232	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:52.920201063 CET	60232	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:52.920201063 CET	60232	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:52.920488119 CET	60232	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:52.920497894 CET	443	60232	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:53.025605917 CET	443	60233	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:53.025633097 CET	443	60233	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:53.025666952 CET	443	60233	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:53.025692940 CET	60233	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:53.025706053 CET	443	60233	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:53.025736094 CET	60233	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:53.068989038 CET	60233	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:53.089848042 CET	443	60235	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:53.090135098 CET	60235	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:53.090145111 CET	443	60235	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:53.090421915 CET	443	60235	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:53.090734959 CET	60235	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:53.090785980 CET	443	60235	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:53.090917110 CET	60235	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:53.112453938 CET	443	60233	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:53.112478971 CET	443	60233	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:53.112540007 CET	60233	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:53.112549067 CET	443	60233	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:53.112596035 CET	60233	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:53.131330967 CET	443	60235	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:53.147741079 CET	443	60233	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:53.147763968 CET	443	60233	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:53.147829056 CET	60233	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:53.147836924 CET	443	60233	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:53.147880077 CET	60233	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:53.199031115 CET	443	60233	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:53.199050903 CET	443	60233	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:53.199110985 CET	60233	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:53.199120998 CET	443	60233	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:53.199157953 CET	60233	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:53.231056929 CET	443	60233	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:53.231076002 CET	443	60233	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:53.231122971 CET	443	60233	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:53.231146097 CET	60233	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:53.231153965 CET	443	60233	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:53.231188059 CET	60233	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:53.231205940 CET	60233	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:53.432322025 CET	443	60233	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:53.432343006 CET	443	60233	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:53.432425976 CET	60233	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:53.432439089 CET	443	60233	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:53.432487011 CET	60233	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:53.432821035 CET	443	60233	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:53.432837963 CET	443	60233	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:53.432874918 CET	443	60233	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:53.432890892 CET	60233	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:53.432898998 CET	443	60233	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:53.432921886 CET	60233	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:53.432972908 CET	443	60233	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:53.433022022 CET	60233	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:53.433629990 CET	60233	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:53.433640003 CET	443	60233	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:53.433648109 CET	60233	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:53.433682919 CET	60233	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:53.437920094 CET	60236	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:53.437951088 CET	443	60236	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:53.438030958 CET	60236	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:53.438215971 CET	60236	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:53.438225985 CET	443	60236	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:53.476581097 CET	60237	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:53.476625919 CET	443	60237	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:53.476706028 CET	60237	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:53.476954937 CET	60238	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:53.476968050 CET	443	60238	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:53.477031946 CET	60238	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:53.477195978 CET	60237	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:53.477209091 CET	443	60237	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:53.477412939 CET	60238	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:53.477427006 CET	443	60238	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:53.493448019 CET	60239	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:53.493458986 CET	443	60239	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:53.493520021 CET	60239	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:53.493834972 CET	60239	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:53.493843079 CET	443	60239	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:53.527317047 CET	60240	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:53.527334929 CET	443	60240	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:53.527426004 CET	60240	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:53.527628899 CET	60240	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:53.527637959 CET	443	60240	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:53.827333927 CET	60242	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:53.827358007 CET	443	60242	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:53.827420950 CET	60242	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:53.827800035 CET	60242	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:53.827810049 CET	443	60242	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:53.978781939 CET	443	60236	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:53.982184887 CET	60236	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:53.982203007 CET	443	60236	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:53.982490063 CET	443	60236	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:53.983067036 CET	60236	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:53.983112097 CET	443	60236	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:53.983292103 CET	60236	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:54.011575937 CET	443	60237	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:54.016581059 CET	443	60238	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:54.021267891 CET	60237	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:54.021286964 CET	443	60237	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:54.021414042 CET	60238	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:54.021423101 CET	443	60238	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:54.021672964 CET	443	60237	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:54.021742105 CET	443	60238	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:54.023322105 CET	443	60236	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:54.023344040 CET	60237	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:54.023407936 CET	443	60237	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:54.023832083 CET	60238	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:54.023890972 CET	443	60238	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:54.024111986 CET	60237	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:54.024120092 CET	60238	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:54.025233030 CET	443	60239	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:54.025527000 CET	60239	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:54.025537968 CET	443	60239	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:54.026592016 CET	443	60239	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:54.026648998 CET	60239	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:54.029746056 CET	60239	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:54.029808998 CET	443	60239	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:54.029977083 CET	60239	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:54.029983044 CET	443	60239	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:54.071329117 CET	443	60238	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:54.071336985 CET	443	60237	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:54.073215961 CET	60239	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:54.086714983 CET	443	60240	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:54.087198019 CET	60240	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:54.087213039 CET	443	60240	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:54.088089943 CET	443	60240	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:54.088146925 CET	60240	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:54.088887930 CET	60240	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:54.088939905 CET	443	60240	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:54.089171886 CET	60240	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:54.089176893 CET	443	60240	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:54.146481991 CET	60240	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:54.347229958 CET	443	60242	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:54.347517014 CET	60242	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:54.347531080 CET	443	60242	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:54.348392963 CET	443	60242	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:54.348452091 CET	60242	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:54.349148035 CET	60242	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:54.349199057 CET	443	60242	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:54.349508047 CET	60242	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:54.349513054 CET	443	60242	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:54.389868021 CET	60242	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:55.145034075 CET	443	60235	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:55.145426989 CET	443	60235	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:55.145471096 CET	60235	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:55.145487070 CET	443	60235	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:55.145497084 CET	60235	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:55.145509958 CET	60235	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:55.145535946 CET	60235	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:55.669732094 CET	443	60237	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:55.669756889 CET	443	60237	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:55.669806004 CET	60237	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:55.669832945 CET	443	60237	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:55.669895887 CET	443	60237	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:55.669950008 CET	60237	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:55.670581102 CET	60237	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:55.670595884 CET	443	60237	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:55.670603991 CET	60237	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:55.670639038 CET	60237	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:55.673593998 CET	60243	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:55.673624992 CET	443	60243	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:55.673710108 CET	60243	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:55.673912048 CET	60243	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:55.673926115 CET	443	60243	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:55.680727005 CET	443	60239	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:55.683442116 CET	443	60239	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:55.683485031 CET	60239	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:55.683821917 CET	60239	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:55.683830023 CET	443	60239	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:55.723874092 CET	443	60238	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:55.727932930 CET	443	60238	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:55.727984905 CET	60238	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:55.728517056 CET	60244	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:55.728564024 CET	443	60244	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:55.728617907 CET	60244	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:55.729051113 CET	60244	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:55.729064941 CET	443	60244	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:55.729553938 CET	60238	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:55.729568005 CET	443	60238	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:55.738116980 CET	60245	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:55.738132000 CET	443	60245	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:55.738185883 CET	60245	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:55.739131927 CET	60245	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:55.739142895 CET	443	60245	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:55.790036917 CET	443	60240	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:55.792861938 CET	443	60240	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:55.792908907 CET	60240	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:55.792923927 CET	443	60240	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:55.793279886 CET	60240	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:55.793282032 CET	443	60240	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:55.793292046 CET	443	60240	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:55.793334007 CET	60240	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:55.793349981 CET	60240	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:55.800296068 CET	60246	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:55.800323963 CET	443	60246	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:55.800380945 CET	60246	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:55.800576925 CET	60246	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:55.800586939 CET	443	60246	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:56.308052063 CET	443	60243	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:56.308435917 CET	60243	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:56.308458090 CET	443	60243	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:56.308743000 CET	443	60243	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:56.309063911 CET	60243	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:56.309123993 CET	443	60243	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:56.309202909 CET	60243	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:56.355329990 CET	443	60243	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:56.367991924 CET	443	60244	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:56.368242979 CET	60244	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:56.368273973 CET	443	60244	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:56.368628025 CET	443	60244	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:56.368936062 CET	60244	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:56.368997097 CET	443	60244	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:56.369052887 CET	60244	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:56.379667044 CET	443	60245	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:56.379858971 CET	60245	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:56.379873991 CET	443	60245	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:56.380717993 CET	443	60245	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:56.380877018 CET	60245	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:56.381151915 CET	60245	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:56.381202936 CET	443	60245	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:56.381295919 CET	60245	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:56.381304979 CET	443	60245	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:56.411345005 CET	443	60244	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:56.413223028 CET	443	60246	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:56.413439035 CET	60246	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:56.413455009 CET	443	60246	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:56.414501905 CET	443	60246	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:56.414562941 CET	60246	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:56.414870977 CET	60246	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:56.414926052 CET	443	60246	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:56.415005922 CET	60246	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:56.415013075 CET	443	60246	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:56.434871912 CET	60245	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:56.465255976 CET	60246	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:56.641463041 CET	443	60236	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:56.641484022 CET	443	60236	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:56.641516924 CET	443	60236	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:56.641671896 CET	60236	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:56.641671896 CET	60236	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:56.641679049 CET	443	60236	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:56.665443897 CET	443	60242	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:56.665467978 CET	443	60242	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:56.665472984 CET	443	60242	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:56.665492058 CET	443	60242	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:56.665518999 CET	443	60242	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:56.665637970 CET	60242	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:56.665637970 CET	60242	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:56.665652990 CET	443	60242	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:56.665703058 CET	60242	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:56.666752100 CET	443	60242	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:56.666769028 CET	443	60242	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:56.666822910 CET	60242	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:56.666827917 CET	443	60242	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:56.666857004 CET	60242	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:56.666882992 CET	60242	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:56.667531013 CET	443	60242	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:56.667584896 CET	443	60242	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:56.667591095 CET	60242	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:56.667629957 CET	60242	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:56.668013096 CET	60242	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:56.668021917 CET	443	60242	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:56.671964884 CET	60247	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:56.671982050 CET	443	60247	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:56.672039986 CET	60247	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:56.672247887 CET	60247	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:56.672257900 CET	443	60247	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:56.682013988 CET	443	60236	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:56.682029009 CET	443	60236	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:56.682105064 CET	60236	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:56.682111979 CET	443	60236	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:56.728251934 CET	443	60236	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:56.728266001 CET	443	60236	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:56.728333950 CET	60236	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:56.728341103 CET	443	60236	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:56.769818068 CET	443	60236	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:56.769834042 CET	443	60236	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:56.769857883 CET	443	60236	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:56.769932032 CET	60236	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:56.769938946 CET	443	60236	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:56.769980907 CET	60236	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:56.814894915 CET	443	60236	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:56.814902067 CET	443	60236	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:56.815059900 CET	443	60236	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:56.815067053 CET	443	60236	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:56.815094948 CET	60236	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:56.815099001 CET	443	60236	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:56.815155029 CET	60236	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:56.815778971 CET	443	60236	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:56.815794945 CET	443	60236	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:56.815826893 CET	443	60236	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:56.815851927 CET	60236	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:56.815856934 CET	443	60236	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:56.815887928 CET	60236	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:56.862679005 CET	443	60236	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:56.862698078 CET	443	60236	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:56.862735033 CET	443	60236	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:56.862756968 CET	60236	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:56.862761021 CET	443	60236	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:56.862796068 CET	60236	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:56.863018990 CET	443	60236	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:56.863068104 CET	60236	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:56.863181114 CET	60236	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:56.863188028 CET	443	60236	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:56.863213062 CET	60236	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:56.863226891 CET	60236	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:57.208003044 CET	443	60247	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:57.208412886 CET	60247	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:57.208422899 CET	443	60247	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:57.208694935 CET	443	60247	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:57.209022045 CET	60247	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:57.209072113 CET	443	60247	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:57.209175110 CET	60247	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:57.251334906 CET	443	60247	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:57.971921921 CET	443	60243	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:57.971946955 CET	443	60243	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:57.972013950 CET	60243	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:57.972043991 CET	443	60243	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:57.972379923 CET	443	60243	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:57.972428083 CET	60243	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:58.038064957 CET	60243	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:58.038084984 CET	443	60243	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:58.067136049 CET	443	60244	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:58.069736958 CET	443	60244	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:58.069792032 CET	60244	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:58.070239067 CET	60244	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:58.070257902 CET	443	60244	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:58.113595009 CET	443	60245	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:58.117367029 CET	443	60245	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:58.117419958 CET	60245	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:58.117595911 CET	60245	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:58.117609978 CET	443	60245	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:58.129975080 CET	443	60246	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:58.132278919 CET	443	60246	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:58.132328987 CET	60246	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:58.132339954 CET	443	60246	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:58.132414103 CET	443	60246	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:58.132453918 CET	60246	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:58.132731915 CET	60246	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:58.132745028 CET	443	60246	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:58.132752895 CET	60246	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:58.132787943 CET	60246	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:59.163151026 CET	60249	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:59.163187027 CET	443	60249	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:59.163268089 CET	60249	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:59.163520098 CET	60249	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:59.163535118 CET	443	60249	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:59.172173977 CET	443	60247	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:59.172194958 CET	443	60247	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:59.172239065 CET	443	60247	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:59.172281981 CET	60247	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:59.172307014 CET	443	60247	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:59.172329903 CET	60247	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:59.224031925 CET	60247	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:59.241728067 CET	443	60247	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:59.241749048 CET	443	60247	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:59.241894007 CET	60247	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:59.241894007 CET	60247	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:59.241903067 CET	443	60247	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:59.241945982 CET	60247	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:59.246884108 CET	443	60247	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:59.246953964 CET	443	60247	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:59.246954918 CET	60247	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:59.246989012 CET	60247	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:59.247289896 CET	60247	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:59.247301102 CET	443	60247	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:59.684211016 CET	443	60249	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:59.687298059 CET	60249	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:59.687330961 CET	443	60249	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:59.687623024 CET	443	60249	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:59.688044071 CET	60249	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:59.688102007 CET	443	60249	198.58.107.108	192.168.2.4
Jan 7, 2025 19:40:59.688513994 CET	60249	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:40:59.735333920 CET	443	60249	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:01.725449085 CET	443	60249	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:01.725516081 CET	443	60249	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:01.725557089 CET	60249	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:01.725718021 CET	60249	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:01.725740910 CET	443	60249	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:07.741223097 CET	60252	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:07.741269112 CET	443	60252	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:07.741343021 CET	60252	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:07.741658926 CET	60252	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:07.741673946 CET	443	60252	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:08.107291937 CET	60253	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:08.107326984 CET	443	60253	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:08.107400894 CET	60253	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:08.107695103 CET	60254	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:08.107738972 CET	443	60254	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:08.107794046 CET	60254	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:08.108444929 CET	60255	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:08.108452082 CET	443	60255	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:08.108515024 CET	60255	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:08.108783960 CET	60255	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:08.108795881 CET	443	60255	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:08.109236956 CET	60254	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:08.109252930 CET	443	60254	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:08.109392881 CET	60253	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:08.109401941 CET	443	60253	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:08.284548998 CET	443	60252	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:08.284910917 CET	60252	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:08.284931898 CET	443	60252	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:08.285207033 CET	443	60252	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:08.285691023 CET	60252	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:08.285748005 CET	443	60252	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:08.286164999 CET	60252	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:08.327348948 CET	443	60252	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:08.641968966 CET	443	60253	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:08.642271996 CET	443	60255	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:08.650110960 CET	443	60254	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:08.689359903 CET	60255	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:08.689359903 CET	60253	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:08.708261013 CET	60254	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:08.847505093 CET	60254	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:08.847531080 CET	443	60254	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:08.847661972 CET	60255	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:08.847676992 CET	443	60255	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:08.847948074 CET	60253	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:08.847951889 CET	443	60253	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:08.847971916 CET	443	60254	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:08.848023891 CET	443	60255	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:08.848300934 CET	443	60253	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:08.849020004 CET	60255	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:08.849077940 CET	443	60255	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:08.849769115 CET	60254	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:08.849834919 CET	443	60254	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:08.850579023 CET	60253	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:08.850634098 CET	443	60253	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:08.850776911 CET	60255	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:08.850934982 CET	60255	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:08.850938082 CET	443	60255	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:08.851067066 CET	60254	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:08.851217031 CET	60253	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:08.891341925 CET	443	60254	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:08.895327091 CET	443	60253	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:10.367415905 CET	443	60252	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:10.367618084 CET	443	60252	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:10.367650032 CET	60252	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:10.367679119 CET	443	60252	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:10.367696047 CET	60252	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:10.367716074 CET	60252	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:10.367727041 CET	60252	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:10.480431080 CET	443	60253	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:10.483395100 CET	443	60253	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:10.483468056 CET	60253	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:10.483490944 CET	443	60253	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:10.483540058 CET	60253	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:10.483593941 CET	443	60253	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:10.483649969 CET	443	60253	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:10.483702898 CET	60253	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:10.484002113 CET	60253	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:10.484013081 CET	443	60253	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:10.487340927 CET	60262	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:10.487377882 CET	443	60262	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:10.487456083 CET	60262	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:10.487643003 CET	60262	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:10.487659931 CET	443	60262	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:10.535403967 CET	443	60254	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:10.538703918 CET	443	60254	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:10.538760900 CET	60254	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:10.538779020 CET	443	60254	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:10.539149046 CET	443	60254	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:10.539201021 CET	60254	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:10.541438103 CET	60254	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:10.541451931 CET	443	60254	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:10.544488907 CET	60263	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:10.544513941 CET	443	60263	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:10.544610023 CET	60263	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:10.544804096 CET	60263	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:10.544815063 CET	443	60263	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:11.105457067 CET	443	60255	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:11.105542898 CET	443	60255	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:11.105635881 CET	60255	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:11.111903906 CET	60255	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:11.111911058 CET	443	60255	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:11.115854025 CET	443	60262	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:11.160729885 CET	60262	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:11.160769939 CET	443	60262	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:11.161118031 CET	443	60262	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:11.165558100 CET	443	60263	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:11.200829029 CET	60262	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:11.224517107 CET	60263	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:11.437880993 CET	60263	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:11.437906027 CET	443	60263	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:11.438270092 CET	443	60263	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:11.438282013 CET	60262	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:11.438373089 CET	443	60262	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:11.439099073 CET	60263	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:11.439157963 CET	443	60263	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:11.439466000 CET	60262	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:11.439531088 CET	60263	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:11.483330965 CET	443	60263	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:11.487339973 CET	443	60262	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:11.492868900 CET	60268	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:11.492918015 CET	443	60268	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:11.492978096 CET	60268	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:11.493171930 CET	60268	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:11.493189096 CET	443	60268	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:12.097423077 CET	443	60268	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:12.097647905 CET	60268	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:12.097665071 CET	443	60268	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:12.098889112 CET	443	60268	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:12.098948956 CET	60268	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:12.099417925 CET	60268	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:12.099539042 CET	443	60268	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:12.099556923 CET	60268	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:12.145889044 CET	60268	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:12.145899057 CET	443	60268	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:12.192756891 CET	60268	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:13.078139067 CET	443	60262	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:13.080437899 CET	443	60262	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:13.080503941 CET	60262	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:13.080513000 CET	443	60262	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:13.080552101 CET	60262	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:13.080883026 CET	443	60262	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:13.080945969 CET	443	60262	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:13.080979109 CET	60262	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:13.080990076 CET	443	60262	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:13.080996990 CET	60262	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:13.081036091 CET	60262	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:13.102847099 CET	443	60263	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:13.106127977 CET	443	60263	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:13.106210947 CET	60263	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:13.106235981 CET	443	60263	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:13.106327057 CET	443	60263	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:13.106378078 CET	60263	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:13.106481075 CET	60263	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:13.106492996 CET	443	60263	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:14.198165894 CET	443	60268	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:14.198256016 CET	443	60268	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:14.198307991 CET	60268	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:14.199208021 CET	60268	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:14.199223995 CET	443	60268	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:16.335333109 CET	60300	443	192.168.2.4	142.250.186.68
Jan 7, 2025 19:41:16.335375071 CET	443	60300	142.250.186.68	192.168.2.4
Jan 7, 2025 19:41:16.336414099 CET	60300	443	192.168.2.4	142.250.186.68
Jan 7, 2025 19:41:16.336698055 CET	60300	443	192.168.2.4	142.250.186.68
Jan 7, 2025 19:41:16.336711884 CET	443	60300	142.250.186.68	192.168.2.4
Jan 7, 2025 19:41:17.178433895 CET	443	60300	142.250.186.68	192.168.2.4
Jan 7, 2025 19:41:17.178706884 CET	60300	443	192.168.2.4	142.250.186.68
Jan 7, 2025 19:41:17.178725958 CET	443	60300	142.250.186.68	192.168.2.4
Jan 7, 2025 19:41:17.179044008 CET	443	60300	142.250.186.68	192.168.2.4
Jan 7, 2025 19:41:17.179526091 CET	60300	443	192.168.2.4	142.250.186.68
Jan 7, 2025 19:41:17.179589033 CET	443	60300	142.250.186.68	192.168.2.4
Jan 7, 2025 19:41:17.224397898 CET	60300	443	192.168.2.4	142.250.186.68
Jan 7, 2025 19:41:18.398287058 CET	60315	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:18.398332119 CET	443	60315	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:18.398411036 CET	60315	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:18.398633003 CET	60315	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:18.398648024 CET	443	60315	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:18.985385895 CET	443	60315	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:18.985738993 CET	60315	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:18.985768080 CET	443	60315	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:18.986237049 CET	443	60315	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:18.986546993 CET	60315	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:18.986628056 CET	443	60315	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:18.986732006 CET	60315	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:19.031332970 CET	443	60315	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:19.182353973 CET	60320	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:19.182379007 CET	443	60320	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:19.182440042 CET	60320	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:19.182634115 CET	60320	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:19.182641983 CET	443	60320	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:19.773022890 CET	443	60320	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:19.773292065 CET	60320	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:19.773313046 CET	443	60320	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:19.774467945 CET	443	60320	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:19.774534941 CET	60320	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:19.775661945 CET	60320	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:19.775741100 CET	443	60320	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:19.775871992 CET	60320	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:19.775877953 CET	443	60320	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:19.817889929 CET	60320	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:21.049407005 CET	443	60315	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:21.049485922 CET	443	60315	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:21.049550056 CET	60315	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:21.049643993 CET	60315	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:21.049662113 CET	443	60315	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:21.161603928 CET	49723	80	192.168.2.4	199.232.210.172
Jan 7, 2025 19:41:21.161669970 CET	49724	80	192.168.2.4	2.22.50.131
Jan 7, 2025 19:41:21.171585083 CET	80	49723	199.232.210.172	192.168.2.4
Jan 7, 2025 19:41:21.171674013 CET	49723	80	192.168.2.4	199.232.210.172
Jan 7, 2025 19:41:21.175595045 CET	80	49724	2.22.50.131	192.168.2.4
Jan 7, 2025 19:41:21.175653934 CET	49724	80	192.168.2.4	2.22.50.131
Jan 7, 2025 19:41:21.643059969 CET	443	60320	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:21.643166065 CET	443	60320	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:21.643229008 CET	60320	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:21.643337965 CET	60320	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:21.643348932 CET	443	60320	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:21.643368006 CET	60320	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:21.643407106 CET	60320	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:21.644077063 CET	60336	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:21.644093037 CET	443	60336	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:21.644141912 CET	60336	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:21.644375086 CET	60336	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:21.644387960 CET	443	60336	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:22.163012028 CET	443	60336	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:22.163352966 CET	60336	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:22.163386106 CET	443	60336	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:22.163746119 CET	443	60336	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:22.164333105 CET	60336	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:22.164402008 CET	443	60336	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:22.164506912 CET	60336	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:22.211333990 CET	443	60336	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:26.895102024 CET	443	60300	142.250.186.68	192.168.2.4
Jan 7, 2025 19:41:26.895178080 CET	443	60300	142.250.186.68	192.168.2.4
Jan 7, 2025 19:41:26.895286083 CET	60300	443	192.168.2.4	142.250.186.68
Jan 7, 2025 19:41:28.757338047 CET	60300	443	192.168.2.4	142.250.186.68
Jan 7, 2025 19:41:28.757370949 CET	443	60300	142.250.186.68	192.168.2.4
Jan 7, 2025 19:41:31.068228960 CET	60389	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:31.068249941 CET	443	60389	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:31.068320036 CET	60389	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:31.068566084 CET	60389	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:31.068578005 CET	443	60389	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:31.617643118 CET	443	60389	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:31.618062973 CET	60389	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:31.618076086 CET	443	60389	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:31.618396044 CET	443	60389	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:31.618707895 CET	60389	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:31.618817091 CET	443	60389	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:31.618906975 CET	60389	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:31.663331985 CET	443	60389	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:33.723925114 CET	443	60389	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:33.724000931 CET	443	60389	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:33.724054098 CET	60389	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:33.724169016 CET	60389	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:33.724184990 CET	443	60389	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:34.653335094 CET	443	60336	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:34.653731108 CET	60336	443	192.168.2.4	198.58.107.108
Jan 7, 2025 19:41:34.653760910 CET	443	60336	198.58.107.108	192.168.2.4
Jan 7, 2025 19:41:34.653889894 CET	60336	443	192.168.2.4	198.58.107.108

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 7, 2025 19:40:12.528897047 CET	53	63288	1.1.1.1	192.168.2.4
Jan 7, 2025 19:40:12.530428886 CET	53	49766	1.1.1.1	192.168.2.4
Jan 7, 2025 19:40:13.658191919 CET	53	62094	1.1.1.1	192.168.2.4
Jan 7, 2025 19:40:16.272149086 CET	61236	53	192.168.2.4	1.1.1.1
Jan 7, 2025 19:40:16.272274971 CET	65066	53	192.168.2.4	1.1.1.1
Jan 7, 2025 19:40:16.278928995 CET	53	61236	1.1.1.1	192.168.2.4
Jan 7, 2025 19:40:16.279180050 CET	53	65066	1.1.1.1	192.168.2.4
Jan 7, 2025 19:40:17.545914888 CET	64224	53	192.168.2.4	1.1.1.1
Jan 7, 2025 19:40:17.546307087 CET	65315	53	192.168.2.4	1.1.1.1
Jan 7, 2025 19:40:17.555290937 CET	53	64224	1.1.1.1	192.168.2.4
Jan 7, 2025 19:40:17.558438063 CET	53	65315	1.1.1.1	192.168.2.4
Jan 7, 2025 19:40:19.158952951 CET	64844	53	192.168.2.4	1.1.1.1
Jan 7, 2025 19:40:19.159497023 CET	56184	53	192.168.2.4	1.1.1.1
Jan 7, 2025 19:40:19.165591955 CET	53	64844	1.1.1.1	192.168.2.4
Jan 7, 2025 19:40:19.166229010 CET	53	56184	1.1.1.1	192.168.2.4
Jan 7, 2025 19:40:19.755407095 CET	49415	53	192.168.2.4	1.1.1.1
Jan 7, 2025 19:40:19.755992889 CET	65133	53	192.168.2.4	1.1.1.1
Jan 7, 2025 19:40:19.767107010 CET	53	49415	1.1.1.1	192.168.2.4
Jan 7, 2025 19:40:19.767765045 CET	53	65133	1.1.1.1	192.168.2.4
Jan 7, 2025 19:40:19.784225941 CET	58427	53	192.168.2.4	1.1.1.1
Jan 7, 2025 19:40:19.784507036 CET	57809	53	192.168.2.4	1.1.1.1
Jan 7, 2025 19:40:19.791178942 CET	53	57809	1.1.1.1	192.168.2.4
Jan 7, 2025 19:40:19.791606903 CET	53	58427	1.1.1.1	192.168.2.4
Jan 7, 2025 19:40:20.698532104 CET	59600	53	192.168.2.4	1.1.1.1
Jan 7, 2025 19:40:20.698663950 CET	51637	53	192.168.2.4	1.1.1.1
Jan 7, 2025 19:40:20.706181049 CET	53	59600	1.1.1.1	192.168.2.4
Jan 7, 2025 19:40:20.708034992 CET	53	51637	1.1.1.1	192.168.2.4
Jan 7, 2025 19:40:21.478496075 CET	53608	53	192.168.2.4	1.1.1.1
Jan 7, 2025 19:40:21.478640079 CET	63969	53	192.168.2.4	1.1.1.1
Jan 7, 2025 19:40:21.485729933 CET	53	53608	1.1.1.1	192.168.2.4
Jan 7, 2025 19:40:21.485851049 CET	53	63969	1.1.1.1	192.168.2.4
Jan 7, 2025 19:40:21.790199995 CET	62935	53	192.168.2.4	1.1.1.1
Jan 7, 2025 19:40:21.790442944 CET	63700	53	192.168.2.4	1.1.1.1
Jan 7, 2025 19:40:21.797010899 CET	53	62935	1.1.1.1	192.168.2.4
Jan 7, 2025 19:40:21.797024012 CET	53	63700	1.1.1.1	192.168.2.4
Jan 7, 2025 19:40:29.498601913 CET	53	58758	1.1.1.1	192.168.2.4
Jan 7, 2025 19:40:30.593741894 CET	53	51159	1.1.1.1	192.168.2.4
Jan 7, 2025 19:40:32.746795893 CET	138	138	192.168.2.4	192.168.2.255
Jan 7, 2025 19:40:33.117506981 CET	64653	53	192.168.2.4	1.1.1.1
Jan 7, 2025 19:40:33.117660999 CET	53243	53	192.168.2.4	1.1.1.1
Jan 7, 2025 19:40:33.130049944 CET	53	53243	1.1.1.1	192.168.2.4
Jan 7, 2025 19:40:33.131994963 CET	53	64653	1.1.1.1	192.168.2.4
Jan 7, 2025 19:40:38.365696907 CET	58974	53	192.168.2.4	1.1.1.1
Jan 7, 2025 19:40:38.365859985 CET	58138	53	192.168.2.4	1.1.1.1
Jan 7, 2025 19:40:38.377734900 CET	53	58974	1.1.1.1	192.168.2.4
Jan 7, 2025 19:40:38.378276110 CET	53	58138	1.1.1.1	192.168.2.4
Jan 7, 2025 19:40:41.195235968 CET	61250	53	192.168.2.4	1.1.1.1
Jan 7, 2025 19:40:41.195390940 CET	52674	53	192.168.2.4	1.1.1.1
Jan 7, 2025 19:40:41.206343889 CET	53	61250	1.1.1.1	192.168.2.4
Jan 7, 2025 19:40:41.207808971 CET	53	52674	1.1.1.1	192.168.2.4
Jan 7, 2025 19:40:44.371253014 CET	55504	53	192.168.2.4	1.1.1.1
Jan 7, 2025 19:40:44.372096062 CET	54937	53	192.168.2.4	1.1.1.1
Jan 7, 2025 19:40:44.382726908 CET	53	55504	1.1.1.1	192.168.2.4
Jan 7, 2025 19:40:44.384123087 CET	53	54937	1.1.1.1	192.168.2.4
Jan 7, 2025 19:40:47.421763897 CET	55499	53	192.168.2.4	1.1.1.1
Jan 7, 2025 19:40:47.421925068 CET	55627	53	192.168.2.4	1.1.1.1
Jan 7, 2025 19:40:47.433243036 CET	53	55627	1.1.1.1	192.168.2.4
Jan 7, 2025 19:40:47.440262079 CET	53	55499	1.1.1.1	192.168.2.4
Jan 7, 2025 19:40:49.733947039 CET	53	50225	1.1.1.1	192.168.2.4
Jan 7, 2025 19:40:50.070560932 CET	54692	53	192.168.2.4	1.1.1.1
Jan 7, 2025 19:40:50.070725918 CET	53640	53	192.168.2.4	1.1.1.1
Jan 7, 2025 19:40:50.084515095 CET	53	54692	1.1.1.1	192.168.2.4
Jan 7, 2025 19:40:50.084911108 CET	53	53640	1.1.1.1	192.168.2.4
Jan 7, 2025 19:40:53.581392050 CET	53	61799	1.1.1.1	192.168.2.4
Jan 7, 2025 19:41:11.473651886 CET	56474	53	192.168.2.4	1.1.1.1
Jan 7, 2025 19:41:11.473793030 CET	53939	53	192.168.2.4	1.1.1.1
Jan 7, 2025 19:41:11.485748053 CET	53	53939	1.1.1.1	192.168.2.4
Jan 7, 2025 19:41:11.492392063 CET	53	56474	1.1.1.1	192.168.2.4
Jan 7, 2025 19:41:11.984452009 CET	53	59866	1.1.1.1	192.168.2.4
Jan 7, 2025 19:41:12.298008919 CET	53	64558	1.1.1.1	192.168.2.4
Jan 7, 2025 19:41:19.162715912 CET	51867	53	192.168.2.4	1.1.1.1
Jan 7, 2025 19:41:19.162880898 CET	56635	53	192.168.2.4	1.1.1.1
Jan 7, 2025 19:41:19.176021099 CET	53	56635	1.1.1.1	192.168.2.4
Jan 7, 2025 19:41:19.181885958 CET	53	51867	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 7, 2025 19:40:16.272149086 CET	192.168.2.4	1.1.1.1	0x9892	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 7, 2025 19:40:16.272274971 CET	192.168.2.4	1.1.1.1	0x81e6	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 7, 2025 19:40:17.545914888 CET	192.168.2.4	1.1.1.1	0x63b3	Standard query (0)	creditunions.taplink.ws	A (IP address)	IN (0x0001)	false
Jan 7, 2025 19:40:17.546307087 CET	192.168.2.4	1.1.1.1	0xc16a	Standard query (0)	creditunions.taplink.ws	65	IN (0x0001)	false
Jan 7, 2025 19:40:19.158952951 CET	192.168.2.4	1.1.1.1	0x154d	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 7, 2025 19:40:19.159497023 CET	192.168.2.4	1.1.1.1	0x339e	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Jan 7, 2025 19:40:19.755407095 CET	192.168.2.4	1.1.1.1	0x7f99	Standard query (0)	creditunions.taplink.ws	A (IP address)	IN (0x0001)	false
Jan 7, 2025 19:40:19.755992889 CET	192.168.2.4	1.1.1.1	0xb8b7	Standard query (0)	creditunions.taplink.ws	65	IN (0x0001)	false
Jan 7, 2025 19:40:19.784225941 CET	192.168.2.4	1.1.1.1	0xec69	Standard query (0)	mc.yandex.ru	A (IP address)	IN (0x0001)	false
Jan 7, 2025 19:40:19.784507036 CET	192.168.2.4	1.1.1.1	0x187d	Standard query (0)	mc.yandex.ru	65	IN (0x0001)	false
Jan 7, 2025 19:40:20.698532104 CET	192.168.2.4	1.1.1.1	0x1d9d	Standard query (0)	taplink.st	A (IP address)	IN (0x0001)	false
Jan 7, 2025 19:40:20.698663950 CET	192.168.2.4	1.1.1.1	0x9f53	Standard query (0)	taplink.st	65	IN (0x0001)	false
Jan 7, 2025 19:40:21.478496075 CET	192.168.2.4	1.1.1.1	0xd419	Standard query (0)	taplink.st	A (IP address)	IN (0x0001)	false
Jan 7, 2025 19:40:21.478640079 CET	192.168.2.4	1.1.1.1	0xd92d	Standard query (0)	taplink.st	65	IN (0x0001)	false
Jan 7, 2025 19:40:21.790199995 CET	192.168.2.4	1.1.1.1	0x8302	Standard query (0)	mc.yandex.ru	A (IP address)	IN (0x0001)	false
Jan 7, 2025 19:40:21.790442944 CET	192.168.2.4	1.1.1.1	0x7f4e	Standard query (0)	mc.yandex.ru	65	IN (0x0001)	false
Jan 7, 2025 19:40:33.117506981 CET	192.168.2.4	1.1.1.1	0x5158	Standard query (0)	membersourcecu.paolayjon.us	A (IP address)	IN (0x0001)	false
Jan 7, 2025 19:40:33.117660999 CET	192.168.2.4	1.1.1.1	0xc759	Standard query (0)	membersourcecu.paolayjon.us	65	IN (0x0001)	false
Jan 7, 2025 19:40:38.365696907 CET	192.168.2.4	1.1.1.1	0x15c8	Standard query (0)	423377fa-8849d407.paolayjon.us	A (IP address)	IN (0x0001)	false
Jan 7, 2025 19:40:38.365859985 CET	192.168.2.4	1.1.1.1	0xdf00	Standard query (0)	423377fa-8849d407.paolayjon.us	65	IN (0x0001)	false
Jan 7, 2025 19:40:41.195235968 CET	192.168.2.4	1.1.1.1	0xf58b	Standard query (0)	423377fa-8849d407.paolayjon.us	A (IP address)	IN (0x0001)	false
Jan 7, 2025 19:40:41.195390940 CET	192.168.2.4	1.1.1.1	0xed8a	Standard query (0)	423377fa-8849d407.paolayjon.us	65	IN (0x0001)	false
Jan 7, 2025 19:40:44.371253014 CET	192.168.2.4	1.1.1.1	0x3f6e	Standard query (0)	253eeb81-8849d407.paolayjon.us	A (IP address)	IN (0x0001)	false
Jan 7, 2025 19:40:44.372096062 CET	192.168.2.4	1.1.1.1	0x7388	Standard query (0)	253eeb81-8849d407.paolayjon.us	65	IN (0x0001)	false
Jan 7, 2025 19:40:47.421763897 CET	192.168.2.4	1.1.1.1	0x6907	Standard query (0)	l1ve.paolayjon.us	A (IP address)	IN (0x0001)	false
Jan 7, 2025 19:40:47.421925068 CET	192.168.2.4	1.1.1.1	0x95	Standard query (0)	l1ve.paolayjon.us	65	IN (0x0001)	false
Jan 7, 2025 19:40:50.070560932 CET	192.168.2.4	1.1.1.1	0x71c5	Standard query (0)	64c2b783-8849d407.paolayjon.us	A (IP address)	IN (0x0001)	false
Jan 7, 2025 19:40:50.070725918 CET	192.168.2.4	1.1.1.1	0x4c5a	Standard query (0)	64c2b783-8849d407.paolayjon.us	65	IN (0x0001)	false
Jan 7, 2025 19:41:11.473651886 CET	192.168.2.4	1.1.1.1	0x26b1	Standard query (0)	membersourcecu.paolayjon.us	A (IP address)	IN (0x0001)	false
Jan 7, 2025 19:41:11.473793030 CET	192.168.2.4	1.1.1.1	0xdadf	Standard query (0)	membersourcecu.paolayjon.us	65	IN (0x0001)	false
Jan 7, 2025 19:41:19.162715912 CET	192.168.2.4	1.1.1.1	0xcab9	Standard query (0)	1b4ddfb2-8849d407.paolayjon.us	A (IP address)	IN (0x0001)	false
Jan 7, 2025 19:41:19.162880898 CET	192.168.2.4	1.1.1.1	0x7cda	Standard query (0)	1b4ddfb2-8849d407.paolayjon.us	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 7, 2025 19:40:16.278928995 CET	1.1.1.1	192.168.2.4	0x9892	No error (0)	www.google.com		142.250.186.68	A (IP address)	IN (0x0001)	false
Jan 7, 2025 19:40:16.279180050 CET	1.1.1.1	192.168.2.4	0x81e6	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 7, 2025 19:40:17.555290937 CET	1.1.1.1	192.168.2.4	0x63b3	No error (0)	creditunions.taplink.ws	taplink.me		CNAME (Canonical name)	IN (0x0001)	false
Jan 7, 2025 19:40:17.555290937 CET	1.1.1.1	192.168.2.4	0x63b3	No error (0)	taplink.me		104.26.10.47	A (IP address)	IN (0x0001)	false
Jan 7, 2025 19:40:17.555290937 CET	1.1.1.1	192.168.2.4	0x63b3	No error (0)	taplink.me		104.26.11.47	A (IP address)	IN (0x0001)	false
Jan 7, 2025 19:40:17.555290937 CET	1.1.1.1	192.168.2.4	0x63b3	No error (0)	taplink.me		172.67.74.23	A (IP address)	IN (0x0001)	false
Jan 7, 2025 19:40:17.558438063 CET	1.1.1.1	192.168.2.4	0xc16a	No error (0)	creditunions.taplink.ws	taplink.me		CNAME (Canonical name)	IN (0x0001)	false
Jan 7, 2025 19:40:17.558438063 CET	1.1.1.1	192.168.2.4	0xc16a	No error (0)	taplink.me			65	IN (0x0001)	false
Jan 7, 2025 19:40:19.165591955 CET	1.1.1.1	192.168.2.4	0x154d	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Jan 7, 2025 19:40:19.767107010 CET	1.1.1.1	192.168.2.4	0x7f99	No error (0)	creditunions.taplink.ws	taplink.me		CNAME (Canonical name)	IN (0x0001)	false
Jan 7, 2025 19:40:19.767107010 CET	1.1.1.1	192.168.2.4	0x7f99	No error (0)	taplink.me		172.67.74.23	A (IP address)	IN (0x0001)	false
Jan 7, 2025 19:40:19.767107010 CET	1.1.1.1	192.168.2.4	0x7f99	No error (0)	taplink.me		104.26.11.47	A (IP address)	IN (0x0001)	false
Jan 7, 2025 19:40:19.767107010 CET	1.1.1.1	192.168.2.4	0x7f99	No error (0)	taplink.me		104.26.10.47	A (IP address)	IN (0x0001)	false
Jan 7, 2025 19:40:19.767765045 CET	1.1.1.1	192.168.2.4	0xb8b7	No error (0)	creditunions.taplink.ws	taplink.me		CNAME (Canonical name)	IN (0x0001)	false
Jan 7, 2025 19:40:19.767765045 CET	1.1.1.1	192.168.2.4	0xb8b7	No error (0)	taplink.me			65	IN (0x0001)	false
Jan 7, 2025 19:40:19.791606903 CET	1.1.1.1	192.168.2.4	0xec69	No error (0)	mc.yandex.ru		87.250.250.119	A (IP address)	IN (0x0001)	false
Jan 7, 2025 19:40:19.791606903 CET	1.1.1.1	192.168.2.4	0xec69	No error (0)	mc.yandex.ru		93.158.134.119	A (IP address)	IN (0x0001)	false
Jan 7, 2025 19:40:19.791606903 CET	1.1.1.1	192.168.2.4	0xec69	No error (0)	mc.yandex.ru		77.88.21.119	A (IP address)	IN (0x0001)	false
Jan 7, 2025 19:40:19.791606903 CET	1.1.1.1	192.168.2.4	0xec69	No error (0)	mc.yandex.ru		87.250.251.119	A (IP address)	IN (0x0001)	false
Jan 7, 2025 19:40:20.706181049 CET	1.1.1.1	192.168.2.4	0x1d9d	No error (0)	taplink.st		104.26.3.150	A (IP address)	IN (0x0001)	false
Jan 7, 2025 19:40:20.706181049 CET	1.1.1.1	192.168.2.4	0x1d9d	No error (0)	taplink.st		104.26.2.150	A (IP address)	IN (0x0001)	false
Jan 7, 2025 19:40:20.706181049 CET	1.1.1.1	192.168.2.4	0x1d9d	No error (0)	taplink.st		172.67.71.166	A (IP address)	IN (0x0001)	false
Jan 7, 2025 19:40:20.708034992 CET	1.1.1.1	192.168.2.4	0x9f53	No error (0)	taplink.st			65	IN (0x0001)	false
Jan 7, 2025 19:40:21.485729933 CET	1.1.1.1	192.168.2.4	0xd419	No error (0)	taplink.st		104.26.2.150	A (IP address)	IN (0x0001)	false
Jan 7, 2025 19:40:21.485729933 CET	1.1.1.1	192.168.2.4	0xd419	No error (0)	taplink.st		172.67.71.166	A (IP address)	IN (0x0001)	false
Jan 7, 2025 19:40:21.485729933 CET	1.1.1.1	192.168.2.4	0xd419	No error (0)	taplink.st		104.26.3.150	A (IP address)	IN (0x0001)	false
Jan 7, 2025 19:40:21.485851049 CET	1.1.1.1	192.168.2.4	0xd92d	No error (0)	taplink.st			65	IN (0x0001)	false
Jan 7, 2025 19:40:21.797010899 CET	1.1.1.1	192.168.2.4	0x8302	No error (0)	mc.yandex.ru		93.158.134.119	A (IP address)	IN (0x0001)	false
Jan 7, 2025 19:40:21.797010899 CET	1.1.1.1	192.168.2.4	0x8302	No error (0)	mc.yandex.ru		77.88.21.119	A (IP address)	IN (0x0001)	false
Jan 7, 2025 19:40:21.797010899 CET	1.1.1.1	192.168.2.4	0x8302	No error (0)	mc.yandex.ru		87.250.250.119	A (IP address)	IN (0x0001)	false
Jan 7, 2025 19:40:21.797010899 CET	1.1.1.1	192.168.2.4	0x8302	No error (0)	mc.yandex.ru		87.250.251.119	A (IP address)	IN (0x0001)	false
Jan 7, 2025 19:40:33.131994963 CET	1.1.1.1	192.168.2.4	0x5158	No error (0)	membersourcecu.paolayjon.us		198.58.107.108	A (IP address)	IN (0x0001)	false
Jan 7, 2025 19:40:38.377734900 CET	1.1.1.1	192.168.2.4	0x15c8	No error (0)	423377fa-8849d407.paolayjon.us		198.58.107.108	A (IP address)	IN (0x0001)	false
Jan 7, 2025 19:40:41.206343889 CET	1.1.1.1	192.168.2.4	0xf58b	No error (0)	423377fa-8849d407.paolayjon.us		198.58.107.108	A (IP address)	IN (0x0001)	false
Jan 7, 2025 19:40:44.382726908 CET	1.1.1.1	192.168.2.4	0x3f6e	No error (0)	253eeb81-8849d407.paolayjon.us		198.58.107.108	A (IP address)	IN (0x0001)	false
Jan 7, 2025 19:40:47.440262079 CET	1.1.1.1	192.168.2.4	0x6907	No error (0)	l1ve.paolayjon.us		198.58.107.108	A (IP address)	IN (0x0001)	false
Jan 7, 2025 19:40:50.084515095 CET	1.1.1.1	192.168.2.4	0x71c5	No error (0)	64c2b783-8849d407.paolayjon.us		198.58.107.108	A (IP address)	IN (0x0001)	false
Jan 7, 2025 19:41:11.492392063 CET	1.1.1.1	192.168.2.4	0x26b1	No error (0)	membersourcecu.paolayjon.us		198.58.107.108	A (IP address)	IN (0x0001)	false
Jan 7, 2025 19:41:19.181885958 CET	1.1.1.1	192.168.2.4	0xcab9	No error (0)	1b4ddfb2-8849d407.paolayjon.us		198.58.107.108	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

creditunions.taplink.ws

https:

mc.yandex.ru

taplink.st

membersourcecu.paolayjon.us

423377fa-8849d407.paolayjon.us

l1ve.paolayjon.us

64c2b783-8849d407.paolayjon.us

a.nel.cloudflare.com

1b4ddfb2-8849d407.paolayjon.us

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49741	104.26.10.47	443	3060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-07 18:40:18 UTC	666	OUT	GET / HTTP/1.1 Host: creditunions.taplink.ws Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-07 18:40:18 UTC	1029	IN	HTTP/1.1 200 OK Date: Tue, 07 Jan 2025 18:40:18 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 07 Jan 2025 18:40:18 GMT Cache-Control: no-cache, must-revalidate Pragma: no-cache Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: unsafe-url CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MI3Ur9zRk0BdRknkMlxa9BkZfSELeA2bo3%2FDk1Qr39Z3Z7EJkUee2rRu8fVhVO9BVA0UCMRgP0XP3IUUmRxtbwNBKc7kNh6TK%2BM75CtPR%2BisRJKn5645PzphRRaPpRd8EBPGnIc7E81%2B"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fe613520a9942c7-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1577&min_rtt=1567&rtt_var=608&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2822&recv_bytes=1244&delivery_rate=1769696&cwnd=233&unsent_bytes=0&cid=857a6cc21cfe3e1c&ts=589&x=0"
2025-01-07 18:40:18 UTC	340	IN	Data Raw: 64 33 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 20 3c 68 74 6d 6c 20 70 72 65 66 69 78 3d 22 6f 67 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 22 20 6c 61 6e 67 3d 22 65 6e 22 20 64 61 74 61 2d 66 6f 72 6d 61 74 2d 64 61 74 65 3d 22 6d 2e 64 2e 59 22 20 64 61 74 61 2d 66 6f 72 6d 61 74 2d 64 61 74 65 74 69 6d 65 3d 22 6d 2e 64 2e 59 20 48 3a 69 22 3e 20 3c 68 65 61 64 3e 20 3c 74 69 74 6c 65 3e 63 72 65 64 69 74 75 6e 69 6f 6e 73 2e 74 61 70 6c 69 6e 6b 2e 77 73 3c 2f 74 69 74 6c 65 3e 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c Data Ascii: d3e<!DOCTYPE html> <html prefix="og: http://ogp.me/ns#" lang="en" data-format-date="m.d.Y" data-format-datetime="m.d.Y H:i"> <head> <title>creditunions.taplink.ws</title> <meta name=viewport content="width=device-width, user-scalable=no, initial-scal
2025-01-07 18:40:18 UTC	1369	IN	Data Raw: 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 20 63 6f 6e 74 65 6e 74 3d 27 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 27 3e 20 20 20 20 20 3c 6c 69 6e 6b 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 72 65 6c 3d 73 74 79 6c 65 73 68 65 65 74 20 68 72 65 66 3d 27 2f 73 2f 63 73 73 2f 66 72 6f 6e 74 65 6e 64 2e 63 73 73 3f 31 2e 32 2e 39 31 30 35 27 3e 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 69 63 6f 6e 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 74 61 70 6c 69 6e 6b 2e 73 74 2f 61 2f 39 2f 38 2f 38 2f 32 2f 63 33 64 61 38 65 2e 70 6e 67 3f 31 22 3e 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 20 73 69 7a 65 73 3d 33 30 30 78 33 30 30 Data Ascii: meta http-equiv=Content-Type content='text/html; charset=utf-8'> <link type='text/css' rel=stylesheet href='/s/css/frontend.css?1.2.9105'> <link rel=icon href="https://taplink.st/a/9/8/8/2/c3da8e.png?1"> <link rel=apple-touch-icon sizes=300x300
2025-01-07 18:40:18 UTC	1369	IN	Data Raw: 72 6f 66 69 6c 65 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 3a 2f 2f 63 72 65 64 69 74 75 6e 69 6f 6e 73 2e 74 61 70 6c 69 6e 6b 2e 77 73 22 2c 22 74 68 65 6d 65 22 3a 7b 22 6c 69 6e 6b 22 3a 7b 22 72 61 64 69 75 73 22 3a 34 30 7d 2c 22 62 67 22 3a 7b 22 70 69 63 74 75 72 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6c 6f 72 22 3a 22 23 66 66 66 66 66 66 22 7d 7d 2c 22 6d 65 6e 75 22 3a 6e 75 6c 6c 2c 22 6d 65 6e 75 5f 69 74 65 6d 73 22 3a 6e 75 6c 6c 2c 22 61 64 64 6f 6e 73 22 3a 7b 22 63 6f 64 65 73 22 3a 5b 7b 22 63 62 22 3a 22 79 61 6e 64 65 78 4d 65 74 72 69 6b 61 49 6e 69 74 22 2c 22 63 6f 6f 6b 69 65 22 3a 22 61 6e 61 6c 79 74 69 63 73 22 2c 22 64 61 74 61 22 3a 7b 22 69 64 22 3a 34 34 39 32 39 37 33 38 2c 22 73 69 6d 70 6c 65 22 3a 74 72 75 65 7d 7d 5d 7d 2c 22 Data Ascii: rofile_link":"https://creditunions.taplink.ws","theme":{"link":{"radius":40},"bg":{"picture":null,"color":"#ffffff"}},"menu":null,"menu_items":null,"addons":{"codes":[{"cb":"yandexMetrikaInit","cookie":"analytics","data":{"id":44929738,"simple":true}}]},"
2025-01-07 18:40:18 UTC	319	IN	Data Raw: 64 65 73 69 67 6e 22 3a 7b 22 6f 6e 22 3a 30 7d 7d 2c 22 62 6c 6f 63 6b 5f 74 79 70 65 5f 69 64 22 3a 32 2c 22 62 6c 6f 63 6b 5f 74 79 70 65 5f 6e 61 6d 65 22 3a 22 6c 69 6e 6b 22 2c 22 62 6c 6f 63 6b 5f 69 64 22 3a 22 62 63 30 65 65 38 33 38 34 65 33 30 22 2c 22 61 64 64 6f 6e 5f 74 61 72 67 65 74 22 3a 5b 22 66 6f 72 6d 22 2c 22 6c 69 6e 6b 22 5d 2c 22 73 74 61 74 22 3a 22 61 34 35 61 34 61 22 7d 5d 7d 5d 2c 22 6f 70 74 69 6f 6e 73 22 3a 5b 5d 7d 3b 0a 3c 2f 73 63 72 69 70 74 3e 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 2f 73 2f 6a 73 2f 66 72 6f 6e 74 65 6e 64 2e 6a 73 3f 31 2e 32 2e 39 31 30 35 27 3e 3c 2f 73 63 72 69 70 74 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 61 67 65 20 76 Data Ascii: design":{"on":0}},"block_type_id":2,"block_type_name":"link","block_id":"bc0ee8384e30","addon_target":["form","link"],"stat":"a45a4a"}]}],"options":[]};</script> <script type='text/javascript' src='/s/js/frontend.js?1.2.9105'></script> <div class="page v
2025-01-07 18:40:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49740	104.26.10.47	443	3060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-07 18:40:18 UTC	572	OUT	GET /s/css/frontend.css?1.2.9105 HTTP/1.1 Host: creditunions.taplink.ws Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://creditunions.taplink.ws/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-07 18:40:18 UTC	1058	IN	HTTP/1.1 200 OK Date: Tue, 07 Jan 2025 18:40:18 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Last-Modified: Sun, 29 Dec 2024 14:07:21 GMT ETag: W/"67715799-a75c" Expires: Tue, 08 Jul 2025 17:44:23 GMT Cache-Control: max-age=15724800 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: unsafe-url CF-Cache-Status: HIT Age: 3355 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RCthQibdhKiT2oy837jrtvUaFVHG8d8%2Bp0vmAAd%2FuXmx%2FZwP%2BfRAUH7LClhVScVkXgU6y2gxmvdupLivB0XIMvcSdFAqYyks26cqwu6suRyCYQEv4pAHqH0jmvXnySSZXekRLvkfXpm9"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fe61354f8848cc3-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1980&min_rtt=1974&rtt_var=754&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2822&recv_bytes=1150&delivery_rate=1439132&cwnd=224&unsent_bytes=0&cid=7f48c3a7bc7a3054&ts=759&x=0"
2025-01-07 18:40:18 UTC	311	IN	Data Raw: 37 63 35 35 0d 0a 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 40 6b 65 79 66 72 61 6d 65 73 20 73 70 69 6e 41 72 6f 75 6e 64 7b 66 72 6f 6d 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 7d 7d 2e 62 75 74 74 6f 6e 2c 2e 69 73 2d 75 6e 73 65 6c 65 63 74 61 62 6c 65 2c 2e 6d 6f 64 61 6c 2d 63 6c 6f 73 65 2c 2e 70 61 67 69 6e 61 74 69 6f 6e 2d 65 6c 6c 69 70 73 69 73 2c 2e 70 61 67 69 6e 61 74 69 6f 6e 2d 6c 69 6e 6b 2c 2e 70 61 67 69 6e 61 74 69 6f 6e 2d 6e 65 78 74 2c 2e 70 61 67 69 6e 61 74 69 6f 6e 2d 70 72 65 76 69 6f 75 73 7b 2d 77 65 62 6b 69 74 2d 74 6f 75 63 68 2d 63 61 6c 6c 6f 75 74 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 Data Ascii: 7c55@charset "UTF-8";@keyframes spinAround{from{transform:rotate(0)}to{transform:rotate(359deg)}}.button,.is-unselectable,.modal-close,.pagination-ellipsis,.pagination-link,.pagination-next,.pagination-previous{-webkit-touch-callout:none;-webkit-user-se
2025-01-07 18:40:18 UTC	1369	IN	Data Raw: 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 7d 2e 73 65 6c 65 63 74 3a 6e 6f 74 28 2e 69 73 2d 6d 75 6c 74 69 70 6c 65 29 3a 6e 6f 74 28 2e 69 73 2d 6c 6f 61 64 69 6e 67 29 3a 3a 61 66 74 65 72 7b 62 6f 72 64 65 72 3a 33 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 3b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 30 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 30 3b 63 6f 6e 74 65 6e 74 3a 22 20 22 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 2e 36 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 2e 34 33 37 35 65 6d 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 35 30 25 3b 74 72 61 6e 73 66 6f 72 6d 3a Data Ascii: r-select:none}.select:not(.is-multiple):not(.is-loading)::after{border:3px solid transparent;border-radius:2px;border-right:0;border-top:0;content:" ";display:block;height:.625em;margin-top:-.4375em;pointer-events:none;position:absolute;top:50%;transform:
2025-01-07 18:40:18 UTC	1369	IN	Data Raw: 69 73 2d 6c 61 72 67 65 2e 6d 6f 64 61 6c 2d 63 6c 6f 73 65 7b 68 65 69 67 68 74 3a 33 32 70 78 3b 6d 61 78 2d 68 65 69 67 68 74 3a 33 32 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 33 32 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 33 32 70 78 3b 6d 69 6e 2d 77 69 64 74 68 3a 33 32 70 78 3b 77 69 64 74 68 3a 33 32 70 78 7d 2e 62 75 74 74 6f 6e 2e 69 73 2d 6c 6f 61 64 69 6e 67 3a 3a 61 66 74 65 72 2c 2e 63 6f 6e 74 72 6f 6c 2e 69 73 2d 6c 6f 61 64 69 6e 67 3a 3a 61 66 74 65 72 2c 2e 73 65 6c 65 63 74 2e 69 73 2d 6c 6f 61 64 69 6e 67 3a 3a 61 66 74 65 72 7b 61 6e 69 6d 61 74 69 6f 6e 3a 73 70 69 6e 41 72 6f 75 6e 64 20 2e 35 73 20 69 6e 66 69 6e 69 74 65 20 6c 69 6e 65 61 72 3b 62 6f 72 64 65 72 3a 32 70 78 20 73 6f 6c 69 64 20 23 64 62 64 62 64 62 3b 62 6f 72 64 Data Ascii: is-large.modal-close{height:32px;max-height:32px;max-width:32px;min-height:32px;min-width:32px;width:32px}.button.is-loading::after,.control.is-loading::after,.select.is-loading::after{animation:spinAround .5s infinite linear;border:2px solid #dbdbdb;bord
2025-01-07 18:40:18 UTC	1369	IN	Data Raw: 72 65 76 69 6f 75 73 2c 2e 69 73 2d 66 6f 63 75 73 65 64 2e 74 65 78 74 61 72 65 61 2c 2e 70 61 67 69 6e 61 74 69 6f 6e 2d 65 6c 6c 69 70 73 69 73 3a 61 63 74 69 76 65 2c 2e 70 61 67 69 6e 61 74 69 6f 6e 2d 65 6c 6c 69 70 73 69 73 3a 66 6f 63 75 73 2c 2e 70 61 67 69 6e 61 74 69 6f 6e 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 70 61 67 69 6e 61 74 69 6f 6e 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 70 61 67 69 6e 61 74 69 6f 6e 2d 6e 65 78 74 3a 61 63 74 69 76 65 2c 2e 70 61 67 69 6e 61 74 69 6f 6e 2d 6e 65 78 74 3a 66 6f 63 75 73 2c 2e 70 61 67 69 6e 61 74 69 6f 6e 2d 70 72 65 76 69 6f 75 73 3a 61 63 74 69 76 65 2c 2e 70 61 67 69 6e 61 74 69 6f 6e 2d 70 72 65 76 69 6f 75 73 3a 66 6f 63 75 73 2c 2e 73 65 6c 65 63 74 20 73 65 6c 65 63 74 2e 69 73 2d 61 63 74 69 Data Ascii: revious,.is-focused.textarea,.pagination-ellipsis:active,.pagination-ellipsis:focus,.pagination-link:active,.pagination-link:focus,.pagination-next:active,.pagination-next:focus,.pagination-previous:active,.pagination-previous:focus,.select select.is-acti
2025-01-07 18:40:18 UTC	1369	IN	Data Raw: 6e 44 6f 77 6e 7b 66 72 6f 6d 7b 6f 70 61 63 69 74 79 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 2d 31 30 30 25 2c 30 29 7d 74 6f 7b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 7d 2e 66 61 64 65 49 6e 44 6f 77 6e 7b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 64 65 49 6e 44 6f 77 6e 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 49 6e 55 70 7b 66 72 6f 6d 7b 6f 70 61 63 69 74 79 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 31 30 30 25 2c 30 29 7d 74 6f 7b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 7d 2e 66 61 64 65 49 6e 55 70 7b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 64 65 49 6e 55 70 7d 2e 66 61 64 Data Ascii: nDown{from{opacity:0;transform:translate3d(0,-100%,0)}to{opacity:1;transform:none}}.fadeInDown{animation-name:fadeInDown}@keyframes fadeInUp{from{opacity:0;transform:translate3d(0,100%,0)}to{opacity:1;transform:none}}.fadeInUp{animation-name:fadeInUp}.fad
2025-01-07 18:40:18 UTC	1369	IN	Data Raw: 30 30 25 2c 30 2c 30 29 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 73 6c 69 64 65 2d 64 6f 77 6e 2d 65 6e 74 65 72 2d 61 63 74 69 76 65 2c 2e 73 6c 69 64 65 2d 64 6f 77 6e 2d 6c 65 61 76 65 2d 61 63 74 69 76 65 2c 2e 73 6c 69 64 65 2d 75 70 2d 65 6e 74 65 72 2d 61 63 74 69 76 65 2c 2e 73 6c 69 64 65 2d 75 70 2d 6c 65 61 76 65 2d 61 63 74 69 76 65 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 74 72 61 6e 73 66 6f 72 6d 20 32 35 30 6d 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 37 38 35 2c 2e 31 33 35 2c 2e 31 35 2c 2e 38 36 29 7d 2e 73 6c 69 64 65 2d 64 6f 77 6e 2d 65 6e 74 65 72 2c 2e 73 6c 69 64 65 2d 75 70 2d 6c 65 61 76 65 2d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 2d Data Ascii: 00%,0,0);position:absolute;width:100%}.slide-down-enter-active,.slide-down-leave-active,.slide-up-enter-active,.slide-up-leave-active{transition:transform 250ms cubic-bezier(.785,.135,.15,.86)}.slide-down-enter,.slide-up-leave-to{transform:translate3d(0,-
2025-01-07 18:40:18 UTC	1369	IN	Data Raw: 73 2c 2e 69 73 2d 61 63 74 69 76 65 2e 74 65 78 74 61 72 65 61 2c 2e 69 73 2d 66 6f 63 75 73 65 64 2e 62 75 74 74 6f 6e 2c 2e 69 73 2d 66 6f 63 75 73 65 64 2e 69 6e 70 75 74 2c 2e 69 73 2d 66 6f 63 75 73 65 64 2e 70 61 67 69 6e 61 74 69 6f 6e 2d 65 6c 6c 69 70 73 69 73 2c 2e 69 73 2d 66 6f 63 75 73 65 64 2e 70 61 67 69 6e 61 74 69 6f 6e 2d 6c 69 6e 6b 2c 2e 69 73 2d 66 6f 63 75 73 65 64 2e 70 61 67 69 6e 61 74 69 6f 6e 2d 6e 65 78 74 2c 2e 69 73 2d 66 6f 63 75 73 65 64 2e 70 61 67 69 6e 61 74 69 6f 6e 2d 70 72 65 76 69 6f 75 73 2c 2e 69 73 2d 66 6f 63 75 73 65 64 2e 74 65 78 74 61 72 65 61 2c 2e 70 61 67 69 6e 61 74 69 6f 6e 2d 65 6c 6c 69 70 73 69 73 3a 61 63 74 69 76 65 2c 2e 70 61 67 69 6e 61 74 69 6f 6e 2d 65 6c 6c 69 70 73 69 73 3a 66 6f 63 75 73 2c Data Ascii: s,.is-active.textarea,.is-focused.button,.is-focused.input,.is-focused.pagination-ellipsis,.is-focused.pagination-link,.is-focused.pagination-next,.is-focused.pagination-previous,.is-focused.textarea,.pagination-ellipsis:active,.pagination-ellipsis:focus,
2025-01-07 18:40:18 UTC	1369	IN	Data Raw: 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2a 2c 3a 3a 61 66 74 65 72 2c 3a 3a 62 65 66 6f 72 65 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 69 6e 68 65 72 69 74 7d 65 6d 62 65 64 2c 69 66 72 61 6d 65 2c 69 6d 67 2c 6f 62 6a 65 63 74 2c 76 69 64 65 6f 7b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 61 75 64 69 6f 7b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 69 66 72 61 6d 65 7b 62 6f 72 64 65 72 3a 30 7d 74 61 62 6c 65 7b 62 6f 72 64 65 72 2d 63 6f 6c 6c 61 70 73 65 3a 63 6f 6c 6c 61 70 73 65 3b 62 6f 72 64 65 72 2d 73 70 61 63 69 6e 67 3a 30 7d 74 64 2c 74 68 7b 70 61 64 64 69 6e 67 3a 30 7d 74 64 3a 6e 6f 74 28 5b 61 6c 69 67 6e 5d 29 2c 74 68 3a 6e 6f 74 28 5b 61 6c 69 67 6e 5d 29 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 68 74 Data Ascii: ox-sizing:border-box}*,::after,::before{box-sizing:inherit}embed,iframe,img,object,video{max-width:100%}audio{max-width:100%}iframe{border:0}table{border-collapse:collapse;border-spacing:0}td,th{padding:0}td:not([align]),th:not([align]){text-align:left}ht
2025-01-07 18:40:18 UTC	1369	IN	Data Raw: 6f 3b 70 61 64 64 69 6e 67 3a 31 2e 32 35 72 65 6d 20 31 2e 35 72 65 6d 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 70 72 65 3b 77 6f 72 64 2d 77 72 61 70 3a 6e 6f 72 6d 61 6c 7d 70 72 65 20 63 6f 64 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 63 6f 6c 6f 72 3a 63 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 3b 70 61 64 64 69 6e 67 3a 30 7d 74 61 62 6c 65 20 74 64 2c 74 61 62 6c 65 20 74 68 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 7d 74 61 62 6c 65 20 74 64 3a 6e 6f 74 28 5b 61 6c 69 67 6e 5d 29 2c 74 61 62 6c 65 20 74 68 3a 6e 6f 74 28 5b 61 6c 69 67 6e 5d 29 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 74 61 62 6c 65 20 74 68 7b 63 6f 6c 6f 72 3a 23 33 36 33 Data Ascii: o;padding:1.25rem 1.5rem;white-space:pre;word-wrap:normal}pre code{background-color:transparent;color:currentColor;font-size:1em;padding:0}table td,table th{vertical-align:top}table td:not([align]),table th:not([align]){text-align:left}table th{color:#363
2025-01-07 18:40:18 UTC	1369	IN	Data Raw: 69 7a 65 3a 2e 37 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 39 39 31 70 78 29 7b 2e 69 73 2d 73 69 7a 65 2d 31 2d 74 6f 75 63 68 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 69 73 2d 73 69 7a 65 2d 32 2d 74 6f 75 63 68 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 69 73 2d 73 69 7a 65 2d 33 2d 74 6f 75 63 68 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 69 73 2d 73 69 7a 65 2d 34 2d 74 6f 75 63 68 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 69 73 2d 73 69 7a 65 2d 35 2d 74 6f 75 63 68 7b 66 6f 6e 74 2d 73 69 7a Data Ascii: ize:.75rem!important}}@media screen and (max-width:991px){.is-size-1-touch{font-size:3rem!important}.is-size-2-touch{font-size:2.5rem!important}.is-size-3-touch{font-size:2rem!important}.is-size-4-touch{font-size:1.5rem!important}.is-size-5-touch{font-siz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49743	104.26.10.47	443	3060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-07 18:40:19 UTC	556	OUT	GET /s/js/frontend.js?1.2.9105 HTTP/1.1 Host: creditunions.taplink.ws Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://creditunions.taplink.ws/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-07 18:40:19 UTC	1073	IN	HTTP/1.1 200 OK Date: Tue, 07 Jan 2025 18:40:19 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Fri, 27 Dec 2024 08:02:04 GMT ETag: W/"676e5efc-1e928" Expires: Tue, 08 Jul 2025 17:44:23 GMT Cache-Control: max-age=15724800 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: unsafe-url CF-Cache-Status: HIT Age: 3356 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MOkb7xTrETdV484rXgdXwJPlzdLqriPy43ZVtQ4BzuZEWBO9S4xw1hZLe8tofa%2BZ0ZCHUljDcn1tLrL8okLwjc%2Fg0asE00ZT%2FwzpU7CkM95cnCOd2TtXAdukPprQC0%2FHGYLBT1TltYtP"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fe61357e9ab0f99-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1681&min_rtt=1681&rtt_var=631&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2822&recv_bytes=1134&delivery_rate=1733966&cwnd=164&unsent_bytes=0&cid=66a5807b04603820&ts=143&x=0"
2025-01-07 18:40:19 UTC	296	IN	Data Raw: 37 63 34 36 0d 0a 2f 2a 20 31 2e 32 2e 39 31 30 31 20 2a 2f 0a 76 61 72 20 74 2c 65 3b 66 75 6e 63 74 69 6f 6e 20 6d 69 6d 65 74 79 70 65 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 5b 7b 66 69 6c 65 3a 22 69 6d 61 67 65 22 2c 65 78 74 3a 5b 22 6a 70 67 22 2c 22 6a 70 65 67 22 2c 22 70 6e 67 22 2c 22 67 69 66 22 2c 22 77 65 62 70 22 2c 22 73 76 67 22 2c 22 70 73 64 22 5d 7d 2c 7b 66 69 6c 65 3a 22 61 72 63 68 69 76 65 22 2c 65 78 74 3a 5b 22 7a 69 70 22 2c 22 37 7a 22 2c 22 72 61 72 22 5d 7d 2c 7b 66 69 6c 65 3a 22 70 64 66 22 2c 65 78 74 3a 5b 22 70 64 66 22 5d 7d 2c 7b 66 69 6c 65 3a 22 76 69 64 65 6f 22 2c 65 78 74 3a 5b 22 6d 70 34 22 2c 22 66 6c 76 22 2c 22 6d 33 75 38 22 2c 22 74 73 22 2c 22 33 67 70 22 2c 22 61 76 69 22 2c Data Ascii: 7c46/* 1.2.9101 */var t,e;function mimetype(e){"use strict";var t=[{file:"image",ext:["jpg","jpeg","png","gif","webp","svg","psd"]},{file:"archive",ext:["zip","7z","rar"]},{file:"pdf",ext:["pdf"]},{file:"video",ext:["mp4","flv","m3u8","ts","3gp","avi",
2025-01-07 18:40:19 UTC	1369	IN	Data Raw: 6d 6c 22 2c 22 63 73 73 22 2c 22 6a 73 22 2c 22 69 6e 63 22 2c 22 70 79 22 2c 22 78 6d 6c 22 2c 22 6a 73 6f 6e 22 5d 7d 2c 7b 66 69 6c 65 3a 22 74 65 78 74 22 2c 65 78 74 3a 5b 22 74 78 74 22 2c 22 72 74 66 22 2c 22 70 61 67 65 73 22 5d 7d 2c 7b 66 69 6c 65 3a 22 6d 75 73 69 63 22 2c 65 78 74 3a 5b 22 6d 70 33 22 2c 22 6d 33 75 22 5d 7d 2c 7b 66 69 6c 65 3a 22 61 75 64 69 6f 22 2c 65 78 74 3a 5b 22 6d 69 64 22 2c 22 61 69 66 22 2c 22 77 61 76 22 5d 7d 2c 7b 66 69 6c 65 3a 22 63 68 61 72 74 22 2c 65 78 74 3a 5b 22 78 6c 73 22 2c 22 78 6c 73 78 22 2c 22 6e 75 6d 62 65 72 73 22 5d 7d 2c 7b 66 69 6c 65 3a 22 63 73 76 22 2c 65 78 74 3a 5b 22 63 73 76 22 5d 7d 2c 7b 66 69 6c 65 3a 22 70 6f 77 65 72 70 6f 69 6e 74 22 2c 65 78 74 3a 5b 22 70 70 74 78 22 2c 22 70 Data Ascii: ml","css","js","inc","py","xml","json"]},{file:"text",ext:["txt","rtf","pages"]},{file:"music",ext:["mp3","m3u"]},{file:"audio",ext:["mid","aif","wav"]},{file:"chart",ext:["xls","xlsx","numbers"]},{file:"csv",ext:["csv"]},{file:"powerpoint",ext:["pptx","p
2025-01-07 18:40:19 UTC	1369	IN	Data Raw: 69 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 75 6d 62 65 72 73 54 6f 43 75 72 72 65 6e 63 79 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 74 6f 53 74 72 28 65 29 2e 72 65 70 6c 61 63 65 28 2f 5b 5e 30 2d 39 5c 2e 5d 2b 2f 67 2c 22 22 29 7c 7c 22 30 22 29 2e 74 6f 46 69 78 65 64 28 66 69 78 65 64 28 74 29 29 7d 66 75 6e 63 74 69 6f 6e 20 61 64 64 54 68 6f 75 73 61 6e 64 53 65 70 61 72 61 74 6f 72 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 2e 72 65 70 6c 61 63 65 28 2f 28 5c 64 29 28 3f 3d 28 3f 3a 5c 64 7b 33 7d 29 2b 5c 62 29 2f 67 6d 2c 22 24 31 22 2b 74 29 7d 66 75 6e 63 74 69 6f 6e 20 63 75 72 72 65 6e 63 79 54 6f 49 6e 74 65 67 65 72 41 6e 64 44 65 63 69 6d 61 6c 28 65 29 7b 72 65 74 75 72 6e 20 74 6f 53 74 72 28 65 29 2e 73 70 Data Ascii: i))}function numbersToCurrency(e,t){return parseFloat(toStr(e).replace(/[^0-9\.]+/g,"")\|\|"0").toFixed(fixed(t))}function addThousandSeparator(e,t){return e.replace(/(\d)(?=(?:\d{3})+\b)/gm,"$1"+t)}function currencyToIntegerAndDecimal(e){return toStr(e).sp
2025-01-07 18:40:19 UTC	1369	IN	Data Raw: 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 28 65 29 7d 28 29 3a 28 22 79 22 3d 3d 69 3f 6e 2e 73 63 72 6f 6c 6c 28 30 2c 68 29 3a 6e 2e 73 63 72 6f 6c 6c 28 68 2c 30 29 2c 72 26 26 72 28 29 29 7d 66 75 6e 63 74 69 6f 6e 20 67 74 61 67 28 29 7b 64 61 74 61 4c 61 79 65 72 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 66 61 63 65 62 6f 6f 6b 50 69 78 65 6c 49 6e 69 74 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 74 29 7b 6e 75 6c 6c 21 3d 77 69 6e 64 6f 77 2e 66 62 71 26 26 66 62 71 28 22 74 72 61 63 6b 22 2c 22 50 75 72 63 68 61 73 65 22 2c 7b 63 6f 6e 74 65 6e 74 5f 74 79 70 65 3a 22 70 72 6f 64 75 63 74 22 2c 76 61 6c 75 65 3a 74 2e 62 75 64 67 65 74 2c 63 75 72 72 65 6e 63 79 3a 74 2e 63 75 72 72 65 6e Data Ascii: questAnimationFrame(e)}():("y"==i?n.scroll(0,h):n.scroll(h,0),r&&r())}function gtag(){dataLayer.push(arguments)}function facebookPixelInit(e){function t(e,t){null!=window.fbq&&fbq("track","Purchase",{content_type:"product",value:t.budget,currency:t.curren
2025-01-07 18:40:19 UTC	1369	IN	Data Raw: 69 64 2c 73 3d 5b 6e 5d 3b 6c 65 74 20 6f 3d 5b 7b 69 64 3a 6e 2c 71 75 61 6e 74 69 74 79 3a 31 2c 69 74 65 6d 5f 70 72 69 63 65 3a 69 7d 5d 3b 5f 2e 65 61 63 68 28 74 2e 6f 70 74 69 6f 6e 73 2c 28 65 2c 74 29 3d 3e 7b 69 2b 3d 65 2e 70 72 69 63 65 2c 6f 2e 70 75 73 68 28 7b 69 64 3a 22 6f 70 74 69 6f 6e 3a 22 2b 74 2c 71 75 61 6e 74 69 74 79 3a 31 2c 69 74 65 6d 5f 70 72 69 63 65 3a 65 2e 70 72 69 63 65 7d 29 7d 29 2c 66 62 71 28 22 74 72 61 63 6b 22 2c 22 41 64 64 54 6f 43 61 72 74 22 2c 7b 76 61 6c 75 65 3a 69 2c 63 75 72 72 65 6e 63 79 3a 74 2e 63 75 72 72 65 6e 63 79 2c 63 6f 6e 74 65 6e 74 5f 74 79 70 65 3a 22 70 72 6f 64 75 63 74 22 2c 63 6f 6e 74 65 6e 74 73 3a 6f 2c 63 6f 6e 74 65 6e 74 5f 69 64 73 3a 73 7d 2c 7b 65 76 65 6e 74 49 44 3a 74 2e 65 Data Ascii: id,s=[n];let o=[{id:n,quantity:1,item_price:i}];_.each(t.options,(e,t)=>{i+=e.price,o.push({id:"option:"+t,quantity:1,item_price:e.price})}),fbq("track","AddToCart",{value:i,currency:t.currency,content_type:"product",contents:o,content_ids:s},{eventID:t.e
2025-01-07 18:40:19 UTC	1369	IN	Data Raw: 6f 6e 20 58 28 65 29 7b 72 65 74 75 72 6e 20 50 28 65 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 2e 74 68 65 6e 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 2e 63 61 74 63 68 7d 66 75 6e 63 74 69 6f 6e 20 67 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 22 22 3a 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 7c 7c 46 28 65 29 26 26 65 2e 74 6f 53 74 72 69 6e 67 3d 3d 3d 66 3f 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 2c 6e 75 6c 6c 2c 32 29 3a 53 74 72 69 6e 67 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 5a 28 65 29 7b 76 61 72 20 74 3d 70 61 72 73 65 46 6c 6f 61 74 28 65 29 3b 72 65 74 75 72 6e 20 69 73 4e 61 4e 28 74 29 3f 65 3a 74 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 74 29 7b 66 6f 72 28 Data Ascii: on X(e){return P(e)&&"function"==typeof e.then&&"function"==typeof e.catch}function g(e){return null==e?"":Array.isArray(e)\|\|F(e)&&e.toString===f?JSON.stringify(e,null,2):String(e)}function Z(e){var t=parseFloat(e);return isNaN(t)?e:t}function s(e,t){for(
2025-01-07 18:40:19 UTC	1369	IN	Data Raw: 75 72 6e 21 31 7d 2c 4a 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 51 28 74 2c 69 29 7b 69 66 28 74 3d 3d 3d 69 29 72 65 74 75 72 6e 21 30 3b 76 61 72 20 65 3d 48 28 74 29 2c 6e 3d 48 28 69 29 3b 69 66 28 21 65 7c 7c 21 6e 29 72 65 74 75 72 6e 21 65 26 26 21 6e 26 26 53 74 72 69 6e 67 28 74 29 3d 3d 3d 53 74 72 69 6e 67 28 69 29 3b 74 72 79 7b 76 61 72 20 73 2c 6f 2c 72 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 29 2c 61 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 69 29 3b 72 65 74 75 72 6e 20 72 26 26 61 3f 74 2e 6c 65 6e 67 74 68 3d 3d 3d 69 2e 6c 65 6e 67 74 68 26 26 74 2e 65 76 65 72 79 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 51 28 65 2c 69 5b 74 5d 29 7d 29 3a 74 20 Data Ascii: urn!1},J=function(e){return e};function Q(t,i){if(t===i)return!0;var e=H(t),n=H(i);if(!e\|\|!n)return!e&&!n&&String(t)===String(i);try{var s,o,r=Array.isArray(t),a=Array.isArray(i);return r&&a?t.length===i.length&&t.every(function(e,t){return Q(e,i[t])}):t
2025-01-07 18:40:19 UTC	1369	IN	Data Raw: 6c 65 3a 21 21 6e 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 7d 76 61 72 20 72 65 2c 61 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5b 5e 22 2b 73 65 2e 73 6f 75 72 63 65 2b 22 2e 24 5f 5c 5c 64 5d 22 29 2c 6c 65 3d 22 5f 5f 70 72 6f 74 6f 5f 5f 22 69 6e 7b 7d 2c 6f 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2c 63 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 57 58 45 6e 76 69 72 6f 6e 6d 65 6e 74 26 26 21 21 57 58 45 6e 76 69 72 6f 6e 6d 65 6e 74 2e 70 6c 61 74 66 6f 72 6d 2c 69 3d 63 65 26 26 57 58 45 6e 76 69 72 6f 6e 6d 65 6e 74 2e 70 6c 61 74 66 6f 72 6d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 6e 3d 6f 26 26 77 69 6e 64 6f 77 2e 6e 61 76 69 67 Data Ascii: le:!!n,writable:!0,configurable:!0})}var re,ae=new RegExp("[^"+se.source+".$_\\d]"),le="__proto__"in{},o="undefined"!=typeof window,ce="undefined"!=typeof WXEnvironment&&!!WXEnvironment.platform,i=ce&&WXEnvironment.platform.toLowerCase(),n=o&&window.navig
2025-01-07 18:40:19 UTC	1369	IN	Data Raw: 70 75 73 68 28 65 29 7d 2c 64 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6d 6f 76 65 53 75 62 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 56 28 74 68 69 73 2e 73 75 62 73 2c 65 29 7d 2c 64 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 70 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 2e 74 61 72 67 65 74 26 26 64 2e 74 61 72 67 65 74 2e 61 64 64 44 65 70 28 74 68 69 73 29 7d 2c 64 2e 70 72 6f 74 6f 74 79 70 65 2e 6e 6f 74 69 66 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 68 69 73 2e 73 75 62 73 2e 73 6c 69 63 65 28 29 2c 74 3d 30 2c 69 3d 65 2e 6c 65 6e 67 74 68 3b 74 3c 69 3b 74 2b 2b 29 65 5b 74 5d 2e 75 70 64 61 74 65 28 29 7d 2c 64 2e 74 61 72 67 65 74 3d 6e 75 6c 6c 2c 5b 5d 29 3b 66 75 6e 63 74 69 6f 6e 20 78 65 28 65 29 7b 5f 65 2e 70 Data Ascii: push(e)},d.prototype.removeSub=function(e){V(this.subs,e)},d.prototype.depend=function(){d.target&&d.target.addDep(this)},d.prototype.notify=function(){for(var e=this.subs.slice(),t=0,i=e.length;t<i;t++)e[t].update()},d.target=null,[]);function xe(e){_e.p
2025-01-07 18:40:19 UTC	1369	IN	Data Raw: 74 79 70 65 2c 4f 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 41 65 29 2c 44 65 3d 28 5b 22 70 75 73 68 22 2c 22 70 6f 70 22 2c 22 73 68 69 66 74 22 2c 22 75 6e 73 68 69 66 74 22 2c 22 73 70 6c 69 63 65 22 2c 22 73 6f 72 74 22 2c 22 72 65 76 65 72 73 65 22 5d 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 76 61 72 20 72 3d 41 65 5b 6f 5d 3b 6f 65 28 4f 65 2c 6f 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2d 2d 3b 29 65 5b 74 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 76 61 72 20 69 2c 6e 3d 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 65 29 2c 73 3d 74 68 69 73 2e 5f 5f 6f 62 5f 5f 3b 73 77 69 74 63 68 28 6f 29 7b 63 61 73 65 22 70 75 73 68 22 3a 63 Data Ascii: type,Oe=Object.create(Ae),De=(["push","pop","shift","unshift","splice","sort","reverse"].forEach(function(o){var r=Ae[o];oe(Oe,o,function(){for(var e=[],t=arguments.length;t--;)e[t]=arguments[t];var i,n=r.apply(this,e),s=this.__ob__;switch(o){case"push":c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49744	35.190.80.1	443	3060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-07 18:40:19 UTC	552	OUT	OPTIONS /report/v4?s=RCthQibdhKiT2oy837jrtvUaFVHG8d8%2Bp0vmAAd%2FuXmx%2FZwP%2BfRAUH7LClhVScVkXgU6y2gxmvdupLivB0XIMvcSdFAqYyks26cqwu6suRyCYQEv4pAHqH0jmvXnySSZXekRLvkfXpm9 HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://creditunions.taplink.ws Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-07 18:40:19 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Tue, 07 Jan 2025 18:40:19 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49746	104.26.10.47	443	3060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-07 18:40:20 UTC	589	OUT	GET /s/fonts/google/css/woff2/roboto.css?1.2.9105 HTTP/1.1 Host: creditunions.taplink.ws Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://creditunions.taplink.ws/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-07 18:40:20 UTC	1058	IN	HTTP/1.1 200 OK Date: Tue, 07 Jan 2025 18:40:20 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Last-Modified: Fri, 05 Jul 2024 12:48:00 GMT ETag: W/"6687eb80-184e" Expires: Tue, 08 Jul 2025 17:44:24 GMT Cache-Control: max-age=15724800 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: unsafe-url CF-Cache-Status: HIT Age: 3356 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ve8V879IsiegqF0TXM7%2FqK9JwUg1EkaWAu%2BOF0LqOXTd1mVE2SY4jB9H%2B%2BFJf8leYi2W42xV6LAZNgftEspznA78hGHrjfpgPHCAfFeS5F5TEOiIPYl6SUaYZQG0nRoo366uaRmlfbez"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fe6135f0b6a42bd-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2102&min_rtt=2084&rtt_var=817&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2822&recv_bytes=1167&delivery_rate=1310592&cwnd=196&unsent_bytes=0&cid=3d7c297b12329bd3&ts=165&x=0"
2025-01-07 18:40:20 UTC	311	IN	Data Raw: 31 38 34 65 0d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 31 30 30 3b 0a 20 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 73 77 61 70 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 73 2f 66 6f 6e 74 73 2f 67 6f 6f 67 6c 65 2f 66 6f 6e 74 73 2f 31 33 31 2e 77 6f 66 66 32 3f 34 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 Data Ascii: 184e/* cyrillic-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 100; font-display: swap; src: url(/s/fonts/google/fonts/131.woff2?4) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U
2025-01-07 18:40:20 UTC	1369	IN	Data Raw: 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 31 30 30 3b 0a 20 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 73 77 61 70 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 73 2f 66 6f 6e 74 73 2f 67 6f 6f 67 6c 65 2f 66 6f 6e 74 73 2f 31 33 32 2e 77 6f 66 66 32 3f 34 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 30 31 2c 20 55 2b 30 34 30 30 2d 30 34 35 46 2c 20 55 2b 30 34 39 30 2d 30 34 39 31 2c 20 55 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 Data Ascii: font-family: 'Roboto'; font-style: normal; font-weight: 100; font-display: swap; src: url(/s/fonts/google/fonts/132.woff2?4) format('woff2'); unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;}/* greek-ext */@font-face {
2025-01-07 18:40:20 UTC	1369	IN	Data Raw: 36 30 2d 32 43 37 46 2c 20 55 2b 41 37 32 30 2d 41 37 46 46 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 31 30 30 3b 0a 20 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 73 77 61 70 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 73 2f 66 6f 6e 74 73 2f 67 6f 6f 67 6c 65 2f 66 6f 6e 74 73 2f 31 33 37 2e 77 6f 66 66 32 3f 34 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 Data Ascii: 60-2C7F, U+A720-A7FF;}/* latin */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 100; font-display: swap; src: url(/s/fonts/google/fonts/137.woff2?4) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+0
2025-01-07 18:40:20 UTC	1369	IN	Data Raw: 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 73 77 61 70 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 73 2f 66 6f 6e 74 73 2f 67 6f 6f 67 6c 65 2f 66 6f 6e 74 73 2f 31 34 32 2e 77 6f 66 66 32 3f 34 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 32 2d 30 31 30 33 2c 20 Data Ascii: -038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; font-display: swap; src: url(/s/fonts/google/fonts/142.woff2?4) format('woff2'); unicode-range: U+0102-0103,
2025-01-07 18:40:20 UTC	1369	IN	Data Raw: 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 0a 20 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 73 77 61 70 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 73 2f 66 6f 6e 74 73 2f 67 6f 6f 67 6c 65 2f 66 6f 6e 74 73 2f 31 34 36 2e 77 6f 66 66 32 3f 34 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 30 31 2c 20 55 2b 30 34 30 30 2d 30 34 35 46 2c 20 55 2b 30 34 39 30 2d 30 34 39 31 2c 20 55 2b 30 34 42 30 2d 30 34 42 31 2c Data Ascii: E2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 700; font-display: swap; src: url(/s/fonts/google/fonts/146.woff2?4) format('woff2'); unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1,
2025-01-07 18:40:20 UTC	443	IN	Data Raw: 30 2c 20 55 2b 32 30 41 30 2d 32 30 41 42 2c 20 55 2b 32 30 41 44 2d 32 30 43 30 2c 20 55 2b 32 31 31 33 2c 20 55 2b 32 43 36 30 2d 32 43 37 46 2c 20 55 2b 41 37 32 30 2d 41 37 46 46 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 0a 20 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 73 77 61 70 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 73 2f 66 6f 6e 74 73 2f 67 6f 6f 67 6c 65 2f 66 6f 6e 74 73 2f 31 35 31 2e 77 6f 66 66 32 3f 34 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e Data Ascii: 0, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;}/* latin */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 700; font-display: swap; src: url(/s/fonts/google/fonts/151.woff2?4) format('woff2'); unicode-ran
2025-01-07 18:40:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49745	172.67.74.23	443	3060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-07 18:40:20 UTC	372	OUT	GET /s/js/frontend.js?1.2.9105 HTTP/1.1 Host: creditunions.taplink.ws Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-07 18:40:20 UTC	1082	IN	HTTP/1.1 200 OK Date: Tue, 07 Jan 2025 18:40:20 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Fri, 27 Dec 2024 08:02:04 GMT ETag: W/"676e5efc-1e928" Expires: Tue, 08 Jul 2025 17:44:23 GMT Cache-Control: max-age=15724800 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: unsafe-url CF-Cache-Status: HIT Age: 3357 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FYEKolQ3%2BJ9i4Td%2BKbAJt8%2FQ1dqlNn5%2B0aKk5uhGhBhfbqhedKg%2FKQAiKZDJnz9X8gwouDCkvU%2F2%2BJRSE6akT34ouLRjv8SazWz3yzoWy%2FL9hsDwddFdmJEwSIXGsDJFMF4815mFY194"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fe6135efbc20c78-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1528&min_rtt=1524&rtt_var=580&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2822&recv_bytes=950&delivery_rate=1872995&cwnd=232&unsent_bytes=0&cid=812f0d400f87ad5f&ts=153&x=0"
2025-01-07 18:40:20 UTC	287	IN	Data Raw: 37 63 33 63 0d 0a 2f 2a 20 31 2e 32 2e 39 31 30 31 20 2a 2f 0a 76 61 72 20 74 2c 65 3b 66 75 6e 63 74 69 6f 6e 20 6d 69 6d 65 74 79 70 65 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 5b 7b 66 69 6c 65 3a 22 69 6d 61 67 65 22 2c 65 78 74 3a 5b 22 6a 70 67 22 2c 22 6a 70 65 67 22 2c 22 70 6e 67 22 2c 22 67 69 66 22 2c 22 77 65 62 70 22 2c 22 73 76 67 22 2c 22 70 73 64 22 5d 7d 2c 7b 66 69 6c 65 3a 22 61 72 63 68 69 76 65 22 2c 65 78 74 3a 5b 22 7a 69 70 22 2c 22 37 7a 22 2c 22 72 61 72 22 5d 7d 2c 7b 66 69 6c 65 3a 22 70 64 66 22 2c 65 78 74 3a 5b 22 70 64 66 22 5d 7d 2c 7b 66 69 6c 65 3a 22 76 69 64 65 6f 22 2c 65 78 74 3a 5b 22 6d 70 34 22 2c 22 66 6c 76 22 2c 22 6d 33 75 38 22 2c 22 74 73 22 2c 22 33 67 70 22 2c 22 61 76 69 22 2c Data Ascii: 7c3c/* 1.2.9101 */var t,e;function mimetype(e){"use strict";var t=[{file:"image",ext:["jpg","jpeg","png","gif","webp","svg","psd"]},{file:"archive",ext:["zip","7z","rar"]},{file:"pdf",ext:["pdf"]},{file:"video",ext:["mp4","flv","m3u8","ts","3gp","avi",
2025-01-07 18:40:20 UTC	1369	IN	Data Raw: 22 70 68 70 22 2c 22 68 74 6d 6c 22 2c 22 63 73 73 22 2c 22 6a 73 22 2c 22 69 6e 63 22 2c 22 70 79 22 2c 22 78 6d 6c 22 2c 22 6a 73 6f 6e 22 5d 7d 2c 7b 66 69 6c 65 3a 22 74 65 78 74 22 2c 65 78 74 3a 5b 22 74 78 74 22 2c 22 72 74 66 22 2c 22 70 61 67 65 73 22 5d 7d 2c 7b 66 69 6c 65 3a 22 6d 75 73 69 63 22 2c 65 78 74 3a 5b 22 6d 70 33 22 2c 22 6d 33 75 22 5d 7d 2c 7b 66 69 6c 65 3a 22 61 75 64 69 6f 22 2c 65 78 74 3a 5b 22 6d 69 64 22 2c 22 61 69 66 22 2c 22 77 61 76 22 5d 7d 2c 7b 66 69 6c 65 3a 22 63 68 61 72 74 22 2c 65 78 74 3a 5b 22 78 6c 73 22 2c 22 78 6c 73 78 22 2c 22 6e 75 6d 62 65 72 73 22 5d 7d 2c 7b 66 69 6c 65 3a 22 63 73 76 22 2c 65 78 74 3a 5b 22 63 73 76 22 5d 7d 2c 7b 66 69 6c 65 3a 22 70 6f 77 65 72 70 6f 69 6e 74 22 2c 65 78 74 3a 5b Data Ascii: "php","html","css","js","inc","py","xml","json"]},{file:"text",ext:["txt","rtf","pages"]},{file:"music",ext:["mp3","m3u"]},{file:"audio",ext:["mid","aif","wav"]},{file:"chart",ext:["xls","xlsx","numbers"]},{file:"csv",ext:["csv"]},{file:"powerpoint",ext:[
2025-01-07 18:40:20 UTC	1369	IN	Data Raw: 74 68 2e 6d 69 6e 28 74 2c 69 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 75 6d 62 65 72 73 54 6f 43 75 72 72 65 6e 63 79 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 74 6f 53 74 72 28 65 29 2e 72 65 70 6c 61 63 65 28 2f 5b 5e 30 2d 39 5c 2e 5d 2b 2f 67 2c 22 22 29 7c 7c 22 30 22 29 2e 74 6f 46 69 78 65 64 28 66 69 78 65 64 28 74 29 29 7d 66 75 6e 63 74 69 6f 6e 20 61 64 64 54 68 6f 75 73 61 6e 64 53 65 70 61 72 61 74 6f 72 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 2e 72 65 70 6c 61 63 65 28 2f 28 5c 64 29 28 3f 3d 28 3f 3a 5c 64 7b 33 7d 29 2b 5c 62 29 2f 67 6d 2c 22 24 31 22 2b 74 29 7d 66 75 6e 63 74 69 6f 6e 20 63 75 72 72 65 6e 63 79 54 6f 49 6e 74 65 67 65 72 41 6e 64 44 65 63 69 6d 61 6c 28 65 29 7b 72 65 74 75 72 6e 20 74 6f Data Ascii: th.min(t,i))}function numbersToCurrency(e,t){return parseFloat(toStr(e).replace(/[^0-9\.]+/g,"")\|\|"0").toFixed(fixed(t))}function addThousandSeparator(e,t){return e.replace(/(\d)(?=(?:\d{3})+\b)/gm,"$1"+t)}function currencyToIntegerAndDecimal(e){return to
2025-01-07 18:40:20 UTC	1369	IN	Data Raw: 26 26 72 28 29 29 3a 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 28 65 29 7d 28 29 3a 28 22 79 22 3d 3d 69 3f 6e 2e 73 63 72 6f 6c 6c 28 30 2c 68 29 3a 6e 2e 73 63 72 6f 6c 6c 28 68 2c 30 29 2c 72 26 26 72 28 29 29 7d 66 75 6e 63 74 69 6f 6e 20 67 74 61 67 28 29 7b 64 61 74 61 4c 61 79 65 72 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 66 61 63 65 62 6f 6f 6b 50 69 78 65 6c 49 6e 69 74 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 74 29 7b 6e 75 6c 6c 21 3d 77 69 6e 64 6f 77 2e 66 62 71 26 26 66 62 71 28 22 74 72 61 63 6b 22 2c 22 50 75 72 63 68 61 73 65 22 2c 7b 63 6f 6e 74 65 6e 74 5f 74 79 70 65 3a 22 70 72 6f 64 75 63 74 22 2c 76 61 6c 75 65 3a 74 2e 62 75 64 67 65 74 2c 63 75 72 72 65 6e 63 79 Data Ascii: &&r()):requestAnimationFrame(e)}():("y"==i?n.scroll(0,h):n.scroll(h,0),r&&r())}function gtag(){dataLayer.push(arguments)}function facebookPixelInit(e){function t(e,t){null!=window.fbq&&fbq("track","Purchase",{content_type:"product",value:t.budget,currency
2025-01-07 18:40:20 UTC	1369	IN	Data Raw: 2e 70 72 6f 64 75 63 74 5f 69 64 2c 73 3d 5b 6e 5d 3b 6c 65 74 20 6f 3d 5b 7b 69 64 3a 6e 2c 71 75 61 6e 74 69 74 79 3a 31 2c 69 74 65 6d 5f 70 72 69 63 65 3a 69 7d 5d 3b 5f 2e 65 61 63 68 28 74 2e 6f 70 74 69 6f 6e 73 2c 28 65 2c 74 29 3d 3e 7b 69 2b 3d 65 2e 70 72 69 63 65 2c 6f 2e 70 75 73 68 28 7b 69 64 3a 22 6f 70 74 69 6f 6e 3a 22 2b 74 2c 71 75 61 6e 74 69 74 79 3a 31 2c 69 74 65 6d 5f 70 72 69 63 65 3a 65 2e 70 72 69 63 65 7d 29 7d 29 2c 66 62 71 28 22 74 72 61 63 6b 22 2c 22 41 64 64 54 6f 43 61 72 74 22 2c 7b 76 61 6c 75 65 3a 69 2c 63 75 72 72 65 6e 63 79 3a 74 2e 63 75 72 72 65 6e 63 79 2c 63 6f 6e 74 65 6e 74 5f 74 79 70 65 3a 22 70 72 6f 64 75 63 74 22 2c 63 6f 6e 74 65 6e 74 73 3a 6f 2c 63 6f 6e 74 65 6e 74 5f 69 64 73 3a 73 7d 2c 7b 65 76 Data Ascii: .product_id,s=[n];let o=[{id:n,quantity:1,item_price:i}];_.each(t.options,(e,t)=>{i+=e.price,o.push({id:"option:"+t,quantity:1,item_price:e.price})}),fbq("track","AddToCart",{value:i,currency:t.currency,content_type:"product",contents:o,content_ids:s},{ev
2025-01-07 18:40:20 UTC	1369	IN	Data Raw: 65 29 7d 66 75 6e 63 74 69 6f 6e 20 58 28 65 29 7b 72 65 74 75 72 6e 20 50 28 65 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 2e 74 68 65 6e 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 2e 63 61 74 63 68 7d 66 75 6e 63 74 69 6f 6e 20 67 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 22 22 3a 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 7c 7c 46 28 65 29 26 26 65 2e 74 6f 53 74 72 69 6e 67 3d 3d 3d 66 3f 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 2c 6e 75 6c 6c 2c 32 29 3a 53 74 72 69 6e 67 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 5a 28 65 29 7b 76 61 72 20 74 3d 70 61 72 73 65 46 6c 6f 61 74 28 65 29 3b 72 65 74 75 72 6e 20 69 73 4e 61 4e 28 74 29 3f 65 3a 74 7d 66 75 6e 63 74 69 6f 6e 20 73 28 Data Ascii: e)}function X(e){return P(e)&&"function"==typeof e.then&&"function"==typeof e.catch}function g(e){return null==e?"":Array.isArray(e)\|\|F(e)&&e.toString===f?JSON.stringify(e,null,2):String(e)}function Z(e){var t=parseFloat(e);return isNaN(t)?e:t}function s(
2025-01-07 18:40:20 UTC	1369	IN	Data Raw: 2c 74 2c 69 29 7b 72 65 74 75 72 6e 21 31 7d 2c 4a 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 51 28 74 2c 69 29 7b 69 66 28 74 3d 3d 3d 69 29 72 65 74 75 72 6e 21 30 3b 76 61 72 20 65 3d 48 28 74 29 2c 6e 3d 48 28 69 29 3b 69 66 28 21 65 7c 7c 21 6e 29 72 65 74 75 72 6e 21 65 26 26 21 6e 26 26 53 74 72 69 6e 67 28 74 29 3d 3d 3d 53 74 72 69 6e 67 28 69 29 3b 74 72 79 7b 76 61 72 20 73 2c 6f 2c 72 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 29 2c 61 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 69 29 3b 72 65 74 75 72 6e 20 72 26 26 61 3f 74 2e 6c 65 6e 67 74 68 3d 3d 3d 69 2e 6c 65 6e 67 74 68 26 26 74 2e 65 76 65 72 79 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 51 28 65 2c 69 Data Ascii: ,t,i){return!1},J=function(e){return e};function Q(t,i){if(t===i)return!0;var e=H(t),n=H(i);if(!e\|\|!n)return!e&&!n&&String(t)===String(i);try{var s,o,r=Array.isArray(t),a=Array.isArray(i);return r&&a?t.length===i.length&&t.every(function(e,t){return Q(e,i
2025-01-07 18:40:20 UTC	1369	IN	Data Raw: 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 21 6e 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 7d 76 61 72 20 72 65 2c 61 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5b 5e 22 2b 73 65 2e 73 6f 75 72 63 65 2b 22 2e 24 5f 5c 5c 64 5d 22 29 2c 6c 65 3d 22 5f 5f 70 72 6f 74 6f 5f 5f 22 69 6e 7b 7d 2c 6f 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2c 63 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 57 58 45 6e 76 69 72 6f 6e 6d 65 6e 74 26 26 21 21 57 58 45 6e 76 69 72 6f 6e 6d 65 6e 74 2e 70 6c 61 74 66 6f 72 6d 2c 69 3d 63 65 26 26 57 58 45 6e 76 69 72 6f 6e 6d 65 6e 74 2e 70 6c 61 74 66 6f 72 6d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 6e 3d 6f 26 26 77 69 6e Data Ascii: ,enumerable:!!n,writable:!0,configurable:!0})}var re,ae=new RegExp("[^"+se.source+".$_\\d]"),le="__proto__"in{},o="undefined"!=typeof window,ce="undefined"!=typeof WXEnvironment&&!!WXEnvironment.platform,i=ce&&WXEnvironment.platform.toLowerCase(),n=o&&win
2025-01-07 18:40:20 UTC	1369	IN	Data Raw: 68 69 73 2e 73 75 62 73 2e 70 75 73 68 28 65 29 7d 2c 64 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6d 6f 76 65 53 75 62 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 56 28 74 68 69 73 2e 73 75 62 73 2c 65 29 7d 2c 64 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 70 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 2e 74 61 72 67 65 74 26 26 64 2e 74 61 72 67 65 74 2e 61 64 64 44 65 70 28 74 68 69 73 29 7d 2c 64 2e 70 72 6f 74 6f 74 79 70 65 2e 6e 6f 74 69 66 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 68 69 73 2e 73 75 62 73 2e 73 6c 69 63 65 28 29 2c 74 3d 30 2c 69 3d 65 2e 6c 65 6e 67 74 68 3b 74 3c 69 3b 74 2b 2b 29 65 5b 74 5d 2e 75 70 64 61 74 65 28 29 7d 2c 64 2e 74 61 72 67 65 74 3d 6e 75 6c 6c 2c 5b 5d 29 3b 66 75 6e 63 74 69 6f 6e 20 78 Data Ascii: his.subs.push(e)},d.prototype.removeSub=function(e){V(this.subs,e)},d.prototype.depend=function(){d.target&&d.target.addDep(this)},d.prototype.notify=function(){for(var e=this.subs.slice(),t=0,i=e.length;t<i;t++)e[t].update()},d.target=null,[]);function x
2025-01-07 18:40:20 UTC	1369	IN	Data Raw: 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2c 4f 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 41 65 29 2c 44 65 3d 28 5b 22 70 75 73 68 22 2c 22 70 6f 70 22 2c 22 73 68 69 66 74 22 2c 22 75 6e 73 68 69 66 74 22 2c 22 73 70 6c 69 63 65 22 2c 22 73 6f 72 74 22 2c 22 72 65 76 65 72 73 65 22 5d 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 76 61 72 20 72 3d 41 65 5b 6f 5d 3b 6f 65 28 4f 65 2c 6f 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2d 2d 3b 29 65 5b 74 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 76 61 72 20 69 2c 6e 3d 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 65 29 2c 73 3d 74 68 69 73 2e 5f 5f 6f 62 5f 5f 3b 73 77 69 74 63 68 28 6f 29 7b 63 61 73 Data Ascii: ray.prototype,Oe=Object.create(Ae),De=(["push","pop","shift","unshift","splice","sort","reverse"].forEach(function(o){var r=Ae[o];oe(Oe,o,function(){for(var e=[],t=arguments.length;t--;)e[t]=arguments[t];var i,n=r.apply(this,e),s=this.__ob__;switch(o){cas

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49747	35.190.80.1	443	3060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-07 18:40:20 UTC	486	OUT	POST /report/v4?s=RCthQibdhKiT2oy837jrtvUaFVHG8d8%2Bp0vmAAd%2FuXmx%2FZwP%2BfRAUH7LClhVScVkXgU6y2gxmvdupLivB0XIMvcSdFAqYyks26cqwu6suRyCYQEv4pAHqH0jmvXnySSZXekRLvkfXpm9 HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 490 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-07 18:40:20 UTC	490	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 31 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 34 38 39 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 63 72 65 64 69 74 75 6e 69 6f 6e 73 2e 74 61 70 6c 69 6e 6b 2e 77 73 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 36 2e 31 30 2e 34 37 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 72 65 73 70 6f 6e 73 65 2e 69 6e 76 61 6c 69 64 2e 69 6e 63 6f 6d 70 6c 65 74 65 5f 63 68 75 Data Ascii: [{"age":1,"body":{"elapsed_time":489,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://creditunions.taplink.ws/","sampling_fraction":1.0,"server_ip":"104.26.10.47","status_code":200,"type":"http.response.invalid.incomplete_chu
2025-01-07 18:40:20 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Tue, 07 Jan 2025 18:40:20 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49748	104.26.10.47	443	3060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-07 18:40:20 UTC	564	OUT	GET /s/js/locales.pages.en.js?1.2.9105 HTTP/1.1 Host: creditunions.taplink.ws Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://creditunions.taplink.ws/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-07 18:40:20 UTC	1073	IN	HTTP/1.1 200 OK Date: Tue, 07 Jan 2025 18:40:20 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Sat, 28 Dec 2024 12:52:13 GMT ETag: W/"676ff47d-ab6" Expires: Tue, 08 Jul 2025 17:44:24 GMT Cache-Control: max-age=15724800 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: unsafe-url CF-Cache-Status: HIT Age: 3356 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=h1sjsoFeBqpSLWtZK1ijbTCaQNWt7XkcW4oPlkbz5prKnXTb%2FxJxuHCM%2FJcy9AndLjafSmcEHKDSLhjetUm8hMssPPc8TQavBk8aXG6s%2FNNk%2Bnif9%2B2iyClcsFTudUGlQ5kq4fFX9GTP"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fe6135f0b347d24-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2156&min_rtt=2086&rtt_var=832&sent=3&recv=6&lost=0&retrans=0&sent_bytes=2821&recv_bytes=1142&delivery_rate=1399808&cwnd=193&unsent_bytes=0&cid=ecfcb55fc51beff6&ts=141&x=0"
2025-01-07 18:40:20 UTC	296	IN	Data Raw: 32 30 62 36 0d 0a 2f 2a 20 31 2e 32 2e 39 31 30 33 20 2a 2f 0a 77 69 6e 64 6f 77 2e 24 61 70 70 2e 64 65 66 69 6e 65 4c 61 6e 67 75 61 67 65 28 22 65 6e 22 2c 30 2c 7b 22 d0 92 d0 a1 22 3a 22 53 75 6e 22 2c 22 d0 92 d0 a2 22 3a 22 54 75 65 22 2c 22 d0 94 d0 b0 22 3a 22 59 65 73 22 2c 22 d0 9f d0 9d 22 3a 22 4d 6f 6e 22 2c 22 d0 9f d0 a2 22 3a 22 46 72 69 22 2c 22 d0 a1 d0 91 22 3a 22 53 61 74 22 2c 22 d0 a1 d0 a0 22 3a 22 57 65 64 22 2c 22 d0 a7 d0 a2 22 3a 22 54 68 75 22 2c 22 d0 b8 d0 b7 22 3a 22 6f 75 74 20 6f 66 22 2c 45 6d 61 69 6c 3a 22 45 6d 61 69 6c 22 2c 22 d1 88 d1 82 2e 22 3a 22 70 63 73 2e 22 2c 22 d0 94 d0 bd d0 b8 22 3a 22 44 61 79 73 22 2c 22 d0 98 d0 bc d1 8f 22 3a 22 4e 61 6d 65 22 2c 22 d0 9a d0 be d0 b4 22 3a 22 43 6f 64 65 22 2c 22 d0 Data Ascii: 20b6/* 1.2.9103 */window.$app.defineLanguage("en",0,{"":"Sun","":"Tue","":"Yes","":"Mon","":"Fri","":"Sat","":"Wed","":"Thu","":"out of",Email:"Email",".":"pcs.","":"Days","":"Name","":"Code","
2025-01-07 18:40:20 UTC	1369	IN	Data Raw: 20 6e 61 6d 65 22 2c 22 d0 98 d1 8e d0 bb d1 8c 22 3a 22 4a 75 6c 79 22 2c 22 d0 98 d1 8e d0 bd d1 8c 22 3a 22 4a 75 6e 65 22 2c 22 d0 9c d0 b0 d1 80 d1 82 22 3a 22 4d 61 72 63 68 22 2c 22 d0 a4 d0 b0 d0 b9 d0 bb 22 3a 22 46 69 6c 65 22 2c 22 d0 a7 d0 b0 d1 81 d1 8b 22 3a 22 48 6f 75 72 73 22 2c 22 d0 af d0 b7 d1 8b d0 ba 22 3a 22 4c 61 6e 67 75 61 67 65 22 2c 22 d0 90 d0 b4 d1 80 d0 b5 d1 81 22 3a 22 41 64 64 72 65 73 73 22 2c 22 d0 92 d0 be d0 b9 d1 82 d0 b8 22 3a 22 53 69 67 6e 20 69 6e 22 2c 22 d0 92 d1 8b d0 b1 d0 be d1 80 22 3a 22 52 61 64 69 6f 20 62 75 74 74 6f 6e 22 2c 22 d0 92 d1 8b d0 b9 d1 82 d0 b8 22 3a 22 4c 6f 67 6f 75 74 22 2c 22 d0 93 d0 be d1 80 d0 be d0 b4 22 3a 22 43 69 74 79 22 2c 22 d0 98 d1 82 d0 be d0 b3 d0 be 22 3a 22 54 6f 74 61 Data Ascii: name","":"July","":"June","":"March","":"File","":"Hours","":"Language","":"Address","":"Sign in","":"Radio button","":"Logout","":"City","":"Tota
2025-01-07 18:40:20 UTC	1369	IN	Data Raw: 72 22 2c 22 d0 91 d0 b5 d0 b7 20 d0 b8 d0 bc d0 b5 d0 bd d0 b8 22 3a 22 4e 6f 20 6e 61 6d 65 22 2c 22 d0 92 20 d0 bd d0 b0 d0 bb d0 b8 d1 87 d0 b8 d0 b8 22 3a 22 49 6e 20 73 74 6f 63 6b 22 2c 22 d0 91 d0 b5 d1 81 d0 bf d0 bb d0 b0 d1 82 d0 bd d0 be 22 3a 22 46 72 65 65 22 2c 22 d0 97 d0 b0 d0 b3 d0 be d0 bb d0 be d0 b2 d0 be d0 ba 22 3a 22 48 65 61 64 6c 69 6e 65 22 2c 22 d0 9a d0 be d0 bb d0 bb d0 b5 d0 ba d1 86 d0 b8 d1 8f 22 3a 22 43 6f 6c 6c 65 63 74 69 6f 6e 22 2c 22 d0 9e d1 82 d0 bf d1 80 d0 b0 d0 b2 d0 b8 d1 82 d1 8c 22 3a 22 53 75 62 6d 69 74 22 2c 22 d0 9f d0 be d0 bb d0 be d0 b6 d0 b5 d0 bd d0 b8 d0 b5 22 3a 22 50 6f 73 69 74 69 6f 6e 22 2c 22 d0 9f d1 80 d0 b8 d0 bc d0 b5 d0 bd d0 b8 d1 82 d1 8c 22 3a 22 41 70 70 6c 79 22 2c 22 d0 a1 d0 b0 d0 Data Ascii: r"," ":"No name"," ":"In stock","":"Free","":"Headline","":"Collection","":"Submit","":"Position","":"Apply","
2025-01-07 18:40:20 UTC	1369	IN	Data Raw: 20 77 69 74 68 20 70 61 73 73 77 6f 72 64 22 2c 22 d0 9f d0 be d0 b4 d1 82 d0 b2 d0 b5 d1 80 d0 b6 d0 b4 d0 b5 d0 bd d0 b8 d0 b5 22 3a 22 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 22 2c 22 d0 92 d0 b2 d0 b5 d0 b4 d0 b8 d1 82 d0 b5 20 d0 bf d0 b0 d1 80 d0 be d0 bb d1 8c 22 3a 22 45 6e 74 65 72 20 70 61 73 73 77 6f 72 64 22 2c 22 d0 97 d0 b0 d0 b2 d0 b5 d1 80 d1 88 d0 b8 d1 82 d1 8c 20 d1 83 d1 80 d0 be d0 ba 22 3a 22 46 69 6e 69 73 68 20 6c 65 73 73 6f 6e 22 2c 22 d0 9e d0 bf d1 86 d0 b8 d0 b8 20 d0 b4 d0 be d1 81 d1 82 d0 b0 d0 b2 d0 ba d0 b8 22 3a 22 44 65 6c 69 76 65 72 79 20 6f 70 74 69 6f 6e 73 22 2c 22 d0 9e d1 84 d0 be d1 80 d0 bc d0 b8 d1 82 d1 8c 20 d0 b7 d0 b0 d0 ba d0 b0 d0 b7 22 3a 22 50 6c 61 63 65 20 61 6e 20 6f 72 64 65 72 22 2c 22 d0 9f d0 be d0 Data Ascii: with password","":"Confirmation"," ":"Enter password"," ":"Finish lesson"," ":"Delivery options"," ":"Place an order","
2025-01-07 18:40:20 UTC	1369	IN	Data Raw: d0 be d0 b2 d0 b0 d1 82 d1 8c 20 d1 82 d0 b5 d0 ba d1 81 d1 82 22 3a 22 45 64 69 74 20 74 65 78 74 22 2c 22 d0 a1 d0 be d1 85 d1 80 d0 b0 d0 bd d0 b8 d1 82 d1 8c 20 d0 b8 d0 b7 d0 bc d0 b5 d0 bd d0 b5 d0 bd d0 b8 d1 8f 22 3a 22 53 61 76 65 20 63 68 61 6e 67 65 73 22 2c 22 d0 9e d1 82 d0 bf d1 80 d0 b0 d0 b2 d0 b8 d1 82 d1 8c 20 d0 bd d0 b0 20 d0 bf d1 80 d0 be d0 b2 d0 b5 d1 80 d0 ba d1 83 22 3a 22 53 75 62 6d 69 74 20 66 6f 72 20 72 65 76 69 65 77 22 2c 22 d0 90 d0 ba d1 82 d0 b8 d0 b2 d0 b8 d1 80 d0 be d0 b2 d0 b0 d1 82 d1 8c 20 d0 bf d1 80 d0 be d0 bc d0 be d0 ba d0 be d0 b4 22 3a 22 41 63 74 69 76 61 74 65 20 70 72 6f 6d 6f 20 63 6f 64 65 22 2c 22 d0 92 d0 b2 d0 b5 d0 b4 d0 b8 d1 82 d0 b5 20 d0 ba d0 be d1 80 d1 80 d0 b5 d0 ba d1 82 d0 bd d1 8b d0 b9 Data Ascii: ":"Edit text"," ":"Save changes"," ":"Submit for review"," ":"Activate promo code","
2025-01-07 18:40:20 UTC	1369	IN	Data Raw: b4 20 d0 b4 d0 be d1 81 d1 82 d0 b0 d0 b2 d0 ba d0 b8 22 3a 22 50 6c 65 61 73 65 20 73 65 6c 65 63 74 20 61 20 64 65 6c 69 76 65 72 79 20 6d 65 74 68 6f 64 22 2c 22 d0 92 20 d0 bc d0 b0 d0 b3 d0 b0 d0 b7 d0 b8 d0 bd d0 b5 20 d0 bf d0 be d0 ba d0 b0 20 d0 be d1 82 d1 81 d1 83 d1 82 d1 81 d1 82 d0 b2 d1 83 d1 8e d1 82 20 d1 82 d0 be d0 b2 d0 b0 d1 80 d1 8b 22 3a 22 54 68 65 72 65 20 61 72 65 20 6e 6f 20 70 72 6f 64 75 63 74 73 20 69 6e 20 74 68 65 20 73 68 6f 70 22 2c 22 d0 9d d0 b5 d0 be d0 b1 d1 85 d0 be d0 b4 d0 b8 d0 bc d0 be 20 d1 83 d0 ba d0 b0 d0 b7 d0 b0 d1 82 d1 8c 20 d1 8d d0 bb d0 b5 d0 ba d1 82 d1 80 d0 be d0 bd d0 bd d1 83 d1 8e 20 d0 bf d0 be d1 87 d1 82 d1 83 22 3a 22 59 6f 75 20 6e 65 65 64 20 74 6f 20 65 6e 74 65 72 20 79 6f 75 72 20 65 6d Data Ascii: ":"Please select a delivery method"," ":"There are no products in the shop"," ":"You need to enter your em
2025-01-07 18:40:20 UTC	1241	IN	Data Raw: d0 b3 d0 be d0 b9 20 d0 b0 d0 ba d0 ba d0 b0 d1 83 d0 bd d1 82 3f 22 3a 22 59 6f 75 20 61 72 65 20 63 75 72 72 65 6e 74 6c 79 20 6c 6f 67 67 65 64 20 69 6e 20 61 73 20 7b 31 7d 2e 20 57 6f 75 6c 64 20 79 6f 75 20 6c 69 6b 65 20 74 6f 20 6c 6f 67 20 6f 75 74 20 61 6e 64 20 66 69 6c 6c 20 6f 75 74 20 61 6e 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 66 6f 72 6d 20 77 69 74 68 20 64 69 66 66 65 72 65 6e 74 20 61 63 63 6f 75 6e 74 3f 22 2c 27 d0 9c d1 8b 20 d0 be d1 82 d0 bf d1 80 d0 b0 d0 b2 d0 b8 d0 bb d0 b8 20 d0 bf d1 80 d0 be d0 b2 d0 b5 d1 80 d0 be d1 87 d0 bd d1 8b d0 b9 20 d0 ba d0 be d0 b4 20 d0 bd d0 b0 20 d0 b2 d0 b0 d1 88 d1 83 20 d1 8d d0 bb d0 b5 d0 ba d1 82 d1 80 d0 be d0 bd d0 bd d1 83 d1 8e 20 d0 bf d0 be d1 87 d1 82 d1 83 2e 20 d0 92 d0 b2 d0 b5 Data Ascii: ?":"You are currently logged in as {1}. Would you like to log out and fill out an application form with different account?",' .
2025-01-07 18:40:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49749	87.250.250.119	443	3060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-07 18:40:20 UTC	698	OUT	GET /watch/44929738?page-ref=&page-url=https%3A%2F%2Fcreditunions.taplink.ws%2F&browser-info=la%3Aen-US&rn=0.842207389920755 HTTP/1.1 Host: mc.yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://creditunions.taplink.ws/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-07 18:40:20 UTC	1877	IN	HTTP/1.1 302 Moved temporarily Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Date: Tue, 07 Jan 2025 18:40:20 GMT Expires: Tue, 07-Jan-2025 18:40:20 GMT Last-Modified: Tue, 07-Jan-2025 18:40:20 GMT Location: /watch/44929738/1?page-ref&page-url=https%3A%2F%2Fcreditunions.taplink.ws%2F&browser-info=la%3Aen-US&rn=0.842207389920755&redirnss=1 Pragma: no-cache Set-Cookie: yabs-sid=2546279251736275220; Path=/; SameSite=None; Secure Set-Cookie: i=fQiJpOgFWmls1LcaxhZAIoP0aJXP647hCU7vgrAkmvw59qSPpxdahQ7z7lf9bb7BuAfhzA60FrSLc/MLD+X/quFvEb8=; Expires=Fri, 05-Jan-2035 18:40:18 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: yandexuid=6405333871736275220; Expires=Fri, 05-Jan-2035 18:40:18 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None Set-Cookie: yuidss=6405333871736275220; Expires=Wed, 07-Jan-2026 18:40:20 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure Set-Cookie: ymex=1767811220.yrts.1736275220#1767811220.yrtsi.1736275220; Expires=Wed, 07-Jan-2026 18:40:20 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure Set-Cookie: receive-cookie-deprecation=1; Expires=Wed, 07-Jan-2026 18:40:20 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure; HttpOnly; Partitioned Set-Cookie: bh=EkAiR29vZ2xlIENocm9tZSI7dj0iMTE3IiwgIk5vdDtBPUJyYW5kIjt2PSI4IiwgIkNocm9taXVtIjt2PSIxMTciKgI/MDoJIldpbmRvd3Mi; Expires=Wed, 07-Jan-2026 18:40:20 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000 Transfer-Encoding: chunked X-XSS-Protection: 1; mode=block
2025-01-07 18:40:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49751	172.67.74.23	443	3060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-07 18:40:21 UTC	380	OUT	GET /s/js/locales.pages.en.js?1.2.9105 HTTP/1.1 Host: creditunions.taplink.ws Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-07 18:40:21 UTC	1071	IN	HTTP/1.1 200 OK Date: Tue, 07 Jan 2025 18:40:21 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Sat, 28 Dec 2024 12:52:13 GMT ETag: W/"676ff47d-ab6" Expires: Tue, 08 Jul 2025 17:44:24 GMT Cache-Control: max-age=15724800 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: unsafe-url CF-Cache-Status: HIT Age: 3357 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=J18soK%2F7TEYLXMxQeMCEvkeHZzzIFXstT3ZAxZgYTQzvM7FlNN%2BoPNbGygqw%2FnAIGX7NHnG1Knb6Bmccimy9J5olvSYdBwZlp08RCPYSbGC1N%2BVWMECVEhSQlAm554k5Mgiu232NHScs"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fe613650ecd4352-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=9237&min_rtt=1647&rtt_var=5270&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2823&recv_bytes=958&delivery_rate=1772920&cwnd=239&unsent_bytes=0&cid=02b1a5c64cbaf35a&ts=163&x=0"
2025-01-07 18:40:21 UTC	298	IN	Data Raw: 32 30 62 36 0d 0a 2f 2a 20 31 2e 32 2e 39 31 30 33 20 2a 2f 0a 77 69 6e 64 6f 77 2e 24 61 70 70 2e 64 65 66 69 6e 65 4c 61 6e 67 75 61 67 65 28 22 65 6e 22 2c 30 2c 7b 22 d0 92 d0 a1 22 3a 22 53 75 6e 22 2c 22 d0 92 d0 a2 22 3a 22 54 75 65 22 2c 22 d0 94 d0 b0 22 3a 22 59 65 73 22 2c 22 d0 9f d0 9d 22 3a 22 4d 6f 6e 22 2c 22 d0 9f d0 a2 22 3a 22 46 72 69 22 2c 22 d0 a1 d0 91 22 3a 22 53 61 74 22 2c 22 d0 a1 d0 a0 22 3a 22 57 65 64 22 2c 22 d0 a7 d0 a2 22 3a 22 54 68 75 22 2c 22 d0 b8 d0 b7 22 3a 22 6f 75 74 20 6f 66 22 2c 45 6d 61 69 6c 3a 22 45 6d 61 69 6c 22 2c 22 d1 88 d1 82 2e 22 3a 22 70 63 73 2e 22 2c 22 d0 94 d0 bd d0 b8 22 3a 22 44 61 79 73 22 2c 22 d0 98 d0 bc d1 8f 22 3a 22 4e 61 6d 65 22 2c 22 d0 9a d0 be d0 b4 22 3a 22 43 6f 64 65 22 2c 22 d0 Data Ascii: 20b6/* 1.2.9103 */window.$app.defineLanguage("en",0,{"":"Sun","":"Tue","":"Yes","":"Mon","":"Fri","":"Sat","":"Wed","":"Thu","":"out of",Email:"Email",".":"pcs.","":"Days","":"Name","":"Code","
2025-01-07 18:40:21 UTC	1369	IN	Data Raw: 61 6d 65 22 2c 22 d0 98 d1 8e d0 bb d1 8c 22 3a 22 4a 75 6c 79 22 2c 22 d0 98 d1 8e d0 bd d1 8c 22 3a 22 4a 75 6e 65 22 2c 22 d0 9c d0 b0 d1 80 d1 82 22 3a 22 4d 61 72 63 68 22 2c 22 d0 a4 d0 b0 d0 b9 d0 bb 22 3a 22 46 69 6c 65 22 2c 22 d0 a7 d0 b0 d1 81 d1 8b 22 3a 22 48 6f 75 72 73 22 2c 22 d0 af d0 b7 d1 8b d0 ba 22 3a 22 4c 61 6e 67 75 61 67 65 22 2c 22 d0 90 d0 b4 d1 80 d0 b5 d1 81 22 3a 22 41 64 64 72 65 73 73 22 2c 22 d0 92 d0 be d0 b9 d1 82 d0 b8 22 3a 22 53 69 67 6e 20 69 6e 22 2c 22 d0 92 d1 8b d0 b1 d0 be d1 80 22 3a 22 52 61 64 69 6f 20 62 75 74 74 6f 6e 22 2c 22 d0 92 d1 8b d0 b9 d1 82 d0 b8 22 3a 22 4c 6f 67 6f 75 74 22 2c 22 d0 93 d0 be d1 80 d0 be d0 b4 22 3a 22 43 69 74 79 22 2c 22 d0 98 d1 82 d0 be d0 b3 d0 be 22 3a 22 54 6f 74 61 6c 22 Data Ascii: ame","":"July","":"June","":"March","":"File","":"Hours","":"Language","":"Address","":"Sign in","":"Radio button","":"Logout","":"City","":"Total"
2025-01-07 18:40:21 UTC	1369	IN	Data Raw: 2c 22 d0 91 d0 b5 d0 b7 20 d0 b8 d0 bc d0 b5 d0 bd d0 b8 22 3a 22 4e 6f 20 6e 61 6d 65 22 2c 22 d0 92 20 d0 bd d0 b0 d0 bb d0 b8 d1 87 d0 b8 d0 b8 22 3a 22 49 6e 20 73 74 6f 63 6b 22 2c 22 d0 91 d0 b5 d1 81 d0 bf d0 bb d0 b0 d1 82 d0 bd d0 be 22 3a 22 46 72 65 65 22 2c 22 d0 97 d0 b0 d0 b3 d0 be d0 bb d0 be d0 b2 d0 be d0 ba 22 3a 22 48 65 61 64 6c 69 6e 65 22 2c 22 d0 9a d0 be d0 bb d0 bb d0 b5 d0 ba d1 86 d0 b8 d1 8f 22 3a 22 43 6f 6c 6c 65 63 74 69 6f 6e 22 2c 22 d0 9e d1 82 d0 bf d1 80 d0 b0 d0 b2 d0 b8 d1 82 d1 8c 22 3a 22 53 75 62 6d 69 74 22 2c 22 d0 9f d0 be d0 bb d0 be d0 b6 d0 b5 d0 bd d0 b8 d0 b5 22 3a 22 50 6f 73 69 74 69 6f 6e 22 2c 22 d0 9f d1 80 d0 b8 d0 bc d0 b5 d0 bd d0 b8 d1 82 d1 8c 22 3a 22 41 70 70 6c 79 22 2c 22 d0 a1 d0 b0 d0 bc d0 Data Ascii: ," ":"No name"," ":"In stock","":"Free","":"Headline","":"Collection","":"Submit","":"Position","":"Apply","
2025-01-07 18:40:21 UTC	1369	IN	Data Raw: 69 74 68 20 70 61 73 73 77 6f 72 64 22 2c 22 d0 9f d0 be d0 b4 d1 82 d0 b2 d0 b5 d1 80 d0 b6 d0 b4 d0 b5 d0 bd d0 b8 d0 b5 22 3a 22 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 22 2c 22 d0 92 d0 b2 d0 b5 d0 b4 d0 b8 d1 82 d0 b5 20 d0 bf d0 b0 d1 80 d0 be d0 bb d1 8c 22 3a 22 45 6e 74 65 72 20 70 61 73 73 77 6f 72 64 22 2c 22 d0 97 d0 b0 d0 b2 d0 b5 d1 80 d1 88 d0 b8 d1 82 d1 8c 20 d1 83 d1 80 d0 be d0 ba 22 3a 22 46 69 6e 69 73 68 20 6c 65 73 73 6f 6e 22 2c 22 d0 9e d0 bf d1 86 d0 b8 d0 b8 20 d0 b4 d0 be d1 81 d1 82 d0 b0 d0 b2 d0 ba d0 b8 22 3a 22 44 65 6c 69 76 65 72 79 20 6f 70 74 69 6f 6e 73 22 2c 22 d0 9e d1 84 d0 be d1 80 d0 bc d0 b8 d1 82 d1 8c 20 d0 b7 d0 b0 d0 ba d0 b0 d0 b7 22 3a 22 50 6c 61 63 65 20 61 6e 20 6f 72 64 65 72 22 2c 22 d0 9f d0 be d0 bb d1 Data Ascii: ith password","":"Confirmation"," ":"Enter password"," ":"Finish lesson"," ":"Delivery options"," ":"Place an order","
2025-01-07 18:40:21 UTC	1369	IN	Data Raw: d0 b2 d0 b0 d1 82 d1 8c 20 d1 82 d0 b5 d0 ba d1 81 d1 82 22 3a 22 45 64 69 74 20 74 65 78 74 22 2c 22 d0 a1 d0 be d1 85 d1 80 d0 b0 d0 bd d0 b8 d1 82 d1 8c 20 d0 b8 d0 b7 d0 bc d0 b5 d0 bd d0 b5 d0 bd d0 b8 d1 8f 22 3a 22 53 61 76 65 20 63 68 61 6e 67 65 73 22 2c 22 d0 9e d1 82 d0 bf d1 80 d0 b0 d0 b2 d0 b8 d1 82 d1 8c 20 d0 bd d0 b0 20 d0 bf d1 80 d0 be d0 b2 d0 b5 d1 80 d0 ba d1 83 22 3a 22 53 75 62 6d 69 74 20 66 6f 72 20 72 65 76 69 65 77 22 2c 22 d0 90 d0 ba d1 82 d0 b8 d0 b2 d0 b8 d1 80 d0 be d0 b2 d0 b0 d1 82 d1 8c 20 d0 bf d1 80 d0 be d0 bc d0 be d0 ba d0 be d0 b4 22 3a 22 41 63 74 69 76 61 74 65 20 70 72 6f 6d 6f 20 63 6f 64 65 22 2c 22 d0 92 d0 b2 d0 b5 d0 b4 d0 b8 d1 82 d0 b5 20 d0 ba d0 be d1 80 d1 80 d0 b5 d0 ba d1 82 d0 bd d1 8b d0 b9 20 65 Data Ascii: ":"Edit text"," ":"Save changes"," ":"Submit for review"," ":"Activate promo code"," e
2025-01-07 18:40:21 UTC	1369	IN	Data Raw: d0 b4 d0 be d1 81 d1 82 d0 b0 d0 b2 d0 ba d0 b8 22 3a 22 50 6c 65 61 73 65 20 73 65 6c 65 63 74 20 61 20 64 65 6c 69 76 65 72 79 20 6d 65 74 68 6f 64 22 2c 22 d0 92 20 d0 bc d0 b0 d0 b3 d0 b0 d0 b7 d0 b8 d0 bd d0 b5 20 d0 bf d0 be d0 ba d0 b0 20 d0 be d1 82 d1 81 d1 83 d1 82 d1 81 d1 82 d0 b2 d1 83 d1 8e d1 82 20 d1 82 d0 be d0 b2 d0 b0 d1 80 d1 8b 22 3a 22 54 68 65 72 65 20 61 72 65 20 6e 6f 20 70 72 6f 64 75 63 74 73 20 69 6e 20 74 68 65 20 73 68 6f 70 22 2c 22 d0 9d d0 b5 d0 be d0 b1 d1 85 d0 be d0 b4 d0 b8 d0 bc d0 be 20 d1 83 d0 ba d0 b0 d0 b7 d0 b0 d1 82 d1 8c 20 d1 8d d0 bb d0 b5 d0 ba d1 82 d1 80 d0 be d0 bd d0 bd d1 83 d1 8e 20 d0 bf d0 be d1 87 d1 82 d1 83 22 3a 22 59 6f 75 20 6e 65 65 64 20 74 6f 20 65 6e 74 65 72 20 79 6f 75 72 20 65 6d 61 69 Data Ascii: ":"Please select a delivery method"," ":"There are no products in the shop"," ":"You need to enter your emai
2025-01-07 18:40:21 UTC	1239	IN	Data Raw: d0 be d0 b9 20 d0 b0 d0 ba d0 ba d0 b0 d1 83 d0 bd d1 82 3f 22 3a 22 59 6f 75 20 61 72 65 20 63 75 72 72 65 6e 74 6c 79 20 6c 6f 67 67 65 64 20 69 6e 20 61 73 20 7b 31 7d 2e 20 57 6f 75 6c 64 20 79 6f 75 20 6c 69 6b 65 20 74 6f 20 6c 6f 67 20 6f 75 74 20 61 6e 64 20 66 69 6c 6c 20 6f 75 74 20 61 6e 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 66 6f 72 6d 20 77 69 74 68 20 64 69 66 66 65 72 65 6e 74 20 61 63 63 6f 75 6e 74 3f 22 2c 27 d0 9c d1 8b 20 d0 be d1 82 d0 bf d1 80 d0 b0 d0 b2 d0 b8 d0 bb d0 b8 20 d0 bf d1 80 d0 be d0 b2 d0 b5 d1 80 d0 be d1 87 d0 bd d1 8b d0 b9 20 d0 ba d0 be d0 b4 20 d0 bd d0 b0 20 d0 b2 d0 b0 d1 88 d1 83 20 d1 8d d0 bb d0 b5 d0 ba d1 82 d1 80 d0 be d0 bd d0 bd d1 83 d1 8e 20 d0 bf d0 be d1 87 d1 82 d1 83 2e 20 d0 92 d0 b2 d0 b5 d0 b4 Data Ascii: ?":"You are currently logged in as {1}. Would you like to log out and fill out an application form with different account?",' .
2025-01-07 18:40:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49752	104.26.3.150	443	3060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-07 18:40:21 UTC	599	OUT	GET /a/9/8/8/2/c3da8e.png?1 HTTP/1.1 Host: taplink.st Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://creditunions.taplink.ws/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-07 18:40:21 UTC	1315	IN	HTTP/1.1 200 OK Date: Tue, 07 Jan 2025 18:40:21 GMT Content-Type: image/png Content-Length: 32157 Connection: close Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Cache-Control, Content-Language, Content-Type, Expires, Last-Modified, Pragma, Etag, X-Timestamp, X-Trans-Id, X-Openstack-Request-Id, Content-Length, Accept-Ranges, Expires, Cache-Control Cache-Control: max-age=31536000 Etag: "0e75507835b8db4dfef092da15c6856b" Expires: Fri, 31 Jan 2025 15:00:00 GMT Last-Modified: Tue, 07 Jan 2025 17:19:29 GMT x-container-storage-policy-index: 0 x-container-storage-policy-name: Policy-0 X-Timestamp: 1736270368.81141 X-Trans-Id: 181878b386fabb96 Age: 2599 CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e6ChHEln%2BLBToILnnGrn5ZweFlX7C4N7JKJ6eta2ygAOvQfyHUKdbZkBBqC%2FGHv8Wcwtc0J53mFMsjpKrxkbK2zhYftG%2B35xWhHB3FPKnfEIOcFAkIi7ORvP7ag%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fe613653d5815bb-EWR server-timing: cfL4;desc="?proto=TCP&rtt=12957&min_rtt=1555&rtt_var=7472&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2820&recv_bytes=1177&delivery_rate=1877813&cwnd=113&unsent_bytes=0&cid=f468351e4193fc1c&ts=169&x=0"
2025-01-07 18:40:21 UTC	54	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 ba 00 00 00 ba 08 06 00 00 00 19 0e 57 f1 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 Data Ascii: PNGIHDRWsRGB IDAT
2025-01-07 18:40:21 UTC	1369	IN	Data Raw: 78 5e ec bd d7 77 64 d7 95 e6 f9 85 0f 00 01 13 08 f8 30 f0 de a4 f7 86 14 29 53 53 55 2a 55 8b 22 bb 57 f7 5a 53 aa ae 79 98 59 33 25 55 cf df 31 25 37 cf b3 e6 61 a6 4b 12 55 33 6b 5a 12 a5 a6 48 ca 90 4c 6f 90 09 20 13 2e e1 23 80 80 b7 e1 dd f4 de e7 9c 7b 6f 20 91 4c a4 25 a9 04 1e 24 92 89 c4 45 dc bb ef 3e fb 7c fb db bf 63 8a c5 63 39 e4 80 5c ce 04 93 09 00 e8 5f 4d 30 9b b2 fc df f8 2b 07 c0 6c 02 b2 39 c0 24 fe 5c fe 89 f8 73 53 0e a6 9c 89 bf 0d fc 27 e2 9f f8 df f8 5f 4d c8 f2 df d2 bf 4c 39 20 6b a6 9f 43 17 3f b8 fe c1 fd 7f b1 f1 67 8a c5 62 1c 95 14 be 66 8a 4a 11 77 bb be 38 f4 91 43 56 06 b2 08 67 fe 5e 7e 01 28 a0 e9 27 d0 df 14 e1 ac bd 0e 2a ba b3 39 98 4c 26 e4 f8 1a 22 e8 8d d7 39 b8 fe c1 fd 7f 91 f1 c7 81 ae 82 4e c6 a0 9e c4 55 Data Ascii: x^wd0)SSUU"WZSyY3%U1%7aKU3kZHLo .#{o L%$E>\|cc9\_M0+l9$\sS'_ML9 kC?gbfJw8CVg^~('9L&"9NU
2025-01-07 18:40:21 UTC	1369	IN	Data Raw: f7 c0 ab 74 fd 4c 36 87 44 2a 83 4f ef cc e0 47 ff d7 25 4c 2e ac 73 90 9f ec f5 e1 5c 8f 1f 8d de 32 14 16 3a e1 b0 50 cd 6e b0 02 a8 b1 97 83 fb ff 44 f1 27 32 ba 6a b1 aa d2 43 6b ed 88 d5 d3 18 80 c2 a5 4e 39 59 88 61 66 69 09 50 d3 42 ba ca 9e ff b7 78 b5 90 7f 4b 78 64 8c ab 83 dc 7f bd 42 d7 cf 66 80 64 2a 8d 4b 43 73 f8 d1 4f af e0 da d8 02 6a 8b 9c e8 6a ae c4 d7 4e b6 e0 68 7b 35 9a ea dc 28 2d 2e 3c b8 ff ba 89 96 4b e5 a7 89 3f 53 94 bc 2e 5a 81 2d 77 93 aa b0 d6 62 55 15 ec aa dd bf f7 dc a7 0a 72 35 e8 2b 82 5b 96 25 da 46 57 6c 76 cd 72 72 49 eb 33 71 81 ff ea 5c 3f 97 cd 20 91 ca 71 a0 ff e4 e7 d7 f0 c1 f0 2c 2f 7c ad 95 c5 38 d7 51 8b e3 5d 5e 1c 6f f3 c2 5f 57 0a 57 81 13 36 ab 54 06 64 26 df 6b ee f6 e0 fe 8b 3b b0 57 fc c9 d2 45 4e fe Data Ascii: tL6DOG%L.s\2:PnD'2jCkN9YafiPBxKxdBfdKCsOjjNh{5(-.<K?S.Z-wbUr5+[%FWlvrrI3q\? q,/\|8Q]^o_WW6Td&k;WEN
2025-01-07 18:40:21 UTC	1369	IN	Data Raw: 23 44 9b 51 91 d1 69 33 4a 19 3d 00 bb cd 04 8b fc 73 5e f2 73 c0 fc fa 0e 6e 0e 07 59 93 6f f5 95 c3 e7 29 85 ab c8 ce 9a bb 5a a9 c5 ee f6 d5 e6 d3 1f f0 d1 3f 27 3e 7b 9a 74 f4 24 79 5d d4 66 34 04 4b 81 4d 0b 74 92 17 ad 4a 75 79 e7 14 ce 76 fa e0 70 d0 46 95 42 5c 67 2b dc 9f 5e c6 2f 3e 1e c6 ca 66 04 bd 0d 95 e8 a9 af 40 47 a0 0a 9e b2 a2 03 3e bd 5c d9 b8 58 3b e0 a3 eb 7b 8d 3c 3f ac ea 05 bc 20 3e 7c 26 93 45 32 95 c5 95 c1 20 9b ba 7e 37 1a 82 c5 a0 a3 0b 79 31 8b af b4 d7 e0 fb 6f 9f c1 e9 6e 2f 9c 76 aa df cd 79 7c fa 3b e3 0b f8 3f 7e db 8f f1 85 75 34 7a 5c e8 ac af c4 e9 6e 3f 9a bd 6e 14 17 da 61 b7 d9 0e f8 f4 74 07 0e f8 e8 f9 a3 7e 2f 8b 0f 9f c9 98 10 4f a5 71 65 48 36 8c 46 42 40 81 0d 0e b3 09 19 56 5d 44 c3 88 36 a3 ff 28 75 74 87 Data Ascii: #DQi3J=s^snYo)Z?'>{t$y]f4KMtJuyvpFB\g+^/>f@G>\X;{<? >\|&E2 ~7y1on/vy\|;?~u4z\n?nat~/OqeH6FB@V]D6(ut
2025-01-07 18:40:21 UTC	1369	IN	Data Raw: 1c 9d 73 d8 60 b5 12 ee 02 b0 a4 b3 c8 a4 49 47 a7 c1 0b 35 33 4a b8 0b c3 09 68 26 bd 61 f4 89 6c 18 ad c4 f4 40 27 af cc 11 5f 39 be 73 41 6c 46 9b 02 15 f0 14 17 c8 91 73 31 f8 92 4a a7 11 8f a7 38 cb 3b ec 36 56 76 fe 1c f9 f8 07 7c 74 29 3e a8 89 1c 6d 62 ca 38 99 6d d8 fe 89 7c fa ec 7c 72 e2 ba 24 d2 69 e6 ba 50 67 54 cd 8c 0a 0b 00 35 37 b3 64 78 c1 d7 79 66 d4 18 e8 a2 61 a4 f8 f4 43 54 a3 7f 34 80 8f ef 87 10 96 0d 23 95 d1 49 87 3f e2 17 a5 0b 05 3a 67 74 2a 5d 0c 7c fa 48 34 89 e5 8d 08 9f bc 51 e8 b0 a3 d0 6e 43 69 b1 03 f6 3f 33 3e fb 01 1f 9d f7 60 2f 9f cf 4e a5 0b d9 74 79 f0 e2 dd eb f8 70 2c 04 93 d3 22 5b f4 d4 f0 11 a6 2e 31 4a 77 02 67 7a fc 70 58 45 8d 2e 8a 6c f1 26 52 8d ce aa cb 3d b2 00 c4 b0 1c 4f b1 5f 86 4a 12 a2 08 1c f3 b9 Data Ascii: s`IG53Jh&al@'_9sAlFs1J8;6Vv\|t)>mb8m\|\|r$iPgT57dxyfaCT4#I?:gt*]\|H4QnCi?3>`/Ntyp,"[.1JwgzpXE.l&R=O_J
2025-01-07 18:40:21 UTC	1369	IN	Data Raw: 26 0d 14 9b 00 e2 53 91 67 9b 86 0f 1e c7 67 e7 3f a7 df 9c 2e 2c 0f e9 50 68 08 21 e1 89 6b aa cf 40 59 4e 01 84 c4 d9 a9 4f cf 27 a7 6b 12 a4 48 6c 46 af 3c 35 1f 7d 60 62 99 07 2f 68 66 74 7a 23 82 b5 98 08 74 4b d6 84 6c 22 2d 3a a3 b2 74 69 f1 79 50 56 e2 ca 43 d6 89 cd e8 12 ae de 9b c3 af af 4d e1 f6 d2 06 3b 28 85 31 2c 0b 9f ab 00 1d 75 a5 38 d7 e5 c3 df 9e 69 47 7b 7d 85 76 ea f7 b3 7c fe 3c d3 a8 b8 95 0f 3d ff e7 c9 c7 7f 66 3e 7a 2a 93 c2 4e 22 8e 1c 05 a2 59 fa a5 3f 83 8f 6e 36 5b 78 24 cc 66 a2 e9 00 79 58 a9 80 4f e5 9d 0f c0 53 3f b9 1c 92 99 34 76 52 09 71 78 32 d9 54 29 d0 c5 99 78 b2 e4 10 43 70 ea 46 d1 43 72 5a ec b0 5a b9 c0 d6 be f2 4a 71 a2 d0 66 49 c2 cb 20 93 ce 22 89 8c 98 32 7a a8 d5 af ff 08 7a 71 ec 16 2b 6c e4 35 e1 17 49 Data Ascii: &Sgg?.,Ph!k@YNO'kHlF<5}`b/hftz#tKl"-:tiyPVCM;(1,u8iG{}v\|<=f>z*N"Y?n6[x$fyXOS?4vRqx2T)xCpFCrZZJqfI "2zzq+l5I
2025-01-07 18:40:21 UTC	1369	IN	Data Raw: 49 5b 72 26 64 2d 80 23 67 41 75 41 01 ea 4b dc 38 e9 6b c6 5f f5 1c 47 47 b5 9f f7 1c 76 13 95 48 06 39 44 e6 a3 47 f1 c9 a9 74 49 e4 72 b8 3a 34 87 1f 90 05 e0 29 f9 e8 0a 77 71 e9 de bc 36 61 a4 6c ba e4 7e d4 bc 2e 5d 75 3c 1c ad 46 e9 04 ed cb 84 d5 8d 6d 8c 4e 2f 33 e9 eb d7 57 29 d0 57 01 8b 95 0e c7 03 61 f3 38 a3 d7 94 e2 5c af 1f df 3a dd 86 b6 7a 8f e6 67 d7 37 94 62 35 7d 92 cf 4f 3d 84 48 36 8d b1 f0 0c 7e d5 7f 05 c1 cd 0d f8 cb 2a d0 55 e7 c7 99 a6 4e 04 ca 3d fc fc b5 e5 5e be 78 f4 e0 44 21 6c f8 a2 06 db 63 ae 6f 38 da 25 27 b3 51 de 1e 4e fe 34 e1 8e c8 5b 36 64 b1 44 4a 0b a5 c6 ad 78 04 73 1b 4b 18 0c 4e e3 8f 63 77 31 b0 38 87 70 22 81 b5 8c b0 8d 52 b0 90 1a 12 cf a5 91 49 a5 d0 5d 54 8a a3 75 01 1c f6 37 e3 78 43 07 1a cb ab 51 42 Data Ascii: I[r&d-#gAuAK8k_GGvH9DGtIr:4)wq6al~.]u<FmN/3W)Wa8\:zg7b5}O=H6~*UN=^xD!lco8%'QN4[6dDJxsKNcw18p"RI]Tu7xCQB
2025-01-07 18:40:21 UTC	1369	IN	Data Raw: d8 36 56 52 29 d8 cd 56 64 4c 54 86 d1 df cb 71 fd 5e eb 70 a0 a9 a8 04 c7 fd 2d f8 66 ef 49 74 d4 06 e0 30 5b 61 b7 88 d9 4b d1 00 90 8b bd 81 4f 9e cd 9a 90 cc 64 70 85 6c ba 34 78 41 7c 74 87 f5 89 f9 e8 d4 19 fd e9 87 03 ec 5e 0c ae 6d 23 9c a4 2d 9e 89 4f 9f 16 19 bd 0c df e1 cd 28 91 ba 2a e1 71 15 f0 29 cb 90 a7 7c af 6c ec 60 74 96 2c 00 41 fc 97 ab 13 b8 3b bf 86 1c 95 77 ac a3 67 51 5d 68 47 63 55 31 ce 77 78 f1 f6 eb 3d e8 6c a8 92 9d 1d d9 5e dd 75 cc 3d 37 91 e4 aa 65 fc fc b4 f1 26 4c f6 48 78 16 ef 0d df c0 8d d9 29 4c 6c ad 63 3a be c3 49 e9 a8 cb 8d 53 81 16 9c 69 68 c7 99 a6 2e f8 dc 95 7b 3e 7f fe 99 f2 fe f3 a6 6e 9f d7 7f 61 7c f4 ad 44 04 73 54 c6 04 a7 f1 f1 e8 1d dc 5b 0c 62 21 19 c7 b2 ac d9 a9 e6 a5 60 49 66 d3 40 3a 85 b6 a2 32 Data Ascii: 6VR)VdLTq^p-fIt0[aKOdpl4xA\|t^m#-O(*q)\|l`t,A;wgQ]hGcU1wx=l^u=7e&LHx)Llc:ISih.{>na\|DsT[b!`If@:2
2025-01-07 18:40:21 UTC	1369	IN	Data Raw: c9 37 d0 5b d7 a0 0c 39 46 c5 57 7a 72 84 50 9b 4e 53 46 0f e2 87 3f 27 9b ee 3c 28 d0 9f 95 8f 4e 5e 17 1a a0 26 a4 9d 82 8c 92 4d 97 54 17 c2 5d 54 d0 28 1d 43 9b c4 1b b8 bc 29 4a 17 ea 8c fe 97 2b e3 b8 33 bb 8e 8c 05 38 ee ab c0 5f 9f 6d c1 29 92 25 eb dc a8 28 29 64 9b 30 6f b4 e5 de 83 36 9d 86 5e 60 5e 32 24 15 2e 9e 4d 61 64 61 16 bf 1c ba 86 1b b3 13 98 dd de 44 38 99 e0 ef 13 fd 09 20 0a 51 ba 1c 2e 2e c7 a9 40 33 67 f4 b3 2d 5d f0 53 c3 88 3b df f9 3e 28 f1 af 62 ef f3 59 d7 e7 32 5e 93 ed 40 47 a4 c7 79 01 7a d1 7c f0 cd 58 04 f3 5b 22 b3 ff 71 a4 9f b3 e3 3c 05 51 26 c5 04 d9 6d ca 8e 86 cc 2b 74 f6 7a a1 b3 d7 8b cc 2e 3a a8 56 d9 30 d0 55 5b 9a c8 a1 a6 0f fd ec db 73 13 9c 3d 46 d7 c2 58 cf a4 b1 95 cd f2 cf a7 60 cf f0 9a 2b 74 f6 53 65 Data Ascii: 7[9FWzrPNSF?'<(N^&MT]T(C)J+38_m)%()d0o6^`^2$.MadaD8 Q..@3g-]S;>(bY2^@Gyz\|X["q<Q&m+tz.:V0U[s=FX`+tSe
2025-01-07 18:40:21 UTC	1369	IN	Data Raw: 22 82 e5 4c c6 d0 41 25 55 23 c5 de 98 56 57 09 8e d6 50 cd de 82 93 0d ad 08 78 6a 50 ea 2c 14 99 9d e4 41 5a 8d 78 8f 42 03 20 39 2c 6c 92 37 66 12 b7 e6 1e 70 99 a4 d4 98 cd 5c 9a cd 5a f1 5d 7b 82 13 65 15 5c 23 1e a9 6f 43 67 8d 9f 5d 8f 85 0e 27 6c 54 33 4b 85 90 87 4b 98 16 90 c3 e4 da 12 3e 1d 1b c2 f5 b9 07 b8 17 9e 43 28 16 45 01 95 2e fe 66 fc 0f 67 de c4 a1 ba 66 b1 d2 18 75 51 83 00 ad 0d 47 93 4d 97 55 17 da 8c 9a 5f 3a 1f 7d 6b 27 8a 99 c5 2d c4 13 69 14 17 d9 b9 b4 29 73 d9 e1 74 d8 79 c3 ca 02 e2 1e 9f 9f ec d7 bc e5 a1 4c 9e 49 63 2d 46 5e a7 65 dc 9c 1e c3 af 47 6f e3 d3 a5 45 fe fc dc 05 a7 de 83 ac dd a9 4d 57 68 36 c3 e7 2a 41 67 65 1d 8e 07 da f0 66 7b 1f 9a 3c 35 06 3d 4f 75 90 1f 7f 7d be c1 7b 3c ff 9c bc a6 ba ff 9f 1b 1f 9d 9a Data Ascii: "LA%U#VWPxjP,AZxB 9,l7fp\Z]{e\#oCg]'lT3KK>C(E.fgfuQGMU_:}k'-i)styLIc-F^eGoEMWh6*Agef{<5=Ou}{<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49750	87.250.250.119	443	3060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-07 18:40:21 UTC	1107	OUT	GET /watch/44929738/1?page-ref&page-url=https%3A%2F%2Fcreditunions.taplink.ws%2F&browser-info=la%3Aen-US&rn=0.842207389920755&redirnss=1 HTTP/1.1 Host: mc.yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://creditunions.taplink.ws/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yabs-sid=2546279251736275220; i=fQiJpOgFWmls1LcaxhZAIoP0aJXP647hCU7vgrAkmvw59qSPpxdahQ7z7lf9bb7BuAfhzA60FrSLc/MLD+X/quFvEb8=; yandexuid=6405333871736275220; yuidss=6405333871736275220; ymex=1767811220.yrts.1736275220#1767811220.yrtsi.1736275220; receive-cookie-deprecation=1; bh=EkAiR29vZ2xlIENocm9tZSI7dj0iMTE3IiwgIk5vdDtBPUJyYW5kIjt2PSI4IiwgIkNocm9taXVtIjt2PSIxMTciKgI/MDoJIldpbmRvd3Mi
2025-01-07 18:40:21 UTC	664	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Tue, 07 Jan 2025 18:40:21 GMT Expires: Tue, 07-Jan-2025 18:40:21 GMT Last-Modified: Tue, 07-Jan-2025 18:40:21 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2025-01-07 18:40:21 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49753	87.250.250.119	443	3060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-07 18:40:21 UTC	728	OUT	POST /watch/84470437?page-ref=&page-url=https%3A%2F%2Ftaplink.cloud%2Fpages%2Fc3da8e%2Ff3b4f3%2F%3Ffrom%3Dbr&browser-info=la%3Aen-US&rn=0.24886923640989056 HTTP/1.1 Host: mc.yandex.ru Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://creditunions.taplink.ws Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://creditunions.taplink.ws/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-07 18:40:22 UTC	2009	IN	HTTP/1.1 302 Moved temporarily Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://creditunions.taplink.ws Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Date: Tue, 07 Jan 2025 18:40:21 GMT Expires: Tue, 07-Jan-2025 18:40:21 GMT Last-Modified: Tue, 07-Jan-2025 18:40:21 GMT Location: /watch/84470437/1?page-ref&page-url=https%3A%2F%2Ftaplink.cloud%2Fpages%2Fc3da8e%2Ff3b4f3%2F%3Ffrom%3Dbr&browser-info=la%3Aen-US&rn=0.24886923640989056&redirnss=1 Pragma: no-cache Set-Cookie: yabs-sid=2620022671736275221; Path=/; SameSite=None; Secure Set-Cookie: i=Uq3GndN72Bb437Mq2BHvscSIt40wdGHKun8c6QEbTQ+7oMpqHUXsMulmf6fqowu0SNXjMnzsuqk+b8fIU5hMsXX9bOA=; Expires=Fri, 05-Jan-2035 18:40:21 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: yandexuid=6578076761736275221; Expires=Fri, 05-Jan-2035 18:40:21 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None Set-Cookie: yuidss=6578076761736275221; Expires=Wed, 07-Jan-2026 18:40:21 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure Set-Cookie: ymex=1767811221.yrts.1736275221#1767811221.yrtsi.1736275221; Expires=Wed, 07-Jan-2026 18:40:21 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure Set-Cookie: receive-cookie-deprecation=1; Expires=Wed, 07-Jan-2026 18:40:21 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure; HttpOnly; Partitioned Set-Cookie: bh=EkAiR29vZ2xlIENocm9tZSI7dj0iMTE3IiwgIk5vdDtBPUJyYW5kIjt2PSI4IiwgIkNocm9taXVtIjt2PSIxMTciKgI/MDoJIldpbmRvd3Mi; Expires=Wed, 07-Jan-2026 18:40:21 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000 Transfer-Encoding: chunked X-XSS-Protection: 1; mode=block
2025-01-07 18:40:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49754	104.26.2.150	443	3060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-07 18:40:21 UTC	356	OUT	GET /a/9/8/8/2/c3da8e.png?1 HTTP/1.1 Host: taplink.st Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-07 18:40:22 UTC	1308	IN	HTTP/1.1 200 OK Date: Tue, 07 Jan 2025 18:40:22 GMT Content-Type: image/png Content-Length: 32157 Connection: close Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Cache-Control, Content-Language, Content-Type, Expires, Last-Modified, Pragma, Etag, X-Timestamp, X-Trans-Id, X-Openstack-Request-Id, Content-Length, Accept-Ranges, Expires, Cache-Control Cache-Control: max-age=31536000 Etag: "0e75507835b8db4dfef092da15c6856b" Expires: Fri, 31 Jan 2025 15:00:00 GMT Last-Modified: Tue, 07 Jan 2025 17:19:29 GMT x-container-storage-policy-index: 0 x-container-storage-policy-name: Policy-0 X-Timestamp: 1736270368.81141 X-Trans-Id: 181878b386fabb96 Age: 2600 CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8TxWEZP9rM3NzYp0FPkEBxgFLHuJ7rx7CizR7gTGTZC55ekQN%2BJOwLa2XgMtlQfWna3WT2eq3KZkSBc95pdiAXNmGBU2ZzAYCGnstLvDSLo1sD1b0eWKf2MGd9k%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fe613699d358c41-EWR server-timing: cfL4;desc="?proto=TCP&rtt=1869&min_rtt=1862&rtt_var=704&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2819&recv_bytes=934&delivery_rate=1568206&cwnd=225&unsent_bytes=0&cid=60a3bf24e427b6d0&ts=146&x=0"
2025-01-07 18:40:22 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 ba 00 00 00 ba 08 06 00 00 00 19 0e 57 f1 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e ec bd d7 77 64 Data Ascii: PNGIHDRWsRGB IDATx^wd
2025-01-07 18:40:22 UTC	1369	IN	Data Raw: d7 95 e6 f9 85 0f 00 01 13 08 f8 30 f0 de a4 f7 86 14 29 53 53 55 2a 55 8b 22 bb 57 f7 5a 53 aa ae 79 98 59 33 25 55 cf df 31 25 37 cf b3 e6 61 a6 4b 12 55 33 6b 5a 12 a5 a6 48 ca 90 4c 6f 90 09 20 13 2e e1 23 80 80 b7 e1 dd f4 de e7 9c 7b 6f 20 91 4c a4 25 a9 04 1e 24 92 89 c4 45 dc bb ef 3e fb 7c fb db bf 63 8a c5 63 39 e4 80 5c ce 04 93 09 00 e8 5f 4d 30 9b b2 fc df f8 2b 07 c0 6c 02 b2 39 c0 24 fe 5c fe 89 f8 73 53 0e a6 9c 89 bf 0d fc 27 e2 9f f8 df f8 5f 4d c8 f2 df d2 bf 4c 39 20 6b a6 9f 43 17 3f b8 fe c1 fd 7f b1 f1 67 8a c5 62 1c 95 14 be 66 8a 4a 11 77 bb be 38 f4 91 43 56 06 b2 08 67 fe 5e 7e 01 28 a0 e9 27 d0 df 14 e1 ac bd 0e 2a ba b3 39 98 4c 26 e4 f8 1a 22 e8 8d d7 39 b8 fe c1 fd 7f 91 f1 c7 81 ae 82 4e c6 a0 9e c4 55 30 d2 37 50 30 9b 39 Data Ascii: 0)SSUU"WZSyY3%U1%7aKU3kZHLo .#{o L%$E>\|cc9\_M0+l9$\sS'_ML9 kC?gbfJw8CVg^~('9L&"9NU07P09
2025-01-07 18:40:22 UTC	1369	IN	Data Raw: 87 44 2a 83 4f ef cc e0 47 ff d7 25 4c 2e ac 73 90 9f ec f5 e1 5c 8f 1f 8d de 32 14 16 3a e1 b0 50 cd 6e b0 02 a8 b1 97 83 fb ff 44 f1 27 32 ba 6a b1 aa d2 43 6b ed 88 d5 d3 18 80 c2 a5 4e 39 59 88 61 66 69 09 50 d3 42 ba ca 9e ff b7 78 b5 90 7f 4b 78 64 8c ab 83 dc 7f bd 42 d7 cf 66 80 64 2a 8d 4b 43 73 f8 d1 4f af e0 da d8 02 6a 8b 9c e8 6a ae c4 d7 4e b6 e0 68 7b 35 9a ea dc 28 2d 2e 3c b8 ff ba 89 96 4b e5 a7 89 3f 53 94 bc 2e 5a 81 2d 77 93 aa b0 d6 62 55 15 ec aa dd bf f7 dc a7 0a 72 35 e8 2b 82 5b 96 25 da 46 57 6c 76 cd 72 72 49 eb 33 71 81 ff ea 5c 3f 97 cd 20 91 ca 71 a0 ff e4 e7 d7 f0 c1 f0 2c 2f 7c ad 95 c5 38 d7 51 8b e3 5d 5e 1c 6f f3 c2 5f 57 0a 57 81 13 36 ab 54 06 64 26 df 6b ee f6 e0 fe 8b 3b b0 57 fc c9 d2 45 4e fe 8b c1 9f bc a4 2c 0c Data Ascii: DOG%L.s\2:PnD'2jCkN9YafiPBxKxdBfdKCsOjjNh{5(-.<K?S.Z-wbUr5+[%FWlvrrI3q\? q,/\|8Q]^o_WW6Td&k;WEN,
2025-01-07 18:40:22 UTC	1369	IN	Data Raw: 33 4a 19 3d 00 bb cd 04 8b fc 73 5e f2 73 c0 fc fa 0e 6e 0e 07 59 93 6f f5 95 c3 e7 29 85 ab c8 ce 9a bb 5a a9 c5 ee f6 d5 e6 d3 1f f0 d1 3f 27 3e 7b 9a 74 f4 24 79 5d d4 66 34 04 4b 81 4d 0b 74 92 17 ad 4a 75 79 e7 14 ce 76 fa e0 70 d0 46 95 42 5c 67 2b dc 9f 5e c6 2f 3e 1e c6 ca 66 04 bd 0d 95 e8 a9 af 40 47 a0 0a 9e b2 a2 03 3e bd 5c d9 b8 58 3b e0 a3 eb 7b 8d 3c 3f ac ea 05 bc 20 3e 7c 26 93 45 32 95 c5 95 c1 20 9b ba 7e 37 1a 82 c5 a0 a3 0b 79 31 8b af b4 d7 e0 fb 6f 9f c1 e9 6e 2f 9c 76 aa df cd 79 7c fa 3b e3 0b f8 3f 7e db 8f f1 85 75 34 7a 5c e8 ac af c4 e9 6e 3f 9a bd 6e 14 17 da 61 b7 d9 0e f8 f4 74 07 0e f8 e8 f9 a3 7e 2f 8b 0f 9f c9 98 10 4f a5 71 65 48 36 8c 46 42 40 81 0d 0e b3 09 19 56 5d 44 c3 88 36 a3 ff 28 75 74 87 8d bc 2e ea d8 11 d1 Data Ascii: 3J=s^snYo)Z?'>{t$y]f4KMtJuyvpFB\g+^/>f@G>\X;{<? >\|&E2 ~7y1on/vy\|;?~u4z\n?nat~/OqeH6FB@V]D6(ut.
2025-01-07 18:40:22 UTC	1369	IN	Data Raw: ee 02 b0 a4 b3 c8 a4 49 47 a7 c1 0b 35 33 4a b8 0b c3 09 68 26 bd 61 f4 89 6c 18 ad c4 f4 40 27 af cc 11 5f 39 be 73 41 6c 46 9b 02 15 f0 14 17 c8 91 73 31 f8 92 4a a7 11 8f a7 38 cb 3b ec 36 56 76 fe 1c f9 f8 07 7c 74 29 3e a8 89 1c 6d 62 ca 38 99 6d d8 fe 89 7c fa ec 7c 72 e2 ba 24 d2 69 e6 ba 50 67 54 cd 8c 0a 0b 00 35 37 b3 64 78 c1 d7 79 66 d4 18 e8 a2 61 a4 f8 f4 43 54 a3 7f 34 80 8f ef 87 10 96 0d 23 95 d1 49 87 3f e2 17 a5 0b 05 3a 67 74 2a 5d 0c 7c fa 48 34 89 e5 8d 08 9f bc 51 e8 b0 a3 d0 6e 43 69 b1 03 f6 3f 33 3e fb 01 1f 9d f7 60 2f 9f cf 4e a5 0b d9 74 79 f0 e2 dd eb f8 70 2c 04 93 d3 22 5b f4 d4 f0 11 a6 2e 31 4a 77 02 67 7a fc 70 58 45 8d 2e 8a 6c f1 26 52 8d ce aa cb 3d b2 00 c4 b0 1c 4f b1 5f 86 4a 12 a2 08 1c f3 b9 f1 ce 05 aa d1 bd 72 Data Ascii: IG53Jh&al@'_9sAlFs1J8;6Vv\|t)>mb8m\|\|r$iPgT57dxyfaCT4#I?:gt*]\|H4QnCi?3>`/Ntyp,"[.1JwgzpXE.l&R=O_Jr
2025-01-07 18:40:22 UTC	1369	IN	Data Raw: 91 67 9b 86 0f 1e c7 67 e7 3f a7 df 9c 2e 2c 0f e9 50 68 08 21 e1 89 6b aa cf 40 59 4e 01 84 c4 d9 a9 4f cf 27 a7 6b 12 a4 48 6c 46 af 3c 35 1f 7d 60 62 99 07 2f 68 66 74 7a 23 82 b5 98 08 74 4b d6 84 6c 22 2d 3a a3 b2 74 69 f1 79 50 56 e2 ca 43 d6 89 cd e8 12 ae de 9b c3 af af 4d e1 f6 d2 06 3b 28 85 31 2c 0b 9f ab 00 1d 75 a5 38 d7 e5 c3 df 9e 69 47 7b 7d 85 76 ea f7 b3 7c fe 3c d3 a8 b8 95 0f 3d ff e7 c9 c7 7f 66 3e 7a 2a 93 c2 4e 22 8e 1c 05 a2 59 fa a5 3f 83 8f 6e 36 5b 78 24 cc 66 a2 e9 00 79 58 a9 80 4f e5 9d 0f c0 53 3f b9 1c 92 99 34 76 52 09 71 78 32 d9 54 29 d0 c5 99 78 b2 e4 10 43 70 ea 46 d1 43 72 5a ec b0 5a b9 c0 d6 be f2 4a 71 a2 d0 66 49 c2 cb 20 93 ce 22 89 8c 98 32 7a a8 d5 af ff 08 7a 71 ec 16 2b 6c e4 35 e1 17 49 3c 06 f5 1d 79 0f 6a Data Ascii: gg?.,Ph!k@YNO'kHlF<5}`b/hftz#tKl"-:tiyPVCM;(1,u8iG{}v\|<=f>z*N"Y?n6[x$fyXOS?4vRqx2T)xCpFCrZZJqfI "2zzq+l5I<yj
2025-01-07 18:40:22 UTC	1369	IN	Data Raw: 23 67 41 75 41 01 ea 4b dc 38 e9 6b c6 5f f5 1c 47 47 b5 9f f7 1c 76 13 95 48 06 39 44 e6 a3 47 f1 c9 a9 74 49 e4 72 b8 3a 34 87 1f 90 05 e0 29 f9 e8 0a 77 71 e9 de bc 36 61 a4 6c ba e4 7e d4 bc 2e 5d 75 3c 1c ad 46 e9 04 ed cb 84 d5 8d 6d 8c 4e 2f 33 e9 eb d7 57 29 d0 57 01 8b 95 0e c7 03 61 f3 38 a3 d7 94 e2 5c af 1f df 3a dd 86 b6 7a 8f e6 67 d7 37 94 62 35 7d 92 cf 4f 3d 84 48 36 8d b1 f0 0c 7e d5 7f 05 c1 cd 0d f8 cb 2a d0 55 e7 c7 99 a6 4e 04 ca 3d fc fc b5 e5 5e be 78 f4 e0 44 21 6c f8 a2 06 db 63 ae 6f 38 da 25 27 b3 51 de 1e 4e fe 34 e1 8e c8 5b 36 64 b1 44 4a 0b a5 c6 ad 78 04 73 1b 4b 18 0c 4e e3 8f 63 77 31 b0 38 87 70 22 81 b5 8c b0 8d 52 b0 90 1a 12 cf a5 91 49 a5 d0 5d 54 8a a3 75 01 1c f6 37 e3 78 43 07 1a cb ab 51 42 35 bb c5 66 dc 43 6a Data Ascii: #gAuAK8k_GGvH9DGtIr:4)wq6al~.]u<FmN/3W)Wa8\:zg7b5}O=H6~*UN=^xD!lco8%'QN4[6dDJxsKNcw18p"RI]Tu7xCQB5fCj
2025-01-07 18:40:22 UTC	1369	IN	Data Raw: 56 64 4c 54 86 d1 df cb 71 fd 5e eb 70 a0 a9 a8 04 c7 fd 2d f8 66 ef 49 74 d4 06 e0 30 5b 61 b7 88 d9 4b d1 00 90 8b bd 81 4f 9e cd 9a 90 cc 64 70 85 6c ba 34 78 41 7c 74 87 f5 89 f9 e8 d4 19 fd e9 87 03 ec 5e 0c ae 6d 23 9c a4 2d 9e 89 4f 9f 16 19 bd 0c df e1 cd 28 91 ba 2a e1 71 15 f0 29 cb 90 a7 7c af 6c ec 60 74 96 2c 00 41 fc 97 ab 13 b8 3b bf 86 1c 95 77 ac a3 67 51 5d 68 47 63 55 31 ce 77 78 f1 f6 eb 3d e8 6c a8 92 9d 1d d9 5e dd 75 cc 3d 37 91 e4 aa 65 fc fc b4 f1 26 4c f6 48 78 16 ef 0d df c0 8d d9 29 4c 6c ad 63 3a be c3 49 e9 a8 cb 8d 53 81 16 9c 69 68 c7 99 a6 2e f8 dc 95 7b 3e 7f fe 99 f2 fe f3 a6 6e 9f d7 7f 61 7c f4 ad 44 04 73 54 c6 04 a7 f1 f1 e8 1d dc 5b 0c 62 21 19 c7 b2 ac d9 a9 e6 a5 60 49 66 d3 40 3a 85 b6 a2 32 1c f5 06 70 d8 d7 82 Data Ascii: VdLTq^p-fIt0[aKOdpl4xA\|t^m#-O(*q)\|l`t,A;wgQ]hGcU1wx=l^u=7e&LHx)Llc:ISih.{>na\|DsT[b!`If@:2p
2025-01-07 18:40:22 UTC	1369	IN	Data Raw: 39 46 c5 57 7a 72 84 50 9b 4e 53 46 0f e2 87 3f 27 9b ee 3c 28 d0 9f 95 8f 4e 5e 17 1a a0 26 a4 9d 82 8c 92 4d 97 54 17 c2 5d 54 d0 28 1d 43 9b c4 1b b8 bc 29 4a 17 ea 8c fe 97 2b e3 b8 33 bb 8e 8c 05 38 ee ab c0 5f 9f 6d c1 29 92 25 eb dc a8 28 29 64 9b 30 6f b4 e5 de 83 36 9d 86 5e 60 5e 32 24 15 2e 9e 4d 61 64 61 16 bf 1c ba 86 1b b3 13 98 dd de 44 38 99 e0 ef 13 fd 09 20 0a 51 ba 1c 2e 2e c7 a9 40 33 67 f4 b3 2d 5d f0 53 c3 88 3b df f9 3e 28 f1 af 62 ef f3 59 d7 e7 32 5e 93 ed 40 47 a4 c7 79 01 7a d1 7c f0 cd 58 04 f3 5b 22 b3 ff 71 a4 9f b3 e3 3c 05 51 26 c5 04 d9 6d ca 8e 86 cc 2b 74 f6 7a a1 b3 d7 8b cc 2e 3a a8 56 d9 30 d0 55 5b 9a c8 a1 a6 0f fd ec db 73 13 9c 3d 46 d7 c2 58 cf a4 b1 95 cd f2 cf a7 60 cf f0 9a 2b 74 f6 53 65 e5 b8 d8 d4 8b a3 f5 Data Ascii: 9FWzrPNSF?'<(N^&MT]T(C)J+38_m)%()d0o6^`^2$.MadaD8 Q..@3g-]S;>(bY2^@Gyz\|X["q<Q&m+tz.:V0U[s=FX`+tSe
2025-01-07 18:40:22 UTC	1369	IN	Data Raw: 25 55 23 c5 de 98 56 57 09 8e d6 50 cd de 82 93 0d ad 08 78 6a 50 ea 2c 14 99 9d e4 41 5a 8d 78 8f 42 03 20 39 2c 6c 92 37 66 12 b7 e6 1e 70 99 a4 d4 98 cd 5c 9a cd 5a f1 5d 7b 82 13 65 15 5c 23 1e a9 6f 43 67 8d 9f 5d 8f 85 0e 27 6c 54 33 4b 85 90 87 4b 98 16 90 c3 e4 da 12 3e 1d 1b c2 f5 b9 07 b8 17 9e 43 28 16 45 01 95 2e fe 66 fc 0f 67 de c4 a1 ba 66 b1 d2 18 75 51 83 00 ad 0d 47 93 4d 97 55 17 da 8c 9a 5f 3a 1f 7d 6b 27 8a 99 c5 2d c4 13 69 14 17 d9 b9 b4 29 73 d9 e1 74 d8 79 c3 ca 02 e2 1e 9f 9f ec d7 bc e5 a1 4c 9e 49 63 2d 46 5e a7 65 dc 9c 1e c3 af 47 6f e3 d3 a5 45 fe fc dc 05 a7 de 83 ac dd a9 4d 57 68 36 c3 e7 2a 41 67 65 1d 8e 07 da f0 66 7b 1f 9a 3c 35 06 3d 4f 75 90 1f 7f 7d be c1 7b 3c ff 9c bc a6 ba ff 9f 1b 1f 9d 9a 2c d1 74 02 f3 b2 66 Data Ascii: %U#VWPxjP,AZxB 9,l7fp\Z]{e\#oCg]'lT3KK>C(E.fgfuQGMU_:}k'-i)styLIc-F^eGoEMWh6*Agef{<5=Ou}{<,tf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49755	104.26.10.47	443	3060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-07 18:40:22 UTC	558	OUT	GET /3d10566912835470.webmanifest HTTP/1.1 Host: creditunions.taplink.ws Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: manifest Referer: https://creditunions.taplink.ws/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-07 18:40:22 UTC	1049	IN	HTTP/1.1 200 OK Date: Tue, 07 Jan 2025 18:40:22 GMT Content-Type: application/manifest+json; charset=utf-8 Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 07 Jan 2025 18:40:22 GMT Cache-Control: no-cache, must-revalidate Pragma: no-cache Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: unsafe-url CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZMuk3hy7T%2BLvHoz%2F7kQ3qJ3Rpt%2FkyrG4s76o3SLvtdtIedfLCw9YqJyoS%2FyP2hqKIfKky6uChtI1BUqi%2BC00ATsknyMC%2B23IaL0743kT7UerorRe6bcFmHlLERFDL8ZZn5dxVOHDZePN"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fe6136b88c1435b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1620&min_rtt=1599&rtt_var=614&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2821&recv_bytes=1136&delivery_rate=1826141&cwnd=214&unsent_bytes=0&cid=89cdca5997eb7e71&ts=476&x=0"
2025-01-07 18:40:22 UTC	299	IN	Data Raw: 31 32 34 0d 0a 7b 22 6e 61 6d 65 22 3a 22 43 72 65 64 69 74 75 6e 69 6f 6e 73 2e 74 61 70 6c 69 6e 6b 2e 77 73 22 2c 22 73 68 6f 72 74 5f 6e 61 6d 65 22 3a 22 63 72 65 64 69 74 75 6e 69 6f 6e 73 22 2c 22 69 63 6f 6e 73 22 3a 5b 7b 22 73 72 63 22 3a 22 68 74 74 70 73 3a 2f 2f 74 61 70 6c 69 6e 6b 2e 73 74 2f 61 2f 39 2f 38 2f 38 2f 32 2f 63 33 64 61 38 65 2e 70 6e 67 3f 31 22 2c 22 73 69 7a 65 73 22 3a 22 33 30 30 78 33 30 30 22 2c 22 74 79 70 65 22 3a 22 69 6d 61 67 65 2f 70 6e 67 22 7d 5d 2c 22 74 68 65 6d 65 5f 63 6f 6c 6f 72 22 3a 22 23 66 66 66 66 66 66 22 2c 22 62 61 63 6b 67 72 6f 75 6e 64 5f 63 6f 6c 6f 72 22 3a 22 23 66 66 66 66 66 66 22 2c 22 73 74 61 72 74 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 72 65 64 69 74 75 6e 69 6f 6e 73 2e 74 61 Data Ascii: 124{"name":"Creditunions.taplink.ws","short_name":"creditunions","icons":[{"src":"https://taplink.st/a/9/8/8/2/c3da8e.png?1","sizes":"300x300","type":"image/png"}],"theme_color":"#ffffff","background_color":"#ffffff","start_url":"https://creditunions.ta
2025-01-07 18:40:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49756	93.158.134.119	443	3060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-07 18:40:22 UTC	834	OUT	GET /watch/44929738/1?page-ref&page-url=https%3A%2F%2Fcreditunions.taplink.ws%2F&browser-info=la%3Aen-US&rn=0.842207389920755&redirnss=1 HTTP/1.1 Host: mc.yandex.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yabs-sid=2546279251736275220; i=fQiJpOgFWmls1LcaxhZAIoP0aJXP647hCU7vgrAkmvw59qSPpxdahQ7z7lf9bb7BuAfhzA60FrSLc/MLD+X/quFvEb8=; yandexuid=6405333871736275220; yuidss=6405333871736275220; ymex=1767811220.yrts.1736275220#1767811220.yrtsi.1736275220; bh=EkAiR29vZ2xlIENocm9tZSI7dj0iMTE3IiwgIk5vdDtBPUJyYW5kIjt2PSI4IiwgIkNocm9taXVtIjt2PSIxMTciKgI/MDoJIldpbmRvd3Mi
2025-01-07 18:40:22 UTC	664	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Tue, 07 Jan 2025 18:40:22 GMT Expires: Tue, 07-Jan-2025 18:40:22 GMT Last-Modified: Tue, 07-Jan-2025 18:40:22 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2025-01-07 18:40:22 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49757	87.250.250.119	443	3060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-07 18:40:22 UTC	1076	OUT	GET /watch/84470437/1?page-ref&page-url=https%3A%2F%2Ftaplink.cloud%2Fpages%2Fc3da8e%2Ff3b4f3%2F%3Ffrom%3Dbr&browser-info=la%3Aen-US&rn=0.24886923640989056&redirnss=1 HTTP/1.1 Host: mc.yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://creditunions.taplink.ws/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; bh=EkAiR29vZ2xlIENocm9tZSI7dj0iMTE3IiwgIk5vdDtBPUJyYW5kIjt2PSI4IiwgIkNocm9taXVtIjt2PSIxMTciKgI/MDoJIldpbmRvd3Mi; yabs-sid=2620022671736275221; i=Uq3GndN72Bb437Mq2BHvscSIt40wdGHKun8c6QEbTQ+7oMpqHUXsMulmf6fqowu0SNXjMnzsuqk+b8fIU5hMsXX9bOA=; yandexuid=6578076761736275221; yuidss=6578076761736275221; ymex=1767811221.yrts.1736275221#1767811221.yrtsi.1736275221
2025-01-07 18:40:23 UTC	664	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Tue, 07 Jan 2025 18:40:22 GMT Expires: Tue, 07-Jan-2025 18:40:22 GMT Last-Modified: Tue, 07-Jan-2025 18:40:22 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2025-01-07 18:40:23 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	60215	198.58.107.108	443	3060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-07 18:40:33 UTC	731	OUT	GET /?KDnq=vxU7AS HTTP/1.1 Host: membersourcecu.paolayjon.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://creditunions.taplink.ws/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-07 18:40:34 UTC	181	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 07 Jan 2025 18:40:34 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding
2025-01-07 18:40:34 UTC	16203	IN	Data Raw: 37 30 38 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 3c 68 65 61 64 3e 0a 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 73 2c 76 29 7b 76 61 72 20 42 6f 3d 61 30 73 35 2c 71 3d 73 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 76 61 72 20 42 3d 70 61 72 73 65 49 6e 74 28 42 6f 28 30 78 35 33 33 29 29 2f 30 78 31 2b 70 61 72 73 65 49 6e 74 28 42 6f 28 30 78 32 32 36 29 29 2f 30 78 32 2a 28 2d 70 61 72 73 65 49 6e 74 28 42 6f 28 30 78 35 32 39 29 29 2f 30 78 33 29 2b 70 61 72 73 65 49 6e 74 28 42 6f 28 30 78 35 33 37 29 29 2f 30 78 34 2b 2d 70 61 72 73 65 49 6e 74 28 42 6f 28 30 78 33 37 Data Ascii: 708c<!DOCTYPE html><html lang="en"> <head> <script type="text/javascript"> (function(s,v){var Bo=a0s5,q=s();while(!![]){try{var B=parseInt(Bo(0x533))/0x1+parseInt(Bo(0x226))/0x2*(-parseInt(Bo(0x529))/0x3)+parseInt(Bo(0x537))/0x4+-parseInt(Bo(0x37
2025-01-07 18:40:34 UTC	12617	IN	Data Raw: 74 69 6f 6e 28 71 64 2c 71 6d 2c 71 6e 29 7b 76 61 72 20 56 77 3d 61 30 73 35 2c 71 72 3d 71 6e 28 30 78 31 31 32 29 2c 71 54 3d 46 75 6e 63 74 69 6f 6e 5b 56 77 28 30 78 33 62 39 29 5d 5b 56 77 28 30 78 33 36 39 29 5d 3b 71 64 5b 27 65 78 70 6f 72 74 73 27 5d 3d 71 72 3f 71 54 5b 56 77 28 30 78 32 36 30 29 5d 28 71 54 29 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 56 7a 3d 56 77 3b 69 66 28 56 7a 28 30 78 31 31 35 29 3d 3d 3d 56 7a 28 30 78 31 31 35 29 29 72 65 74 75 72 6e 20 71 54 5b 56 7a 28 30 78 31 35 65 29 5d 28 71 54 2c 61 72 67 75 6d 65 6e 74 73 29 3b 65 6c 73 65 20 73 77 5b 73 4c 5d 3d 73 43 3b 7d 3b 7d 2c 30 78 38 30 30 3a 66 75 6e 63 74 69 6f 6e 28 71 64 2c 71 6d 2c 71 6e 29 7b 76 61 72 20 56 43 3d 61 30 73 35 2c 71 72 3d 71 6e 28 30 78 31 Data Ascii: tion(qd,qm,qn){var Vw=a0s5,qr=qn(0x112),qT=Function[Vw(0x3b9)][Vw(0x369)];qd['exports']=qr?qT[Vw(0x260)](qT):function(){var Vz=Vw;if(Vz(0x115)===Vz(0x115))return qT[Vz(0x15e)](qT,arguments);else sw[sL]=sC;};},0x800:function(qd,qm,qn){var VC=a0s5,qr=qn(0x1
2025-01-07 18:40:34 UTC	16384	IN	Data Raw: 37 66 66 39 0d 0a 30 78 31 34 61 61 29 2c 71 5a 3d 71 6e 28 30 78 63 36 64 29 2c 71 62 3d 71 6e 28 30 78 31 65 65 61 29 2c 71 41 3d 71 6e 28 30 78 31 29 2c 71 44 3d 71 6e 28 30 78 32 35 35 35 29 2c 71 52 3d 71 41 28 55 6b 28 30 78 33 30 33 29 29 2c 71 6f 3d 21 30 78 31 3b 5b 5d 5b 55 6b 28 30 78 34 30 32 29 5d 26 26 28 55 6b 28 30 78 34 62 37 29 69 6e 28 71 4d 3d 5b 5d 5b 55 6b 28 30 78 34 30 32 29 5d 28 29 29 3f 28 71 54 3d 71 5a 28 71 5a 28 71 4d 29 29 29 21 3d 3d 4f 62 6a 65 63 74 5b 55 6b 28 30 78 33 62 39 29 5d 26 26 28 71 72 3d 71 54 29 3a 71 6f 3d 21 30 78 30 29 2c 21 71 63 28 71 72 29 7c 7c 71 67 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 71 51 3d 7b 7d 3b 72 65 74 75 72 6e 20 71 72 5b 71 52 5d 5b 27 63 61 6c 6c 27 5d 28 71 51 29 21 3d 3d 71 Data Ascii: 7ff90x14aa),qZ=qn(0xc6d),qb=qn(0x1eea),qA=qn(0x1),qD=qn(0x2555),qR=qA(Uk(0x303)),qo=!0x1;[][Uk(0x402)]&&(Uk(0x4b7)in(qM=[][Uk(0x402)]())?(qT=qZ(qZ(qM)))!==Object[Uk(0x3b9)]&&(qr=qT):qo=!0x0),!qc(qr)\|\|qg(function(){var qQ={};return qr[qR]['call'](qQ)!==q
2025-01-07 18:40:34 UTC	16384	IN	Data Raw: 28 71 50 29 7b 76 61 72 20 49 36 3d 49 35 3b 69 66 28 21 71 54 29 72 65 74 75 72 6e 20 71 72 5b 71 50 5d 3b 76 61 72 20 71 63 3d 71 4d 28 71 72 2c 71 50 29 3b 72 65 74 75 72 6e 20 71 63 26 26 71 63 5b 49 36 28 30 78 32 63 62 29 5d 3b 7d 3b 7d 7d 2c 30 78 66 30 3a 66 75 6e 63 74 69 6f 6e 28 71 64 2c 71 6d 2c 71 6e 29 7b 76 61 72 20 49 37 3d 61 30 73 35 2c 71 72 3d 71 6e 28 30 78 35 38 31 29 2c 71 54 3d 71 6e 28 30 78 66 31 38 29 2c 71 4d 3d 71 6e 28 30 78 31 29 2c 71 67 3d 71 6e 28 30 78 31 37 65 29 2c 71 50 3d 71 4d 28 49 37 28 30 78 34 62 64 29 29 3b 71 64 5b 49 37 28 30 78 31 33 36 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 71 63 29 7b 76 61 72 20 71 65 3d 71 72 28 71 63 29 3b 71 67 26 26 71 65 26 26 21 71 65 5b 71 50 5d 26 26 71 54 28 71 65 2c 71 50 2c 7b 27 Data Ascii: (qP){var I6=I5;if(!qT)return qr[qP];var qc=qM(qr,qP);return qc&&qc[I6(0x2cb)];};}},0xf0:function(qd,qm,qn){var I7=a0s5,qr=qn(0x581),qT=qn(0xf18),qM=qn(0x1),qg=qn(0x17e),qP=qM(I7(0x4bd));qd[I7(0x136)]=function(qc){var qe=qr(qc);qg&&qe&&!qe[qP]&&qT(qe,qP,{'
2025-01-07 18:40:34 UTC	16384	IN	Data Raw: 0a 38 30 30 30 0d 0a 71 58 29 3a 71 6f 28 71 58 2a 71 58 2c 71 79 2f 30 78 32 2c 71 6a 29 3b 7d 2c 71 51 3d 66 75 6e 63 74 69 6f 6e 28 71 58 2c 71 79 2c 71 6a 29 7b 66 6f 72 28 76 61 72 20 71 61 3d 2d 30 78 31 2c 71 69 3d 71 6a 3b 2b 2b 71 61 3c 30 78 36 3b 29 71 69 2b 3d 71 79 2a 71 58 5b 71 61 5d 2c 71 58 5b 71 61 5d 3d 71 69 25 30 78 39 38 39 36 38 30 2c 71 69 3d 71 62 28 71 69 2f 30 78 39 38 39 36 38 30 29 3b 7d 2c 71 4c 3d 66 75 6e 63 74 69 6f 6e 28 71 58 2c 71 79 29 7b 66 6f 72 28 76 61 72 20 71 6a 3d 30 78 36 2c 71 61 3d 30 78 30 3b 2d 2d 71 6a 3e 3d 30 78 30 3b 29 71 61 2b 3d 71 58 5b 71 6a 5d 2c 71 58 5b 71 6a 5d 3d 71 62 28 71 61 2f 71 79 29 2c 71 61 3d 71 61 25 71 79 2a 30 78 39 38 39 36 38 30 3b 7d 2c 71 45 3d 66 75 6e 63 74 69 6f 6e 28 71 58 Data Ascii: 8000qX):qo(qXqX,qy/0x2,qj);},qQ=function(qX,qy,qj){for(var qa=-0x1,qi=qj;++qa<0x6;)qi+=qyqX[qa],qX[qa]=qi%0x989680,qi=qb(qi/0x989680);},qL=function(qX,qy){for(var qj=0x6,qa=0x0;--qj>=0x0;)qa+=qX[qj],qX[qj]=qb(qa/qy),qa=qa%qy*0x989680;},qE=function(qX
2025-01-07 18:40:34 UTC	16384	IN	Data Raw: 42 41 29 7b 76 61 72 20 4f 6c 3d 61 30 73 35 3b 69 66 28 4f 6c 28 30 78 35 32 35 29 21 3d 3d 27 4c 7a 6e 6f 7a 27 29 21 71 62 28 42 55 2c 42 41 29 7c 7c 42 65 26 26 21 71 62 28 42 34 2c 42 41 29 7c 7c 42 56 28 42 62 2c 42 55 5b 42 41 5d 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 71 77 28 42 38 28 71 62 29 2c 71 4e 29 3b 7d 29 2c 42 62 3b 7d 3b 71 65 7c 7c 28 42 35 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 4f 49 3d 4f 71 3b 69 66 28 71 41 28 42 36 2c 74 68 69 73 29 29 74 68 72 6f 77 20 6e 65 77 20 42 38 28 4f 49 28 30 78 33 36 31 29 29 3b 76 61 72 20 42 63 3d 61 72 67 75 6d 65 6e 74 73 5b 27 6c 65 6e 67 74 68 27 5d 26 26 76 6f 69 64 20 30 78 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 78 30 5d 3f 71 51 28 61 72 67 75 6d 65 6e 74 73 5b 30 78 30 5d 29 Data Ascii: BA){var Ol=a0s5;if(Ol(0x525)!=='Lznoz')!qb(BU,BA)\|\|Be&&!qb(B4,BA)\|\|BV(Bb,BU[BA]);else return qw(B8(qb),qN);}),Bb;};qe\|\|(B5=function(){var OI=Oq;if(qA(B6,this))throw new B8(OI(0x361));var Bc=arguments['length']&&void 0x0!==arguments[0x0]?qQ(arguments[0x0])
2025-01-07 18:40:34 UTC	9	IN	Data Raw: 71 63 2c 71 65 3b 72 0d 0a Data Ascii: qc,qe;r
2025-01-07 18:40:34 UTC	16384	IN	Data Raw: 34 30 30 30 0d 0a 65 74 75 72 6e 20 73 39 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 71 5a 29 7b 76 61 72 20 64 38 3d 61 30 73 35 3b 73 77 69 74 63 68 28 71 5a 5b 64 38 28 30 78 32 34 35 29 5d 29 7b 63 61 73 65 20 30 78 30 3a 72 65 74 75 72 6e 5b 30 78 34 2c 71 4d 5d 3b 63 61 73 65 20 30 78 31 3a 72 65 74 75 72 6e 5b 30 78 34 2c 73 55 28 71 5a 5b 64 38 28 30 78 31 37 35 29 5d 28 29 2c 66 75 6e 63 74 69 6f 6e 28 71 62 29 7b 72 65 74 75 72 6e 20 73 6c 28 71 62 28 29 29 3b 7d 2c 71 72 29 5d 3b 63 61 73 65 20 30 78 32 3a 72 65 74 75 72 6e 20 71 67 3d 71 5a 5b 27 73 65 6e 74 27 5d 28 29 2c 5b 30 78 34 2c 50 72 6f 6d 69 73 65 5b 64 38 28 30 78 31 64 34 29 5d 28 71 67 29 5d 3b 63 61 73 65 20 30 78 33 3a 66 6f 72 28 71 50 3d 71 5a 5b 64 38 28 30 78 31 37 35 29 Data Ascii: 4000eturn s9(this,function(qZ){var d8=a0s5;switch(qZ[d8(0x245)]){case 0x0:return[0x4,qM];case 0x1:return[0x4,sU(qZ[d8(0x175)](),function(qb){return sl(qb());},qr)];case 0x2:return qg=qZ['sent'](),[0x4,Promise[d8(0x1d4)](qg)];case 0x3:for(qP=qZ[d8(0x175)
2025-01-07 18:40:34 UTC	8	IN	Data Raw: 5d 28 71 41 2c 27 0d 0a Data Ascii: ](qA,'
2025-01-07 18:40:34 UTC	16384	IN	Data Raw: 34 30 30 30 0d 0a 5c 78 30 61 60 60 60 27 29 29 3b 7d 28 71 6e 2c 71 54 29 2c 28 71 4d 3d 71 72 5b 64 7a 28 30 78 32 61 30 29 5d 28 66 75 6e 63 74 69 6f 6e 28 71 5a 29 7b 76 61 72 20 64 66 3d 64 7a 2c 71 62 3d 71 6e 5b 71 5a 5d 3b 72 65 74 75 72 6e 20 73 64 28 71 62 5b 64 66 28 30 78 31 37 38 29 5d 28 66 75 6e 63 74 69 6f 6e 28 71 41 29 7b 72 65 74 75 72 6e 20 71 54 5b 71 41 5d 3b 7d 29 29 3e 30 2e 36 2a 71 62 5b 64 66 28 30 78 34 39 34 29 5d 3b 7d 29 29 5b 64 7a 28 30 78 33 63 37 29 5d 28 29 2c 5b 30 78 32 2c 71 4d 5d 3b 7d 76 61 72 20 71 63 3b 7d 7d 29 3b 7d 29 3b 7d 2c 27 66 6f 6e 74 50 72 65 66 65 72 65 6e 63 65 73 27 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 64 6b 3d 4f 61 3b 69 66 28 27 43 49 44 63 46 27 3d 3d 3d 64 6b 28 30 78 33 31 30 29 29 Data Ascii: 4000\x0a```'));}(qn,qT),(qM=qr[dz(0x2a0)](function(qZ){var df=dz,qb=qn[qZ];return sd(qb[df(0x178)](function(qA){return qT[qA];}))>0.6*qb[df(0x494)];}))[dz(0x3c7)](),[0x2,qM];}var qc;}});});},'fontPreferences':function(){var dk=Oa;if('CIDcF'===dk(0x310))

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	60216	198.58.107.108	443	3060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-07 18:40:35 UTC	871	OUT	POST /?KDnq=vxU7AS HTTP/1.1 Host: membersourcecu.paolayjon.us Connection: keep-alive Content-Length: 4244 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://membersourcecu.paolayjon.us Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://membersourcecu.paolayjon.us/?KDnq=vxU7AS Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-07 18:40:35 UTC	4244	OUT	Data Raw: 64 69 35 31 69 35 72 61 3d 25 35 42 25 35 42 25 32 32 37 30 37 61 32 35 33 37 34 34 36 34 37 38 32 35 33 33 34 32 37 31 25 32 32 25 32 43 25 32 32 32 35 33 37 34 33 36 65 34 39 37 65 34 35 37 34 37 33 36 31 32 35 25 32 32 25 32 43 25 32 32 33 33 34 31 36 66 37 61 37 34 32 35 33 33 34 33 33 31 32 35 33 33 25 32 32 25 32 43 25 32 32 34 34 32 35 34 33 33 32 32 35 33 38 33 36 37 65 34 33 32 35 33 33 25 32 32 25 32 43 25 32 32 34 31 33 32 33 35 33 32 33 34 33 30 33 36 33 38 33 33 33 34 33 31 25 32 32 25 32 43 25 32 32 33 38 33 35 33 32 33 38 33 31 33 34 33 38 25 32 32 25 35 44 25 32 43 25 32 32 32 35 32 34 30 36 38 33 34 31 25 32 32 25 32 43 25 32 32 36 36 39 33 35 38 34 25 32 32 25 32 43 37 25 35 44 26 34 31 76 66 6f 33 3d 25 35 42 25 35 42 25 32 32 36 63 32 Data Ascii: di51i5ra=%5B%5B%22707a253744647825334271%22%2C%222537436e497e4574736125%22%2C%2233416f7a74253343312533%22%2C%22442543322538367e432533%22%2C%224132353234303638333431%22%2C%2238353238313438%22%5D%2C%222524068341%22%2C%226693584%22%2C7%5D&41vfo3=%5B%5B%226c2
2025-01-07 18:40:35 UTC	406	IN	HTTP/1.1 302 Found Server: nginx Date: Tue, 07 Jan 2025 18:40:35 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close location: https://membersourcecu.paolayjon.us/?KDnq=vxU7AS set-cookie: JDN733="ODg0OWQ0MDctM2U0OC00ZjMyLWEwOTYtNjYzMzBkY2QzZjc4OjgyMTZjYjNiLWViMDYtNGQ4ZC1iMDY0LWZkMzJlNjJhMzlmNg=="; Domain=paolayjon.us; HttpOnly; Path=/; SameSite=None; Secure
2025-01-07 18:40:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	60217	198.58.107.108	443	3060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-07 18:40:35 UTC	873	OUT	GET /?KDnq=vxU7AS HTTP/1.1 Host: membersourcecu.paolayjon.us Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://membersourcecu.paolayjon.us/?KDnq=vxU7AS Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JDN733="ODg0OWQ0MDctM2U0OC00ZjMyLWEwOTYtNjYzMzBkY2QzZjc4OjgyMTZjYjNiLWViMDYtNGQ4ZC1iMDY0LWZkMzJlNjJhMzlmNg=="
2025-01-07 18:40:38 UTC	781	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 07 Jan 2025 18:40:38 GMT Content-Type: text/html; charset=utf-8 Content-Length: 57356 Connection: close cache-control: no-store, no-cache pragma: no-cache vary: Accept-Encoding p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 5cd0a04f-9973-4464-a86f-dfd0fe0f0401 x-ms-ests-server: 2.1.19683.6 - NEULR1 ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://1b4ddfb2-8849d407.paolayjon.us/api/report?catId=GW+estsfd+ams2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: *
2025-01-07 18:40:38 UTC	15603	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 bc bd 7b 5b ea c8 d2 37 fc ff 7c 0a e5 9e 4b c9 36 22 e7 93 2b e3 4d 0c ba 3c a2 82 a7 c5 70 fb 84 10 48 14 12 4c 40 c0 b5 f8 ee 6f 55 75 77 0e 08 33 f3 ec 7d 3f ef de d7 2c 93 4e 1f ab ab ab 7e 55 5d dd 7c db d6 1a c7 ad e7 9b fa 96 35 19 0d ff f8 ed 1b fb b3 f5 cd 32 f5 1e fc dd fa 36 b1 27 43 13 9f b6 ee cc 9e ed 99 c6 c4 76 06 f8 e1 20 f8 f2 6d 64 4e f4 2d c3 75 26 a6 33 51 12 13 73 3e 39 c0 7a 0e b7 0c 4b f7 7c 73 a2 4c 27 fd fd 72 02 da 98 8c f7 cd f7 a9 fd a1 24 8e 59 f6 fd d6 62 6c 26 0e d6 54 73 56 57 cc de c0 8c 97 7a da bf af ed 1f bb a3 b1 3e b1 bb c3 f5 05 67 76 6f 62 29 3d f3 c3 36 cc 7d 7a 91 b7 6c c7 9e d8 fa 70 df 37 f4 a1 a9 64 52 69 79 6b a4 cf ed d1 74 c4 93 b2 98 34 f5 4d 8f de 75 a8 5b 59 98 7e 62 cb d1 Data Ascii: {[7\|K6"+M<pHL@oUuw3}?,N~U]\|526'Cv mdN-u&3Qs>9zK\|sL'r$Ybl&TsVWz>gvob)=6}zlp7dRiykt4Mu[Y~b
2025-01-07 18:40:38 UTC	12556	IN	Data Raw: e1 2f b0 e5 65 38 96 4b e2 7c 9d c6 22 9e 03 db 9b 5c 08 ea ed 17 59 35 81 bc a4 cb 5a ed d5 b3 00 9d 24 62 a9 56 7b 31 21 7c 60 c0 82 fe 19 7b 65 8e 8b 00 82 cf 95 e0 6b 1e 17 0c 58 21 f4 86 7e 97 43 49 bc 65 74 8c 65 90 f8 0b 6e a3 26 79 dc 46 c4 d8 94 c9 3f 15 13 41 a3 08 4f 90 2f 1d 04 0d 8e b2 44 b8 a5 46 48 9f 0e 14 75 c8 9b 8e 7b 19 8d 76 78 52 ab 83 fe 67 48 ab b1 52 d9 0c 4d 25 58 0d 08 f1 07 90 b1 8c e6 c0 0c b5 af 07 26 d0 05 2a 7e 96 13 00 2f e0 ca d4 ae 84 42 34 dd f9 03 fe a1 d9 c7 97 6f b0 26 8f d0 6b bb 97 e4 29 7b f4 37 83 97 68 6d 23 48 d6 46 50 e5 36 55 38 62 15 66 8a 60 47 25 0f f0 87 e3 fe 3c 48 fe d9 db 93 0e c8 3d c8 ca fd 81 be 7b 9d 3c 82 5f 8a b0 1f ba 0e 0b b1 ce 06 2d e2 7e 2a 65 67 76 83 c7 e3 13 72 9b 85 fd 8f bf 12 f6 9c d2 Data Ascii: /e8K\|"\Y5Z$bV{1!\|`{ekX!~CIeten&yF?AO/DFHu{vxRgHRM%X&~/B4o&k){7hm#HFP6U8bf`G%<H={<_-~egvr
2025-01-07 18:40:38 UTC	16384	IN	Data Raw: a6 cd 3a 1d bf c7 88 02 41 ee 30 44 72 3f 37 1e 17 20 1b f3 c6 f4 5c 8b b0 0b 47 84 5d 7b 7d 4d a3 01 51 13 0e ca 9a 3e 76 41 be 93 a4 6a ff ed 43 27 d4 f7 7b e3 92 f2 aa 6d 71 91 d0 44 5f a9 89 26 f9 ee 18 71 21 fa f0 79 ac d1 6d 42 b7 43 1f 5b 90 65 40 09 76 37 1b 65 10 f5 c5 8c 5c 6f dc a7 f6 69 8f 38 3f a2 33 84 12 89 d9 81 7c 3f 4d 93 12 6b 42 29 0f 4d 15 ff 1a 17 e9 10 3f 9f 4d d5 42 d4 bb 05 97 d0 04 3b 15 91 15 ca 9b 69 44 d0 31 33 a8 98 35 29 df 83 fb d1 3a 6d 52 f6 73 02 10 93 84 41 29 90 1d 82 ef f7 18 59 d6 10 02 88 c1 fc 9e dd fe 2e 10 f9 9c ac 41 93 ef 19 5a 76 7a c3 61 7d a5 7a fd dd dd f2 71 34 23 fa a5 74 4a d7 8e 4c 2c d8 95 55 55 d4 03 65 60 70 4f d2 fc 06 0a 6d 7c b4 d9 c2 1f a9 85 c7 04 be 1d f0 d9 16 61 34 c6 23 35 c9 d5 ec fd 98 d6 Data Ascii: :A0Dr?7 \G]{}MQ>vAjC'{mqD_&q!ymBC[e@v7e\oi8?3\|?MkB)M?MB;iD135):mRsA)Y.AZvza}zq4#tJL,UUe`pOm\|a4#5
2025-01-07 18:40:38 UTC	12813	IN	Data Raw: 85 f9 5b 81 68 e9 08 44 4b 4d 1d ef 39 d4 fe 88 3d a8 b2 45 4b 2f 4b 2d 6b 6a bd ca 8a e9 7c 45 b0 c6 03 a8 52 f5 a5 96 4c c4 a5 15 c9 88 16 00 8f b7 c4 fa 6c 64 bd f1 89 e8 6a 90 0b 49 de 66 c4 55 6e af d7 83 95 90 7d c2 0e 06 fd 00 4b 22 1b cc d2 e4 c4 3c 98 3f 10 26 71 99 82 3d 90 ec f8 ce a8 f4 0c e5 d3 6e ed 92 16 0e d1 84 65 e2 2e 97 1e 71 a5 aa 09 38 56 c8 b7 e1 1b 57 38 8e 4a 81 4e 57 15 d9 ad b5 04 9c fa db 8b 4e 99 b3 ad 98 73 fa de 17 c2 56 39 6c ef fd 60 37 ad d9 64 d5 d8 e0 54 8f 6d 56 35 24 f8 b7 f7 f7 83 0a 09 7d c5 d4 6e 6d b9 cb 57 c1 2e df cb ef 07 5a f1 96 ff 5b 17 64 f6 39 a6 c8 52 47 1b 29 15 be dc cb b9 61 12 0a ff 64 c4 d5 f2 fe 50 da f3 1e 1a c7 62 96 c6 15 1b ab bc 0d a0 f0 d4 1c cf 9a 70 1d 9e fd e8 2f ef 53 d4 dc e4 26 ff 2e fc Data Ascii: [hDKM9=EK/K-kj\|ERLldjIfUn}K"<?&q=ne.q8VW8JNWNsV9l`7dTmV5$}nmW.Z[d9RG)adPbp/S&.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	60218	198.58.107.108	443	3060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-07 18:40:38 UTC	649	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1 Host: 423377fa-8849d407.paolayjon.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://membersourcecu.paolayjon.us sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://membersourcecu.paolayjon.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-07 18:40:41 UTC	806	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 07 Jan 2025 18:40:40 GMT Content-Type: application/x-javascript Content-Length: 49923 Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 02 Oct 2024 20:05:23 GMT etag: 0x8DCE31D8CF87EF9 x-ms-request-id: 3b91ff01-901e-001b-2892-59fd55000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20250107T184040Z-185c6999ffd24wbxhC1DFWv2380000000w2g00000000e9tc x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2025-01-07 18:40:41 UTC	13654	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 6d 5b e3 38 d2 30 fa fd fe 15 c1 bb 0f 1d 4f 4c c8 0b d0 e0 b4 3b 77 1a d2 dd cc 00 61 08 cc cc 2e b0 5c 4e ac 80 bb 83 9d b5 1d 68 06 72 7e fb a9 17 c9 96 1d 87 ee d9 3d d7 f9 f2 cc 0b b1 a5 92 2c 95 aa 4a 55 a5 92 b4 f9 d3 da ff 54 7e aa 6c fc f8 3f 95 e1 79 ef ec bc 32 f8 58 39 ff 7c 78 76 50 39 85 b7 7f 54 4e 06 e7 87 fb fd 1f af 07 3f 8a ff 9f df f9 71 65 e2 4f 45 05 7e 47 6e 2c bc 4a 18 54 c2 a8 e2 07 e3 30 9a 85 91 9b 88 b8 72 0f 7f 23 df 9d 56 26 51 78 5f 49 ee 44 65 16 85 5f c4 38 89 2b 53 3f 4e a0 d0 48 4c c3 c7 4a 15 aa 8b bc ca a9 1b 25 4f 95 c3 53 b3 0e f5 0b a8 cd bf f5 03 28 3d 0e 67 4f f0 7c 97 54 82 30 f1 c7 a2 e2 06 1e d5 36 85 97 20 16 95 79 e0 89 a8 f2 78 e7 8f ef 2a c7 fe 38 0a e3 70 92 54 22 31 16 Data Ascii: m[80OL;wa.\Nhr~=,JUT~l?y2X9\|xvP9TN?qeOE~Gn,JT0r#V&Qx_IDe_8+S?NHLJ%OS(=gO\|T06 yx*8pT"1
2025-01-07 18:40:41 UTC	16384	IN	Data Raw: 5d ec 11 9c 07 b7 17 b3 d2 5a b4 fc ef b6 45 de 8c f8 bd c6 30 d8 6b b5 21 72 03 26 d9 1f 00 4a c9 56 49 df dc ab 54 aa d2 d2 07 73 3c c4 80 34 30 8e ee 35 5e cf 5f 8d b5 8b 00 e4 e8 f8 8e 19 f3 07 80 ca 6b 8a c2 07 df 43 e2 9a 4f 3d 54 ab 59 46 95 57 58 0e cb f5 b6 7e 77 9f c0 8c 7f 15 9a cc fc bf 00 0c 53 f1 8f d4 f8 43 35 95 7e f6 24 4c 63 2f e4 7d 4a e5 cd 5b 82 2b b4 ac a4 9e bf 54 fe 77 5c 02 db 67 ad 4a d0 b4 f9 6a 36 52 dc 38 8c 70 f9 0d 97 cc 0c fd 0d 74 30 37 b9 43 e0 34 d5 36 96 92 32 a8 94 de 32 a8 34 29 83 1a 4c bd 2c 1f 5e a4 e8 c5 75 d8 4c e1 5a 4a ca ca ef f3 67 3f cc 33 2d 4d 9d c7 6f 7c 1f 26 ab 87 f1 81 81 d8 9c 83 13 e9 d3 19 52 b8 5e d3 6b 50 29 b7 aa c8 63 23 ff 2e 95 26 98 33 b3 41 83 ae 2d a5 ad a0 a8 e5 91 fc 21 b0 ec ab e9 da 51 Data Ascii: ]ZE0k!r&JVITs<405^_kCO=TYFWX~wSC5~$Lc/}J[+Tw\gJj6R8pt07C46224)L,^uLZJg?3-Mo\|&R^kP)c#.&3A-!Q
2025-01-07 18:40:41 UTC	16384	IN	Data Raw: a5 c3 52 e7 2a 85 ed 1f b5 03 80 09 35 73 40 82 22 5c 48 ae 9a 05 ff 98 f1 bd 7f cc 38 db 48 6d 87 43 5a d8 cd 45 54 37 be 74 eb ce da 58 92 e4 3d 70 d2 dd dc cc 7d a8 65 ef 0c 84 15 13 65 ae a7 35 3b b2 87 2a ae 6e ed 63 99 f3 f8 1f 9d 22 17 02 92 da 02 3f f3 92 2f 2e 8f c5 70 ad e2 09 af 97 61 ba e1 64 0d 09 47 4c 50 27 12 85 2b c7 69 c9 fc 55 94 0b 9b cb 4d 3e 1b 70 f2 54 9b 2b 99 26 ae 17 16 9c 3d f7 22 4a 86 d2 fe f5 df 2d 5d 7a 49 12 1e 0c 39 14 14 f4 68 33 39 c3 a8 0c b9 7c 15 0c 46 55 ba 17 6c b1 f7 cf e0 e4 3f 54 8e c3 02 8a 8d ac 7a fe 8d e5 9c 59 ae 00 a9 3c 6b 41 ca 29 b2 bd e7 17 47 fc f0 d8 73 25 c7 b7 bd f3 2d c1 3f 45 08 bf 09 cf 77 11 8a fc 94 78 05 44 c7 e9 e8 5a 80 1a ab ef bb ab 08 d7 07 e2 af e0 0f 35 67 15 df d6 9e 55 cc 0d aa 65 67 Data Ascii: R5s@"\H8HmCZET7tX=p}ee5;nc"?/.padGLP'+iUM>pT+&="J-]zI9h39\|FUl?TzY<kA)Gs%-?EwxDZ5gUeg
2025-01-07 18:40:41 UTC	3501	IN	Data Raw: 40 d9 ac 10 10 e8 6a d5 2a d3 73 0c aa eb 31 15 24 ae b7 45 83 5a ad a4 65 f5 cd de 9e 6c 2b 69 16 d4 5d 79 c3 ca 37 2b 99 da ca 5e 6c 4a 9f 55 09 ee 13 ce 5f 8e 4a 50 f6 57 a2 a4 59 f4 5d fa 35 d1 6a 47 0d d7 48 b8 8d d1 ee ee e8 65 31 d2 26 37 41 32 17 3a ea 68 7c fa 5a c1 7e d5 b2 26 9c 90 ea da db db 47 65 6a 99 8c 94 ae b1 e8 c0 ce cb 41 29 e5 1f a0 3c 53 76 3a 20 ed 42 a2 1f 09 75 5f 7f 88 1e ee ed b1 90 48 6b c8 2e c7 7d 2f 55 69 aa eb 1d b3 15 c0 a3 e1 27 23 3d 26 d2 8c 8d 1a 82 e8 9a 75 91 99 7f a1 38 f3 d8 4f d2 d9 da 30 ea 8e 4b cb 60 24 9f 66 16 4f 7e 8e 1d 6f 44 0f 5a 03 2d 2c a0 7d c7 a7 c2 f3 f3 b7 58 88 21 00 6c aa 67 b4 64 97 70 00 37 72 47 9b 68 f1 14 53 fb 9a c3 94 1b a9 18 9d 8c a1 22 4b 5e 27 e1 ca 07 b2 0c 7e 0d 2d 22 25 05 da 07 8c Data Ascii: @j*s1$EZel+i]y7+^lJU_JPWY]5jGHe1&7A2:h\|Z~&GejA)<Sv: Bu_Hk.}/Ui'#=&u8O0K`$fO~oDZ-,}X!lgdp7rGhS"K^'~-"%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	60220	198.58.107.108	443	3060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-07 18:40:41 UTC	540	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1 Host: 423377fa-8849d407.paolayjon.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JDN733="ODg0OWQ0MDctM2U0OC00ZjMyLWEwOTYtNjYzMzBkY2QzZjc4OjgyMTZjYjNiLWViMDYtNGQ4ZC1iMDY0LWZkMzJlNjJhMzlmNg=="
2025-01-07 18:40:44 UTC	806	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 07 Jan 2025 18:40:44 GMT Content-Type: application/x-javascript Content-Length: 49923 Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 02 Oct 2024 20:05:23 GMT etag: 0x8DCE31D8CF87EF9 x-ms-request-id: 5baf2201-a01e-0027-3bb7-60a32d000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20250107T184043Z-178b46cfc68gx75mhC1DFWfvdn000000027g0000000087m7 x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2025-01-07 18:40:44 UTC	13654	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 6d 5b e3 38 d2 30 fa fd fe 15 c1 bb 0f 1d 4f 4c c8 0b d0 e0 b4 3b 77 1a d2 dd cc 00 61 08 cc cc 2e b0 5c 4e ac 80 bb 83 9d b5 1d 68 06 72 7e fb a9 17 c9 96 1d 87 ee d9 3d d7 f9 f2 cc 0b b1 a5 92 2c 95 aa 4a 55 a5 92 b4 f9 d3 da ff 54 7e aa 6c fc f8 3f 95 e1 79 ef ec bc 32 f8 58 39 ff 7c 78 76 50 39 85 b7 7f 54 4e 06 e7 87 fb fd 1f af 07 3f 8a ff 9f df f9 71 65 e2 4f 45 05 7e 47 6e 2c bc 4a 18 54 c2 a8 e2 07 e3 30 9a 85 91 9b 88 b8 72 0f 7f 23 df 9d 56 26 51 78 5f 49 ee 44 65 16 85 5f c4 38 89 2b 53 3f 4e a0 d0 48 4c c3 c7 4a 15 aa 8b bc ca a9 1b 25 4f 95 c3 53 b3 0e f5 0b a8 cd bf f5 03 28 3d 0e 67 4f f0 7c 97 54 82 30 f1 c7 a2 e2 06 1e d5 36 85 97 20 16 95 79 e0 89 a8 f2 78 e7 8f ef 2a c7 fe 38 0a e3 70 92 54 22 31 16 Data Ascii: m[80OL;wa.\Nhr~=,JUT~l?y2X9\|xvP9TN?qeOE~Gn,JT0r#V&Qx_IDe_8+S?NHLJ%OS(=gO\|T06 yx*8pT"1
2025-01-07 18:40:44 UTC	16384	IN	Data Raw: 5d ec 11 9c 07 b7 17 b3 d2 5a b4 fc ef b6 45 de 8c f8 bd c6 30 d8 6b b5 21 72 03 26 d9 1f 00 4a c9 56 49 df dc ab 54 aa d2 d2 07 73 3c c4 80 34 30 8e ee 35 5e cf 5f 8d b5 8b 00 e4 e8 f8 8e 19 f3 07 80 ca 6b 8a c2 07 df 43 e2 9a 4f 3d 54 ab 59 46 95 57 58 0e cb f5 b6 7e 77 9f c0 8c 7f 15 9a cc fc bf 00 0c 53 f1 8f d4 f8 43 35 95 7e f6 24 4c 63 2f e4 7d 4a e5 cd 5b 82 2b b4 ac a4 9e bf 54 fe 77 5c 02 db 67 ad 4a d0 b4 f9 6a 36 52 dc 38 8c 70 f9 0d 97 cc 0c fd 0d 74 30 37 b9 43 e0 34 d5 36 96 92 32 a8 94 de 32 a8 34 29 83 1a 4c bd 2c 1f 5e a4 e8 c5 75 d8 4c e1 5a 4a ca ca ef f3 67 3f cc 33 2d 4d 9d c7 6f 7c 1f 26 ab 87 f1 81 81 d8 9c 83 13 e9 d3 19 52 b8 5e d3 6b 50 29 b7 aa c8 63 23 ff 2e 95 26 98 33 b3 41 83 ae 2d a5 ad a0 a8 e5 91 fc 21 b0 ec ab e9 da 51 Data Ascii: ]ZE0k!r&JVITs<405^_kCO=TYFWX~wSC5~$Lc/}J[+Tw\gJj6R8pt07C46224)L,^uLZJg?3-Mo\|&R^kP)c#.&3A-!Q
2025-01-07 18:40:44 UTC	16384	IN	Data Raw: a5 c3 52 e7 2a 85 ed 1f b5 03 80 09 35 73 40 82 22 5c 48 ae 9a 05 ff 98 f1 bd 7f cc 38 db 48 6d 87 43 5a d8 cd 45 54 37 be 74 eb ce da 58 92 e4 3d 70 d2 dd dc cc 7d a8 65 ef 0c 84 15 13 65 ae a7 35 3b b2 87 2a ae 6e ed 63 99 f3 f8 1f 9d 22 17 02 92 da 02 3f f3 92 2f 2e 8f c5 70 ad e2 09 af 97 61 ba e1 64 0d 09 47 4c 50 27 12 85 2b c7 69 c9 fc 55 94 0b 9b cb 4d 3e 1b 70 f2 54 9b 2b 99 26 ae 17 16 9c 3d f7 22 4a 86 d2 fe f5 df 2d 5d 7a 49 12 1e 0c 39 14 14 f4 68 33 39 c3 a8 0c b9 7c 15 0c 46 55 ba 17 6c b1 f7 cf e0 e4 3f 54 8e c3 02 8a 8d ac 7a fe 8d e5 9c 59 ae 00 a9 3c 6b 41 ca 29 b2 bd e7 17 47 fc f0 d8 73 25 c7 b7 bd f3 2d c1 3f 45 08 bf 09 cf 77 11 8a fc 94 78 05 44 c7 e9 e8 5a 80 1a ab ef bb ab 08 d7 07 e2 af e0 0f 35 67 15 df d6 9e 55 cc 0d aa 65 67 Data Ascii: R5s@"\H8HmCZET7tX=p}ee5;nc"?/.padGLP'+iUM>pT+&="J-]zI9h39\|FUl?TzY<kA)Gs%-?EwxDZ5gUeg
2025-01-07 18:40:44 UTC	3501	IN	Data Raw: 40 d9 ac 10 10 e8 6a d5 2a d3 73 0c aa eb 31 15 24 ae b7 45 83 5a ad a4 65 f5 cd de 9e 6c 2b 69 16 d4 5d 79 c3 ca 37 2b 99 da ca 5e 6c 4a 9f 55 09 ee 13 ce 5f 8e 4a 50 f6 57 a2 a4 59 f4 5d fa 35 d1 6a 47 0d d7 48 b8 8d d1 ee ee e8 65 31 d2 26 37 41 32 17 3a ea 68 7c fa 5a c1 7e d5 b2 26 9c 90 ea da db db 47 65 6a 99 8c 94 ae b1 e8 c0 ce cb 41 29 e5 1f a0 3c 53 76 3a 20 ed 42 a2 1f 09 75 5f 7f 88 1e ee ed b1 90 48 6b c8 2e c7 7d 2f 55 69 aa eb 1d b3 15 c0 a3 e1 27 23 3d 26 d2 8c 8d 1a 82 e8 9a 75 91 99 7f a1 38 f3 d8 4f d2 d9 da 30 ea 8e 4b cb 60 24 9f 66 16 4f 7e 8e 1d 6f 44 0f 5a 03 2d 2c a0 7d c7 a7 c2 f3 f3 b7 58 88 21 00 6c aa 67 b4 64 97 70 00 37 72 47 9b 68 f1 14 53 fb 9a c3 94 1b a9 18 9d 8c a1 22 4b 5e 27 e1 ca 07 b2 0c 7e 0d 2d 22 25 05 da 07 8c Data Ascii: @j*s1$EZel+i]y7+^lJU_JPWY]5jGHe1&7A2:h\|Z~&GejA)<Sv: Bu_Hk.}/Ui'#=&u8O0K`$fO~oDZ-,}X!lgdp7rGhS"K^'~-"%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	60221	198.58.107.108	443	3060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-07 18:40:41 UTC	670	OUT	GET /8849d4073e484f32a09666330dcd3f78/ HTTP/1.1 Host: membersourcecu.paolayjon.us Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://membersourcecu.paolayjon.us Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JDN733="ODg0OWQ0MDctM2U0OC00ZjMyLWEwOTYtNjYzMzBkY2QzZjc4OjgyMTZjYjNiLWViMDYtNGQ4ZC1iMDY0LWZkMzJlNjJhMzlmNg==" Sec-WebSocket-Key: e+e3Q2b+7d7Ky6K1H5Ce0Q== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2025-01-07 18:40:43 UTC	737	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 07 Jan 2025 18:40:43 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 8d4ba726-f0a0-4c1f-be52-0c014f112e00 x-ms-ests-server: 2.1.19683.6 - SEC ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://1b4ddfb2-8849d407.paolayjon.us/api/report?catId=GW+estsfd+ams2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2025-01-07 18:40:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	60222	198.58.107.108	443	3060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-07 18:40:41 UTC	905	OUT	GET /?KDnq=vxU7AS&sso_reload=true HTTP/1.1 Host: membersourcecu.paolayjon.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://membersourcecu.paolayjon.us/?KDnq=vxU7AS Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JDN733="ODg0OWQ0MDctM2U0OC00ZjMyLWEwOTYtNjYzMzBkY2QzZjc4OjgyMTZjYjNiLWViMDYtNGQ4ZC1iMDY0LWZkMzJlNjJhMzlmNg=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
2025-01-07 18:40:44 UTC	778	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 07 Jan 2025 18:40:44 GMT Content-Type: text/html; charset=utf-8 Content-Length: 63383 Connection: close cache-control: no-store, no-cache pragma: no-cache vary: Accept-Encoding p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 5ea82dc5-ab11-416b-9f24-2b2c61f11d00 x-ms-ests-server: 2.1.19683.6 - FRC ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://1b4ddfb2-8849d407.paolayjon.us/api/report?catId=GW+estsfd+ams2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: *
2025-01-07 18:40:44 UTC	15606	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd c9 76 e3 c8 92 28 b8 cf af 60 b0 b3 14 64 89 a2 38 0f 52 32 55 9c 45 71 14 07 8d 57 ad 03 02 4e 12 12 08 50 00 38 29 42 dc f5 97 f4 a2 cf 5b f4 ae ff e0 fe 58 9b 99 3b 40 90 92 22 23 ef d0 5d ef bc bc 55 19 84 3b 7c 30 b7 d9 cc 1d ae df be 94 da c5 fe 6d a7 ec 9b d8 53 ed f7 5f 7e c3 1f 9f ac 49 96 95 f3 fb 7d 8a 6a e6 fc 9a 6d fa 7d 9a a4 8f 73 7e a6 fb 7f ff c5 f7 db 84 49 0a fc fa 7e b3 55 5b 63 f8 e4 eb a9 63 dd a7 ea 3e db f0 ad 8d b9 e9 93 64 d9 98 eb 36 36 3a 76 5b fd 36 65 b6 e4 93 0d dd 66 ba 9d f3 db 6c 65 1f e3 84 a7 3e 79 22 99 16 b3 73 73 7b 74 94 f1 03 30 f6 ec 88 bd cc d5 45 ce 5f e4 cd 8f fa eb 19 f3 1f 7f 30 4c ad 9c 63 ca 98 ed f6 ba 39 1a e4 8f 8a c6 74 26 d9 ea 50 fb b8 e3 52 55 ec 49 4e 61 0b 55 66 Data Ascii: v(`d8R2UEqWNP8)B[X;@"#]U;\|0mS_~I}jm}s~I~U[cc>d66:v[6efle>y"ss{t0E_0Lc9t&PRUINaUf
2025-01-07 18:40:44 UTC	14460	IN	Data Raw: ec 56 75 92 9f 2a 16 4d cf 48 10 ba 54 92 c6 a7 2a 22 36 7f 72 5d 05 a7 2b 97 72 a7 0a 25 db 55 e7 b8 c6 d9 24 8f e1 51 cd ea f7 c8 d1 14 2e dd 7e f6 0c 9b 88 21 04 d8 42 63 70 35 27 8c c1 23 fd 69 38 c7 54 2a fc 0a 54 32 6f 76 47 cd df 0a b9 1f a9 28 42 8f 0e a7 56 71 fc 5d 6d e4 71 df b8 23 02 94 43 c8 85 8a 7f 1c 3a 9e 02 b0 b4 c7 9d f0 64 8c 71 29 13 89 2e 90 cc 63 97 0b 6b b8 c6 f9 0d 7d a0 f3 5b a3 14 8f 53 e3 f1 de b8 06 23 a7 ac da 2f e0 ef 23 f0 81 eb 8a ad 86 e7 3a 31 15 37 e4 8f b0 1e 93 1d 3d 59 8f 3c 65 42 71 81 26 0d 19 61 63 24 10 41 01 98 c6 4d fe 7f fd 97 ba 75 e4 b6 86 0d c2 42 27 92 46 66 9c a9 33 21 21 fc ae 0b e2 39 55 26 ab 39 9b 9b 6c 2b 51 38 74 77 ba bc 43 0f a0 d5 2e a1 8a 6c a8 f9 19 46 8b 4f 06 8f a4 b9 3e c4 61 6b f2 aa 84 fa Data Ascii: VuMHT"6r]+r%U$Q.~!Bcp5'#i8T*T2ovG(BVq]mq#C:dq).ck}[S#/#:17=Y<eBq&ac$AMuB'Ff3!!9U&9l+Q8twC.lFO>ak
2025-01-07 18:40:44 UTC	16384	IN	Data Raw: 9b e6 7e e1 21 3f b8 c7 3e c4 93 cf 05 bd b6 4e 04 0d f1 20 31 cb 7a 71 f7 5c 74 13 72 70 1d 47 5c 32 ed 82 84 db 14 2f b5 7c dc e6 79 b2 27 d7 e0 56 f3 be 3b f9 60 85 52 cd 07 73 bf 69 56 89 81 03 e4 ba d9 00 ff 0f cf 2a 7c 05 35 8c 3e fa cb ce 9e 10 e6 ae 5e 3a 8c 5f fe 76 0d 6e 2d a4 7c 26 8c 47 b3 3e 63 c7 f3 8b e5 65 ce 99 c5 cb eb 4a 5b d0 89 b1 02 68 4d 57 e2 0d b1 ef ea ba f2 97 e3 54 89 8d 8e 8b a0 0d 53 f3 ba f9 88 b5 04 37 e3 b4 91 69 17 eb fa 18 4f ae d4 08 57 22 d2 9f 38 9e 70 05 7e c0 41 27 7e 94 bb f7 1c b7 45 47 cc b9 7b 4b 0f d8 c9 4c 18 8d 72 2f 70 4f e2 82 31 90 eb 19 15 fd 1a 1c 15 fb b2 01 9c fd 98 ed 2a ad d5 36 a8 58 cb f3 47 69 bd 68 6e 82 1f cf 8d 39 76 77 10 4f fe 52 9d a0 c4 02 ba 04 7c 06 47 99 b8 dd b1 5e 9a 26 83 bc d5 c9 f2 Data Ascii: ~!?>N 1zq\trpG\2/\|y'V;`RsiV\|5>^:_vn-\|&G>ceJ[hMWTS7iOW"8p~A'~EG{KLr/pO16XGihn9vwOR\|G^&
2025-01-07 18:40:44 UTC	16384	IN	Data Raw: ed 7a 9e f1 f8 f4 43 4c b2 60 93 2e 6f 86 4f 07 39 db d6 0b 90 48 67 86 a9 e0 92 67 c1 f6 1b 2e 1e 98 6f 86 bf 2d 86 06 09 35 71 48 a7 35 60 5d 45 d1 d6 02 0c 2e 3c 3b dc 4d 01 82 69 7b 5b 0e 87 cb 3d 75 9b 45 71 b9 a7 96 79 db 9a cf 41 68 ae 24 d0 1c 2c 78 27 b4 56 c6 8b 9b 14 55 ec bb 99 c1 73 34 7b 82 d1 ff 06 60 96 b0 c6 4b b6 71 f0 58 b8 a5 07 f7 ee 2d 03 f7 ba d6 8a 53 0d d7 5e 8b b9 bb 91 df 0b c1 bd 0e 45 07 6a 24 98 5f fe 13 cd 2d 79 27 d1 f8 3f 59 a7 87 6e 9d 62 a6 0e ed a6 b1 8b e3 d0 2f 0e f7 93 bb 3f f3 52 15 4b 36 49 b7 a5 07 5a 9c f8 ec 58 06 5b 19 6f 74 11 7a 27 e6 43 d4 7b e9 8f 80 40 9e ef 2a 1f 17 4a 74 2d e9 bb a0 ab de d0 04 a7 d6 53 a6 ab 9a 60 bb 1a fe 14 d9 96 77 fd 14 bb b7 d2 97 a9 fc a2 af a8 c8 fe 72 7d 79 0a c4 c1 4b 7b b2 50 Data Ascii: zCL`.oO9Hgg.o-5qH5`]E.<;Mi{[=uEqyAh$,x'VUs4{`KqX-S^Ej$_-y'?Ynb/?RK6IZX[otz'C{@*Jt-S`wr}yK{P
2025-01-07 18:40:44 UTC	549	IN	Data Raw: a9 52 c7 16 6f 0d 15 da 09 87 80 91 a8 e0 6f 0d 76 bd 85 6e b4 ec 02 09 05 5b 94 1f d0 8b f0 47 9d e2 43 b9 0f de cc 47 23 6e 60 46 7f fd 8a db ac 85 4f a4 f5 93 56 a9 c7 c0 94 7b b3 76 6e e5 59 0e 28 19 5e 22 b4 14 7b 66 30 bb 31 34 2e 43 20 08 95 e3 6a a5 95 2c dd b3 a4 a8 65 b2 19 29 6e 14 c5 01 da 6c af 00 b6 5a 11 49 45 45 6b 89 af 6d 1a cd 16 93 5f bf 12 15 a9 21 03 2e 05 83 b3 da c4 11 b2 29 cb 63 43 d4 d7 40 11 fc b7 22 43 7a 80 83 34 4d ef 97 8c d3 f5 b4 b8 61 56 1e 3f 2a 69 20 b9 1e fe df ec b8 74 b2 6a 94 b4 87 a8 c7 6c 08 9e a7 7f 61 1e 32 7c 38 8f 46 f7 2b 43 0c 1f e3 97 86 e7 a5 95 51 90 04 4f 50 8f e6 97 d8 01 f4 c5 34 3a 0f a6 f3 e6 4a 9f ec 0f 7b f0 de 5b c1 af ba f3 39 85 9d 29 ad 50 68 5b a8 3f 99 df 4c 83 fb 26 70 de b3 b0 64 06 fa 81 Data Ascii: Roovn[GCG#n`FOV{vnY(^"{f014.C j,e)nlZIEEkm_!.)cC@"Cz4MaV?*i tjla2\|8F+CQOP4:J{[9)Ph[?L&pd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	60223	198.58.107.108	443	3060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-07 18:40:41 UTC	783	OUT	GET /favicon.ico HTTP/1.1 Host: membersourcecu.paolayjon.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://membersourcecu.paolayjon.us/?KDnq=vxU7AS Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JDN733="ODg0OWQ0MDctM2U0OC00ZjMyLWEwOTYtNjYzMzBkY2QzZjc4OjgyMTZjYjNiLWViMDYtNGQ4ZC1iMDY0LWZkMzJlNjJhMzlmNg=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
2025-01-07 18:40:43 UTC	737	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 07 Jan 2025 18:40:43 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 63290b0c-7faf-4676-b8b8-a8f73c5bce00 x-ms-ests-server: 2.1.19683.3 - FRC ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://1b4ddfb2-8849d407.paolayjon.us/api/report?catId=GW+estsfd+ams2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2025-01-07 18:40:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	60225	198.58.107.108	443	3060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-07 18:40:44 UTC	674	OUT	GET /ests/2.1/content/cdnbundles/converged.v2.login.min_81imvbluez-v5hbzpkxfcg2.css HTTP/1.1 Host: 423377fa-8849d407.paolayjon.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://membersourcecu.paolayjon.us sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://membersourcecu.paolayjon.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-07 18:40:47 UTC	790	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 07 Jan 2025 18:40:47 GMT Content-Type: text/css Content-Length: 20410 Connection: close cache-control: public, max-age=31536000 last-modified: Fri, 08 Nov 2024 04:59:25 GMT etag: 0x8DCFFB21E496F3A x-ms-request-id: a6cbe5f3-201e-0043-0792-59250a000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20250107T184046Z-185c6999ffdc2zm2hC1DFW8np80000000xs0000000002wrq x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2025-01-07 18:40:47 UTC	15594	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 7d 6b 93 db 36 b2 e8 77 ff 0a ee a4 52 eb c9 4a 8c 48 3d 47 53 49 ad e3 78 93 39 c7 af b2 9d 7d 54 2a b5 c5 91 a8 11 8f 29 51 97 a4 66 3c ab a3 ff 7e f1 46 03 68 90 d4 78 b2 d9 7b 2b eb 8d 2d a2 1b 0d a0 d1 68 a0 81 6e e0 eb af fe 10 3c 2f 76 f7 65 76 b3 ae 83 a7 cf cf 83 57 d9 a2 2c aa 62 55 93 f4 72 57 94 49 9d 15 db 30 78 96 e7 01 43 aa 82 32 ad d2 f2 36 5d 86 c1 57 5f 7f fd d5 1f 9e f4 bb ff 2f 78 ff e1 d9 bb 0f c1 9b bf 04 1f 7e bc 7a f7 7d f0 96 7c fd 23 78 fd e6 c3 d5 f3 17 41 67 2a 4f 9e 7c 58 67 55 b0 ca f2 34 20 ff 5e 27 55 ba 0c 8a 6d 50 94 41 b6 5d 88 5a a7 55 b0 21 7f 97 59 92 07 ab b2 d8 04 f5 3a 0d 76 65 f1 3f e9 82 b4 21 cf aa 9a 64 ba 4e f3 e2 2e 78 4a c8 95 cb e0 6d 52 d6 f7 c1 d5 db f3 30 f8 40 70 0b d2 Data Ascii: }k6wRJH=GSIx9}T)Qf<~Fhx{+-hn</vevW,bUrWI0xC26]W_/x~z}\|#xAgO\|XgU4 ^'UmPA]ZU!Y:ve?!dN.xJmR0@p
2025-01-07 18:40:47 UTC	4816	IN	Data Raw: 78 ce 2b 2b 6e 13 d6 17 0b 8b ca ba c2 a2 2a 8b 88 bd ac 2c 12 31 2f 2a 2b 24 e5 a1 95 75 9e df 51 bb 5f 6a 19 63 dc bc c9 45 89 b5 70 47 5d 70 ca fb 9e 0e 20 56 49 be 20 69 14 01 46 49 a3 08 a2 a9 10 de 51 33 ab ab 42 ad 3a 03 51 82 c9 86 58 21 80 b6 66 35 88 5b 0b 1a d2 44 af 18 0e 06 e3 65 32 71 db a4 25 ce 20 03 a5 0f 01 b4 b6 c9 2f 95 2d 68 58 9b 7c d2 ca db f4 30 61 ec 73 a7 f6 1e b8 a8 5b 0e 36 f1 85 8e 36 04 a6 86 1b 02 93 e3 0d 14 66 70 df 93 6e 56 08 83 b4 76 40 43 45 db f0 b0 2e 10 57 99 1b 46 0a 7a 9a 6c 5e eb 5b 91 85 43 fa 34 bc 98 9d 23 97 02 03 20 96 48 ba 89 37 5f 87 50 e3 87 e3 60 22 80 5b d9 23 19 93 28 7f 18 bb 0c ee 13 f6 9e b3 cc 4f 7d b0 93 e5 be fa 81 1c e1 db 81 87 f8 c3 85 9e 97 26 d9 ad e4 e2 f9 d0 f9 26 d9 66 bb 7d ce d8 eb 5e Data Ascii: x++n,1/+$uQ_jcEpG]p VI iFIQ3B:QX!f5[De2q% /-hX\|0as[66fpnVv@CE.WFzl^[C4# H7_P`"[#(O}&&f}^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	60226	198.58.107.108	443	3060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-07 18:40:44 UTC	651	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_kAx9qZOSH4g90FNHstHMCA2.js HTTP/1.1 Host: 423377fa-8849d407.paolayjon.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://membersourcecu.paolayjon.us sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://membersourcecu.paolayjon.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-07 18:40:47 UTC	807	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 07 Jan 2025 18:40:47 GMT Content-Type: application/x-javascript Content-Length: 122511 Connection: close cache-control: public, max-age=31536000 last-modified: Fri, 22 Nov 2024 01:34:34 GMT etag: 0x8DD0A95D1F56318 x-ms-request-id: 3decc844-001e-0035-0292-5990ef000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20250107T184046Z-185c6999ffdl9gbmhC1DFWzqv80000000w80000000001gua x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2025-01-07 18:40:47 UTC	15577	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 7b 77 e3 38 8e 38 fa ff fd 14 8e 66 6e da ee 28 2e c9 6f 2b ad ce ba 9c a4 2a db 79 4d 9c 54 f7 6e 2a 93 23 4b b4 a3 8e 22 79 25 39 8f 71 bc 9f fd 07 80 a4 44 d9 72 aa aa 77 cf bd e7 9e db 3b 5b b1 48 f0 05 82 20 00 82 e0 87 9f b7 fe af ca cf 95 dd ef ff af 32 ba 1a 5c 5e 55 ce 8f 2a 57 9f 8f 2f 0f 2a 17 f0 f5 1f 95 b3 f3 ab e3 e1 e1 f7 d7 83 8d e2 ff 5f dd fb 49 65 e2 07 ac 02 7f c7 4e c2 bc 4a 14 56 a2 b8 e2 87 6e 14 cf a2 d8 49 59 52 79 84 7f 63 df 09 2a 93 38 7a ac a4 f7 ac 32 8b a3 3f 99 9b 26 95 c0 4f 52 28 34 66 41 f4 5c a9 42 75 b1 57 b9 70 e2 f4 b5 72 7c 51 ab 43 fd 0c 6a f3 a7 7e 08 a5 dd 68 f6 0a bf ef d3 4a 18 a5 be cb 2a 4e e8 51 6d 01 7c 84 09 ab cc 43 8f c5 95 e7 7b df bd af 9c fa 6e 1c 25 d1 24 ad c4 cc Data Ascii: {w88fn(.o+yMTn#K"y%9qDrw;[H 2\^UW/_IeNJVnIYRyc8z2?&OR(4fA\BuWpr\|QCj~hJNQm\|C{n%$
2025-01-07 18:40:47 UTC	14460	IN	Data Raw: 1e c0 9a 03 61 25 53 aa 1d a5 76 7b cb d0 9d 3a 43 5f 08 8c 3d f3 9d aa 20 68 24 52 f0 ce cb da 3e 68 09 c0 81 9f f0 78 a1 5a 13 52 77 75 11 f2 cb fe 9a 13 3c 3b af 89 b6 ac 41 83 b8 1b c0 78 cf 67 d8 a1 04 f0 e2 10 97 71 63 7f 5c ec bf 52 7f 0e 51 cd 05 5a 40 01 48 3f 55 7e 42 9d 72 27 83 aa 5a 68 c6 d8 43 95 2b af 38 61 68 21 7b 9c e1 a5 19 ee 00 62 97 ed 39 c0 53 00 f0 3c 1f 0c cb 2b ac 7d c3 e4 b4 97 db 37 7c e9 20 fd de b4 e9 68 02 30 d1 04 20 54 7e 90 be c5 3d ec 7c c6 92 95 72 a8 bf a3 8f 08 28 4c 07 4e fc 90 47 4c d8 f3 57 3c df 3e a2 3f 16 f9 12 e2 45 90 d5 dc df d1 2f 4b c9 5d ab cf 76 50 6c 42 4f 63 ba 3d 73 86 37 cd 61 0f a9 7b 00 95 a7 a4 ba 42 b7 b0 c6 e3 0d ee 77 cc 8e eb 65 6e 8e 68 16 dd dc 6f e1 53 86 db e8 7b 03 10 4e 66 08 b6 44 a3 92 Data Ascii: a%Sv{:C_= h$R>hxZRwu<;Axgqc\RQZ@H?U~Br'ZhC+8ah!{b9S<+}7\| h0 T~=\|r(LNGLW<>?E/K]vPlBOc=s7a{BwenhoS{NfD
2025-01-07 18:40:47 UTC	16384	IN	Data Raw: 79 a0 8e 53 ff f7 a8 fb 18 c8 97 9e 96 d1 85 11 7d 9f 0d 48 17 b2 3b 1e 23 65 f0 25 7a 80 1c a8 52 99 a4 59 c6 27 cc 7e 30 c6 f5 22 5e cf bd fa c2 e0 4a 26 5d 0d fc 57 6a ca ef e6 51 ee 6b df 6b 59 85 1d db 88 ed d8 e6 14 e3 0f 32 be 8f f2 00 bd b2 fc 29 ea 1d f7 b5 94 ae f9 e8 a1 8e 97 fc 6a cc 93 17 8e e3 4a 14 3a fb ce ed b9 d7 48 01 e3 7d b4 f4 66 79 f9 2d cc c1 97 26 8e a8 fb da 2f 58 0d 5c b3 87 fe b4 59 22 7e 89 91 b1 7f 75 3f 42 11 48 b1 61 1c 84 b5 05 81 10 22 84 af d8 00 32 6a 17 29 05 8e a5 7d 9a 9a 78 c2 b6 c0 ea 98 44 15 da a8 40 90 43 7a 30 22 72 90 4c fc 60 84 16 e5 12 54 63 d4 bc 85 1d 10 0c 09 89 f0 e9 10 09 ee 9e e8 c5 c6 5a b5 17 b9 bd b1 b3 4d 80 47 7b 8c 05 b6 0f d4 90 94 11 d8 27 91 fb a6 da 6c e7 d1 68 9f f3 f8 01 03 03 3e d7 8c 79 Data Ascii: yS}H;#e%zRY'~0"^J&]WjQkkY2)jJ:H}fy-&/X\Y"~u?BHa"2j)}xD@Cz0"rL`TcZMG{'lh>y
2025-01-07 18:40:47 UTC	16384	IN	Data Raw: d6 43 56 5d 70 86 dd ea fb f7 c1 98 df bd af a9 e7 14 0e c8 dd d1 88 33 1c d7 64 60 00 1a f4 7c e5 3c a7 e6 58 28 49 a5 68 e0 7e e9 35 ad 06 be 9b 4e 26 2c 0c 12 43 66 66 64 99 34 bf e2 df c6 eb 01 ed f4 43 de f6 e1 a7 38 bf c1 60 64 a7 a9 1c e2 9f cd 71 81 6b 09 e6 e7 96 cf 07 31 09 66 0e 3e 22 d4 d0 bc 35 5b 33 8e a2 2f 27 ca fc 9d b3 f4 cc 02 70 af 61 1b f8 e5 89 d9 5c ba 1d 8a b7 c7 e6 db 3a 03 50 ce b8 67 e4 53 07 66 51 d2 8d d9 88 09 19 45 f0 bc 98 75 e4 e9 70 38 8a 0e d2 5b 9c 9b fd 2c db 47 22 98 73 be 36 67 d9 60 3e 29 c3 1b 33 c3 34 f9 3a 09 c6 e5 e1 18 d4 0c a7 b1 27 4e cd b5 14 92 3d a0 b9 96 8e cd 51 c7 0d 0b 73 bf cf 76 e6 62 44 54 5b a8 15 aa 6e 79 e5 6a 2a 3c e4 d9 81 54 5f f0 a6 c6 1b 98 50 2b 51 f6 87 e1 c3 a4 30 a9 14 29 ba ea a4 9e 28 Data Ascii: CV]p3d`\|<X(Ih~5N&,Cffd4C8`dqk1f>"5[3/'pa\:PgSfQEup8[,G"s6g`>)34:'N=QsvbDT[nyj*<T_P+Q0)(
2025-01-07 18:40:47 UTC	16384	IN	Data Raw: de 33 e2 05 5b 30 1d 05 9a 67 8f b1 1e 4d bf 41 3f 66 3e d0 47 c1 96 8b a3 17 bc b1 fe 6e b5 4a 79 2d 20 eb 04 f4 37 c9 34 36 9e 34 b6 eb 6e a7 d7 44 2d d9 22 a7 6e 2a 07 26 b5 94 13 88 7c 3f f3 16 41 a3 a2 c8 16 4d b3 6a 21 28 fa 08 09 18 69 74 9a a4 70 4a 5d 09 f0 24 7b fa 34 53 04 54 8b 8b 10 0d 06 6e b6 54 b3 a8 d5 27 31 bb d0 fa d9 c3 43 c4 27 8e 7c 19 7a 06 69 2b cc 0a ba 20 ec b4 b5 fa bf 2c 3b c2 b7 a9 bb 01 8c 08 34 eb 14 2c 67 1e 7b c8 66 ee f4 cf 08 96 dd 15 75 54 a3 c0 db 19 0a e1 de f6 e8 81 27 e4 e3 e2 a9 4c a5 a6 53 09 82 d6 bf d6 73 c5 4f 42 22 a4 29 27 83 55 12 23 fc 93 a7 d1 1d d4 0f ab ec d2 67 df c5 82 81 2d 32 11 7d 4d fd 11 57 a4 25 97 cb 64 3c 8e d3 47 1c 58 54 43 ff 94 07 8b cd 16 75 db f6 2c 07 6c cb 42 cf 12 17 1b fa ad 54 d7 a9 Data Ascii: 3[0gMA?f>GnJy- 7464nD-"n*&\|?AMj!(itpJ]${4STnT'1C'\|zi+ ,;4,g{fuT'LSsOB")'U#g-2}MW%d<GXTCu,lBT
2025-01-07 18:40:47 UTC	2275	IN	Data Raw: f4 5e a8 83 a3 7b d4 fc 8a 85 df 53 78 99 55 a5 95 6e 69 48 75 47 d6 86 48 d0 be b2 57 23 8b 66 76 65 87 1b ed ff 6d f2 be be f4 ed 50 5e d5 c1 a3 42 55 4c 6b d9 36 d9 dc b4 c9 b5 f3 c9 81 6e 35 b9 2f 2f bb 5b d3 09 ad bf ed ef ff 6d 79 0f dd 55 ff e1 74 ed 1d 69 bd 30 09 0d af c9 86 38 b2 ce e9 78 c3 bf 26 0f 3a 37 6b 9f cf a0 00 30 21 9a 43 ee c7 28 49 b6 ee f7 f4 56 e5 98 6a 3e 9d 58 83 73 08 74 d8 42 03 eb df b3 65 96 c4 7e 5f c8 d1 f0 fa 34 8b 0b eb 7f ad a7 e3 c6 bc 1a 59 ff 33 f9 9e 02 e0 5e 9f 1e 9f 9f b6 e2 49 ad ff 95 ea 36 10 2c 9e 18 e9 00 24 7d f3 29 f8 cd 4f 4a 63 ba 40 6b cf c7 f5 29 a5 e5 9d 43 9d 0b 77 3e 34 05 e8 06 53 da 35 c3 9b e3 ea 89 8a 4c 52 fa ad 1e 0f e5 36 3e 93 f7 ce b0 36 b4 87 3c 1c 58 83 11 65 f5 cc 56 33 e0 64 30 04 cf f1 Data Ascii: ^{SxUniHuGHW#fvemP^BULk6n5//[myUti08x&:7k0!C(IVj>XstBe~_4Y3^I6,$})OJc@k)Cw>4S5LR6>6<XeV3d0
2025-01-07 18:40:47 UTC	15928	IN	Data Raw: 90 93 9f 3a 09 d8 4d e0 fb 22 4f a2 38 08 12 4c 58 96 44 61 92 24 79 c0 c1 25 76 d2 4d 2d e9 52 1b 24 94 3b ae 00 c5 e6 5e 62 fb 89 1b 78 18 4e 90 88 3c b0 59 76 3b 6f dc 5a 67 69 ec 70 16 b9 3c 70 d5 bf be c7 38 88 2a 89 73 df 06 52 38 ee ed 1c 98 ab dd 84 86 47 64 11 b8 76 9e 81 ab 4a 3b b4 c1 29 64 ec 05 22 64 36 13 3e 8f 77 43 bc 61 9a f0 50 d8 e0 a2 b6 90 49 06 8e 0a 36 94 83 b5 63 f1 42 3f 12 c1 6e ba 89 0c ee b9 81 88 3c 96 b9 b1 0b 29 05 65 53 8a 10 ac 36 8f 58 00 6c 0c 76 33 81 51 ca ed 28 8c 32 37 83 2a 91 cb c4 0e 45 ce 61 2e 07 e0 e6 22 89 1c 7f 37 e8 10 1b 4f 70 46 ce 3a 70 bf cc 71 42 19 25 21 67 79 e0 32 58 8e 3c 08 bc 70 37 f4 14 a7 dc 93 8e 9f 67 79 8c 09 74 32 ac 4f c2 23 5b c4 be 24 f1 1e 47 bb 19 53 ad 88 a5 8e 13 48 df 76 c1 c3 33 1e Data Ascii: :M"O8LXDa$y%vM-R$;^bxN<Yv;oZgip<p8sR8GdvJ;)d"d6>wCaPI6cB?n<)eS6Xlv3Q(27Ea."7OpF:pqB%!gy2X<p7gyt2O#[$GSHv3
2025-01-07 18:40:47 UTC	16384	IN	Data Raw: 99 22 75 29 b5 e1 46 eb 01 1a 05 6e 77 67 fc 9a 72 9b 30 41 41 f1 54 2a e5 fd 1d 99 63 9d 06 d7 3f 6f 68 27 2b 8b 29 ec 49 f2 5e ac 8d 76 e5 db 9a 00 a2 3f 9b 85 10 fd 81 9e bc 28 e7 f2 b8 81 e4 fe 82 7c 25 0b 8a c1 ea 74 55 f3 e8 a7 d7 94 df 30 80 79 4d a6 fd cd e9 6f 9b b0 45 65 b3 7d f8 ed 13 c5 02 d6 ab 3f 6f 7d df c8 ea 16 4f f4 01 8e 7a 2b a3 af 9d 93 d5 42 1b 87 72 4a 7b 5d 73 ed d1 e8 1f 50 bb c4 a6 61 cd 3e de d0 f3 95 32 9b 86 07 09 b4 b9 91 93 e6 eb b5 13 7c df f0 24 c5 8d 7e 2e a0 5f 5e 2e 8c b0 db 3c ef dd 6a 9b c8 60 c5 54 6f 35 76 ad d5 de 6e 63 dd 32 a5 3f 1d 4d 7d 56 2e 96 6e 0c 4a e0 86 a6 45 2d 9a 29 d6 bc 52 01 60 6b fa bb 6a 7d 5d fc f7 4a 7f cd b0 d7 74 80 4f 96 f2 95 aa ff a7 88 a7 3f bb 13 f1 b7 13 d3 7f 68 d1 7a 2b 36 7f 6b 1e 7c Data Ascii: "u)Fnwgr0AAT*c?oh'+)I^v?(\|%tU0yMoEe}?o}Oz+BrJ{]sPa>2\|$~._^.<j`To5vnc2?M}V.nJE-)R`kj}]JtO?hz+6k\|
2025-01-07 18:40:47 UTC	8735	IN	Data Raw: 71 1b 0d aa 28 c9 cf f1 8f 85 36 4f a8 02 2d 5d 62 1d 28 75 0d 7f 87 6d c3 c1 9f d0 c6 27 7c 0d 32 d1 15 b6 05 3d 4d f1 37 bc 3f c2 bf 56 1b cd 83 18 e6 9e 84 2e 6d 71 d5 40 11 d8 da c6 39 14 1b f1 54 1b 9f a5 ea 70 03 aa 43 a6 ab 32 d3 9e 71 0b 8f d0 09 1f 99 0d 99 5d 80 68 64 7c 84 47 87 f3 e0 58 c6 3d 4e 8c b3 49 2c 4d ca 17 f0 f5 28 8a 3e 06 f0 f8 39 7c ff 69 41 e3 5b 7e 46 67 1c 83 d4 2a be 9e 4c ae 3b 87 b3 59 74 43 3d a1 7d 43 05 d6 fa e1 c4 ed fc e8 a6 6f 69 b2 98 a5 87 0c ba b9 61 f9 6d 49 1d 41 ad 22 cf d8 0a d0 95 3f 79 a0 40 87 69 27 27 61 80 63 47 ed d0 f8 5c d2 5f de c2 6f d8 2d fc 80 27 44 4e 8c 57 a8 8d c0 b8 2e a2 8f 34 34 9e c1 af 28 bd a2 f1 89 37 7f 4b bd 20 a6 6e 0a d2 bc 71 0a cf c9 27 12 cc 50 a0 45 7f ca c5 1c 81 94 b0 78 45 2f e0 Data Ascii: q(6O-]b(um'\|2=M7?V.mq@9TpC2q]hd\|GX=NI,M(>9\|iA[~Fg*L;YtC=}CoiamIA"?y@i''acG\_o-'DNW.44(7K nq'PExE/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	60227	198.58.107.108	443	3060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-07 18:40:44 UTC	670	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_i8f-75gfk3tbsm8bmatnqa2.js HTTP/1.1 Host: 423377fa-8849d407.paolayjon.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://membersourcecu.paolayjon.us sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://membersourcecu.paolayjon.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-07 18:40:46 UTC	806	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 07 Jan 2025 18:40:46 GMT Content-Type: application/x-javascript Content-Length: 16345 Connection: close cache-control: public, max-age=31536000 last-modified: Sat, 26 Oct 2024 01:33:48 GMT etag: 0x8DCF55E3D91C34E x-ms-request-id: e8362cd0-101e-0067-2cf6-5fd3aa000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20250107T184046Z-1755d4fdcbdxctrhhC1DFWpum400000003y000000000gfpx x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2025-01-07 18:40:46 UTC	15578	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 dd 7d 4d 73 23 c7 92 d8 dd bf 02 0f cf f1 86 5c f5 40 f8 e0 27 46 d0 18 04 c0 19 ec 90 00 04 80 33 52 48 32 a2 09 14 c1 7e 04 ba b1 dd 8d e1 f0 51 e3 78 37 1f f6 e0 ab 7d f3 c1 27 1f 7d f1 dd 3f 65 23 d6 bf c3 f9 51 55 5d d5 dd 00 c8 91 56 6f d7 0a c5 10 dd f5 95 95 95 95 95 99 95 99 fd 87 9b b5 3f 8d bd c0 df 13 fb 8f ea 77 21 d8 f3 f7 1f bd 9b 3d ef 47 ff e7 fd 50 c4 eb d0 2f e0 ef 92 f8 b4 0a c2 38 7a f5 d1 0d 0b 71 03 5f 35 1e e5 bb fa e3 67 c7 9b d5 7d 67 11 b8 33 31 ab ff a1 f2 f9 95 6c 2a b0 e9 d4 5d 2c f6 62 d5 83 13 3b c9 ef 60 1f 1e b8 59 e3 0f e5 a4 e0 33 0e e3 35 1e 75 47 41 69 d9 10 4e 50 9a 36 3c f8 77 d5 28 16 9d 60 af bc ff 79 ef c7 64 1a 4e e0 78 00 fc 5e 75 9f a0 f4 1b de 5e 05 fa 87 3f 87 fb 4e 08 7f 8e f6 Data Ascii: }Ms#\@'F3RH2~Qx7}'}?e#QU]Vo?w!=GP/8zq_5g}g31l*],b;`Y35uGAiNP6<w(`ydNx^u^?N
2025-01-07 18:40:46 UTC	767	IN	Data Raw: 4c f1 70 ee 03 7e b9 52 66 00 e0 2d 4b 19 b6 30 82 b4 8c 07 10 e2 6a 41 51 4f 3c 0d 86 9c fb 90 51 1e b8 7e 38 ef ac ca 5b ce 0d e6 a8 e8 40 1c 3c 54 74 00 12 3d d5 58 6e a1 df 32 fc 96 7e 1f e6 a4 0f c0 6d c1 20 4b f4 e5 94 23 08 f2 7a 2b a7 b0 22 f9 95 e1 1b bc 5a 63 78 0f a0 e3 c1 92 39 86 02 bf 1f 40 12 07 fe c0 04 ed 43 f1 51 60 30 01 9f 99 b9 11 22 9c 9c 46 f5 21 03 4e d8 91 99 23 47 70 69 f5 43 13 bf cf 2b a3 5b 30 aa 4d 00 19 ad 61 59 30 a3 07 1c ad 07 46 55 f6 20 7e 60 b4 50 c6 37 58 14 8d 87 24 dd 1a 60 1d ef 0e ff 78 de 3c 3f 3d 3f 29 da 42 15 9f 5b 3c cd 11 b4 5f 48 e5 b0 5e 8c 8c 27 d8 05 98 35 59 15 2d 93 07 3e a7 63 10 ab 63 49 07 c0 d2 95 1b 8e 96 fc d4 b9 0c ab 80 76 df 91 f7 17 e2 c7 c6 08 08 ae 98 e1 2e 77 5a 67 fd 21 d6 62 ff 6d 62 29 Data Ascii: Lp~Rf-K0jAQO<Q~8[@<Tt=Xn2~m K#z+"Zcx9@CQ`0"F!N#GpiC+[0MaY0FU ~`P7X$`x<?=?)B[<_H^'5Y->ccIv.wZg!bmb)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	60228	198.58.107.108	443	3060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-07 18:40:47 UTC	561	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_i8f-75gfk3tbsm8bmatnqa2.js HTTP/1.1 Host: 423377fa-8849d407.paolayjon.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JDN733="ODg0OWQ0MDctM2U0OC00ZjMyLWEwOTYtNjYzMzBkY2QzZjc4OjgyMTZjYjNiLWViMDYtNGQ4ZC1iMDY0LWZkMzJlNjJhMzlmNg=="
2025-01-07 18:40:49 UTC	806	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 07 Jan 2025 18:40:49 GMT Content-Type: application/x-javascript Content-Length: 16345 Connection: close cache-control: public, max-age=31536000 last-modified: Sat, 26 Oct 2024 01:33:48 GMT etag: 0x8DCF55E3D91C34E x-ms-request-id: 184da379-601e-0028-7530-59d541000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20250107T184048Z-185c6999ffdsql8qhC1DFW3ue80000000xsg000000001w9z x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2025-01-07 18:40:49 UTC	15578	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 dd 7d 4d 73 23 c7 92 d8 dd bf 02 0f cf f1 86 5c f5 40 f8 e0 27 46 d0 18 04 c0 19 ec 90 00 04 80 33 52 48 32 a2 09 14 c1 7e 04 ba b1 dd 8d e1 f0 51 e3 78 37 1f f6 e0 ab 7d f3 c1 27 1f 7d f1 dd 3f 65 23 d6 bf c3 f9 51 55 5d d5 dd 00 c8 91 56 6f d7 0a c5 10 dd f5 95 95 95 95 95 99 95 99 fd 87 9b b5 3f 8d bd c0 df 13 fb 8f ea 77 21 d8 f3 f7 1f bd 9b 3d ef 47 ff e7 fd 50 c4 eb d0 2f e0 ef 92 f8 b4 0a c2 38 7a f5 d1 0d 0b 71 03 5f 35 1e e5 bb fa e3 67 c7 9b d5 7d 67 11 b8 33 31 ab ff a1 f2 f9 95 6c 2a b0 e9 d4 5d 2c f6 62 d5 83 13 3b c9 ef 60 1f 1e b8 59 e3 0f e5 a4 e0 33 0e e3 35 1e 75 47 41 69 d9 10 4e 50 9a 36 3c f8 77 d5 28 16 9d 60 af bc ff 79 ef c7 64 1a 4e e0 78 00 fc 5e 75 9f a0 f4 1b de 5e 05 fa 87 3f 87 fb 4e 08 7f 8e f6 Data Ascii: }Ms#\@'F3RH2~Qx7}'}?e#QU]Vo?w!=GP/8zq_5g}g31l*],b;`Y35uGAiNP6<w(`ydNx^u^?N
2025-01-07 18:40:49 UTC	767	IN	Data Raw: 4c f1 70 ee 03 7e b9 52 66 00 e0 2d 4b 19 b6 30 82 b4 8c 07 10 e2 6a 41 51 4f 3c 0d 86 9c fb 90 51 1e b8 7e 38 ef ac ca 5b ce 0d e6 a8 e8 40 1c 3c 54 74 00 12 3d d5 58 6e a1 df 32 fc 96 7e 1f e6 a4 0f c0 6d c1 20 4b f4 e5 94 23 08 f2 7a 2b a7 b0 22 f9 95 e1 1b bc 5a 63 78 0f a0 e3 c1 92 39 86 02 bf 1f 40 12 07 fe c0 04 ed 43 f1 51 60 30 01 9f 99 b9 11 22 9c 9c 46 f5 21 03 4e d8 91 99 23 47 70 69 f5 43 13 bf cf 2b a3 5b 30 aa 4d 00 19 ad 61 59 30 a3 07 1c ad 07 46 55 f6 20 7e 60 b4 50 c6 37 58 14 8d 87 24 dd 1a 60 1d ef 0e ff 78 de 3c 3f 3d 3f 29 da 42 15 9f 5b 3c cd 11 b4 5f 48 e5 b0 5e 8c 8c 27 d8 05 98 35 59 15 2d 93 07 3e a7 63 10 ab 63 49 07 c0 d2 95 1b 8e 96 fc d4 b9 0c ab 80 76 df 91 f7 17 e2 c7 c6 08 08 ae 98 e1 2e 77 5a 67 fd 21 d6 62 ff 6d 62 29 Data Ascii: Lp~Rf-K0jAQO<Q~8[@<Tt=Xn2~m K#z+"Zcx9@CQ`0"F!N#GpiC+[0MaY0FU ~`P7X$`x<?=?)B[<_H^'5Y->ccIv.wZg!bmb)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	60224	198.58.107.108	443	3060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-07 18:40:47 UTC	710	OUT	GET /shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js HTTP/1.1 Host: 423377fa-8849d407.paolayjon.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://membersourcecu.paolayjon.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JDN733="ODg0OWQ0MDctM2U0OC00ZjMyLWEwOTYtNjYzMzBkY2QzZjc4OjgyMTZjYjNiLWViMDYtNGQ4ZC1iMDY0LWZkMzJlNjJhMzlmNg=="
2025-01-07 18:40:49 UTC	806	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 07 Jan 2025 18:40:49 GMT Content-Type: application/x-javascript Content-Length: 61141 Connection: close cache-control: public, max-age=31536000 last-modified: Thu, 25 May 2023 17:22:47 GMT etag: 0x8DB5D44A8CEE4F4 x-ms-request-id: fb32f19a-601e-0042-7c75-597ad6000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20250107T184049Z-185c6999ffdmzvmdhC1DFW0ny40000000w5g000000007y2b x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2025-01-07 18:40:49 UTC	13654	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 cc bd 79 5b db c8 b2 38 fc ff fd 14 46 cf 5c 8e 74 50 1c 1b 92 4c 62 47 e3 4b c0 49 3c 61 1b 96 c9 cc 21 1c 1e 61 37 58 89 2d 79 24 19 c2 01 7f f7 5f 55 f5 ae c5 c0 cc dc f7 be cf 4c b0 d4 aa de ab ab ab ab 6b 71 6f a2 78 94 dc 34 73 36 61 53 96 a7 b7 e7 37 ec 62 16 0e bf fd 9c 25 f1 2c 58 fa f5 fe fe f4 cc 6b ce e6 d9 d8 3d 3d 5d 3f f3 4f 7d df bf 9c c7 c3 3c 4a 62 97 f9 b9 1f 7b 77 ce 3c 63 8d 2c 4f a3 61 ee 74 e3 66 ea e6 9e 1f 37 47 6e ee 3b bf 86 93 39 fb 04 15 38 be ab b2 79 77 29 cb e7 69 dc 48 9b 6c e1 29 d8 fe 35 8b f3 9d 30 67 f1 f0 b6 06 3c 2c 82 1f b0 34 8b 32 cc c2 6a b2 5c 18 59 8e d3 70 c8 76 d8 35 9b d4 00 8f 0c e0 cd d9 6c 10 67 d1 d5 38 cf b6 92 b4 ba f8 c8 6a d1 bb 30 63 b5 a0 66 d1 e7 fd ef d0 e4 11 1b 0d Data Ascii: y[8F\tPLbGKI<a!a7X-y$_ULkqox4s6aS7b%,Xk==]?O}<Jb{w<c,Oatf7Gn;98yw)iHl)50g<,42j\Ypv5lg8j0cf
2025-01-07 18:40:49 UTC	16384	IN	Data Raw: 37 09 1a 71 03 e7 8f 8d 7b fa b8 48 7f 7b 25 76 16 56 3e b5 b8 fe cc 14 7c ac 81 50 9c 70 f0 09 21 2a f1 26 f8 c0 96 31 11 bf 2d d5 9b 78 98 fa 71 46 31 65 d7 51 32 cf 38 09 cc a2 bc 70 a6 95 62 af c8 4c b7 25 55 dc 99 46 89 e7 53 df 80 d6 9f b8 9e a4 d5 8a 7b c2 a3 2e 10 ed 5f 31 00 ca 0c 5a a1 5a 40 e2 49 e0 5d 0a 4e 3b 80 8c 9a 7b 34 f9 ec 20 45 06 54 91 6b ce 64 6e a4 98 41 fc 8c e9 94 23 45 48 df d5 d4 a5 2c 2b 62 83 a5 66 1e 45 5b ca 93 99 a4 0f 00 df 20 4f 78 82 ab 36 98 67 62 91 63 94 43 51 bf d5 9c e1 3c d9 03 67 8e 08 17 af d7 8d 40 c1 23 c1 56 18 e3 71 17 43 5b f2 a8 bc 0a 1c dd 13 64 6c 38 cf 61 91 4d 6e d5 a1 f6 32 4a 33 0e 8f 34 2e 83 8e a8 1c 8e 72 54 06 34 ef 67 c6 75 f1 a3 25 0e 51 ba ef ab 1b 89 8a cb 15 c7 11 3e 76 5b d8 54 f4 60 45 31 Data Ascii: 7q{H{%vV>\|Pp!*&1-xqF1eQ28pbL%UFS{._1ZZ@I]N;{4 ETkdnA#EH,+bfE[ Ox6gbcCQ<g@#VqC[dl8aMn2J34.rT4gu%Q>v[T`E1
2025-01-07 18:40:49 UTC	16384	IN	Data Raw: eb a4 04 93 52 01 93 52 ee 3e 20 59 6a 9a b9 ad a4 66 6f 45 da 86 61 f1 f6 d9 d6 8c 32 3a 7f 1b 4e ca 8e d3 4b d9 e9 58 75 3a 45 a7 e9 5a 65 b1 1b c3 15 ea 97 35 86 01 ae 81 97 71 67 40 9d 1c c8 1e ba 19 dd 04 6a 82 53 9a dd 41 8f ad 0e 16 fa 69 2a af fd f6 64 3f 33 96 bf 96 5d 15 ef b5 bd 65 80 af b5 98 24 c8 df f2 b2 52 b3 e9 62 b3 27 34 ee 38 ce 79 fa 12 96 0d 72 6a bd 8e 47 53 dd c1 8a d1 6f 6f ae 4a 50 b2 1e 58 50 b8 99 cf b1 c4 52 0c 09 26 35 35 63 f9 79 c1 8a 76 c8 ee 05 08 d9 ed 8a 1f 82 02 11 23 15 5d f1 e3 3e fb 9f 3f f3 f5 19 fd ff 03 61 a0 69 83 80 18 c2 7b 33 d4 ff 3d 58 fd aa 30 59 e1 15 59 bb 39 39 cc 0f 08 c6 46 19 58 4b ae a3 0a 39 9e ff 6b 70 51 be fa cc 4b 1a 84 e3 48 27 b0 3e 0c 98 5f 8e 2d 93 a7 84 38 37 30 5c 87 6d af 16 da 72 6c 00 Data Ascii: RR> YjfoEa2:NKXu:EZe5qg@jSAi*d?3]e$Rb'48yrjGSooJPXPR&55cyv#]>?ai{3=X0YY99FXK9kpQKH'>_-870\mrl
2025-01-07 18:40:49 UTC	14719	IN	Data Raw: 4d 10 f0 b5 88 b0 8a e2 7a d2 24 bf a1 08 f1 60 38 8e 64 0d bd c4 74 c2 47 1d be a7 09 eb c2 ff cb 30 cb 2f ee 59 81 37 11 2e 29 de 51 0a 53 ae f4 96 8d e9 da 5b 73 d6 0b d6 6d a0 43 b8 e7 3a 7b d3 e2 fa 43 1e 0a d6 eb 59 3c b8 89 a0 46 5d 9b 8a b8 8e f4 c5 60 1c d3 8a 6f 48 f1 00 15 ae 24 98 85 e0 6a d4 d9 17 cf 87 43 91 45 77 c8 4d f4 48 e9 f2 81 13 01 64 05 df 61 a3 48 37 98 f9 ba 71 4b 04 5e 9c 53 c1 6f 64 f2 c7 d3 09 ae 9b 0d 14 73 7c eb 8d b3 31 98 df ce d2 9b 28 91 23 93 2f e2 04 bd f9 36 d9 84 5b 95 19 41 97 6a c7 bd 13 a2 a6 1c 72 31 e1 55 a3 4f 88 f5 c4 07 ce 0d 0a cd e9 0e 52 ca 2d b2 69 44 73 ed 0c c0 7b a5 e1 b3 29 9b bd f6 b4 0c 61 c9 d9 7e f6 b0 f1 85 50 c9 0d 02 87 51 78 eb c0 33 2b 7c 8b f8 a7 40 cc ee 85 f7 11 7f 0f 2f 6f 08 e7 fa 08 bc Data Ascii: Mz$`8dtG0/Y7.)QS[smC:{CY<F]`oH$jCEwMHdaH7qK^Sods\|1(#/6[Ajr1UOR-iDs{)a~PQx3+\|@/o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	60229	198.58.107.108	443	3060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-07 18:40:47 UTC	806	OUT	GET /Me.htm?v=3 HTTP/1.1 Host: l1ve.paolayjon.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://membersourcecu.paolayjon.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JDN733="ODg0OWQ0MDctM2U0OC00ZjMyLWEwOTYtNjYzMzBkY2QzZjc4OjgyMTZjYjNiLWViMDYtNGQ4ZC1iMDY0LWZkMzJlNjJhMzlmNg=="
2025-01-07 18:40:50 UTC	514	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 07 Jan 2025 18:40:50 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1425 Connection: close cache-control: max-age=315360000 vary: Accept-Encoding p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" referrer-policy: strict-origin-when-cross-origin x-ms-route-info: C554_BAY x-ms-request-id: 15260982-2f4f-4a5f-b45c-cb8cf7a766f9 ppserver: PPV: 30 H: PH1PEPF00011FD3 V: 0 content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: *
2025-01-07 18:40:50 UTC	1425	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 57 db 6e db 38 10 7d ef 57 d8 44 11 88 6b ae e2 5b 6c 47 0e 13 14 dd 2e ea a2 69 8b aa 8b 7d 70 b5 00 2d d1 36 5b 99 14 48 da 69 e0 e8 df 77 74 b3 6c 75 9b 6c 1f fa 90 58 1e ce 1c 9e 33 9c 19 ca 57 26 d4 22 b1 2d 7b 9f 70 8a 2c ff 66 cf bf b0 1d 2b ac e8 fa 59 ab bd dc ca d0 0a 25 1d 4b 38 de 2f 95 76 76 4c b7 4c 4b c8 16 c7 76 6e 02 ca e1 5f ea d8 b5 30 a4 76 06 d7 f2 b9 c5 1d 89 f7 62 e9 98 b9 0c b0 e6 76 ab 65 2b 7b 76 f9 b7 44 69 6b a6 19 a0 a0 99 89 ee 4b 9b b7 4f 89 88 3c 49 62 c5 22 1e 79 ed 5e 3a 2d 43 6d 16 1a b2 38 76 44 85 40 04 a9 9f 39 86 2f 45 18 6d 77 eb 85 34 e7 4d f7 07 20 ee 6e 28 88 72 43 0a 41 6e 42 11 22 dc e9 e2 d4 99 37 34 57 42 4c 2e ab cc 00 a7 cb b9 1f 10 43 bb 44 52 ee c6 5c ae ec 7a 6a ae e4 b4 Data Ascii: Wn8}WDk[lG.i}p-6[HiwtlulX3W&"-{p,f+Y%K8/vvLLKvn_0vbve+{vDikKO<Ib"y^:-Cm8vD@9/Emw4M n(rCAnB"74WBL.CDR\zj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	60230	198.58.107.108	443	3060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-07 18:40:48 UTC	542	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_kAx9qZOSH4g90FNHstHMCA2.js HTTP/1.1 Host: 423377fa-8849d407.paolayjon.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JDN733="ODg0OWQ0MDctM2U0OC00ZjMyLWEwOTYtNjYzMzBkY2QzZjc4OjgyMTZjYjNiLWViMDYtNGQ4ZC1iMDY0LWZkMzJlNjJhMzlmNg=="
2025-01-07 18:40:50 UTC	807	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 07 Jan 2025 18:40:50 GMT Content-Type: application/x-javascript Content-Length: 122511 Connection: close cache-control: public, max-age=31536000 last-modified: Fri, 22 Nov 2024 01:34:34 GMT etag: 0x8DD0A95D1F56318 x-ms-request-id: 3decc844-001e-0035-0292-5990ef000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20250107T184049Z-185c6999ffdpgcczhC1DFWz3y00000000xk000000000hrw3 x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2025-01-07 18:40:50 UTC	15577	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 7b 77 e3 38 8e 38 fa ff fd 14 8e 66 6e da ee 28 2e c9 6f 2b ad ce ba 9c a4 2a db 79 4d 9c 54 f7 6e 2a 93 23 4b b4 a3 8e 22 79 25 39 8f 71 bc 9f fd 07 80 a4 44 d9 72 aa aa 77 cf bd e7 9e db 3b 5b b1 48 f0 05 82 20 00 82 e0 87 9f b7 fe af ca cf 95 dd ef ff af 32 ba 1a 5c 5e 55 ce 8f 2a 57 9f 8f 2f 0f 2a 17 f0 f5 1f 95 b3 f3 ab e3 e1 e1 f7 d7 83 8d e2 ff 5f dd fb 49 65 e2 07 ac 02 7f c7 4e c2 bc 4a 14 56 a2 b8 e2 87 6e 14 cf a2 d8 49 59 52 79 84 7f 63 df 09 2a 93 38 7a ac a4 f7 ac 32 8b a3 3f 99 9b 26 95 c0 4f 52 28 34 66 41 f4 5c a9 42 75 b1 57 b9 70 e2 f4 b5 72 7c 51 ab 43 fd 0c 6a f3 a7 7e 08 a5 dd 68 f6 0a bf ef d3 4a 18 a5 be cb 2a 4e e8 51 6d 01 7c 84 09 ab cc 43 8f c5 95 e7 7b df bd af 9c fa 6e 1c 25 d1 24 ad c4 cc Data Ascii: {w88fn(.o+yMTn#K"y%9qDrw;[H 2\^UW/_IeNJVnIYRyc8z2?&OR(4fA\BuWpr\|QCj~hJNQm\|C{n%$
2025-01-07 18:40:50 UTC	14460	IN	Data Raw: 1e c0 9a 03 61 25 53 aa 1d a5 76 7b cb d0 9d 3a 43 5f 08 8c 3d f3 9d aa 20 68 24 52 f0 ce cb da 3e 68 09 c0 81 9f f0 78 a1 5a 13 52 77 75 11 f2 cb fe 9a 13 3c 3b af 89 b6 ac 41 83 b8 1b c0 78 cf 67 d8 a1 04 f0 e2 10 97 71 63 7f 5c ec bf 52 7f 0e 51 cd 05 5a 40 01 48 3f 55 7e 42 9d 72 27 83 aa 5a 68 c6 d8 43 95 2b af 38 61 68 21 7b 9c e1 a5 19 ee 00 62 97 ed 39 c0 53 00 f0 3c 1f 0c cb 2b ac 7d c3 e4 b4 97 db 37 7c e9 20 fd de b4 e9 68 02 30 d1 04 20 54 7e 90 be c5 3d ec 7c c6 92 95 72 a8 bf a3 8f 08 28 4c 07 4e fc 90 47 4c d8 f3 57 3c df 3e a2 3f 16 f9 12 e2 45 90 d5 dc df d1 2f 4b c9 5d ab cf 76 50 6c 42 4f 63 ba 3d 73 86 37 cd 61 0f a9 7b 00 95 a7 a4 ba 42 b7 b0 c6 e3 0d ee 77 cc 8e eb 65 6e 8e 68 16 dd dc 6f e1 53 86 db e8 7b 03 10 4e 66 08 b6 44 a3 92 Data Ascii: a%Sv{:C_= h$R>hxZRwu<;Axgqc\RQZ@H?U~Br'ZhC+8ah!{b9S<+}7\| h0 T~=\|r(LNGLW<>?E/K]vPlBOc=s7a{BwenhoS{NfD
2025-01-07 18:40:51 UTC	16384	IN	Data Raw: 79 a0 8e 53 ff f7 a8 fb 18 c8 97 9e 96 d1 85 11 7d 9f 0d 48 17 b2 3b 1e 23 65 f0 25 7a 80 1c a8 52 99 a4 59 c6 27 cc 7e 30 c6 f5 22 5e cf bd fa c2 e0 4a 26 5d 0d fc 57 6a ca ef e6 51 ee 6b df 6b 59 85 1d db 88 ed d8 e6 14 e3 0f 32 be 8f f2 00 bd b2 fc 29 ea 1d f7 b5 94 ae f9 e8 a1 8e 97 fc 6a cc 93 17 8e e3 4a 14 3a fb ce ed b9 d7 48 01 e3 7d b4 f4 66 79 f9 2d cc c1 97 26 8e a8 fb da 2f 58 0d 5c b3 87 fe b4 59 22 7e 89 91 b1 7f 75 3f 42 11 48 b1 61 1c 84 b5 05 81 10 22 84 af d8 00 32 6a 17 29 05 8e a5 7d 9a 9a 78 c2 b6 c0 ea 98 44 15 da a8 40 90 43 7a 30 22 72 90 4c fc 60 84 16 e5 12 54 63 d4 bc 85 1d 10 0c 09 89 f0 e9 10 09 ee 9e e8 c5 c6 5a b5 17 b9 bd b1 b3 4d 80 47 7b 8c 05 b6 0f d4 90 94 11 d8 27 91 fb a6 da 6c e7 d1 68 9f f3 f8 01 03 03 3e d7 8c 79 Data Ascii: yS}H;#e%zRY'~0"^J&]WjQkkY2)jJ:H}fy-&/X\Y"~u?BHa"2j)}xD@Cz0"rL`TcZMG{'lh>y
2025-01-07 18:40:51 UTC	16384	IN	Data Raw: d6 43 56 5d 70 86 dd ea fb f7 c1 98 df bd af a9 e7 14 0e c8 dd d1 88 33 1c d7 64 60 00 1a f4 7c e5 3c a7 e6 58 28 49 a5 68 e0 7e e9 35 ad 06 be 9b 4e 26 2c 0c 12 43 66 66 64 99 34 bf e2 df c6 eb 01 ed f4 43 de f6 e1 a7 38 bf c1 60 64 a7 a9 1c e2 9f cd 71 81 6b 09 e6 e7 96 cf 07 31 09 66 0e 3e 22 d4 d0 bc 35 5b 33 8e a2 2f 27 ca fc 9d b3 f4 cc 02 70 af 61 1b f8 e5 89 d9 5c ba 1d 8a b7 c7 e6 db 3a 03 50 ce b8 67 e4 53 07 66 51 d2 8d d9 88 09 19 45 f0 bc 98 75 e4 e9 70 38 8a 0e d2 5b 9c 9b fd 2c db 47 22 98 73 be 36 67 d9 60 3e 29 c3 1b 33 c3 34 f9 3a 09 c6 e5 e1 18 d4 0c a7 b1 27 4e cd b5 14 92 3d a0 b9 96 8e cd 51 c7 0d 0b 73 bf cf 76 e6 62 44 54 5b a8 15 aa 6e 79 e5 6a 2a 3c e4 d9 81 54 5f f0 a6 c6 1b 98 50 2b 51 f6 87 e1 c3 a4 30 a9 14 29 ba ea a4 9e 28 Data Ascii: CV]p3d`\|<X(Ih~5N&,Cffd4C8`dqk1f>"5[3/'pa\:PgSfQEup8[,G"s6g`>)34:'N=QsvbDT[nyj*<T_P+Q0)(
2025-01-07 18:40:51 UTC	16384	IN	Data Raw: de 33 e2 05 5b 30 1d 05 9a 67 8f b1 1e 4d bf 41 3f 66 3e d0 47 c1 96 8b a3 17 bc b1 fe 6e b5 4a 79 2d 20 eb 04 f4 37 c9 34 36 9e 34 b6 eb 6e a7 d7 44 2d d9 22 a7 6e 2a 07 26 b5 94 13 88 7c 3f f3 16 41 a3 a2 c8 16 4d b3 6a 21 28 fa 08 09 18 69 74 9a a4 70 4a 5d 09 f0 24 7b fa 34 53 04 54 8b 8b 10 0d 06 6e b6 54 b3 a8 d5 27 31 bb d0 fa d9 c3 43 c4 27 8e 7c 19 7a 06 69 2b cc 0a ba 20 ec b4 b5 fa bf 2c 3b c2 b7 a9 bb 01 8c 08 34 eb 14 2c 67 1e 7b c8 66 ee f4 cf 08 96 dd 15 75 54 a3 c0 db 19 0a e1 de f6 e8 81 27 e4 e3 e2 a9 4c a5 a6 53 09 82 d6 bf d6 73 c5 4f 42 22 a4 29 27 83 55 12 23 fc 93 a7 d1 1d d4 0f ab ec d2 67 df c5 82 81 2d 32 11 7d 4d fd 11 57 a4 25 97 cb 64 3c 8e d3 47 1c 58 54 43 ff 94 07 8b cd 16 75 db f6 2c 07 6c cb 42 cf 12 17 1b fa ad 54 d7 a9 Data Ascii: 3[0gMA?f>GnJy- 7464nD-"n*&\|?AMj!(itpJ]${4STnT'1C'\|zi+ ,;4,g{fuT'LSsOB")'U#g-2}MW%d<GXTCu,lBT
2025-01-07 18:40:51 UTC	2731	IN	Data Raw: f4 5e a8 83 a3 7b d4 fc 8a 85 df 53 78 99 55 a5 95 6e 69 48 75 47 d6 86 48 d0 be b2 57 23 8b 66 76 65 87 1b ed ff 6d f2 be be f4 ed 50 5e d5 c1 a3 42 55 4c 6b d9 36 d9 dc b4 c9 b5 f3 c9 81 6e 35 b9 2f 2f bb 5b d3 09 ad bf ed ef ff 6d 79 0f dd 55 ff e1 74 ed 1d 69 bd 30 09 0d af c9 86 38 b2 ce e9 78 c3 bf 26 0f 3a 37 6b 9f cf a0 00 30 21 9a 43 ee c7 28 49 b6 ee f7 f4 56 e5 98 6a 3e 9d 58 83 73 08 74 d8 42 03 eb df b3 65 96 c4 7e 5f c8 d1 f0 fa 34 8b 0b eb 7f ad a7 e3 c6 bc 1a 59 ff 33 f9 9e 02 e0 5e 9f 1e 9f 9f b6 e2 49 ad ff 95 ea 36 10 2c 9e 18 e9 00 24 7d f3 29 f8 cd 4f 4a 63 ba 40 6b cf c7 f5 29 a5 e5 9d 43 9d 0b 77 3e 34 05 e8 06 53 da 35 c3 9b e3 ea 89 8a 4c 52 fa ad 1e 0f e5 36 3e 93 f7 ce b0 36 b4 87 3c 1c 58 83 11 65 f5 cc 56 33 e0 64 30 04 cf f1 Data Ascii: ^{SxUniHuGHW#fvemP^BULk6n5//[myUti08x&:7k0!C(IVj>XstBe~_4Y3^I6,$})OJc@k)Cw>4S5LR6>6<XeV3d0
2025-01-07 18:40:51 UTC	15472	IN	Data Raw: b2 da 8d 41 3d 27 0e 22 09 25 45 88 08 a2 37 83 26 2b 72 69 bb 5e 0e f9 91 07 31 df 4d 67 a9 ef 40 d5 4b 3c 01 71 0e f5 d8 03 6e 83 09 0a 26 6c 2f 64 51 e2 ed 66 9d 8c 66 64 07 51 2e ec 38 89 a1 a4 b8 4e 26 99 27 12 37 f7 1c db 75 b9 0f cb 60 37 9d a5 0e c4 82 97 41 95 88 b8 00 07 b7 05 63 b0 04 82 90 54 16 e8 c9 b7 db 9a 5a ed c6 68 46 49 02 eb d8 83 09 13 0b 3f 61 9e 2b 78 22 b9 f4 ec 3c 0c 49 48 ee 86 9e fc d4 06 8d c6 2c cb 03 ac 89 1d 40 30 b9 9c 25 be 4f da 73 08 c1 be 9b a9 33 9a 51 16 80 7c 72 e9 c7 36 d8 b8 17 d9 8e 1f 3b 0c b3 09 16 2b 6c db dd 09 27 77 83 d4 75 05 64 5e 4e 66 a1 63 27 90 e4 2e 13 8e ef c4 90 ef b1 1f 25 b7 db 19 5b ed c6 68 46 89 08 a2 d8 b1 43 cf 8d 7d db a6 81 d9 99 1d 40 71 21 a6 1e de 72 bf 72 ad 33 58 84 0e b3 e3 d8 17 09 Data Ascii: A='"%E7&+ri^1Mg@K<qn&l/dQffdQ.8N&'7u`7AcTZhFI?a+x"<IH,@0%Os3Q\|r6;+l'wud^Nfc'.%[hFC}@q!rr3X
2025-01-07 18:40:51 UTC	16384	IN	Data Raw: 99 22 75 29 b5 e1 46 eb 01 1a 05 6e 77 67 fc 9a 72 9b 30 41 41 f1 54 2a e5 fd 1d 99 63 9d 06 d7 3f 6f 68 27 2b 8b 29 ec 49 f2 5e ac 8d 76 e5 db 9a 00 a2 3f 9b 85 10 fd 81 9e bc 28 e7 f2 b8 81 e4 fe 82 7c 25 0b 8a c1 ea 74 55 f3 e8 a7 d7 94 df 30 80 79 4d a6 fd cd e9 6f 9b b0 45 65 b3 7d f8 ed 13 c5 02 d6 ab 3f 6f 7d df c8 ea 16 4f f4 01 8e 7a 2b a3 af 9d 93 d5 42 1b 87 72 4a 7b 5d 73 ed d1 e8 1f 50 bb c4 a6 61 cd 3e de d0 f3 95 32 9b 86 07 09 b4 b9 91 93 e6 eb b5 13 7c df f0 24 c5 8d 7e 2e a0 5f 5e 2e 8c b0 db 3c ef dd 6a 9b c8 60 c5 54 6f 35 76 ad d5 de 6e 63 dd 32 a5 3f 1d 4d 7d 56 2e 96 6e 0c 4a e0 86 a6 45 2d 9a 29 d6 bc 52 01 60 6b fa bb 6a 7d 5d fc f7 4a 7f cd b0 d7 74 80 4f 96 f2 95 aa ff a7 88 a7 3f bb 13 f1 b7 13 d3 7f 68 d1 7a 2b 36 7f 6b 1e 7c Data Ascii: "u)Fnwgr0AAT*c?oh'+)I^v?(\|%tU0yMoEe}?o}Oz+BrJ{]sPa>2\|$~._^.<j`To5vnc2?M}V.nJE-)R`kj}]JtO?hz+6k\|
2025-01-07 18:40:51 UTC	8735	IN	Data Raw: 71 1b 0d aa 28 c9 cf f1 8f 85 36 4f a8 02 2d 5d 62 1d 28 75 0d 7f 87 6d c3 c1 9f d0 c6 27 7c 0d 32 d1 15 b6 05 3d 4d f1 37 bc 3f c2 bf 56 1b cd 83 18 e6 9e 84 2e 6d 71 d5 40 11 d8 da c6 39 14 1b f1 54 1b 9f a5 ea 70 03 aa 43 a6 ab 32 d3 9e 71 0b 8f d0 09 1f 99 0d 99 5d 80 68 64 7c 84 47 87 f3 e0 58 c6 3d 4e 8c b3 49 2c 4d ca 17 f0 f5 28 8a 3e 06 f0 f8 39 7c ff 69 41 e3 5b 7e 46 67 1c 83 d4 2a be 9e 4c ae 3b 87 b3 59 74 43 3d a1 7d 43 05 d6 fa e1 c4 ed fc e8 a6 6f 69 b2 98 a5 87 0c ba b9 61 f9 6d 49 1d 41 ad 22 cf d8 0a d0 95 3f 79 a0 40 87 69 27 27 61 80 63 47 ed d0 f8 5c d2 5f de c2 6f d8 2d fc 80 27 44 4e 8c 57 a8 8d c0 b8 2e a2 8f 34 34 9e c1 af 28 bd a2 f1 89 37 7f 4b bd 20 a6 6e 0a d2 bc 71 0a cf c9 27 12 cc 50 a0 45 7f ca c5 1c 81 94 b0 78 45 2f e0 Data Ascii: q(6O-]b(um'\|2=M7?V.mq@9TpC2q]hd\|GX=NI,M(>9\|iA[~Fg*L;YtC=}CoiamIA"?y@i''acG\_o-'DNW.44(7K nq'PExE/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	60231	198.58.107.108	443	3060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-07 18:40:48 UTC	712	OUT	GET /8849d4073e484f32a09666330dcd3f78/ HTTP/1.1 Host: membersourcecu.paolayjon.us Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://membersourcecu.paolayjon.us Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JDN733="ODg0OWQ0MDctM2U0OC00ZjMyLWEwOTYtNjYzMzBkY2QzZjc4OjgyMTZjYjNiLWViMDYtNGQ4ZC1iMDY0LWZkMzJlNjJhMzlmNg=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1 Sec-WebSocket-Key: 2Z2xeqIKGRe+KXB6Na4+Vg== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2025-01-07 18:40:50 UTC	737	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 07 Jan 2025 18:40:50 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 029f051e-f7e8-4aa2-8549-c1f56e962300 x-ms-ests-server: 2.1.19683.6 - FRC ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://1b4ddfb2-8849d407.paolayjon.us/api/report?catId=GW+estsfd+ams2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2025-01-07 18:40:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	60233	198.58.107.108	443	3060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-07 18:40:50 UTC	751	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_27cef08ca792f8e8b149.js HTTP/1.1 Host: 423377fa-8849d407.paolayjon.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://membersourcecu.paolayjon.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JDN733="ODg0OWQ0MDctM2U0OC00ZjMyLWEwOTYtNjYzMzBkY2QzZjc4OjgyMTZjYjNiLWViMDYtNGQ4ZC1iMDY0LWZkMzJlNjJhMzlmNg=="
2025-01-07 18:40:53 UTC	813	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 07 Jan 2025 18:40:52 GMT Content-Type: application/x-javascript Content-Length: 116401 Connection: close cache-control: public, max-age=31536000 last-modified: Fri, 15 Nov 2024 18:42:37 GMT etag: 0x8DD05A546E5C15E x-ms-request-id: dba0a0b6-b01e-0059-2c2d-60336a000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20250107T184051Z-178b46cfc68bbnj7hC1DFW722800000002e00000000061py x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2025-01-07 18:40:53 UTC	13647	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 6b 5b db 48 b6 28 fc 7d ff 0a 5b bb c7 2d b5 0b 63 19 63 88 8c f0 90 84 f4 30 93 04 0e 90 e9 e9 21 4c 1e 61 97 b1 12 23 79 74 e1 d2 d8 fb b7 bf 6b ad aa 92 4a b2 0c 26 dd fb 9c 0f ef f4 d3 c1 ba 94 ea 5e eb 7e d9 fc a9 fe 5f b5 9f 6a 1b eb ff 57 3b 3b 3f 38 3d af 1d bf ab 9d ff e5 e8 f4 6d ed 04 ee 7e ad 7d 3c 3e 3f 7a 73 b8 7e 3d d8 28 fe 3b 9f f8 71 6d ec 4f 79 0d 7e af bc 98 8f 6a 61 50 0b a3 9a 1f 0c c3 68 16 46 5e c2 e3 da 0d fc 8d 7c 6f 5a 1b 47 e1 4d 2d 99 f0 da 2c 0a bf f2 61 12 d7 a6 7e 9c c0 47 57 7c 1a de d5 4c a8 2e 1a d5 4e bc 28 79 a8 1d 9d 58 2d a8 9f 43 6d fe b5 1f c0 d7 c3 70 f6 00 d7 93 a4 16 84 89 3f e4 35 2f 18 51 6d 53 b8 09 62 5e 4b 83 11 8f 6a 77 13 7f 38 a9 7d f0 87 51 18 87 e3 a4 16 f1 21 f7 6f Data Ascii: k[H(}[-cc0!La#ytkJ&^~_jW;;?8=m~}<>?zs~=(;qmOy~jaPhF^\|oZGM-,a~GW\|L.N(yX-Cmp?5/QmSb^Kjw8}Q!o
2025-01-07 18:40:53 UTC	16384	IN	Data Raw: 08 94 b1 1f 4a d3 86 00 d0 31 6c df ed a2 90 a5 e7 f1 cd f1 c7 b3 f3 d3 4f 6f ce 8f 4f 9d 6b 76 7a f8 d7 c3 37 e7 47 c7 1f bf 1c fe fd f0 e3 b9 73 cb ce 3e bd 7e f3 fe e0 ec ec e8 e3 cf ce c3 4b 02 f1 95 12 cd aa e8 ae 3b 3b a4 7c 15 6a 8c 67 72 ba e5 42 64 e0 81 ae e3 4c 82 5c 8c 7e 6b d0 4b 94 db a4 12 1c 8a 07 a8 2f c4 b4 af 09 4a e3 02 34 ce 5e 1b b1 e4 99 7c 76 0b 21 80 31 2b 93 50 26 18 14 34 2e 8b f0 5f 69 d2 8c 45 5e 3e 63 59 54 c0 4c 5d 8d 16 25 22 f9 06 05 05 7c 3e 45 8e 62 0e 51 09 8d fb 09 e5 9d ca a8 1c 09 d0 44 8b 2d 23 fd fd 87 a8 2a 44 a9 2f e5 4e 13 ab 43 82 61 0d e5 60 54 44 fa b4 10 45 4f 94 fd 6f 6c 4b 46 0c aa a1 7c 3e 20 9e 36 41 15 5a 2d e2 43 0e 47 27 32 9e 5d 80 4c ce f3 ff 97 b0 71 ff d7 02 c5 14 77 88 2e a7 5c e1 4e 96 47 99 f8 Data Ascii: J1lOoOkvz7Gs>~K;;\|jgrBdL\~kK/J4^\|v!1+P&4._iE^>cYTL]%"\|>EbQD-#*D/NCa`TDEOolKF\|> 6AZ-CG'2]Lqw.\NG
2025-01-07 18:40:53 UTC	16384	IN	Data Raw: 9c 1d 9f 11 79 a5 a0 45 12 1f 7b f6 64 1d 3d 31 f2 ec 37 24 4a 8a 0f 14 08 bd d9 fe 46 9a 41 3d a1 39 c2 44 63 e2 69 8b 49 4f 88 4d d5 0a 63 77 18 96 28 28 16 f0 e3 29 80 68 2c d8 6c db 70 61 3c 4c ce 80 4b ce e1 a2 23 b3 4c b0 e4 74 8e ed 62 d1 88 d2 ab c2 21 07 38 b0 dd 7d 52 52 d0 b3 a8 0b 27 93 8f ac 1c d6 2e 8e 91 0f 25 c6 2e a2 2b 3c 08 94 6f 21 c1 39 d7 70 36 c0 19 3d 3e f2 2f 3d 3e b6 78 39 86 36 d7 8a a0 c7 5f 82 47 30 fe c8 1a 6d 13 ec a4 b5 12 ea 47 e7 0a a9 92 13 5e 39 1a f0 66 89 21 3b 06 5f b6 c1 9b f3 65 91 fa d1 51 cb 4a 17 d6 88 48 19 65 bc 89 c5 30 94 0e 1c 39 c5 c3 cf 66 61 5f 99 fd 0c 62 17 a8 61 6b 17 b5 a8 a9 bc d8 31 d5 a8 f1 33 d5 a8 79 ed 7e 5b d4 2f a2 ce 83 57 9e 4a cc fb 19 cf cc 13 a3 a4 95 a3 26 81 5b 1a 73 99 07 30 97 dc 7a Data Ascii: yE{d=17$JFA=9DciIOMcw(()h,lpa<LK#Ltb!8}RR'.%.+<o!9p6=>/=>x96_G0mG^9f!;_eQJHe09fa_bak13y~[/WJ&[s0z
2025-01-07 18:40:53 UTC	16384	IN	Data Raw: 22 fa 9e 68 83 83 01 ed 05 2a 50 2b 53 70 8c 57 1d 39 1d 0b 79 8c 06 18 53 4b ae f8 46 5d b2 a6 fe c8 ea e0 97 32 c2 ae d0 ee d1 2c 91 52 1f e0 79 58 d2 ca 6c f3 c3 f3 50 aa e4 0f 77 45 55 dc 03 dc 33 93 00 95 52 a8 8f 01 49 79 78 3a 81 93 1e 08 71 d2 34 46 0b c7 69 d2 fc 36 2c c2 1f e3 e8 0e 8e d4 a4 a9 80 07 07 aa 3a 03 6e 83 b1 01 b3 eb 60 6a 5c dd 00 3c 6e 05 1a b0 2b e0 b8 6e 99 93 45 79 fc 0b ea 26 24 4c d9 1d 7f 70 13 de bf 5c 00 38 70 28 a9 7b 8d 0e d3 af 93 02 0e 9f 4b ba cc c5 a5 b1 88 2e 1c 22 03 d4 a7 d5 29 60 19 66 88 2c 10 56 91 25 b5 a4 3e 9e 14 30 85 f5 2b 38 82 ae 84 df 64 69 af e1 d0 5e c3 38 47 7d 3e 96 6c 18 f2 78 89 11 79 1b 60 51 f1 87 22 0b 93 1c 1a f9 bd a2 8f 49 05 d1 63 17 63 b3 1e 1f 6f cd c2 9f 68 00 3f a6 27 eb fc 51 12 90 06 Data Ascii: "h*P+SpW9ySKF]2,RyXlPwEU3RIyx:q4Fi6,:n`j\<n+nEy&$Lp\8p({K.")`f,V%>0+8di^8G}>lxy`Q"Iccoh?'Q
2025-01-07 18:40:53 UTC	16384	IN	Data Raw: 1f 02 84 1e 74 3b 74 0c de 05 67 d5 28 76 c9 cb 9a 2f c4 4d 98 50 22 77 aa b2 39 42 6d b9 8b 57 ac 85 e7 e4 b0 04 ac d5 4d 15 d4 b9 3e ef 68 97 62 0e 8b f8 b3 2b ab d4 64 5d 58 a6 fe 0b 02 6b bb a8 40 12 00 f3 f2 59 6a bb fb 8a 1e 2d 2c 71 0c d5 66 81 fe 54 a5 96 a1 aa 0c f5 c2 fc db e9 9b d7 86 02 05 63 f5 6c 3a 6d 8a bd 37 8f dd 0c c3 90 e7 1e 9c 3a f3 8b 12 cf c6 0f 85 3b 28 07 a8 57 3b 89 28 01 17 32 6e 8a 88 41 0c 4b 9e 6c 61 e5 a6 2f e3 27 53 f3 93 85 5d 99 0e e4 6f dc ac 25 58 30 2f 81 2a 64 16 ab 65 94 09 85 56 29 1e 14 54 b3 9d f8 53 9b 00 2f 51 f7 8f 9e 65 c2 31 fe 95 6f a4 dc ed 9b 3c a0 b6 b7 29 a7 8e 60 5f 74 5c 10 84 8b 10 57 98 ce 17 22 ca 0d 62 f9 f2 8d 69 d7 8d 1d 36 bf 2f e2 1f a8 2c b7 26 67 05 fc 54 46 65 6e f6 5b 70 56 37 ee 8d 69 7b Data Ascii: t;tg(v/MP"w9BmWM>hb+d]Xk@Yj-,qfTcl:m7:;(W;(2nAKla/'S]o%X0/*deV)TS/Qe1o<)`_t\W"bi6/,&gTFen[pV7i{
2025-01-07 18:40:53 UTC	2737	IN	Data Raw: 92 02 90 78 fb d5 b7 66 f8 0b 74 42 df 1e b4 f6 fb 2c 18 5b 53 f8 5d b2 07 0e cb ad df e0 93 ef 74 c0 94 30 a4 d4 0c be d1 f9 a4 41 fb 21 80 29 0c 21 3e 79 00 18 c2 54 b3 d0 1c d0 79 7c 21 d4 91 92 a3 3f 9c 3d f0 cc 99 ce d2 e6 8b f8 ac 8c 03 56 3e c0 09 89 8c 0f 88 7e 5b f0 21 1e e5 aa 95 c6 82 b1 d2 45 dd 18 53 8c ef 0c a8 7f 4a 91 3e 60 b9 d2 16 4e ad 28 4c 97 38 76 00 d5 71 b5 2e bf ba b2 d6 2b b1 3a 30 a1 c3 70 c3 de 2e 89 28 50 1a 41 2f eb a0 35 c1 f7 3f e9 40 d1 21 f4 c6 e4 d8 17 d8 93 34 4d 1b d1 ce 75 64 be 28 6b 03 72 3b 44 3b d7 4a 82 76 06 42 12 1d 65 ec 3e 8c 44 43 32 9a e2 85 2b f6 7f 6b a8 35 4e dd ca a5 c7 28 4b 55 40 88 e9 9e 6e f3 72 72 68 70 55 5b 05 03 10 aa 43 8f 45 54 79 a8 65 63 80 0c fe 42 12 55 1e c3 09 a9 cb 12 01 9d b2 35 a3 80 Data Ascii: xftB,[S]t0A!)!>yTy\|!?=V>~[!ESJ>`N(L8vq.+:0p.(PA/5?@!4Mud(kr;D;JvBe>DC2+k5N(KU@nrrhpU[CETyecBU5
2025-01-07 18:40:53 UTC	16384	IN	Data Raw: d0 fd 4c 63 a5 3c 92 7f c6 60 3f 60 c3 ca 88 e9 7e 2b e4 f5 67 63 b3 6a 4a 26 4a 87 98 8f e2 a1 c0 c6 ad da 2d b3 4a 6f 83 69 10 b6 32 91 91 d8 cd 44 b2 1d dd e0 e3 a7 9b 0c eb 65 81 9b 64 10 18 81 73 94 6b a4 8f a8 ca 2e cb 2b 2d f9 62 74 9d 08 7d 8f 1a 2b 42 5f 3a d2 53 42 5f 12 f1 a6 85 be e8 1a 39 30 c7 ba 46 c6 3a 1a 0a 7e 27 aa ad ec 1d 3f 09 d8 c8 7c 6b 85 63 38 e3 ee 37 01 a3 01 4c 11 35 b8 62 8e 2c 14 56 6c 02 bd e8 0b 5c 31 00 ae 67 8c c6 47 40 31 b1 01 9a 1d 45 7a da 30 76 d0 b2 e1 01 b7 d1 1b e3 cc fa e6 38 6d 8e eb 00 09 4e e5 a6 79 b7 58 78 ba 9f 36 c7 0d e8 b1 34 c7 f5 4d bf 3b e7 e6 b8 be 62 19 c6 c4 db be 99 b2 17 8b d5 56 63 36 65 37 1c 73 51 ce 33 3d 55 b1 73 d7 f2 0d 7d a4 df 14 a6 c8 c1 51 02 98 e9 f1 4d 7b 9a cf b3 09 20 b7 29 4a 73 Data Ascii: Lc<`?`~+gcjJ&J-Joi2Dedsk.+-bt}+B_:SB_90F:~'?\|kc87L5b,Vl\1gG@1Ez0v8mNyXx64M;bVc6e7sQ3=Us}QM{ )Js
2025-01-07 18:40:53 UTC	16384	IN	Data Raw: 3a 33 31 cb 38 39 3f 0f 4c 27 35 9b 68 4c f9 c8 6c c2 c1 9b c5 9b 23 4b 4e 34 c0 d9 c4 9a ca 57 80 35 4f e0 60 86 41 82 f9 94 b6 ca ac d4 3a 5c 32 18 d6 21 b2 e4 c2 88 77 64 de 61 66 c5 77 a7 1f 2f 7e 3d bf 3e fd f0 e1 f4 8f eb 97 9f 5e bf 3e ff 70 fd eb c5 f9 6f 57 e8 fb 96 fd e5 89 f2 25 9e 25 a4 8c 5e c0 78 a1 55 34 fc 4e 89 be 83 86 c3 95 e4 8b ed 39 da b9 af 02 f4 40 11 79 60 54 9d cd f1 6a 39 4e af 88 39 d4 52 b6 46 42 1c 22 8d 3e 28 ef a2 80 2f b4 89 f5 71 15 c9 50 d4 c9 db 27 ae a2 8d 18 ea da 6f be e7 8e f6 78 6d 8d 1b 2d b5 fb c7 0e c0 21 41 5a be df 33 fd 6e 1f 80 10 25 b4 40 15 6c 66 0e 99 42 0b cd 38 29 85 b4 41 6f 92 37 ff 36 28 82 c4 4b 6b 72 40 b9 b1 70 17 45 09 2a c0 dd e4 c5 fe 6b 98 cc 54 9a 79 23 39 09 e3 76 75 cb 68 5b 27 30 ca 3e a6 Data Ascii: :3189?L'5hLl#KN4W5O`A:\2!wdafw/~=>^>poW%%^xU4N9@y`Tj9N9RFB">(/qP'oxm-!AZ3n%@lfB8)Ao76(Kkr@pE*kTy#9vuh['0>
2025-01-07 18:40:53 UTC	1713	IN	Data Raw: a4 90 7c d6 27 71 54 f1 74 3d 59 c7 ad dc 75 20 0b b4 89 5b a6 9f 2a 00 ef c1 86 91 2c 86 e3 d0 52 28 4d 86 15 dd 71 3c fb a0 b4 ec 07 a5 65 3f a8 5e f6 83 a5 65 5f 3d ee d7 2c 6a 7b e7 50 93 52 a9 ff 59 a3 e1 be 33 34 9d 7f 42 ec f0 bd d2 d1 13 72 55 94 f7 78 3f b9 4a 0c e3 fd ec 2a 61 8b f7 c1 95 32 6b ef f3 e2 21 8f 24 ff 95 b6 2f 7f 88 36 d9 b2 fe b3 54 44 ef dd 6b e2 10 fd 76 13 87 df 60 dc 40 7d a9 b0 6f 90 bd 29 98 39 50 e6 df 6f e9 50 1c e9 e2 4f ad bb 3f b5 ee 8a 5a 77 65 c3 a0 3f c0 f4 25 fb 4f 98 29 fc 69 58 f3 5f 64 58 d3 d9 d8 d9 62 cb 1a 72 c6 31 95 6e 36 26 d2 9e 66 b6 c2 58 66 a5 19 f0 a3 4d 64 81 71 cd 8a 26 31 c2 03 82 6f ed b6 36 5b 1b 1d e9 8a 97 3c 27 64 2c 35 04 e6 f1 82 9d 51 8a 41 20 2b 1e 55 1b a2 a8 bc f7 e8 6e 23 0f 1d f9 e8 4b Data Ascii: \|'qTt=Yu [,R(Mq<e?^e_=,j{PRY34BrUx?Ja2k!$/6TDkv`@}o)9PoPO?Zwe?%O)iX_dXbr1n6&fXfMdq&1o6[<'d,5QA +Un#K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	60232	198.58.107.108	443	3060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-07 18:40:50 UTC	524	OUT	GET /shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js HTTP/1.1 Host: 423377fa-8849d407.paolayjon.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JDN733="ODg0OWQ0MDctM2U0OC00ZjMyLWEwOTYtNjYzMzBkY2QzZjc4OjgyMTZjYjNiLWViMDYtNGQ4ZC1iMDY0LWZkMzJlNjJhMzlmNg=="
2025-01-07 18:40:52 UTC	806	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 07 Jan 2025 18:40:52 GMT Content-Type: application/x-javascript Content-Length: 61141 Connection: close cache-control: public, max-age=31536000 last-modified: Thu, 25 May 2023 17:22:47 GMT etag: 0x8DB5D44A8CEE4F4 x-ms-request-id: fb32f19a-601e-0042-7c75-597ad6000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20250107T184051Z-185c6999ffdg2h7fhC1DFWk0hn0000000v2g000000004vak x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2025-01-07 18:40:52 UTC	13654	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 cc bd 79 5b db c8 b2 38 fc ff fd 14 46 cf 5c 8e 74 50 1c 1b 92 4c 62 47 e3 4b c0 49 3c 61 1b 96 c9 cc 21 1c 1e 61 37 58 89 2d 79 24 19 c2 01 7f f7 5f 55 f5 ae c5 c0 cc dc f7 be cf 4c b0 d4 aa de ab ab ab ab 6b 71 6f a2 78 94 dc 34 73 36 61 53 96 a7 b7 e7 37 ec 62 16 0e bf fd 9c 25 f1 2c 58 fa f5 fe fe f4 cc 6b ce e6 d9 d8 3d 3d 5d 3f f3 4f 7d df bf 9c c7 c3 3c 4a 62 97 f9 b9 1f 7b 77 ce 3c 63 8d 2c 4f a3 61 ee 74 e3 66 ea e6 9e 1f 37 47 6e ee 3b bf 86 93 39 fb 04 15 38 be ab b2 79 77 29 cb e7 69 dc 48 9b 6c e1 29 d8 fe 35 8b f3 9d 30 67 f1 f0 b6 06 3c 2c 82 1f b0 34 8b 32 cc c2 6a b2 5c 18 59 8e d3 70 c8 76 d8 35 9b d4 00 8f 0c e0 cd d9 6c 10 67 d1 d5 38 cf b6 92 b4 ba f8 c8 6a d1 bb 30 63 b5 a0 66 d1 e7 fd ef d0 e4 11 1b 0d Data Ascii: y[8F\tPLbGKI<a!a7X-y$_ULkqox4s6aS7b%,Xk==]?O}<Jb{w<c,Oatf7Gn;98yw)iHl)50g<,42j\Ypv5lg8j0cf
2025-01-07 18:40:52 UTC	16384	IN	Data Raw: 37 09 1a 71 03 e7 8f 8d 7b fa b8 48 7f 7b 25 76 16 56 3e b5 b8 fe cc 14 7c ac 81 50 9c 70 f0 09 21 2a f1 26 f8 c0 96 31 11 bf 2d d5 9b 78 98 fa 71 46 31 65 d7 51 32 cf 38 09 cc a2 bc 70 a6 95 62 af c8 4c b7 25 55 dc 99 46 89 e7 53 df 80 d6 9f b8 9e a4 d5 8a 7b c2 a3 2e 10 ed 5f 31 00 ca 0c 5a a1 5a 40 e2 49 e0 5d 0a 4e 3b 80 8c 9a 7b 34 f9 ec 20 45 06 54 91 6b ce 64 6e a4 98 41 fc 8c e9 94 23 45 48 df d5 d4 a5 2c 2b 62 83 a5 66 1e 45 5b ca 93 99 a4 0f 00 df 20 4f 78 82 ab 36 98 67 62 91 63 94 43 51 bf d5 9c e1 3c d9 03 67 8e 08 17 af d7 8d 40 c1 23 c1 56 18 e3 71 17 43 5b f2 a8 bc 0a 1c dd 13 64 6c 38 cf 61 91 4d 6e d5 a1 f6 32 4a 33 0e 8f 34 2e 83 8e a8 1c 8e 72 54 06 34 ef 67 c6 75 f1 a3 25 0e 51 ba ef ab 1b 89 8a cb 15 c7 11 3e 76 5b d8 54 f4 60 45 31 Data Ascii: 7q{H{%vV>\|Pp!*&1-xqF1eQ28pbL%UFS{._1ZZ@I]N;{4 ETkdnA#EH,+bfE[ Ox6gbcCQ<g@#VqC[dl8aMn2J34.rT4gu%Q>v[T`E1
2025-01-07 18:40:52 UTC	16384	IN	Data Raw: eb a4 04 93 52 01 93 52 ee 3e 20 59 6a 9a b9 ad a4 66 6f 45 da 86 61 f1 f6 d9 d6 8c 32 3a 7f 1b 4e ca 8e d3 4b d9 e9 58 75 3a 45 a7 e9 5a 65 b1 1b c3 15 ea 97 35 86 01 ae 81 97 71 67 40 9d 1c c8 1e ba 19 dd 04 6a 82 53 9a dd 41 8f ad 0e 16 fa 69 2a af fd f6 64 3f 33 96 bf 96 5d 15 ef b5 bd 65 80 af b5 98 24 c8 df f2 b2 52 b3 e9 62 b3 27 34 ee 38 ce 79 fa 12 96 0d 72 6a bd 8e 47 53 dd c1 8a d1 6f 6f ae 4a 50 b2 1e 58 50 b8 99 cf b1 c4 52 0c 09 26 35 35 63 f9 79 c1 8a 76 c8 ee 05 08 d9 ed 8a 1f 82 02 11 23 15 5d f1 e3 3e fb 9f 3f f3 f5 19 fd ff 03 61 a0 69 83 80 18 c2 7b 33 d4 ff 3d 58 fd aa 30 59 e1 15 59 bb 39 39 cc 0f 08 c6 46 19 58 4b ae a3 0a 39 9e ff 6b 70 51 be fa cc 4b 1a 84 e3 48 27 b0 3e 0c 98 5f 8e 2d 93 a7 84 38 37 30 5c 87 6d af 16 da 72 6c 00 Data Ascii: RR> YjfoEa2:NKXu:EZe5qg@jSAi*d?3]e$Rb'48yrjGSooJPXPR&55cyv#]>?ai{3=X0YY99FXK9kpQKH'>_-870\mrl
2025-01-07 18:40:52 UTC	14719	IN	Data Raw: 35 41 c0 d7 22 c2 2a 8a eb 49 93 fc 86 22 c4 83 e1 38 92 35 f4 12 d3 09 1f 75 f8 9e 26 ac 0b ff 2f c3 2c bf b8 67 05 de 44 b8 a4 78 47 29 4c b9 d2 5b 36 a6 6b 6f cd 59 2f 58 b7 81 0e e1 9e eb ec 4d 8b eb 0f 79 28 58 af 67 f1 e0 26 82 1a 75 6d 2a e2 3a d2 17 83 71 4c 2b be 21 c5 03 54 b8 92 60 16 82 ab 51 67 5f 3c 1f 0e 45 16 dd 21 37 d1 23 a5 cb 07 4e 04 90 15 7c 87 8d 22 dd 60 e6 eb c6 2d 11 78 71 4e 05 bf 91 c9 1f 4f 27 b8 6e 36 50 cc f1 ad 37 ce c6 60 7e 3b 4b 6f a2 44 8e 4c be 88 13 f4 e6 db 64 13 6e 55 66 04 5d aa 1d f7 4e 88 9a 72 c8 c5 84 57 8d 3e 21 d6 13 1f 38 37 28 34 a7 3b 48 29 b7 c8 a6 11 cd b5 33 00 ef 95 86 cf a6 6c f6 da d3 32 84 25 67 fb d9 c3 c6 17 42 25 37 08 1c 46 e1 ad 03 cf ac f0 2d e2 9f 02 31 bb 17 de 47 fc 3d bc bc 21 9c eb 23 f0 Data Ascii: 5A"I"85u&/,gDxG)L[6koY/XMy(Xg&um:qL+!T`Qg_<E!7#N\|"`-xqNO'n6P7`~;KoDLdnUf]NrW>!87(4;H)3l2%gB%7F-1G=!#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	60234	198.58.107.108	443	3060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-07 18:40:50 UTC	844	OUT	GET /Prefetch/Prefetch.aspx HTTP/1.1 Host: 64c2b783-8849d407.paolayjon.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://membersourcecu.paolayjon.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JDN733="ODg0OWQ0MDctM2U0OC00ZjMyLWEwOTYtNjYzMzBkY2QzZjc4OjgyMTZjYjNiLWViMDYtNGQ4ZC1iMDY0LWZkMzJlNjJhMzlmNg=="
2025-01-07 18:40:52 UTC	489	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 07 Jan 2025 18:40:52 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: no-store, no-cache x-ms-correlation-id: 17395aba-1058-49f8-9d45-a483ba74e23f x-ua-compatible: IE=Edge x-cache: CONFIG_NOCACHE x-msedge-ref: Ref A: 339CFB91A8BF4B30A43D8D7ECEE82ABA Ref B: DFW311000106017 Ref C: 2025-01-07T18:40:51Z access-control-allow-origin: * access-control-allow-headers: *
2025-01-07 18:40:52 UTC	1252	IN	Data Raw: 34 64 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 Data Ascii: 4dd<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>404
2025-01-07 18:40:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	60235	198.58.107.108	443	3060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-07 18:40:53 UTC	798	OUT	GET /8849d4073e484f32a09666330dcd3f78/ HTTP/1.1 Host: membersourcecu.paolayjon.us Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://membersourcecu.paolayjon.us Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JDN733="ODg0OWQ0MDctM2U0OC00ZjMyLWEwOTYtNjYzMzBkY2QzZjc4OjgyMTZjYjNiLWViMDYtNGQ4ZC1iMDY0LWZkMzJlNjJhMzlmNg=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; MicrosoftApplicationsTelemetryDeviceId=db67cbe2-bfe8-45cb-ab7b-dfbe30731da5; brcap=0 Sec-WebSocket-Key: opHL3oN/BhVdphfn+3b32g== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2025-01-07 18:40:55 UTC	737	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 07 Jan 2025 18:40:55 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 59029445-4120-4f83-964b-970f1b6a1f00 x-ms-ests-server: 2.1.19683.6 - SEC ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://1b4ddfb2-8849d407.paolayjon.us/api/report?catId=GW+estsfd+ams2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2025-01-07 18:40:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	60236	198.58.107.108	443	3060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-07 18:40:53 UTC	565	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_27cef08ca792f8e8b149.js HTTP/1.1 Host: 423377fa-8849d407.paolayjon.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JDN733="ODg0OWQ0MDctM2U0OC00ZjMyLWEwOTYtNjYzMzBkY2QzZjc4OjgyMTZjYjNiLWViMDYtNGQ4ZC1iMDY0LWZkMzJlNjJhMzlmNg=="
2025-01-07 18:40:56 UTC	807	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 07 Jan 2025 18:40:56 GMT Content-Type: application/x-javascript Content-Length: 116401 Connection: close cache-control: public, max-age=31536000 last-modified: Fri, 15 Nov 2024 18:42:37 GMT etag: 0x8DD05A546E5C15E x-ms-request-id: 12f34458-001e-0073-3192-60ec7a000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20250107T184055Z-1755d4fdcbd4c4cthC1DFWaw5g0000000320000000000yw6 x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2025-01-07 18:40:56 UTC	13653	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 6b 5b db 48 b6 28 fc 7d ff 0a 5b bb c7 2d b5 0b 63 19 63 88 8c f0 90 84 f4 30 93 04 0e 90 e9 e9 21 4c 1e 61 97 b1 12 23 79 74 e1 d2 d8 fb b7 bf 6b ad aa 92 4a b2 0c 26 dd fb 9c 0f ef f4 d3 c1 ba 94 ea 5e eb 7e d9 fc a9 fe 5f b5 9f 6a 1b eb ff 57 3b 3b 3f 38 3d af 1d bf ab 9d ff e5 e8 f4 6d ed 04 ee 7e ad 7d 3c 3e 3f 7a 73 b8 7e 3d d8 28 fe 3b 9f f8 71 6d ec 4f 79 0d 7e af bc 98 8f 6a 61 50 0b a3 9a 1f 0c c3 68 16 46 5e c2 e3 da 0d fc 8d 7c 6f 5a 1b 47 e1 4d 2d 99 f0 da 2c 0a bf f2 61 12 d7 a6 7e 9c c0 47 57 7c 1a de d5 4c a8 2e 1a d5 4e bc 28 79 a8 1d 9d 58 2d a8 9f 43 6d fe b5 1f c0 d7 c3 70 f6 00 d7 93 a4 16 84 89 3f e4 35 2f 18 51 6d 53 b8 09 62 5e 4b 83 11 8f 6a 77 13 7f 38 a9 7d f0 87 51 18 87 e3 a4 16 f1 21 f7 6f Data Ascii: k[H(}[-cc0!La#ytkJ&^~_jW;;?8=m~}<>?zs~=(;qmOy~jaPhF^\|oZGM-,a~GW\|L.N(yX-Cmp?5/QmSb^Kjw8}Q!o
2025-01-07 18:40:56 UTC	16384	IN	Data Raw: 86 00 d0 31 6c df ed a2 90 a5 e7 f1 cd f1 c7 b3 f3 d3 4f 6f ce 8f 4f 9d 6b 76 7a f8 d7 c3 37 e7 47 c7 1f bf 1c fe fd f0 e3 b9 73 cb ce 3e bd 7e f3 fe e0 ec ec e8 e3 cf ce c3 4b 02 f1 95 12 cd aa e8 ae 3b 3b a4 7c 15 6a 8c 67 72 ba e5 42 64 e0 81 ae e3 4c 82 5c 8c 7e 6b d0 4b 94 db a4 12 1c 8a 07 a8 2f c4 b4 af 09 4a e3 02 34 ce 5e 1b b1 e4 99 7c 76 0b 21 80 31 2b 93 50 26 18 14 34 2e 8b f0 5f 69 d2 8c 45 5e 3e 63 59 54 c0 4c 5d 8d 16 25 22 f9 06 05 05 7c 3e 45 8e 62 0e 51 09 8d fb 09 e5 9d ca a8 1c 09 d0 44 8b 2d 23 fd fd 87 a8 2a 44 a9 2f e5 4e 13 ab 43 82 61 0d e5 60 54 44 fa b4 10 45 4f 94 fd 6f 6c 4b 46 0c aa a1 7c 3e 20 9e 36 41 15 5a 2d e2 43 0e 47 27 32 9e 5d 80 4c ce f3 ff 97 b0 71 ff d7 02 c5 14 77 88 2e a7 5c e1 4e 96 47 99 f8 de d0 20 df 11 14 Data Ascii: 1lOoOkvz7Gs>~K;;\|jgrBdL\~kK/J4^\|v!1+P&4._iE^>cYTL]%"\|>EbQD-#*D/NCa`TDEOolKF\|> 6AZ-CG'2]Lqw.\NG
2025-01-07 18:40:56 UTC	16384	IN	Data Raw: a0 45 12 1f 7b f6 64 1d 3d 31 f2 ec 37 24 4a 8a 0f 14 08 bd d9 fe 46 9a 41 3d a1 39 c2 44 63 e2 69 8b 49 4f 88 4d d5 0a 63 77 18 96 28 28 16 f0 e3 29 80 68 2c d8 6c db 70 61 3c 4c ce 80 4b ce e1 a2 23 b3 4c b0 e4 74 8e ed 62 d1 88 d2 ab c2 21 07 38 b0 dd 7d 52 52 d0 b3 a8 0b 27 93 8f ac 1c d6 2e 8e 91 0f 25 c6 2e a2 2b 3c 08 94 6f 21 c1 39 d7 70 36 c0 19 3d 3e f2 2f 3d 3e b6 78 39 86 36 d7 8a a0 c7 5f 82 47 30 fe c8 1a 6d 13 ec a4 b5 12 ea 47 e7 0a a9 92 13 5e 39 1a f0 66 89 21 3b 06 5f b6 c1 9b f3 65 91 fa d1 51 cb 4a 17 d6 88 48 19 65 bc 89 c5 30 94 0e 1c 39 c5 c3 cf 66 61 5f 99 fd 0c 62 17 a8 61 6b 17 b5 a8 a9 bc d8 31 d5 a8 f1 33 d5 a8 79 ed 7e 5b d4 2f a2 ce 83 57 9e 4a cc fb 19 cf cc 13 a3 a4 95 a3 26 81 5b 1a 73 99 07 30 97 dc 7a 4c 82 5b 85 bd cd Data Ascii: E{d=17$JFA=9DciIOMcw(()h,lpa<LK#Ltb!8}RR'.%.+<o!9p6=>/=>x96_G0mG^9f!;_eQJHe09fa_bak13y~[/WJ&[s0zL[
2025-01-07 18:40:56 UTC	16384	IN	Data Raw: 01 ed 05 2a 50 2b 53 70 8c 57 1d 39 1d 0b 79 8c 06 18 53 4b ae f8 46 5d b2 a6 fe c8 ea e0 97 32 c2 ae d0 ee d1 2c 91 52 1f e0 79 58 d2 ca 6c f3 c3 f3 50 aa e4 0f 77 45 55 dc 03 dc 33 93 00 95 52 a8 8f 01 49 79 78 3a 81 93 1e 08 71 d2 34 46 0b c7 69 d2 fc 36 2c c2 1f e3 e8 0e 8e d4 a4 a9 80 07 07 aa 3a 03 6e 83 b1 01 b3 eb 60 6a 5c dd 00 3c 6e 05 1a b0 2b e0 b8 6e 99 93 45 79 fc 0b ea 26 24 4c d9 1d 7f 70 13 de bf 5c 00 38 70 28 a9 7b 8d 0e d3 af 93 02 0e 9f 4b ba cc c5 a5 b1 88 2e 1c 22 03 d4 a7 d5 29 60 19 66 88 2c 10 56 91 25 b5 a4 3e 9e 14 30 85 f5 2b 38 82 ae 84 df 64 69 af e1 d0 5e c3 38 47 7d 3e 96 6c 18 f2 78 89 11 79 1b 60 51 f1 87 22 0b 93 1c 1a f9 bd a2 8f 49 05 d1 63 17 63 b3 1e 1f 6f cd c2 9f 68 00 3f a6 27 eb fc 51 12 90 06 9a c5 46 5a c1 6b Data Ascii: *P+SpW9ySKF]2,RyXlPwEU3RIyx:q4Fi6,:n`j\<n+nEy&$Lp\8p({K.")`f,V%>0+8di^8G}>lxy`Q"Iccoh?'QFZk
2025-01-07 18:40:56 UTC	16384	IN	Data Raw: 74 0c de 05 67 d5 28 76 c9 cb 9a 2f c4 4d 98 50 22 77 aa b2 39 42 6d b9 8b 57 ac 85 e7 e4 b0 04 ac d5 4d 15 d4 b9 3e ef 68 97 62 0e 8b f8 b3 2b ab d4 64 5d 58 a6 fe 0b 02 6b bb a8 40 12 00 f3 f2 59 6a bb fb 8a 1e 2d 2c 71 0c d5 66 81 fe 54 a5 96 a1 aa 0c f5 c2 fc db e9 9b d7 86 02 05 63 f5 6c 3a 6d 8a bd 37 8f dd 0c c3 90 e7 1e 9c 3a f3 8b 12 cf c6 0f 85 3b 28 07 a8 57 3b 89 28 01 17 32 6e 8a 88 41 0c 4b 9e 6c 61 e5 a6 2f e3 27 53 f3 93 85 5d 99 0e e4 6f dc ac 25 58 30 2f 81 2a 64 16 ab 65 94 09 85 56 29 1e 14 54 b3 9d f8 53 9b 00 2f 51 f7 8f 9e 65 c2 31 fe 95 6f a4 dc ed 9b 3c a0 b6 b7 29 a7 8e 60 5f 74 5c 10 84 8b 10 57 98 ce 17 22 ca 0d 62 f9 f2 8d 69 d7 8d 1d 36 bf 2f e2 1f a8 2c b7 26 67 05 fc 54 46 65 6e f6 5b 70 56 37 ee 8d 69 7b 7d f3 60 46 ab c6 Data Ascii: tg(v/MP"w9BmWM>hb+d]Xk@Yj-,qfTcl:m7:;(W;(2nAKla/'S]o%X0/*deV)TS/Qe1o<)`_t\W"bi6/,&gTFen[pV7i{}`F
2025-01-07 18:40:56 UTC	16384	IN	Data Raw: b7 66 f8 0b 74 42 df 1e b4 f6 fb 2c 18 5b 53 f8 5d b2 07 0e cb ad df e0 93 ef 74 c0 94 30 a4 d4 0c be d1 f9 a4 41 fb 21 80 29 0c 21 3e 79 00 18 c2 54 b3 d0 1c d0 79 7c 21 d4 91 92 a3 3f 9c 3d f0 cc 99 ce d2 e6 8b f8 ac 8c 03 56 3e c0 09 89 8c 0f 88 7e 5b f0 21 1e e5 aa 95 c6 82 b1 d2 45 dd 18 53 8c ef 0c a8 7f 4a 91 3e 60 b9 d2 16 4e ad 28 4c 97 38 76 00 d5 71 b5 2e bf ba b2 d6 2b b1 3a 30 a1 c3 70 c3 de 2e 89 28 50 1a 41 2f eb a0 35 c1 f7 3f e9 40 d1 21 f4 c6 e4 d8 17 d8 93 34 4d 1b d1 ce 75 64 be 28 6b 03 72 3b 44 3b d7 4a 82 76 06 42 12 1d 65 ec 3e 8c 44 43 32 9a e2 85 2b f6 7f 6b a8 35 4e dd ca a5 c7 28 4b 55 40 88 e9 9e 6e f3 72 72 68 70 55 5b 05 03 10 aa 43 8f 45 54 79 a8 65 63 80 0c fe 42 12 55 1e c3 09 a9 cb 12 01 9d b2 35 a3 80 ac 8e 23 49 fe 40 Data Ascii: ftB,[S]t0A!)!>yTy\|!?=V>~[!ESJ>`N(L8vq.+:0p.(PA/5?@!4Mud(kr;D;JvBe>DC2+k5N(KU@nrrhpU[CETyecBU5#I@
2025-01-07 18:40:56 UTC	1819	IN	Data Raw: 34 59 ed 2d d0 70 33 1d be 7f dd fd d2 43 83 47 24 34 be ea f7 fa 44 bf e5 80 05 f3 2b 8d 1b 31 d1 d7 1b c4 06 9f cc 72 fb d3 f1 ad 6c f1 13 b4 78 aa bf 61 fa 99 79 db fd d4 4b 9d 83 9d b3 96 50 ae 9e 89 e9 7a 65 de 0a 03 42 9c ed 01 5f 84 97 40 76 75 3f f6 d8 1b 76 01 d3 d0 7e 95 ce aa 71 aa bf 64 af 90 24 05 88 40 ac 12 53 5f 2f 85 ff c0 de 5b 73 a4 7f 84 25 bc 80 16 5e e1 42 5e 9c 98 18 f3 f0 7d de 3c 87 89 fa 00 07 63 fe 2d cc c6 45 fe a3 1c 8d 3c 74 df e7 a9 86 81 ec 05 43 db a1 75 ba 12 b6 46 ec 88 be 66 a6 c3 ab 74 7b 49 0d 61 1e f9 60 b5 b4 86 b6 64 e1 92 c1 2f 0a 4a 93 7d 18 22 04 5a 27 9a c8 18 76 bb 58 5c 7f 8f af 4c 75 55 e2 11 1b 1d 35 a4 26 b2 59 5a 65 6d 8e a4 7d 3e b6 33 93 38 6a 20 b9 95 b9 e4 44 ee 60 03 2b 78 6a a4 70 11 d3 15 0c 74 b3 Data Ascii: 4Y-p3CG$4D+1rlxayKPzeB_@vu?v~qd$@S_/[s%^B^}<c-E<tCuFft{Ia`d/J}"Z'vX\LuU5&YZem}>38j D`+xjpt
2025-01-07 18:40:56 UTC	16384	IN	Data Raw: a8 5c ff ab be f4 27 43 ac fc d2 27 e7 af 9a bd ef ff d2 06 f1 ce d4 8f fd 45 6b 85 9f fa ab d0 4b 4d 7a 33 d5 64 ce e3 3a 89 4d dc a2 85 da db 01 c9 48 da 3a e6 e2 e2 9b 3c 29 7d 6b 87 63 6f 80 5c ca 6a 30 00 be f5 a5 60 dc 37 3d 2e 80 a0 20 84 51 86 df 4e 84 7e 3b 51 da 6f c7 ee 46 5b 29 9f aa 72 1c 14 ea c1 d5 81 e7 3b 2c 63 14 60 f4 6e 4b 0f c5 7b 7c 28 7d 6f 36 47 51 a3 b3 9e 32 2b f6 7f 96 e3 c2 fe ac 49 19 2b 8a 94 b1 92 b2 01 db 61 4d 80 99 2f da 77 b6 3f c7 11 6d b1 20 f4 4e 36 fc 78 52 c2 b7 9d 01 db f6 9d 6f d4 62 37 0b 29 f4 3c 8a 63 ff c8 cc 04 b8 6a 7d 29 90 1b a6 c7 48 59 24 b2 87 48 59 25 62 89 69 7b 82 ac 0c 52 63 19 40 b8 3a c6 b6 0c 61 2f 74 74 2f 1d b4 02 32 c7 f1 aa 96 d8 a1 d1 41 48 6d e5 c3 c4 ff ce e3 5a 26 9f d9 4f c8 91 9f 5a 7c Data Ascii: \'C'EkKMz3d:MH:<)}kco\j0`7=. QN~;QoF[)r;,c`nK{\|(}o6GQ2+I+aM/w?m N6xRob7)<cj})HY$HY%bi{Rc@:a/tt/2AHmZ&OZ\|
2025-01-07 18:40:56 UTC	2625	IN	Data Raw: 78 72 32 12 86 1d 1e 6a b7 94 c8 29 aa 26 0b a4 75 05 ac 30 fc 79 94 f8 02 22 23 56 5e dc bc 17 f5 d6 ce b8 e2 9c 09 32 0a 47 0d b4 9a b3 dc 01 c6 60 5f c2 78 ea 36 64 d9 7b 98 cf ce c2 6c b3 c0 9e 7c 59 9b b2 68 6d f1 05 ed 29 84 f8 65 6d 51 b1 1a 3b 60 d0 b5 13 9c 58 94 13 1a f4 5b c5 61 17 2e e3 57 11 bf d5 5d 38 c8 9b 58 a8 06 b8 77 92 a0 4d 3c f9 57 90 2d 87 85 7e e0 1b 41 4c a3 07 28 ef 9b db a1 61 0f 83 ce 02 29 0d 70 cc 0a 75 9c 50 b8 ba c0 fc d0 98 54 e0 f1 c8 86 27 5f d8 8e a1 c9 7b f9 28 cb 1d eb 1b d3 d4 1e 45 53 89 ff 8d f5 4d 29 2d f2 d1 6b 70 29 11 e8 f4 f5 72 da 1c 32 c6 e5 c4 c0 b7 6a e5 34 40 94 1f c7 e5 c4 31 24 e6 e5 c4 29 24 a6 e5 c4 89 0f 04 77 29 6d e6 03 81 5d 4a 1b f9 40 80 97 d2 6e 7c 20 c6 4b 69 97 3e 50 1b a5 b4 73 1f 48 9c 52 Data Ascii: xr2j)&u0y"#V^2G`_x6d{l\|Yhm)emQ;`X[a.W]8XwM<W-~AL(a)puPT'_{(ESM)-kp)r2j4@1$)$w)m]J@n\| Ki>PsHR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	60238	198.58.107.108	443	3060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-07 18:40:54 UTC	796	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: 423377fa-8849d407.paolayjon.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://membersourcecu.paolayjon.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JDN733="ODg0OWQ0MDctM2U0OC00ZjMyLWEwOTYtNjYzMzBkY2QzZjc4OjgyMTZjYjNiLWViMDYtNGQ4ZC1iMDY0LWZkMzJlNjJhMzlmNg=="
2025-01-07 18:40:55 UTC	800	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 07 Jan 2025 18:40:55 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:49 GMT etag: 0x8DB5C3F49ED96E0 x-ms-request-id: c9cfa2f4-601e-0023-4ff6-5f6638000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20250107T184055Z-1755d4fdcbd79ssphC1DFW722g00000004d000000000370h x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2025-01-07 18:40:55 UTC	628	IN	Data Raw: 32 36 64 0d 0a 1f 8b 08 00 00 00 00 00 00 ff 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b Data Ascii: 26d}UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;
2025-01-07 18:40:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	60237	198.58.107.108	443	3060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-07 18:40:54 UTC	782	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: 423377fa-8849d407.paolayjon.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://membersourcecu.paolayjon.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JDN733="ODg0OWQ0MDctM2U0OC00ZjMyLWEwOTYtNjYzMzBkY2QzZjc4OjgyMTZjYjNiLWViMDYtNGQ4ZC1iMDY0LWZkMzJlNjJhMzlmNg=="
2025-01-07 18:40:55 UTC	758	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 07 Jan 2025 18:40:55 GMT Content-Type: image/x-icon Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Sun, 18 Oct 2020 03:02:03 GMT etag: 0x8D8731230C851A6 x-ms-request-id: ecaf9330-901e-0055-7192-59ec70000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20250107T184055Z-185c6999ffdl9gbmhC1DFWzqv80000000w500000000090pu x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes
2025-01-07 18:40:55 UTC	2286	IN	Data Raw: 38 65 37 0d 0a 00 00 01 00 06 00 10 10 00 00 00 00 20 00 16 01 00 00 66 00 00 00 18 18 00 00 00 00 20 00 24 01 00 00 7c 01 00 00 20 20 00 00 00 00 20 00 35 01 00 00 a0 02 00 00 30 30 00 00 00 00 20 00 6a 01 00 00 d5 03 00 00 40 40 00 00 00 00 20 00 f3 01 00 00 3f 05 00 00 80 80 00 00 00 00 20 00 b5 01 00 00 32 07 00 00 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 dd 49 44 41 54 78 9c dd 92 31 4e 43 41 10 43 df cc 8e 44 40 b0 22 2d 65 6e c4 21 90 68 c3 15 38 40 ce c4 39 68 a8 11 22 e4 ff 00 05 93 35 4d 1a b2 bf 89 68 10 2e 2d 8d c7 b6 6c 9b eb 85 4c fc 80 50 d6 59 09 5e 6c 75 77 ff c8 95 d9 72 dc 28 cd 08 0e e0 87 c7 c7 c2 7f 77 fe 17 04 42 28 7b da 12 04 f2 26 01 46 02 a9 89 be a2 ce 4e ba 66 Data Ascii: 8e7 f $\| 500 j@@ ? 2PNGIHDRaIDATx1NCACD@"-en!h8@9h"5Mh.-lLPY^luwr(wB({&FNf
2025-01-07 18:40:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	60239	198.58.107.108	443	3060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-07 18:40:54 UTC	795	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: 423377fa-8849d407.paolayjon.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://membersourcecu.paolayjon.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JDN733="ODg0OWQ0MDctM2U0OC00ZjMyLWEwOTYtNjYzMzBkY2QzZjc4OjgyMTZjYjNiLWViMDYtNGQ4ZC1iMDY0LWZkMzJlNjJhMzlmNg=="
2025-01-07 18:40:55 UTC	800	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 07 Jan 2025 18:40:55 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:46 GMT etag: 0x8DB5C3F47E260FD x-ms-request-id: 874982a1-b01e-003b-6d92-59f14d000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20250107T184055Z-185c6999ffd7lsh2hC1DFWx10s0000000vng0000000045gx x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2025-01-07 18:40:55 UTC	680	IN	Data Raw: 32 61 31 0d 0a 1f 8b 08 00 00 00 00 00 00 ff b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 Data Ascii: 2a1Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9
2025-01-07 18:40:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	60240	198.58.107.108	443	3060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-07 18:40:54 UTC	796	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: 423377fa-8849d407.paolayjon.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://membersourcecu.paolayjon.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JDN733="ODg0OWQ0MDctM2U0OC00ZjMyLWEwOTYtNjYzMzBkY2QzZjc4OjgyMTZjYjNiLWViMDYtNGQ4ZC1iMDY0LWZkMzJlNjJhMzlmNg=="
2025-01-07 18:40:55 UTC	800	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 07 Jan 2025 18:40:55 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:48 GMT etag: 0x8DB5C3F4911527F x-ms-request-id: 94dd1dc0-c01e-0048-6b1c-5ae1cc000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20250107T184055Z-185c6999ffdxb5fwhC1DFW6kyn0000000vn0000000009tme x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2025-01-07 18:40:55 UTC	1442	IN	Data Raw: 35 39 62 0d 0a 1f 8b 08 00 00 00 00 00 00 ff bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 Data Ascii: 59bWMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#
2025-01-07 18:40:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	60242	198.58.107.108	443	3060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-07 18:40:54 UTC	757	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_cc2c59f5ef2c09e14b08.js HTTP/1.1 Host: 423377fa-8849d407.paolayjon.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://membersourcecu.paolayjon.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JDN733="ODg0OWQ0MDctM2U0OC00ZjMyLWEwOTYtNjYzMzBkY2QzZjc4OjgyMTZjYjNiLWViMDYtNGQ4ZC1iMDY0LWZkMzJlNjJhMzlmNg=="
2025-01-07 18:40:56 UTC	806	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 07 Jan 2025 18:40:56 GMT Content-Type: application/x-javascript Content-Length: 35198 Connection: close cache-control: public, max-age=31536000 last-modified: Fri, 15 Nov 2024 18:42:38 GMT etag: 0x8DD05A5479BC1A5 x-ms-request-id: db8cf0d5-d01e-005f-39b7-6000d5000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20250107T184055Z-178b46cfc68bbnj7hC1DFW722800000002f0000000003g95 x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2025-01-07 18:40:56 UTC	15578	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 c4 bd 6b 43 db 48 b2 30 fc fd f9 15 e0 9d 65 ac b5 00 df 30 18 70 58 06 92 49 76 33 93 9c 5c 66 cf 2e 30 59 59 96 6d 0d b2 65 24 99 4b 02 cf 6f 7f eb d2 97 6a c9 90 cc 9c 67 df 33 e7 6c 70 57 df aa ab ab ab ab aa ab 5b db 7f 59 ff 3f 6b 7f 59 db fc f6 ff d6 de 7f 38 7e f7 61 ed cd 8b b5 0f 2f 5f bd 3b 5d 7b 0b a9 7f ae fd fc e6 c3 ab 93 e7 df de 0e 76 8a ff fb 30 8d f3 b5 71 9c 44 6b f0 77 18 e4 d1 68 2d 9d af a5 d9 5a 3c 0f d3 6c 91 66 41 11 e5 6b 33 f8 37 8b 83 64 6d 9c a5 b3 b5 62 1a ad 2d b2 f4 b7 28 2c f2 b5 24 ce 0b a8 34 8c 92 f4 66 ad 0e cd 65 a3 b5 b7 41 56 dc ad bd 7a eb 6d 41 fb 11 b4 16 4f e2 39 d4 0e d3 c5 1d fc 9e 16 6b f3 b4 88 c3 68 2d 98 8f a8 b5 04 12 f3 3c 5a 5b ce 47 51 b6 76 33 8d c3 e9 da 4f 71 98 a5 79 Data Ascii: kCH0e0pXIv3\f.0YYme$Kojg3lpW[Y?kY8~a/_;]{v0qDkwh-Z<lfAk37dmb-(,$4feAVzmAO9kh-<Z[GQv3Oqy
2025-01-07 18:40:56 UTC	16384	IN	Data Raw: c5 8c dd e6 0b f8 77 ef 79 fb 7c d9 da 6b 3e 27 87 d8 0f 9b f4 e7 05 fe db 3e a6 44 9b 72 7a 4d 4a f0 63 7f bd 1e 27 a0 d8 8b e7 2f f0 df 17 2f fa 9b f4 e7 87 8b fb f3 e5 29 18 0a 67 f0 e7 e4 87 53 fc f7 e4 94 81 ed 17 04 3c c6 a6 e0 4f 87 a1 1d 2a 7a ba db d9 a4 3f c7 04 fd a1 db a4 b2 cd 16 fe db e6 1a bb 2f 2e b6 69 d4 7b 5f 23 2a cd c3 eb 78 7e f9 3a 18 46 09 d3 b1 8f c4 33 19 a7 51 5e c4 73 7a b4 81 b2 99 b6 26 fb 43 5c 24 11 67 b4 98 d2 fd df 6f 18 58 ff a0 31 dc 71 8f 0a 49 19 cf 7f 0a 6e 41 d9 a3 9f 24 8a e9 d7 00 2d f4 f9 a0 75 40 a9 c3 f0 80 d8 b0 df 01 d9 0f 0a 06 b0 77 16 4a b9 4a a5 70 2b 43 ef e1 e6 e6 dc fb 82 db bb 92 60 50 31 e6 f6 81 c5 67 23 90 09 f8 1e c2 56 7e 19 2f 3e a4 97 11 2e 37 bf 8f bb 5d ea 51 d1 01 17 de 6c 79 f3 46 c3 78 be Data Ascii: wy\|k>'>DrzMJc'//)gS<Oz?/.i{_#x~:F3Q^sz&C\$goX1qInA$-u@wJJp+C`P1g#V~/>.7]QlyFx
2025-01-07 18:40:56 UTC	3236	IN	Data Raw: 7c bc ec bc 32 67 f9 c1 e3 7d 04 11 47 15 fd f6 3b 50 89 a4 fb b0 84 d3 d5 61 59 25 bd eb 7e 1e 35 0d 28 68 11 36 8e 6d c6 48 ca 39 92 7a f6 eb 6d 0f 73 5e fb 5b d3 e9 c9 7a db af a7 25 1e 55 4a c7 99 67 a8 74 d0 50 20 fe 12 3c 81 e9 01 ce 86 32 bf 5b 9b ce a3 c2 23 2f c3 16 19 52 93 fd 3b 59 ed ee 64 1c d3 0d 68 ee 22 8b 56 3e d8 e9 32 e0 1b 77 f9 7a 14 ec 0d d9 e0 e6 2d 7b 14 de 07 da ec 70 e8 c6 ec c7 d4 eb 27 74 3a b1 1e 4d 69 a1 88 8b 24 45 6f f4 7e ec 95 d5 e1 4a 2a 20 28 53 4d c5 39 da 55 e3 2f d5 d6 b5 51 6f 56 6b 55 a6 9a 10 c2 1b b5 76 93 85 37 ea ba de c4 70 7a 19 3e 37 d8 ef 05 de 09 e0 57 2d 16 c2 32 eb 94 b1 85 fe 32 a9 ea 15 11 e5 1a c5 54 cb 61 d2 72 a5 49 41 e5 7a 5b 45 bb 43 56 af 5c 46 bb e5 65 95 fd 4b 68 cc 20 63 70 54 9c 78 bb a6 0a Data Ascii: \|2g}G;PaY%~5(h6mH9zms^[z%UJgtP <2[#/R;Ydh"V>2wz-{p't:Mi$Eo~J* (SM9U/QoVkUv7pz>7W-22TarIAz[ECV\FeKh cpTx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	60243	198.58.107.108	443	3060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-07 18:40:56 UTC	536	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: 423377fa-8849d407.paolayjon.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JDN733="ODg0OWQ0MDctM2U0OC00ZjMyLWEwOTYtNjYzMzBkY2QzZjc4OjgyMTZjYjNiLWViMDYtNGQ4ZC1iMDY0LWZkMzJlNjJhMzlmNg=="
2025-01-07 18:40:57 UTC	758	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 07 Jan 2025 18:40:57 GMT Content-Type: image/x-icon Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Sun, 18 Oct 2020 03:02:03 GMT etag: 0x8D8731230C851A6 x-ms-request-id: ecaf9330-901e-0055-7192-59ec70000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20250107T184057Z-185c6999ffdgm6pwhC1DFWmr440000000vmg000000006cew x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes
2025-01-07 18:40:57 UTC	2286	IN	Data Raw: 38 65 37 0d 0a 00 00 01 00 06 00 10 10 00 00 00 00 20 00 16 01 00 00 66 00 00 00 18 18 00 00 00 00 20 00 24 01 00 00 7c 01 00 00 20 20 00 00 00 00 20 00 35 01 00 00 a0 02 00 00 30 30 00 00 00 00 20 00 6a 01 00 00 d5 03 00 00 40 40 00 00 00 00 20 00 f3 01 00 00 3f 05 00 00 80 80 00 00 00 00 20 00 b5 01 00 00 32 07 00 00 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 dd 49 44 41 54 78 9c dd 92 31 4e 43 41 10 43 df cc 8e 44 40 b0 22 2d 65 6e c4 21 90 68 c3 15 38 40 ce c4 39 68 a8 11 22 e4 ff 00 05 93 35 4d 1a b2 bf 89 68 10 2e 2d 8d c7 b6 6c 9b eb 85 4c fc 80 50 d6 59 09 5e 6c 75 77 ff c8 95 d9 72 dc 28 cd 08 0e e0 87 c7 c7 c2 7f 77 fe 17 04 42 28 7b da 12 04 f2 26 01 46 02 a9 89 be a2 ce 4e ba 66 Data Ascii: 8e7 f $\| 500 j@@ ? 2PNGIHDRaIDATx1NCACD@"-en!h8@9h"5Mh.-lLPY^luwr(wB({&FNf
2025-01-07 18:40:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	60244	198.58.107.108	443	3060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-07 18:40:56 UTC	549	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: 423377fa-8849d407.paolayjon.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JDN733="ODg0OWQ0MDctM2U0OC00ZjMyLWEwOTYtNjYzMzBkY2QzZjc4OjgyMTZjYjNiLWViMDYtNGQ4ZC1iMDY0LWZkMzJlNjJhMzlmNg=="
2025-01-07 18:40:58 UTC	800	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 07 Jan 2025 18:40:57 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:46 GMT etag: 0x8DB5C3F47E260FD x-ms-request-id: 4ede4540-e01e-0063-48b7-605ead000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20250107T184057Z-178b46cfc68h77w6hC1DFW56d4000000026g0000000007gc x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2025-01-07 18:40:58 UTC	680	IN	Data Raw: 32 61 31 0d 0a 1f 8b 08 00 00 00 00 00 00 ff b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 Data Ascii: 2a1Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9
2025-01-07 18:40:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	60245	198.58.107.108	443	3060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-07 18:40:56 UTC	550	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: 423377fa-8849d407.paolayjon.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JDN733="ODg0OWQ0MDctM2U0OC00ZjMyLWEwOTYtNjYzMzBkY2QzZjc4OjgyMTZjYjNiLWViMDYtNGQ4ZC1iMDY0LWZkMzJlNjJhMzlmNg=="
2025-01-07 18:40:58 UTC	800	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 07 Jan 2025 18:40:58 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:49 GMT etag: 0x8DB5C3F49ED96E0 x-ms-request-id: 40dde5e5-f01e-006c-2192-59176c000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20250107T184057Z-185c6999ffdsql8qhC1DFW3ue80000000xrg000000004bg7 x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2025-01-07 18:40:58 UTC	628	IN	Data Raw: 32 36 64 0d 0a 1f 8b 08 00 00 00 00 00 00 ff 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b Data Ascii: 26d}UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;
2025-01-07 18:40:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	60246	198.58.107.108	443	3060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-07 18:40:56 UTC	550	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: 423377fa-8849d407.paolayjon.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JDN733="ODg0OWQ0MDctM2U0OC00ZjMyLWEwOTYtNjYzMzBkY2QzZjc4OjgyMTZjYjNiLWViMDYtNGQ4ZC1iMDY0LWZkMzJlNjJhMzlmNg=="
2025-01-07 18:40:58 UTC	800	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 07 Jan 2025 18:40:58 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:48 GMT etag: 0x8DB5C3F4911527F x-ms-request-id: 94dd1dc0-c01e-0048-6b1c-5ae1cc000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20250107T184057Z-185c6999ffdqpplnhC1DFWk0w80000000vm0000000007tmr x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2025-01-07 18:40:58 UTC	1442	IN	Data Raw: 35 39 62 0d 0a 1f 8b 08 00 00 00 00 00 00 ff bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 Data Ascii: 59bWMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#
2025-01-07 18:40:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	60247	198.58.107.108	443	3060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-07 18:40:57 UTC	571	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_cc2c59f5ef2c09e14b08.js HTTP/1.1 Host: 423377fa-8849d407.paolayjon.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JDN733="ODg0OWQ0MDctM2U0OC00ZjMyLWEwOTYtNjYzMzBkY2QzZjc4OjgyMTZjYjNiLWViMDYtNGQ4ZC1iMDY0LWZkMzJlNjJhMzlmNg=="
2025-01-07 18:40:59 UTC	806	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 07 Jan 2025 18:40:59 GMT Content-Type: application/x-javascript Content-Length: 35198 Connection: close cache-control: public, max-age=31536000 last-modified: Fri, 15 Nov 2024 18:42:38 GMT etag: 0x8DD05A5479BC1A5 x-ms-request-id: d7c2895e-f01e-000d-5513-5f0b82000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20250107T184058Z-1755d4fdcbd79ssphC1DFW722g000000048000000000dsuw x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2025-01-07 18:40:59 UTC	13654	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 c4 bd 6b 43 db 48 b2 30 fc fd f9 15 e0 9d 65 ac b5 00 df 30 18 70 58 06 92 49 76 33 93 9c 5c 66 cf 2e 30 59 59 96 6d 0d b2 65 24 99 4b 02 cf 6f 7f eb d2 97 6a c9 90 cc 9c 67 df 33 e7 6c 70 57 df aa ab ab ab ab aa ab 5b db 7f 59 ff 3f 6b 7f 59 db fc f6 ff d6 de 7f 38 7e f7 61 ed cd 8b b5 0f 2f 5f bd 3b 5d 7b 0b a9 7f ae fd fc e6 c3 ab 93 e7 df de 0e 76 8a ff fb 30 8d f3 b5 71 9c 44 6b f0 77 18 e4 d1 68 2d 9d af a5 d9 5a 3c 0f d3 6c 91 66 41 11 e5 6b 33 f8 37 8b 83 64 6d 9c a5 b3 b5 62 1a ad 2d b2 f4 b7 28 2c f2 b5 24 ce 0b a8 34 8c 92 f4 66 ad 0e cd 65 a3 b5 b7 41 56 dc ad bd 7a eb 6d 41 fb 11 b4 16 4f e2 39 d4 0e d3 c5 1d fc 9e 16 6b f3 b4 88 c3 68 2d 98 8f a8 b5 04 12 f3 3c 5a 5b ce 47 51 b6 76 33 8d c3 e9 da 4f 71 98 a5 79 Data Ascii: kCH0e0pXIv3\f.0YYme$Kojg3lpW[Y?kY8~a/_;]{v0qDkwh-Z<lfAk37dmb-(,$4feAVzmAO9kh-<Z[GQv3Oqy
2025-01-07 18:40:59 UTC	16384	IN	Data Raw: 19 a0 41 9d 71 c6 e0 ec 02 5a 6f 1e 14 87 40 fd 83 a2 d1 f0 b2 c1 7b c2 62 6b 9c a5 33 ec ed 24 1d 45 f5 c2 f3 b7 7f 3d 6b 6e f6 83 cd cf 17 df 6d c7 5b 45 94 17 f5 cc 3b ca b7 16 cb 7c 0a bf f6 d5 af da 9f 6b 8d 7a ad 59 6b 14 5b 45 ca 4d d5 5b 3d 0f 12 64 dc 9d 04 79 54 f7 bc ad 3c 89 c3 a8 be d9 f6 3c c2 86 71 88 b6 92 68 3e 29 a6 84 48 7e 16 6d 85 aa ff e3 02 30 b8 18 44 67 c5 c5 81 1e c5 03 22 95 0e 9a 7e 3c 30 f5 d2 c3 f8 20 85 ba 30 dc 60 e0 54 4f 3d 1f 48 d5 d9 05 92 05 1b 1b 69 a3 7d 18 6f 6c e8 21 8d 2f be b4 1f cc a8 22 85 5c da 68 f9 69 a3 e3 79 5e d2 18 18 20 81 e0 9f 41 fb 20 4a 60 ba b1 2b 24 1e 16 5a 9e 05 17 16 fa 6c b0 b3 03 56 f3 c6 46 70 38 d8 d9 ed 74 3b de 97 0a b8 d7 69 f5 11 9d 16 a2 53 0f 4b 38 37 5a 9e f7 0c 0b b5 9b 1b 1b a1 69 Data Ascii: AqZo@{bk3$E=knm[E;\|kzYk[EM[=dyT<<qh>)H~m0Dg"~<0 0`TO=Hi}ol!/"\hiy^ A J`+$ZlVFp8t;iSK87Zi
2025-01-07 18:40:59 UTC	5160	IN	Data Raw: b3 f2 d5 96 2a 95 f3 1a e3 92 0e 2f 7e 05 ab e1 12 7b 7e 15 8d e1 39 0c 82 47 a3 5c 69 69 4f 46 93 59 fe a2 9e 0c ef 69 f1 3a ae a0 a0 c0 31 29 44 d1 71 cc ea 5d e7 da eb e6 f3 8e 1a eb 72 07 46 0a 40 ba b8 d8 e4 a4 79 ae 46 c6 a1 63 69 d9 95 8c 6f 78 3d bd ef 21 6f 3c 8c c0 15 d7 e3 e1 1a 73 0d 95 e1 9b 50 f9 ae df 43 8e be 4d 2e 31 fd 55 0d 05 35 48 a4 37 39 ec 0a b5 16 0c b3 fe 43 a1 52 e9 3c 14 1a 75 e8 95 3e fe 82 a7 dd 64 9e 76 b3 83 a3 00 e0 a3 22 fe fb 5c 6e 51 98 ab 25 1b ef 12 a1 24 41 e1 d0 b6 7a de d8 5d d9 da 79 6e 77 8d 3a ee af 0d b4 1f 6d f6 8c a7 3c c0 a9 34 3a 66 e1 09 aa 62 52 37 d9 00 68 51 ca 6d e1 bb b0 4e 83 b2 af 8c 6d f7 c9 18 e6 e6 05 57 0b 42 d5 e1 f9 b2 a6 a3 78 b0 76 9f 9b 43 c7 f7 16 85 c7 64 ce 47 1c 15 18 a9 cd 7f 30 02 68 Data Ascii: */~{~9G\iiOFYi:1)Dq]rF@yFciox=!o<sPCM.1U5H79CR<u>dv"\nQ%$Az]ynw:m<4:fbR7hQmNmWBxvCdG0h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	60249	198.58.107.108	443	3060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-07 18:40:59 UTC	798	OUT	GET /8849d4073e484f32a09666330dcd3f78/ HTTP/1.1 Host: membersourcecu.paolayjon.us Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://membersourcecu.paolayjon.us Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JDN733="ODg0OWQ0MDctM2U0OC00ZjMyLWEwOTYtNjYzMzBkY2QzZjc4OjgyMTZjYjNiLWViMDYtNGQ4ZC1iMDY0LWZkMzJlNjJhMzlmNg=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; MicrosoftApplicationsTelemetryDeviceId=db67cbe2-bfe8-45cb-ab7b-dfbe30731da5; brcap=0 Sec-WebSocket-Key: 43PO7Ih7SzkFXfLrYbyt/A== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2025-01-07 18:41:01 UTC	737	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 07 Jan 2025 18:41:01 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 88567f46-75b8-420b-bbd4-e8b939c32300 x-ms-ests-server: 2.1.19683.6 - FRC ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://1b4ddfb2-8849d407.paolayjon.us/api/report?catId=GW+estsfd+ams2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2025-01-07 18:41:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	60252	198.58.107.108	443	3060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-07 18:41:08 UTC	798	OUT	GET /8849d4073e484f32a09666330dcd3f78/ HTTP/1.1 Host: membersourcecu.paolayjon.us Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://membersourcecu.paolayjon.us Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JDN733="ODg0OWQ0MDctM2U0OC00ZjMyLWEwOTYtNjYzMzBkY2QzZjc4OjgyMTZjYjNiLWViMDYtNGQ4ZC1iMDY0LWZkMzJlNjJhMzlmNg=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; MicrosoftApplicationsTelemetryDeviceId=db67cbe2-bfe8-45cb-ab7b-dfbe30731da5; brcap=0 Sec-WebSocket-Key: xrG9srQpY/yYLGchHVvSPw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2025-01-07 18:41:10 UTC	740	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 07 Jan 2025 18:41:10 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: ce1fae53-f282-4015-b5e6-8bc532db0702 x-ms-ests-server: 2.1.19683.6 - WEULR1 ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://1b4ddfb2-8849d407.paolayjon.us/api/report?catId=GW+estsfd+ams2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2025-01-07 18:41:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	60255	198.58.107.108	443	3060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-07 18:41:08 UTC	1367	OUT	POST /common/GetCredentialType?mkt=en-US HTTP/1.1 Host: membersourcecu.paolayjon.us Connection: keep-alive Content-Length: 1330 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" hpgrequestid: 5ea82dc5-ab11-416b-9f24-2b2c61f11d00 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 client-request-id: 9782ea3e-d688-4d37-af94-a3e8cc82efff canary: PAQABDgEAAADW6jl31mB3T7ugrWTT8pFeVj1EJZ4rOJipYZ8xvx3BP7kn918GFx23115ds-c9c0GFTdDcsTykNenI0S9-OjmtqgYAS7XvVCfRjQ5T4b51pPbhQCdJysfj7dicGR-K2kJmMG1GdpNtADfiIlJfnTpY_oMAZP-Po2a_FWAyvqJmrF5zw84DCf10pNPF5aw_sm44nV_Xo96tUiXdj8pZP5KwTbXkCAH6L-B4gfPairSO2CAA Content-type: application/json; charset=UTF-8 hpgid: 1104 Accept: application/json hpgact: 2101 sec-ch-ua-platform: "Windows" Origin: https://membersourcecu.paolayjon.us Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://membersourcecu.paolayjon.us/?KDnq=vxU7AS&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JDN733="ODg0OWQ0MDctM2U0OC00ZjMyLWEwOTYtNjYzMzBkY2QzZjc4OjgyMTZjYjNiLWViMDYtNGQ4ZC1iMDY0LWZkMzJlNjJhMzlmNg=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; MicrosoftApplicationsTelemetryDeviceId=db67cbe2-bfe8-45cb-ab7b-dfbe30731da5; brcap=0
2025-01-07 18:41:08 UTC	1330	OUT	Data Raw: 7b 22 75 73 65 72 6e 61 6d 65 22 3a 22 6c 62 6f 70 74 73 40 66 73 64 7a 2e 63 6f 6d 22 2c 22 69 73 4f 74 68 65 72 49 64 70 53 75 70 70 6f 72 74 65 64 22 3a 74 72 75 65 2c 22 63 68 65 63 6b 50 68 6f 6e 65 73 22 3a 66 61 6c 73 65 2c 22 69 73 52 65 6d 6f 74 65 4e 47 43 53 75 70 70 6f 72 74 65 64 22 3a 74 72 75 65 2c 22 69 73 43 6f 6f 6b 69 65 42 61 6e 6e 65 72 53 68 6f 77 6e 22 3a 66 61 6c 73 65 2c 22 69 73 46 69 64 6f 53 75 70 70 6f 72 74 65 64 22 3a 74 72 75 65 2c 22 6f 72 69 67 69 6e 61 6c 52 65 71 75 65 73 74 22 3a 22 72 51 51 49 41 52 41 41 34 32 4b 77 30 73 6b 6f 4b 53 6b 6f 74 74 4c 58 4c 38 67 76 4b 6b 6e 4d 30 63 76 4e 54 43 37 4b 4c 38 35 50 4b 38 6e 50 79 38 6e 4d 53 39 56 4c 7a 73 5f 56 79 79 39 4b 7a 30 77 42 73 59 71 45 75 41 54 73 58 6a 56 4e Data Ascii: {"username":"lbopts@fsdz.com","isOtherIdpSupported":true,"checkPhones":false,"isRemoteNGCSupported":true,"isCookieBannerShown":false,"isFidoSupported":true,"originalRequest":"rQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuATsXjVN
2025-01-07 18:41:11 UTC	823	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 07 Jan 2025 18:41:11 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: no-store, no-cache pragma: no-cache p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" client-request-id: 9782ea3e-d688-4d37-af94-a3e8cc82efff x-ms-request-id: e35cf34b-cc9a-4a7c-a41b-93940d1d2700 x-ms-ests-server: 2.1.19683.6 - FRC ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://1b4ddfb2-8849d407.paolayjon.us/api/report?catId=GW+estsfd+ams2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2025-01-07 18:41:11 UTC	1272	IN	Data Raw: 34 66 31 0d 0a 7b 22 55 73 65 72 6e 61 6d 65 22 3a 22 6c 62 6f 70 74 73 40 66 73 64 7a 2e 63 6f 6d 22 2c 22 44 69 73 70 6c 61 79 22 3a 22 6c 62 6f 70 74 73 40 66 73 64 7a 2e 63 6f 6d 22 2c 22 49 66 45 78 69 73 74 73 52 65 73 75 6c 74 22 3a 31 2c 22 49 73 55 6e 6d 61 6e 61 67 65 64 22 3a 66 61 6c 73 65 2c 22 54 68 72 6f 74 74 6c 65 53 74 61 74 75 73 22 3a 31 2c 22 43 72 65 64 65 6e 74 69 61 6c 73 22 3a 7b 22 50 72 65 66 43 72 65 64 65 6e 74 69 61 6c 22 3a 31 2c 22 48 61 73 50 61 73 73 77 6f 72 64 22 3a 74 72 75 65 2c 22 52 65 6d 6f 74 65 4e 67 63 50 61 72 61 6d 73 22 3a 6e 75 6c 6c 2c 22 46 69 64 6f 50 61 72 61 6d 73 22 3a 6e 75 6c 6c 2c 22 51 72 43 6f 64 65 50 69 6e 50 61 72 61 6d 73 22 3a 6e 75 6c 6c 2c 22 53 61 73 50 61 72 61 6d 73 22 3a 6e 75 6c 6c 2c Data Ascii: 4f1{"Username":"lbopts@fsdz.com","Display":"lbopts@fsdz.com","IfExistsResult":1,"IsUnmanaged":false,"ThrottleStatus":1,"Credentials":{"PrefCredential":1,"HasPassword":true,"RemoteNgcParams":null,"FidoParams":null,"QrCodePinParams":null,"SasParams":null,
2025-01-07 18:41:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	60254	198.58.107.108	443	3060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-07 18:41:08 UTC	801	OUT	GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1 Host: 423377fa-8849d407.paolayjon.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://membersourcecu.paolayjon.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JDN733="ODg0OWQ0MDctM2U0OC00ZjMyLWEwOTYtNjYzMzBkY2QzZjc4OjgyMTZjYjNiLWViMDYtNGQ4ZC1iMDY0LWZkMzJlNjJhMzlmNg=="
2025-01-07 18:41:10 UTC	755	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 07 Jan 2025 18:41:10 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:47 GMT etag: 0x8DB5C3F48EC4154 x-ms-request-id: 72b1200d-b01e-007d-7eb7-608dd8000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20250107T184110Z-178b46cfc68m7rgghC1DFW71es000000026000000000bz6k x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes
2025-01-07 18:41:10 UTC	2679	IN	Data Raw: 61 37 30 0d 0a 47 49 46 38 39 61 60 01 03 00 f0 00 00 ff ff ff 96 96 96 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 06 00 00 00 30 00 03 00 00 02 1a 8c 01 16 88 ca ec 1e 3c f2 a9 18 1b b5 5b e6 9a 5c 4b 38 6a e5 74 72 a9 67 14 00 21 f9 04 09 03 00 00 00 2c 07 00 00 00 33 00 03 00 00 02 1a 8c 81 16 c8 ca ef 5e 3b 12 2a 0a e2 5c 55 4b df 5d 5c 86 25 e5 56 99 63 aa 14 00 21 f9 04 09 05 00 00 00 2c 0a 00 00 00 37 00 03 00 00 02 1a 8c 81 60 91 b9 ed 0e 6c 6f c6 c5 ee ac 90 5b bf 61 19 02 2a 52 77 7e Data Ascii: a70GIF89a`!NETSCAPE2.0!,`6PlHI:qJk`BYL&!,0<[\K8jtrg!,3^;\UK]\%Vc!,7`lo[a*Rw~
2025-01-07 18:41:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	60253	198.58.107.108	443	3060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-07 18:41:08 UTC	795	OUT	GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1 Host: 423377fa-8849d407.paolayjon.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://membersourcecu.paolayjon.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JDN733="ODg0OWQ0MDctM2U0OC00ZjMyLWEwOTYtNjYzMzBkY2QzZjc4OjgyMTZjYjNiLWViMDYtNGQ4ZC1iMDY0LWZkMzJlNjJhMzlmNg=="
2025-01-07 18:41:10 UTC	755	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 07 Jan 2025 18:41:10 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:48 GMT etag: 0x8DB5C3F4904824B x-ms-request-id: c0c42ad6-d01e-005f-6c43-5a00d5000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20250107T184110Z-185c6999ffdgvpt6hC1DFW3a240000000uzg00000000cxfq x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes
2025-01-07 18:41:10 UTC	3627	IN	Data Raw: 65 32 34 0d 0a 47 49 46 38 39 61 60 01 03 00 f0 00 00 00 00 00 69 69 69 21 f9 04 09 05 00 00 00 21 fe 26 45 64 69 74 65 64 20 77 69 74 68 20 65 7a 67 69 66 2e 63 6f 6d 20 6f 6e 6c 69 6e 65 20 47 49 46 20 6d 61 6b 65 72 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 1f 69 19 07 ec 96 8a b2 51 34 af de bc fb 0f 86 e2 48 96 e6 89 a6 6a 0a 3d 99 6b 39 2d 35 5f f5 8a e7 fa ce f7 fe 0f 8c b4 6a 37 98 a6 28 7b 05 97 cc a6 f3 09 d5 15 00 00 21 f9 04 09 03 00 00 00 2c 00 00 00 00 60 01 03 00 Data Ascii: e24GIF89a`iii!!&Edited with ezgif.com online GIF maker!NETSCAPE2.0,`6PlHI:qJk`BYL*&!,`9iQ4Hj=k9-5_j7({!,`
2025-01-07 18:41:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	60262	198.58.107.108	443	3060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-07 18:41:11 UTC	549	OUT	GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1 Host: 423377fa-8849d407.paolayjon.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JDN733="ODg0OWQ0MDctM2U0OC00ZjMyLWEwOTYtNjYzMzBkY2QzZjc4OjgyMTZjYjNiLWViMDYtNGQ4ZC1iMDY0LWZkMzJlNjJhMzlmNg=="
2025-01-07 18:41:13 UTC	755	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 07 Jan 2025 18:41:13 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:48 GMT etag: 0x8DB5C3F4904824B x-ms-request-id: df2cb967-c01e-0053-7eb7-6097dd000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20250107T184112Z-178b46cfc68dvkhnhC1DFWget800000001p000000000gz6m x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes
2025-01-07 18:41:13 UTC	3627	IN	Data Raw: 65 32 34 0d 0a 47 49 46 38 39 61 60 01 03 00 f0 00 00 00 00 00 69 69 69 21 f9 04 09 05 00 00 00 21 fe 26 45 64 69 74 65 64 20 77 69 74 68 20 65 7a 67 69 66 2e 63 6f 6d 20 6f 6e 6c 69 6e 65 20 47 49 46 20 6d 61 6b 65 72 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 1f 69 19 07 ec 96 8a b2 51 34 af de bc fb 0f 86 e2 48 96 e6 89 a6 6a 0a 3d 99 6b 39 2d 35 5f f5 8a e7 fa ce f7 fe 0f 8c b4 6a 37 98 a6 28 7b 05 97 cc a6 f3 09 d5 15 00 00 21 f9 04 09 03 00 00 00 2c 00 00 00 00 60 01 03 00 Data Ascii: e24GIF89a`iii!!&Edited with ezgif.com online GIF maker!NETSCAPE2.0,`6PlHI:qJk`BYL*&!,`9iQ4Hj=k9-5_j7({!,`
2025-01-07 18:41:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	60263	198.58.107.108	443	3060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-07 18:41:11 UTC	555	OUT	GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1 Host: 423377fa-8849d407.paolayjon.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JDN733="ODg0OWQ0MDctM2U0OC00ZjMyLWEwOTYtNjYzMzBkY2QzZjc4OjgyMTZjYjNiLWViMDYtNGQ4ZC1iMDY0LWZkMzJlNjJhMzlmNg=="
2025-01-07 18:41:13 UTC	755	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 07 Jan 2025 18:41:13 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:47 GMT etag: 0x8DB5C3F48EC4154 x-ms-request-id: 72b1200d-b01e-007d-7eb7-608dd8000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20250107T184112Z-178b46cfc68wqcm8hC1DFWysc4000000022g000000008cx9 x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes
2025-01-07 18:41:13 UTC	2679	IN	Data Raw: 61 37 30 0d 0a 47 49 46 38 39 61 60 01 03 00 f0 00 00 ff ff ff 96 96 96 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 06 00 00 00 30 00 03 00 00 02 1a 8c 01 16 88 ca ec 1e 3c f2 a9 18 1b b5 5b e6 9a 5c 4b 38 6a e5 74 72 a9 67 14 00 21 f9 04 09 03 00 00 00 2c 07 00 00 00 33 00 03 00 00 02 1a 8c 81 16 c8 ca ef 5e 3b 12 2a 0a e2 5c 55 4b df 5d 5c 86 25 e5 56 99 63 aa 14 00 21 f9 04 09 05 00 00 00 2c 0a 00 00 00 37 00 03 00 00 02 1a 8c 81 60 91 b9 ed 0e 6c 6f c6 c5 ee ac 90 5b bf 61 19 02 2a 52 77 7e Data Ascii: a70GIF89a`!NETSCAPE2.0!,`6PlHI:qJk`BYL&!,0<[\K8jtrg!,3^;\UK]\%Vc!,7`lo[a*Rw~
2025-01-07 18:41:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	60268	198.58.107.108	443	3060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-07 18:41:12 UTC	632	OUT	GET /common/GetCredentialType?mkt=en-US HTTP/1.1 Host: membersourcecu.paolayjon.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JDN733="ODg0OWQ0MDctM2U0OC00ZjMyLWEwOTYtNjYzMzBkY2QzZjc4OjgyMTZjYjNiLWViMDYtNGQ4ZC1iMDY0LWZkMzJlNjJhMzlmNg=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; MicrosoftApplicationsTelemetryDeviceId=db67cbe2-bfe8-45cb-ab7b-dfbe30731da5; brcap=0
2025-01-07 18:41:14 UTC	766	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 07 Jan 2025 18:41:14 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: no-store, no-cache pragma: no-cache p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 1db960b8-82d9-4935-9ed0-77d694e82000 x-ms-ests-server: 2.1.19683.6 - FRC ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://1b4ddfb2-8849d407.paolayjon.us/api/report?catId=GW+estsfd+ams2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2025-01-07 18:41:14 UTC	170	IN	Data Raw: 61 34 0d 0a 7b 22 65 72 72 6f 72 22 3a 7b 22 63 6f 64 65 22 3a 36 31 30 30 2c 22 73 74 73 45 72 72 6f 72 22 3a 22 41 41 44 53 54 53 39 30 30 35 36 31 22 2c 22 63 6f 72 72 65 6c 61 74 69 6f 6e 49 64 22 3a 22 30 32 65 66 61 33 36 33 2d 61 65 30 31 2d 34 63 37 32 2d 61 33 37 65 2d 34 38 33 38 63 36 30 35 63 61 32 33 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 35 2d 30 31 2d 30 37 20 31 38 3a 34 31 3a 31 33 5a 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 41 41 44 53 54 53 39 30 30 35 36 31 22 7d 7d 0d 0a Data Ascii: a4{"error":{"code":6100,"stsError":"AADSTS900561","correlationId":"02efa363-ae01-4c72-a37e-4838c605ca23","timestamp":"2025-01-07 18:41:13Z","message":"AADSTS900561"}}
2025-01-07 18:41:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	60315	198.58.107.108	443	3060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-07 18:41:18 UTC	798	OUT	GET /8849d4073e484f32a09666330dcd3f78/ HTTP/1.1 Host: membersourcecu.paolayjon.us Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://membersourcecu.paolayjon.us Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JDN733="ODg0OWQ0MDctM2U0OC00ZjMyLWEwOTYtNjYzMzBkY2QzZjc4OjgyMTZjYjNiLWViMDYtNGQ4ZC1iMDY0LWZkMzJlNjJhMzlmNg=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; MicrosoftApplicationsTelemetryDeviceId=db67cbe2-bfe8-45cb-ab7b-dfbe30731da5; brcap=0 Sec-WebSocket-Key: RiNeZfWblzM1+rLWz5r3yw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2025-01-07 18:41:21 UTC	740	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 07 Jan 2025 18:41:20 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 7e273d41-e867-4731-8b24-9dadb54c4201 x-ms-ests-server: 2.1.19683.6 - WEULR1 ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://1b4ddfb2-8849d407.paolayjon.us/api/report?catId=GW+estsfd+ams2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2025-01-07 18:41:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	60320	198.58.107.108	443	3060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-07 18:41:19 UTC	437	OUT	OPTIONS /api/report?catId=GW+estsfd+ams2 HTTP/1.1 Host: 1b4ddfb2-8849d407.paolayjon.us Connection: keep-alive Origin: https://membersourcecu.paolayjon.us Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-07 18:41:21 UTC	336	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 07 Jan 2025 18:41:21 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding access-control-allow-headers: content-type access-control-allow-credentials: false access-control-allow-methods: , GET, OPTIONS, POST access-control-allow-origin:
2025-01-07 18:41:21 UTC	12	IN	Data Raw: 37 0d 0a 4f 50 54 49 4f 4e 53 0d 0a Data Ascii: 7OPTIONS
2025-01-07 18:41:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	60336	198.58.107.108	443	3060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-07 18:41:22 UTC	367	OUT	POST /api/report?catId=GW+estsfd+ams2 HTTP/1.1 Host: 1b4ddfb2-8849d407.paolayjon.us Connection: keep-alive Content-Length: 462 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-07 18:41:22 UTC	462	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 33 35 33 31 35 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 32 36 30 39 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 6d 62 65 72 73 6f 75 72 63 65 63 75 2e 70 61 6f 6c 61 79 6a 6f 6e 2e 75 73 2f 3f 4b 44 6e 71 3d 76 78 55 37 41 53 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 39 38 2e 35 38 2e 31 30 37 2e 31 30 38 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c Data Ascii: [{"age":35315,"body":{"elapsed_time":2609,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://membersourcecu.paolayjon.us/?KDnq=vxU7AS","sampling_fraction":1.0,"server_ip":"198.58.107.108","status_code":404,"type":"http.error"},
2025-01-07 18:41:34 UTC	301	IN	HTTP/1.1 504 Gateway Timeout Server: nginx Date: Tue, 07 Jan 2025 18:41:34 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close mime-version: 1.0 access-control-allow-credentials: false access-control-allow-methods: , GET, OPTIONS, POST access-control-allow-origin:
2025-01-07 18:41:34 UTC	289	IN	Data Raw: 31 31 61 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 45 72 72 6f 72 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 41 6e 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 20 77 68 69 6c 65 20 70 72 6f 63 65 73 73 69 6e 67 20 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 32 32 31 26 23 34 36 3b 37 35 33 36 36 35 35 66 26 23 34 36 3b 31 37 33 36 32 37 35 32 38 33 26 23 34 36 3b 34 30 62 32 34 66 33 66 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 32 32 31 26 23 34 36 3b 37 35 33 36 36 35 35 66 26 23 34 36 3b 31 37 33 36 32 37 35 32 38 33 26 Data Ascii: 11a<HTML><HEAD><TITLE>Error</TITLE></HEAD><BODY>An error occurred while processing your request.<p>Reference #221.7536655f.1736275283.40b24f3f<P>https://errors.edgesuite.net/221.7536655f.1736275283&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	60389	198.58.107.108	443	3060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-07 18:41:31 UTC	798	OUT	GET /8849d4073e484f32a09666330dcd3f78/ HTTP/1.1 Host: membersourcecu.paolayjon.us Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://membersourcecu.paolayjon.us Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JDN733="ODg0OWQ0MDctM2U0OC00ZjMyLWEwOTYtNjYzMzBkY2QzZjc4OjgyMTZjYjNiLWViMDYtNGQ4ZC1iMDY0LWZkMzJlNjJhMzlmNg=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; MicrosoftApplicationsTelemetryDeviceId=db67cbe2-bfe8-45cb-ab7b-dfbe30731da5; brcap=0 Sec-WebSocket-Key: fD8xNCqiQCtFrakUcFwYFg== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2025-01-07 18:41:33 UTC	737	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 07 Jan 2025 18:41:33 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 2b828c68-d963-4ea9-b8b0-2beea22c2200 x-ms-ests-server: 2.1.19683.6 - FRC ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://1b4ddfb2-8849d407.paolayjon.us/api/report?catId=GW+estsfd+ams2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2025-01-07 18:41:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	13:40:08
Start date:	07/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	13:40:10
Start date:	07/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2520 --field-trial-handle=2328,i,13374789021789178064,4621055915112058383,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	13:40:16
Start date:	07/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://creditunions.taplink.ws"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://membersourcecu.paolayjon.us/?KDnq=vxU7AS&sso_reload=true	Joe Sandbox AI: Score: 9 Reasons: The URL 'membersourcecu.paolayjon.us' does not match the legitimate domain 'microsoft.com'., The domain 'paolayjon.us' is not associated with Microsoft and appears unrelated., The presence of a seemingly random domain name 'paolayjon.us' is suspicious., The email domain 'fsdz.com' in the input fields does not match Microsoft's domain., Microsoft is a well-known brand, and any legitimate site should be under 'microsoft.com'. DOM: 3.7.pages.csv
Source: https://membersourcecu.paolayjon.us/?KDnq=vxU7AS&sso_reload=true	Joe Sandbox AI: Score: 9 Reasons: The URL 'membersourcecu.paolayjon.us' does not match the legitimate domain 'microsoft.com'., The domain 'paolayjon.us' is unrelated to Microsoft and appears suspicious., The presence of an email input field with a non-Microsoft domain 'fsdz.com' is unusual and raises suspicion., The URL structure includes an unrelated domain name, which is a common tactic in phishing attempts. DOM: 3.8.pages.csv

Source: Yara match	File source: 0.5.id.script.csv, type: HTML
Source: Yara match	File source: 0.11.id.script.csv, type: HTML
Source: Yara match	File source: 2.2.pages.csv, type: HTML
Source: Yara match	File source: 3.3.pages.csv, type: HTML
Source: Yara match	File source: 3.4.pages.csv, type: HTML
Source: Yara match	File source: 3.6.pages.csv, type: HTML
Source: Yara match	File source: 3.8.pages.csv, type: HTML

Source: https://membersourcecu.paolayjon.us/?KDnq=vxU7AS&sso_reload=true	HTTP Parser: Iframe src: https://64c2b783-8849d407.paolayjon.us/Prefetch/Prefetch.aspx
Source: https://membersourcecu.paolayjon.us/?KDnq=vxU7AS&sso_reload=true	HTTP Parser: Iframe src: https://64c2b783-8849d407.paolayjon.us/Prefetch/Prefetch.aspx
Source: https://membersourcecu.paolayjon.us/?KDnq=vxU7AS&sso_reload=true	HTTP Parser: Iframe src: https://64c2b783-8849d407.paolayjon.us/Prefetch/Prefetch.aspx

Source: https://membersourcecu.paolayjon.us/?KDnq=vxU7AS	HTTP Parser: No favicon
Source: https://membersourcecu.paolayjon.us/?KDnq=vxU7AS&sso_reload=true	HTTP Parser: No favicon
Source: https://membersourcecu.paolayjon.us/?KDnq=vxU7AS&sso_reload=true	HTTP Parser: No favicon
Source: https://membersourcecu.paolayjon.us/?KDnq=vxU7AS&sso_reload=true	HTTP Parser: No favicon
Source: https://membersourcecu.paolayjon.us/?KDnq=vxU7AS&sso_reload=true	HTTP Parser: No favicon
Source: https://membersourcecu.paolayjon.us/?KDnq=vxU7AS&sso_reload=true	HTTP Parser: No favicon
Source: https://membersourcecu.paolayjon.us/?KDnq=vxU7AS&sso_reload=true	HTTP Parser: No favicon

Source: https://membersourcecu.paolayjon.us/?KDnq=vxU7AS&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://membersourcecu.paolayjon.us/?KDnq=vxU7AS&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://membersourcecu.paolayjon.us/?KDnq=vxU7AS&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://membersourcecu.paolayjon.us/?KDnq=vxU7AS&sso_reload=true	HTTP Parser: No <meta name="author".. found

Source: https://membersourcecu.paolayjon.us/?KDnq=vxU7AS&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://membersourcecu.paolayjon.us/?KDnq=vxU7AS&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://membersourcecu.paolayjon.us/?KDnq=vxU7AS&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://membersourcecu.paolayjon.us/?KDnq=vxU7AS&sso_reload=true	HTTP Parser: No <meta name="copyright".. found

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 2.22.50.131
Source: unknown	TCP traffic detected without corresponding DNS query: 2.22.50.131
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://creditunions.taplink.ws

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Chrome Cache Entry: 90

Chrome Cache Entry: 91

Windows Analysis Report
https://creditunions.taplink.ws