Edit tour

Windows Analysis Report
http://hub-ledge-live-wallet.webflow.io/

Overview

General Information

Sample URL:	http://hub-ledge-live-wallet.webflow.io/
Analysis ID:	1621624
Infos:

Detection

HTMLPhisher

Score:	64
Range:	0 - 100
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Yara detected HtmlPhish64

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5448 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5544 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2364 --field-trial-handle=2284,i,1721605306511470720,1365186693610472002,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6500 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://hub-ledge-live-wallet.webflow.io/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
1.0.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

• AV Detection
• Phishing
• Networking
• System Summary

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://hub-ledge-live-wallet.webflow.io/

Avira URL Cloud: detection malicious, Label: phishing

Antivirus detection for URL or domain

Source: https://shotheatsgnovel.com/26e19d72-1e31-4c1c-a832-bd8eab02fe1b

Avira URL Cloud: Label: malware

Phishing

Yara detected HtmlPhish64

Source: Yara match

File source: 1.0.pages.csv, type: HTML

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: hub-ledge-live-wallet.webflow.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /668e5482841a316753518fba/css/hub-ledge-live-wallet.webflow.643ab4644.css HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://hub-ledge-live-wallet.webflow.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /668e5482841a316753518fba/js/webflow.4e8135d87.js HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hub-ledge-live-wallet.webflow.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/jquery-3.5.1.min.dc5e7f18c8.js?site=668e5482841a316753518fba HTTP/1.1Host: d3e54v103j8qbb.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://hub-ledge-live-wallet.webflow.iosec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://hub-ledge-live-wallet.webflow.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /668e5482841a316753518fba/668e54a8bab248f55f906ae7_Ledger-p-1600.jpg HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hub-ledge-live-wallet.webflow.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /668e5482841a316753518fba/js/webflow.4e8135d87.js HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/favicon.ico HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hub-ledge-live-wallet.webflow.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/jquery-3.5.1.min.dc5e7f18c8.js?site=668e5482841a316753518fba HTTP/1.1Host: d3e54v103j8qbb.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /668e5482841a316753518fba/668e54a8bab248f55f906ae7_Ledger-p-1600.jpg HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/favicon.ico HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: hub-ledge-live-wallet.webflow.io
Source: global traffic	DNS traffic detected: DNS query: cdn.prod.website-files.com
Source: global traffic	DNS traffic detected: DNS query: d3e54v103j8qbb.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: shotheatsgnovel.com
Source: global traffic	DNS traffic detected: DNS query: google.com

Source: chromecache_58.2.dr, chromecache_55.2.dr	String found in binary or memory: http://underscorejs.org
Source: chromecache_52.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/668e5482841a316753518fba/668e54a8bab248f55f906ae7_Ledger-p-1080.j
Source: chromecache_52.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/668e5482841a316753518fba/668e54a8bab248f55f906ae7_Ledger-p-1600.j
Source: chromecache_52.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/668e5482841a316753518fba/668e54a8bab248f55f906ae7_Ledger-p-500.jp
Source: chromecache_52.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/668e5482841a316753518fba/668e54a8bab248f55f906ae7_Ledger-p-800.jp
Source: chromecache_52.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/668e5482841a316753518fba/668e54a8bab248f55f906ae7_Ledger.jpg
Source: chromecache_52.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/668e5482841a316753518fba/css/hub-ledge-live-wallet.webflow.643ab4
Source: chromecache_52.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/668e5482841a316753518fba/js/webflow.4e8135d87.js
Source: chromecache_52.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/img/favicon.ico
Source: chromecache_52.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/img/webclip.png
Source: chromecache_52.2.dr	String found in binary or memory: https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=668e5482841a316753518fb
Source: chromecache_58.2.dr, chromecache_55.2.dr	String found in binary or memory: https://github.com/bkwld/tram
Source: chromecache_52.2.dr	String found in binary or memory: https://shotheatsgnovel.com/26e19d72-1e31-4c1c-a832-bd8eab02fe1b
Source: chromecache_52.2.dr	String found in binary or memory: https://webflow.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: classification engine

Classification label: mal64.phis.win@24/16@37/8

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2364 --field-trial-handle=2284,i,1721605306511470720,1365186693610472002,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://hub-ledge-live-wallet.webflow.io/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2364 --field-trial-handle=2284,i,1721605306511470720,1365186693610472002,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Download Video

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
http://hub-ledge-live-wallet.webflow.io/	100%	Avira URL Cloud	phishing

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=668e5482841a316753518fba	0%	Avira URL Cloud	safe
https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=668e5482841a316753518fb	0%	Avira URL Cloud	safe
https://shotheatsgnovel.com/26e19d72-1e31-4c1c-a832-bd8eab02fe1b	100%	Avira URL Cloud	malware

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
d3e54v103j8qbb.cloudfront.net	18.244.20.221	true	false	high
google.com	142.250.186.46	true	false	high
cdn.prod.website-files.com	104.18.160.117	true	false	high
www.google.com	142.250.185.228	true	false	high
hub-ledge-live-wallet.webflow.io	104.18.36.248	true	false	unknown
shotheatsgnovel.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://hub-ledge-live-wallet.webflow.io/	false		unknown
https://cdn.prod.website-files.com/img/favicon.ico	false		high
https://cdn.prod.website-files.com/668e5482841a316753518fba/js/webflow.4e8135d87.js	false		high
https://cdn.prod.website-files.com/668e5482841a316753518fba/668e54a8bab248f55f906ae7_Ledger-p-1600.jpg	false		high
https://cdn.prod.website-files.com/668e5482841a316753518fba/css/hub-ledge-live-wallet.webflow.643ab4644.css	false		high
https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=668e5482841a316753518fba	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://cdn.prod.website-files.com/668e5482841a316753518fba/668e54a8bab248f55f906ae7_Ledger-p-1080.j	chromecache_52.2.dr	false		high
https://cdn.prod.website-files.com/668e5482841a316753518fba/668e54a8bab248f55f906ae7_Ledger-p-800.jp	chromecache_52.2.dr	false		high
https://cdn.prod.website-files.com/668e5482841a316753518fba/668e54a8bab248f55f906ae7_Ledger-p-1600.j	chromecache_52.2.dr	false		high
http://underscorejs.org	chromecache_58.2.dr, chromecache_55.2.dr	false		high
https://cdn.prod.website-files.com/668e5482841a316753518fba/668e54a8bab248f55f906ae7_Ledger-p-500.jp	chromecache_52.2.dr	false		high
https://cdn.prod.website-files.com/668e5482841a316753518fba/668e54a8bab248f55f906ae7_Ledger.jpg	chromecache_52.2.dr	false		high
https://cdn.prod.website-files.com/668e5482841a316753518fba/css/hub-ledge-live-wallet.webflow.643ab4	chromecache_52.2.dr	false		high
https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=668e5482841a316753518fb	chromecache_52.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.prod.website-files.com/img/webclip.png	chromecache_52.2.dr	false		high
https://github.com/bkwld/tram	chromecache_58.2.dr, chromecache_55.2.dr	false		high
https://shotheatsgnovel.com/26e19d72-1e31-4c1c-a832-bd8eab02fe1b	chromecache_52.2.dr	false	Avira URL Cloud: malware	unknown
https://webflow.com	chromecache_52.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.36.248	hub-ledge-live-wallet.webflow.io	United States	13335	CLOUDFLARENETUS	false
142.250.185.228	www.google.com	United States	15169	GOOGLEUS	false
18.244.20.109	unknown	United States	16509	AMAZON-02US	false
104.18.160.117	cdn.prod.website-files.com	United States	13335	CLOUDFLARENETUS	false
18.244.20.221	d3e54v103j8qbb.cloudfront.net	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false

Private

IP
192.168.2.4
192.168.2.6

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1621624
Start date and time:	2025-02-22 01:48:05 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 2s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://hub-ledge-live-wallet.webflow.io/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal64.phis.win@24/16@37/8
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.181.238, 173.194.76.84, 142.250.185.67, 142.250.186.142, 142.250.185.174, 172.217.16.206, 199.232.214.172, 2.23.77.188, 142.250.186.110, 142.250.184.238, 142.250.185.238, 142.250.185.78, 142.250.185.142, 142.250.186.67, 142.250.186.46, 2.19.106.160, 172.202.163.200, 52.149.20.212, 13.107.246.60
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://hub-ledge-live-wallet.webflow.io/

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 49

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	dropped
Size (bytes):	89476
Entropy (8bit):	5.2896589255084425
Encrypted:	false
SSDEEP:	1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1
MD5:	DC5E7F18C8D36AC1D3D4753A87C98D0A
SHA1:	C8E1C8B386DC5B7A9184C763C88D19A346EB3342
SHA-256:	F7F6A5894F1D19DDAD6FA392B2ECE2C5E578CBF7DA4EA805B6885EB6985B6E3D
SHA-512:	6CB4F4426F559C06190DF97229C05A436820D21498350AC9F118A5625758435171418A022ED523BAE46E668F9F8EA871FEAB6AFF58AD2740B67A30F196D65516
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 50

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 1600x3636, components 3
Category:	dropped
Size (bytes):	274976
Entropy (8bit):	7.423087813236677
Encrypted:	false
SSDEEP:	6144:YGsZtu9qREfoyhiN/twoXVHcCJoemXoy/R1IxRI0YI:YGv8REfoAinwosen4R1ItYI
MD5:	9D7BA52216A093879805DAAB5BCEEFEF
SHA1:	D5FF65F0A2450C905BE06B6F0718EC382273F02F
SHA-256:	81231AA1D17A63473EE8B0A2D5C7C207AF8048788265DCBA03E4D199B5B21EBE
SHA-512:	D5DCEBFA08BB714E69F66B619CEFD990B137E0A355699AC01AE2905E5E2EC765866329CAD241640D7F63F49A5171FCC3DF4D6C21139D315C13AB30B4606C01D7
Malicious:	false
Reputation:	low
Preview:	.....C.....................................%...#... , #&')*)..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((......4.@..".........................................e...........................!.1AQ...."UVaq.....27....STt.....#4BRs.356bru..$...%8C.'cv..&D.(d..E.Fe................................6.......................!1A.Qa.."Rq.2.....B....3#.4CD............?..@..........................T.Z.u.z.Q..kj..a...=~.L....i.y.%..J.DT.w.UT..OZ&U...6........@...6.......x3k...g.@..7.3k...g.G.6........@...6.......x3k...g.@..7.3k...g.G.6........@...6.......x3k...g.@..7.3k...g.G.6........@...6.......x3k...g.@..7.3k...g.G.6........@...6.......x3k...g.@..7.3k...g.G.6........@...6.......x3k...g.@..7.3k...g.G.6........@...6.......x3k...g.@..7.3k...g.G.6........@...6.......x3k...g.@..7.3k...g.G.6........@...6.......x3k...g.@..7.3k...g.G.6........@...6.......x3k...g.@..7.3k...g.G.6........@...6.......x3k...g.@..7.3k...g.G.6........@...6.......x3k...g.@..

Chrome Cache Entry: 51

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	15086
Entropy (8bit):	3.4582181256178264
Encrypted:	false
SSDEEP:	96:jQ2eQFXKn5O0NkoqpWyRuaoiQ5733LimpFim+xuUbw:jzFan5O0qbMy4d3bBWnuU
MD5:	1F894F487D068A2CED95D5CD4F88598C
SHA1:	743A2C39F538650D53664D19AB5079CFC9BA55D2
SHA-256:	4239819D399860EB27D8A73417F9BD108D45D11676F68B5EDAAE328EC197D55E
SHA-512:	A9BD551FA9F297083351B37DDE9CE6080D14433D26215561875C5A3E8C6EA8ABBE8F5F3204793A7EF9690A4563A2BC640E6A32CFF15F9A9BB42CD322CE1F2717
Malicious:	false
Reputation:	low
Preview:	......00.... ..%..6... .... ......%........ .h....6..(...0...`..... ......$..................92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92

Chrome Cache Entry: 52

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (2512), with no line terminators
Category:	downloaded
Size (bytes):	2515
Entropy (8bit):	5.403401736008843
Encrypted:	false
SSDEEP:	48:YTaByEPoXEZsoXXzbyP0LgnC4iGba2o+wb+XihrWkzDSOty+NQdWFpzP88:jByEQXE9jbq0LTZb9rWQSOty+2dWFtPd
MD5:	D36584C002913EA8A2CE95ABA03A1AAB
SHA1:	2AD0B780A8CBC957D8EB740A112C26CB7423B4AE
SHA-256:	3905B23D443E4095E9A3B22A8A2BFF9D26E7836D43AE0725EDD7844FFC677607
SHA-512:	D258E59C85789CB6E76039F30E22D70B9A8A50DBF7FE51B59188E0E25DDB21BF3E5C8CB8376B56D0D0576D03617E28C2C92BF0D925851F3D321E947855242E72
Malicious:	false
Reputation:	low
URL:	https://hub-ledge-live-wallet.webflow.io/
Preview:	<!DOCTYPE html> This site was created in Webflow. https://webflow.com --> Last Published: Wed Jul 10 2024 09:31:01 GMT+0000 (Coordinated Universal Time) --><html data-wf-domain="hub-ledge-live-wallet.webflow.io" data-wf-page="668e5482841a316753518fdb" data-wf-site="668e5482841a316753518fba"><head><meta charset="utf-8"/><title>Ledger. Live* : Desktop \| Most Secure Crypto Wallet (webflow)</title><meta content="Ledger * Live Login - Ledgerwallet - Webflow. Learn how to use Ledger Live, a secure and user-friendly platform to buy, grow, and manage your digital assets. Follow the steps ." name="description"/><meta content="width=device-width, initial-scale=1" name="viewport"/><meta content="Webflow" name="generator"/><link href="https://cdn.prod.website-files.com/668e5482841a316753518fba/css/hub-ledge-live-wallet.webflow.643ab4644.css" rel="stylesheet" type="text/css"/><script type="text/javascript">!function(o,c){var n=c.documentElement,t=" w-mod-";n.className+=t+"js",("ontouchst

Chrome Cache Entry: 53

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	89476
Entropy (8bit):	5.2896589255084425
Encrypted:	false
SSDEEP:	1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1
MD5:	DC5E7F18C8D36AC1D3D4753A87C98D0A
SHA1:	C8E1C8B386DC5B7A9184C763C88D19A346EB3342
SHA-256:	F7F6A5894F1D19DDAD6FA392B2ECE2C5E578CBF7DA4EA805B6885EB6985B6E3D
SHA-512:	6CB4F4426F559C06190DF97229C05A436820D21498350AC9F118A5625758435171418A022ED523BAE46E668F9F8EA871FEAB6AFF58AD2740B67A30F196D65516
Malicious:	false
Reputation:	low
URL:	https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=668e5482841a316753518fba
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 54

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 1600x3636, components 3
Category:	downloaded
Size (bytes):	274976
Entropy (8bit):	7.423087813236677
Encrypted:	false
SSDEEP:	6144:YGsZtu9qREfoyhiN/twoXVHcCJoemXoy/R1IxRI0YI:YGv8REfoAinwosen4R1ItYI
MD5:	9D7BA52216A093879805DAAB5BCEEFEF
SHA1:	D5FF65F0A2450C905BE06B6F0718EC382273F02F
SHA-256:	81231AA1D17A63473EE8B0A2D5C7C207AF8048788265DCBA03E4D199B5B21EBE
SHA-512:	D5DCEBFA08BB714E69F66B619CEFD990B137E0A355699AC01AE2905E5E2EC765866329CAD241640D7F63F49A5171FCC3DF4D6C21139D315C13AB30B4606C01D7
Malicious:	false
Reputation:	low
URL:	https://cdn.prod.website-files.com/668e5482841a316753518fba/668e54a8bab248f55f906ae7_Ledger-p-1600.jpg
Preview:	.....C.....................................%...#... , #&')*)..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((......4.@..".........................................e...........................!.1AQ...."UVaq.....27....STt.....#4BRs.356bru..$...%8C.'cv..&D.(d..E.Fe................................6.......................!1A.Qa.."Rq.2.....B....3#.4CD............?..@..........................T.Z.u.z.Q..kj..a...=~.L....i.y.%..J.DT.w.UT..OZ&U...6........@...6.......x3k...g.@..7.3k...g.G.6........@...6.......x3k...g.@..7.3k...g.G.6........@...6.......x3k...g.@..7.3k...g.G.6........@...6.......x3k...g.@..7.3k...g.G.6........@...6.......x3k...g.@..7.3k...g.G.6........@...6.......x3k...g.@..7.3k...g.G.6........@...6.......x3k...g.@..7.3k...g.G.6........@...6.......x3k...g.@..7.3k...g.G.6........@...6.......x3k...g.@..7.3k...g.G.6........@...6.......x3k...g.@..7.3k...g.G.6........@...6.......x3k...g.@..7.3k...g.G.6........@...6.......x3k...g.@..

Chrome Cache Entry: 55

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21513)
Category:	dropped
Size (bytes):	37354
Entropy (8bit):	5.441030813994744
Encrypted:	false
SSDEEP:	768:G5p9WeNujJ4zgTyxOv5GAUdxc4vyqLgxwEWpA8pziQfsJeG:G5p9WeNul4zC5jMXyqpI
MD5:	4E8135D87E56EBF7D55500945D58C45A
SHA1:	C6EE3344D1A7D669E00E275878CDAD970DF4EB60
SHA-256:	18A0ED9CF15CB5AD3CB33184B71DA4589141D9361580881AB2A1A4C16390240D
SHA-512:	028F8F5639FE71221DC78B2D1D572D4D7A0E9C42A18FF3030034F903951D6098216F6B245FCE2D39B8FED2E5725D5FD8B1B75677579A2DF893043C9415984601
Malicious:	false
Reputation:	low
Preview:	./!. Webflow: Front-end site library. * @license MIT. * Inline scripts may access the api using an async handler:. * var Webflow = Webflow \|\| [];. * Webflow.push(readyFunction);. /..(()=>{var lt=(e,y)=>()=>(y\|\|e((y={exports:{}}).exports,y),y.exports);var Pt=lt(()=>{"use strict";window.tram=function(e){function y(t,n){var i=new J.Bare;return i.init(t,n)}function l(t){return t.replace(/[A-Z]/g,function(n){return"-"+n.toLowerCase()})}function T(t){var n=parseInt(t.slice(1),16),i=n>>16&255,r=n>>8&255,s=255&n;return[i,r,s]}function C(t,n,i){return"#"+(1<<24\|t<<16\|n<<8\|i).toString(16).slice(1)}function g(){}function L(t,n){B("Type warning: Expected: ["+t+"] Got: ["+typeof n+"] "+n)}function _(t,n,i){B("Units do not match ["+t+"]: "+n+", "+i)}function I(t,n,i){if(n!==void 0&&(i=n),t===void 0)return i;var r=i;return we.test(t)\|\|!Xt.test(t)?r=parseInt(t,10):Xt.test(t)&&(r=1e3parseFloat(t)),0>r&&(r=0),r===r?r:i}function B(t){et.debug&&window&&window.console.warn(t)}function U(t){for(var

Chrome Cache Entry: 56

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	15086
Entropy (8bit):	3.4582181256178264
Encrypted:	false
SSDEEP:	96:jQ2eQFXKn5O0NkoqpWyRuaoiQ5733LimpFim+xuUbw:jzFan5O0qbMy4d3bBWnuU
MD5:	1F894F487D068A2CED95D5CD4F88598C
SHA1:	743A2C39F538650D53664D19AB5079CFC9BA55D2
SHA-256:	4239819D399860EB27D8A73417F9BD108D45D11676F68B5EDAAE328EC197D55E
SHA-512:	A9BD551FA9F297083351B37DDE9CE6080D14433D26215561875C5A3E8C6EA8ABBE8F5F3204793A7EF9690A4563A2BC640E6A32CFF15F9A9BB42CD322CE1F2717
Malicious:	false
Reputation:	low
URL:	https://cdn.prod.website-files.com/img/favicon.ico
Preview:	......00.... ..%..6... .... ......%........ .h....6..(...0...`..... ......$..................92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92

Chrome Cache Entry: 57

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (2587)
Category:	downloaded
Size (bytes):	37224
Entropy (8bit):	5.232037168689868
Encrypted:	false
SSDEEP:	768:AoNf7A1RAeqyFMF54mkxWaIi1aUuF9ZllFeFJFuFNgVpGvR0TVji/JVm1:Aoe1RAeqyK0U0DohvR0jj
MD5:	643AB4644F9601373BDF5006AD6343DB
SHA1:	20F163E7097EC69353A8A43E9D573D0D5E63E036
SHA-256:	EC4CEBC0B1BBEE1C95157B4FDFEA6EB1ADF724840E37D6DA6C0C6B692A000072
SHA-512:	77A8297B94029970D667296DB040917CF659D64A3879383B0C4729F334710DEC2C2D00970E0965E28F309F7EE7FD4378A2CE54278F2804061A86340C6B318418
Malicious:	false
Reputation:	low
URL:	https://cdn.prod.website-files.com/668e5482841a316753518fba/css/hub-ledge-live-wallet.webflow.643ab4644.css
Preview:	html {. -webkit-text-size-adjust: 100%;. -ms-text-size-adjust: 100%;. font-family: sans-serif;.}..body {. margin: 0;.}..article, aside, details, figcaption, figure, footer, header, hgroup, main, menu, nav, section, summary {. display: block;.}..audio, canvas, progress, video {. vertical-align: baseline;. display: inline-block;.}..audio:not([controls]) {. height: 0;. display: none;.}..[hidden], template {. display: none;.}..a {. background-color: rgba(0, 0, 0, 0);.}..a:active, a:hover {. outline: 0;.}..abbr[title] {. border-bottom: 1px dotted;.}..b, strong {. font-weight: bold;.}..dfn {. font-style: italic;.}..h1 {. margin: .67em 0;. font-size: 2em;.}..mark {. color: #000;. background: #ff0;.}..small {. font-size: 80%;.}..sub, sup {. vertical-align: baseline;. font-size: 75%;. line-height: 0;. position: relative;.}..sup {. top: -.5em;.}..sub {. bottom: -.25em;.}..img {. border: 0;.}..svg:not(:root) {. overflow: hidden;.}..hr {. box-sizing: content-box;. hei

Chrome Cache Entry: 58

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21513)
Category:	downloaded
Size (bytes):	37354
Entropy (8bit):	5.441030813994744
Encrypted:	false
SSDEEP:	768:G5p9WeNujJ4zgTyxOv5GAUdxc4vyqLgxwEWpA8pziQfsJeG:G5p9WeNul4zC5jMXyqpI
MD5:	4E8135D87E56EBF7D55500945D58C45A
SHA1:	C6EE3344D1A7D669E00E275878CDAD970DF4EB60
SHA-256:	18A0ED9CF15CB5AD3CB33184B71DA4589141D9361580881AB2A1A4C16390240D
SHA-512:	028F8F5639FE71221DC78B2D1D572D4D7A0E9C42A18FF3030034F903951D6098216F6B245FCE2D39B8FED2E5725D5FD8B1B75677579A2DF893043C9415984601
Malicious:	false
Reputation:	low
URL:	https://cdn.prod.website-files.com/668e5482841a316753518fba/js/webflow.4e8135d87.js
Preview:	./!. Webflow: Front-end site library. * @license MIT. * Inline scripts may access the api using an async handler:. * var Webflow = Webflow \|\| [];. * Webflow.push(readyFunction);. /..(()=>{var lt=(e,y)=>()=>(y\|\|e((y={exports:{}}).exports,y),y.exports);var Pt=lt(()=>{"use strict";window.tram=function(e){function y(t,n){var i=new J.Bare;return i.init(t,n)}function l(t){return t.replace(/[A-Z]/g,function(n){return"-"+n.toLowerCase()})}function T(t){var n=parseInt(t.slice(1),16),i=n>>16&255,r=n>>8&255,s=255&n;return[i,r,s]}function C(t,n,i){return"#"+(1<<24\|t<<16\|n<<8\|i).toString(16).slice(1)}function g(){}function L(t,n){B("Type warning: Expected: ["+t+"] Got: ["+typeof n+"] "+n)}function _(t,n,i){B("Units do not match ["+t+"]: "+n+", "+i)}function I(t,n,i){if(n!==void 0&&(i=n),t===void 0)return i;var r=i;return we.test(t)\|\|!Xt.test(t)?r=parseInt(t,10):Xt.test(t)&&(r=1e3parseFloat(t)),0>r&&(r=0),r===r?r:i}function B(t){et.debug&&window&&window.console.warn(t)}function U(t){for(var

Static File Info

⊘No static file info

Network Behavior

Download Network PCAP: filtered – full

Network Port Distribution

Total Packets: 390
• 443 (HTTPS)
• 80 (HTTP)
• 53 (DNS)

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Feb 22, 2025 01:48:51.981718063 CET	49675	443	192.168.2.4	173.222.162.32
Feb 22, 2025 01:49:01.590270996 CET	49675	443	192.168.2.4	173.222.162.32
Feb 22, 2025 01:49:04.740370035 CET	49738	443	192.168.2.4	142.250.185.228
Feb 22, 2025 01:49:04.740401983 CET	443	49738	142.250.185.228	192.168.2.4
Feb 22, 2025 01:49:04.740475893 CET	49738	443	192.168.2.4	142.250.185.228
Feb 22, 2025 01:49:04.740720034 CET	49738	443	192.168.2.4	142.250.185.228
Feb 22, 2025 01:49:04.740725994 CET	443	49738	142.250.185.228	192.168.2.4
Feb 22, 2025 01:49:05.392400026 CET	443	49738	142.250.185.228	192.168.2.4
Feb 22, 2025 01:49:05.392803907 CET	49738	443	192.168.2.4	142.250.185.228
Feb 22, 2025 01:49:05.392817020 CET	443	49738	142.250.185.228	192.168.2.4
Feb 22, 2025 01:49:05.394483089 CET	443	49738	142.250.185.228	192.168.2.4
Feb 22, 2025 01:49:05.394565105 CET	49738	443	192.168.2.4	142.250.185.228
Feb 22, 2025 01:49:05.395912886 CET	49738	443	192.168.2.4	142.250.185.228
Feb 22, 2025 01:49:05.395999908 CET	443	49738	142.250.185.228	192.168.2.4
Feb 22, 2025 01:49:05.449346066 CET	49738	443	192.168.2.4	142.250.185.228
Feb 22, 2025 01:49:05.449354887 CET	443	49738	142.250.185.228	192.168.2.4
Feb 22, 2025 01:49:05.496212959 CET	49738	443	192.168.2.4	142.250.185.228
Feb 22, 2025 01:49:06.264009953 CET	49741	443	192.168.2.4	104.18.36.248
Feb 22, 2025 01:49:06.264044046 CET	443	49741	104.18.36.248	192.168.2.4
Feb 22, 2025 01:49:06.264095068 CET	49741	443	192.168.2.4	104.18.36.248
Feb 22, 2025 01:49:06.264302969 CET	49741	443	192.168.2.4	104.18.36.248
Feb 22, 2025 01:49:06.264321089 CET	443	49741	104.18.36.248	192.168.2.4
Feb 22, 2025 01:49:06.734615088 CET	443	49741	104.18.36.248	192.168.2.4
Feb 22, 2025 01:49:06.734987020 CET	49741	443	192.168.2.4	104.18.36.248
Feb 22, 2025 01:49:06.735023022 CET	443	49741	104.18.36.248	192.168.2.4
Feb 22, 2025 01:49:06.735893011 CET	443	49741	104.18.36.248	192.168.2.4
Feb 22, 2025 01:49:06.735972881 CET	49741	443	192.168.2.4	104.18.36.248
Feb 22, 2025 01:49:06.740447998 CET	49741	443	192.168.2.4	104.18.36.248
Feb 22, 2025 01:49:06.740602970 CET	49741	443	192.168.2.4	104.18.36.248
Feb 22, 2025 01:49:06.740608931 CET	443	49741	104.18.36.248	192.168.2.4
Feb 22, 2025 01:49:06.740660906 CET	443	49741	104.18.36.248	192.168.2.4
Feb 22, 2025 01:49:06.795973063 CET	49741	443	192.168.2.4	104.18.36.248
Feb 22, 2025 01:49:06.796014071 CET	443	49741	104.18.36.248	192.168.2.4
Feb 22, 2025 01:49:06.841959000 CET	49741	443	192.168.2.4	104.18.36.248
Feb 22, 2025 01:49:06.900433064 CET	443	49741	104.18.36.248	192.168.2.4
Feb 22, 2025 01:49:06.900487900 CET	443	49741	104.18.36.248	192.168.2.4
Feb 22, 2025 01:49:06.900593042 CET	443	49741	104.18.36.248	192.168.2.4
Feb 22, 2025 01:49:06.900651932 CET	49741	443	192.168.2.4	104.18.36.248
Feb 22, 2025 01:49:06.901799917 CET	49741	443	192.168.2.4	104.18.36.248
Feb 22, 2025 01:49:06.901820898 CET	443	49741	104.18.36.248	192.168.2.4
Feb 22, 2025 01:49:06.984668970 CET	49742	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:06.984713078 CET	443	49742	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:06.984814882 CET	49742	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:06.984960079 CET	49743	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:06.985008955 CET	443	49743	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:06.985076904 CET	49743	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:06.985311985 CET	49743	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:06.985337973 CET	443	49743	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:06.985578060 CET	49742	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:06.985593081 CET	443	49742	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:06.986840010 CET	49744	443	192.168.2.4	18.244.20.221
Feb 22, 2025 01:49:06.986866951 CET	443	49744	18.244.20.221	192.168.2.4
Feb 22, 2025 01:49:06.986927986 CET	49744	443	192.168.2.4	18.244.20.221
Feb 22, 2025 01:49:06.987159967 CET	49744	443	192.168.2.4	18.244.20.221
Feb 22, 2025 01:49:06.987176895 CET	443	49744	18.244.20.221	192.168.2.4
Feb 22, 2025 01:49:07.446084976 CET	443	49743	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.446731091 CET	49743	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:07.446764946 CET	443	49743	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.447160959 CET	443	49742	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.447351933 CET	49742	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:07.447386026 CET	443	49742	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.447657108 CET	443	49743	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.447725058 CET	49743	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:07.448411942 CET	443	49742	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.448473930 CET	49742	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:07.449664116 CET	49743	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:07.449729919 CET	443	49743	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.451240063 CET	49742	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:07.451334000 CET	443	49742	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.451356888 CET	49743	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:07.451389074 CET	443	49743	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.451586008 CET	49742	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:07.451603889 CET	443	49742	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.498085022 CET	49743	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:07.498121023 CET	49742	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:07.574330091 CET	443	49742	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.574438095 CET	443	49742	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.574526072 CET	443	49742	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.574665070 CET	443	49742	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.574704885 CET	49742	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:07.574781895 CET	443	49742	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.574846983 CET	49742	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:07.574867010 CET	443	49742	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.574940920 CET	49742	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:07.574954987 CET	443	49742	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.575062990 CET	443	49742	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.575112104 CET	49742	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:07.575125933 CET	443	49742	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.575222015 CET	443	49742	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.575278997 CET	49742	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:07.575293064 CET	443	49742	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.579235077 CET	443	49742	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.579318047 CET	49742	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:07.579332113 CET	443	49742	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.603113890 CET	443	49743	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.603144884 CET	443	49743	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.603166103 CET	443	49743	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.603185892 CET	443	49743	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.603203058 CET	443	49743	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.603221893 CET	443	49743	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.603225946 CET	49743	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:07.603240967 CET	443	49743	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.603302002 CET	443	49743	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.603368998 CET	49743	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:07.603368998 CET	49743	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:07.603404045 CET	49743	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:07.603420019 CET	443	49743	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.603698015 CET	443	49743	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.603719950 CET	443	49743	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.603754997 CET	49743	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:07.603790998 CET	443	49743	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.603831053 CET	49743	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:07.608321905 CET	443	49743	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.623986959 CET	49742	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:07.654465914 CET	49743	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:07.660919905 CET	443	49742	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.660989046 CET	443	49742	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.661042929 CET	49742	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:07.661078930 CET	443	49742	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.661169052 CET	443	49742	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.661191940 CET	443	49742	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.661202908 CET	49742	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:07.661212921 CET	443	49742	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.661257029 CET	49742	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:07.661266088 CET	443	49742	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.662055016 CET	443	49742	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.662080050 CET	443	49742	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.662107944 CET	443	49742	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.662111044 CET	49742	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:07.662121058 CET	443	49742	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.662146091 CET	49742	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:07.662969112 CET	443	49742	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.662993908 CET	443	49742	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.663019896 CET	443	49742	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.663028002 CET	49742	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:07.663038015 CET	443	49742	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.663062096 CET	49742	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:07.663150072 CET	443	49742	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.663285017 CET	49742	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:07.663795948 CET	49742	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:07.663813114 CET	443	49742	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.676203012 CET	49745	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:07.676237106 CET	443	49745	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.676290989 CET	49745	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:07.676480055 CET	49745	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:07.676492929 CET	443	49745	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.689826012 CET	443	49743	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.690026045 CET	443	49743	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.690051079 CET	443	49743	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.690074921 CET	443	49743	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.690073967 CET	49743	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:07.690104008 CET	443	49743	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.690120935 CET	49743	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:07.690853119 CET	443	49743	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.690880060 CET	443	49743	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.690910101 CET	443	49743	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.690913916 CET	49743	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:07.690926075 CET	443	49743	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.690947056 CET	49743	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:07.691725969 CET	443	49743	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.691747904 CET	443	49743	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.691761971 CET	49743	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:07.691771030 CET	443	49743	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.691803932 CET	443	49743	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.691821098 CET	49743	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:07.691823959 CET	443	49743	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.691834927 CET	443	49743	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.691864014 CET	49743	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:07.692538977 CET	443	49743	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.692625999 CET	443	49743	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.692656040 CET	49743	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:07.692673922 CET	49743	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:07.692876101 CET	49743	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:07.692890882 CET	443	49743	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.703857899 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:07.703908920 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.703975916 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:07.704184055 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:07.704200029 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:07.713316917 CET	443	49744	18.244.20.221	192.168.2.4
Feb 22, 2025 01:49:07.713546038 CET	49744	443	192.168.2.4	18.244.20.221
Feb 22, 2025 01:49:07.713609934 CET	443	49744	18.244.20.221	192.168.2.4
Feb 22, 2025 01:49:07.715351105 CET	443	49744	18.244.20.221	192.168.2.4
Feb 22, 2025 01:49:07.715432882 CET	49744	443	192.168.2.4	18.244.20.221
Feb 22, 2025 01:49:07.716397047 CET	49744	443	192.168.2.4	18.244.20.221
Feb 22, 2025 01:49:07.716500998 CET	443	49744	18.244.20.221	192.168.2.4
Feb 22, 2025 01:49:07.716542959 CET	49744	443	192.168.2.4	18.244.20.221
Feb 22, 2025 01:49:07.763335943 CET	443	49744	18.244.20.221	192.168.2.4
Feb 22, 2025 01:49:07.764281988 CET	49744	443	192.168.2.4	18.244.20.221
Feb 22, 2025 01:49:07.764348030 CET	443	49744	18.244.20.221	192.168.2.4
Feb 22, 2025 01:49:07.810401917 CET	49744	443	192.168.2.4	18.244.20.221
Feb 22, 2025 01:49:07.983306885 CET	443	49744	18.244.20.221	192.168.2.4
Feb 22, 2025 01:49:07.983350992 CET	443	49744	18.244.20.221	192.168.2.4
Feb 22, 2025 01:49:07.983361006 CET	443	49744	18.244.20.221	192.168.2.4
Feb 22, 2025 01:49:07.983402014 CET	443	49744	18.244.20.221	192.168.2.4
Feb 22, 2025 01:49:07.983427048 CET	443	49744	18.244.20.221	192.168.2.4
Feb 22, 2025 01:49:07.983437061 CET	443	49744	18.244.20.221	192.168.2.4
Feb 22, 2025 01:49:07.983448029 CET	49744	443	192.168.2.4	18.244.20.221
Feb 22, 2025 01:49:07.983546019 CET	443	49744	18.244.20.221	192.168.2.4
Feb 22, 2025 01:49:07.983593941 CET	49744	443	192.168.2.4	18.244.20.221
Feb 22, 2025 01:49:07.983594894 CET	49744	443	192.168.2.4	18.244.20.221
Feb 22, 2025 01:49:07.983645916 CET	49744	443	192.168.2.4	18.244.20.221
Feb 22, 2025 01:49:08.063895941 CET	443	49744	18.244.20.221	192.168.2.4
Feb 22, 2025 01:49:08.063929081 CET	443	49744	18.244.20.221	192.168.2.4
Feb 22, 2025 01:49:08.064001083 CET	49744	443	192.168.2.4	18.244.20.221
Feb 22, 2025 01:49:08.064038038 CET	443	49744	18.244.20.221	192.168.2.4
Feb 22, 2025 01:49:08.064055920 CET	49744	443	192.168.2.4	18.244.20.221
Feb 22, 2025 01:49:08.066778898 CET	49744	443	192.168.2.4	18.244.20.221
Feb 22, 2025 01:49:08.070049047 CET	443	49744	18.244.20.221	192.168.2.4
Feb 22, 2025 01:49:08.070075035 CET	443	49744	18.244.20.221	192.168.2.4
Feb 22, 2025 01:49:08.070147991 CET	49744	443	192.168.2.4	18.244.20.221
Feb 22, 2025 01:49:08.070157051 CET	443	49744	18.244.20.221	192.168.2.4
Feb 22, 2025 01:49:08.070169926 CET	49744	443	192.168.2.4	18.244.20.221
Feb 22, 2025 01:49:08.070194006 CET	49744	443	192.168.2.4	18.244.20.221
Feb 22, 2025 01:49:08.149688959 CET	443	49744	18.244.20.221	192.168.2.4
Feb 22, 2025 01:49:08.149717093 CET	443	49744	18.244.20.221	192.168.2.4
Feb 22, 2025 01:49:08.149817944 CET	49744	443	192.168.2.4	18.244.20.221
Feb 22, 2025 01:49:08.149833918 CET	443	49744	18.244.20.221	192.168.2.4
Feb 22, 2025 01:49:08.150424004 CET	443	49745	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.150486946 CET	49744	443	192.168.2.4	18.244.20.221
Feb 22, 2025 01:49:08.151261091 CET	443	49744	18.244.20.221	192.168.2.4
Feb 22, 2025 01:49:08.151283026 CET	443	49744	18.244.20.221	192.168.2.4
Feb 22, 2025 01:49:08.151330948 CET	49744	443	192.168.2.4	18.244.20.221
Feb 22, 2025 01:49:08.151340008 CET	443	49744	18.244.20.221	192.168.2.4
Feb 22, 2025 01:49:08.151361942 CET	49744	443	192.168.2.4	18.244.20.221
Feb 22, 2025 01:49:08.151410103 CET	443	49744	18.244.20.221	192.168.2.4
Feb 22, 2025 01:49:08.151470900 CET	49744	443	192.168.2.4	18.244.20.221
Feb 22, 2025 01:49:08.151479006 CET	443	49744	18.244.20.221	192.168.2.4
Feb 22, 2025 01:49:08.151499987 CET	443	49744	18.244.20.221	192.168.2.4
Feb 22, 2025 01:49:08.151541948 CET	49744	443	192.168.2.4	18.244.20.221
Feb 22, 2025 01:49:08.177052975 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.198810101 CET	49744	443	192.168.2.4	18.244.20.221
Feb 22, 2025 01:49:08.199173927 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.199203014 CET	49745	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.199208021 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.199512005 CET	49745	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.199523926 CET	443	49745	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.199600935 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.203284979 CET	443	49745	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.203368902 CET	49745	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.208348989 CET	49745	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.208556890 CET	443	49745	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.208945036 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.209058046 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.209857941 CET	49745	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.209871054 CET	443	49745	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.210000038 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.250809908 CET	49744	443	192.168.2.4	18.244.20.221
Feb 22, 2025 01:49:08.250843048 CET	443	49744	18.244.20.221	192.168.2.4
Feb 22, 2025 01:49:08.251347065 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.254089117 CET	49745	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.270849943 CET	49747	443	192.168.2.4	18.244.20.109
Feb 22, 2025 01:49:08.270904064 CET	443	49747	18.244.20.109	192.168.2.4
Feb 22, 2025 01:49:08.270968914 CET	49747	443	192.168.2.4	18.244.20.109
Feb 22, 2025 01:49:08.271368027 CET	49747	443	192.168.2.4	18.244.20.109
Feb 22, 2025 01:49:08.271384954 CET	443	49747	18.244.20.109	192.168.2.4
Feb 22, 2025 01:49:08.293741941 CET	49748	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.293787003 CET	443	49748	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.293848991 CET	49748	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.294099092 CET	49748	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.294115067 CET	443	49748	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.322304010 CET	443	49745	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.322448969 CET	443	49745	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.322539091 CET	443	49745	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.322628975 CET	443	49745	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.322628021 CET	49745	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.322659969 CET	443	49745	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.322731018 CET	49745	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.322833061 CET	443	49745	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.322889090 CET	49745	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.322911024 CET	443	49745	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.323013067 CET	443	49745	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.323071957 CET	49745	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.323081970 CET	443	49745	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.323168039 CET	443	49745	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.323218107 CET	49745	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.323229074 CET	443	49745	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.327284098 CET	443	49745	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.327343941 CET	49745	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.327352047 CET	443	49745	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.346868992 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.346923113 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.346946955 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.346976995 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.346990108 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.347018957 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.347065926 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.347103119 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.347127914 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.347141027 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.347191095 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.347228050 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.347274065 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.347286940 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.347341061 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.347943068 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.351809025 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.354296923 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.354310989 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.367007017 CET	49745	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.401709080 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.409194946 CET	443	49745	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.409389973 CET	443	49745	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.409482956 CET	443	49745	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.409550905 CET	49745	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.409575939 CET	443	49745	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.409620047 CET	49745	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.409626961 CET	443	49745	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.409807920 CET	443	49745	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.409857988 CET	49745	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.409866095 CET	443	49745	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.409960985 CET	443	49745	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.410044909 CET	443	49745	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.410059929 CET	49745	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.410069942 CET	443	49745	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.410278082 CET	49745	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.410286903 CET	443	49745	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.410574913 CET	443	49745	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.410639048 CET	49745	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.410645962 CET	443	49745	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.410731077 CET	443	49745	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.410780907 CET	49745	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.410789013 CET	443	49745	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.411078930 CET	443	49745	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.411145926 CET	49745	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.412090063 CET	49745	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.412106991 CET	443	49745	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.437381983 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.437484026 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.437556028 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.437588930 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.437773943 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.437810898 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.437818050 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.437828064 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.437879086 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.438227892 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.438302994 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.438342094 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.438349009 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.438400030 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.438499928 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.438507080 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.439291954 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.439346075 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.439347982 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.439362049 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.439407110 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.439414978 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.439924002 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.439965010 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.439980030 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.439989090 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.440056086 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.440059900 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.440068960 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.440129995 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.440134048 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.440857887 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.440922976 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.440928936 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.482014894 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.510788918 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.559448957 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.559467077 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.602911949 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.602961063 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.603002071 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.603053093 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.603063107 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.603135109 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.603171110 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.603179932 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.603255987 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.603672981 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.603681087 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.603787899 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.603796005 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.603840113 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.604139090 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.604146004 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.604216099 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.604465008 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.604473114 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.604540110 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.604548931 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.604557037 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.604602098 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.605083942 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.605142117 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.605186939 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.605245113 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.606184006 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.606239080 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.606246948 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.606252909 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.606282949 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.606312037 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.606319904 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.606338024 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.606410980 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.606983900 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.607038975 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.607048988 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.607055902 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.607112885 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.685355902 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.685439110 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.735244036 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.735352993 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.823276043 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.823332071 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.823379040 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.823434114 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.823435068 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.823448896 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.823458910 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.823479891 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.823548079 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.823597908 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.823641062 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.823668003 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.823678017 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.823699951 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.824263096 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.824320078 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.824327946 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.824374914 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.824639082 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.824673891 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.824693918 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.824702024 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.824752092 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.824791908 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.824825048 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.824846029 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.824851036 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.824860096 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.824873924 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.824918032 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.824922085 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.825601101 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.825630903 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.825659037 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.825664997 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.825721979 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.825778008 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.825809956 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.825829983 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.825834990 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.825859070 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.849273920 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.849356890 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.849376917 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.849436045 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.854753971 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.854849100 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.914601088 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.914650917 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.914688110 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.914714098 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.914727926 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.914738894 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.914757013 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.914788008 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.914896965 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.914952040 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.914993048 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.915046930 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.915355921 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.915405989 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.915424109 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.915435076 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.915466070 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.915844917 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.915859938 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.915919065 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.915925980 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.920598030 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.920614958 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.920682907 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.920700073 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.921516895 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.921530008 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.921612978 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.921626091 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.921646118 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.921709061 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.922102928 CET	49746	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.922132969 CET	443	49746	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.969758034 CET	443	49748	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.997648001 CET	49748	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:08.997687101 CET	443	49748	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:08.998353958 CET	443	49748	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.000195980 CET	49748	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.000291109 CET	443	49748	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.000396967 CET	49748	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.003379107 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.003467083 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.003822088 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.003998995 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.004019022 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.047338009 CET	443	49748	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.122809887 CET	443	49748	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.122848988 CET	443	49748	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.122873068 CET	443	49748	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.122894049 CET	443	49748	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.122956991 CET	49748	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.122961044 CET	443	49748	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.122992039 CET	443	49748	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.123020887 CET	49748	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.123030901 CET	443	49748	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.123053074 CET	443	49748	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.123073101 CET	49748	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.123078108 CET	443	49748	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.123096943 CET	49748	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.123131037 CET	443	49748	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.123764992 CET	49748	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.123773098 CET	443	49748	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.128070116 CET	443	49748	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.128133059 CET	443	49748	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.128144026 CET	49748	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.128197908 CET	49748	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.128508091 CET	49748	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.128528118 CET	443	49748	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.133032084 CET	49750	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.133066893 CET	443	49750	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.133146048 CET	49750	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.133336067 CET	49750	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.133352995 CET	443	49750	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.193304062 CET	443	49747	18.244.20.109	192.168.2.4
Feb 22, 2025 01:49:09.193627119 CET	49747	443	192.168.2.4	18.244.20.109
Feb 22, 2025 01:49:09.193667889 CET	443	49747	18.244.20.109	192.168.2.4
Feb 22, 2025 01:49:09.195173025 CET	443	49747	18.244.20.109	192.168.2.4
Feb 22, 2025 01:49:09.195255041 CET	49747	443	192.168.2.4	18.244.20.109
Feb 22, 2025 01:49:09.195553064 CET	49747	443	192.168.2.4	18.244.20.109
Feb 22, 2025 01:49:09.195630074 CET	443	49747	18.244.20.109	192.168.2.4
Feb 22, 2025 01:49:09.195672035 CET	49747	443	192.168.2.4	18.244.20.109
Feb 22, 2025 01:49:09.243345022 CET	443	49747	18.244.20.109	192.168.2.4
Feb 22, 2025 01:49:09.246263027 CET	49747	443	192.168.2.4	18.244.20.109
Feb 22, 2025 01:49:09.246284008 CET	443	49747	18.244.20.109	192.168.2.4
Feb 22, 2025 01:49:09.293153048 CET	49747	443	192.168.2.4	18.244.20.109
Feb 22, 2025 01:49:09.476663113 CET	443	49747	18.244.20.109	192.168.2.4
Feb 22, 2025 01:49:09.476692915 CET	443	49747	18.244.20.109	192.168.2.4
Feb 22, 2025 01:49:09.476707935 CET	443	49747	18.244.20.109	192.168.2.4
Feb 22, 2025 01:49:09.476743937 CET	443	49747	18.244.20.109	192.168.2.4
Feb 22, 2025 01:49:09.476763010 CET	49747	443	192.168.2.4	18.244.20.109
Feb 22, 2025 01:49:09.476764917 CET	443	49747	18.244.20.109	192.168.2.4
Feb 22, 2025 01:49:09.476778030 CET	443	49747	18.244.20.109	192.168.2.4
Feb 22, 2025 01:49:09.476803064 CET	443	49747	18.244.20.109	192.168.2.4
Feb 22, 2025 01:49:09.476809978 CET	49747	443	192.168.2.4	18.244.20.109
Feb 22, 2025 01:49:09.476839066 CET	49747	443	192.168.2.4	18.244.20.109
Feb 22, 2025 01:49:09.476869106 CET	49747	443	192.168.2.4	18.244.20.109
Feb 22, 2025 01:49:09.493303061 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.493657112 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.493720055 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.494971991 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.495332956 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.495449066 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.495524883 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.542943954 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.555989027 CET	443	49747	18.244.20.109	192.168.2.4
Feb 22, 2025 01:49:09.556014061 CET	443	49747	18.244.20.109	192.168.2.4
Feb 22, 2025 01:49:09.556061983 CET	49747	443	192.168.2.4	18.244.20.109
Feb 22, 2025 01:49:09.556078911 CET	443	49747	18.244.20.109	192.168.2.4
Feb 22, 2025 01:49:09.556104898 CET	49747	443	192.168.2.4	18.244.20.109
Feb 22, 2025 01:49:09.556133986 CET	49747	443	192.168.2.4	18.244.20.109
Feb 22, 2025 01:49:09.584947109 CET	443	49747	18.244.20.109	192.168.2.4
Feb 22, 2025 01:49:09.584963083 CET	443	49747	18.244.20.109	192.168.2.4
Feb 22, 2025 01:49:09.585069895 CET	49747	443	192.168.2.4	18.244.20.109
Feb 22, 2025 01:49:09.585077047 CET	443	49747	18.244.20.109	192.168.2.4
Feb 22, 2025 01:49:09.585232019 CET	49747	443	192.168.2.4	18.244.20.109
Feb 22, 2025 01:49:09.599862099 CET	443	49750	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.600090027 CET	49750	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.600120068 CET	443	49750	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.600553036 CET	443	49750	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.600860119 CET	49750	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.600934029 CET	443	49750	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.600970030 CET	49750	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.634421110 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.634597063 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.634660006 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.634694099 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.634773970 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.634823084 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.634830952 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.634911060 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.634957075 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.634963989 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.635170937 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.635217905 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.635224104 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.639249086 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.639307022 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.639322042 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.639399052 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.639441967 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.639448881 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.642020941 CET	443	49747	18.244.20.109	192.168.2.4
Feb 22, 2025 01:49:09.642039061 CET	443	49747	18.244.20.109	192.168.2.4
Feb 22, 2025 01:49:09.642139912 CET	49747	443	192.168.2.4	18.244.20.109
Feb 22, 2025 01:49:09.642147064 CET	443	49747	18.244.20.109	192.168.2.4
Feb 22, 2025 01:49:09.642189026 CET	49747	443	192.168.2.4	18.244.20.109
Feb 22, 2025 01:49:09.643202066 CET	443	49747	18.244.20.109	192.168.2.4
Feb 22, 2025 01:49:09.643215895 CET	443	49747	18.244.20.109	192.168.2.4
Feb 22, 2025 01:49:09.643279076 CET	49747	443	192.168.2.4	18.244.20.109
Feb 22, 2025 01:49:09.643285036 CET	443	49747	18.244.20.109	192.168.2.4
Feb 22, 2025 01:49:09.643323898 CET	443	49750	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.643325090 CET	49747	443	192.168.2.4	18.244.20.109
Feb 22, 2025 01:49:09.643368006 CET	49750	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.644660950 CET	443	49747	18.244.20.109	192.168.2.4
Feb 22, 2025 01:49:09.644725084 CET	49747	443	192.168.2.4	18.244.20.109
Feb 22, 2025 01:49:09.644726992 CET	443	49747	18.244.20.109	192.168.2.4
Feb 22, 2025 01:49:09.644772053 CET	49747	443	192.168.2.4	18.244.20.109
Feb 22, 2025 01:49:09.645114899 CET	49747	443	192.168.2.4	18.244.20.109
Feb 22, 2025 01:49:09.645129919 CET	443	49747	18.244.20.109	192.168.2.4
Feb 22, 2025 01:49:09.683506012 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.726887941 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.727056026 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.727112055 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.727123022 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.727190018 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.727235079 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.727241039 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.727551937 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.727602959 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.727608919 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.727982044 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.728037119 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.728043079 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.728111029 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.728156090 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.728162050 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.728518009 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.728559971 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.728565931 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.728677988 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.728722095 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.728727102 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.728809118 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.728852034 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.728857994 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.729618073 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.729670048 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.729676008 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.729746103 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.729794025 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.729799032 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.753685951 CET	443	49750	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.753741026 CET	443	49750	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.753781080 CET	443	49750	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.753792048 CET	49750	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.753822088 CET	443	49750	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.753860950 CET	443	49750	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.753865957 CET	49750	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.753875017 CET	443	49750	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.753921986 CET	443	49750	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.753928900 CET	49750	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.753936052 CET	443	49750	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.753985882 CET	49750	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.754517078 CET	443	49750	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.754579067 CET	443	49750	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.754610062 CET	443	49750	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.754616022 CET	49750	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.754623890 CET	443	49750	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.754663944 CET	49750	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.755283117 CET	443	49750	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.755354881 CET	443	49750	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.755399942 CET	49750	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.755408049 CET	443	49750	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.755423069 CET	49750	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.755423069 CET	49750	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.755441904 CET	49750	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.769063950 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.769143105 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.769162893 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.769190073 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.769239902 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.819510937 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.819716930 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.819802046 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.819861889 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.819880009 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.819920063 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.819927931 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.819964886 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.820015907 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.820023060 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.820056915 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.820065022 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.820081949 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.820105076 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.820688009 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.820748091 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.820754051 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.821082115 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.821134090 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.821140051 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.821160078 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.821185112 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.821191072 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.821216106 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.821260929 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.821314096 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.821320057 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.821361065 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.822128057 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.822187901 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.822211027 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.822266102 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.822932005 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.822993040 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.823012114 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.823064089 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.823111057 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.823162079 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.823883057 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.823950052 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.861663103 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.861723900 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.912230968 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.912285089 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.912424088 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.912424088 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.912461996 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.912509918 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.912687063 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.912719965 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.912725925 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.912734032 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.912750006 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.912754059 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.912764072 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.912770987 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.912786007 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.913610935 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.913654089 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.913661957 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.913703918 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.914144039 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.914174080 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.914186954 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.914194107 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.914210081 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.914230108 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.914675951 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.914716005 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.914750099 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.914793015 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.915683985 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.915729046 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.915771961 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.915802002 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.915807009 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.915812969 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.915836096 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.916651011 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.916681051 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.916691065 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.916697979 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.916716099 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.916722059 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.916754007 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.916762114 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.916800022 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.917521954 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.917563915 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.917588949 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.917613029 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.917628050 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.917634964 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.917649031 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.918478012 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.918504953 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.918519020 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.918526888 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.918544054 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.919359922 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.919399023 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.919405937 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.919424057 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.919444084 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.919450998 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.919464111 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.953329086 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.953380108 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.953392029 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.953583956 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.954320908 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.954359055 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.954376936 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.954385042 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:09.954402924 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:09.954422951 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:10.005448103 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:10.005481958 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:10.005636930 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:10.005671024 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:10.005691051 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:10.005708933 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:10.005752087 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:10.005760908 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:10.006040096 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:10.006058931 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:10.006093979 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:10.006103992 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:10.006127119 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:10.006158113 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:10.006180048 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:10.006198883 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:10.006206036 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:10.006227970 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:10.006254911 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:10.006289005 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:10.006335974 CET	49749	443	192.168.2.4	104.18.160.117
Feb 22, 2025 01:49:10.006351948 CET	443	49749	104.18.160.117	192.168.2.4
Feb 22, 2025 01:49:15.340496063 CET	443	49738	142.250.185.228	192.168.2.4
Feb 22, 2025 01:49:15.340586901 CET	443	49738	142.250.185.228	192.168.2.4
Feb 22, 2025 01:49:15.341476917 CET	49738	443	192.168.2.4	142.250.185.228
Feb 22, 2025 01:49:16.607611895 CET	49738	443	192.168.2.4	142.250.185.228
Feb 22, 2025 01:49:16.607634068 CET	443	49738	142.250.185.228	192.168.2.4
Feb 22, 2025 01:50:04.794555902 CET	49814	443	192.168.2.4	142.250.185.228
Feb 22, 2025 01:50:04.794640064 CET	443	49814	142.250.185.228	192.168.2.4
Feb 22, 2025 01:50:04.794739008 CET	49814	443	192.168.2.4	142.250.185.228
Feb 22, 2025 01:50:04.794996977 CET	49814	443	192.168.2.4	142.250.185.228
Feb 22, 2025 01:50:04.795034885 CET	443	49814	142.250.185.228	192.168.2.4
Feb 22, 2025 01:50:05.462088108 CET	443	49814	142.250.185.228	192.168.2.4
Feb 22, 2025 01:50:05.462536097 CET	49814	443	192.168.2.4	142.250.185.228
Feb 22, 2025 01:50:05.462563992 CET	443	49814	142.250.185.228	192.168.2.4
Feb 22, 2025 01:50:05.463824987 CET	443	49814	142.250.185.228	192.168.2.4
Feb 22, 2025 01:50:05.464298010 CET	49814	443	192.168.2.4	142.250.185.228
Feb 22, 2025 01:50:05.464580059 CET	443	49814	142.250.185.228	192.168.2.4
Feb 22, 2025 01:50:05.513154984 CET	49814	443	192.168.2.4	142.250.185.228
Feb 22, 2025 01:50:07.012506008 CET	49723	80	192.168.2.4	199.232.210.172
Feb 22, 2025 01:50:07.012584925 CET	49724	80	192.168.2.4	199.232.210.172
Feb 22, 2025 01:50:07.272573948 CET	80	49723	199.232.210.172	192.168.2.4
Feb 22, 2025 01:50:07.272587061 CET	80	49724	199.232.210.172	192.168.2.4
Feb 22, 2025 01:50:07.272636890 CET	49723	80	192.168.2.4	199.232.210.172
Feb 22, 2025 01:50:07.272670984 CET	49724	80	192.168.2.4	199.232.210.172
Feb 22, 2025 01:50:15.382071972 CET	443	49814	142.250.185.228	192.168.2.4
Feb 22, 2025 01:50:15.382214069 CET	443	49814	142.250.185.228	192.168.2.4
Feb 22, 2025 01:50:15.382287979 CET	49814	443	192.168.2.4	142.250.185.228
Feb 22, 2025 01:50:16.607049942 CET	49814	443	192.168.2.4	142.250.185.228
Feb 22, 2025 01:50:16.607096910 CET	443	49814	142.250.185.228	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Feb 22, 2025 01:49:00.248735905 CET	53	56369	1.1.1.1	192.168.2.4
Feb 22, 2025 01:49:00.249841928 CET	53	52039	1.1.1.1	192.168.2.4
Feb 22, 2025 01:49:01.329993963 CET	53	52407	1.1.1.1	192.168.2.4
Feb 22, 2025 01:49:04.731714964 CET	63153	53	192.168.2.4	1.1.1.1
Feb 22, 2025 01:49:04.731782913 CET	63201	53	192.168.2.4	1.1.1.1
Feb 22, 2025 01:49:04.739218950 CET	53	63201	1.1.1.1	192.168.2.4
Feb 22, 2025 01:49:04.739259958 CET	53	63153	1.1.1.1	192.168.2.4
Feb 22, 2025 01:49:06.233532906 CET	53638	53	192.168.2.4	1.1.1.1
Feb 22, 2025 01:49:06.234102964 CET	55695	53	192.168.2.4	1.1.1.1
Feb 22, 2025 01:49:06.243549109 CET	53	53638	1.1.1.1	192.168.2.4
Feb 22, 2025 01:49:06.245791912 CET	53	55695	1.1.1.1	192.168.2.4
Feb 22, 2025 01:49:06.253242970 CET	55486	53	192.168.2.4	1.1.1.1
Feb 22, 2025 01:49:06.253443956 CET	51097	53	192.168.2.4	1.1.1.1
Feb 22, 2025 01:49:06.263271093 CET	53	55486	1.1.1.1	192.168.2.4
Feb 22, 2025 01:49:06.263622999 CET	53	51097	1.1.1.1	192.168.2.4
Feb 22, 2025 01:49:06.974788904 CET	51239	53	192.168.2.4	1.1.1.1
Feb 22, 2025 01:49:06.975131035 CET	54726	53	192.168.2.4	1.1.1.1
Feb 22, 2025 01:49:06.975629091 CET	56416	53	192.168.2.4	1.1.1.1
Feb 22, 2025 01:49:06.975936890 CET	56754	53	192.168.2.4	1.1.1.1
Feb 22, 2025 01:49:06.982881069 CET	53	51239	1.1.1.1	192.168.2.4
Feb 22, 2025 01:49:06.982960939 CET	53	54726	1.1.1.1	192.168.2.4
Feb 22, 2025 01:49:06.982974052 CET	53	56416	1.1.1.1	192.168.2.4
Feb 22, 2025 01:49:06.986058950 CET	53	56754	1.1.1.1	192.168.2.4
Feb 22, 2025 01:49:07.668102026 CET	50699	53	192.168.2.4	1.1.1.1
Feb 22, 2025 01:49:07.668237925 CET	58879	53	192.168.2.4	1.1.1.1
Feb 22, 2025 01:49:07.675499916 CET	53	58879	1.1.1.1	192.168.2.4
Feb 22, 2025 01:49:07.675765038 CET	53	50699	1.1.1.1	192.168.2.4
Feb 22, 2025 01:49:08.261940002 CET	60427	53	192.168.2.4	1.1.1.1
Feb 22, 2025 01:49:08.262201071 CET	53622	53	192.168.2.4	1.1.1.1
Feb 22, 2025 01:49:08.270067930 CET	53	53622	1.1.1.1	192.168.2.4
Feb 22, 2025 01:49:08.270109892 CET	53	60427	1.1.1.1	192.168.2.4
Feb 22, 2025 01:49:18.271725893 CET	53	55652	1.1.1.1	192.168.2.4
Feb 22, 2025 01:49:18.598105907 CET	138	138	192.168.2.4	192.168.2.255
Feb 22, 2025 01:49:20.999531031 CET	56075	53	192.168.2.4	1.1.1.1
Feb 22, 2025 01:49:20.999594927 CET	50566	53	192.168.2.4	1.1.1.1
Feb 22, 2025 01:49:21.028693914 CET	53	50566	1.1.1.1	192.168.2.4
Feb 22, 2025 01:49:21.031995058 CET	53	56075	1.1.1.1	192.168.2.4
Feb 22, 2025 01:49:21.032877922 CET	57826	53	192.168.2.4	1.1.1.1
Feb 22, 2025 01:49:21.070570946 CET	53	57826	1.1.1.1	192.168.2.4
Feb 22, 2025 01:49:21.115534067 CET	57361	53	192.168.2.4	8.8.8.8
Feb 22, 2025 01:49:21.115967989 CET	55770	53	192.168.2.4	1.1.1.1
Feb 22, 2025 01:49:21.128914118 CET	53	55770	1.1.1.1	192.168.2.4
Feb 22, 2025 01:49:21.136871099 CET	53	57361	8.8.8.8	192.168.2.4
Feb 22, 2025 01:49:22.135700941 CET	56918	53	192.168.2.4	1.1.1.1
Feb 22, 2025 01:49:22.135813951 CET	53710	53	192.168.2.4	1.1.1.1
Feb 22, 2025 01:49:22.169538975 CET	53	53710	1.1.1.1	192.168.2.4
Feb 22, 2025 01:49:22.177558899 CET	53	56918	1.1.1.1	192.168.2.4
Feb 22, 2025 01:49:27.194432974 CET	49483	53	192.168.2.4	1.1.1.1
Feb 22, 2025 01:49:27.194977999 CET	61481	53	192.168.2.4	1.1.1.1
Feb 22, 2025 01:49:27.216975927 CET	53	49483	1.1.1.1	192.168.2.4
Feb 22, 2025 01:49:27.222857952 CET	53	61481	1.1.1.1	192.168.2.4
Feb 22, 2025 01:49:27.223464966 CET	57369	53	192.168.2.4	1.1.1.1
Feb 22, 2025 01:49:27.255747080 CET	53	57369	1.1.1.1	192.168.2.4
Feb 22, 2025 01:49:32.926307917 CET	58883	53	192.168.2.4	1.1.1.1
Feb 22, 2025 01:49:32.926646948 CET	51552	53	192.168.2.4	1.1.1.1
Feb 22, 2025 01:49:32.934310913 CET	53	58883	1.1.1.1	192.168.2.4
Feb 22, 2025 01:49:32.951929092 CET	53	51552	1.1.1.1	192.168.2.4
Feb 22, 2025 01:49:32.952830076 CET	51449	53	192.168.2.4	1.1.1.1
Feb 22, 2025 01:49:32.996401072 CET	53	51449	1.1.1.1	192.168.2.4
Feb 22, 2025 01:49:33.008426905 CET	60429	53	192.168.2.4	1.1.1.1
Feb 22, 2025 01:49:33.008908987 CET	51022	53	192.168.2.4	8.8.8.8
Feb 22, 2025 01:49:33.015310049 CET	53	60429	1.1.1.1	192.168.2.4
Feb 22, 2025 01:49:33.017771959 CET	53	51022	8.8.8.8	192.168.2.4
Feb 22, 2025 01:49:37.286829948 CET	53	64396	1.1.1.1	192.168.2.4
Feb 22, 2025 01:49:59.958200932 CET	53	59830	1.1.1.1	192.168.2.4
Feb 22, 2025 01:50:00.115413904 CET	53	53323	1.1.1.1	192.168.2.4
Feb 22, 2025 01:50:03.016382933 CET	52775	53	192.168.2.4	1.1.1.1
Feb 22, 2025 01:50:03.016581059 CET	54863	53	192.168.2.4	1.1.1.1
Feb 22, 2025 01:50:03.042109966 CET	53	54863	1.1.1.1	192.168.2.4
Feb 22, 2025 01:50:03.049313068 CET	53	52775	1.1.1.1	192.168.2.4
Feb 22, 2025 01:50:03.050012112 CET	50823	53	192.168.2.4	1.1.1.1
Feb 22, 2025 01:50:03.092669010 CET	53	50823	1.1.1.1	192.168.2.4
Feb 22, 2025 01:50:06.658139944 CET	60595	53	192.168.2.4	1.1.1.1
Feb 22, 2025 01:50:06.658276081 CET	59119	53	192.168.2.4	1.1.1.1
Feb 22, 2025 01:50:07.289959908 CET	53	60595	1.1.1.1	192.168.2.4
Feb 22, 2025 01:50:07.293711901 CET	53	59119	1.1.1.1	192.168.2.4
Feb 22, 2025 01:50:07.294368029 CET	49270	53	192.168.2.4	1.1.1.1
Feb 22, 2025 01:50:07.334831953 CET	53	49270	1.1.1.1	192.168.2.4
Feb 22, 2025 01:50:07.345565081 CET	58112	53	192.168.2.4	1.1.1.1
Feb 22, 2025 01:50:07.345911980 CET	60833	53	192.168.2.4	8.8.8.8
Feb 22, 2025 01:50:07.352788925 CET	53	58112	1.1.1.1	192.168.2.4
Feb 22, 2025 01:50:07.360846996 CET	53	60833	8.8.8.8	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Feb 22, 2025 01:49:04.731714964 CET	192.168.2.4	1.1.1.1	0x586b	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Feb 22, 2025 01:49:04.731782913 CET	192.168.2.4	1.1.1.1	0x8f61	Standard query (0)	www.google.com	65	IN (0x0001)	false
Feb 22, 2025 01:49:06.233532906 CET	192.168.2.4	1.1.1.1	0xa801	Standard query (0)	hub-ledge-live-wallet.webflow.io	A (IP address)	IN (0x0001)	false
Feb 22, 2025 01:49:06.234102964 CET	192.168.2.4	1.1.1.1	0x4084	Standard query (0)	hub-ledge-live-wallet.webflow.io	65	IN (0x0001)	false
Feb 22, 2025 01:49:06.253242970 CET	192.168.2.4	1.1.1.1	0xbbb2	Standard query (0)	hub-ledge-live-wallet.webflow.io	A (IP address)	IN (0x0001)	false
Feb 22, 2025 01:49:06.253443956 CET	192.168.2.4	1.1.1.1	0x2870	Standard query (0)	hub-ledge-live-wallet.webflow.io	65	IN (0x0001)	false
Feb 22, 2025 01:49:06.974788904 CET	192.168.2.4	1.1.1.1	0x141	Standard query (0)	cdn.prod.website-files.com	A (IP address)	IN (0x0001)	false
Feb 22, 2025 01:49:06.975131035 CET	192.168.2.4	1.1.1.1	0x3600	Standard query (0)	cdn.prod.website-files.com	65	IN (0x0001)	false
Feb 22, 2025 01:49:06.975629091 CET	192.168.2.4	1.1.1.1	0x50d5	Standard query (0)	d3e54v103j8qbb.cloudfront.net	A (IP address)	IN (0x0001)	false
Feb 22, 2025 01:49:06.975936890 CET	192.168.2.4	1.1.1.1	0xf49e	Standard query (0)	d3e54v103j8qbb.cloudfront.net	65	IN (0x0001)	false
Feb 22, 2025 01:49:07.668102026 CET	192.168.2.4	1.1.1.1	0x73df	Standard query (0)	cdn.prod.website-files.com	A (IP address)	IN (0x0001)	false
Feb 22, 2025 01:49:07.668237925 CET	192.168.2.4	1.1.1.1	0x60b7	Standard query (0)	cdn.prod.website-files.com	65	IN (0x0001)	false
Feb 22, 2025 01:49:08.261940002 CET	192.168.2.4	1.1.1.1	0xd5f1	Standard query (0)	d3e54v103j8qbb.cloudfront.net	A (IP address)	IN (0x0001)	false
Feb 22, 2025 01:49:08.262201071 CET	192.168.2.4	1.1.1.1	0x3e33	Standard query (0)	d3e54v103j8qbb.cloudfront.net	65	IN (0x0001)	false
Feb 22, 2025 01:49:20.999531031 CET	192.168.2.4	1.1.1.1	0xf77f	Standard query (0)	shotheatsgnovel.com	A (IP address)	IN (0x0001)	false
Feb 22, 2025 01:49:20.999594927 CET	192.168.2.4	1.1.1.1	0x39c4	Standard query (0)	shotheatsgnovel.com	65	IN (0x0001)	false
Feb 22, 2025 01:49:21.032877922 CET	192.168.2.4	1.1.1.1	0x91a0	Standard query (0)	shotheatsgnovel.com	A (IP address)	IN (0x0001)	false
Feb 22, 2025 01:49:21.115534067 CET	192.168.2.4	8.8.8.8	0xff8f	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Feb 22, 2025 01:49:21.115967989 CET	192.168.2.4	1.1.1.1	0x9345	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Feb 22, 2025 01:49:22.135700941 CET	192.168.2.4	1.1.1.1	0xb3ba	Standard query (0)	shotheatsgnovel.com	A (IP address)	IN (0x0001)	false
Feb 22, 2025 01:49:22.135813951 CET	192.168.2.4	1.1.1.1	0x5367	Standard query (0)	shotheatsgnovel.com	65	IN (0x0001)	false
Feb 22, 2025 01:49:27.194432974 CET	192.168.2.4	1.1.1.1	0x98fa	Standard query (0)	shotheatsgnovel.com	A (IP address)	IN (0x0001)	false
Feb 22, 2025 01:49:27.194977999 CET	192.168.2.4	1.1.1.1	0xa600	Standard query (0)	shotheatsgnovel.com	65	IN (0x0001)	false
Feb 22, 2025 01:49:27.223464966 CET	192.168.2.4	1.1.1.1	0x8336	Standard query (0)	shotheatsgnovel.com	A (IP address)	IN (0x0001)	false
Feb 22, 2025 01:49:32.926307917 CET	192.168.2.4	1.1.1.1	0x8ab0	Standard query (0)	shotheatsgnovel.com	A (IP address)	IN (0x0001)	false
Feb 22, 2025 01:49:32.926646948 CET	192.168.2.4	1.1.1.1	0x692d	Standard query (0)	shotheatsgnovel.com	65	IN (0x0001)	false
Feb 22, 2025 01:49:32.952830076 CET	192.168.2.4	1.1.1.1	0x4e7b	Standard query (0)	shotheatsgnovel.com	A (IP address)	IN (0x0001)	false
Feb 22, 2025 01:49:33.008426905 CET	192.168.2.4	1.1.1.1	0x7d3f	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Feb 22, 2025 01:49:33.008908987 CET	192.168.2.4	8.8.8.8	0x4d7	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Feb 22, 2025 01:50:03.016382933 CET	192.168.2.4	1.1.1.1	0xebda	Standard query (0)	shotheatsgnovel.com	A (IP address)	IN (0x0001)	false
Feb 22, 2025 01:50:03.016581059 CET	192.168.2.4	1.1.1.1	0x7a61	Standard query (0)	shotheatsgnovel.com	65	IN (0x0001)	false
Feb 22, 2025 01:50:03.050012112 CET	192.168.2.4	1.1.1.1	0x4bb1	Standard query (0)	shotheatsgnovel.com	A (IP address)	IN (0x0001)	false
Feb 22, 2025 01:50:06.658139944 CET	192.168.2.4	1.1.1.1	0xf11a	Standard query (0)	shotheatsgnovel.com	A (IP address)	IN (0x0001)	false
Feb 22, 2025 01:50:06.658276081 CET	192.168.2.4	1.1.1.1	0x39ef	Standard query (0)	shotheatsgnovel.com	65	IN (0x0001)	false
Feb 22, 2025 01:50:07.294368029 CET	192.168.2.4	1.1.1.1	0x6601	Standard query (0)	shotheatsgnovel.com	A (IP address)	IN (0x0001)	false
Feb 22, 2025 01:50:07.345565081 CET	192.168.2.4	1.1.1.1	0xe92f	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Feb 22, 2025 01:50:07.345911980 CET	192.168.2.4	8.8.8.8	0x9cb4	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Feb 22, 2025 01:49:04.739218950 CET	1.1.1.1	192.168.2.4	0x8f61	No error (0)	www.google.com		65	IN (0x0001)	false
Feb 22, 2025 01:49:04.739259958 CET	1.1.1.1	192.168.2.4	0x586b	No error (0)	www.google.com	142.250.185.228	A (IP address)	IN (0x0001)	false
Feb 22, 2025 01:49:06.243549109 CET	1.1.1.1	192.168.2.4	0xa801	No error (0)	hub-ledge-live-wallet.webflow.io	104.18.36.248	A (IP address)	IN (0x0001)	false
Feb 22, 2025 01:49:06.243549109 CET	1.1.1.1	192.168.2.4	0xa801	No error (0)	hub-ledge-live-wallet.webflow.io	172.64.151.8	A (IP address)	IN (0x0001)	false
Feb 22, 2025 01:49:06.245791912 CET	1.1.1.1	192.168.2.4	0x4084	No error (0)	hub-ledge-live-wallet.webflow.io		65	IN (0x0001)	false
Feb 22, 2025 01:49:06.263271093 CET	1.1.1.1	192.168.2.4	0xbbb2	No error (0)	hub-ledge-live-wallet.webflow.io	104.18.36.248	A (IP address)	IN (0x0001)	false
Feb 22, 2025 01:49:06.263271093 CET	1.1.1.1	192.168.2.4	0xbbb2	No error (0)	hub-ledge-live-wallet.webflow.io	172.64.151.8	A (IP address)	IN (0x0001)	false
Feb 22, 2025 01:49:06.263622999 CET	1.1.1.1	192.168.2.4	0x2870	No error (0)	hub-ledge-live-wallet.webflow.io		65	IN (0x0001)	false
Feb 22, 2025 01:49:06.982881069 CET	1.1.1.1	192.168.2.4	0x141	No error (0)	cdn.prod.website-files.com	104.18.160.117	A (IP address)	IN (0x0001)	false
Feb 22, 2025 01:49:06.982881069 CET	1.1.1.1	192.168.2.4	0x141	No error (0)	cdn.prod.website-files.com	104.18.161.117	A (IP address)	IN (0x0001)	false
Feb 22, 2025 01:49:06.982960939 CET	1.1.1.1	192.168.2.4	0x3600	No error (0)	cdn.prod.website-files.com		65	IN (0x0001)	false
Feb 22, 2025 01:49:06.982974052 CET	1.1.1.1	192.168.2.4	0x50d5	No error (0)	d3e54v103j8qbb.cloudfront.net	18.244.20.221	A (IP address)	IN (0x0001)	false
Feb 22, 2025 01:49:06.982974052 CET	1.1.1.1	192.168.2.4	0x50d5	No error (0)	d3e54v103j8qbb.cloudfront.net	18.244.20.109	A (IP address)	IN (0x0001)	false
Feb 22, 2025 01:49:06.982974052 CET	1.1.1.1	192.168.2.4	0x50d5	No error (0)	d3e54v103j8qbb.cloudfront.net	18.244.20.40	A (IP address)	IN (0x0001)	false
Feb 22, 2025 01:49:06.982974052 CET	1.1.1.1	192.168.2.4	0x50d5	No error (0)	d3e54v103j8qbb.cloudfront.net	18.244.20.134	A (IP address)	IN (0x0001)	false
Feb 22, 2025 01:49:07.675499916 CET	1.1.1.1	192.168.2.4	0x60b7	No error (0)	cdn.prod.website-files.com		65	IN (0x0001)	false
Feb 22, 2025 01:49:07.675765038 CET	1.1.1.1	192.168.2.4	0x73df	No error (0)	cdn.prod.website-files.com	104.18.160.117	A (IP address)	IN (0x0001)	false
Feb 22, 2025 01:49:07.675765038 CET	1.1.1.1	192.168.2.4	0x73df	No error (0)	cdn.prod.website-files.com	104.18.161.117	A (IP address)	IN (0x0001)	false
Feb 22, 2025 01:49:08.270109892 CET	1.1.1.1	192.168.2.4	0xd5f1	No error (0)	d3e54v103j8qbb.cloudfront.net	18.244.20.109	A (IP address)	IN (0x0001)	false
Feb 22, 2025 01:49:08.270109892 CET	1.1.1.1	192.168.2.4	0xd5f1	No error (0)	d3e54v103j8qbb.cloudfront.net	18.244.20.134	A (IP address)	IN (0x0001)	false
Feb 22, 2025 01:49:08.270109892 CET	1.1.1.1	192.168.2.4	0xd5f1	No error (0)	d3e54v103j8qbb.cloudfront.net	18.244.20.40	A (IP address)	IN (0x0001)	false
Feb 22, 2025 01:49:08.270109892 CET	1.1.1.1	192.168.2.4	0xd5f1	No error (0)	d3e54v103j8qbb.cloudfront.net	18.244.20.221	A (IP address)	IN (0x0001)	false
Feb 22, 2025 01:49:21.128914118 CET	1.1.1.1	192.168.2.4	0x9345	No error (0)	google.com	142.250.186.46	A (IP address)	IN (0x0001)	false
Feb 22, 2025 01:49:21.136871099 CET	8.8.8.8	192.168.2.4	0xff8f	No error (0)	google.com	142.251.37.14	A (IP address)	IN (0x0001)	false
Feb 22, 2025 01:49:33.015310049 CET	1.1.1.1	192.168.2.4	0x7d3f	No error (0)	google.com	142.250.184.206	A (IP address)	IN (0x0001)	false
Feb 22, 2025 01:49:33.017771959 CET	8.8.8.8	192.168.2.4	0x4d7	No error (0)	google.com	142.251.37.14	A (IP address)	IN (0x0001)	false
Feb 22, 2025 01:50:07.352788925 CET	1.1.1.1	192.168.2.4	0xe92f	No error (0)	google.com	142.250.186.46	A (IP address)	IN (0x0001)	false
Feb 22, 2025 01:50:07.360846996 CET	8.8.8.8	192.168.2.4	0x9cb4	No error (0)	google.com	142.251.37.14	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

hub-ledge-live-wallet.webflow.io

https:

cdn.prod.website-files.com

d3e54v103j8qbb.cloudfront.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49741	104.18.36.248	443	5544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-22 00:49:06 UTC	675	OUT	GET / HTTP/1.1 Host: hub-ledge-live-wallet.webflow.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-22 00:49:06 UTC	816	IN	HTTP/1.1 200 OK Date: Sat, 22 Feb 2025 00:49:06 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close CF-Ray: 915af9717aca238e-EWR CF-Cache-Status: HIT Age: 69814 Last-Modified: Fri, 07 Feb 2025 04:28:18 GMT content-security-policy: frame-ancestors 'self' https://.webflow.com http://.webflow.com http://*.webflow.io http://webflow.com https://webflow.com surrogate-control: max-age=2147483647 surrogate-key: hub-ledge-live-wallet.webflow.io 668e5482841a316753518fba pageId:668e5482841a316753518fdb x-lambda-id: 4d950eec-f741-4b0f-b665-188cb600a926 vary: Accept-Encoding Set-Cookie: _cfuvid=QC_3kAy.vEcGrulFZ1MS6wjjiuzQOkNfB93t7Ii1Ol0-1740185346855-0.0.1.1-604800000; path=/; domain=.webflow.io; HttpOnly; Secure; SameSite=None Server: cloudflare alt-svc: h3=":443"; ma=86400
2025-02-22 00:49:06 UTC	553	IN	Data Raw: 39 64 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 21 2d 2d 20 54 68 69 73 20 73 69 74 65 20 77 61 73 20 63 72 65 61 74 65 64 20 69 6e 20 57 65 62 66 6c 6f 77 2e 20 68 74 74 70 73 3a 2f 2f 77 65 62 66 6c 6f 77 2e 63 6f 6d 20 2d 2d 3e 3c 21 2d 2d 20 4c 61 73 74 20 50 75 62 6c 69 73 68 65 64 3a 20 57 65 64 20 4a 75 6c 20 31 30 20 32 30 32 34 20 30 39 3a 33 31 3a 30 31 20 47 4d 54 2b 30 30 30 30 20 28 43 6f 6f 72 64 69 6e 61 74 65 64 20 55 6e 69 76 65 72 73 61 6c 20 54 69 6d 65 29 20 2d 2d 3e 3c 68 74 6d 6c 20 64 61 74 61 2d 77 66 2d 64 6f 6d 61 69 6e 3d 22 68 75 62 2d 6c 65 64 67 65 2d 6c 69 76 65 2d 77 61 6c 6c 65 74 2e 77 65 62 66 6c 6f 77 2e 69 6f 22 20 64 61 74 61 2d 77 66 2d 70 61 67 65 3d 22 36 36 38 65 35 34 38 32 38 34 31 61 33 31 36 37 Data Ascii: 9d3<!DOCTYPE html>... This site was created in Webflow. https://webflow.com -->... Last Published: Wed Jul 10 2024 09:31:01 GMT+0000 (Coordinated Universal Time) --><html data-wf-domain="hub-ledge-live-wallet.webflow.io" data-wf-page="668e5482841a3167
2025-02-22 00:49:06 UTC	1369	IN	Data Raw: 6e 64 20 6d 61 6e 61 67 65 20 79 6f 75 72 20 64 69 67 69 74 61 6c 20 61 73 73 65 74 73 2e 20 46 6f 6c 6c 6f 77 20 74 68 65 20 73 74 65 70 73 20 e2 80 a6 22 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 2f 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 2f 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 57 65 62 66 6c 6f 77 22 20 6e 61 6d 65 3d 22 67 65 6e 65 72 61 74 6f 72 22 2f 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 70 72 6f 64 2e 77 65 62 73 69 74 65 2d 66 69 6c 65 73 2e 63 6f 6d 2f 36 36 38 65 35 34 38 32 38 34 31 61 33 31 36 37 35 33 35 31 38 66 62 61 Data Ascii: nd manage your digital assets. Follow the steps " name="description"/><meta content="width=device-width, initial-scale=1" name="viewport"/><meta content="Webflow" name="generator"/><link href="https://cdn.prod.website-files.com/668e5482841a316753518fba
2025-02-22 00:49:06 UTC	600	IN	Data Raw: 2f 63 64 6e 2e 70 72 6f 64 2e 77 65 62 73 69 74 65 2d 66 69 6c 65 73 2e 63 6f 6d 2f 36 36 38 65 35 34 38 32 38 34 31 61 33 31 36 37 35 33 35 31 38 66 62 61 2f 36 36 38 65 35 34 61 38 62 61 62 32 34 38 66 35 35 66 39 30 36 61 65 37 5f 4c 65 64 67 65 72 2d 70 2d 31 36 30 30 2e 6a 70 67 20 31 36 30 30 77 2c 20 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 70 72 6f 64 2e 77 65 62 73 69 74 65 2d 66 69 6c 65 73 2e 63 6f 6d 2f 36 36 38 65 35 34 38 32 38 34 31 61 33 31 36 37 35 33 35 31 38 66 62 61 2f 36 36 38 65 35 34 61 38 62 61 62 32 34 38 66 35 35 66 39 30 36 61 65 37 5f 4c 65 64 67 65 72 2e 6a 70 67 20 31 39 32 30 77 22 20 61 6c 74 3d 22 22 2f 3e 3c 2f 61 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 64 33 65 35 34 76 31 30 33 6a 38 71 62 62 2e 63 Data Ascii: /cdn.prod.website-files.com/668e5482841a316753518fba/668e54a8bab248f55f906ae7_Ledger-p-1600.jpg 1600w, https://cdn.prod.website-files.com/668e5482841a316753518fba/668e54a8bab248f55f906ae7_Ledger.jpg 1920w" alt=""/></a><script src="https://d3e54v103j8qbb.c
2025-02-22 00:49:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49743	104.18.160.117	443	5544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-22 00:49:07 UTC	628	OUT	GET /668e5482841a316753518fba/css/hub-ledge-live-wallet.webflow.643ab4644.css HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://hub-ledge-live-wallet.webflow.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-22 00:49:07 UTC	631	IN	HTTP/1.1 200 OK Date: Sat, 22 Feb 2025 00:49:07 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close x-amz-id-2: 0z/un80P8i3e+myxlNH0vrm3g80ydkDWsTAkXffYQyDsk1kdJIQzd2pwrUvRNf50qT98GzKpMIM= x-amz-request-id: PMGX3ZZBNREEPQFV Last-Modified: Wed, 10 Jul 2024 09:31:02 GMT ETag: W/"28f1f15b510eca17a937061e9d0807bb" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000, immutable x-amz-version-id: Fr3sEfSe38G02Wo5glpG74HlsmXBQSG. CF-Cache-Status: HIT Age: 69814 Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 915af9761cee2363-EWR alt-svc: h3=":443"; ma=86400
2025-02-22 00:49:07 UTC	738	IN	Data Raw: 37 64 33 61 0d 0a 68 74 6d 6c 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 3b 0a 20 20 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 62 6f 64 79 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 7d 0a 0a 61 72 74 69 63 6c 65 2c 20 61 73 69 64 65 2c 20 64 65 74 61 69 6c 73 2c 20 66 69 67 63 61 70 74 69 6f 6e 2c 20 66 69 67 75 72 65 2c 20 66 6f 6f 74 65 72 2c 20 68 65 61 64 65 72 2c 20 68 67 72 6f 75 70 2c 20 6d 61 69 6e 2c 20 6d 65 6e 75 2c 20 6e 61 76 2c 20 73 65 63 74 69 6f 6e 2c 20 73 75 6d 6d 61 72 79 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 7d 0a Data Ascii: 7d3ahtml { -webkit-text-size-adjust: 100%; -ms-text-size-adjust: 100%; font-family: sans-serif;}body { margin: 0;}article, aside, details, figcaption, figure, footer, header, hgroup, main, menu, nav, section, summary { display: block;}
2025-02-22 00:49:07 UTC	1369	IN	Data Raw: 66 6f 6e 74 2d 73 69 7a 65 3a 20 38 30 25 3b 0a 7d 0a 0a 73 75 62 2c 20 73 75 70 20 7b 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 62 61 73 65 6c 69 6e 65 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 37 35 25 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 30 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 7d 0a 0a 73 75 70 20 7b 0a 20 20 74 6f 70 3a 20 2d 2e 35 65 6d 3b 0a 7d 0a 0a 73 75 62 20 7b 0a 20 20 62 6f 74 74 6f 6d 3a 20 2d 2e 32 35 65 6d 3b 0a 7d 0a 0a 69 6d 67 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 30 3b 0a 7d 0a 0a 73 76 67 3a 6e 6f 74 28 3a 72 6f 6f 74 29 20 7b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 0a 68 72 20 7b 0a 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 63 6f 6e 74 65 Data Ascii: font-size: 80%;}sub, sup { vertical-align: baseline; font-size: 75%; line-height: 0; position: relative;}sup { top: -.5em;}sub { bottom: -.25em;}img { border: 0;}svg:not(:root) { overflow: hidden;}hr { box-sizing: conte
2025-02-22 00:49:07 UTC	1369	IN	Data Raw: 73 65 3b 0a 20 20 62 6f 72 64 65 72 2d 73 70 61 63 69 6e 67 3a 20 30 3b 0a 7d 0a 0a 74 64 2c 20 74 68 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 7d 0a 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 77 65 62 66 6c 6f 77 2d 69 63 6f 6e 73 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 22 64 61 74 61 3a 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 66 6f 6e 74 2d 74 74 66 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3b 62 61 73 65 36 34 2c 41 41 45 41 41 41 41 4c 41 49 41 41 41 77 41 77 54 31 4d 76 4d 67 38 53 42 69 55 41 41 41 43 38 41 41 41 41 59 47 4e 74 59 58 44 70 50 2b 61 34 41 41 41 42 48 41 41 41 41 46 78 6e 59 58 4e 77 41 41 41 41 45 41 41 41 41 58 67 41 41 41 41 49 5a 32 78 35 5a 6d 68 53 32 58 45 41 41 41 47 41 41 Data Ascii: se; border-spacing: 0;}td, th { padding: 0;}@font-face { font-family: webflow-icons; src: url("data:application/x-font-ttf;charset=utf-8;base64,AAEAAAALAIAAAwAwT1MvMg8SBiUAAAC8AAAAYGNtYXDpP+a4AAABHAAAAFxnYXNwAAAAEAAAAXgAAAAIZ2x5ZmhS2XEAAAGAA
2025-02-22 00:49:07 UTC	1369	IN	Data Raw: 71 61 6c 31 65 69 79 67 6f 5a 69 45 67 62 30 74 4b 56 56 56 4b 53 32 38 67 49 53 45 67 62 30 74 4b 56 56 56 4b 53 32 38 67 49 51 41 42 41 41 41 42 77 41 49 41 41 38 41 41 45 67 41 41 45 7a 51 33 50 67 45 33 4e 6a 4d 78 46 53 49 48 44 67 45 48 42 68 55 78 49 77 41 6f 4b 49 74 65 58 57 70 56 53 6b 74 76 49 43 46 6d 41 63 42 71 58 56 36 4c 4b 43 68 6d 49 53 42 76 53 30 70 56 41 41 41 41 41 67 41 41 2f 38 41 46 74 67 50 41 41 44 49 41 4f 67 41 41 41 52 59 58 48 67 45 58 46 68 55 55 42 77 34 42 42 77 59 48 49 78 55 68 49 69 63 75 41 53 63 6d 4e 54 51 33 50 67 45 33 4e 6a 4d 78 4f 41 45 78 4e 44 63 2b 41 54 63 32 4d 7a 49 58 48 67 45 58 46 68 63 56 41 54 4d 4a 41 54 4d 56 4d 7a 55 45 6a 44 38 33 4e 6c 41 58 46 78 59 58 54 6a 55 31 50 51 4c 38 6b 7a 30 31 4e 6b Data Ascii: qal1eiygoZiEgb0tKVVVKS28gISEgb0tKVVVKS28gIQABAAABwAIAA8AAEgAAEzQ3PgE3NjMxFSIHDgEHBhUxIwAoKIteXWpVSktvICFmAcBqXV6LKChmISBvS0pVAAAAAgAA/8AFtgPAADIAOgAAARYXHgEXFhUUBw4BBwYHIxUhIicuAScmNTQ3PgE3NjMxOAExNDc+ATc2MzIXHgEXFhcVATMJATMVMzUEjD83NlAXFxYXTjU1PQL8kz01Nk
2025-02-22 00:49:07 UTC	1369	IN	Data Raw: 73 5e 3d 22 77 2d 69 63 6f 6e 2d 22 5d 2c 20 5b 63 6c 61 73 73 2a 3d 22 20 77 2d 69 63 6f 6e 2d 22 5d 20 7b 0a 20 20 73 70 65 61 6b 3a 20 6e 6f 6e 65 3b 0a 20 20 66 6f 6e 74 2d 76 61 72 69 61 6e 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 6e 6f 6e 65 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 20 61 6e 74 69 61 6c 69 61 73 65 64 3b 0a 20 20 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 20 67 72 61 79 73 63 61 6c 65 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 Data Ascii: s^="w-icon-"], [class*=" w-icon-"] { speak: none; font-variant: normal; text-transform: none; -webkit-font-smoothing: antialiased; -moz-osx-font-smoothing: grayscale; font-style: normal; font-weight: normal; line-height: 1; font-family:
2025-02-22 00:49:07 UTC	1369	IN	Data Raw: 20 30 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 39 70 78 20 31 35 70 78 3b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 7d 0a 0a 69 6e 70 75 74 2e 77 2d 62 75 74 74 6f 6e 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 20 62 75 74 74 6f 6e 3b 0a 7d 0a 0a 68 74 6d 6c 5b 64 61 74 61 2d 77 2d 64 79 6e 70 61 67 65 5d 20 5b 64 61 74 61 2d 77 2d 63 6c 6f 61 6b 5d 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 2e 77 2d 63 6f 64 65 2d 62 6c 6f 63 6b 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 75 6e Data Ascii: 0; border-radius: 0; padding: 9px 15px; text-decoration: none; display: inline-block;}input.w-button { -webkit-appearance: button;}html[data-w-dynpage] [data-w-cloak] { color: rgba(0, 0, 0, 0) !important;}.w-code-block { margin: un
2025-02-22 00:49:07 UTC	1369	IN	Data Raw: 20 6e 6f 6e 65 3b 0a 7d 0a 0a 2e 77 2d 77 65 62 66 6c 6f 77 2d 62 61 64 67 65 20 7b 0a 20 20 77 68 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 77 72 61 70 3b 0a 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 30 20 31 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 2e 31 29 2c 20 30 20 31 70 78 20 33 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 2e 31 29 3b 0a 20 20 76 69 73 69 62 69 6c 69 74 79 3a 20 76 69 73 69 62 6c 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 32 31 34 37 34 38 33 36 34 37 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 61 61 61 64 62 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 6f 70 61 63 69 74 79 3a 20 31 20 21 69 Data Ascii: none;}.w-webflow-badge { white-space: nowrap; cursor: pointer; box-shadow: 0 0 0 1px rgba(0, 0, 0, .1), 0 1px 3px rgba(0, 0, 0, .1); visibility: visible !important; z-index: 2147483647 !important; color: #aaadb0 !important; opacity: 1 !i
2025-02-22 00:49:07 UTC	1369	IN	Data Raw: 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 38 70 78 3b 0a 7d 0a 0a 70 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 3b 0a 7d 0a 0a 62 6c 6f 63 6b 71 75 6f 74 65 20 7b 0a 20 20 62 6f 72 64 65 72 2d 6c 65 66 74 3a 20 35 70 78 20 73 6f 6c 69 64 20 23 65 32 65 32 65 32 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 20 32 30 70 78 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 32 70 78 3b 0a 7d 0a 0a 66 69 67 75 72 65 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 30 70 78 3b 0a 7d 0a 0a 66 69 67 Data Ascii: font-size: 12px; line-height: 18px;}p { margin-top: 0; margin-bottom: 10px;}blockquote { border-left: 5px solid #e2e2e2; margin: 0 0 10px; padding: 10px 20px; font-size: 18px; line-height: 22px;}figure { margin: 0 0 10px;}fig
2025-02-22 00:49:07 UTC	1369	IN	Data Raw: 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 33 38 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 38 70 78 20 31 32 70 78 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 32 38 35 37 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2e 77 2d 69 6e 70 75 74 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2c 20 2e 77 2d 73 65 6c 65 63 74 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 39 39 39 3b 0a 7d 0a 0a 2e 77 2d 69 6e 70 75 74 3a 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2c 20 2e 77 2d 73 65 6c 65 63 74 3a 3a 2d 6d 6f Data Ascii: width: 100%; height: 38px; margin-bottom: 10px; padding: 8px 12px; font-size: 14px; line-height: 1.42857; display: block;}.w-input:-moz-placeholder, .w-select:-moz-placeholder { color: #999;}.w-input::-moz-placeholder, .w-select::-mo
2025-02-22 00:49:07 UTC	1369	IN	Data Raw: 6f 2d 69 6e 70 75 74 20 7b 0a 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 33 70 78 20 30 20 30 20 2d 32 30 70 78 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 7d 0a 0a 2e 77 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2e 77 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 2d 69 6e 70 75 74 20 7b 0a 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 2d 31 30 30 3b 0a 20 20 77 69 64 74 68 3a 20 2e 31 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 2e 31 70 78 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a Data Ascii: o-input { float: left; margin: 3px 0 0 -20px; line-height: normal;}.w-file-upload { margin-bottom: 10px; display: block;}.w-file-upload-input { opacity: 0; z-index: -100; width: .1px; height: .1px; position: absolute; overflow:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49742	104.18.160.117	443	5544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-22 00:49:07 UTC	590	OUT	GET /668e5482841a316753518fba/js/webflow.4e8135d87.js HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hub-ledge-live-wallet.webflow.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-22 00:49:07 UTC	638	IN	HTTP/1.1 200 OK Date: Sat, 22 Feb 2025 00:49:07 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close x-amz-id-2: fuLJ+gnWnGYDtoJpgOK38IOCWuhVSs0zcdMREiFuGorvH92BIA6G0nSmkIcHYpZ7n1FXxejAYsM= x-amz-request-id: PB6GXTAB39V35V59 Last-Modified: Wed, 10 Jul 2024 09:31:02 GMT ETag: W/"48bd2b847a93ac70ad46484a35db1786" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000, immutable x-amz-version-id: 2a89RVcnthdvTTTU3pnfrf9kIUpTA.TF CF-Cache-Status: HIT Age: 69814 Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 915af975ffa315d7-EWR alt-svc: h3=":443"; ma=86400
2025-02-22 00:49:07 UTC	731	IN	Data Raw: 37 64 33 33 0d 0a 0a 2f 2a 21 0a 20 2a 20 57 65 62 66 6c 6f 77 3a 20 46 72 6f 6e 74 2d 65 6e 64 20 73 69 74 65 20 6c 69 62 72 61 72 79 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 4d 49 54 0a 20 2a 20 49 6e 6c 69 6e 65 20 73 63 72 69 70 74 73 20 6d 61 79 20 61 63 63 65 73 73 20 74 68 65 20 61 70 69 20 75 73 69 6e 67 20 61 6e 20 61 73 79 6e 63 20 68 61 6e 64 6c 65 72 3a 0a 20 2a 20 20 20 76 61 72 20 57 65 62 66 6c 6f 77 20 3d 20 57 65 62 66 6c 6f 77 20 7c 7c 20 5b 5d 3b 0a 20 2a 20 20 20 57 65 62 66 6c 6f 77 2e 70 75 73 68 28 72 65 61 64 79 46 75 6e 63 74 69 6f 6e 29 3b 0a 20 2a 2f 0a 0a 28 28 29 3d 3e 7b 76 61 72 20 6c 74 3d 28 65 2c 79 29 3d 3e 28 29 3d 3e 28 79 7c 7c 65 28 28 79 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 29 2e 65 78 70 6f 72 74 73 2c 79 29 2c 79 Data Ascii: 7d33/! Webflow: Front-end site library * @license MIT * Inline scripts may access the api using an async handler: * var Webflow = Webflow \|\| []; * Webflow.push(readyFunction); */(()=>{var lt=(e,y)=>()=>(y\|\|e((y={exports:{}}).exports,y),y
2025-02-22 00:49:07 UTC	1369	IN	Data Raw: 74 20 6d 61 74 63 68 20 5b 22 2b 74 2b 22 5d 3a 20 22 2b 6e 2b 22 2c 20 22 2b 69 29 7d 66 75 6e 63 74 69 6f 6e 20 49 28 74 2c 6e 2c 69 29 7b 69 66 28 6e 21 3d 3d 76 6f 69 64 20 30 26 26 28 69 3d 6e 29 2c 74 3d 3d 3d 76 6f 69 64 20 30 29 72 65 74 75 72 6e 20 69 3b 76 61 72 20 72 3d 69 3b 72 65 74 75 72 6e 20 77 65 2e 74 65 73 74 28 74 29 7c 7c 21 58 74 2e 74 65 73 74 28 74 29 3f 72 3d 70 61 72 73 65 49 6e 74 28 74 2c 31 30 29 3a 58 74 2e 74 65 73 74 28 74 29 26 26 28 72 3d 31 65 33 2a 70 61 72 73 65 46 6c 6f 61 74 28 74 29 29 2c 30 3e 72 26 26 28 72 3d 30 29 2c 72 3d 3d 3d 72 3f 72 3a 69 7d 66 75 6e 63 74 69 6f 6e 20 42 28 74 29 7b 65 74 2e 64 65 62 75 67 26 26 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 74 29 7d 66 Data Ascii: t match ["+t+"]: "+n+", "+i)}function I(t,n,i){if(n!==void 0&&(i=n),t===void 0)return i;var r=i;return we.test(t)\|\|!Xt.test(t)?r=parseInt(t,10):Xt.test(t)&&(r=1e3*parseFloat(t)),0>r&&(r=0),r===r?r:i}function B(t){et.debug&&window&&window.console.warn(t)}f
2025-02-22 00:49:07 UTC	1369	IN	Data Raw: 6e 7d 5d 2c 22 65 61 73 65 2d 69 6e 2d 71 75 61 64 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 35 35 30 2c 20 30 2e 30 38 35 2c 20 30 2e 36 38 30 2c 20 30 2e 35 33 30 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 29 7b 72 65 74 75 72 6e 20 69 2a 28 74 2f 3d 72 29 2a 74 2b 6e 7d 5d 2c 22 65 61 73 65 2d 6f 75 74 2d 71 75 61 64 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 32 35 30 2c 20 30 2e 34 36 30 2c 20 30 2e 34 35 30 2c 20 30 2e 39 34 30 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 29 7b 72 65 74 75 72 6e 2d 69 2a 28 74 2f 3d 72 29 2a 28 74 2d 32 29 2b 6e 7d 5d 2c 22 65 61 73 65 2d 69 6e 2d 6f 75 74 2d 71 75 61 64 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 35 35 2c 20 30 2e 30 33 30 2c 20 Data Ascii: n}],"ease-in-quad":["cubic-bezier(0.550, 0.085, 0.680, 0.530)",function(t,n,i,r){return i(t/=r)t+n}],"ease-out-quad":["cubic-bezier(0.250, 0.460, 0.450, 0.940)",function(t,n,i,r){return-i(t/=r)(t-2)+n}],"ease-in-out-quad":["cubic-bezier(0.455, 0.030,
2025-02-22 00:49:07 UTC	1369	IN	Data Raw: 65 2d 69 6e 2d 73 69 6e 65 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 37 30 2c 20 30 2c 20 30 2e 37 34 35 2c 20 30 2e 37 31 35 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 29 7b 72 65 74 75 72 6e 2d 69 2a 4d 61 74 68 2e 63 6f 73 28 74 2f 72 2a 28 4d 61 74 68 2e 50 49 2f 32 29 29 2b 69 2b 6e 7d 5d 2c 22 65 61 73 65 2d 6f 75 74 2d 73 69 6e 65 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 33 39 30 2c 20 30 2e 35 37 35 2c 20 30 2e 35 36 35 2c 20 31 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 29 7b 72 65 74 75 72 6e 20 69 2a 4d 61 74 68 2e 73 69 6e 28 74 2f 72 2a 28 4d 61 74 68 2e 50 49 2f 32 29 29 2b 6e 7d 5d 2c 22 65 61 73 65 2d 69 6e 2d 6f 75 74 2d 73 69 6e 65 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 Data Ascii: e-in-sine":["cubic-bezier(0.470, 0, 0.745, 0.715)",function(t,n,i,r){return-iMath.cos(t/r(Math.PI/2))+i+n}],"ease-out-sine":["cubic-bezier(0.390, 0.575, 0.565, 1)",function(t,n,i,r){return iMath.sin(t/r(Math.PI/2))+n}],"ease-in-out-sine":["cubic-bezie
2025-02-22 00:49:07 UTC	1369	IN	Data Raw: 26 28 73 3d 31 2e 37 30 31 35 38 29 2c 69 2a 28 28 74 3d 74 2f 72 2d 31 29 2a 74 2a 28 28 73 2b 31 29 2a 74 2b 73 29 2b 31 29 2b 6e 7d 5d 2c 22 65 61 73 65 2d 69 6e 2d 6f 75 74 2d 62 61 63 6b 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 36 38 30 2c 20 2d 30 2e 35 35 30 2c 20 30 2e 32 36 35 2c 20 31 2e 35 35 30 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 2c 73 29 7b 72 65 74 75 72 6e 20 73 3d 3d 3d 76 6f 69 64 20 30 26 26 28 73 3d 31 2e 37 30 31 35 38 29 2c 28 74 2f 3d 72 2f 32 29 3c 31 3f 69 2f 32 2a 74 2a 74 2a 28 28 28 73 2a 3d 31 2e 35 32 35 29 2b 31 29 2a 74 2d 73 29 2b 6e 3a 69 2f 32 2a 28 28 74 2d 3d 32 29 2a 74 2a 28 28 28 73 2a 3d 31 2e 35 32 35 29 2b 31 29 2a 74 2b 73 29 2b 32 29 2b 6e 7d 5d 7d 2c 57 3d 7b 22 65 61 73 65 Data Ascii: &(s=1.70158),i((t=t/r-1)t((s+1)t+s)+1)+n}],"ease-in-out-back":["cubic-bezier(0.680, -0.550, 0.265, 1.550)",function(t,n,i,r,s){return s===void 0&&(s=1.70158),(t/=r/2)<1?i/2tt(((s=1.525)+1)t-s)+n:i/2((t-=2)t(((s=1.525)+1)t+s)+2)+n}]},W={"ease
2025-02-22 00:49:07 UTC	1369	IN	Data Raw: 61 6d 65 7c 7c 48 2e 6d 73 52 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 3b 72 65 74 75 72 6e 20 74 26 26 68 2e 62 69 6e 64 3f 74 2e 62 69 6e 64 28 48 29 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 48 2e 73 65 74 54 69 6d 65 6f 75 74 28 6e 2c 31 36 29 7d 7d 28 29 2c 63 74 3d 79 2e 6e 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 48 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2c 6e 3d 74 26 26 28 74 2e 6e 6f 77 7c 7c 74 2e 77 65 62 6b 69 74 4e 6f 77 7c 7c 74 2e 6d 73 4e 6f 77 7c 7c 74 2e 6d 6f 7a 4e 6f 77 29 3b 72 65 74 75 72 6e 20 6e 26 26 68 2e 62 69 6e 64 3f 6e 2e 62 69 6e 64 28 74 29 3a 44 61 74 65 2e 6e 6f 77 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 2b 6e 65 77 20 44 61 74 65 7d 7d 28 29 2c 70 74 3d 50 28 66 75 6e 63 Data Ascii: ame\|\|H.msRequestAnimationFrame;return t&&h.bind?t.bind(H):function(n){H.setTimeout(n,16)}}(),ct=y.now=function(){var t=H.performance,n=t&&(t.now\|\|t.webkitNow\|\|t.msNow\|\|t.mozNow);return n&&h.bind?n.bind(t):Date.now\|\|function(){return+new Date}}(),pt=P(func
2025-02-22 00:49:07 UTC	1369	IN	Data Raw: 74 69 6f 6e 73 3a 77 7d 29 3a 28 74 68 69 73 2e 74 69 6d 65 72 3d 6e 65 77 20 71 74 28 7b 64 75 72 61 74 69 6f 6e 3a 77 2c 63 6f 6e 74 65 78 74 3a 74 68 69 73 2c 63 6f 6d 70 6c 65 74 65 3a 6f 7d 29 2c 74 68 69 73 2e 61 63 74 69 76 65 3d 21 30 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 77 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 61 63 74 69 76 65 3f 28 74 68 69 73 2e 71 75 65 75 65 2e 70 75 73 68 28 7b 6f 70 74 69 6f 6e 73 3a 77 2c 61 72 67 73 3a 61 72 67 75 6d 65 6e 74 73 7d 29 2c 76 6f 69 64 28 74 68 69 73 2e 74 69 6d 65 72 2e 63 6f 6d 70 6c 65 74 65 3d 6f 29 29 3a 42 28 22 4e 6f 20 61 63 74 69 76 65 20 74 72 61 6e 73 69 74 69 6f 6e 20 74 69 6d 65 72 2e 20 55 73 65 20 73 74 61 72 74 28 29 20 6f 72 20 77 61 69 74 28 29 20 62 65 66 6f 72 65 20 74 68 65 6e 28 Data Ascii: tions:w}):(this.timer=new qt({duration:w,context:this,complete:o}),this.active=!0)}function s(w){return this.active?(this.queue.push({options:w,args:arguments}),void(this.timer.complete=o)):B("No active transition timer. Use start() or wait() before then(
2025-02-22 00:49:07 UTC	1369	IN	Data Raw: 59 2e 63 61 6c 6c 28 74 68 69 73 2c 6e 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 77 29 7b 77 2e 73 74 6f 70 28 29 7d 66 75 6e 63 74 69 6f 6e 20 41 74 28 77 2c 4f 29 7b 77 2e 73 65 74 28 4f 29 7d 66 75 6e 63 74 69 6f 6e 20 67 65 28 77 29 7b 74 68 69 73 2e 24 65 6c 2e 63 73 73 28 77 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 74 28 77 2c 4f 29 7b 74 5b 77 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 68 69 6c 64 72 65 6e 3f 79 65 2e 63 61 6c 6c 28 74 68 69 73 2c 4f 2c 61 72 67 75 6d 65 6e 74 73 29 3a 28 74 68 69 73 2e 65 6c 26 26 4f 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 2c 74 68 69 73 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 77 2c 4f 29 7b 76 61 72 20 59 2c 4e 3d 74 68 69 73 2e 63 68 69 6c 64 72 65 6e Data Ascii: Y.call(this,nt)}function j(w){w.stop()}function At(w,O){w.set(O)}function ge(w){this.$el.css(w)}function ot(w,O){t[w]=function(){return this.children?ye.call(this,O,arguments):(this.el&&O.apply(this,arguments),this)}}function ye(w,O){var Y,N=this.children
2025-02-22 00:49:07 UTC	1369	IN	Data Raw: 3d 66 75 6e 63 74 69 6f 6e 28 6f 2c 70 2c 78 2c 4b 29 7b 74 68 69 73 2e 24 65 6c 3d 6f 2c 74 68 69 73 2e 65 6c 3d 6f 5b 30 5d 3b 76 61 72 20 63 3d 70 5b 30 5d 3b 78 5b 32 5d 26 26 28 63 3d 78 5b 32 5d 29 2c 48 74 5b 63 5d 26 26 28 63 3d 48 74 5b 63 5d 29 2c 74 68 69 73 2e 6e 61 6d 65 3d 63 2c 74 68 69 73 2e 74 79 70 65 3d 78 5b 31 5d 2c 74 68 69 73 2e 64 75 72 61 74 69 6f 6e 3d 49 28 70 5b 31 5d 2c 74 68 69 73 2e 64 75 72 61 74 69 6f 6e 2c 73 2e 64 75 72 61 74 69 6f 6e 29 2c 74 68 69 73 2e 65 61 73 65 3d 69 28 70 5b 32 5d 2c 74 68 69 73 2e 65 61 73 65 2c 73 2e 65 61 73 65 29 2c 74 68 69 73 2e 64 65 6c 61 79 3d 49 28 70 5b 33 5d 2c 74 68 69 73 2e 64 65 6c 61 79 2c 73 2e 64 65 6c 61 79 29 2c 74 68 69 73 2e 73 70 61 6e 3d 74 68 69 73 2e 64 75 72 61 74 69 6f Data Ascii: =function(o,p,x,K){this.$el=o,this.el=o[0];var c=p[0];x[2]&&(c=x[2]),Ht[c]&&(c=Ht[c]),this.name=c,this.type=x[1],this.duration=I(p[1],this.duration,s.duration),this.ease=i(p[2],this.ease,s.ease),this.delay=I(p[3],this.delay,s.delay),this.span=this.duratio
2025-02-22 00:49:07 UTC	1369	IN	Data Raw: 53 74 79 6c 65 29 26 26 28 74 68 69 73 2e 61 63 74 69 76 65 3d 21 31 2c 74 68 69 73 2e 6e 65 78 74 53 74 79 6c 65 3d 6e 75 6c 6c 2c 62 74 28 74 68 69 73 2e 65 6c 2c 74 68 69 73 2e 6e 61 6d 65 2c 74 68 69 73 2e 67 65 74 28 29 29 29 3b 76 61 72 20 6f 3d 74 68 69 73 2e 74 77 65 65 6e 3b 6f 26 26 6f 2e 63 6f 6e 74 65 78 74 26 26 6f 2e 64 65 73 74 72 6f 79 28 29 7d 2c 74 2e 63 6f 6e 76 65 72 74 3d 66 75 6e 63 74 69 6f 6e 28 6f 2c 70 29 7b 69 66 28 6f 3d 3d 22 61 75 74 6f 22 26 26 74 68 69 73 2e 61 75 74 6f 29 72 65 74 75 72 6e 20 6f 3b 76 61 72 20 78 2c 4b 3d 74 79 70 65 6f 66 20 6f 3d 3d 22 6e 75 6d 62 65 72 22 2c 63 3d 74 79 70 65 6f 66 20 6f 3d 3d 22 73 74 72 69 6e 67 22 3b 73 77 69 74 63 68 28 70 29 7b 63 61 73 65 20 66 3a 69 66 28 4b 29 72 65 74 75 72 6e Data Ascii: Style)&&(this.active=!1,this.nextStyle=null,bt(this.el,this.name,this.get()));var o=this.tween;o&&o.context&&o.destroy()},t.convert=function(o,p){if(o=="auto"&&this.auto)return o;var x,K=typeof o=="number",c=typeof o=="string";switch(p){case f:if(K)return

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49744	18.244.20.221	443	5544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-22 00:49:07 UTC	655	OUT	GET /js/jquery-3.5.1.min.dc5e7f18c8.js?site=668e5482841a316753518fba HTTP/1.1 Host: d3e54v103j8qbb.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://hub-ledge-live-wallet.webflow.io sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://hub-ledge-live-wallet.webflow.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-22 00:49:07 UTC	616	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 89476 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Mon, 20 Jul 2020 17:53:02 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Sat, 22 Feb 2025 00:25:23 GMT Cache-Control: max-age=84600, must-revalidate Etag: "dc5e7f18c8d36ac1d3d4753a87c98d0a" Via: 1.1 553c17cdbfc8c5ba81390077b0e5d2d4.cloudfront.net (CloudFront) Age: 1425 X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P11 X-Amz-Cf-Id: ZxN_frpke0W45q1hLMPHqblcA4N6SgOBg9yAlHBwi8vixGa9pb-z3A==
2025-02-22 00:49:07 UTC	15768	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 Data Ascii: /! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery
2025-02-22 00:49:08 UTC	16384	IN	Data Raw: 34 29 2c 78 3d 22 6f 66 2d 74 79 70 65 22 3d 3d 3d 65 3b 72 65 74 75 72 6e 20 31 3d 3d 3d 67 26 26 30 3d 3d 3d 76 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 21 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 2c 61 2c 73 2c 75 2c 6c 3d 79 21 3d 3d 6d 3f 22 6e 65 78 74 53 69 62 6c 69 6e 67 22 3a 22 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 22 2c 63 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 66 3d 78 26 26 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 70 3d 21 6e 26 26 21 78 2c 64 3d 21 31 3b 69 66 28 63 29 7b 69 66 28 79 29 7b 77 68 69 6c 65 28 6c 29 7b 61 3d 65 3b 77 68 69 6c 65 28 61 3d 61 5b 6c 5d 29 69 66 28 78 3f 61 2e 6e 6f 64 65 4e 61 Data Ascii: 4),x="of-type"===e;return 1===g&&0===v?function(e){return!!e.parentNode}:function(e,t,n){var r,i,o,a,s,u,l=y!==m?"nextSibling":"previousSibling",c=e.parentNode,f=x&&e.nodeName.toLowerCase(),p=!n&&!x,d=!1;if(c){if(y){while(l){a=e;while(a=a[l])if(x?a.nodeNa
2025-02-22 00:49:08 UTC	16384	IN	Data Raw: 2e 72 65 61 64 79 53 74 61 74 65 7c 7c 22 6c 6f 61 64 69 6e 67 22 21 3d 3d 45 2e 72 65 61 64 79 53 74 61 74 65 26 26 21 45 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 64 6f 53 63 72 6f 6c 6c 3f 43 2e 73 65 74 54 69 6d 65 6f 75 74 28 53 2e 72 65 61 64 79 29 3a 28 45 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 42 29 2c 43 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 42 29 29 3b 76 61 72 20 24 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 29 7b 76 61 72 20 73 3d 30 2c 75 3d 65 2e 6c 65 6e 67 74 68 2c 6c 3d 6e 75 6c 6c 3d 3d 6e 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 77 28 6e 29 29 66 6f 72 28 73 20 69 6e 20 69 3d 21 30 2c 6e 29 Data Ascii: .readyState\|\|"loading"!==E.readyState&&!E.documentElement.doScroll?C.setTimeout(S.ready):(E.addEventListener("DOMContentLoaded",B),C.addEventListener("load",B));var $=function(e,t,n,r,i,o,a){var s=0,u=e.length,l=null==n;if("object"===w(n))for(s in i=!0,n)
2025-02-22 00:49:08 UTC	16384	IN	Data Raw: 5f 65 76 61 6c 55 72 6c 26 26 21 75 2e 6e 6f 4d 6f 64 75 6c 65 26 26 53 2e 5f 65 76 61 6c 55 72 6c 28 75 2e 73 72 63 2c 7b 6e 6f 6e 63 65 3a 75 2e 6e 6f 6e 63 65 7c 7c 75 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 29 7d 2c 6c 29 3a 62 28 75 2e 74 65 78 74 43 6f 6e 74 65 6e 74 2e 72 65 70 6c 61 63 65 28 6a 65 2c 22 22 29 2c 75 2c 6c 29 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 52 65 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 2c 69 3d 74 3f 53 2e 66 69 6c 74 65 72 28 74 2c 65 29 3a 65 2c 6f 3d 30 3b 6e 75 6c 6c 21 3d 28 72 3d 69 5b 6f 5d 29 3b 6f 2b 2b 29 6e 7c 7c 31 21 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 7c 7c 53 2e 63 6c 65 61 6e 44 61 74 61 28 76 65 28 72 29 29 2c 72 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 28 Data Ascii: _evalUrl&&!u.noModule&&S._evalUrl(u.src,{nonce:u.nonce\|\|u.getAttribute("nonce")},l):b(u.textContent.replace(je,""),u,l))}return n}function Re(e,t,n){for(var r,i=t?S.filter(t,e):e,o=0;null!=(r=i[o]);o++)n\|\|1!==r.nodeType\|\|S.cleanData(ve(r)),r.parentNode&&(
2025-02-22 00:49:08 UTC	16384	IN	Data Raw: 3a 32 30 30 2c 5f 64 65 66 61 75 6c 74 3a 34 30 30 7d 2c 53 2e 66 6e 2e 64 65 6c 61 79 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 65 29 7b 72 65 74 75 72 6e 20 72 3d 53 2e 66 78 26 26 53 2e 66 78 2e 73 70 65 65 64 73 5b 72 5d 7c 7c 72 2c 65 3d 65 7c 7c 22 66 78 22 2c 74 68 69 73 2e 71 75 65 75 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 43 2e 73 65 74 54 69 6d 65 6f 75 74 28 65 2c 72 29 3b 74 2e 73 74 6f 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 43 2e 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 6e 29 7d 7d 29 7d 2c 72 74 3d 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 2c 69 74 3d 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 65 6c 65 63 74 22 29 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 45 2e 63 72 65 61 74 65 Data Ascii: :200,_default:400},S.fn.delay=function(r,e){return r=S.fx&&S.fx.speeds[r]\|\|r,e=e\|\|"fx",this.queue(e,function(e,t){var n=C.setTimeout(e,r);t.stop=function(){C.clearTimeout(n)}})},rt=E.createElement("input"),it=E.createElement("select").appendChild(E.create
2025-02-22 00:49:08 UTC	8172	IN	Data Raw: 74 68 69 73 2e 70 61 72 65 6e 74 28 65 29 2e 6e 6f 74 28 22 62 6f 64 79 22 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 53 28 74 68 69 73 29 2e 72 65 70 6c 61 63 65 57 69 74 68 28 74 68 69 73 2e 63 68 69 6c 64 4e 6f 64 65 73 29 7d 29 2c 74 68 69 73 7d 7d 29 2c 53 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2e 68 69 64 64 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 53 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2e 76 69 73 69 62 6c 65 28 65 29 7d 2c 53 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2e 76 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 21 28 65 2e 6f 66 66 73 65 74 57 69 64 74 68 7c 7c 65 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7c 7c 65 2e 67 65 74 43 6c 69 65 6e 74 52 65 63 74 73 28 29 2e 6c 65 6e Data Ascii: this.parent(e).not("body").each(function(){S(this).replaceWith(this.childNodes)}),this}}),S.expr.pseudos.hidden=function(e){return!S.expr.pseudos.visible(e)},S.expr.pseudos.visible=function(e){return!!(e.offsetWidth\|\|e.offsetHeight\|\|e.getClientRects().len

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49746	104.18.160.117	443	5544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-22 00:49:08 UTC	669	OUT	GET /668e5482841a316753518fba/668e54a8bab248f55f906ae7_Ledger-p-1600.jpg HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hub-ledge-live-wallet.webflow.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-22 00:49:08 UTC	691	IN	HTTP/1.1 200 OK Date: Sat, 22 Feb 2025 00:49:08 GMT Content-Type: image/jpg Content-Length: 274976 Connection: close Cache-Control: max-age=31536000, must-revalidate Cf-Bgj: h2pri ETag: "9d7ba52216a093879805daab5bceefef" Last-Modified: Wed, 10 Jul 2024 09:30:21 GMT x-amz-id-2: 3lR/WpRkatUvRlQnYfNTriXyhgOSEHN9o/0U8bxtrtS7PFKjt3SaLadfPeipBMUya5bwAgA0JCY= x-amz-request-id: KBHVFKAZH3WMQS03 x-amz-server-side-encryption: AES256 x-amz-storage-class: INTELLIGENT_TIERING x-amz-version-id: 4fTgWBh2dsOUPdyIz4ZdD1kkCBRjRMUD CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 915af97aa88c4219-EWR alt-svc: h3=":443"; ma=86400
2025-02-22 00:49:08 UTC	678	IN	Data Raw: ff d8 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 ff c0 00 11 08 0e 34 06 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 01 04 03 01 00 00 00 00 00 00 00 00 00 00 00 07 01 05 06 08 02 04 09 03 ff c4 00 65 10 00 01 03 03 01 03 05 0a 09 08 06 08 04 03 01 11 00 01 02 03 04 05 11 06 07 12 21 13 31 41 51 94 08 14 18 22 55 56 61 71 91 d2 15 16 17 32 37 81 b2 d1 d3 53 54 74 92 93 a1 a2 b1 23 Data Ascii: C%# , #&')*)-0-(0%()(C(((((((((((((((((((((((((((((((((((((((((((((((((((4@"e!1AQ"UVaq27STt#
2025-02-22 00:49:08 UTC	1369	IN	Data Raw: da bb 67 f9 40 84 01 37 f8 33 6b ef c9 da bb 67 f9 47 83 36 be fc 9d ab b6 7f 94 08 40 13 7f 83 36 be fc 9d ab b6 7f 94 78 33 6b ef c9 da bb 67 f9 40 84 01 37 f8 33 6b ef c9 da bb 67 f9 47 83 36 be fc 9d ab b6 7f 94 08 40 13 7f 83 36 be fc 9d ab b6 7f 94 78 33 6b ef c9 da bb 67 f9 40 84 01 37 f8 33 6b ef c9 da bb 67 f9 47 83 36 be fc 9d ab b6 7f 94 08 40 13 7f 83 36 be fc 9d ab b6 7f 94 78 33 6b ef c9 da bb 67 f9 40 84 01 37 f8 33 6b ef c9 da bb 67 f9 47 83 36 be fc 9d ab b6 7f 94 08 40 13 7f 83 36 be fc 9d ab b6 7f 94 78 33 6b ef c9 da bb 67 f9 40 84 01 37 f8 33 6b ef c9 da bb 67 f9 47 83 36 be fc 9d ab b6 7f 94 08 40 13 7f 83 36 be fc 9d ab b6 7f 94 78 33 6b ef c9 da bb 67 f9 40 84 01 37 f8 33 6b ef c9 da bb 67 f9 47 83 36 be fc 9d ab b6 7f 94 08 40 13 Data Ascii: g@73kgG6@6x3kg@73kgG6@6x3kg@73kgG6@6x3kg@73kgG6@6x3kg@73kgG6@6x3kg@73kgG6@
2025-02-22 00:49:08 UTC	1369	IN	Data Raw: e9 72 e5 4e de a9 ae 96 d7 a6 ae b5 f4 c8 d5 9e 9a 92 69 d8 8f 4c a6 f3 58 e7 26 53 ab 28 05 cd 10 a9 12 e9 69 b6 9f a8 34 cd a6 f1 15 eb 4a c3 1d c2 92 2a b6 c6 eb 6c ca ac 47 b1 1d 85 5e 57 8a a6 4c f7 49 c3 a8 a0 a3 99 ba aa b6 d9 57 54 b2 66 37 50 53 be 16 a3 30 9c 15 1c e7 65 73 9e 20 5f 40 00 00 00 00 00 01 d3 bc b2 be 4b 5d 4b 2d 13 53 c3 70 56 2a 41 25 44 6a f8 da ee 85 73 51 51 55 3d 4a 60 bf 07 ed 4b cb fa 4b ff 00 c5 73 7e 28 12 30 30 6d 91 6a 2b b6 a2 b1 5c a4 bf ba 91 f5 d4 57 4a aa 05 7d 2c 4b 1b 1c 91 39 1b 94 45 55 5e 3c 7a 4c e4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 20 00 00 00 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c8 00 10 00 00 00 00 00 00 2e 40 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: rNiLX&S(i4JlG^WLIWTf7PS0es _@K]K-SpVA%DjsQQU=J`KKs~(00mj+\WJ},K9EU^<zL .@
2025-02-22 00:49:08 UTC	1369	IN	Data Raw: ed 99 db 88 e6 48 8f 54 76 ea aa 2a e5 a9 c3 3c c6 51 70 ba ea 9d 4f ab af b6 9d 2b 75 a1 b2 d3 58 9d 0c 72 cb 51 45 df 4f ab 99 f1 a4 9b b8 de 44 64 68 d5 6a 65 32 ec e4 c0 ed d6 5b fe a5 d9 7e 99 d0 55 5a 4e ef 42 94 ee a5 4b 85 6d 6a c7 14 2c 8e 27 a3 dd b9 87 ab 9e aa 89 84 4c 27 3e 7a 0b f6 a7 d3 ee a3 d5 5a 8e 2b c6 93 b9 ea 4b 2e a1 a8 a5 aa 81 6d ce 46 f2 13 47 12 45 b9 2f f4 8c 56 b7 c5 47 6f e5 53 8f 37 00 3b 57 fd 5d ab 9b 6d d0 f4 f5 0b 49 a6 af 17 7a c9 a9 2b 9d 3c 09 3c 71 72 6c 7a ef 35 15 c9 e2 b9 5a 8a 99 76 70 e4 2e 17 6b 96 a5 d3 9a 07 55 de a7 d4 f6 cb dd 45 1d 13 a6 a5 ef 7a 06 c4 d8 64 6a 2a ae f6 24 76 f6 72 9c 38 73 7a 48 f2 1d 25 74 a6 d1 5a 06 1b d6 92 ae b9 41 6e bb d7 cd 5b 6c 63 1b 50 e6 c4 f7 4b c9 a7 8e e4 47 27 8c cc 2a af Data Ascii: HTv<QpO+uXrQEODdhje2[~UZNBKmj,'L'>zZ+K.mFGE/VGoS7;W]mIz+<<qrlz5Zvp.kUEzdj$vr8szH%tZAn[lcPKG'*
2025-02-22 00:49:08 UTC	1369	IN	Data Raw: 82 22 af 40 19 6b 2e 94 0f 64 cf 65 75 2b 9b 0b 12 59 15 b3 35 51 8c 54 ca 39 78 f0 4c 71 ca 9d 98 66 8e 68 d2 48 64 6c 8c 5e 67 35 c8 a8 bf 59 1f 5b 74 8d ca 96 82 92 95 d4 54 0d 8e 2b 6b 68 df c8 55 3a 35 e5 12 4d fd e6 aa 47 c3 9b 39 eb 5e 65 e9 cb 74 bd 0d 65 be cf 1c 17 07 c6 fa 84 7b dc aa c4 6a 70 57 2a a6 55 ad 6a 2b b8 f1 54 6a 65 78 e0 a2 f0 00 00 14 00 2c b7 3b 9d 65 2d fa dd 41 05 35 3c 90 55 a3 d5 d2 be 67 35 cc dc 4c ae 1a 8d 54 5e 0a 98 e2 85 ca ae b6 9a 8d ac 75 5d 44 30 35 ee 46 31 65 91 19 bc e5 e6 44 cf 3a fa 0b 2d f6 96 e9 25 fa db 59 6e a5 a5 9a 1a 66 48 8e 49 aa 56 37 2a bd 31 84 44 63 b9 b1 cf e9 2d d7 9b 05 c6 ed 2d 3d 55 7d 2d 25 42 f2 52 43 25 22 56 cb 13 18 d7 39 15 15 1e d4 f1 b8 26 15 15 a9 9e 18 c6 38 c8 32 85 b8 51 a5 6a d1 Data Ascii: "@k.deu+Y5QT9xLqfhHdl^g5Y[tT+khU:5MG9^ete{jpWUj+Tjex,;e-A5<Ug5LT^u]D05F1eD:-%YnfHIV71Dc--=U}-%BRC%"V9&82Qj
2025-02-22 00:49:08 UTC	1369	IN	Data Raw: a8 e4 54 72 67 1d 19 4e 27 d9 e2 5c a6 36 e3 dd ee 7c 2c 5a a6 5b bd 4c 08 dd 3f 79 a5 a3 a8 45 74 55 95 31 b1 b1 b9 31 94 5c 22 ef 26 53 9b 28 5d e5 bc 5b 63 6d 5a be e1 47 9a 46 ab ea 11 27 62 ac 28 9f de 4c f8 bf 59 1e d0 5b 75 7d 7e ab b5 55 d5 d1 56 5a a1 86 27 47 58 e4 bb 24 b4 d2 e2 25 63 55 90 37 8b 78 e1 dc 7f 71 64 d1 1b 3a ba 52 5c 5d 1d ee 85 77 23 a5 a8 81 6a 15 f4 cf 82 a5 5e 8a 89 bc d4 6f 28 e4 ce 1d 97 e5 51 50 f2 ce 37 12 4d 49 be ee 13 3c bb 69 2b d9 2f 94 37 db 3b 2e 56 79 3b ea 17 b5 55 ad 6e 11 f9 4f ec aa 2f cd 77 a1 7a d0 b1 db b5 ed be e3 05 99 68 e9 2a e4 a9 b9 54 49 4e da 5c b5 24 81 63 ff 00 48 e9 38 e1 11 bf f7 4e b1 b2 bb 4d 5d 93 48 d3 db ee 16 a8 ad d5 50 2a b5 eb 1c 8c 7f 7c 2f e5 55 5b d2 bc dc 78 f0 2c 55 1a 12 aa 5b ee Data Ascii: TrgN'\6\|,Z[L?yEtU11\"&S(][cmZGF'b(LY[u}~UVZ'GX$%cU7xqd:R\]w#j^o(QP7MI<i+/7;.Vy;UnO/wzhTIN\$cH8NM]HP\|/U[x,U[
2025-02-22 00:49:08 UTC	1369	IN	Data Raw: 9b bf fb c9 c8 00 00 00 00 00 28 54 01 4c 15 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0f 9c f0 45 51 1f 27 34 6d 91 99 45 dd 72 65 32 8b 94 3e 80 06 00 00 00 00 00 00 00 00 00 00 00 38 be 46 c6 c7 3d ea 8d 63 53 2a aa b8 44 4e b5 02 aa a8 89 c4 f3 fb ba 37 5a c7 ad 76 97 59 3d 23 f7 ad d6 f6 f7 8d 33 93 99 e8 c5 5d e7 fd 6e 55 fa b0 4b 3d d1 3b 78 82 5a 5a cd 2d a2 2a 56 45 93 31 56 5c a2 77 8a 8d e6 74 71 2f 4e 79 95 df 52 75 9a aa a0 50 00 05 49 9f b9 c3 55 c7 6f bb d4 e9 fa c7 b5 90 d7 aa 49 4e e7 2e 3f a6 44 c6 ef fe 64 e6 f4 a2 75 90 b9 ce 37 ba 37 b5 ec 55 6b da b9 47 22 e1 51 4e bc 1e 25 e1 67 33 9e 1a c3 2e 5b b8 df 50 42 1b 34 db 45 2c f4 d1 5b Data Ascii: (TLEQ'4mEre2>8F=cSDN7ZvY=#3]nUK=;xZZ-VE1V\wtq/NyRuPIUoIN.?Ddu77UkG"QN%g3.[PB4E,[
2025-02-22 00:49:08 UTC	1369	IN	Data Raw: bc d9 a0 ed 52 7b a3 c2 c6 ed e6 cd 07 6a 93 dd 35 94 01 b3 5e 16 37 6f 36 68 3b 54 9e e8 f0 b1 bb 79 b3 41 da a4 f7 4d 65 00 6c d7 85 8d db cd 9a 0e d5 27 ba 3c 2c 6e de 6c d0 76 a9 3d d3 59 40 1b 35 e1 63 76 f3 66 83 b5 49 ee 8f 0b 1b b7 9b 34 1d aa 4f 74 d6 50 06 cd 78 58 dd bc d9 a0 ed 52 7b a3 c2 c6 ed e6 cd 07 6a 93 dd 35 94 01 b3 5e 16 37 6f 36 68 3b 54 9e e8 f0 b1 bb 79 b3 41 da a4 f7 4d 65 00 6c d7 85 8d db cd 9a 0e d5 27 ba 3c 2c 6e de 6c d0 76 a9 3d d3 59 40 1b 35 e1 63 76 f3 66 83 b5 49 ee 8f 0b 1b b7 9b 34 1d aa 4f 74 d6 50 06 cd 78 58 dd bc d9 a0 ed 52 7b a3 c2 c6 ed e6 cd 07 6a 93 dd 35 94 01 b3 5e 16 37 6f 36 68 3b 54 9e e8 f0 b1 bb 79 b3 41 da a4 f7 4d 65 00 6c d7 85 8d db cd 9a 0e d5 27 ba 3c 2c 6e de 6c d0 76 a9 3d d3 59 40 1b 35 e1 63 Data Ascii: R{j5^7o6h;TyAMel'<,nlv=Y@5cvfI4OtPxXR{j5^7o6h;TyAMel'<,nlv=Y@5cvfI4OtPxXR{j5^7o6h;TyAMel'<,nlv=Y@5c
2025-02-22 00:49:08 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2025-02-22 00:49:08 UTC	1369	IN	Data Raw: 8f 03 06 da b6 ca 75 06 ce 2a a2 f8 55 b1 d4 db e7 76 ec 35 b0 65 63 72 ff 00 75 73 c5 ae f4 2f d5 90 23 f0 67 9b 2c d0 11 ed 06 e0 eb 65 2d f6 92 82 eb e3 3a 2a 6a 88 64 77 2a c6 a6 55 51 cd 45 4e 1d 4b c4 90 35 17 73 26 a8 b5 db 92 7a 3b 85 0d ca 77 4b 1c 4d a7 85 8f 6b 97 79 c8 8a e5 57 26 11 11 17 2a ab d0 8a 04 06 0d 9f b1 77 2e d2 dc ec e9 50 dd 6b 4d 3d 4a 6f 32 4e f2 a7 6c d0 b2 44 e7 6e fe fe 57 0b cf c1 17 d0 40 da f3 46 dd 34 4e ac a8 b0 dd d2 3e f8 8d 5a ac 91 ae c3 25 63 be 6b d1 57 a1 7d 3c dc 40 b0 db a8 ea 2e 15 b0 51 d1 42 f9 ea a7 7a 47 14 4c 4c b9 ee 55 c2 22 19 96 d7 b4 1b b6 79 7d b6 da 66 a9 5a 8a b9 6d d1 55 54 2e 11 1a c9 1c e7 a3 9a de b4 4d de 75 36 63 b9 af 65 36 3b 05 2a 6a 29 ee 36 db d5 f3 e6 23 e8 e7 64 f0 d1 2a a7 16 a3 9a Data Ascii: uUv5ecrus/#g,e-:jdwUQENK5s&z;wKMkyW&w.PkM=Jo2NlDnW@F4N>Z%ckW}<@.QBzGLLU"y}fZmUT.Mu6ce6;j)6#d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49745	104.18.160.117	443	5544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-22 00:49:08 UTC	398	OUT	GET /668e5482841a316753518fba/js/webflow.4e8135d87.js HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-22 00:49:08 UTC	638	IN	HTTP/1.1 200 OK Date: Sat, 22 Feb 2025 00:49:08 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close x-amz-id-2: fuLJ+gnWnGYDtoJpgOK38IOCWuhVSs0zcdMREiFuGorvH92BIA6G0nSmkIcHYpZ7n1FXxejAYsM= x-amz-request-id: PB6GXTAB39V35V59 Last-Modified: Wed, 10 Jul 2024 09:31:02 GMT ETag: W/"48bd2b847a93ac70ad46484a35db1786" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000, immutable x-amz-version-id: 2a89RVcnthdvTTTU3pnfrf9kIUpTA.TF CF-Cache-Status: HIT Age: 69815 Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 915af97aa986de93-EWR alt-svc: h3=":443"; ma=86400
2025-02-22 00:49:08 UTC	731	IN	Data Raw: 37 64 33 33 0d 0a 0a 2f 2a 21 0a 20 2a 20 57 65 62 66 6c 6f 77 3a 20 46 72 6f 6e 74 2d 65 6e 64 20 73 69 74 65 20 6c 69 62 72 61 72 79 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 4d 49 54 0a 20 2a 20 49 6e 6c 69 6e 65 20 73 63 72 69 70 74 73 20 6d 61 79 20 61 63 63 65 73 73 20 74 68 65 20 61 70 69 20 75 73 69 6e 67 20 61 6e 20 61 73 79 6e 63 20 68 61 6e 64 6c 65 72 3a 0a 20 2a 20 20 20 76 61 72 20 57 65 62 66 6c 6f 77 20 3d 20 57 65 62 66 6c 6f 77 20 7c 7c 20 5b 5d 3b 0a 20 2a 20 20 20 57 65 62 66 6c 6f 77 2e 70 75 73 68 28 72 65 61 64 79 46 75 6e 63 74 69 6f 6e 29 3b 0a 20 2a 2f 0a 0a 28 28 29 3d 3e 7b 76 61 72 20 6c 74 3d 28 65 2c 79 29 3d 3e 28 29 3d 3e 28 79 7c 7c 65 28 28 79 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 29 2e 65 78 70 6f 72 74 73 2c 79 29 2c 79 Data Ascii: 7d33/! Webflow: Front-end site library * @license MIT * Inline scripts may access the api using an async handler: * var Webflow = Webflow \|\| []; * Webflow.push(readyFunction); */(()=>{var lt=(e,y)=>()=>(y\|\|e((y={exports:{}}).exports,y),y
2025-02-22 00:49:08 UTC	1369	IN	Data Raw: 74 20 6d 61 74 63 68 20 5b 22 2b 74 2b 22 5d 3a 20 22 2b 6e 2b 22 2c 20 22 2b 69 29 7d 66 75 6e 63 74 69 6f 6e 20 49 28 74 2c 6e 2c 69 29 7b 69 66 28 6e 21 3d 3d 76 6f 69 64 20 30 26 26 28 69 3d 6e 29 2c 74 3d 3d 3d 76 6f 69 64 20 30 29 72 65 74 75 72 6e 20 69 3b 76 61 72 20 72 3d 69 3b 72 65 74 75 72 6e 20 77 65 2e 74 65 73 74 28 74 29 7c 7c 21 58 74 2e 74 65 73 74 28 74 29 3f 72 3d 70 61 72 73 65 49 6e 74 28 74 2c 31 30 29 3a 58 74 2e 74 65 73 74 28 74 29 26 26 28 72 3d 31 65 33 2a 70 61 72 73 65 46 6c 6f 61 74 28 74 29 29 2c 30 3e 72 26 26 28 72 3d 30 29 2c 72 3d 3d 3d 72 3f 72 3a 69 7d 66 75 6e 63 74 69 6f 6e 20 42 28 74 29 7b 65 74 2e 64 65 62 75 67 26 26 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 74 29 7d 66 Data Ascii: t match ["+t+"]: "+n+", "+i)}function I(t,n,i){if(n!==void 0&&(i=n),t===void 0)return i;var r=i;return we.test(t)\|\|!Xt.test(t)?r=parseInt(t,10):Xt.test(t)&&(r=1e3*parseFloat(t)),0>r&&(r=0),r===r?r:i}function B(t){et.debug&&window&&window.console.warn(t)}f
2025-02-22 00:49:08 UTC	1369	IN	Data Raw: 6e 7d 5d 2c 22 65 61 73 65 2d 69 6e 2d 71 75 61 64 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 35 35 30 2c 20 30 2e 30 38 35 2c 20 30 2e 36 38 30 2c 20 30 2e 35 33 30 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 29 7b 72 65 74 75 72 6e 20 69 2a 28 74 2f 3d 72 29 2a 74 2b 6e 7d 5d 2c 22 65 61 73 65 2d 6f 75 74 2d 71 75 61 64 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 32 35 30 2c 20 30 2e 34 36 30 2c 20 30 2e 34 35 30 2c 20 30 2e 39 34 30 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 29 7b 72 65 74 75 72 6e 2d 69 2a 28 74 2f 3d 72 29 2a 28 74 2d 32 29 2b 6e 7d 5d 2c 22 65 61 73 65 2d 69 6e 2d 6f 75 74 2d 71 75 61 64 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 35 35 2c 20 30 2e 30 33 30 2c 20 Data Ascii: n}],"ease-in-quad":["cubic-bezier(0.550, 0.085, 0.680, 0.530)",function(t,n,i,r){return i(t/=r)t+n}],"ease-out-quad":["cubic-bezier(0.250, 0.460, 0.450, 0.940)",function(t,n,i,r){return-i(t/=r)(t-2)+n}],"ease-in-out-quad":["cubic-bezier(0.455, 0.030,
2025-02-22 00:49:08 UTC	1369	IN	Data Raw: 65 2d 69 6e 2d 73 69 6e 65 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 37 30 2c 20 30 2c 20 30 2e 37 34 35 2c 20 30 2e 37 31 35 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 29 7b 72 65 74 75 72 6e 2d 69 2a 4d 61 74 68 2e 63 6f 73 28 74 2f 72 2a 28 4d 61 74 68 2e 50 49 2f 32 29 29 2b 69 2b 6e 7d 5d 2c 22 65 61 73 65 2d 6f 75 74 2d 73 69 6e 65 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 33 39 30 2c 20 30 2e 35 37 35 2c 20 30 2e 35 36 35 2c 20 31 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 29 7b 72 65 74 75 72 6e 20 69 2a 4d 61 74 68 2e 73 69 6e 28 74 2f 72 2a 28 4d 61 74 68 2e 50 49 2f 32 29 29 2b 6e 7d 5d 2c 22 65 61 73 65 2d 69 6e 2d 6f 75 74 2d 73 69 6e 65 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 Data Ascii: e-in-sine":["cubic-bezier(0.470, 0, 0.745, 0.715)",function(t,n,i,r){return-iMath.cos(t/r(Math.PI/2))+i+n}],"ease-out-sine":["cubic-bezier(0.390, 0.575, 0.565, 1)",function(t,n,i,r){return iMath.sin(t/r(Math.PI/2))+n}],"ease-in-out-sine":["cubic-bezie
2025-02-22 00:49:08 UTC	1369	IN	Data Raw: 26 28 73 3d 31 2e 37 30 31 35 38 29 2c 69 2a 28 28 74 3d 74 2f 72 2d 31 29 2a 74 2a 28 28 73 2b 31 29 2a 74 2b 73 29 2b 31 29 2b 6e 7d 5d 2c 22 65 61 73 65 2d 69 6e 2d 6f 75 74 2d 62 61 63 6b 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 36 38 30 2c 20 2d 30 2e 35 35 30 2c 20 30 2e 32 36 35 2c 20 31 2e 35 35 30 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 2c 73 29 7b 72 65 74 75 72 6e 20 73 3d 3d 3d 76 6f 69 64 20 30 26 26 28 73 3d 31 2e 37 30 31 35 38 29 2c 28 74 2f 3d 72 2f 32 29 3c 31 3f 69 2f 32 2a 74 2a 74 2a 28 28 28 73 2a 3d 31 2e 35 32 35 29 2b 31 29 2a 74 2d 73 29 2b 6e 3a 69 2f 32 2a 28 28 74 2d 3d 32 29 2a 74 2a 28 28 28 73 2a 3d 31 2e 35 32 35 29 2b 31 29 2a 74 2b 73 29 2b 32 29 2b 6e 7d 5d 7d 2c 57 3d 7b 22 65 61 73 65 Data Ascii: &(s=1.70158),i((t=t/r-1)t((s+1)t+s)+1)+n}],"ease-in-out-back":["cubic-bezier(0.680, -0.550, 0.265, 1.550)",function(t,n,i,r,s){return s===void 0&&(s=1.70158),(t/=r/2)<1?i/2tt(((s=1.525)+1)t-s)+n:i/2((t-=2)t(((s=1.525)+1)t+s)+2)+n}]},W={"ease
2025-02-22 00:49:08 UTC	1369	IN	Data Raw: 61 6d 65 7c 7c 48 2e 6d 73 52 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 3b 72 65 74 75 72 6e 20 74 26 26 68 2e 62 69 6e 64 3f 74 2e 62 69 6e 64 28 48 29 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 48 2e 73 65 74 54 69 6d 65 6f 75 74 28 6e 2c 31 36 29 7d 7d 28 29 2c 63 74 3d 79 2e 6e 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 48 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2c 6e 3d 74 26 26 28 74 2e 6e 6f 77 7c 7c 74 2e 77 65 62 6b 69 74 4e 6f 77 7c 7c 74 2e 6d 73 4e 6f 77 7c 7c 74 2e 6d 6f 7a 4e 6f 77 29 3b 72 65 74 75 72 6e 20 6e 26 26 68 2e 62 69 6e 64 3f 6e 2e 62 69 6e 64 28 74 29 3a 44 61 74 65 2e 6e 6f 77 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 2b 6e 65 77 20 44 61 74 65 7d 7d 28 29 2c 70 74 3d 50 28 66 75 6e 63 Data Ascii: ame\|\|H.msRequestAnimationFrame;return t&&h.bind?t.bind(H):function(n){H.setTimeout(n,16)}}(),ct=y.now=function(){var t=H.performance,n=t&&(t.now\|\|t.webkitNow\|\|t.msNow\|\|t.mozNow);return n&&h.bind?n.bind(t):Date.now\|\|function(){return+new Date}}(),pt=P(func
2025-02-22 00:49:08 UTC	1369	IN	Data Raw: 74 69 6f 6e 73 3a 77 7d 29 3a 28 74 68 69 73 2e 74 69 6d 65 72 3d 6e 65 77 20 71 74 28 7b 64 75 72 61 74 69 6f 6e 3a 77 2c 63 6f 6e 74 65 78 74 3a 74 68 69 73 2c 63 6f 6d 70 6c 65 74 65 3a 6f 7d 29 2c 74 68 69 73 2e 61 63 74 69 76 65 3d 21 30 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 77 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 61 63 74 69 76 65 3f 28 74 68 69 73 2e 71 75 65 75 65 2e 70 75 73 68 28 7b 6f 70 74 69 6f 6e 73 3a 77 2c 61 72 67 73 3a 61 72 67 75 6d 65 6e 74 73 7d 29 2c 76 6f 69 64 28 74 68 69 73 2e 74 69 6d 65 72 2e 63 6f 6d 70 6c 65 74 65 3d 6f 29 29 3a 42 28 22 4e 6f 20 61 63 74 69 76 65 20 74 72 61 6e 73 69 74 69 6f 6e 20 74 69 6d 65 72 2e 20 55 73 65 20 73 74 61 72 74 28 29 20 6f 72 20 77 61 69 74 28 29 20 62 65 66 6f 72 65 20 74 68 65 6e 28 Data Ascii: tions:w}):(this.timer=new qt({duration:w,context:this,complete:o}),this.active=!0)}function s(w){return this.active?(this.queue.push({options:w,args:arguments}),void(this.timer.complete=o)):B("No active transition timer. Use start() or wait() before then(
2025-02-22 00:49:08 UTC	1369	IN	Data Raw: 59 2e 63 61 6c 6c 28 74 68 69 73 2c 6e 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 77 29 7b 77 2e 73 74 6f 70 28 29 7d 66 75 6e 63 74 69 6f 6e 20 41 74 28 77 2c 4f 29 7b 77 2e 73 65 74 28 4f 29 7d 66 75 6e 63 74 69 6f 6e 20 67 65 28 77 29 7b 74 68 69 73 2e 24 65 6c 2e 63 73 73 28 77 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 74 28 77 2c 4f 29 7b 74 5b 77 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 68 69 6c 64 72 65 6e 3f 79 65 2e 63 61 6c 6c 28 74 68 69 73 2c 4f 2c 61 72 67 75 6d 65 6e 74 73 29 3a 28 74 68 69 73 2e 65 6c 26 26 4f 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 2c 74 68 69 73 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 77 2c 4f 29 7b 76 61 72 20 59 2c 4e 3d 74 68 69 73 2e 63 68 69 6c 64 72 65 6e Data Ascii: Y.call(this,nt)}function j(w){w.stop()}function At(w,O){w.set(O)}function ge(w){this.$el.css(w)}function ot(w,O){t[w]=function(){return this.children?ye.call(this,O,arguments):(this.el&&O.apply(this,arguments),this)}}function ye(w,O){var Y,N=this.children
2025-02-22 00:49:08 UTC	1369	IN	Data Raw: 3d 66 75 6e 63 74 69 6f 6e 28 6f 2c 70 2c 78 2c 4b 29 7b 74 68 69 73 2e 24 65 6c 3d 6f 2c 74 68 69 73 2e 65 6c 3d 6f 5b 30 5d 3b 76 61 72 20 63 3d 70 5b 30 5d 3b 78 5b 32 5d 26 26 28 63 3d 78 5b 32 5d 29 2c 48 74 5b 63 5d 26 26 28 63 3d 48 74 5b 63 5d 29 2c 74 68 69 73 2e 6e 61 6d 65 3d 63 2c 74 68 69 73 2e 74 79 70 65 3d 78 5b 31 5d 2c 74 68 69 73 2e 64 75 72 61 74 69 6f 6e 3d 49 28 70 5b 31 5d 2c 74 68 69 73 2e 64 75 72 61 74 69 6f 6e 2c 73 2e 64 75 72 61 74 69 6f 6e 29 2c 74 68 69 73 2e 65 61 73 65 3d 69 28 70 5b 32 5d 2c 74 68 69 73 2e 65 61 73 65 2c 73 2e 65 61 73 65 29 2c 74 68 69 73 2e 64 65 6c 61 79 3d 49 28 70 5b 33 5d 2c 74 68 69 73 2e 64 65 6c 61 79 2c 73 2e 64 65 6c 61 79 29 2c 74 68 69 73 2e 73 70 61 6e 3d 74 68 69 73 2e 64 75 72 61 74 69 6f Data Ascii: =function(o,p,x,K){this.$el=o,this.el=o[0];var c=p[0];x[2]&&(c=x[2]),Ht[c]&&(c=Ht[c]),this.name=c,this.type=x[1],this.duration=I(p[1],this.duration,s.duration),this.ease=i(p[2],this.ease,s.ease),this.delay=I(p[3],this.delay,s.delay),this.span=this.duratio
2025-02-22 00:49:08 UTC	1369	IN	Data Raw: 53 74 79 6c 65 29 26 26 28 74 68 69 73 2e 61 63 74 69 76 65 3d 21 31 2c 74 68 69 73 2e 6e 65 78 74 53 74 79 6c 65 3d 6e 75 6c 6c 2c 62 74 28 74 68 69 73 2e 65 6c 2c 74 68 69 73 2e 6e 61 6d 65 2c 74 68 69 73 2e 67 65 74 28 29 29 29 3b 76 61 72 20 6f 3d 74 68 69 73 2e 74 77 65 65 6e 3b 6f 26 26 6f 2e 63 6f 6e 74 65 78 74 26 26 6f 2e 64 65 73 74 72 6f 79 28 29 7d 2c 74 2e 63 6f 6e 76 65 72 74 3d 66 75 6e 63 74 69 6f 6e 28 6f 2c 70 29 7b 69 66 28 6f 3d 3d 22 61 75 74 6f 22 26 26 74 68 69 73 2e 61 75 74 6f 29 72 65 74 75 72 6e 20 6f 3b 76 61 72 20 78 2c 4b 3d 74 79 70 65 6f 66 20 6f 3d 3d 22 6e 75 6d 62 65 72 22 2c 63 3d 74 79 70 65 6f 66 20 6f 3d 3d 22 73 74 72 69 6e 67 22 3b 73 77 69 74 63 68 28 70 29 7b 63 61 73 65 20 66 3a 69 66 28 4b 29 72 65 74 75 72 6e Data Ascii: Style)&&(this.active=!1,this.nextStyle=null,bt(this.el,this.name,this.get()));var o=this.tween;o&&o.context&&o.destroy()},t.convert=function(o,p){if(o=="auto"&&this.auto)return o;var x,K=typeof o=="number",c=typeof o=="string";switch(p){case f:if(K)return

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49748	104.18.160.117	443	5544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-22 00:49:08 UTC	617	OUT	GET /img/favicon.ico HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hub-ledge-live-wallet.webflow.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-22 00:49:09 UTC	645	IN	HTTP/1.1 200 OK Date: Sat, 22 Feb 2025 00:49:09 GMT Content-Type: image/x-icon Content-Length: 15086 Connection: close x-amz-id-2: QRs3q+dhKhAMTlvzYZ9HsOXkYLhQn66tiVr3vbhVW/V2FbAxceQ9QjMXwPqcyzjtLgD1BjyzKEE= x-amz-request-id: BSTN61CAHM9SMTMC Last-Modified: Thu, 05 Oct 2023 23:38:20 GMT ETag: "1f894f487d068a2ced95d5cd4f88598c" x-amz-server-side-encryption: AES256 Cache-Control: max-age=84600, must-revalidate x-amz-version-id: C5TuT6ObkzP1GjuEGkIHJatwDHqj5J6N CF-Cache-Status: HIT Age: 30839 Accept-Ranges: bytes Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 915af97faddac46b-EWR alt-svc: h3=":443"; ma=86400
2025-02-22 00:49:09 UTC	724	IN	Data Raw: 00 00 01 00 03 00 30 30 00 00 01 00 20 00 a8 25 00 00 36 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 de 25 00 00 10 10 00 00 01 00 20 00 68 04 00 00 86 36 00 00 28 00 00 00 30 00 00 00 60 00 00 00 01 00 20 00 00 00 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 39 32 2b 88 39 32 2b f3 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 Data Ascii: 00 %6 % h6(0` $92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+9
2025-02-22 00:49:09 UTC	1369	IN	Data Raw: 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 Data Ascii: +92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+9
2025-02-22 00:49:09 UTC	1369	IN	Data Raw: ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 Data Ascii: 92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92
2025-02-22 00:49:09 UTC	1369	IN	Data Raw: f8 f8 f8 ff f8 f8 f8 ff f8 f8 f8 ff f7 f7 f7 ff 8e 8a 86 ff 37 30 29 ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 38 30 29 ff 50 49 43 ff e0 e0 df ff f8 f9 f9 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f9 f9 f9 ff f9 f9 f9 ff e2 e1 e0 ff 9a 96 93 ff 4b 44 3e ff 44 3d 36 ff c9 c7 c5 ff f9 fa fa ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f9 f9 f9 ff d6 d5 d4 ff 4f 49 42 ff 38 31 29 ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b Data Ascii: 70)92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+80)PICKD>D=6OIB81)92+92+92+92+92+92+92+92+92+
2025-02-22 00:49:09 UTC	1369	IN	Data Raw: f9 f9 ff de dd dc ff 56 50 4a ff 37 30 29 ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 38 31 2a ff 4b 45 3f ff c0 be bc ff d3 d2 d1 ff d2 d1 d0 ff d2 d1 d0 ff d1 cf ce ff d9 d8 d6 ff f5 f4 f4 ff f8 f8 f8 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f8 f8 f8 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f8 f8 f8 ff 9c 99 96 ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff Data Ascii: VPJ70)92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+81*KE?92+92+92+92+92+92+92+92+92+92+92+92+92+
2025-02-22 00:49:09 UTC	1369	IN	Data Raw: 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 3c 36 2f ff 53 4d 47 ff 57 51 4b ff 56 50 4b ff 56 50 4b ff 56 50 4b ff 57 51 4b ff 50 4a 44 ff 3b 34 2d ff 38 31 2a ff 41 3a 33 ff 56 50 4a ff 56 51 4b ff 56 50 4b ff 57 51 4b ff 54 4e 48 ff 3f 38 31 ff 39 32 2a ff 3a 33 2d ff 50 4a 44 ff 57 51 4b ff 56 50 4b ff 56 50 4b ff 56 50 4b ff 56 50 4b ff 57 51 4b ff 4f 49 43 ff 3a 33 2c ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 Data Ascii: +92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+<6/SMGWQKVPKVPKVPKWQKPJD;4-81A:3VPJVQKVPKWQKTNH?8192:3-PJDWQKVPKVPKVPKVPKWQKOIC:3,92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+9
2025-02-22 00:49:09 UTC	1369	IN	Data Raw: ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 Data Ascii: 92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92
2025-02-22 00:49:09 UTC	1369	IN	Data Raw: 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b f3 39 32 2b 89 39 32 2b f4 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b Data Ascii: 92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+
2025-02-22 00:49:09 UTC	1369	IN	Data Raw: 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff Data Ascii: 2+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+
2025-02-22 00:49:09 UTC	1369	IN	Data Raw: 2b ff 39 32 2b ff 3c 35 2e ff 54 4e 48 ff 76 72 6d ff b2 b0 ad ff eb ea ea ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f8 f8 f8 ff f3 f3 f3 ff f6 f6 f6 ff f7 f7 f7 ff f7 f7 f7 ff f8 f8 f8 ff ef ef ef ff 72 6d 68 ff 36 2f 28 ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 3f 39 32 ff 68 63 5d ff 6e 69 64 ff 74 6f 6b ff b1 ae ab ff f5 f5 f5 ff f7 f8 f8 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f8 f8 f8 ff f7 f7 f7 ff f7 f7 f7 ff fa fa fa ff c0 be bc ff 41 3b 34 ff 38 31 2a ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 Data Ascii: +92+<5.TNHvrmrmh6/(92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+?92hc]nidtokA;481*92+92+92+92+92+92+92+92+92+92+92+92+9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49747	18.244.20.109	443	5544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-22 00:49:09 UTC	416	OUT	GET /js/jquery-3.5.1.min.dc5e7f18c8.js?site=668e5482841a316753518fba HTTP/1.1 Host: d3e54v103j8qbb.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-22 00:49:09 UTC	616	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 89476 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Mon, 20 Jul 2020 17:53:02 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Sat, 22 Feb 2025 00:25:23 GMT Cache-Control: max-age=84600, must-revalidate Etag: "dc5e7f18c8d36ac1d3d4753a87c98d0a" Via: 1.1 6571e9f709b2287f8a30275c17d07140.cloudfront.net (CloudFront) Age: 1427 X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P11 X-Amz-Cf-Id: r6_ZvOl_YBwNuqjDYPgd1fB7YxuUGm1DkFxPrsIetAMDEnHdBz_3Vg==
2025-02-22 00:49:09 UTC	15768	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 Data Ascii: /! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery
2025-02-22 00:49:09 UTC	16384	IN	Data Raw: 34 29 2c 78 3d 22 6f 66 2d 74 79 70 65 22 3d 3d 3d 65 3b 72 65 74 75 72 6e 20 31 3d 3d 3d 67 26 26 30 3d 3d 3d 76 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 21 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 2c 61 2c 73 2c 75 2c 6c 3d 79 21 3d 3d 6d 3f 22 6e 65 78 74 53 69 62 6c 69 6e 67 22 3a 22 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 22 2c 63 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 66 3d 78 26 26 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 70 3d 21 6e 26 26 21 78 2c 64 3d 21 31 3b 69 66 28 63 29 7b 69 66 28 79 29 7b 77 68 69 6c 65 28 6c 29 7b 61 3d 65 3b 77 68 69 6c 65 28 61 3d 61 5b 6c 5d 29 69 66 28 78 3f 61 2e 6e 6f 64 65 4e 61 Data Ascii: 4),x="of-type"===e;return 1===g&&0===v?function(e){return!!e.parentNode}:function(e,t,n){var r,i,o,a,s,u,l=y!==m?"nextSibling":"previousSibling",c=e.parentNode,f=x&&e.nodeName.toLowerCase(),p=!n&&!x,d=!1;if(c){if(y){while(l){a=e;while(a=a[l])if(x?a.nodeNa
2025-02-22 00:49:09 UTC	16384	IN	Data Raw: 2e 72 65 61 64 79 53 74 61 74 65 7c 7c 22 6c 6f 61 64 69 6e 67 22 21 3d 3d 45 2e 72 65 61 64 79 53 74 61 74 65 26 26 21 45 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 64 6f 53 63 72 6f 6c 6c 3f 43 2e 73 65 74 54 69 6d 65 6f 75 74 28 53 2e 72 65 61 64 79 29 3a 28 45 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 42 29 2c 43 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 42 29 29 3b 76 61 72 20 24 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 29 7b 76 61 72 20 73 3d 30 2c 75 3d 65 2e 6c 65 6e 67 74 68 2c 6c 3d 6e 75 6c 6c 3d 3d 6e 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 77 28 6e 29 29 66 6f 72 28 73 20 69 6e 20 69 3d 21 30 2c 6e 29 Data Ascii: .readyState\|\|"loading"!==E.readyState&&!E.documentElement.doScroll?C.setTimeout(S.ready):(E.addEventListener("DOMContentLoaded",B),C.addEventListener("load",B));var $=function(e,t,n,r,i,o,a){var s=0,u=e.length,l=null==n;if("object"===w(n))for(s in i=!0,n)
2025-02-22 00:49:09 UTC	16384	IN	Data Raw: 5f 65 76 61 6c 55 72 6c 26 26 21 75 2e 6e 6f 4d 6f 64 75 6c 65 26 26 53 2e 5f 65 76 61 6c 55 72 6c 28 75 2e 73 72 63 2c 7b 6e 6f 6e 63 65 3a 75 2e 6e 6f 6e 63 65 7c 7c 75 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 29 7d 2c 6c 29 3a 62 28 75 2e 74 65 78 74 43 6f 6e 74 65 6e 74 2e 72 65 70 6c 61 63 65 28 6a 65 2c 22 22 29 2c 75 2c 6c 29 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 52 65 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 2c 69 3d 74 3f 53 2e 66 69 6c 74 65 72 28 74 2c 65 29 3a 65 2c 6f 3d 30 3b 6e 75 6c 6c 21 3d 28 72 3d 69 5b 6f 5d 29 3b 6f 2b 2b 29 6e 7c 7c 31 21 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 7c 7c 53 2e 63 6c 65 61 6e 44 61 74 61 28 76 65 28 72 29 29 2c 72 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 28 Data Ascii: _evalUrl&&!u.noModule&&S._evalUrl(u.src,{nonce:u.nonce\|\|u.getAttribute("nonce")},l):b(u.textContent.replace(je,""),u,l))}return n}function Re(e,t,n){for(var r,i=t?S.filter(t,e):e,o=0;null!=(r=i[o]);o++)n\|\|1!==r.nodeType\|\|S.cleanData(ve(r)),r.parentNode&&(
2025-02-22 00:49:09 UTC	16384	IN	Data Raw: 3a 32 30 30 2c 5f 64 65 66 61 75 6c 74 3a 34 30 30 7d 2c 53 2e 66 6e 2e 64 65 6c 61 79 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 65 29 7b 72 65 74 75 72 6e 20 72 3d 53 2e 66 78 26 26 53 2e 66 78 2e 73 70 65 65 64 73 5b 72 5d 7c 7c 72 2c 65 3d 65 7c 7c 22 66 78 22 2c 74 68 69 73 2e 71 75 65 75 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 43 2e 73 65 74 54 69 6d 65 6f 75 74 28 65 2c 72 29 3b 74 2e 73 74 6f 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 43 2e 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 6e 29 7d 7d 29 7d 2c 72 74 3d 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 2c 69 74 3d 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 65 6c 65 63 74 22 29 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 45 2e 63 72 65 61 74 65 Data Ascii: :200,_default:400},S.fn.delay=function(r,e){return r=S.fx&&S.fx.speeds[r]\|\|r,e=e\|\|"fx",this.queue(e,function(e,t){var n=C.setTimeout(e,r);t.stop=function(){C.clearTimeout(n)}})},rt=E.createElement("input"),it=E.createElement("select").appendChild(E.create
2025-02-22 00:49:09 UTC	8172	IN	Data Raw: 74 68 69 73 2e 70 61 72 65 6e 74 28 65 29 2e 6e 6f 74 28 22 62 6f 64 79 22 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 53 28 74 68 69 73 29 2e 72 65 70 6c 61 63 65 57 69 74 68 28 74 68 69 73 2e 63 68 69 6c 64 4e 6f 64 65 73 29 7d 29 2c 74 68 69 73 7d 7d 29 2c 53 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2e 68 69 64 64 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 53 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2e 76 69 73 69 62 6c 65 28 65 29 7d 2c 53 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2e 76 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 21 28 65 2e 6f 66 66 73 65 74 57 69 64 74 68 7c 7c 65 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7c 7c 65 2e 67 65 74 43 6c 69 65 6e 74 52 65 63 74 73 28 29 2e 6c 65 6e Data Ascii: this.parent(e).not("body").each(function(){S(this).replaceWith(this.childNodes)}),this}}),S.expr.pseudos.hidden=function(e){return!S.expr.pseudos.visible(e)},S.expr.pseudos.visible=function(e){return!!(e.offsetWidth\|\|e.offsetHeight\|\|e.getClientRects().len

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49749	104.18.160.117	443	5544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-22 00:49:09 UTC	417	OUT	GET /668e5482841a316753518fba/668e54a8bab248f55f906ae7_Ledger-p-1600.jpg HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-22 00:49:09 UTC	699	IN	HTTP/1.1 200 OK Date: Sat, 22 Feb 2025 00:49:09 GMT Content-Type: image/jpg Content-Length: 274976 Connection: close Cache-Control: max-age=31536000, must-revalidate Cf-Bgj: h2pri ETag: "9d7ba52216a093879805daab5bceefef" Last-Modified: Wed, 10 Jul 2024 09:30:21 GMT x-amz-id-2: 3lR/WpRkatUvRlQnYfNTriXyhgOSEHN9o/0U8bxtrtS7PFKjt3SaLadfPeipBMUya5bwAgA0JCY= x-amz-request-id: KBHVFKAZH3WMQS03 x-amz-server-side-encryption: AES256 x-amz-storage-class: INTELLIGENT_TIERING x-amz-version-id: 4fTgWBh2dsOUPdyIz4ZdD1kkCBRjRMUD CF-Cache-Status: HIT Age: 1 Accept-Ranges: bytes Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 915af982ca5143a6-EWR alt-svc: h3=":443"; ma=86400
2025-02-22 00:49:09 UTC	670	IN	Data Raw: ff d8 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 ff c0 00 11 08 0e 34 06 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 01 04 03 01 00 00 00 00 00 00 00 00 00 00 00 07 01 05 06 08 02 04 09 03 ff c4 00 65 10 00 01 03 03 01 03 05 0a 09 08 06 08 04 03 01 11 00 01 02 03 04 05 11 06 07 12 21 13 31 41 51 94 08 14 18 22 55 56 61 71 91 d2 15 16 17 32 37 81 b2 d1 d3 53 54 74 92 93 a1 a2 b1 23 Data Ascii: C%# , #&')*)-0-(0%()(C(((((((((((((((((((((((((((((((((((((((((((((((((((4@"e!1AQ"UVaq27STt#
2025-02-22 00:49:09 UTC	1369	IN	Data Raw: b6 7f 94 78 33 6b ef c9 da bb 67 f9 40 84 01 37 f8 33 6b ef c9 da bb 67 f9 47 83 36 be fc 9d ab b6 7f 94 08 40 13 7f 83 36 be fc 9d ab b6 7f 94 78 33 6b ef c9 da bb 67 f9 40 84 01 37 f8 33 6b ef c9 da bb 67 f9 47 83 36 be fc 9d ab b6 7f 94 08 40 13 7f 83 36 be fc 9d ab b6 7f 94 78 33 6b ef c9 da bb 67 f9 40 84 01 37 f8 33 6b ef c9 da bb 67 f9 47 83 36 be fc 9d ab b6 7f 94 08 40 13 7f 83 36 be fc 9d ab b6 7f 94 78 33 6b ef c9 da bb 67 f9 40 84 01 37 f8 33 6b ef c9 da bb 67 f9 47 83 36 be fc 9d ab b6 7f 94 08 40 13 7f 83 36 be fc 9d ab b6 7f 94 78 33 6b ef c9 da bb 67 f9 40 84 01 37 f8 33 6b ef c9 da bb 67 f9 47 83 36 be fc 9d ab b6 7f 94 08 40 13 7f 83 36 be fc 9d ab b6 7f 94 78 33 6b ef c9 da bb 67 f9 40 84 01 37 f8 33 6b ef c9 da bb 67 f9 47 83 36 be fc Data Ascii: x3kg@73kgG6@6x3kg@73kgG6@6x3kg@73kgG6@6x3kg@73kgG6@6x3kg@73kgG6@6x3kg@73kgG6
2025-02-22 00:49:09 UTC	1369	IN	Data Raw: 1a ae c6 16 47 f3 b9 eb e9 72 e5 4e de a9 ae 96 d7 a6 ae b5 f4 c8 d5 9e 9a 92 69 d8 8f 4c a6 f3 58 e7 26 53 ab 28 05 cd 10 a9 12 e9 69 b6 9f a8 34 cd a6 f1 15 eb 4a c3 1d c2 92 2a b6 c6 eb 6c ca ac 47 b1 1d 85 5e 57 8a a6 4c f7 49 c3 a8 a0 a3 99 ba aa b6 d9 57 54 b2 66 37 50 53 be 16 a3 30 9c 15 1c e7 65 73 9e 20 5f 40 00 00 00 00 00 01 d3 bc b2 be 4b 5d 4b 2d 13 53 c3 70 56 2a 41 25 44 6a f8 da ee 85 73 51 51 55 3d 4a 60 bf 07 ed 4b cb fa 4b ff 00 c5 73 7e 28 12 30 30 6d 91 6a 2b b6 a2 b1 5c a4 bf ba 91 f5 d4 57 4a aa 05 7d 2c 4b 1b 1c 91 39 1b 94 45 55 5e 3c 7a 4c e4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 20 00 00 00 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c8 00 10 00 00 00 00 00 00 2e 40 00 00 00 00 00 Data Ascii: GrNiLX&S(i4JlG^WLIWTf7PS0es _@K]K-SpVA%DjsQQU=J`KKs~(00mj+\WJ},K9EU^<zL .@
2025-02-22 00:49:09 UTC	1369	IN	Data Raw: a7 6d 5d 2a 51 2d 3c 94 ed 99 db 88 e6 48 8f 54 76 ea aa 2a e5 a9 c3 3c c6 51 70 ba ea 9d 4f ab af b6 9d 2b 75 a1 b2 d3 58 9d 0c 72 cb 51 45 df 4f ab 99 f1 a4 9b b8 de 44 64 68 d5 6a 65 32 ec e4 c0 ed d6 5b fe a5 d9 7e 99 d0 55 5a 4e ef 42 94 ee a5 4b 85 6d 6a c7 14 2c 8e 27 a3 dd b9 87 ab 9e aa 89 84 4c 27 3e 7a 0b f6 a7 d3 ee a3 d5 5a 8e 2b c6 93 b9 ea 4b 2e a1 a8 a5 aa 81 6d ce 46 f2 13 47 12 45 b9 2f f4 8c 56 b7 c5 47 6f e5 53 8f 37 00 3b 57 fd 5d ab 9b 6d d0 f4 f5 0b 49 a6 af 17 7a c9 a9 2b 9d 3c 09 3c 71 72 6c 7a ef 35 15 c9 e2 b9 5a 8a 99 76 70 e4 2e 17 6b 96 a5 d3 9a 07 55 de a7 d4 f6 cb dd 45 1d 13 a6 a5 ef 7a 06 c4 d8 64 6a 2a ae f6 24 76 f6 72 9c 38 73 7a 48 f2 1d 25 74 a6 d1 5a 06 1b d6 92 ae b9 41 6e bb d7 cd 5b 6c 63 1b 50 e6 c4 f7 4b c9 a7 Data Ascii: m]Q-<HTv<QpO+uXrQEODdhje2[~UZNBKmj,'L'>zZ+K.mFGE/VGoS7;W]mIz+<<qrlz5Zvp.kUEzdj*$vr8szH%tZAn[lcPK
2025-02-22 00:49:09 UTC	1369	IN	Data Raw: 56 31 77 17 3b cb e3 3b 82 22 af 40 19 6b 2e 94 0f 64 cf 65 75 2b 9b 0b 12 59 15 b3 35 51 8c 54 ca 39 78 f0 4c 71 ca 9d 98 66 8e 68 d2 48 64 6c 8c 5e 67 35 c8 a8 bf 59 1f 5b 74 8d ca 96 82 92 95 d4 54 0d 8e 2b 6b 68 df c8 55 3a 35 e5 12 4d fd e6 aa 47 c3 9b 39 eb 5e 65 e9 cb 74 bd 0d 65 be cf 1c 17 07 c6 fa 84 7b dc aa c4 6a 70 57 2a a6 55 ad 6a 2b b8 f1 54 6a 65 78 e0 a2 f0 00 00 14 00 2c b7 3b 9d 65 2d fa dd 41 05 35 3c 90 55 a3 d5 d2 be 67 35 cc dc 4c ae 1a 8d 54 5e 0a 98 e2 85 ca ae b6 9a 8d ac 75 5d 44 30 35 ee 46 31 65 91 19 bc e5 e6 44 cf 3a fa 0b 2d f6 96 e9 25 fa db 59 6e a5 a5 9a 1a 66 48 8e 49 aa 56 37 2a bd 31 84 44 63 b9 b1 cf e9 2d d7 9b 05 c6 ed 2d 3d 55 7d 2d 25 42 f2 52 43 25 22 56 cb 13 18 d7 39 15 15 1e d4 f1 b8 26 15 15 a9 9e 18 c6 38 Data Ascii: V1w;;"@k.deu+Y5QT9xLqfhHdl^g5Y[tT+khU:5MG9^ete{jpWUj+Tjex,;e-A5<Ug5LT^u]D05F1eD:-%YnfHIV71Dc--=U}-%BRC%"V9&8
2025-02-22 00:49:09 UTC	1369	IN	Data Raw: 5b 0c b5 0c 4d c7 bb 3b a8 e4 54 72 67 1d 19 4e 27 d9 e2 5c a6 36 e3 dd ee 7c 2c 5a a6 5b bd 4c 08 dd 3f 79 a5 a3 a8 45 74 55 95 31 b1 b1 b9 31 94 5c 22 ef 26 53 9b 28 5d e5 bc 5b 63 6d 5a be e1 47 9a 46 ab ea 11 27 62 ac 28 9f de 4c f8 bf 59 1e d0 5b 75 7d 7e ab b5 55 d5 d1 56 5a a1 86 27 47 58 e4 bb 24 b4 d2 e2 25 63 55 90 37 8b 78 e1 dc 7f 71 64 d1 1b 3a ba 52 5c 5d 1d ee 85 77 23 a5 a8 81 6a 15 f4 cf 82 a5 5e 8a 89 bc d4 6f 28 e4 ce 1d 97 e5 51 50 f2 ce 37 12 4d 49 be ee 13 3c bb 69 2b d9 2f 94 37 db 3b 2e 56 79 3b ea 17 b5 55 ad 6e 11 f9 4f ec aa 2f cd 77 a1 7a d0 b1 db b5 ed be e3 05 99 68 e9 2a e4 a9 b9 54 49 4e da 5c b5 24 81 63 ff 00 48 e9 38 e1 11 bf f7 4e b1 b2 bb 4d 5d 93 48 d3 db ee 16 a8 ad d5 50 2a b5 eb 1c 8c 7f 7c 2f e5 55 5b d2 bc dc 78 Data Ascii: [M;TrgN'\6\|,Z[L?yEtU11\"&S(][cmZGF'b(LY[u}~UVZ'GX$%cU7xqd:R\]w#j^o(QP7MI<i+/7;.Vy;UnO/wzhTIN\$cH8NM]HP\|/U[x
2025-02-22 00:49:09 UTC	1369	IN	Data Raw: 00 00 00 00 00 28 a9 92 9b bf fb c9 c8 00 00 00 00 00 28 54 01 4c 15 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0f 9c f0 45 51 1f 27 34 6d 91 99 45 dd 72 65 32 8b 94 3e 80 06 00 00 00 00 00 00 00 00 00 00 00 38 be 46 c6 c7 3d ea 8d 63 53 2a aa b8 44 4e b5 02 aa a8 89 c4 f3 fb ba 37 5a c7 ad 76 97 59 3d 23 f7 ad d6 f6 f7 8d 33 93 99 e8 c5 5d e7 fd 6e 55 fa b0 4b 3d d1 3b 78 82 5a 5a cd 2d a2 2a 56 45 93 31 56 5c a2 77 8a 8d e6 74 71 2f 4e 79 95 df 52 75 9a aa a0 50 00 05 49 9f b9 c3 55 c7 6f bb d4 e9 fa c7 b5 90 d7 aa 49 4e e7 2e 3f a6 44 c6 ef fe 64 e6 f4 a2 75 90 b9 ce 37 ba 37 b5 ec 55 6b da b9 47 22 e1 51 4e bc 1e 25 e1 67 33 9e 1a c3 2e 5b b8 df 50 42 Data Ascii: ((TLEQ'4mEre2>8F=cSDN7ZvY=#3]nUK=;xZZ-VE1V\wtq/NyRuPIUoIN.?Ddu77UkG"QN%g3.[PB
2025-02-22 00:49:09 UTC	1369	IN	Data Raw: 74 d6 50 06 cd 78 58 dd bc d9 a0 ed 52 7b a3 c2 c6 ed e6 cd 07 6a 93 dd 35 94 01 b3 5e 16 37 6f 36 68 3b 54 9e e8 f0 b1 bb 79 b3 41 da a4 f7 4d 65 00 6c d7 85 8d db cd 9a 0e d5 27 ba 3c 2c 6e de 6c d0 76 a9 3d d3 59 40 1b 35 e1 63 76 f3 66 83 b5 49 ee 8f 0b 1b b7 9b 34 1d aa 4f 74 d6 50 06 cd 78 58 dd bc d9 a0 ed 52 7b a3 c2 c6 ed e6 cd 07 6a 93 dd 35 94 01 b3 5e 16 37 6f 36 68 3b 54 9e e8 f0 b1 bb 79 b3 41 da a4 f7 4d 65 00 6c d7 85 8d db cd 9a 0e d5 27 ba 3c 2c 6e de 6c d0 76 a9 3d d3 59 40 1b 35 e1 63 76 f3 66 83 b5 49 ee 8f 0b 1b b7 9b 34 1d aa 4f 74 d6 50 06 cd 78 58 dd bc d9 a0 ed 52 7b a3 c2 c6 ed e6 cd 07 6a 93 dd 35 94 01 b3 5e 16 37 6f 36 68 3b 54 9e e8 f0 b1 bb 79 b3 41 da a4 f7 4d 65 00 6c d7 85 8d db cd 9a 0e d5 27 ba 3c 2c 6e de 6c d0 76 a9 Data Ascii: tPxXR{j5^7o6h;TyAMel'<,nlv=Y@5cvfI4OtPxXR{j5^7o6h;TyAMel'<,nlv=Y@5cvfI4OtPxXR{j5^7o6h;TyAMel'<,nlv
2025-02-22 00:49:09 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2025-02-22 00:49:09 UTC	1369	IN	Data Raw: 91 ab f7 f8 2a ff 00 ef 8f 03 06 da b6 ca 75 06 ce 2a a2 f8 55 b1 d4 db e7 76 ec 35 b0 65 63 72 ff 00 75 73 c5 ae f4 2f d5 90 23 f0 67 9b 2c d0 11 ed 06 e0 eb 65 2d f6 92 82 eb e3 3a 2a 6a 88 64 77 2a c6 a6 55 51 cd 45 4e 1d 4b c4 90 35 17 73 26 a8 b5 db 92 7a 3b 85 0d ca 77 4b 1c 4d a7 85 8f 6b 97 79 c8 8a e5 57 26 11 11 17 2a ab d0 8a 04 06 0d 9f b1 77 2e d2 dc ec e9 50 dd 6b 4d 3d 4a 6f 32 4e f2 a7 6c d0 b2 44 e7 6e fe fe 57 0b cf c1 17 d0 40 da f3 46 dd 34 4e ac a8 b0 dd d2 3e f8 8d 5a ac 91 ae c3 25 63 be 6b d1 57 a1 7d 3c dc 40 b0 db a8 ea 2e 15 b0 51 d1 42 f9 ea a7 7a 47 14 4c 4c b9 ee 55 c2 22 19 96 d7 b4 1b b6 79 7d b6 da 66 a9 5a 8a b9 6d d1 55 54 2e 11 1a c9 1c e7 a3 9a de b4 4d de 75 36 63 b9 af 65 36 3b 05 2a 6a 29 ee 36 db d5 f3 e6 23 e8 e7 Data Ascii: uUv5ecrus/#g,e-:jdwUQENK5s&z;wKMkyW&w.PkM=Jo2NlDnW@F4N>Z%ckW}<@.QBzGLLU"y}fZmUT.Mu6ce6;j)6#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49750	104.18.160.117	443	5544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-22 00:49:09 UTC	365	OUT	GET /img/favicon.ico HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-22 00:49:09 UTC	645	IN	HTTP/1.1 200 OK Date: Sat, 22 Feb 2025 00:49:09 GMT Content-Type: image/x-icon Content-Length: 15086 Connection: close x-amz-id-2: QRs3q+dhKhAMTlvzYZ9HsOXkYLhQn66tiVr3vbhVW/V2FbAxceQ9QjMXwPqcyzjtLgD1BjyzKEE= x-amz-request-id: BSTN61CAHM9SMTMC Last-Modified: Thu, 05 Oct 2023 23:38:20 GMT ETag: "1f894f487d068a2ced95d5cd4f88598c" x-amz-server-side-encryption: AES256 Cache-Control: max-age=84600, must-revalidate x-amz-version-id: C5TuT6ObkzP1GjuEGkIHJatwDHqj5J6N CF-Cache-Status: HIT Age: 30839 Accept-Ranges: bytes Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 915af9839a608cc0-EWR alt-svc: h3=":443"; ma=86400
2025-02-22 00:49:09 UTC	724	IN	Data Raw: 00 00 01 00 03 00 30 30 00 00 01 00 20 00 a8 25 00 00 36 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 de 25 00 00 10 10 00 00 01 00 20 00 68 04 00 00 86 36 00 00 28 00 00 00 30 00 00 00 60 00 00 00 01 00 20 00 00 00 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 39 32 2b 88 39 32 2b f3 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 Data Ascii: 00 %6 % h6(0` $92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+9
2025-02-22 00:49:09 UTC	1369	IN	Data Raw: 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 Data Ascii: +92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+9
2025-02-22 00:49:09 UTC	1369	IN	Data Raw: ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 Data Ascii: 92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92
2025-02-22 00:49:09 UTC	1369	IN	Data Raw: f8 f8 f8 ff f8 f8 f8 ff f8 f8 f8 ff f7 f7 f7 ff 8e 8a 86 ff 37 30 29 ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 38 30 29 ff 50 49 43 ff e0 e0 df ff f8 f9 f9 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f9 f9 f9 ff f9 f9 f9 ff e2 e1 e0 ff 9a 96 93 ff 4b 44 3e ff 44 3d 36 ff c9 c7 c5 ff f9 fa fa ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f9 f9 f9 ff d6 d5 d4 ff 4f 49 42 ff 38 31 29 ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b Data Ascii: 70)92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+80)PICKD>D=6OIB81)92+92+92+92+92+92+92+92+92+
2025-02-22 00:49:09 UTC	1369	IN	Data Raw: f9 f9 ff de dd dc ff 56 50 4a ff 37 30 29 ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 38 31 2a ff 4b 45 3f ff c0 be bc ff d3 d2 d1 ff d2 d1 d0 ff d2 d1 d0 ff d1 cf ce ff d9 d8 d6 ff f5 f4 f4 ff f8 f8 f8 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f8 f8 f8 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f8 f8 f8 ff 9c 99 96 ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff Data Ascii: VPJ70)92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+81*KE?92+92+92+92+92+92+92+92+92+92+92+92+92+
2025-02-22 00:49:09 UTC	1369	IN	Data Raw: 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 3c 36 2f ff 53 4d 47 ff 57 51 4b ff 56 50 4b ff 56 50 4b ff 56 50 4b ff 57 51 4b ff 50 4a 44 ff 3b 34 2d ff 38 31 2a ff 41 3a 33 ff 56 50 4a ff 56 51 4b ff 56 50 4b ff 57 51 4b ff 54 4e 48 ff 3f 38 31 ff 39 32 2a ff 3a 33 2d ff 50 4a 44 ff 57 51 4b ff 56 50 4b ff 56 50 4b ff 56 50 4b ff 56 50 4b ff 57 51 4b ff 4f 49 43 ff 3a 33 2c ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 Data Ascii: +92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+<6/SMGWQKVPKVPKVPKWQKPJD;4-81A:3VPJVQKVPKWQKTNH?8192:3-PJDWQKVPKVPKVPKVPKWQKOIC:3,92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+9
2025-02-22 00:49:09 UTC	1369	IN	Data Raw: ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 Data Ascii: 92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92
2025-02-22 00:49:09 UTC	1369	IN	Data Raw: 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b f3 39 32 2b 89 39 32 2b f4 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b Data Ascii: 92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+
2025-02-22 00:49:09 UTC	1369	IN	Data Raw: 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff Data Ascii: 2+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+
2025-02-22 00:49:09 UTC	1369	IN	Data Raw: 2b ff 39 32 2b ff 3c 35 2e ff 54 4e 48 ff 76 72 6d ff b2 b0 ad ff eb ea ea ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f8 f8 f8 ff f3 f3 f3 ff f6 f6 f6 ff f7 f7 f7 ff f7 f7 f7 ff f8 f8 f8 ff ef ef ef ff 72 6d 68 ff 36 2f 28 ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 3f 39 32 ff 68 63 5d ff 6e 69 64 ff 74 6f 6b ff b1 ae ab ff f5 f5 f5 ff f7 f8 f8 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f8 f8 f8 ff f7 f7 f7 ff f7 f7 f7 ff fa fa fa ff c0 be bc ff 41 3b 34 ff 38 31 2a ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 Data Ascii: +92+<5.TNHvrmrmh6/(92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+?92hc]nidtokA;481*92+92+92+92+92+92+92+92+92+92+92+92+9

Statistics

CPU Usage

• chrome.exe
• chrome.exe
• chrome.exe

Click to jump to process

Memory Usage

• chrome.exe
• chrome.exe
• chrome.exe

Click to jump to process

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 5448, Parent PID: 480

Function Logs

General

Target ID:	0
Start time:	19:48:57
Start date:	21/02/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

File Activities

File Opened

Show Windows behavior

Registry Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Process Activities

Process Created

Process Terminated

Show Windows behavior

Thread Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Memory Activities

Memory Usage Statistics

Show Windows behavior

Timing Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Windows UI Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Process Token Activities

Token Adjusted

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 5544, Parent PID: 5448

Function Logs

General

Target ID:	2
Start time:	19:48:59
Start date:	21/02/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2364 --field-trial-handle=2284,i,1721605306511470720,1365186693610472002,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

File Activities

File Opened

Show Windows behavior

Thread Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Memory Activities

Memory Usage Statistics

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6500, Parent PID: 480

Function Logs

General

Target ID:	3
Start time:	19:49:05
Start date:	21/02/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://hub-ledge-live-wallet.webflow.io/"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

File Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Process Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://hub-ledge-live-wallet.webflow.io/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 49

Chrome Cache Entry: 50

Chrome Cache Entry: 51

Chrome Cache Entry: 52

Chrome Cache Entry: 53

Chrome Cache Entry: 54

Chrome Cache Entry: 55

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 5448, Parent PID: 480

General

File Activities

File Opened

Windows Analysis Report
http://hub-ledge-live-wallet.webflow.io/