Edit tour

Windows Analysis Report
http://sso-cdn-coinbasepro-autthh.webflow.io/

Overview

General Information

Sample URL:	http://sso-cdn-coinbasepro-autthh.webflow.io/
Analysis ID:	1642670
Infos:

Detection

HTMLPhisher

Score:	68
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Yara detected HtmlPhish64

AI detected suspicious URL

Creates files inside the system directory

Deletes files inside the Windows folder

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3296 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 4712 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2364,i,374398198376796889,4682159419714887947,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2448 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6884 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://sso-cdn-coinbasepro-autthh.webflow.io/" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
0.0.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security

Joe Sandbox Signatures

• AV Detection
• Phishing
• Compliance
• Networking
• System Summary

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://sso-cdn-coinbasepro-autthh.webflow.io/

Avira URL Cloud: detection malicious, Label: phishing

Phishing

AI detected phishing page

Source: https://sso-cdn-coinbasepro-autthh.webflow.io/

Joe Sandbox AI: Score: 9 Reasons: The brand 'Coinbase' is well-known and typically associated with the domain 'coinbase.com'., The URL 'sso-cdn-coinbasepro-autthh.webflow.io' does not match the legitimate domain 'coinbase.com'., The URL contains multiple hyphens and unusual subdomain structure, which is a common tactic in phishing URLs., The use of 'webflow.io' as a domain extension is unusual for a well-known brand like Coinbase, which typically uses '.com'., The presence of 'autthh' in the URL is suspicious and could be a misspelling or attempt to mimic 'auth', a common term in authentication URLs. DOM: 0.0.pages.csv

Yara detected HtmlPhish64

Source: Yara match

File source: 0.0.pages.csv, type: HTML

AI detected suspicious URL

Source: http://sso-cdn-coinbasepro-autthh.webflow.io	Joe Sandbox AI: The URL 'http://sso-cdn-coinbasepro-autthh.webflow.io' appears to be attempting to mimic a legitimate Coinbase Pro URL. The use of 'coinbasepro' in the subdomain suggests an attempt to associate with the well-known cryptocurrency exchange platform, Coinbase Pro. The subdomain 'sso-cdn-coinbasepro-autthh' includes 'sso' (Single Sign-On) and 'autthh' (a misspelling of 'auth'), which are terms related to authentication processes, potentially misleading users into thinking this is a secure login page. The domain 'webflow.io' is a legitimate platform for web hosting and design, which could be used for unrelated purposes, but in this context, it adds to the suspicion due to the misleading subdomain. The structural similarity and the use of authentication-related terms increase the likelihood of this being a typosquatting attempt.
Source: https://sso-cdn-coinbasepro-autthh.webflow.io	Joe Sandbox AI: The URL 'https://sso-cdn-coinbasepro-autthh.webflow.io' appears to be attempting to mimic the legitimate Coinbase Pro URL. The use of 'coinbasepro' in the subdomain suggests an attempt to associate with the well-known cryptocurrency exchange platform. The inclusion of 'sso' and 'cdn' in the subdomain could be intended to add legitimacy by implying a connection to single sign-on services or content delivery networks, which are common in legitimate URLs. The misspelling of 'auth' as 'autthh' is a potential character substitution tactic to create a visually similar but distinct URL. The use of 'webflow.io' as the domain extension is not directly related to Coinbase, which increases the likelihood of this being a typosquatting attempt. Overall, the structural and character-level similarities, combined with the misleading subdomain usage, suggest a high likelihood of user confusion and a potential typosquatting attempt.

Source: unknown	HTTPS traffic detected: 142.250.181.228:443 -> 192.168.2.4:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.36.248:443 -> 192.168.2.4:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.222.232.144:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.160.117:443 -> 192.168.2.4:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.160.117:443 -> 192.168.2.4:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.222.232.144:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.222.232.144:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.222.232.47:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.222.232.47:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.161.117:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.161.117:443 -> 192.168.2.4:49744 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.186.35
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.186.35
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.186.35
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.186.35
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.186.35
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.186.35
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.186.35
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: sso-cdn-coinbasepro-autthh.webflow.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /669bd6e9e6fd0bf7cd830b6c/css/sso-cdn-coinbasepro-autthh.webflow.e928f4266.css HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://sso-cdn-coinbasepro-autthh.webflow.io/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /669bd6e9e6fd0bf7cd830b6c/js/webflow.4e8135d87.js HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://sso-cdn-coinbasepro-autthh.webflow.io/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/jquery-3.5.1.min.dc5e7f18c8.js?site=669bd6e9e6fd0bf7cd830b6c HTTP/1.1Host: d3e54v103j8qbb.cloudfront.netConnection: keep-aliveOrigin: https://sso-cdn-coinbasepro-autthh.webflow.iosec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://sso-cdn-coinbasepro-autthh.webflow.io/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /669bd6e9e6fd0bf7cd830b6c/669bd6e9e6fd0bf7cd830b6f_coin.jpeg HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://sso-cdn-coinbasepro-autthh.webflow.io/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/webflow-badge-icon-d2.89e12c322e.svg HTTP/1.1Host: d3e54v103j8qbb.cloudfront.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://sso-cdn-coinbasepro-autthh.webflow.io/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/webflow-badge-text-d2.c82cec3b78.svg HTTP/1.1Host: d3e54v103j8qbb.cloudfront.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://sso-cdn-coinbasepro-autthh.webflow.io/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/favicon.ico HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://sso-cdn-coinbasepro-autthh.webflow.io/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/webflow-badge-icon-d2.89e12c322e.svg HTTP/1.1Host: d3e54v103j8qbb.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/webflow-badge-text-d2.c82cec3b78.svg HTTP/1.1Host: d3e54v103j8qbb.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /669bd6e9e6fd0bf7cd830b6c/669bd6e9e6fd0bf7cd830b6f_coin.jpeg HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/favicon.ico HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /r/gsr1.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog
Source: global traffic	HTTP traffic detected: GET /r/r4.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: sso-cdn-coinbasepro-autthh.webflow.io
Source: global traffic	DNS traffic detected: DNS query: cdn.prod.website-files.com
Source: global traffic	DNS traffic detected: DNS query: d3e54v103j8qbb.cloudfront.net

Source: chromecache_64.2.dr	String found in binary or memory: http://underscorejs.org
Source: chromecache_61.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/669bd6e9e6fd0bf7cd830b6c/669bd6e9e6fd0bf7cd830b6f_coin-p-1080.jpe
Source: chromecache_61.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/669bd6e9e6fd0bf7cd830b6c/669bd6e9e6fd0bf7cd830b6f_coin-p-500.jpeg
Source: chromecache_61.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/669bd6e9e6fd0bf7cd830b6c/669bd6e9e6fd0bf7cd830b6f_coin-p-800.jpeg
Source: chromecache_61.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/669bd6e9e6fd0bf7cd830b6c/669bd6e9e6fd0bf7cd830b6f_coin.jpeg
Source: chromecache_61.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/669bd6e9e6fd0bf7cd830b6c/css/sso-cdn-coinbasepro-autthh.webflow.e
Source: chromecache_61.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/669bd6e9e6fd0bf7cd830b6c/js/webflow.4e8135d87.js
Source: chromecache_61.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/img/favicon.ico
Source: chromecache_61.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/img/webclip.png
Source: chromecache_61.2.dr	String found in binary or memory: https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=669bd6e9e6fd0bf7cd830b6
Source: chromecache_64.2.dr	String found in binary or memory: https://github.com/bkwld/tram
Source: chromecache_61.2.dr	String found in binary or memory: https://webflow.com

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724

Source: unknown	HTTPS traffic detected: 142.250.181.228:443 -> 192.168.2.4:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.36.248:443 -> 192.168.2.4:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.222.232.144:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.160.117:443 -> 192.168.2.4:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.160.117:443 -> 192.168.2.4:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.222.232.144:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.222.232.144:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.222.232.47:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.222.232.47:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.161.117:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.161.117:443 -> 192.168.2.4:49744 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir3296_542480943

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir3296_542480943

Jump to behavior

Source: classification engine

Classification label: mal68.phis.win@22/20@14/7

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2364,i,374398198376796889,4682159419714887947,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2448 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://sso-cdn-coinbasepro-autthh.webflow.io/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2364,i,374398198376796889,4682159419714887947,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2448 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://sso-cdn-coinbasepro-autthh.webflow.io/	100%	Avira URL Cloud	phishing

Source	Detection	Scanner	Label	Link
https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=669bd6e9e6fd0bf7cd830b6c	0%	Avira URL Cloud	safe
https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=669bd6e9e6fd0bf7cd830b6	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
d3e54v103j8qbb.cloudfront.net	52.222.232.144	true	false	high
sso-cdn-coinbasepro-autthh.webflow.io	104.18.36.248	true	false	high
cdn.prod.website-files.com	104.18.160.117	true	false	high
www.google.com	142.250.181.228	true	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://cdn.prod.website-files.com/img/favicon.ico	false		high
https://cdn.prod.website-files.com/669bd6e9e6fd0bf7cd830b6c/js/webflow.4e8135d87.js	false		high
https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=669bd6e9e6fd0bf7cd830b6c	false	Avira URL Cloud: safe	unknown
https://cdn.prod.website-files.com/669bd6e9e6fd0bf7cd830b6c/css/sso-cdn-coinbasepro-autthh.webflow.e928f4266.css	false		high
https://sso-cdn-coinbasepro-autthh.webflow.io/	true		unknown
https://d3e54v103j8qbb.cloudfront.net/img/webflow-badge-text-d2.c82cec3b78.svg	false		high
https://cdn.prod.website-files.com/669bd6e9e6fd0bf7cd830b6c/669bd6e9e6fd0bf7cd830b6f_coin.jpeg	false		high
https://d3e54v103j8qbb.cloudfront.net/img/webflow-badge-icon-d2.89e12c322e.svg	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://cdn.prod.website-files.com/669bd6e9e6fd0bf7cd830b6c/669bd6e9e6fd0bf7cd830b6f_coin-p-800.jpeg	chromecache_61.2.dr	false		high
https://cdn.prod.website-files.com/669bd6e9e6fd0bf7cd830b6c/669bd6e9e6fd0bf7cd830b6f_coin-p-500.jpeg	chromecache_61.2.dr	false		high
http://underscorejs.org	chromecache_64.2.dr	false		high
https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=669bd6e9e6fd0bf7cd830b6	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.prod.website-files.com/img/webclip.png	chromecache_61.2.dr	false		high
https://cdn.prod.website-files.com/669bd6e9e6fd0bf7cd830b6c/css/sso-cdn-coinbasepro-autthh.webflow.e	chromecache_61.2.dr	false		high
https://cdn.prod.website-files.com/669bd6e9e6fd0bf7cd830b6c/669bd6e9e6fd0bf7cd830b6f_coin-p-1080.jpe	chromecache_61.2.dr	false		high
https://github.com/bkwld/tram	chromecache_64.2.dr	false		high
https://webflow.com	chromecache_61.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.36.248	sso-cdn-coinbasepro-autthh.webflow.io	United States	13335	CLOUDFLARENETUS	false
104.18.160.117	cdn.prod.website-files.com	United States	13335	CLOUDFLARENETUS	false
104.18.161.117	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.181.228	www.google.com	United States	15169	GOOGLEUS	false
52.222.232.144	d3e54v103j8qbb.cloudfront.net	United States	16509	AMAZON-02US	false
52.222.232.47	unknown	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1642670
Start date and time:	2025-03-19 10:02:57 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 12s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://sso-cdn-coinbasepro-autthh.webflow.io/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	20
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal68.phis.win@22/20@14/7
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, RuntimeBroker.exe, ShellExperienceHost.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.184.227, 142.250.185.142, 216.58.206.78, 66.102.1.84, 142.250.74.206, 142.250.185.110, 142.250.186.110, 88.221.110.106, 142.250.184.206, 172.217.18.110, 216.58.206.46, 142.250.184.195, 142.250.185.99, 142.250.181.238, 23.60.203.209, 20.12.23.50
Excluded domains from analysis (whitelisted): fs.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, accounts.google.com, redirector.gvt1.com, slscr.update.microsoft.com, update.googleapis.com, ctldl.windowsupdate.com, clientservices.googleapis.com, clients.l.google.com, c.pki.goog, fe3cr.delivery.mp.microsoft.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://sso-cdn-coinbasepro-autthh.webflow.io/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	421
Entropy (8bit):	4.951302343646692
Encrypted:	false
SSDEEP:	6:tnryQovcumc4slvtM65tLApUcsw6RnDH4aFJA3ST3EGn4UGhbexTVQG6eJYLwqQq:travcuXM65hA6BrvT3gfQTVVPJYLwq7H
MD5:	89E12C322E66C81213861FC9ACB8B003
SHA1:	6A1A186CEDADCEF3D7D2FFD04F275D94A54E7930
SHA-256:	00F45354C11A12591485977633A0E03952CDF1FF2DE403E10EC846DB8CC508A9
SHA-512:	E8092977116E2B795957F36A7112A0C91DD053D8EE842B8A90D6A83F762B838C034BB31E225215C3AF850CAC0FA4B922835CECD507C5EA7E1C18DE1AB7AD80CF
Malicious:	false
Reputation:	low
URL:	https://d3e54v103j8qbb.cloudfront.net/img/webflow-badge-icon-d2.89e12c322e.svg
Preview:	<svg width="26" height="16" viewBox="0 0 26 16" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M25.65 0L17.4654 16H9.77778L13.203 9.36892H13.0493C10.2235 13.0372 6.00738 15.452 0 16V9.46068C0 9.46068 3.84306 9.23369 6.10229 6.85844H0V0.000126383H6.85832V5.64099L7.01225 5.64036L9.8148 0.000126383H15.0016V5.60523L15.1555 5.60497L18.0632 0H25.65Z" fill="#146EF5"/>.</svg>.

Chrome Cache Entry: 56

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	89476
Entropy (8bit):	5.2896589255084425
Encrypted:	false
SSDEEP:	1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1
MD5:	DC5E7F18C8D36AC1D3D4753A87C98D0A
SHA1:	C8E1C8B386DC5B7A9184C763C88D19A346EB3342
SHA-256:	F7F6A5894F1D19DDAD6FA392B2ECE2C5E578CBF7DA4EA805B6885EB6985B6E3D
SHA-512:	6CB4F4426F559C06190DF97229C05A436820D21498350AC9F118A5625758435171418A022ED523BAE46E668F9F8EA871FEAB6AFF58AD2740B67A30F196D65516
Malicious:	false
Reputation:	low
URL:	https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=669bd6e9e6fd0bf7cd830b6c
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 57

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	15086
Entropy (8bit):	3.4582181256178264
Encrypted:	false
SSDEEP:	96:jQ2eQFXKn5O0NkoqpWyRuaoiQ5733LimpFim+xuUbw:jzFan5O0qbMy4d3bBWnuU
MD5:	1F894F487D068A2CED95D5CD4F88598C
SHA1:	743A2C39F538650D53664D19AB5079CFC9BA55D2
SHA-256:	4239819D399860EB27D8A73417F9BD108D45D11676F68B5EDAAE328EC197D55E
SHA-512:	A9BD551FA9F297083351B37DDE9CE6080D14433D26215561875C5A3E8C6EA8ABBE8F5F3204793A7EF9690A4563A2BC640E6A32CFF15F9A9BB42CD322CE1F2717
Malicious:	false
Reputation:	low
Preview:	......00.... ..%..6... .... ......%........ .h....6..(...0...`..... ......$..................92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92

Chrome Cache Entry: 58

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	9912
Entropy (8bit):	3.9529563769674163
Encrypted:	false
SSDEEP:	192:gLTccPJ37c1fhYJ0VCa8wDY+WCYTx4Pqze9CJCmVjDsUGoT:9KMV8AITHz4Xm9lGoT
MD5:	C82CEC3B78A2B2D267BBFE3C7E838068
SHA1:	70ED58A020C395EED69E3000CB27B7B0FA191360
SHA-256:	3202CB640FADA345AB99415BD087F28E6FEA1C3009DBA51D183CC37BCE036CD7
SHA-512:	85EEF3C4FC445742ED656ACC0600CCECF4F88043E5F2638484E73C6543E5CFB4DD7FBBFA90FC34628C2A1FA1BB0BC5052DF8C1EB454534674BAA4A34C4D94F6B
Malicious:	false
Reputation:	low
Preview:	<svg width="118" height="12" viewBox="0 0 118 12" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M0.525024 0.896484H3.05432L6.00776 8.26622L8.89905 0.896484H11.3531V11H9.47327V3.79949L6.6637 11H5.18713L2.3844 3.92077V11H0.525024V0.896484Z" fill="#080808"/>.<path d="M16.152 11.1367C15.4912 11.1367 14.901 10.9704 14.3815 10.6377C13.8665 10.305 13.4609 9.84017 13.1647 9.24316C12.8684 8.6416 12.7226 7.94889 12.7272 7.16504C12.7272 6.38118 12.8776 5.69076 13.1783 5.09375C13.4791 4.49674 13.8893 4.03646 14.4088 3.71289C14.9329 3.38477 15.5276 3.22298 16.193 3.22754C16.6305 3.22754 17.0361 3.30957 17.4098 3.47363C17.7835 3.63314 18.0934 3.85417 18.3395 4.13672C18.5901 4.41471 18.7542 4.71777 18.8317 5.0459L18.4967 5.03223V3.37109H20.3698V11H18.5172L18.524 9.52344L18.8522 9.33203C18.7428 9.66927 18.5559 9.97461 18.2916 10.248C18.0273 10.5215 17.7083 10.738 17.3346 10.8975C16.9609 11.057 16.5667 11.1367 16.152 11.1367ZM16.5621 9.55078C16.9495 9.55078 17.2936 9.45052 17.5944 9.25C17.89

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 1600x3811, components 3
Category:	dropped
Size (bytes):	382933
Entropy (8bit):	7.664831829901192
Encrypted:	false
SSDEEP:	6144:z8XgmsLXdpzPBzwvHt5NmlqMf/35BD5mH5rhOlWa3Bd1GaHzbefQS:xNXdpNwvHtDmlq8/JBD561hOg0d1l2f3
MD5:	6842CC254E6E650641B8C97D84273016
SHA1:	5ABF79926D17F62F32BABA53B9273620B6271918
SHA-256:	84C8F3E18E17648E411A1465B9B93B6398BFD2C549817DDDC53B33F88D21FAA5
SHA-512:	53537EAECD146375481F6949CC3452D6FBE8A29981ADA3DFCA87E6DACBA9E1AFF2234303E64102D247641CA3A9BB8E608AFCE20F5C0DAC4E8B5362EAF6C9137F
Malicious:	false
Reputation:	low
Preview:	.....C.....................................%...#... , #&')*)..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((........@..".........................................d........................!..1..AQ."aq.2RS......#B.....34TVbr..U...$567st...Ccu...%8...&EF(Dd..'ev.................................;.......................!1.AQ.."2a..Rq...3.B...#....$C4Sr.............?....}........................................................................................................................................................................c....P...ZQ......k..I..e.........~..........u.]o.?f=.....o.........?.Z........~I....Xj...Mk?....w...g.]_....u.$..k..5....&...u..........~...~.....m...Z........kY..WW..x.]o.?c....@6...g.]_...xwW.NS...QK-.?.'.kGxO...z.T.8:....................................p.v.=.......n.......$.)/5....B.........4..R.X....H.....u.?.......'@..i5.UiB3^q.k?Q....b.\..{.\..'.p...Y.Rx.3./...KW...........;$...T.j.<.j...99e8...o...~.].q.

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 1600x3811, components 3
Category:	downloaded
Size (bytes):	382933
Entropy (8bit):	7.664831829901192
Encrypted:	false
SSDEEP:	6144:z8XgmsLXdpzPBzwvHt5NmlqMf/35BD5mH5rhOlWa3Bd1GaHzbefQS:xNXdpNwvHtDmlq8/JBD561hOg0d1l2f3
MD5:	6842CC254E6E650641B8C97D84273016
SHA1:	5ABF79926D17F62F32BABA53B9273620B6271918
SHA-256:	84C8F3E18E17648E411A1465B9B93B6398BFD2C549817DDDC53B33F88D21FAA5
SHA-512:	53537EAECD146375481F6949CC3452D6FBE8A29981ADA3DFCA87E6DACBA9E1AFF2234303E64102D247641CA3A9BB8E608AFCE20F5C0DAC4E8B5362EAF6C9137F
Malicious:	false
Reputation:	low
URL:	https://cdn.prod.website-files.com/669bd6e9e6fd0bf7cd830b6c/669bd6e9e6fd0bf7cd830b6f_coin.jpeg
Preview:	.....C.....................................%...#... , #&')*)..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((........@..".........................................d........................!..1..AQ."aq.2RS......#B.....34TVbr..U...$567st...Ccu...%8...&EF(Dd..'ev.................................;.......................!1.AQ.."2a..Rq...3.B...#....$C4Sr.............?....}........................................................................................................................................................................c....P...ZQ......k..I..e.........~..........u.]o.?f=.....o.........?.Z........~I....Xj...Mk?....w...g.]_....u.$..k..5....&...u..........~...~.....m...Z........kY..WW..x.]o.?c....@6...g.]_...xwW.NS...QK-.?.'.kGxO...z.T.8:....................................p.v.=.......n.......$.)/5....B.........4..R.X....H.....u.?.......'@..i5.UiB3^q.k?Q....b.\..{.\..'.p...Y.Rx.3./...KW...........;$...T.j.<.j...99e8...o...~.].q.

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (3022), with no line terminators
Category:	downloaded
Size (bytes):	3028
Entropy (8bit):	5.242463615230295
Encrypted:	false
SSDEEP:	48:Y0kyxnk1F61x31TnXzbPtLgnC4iGba2o+wb+X5QkYHGt4Mpnz88:1kyFjb1LTZbYQxGt4Mpz88
MD5:	1E04BB23141CA5004DA1138BE99D8C31
SHA1:	BBA74F5EE8A10EDD2C5B14CF2279C35B30BC64B5
SHA-256:	67F98ECA082F354BEA162871E84FCFCD860E999C32C82381C46472BC0EF10EFD
SHA-512:	C6F929F1A55E61D45CB5B88BD3676A4E24DDE1B96E3F6091183182DA5D511327FEBE5BB004E8D87EC2A98A6E1FC6A45042B59E5638542E1B2C0E594466D220D4
Malicious:	false
Reputation:	low
URL:	https://sso-cdn-coinbasepro-autthh.webflow.io/
Preview:	<!DOCTYPE html> This site was created in Webflow. https://webflow.com --> Last Published: Sat Jul 20 2024 15:28:24 GMT+0000 (Coordinated Universal Time) --><html data-wf-domain="sso-cdn-coinbasepro-autthh.webflow.io" data-wf-page="669bd6e9e6fd0bf7cd830b6b" data-wf-site="669bd6e9e6fd0bf7cd830b6c" data-wf-status="1"><head><meta charset="utf-8"/><title>Official Site. \| Coinbase Pro \| Digital Asset Exchange.</title><meta content="Join Coinbase Pro for a premium trading experience, featuring advanced tools, secure transactions, and low fees for buying and selling cryptocurrencies." name="description"/><meta content="Official Site. \| Coinbase Pro \| Digital Asset Exchange." property="og:title"/><meta content="Join Coinbase Pro for a premium trading experience, featuring advanced tools, secure transactions, and low fees for buying and selling cryptocurrencies." property="og:description"/><meta content="Official Site. \| Coinbase Pro \| Digital Asset Exchange." property="twitter:tit

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	421
Entropy (8bit):	4.951302343646692
Encrypted:	false
SSDEEP:	6:tnryQovcumc4slvtM65tLApUcsw6RnDH4aFJA3ST3EGn4UGhbexTVQG6eJYLwqQq:travcuXM65hA6BrvT3gfQTVVPJYLwq7H
MD5:	89E12C322E66C81213861FC9ACB8B003
SHA1:	6A1A186CEDADCEF3D7D2FFD04F275D94A54E7930
SHA-256:	00F45354C11A12591485977633A0E03952CDF1FF2DE403E10EC846DB8CC508A9
SHA-512:	E8092977116E2B795957F36A7112A0C91DD053D8EE842B8A90D6A83F762B838C034BB31E225215C3AF850CAC0FA4B922835CECD507C5EA7E1C18DE1AB7AD80CF
Malicious:	false
Reputation:	low
Preview:	<svg width="26" height="16" viewBox="0 0 26 16" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M25.65 0L17.4654 16H9.77778L13.203 9.36892H13.0493C10.2235 13.0372 6.00738 15.452 0 16V9.46068C0 9.46068 3.84306 9.23369 6.10229 6.85844H0V0.000126383H6.85832V5.64099L7.01225 5.64036L9.8148 0.000126383H15.0016V5.60523L15.1555 5.60497L18.0632 0H25.65Z" fill="#146EF5"/>.</svg>.

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	15086
Entropy (8bit):	3.4582181256178264
Encrypted:	false
SSDEEP:	96:jQ2eQFXKn5O0NkoqpWyRuaoiQ5733LimpFim+xuUbw:jzFan5O0qbMy4d3bBWnuU
MD5:	1F894F487D068A2CED95D5CD4F88598C
SHA1:	743A2C39F538650D53664D19AB5079CFC9BA55D2
SHA-256:	4239819D399860EB27D8A73417F9BD108D45D11676F68B5EDAAE328EC197D55E
SHA-512:	A9BD551FA9F297083351B37DDE9CE6080D14433D26215561875C5A3E8C6EA8ABBE8F5F3204793A7EF9690A4563A2BC640E6A32CFF15F9A9BB42CD322CE1F2717
Malicious:	false
Reputation:	low
URL:	https://cdn.prod.website-files.com/img/favicon.ico
Preview:	......00.... ..%..6... .... ......%........ .h....6..(...0...`..... ......$..................92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21513)
Category:	downloaded
Size (bytes):	37354
Entropy (8bit):	5.441030813994744
Encrypted:	false
SSDEEP:	768:G5p9WeNujJ4zgTyxOv5GAUdxc4vyqLgxwEWpA8pziQfsJeG:G5p9WeNul4zC5jMXyqpI
MD5:	4E8135D87E56EBF7D55500945D58C45A
SHA1:	C6EE3344D1A7D669E00E275878CDAD970DF4EB60
SHA-256:	18A0ED9CF15CB5AD3CB33184B71DA4589141D9361580881AB2A1A4C16390240D
SHA-512:	028F8F5639FE71221DC78B2D1D572D4D7A0E9C42A18FF3030034F903951D6098216F6B245FCE2D39B8FED2E5725D5FD8B1B75677579A2DF893043C9415984601
Malicious:	false
Reputation:	low
URL:	https://cdn.prod.website-files.com/669bd6e9e6fd0bf7cd830b6c/js/webflow.4e8135d87.js
Preview:	./!. Webflow: Front-end site library. * @license MIT. * Inline scripts may access the api using an async handler:. * var Webflow = Webflow \|\| [];. * Webflow.push(readyFunction);. /..(()=>{var lt=(e,y)=>()=>(y\|\|e((y={exports:{}}).exports,y),y.exports);var Pt=lt(()=>{"use strict";window.tram=function(e){function y(t,n){var i=new J.Bare;return i.init(t,n)}function l(t){return t.replace(/[A-Z]/g,function(n){return"-"+n.toLowerCase()})}function T(t){var n=parseInt(t.slice(1),16),i=n>>16&255,r=n>>8&255,s=255&n;return[i,r,s]}function C(t,n,i){return"#"+(1<<24\|t<<16\|n<<8\|i).toString(16).slice(1)}function g(){}function L(t,n){B("Type warning: Expected: ["+t+"] Got: ["+typeof n+"] "+n)}function _(t,n,i){B("Units do not match ["+t+"]: "+n+", "+i)}function I(t,n,i){if(n!==void 0&&(i=n),t===void 0)return i;var r=i;return we.test(t)\|\|!Xt.test(t)?r=parseInt(t,10):Xt.test(t)&&(r=1e3parseFloat(t)),0>r&&(r=0),r===r?r:i}function B(t){et.debug&&window&&window.console.warn(t)}function U(t){for(var

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	9912
Entropy (8bit):	3.9529563769674163
Encrypted:	false
SSDEEP:	192:gLTccPJ37c1fhYJ0VCa8wDY+WCYTx4Pqze9CJCmVjDsUGoT:9KMV8AITHz4Xm9lGoT
MD5:	C82CEC3B78A2B2D267BBFE3C7E838068
SHA1:	70ED58A020C395EED69E3000CB27B7B0FA191360
SHA-256:	3202CB640FADA345AB99415BD087F28E6FEA1C3009DBA51D183CC37BCE036CD7
SHA-512:	85EEF3C4FC445742ED656ACC0600CCECF4F88043E5F2638484E73C6543E5CFB4DD7FBBFA90FC34628C2A1FA1BB0BC5052DF8C1EB454534674BAA4A34C4D94F6B
Malicious:	false
Reputation:	low
URL:	https://d3e54v103j8qbb.cloudfront.net/img/webflow-badge-text-d2.c82cec3b78.svg
Preview:	<svg width="118" height="12" viewBox="0 0 118 12" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M0.525024 0.896484H3.05432L6.00776 8.26622L8.89905 0.896484H11.3531V11H9.47327V3.79949L6.6637 11H5.18713L2.3844 3.92077V11H0.525024V0.896484Z" fill="#080808"/>.<path d="M16.152 11.1367C15.4912 11.1367 14.901 10.9704 14.3815 10.6377C13.8665 10.305 13.4609 9.84017 13.1647 9.24316C12.8684 8.6416 12.7226 7.94889 12.7272 7.16504C12.7272 6.38118 12.8776 5.69076 13.1783 5.09375C13.4791 4.49674 13.8893 4.03646 14.4088 3.71289C14.9329 3.38477 15.5276 3.22298 16.193 3.22754C16.6305 3.22754 17.0361 3.30957 17.4098 3.47363C17.7835 3.63314 18.0934 3.85417 18.3395 4.13672C18.5901 4.41471 18.7542 4.71777 18.8317 5.0459L18.4967 5.03223V3.37109H20.3698V11H18.5172L18.524 9.52344L18.8522 9.33203C18.7428 9.66927 18.5559 9.97461 18.2916 10.248C18.0273 10.5215 17.7083 10.738 17.3346 10.8975C16.9609 11.057 16.5667 11.1367 16.152 11.1367ZM16.5621 9.55078C16.9495 9.55078 17.2936 9.45052 17.5944 9.25C17.89

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (2587)
Category:	downloaded
Size (bytes):	36292
Entropy (8bit):	5.228454897563567
Encrypted:	false
SSDEEP:	768:AyNf7A1R+EqyFMF54mkxWaIi1aUuF9Zl0F6FhF8FPqkowKji/JVx1:Aye1R+EqyK0XcPyjowKjK
MD5:	E928F426693C9032F7DCDA695325B274
SHA1:	278563904096021D329E4E562220DD4242A07397
SHA-256:	41806BE2D52997E7628C9AD0B3E9F0A4F993D7B37415D18A98E1907EBF742C55
SHA-512:	B25DB969CA4675B82BC1EC11B66C05DCD21D7661D7AC37B5C3FFCD025E8A848B05ECAAAB9BC8CE90CA5C275CF78B8F6E75F12E89C0BB7DE5FDE250332BEFFBDC
Malicious:	false
Reputation:	low
URL:	https://cdn.prod.website-files.com/669bd6e9e6fd0bf7cd830b6c/css/sso-cdn-coinbasepro-autthh.webflow.e928f4266.css
Preview:	html {. -webkit-text-size-adjust: 100%;. -ms-text-size-adjust: 100%;. font-family: sans-serif;.}..body {. margin: 0;.}..article, aside, details, figcaption, figure, footer, header, hgroup, main, menu, nav, section, summary {. display: block;.}..audio, canvas, progress, video {. vertical-align: baseline;. display: inline-block;.}..audio:not([controls]) {. height: 0;. display: none;.}..[hidden], template {. display: none;.}..a {. background-color: #0000;.}..a:active, a:hover {. outline: 0;.}..abbr[title] {. border-bottom: 1px dotted;.}..b, strong {. font-weight: bold;.}..dfn {. font-style: italic;.}..h1 {. margin: .67em 0;. font-size: 2em;.}..mark {. color: #000;. background: #ff0;.}..small {. font-size: 80%;.}..sub, sup {. vertical-align: baseline;. font-size: 75%;. line-height: 0;. position: relative;.}..sup {. top: -.5em;.}..sub {. bottom: -.25em;.}..img {. border: 0;.}..svg:not(:root) {. overflow: hidden;.}..hr {. box-sizing: content-box;. height: 0;.}..

Total Packets: 378
• 443 (HTTPS)
• 80 (HTTP)
• 53 (DNS)

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 19, 2025 10:03:48.392951012 CET	49680	443	192.168.2.4	204.79.197.222
Mar 19, 2025 10:03:55.424607038 CET	49671	443	192.168.2.4	204.79.197.203
Mar 19, 2025 10:03:55.757366896 CET	49671	443	192.168.2.4	204.79.197.203
Mar 19, 2025 10:03:56.533664942 CET	49671	443	192.168.2.4	204.79.197.203
Mar 19, 2025 10:03:57.736013889 CET	49671	443	192.168.2.4	204.79.197.203
Mar 19, 2025 10:03:58.095093966 CET	49680	443	192.168.2.4	204.79.197.222
Mar 19, 2025 10:03:59.980428934 CET	49724	443	192.168.2.4	142.250.181.228
Mar 19, 2025 10:03:59.980463028 CET	443	49724	142.250.181.228	192.168.2.4
Mar 19, 2025 10:03:59.980519056 CET	49724	443	192.168.2.4	142.250.181.228
Mar 19, 2025 10:03:59.980729103 CET	49724	443	192.168.2.4	142.250.181.228
Mar 19, 2025 10:03:59.980736971 CET	443	49724	142.250.181.228	192.168.2.4
Mar 19, 2025 10:04:00.036425114 CET	443	49724	142.250.181.228	192.168.2.4
Mar 19, 2025 10:04:00.036551952 CET	49724	443	192.168.2.4	142.250.181.228
Mar 19, 2025 10:04:00.038431883 CET	49724	443	192.168.2.4	142.250.181.228
Mar 19, 2025 10:04:00.038439035 CET	443	49724	142.250.181.228	192.168.2.4
Mar 19, 2025 10:04:00.038753033 CET	443	49724	142.250.181.228	192.168.2.4
Mar 19, 2025 10:04:00.080540895 CET	49724	443	192.168.2.4	142.250.181.228
Mar 19, 2025 10:04:00.143048048 CET	49671	443	192.168.2.4	204.79.197.203
Mar 19, 2025 10:04:02.914879084 CET	49728	443	192.168.2.4	104.18.36.248
Mar 19, 2025 10:04:02.914921999 CET	443	49728	104.18.36.248	192.168.2.4
Mar 19, 2025 10:04:02.915133953 CET	49728	443	192.168.2.4	104.18.36.248
Mar 19, 2025 10:04:02.915471077 CET	49728	443	192.168.2.4	104.18.36.248
Mar 19, 2025 10:04:02.915483952 CET	443	49728	104.18.36.248	192.168.2.4
Mar 19, 2025 10:04:02.948914051 CET	443	49728	104.18.36.248	192.168.2.4
Mar 19, 2025 10:04:02.949157953 CET	49728	443	192.168.2.4	104.18.36.248
Mar 19, 2025 10:04:02.953409910 CET	49728	443	192.168.2.4	104.18.36.248
Mar 19, 2025 10:04:02.953711987 CET	443	49728	104.18.36.248	192.168.2.4
Mar 19, 2025 10:04:02.954159021 CET	49728	443	192.168.2.4	104.18.36.248
Mar 19, 2025 10:04:02.996332884 CET	443	49728	104.18.36.248	192.168.2.4
Mar 19, 2025 10:04:03.041608095 CET	443	49728	104.18.36.248	192.168.2.4
Mar 19, 2025 10:04:03.041666031 CET	443	49728	104.18.36.248	192.168.2.4
Mar 19, 2025 10:04:03.041698933 CET	443	49728	104.18.36.248	192.168.2.4
Mar 19, 2025 10:04:03.041745901 CET	49728	443	192.168.2.4	104.18.36.248
Mar 19, 2025 10:04:03.041759968 CET	443	49728	104.18.36.248	192.168.2.4
Mar 19, 2025 10:04:03.041783094 CET	443	49728	104.18.36.248	192.168.2.4
Mar 19, 2025 10:04:03.041878939 CET	49728	443	192.168.2.4	104.18.36.248
Mar 19, 2025 10:04:03.042840004 CET	49728	443	192.168.2.4	104.18.36.248
Mar 19, 2025 10:04:03.042855024 CET	443	49728	104.18.36.248	192.168.2.4
Mar 19, 2025 10:04:03.098838091 CET	49729	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.098881960 CET	443	49729	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.098992109 CET	49730	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.099035978 CET	49729	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.099044085 CET	443	49730	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.099220991 CET	49730	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.099569082 CET	49731	443	192.168.2.4	52.222.232.144
Mar 19, 2025 10:04:03.099612951 CET	443	49731	52.222.232.144	192.168.2.4
Mar 19, 2025 10:04:03.099693060 CET	49731	443	192.168.2.4	52.222.232.144
Mar 19, 2025 10:04:03.099889040 CET	49730	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.099911928 CET	443	49730	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.100330114 CET	49729	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.100344896 CET	443	49729	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.100423098 CET	49731	443	192.168.2.4	52.222.232.144
Mar 19, 2025 10:04:03.100440979 CET	443	49731	52.222.232.144	192.168.2.4
Mar 19, 2025 10:04:03.131222963 CET	443	49731	52.222.232.144	192.168.2.4
Mar 19, 2025 10:04:03.131320000 CET	49731	443	192.168.2.4	52.222.232.144
Mar 19, 2025 10:04:03.131963015 CET	443	49729	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.131977081 CET	443	49730	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.132050991 CET	49730	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.132158995 CET	49729	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.146675110 CET	49730	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.147054911 CET	443	49730	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.148257017 CET	49729	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.148618937 CET	443	49729	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.148886919 CET	49730	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.149243116 CET	49731	443	192.168.2.4	52.222.232.144
Mar 19, 2025 10:04:03.149466991 CET	49729	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.149516106 CET	443	49731	52.222.232.144	192.168.2.4
Mar 19, 2025 10:04:03.150070906 CET	49731	443	192.168.2.4	52.222.232.144
Mar 19, 2025 10:04:03.161259890 CET	443	49731	52.222.232.144	192.168.2.4
Mar 19, 2025 10:04:03.161276102 CET	443	49731	52.222.232.144	192.168.2.4
Mar 19, 2025 10:04:03.161289930 CET	443	49731	52.222.232.144	192.168.2.4
Mar 19, 2025 10:04:03.161359072 CET	49731	443	192.168.2.4	52.222.232.144
Mar 19, 2025 10:04:03.161387920 CET	443	49731	52.222.232.144	192.168.2.4
Mar 19, 2025 10:04:03.161442995 CET	49731	443	192.168.2.4	52.222.232.144
Mar 19, 2025 10:04:03.165510893 CET	443	49731	52.222.232.144	192.168.2.4
Mar 19, 2025 10:04:03.165524006 CET	443	49731	52.222.232.144	192.168.2.4
Mar 19, 2025 10:04:03.165569067 CET	49731	443	192.168.2.4	52.222.232.144
Mar 19, 2025 10:04:03.165591002 CET	443	49731	52.222.232.144	192.168.2.4
Mar 19, 2025 10:04:03.165608883 CET	49731	443	192.168.2.4	52.222.232.144
Mar 19, 2025 10:04:03.165673018 CET	49731	443	192.168.2.4	52.222.232.144
Mar 19, 2025 10:04:03.168003082 CET	443	49731	52.222.232.144	192.168.2.4
Mar 19, 2025 10:04:03.168018103 CET	443	49731	52.222.232.144	192.168.2.4
Mar 19, 2025 10:04:03.168116093 CET	49731	443	192.168.2.4	52.222.232.144
Mar 19, 2025 10:04:03.168133020 CET	443	49731	52.222.232.144	192.168.2.4
Mar 19, 2025 10:04:03.168195963 CET	49731	443	192.168.2.4	52.222.232.144
Mar 19, 2025 10:04:03.169408083 CET	443	49731	52.222.232.144	192.168.2.4
Mar 19, 2025 10:04:03.169420958 CET	443	49731	52.222.232.144	192.168.2.4
Mar 19, 2025 10:04:03.169487000 CET	49731	443	192.168.2.4	52.222.232.144
Mar 19, 2025 10:04:03.169497967 CET	443	49731	52.222.232.144	192.168.2.4
Mar 19, 2025 10:04:03.169537067 CET	49731	443	192.168.2.4	52.222.232.144
Mar 19, 2025 10:04:03.170316935 CET	443	49731	52.222.232.144	192.168.2.4
Mar 19, 2025 10:04:03.170329094 CET	443	49731	52.222.232.144	192.168.2.4
Mar 19, 2025 10:04:03.170403957 CET	49731	443	192.168.2.4	52.222.232.144
Mar 19, 2025 10:04:03.170413017 CET	443	49731	52.222.232.144	192.168.2.4
Mar 19, 2025 10:04:03.170454979 CET	49731	443	192.168.2.4	52.222.232.144
Mar 19, 2025 10:04:03.171037912 CET	443	49731	52.222.232.144	192.168.2.4
Mar 19, 2025 10:04:03.171082973 CET	443	49731	52.222.232.144	192.168.2.4
Mar 19, 2025 10:04:03.171107054 CET	49731	443	192.168.2.4	52.222.232.144
Mar 19, 2025 10:04:03.171147108 CET	49731	443	192.168.2.4	52.222.232.144
Mar 19, 2025 10:04:03.172194958 CET	49731	443	192.168.2.4	52.222.232.144
Mar 19, 2025 10:04:03.172214031 CET	443	49731	52.222.232.144	192.168.2.4
Mar 19, 2025 10:04:03.196325064 CET	443	49729	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.196329117 CET	443	49730	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.199438095 CET	443	49730	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.199486971 CET	443	49730	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.199512005 CET	443	49730	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.199546099 CET	443	49730	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.199558973 CET	49730	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.199582100 CET	443	49730	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.199599028 CET	49730	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.199620962 CET	443	49730	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.199650049 CET	443	49730	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.199680090 CET	443	49730	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.199700117 CET	49730	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.199706078 CET	443	49730	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.199717045 CET	443	49730	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.199723959 CET	49730	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.199755907 CET	49730	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.200409889 CET	443	49730	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.203676939 CET	443	49729	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.203727007 CET	443	49729	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.203763008 CET	443	49729	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.203780890 CET	443	49729	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.203810930 CET	443	49729	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.203833103 CET	443	49729	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.203840971 CET	49729	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.203876019 CET	443	49729	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.203916073 CET	443	49729	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.203943014 CET	49729	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.203943014 CET	49729	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.203972101 CET	49729	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.204036951 CET	443	49730	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.204065084 CET	443	49730	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.204068899 CET	443	49729	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.204104900 CET	443	49730	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.204106092 CET	49730	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.204116106 CET	443	49730	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.204168081 CET	49730	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.204407930 CET	443	49730	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.204457998 CET	443	49730	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.204466105 CET	49730	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.204478025 CET	443	49730	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.204513073 CET	443	49730	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.204555035 CET	49730	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.204565048 CET	443	49730	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.204576015 CET	443	49729	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.204612017 CET	49730	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.204638958 CET	49729	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.204655886 CET	443	49729	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.205269098 CET	443	49730	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.205315113 CET	443	49730	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.205347061 CET	443	49730	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.205373049 CET	443	49730	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.205403090 CET	49730	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.205414057 CET	443	49730	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.205432892 CET	49730	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.206140041 CET	443	49730	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.206166983 CET	443	49730	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.206208944 CET	443	49730	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.206216097 CET	49730	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.206228018 CET	443	49730	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.206245899 CET	49730	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.206278086 CET	443	49730	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.206365108 CET	49730	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.208079100 CET	443	49729	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.208106995 CET	443	49729	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.208168983 CET	443	49729	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.208200932 CET	49729	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.208218098 CET	443	49729	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.208246946 CET	49729	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.208513975 CET	443	49729	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.208533049 CET	443	49729	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.208590984 CET	49729	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.208609104 CET	443	49729	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.208673000 CET	49729	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.209211111 CET	49730	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.209224939 CET	443	49730	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.209496021 CET	443	49729	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.209544897 CET	443	49729	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.209585905 CET	443	49729	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.209603071 CET	443	49729	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.209666014 CET	49729	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.209680080 CET	443	49729	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.209697962 CET	49729	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.210366011 CET	443	49729	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.210426092 CET	49729	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.210431099 CET	443	49729	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.210464001 CET	443	49729	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.210515976 CET	49729	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.214778900 CET	49729	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.214803934 CET	443	49729	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.234380960 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.234427929 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.234580040 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.234858036 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.234872103 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.255671978 CET	49733	443	192.168.2.4	52.222.232.144
Mar 19, 2025 10:04:03.255737066 CET	443	49733	52.222.232.144	192.168.2.4
Mar 19, 2025 10:04:03.255996943 CET	49734	443	192.168.2.4	52.222.232.144
Mar 19, 2025 10:04:03.256037951 CET	49733	443	192.168.2.4	52.222.232.144
Mar 19, 2025 10:04:03.256043911 CET	443	49734	52.222.232.144	192.168.2.4
Mar 19, 2025 10:04:03.256103992 CET	49734	443	192.168.2.4	52.222.232.144
Mar 19, 2025 10:04:03.256333113 CET	49734	443	192.168.2.4	52.222.232.144
Mar 19, 2025 10:04:03.256341934 CET	443	49734	52.222.232.144	192.168.2.4
Mar 19, 2025 10:04:03.256365061 CET	49733	443	192.168.2.4	52.222.232.144
Mar 19, 2025 10:04:03.256398916 CET	443	49733	52.222.232.144	192.168.2.4
Mar 19, 2025 10:04:03.261130095 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.261339903 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.261472940 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.261485100 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.283818960 CET	443	49733	52.222.232.144	192.168.2.4
Mar 19, 2025 10:04:03.283900976 CET	49733	443	192.168.2.4	52.222.232.144
Mar 19, 2025 10:04:03.284491062 CET	443	49734	52.222.232.144	192.168.2.4
Mar 19, 2025 10:04:03.284651041 CET	49734	443	192.168.2.4	52.222.232.144
Mar 19, 2025 10:04:03.287970066 CET	49734	443	192.168.2.4	52.222.232.144
Mar 19, 2025 10:04:03.288292885 CET	49733	443	192.168.2.4	52.222.232.144
Mar 19, 2025 10:04:03.288352966 CET	443	49734	52.222.232.144	192.168.2.4
Mar 19, 2025 10:04:03.288558960 CET	443	49733	52.222.232.144	192.168.2.4
Mar 19, 2025 10:04:03.288569927 CET	49734	443	192.168.2.4	52.222.232.144
Mar 19, 2025 10:04:03.288810015 CET	49733	443	192.168.2.4	52.222.232.144
Mar 19, 2025 10:04:03.298379898 CET	443	49733	52.222.232.144	192.168.2.4
Mar 19, 2025 10:04:03.298403978 CET	443	49734	52.222.232.144	192.168.2.4
Mar 19, 2025 10:04:03.298404932 CET	443	49733	52.222.232.144	192.168.2.4
Mar 19, 2025 10:04:03.298475027 CET	49733	443	192.168.2.4	52.222.232.144
Mar 19, 2025 10:04:03.298491955 CET	443	49733	52.222.232.144	192.168.2.4
Mar 19, 2025 10:04:03.298549891 CET	443	49733	52.222.232.144	192.168.2.4
Mar 19, 2025 10:04:03.298564911 CET	443	49734	52.222.232.144	192.168.2.4
Mar 19, 2025 10:04:03.298619032 CET	49733	443	192.168.2.4	52.222.232.144
Mar 19, 2025 10:04:03.299067974 CET	443	49733	52.222.232.144	192.168.2.4
Mar 19, 2025 10:04:03.299071074 CET	49734	443	192.168.2.4	52.222.232.144
Mar 19, 2025 10:04:03.299108982 CET	443	49733	52.222.232.144	192.168.2.4
Mar 19, 2025 10:04:03.299402952 CET	49733	443	192.168.2.4	52.222.232.144
Mar 19, 2025 10:04:03.304291964 CET	49734	443	192.168.2.4	52.222.232.144
Mar 19, 2025 10:04:03.304311991 CET	443	49734	52.222.232.144	192.168.2.4
Mar 19, 2025 10:04:03.306552887 CET	49733	443	192.168.2.4	52.222.232.144
Mar 19, 2025 10:04:03.306571960 CET	443	49733	52.222.232.144	192.168.2.4
Mar 19, 2025 10:04:03.314426899 CET	49736	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.314481974 CET	443	49736	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.314584970 CET	49736	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.314708948 CET	49736	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.314728975 CET	443	49736	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.328495026 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.328537941 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.328567982 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.328584909 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.328609943 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.328645945 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.328669071 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.328675032 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.328717947 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.328763008 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.328825951 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.328855991 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.328877926 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.328885078 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.328922987 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.329891920 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.333055973 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.333086967 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.333116055 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.333132029 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.333137035 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.333161116 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.333724976 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.333770990 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.333775997 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.333878994 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.333924055 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.333928108 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.334567070 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.334598064 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.334609985 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.334615946 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.334651947 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.334693909 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.334698915 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.334739923 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.335488081 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.335535049 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.335565090 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.335572958 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.335577011 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.335613966 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.335614920 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.335623980 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.335659981 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.337532997 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.337798119 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.337836981 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.337845087 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.337848902 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.337884903 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.338200092 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.338272095 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.338306904 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.338346958 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.338351011 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.338387012 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.338388920 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.338397980 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.338433981 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.338437080 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.339189053 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.339245081 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.339250088 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.339260101 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.339297056 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.340097904 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.340141058 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.340178013 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.340194941 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.340199947 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.340224981 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.341290951 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.341331959 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.341335058 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.341341019 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.341382980 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.341393948 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.341398001 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.341420889 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.341439009 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.341679096 CET	443	49736	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.342199087 CET	49736	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.342328072 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.342365026 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.342391968 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.342395067 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.342403889 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.342422962 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.342451096 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.342665911 CET	49736	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.342684031 CET	443	49736	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.343199015 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.343235970 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.343259096 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.343265057 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.343290091 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.343981028 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.344022989 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.344042063 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.344046116 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.344058990 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.344072104 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.344093084 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.344110966 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.344115019 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.344135046 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.344872952 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.344916105 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.344927073 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.344930887 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.344954014 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.344971895 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.344976902 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.344990969 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.344999075 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.345011950 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.345016003 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.345026970 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.345037937 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.345077991 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.345082045 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.345119953 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.345660925 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.345706940 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.346132994 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.346170902 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.346189976 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.346194029 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.346209049 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.346216917 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.346252918 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.346262932 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.346266985 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.346285105 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.346299887 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.346304893 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.346314907 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.346332073 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.346340895 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.346343994 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.346395016 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.347152948 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.347201109 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.347223043 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.347227097 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.347237110 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.347249031 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.347270012 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.347294092 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.347296953 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.347305059 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.347306967 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.347338915 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.347362041 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.347366095 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.347409964 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.348098040 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.348136902 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.348154068 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.348157883 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.348176956 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.348186016 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.348226070 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.348227978 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.348243952 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.348284960 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.348300934 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.348344088 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.348346949 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.348355055 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.348376036 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.348400116 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.348428011 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.348431110 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.349113941 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.349128962 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.349164009 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.349168062 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.349173069 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.349189997 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.349211931 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.349250078 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.349252939 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.349356890 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.350075006 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.350090981 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.350140095 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.350143909 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.350198030 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.350215912 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.350244045 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.350249052 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.350265980 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.350294113 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.350831985 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.351147890 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.351162910 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.351216078 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.351221085 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.351313114 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.352323055 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.352339983 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.352377892 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.352406025 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.352418900 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.352422953 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.352468967 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.352561951 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.352574110 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.352643967 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.352648020 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.352689028 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.352704048 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.352731943 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.352745056 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.352749109 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.352776051 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.352787971 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.352813005 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.352848053 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.352910995 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.354974985 CET	49732	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.354985952 CET	443	49732	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.412030935 CET	443	49736	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.412115097 CET	443	49736	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.412159920 CET	443	49736	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.412203074 CET	443	49736	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.412204981 CET	49736	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.412245035 CET	443	49736	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.412262917 CET	49736	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.412327051 CET	443	49736	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.412369013 CET	443	49736	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.412404060 CET	443	49736	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.412412882 CET	49736	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.412430048 CET	443	49736	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.412453890 CET	49736	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.413228035 CET	443	49736	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.413285017 CET	49736	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.413299084 CET	443	49736	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.416604996 CET	443	49736	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.416645050 CET	49736	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.416660070 CET	443	49736	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.416753054 CET	49736	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.417092085 CET	49736	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:04:03.417117119 CET	443	49736	104.18.160.117	192.168.2.4
Mar 19, 2025 10:04:03.602075100 CET	49741	443	192.168.2.4	52.222.232.47
Mar 19, 2025 10:04:03.602164984 CET	443	49741	52.222.232.47	192.168.2.4
Mar 19, 2025 10:04:03.602195024 CET	49742	443	192.168.2.4	52.222.232.47
Mar 19, 2025 10:04:03.602231979 CET	443	49742	52.222.232.47	192.168.2.4
Mar 19, 2025 10:04:03.602235079 CET	49741	443	192.168.2.4	52.222.232.47
Mar 19, 2025 10:04:03.602282047 CET	49742	443	192.168.2.4	52.222.232.47
Mar 19, 2025 10:04:03.602499008 CET	49742	443	192.168.2.4	52.222.232.47
Mar 19, 2025 10:04:03.602515936 CET	443	49742	52.222.232.47	192.168.2.4
Mar 19, 2025 10:04:03.602570057 CET	49741	443	192.168.2.4	52.222.232.47
Mar 19, 2025 10:04:03.602607012 CET	443	49741	52.222.232.47	192.168.2.4
Mar 19, 2025 10:04:03.606082916 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.606120110 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.606180906 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.606332064 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.606343031 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.622838974 CET	49744	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.622876883 CET	443	49744	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.622976065 CET	49744	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.623286009 CET	49744	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.623296976 CET	443	49744	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.647027969 CET	443	49742	52.222.232.47	192.168.2.4
Mar 19, 2025 10:04:03.647181034 CET	49742	443	192.168.2.4	52.222.232.47
Mar 19, 2025 10:04:03.647509098 CET	443	49741	52.222.232.47	192.168.2.4
Mar 19, 2025 10:04:03.647581100 CET	49741	443	192.168.2.4	52.222.232.47
Mar 19, 2025 10:04:03.648423910 CET	49741	443	192.168.2.4	52.222.232.47
Mar 19, 2025 10:04:03.648443937 CET	443	49741	52.222.232.47	192.168.2.4
Mar 19, 2025 10:04:03.648730993 CET	443	49741	52.222.232.47	192.168.2.4
Mar 19, 2025 10:04:03.648878098 CET	49742	443	192.168.2.4	52.222.232.47
Mar 19, 2025 10:04:03.648910999 CET	443	49742	52.222.232.47	192.168.2.4
Mar 19, 2025 10:04:03.649209976 CET	443	49742	52.222.232.47	192.168.2.4
Mar 19, 2025 10:04:03.649297953 CET	49741	443	192.168.2.4	52.222.232.47
Mar 19, 2025 10:04:03.649466991 CET	49742	443	192.168.2.4	52.222.232.47
Mar 19, 2025 10:04:03.650556087 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.650641918 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.651315928 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.651324987 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.651695013 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.651892900 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.654697895 CET	443	49744	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.654768944 CET	49744	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.655314922 CET	49744	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.655631065 CET	443	49744	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.655929089 CET	49744	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.661992073 CET	443	49741	52.222.232.47	192.168.2.4
Mar 19, 2025 10:04:03.662398100 CET	443	49741	52.222.232.47	192.168.2.4
Mar 19, 2025 10:04:03.662486076 CET	49741	443	192.168.2.4	52.222.232.47
Mar 19, 2025 10:04:03.663433075 CET	443	49742	52.222.232.47	192.168.2.4
Mar 19, 2025 10:04:03.663455009 CET	443	49742	52.222.232.47	192.168.2.4
Mar 19, 2025 10:04:03.663480997 CET	443	49742	52.222.232.47	192.168.2.4
Mar 19, 2025 10:04:03.663501978 CET	443	49742	52.222.232.47	192.168.2.4
Mar 19, 2025 10:04:03.663527966 CET	49742	443	192.168.2.4	52.222.232.47
Mar 19, 2025 10:04:03.663558960 CET	49742	443	192.168.2.4	52.222.232.47
Mar 19, 2025 10:04:03.671117067 CET	49741	443	192.168.2.4	52.222.232.47
Mar 19, 2025 10:04:03.671147108 CET	443	49741	52.222.232.47	192.168.2.4
Mar 19, 2025 10:04:03.672173977 CET	49742	443	192.168.2.4	52.222.232.47
Mar 19, 2025 10:04:03.672208071 CET	443	49742	52.222.232.47	192.168.2.4
Mar 19, 2025 10:04:03.692336082 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.696332932 CET	443	49744	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.723321915 CET	443	49744	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.723443985 CET	443	49744	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.723490000 CET	49744	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.723498106 CET	443	49744	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.723629951 CET	443	49744	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.723680019 CET	49744	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.723685026 CET	443	49744	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.724044085 CET	443	49744	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.724092960 CET	49744	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.724097013 CET	443	49744	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.724185944 CET	443	49744	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.724236012 CET	49744	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.724241018 CET	443	49744	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.727906942 CET	443	49744	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.727971077 CET	49744	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.727977037 CET	443	49744	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.728061914 CET	443	49744	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.728152990 CET	49744	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.728157997 CET	443	49744	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.728199959 CET	443	49744	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.728487968 CET	49744	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.730539083 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.730601072 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.730642080 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.730686903 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.730691910 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.730714083 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.730729103 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.730777979 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.730818987 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.730833054 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.730840921 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.730879068 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.730892897 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.732764006 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.732808113 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.732820034 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.735096931 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.735141039 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.735177040 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.735183001 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.735199928 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.735215902 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.735460043 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.735498905 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.735500097 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.735522032 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.735567093 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.735588074 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.736315966 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.736366987 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.736378908 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.736427069 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.736468077 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.736468077 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.736480951 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.736649036 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.737230062 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.737299919 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.737339020 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.737344980 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.737376928 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.737416029 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.737426043 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.738027096 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.738066912 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.738099098 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.738106012 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.738137007 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.738173962 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.738789082 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.738900900 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.739759922 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.739862919 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.739902973 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.739929914 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.739942074 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.740140915 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.740149975 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.740212917 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.740257025 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.740258932 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.740268946 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.740329981 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.741075993 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.741117001 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.741138935 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.741146088 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.741174936 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.741185904 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.742010117 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.742055893 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.742105007 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.742114067 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.742419004 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.742851973 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.742911100 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.743264914 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.743309021 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.743315935 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.743323088 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.743349075 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.743350029 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.743387938 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.743395090 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.743433952 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.744282961 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.744338036 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.744353056 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.744360924 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.744373083 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.744390011 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.744401932 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.744406939 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.744435072 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.745135069 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.745194912 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.745203972 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.745217085 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.745270967 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.745279074 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.745764971 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.745816946 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.745825052 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.745840073 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.745873928 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.745881081 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.745894909 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.745914936 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.745959997 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.745966911 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.745992899 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.746023893 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.746040106 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.746088028 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.746097088 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.746328115 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.746766090 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.746817112 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.746820927 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.746834040 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.746877909 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.746903896 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.746912956 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.746927023 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.747435093 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.747484922 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.747493029 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.747505903 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.747555017 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.747562885 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.747570038 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.747601986 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.747603893 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.747622967 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.747653961 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.747695923 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.747730970 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.747740030 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.747749090 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.747783899 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.748387098 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.748442888 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.748447895 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.748456001 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.748492002 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.748497009 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.748552084 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.748581886 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.748589039 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.748599052 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.748600006 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.748647928 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.748656034 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.748728037 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.749105930 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.749166012 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.749527931 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.749571085 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.749586105 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.749598980 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.749667883 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.749684095 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.749717951 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.749754906 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.749756098 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.749763966 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.749793053 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.749830961 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.749834061 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.749844074 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.749876976 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.750726938 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.750791073 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.750798941 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.750818968 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.750854015 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.750878096 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.750885963 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.750901937 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.751254082 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.751274109 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.751316071 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.751322985 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.751341105 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.751354933 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.751369953 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.751400948 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.751409054 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.751421928 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.752152920 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.752171040 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.752203941 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.752212048 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.752232075 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.752242088 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.752258062 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.752293110 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.752300978 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.752314091 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.752809048 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.752827883 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.752863884 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.752872944 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.752883911 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.753035069 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.753065109 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.753078938 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.753087044 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.753117085 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.753777981 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.753813982 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.753833055 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.753840923 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.753858089 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.753864050 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.753875971 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.753881931 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.753900051 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.753905058 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.753941059 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.754165888 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.754184008 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.754221916 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.754221916 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.754235983 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.754241943 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.754276037 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.754283905 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.754312992 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.754357100 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.756864071 CET	49744	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.756876945 CET	443	49744	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:03.758610964 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.780164003 CET	49743	443	192.168.2.4	104.18.161.117
Mar 19, 2025 10:04:03.780179977 CET	443	49743	104.18.161.117	192.168.2.4
Mar 19, 2025 10:04:04.190193892 CET	49678	443	192.168.2.4	20.189.173.27
Mar 19, 2025 10:04:04.511076927 CET	49678	443	192.168.2.4	20.189.173.27
Mar 19, 2025 10:04:04.955065012 CET	49671	443	192.168.2.4	204.79.197.203
Mar 19, 2025 10:04:05.126940012 CET	49678	443	192.168.2.4	20.189.173.27
Mar 19, 2025 10:04:06.330056906 CET	49678	443	192.168.2.4	20.189.173.27
Mar 19, 2025 10:04:08.736478090 CET	49678	443	192.168.2.4	20.189.173.27
Mar 19, 2025 10:04:10.030819893 CET	443	49724	142.250.181.228	192.168.2.4
Mar 19, 2025 10:04:10.030883074 CET	443	49724	142.250.181.228	192.168.2.4
Mar 19, 2025 10:04:10.030924082 CET	49724	443	192.168.2.4	142.250.181.228
Mar 19, 2025 10:04:10.328200102 CET	49747	80	192.168.2.4	142.250.186.35
Mar 19, 2025 10:04:10.332967997 CET	80	49747	142.250.186.35	192.168.2.4
Mar 19, 2025 10:04:10.333050966 CET	49747	80	192.168.2.4	142.250.186.35
Mar 19, 2025 10:04:10.333168983 CET	49747	80	192.168.2.4	142.250.186.35
Mar 19, 2025 10:04:10.337847948 CET	80	49747	142.250.186.35	192.168.2.4
Mar 19, 2025 10:04:10.349275112 CET	80	49747	142.250.186.35	192.168.2.4
Mar 19, 2025 10:04:10.360605955 CET	49747	80	192.168.2.4	142.250.186.35
Mar 19, 2025 10:04:10.368417978 CET	80	49747	142.250.186.35	192.168.2.4
Mar 19, 2025 10:04:10.409456968 CET	49747	80	192.168.2.4	142.250.186.35
Mar 19, 2025 10:04:11.355313063 CET	49724	443	192.168.2.4	142.250.181.228
Mar 19, 2025 10:04:11.355351925 CET	443	49724	142.250.181.228	192.168.2.4
Mar 19, 2025 10:04:11.355851889 CET	49750	443	192.168.2.4	104.18.36.248
Mar 19, 2025 10:04:11.355895042 CET	443	49750	104.18.36.248	192.168.2.4
Mar 19, 2025 10:04:11.355958939 CET	49750	443	192.168.2.4	104.18.36.248
Mar 19, 2025 10:04:11.356409073 CET	49750	443	192.168.2.4	104.18.36.248
Mar 19, 2025 10:04:11.356426001 CET	443	49750	104.18.36.248	192.168.2.4
Mar 19, 2025 10:04:11.385790110 CET	443	49750	104.18.36.248	192.168.2.4
Mar 19, 2025 10:04:11.386112928 CET	49750	443	192.168.2.4	104.18.36.248
Mar 19, 2025 10:04:11.428342104 CET	443	49750	104.18.36.248	192.168.2.4
Mar 19, 2025 10:04:13.548899889 CET	49678	443	192.168.2.4	20.189.173.27
Mar 19, 2025 10:04:14.564546108 CET	49671	443	192.168.2.4	204.79.197.203
Mar 19, 2025 10:04:23.158276081 CET	49678	443	192.168.2.4	20.189.173.27
Mar 19, 2025 10:04:26.381304979 CET	443	49750	104.18.36.248	192.168.2.4
Mar 19, 2025 10:04:26.381375074 CET	443	49750	104.18.36.248	192.168.2.4
Mar 19, 2025 10:04:26.381589890 CET	49750	443	192.168.2.4	104.18.36.248
Mar 19, 2025 10:04:27.533714056 CET	49750	443	192.168.2.4	104.18.36.248
Mar 19, 2025 10:04:27.533776999 CET	443	49750	104.18.36.248	192.168.2.4
Mar 19, 2025 10:05:00.033489943 CET	49755	443	192.168.2.4	142.250.181.228
Mar 19, 2025 10:05:00.033529997 CET	443	49755	142.250.181.228	192.168.2.4
Mar 19, 2025 10:05:00.033668995 CET	49755	443	192.168.2.4	142.250.181.228
Mar 19, 2025 10:05:00.034724951 CET	49755	443	192.168.2.4	142.250.181.228
Mar 19, 2025 10:05:00.034739971 CET	443	49755	142.250.181.228	192.168.2.4
Mar 19, 2025 10:05:00.065529108 CET	443	49755	142.250.181.228	192.168.2.4
Mar 19, 2025 10:05:00.065895081 CET	49755	443	192.168.2.4	142.250.181.228
Mar 19, 2025 10:05:00.108336926 CET	443	49755	142.250.181.228	192.168.2.4
Mar 19, 2025 10:05:10.064446926 CET	443	49755	142.250.181.228	192.168.2.4
Mar 19, 2025 10:05:10.064513922 CET	443	49755	142.250.181.228	192.168.2.4
Mar 19, 2025 10:05:10.064563036 CET	49755	443	192.168.2.4	142.250.181.228
Mar 19, 2025 10:05:10.471343994 CET	49747	80	192.168.2.4	142.250.186.35
Mar 19, 2025 10:05:10.477180958 CET	80	49747	142.250.186.35	192.168.2.4
Mar 19, 2025 10:05:10.477252007 CET	49747	80	192.168.2.4	142.250.186.35
Mar 19, 2025 10:05:11.511632919 CET	49755	443	192.168.2.4	142.250.181.228
Mar 19, 2025 10:05:11.511714935 CET	443	49755	142.250.181.228	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 19, 2025 10:03:57.403225899 CET	53	58786	1.1.1.1	192.168.2.4
Mar 19, 2025 10:03:57.487382889 CET	53	61256	1.1.1.1	192.168.2.4
Mar 19, 2025 10:03:57.669678926 CET	53	51899	1.1.1.1	192.168.2.4
Mar 19, 2025 10:03:59.972441912 CET	50381	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:03:59.972659111 CET	60307	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:03:59.979366064 CET	53	50381	1.1.1.1	192.168.2.4
Mar 19, 2025 10:03:59.979396105 CET	53	60307	1.1.1.1	192.168.2.4
Mar 19, 2025 10:04:02.880456924 CET	56295	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:04:02.880631924 CET	59136	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:04:02.890887976 CET	53	56295	1.1.1.1	192.168.2.4
Mar 19, 2025 10:04:02.892478943 CET	53	59136	1.1.1.1	192.168.2.4
Mar 19, 2025 10:04:02.900422096 CET	61364	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:04:02.900638103 CET	52716	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:04:02.911428928 CET	53	52716	1.1.1.1	192.168.2.4
Mar 19, 2025 10:04:02.912260056 CET	53	61364	1.1.1.1	192.168.2.4
Mar 19, 2025 10:04:03.088015079 CET	51048	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:04:03.088159084 CET	63399	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:04:03.089843988 CET	59830	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:04:03.090445042 CET	53641	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:04:03.095439911 CET	53	63399	1.1.1.1	192.168.2.4
Mar 19, 2025 10:04:03.097213984 CET	53	53641	1.1.1.1	192.168.2.4
Mar 19, 2025 10:04:03.097654104 CET	53	59830	1.1.1.1	192.168.2.4
Mar 19, 2025 10:04:03.098262072 CET	53	51048	1.1.1.1	192.168.2.4
Mar 19, 2025 10:04:03.593430042 CET	52219	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:04:03.593535900 CET	59282	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:04:03.597508907 CET	50805	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:04:03.597637892 CET	56163	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:04:03.601082087 CET	53	52219	1.1.1.1	192.168.2.4
Mar 19, 2025 10:04:03.601401091 CET	53	59282	1.1.1.1	192.168.2.4
Mar 19, 2025 10:04:03.604619026 CET	53	56163	1.1.1.1	192.168.2.4
Mar 19, 2025 10:04:03.605674028 CET	53	50805	1.1.1.1	192.168.2.4
Mar 19, 2025 10:04:14.625626087 CET	53	60517	1.1.1.1	192.168.2.4
Mar 19, 2025 10:04:33.488653898 CET	53	51299	1.1.1.1	192.168.2.4
Mar 19, 2025 10:04:55.893151045 CET	53	51200	1.1.1.1	192.168.2.4
Mar 19, 2025 10:04:57.014750004 CET	53	56278	1.1.1.1	192.168.2.4
Mar 19, 2025 10:04:57.994574070 CET	53	65453	1.1.1.1	192.168.2.4
Mar 19, 2025 10:05:03.654129982 CET	138	138	192.168.2.4	192.168.2.255

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 19, 2025 10:03:59.972441912 CET	192.168.2.4	1.1.1.1	0xc728	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:03:59.972659111 CET	192.168.2.4	1.1.1.1	0xc947	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 19, 2025 10:04:02.880456924 CET	192.168.2.4	1.1.1.1	0x5a25	Standard query (0)	sso-cdn-coinbasepro-autthh.webflow.io	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:04:02.880631924 CET	192.168.2.4	1.1.1.1	0xa756	Standard query (0)	sso-cdn-coinbasepro-autthh.webflow.io	65	IN (0x0001)	false
Mar 19, 2025 10:04:02.900422096 CET	192.168.2.4	1.1.1.1	0x57ab	Standard query (0)	sso-cdn-coinbasepro-autthh.webflow.io	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:04:02.900638103 CET	192.168.2.4	1.1.1.1	0x8ae0	Standard query (0)	sso-cdn-coinbasepro-autthh.webflow.io	65	IN (0x0001)	false
Mar 19, 2025 10:04:03.088015079 CET	192.168.2.4	1.1.1.1	0xa69d	Standard query (0)	cdn.prod.website-files.com	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:04:03.088159084 CET	192.168.2.4	1.1.1.1	0xf646	Standard query (0)	cdn.prod.website-files.com	65	IN (0x0001)	false
Mar 19, 2025 10:04:03.089843988 CET	192.168.2.4	1.1.1.1	0x66d1	Standard query (0)	d3e54v103j8qbb.cloudfront.net	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:04:03.090445042 CET	192.168.2.4	1.1.1.1	0x9a71	Standard query (0)	d3e54v103j8qbb.cloudfront.net	65	IN (0x0001)	false
Mar 19, 2025 10:04:03.593430042 CET	192.168.2.4	1.1.1.1	0x7bd7	Standard query (0)	d3e54v103j8qbb.cloudfront.net	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:04:03.593535900 CET	192.168.2.4	1.1.1.1	0x6667	Standard query (0)	d3e54v103j8qbb.cloudfront.net	65	IN (0x0001)	false
Mar 19, 2025 10:04:03.597508907 CET	192.168.2.4	1.1.1.1	0x996	Standard query (0)	cdn.prod.website-files.com	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:04:03.597637892 CET	192.168.2.4	1.1.1.1	0x3093	Standard query (0)	cdn.prod.website-files.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Mar 19, 2025 10:03:59.979366064 CET	1.1.1.1	192.168.2.4	0xc728	No error (0)	www.google.com	142.250.181.228	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:03:59.979396105 CET	1.1.1.1	192.168.2.4	0xc947	No error (0)	www.google.com		65	IN (0x0001)	false
Mar 19, 2025 10:04:02.890887976 CET	1.1.1.1	192.168.2.4	0x5a25	No error (0)	sso-cdn-coinbasepro-autthh.webflow.io	104.18.36.248	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:04:02.890887976 CET	1.1.1.1	192.168.2.4	0x5a25	No error (0)	sso-cdn-coinbasepro-autthh.webflow.io	172.64.151.8	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:04:02.892478943 CET	1.1.1.1	192.168.2.4	0xa756	No error (0)	sso-cdn-coinbasepro-autthh.webflow.io		65	IN (0x0001)	false
Mar 19, 2025 10:04:02.911428928 CET	1.1.1.1	192.168.2.4	0x8ae0	No error (0)	sso-cdn-coinbasepro-autthh.webflow.io		65	IN (0x0001)	false
Mar 19, 2025 10:04:02.912260056 CET	1.1.1.1	192.168.2.4	0x57ab	No error (0)	sso-cdn-coinbasepro-autthh.webflow.io	104.18.36.248	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:04:02.912260056 CET	1.1.1.1	192.168.2.4	0x57ab	No error (0)	sso-cdn-coinbasepro-autthh.webflow.io	172.64.151.8	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:04:03.095439911 CET	1.1.1.1	192.168.2.4	0xf646	No error (0)	cdn.prod.website-files.com		65	IN (0x0001)	false
Mar 19, 2025 10:04:03.097654104 CET	1.1.1.1	192.168.2.4	0x66d1	No error (0)	d3e54v103j8qbb.cloudfront.net	52.222.232.144	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:04:03.097654104 CET	1.1.1.1	192.168.2.4	0x66d1	No error (0)	d3e54v103j8qbb.cloudfront.net	52.222.232.47	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:04:03.097654104 CET	1.1.1.1	192.168.2.4	0x66d1	No error (0)	d3e54v103j8qbb.cloudfront.net	52.222.232.99	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:04:03.097654104 CET	1.1.1.1	192.168.2.4	0x66d1	No error (0)	d3e54v103j8qbb.cloudfront.net	52.222.232.39	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:04:03.098262072 CET	1.1.1.1	192.168.2.4	0xa69d	No error (0)	cdn.prod.website-files.com	104.18.160.117	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:04:03.098262072 CET	1.1.1.1	192.168.2.4	0xa69d	No error (0)	cdn.prod.website-files.com	104.18.161.117	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:04:03.601082087 CET	1.1.1.1	192.168.2.4	0x7bd7	No error (0)	d3e54v103j8qbb.cloudfront.net	52.222.232.47	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:04:03.601082087 CET	1.1.1.1	192.168.2.4	0x7bd7	No error (0)	d3e54v103j8qbb.cloudfront.net	52.222.232.99	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:04:03.601082087 CET	1.1.1.1	192.168.2.4	0x7bd7	No error (0)	d3e54v103j8qbb.cloudfront.net	52.222.232.144	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:04:03.601082087 CET	1.1.1.1	192.168.2.4	0x7bd7	No error (0)	d3e54v103j8qbb.cloudfront.net	52.222.232.39	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:04:03.604619026 CET	1.1.1.1	192.168.2.4	0x3093	No error (0)	cdn.prod.website-files.com		65	IN (0x0001)	false
Mar 19, 2025 10:04:03.605674028 CET	1.1.1.1	192.168.2.4	0x996	No error (0)	cdn.prod.website-files.com	104.18.161.117	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:04:03.605674028 CET	1.1.1.1	192.168.2.4	0x996	No error (0)	cdn.prod.website-files.com	104.18.160.117	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

sso-cdn-coinbasepro-autthh.webflow.io

cdn.prod.website-files.com

d3e54v103j8qbb.cloudfront.net

c.pki.goog

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.4	49747	142.250.186.35	80

Timestamp	Bytes transferred	Direction	Data
Mar 19, 2025 10:04:10.333168983 CET	202	OUT	GET /r/gsr1.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 19, 2025 10:04:10.349275112 CET	222	IN	HTTP/1.1 304 Not Modified Date: Wed, 19 Mar 2025 08:58:43 GMT Expires: Wed, 19 Mar 2025 09:48:43 GMT Age: 327 Last-Modified: Tue, 07 Jan 2025 07:28:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding
Mar 19, 2025 10:04:10.360605955 CET	200	OUT	GET /r/r4.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 19, 2025 10:04:10.368417978 CET	222	IN	HTTP/1.1 304 Not Modified Date: Wed, 19 Mar 2025 08:58:48 GMT Expires: Wed, 19 Mar 2025 09:48:48 GMT Age: 322 Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49728	104.18.36.248	443	4712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 09:04:02 UTC	687	OUT	GET / HTTP/1.1 Host: sso-cdn-coinbasepro-autthh.webflow.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 09:04:03 UTC	822	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 09:04:03 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close CF-Ray: 922bccd2bf319201-FRA CF-Cache-Status: HIT Age: 195716 Last-Modified: Sun, 16 Mar 2025 23:40:05 GMT content-security-policy: frame-ancestors 'self' https://.webflow.com http://.webflow.com http://*.webflow.io http://webflow.com https://webflow.com surrogate-control: max-age=2147483647 surrogate-key: sso-cdn-coinbasepro-autthh.webflow.io 669bd6e9e6fd0bf7cd830b6c pageId:669bd6e9e6fd0bf7cd830b6b x-lambda-id: 90d4420e-fc39-4bbd-aff0-edc1bce7532d vary: Accept-Encoding Set-Cookie: _cfuvid=vWzcUB65gKlvbJK7PxX5xDE5TMsQ9u.74SKB5rwlKIc-1742375043039-0.0.1.1-604800000; path=/; domain=.webflow.io; HttpOnly; Secure; SameSite=None Server: cloudflare alt-svc: h3=":443"; ma=86400
2025-03-19 09:04:03 UTC	547	IN	Data Raw: 62 64 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 21 2d 2d 20 54 68 69 73 20 73 69 74 65 20 77 61 73 20 63 72 65 61 74 65 64 20 69 6e 20 57 65 62 66 6c 6f 77 2e 20 68 74 74 70 73 3a 2f 2f 77 65 62 66 6c 6f 77 2e 63 6f 6d 20 2d 2d 3e 3c 21 2d 2d 20 4c 61 73 74 20 50 75 62 6c 69 73 68 65 64 3a 20 53 61 74 20 4a 75 6c 20 32 30 20 32 30 32 34 20 31 35 3a 32 38 3a 32 34 20 47 4d 54 2b 30 30 30 30 20 28 43 6f 6f 72 64 69 6e 61 74 65 64 20 55 6e 69 76 65 72 73 61 6c 20 54 69 6d 65 29 20 2d 2d 3e 3c 68 74 6d 6c 20 64 61 74 61 2d 77 66 2d 64 6f 6d 61 69 6e 3d 22 73 73 6f 2d 63 64 6e 2d 63 6f 69 6e 62 61 73 65 70 72 6f 2d 61 75 74 74 68 68 2e 77 65 62 66 6c 6f 77 2e 69 6f 22 20 64 61 74 61 2d 77 66 2d 70 61 67 65 3d 22 36 36 39 62 64 36 65 39 65 36 66 Data Ascii: bd4<!DOCTYPE html>... This site was created in Webflow. https://webflow.com -->... Last Published: Sat Jul 20 2024 15:28:24 GMT+0000 (Coordinated Universal Time) --><html data-wf-domain="sso-cdn-coinbasepro-autthh.webflow.io" data-wf-page="669bd6e9e6f
2025-03-19 09:04:03 UTC	1369	IN	Data Raw: 20 6c 6f 77 20 66 65 65 73 20 66 6f 72 20 62 75 79 69 6e 67 20 61 6e 64 20 73 65 6c 6c 69 6e 67 20 63 72 79 70 74 6f 63 75 72 72 65 6e 63 69 65 73 2e 22 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 2f 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 4f 66 66 69 63 69 61 6c 20 53 69 74 65 c2 ae 20 7c 20 43 6f 69 6e 62 61 73 65 20 50 72 6f 20 7c 20 44 69 67 69 74 61 6c 20 41 73 73 65 74 20 45 78 63 68 61 6e 67 65 c2 ae 22 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 2f 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 4a 6f 69 6e 20 43 6f 69 6e 62 61 73 65 20 50 72 6f 20 66 6f 72 20 61 20 70 72 65 6d 69 75 6d 20 74 72 61 64 69 6e 67 20 65 78 70 65 72 69 65 6e 63 65 2c 20 66 65 61 74 75 72 69 6e 67 20 61 64 76 61 6e 63 65 64 20 74 6f Data Ascii: low fees for buying and selling cryptocurrencies." name="description"/><meta content="Official Site \| Coinbase Pro \| Digital Asset Exchange" property="og:title"/><meta content="Join Coinbase Pro for a premium trading experience, featuring advanced to
2025-03-19 09:04:03 UTC	1119	IN	Data Raw: 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 70 72 6f 64 2e 77 65 62 73 69 74 65 2d 66 69 6c 65 73 2e 63 6f 6d 2f 69 6d 67 2f 77 65 62 63 6c 69 70 2e 70 6e 67 22 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 22 2f 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 61 20 68 72 65 66 3d 22 23 22 20 63 6c 61 73 73 3d 22 77 2d 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 70 72 6f 64 2e 77 65 62 73 69 74 65 2d 66 69 6c 65 73 2e 63 6f 6d 2f 36 36 39 62 64 36 65 39 65 36 66 64 30 62 66 37 63 64 38 33 30 62 36 63 2f 36 36 39 62 64 36 65 39 65 36 66 64 30 62 66 37 63 64 38 33 30 62 36 66 5f 63 6f 69 6e 2e 6a 70 65 67 22 20 6c 6f 61 64 69 6e 67 3d 22 6c 61 7a 79 22 20 73 69 7a 65 73 Data Ascii: ref="https://cdn.prod.website-files.com/img/webclip.png" rel="apple-touch-icon"/></head><body><a href="#" class="w-inline-block"><img src="https://cdn.prod.website-files.com/669bd6e9e6fd0bf7cd830b6c/669bd6e9e6fd0bf7cd830b6f_coin.jpeg" loading="lazy" sizes
2025-03-19 09:04:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49730	104.18.160.117	443	4712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 09:04:03 UTC	679	OUT	GET /669bd6e9e6fd0bf7cd830b6c/css/sso-cdn-coinbasepro-autthh.webflow.e928f4266.css HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Referer: https://sso-cdn-coinbasepro-autthh.webflow.io/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 09:04:03 UTC	644	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 09:04:03 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close x-amz-id-2: Cl9f7G9thSjIiDMS0uuSOmkjJwzMNwIiq6gVKRQWH6OWZZI1NhjWLe2i08qVS4zEWKraFlB2Gk0lRHiNSP2InA== x-amz-request-id: AYH84HV2R422NH7P Last-Modified: Sat, 20 Jul 2024 15:28:25 GMT ETag: W/"5cd0812e954082c7c4c56bb2259acc6e" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000, immutable x-amz-version-id: vkGognMR8gYgw7onZhMUKwztc_HqFuw_ CF-Cache-Status: HIT Age: 118277 Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 922bccd3eb33a064-FRA alt-svc: h3=":443"; ma=86400
2025-03-19 09:04:03 UTC	725	IN	Data Raw: 37 64 32 63 0d 0a 68 74 6d 6c 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 3b 0a 20 20 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 62 6f 64 79 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 7d 0a 0a 61 72 74 69 63 6c 65 2c 20 61 73 69 64 65 2c 20 64 65 74 61 69 6c 73 2c 20 66 69 67 63 61 70 74 69 6f 6e 2c 20 66 69 67 75 72 65 2c 20 66 6f 6f 74 65 72 2c 20 68 65 61 64 65 72 2c 20 68 67 72 6f 75 70 2c 20 6d 61 69 6e 2c 20 6d 65 6e 75 2c 20 6e 61 76 2c 20 73 65 63 74 69 6f 6e 2c 20 73 75 6d 6d 61 72 79 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 7d 0a Data Ascii: 7d2chtml { -webkit-text-size-adjust: 100%; -ms-text-size-adjust: 100%; font-family: sans-serif;}body { margin: 0;}article, aside, details, figcaption, figure, footer, header, hgroup, main, menu, nav, section, summary { display: block;}
2025-03-19 09:04:03 UTC	1369	IN	Data Raw: 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 38 30 25 3b 0a 7d 0a 0a 73 75 62 2c 20 73 75 70 20 7b 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 62 61 73 65 6c 69 6e 65 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 37 35 25 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 30 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 7d 0a 0a 73 75 70 20 7b 0a 20 20 74 6f 70 3a 20 2d 2e 35 65 6d 3b 0a 7d 0a 0a 73 75 62 20 7b 0a 20 20 62 6f 74 74 6f 6d 3a 20 2d 2e 32 35 65 6d 3b 0a 7d 0a 0a 69 6d 67 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 30 3b 0a 7d 0a 0a 73 76 67 3a 6e 6f 74 28 3a 72 6f 6f 74 29 20 7b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 0a 68 72 20 7b 0a 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 63 6f 6e Data Ascii: font-size: 80%;}sub, sup { vertical-align: baseline; font-size: 75%; line-height: 0; position: relative;}sup { top: -.5em;}sub { bottom: -.25em;}img { border: 0;}svg:not(:root) { overflow: hidden;}hr { box-sizing: con
2025-03-19 09:04:03 UTC	1369	IN	Data Raw: 61 70 73 65 3b 0a 20 20 62 6f 72 64 65 72 2d 73 70 61 63 69 6e 67 3a 20 30 3b 0a 7d 0a 0a 74 64 2c 20 74 68 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 7d 0a 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 77 65 62 66 6c 6f 77 2d 69 63 6f 6e 73 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 22 64 61 74 61 3a 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 66 6f 6e 74 2d 74 74 66 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3b 62 61 73 65 36 34 2c 41 41 45 41 41 41 41 4c 41 49 41 41 41 77 41 77 54 31 4d 76 4d 67 38 53 42 69 55 41 41 41 43 38 41 41 41 41 59 47 4e 74 59 58 44 70 50 2b 61 34 41 41 41 42 48 41 41 41 41 46 78 6e 59 58 4e 77 41 41 41 41 45 41 41 41 41 58 67 41 41 41 41 49 5a 32 78 35 5a 6d 68 53 32 58 45 41 41 41 47 Data Ascii: apse; border-spacing: 0;}td, th { padding: 0;}@font-face { font-family: webflow-icons; src: url("data:application/x-font-ttf;charset=utf-8;base64,AAEAAAALAIAAAwAwT1MvMg8SBiUAAAC8AAAAYGNtYXDpP+a4AAABHAAAAFxnYXNwAAAAEAAAAXgAAAAIZ2x5ZmhS2XEAAAG
2025-03-19 09:04:03 UTC	1369	IN	Data Raw: 6c 31 71 61 6c 31 65 69 79 67 6f 5a 69 45 67 62 30 74 4b 56 56 56 4b 53 32 38 67 49 53 45 67 62 30 74 4b 56 56 56 4b 53 32 38 67 49 51 41 42 41 41 41 42 77 41 49 41 41 38 41 41 45 67 41 41 45 7a 51 33 50 67 45 33 4e 6a 4d 78 46 53 49 48 44 67 45 48 42 68 55 78 49 77 41 6f 4b 49 74 65 58 57 70 56 53 6b 74 76 49 43 46 6d 41 63 42 71 58 56 36 4c 4b 43 68 6d 49 53 42 76 53 30 70 56 41 41 41 41 41 67 41 41 2f 38 41 46 74 67 50 41 41 44 49 41 4f 67 41 41 41 52 59 58 48 67 45 58 46 68 55 55 42 77 34 42 42 77 59 48 49 78 55 68 49 69 63 75 41 53 63 6d 4e 54 51 33 50 67 45 33 4e 6a 4d 78 4f 41 45 78 4e 44 63 2b 41 54 63 32 4d 7a 49 58 48 67 45 58 46 68 63 56 41 54 4d 4a 41 54 4d 56 4d 7a 55 45 6a 44 38 33 4e 6c 41 58 46 78 59 58 54 6a 55 31 50 51 4c 38 6b 7a 30 31 Data Ascii: l1qal1eiygoZiEgb0tKVVVKS28gISEgb0tKVVVKS28gIQABAAABwAIAA8AAEgAAEzQ3PgE3NjMxFSIHDgEHBhUxIwAoKIteXWpVSktvICFmAcBqXV6LKChmISBvS0pVAAAAAgAA/8AFtgPAADIAOgAAARYXHgEXFhUUBw4BBwYHIxUhIicuAScmNTQ3PgE3NjMxOAExNDc+ATc2MzIXHgEXFhcVATMJATMVMzUEjD83NlAXFxYXTjU1PQL8kz01
2025-03-19 09:04:03 UTC	1369	IN	Data Raw: 61 73 73 5e 3d 22 77 2d 69 63 6f 6e 2d 22 5d 2c 20 5b 63 6c 61 73 73 2a 3d 22 20 77 2d 69 63 6f 6e 2d 22 5d 20 7b 0a 20 20 73 70 65 61 6b 3a 20 6e 6f 6e 65 3b 0a 20 20 66 6f 6e 74 2d 76 61 72 69 61 6e 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 6e 6f 6e 65 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 20 61 6e 74 69 61 6c 69 61 73 65 64 3b 0a 20 20 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 20 67 72 61 79 73 63 61 6c 65 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 Data Ascii: ass^="w-icon-"], [class*=" w-icon-"] { speak: none; font-variant: normal; text-transform: none; -webkit-font-smoothing: antialiased; -moz-osx-font-smoothing: grayscale; font-style: normal; font-weight: normal; line-height: 1; font-family
2025-03-19 09:04:03 UTC	1369	IN	Data Raw: 72 3a 20 30 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 39 70 78 20 31 35 70 78 3b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 7d 0a 0a 69 6e 70 75 74 2e 77 2d 62 75 74 74 6f 6e 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 20 62 75 74 74 6f 6e 3b 0a 7d 0a 0a 68 74 6d 6c 5b 64 61 74 61 2d 77 2d 64 79 6e 70 61 67 65 5d 20 5b 64 61 74 61 2d 77 2d 63 6c 6f 61 6b 5d 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 2e 77 2d 63 6f 64 65 2d 62 6c 6f 63 6b 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 75 6e 73 65 74 3b 0a 7d 0a 0a 70 Data Ascii: r: 0; border-radius: 0; padding: 9px 15px; text-decoration: none; display: inline-block;}input.w-button { -webkit-appearance: button;}html[data-w-dynpage] [data-w-cloak] { color: #0000 !important;}.w-code-block { margin: unset;}p
2025-03-19 09:04:03 UTC	1369	IN	Data Raw: 6f 69 6e 74 65 72 3b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 30 20 31 70 78 20 23 30 30 30 30 30 30 31 61 2c 20 30 20 31 70 78 20 33 70 78 20 23 30 30 30 30 30 30 31 61 3b 0a 20 20 76 69 73 69 62 69 6c 69 74 79 3a 20 76 69 73 69 62 6c 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 32 31 34 37 34 38 33 36 34 37 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 61 61 61 64 62 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 6f 70 61 63 69 74 79 3a 20 31 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b Data Ascii: ointer; box-shadow: 0 0 0 1px #0000001a, 0 1px 3px #0000001a; visibility: visible !important; z-index: 2147483647 !important; color: #aaadb0 !important; opacity: 1 !important; background-color: #fff !important; border-radius: 3px !important;
2025-03-19 09:04:03 UTC	1369	IN	Data Raw: 67 69 6e 3a 20 30 20 30 20 31 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 20 32 30 70 78 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 32 70 78 3b 0a 7d 0a 0a 66 69 67 75 72 65 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 30 70 78 3b 0a 7d 0a 0a 66 69 67 63 61 70 74 69 6f 6e 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 35 70 78 3b 0a 7d 0a 0a 75 6c 2c 20 6f 6c 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 34 30 70 78 3b 0a 7d 0a 0a 2e 77 2d 6c 69 73 74 2d 75 6e 73 74 Data Ascii: gin: 0 0 10px; padding: 10px 20px; font-size: 18px; line-height: 22px;}figure { margin: 0 0 10px;}figcaption { text-align: center; margin-top: 5px;}ul, ol { margin-top: 0; margin-bottom: 10px; padding-left: 40px;}.w-list-unst
2025-03-19 09:04:03 UTC	1369	IN	Data Raw: 77 2d 69 6e 70 75 74 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2c 20 2e 77 2d 73 65 6c 65 63 74 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 39 39 39 3b 0a 7d 0a 0a 2e 77 2d 69 6e 70 75 74 3a 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2c 20 2e 77 2d 73 65 6c 65 63 74 3a 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 39 39 39 3b 0a 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 7d 0a 0a 2e 77 2d 69 6e 70 75 74 3a 3a 2d 77 65 62 6b 69 74 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2c 20 2e 77 2d 73 65 6c 65 63 74 3a 3a 2d 77 65 62 6b 69 74 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 39 39 39 3b 0a 7d Data Ascii: w-input:-moz-placeholder, .w-select:-moz-placeholder { color: #999;}.w-input::-moz-placeholder, .w-select::-moz-placeholder { color: #999; opacity: 1;}.w-input::-webkit-input-placeholder, .w-select::-webkit-input-placeholder { color: #999;}
2025-03-19 09:04:03 UTC	1369	IN	Data Raw: 66 69 6c 65 2d 75 70 6c 6f 61 64 2d 69 6e 70 75 74 20 7b 0a 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 2d 31 30 30 3b 0a 20 20 77 69 64 74 68 3a 20 2e 31 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 2e 31 70 78 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 0a 2e 77 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 2d 64 65 66 61 75 6c 74 2c 20 2e 77 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 2d 75 70 6c 6f 61 64 69 6e 67 2c 20 2e 77 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 2d 73 75 63 63 65 73 73 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 33 33 33 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2e 77 2d 66 69 6c 65 2d 75 70 Data Ascii: file-upload-input { opacity: 0; z-index: -100; width: .1px; height: .1px; position: absolute; overflow: hidden;}.w-file-upload-default, .w-file-upload-uploading, .w-file-upload-success { color: #333; display: inline-block;}.w-file-up

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49729	104.18.160.117	443	4712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 09:04:03 UTC	636	OUT	GET /669bd6e9e6fd0bf7cd830b6c/js/webflow.4e8135d87.js HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://sso-cdn-coinbasepro-autthh.webflow.io/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 09:04:03 UTC	671	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 09:04:03 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close x-amz-id-2: PiBwMLozc5gIaXjaK8ZirZQHiyJ5rSfcn1g872pqa5f75rQf5MmNgqFMy6whMv9vCjP+CkLVxf7JTr0XNBW7AN0FTYIm5VFq5YO61QQpPHY= x-amz-request-id: AYH5VB2BGP03SS3V Last-Modified: Sat, 20 Jul 2024 15:28:25 GMT ETag: W/"48bd2b847a93ac70ad46484a35db1786" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000, immutable x-amz-version-id: sOaokaOkEFdiQOOAufOJzdSv9BwUfIa. CF-Cache-Status: HIT Age: 118277 Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 922bccd3e8bda040-FRA alt-svc: h3=":443"; ma=86400
2025-03-19 09:04:03 UTC	698	IN	Data Raw: 37 64 31 31 0d 0a 0a 2f 2a 21 0a 20 2a 20 57 65 62 66 6c 6f 77 3a 20 46 72 6f 6e 74 2d 65 6e 64 20 73 69 74 65 20 6c 69 62 72 61 72 79 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 4d 49 54 0a 20 2a 20 49 6e 6c 69 6e 65 20 73 63 72 69 70 74 73 20 6d 61 79 20 61 63 63 65 73 73 20 74 68 65 20 61 70 69 20 75 73 69 6e 67 20 61 6e 20 61 73 79 6e 63 20 68 61 6e 64 6c 65 72 3a 0a 20 2a 20 20 20 76 61 72 20 57 65 62 66 6c 6f 77 20 3d 20 57 65 62 66 6c 6f 77 20 7c 7c 20 5b 5d 3b 0a 20 2a 20 20 20 57 65 62 66 6c 6f 77 2e 70 75 73 68 28 72 65 61 64 79 46 75 6e 63 74 69 6f 6e 29 3b 0a 20 2a 2f 0a 0a 28 28 29 3d 3e 7b 76 61 72 20 6c 74 3d 28 65 2c 79 29 3d 3e 28 29 3d 3e 28 79 7c 7c 65 28 28 79 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 29 2e 65 78 70 6f 72 74 73 2c 79 29 2c 79 Data Ascii: 7d11/! Webflow: Front-end site library * @license MIT * Inline scripts may access the api using an async handler: * var Webflow = Webflow \|\| []; * Webflow.push(readyFunction); */(()=>{var lt=(e,y)=>()=>(y\|\|e((y={exports:{}}).exports,y),y
2025-03-19 09:04:03 UTC	1369	IN	Data Raw: 7d 66 75 6e 63 74 69 6f 6e 20 5f 28 74 2c 6e 2c 69 29 7b 42 28 22 55 6e 69 74 73 20 64 6f 20 6e 6f 74 20 6d 61 74 63 68 20 5b 22 2b 74 2b 22 5d 3a 20 22 2b 6e 2b 22 2c 20 22 2b 69 29 7d 66 75 6e 63 74 69 6f 6e 20 49 28 74 2c 6e 2c 69 29 7b 69 66 28 6e 21 3d 3d 76 6f 69 64 20 30 26 26 28 69 3d 6e 29 2c 74 3d 3d 3d 76 6f 69 64 20 30 29 72 65 74 75 72 6e 20 69 3b 76 61 72 20 72 3d 69 3b 72 65 74 75 72 6e 20 77 65 2e 74 65 73 74 28 74 29 7c 7c 21 58 74 2e 74 65 73 74 28 74 29 3f 72 3d 70 61 72 73 65 49 6e 74 28 74 2c 31 30 29 3a 58 74 2e 74 65 73 74 28 74 29 26 26 28 72 3d 31 65 33 2a 70 61 72 73 65 46 6c 6f 61 74 28 74 29 29 2c 30 3e 72 26 26 28 72 3d 30 29 2c 72 3d 3d 3d 72 3f 72 3a 69 7d 66 75 6e 63 74 69 6f 6e 20 42 28 74 29 7b 65 74 2e 64 65 62 75 67 26 Data Ascii: }function _(t,n,i){B("Units do not match ["+t+"]: "+n+", "+i)}function I(t,n,i){if(n!==void 0&&(i=n),t===void 0)return i;var r=i;return we.test(t)\|\|!Xt.test(t)?r=parseInt(t,10):Xt.test(t)&&(r=1e3*parseFloat(t)),0>r&&(r=0),r===r?r:i}function B(t){et.debug&
2025-03-19 09:04:03 UTC	1369	IN	Data Raw: 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 29 7b 72 65 74 75 72 6e 20 69 2a 74 2f 72 2b 6e 7d 5d 2c 22 65 61 73 65 2d 69 6e 2d 71 75 61 64 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 35 35 30 2c 20 30 2e 30 38 35 2c 20 30 2e 36 38 30 2c 20 30 2e 35 33 30 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 29 7b 72 65 74 75 72 6e 20 69 2a 28 74 2f 3d 72 29 2a 74 2b 6e 7d 5d 2c 22 65 61 73 65 2d 6f 75 74 2d 71 75 61 64 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 32 35 30 2c 20 30 2e 34 36 30 2c 20 30 2e 34 35 30 2c 20 30 2e 39 34 30 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 29 7b 72 65 74 75 72 6e 2d 69 2a 28 74 2f 3d 72 29 2a 28 74 2d 32 29 2b 6e 7d 5d 2c 22 65 61 73 65 2d 69 6e 2d 6f 75 74 2d 71 75 Data Ascii: ",function(t,n,i,r){return it/r+n}],"ease-in-quad":["cubic-bezier(0.550, 0.085, 0.680, 0.530)",function(t,n,i,r){return i(t/=r)t+n}],"ease-out-quad":["cubic-bezier(0.250, 0.460, 0.450, 0.940)",function(t,n,i,r){return-i(t/=r)*(t-2)+n}],"ease-in-out-qu
2025-03-19 09:04:03 UTC	1369	IN	Data Raw: 6e 3a 69 2f 32 2a 28 28 74 2d 3d 32 29 2a 74 2a 74 2a 74 2a 74 2b 32 29 2b 6e 7d 5d 2c 22 65 61 73 65 2d 69 6e 2d 73 69 6e 65 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 37 30 2c 20 30 2c 20 30 2e 37 34 35 2c 20 30 2e 37 31 35 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 29 7b 72 65 74 75 72 6e 2d 69 2a 4d 61 74 68 2e 63 6f 73 28 74 2f 72 2a 28 4d 61 74 68 2e 50 49 2f 32 29 29 2b 69 2b 6e 7d 5d 2c 22 65 61 73 65 2d 6f 75 74 2d 73 69 6e 65 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 33 39 30 2c 20 30 2e 35 37 35 2c 20 30 2e 35 36 35 2c 20 31 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 29 7b 72 65 74 75 72 6e 20 69 2a 4d 61 74 68 2e 73 69 6e 28 74 2f 72 2a 28 4d 61 74 68 2e 50 49 2f 32 29 29 2b 6e 7d 5d Data Ascii: n:i/2((t-=2)tttt+2)+n}],"ease-in-sine":["cubic-bezier(0.470, 0, 0.745, 0.715)",function(t,n,i,r){return-iMath.cos(t/r(Math.PI/2))+i+n}],"ease-out-sine":["cubic-bezier(0.390, 0.575, 0.565, 1)",function(t,n,i,r){return iMath.sin(t/r*(Math.PI/2))+n}]
2025-03-19 09:04:03 UTC	1369	IN	Data Raw: 69 6f 6e 28 74 2c 6e 2c 69 2c 72 2c 73 29 7b 72 65 74 75 72 6e 20 73 3d 3d 3d 76 6f 69 64 20 30 26 26 28 73 3d 31 2e 37 30 31 35 38 29 2c 69 2a 28 28 74 3d 74 2f 72 2d 31 29 2a 74 2a 28 28 73 2b 31 29 2a 74 2b 73 29 2b 31 29 2b 6e 7d 5d 2c 22 65 61 73 65 2d 69 6e 2d 6f 75 74 2d 62 61 63 6b 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 36 38 30 2c 20 2d 30 2e 35 35 30 2c 20 30 2e 32 36 35 2c 20 31 2e 35 35 30 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 2c 73 29 7b 72 65 74 75 72 6e 20 73 3d 3d 3d 76 6f 69 64 20 30 26 26 28 73 3d 31 2e 37 30 31 35 38 29 2c 28 74 2f 3d 72 2f 32 29 3c 31 3f 69 2f 32 2a 74 2a 74 2a 28 28 28 73 2a 3d 31 2e 35 32 35 29 2b 31 29 2a 74 2d 73 29 2b 6e 3a 69 2f 32 2a 28 28 74 2d 3d 32 29 2a 74 2a 28 28 28 73 Data Ascii: ion(t,n,i,r,s){return s===void 0&&(s=1.70158),i((t=t/r-1)t((s+1)t+s)+1)+n}],"ease-in-out-back":["cubic-bezier(0.680, -0.550, 0.265, 1.550)",function(t,n,i,r,s){return s===void 0&&(s=1.70158),(t/=r/2)<1?i/2tt(((s=1.525)+1)t-s)+n:i/2((t-=2)t(((s
2025-03-19 09:04:03 UTC	1369	IN	Data Raw: 61 74 69 6f 6e 46 72 61 6d 65 7c 7c 48 2e 6f 52 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 7c 7c 48 2e 6d 73 52 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 3b 72 65 74 75 72 6e 20 74 26 26 68 2e 62 69 6e 64 3f 74 2e 62 69 6e 64 28 48 29 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 48 2e 73 65 74 54 69 6d 65 6f 75 74 28 6e 2c 31 36 29 7d 7d 28 29 2c 63 74 3d 79 2e 6e 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 48 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2c 6e 3d 74 26 26 28 74 2e 6e 6f 77 7c 7c 74 2e 77 65 62 6b 69 74 4e 6f 77 7c 7c 74 2e 6d 73 4e 6f 77 7c 7c 74 2e 6d 6f 7a 4e 6f 77 29 3b 72 65 74 75 72 6e 20 6e 26 26 68 2e 62 69 6e 64 3f 6e 2e 62 69 6e 64 28 74 29 3a 44 61 74 65 2e 6e 6f 77 7c 7c 66 75 6e 63 74 69 6f Data Ascii: ationFrame\|\|H.oRequestAnimationFrame\|\|H.msRequestAnimationFrame;return t&&h.bind?t.bind(H):function(n){H.setTimeout(n,16)}}(),ct=y.now=function(){var t=H.performance,n=t&&(t.now\|\|t.webkitNow\|\|t.msNow\|\|t.mozNow);return n&&h.bind?n.bind(t):Date.now\|\|functio
2025-03-19 09:04:03 UTC	1369	IN	Data Raw: 29 2c 74 68 69 73 2e 61 63 74 69 76 65 3f 74 68 69 73 2e 71 75 65 75 65 2e 70 75 73 68 28 7b 6f 70 74 69 6f 6e 73 3a 77 7d 29 3a 28 74 68 69 73 2e 74 69 6d 65 72 3d 6e 65 77 20 71 74 28 7b 64 75 72 61 74 69 6f 6e 3a 77 2c 63 6f 6e 74 65 78 74 3a 74 68 69 73 2c 63 6f 6d 70 6c 65 74 65 3a 6f 7d 29 2c 74 68 69 73 2e 61 63 74 69 76 65 3d 21 30 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 77 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 61 63 74 69 76 65 3f 28 74 68 69 73 2e 71 75 65 75 65 2e 70 75 73 68 28 7b 6f 70 74 69 6f 6e 73 3a 77 2c 61 72 67 73 3a 61 72 67 75 6d 65 6e 74 73 7d 29 2c 76 6f 69 64 28 74 68 69 73 2e 74 69 6d 65 72 2e 63 6f 6d 70 6c 65 74 65 3d 6f 29 29 3a 42 28 22 4e 6f 20 61 63 74 69 76 65 20 74 72 61 6e 73 69 74 69 6f 6e 20 74 69 6d 65 72 2e 20 55 Data Ascii: ),this.active?this.queue.push({options:w}):(this.timer=new qt({duration:w,context:this,complete:o}),this.active=!0)}function s(w){return this.active?(this.queue.push({options:w,args:arguments}),void(this.timer.complete=o)):B("No active transition timer. U
2025-03-19 09:04:03 UTC	1369	IN	Data Raw: 68 69 73 2c 4e 29 7d 4f 2e 63 61 6c 6c 28 74 68 69 73 2c 74 74 2c 73 74 29 7d 59 26 26 6e 74 26 26 59 2e 63 61 6c 6c 28 74 68 69 73 2c 6e 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 77 29 7b 77 2e 73 74 6f 70 28 29 7d 66 75 6e 63 74 69 6f 6e 20 41 74 28 77 2c 4f 29 7b 77 2e 73 65 74 28 4f 29 7d 66 75 6e 63 74 69 6f 6e 20 67 65 28 77 29 7b 74 68 69 73 2e 24 65 6c 2e 63 73 73 28 77 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 74 28 77 2c 4f 29 7b 74 5b 77 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 68 69 6c 64 72 65 6e 3f 79 65 2e 63 61 6c 6c 28 74 68 69 73 2c 4f 2c 61 72 67 75 6d 65 6e 74 73 29 3a 28 74 68 69 73 2e 65 6c 26 26 4f 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 2c 74 68 69 73 29 7d 7d 66 75 6e 63 74 Data Ascii: his,N)}O.call(this,tt,st)}Y&&nt&&Y.call(this,nt)}function j(w){w.stop()}function At(w,O){w.set(O)}function ge(w){this.$el.css(w)}function ot(w,O){t[w]=function(){return this.children?ye.call(this,O,arguments):(this.el&&O.apply(this,arguments),this)}}funct
2025-03-19 09:04:03 UTC	1369	IN	Data Raw: 6e 3a 35 30 30 2c 65 61 73 65 3a 22 65 61 73 65 22 2c 64 65 6c 61 79 3a 30 7d 3b 74 2e 69 6e 69 74 3d 66 75 6e 63 74 69 6f 6e 28 6f 2c 70 2c 78 2c 4b 29 7b 74 68 69 73 2e 24 65 6c 3d 6f 2c 74 68 69 73 2e 65 6c 3d 6f 5b 30 5d 3b 76 61 72 20 63 3d 70 5b 30 5d 3b 78 5b 32 5d 26 26 28 63 3d 78 5b 32 5d 29 2c 48 74 5b 63 5d 26 26 28 63 3d 48 74 5b 63 5d 29 2c 74 68 69 73 2e 6e 61 6d 65 3d 63 2c 74 68 69 73 2e 74 79 70 65 3d 78 5b 31 5d 2c 74 68 69 73 2e 64 75 72 61 74 69 6f 6e 3d 49 28 70 5b 31 5d 2c 74 68 69 73 2e 64 75 72 61 74 69 6f 6e 2c 73 2e 64 75 72 61 74 69 6f 6e 29 2c 74 68 69 73 2e 65 61 73 65 3d 69 28 70 5b 32 5d 2c 74 68 69 73 2e 65 61 73 65 2c 73 2e 65 61 73 65 29 2c 74 68 69 73 2e 64 65 6c 61 79 3d 49 28 70 5b 33 5d 2c 74 68 69 73 2e 64 65 6c 61 Data Ascii: n:500,ease:"ease",delay:0};t.init=function(o,p,x,K){this.$el=o,this.el=o[0];var c=p[0];x[2]&&(c=x[2]),Ht[c]&&(c=Ht[c]),this.name=c,this.type=x[1],this.duration=I(p[1],this.duration,s.duration),this.ease=i(p[2],this.ease,s.ease),this.delay=I(p[3],this.dela
2025-03-19 09:04:03 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 29 7b 28 74 68 69 73 2e 61 63 74 69 76 65 7c 7c 74 68 69 73 2e 6e 65 78 74 53 74 79 6c 65 29 26 26 28 74 68 69 73 2e 61 63 74 69 76 65 3d 21 31 2c 74 68 69 73 2e 6e 65 78 74 53 74 79 6c 65 3d 6e 75 6c 6c 2c 62 74 28 74 68 69 73 2e 65 6c 2c 74 68 69 73 2e 6e 61 6d 65 2c 74 68 69 73 2e 67 65 74 28 29 29 29 3b 76 61 72 20 6f 3d 74 68 69 73 2e 74 77 65 65 6e 3b 6f 26 26 6f 2e 63 6f 6e 74 65 78 74 26 26 6f 2e 64 65 73 74 72 6f 79 28 29 7d 2c 74 2e 63 6f 6e 76 65 72 74 3d 66 75 6e 63 74 69 6f 6e 28 6f 2c 70 29 7b 69 66 28 6f 3d 3d 22 61 75 74 6f 22 26 26 74 68 69 73 2e 61 75 74 6f 29 72 65 74 75 72 6e 20 6f 3b 76 61 72 20 78 2c 4b 3d 74 79 70 65 6f 66 20 6f 3d 3d 22 6e 75 6d 62 65 72 22 2c 63 3d 74 79 70 65 6f 66 20 6f 3d 3d 22 73 74 72 Data Ascii: unction(){(this.active\|\|this.nextStyle)&&(this.active=!1,this.nextStyle=null,bt(this.el,this.name,this.get()));var o=this.tween;o&&o.context&&o.destroy()},t.convert=function(o,p){if(o=="auto"&&this.auto)return o;var x,K=typeof o=="number",c=typeof o=="str

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49731	52.222.232.144	443	4712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 09:04:03 UTC	672	OUT	GET /js/jquery-3.5.1.min.dc5e7f18c8.js?site=669bd6e9e6fd0bf7cd830b6c HTTP/1.1 Host: d3e54v103j8qbb.cloudfront.net Connection: keep-alive Origin: https://sso-cdn-coinbasepro-autthh.webflow.io sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://sso-cdn-coinbasepro-autthh.webflow.io/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 09:04:03 UTC	551	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 89476 Connection: close Last-Modified: Mon, 20 Jul 2020 17:53:02 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 19 Mar 2025 00:14:30 GMT Cache-Control: max-age=84600, must-revalidate Etag: "dc5e7f18c8d36ac1d3d4753a87c98d0a" Via: 1.1 2c29bb35ddacc1dc2616fe65bdf5122e.cloudfront.net (CloudFront) Age: 31775 Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: B3Y1btx8Qc6c4QtClsV28EmDa1shVoEAvW7T7C3gZouw78zI4U4dLg==
2025-03-19 09:04:03 UTC	15833	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 Data Ascii: /! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery
2025-03-19 09:04:03 UTC	16384	IN	Data Raw: 6e 74 4e 6f 64 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 2c 61 2c 73 2c 75 2c 6c 3d 79 21 3d 3d 6d 3f 22 6e 65 78 74 53 69 62 6c 69 6e 67 22 3a 22 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 22 2c 63 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 66 3d 78 26 26 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 70 3d 21 6e 26 26 21 78 2c 64 3d 21 31 3b 69 66 28 63 29 7b 69 66 28 79 29 7b 77 68 69 6c 65 28 6c 29 7b 61 3d 65 3b 77 68 69 6c 65 28 61 3d 61 5b 6c 5d 29 69 66 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 21 31 3b 75 3d 6c 3d 22 6f 6e 6c 79 22 3d 3d 3d 68 26 26 21 75 26 26 Data Ascii: ntNode}:function(e,t,n){var r,i,o,a,s,u,l=y!==m?"nextSibling":"previousSibling",c=e.parentNode,f=x&&e.nodeName.toLowerCase(),p=!n&&!x,d=!1;if(c){if(y){while(l){a=e;while(a=a[l])if(x?a.nodeName.toLowerCase()===f:1===a.nodeType)return!1;u=l="only"===h&&!u&&
2025-03-19 09:04:03 UTC	16384	IN	Data Raw: 6c 3f 43 2e 73 65 74 54 69 6d 65 6f 75 74 28 53 2e 72 65 61 64 79 29 3a 28 45 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 42 29 2c 43 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 42 29 29 3b 76 61 72 20 24 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 29 7b 76 61 72 20 73 3d 30 2c 75 3d 65 2e 6c 65 6e 67 74 68 2c 6c 3d 6e 75 6c 6c 3d 3d 6e 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 77 28 6e 29 29 66 6f 72 28 73 20 69 6e 20 69 3d 21 30 2c 6e 29 24 28 65 2c 74 2c 73 2c 6e 5b 73 5d 2c 21 30 2c 6f 2c 61 29 3b 65 6c 73 65 20 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 26 26 28 69 3d 21 30 2c 6d 28 72 29 7c 7c 28 61 3d 21 30 29 2c 6c 26 26 28 61 Data Ascii: l?C.setTimeout(S.ready):(E.addEventListener("DOMContentLoaded",B),C.addEventListener("load",B));var $=function(e,t,n,r,i,o,a){var s=0,u=e.length,l=null==n;if("object"===w(n))for(s in i=!0,n)$(e,t,s,n[s],!0,o,a);else if(void 0!==r&&(i=!0,m(r)\|\|(a=!0),l&&(a
2025-03-19 09:04:03 UTC	16384	IN	Data Raw: 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 29 7d 2c 6c 29 3a 62 28 75 2e 74 65 78 74 43 6f 6e 74 65 6e 74 2e 72 65 70 6c 61 63 65 28 6a 65 2c 22 22 29 2c 75 2c 6c 29 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 52 65 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 2c 69 3d 74 3f 53 2e 66 69 6c 74 65 72 28 74 2c 65 29 3a 65 2c 6f 3d 30 3b 6e 75 6c 6c 21 3d 28 72 3d 69 5b 6f 5d 29 3b 6f 2b 2b 29 6e 7c 7c 31 21 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 7c 7c 53 2e 63 6c 65 61 6e 44 61 74 61 28 76 65 28 72 29 29 2c 72 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 28 6e 26 26 69 65 28 72 29 26 26 79 65 28 76 65 28 72 2c 22 73 63 72 69 70 74 22 29 29 2c 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 72 29 29 3b 72 65 74 75 72 6e 20 Data Ascii: ibute("nonce")},l):b(u.textContent.replace(je,""),u,l))}return n}function Re(e,t,n){for(var r,i=t?S.filter(t,e):e,o=0;null!=(r=i[o]);o++)n\|\|1!==r.nodeType\|\|S.cleanData(ve(r)),r.parentNode&&(n&&ie(r)&&ye(ve(r,"script")),r.parentNode.removeChild(r));return
2025-03-19 09:04:03 UTC	16384	IN	Data Raw: 70 65 65 64 73 5b 72 5d 7c 7c 72 2c 65 3d 65 7c 7c 22 66 78 22 2c 74 68 69 73 2e 71 75 65 75 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 43 2e 73 65 74 54 69 6d 65 6f 75 74 28 65 2c 72 29 3b 74 2e 73 74 6f 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 43 2e 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 6e 29 7d 7d 29 7d 2c 72 74 3d 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 2c 69 74 3d 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 65 6c 65 63 74 22 29 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6f 70 74 69 6f 6e 22 29 29 2c 72 74 2e 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 2c 79 2e 63 68 65 63 6b 4f 6e 3d 22 22 21 3d 3d 72 74 2e 76 61 6c 75 65 2c 79 2e 6f Data Ascii: peeds[r]\|\|r,e=e\|\|"fx",this.queue(e,function(e,t){var n=C.setTimeout(e,r);t.stop=function(){C.clearTimeout(n)}})},rt=E.createElement("input"),it=E.createElement("select").appendChild(E.createElement("option")),rt.type="checkbox",y.checkOn=""!==rt.value,y.o
2025-03-19 09:04:03 UTC	8107	IN	Data Raw: 69 73 2e 63 68 69 6c 64 4e 6f 64 65 73 29 7d 29 2c 74 68 69 73 7d 7d 29 2c 53 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2e 68 69 64 64 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 53 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2e 76 69 73 69 62 6c 65 28 65 29 7d 2c 53 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2e 76 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 21 28 65 2e 6f 66 66 73 65 74 57 69 64 74 68 7c 7c 65 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7c 7c 65 2e 67 65 74 43 6c 69 65 6e 74 52 65 63 74 73 28 29 2e 6c 65 6e 67 74 68 29 7d 2c 53 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 2e 78 68 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6e 65 77 20 43 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 Data Ascii: is.childNodes)}),this}}),S.expr.pseudos.hidden=function(e){return!S.expr.pseudos.visible(e)},S.expr.pseudos.visible=function(e){return!!(e.offsetWidth\|\|e.offsetHeight\|\|e.getClientRects().length)},S.ajaxSettings.xhr=function(){try{return new C.XMLHttpReque

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49732	104.18.160.117	443	4712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 09:04:03 UTC	707	OUT	GET /669bd6e9e6fd0bf7cd830b6c/669bd6e9e6fd0bf7cd830b6f_coin.jpeg HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://sso-cdn-coinbasepro-autthh.webflow.io/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 09:04:03 UTC	705	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 09:04:03 GMT Content-Type: image/jpeg Content-Length: 382933 Connection: close Cache-Control: max-age=31536000, must-revalidate Cf-Bgj: h2pri ETag: "6842cc254e6e650641b8c97d84273016" Last-Modified: Sat, 20 Jul 2024 15:25:30 GMT x-amz-id-2: TT7hBcMFm6UupgddC2cuaZRlxghKrxj+ALqrqvwHCMR/3SZd3FcXUj7NlUuvxdBM7mN92iIt7i8= x-amz-request-id: 6PS7XKDCXF0W5RRJ x-amz-server-side-encryption: AES256 x-amz-storage-class: INTELLIGENT_TIERING x-amz-version-id: yM.nmyIkanVr8SkVY71cF6VEcChQccYV CF-Cache-Status: HIT Age: 118277 Accept-Ranges: bytes Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 922bccd4bed33a70-FRA alt-svc: h3=":443"; ma=86400
2025-03-19 09:04:03 UTC	664	IN	Data Raw: ff d8 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 ff c0 00 11 08 0e e3 06 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 04 01 02 03 05 06 07 08 09 ff c4 00 64 10 00 02 01 03 02 03 04 05 06 09 08 05 09 05 00 13 00 01 02 03 04 11 05 21 06 12 31 07 13 41 51 14 22 61 71 91 32 52 53 81 92 a1 08 15 18 23 42 94 b1 d1 d2 16 33 34 54 56 62 72 c1 17 Data Ascii: C%# , #&')*)-0-(0%()(C(((((((((((((((((((((((((((((((((((((((((((((((((((@"d!1AQ"aq2RS#B34TVbr
2025-03-19 09:04:03 UTC	1369	IN	Data Raw: ff 00 77 ef 1f c9 ad 67 fd 5d 5f ee fd e3 dd 75 bf 24 fd 8f 6b 87 ac 35 00 db ff 00 26 b5 9f f5 75 7f bb f7 8f e4 d6 b3 fe ae af f7 7e f1 ee ba df 92 7e c7 b5 c3 d6 1a 80 6d ff 00 93 5a cf fa ba bf dd fb c7 f2 6b 59 ff 00 57 57 fb bf 78 f7 5d 6f c9 3f 63 da e1 eb 0d 40 36 ff 00 c9 ad 67 fd 5d 5f ee fd e5 b5 78 77 57 a5 4e 53 a9 a7 d7 51 4b 2d e1 3f d8 27 c3 6b 47 78 4f d8 f6 b8 7a c3 54 00 38 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0f 70 00 76 b6 3d 95 f1 c5 f6 9f 1b db 6e 1b be 95 bc a3 cd 17 24 a3 29 2f 35 16 d3 fb 8e 42 fa d2 e6 c2 ee ad ad f5 0a b6 d7 34 a5 cb 52 95 58 b8 ca 0f c9 a6 48 98 9e 8a a6 10 75 fc 3f d9 af 18 f1 06 9f 1b ed 27 40 bc ad 69 35 98 55 69 42 33 5e 71 e6 6b 3f 51 Data Ascii: wg]_u$k5&u~~mZkYWWx]o?c@6g]_xwWNSQK-?'kGxOzT8:pv=n$)/5B4RXHu?'@i5UiB3^qk?Q
2025-03-19 09:04:03 UTC	1369	IN	Data Raw: f2 3f 69 78 bc 6f f6 bf 77 4c 01 6c a5 18 45 ca 6d 46 29 65 b6 f0 92 3f 59 d3 e4 ae 06 b6 db 5d d2 ee ae 15 0b 7b fa 15 2a b7 85 15 2e af d9 e6 48 5a 85 ab d4 5d 8a aa bd 29 43 9d c3 c7 97 cc e7 1a da 79 75 94 7a 35 38 65 1d c2 50 00 eb c3 98 00 00 00 00 3a 00 25 5e 39 c4 70 8d 3d 7f 50 84 12 51 55 a5 84 8d 71 b3 e2 8f fa 45 a8 ff 00 db 48 d6 1f 80 f1 1f dd cb f5 97 e8 74 fe 48 fd 00 01 c5 b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f5 ff 00 c1 77 87 ec b5 de d2 5d 6d 42 9c 2a c3 4d b5 95 dd 2a 73 59 4e a7 32 8c 5e 3d 99 6f df 8f 23 c8 0e a3 b3 4e 31 ba e0 5e 2d b5 d6 6d 29 aa d1 82 74 ab d0 6f 1d ed 29 7c a8 e7 c1 ec 9a 7e 68 ce 71 33 8c c4 2e 3d f2 ef 38 c7 b7 1e 34 5c 6f 7b 57 4e bf 56 76 56 97 33 Data Ascii: ?ixowLlEmF)e?Y]{.HZ])Cyuz58eP:%^9p=PQUqEHtHw]mBM*sYN2^=o#N1^-m)to)\|~hq3.=84\o{WNVvV3
2025-03-19 09:04:03 UTC	1369	IN	Data Raw: c5 74 4b a1 d3 4a 39 b6 72 9e 10 c0 07 66 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 b9 ec 3b fe b7 38 5f fe f8 bf dd 91 c3 1b 0e 1e d6 6f 78 7f 5b b3 d5 b4 b9 c2 9d ed a4 fb ca 52 9c 14 92 78 c6 e9 f5 ea 4c a2 e2 88 ed ec bd ad 71 15 8a ad c4 96 b4 38 ff 00 5f be b9 57 75 29 cb 45 af 46 51 b5 69 55 f5 a8 b9 27 f2 12 ca f7 22 7f 11 f0 4f 08 69 dd 9a 56 e3 eb 7e 1d bc 74 ef 2c 69 46 df 49 ab 52 a7 77 69 5a 4d a7 5a 53 e6 e6 70 e8 d6 5e 1e de 7b 70 1a cf 6c 5c 5d ac e9 d7 36 3a 8d 5d 32 b5 b5 cc 79 6a c7 d0 29 a7 35 9c b4 da f3 c1 0e bf 6a bc 5b 71 7b a8 dc d7 bd b7 ac af ed 15 8d 6b 69 db 45 db ba 49 3c 45 53 e9 1e af 75 e6 ce 31 86 51 0e 93 94 3d 46 e7 86 f8 13 4b e2 2e 09 d0 2e 38 4a 77 55 b8 8e ca 84 aa dd fa 5d 58 ba 33 9c 52 Data Ascii: tKJ9rf;8_ox[RxLq8_Wu)EFQiU'"OiV~t,iFIRwiZMZSp^{pl\]6:]2yj)5j[q{kiEI<ESu1Q=FK..8JwU]X3R
2025-03-19 09:04:03 UTC	1369	IN	Data Raw: 7b 56 b4 71 4d 45 f2 53 e7 93 e5 cb f9 b8 78 22 e8 d7 9c 3b ae 76 49 c5 ab 43 e1 df c4 96 d2 d4 ed 2d ee 28 c6 e2 75 21 55 77 b0 49 e5 ef 19 72 bc 34 8f 1e b5 ed 07 89 2d 28 70 ed 2b 5b d8 51 8e 80 e6 ec 1c 29 24 e1 cf f2 94 9f e9 27 d3 0c d9 71 0f 6b 1c 55 af 68 f7 9a 55 dd 7b 1a 5a 7d dc a3 3a b4 6d ac e1 4b d6 52 e6 e6 4d 6f cc da 4d b1 b3 23 74 3d 09 f6 7f c3 4b b6 1e 34 d1 1e 97 8d 2b 4e d1 dd dd b5 1e fa a6 29 d4 ee e2 d4 b9 b9 b2 f7 6f ab 68 d8 f6 69 d9 e7 0d 6a 3a 3f 0e 58 eb ba 15 9d 2b bd 5a ca 57 0e b5 de a3 25 7d 55 f2 e6 33 a1 46 1b 28 2e b9 96 36 eb 93 ce 6b f6 db c6 b5 ed 25 42 a5 ed 94 b9 ed dd b5 5a ae ce 1d e5 68 34 d7 ad 2e ad e1 bf 8e 48 da 67 6b fc 5f a6 69 ba 75 9d 9d dd a4 5e 9f 4e 34 28 5c ce d2 13 ae a9 47 18 a6 e6 d6 79 76 4b 1e Data Ascii: {VqMESx";vIC-(u!UwIr4-(p+[Q)$'qkUhU{Z}:mKRMoM#t=K4+N)ohij:?X+ZW%}U3F(.6k%BZh4.Hgk_iu^N4(\GyvK
2025-03-19 09:04:03 UTC	1369	IN	Data Raw: bb 89 3b 5c e3 1e 21 d2 2b e9 97 da 8d 2a 76 57 1b 56 85 ad bc 28 ba ab c5 49 ad da 7e 2b c4 c7 c3 bd aa f1 46 81 a4 5a e9 d6 57 16 75 68 d9 a9 2b 39 dc da 42 ad 4b 5c f5 ee e4 f7 47 19 c3 2f 27 4d d0 f4 5d 2b b2 dd 03 8a 34 eb 1a 1c 3d 05 52 eb 4a d7 a5 a7 ea b7 14 ea c9 bb 8b 5c b9 46 ab 4d e2 3e ae 16 c9 6f 92 7e 9d c1 fc 0a b4 ad 43 88 a9 e9 da 3c ac 6e 75 5a b6 36 74 75 4d 4e a5 b5 0a 54 69 3e 46 e3 2d dc aa 49 c6 52 59 7e 2b 1d 0f 1b e1 ae 3f e2 3e 1b ad ac 55 d2 ef f9 6a ea f1 6a f2 75 60 a6 e6 de 7d 65 9e 92 f5 9e fe d2 fe 10 ed 07 5e e1 5b 0a b6 3a 75 4b 5a f6 15 2a aa ee da f6 de 35 e9 c6 a2 e9 38 a9 74 96 cb 75 e4 59 c3 2f 54 dd 8b d6 b5 ad 0b 49 e1 ce 05 ed 6e cf 87 6e 7d 23 4b 70 d3 eb d2 f5 9c 9d 3e 69 b6 e1 97 d7 0d 6c fc 9a 23 58 70 b7 06 Data Ascii: ;\!+vWV(I~+FZWuh+9BK\G/'M]+4=RJ\FM>o~C<nuZ6tuMNTi>F-IRY~+?>Ujju`}e^[:uKZ58tuY/TInn}#Kp>il#Xp
2025-03-19 09:04:03 UTC	1369	IN	Data Raw: b5 ce 3a b2 e2 5b 2e 1f d1 34 19 de cf 45 d1 6d bb a8 55 bc 49 54 af 53 09 73 b4 ba 61 2c 2f 7b 1b 66 26 8b 8a 79 c0 00 ee e6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f4 4e c1 b5 47 a3 76 83 4a fb f1 5d e6 a5 4a 95 b5 55 51 59 d3 ef 2a d0 8b 49 3a b1 5f dd ff 00 33 d1 75 2a f6 f7 bd 9f 6b b7 fa 0f 16 dc 71 77 0e 5b 5d 51 b8 d4 f4 cd 62 9c 95 78 45 cd 61 53 ad b3 83 7e c5 e0 f1 83 c2 f8 63 88 75 4e 17 d6 68 6a ba 1d d4 ad 6f 68 e5 46 69 26 9a 7d 62 d3 d9 a7 e4 ce 8b 8a 3b 4e e2 4e 23 d2 27 a5 dd 54 b2 b5 d3 ea cd 55 ad 42 c6 d6 34 15 69 ad f3 3c 6e f7 49 9c b2 c2 67 2b 6e 32 88 8a 7b 3f 17 70 9f 0f cb 8b b8 97 5b d4 f4 eb bd 5e df 46 d0 ad 6e 68 e9 95 2f 2a d4 75 25 2e 7e b2 6d cb 96 2a 2b 6c e3 ab c1 ae d3 78 23 83 b5 bf f4 73 7d 4b 86 Data Ascii: :[.4EmUITSsa,/{f&yNGvJ]JUQYI:_3ukqw[]QbxEaS~cuNhjohFi&}b;NN#'TUB4i<nIg+n2{?p[^Fnh/u%.~m+lx#s}K
2025-03-19 09:04:03 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 f4 ee cf 5f ff 00 93 91 ff 00 b6 9f f9 1e 62 6d b4 3e 20 bd d1 94 e1 6c e1 3a 53 79 70 a8 b2 b3 e6 8f 7f f4 df 13 8f 86 d6 df 9f 55 4f 3f 89 d2 9d 5c 36 e2 f5 e0 79 c7 f2 ef 51 fe af 6b f0 97 ef 1f cb bd 47 fa bd a7 c2 5f bc fd 0f e3 3e 1b d6 7e cf 9b ee 5a be 8f 47 07 9c 7f 2e f5 1f ea f6 9f 09 7e f1 fc bb d4 7f ab da 7c 25 fb c7 e3 3e 1b d6 7e c7 b8 ea fa 3d 1c 1e 71 fc bb d4 7f ab da 7c 25 fb c7 f2 ef 51 fe af 69 f0 97 ef 2f e3 1e 17 d6 7e cb ee 3a af 47 07 9c 7f 2e f5 1f ea f6 9f 09 7e f1 fc bb d4 7f ab da 7c 25 fb c9 f8 cf 86 f5 9f b1 ee 3a 9e 8f 47 07 9c 7f 2e f5 1f ea f6 9f 09 7e f1 fc bb d4 7f ab da 7c 25 fb c7 e3 3e 1b d6 7e c9 ee 5a be 8f 47 07 9c 7f 2e f5 1f ea f6 9f 09 7e f2 ca bc 73 a9 4e 9b 8c 29 5b 41 b5 b4 94 5b Data Ascii: _bm> l:SypUO?\6yQkG_>~ZG.~\|%>~=q\|%Qi/~:G.~\|%:G.~\|%>~ZG.~sN)[A[
2025-03-19 09:04:03 UTC	1369	IN	Data Raw: d1 d3 f8 0e f1 7d 1d 3f 80 16 02 fe f1 7d 1d 3f 80 ef 17 d1 d3 f8 01 60 2f ef 17 d1 d3 f8 0e f1 7d 1d 3f 80 16 02 fe f1 7d 1d 3f 80 ef 17 d1 d3 f8 01 60 2f ef 17 d1 d3 f8 0e f1 7d 1d 3f 80 16 02 fe f1 7d 1d 3f 80 ef 17 d1 d3 f8 01 60 2f ef 17 d1 d3 f8 0e f1 7d 1d 3f 80 16 02 fe f1 7d 1d 3f 80 ef 17 d1 d3 f8 01 60 2f ef 17 d1 d3 f8 0e f1 7d 1d 3f 80 16 02 fe f1 7d 1d 3f 80 ef 17 d1 d3 f8 01 60 2f ef 17 d1 d3 f8 0e f1 7d 1d 3f 80 16 02 fe f1 7d 1d 3f 80 ef 17 d1 d3 f8 01 60 2f ef 17 d1 d3 f8 0e f1 7d 1d 3f 80 16 02 fe f1 7d 1d 3f 80 ef 17 d1 d3 f8 01 60 2f ef 17 d1 d3 f8 0e f1 7d 1d 3f 80 16 02 fe f1 7d 1d 3f 80 ef 17 d1 d3 f8 01 60 2f ef 17 d1 d3 f8 0e f1 7d 1d 3f 80 16 02 fe f1 7d 1d 3f 80 ef 17 d1 d3 f8 01 60 2f ef 17 d1 d3 f8 0e f1 7d 1d 3f 80 16 02 fe Data Ascii: }?}?`/}?}?`/}?}?`/}?}?`/}?}?`/}?}?`/}?}?`/}?}?`/}?}?`/}?
2025-03-19 09:04:03 UTC	1369	IN	Data Raw: 1a c6 af 95 dc 01 d9 de 9c bb 4f e2 de 1f e2 5b 1a da 85 1d 22 ce bd 7a 34 69 d4 95 39 55 e5 94 5c 1a 71 df 78 cb e2 cd 86 b3 c0 dc 37 a8 f0 0d 7e 20 b4 e1 ad 63 85 ee 2d 2f ad e8 2a 17 d5 e5 25 77 0a 93 8c 64 a3 cd be 57 33 dd 79 78 f8 4e 5d ae 70 dd 4e 2b ab c5 11 f4 db 3d 5e f7 87 ea 58 5c c2 8d 06 d4 2e f3 17 09 46 59 dd 6c f7 f0 c2 3c 7e ef 8c 35 dd 66 f7 4f 9f 11 6b 3a 85 fd 1b 6a d4 ea f2 d7 ac e6 96 1a 6d a5 d3 3d 4e 75 94 f2 d5 c4 36 3d b2 68 5a 7f 0d 76 91 ac 69 3a 3d 17 46 c2 da 54 d5 3a 6e 6e 4d 66 9c 64 f7 7b f5 6c e3 0e c7 b5 de 21 b1 e2 ae d0 f5 7d 6b 49 75 5d 95 d3 a6 e9 f7 b0 e4 97 ab 4e 31 79 5e 1b a6 71 c7 5c 6e a2 d8 9e c0 01 a4 77 7d 88 70 ee 9b c5 5d a3 58 69 3a cd 09 5c 58 d5 a3 5e 72 a7 19 b8 36 e3 4d b5 ba df a9 d4 f1 af 0b d9 ca Data Ascii: O["z4i9U\qx7~ c-/*%wdW3yxN]pN+=^X\.FYl<~5fOk:jm=Nu6=hZvi:=FT:nnMfd{l!}kIu]N1y^q\nw}p]Xi:\X^r6M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49734	52.222.232.144	443	4712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 09:04:03 UTC	691	OUT	GET /img/webflow-badge-icon-d2.89e12c322e.svg HTTP/1.1 Host: d3e54v103j8qbb.cloudfront.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://sso-cdn-coinbasepro-autthh.webflow.io/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 09:04:03 UTC	578	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 421 Connection: close Last-Modified: Thu, 21 Sep 2023 16:04:04 GMT X-Amz-Server-Side-Encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 19 Mar 2025 00:28:20 GMT Cache-Control: max-age=84600, must-revalidate Etag: "89e12c322e66c81213861fc9acb8b003" Via: 1.1 82386e4e4f56a0c01411d1aea6f3fd46.cloudfront.net (CloudFront) Age: 30944 Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: TRvGLbEc2OnuqJcvZYKJQd7s_iaRguuApbqgSeNCqRPFLHu8ak-Wfg==
2025-03-19 09:04:03 UTC	421	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 32 36 22 20 68 65 69 67 68 74 3d 22 31 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 36 20 31 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 32 35 2e 36 35 20 30 4c 31 37 2e 34 36 35 34 20 31 36 48 39 2e 37 37 37 37 38 4c 31 33 2e 32 30 33 20 39 2e 33 36 38 39 32 48 31 33 2e 30 34 39 33 43 31 30 2e 32 32 33 35 20 31 33 2e 30 33 37 32 20 36 2e 30 30 37 33 38 20 31 35 2e 34 35 32 20 30 20 31 36 56 39 2e 34 36 30 36 38 43 30 20 39 2e 34 36 30 36 38 20 33 2e 38 34 33 Data Ascii: <svg width="26" height="16" viewBox="0 0 26 16" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M25.65 0L17.4654 16H9.77778L13.203 9.36892H13.0493C10.2235 13.0372 6.00738 15.452 0 16V9.46068C0 9.46068 3.843

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49733	52.222.232.144	443	4712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 09:04:03 UTC	691	OUT	GET /img/webflow-badge-text-d2.c82cec3b78.svg HTTP/1.1 Host: d3e54v103j8qbb.cloudfront.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://sso-cdn-coinbasepro-autthh.webflow.io/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 09:04:03 UTC	579	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 9912 Connection: close Last-Modified: Thu, 21 Sep 2023 16:04:31 GMT X-Amz-Server-Side-Encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 19 Mar 2025 05:10:32 GMT Cache-Control: max-age=84600, must-revalidate Etag: "c82cec3b78a2b2d267bbfe3c7e838068" Via: 1.1 2ba7b49ec4c4de4e67297e603c89a5e4.cloudfront.net (CloudFront) Age: 14012 Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: gBiUMBPmMQ3XyUWEDgR7elctSkq__sC_ybiM3u7IfB07o4AW4sKj0g==
2025-03-19 09:04:03 UTC	9912	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 31 38 22 20 68 65 69 67 68 74 3d 22 31 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 31 38 20 31 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 30 2e 35 32 35 30 32 34 20 30 2e 38 39 36 34 38 34 48 33 2e 30 35 34 33 32 4c 36 2e 30 30 37 37 36 20 38 2e 32 36 36 32 32 4c 38 2e 38 39 39 30 35 20 30 2e 38 39 36 34 38 34 48 31 31 2e 33 35 33 31 56 31 31 48 39 2e 34 37 33 32 37 56 33 2e 37 39 39 34 39 4c 36 2e 36 36 33 37 20 31 31 48 35 2e 31 38 37 31 33 4c 32 2e 33 38 34 34 20 33 2e 39 32 30 37 37 56 31 31 48 30 2e 35 32 35 30 32 34 56 30 2e 38 39 36 34 38 34 5a 22 20 66 69 6c 6c 3d Data Ascii: <svg width="118" height="12" viewBox="0 0 118 12" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M0.525024 0.896484H3.05432L6.00776 8.26622L8.89905 0.896484H11.3531V11H9.47327V3.79949L6.6637 11H5.18713L2.3844 3.92077V11H0.525024V0.896484Z" fill=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49736	104.18.160.117	443	4712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 09:04:03 UTC	663	OUT	GET /img/favicon.ico HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://sso-cdn-coinbasepro-autthh.webflow.io/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 09:04:03 UTC	645	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 09:04:03 GMT Content-Type: image/x-icon Content-Length: 15086 Connection: close x-amz-id-2: QRs3q+dhKhAMTlvzYZ9HsOXkYLhQn66tiVr3vbhVW/V2FbAxceQ9QjMXwPqcyzjtLgD1BjyzKEE= x-amz-request-id: BSTN61CAHM9SMTMC Last-Modified: Thu, 05 Oct 2023 23:38:20 GMT ETag: "1f894f487d068a2ced95d5cd4f88598c" x-amz-server-side-encryption: AES256 Cache-Control: max-age=84600, must-revalidate x-amz-version-id: C5TuT6ObkzP1GjuEGkIHJatwDHqj5J6N CF-Cache-Status: HIT Age: 14744 Accept-Ranges: bytes Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 922bccd54911d205-FRA alt-svc: h3=":443"; ma=86400
2025-03-19 09:04:03 UTC	724	IN	Data Raw: 00 00 01 00 03 00 30 30 00 00 01 00 20 00 a8 25 00 00 36 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 de 25 00 00 10 10 00 00 01 00 20 00 68 04 00 00 86 36 00 00 28 00 00 00 30 00 00 00 60 00 00 00 01 00 20 00 00 00 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 39 32 2b 88 39 32 2b f3 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 Data Ascii: 00 %6 % h6(0` $92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+9
2025-03-19 09:04:03 UTC	1369	IN	Data Raw: 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 Data Ascii: +92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+9
2025-03-19 09:04:03 UTC	1369	IN	Data Raw: ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 Data Ascii: 92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92
2025-03-19 09:04:03 UTC	1369	IN	Data Raw: f8 f8 f8 ff f8 f8 f8 ff f8 f8 f8 ff f7 f7 f7 ff 8e 8a 86 ff 37 30 29 ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 38 30 29 ff 50 49 43 ff e0 e0 df ff f8 f9 f9 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f9 f9 f9 ff f9 f9 f9 ff e2 e1 e0 ff 9a 96 93 ff 4b 44 3e ff 44 3d 36 ff c9 c7 c5 ff f9 fa fa ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f9 f9 f9 ff d6 d5 d4 ff 4f 49 42 ff 38 31 29 ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b Data Ascii: 70)92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+80)PICKD>D=6OIB81)92+92+92+92+92+92+92+92+92+
2025-03-19 09:04:03 UTC	1369	IN	Data Raw: f9 f9 ff de dd dc ff 56 50 4a ff 37 30 29 ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 38 31 2a ff 4b 45 3f ff c0 be bc ff d3 d2 d1 ff d2 d1 d0 ff d2 d1 d0 ff d1 cf ce ff d9 d8 d6 ff f5 f4 f4 ff f8 f8 f8 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f8 f8 f8 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f8 f8 f8 ff 9c 99 96 ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff Data Ascii: VPJ70)92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+81*KE?92+92+92+92+92+92+92+92+92+92+92+92+92+
2025-03-19 09:04:03 UTC	1369	IN	Data Raw: 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 3c 36 2f ff 53 4d 47 ff 57 51 4b ff 56 50 4b ff 56 50 4b ff 56 50 4b ff 57 51 4b ff 50 4a 44 ff 3b 34 2d ff 38 31 2a ff 41 3a 33 ff 56 50 4a ff 56 51 4b ff 56 50 4b ff 57 51 4b ff 54 4e 48 ff 3f 38 31 ff 39 32 2a ff 3a 33 2d ff 50 4a 44 ff 57 51 4b ff 56 50 4b ff 56 50 4b ff 56 50 4b ff 56 50 4b ff 57 51 4b ff 4f 49 43 ff 3a 33 2c ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 Data Ascii: +92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+<6/SMGWQKVPKVPKVPKWQKPJD;4-81A:3VPJVQKVPKWQKTNH?8192:3-PJDWQKVPKVPKVPKVPKWQKOIC:3,92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+9
2025-03-19 09:04:03 UTC	1369	IN	Data Raw: ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 Data Ascii: 92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92
2025-03-19 09:04:03 UTC	1369	IN	Data Raw: 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b f3 39 32 2b 89 39 32 2b f4 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b Data Ascii: 92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+
2025-03-19 09:04:03 UTC	1369	IN	Data Raw: 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff Data Ascii: 2+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+
2025-03-19 09:04:03 UTC	1369	IN	Data Raw: 2b ff 39 32 2b ff 3c 35 2e ff 54 4e 48 ff 76 72 6d ff b2 b0 ad ff eb ea ea ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f8 f8 f8 ff f3 f3 f3 ff f6 f6 f6 ff f7 f7 f7 ff f7 f7 f7 ff f8 f8 f8 ff ef ef ef ff 72 6d 68 ff 36 2f 28 ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 3f 39 32 ff 68 63 5d ff 6e 69 64 ff 74 6f 6b ff b1 ae ab ff f5 f5 f5 ff f7 f8 f8 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f8 f8 f8 ff f7 f7 f7 ff f7 f7 f7 ff fa fa fa ff c0 be bc ff 41 3b 34 ff 38 31 2a ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 Data Ascii: +92+<5.TNHvrmrmh6/(92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+?92hc]nidtokA;481*92+92+92+92+92+92+92+92+92+92+92+92+9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49741	52.222.232.47	443	4712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 09:04:03 UTC	433	OUT	GET /img/webflow-badge-icon-d2.89e12c322e.svg HTTP/1.1 Host: d3e54v103j8qbb.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 09:04:03 UTC	578	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 421 Connection: close Last-Modified: Thu, 21 Sep 2023 16:04:04 GMT X-Amz-Server-Side-Encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 19 Mar 2025 00:28:20 GMT Cache-Control: max-age=84600, must-revalidate Etag: "89e12c322e66c81213861fc9acb8b003" Via: 1.1 2c29bb35ddacc1dc2616fe65bdf5122e.cloudfront.net (CloudFront) Age: 30944 Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: sKBlc1hk4TCbMNnMQl-xZ5J3Ov2T7AxhyBljo3Tg9ImPmdAxEwLvoA==
2025-03-19 09:04:03 UTC	421	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 32 36 22 20 68 65 69 67 68 74 3d 22 31 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 36 20 31 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 32 35 2e 36 35 20 30 4c 31 37 2e 34 36 35 34 20 31 36 48 39 2e 37 37 37 37 38 4c 31 33 2e 32 30 33 20 39 2e 33 36 38 39 32 48 31 33 2e 30 34 39 33 43 31 30 2e 32 32 33 35 20 31 33 2e 30 33 37 32 20 36 2e 30 30 37 33 38 20 31 35 2e 34 35 32 20 30 20 31 36 56 39 2e 34 36 30 36 38 43 30 20 39 2e 34 36 30 36 38 20 33 2e 38 34 33 Data Ascii: <svg width="26" height="16" viewBox="0 0 26 16" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M25.65 0L17.4654 16H9.77778L13.203 9.36892H13.0493C10.2235 13.0372 6.00738 15.452 0 16V9.46068C0 9.46068 3.843

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49742	52.222.232.47	443	4712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 09:04:03 UTC	433	OUT	GET /img/webflow-badge-text-d2.c82cec3b78.svg HTTP/1.1 Host: d3e54v103j8qbb.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 09:04:03 UTC	579	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 9912 Connection: close Last-Modified: Thu, 21 Sep 2023 16:04:31 GMT X-Amz-Server-Side-Encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 19 Mar 2025 05:10:32 GMT Cache-Control: max-age=84600, must-revalidate Etag: "c82cec3b78a2b2d267bbfe3c7e838068" Via: 1.1 e59bea79ab5f15feda92136bc7b74158.cloudfront.net (CloudFront) Age: 14012 Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: 8O1-hX5dU8kuqlCPkOzAJ6MUnx5sKpgFf_8qv3ga3JKZAtow55BRpQ==
2025-03-19 09:04:03 UTC	9912	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 31 38 22 20 68 65 69 67 68 74 3d 22 31 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 31 38 20 31 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 30 2e 35 32 35 30 32 34 20 30 2e 38 39 36 34 38 34 48 33 2e 30 35 34 33 32 4c 36 2e 30 30 37 37 36 20 38 2e 32 36 36 32 32 4c 38 2e 38 39 39 30 35 20 30 2e 38 39 36 34 38 34 48 31 31 2e 33 35 33 31 56 31 31 48 39 2e 34 37 33 32 37 56 33 2e 37 39 39 34 39 4c 36 2e 36 36 33 37 20 31 31 48 35 2e 31 38 37 31 33 4c 32 2e 33 38 34 34 20 33 2e 39 32 30 37 37 56 31 31 48 30 2e 35 32 35 30 32 34 56 30 2e 38 39 36 34 38 34 5a 22 20 66 69 6c 6c 3d Data Ascii: <svg width="118" height="12" viewBox="0 0 118 12" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M0.525024 0.896484H3.05432L6.00776 8.26622L8.89905 0.896484H11.3531V11H9.47327V3.79949L6.6637 11H5.18713L2.3844 3.92077V11H0.525024V0.896484Z" fill=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49743	104.18.161.117	443	4712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 09:04:03 UTC	449	OUT	GET /669bd6e9e6fd0bf7cd830b6c/669bd6e9e6fd0bf7cd830b6f_coin.jpeg HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 09:04:03 UTC	705	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 09:04:03 GMT Content-Type: image/jpeg Content-Length: 382933 Connection: close Cache-Control: max-age=31536000, must-revalidate Cf-Bgj: h2pri ETag: "6842cc254e6e650641b8c97d84273016" Last-Modified: Sat, 20 Jul 2024 15:25:30 GMT x-amz-id-2: TT7hBcMFm6UupgddC2cuaZRlxghKrxj+ALqrqvwHCMR/3SZd3FcXUj7NlUuvxdBM7mN92iIt7i8= x-amz-request-id: 6PS7XKDCXF0W5RRJ x-amz-server-side-encryption: AES256 x-amz-storage-class: INTELLIGENT_TIERING x-amz-version-id: yM.nmyIkanVr8SkVY71cF6VEcChQccYV CF-Cache-Status: HIT Age: 118277 Accept-Ranges: bytes Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 922bccd729e89b77-FRA alt-svc: h3=":443"; ma=86400
2025-03-19 09:04:03 UTC	664	IN	Data Raw: ff d8 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 ff c0 00 11 08 0e e3 06 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 04 01 02 03 05 06 07 08 09 ff c4 00 64 10 00 02 01 03 02 03 04 05 06 09 08 05 09 05 00 13 00 01 02 03 04 11 05 21 06 12 31 07 13 41 51 14 22 61 71 91 32 52 53 81 92 a1 08 15 18 23 42 94 b1 d1 d2 16 33 34 54 56 62 72 c1 17 Data Ascii: C%# , #&')*)-0-(0%()(C(((((((((((((((((((((((((((((((((((((((((((((((((((@"d!1AQ"aq2RS#B34TVbr
2025-03-19 09:04:03 UTC	1369	IN	Data Raw: ff 00 77 ef 1f c9 ad 67 fd 5d 5f ee fd e3 dd 75 bf 24 fd 8f 6b 87 ac 35 00 db ff 00 26 b5 9f f5 75 7f bb f7 8f e4 d6 b3 fe ae af f7 7e f1 ee ba df 92 7e c7 b5 c3 d6 1a 80 6d ff 00 93 5a cf fa ba bf dd fb c7 f2 6b 59 ff 00 57 57 fb bf 78 f7 5d 6f c9 3f 63 da e1 eb 0d 40 36 ff 00 c9 ad 67 fd 5d 5f ee fd e5 b5 78 77 57 a5 4e 53 a9 a7 d7 51 4b 2d e1 3f d8 27 c3 6b 47 78 4f d8 f6 b8 7a c3 54 00 38 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0f 70 00 76 b6 3d 95 f1 c5 f6 9f 1b db 6e 1b be 95 bc a3 cd 17 24 a3 29 2f 35 16 d3 fb 8e 42 fa d2 e6 c2 ee ad ad f5 0a b6 d7 34 a5 cb 52 95 58 b8 ca 0f c9 a6 48 98 9e 8a a6 10 75 fc 3f d9 af 18 f1 06 9f 1b ed 27 40 bc ad 69 35 98 55 69 42 33 5e 71 e6 6b 3f 51 Data Ascii: wg]_u$k5&u~~mZkYWWx]o?c@6g]_xwWNSQK-?'kGxOzT8:pv=n$)/5B4RXHu?'@i5UiB3^qk?Q
2025-03-19 09:04:03 UTC	1369	IN	Data Raw: f2 3f 69 78 bc 6f f6 bf 77 4c 01 6c a5 18 45 ca 6d 46 29 65 b6 f0 92 3f 59 d3 e4 ae 06 b6 db 5d d2 ee ae 15 0b 7b fa 15 2a b7 85 15 2e af d9 e6 48 5a 85 ab d4 5d 8a aa bd 29 43 9d c3 c7 97 cc e7 1a da 79 75 94 7a 35 38 65 1d c2 50 00 eb c3 98 00 00 00 00 3a 00 25 5e 39 c4 70 8d 3d 7f 50 84 12 51 55 a5 84 8d 71 b3 e2 8f fa 45 a8 ff 00 db 48 d6 1f 80 f1 1f dd cb f5 97 e8 74 fe 48 fd 00 01 c5 b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f5 ff 00 c1 77 87 ec b5 de d2 5d 6d 42 9c 2a c3 4d b5 95 dd 2a 73 59 4e a7 32 8c 5e 3d 99 6f df 8f 23 c8 0e a3 b3 4e 31 ba e0 5e 2d b5 d6 6d 29 aa d1 82 74 ab d0 6f 1d ed 29 7c a8 e7 c1 ec 9a 7e 68 ce 71 33 8c c4 2e 3d f2 ef 38 c7 b7 1e 34 5c 6f 7b 57 4e bf 56 76 56 97 33 Data Ascii: ?ixowLlEmF)e?Y]{.HZ])Cyuz58eP:%^9p=PQUqEHtHw]mBM*sYN2^=o#N1^-m)to)\|~hq3.=84\o{WNVvV3
2025-03-19 09:04:03 UTC	1369	IN	Data Raw: c5 74 4b a1 d3 4a 39 b6 72 9e 10 c0 07 66 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 b9 ec 3b fe b7 38 5f fe f8 bf dd 91 c3 1b 0e 1e d6 6f 78 7f 5b b3 d5 b4 b9 c2 9d ed a4 fb ca 52 9c 14 92 78 c6 e9 f5 ea 4c a2 e2 88 ed ec bd ad 71 15 8a ad c4 96 b4 38 ff 00 5f be b9 57 75 29 cb 45 af 46 51 b5 69 55 f5 a8 b9 27 f2 12 ca f7 22 7f 11 f0 4f 08 69 dd 9a 56 e3 eb 7e 1d bc 74 ef 2c 69 46 df 49 ab 52 a7 77 69 5a 4d a7 5a 53 e6 e6 70 e8 d6 5e 1e de 7b 70 1a cf 6c 5c 5d ac e9 d7 36 3a 8d 5d 32 b5 b5 cc 79 6a c7 d0 29 a7 35 9c b4 da f3 c1 0e bf 6a bc 5b 71 7b a8 dc d7 bd b7 ac af ed 15 8d 6b 69 db 45 db ba 49 3c 45 53 e9 1e af 75 e6 ce 31 86 51 0e 93 94 3d 46 e7 86 f8 13 4b e2 2e 09 d0 2e 38 4a 77 55 b8 8e ca 84 aa dd fa 5d 58 ba 33 9c 52 Data Ascii: tKJ9rf;8_ox[RxLq8_Wu)EFQiU'"OiV~t,iFIRwiZMZSp^{pl\]6:]2yj)5j[q{kiEI<ESu1Q=FK..8JwU]X3R
2025-03-19 09:04:03 UTC	1369	IN	Data Raw: 7b 56 b4 71 4d 45 f2 53 e7 93 e5 cb f9 b8 78 22 e8 d7 9c 3b ae 76 49 c5 ab 43 e1 df c4 96 d2 d4 ed 2d ee 28 c6 e2 75 21 55 77 b0 49 e5 ef 19 72 bc 34 8f 1e b5 ed 07 89 2d 28 70 ed 2b 5b d8 51 8e 80 e6 ec 1c 29 24 e1 cf f2 94 9f e9 27 d3 0c d9 71 0f 6b 1c 55 af 68 f7 9a 55 dd 7b 1a 5a 7d dc a3 3a b4 6d ac e1 4b d6 52 e6 e6 4d 6f cc da 4d b1 b3 23 74 3d 09 f6 7f c3 4b b6 1e 34 d1 1e 97 8d 2b 4e d1 dd dd b5 1e fa a6 29 d4 ee e2 d4 b9 b9 b2 f7 6f ab 68 d8 f6 69 d9 e7 0d 6a 3a 3f 0e 58 eb ba 15 9d 2b bd 5a ca 57 0e b5 de a3 25 7d 55 f2 e6 33 a1 46 1b 28 2e b9 96 36 eb 93 ce 6b f6 db c6 b5 ed 25 42 a5 ed 94 b9 ed dd b5 5a ae ce 1d e5 68 34 d7 ad 2e ad e1 bf 8e 48 da 67 6b fc 5f a6 69 ba 75 9d 9d dd a4 5e 9f 4e 34 28 5c ce d2 13 ae a9 47 18 a6 e6 d6 79 76 4b 1e Data Ascii: {VqMESx";vIC-(u!UwIr4-(p+[Q)$'qkUhU{Z}:mKRMoM#t=K4+N)ohij:?X+ZW%}U3F(.6k%BZh4.Hgk_iu^N4(\GyvK
2025-03-19 09:04:03 UTC	1369	IN	Data Raw: bb 89 3b 5c e3 1e 21 d2 2b e9 97 da 8d 2a 76 57 1b 56 85 ad bc 28 ba ab c5 49 ad da 7e 2b c4 c7 c3 bd aa f1 46 81 a4 5a e9 d6 57 16 75 68 d9 a9 2b 39 dc da 42 ad 4b 5c f5 ee e4 f7 47 19 c3 2f 27 4d d0 f4 5d 2b b2 dd 03 8a 34 eb 1a 1c 3d 05 52 eb 4a d7 a5 a7 ea b7 14 ea c9 bb 8b 5c b9 46 ab 4d e2 3e ae 16 c9 6f 92 7e 9d c1 fc 0a b4 ad 43 88 a9 e9 da 3c ac 6e 75 5a b6 36 74 75 4d 4e a5 b5 0a 54 69 3e 46 e3 2d dc aa 49 c6 52 59 7e 2b 1d 0f 1b e1 ae 3f e2 3e 1b ad ac 55 d2 ef f9 6a ea f1 6a f2 75 60 a6 e6 de 7d 65 9e 92 f5 9e fe d2 fe 10 ed 07 5e e1 5b 0a b6 3a 75 4b 5a f6 15 2a aa ee da f6 de 35 e9 c6 a2 e9 38 a9 74 96 cb 75 e4 59 c3 2f 54 dd 8b d6 b5 ad 0b 49 e1 ce 05 ed 6e cf 87 6e 7d 23 4b 70 d3 eb d2 f5 9c 9d 3e 69 b6 e1 97 d7 0d 6c fc 9a 23 58 70 b7 06 Data Ascii: ;\!+vWV(I~+FZWuh+9BK\G/'M]+4=RJ\FM>o~C<nuZ6tuMNTi>F-IRY~+?>Ujju`}e^[:uKZ58tuY/TInn}#Kp>il#Xp
2025-03-19 09:04:03 UTC	1369	IN	Data Raw: b5 ce 3a b2 e2 5b 2e 1f d1 34 19 de cf 45 d1 6d bb a8 55 bc 49 54 af 53 09 73 b4 ba 61 2c 2f 7b 1b 66 26 8b 8a 79 c0 00 ee e6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f4 4e c1 b5 47 a3 76 83 4a fb f1 5d e6 a5 4a 95 b5 55 51 59 d3 ef 2a d0 8b 49 3a b1 5f dd ff 00 33 d1 75 2a f6 f7 bd 9f 6b b7 fa 0f 16 dc 71 77 0e 5b 5d 51 b8 d4 f4 cd 62 9c 95 78 45 cd 61 53 ad b3 83 7e c5 e0 f1 83 c2 f8 63 88 75 4e 17 d6 68 6a ba 1d d4 ad 6f 68 e5 46 69 26 9a 7d 62 d3 d9 a7 e4 ce 8b 8a 3b 4e e2 4e 23 d2 27 a5 dd 54 b2 b5 d3 ea cd 55 ad 42 c6 d6 34 15 69 ad f3 3c 6e f7 49 9c b2 c2 67 2b 6e 32 88 8a 7b 3f 17 70 9f 0f cb 8b b8 97 5b d4 f4 eb bd 5e df 46 d0 ad 6e 68 e9 95 2f 2a d4 75 25 2e 7e b2 6d cb 96 2a 2b 6c e3 ab c1 ae d3 78 23 83 b5 bf f4 73 7d 4b 86 Data Ascii: :[.4EmUITSsa,/{f&yNGvJ]JUQYI:_3ukqw[]QbxEaS~cuNhjohFi&}b;NN#'TUB4i<nIg+n2{?p[^Fnh/u%.~m+lx#s}K
2025-03-19 09:04:03 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 f4 ee cf 5f ff 00 93 91 ff 00 b6 9f f9 1e 62 6d b4 3e 20 bd d1 94 e1 6c e1 3a 53 79 70 a8 b2 b3 e6 8f 7f f4 df 13 8f 86 d6 df 9f 55 4f 3f 89 d2 9d 5c 36 e2 f5 e0 79 c7 f2 ef 51 fe af 6b f0 97 ef 1f cb bd 47 fa bd a7 c2 5f bc fd 0f e3 3e 1b d6 7e cf 9b ee 5a be 8f 47 07 9c 7f 2e f5 1f ea f6 9f 09 7e f1 fc bb d4 7f ab da 7c 25 fb c7 e3 3e 1b d6 7e c7 b8 ea fa 3d 1c 1e 71 fc bb d4 7f ab da 7c 25 fb c7 f2 ef 51 fe af 69 f0 97 ef 2f e3 1e 17 d6 7e cb ee 3a af 47 07 9c 7f 2e f5 1f ea f6 9f 09 7e f1 fc bb d4 7f ab da 7c 25 fb c9 f8 cf 86 f5 9f b1 ee 3a 9e 8f 47 07 9c 7f 2e f5 1f ea f6 9f 09 7e f1 fc bb d4 7f ab da 7c 25 fb c7 e3 3e 1b d6 7e c9 ee 5a be 8f 47 07 9c 7f 2e f5 1f ea f6 9f 09 7e f2 ca bc 73 a9 4e 9b 8c 29 5b 41 b5 b4 94 5b Data Ascii: _bm> l:SypUO?\6yQkG_>~ZG.~\|%>~=q\|%Qi/~:G.~\|%:G.~\|%>~ZG.~sN)[A[
2025-03-19 09:04:03 UTC	1369	IN	Data Raw: d1 d3 f8 0e f1 7d 1d 3f 80 16 02 fe f1 7d 1d 3f 80 ef 17 d1 d3 f8 01 60 2f ef 17 d1 d3 f8 0e f1 7d 1d 3f 80 16 02 fe f1 7d 1d 3f 80 ef 17 d1 d3 f8 01 60 2f ef 17 d1 d3 f8 0e f1 7d 1d 3f 80 16 02 fe f1 7d 1d 3f 80 ef 17 d1 d3 f8 01 60 2f ef 17 d1 d3 f8 0e f1 7d 1d 3f 80 16 02 fe f1 7d 1d 3f 80 ef 17 d1 d3 f8 01 60 2f ef 17 d1 d3 f8 0e f1 7d 1d 3f 80 16 02 fe f1 7d 1d 3f 80 ef 17 d1 d3 f8 01 60 2f ef 17 d1 d3 f8 0e f1 7d 1d 3f 80 16 02 fe f1 7d 1d 3f 80 ef 17 d1 d3 f8 01 60 2f ef 17 d1 d3 f8 0e f1 7d 1d 3f 80 16 02 fe f1 7d 1d 3f 80 ef 17 d1 d3 f8 01 60 2f ef 17 d1 d3 f8 0e f1 7d 1d 3f 80 16 02 fe f1 7d 1d 3f 80 ef 17 d1 d3 f8 01 60 2f ef 17 d1 d3 f8 0e f1 7d 1d 3f 80 16 02 fe f1 7d 1d 3f 80 ef 17 d1 d3 f8 01 60 2f ef 17 d1 d3 f8 0e f1 7d 1d 3f 80 16 02 fe Data Ascii: }?}?`/}?}?`/}?}?`/}?}?`/}?}?`/}?}?`/}?}?`/}?}?`/}?}?`/}?
2025-03-19 09:04:03 UTC	1369	IN	Data Raw: 1a c6 af 95 dc 01 d9 de 9c bb 4f e2 de 1f e2 5b 1a da 85 1d 22 ce bd 7a 34 69 d4 95 39 55 e5 94 5c 1a 71 df 78 cb e2 cd 86 b3 c0 dc 37 a8 f0 0d 7e 20 b4 e1 ad 63 85 ee 2d 2f ad e8 2a 17 d5 e5 25 77 0a 93 8c 64 a3 cd be 57 33 dd 79 78 f8 4e 5d ae 70 dd 4e 2b ab c5 11 f4 db 3d 5e f7 87 ea 58 5c c2 8d 06 d4 2e f3 17 09 46 59 dd 6c f7 f0 c2 3c 7e ef 8c 35 dd 66 f7 4f 9f 11 6b 3a 85 fd 1b 6a d4 ea f2 d7 ac e6 96 1a 6d a5 d3 3d 4e 75 94 f2 d5 c4 36 3d b2 68 5a 7f 0d 76 91 ac 69 3a 3d 17 46 c2 da 54 d5 3a 6e 6e 4d 66 9c 64 f7 7b f5 6c e3 0e c7 b5 de 21 b1 e2 ae d0 f5 7d 6b 49 75 5d 95 d3 a6 e9 f7 b0 e4 97 ab 4e 31 79 5e 1b a6 71 c7 5c 6e a2 d8 9e c0 01 a4 77 7d 88 70 ee 9b c5 5d a3 58 69 3a cd 09 5c 58 d5 a3 5e 72 a7 19 b8 36 e3 4d b5 ba df a9 d4 f1 af 0b d9 ca Data Ascii: O["z4i9U\qx7~ c-/*%wdW3yxN]pN+=^X\.FYl<~5fOk:jm=Nu6=hZvi:=FT:nnMfd{l!}kIu]N1y^q\nw}p]Xi:\X^r6M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49744	104.18.161.117	443	4712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 09:04:03 UTC	405	OUT	GET /img/favicon.ico HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 09:04:03 UTC	645	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 09:04:03 GMT Content-Type: image/x-icon Content-Length: 15086 Connection: close x-amz-id-2: QRs3q+dhKhAMTlvzYZ9HsOXkYLhQn66tiVr3vbhVW/V2FbAxceQ9QjMXwPqcyzjtLgD1BjyzKEE= x-amz-request-id: BSTN61CAHM9SMTMC Last-Modified: Thu, 05 Oct 2023 23:38:20 GMT ETag: "1f894f487d068a2ced95d5cd4f88598c" x-amz-server-side-encryption: AES256 Cache-Control: max-age=84600, must-revalidate x-amz-version-id: C5TuT6ObkzP1GjuEGkIHJatwDHqj5J6N CF-Cache-Status: HIT Age: 14744 Accept-Ranges: bytes Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 922bccd72a13bb65-FRA alt-svc: h3=":443"; ma=86400
2025-03-19 09:04:03 UTC	724	IN	Data Raw: 00 00 01 00 03 00 30 30 00 00 01 00 20 00 a8 25 00 00 36 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 de 25 00 00 10 10 00 00 01 00 20 00 68 04 00 00 86 36 00 00 28 00 00 00 30 00 00 00 60 00 00 00 01 00 20 00 00 00 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 39 32 2b 88 39 32 2b f3 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 Data Ascii: 00 %6 % h6(0` $92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+9
2025-03-19 09:04:03 UTC	1369	IN	Data Raw: 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 Data Ascii: +92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+9
2025-03-19 09:04:03 UTC	1369	IN	Data Raw: ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 Data Ascii: 92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92
2025-03-19 09:04:03 UTC	1369	IN	Data Raw: f8 f8 f8 ff f8 f8 f8 ff f8 f8 f8 ff f7 f7 f7 ff 8e 8a 86 ff 37 30 29 ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 38 30 29 ff 50 49 43 ff e0 e0 df ff f8 f9 f9 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f9 f9 f9 ff f9 f9 f9 ff e2 e1 e0 ff 9a 96 93 ff 4b 44 3e ff 44 3d 36 ff c9 c7 c5 ff f9 fa fa ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f9 f9 f9 ff d6 d5 d4 ff 4f 49 42 ff 38 31 29 ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b Data Ascii: 70)92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+80)PICKD>D=6OIB81)92+92+92+92+92+92+92+92+92+
2025-03-19 09:04:03 UTC	1369	IN	Data Raw: f9 f9 ff de dd dc ff 56 50 4a ff 37 30 29 ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 38 31 2a ff 4b 45 3f ff c0 be bc ff d3 d2 d1 ff d2 d1 d0 ff d2 d1 d0 ff d1 cf ce ff d9 d8 d6 ff f5 f4 f4 ff f8 f8 f8 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f8 f8 f8 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f8 f8 f8 ff 9c 99 96 ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff Data Ascii: VPJ70)92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+81*KE?92+92+92+92+92+92+92+92+92+92+92+92+92+
2025-03-19 09:04:03 UTC	1369	IN	Data Raw: 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 3c 36 2f ff 53 4d 47 ff 57 51 4b ff 56 50 4b ff 56 50 4b ff 56 50 4b ff 57 51 4b ff 50 4a 44 ff 3b 34 2d ff 38 31 2a ff 41 3a 33 ff 56 50 4a ff 56 51 4b ff 56 50 4b ff 57 51 4b ff 54 4e 48 ff 3f 38 31 ff 39 32 2a ff 3a 33 2d ff 50 4a 44 ff 57 51 4b ff 56 50 4b ff 56 50 4b ff 56 50 4b ff 56 50 4b ff 57 51 4b ff 4f 49 43 ff 3a 33 2c ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 Data Ascii: +92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+<6/SMGWQKVPKVPKVPKWQKPJD;4-81A:3VPJVQKVPKWQKTNH?8192:3-PJDWQKVPKVPKVPKVPKWQKOIC:3,92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+9
2025-03-19 09:04:03 UTC	1369	IN	Data Raw: ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 Data Ascii: 92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92
2025-03-19 09:04:03 UTC	1369	IN	Data Raw: 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b f3 39 32 2b 89 39 32 2b f4 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b Data Ascii: 92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+
2025-03-19 09:04:03 UTC	1369	IN	Data Raw: 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff Data Ascii: 2+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+
2025-03-19 09:04:03 UTC	1369	IN	Data Raw: 2b ff 39 32 2b ff 3c 35 2e ff 54 4e 48 ff 76 72 6d ff b2 b0 ad ff eb ea ea ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f8 f8 f8 ff f3 f3 f3 ff f6 f6 f6 ff f7 f7 f7 ff f7 f7 f7 ff f8 f8 f8 ff ef ef ef ff 72 6d 68 ff 36 2f 28 ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 3f 39 32 ff 68 63 5d ff 6e 69 64 ff 74 6f 6b ff b1 ae ab ff f5 f5 f5 ff f7 f8 f8 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f8 f8 f8 ff f7 f7 f7 ff f7 f7 f7 ff fa fa fa ff c0 be bc ff 41 3b 34 ff 38 31 2a ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 Data Ascii: +92+<5.TNHvrmrmh6/(92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+?92hc]nidtokA;481*92+92+92+92+92+92+92+92+92+92+92+92+9

Statistics

CPU Usage

• chrome.exe
• chrome.exe
• chrome.exe

Click to jump to process

Memory Usage

• chrome.exe
• chrome.exe
• chrome.exe

Click to jump to process

Click to jump to process

Target ID:	1
Start time:	05:03:52
Start date:	19/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff786830000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	05:03:55
Start date:	19/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2364,i,374398198376796889,4682159419714887947,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2448 /prefetch:3
Imagebase:	0x7ff786830000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	4
Start time:	05:04:02
Start date:	19/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://sso-cdn-coinbasepro-autthh.webflow.io/"
Imagebase:	0x7ff786830000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://sso-cdn-coinbasepro-autthh.webflow.io/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 55

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTP Packets

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Windows Analysis Report
http://sso-cdn-coinbasepro-autthh.webflow.io/