Edit tour

Windows Analysis Report
https://sso-robinhood---net-cdn--auth.webflow.io/

Overview

General Information

Sample URL:	https://sso-robinhood---net-cdn--auth.webflow.io/
Analysis ID:	1642759
Infos:

Detection

HTMLPhisher

Score:	60
Range:	0 - 100
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Yara detected HtmlPhish64

AI detected suspicious URL

Creates files inside the system directory

Deletes files inside the Windows folder

HTML body contains low number of good links

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1596 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 5816 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2004,i,15634055504048365914,5295760618512104828,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2132 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6900 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://sso-robinhood---net-cdn--auth.webflow.io/" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
0.0.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security

Joe Sandbox Signatures

• AV Detection
• Phishing
• Compliance
• Networking
• System Summary

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://sso-robinhood---net-cdn--auth.webflow.io/

Avira URL Cloud: detection malicious, Label: phishing

Phishing

Yara detected HtmlPhish64

Source: Yara match

File source: 0.0.pages.csv, type: HTML

AI detected suspicious URL

Source: https://sso-robinhood---net-cdn--auth.webflow.io

Joe Sandbox AI: The URL 'https://sso-robinhood---net-cdn--auth.webflow.io' appears to be attempting to mimic a legitimate Robinhood URL. The use of 'sso' and 'auth' suggests an attempt to imitate a single sign-on or authentication service, which is a common tactic in phishing attempts. The presence of 'robinhood' in the subdomain is a direct reference to the brand, and the use of multiple hyphens and the 'webflow.io' domain extension could confuse users into thinking this is a legitimate service related to Robinhood. The structural complexity and the use of a known brand name in a misleading context increase the likelihood of this being a typosquatting attempt. However, the 'webflow.io' domain could also be used for legitimate purposes unrelated to Robinhood, but the context here strongly suggests an attempt to deceive.

Source: https://sso-robinhood---net-cdn--auth.webflow.io/

HTTP Parser: Number of links: 0

Source: https://sso-robinhood---net-cdn--auth.webflow.io/

HTTP Parser: No <meta name="author".. found

Source: https://sso-robinhood---net-cdn--auth.webflow.io/

HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 142.250.186.36:443 -> 192.168.2.4:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.36.248:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.36.248:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.160.117:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.160.117:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.222.232.144:443 -> 192.168.2.4:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.160.117:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.160.117:443 -> 192.168.2.4:49742 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.184.195
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.184.195
Source: unknown	TCP traffic detected without corresponding DNS query: 104.126.37.128
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.77.188
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: sso-robinhood---net-cdn--auth.webflow.ioConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /678a121f08be05e6ab130df5/css/sso-robinhood---net-cdn--auth.webflow.ce67eee42.css HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://sso-robinhood---net-cdn--auth.webflow.io/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /678a121f08be05e6ab130df5/js/webflow.77ac24386eb2a8dacabbd68092c045ec.js HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://sso-robinhood---net-cdn--auth.webflow.io/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/jquery-3.5.1.min.dc5e7f18c8.js?site=678a121f08be05e6ab130df5 HTTP/1.1Host: d3e54v103j8qbb.cloudfront.netConnection: keep-aliveOrigin: https://sso-robinhood---net-cdn--auth.webflow.iosec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://sso-robinhood---net-cdn--auth.webflow.io/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /678a121f08be05e6ab130df5/678a1252ad2f1326a88bfd5f_dgdgdg.png HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://sso-robinhood---net-cdn--auth.webflow.io/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /678a121f08be05e6ab130df5/678a1241d463254a5d610eb7_Screenshot%202025-01-08%20at%2013-39-14%20Commission-free%20Stock%20Trading%20%26%20Investing%20App%20Robinhood.png HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://sso-robinhood---net-cdn--auth.webflow.io/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /678a121f08be05e6ab130df5/678a1252ad2f1326a88bfd5f_dgdgdg.png HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /678a121f08be05e6ab130df5/678a1241d463254a5d610eb7_Screenshot%202025-01-08%20at%2013-39-14%20Commission-free%20Stock%20Trading%20%26%20Investing%20App%20Robinhood.png HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: sso-robinhood---net-cdn--auth.webflow.io
Source: global traffic	DNS traffic detected: DNS query: cdn.prod.website-files.com
Source: global traffic	DNS traffic detected: DNS query: d3e54v103j8qbb.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: robenboodlogi.info
Source: global traffic	DNS traffic detected: DNS query: google.com

Source: chromecache_65.2.dr	String found in binary or memory: http://underscorejs.org
Source: chromecache_69.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/678a121f08be05e6ab130df5/678a1241d463254a5d610eb7_Screenshot%2020
Source: chromecache_69.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/678a121f08be05e6ab130df5/678a1252ad2f1326a88bfd5f_dgdgdg.png
Source: chromecache_69.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/678a121f08be05e6ab130df5/css/sso-robinhood---net-cdn--auth.webflo
Source: chromecache_69.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/678a121f08be05e6ab130df5/js/webflow.77ac24386eb2a8dacabbd68092c04
Source: chromecache_69.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/img/webclip.png
Source: chromecache_69.2.dr	String found in binary or memory: https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=678a121f08be05e6ab130df
Source: chromecache_65.2.dr	String found in binary or memory: https://github.com/bkwld/tram
Source: chromecache_69.2.dr	String found in binary or memory: https://robenboodlogi.info/logi/
Source: chromecache_69.2.dr	String found in binary or memory: https://webflow.com

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443

Source: unknown	HTTPS traffic detected: 142.250.186.36:443 -> 192.168.2.4:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.36.248:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.36.248:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.160.117:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.160.117:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.222.232.144:443 -> 192.168.2.4:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.160.117:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.160.117:443 -> 192.168.2.4:49742 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir1596_2122115675

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir1596_2122115675

Jump to behavior

Source: classification engine

Classification label: mal60.phis.win@29/14@33/6

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2004,i,15634055504048365914,5295760618512104828,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2132 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://sso-robinhood---net-cdn--auth.webflow.io/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2004,i,15634055504048365914,5295760618512104828,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2132 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://sso-robinhood---net-cdn--auth.webflow.io/	100%	Avira URL Cloud	phishing

Source	Detection	Scanner	Label	Link
https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=678a121f08be05e6ab130df5	0%	Avira URL Cloud	safe
https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=678a121f08be05e6ab130df	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
d3e54v103j8qbb.cloudfront.net	52.222.232.144	true	false	high
sso-robinhood---net-cdn--auth.webflow.io	104.18.36.248	true	true	unknown
google.com	142.250.186.174	true	false	high
cdn.prod.website-files.com	104.18.160.117	true	false	high
www.google.com	142.250.186.36	true	false	high
robenboodlogi.info	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://sso-robinhood---net-cdn--auth.webflow.io/	true		unknown
https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=678a121f08be05e6ab130df5	false	Avira URL Cloud: safe	unknown
https://cdn.prod.website-files.com/678a121f08be05e6ab130df5/678a1252ad2f1326a88bfd5f_dgdgdg.png	false		high
https://cdn.prod.website-files.com/678a121f08be05e6ab130df5/js/webflow.77ac24386eb2a8dacabbd68092c045ec.js	false		high
https://cdn.prod.website-files.com/678a121f08be05e6ab130df5/678a1241d463254a5d610eb7_Screenshot%202025-01-08%20at%2013-39-14%20Commission-free%20Stock%20Trading%20%26%20Investing%20App%20Robinhood.png	false		high
https://cdn.prod.website-files.com/678a121f08be05e6ab130df5/css/sso-robinhood---net-cdn--auth.webflow.ce67eee42.css	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://cdn.prod.website-files.com/678a121f08be05e6ab130df5/678a1241d463254a5d610eb7_Screenshot%2020	chromecache_69.2.dr	false		high
https://cdn.prod.website-files.com/678a121f08be05e6ab130df5/css/sso-robinhood---net-cdn--auth.webflo	chromecache_69.2.dr	false		high
http://underscorejs.org	chromecache_65.2.dr	false		high
https://cdn.prod.website-files.com/678a121f08be05e6ab130df5/js/webflow.77ac24386eb2a8dacabbd68092c04	chromecache_69.2.dr	false		high
https://cdn.prod.website-files.com/img/webclip.png	chromecache_69.2.dr	false		high
https://robenboodlogi.info/logi/	chromecache_69.2.dr	false		high
https://github.com/bkwld/tram	chromecache_65.2.dr	false		high
https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=678a121f08be05e6ab130df	chromecache_69.2.dr	false	Avira URL Cloud: safe	unknown
https://webflow.com	chromecache_69.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.36.248	sso-robinhood---net-cdn--auth.webflow.io	United States	13335	CLOUDFLARENETUS	true
142.250.186.36	www.google.com	United States	15169	GOOGLEUS	false
104.18.160.117	cdn.prod.website-files.com	United States	13335	CLOUDFLARENETUS	false
52.222.232.144	d3e54v103j8qbb.cloudfront.net	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.8
192.168.2.4

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1642759
Start date and time:	2025-03-19 10:55:27 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 17s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://sso-robinhood---net-cdn--auth.webflow.io/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	21
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal60.phis.win@29/14@33/6
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, sppsvc.exe, RuntimeBroker.exe, ShellExperienceHost.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.181.238, 142.250.186.99, 142.250.185.206, 74.125.133.84, 142.250.184.206, 216.58.212.142, 142.250.74.206, 142.250.185.110, 142.250.185.142, 142.250.184.238, 142.250.185.195, 142.250.185.67, 199.232.214.172, 23.60.203.209, 172.202.163.200
Excluded domains from analysis (whitelisted): fs.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, accounts.google.com, redirector.gvt1.com, slscr.update.microsoft.com, update.googleapis.com, ctldl.windowsupdate.com, clientservices.googleapis.com, clients.l.google.com, fe3cr.delivery.mp.microsoft.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://sso-robinhood---net-cdn--auth.webflow.io/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (2587)
Category:	downloaded
Size (bytes):	36230
Entropy (8bit):	5.229407486730831
Encrypted:	false
SSDEEP:	768:AyNf7A1RE/GqyFVF54mkxWaIi1aUuF9Zl0F6FhF8FPqkowKji/JVx1:Aye1REeqyP0XcPyjowKjK
MD5:	CE67EEE42C89568CEA3E40F6459BEBDB
SHA1:	2893E67BA934122231F741F77F24BB2F0DFEAED6
SHA-256:	C219BD77B1A92CCD8E6A3EE098A0BC34A65F56C666660FF934B4638D4AD681F3
SHA-512:	50F0AE74E0FA09ADA3CE88D6518F02835D77665FC0817724EFE068806C3F2C89BFE3035C65EC55020A22F0E69B61C8977948A4E0D631BE2D193464F7F8922FB5
Malicious:	false
Reputation:	low
URL:	https://cdn.prod.website-files.com/678a121f08be05e6ab130df5/css/sso-robinhood---net-cdn--auth.webflow.ce67eee42.css
Preview:	html {. -webkit-text-size-adjust: 100%;. -ms-text-size-adjust: 100%;. font-family: sans-serif;.}..body {. margin: 0;.}..article, aside, details, figcaption, figure, footer, header, hgroup, main, menu, nav, section, summary {. display: block;.}..audio, canvas, progress, video {. vertical-align: baseline;. display: inline-block;.}..audio:not([controls]) {. height: 0;. display: none;.}..[hidden], template {. display: none;.}..a {. background-color: #0000;.}..a:active, a:hover {. outline: 0;.}..abbr[title] {. border-bottom: 1px dotted;.}..b, strong {. font-weight: bold;.}..dfn {. font-style: italic;.}..h1 {. margin: .67em 0;. font-size: 2em;.}..mark {. color: #000;. background: #ff0;.}..small {. font-size: 80%;.}..sub, sup {. vertical-align: baseline;. font-size: 75%;. line-height: 0;. position: relative;.}..sup {. top: -.5em;.}..sub {. bottom: -.25em;.}..img {. border: 0;.}..svg:not(:root) {. overflow: hidden;.}..hr {. box-sizing: content-box;. height: 0;.}..

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64900)
Category:	downloaded
Size (bytes):	64985
Entropy (8bit):	5.2925705781751855
Encrypted:	false
SSDEEP:	1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLi+:AYh8eip3huuf6Ii+
MD5:	50AD5ADEED856B7F741240E598573633
SHA1:	A1832AA130170AEC967EBA1005DFF4E72C23A230
SHA-256:	0D39EBFAE11470174C730888F9EF3AB2E0BC6D944A1A82427D48546F36AD8176
SHA-512:	2DB39F7F38464309676479635CBD3D8F10898AF9A5DFB7A2C8EBF78EBD863E65F239BD37CA831D18B40D42D0FB25E48443D1E09FCCC0D670D06A69F9FC98AB25
Malicious:	false
Reputation:	low
URL:	https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=678a121f08be05e6ab130df5
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	803
Entropy (8bit):	7.582551628276611
Encrypted:	false
SSDEEP:	12:6v/7iQ/6mUO77GjYE1NfSxipER2CJUsWIZGj8fWWHIZ90C6IhHeBs9c+8DVDnb8d:PmUOXkYcpfpc2C6HgJe9l+Bs++8Jajn
MD5:	C8F0CEF2D937562902DAA9C3C0B67CA3
SHA1:	99D0D6C68F2C00ACF5CB853A402AF4D18690C0F6
SHA-256:	73862EF843D3D50565F0495EC3C08ACB45E0DA61968DBC54D431232E86B44278
SHA-512:	44E35CD1909D50DEF4A518EF818E1D751F15F1475BFA781209D76CBC6D4E69537034FFED48D95F921821DCE77E9F847F0BD27D5CA00C901E90D75405CADC1A77
Malicious:	false
Reputation:	low
URL:	https://cdn.prod.website-files.com/678a121f08be05e6ab130df5/678a1252ad2f1326a88bfd5f_dgdgdg.png
Preview:	.PNG........IHDR... ... .....szz.....sRGB.........gAMA......a.....pHYs..........o.d....IDATXG.Mh.A...Mv7.[.."b......../.TK. R..T.... ..^...G..T......z.....4E..!z..ZKmK...d.o......M#..e33a.......T......S... oI....?..s....\....0.:/.z:.\=.@p...%.8....0Vo.....t..^.qa...F.k...U.[......D.<E~g...g.e.o.!.....!..z..'....;..tJ..@...?....=<..p ...kz.]Q...o....N.l%.........i.......k...\|..q.t.....X..Y.PW..n..Z..]2Nn+...`.u.e...^.....8..n.e.8\|M.4.s.K .?w..=.a...f.....{..-`Z..#...l..7.K%...!.....Y@W;e..oc..d..sT..\|g.9'..f........-...t..\|..8pRh....5..H..D......?.,....)Q,bY@..(F.8<n3..v.m....%&.....R...>.m..P.NWzbX.....`.0.oC.v..P.}..x......-..;.Vr.....h.......c8.P<]E..z....b-.&b..F.$x...!J..H@.0..7...A.k......uq.S./...!3.lV1.......V..9@#..v,.~........\|../...X...k...0V.....IEND.B`.

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21513)
Category:	downloaded
Size (bytes):	37349
Entropy (8bit):	5.44100455597547
Encrypted:	false
SSDEEP:	768:G5p9WeNujJ4zgTyxOv5GAUdxKzPQfsJe184wEWpqvyqL/q:G5p9WeNul4zC5jMkOyqO
MD5:	FC7EF472A2BCA6FBDB8AB8235DEC64E0
SHA1:	39637DA0AC71621757C5CEE728307E30A9D7FE61
SHA-256:	D148CEDE7C0523EBC7C9FBBA7F4EB5AD8D2C7A449814A9177190F20708D31AAB
SHA-512:	72CCEBC092F1D2A32AD8A29E312207870FADD08178862B2132E3A0CCC6316B3C9FBFD83DCECECA96E23FB86F1B378CA611B79E4790B602CDDE235F16E7D31210
Malicious:	false
Reputation:	low
URL:	https://cdn.prod.website-files.com/678a121f08be05e6ab130df5/js/webflow.77ac24386eb2a8dacabbd68092c045ec.js
Preview:	./!. Webflow: Front-end site library. * @license MIT. * Inline scripts may access the api using an async handler:. * var Webflow = Webflow \|\| [];. * Webflow.push(readyFunction);. /..(()=>{var lt=(e,y)=>()=>(y\|\|e((y={exports:{}}).exports,y),y.exports);var Pt=lt(()=>{"use strict";window.tram=function(e){function y(t,n){var i=new J.Bare;return i.init(t,n)}function l(t){return t.replace(/[A-Z]/g,function(n){return"-"+n.toLowerCase()})}function T(t){var n=parseInt(t.slice(1),16),i=n>>16&255,r=n>>8&255,s=255&n;return[i,r,s]}function C(t,n,i){return"#"+(1<<24\|t<<16\|n<<8\|i).toString(16).slice(1)}function g(){}function L(t,n){B("Type warning: Expected: ["+t+"] Got: ["+typeof n+"] "+n)}function _(t,n,i){B("Units do not match ["+t+"]: "+n+", "+i)}function I(t,n,i){if(n!==void 0&&(i=n),t===void 0)return i;var r=i;return we.test(t)\|\|!Xt.test(t)?r=parseInt(t,10):Xt.test(t)&&(r=1e3parseFloat(t)),0>r&&(r=0),r===r?r:i}function B(t){et.debug&&window&&window.console.warn(t)}function U(t){for(var

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1348 x 768, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	544845
Entropy (8bit):	7.994826952111587
Encrypted:	true
SSDEEP:	12288:5iMxt4uS0ktCT9BHI6vr1RUunodhs0aY5ZbcnVSYtFCC3l:57xnX8CRB7vr1uuodhXbcnVFT3l
MD5:	35BAA4C2960F7ADAA6F26CC982435555
SHA1:	CD19A546FAFFE2EE076AE098BD7B4E1020BB3CEA
SHA-256:	EA591836E01D6D30A24617BD80F40E8C69EEE2716A193D9ADBE835DD91354146
SHA-512:	CFBA6922813605BCDB264E812B0811167E98A7FD8462D1C6CB6390C98A3828669485C55731EF441054F78E560703A2F17513142F70FBFA2E6A59BB892EF9AAC7
Malicious:	false
Reputation:	low
URL:	https://cdn.prod.website-files.com/678a121f08be05e6ab130df5/678a1241d463254a5d610eb7_Screenshot%202025-01-08%20at%2013-39-14%20Commission-free%20Stock%20Trading%20%26%20Investing%20App%20Robinhood.png
Preview:	.PNG........IHDR...D..........em... .IDATx^.}..diU..s..'..ldY. H........(...."J.........I........CO.........z]].Uz.f.~......;_>..{.Dd..hQ...E@.P...E@.P...E@.P...E@.P...E.G.@.......E@.P...E@.P...E@.P...E@.P...E ........E@.P...E@.P...E@.P...E@.P...E..A@......C..E@.P...E@.P...E@.P...E@.P...E@.Q...."..(..."..(..."..(..."..(..."p. .........."..(..."..(..."..(..."..(...".....E@.P...E@.P...E@.P...E@.P...E@..a.PB.ij.PE@.P...E@.P...E@.P...E@.P...E@.PBT.."..(..."..(..."..(..."..(..(.+V....ur.]wIss.466..n.2==-.N....)...{.....+/ `...Mo...!)--...b)( .w...E........g.\|.c.....G....h ..K..E@.P...E@.P...E@.P...E@.H........^JJJ.+_.....?.......?......U....!\|.=..K^...\|..\|.....}.s.\|....~y.s.+......Zy....[.........UVB.W..e.."..(..."..(..."..(..."......o{...{...\|.#..........N*2......4!9../\|....^.....Z.w.....,.}.{....J.f....(..."..(..."..(..."..(.............9rD....+......a...?(......T.;........o\|..RUU..z...N.>m...."..hN..+..."..(..."..(..."..(..."........o..(.....9...w..o4

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	803
Entropy (8bit):	7.582551628276611
Encrypted:	false
SSDEEP:	12:6v/7iQ/6mUO77GjYE1NfSxipER2CJUsWIZGj8fWWHIZ90C6IhHeBs9c+8DVDnb8d:PmUOXkYcpfpc2C6HgJe9l+Bs++8Jajn
MD5:	C8F0CEF2D937562902DAA9C3C0B67CA3
SHA1:	99D0D6C68F2C00ACF5CB853A402AF4D18690C0F6
SHA-256:	73862EF843D3D50565F0495EC3C08ACB45E0DA61968DBC54D431232E86B44278
SHA-512:	44E35CD1909D50DEF4A518EF818E1D751F15F1475BFA781209D76CBC6D4E69537034FFED48D95F921821DCE77E9F847F0BD27D5CA00C901E90D75405CADC1A77
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....sRGB.........gAMA......a.....pHYs..........o.d....IDATXG.Mh.A...Mv7.[.."b......../.TK. R..T.... ..^...G..T......z.....4E..!z..ZKmK...d.o......M#..e33a.......T......S... oI....?..s....\....0.:/.z:.\=.@p...%.8....0Vo.....t..^.qa...F.k...U.[......D.<E~g...g.e.o.!.....!..z..'....;..tJ..@...?....=<..p ...kz.]Q...o....N.l%.........i.......k...\|..q.t.....X..Y.PW..n..Z..]2Nn+...`.u.e...^.....8..n.e.8\|M.4.s.K .?w..=.a...f.....{..-`Z..#...l..7.K%...!.....Y@W;e..oc..d..sT..\|g.9'..f........-...t..\|..8pRh....5..H..D......?.,....)Q,bY@..(F.8<n3..v.m....%&.....R...>.m..P.NWzbX.....`.0.oC.v..P.}..x......-..;.Vr.....h.......c8.P<]E..z....b-.&b..F.$x...!J..H@.0..7...A.k......uq.S./...!3.lV1.......V..9@#..v,.~........\|../...X...k...0V.....IEND.B`.

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1348 x 768, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	544845
Entropy (8bit):	7.994826952111587
Encrypted:	true
SSDEEP:	12288:5iMxt4uS0ktCT9BHI6vr1RUunodhs0aY5ZbcnVSYtFCC3l:57xnX8CRB7vr1uuodhXbcnVFT3l
MD5:	35BAA4C2960F7ADAA6F26CC982435555
SHA1:	CD19A546FAFFE2EE076AE098BD7B4E1020BB3CEA
SHA-256:	EA591836E01D6D30A24617BD80F40E8C69EEE2716A193D9ADBE835DD91354146
SHA-512:	CFBA6922813605BCDB264E812B0811167E98A7FD8462D1C6CB6390C98A3828669485C55731EF441054F78E560703A2F17513142F70FBFA2E6A59BB892EF9AAC7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...D..........em... .IDATx^.}..diU..s..'..ldY. H........(...."J.........I........CO.........z]].Uz.f.~......;_>..{.Dd..hQ...E@.P...E@.P...E@.P...E@.P...E.G.@.......E@.P...E@.P...E@.P...E@.P...E ........E@.P...E@.P...E@.P...E@.P...E..A@......C..E@.P...E@.P...E@.P...E@.P...E@.Q...."..(..."..(..."..(..."..(..."p. .........."..(..."..(..."..(..."..(...".....E@.P...E@.P...E@.P...E@.P...E@..a.PB.ij.PE@.P...E@.P...E@.P...E@.P...E@.PBT.."..(..."..(..."..(..."..(..(.+V....ur.]wIss.466..n.2==-.N....)...{.....+/ `...Mo...!)--...b)( .w...E........g.\|.c.....G....h ..K..E@.P...E@.P...E@.P...E@.H........^JJJ.+_.....?.......?......U....!\|.=..K^...\|..\|.....}.s.\|....~y.s.+......Zy....[.........UVB.W..e.."..(..."..(..."..(..."......o{...{...\|.#..........N*2......4!9../\|....^.....Z.w.....,.}.{....J.f....(..."..(..."..(..."..(.............9rD....+......a...?(......T.;........o\|..RUU..z...N.>m...."..hN..+..."..(..."..(..."..(..."........o..(.....9...w..o4

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (3219), with no line terminators
Category:	downloaded
Size (bytes):	3220
Entropy (8bit):	5.3770320908388625
Encrypted:	false
SSDEEP:	96:NMyPx1u6f/O4jboLTmrbpGifLGiNtGijGi/Gilw6:ysxcN4vo30pJjJNtJjJ/Jlw6
MD5:	EC96A420799E13BE642339BDE4821DE6
SHA1:	337E280A70EC03BC6AD3C1255B840DE608E90E4B
SHA-256:	3E04BBF8F7DF2F0329709FD926B95B1C31BB0338BBCF208B993467EFE1A5CC9E
SHA-512:	AE2AA459D259789C3DA12B643C208653FB34E6502EC04B3371703A72132CBDC196A6518683D703043DDD4B7A8EA9845CF2F00DF2218017F5AD894F2C26CA6CCE
Malicious:	false
Reputation:	low
URL:	https://sso-robinhood---net-cdn--auth.webflow.io/
Preview:	<!DOCTYPE html> This site was created in Webflow. https://webflow.com --> Last Published: Fri Jan 17 2025 08:19:26 GMT+0000 (Coordinated Universal Time) --><html data-wf-domain="sso-robinhood---net-cdn--auth.webflow.io" data-wf-page="678a121f08be05e6ab130dfc" data-wf-site="678a121f08be05e6ab130df5" data-wf-status="1"><head><meta charset="utf-8"/><title>Log In \| Robinhood. - Sign In to Your Account</title><meta content="Robinhood Login is a commission-free trading platform that simplifies investing in stocks, ETFs, options, and cryptocurrencies. With a user-friendly interface, it has gained popularity among beginners and seasoned traders alike. Whether you're looking to start your first investment portfolio or refine an existing strategy, Robinhood provides a seamless platform to trade with confidence." name="description"/><meta content="width=device-width, initial-scale=1" name="viewport"/><meta content="Webflow" name="generator"/><link href="https://cdn.prod.website-file

Total Packets: 417
• 443 (HTTPS)
• 80 (HTTP)
• 53 (DNS)

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 19, 2025 10:56:19.165118933 CET	49680	443	192.168.2.4	204.79.197.222
Mar 19, 2025 10:56:25.580919981 CET	49671	443	192.168.2.4	204.79.197.203
Mar 19, 2025 10:56:25.884274006 CET	49671	443	192.168.2.4	204.79.197.203
Mar 19, 2025 10:56:26.493217945 CET	49671	443	192.168.2.4	204.79.197.203
Mar 19, 2025 10:56:27.758868933 CET	49671	443	192.168.2.4	204.79.197.203
Mar 19, 2025 10:56:28.853348970 CET	49680	443	192.168.2.4	204.79.197.222
Mar 19, 2025 10:56:30.258172035 CET	49671	443	192.168.2.4	204.79.197.203
Mar 19, 2025 10:56:32.956584930 CET	49730	443	192.168.2.4	142.250.186.36
Mar 19, 2025 10:56:32.956624031 CET	443	49730	142.250.186.36	192.168.2.4
Mar 19, 2025 10:56:32.956712008 CET	49730	443	192.168.2.4	142.250.186.36
Mar 19, 2025 10:56:32.956872940 CET	49730	443	192.168.2.4	142.250.186.36
Mar 19, 2025 10:56:32.956885099 CET	443	49730	142.250.186.36	192.168.2.4
Mar 19, 2025 10:56:33.004072905 CET	443	49730	142.250.186.36	192.168.2.4
Mar 19, 2025 10:56:33.004312038 CET	49730	443	192.168.2.4	142.250.186.36
Mar 19, 2025 10:56:33.005367994 CET	49730	443	192.168.2.4	142.250.186.36
Mar 19, 2025 10:56:33.005374908 CET	443	49730	142.250.186.36	192.168.2.4
Mar 19, 2025 10:56:33.005604982 CET	443	49730	142.250.186.36	192.168.2.4
Mar 19, 2025 10:56:33.055120945 CET	49730	443	192.168.2.4	142.250.186.36
Mar 19, 2025 10:56:33.969054937 CET	49731	443	192.168.2.4	104.18.36.248
Mar 19, 2025 10:56:33.969094038 CET	443	49731	104.18.36.248	192.168.2.4
Mar 19, 2025 10:56:33.969153881 CET	49731	443	192.168.2.4	104.18.36.248
Mar 19, 2025 10:56:33.969320059 CET	49732	443	192.168.2.4	104.18.36.248
Mar 19, 2025 10:56:33.969358921 CET	443	49732	104.18.36.248	192.168.2.4
Mar 19, 2025 10:56:33.969415903 CET	49732	443	192.168.2.4	104.18.36.248
Mar 19, 2025 10:56:33.969464064 CET	49731	443	192.168.2.4	104.18.36.248
Mar 19, 2025 10:56:33.969480038 CET	443	49731	104.18.36.248	192.168.2.4
Mar 19, 2025 10:56:33.969537973 CET	49732	443	192.168.2.4	104.18.36.248
Mar 19, 2025 10:56:33.969553947 CET	443	49732	104.18.36.248	192.168.2.4
Mar 19, 2025 10:56:33.998806000 CET	443	49732	104.18.36.248	192.168.2.4
Mar 19, 2025 10:56:33.998900890 CET	49732	443	192.168.2.4	104.18.36.248
Mar 19, 2025 10:56:33.999955893 CET	49732	443	192.168.2.4	104.18.36.248
Mar 19, 2025 10:56:34.000135899 CET	443	49731	104.18.36.248	192.168.2.4
Mar 19, 2025 10:56:34.000190020 CET	443	49732	104.18.36.248	192.168.2.4
Mar 19, 2025 10:56:34.000196934 CET	49731	443	192.168.2.4	104.18.36.248
Mar 19, 2025 10:56:34.001100063 CET	49731	443	192.168.2.4	104.18.36.248
Mar 19, 2025 10:56:34.001332998 CET	443	49731	104.18.36.248	192.168.2.4
Mar 19, 2025 10:56:34.001353979 CET	49732	443	192.168.2.4	104.18.36.248
Mar 19, 2025 10:56:34.044320107 CET	443	49732	104.18.36.248	192.168.2.4
Mar 19, 2025 10:56:34.044694901 CET	49731	443	192.168.2.4	104.18.36.248
Mar 19, 2025 10:56:34.077605009 CET	443	49732	104.18.36.248	192.168.2.4
Mar 19, 2025 10:56:34.077649117 CET	443	49732	104.18.36.248	192.168.2.4
Mar 19, 2025 10:56:34.077682972 CET	443	49732	104.18.36.248	192.168.2.4
Mar 19, 2025 10:56:34.077728033 CET	49732	443	192.168.2.4	104.18.36.248
Mar 19, 2025 10:56:34.077749968 CET	443	49732	104.18.36.248	192.168.2.4
Mar 19, 2025 10:56:34.077766895 CET	443	49732	104.18.36.248	192.168.2.4
Mar 19, 2025 10:56:34.077826023 CET	49732	443	192.168.2.4	104.18.36.248
Mar 19, 2025 10:56:34.077945948 CET	49732	443	192.168.2.4	104.18.36.248
Mar 19, 2025 10:56:34.093215942 CET	49732	443	192.168.2.4	104.18.36.248
Mar 19, 2025 10:56:34.093235016 CET	443	49732	104.18.36.248	192.168.2.4
Mar 19, 2025 10:56:34.151886940 CET	49733	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.151931047 CET	443	49733	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.152098894 CET	49733	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.152173042 CET	49734	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.152204037 CET	443	49734	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.152252913 CET	49734	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.152406931 CET	49733	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.152420044 CET	443	49733	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.152692080 CET	49734	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.152704954 CET	443	49734	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.153152943 CET	49735	443	192.168.2.4	52.222.232.144
Mar 19, 2025 10:56:34.153182030 CET	443	49735	52.222.232.144	192.168.2.4
Mar 19, 2025 10:56:34.153270960 CET	49735	443	192.168.2.4	52.222.232.144
Mar 19, 2025 10:56:34.154268980 CET	49735	443	192.168.2.4	52.222.232.144
Mar 19, 2025 10:56:34.154280901 CET	443	49735	52.222.232.144	192.168.2.4
Mar 19, 2025 10:56:34.155000925 CET	49678	443	192.168.2.4	20.189.173.27
Mar 19, 2025 10:56:34.182765961 CET	443	49734	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.182835102 CET	49734	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.183809996 CET	49734	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.184035063 CET	443	49734	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.184664965 CET	49734	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.188832045 CET	443	49733	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.188895941 CET	49733	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.189672947 CET	49733	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.189986944 CET	443	49733	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.190221071 CET	49733	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.197263002 CET	443	49735	52.222.232.144	192.168.2.4
Mar 19, 2025 10:56:34.197350025 CET	49735	443	192.168.2.4	52.222.232.144
Mar 19, 2025 10:56:34.200135946 CET	49735	443	192.168.2.4	52.222.232.144
Mar 19, 2025 10:56:34.200145006 CET	443	49735	52.222.232.144	192.168.2.4
Mar 19, 2025 10:56:34.200392008 CET	443	49735	52.222.232.144	192.168.2.4
Mar 19, 2025 10:56:34.200865984 CET	49735	443	192.168.2.4	52.222.232.144
Mar 19, 2025 10:56:34.211853981 CET	443	49735	52.222.232.144	192.168.2.4
Mar 19, 2025 10:56:34.211889029 CET	443	49735	52.222.232.144	192.168.2.4
Mar 19, 2025 10:56:34.211913109 CET	443	49735	52.222.232.144	192.168.2.4
Mar 19, 2025 10:56:34.211956024 CET	49735	443	192.168.2.4	52.222.232.144
Mar 19, 2025 10:56:34.211967945 CET	443	49735	52.222.232.144	192.168.2.4
Mar 19, 2025 10:56:34.212022066 CET	49735	443	192.168.2.4	52.222.232.144
Mar 19, 2025 10:56:34.212022066 CET	49735	443	192.168.2.4	52.222.232.144
Mar 19, 2025 10:56:34.216303110 CET	443	49735	52.222.232.144	192.168.2.4
Mar 19, 2025 10:56:34.216387987 CET	443	49735	52.222.232.144	192.168.2.4
Mar 19, 2025 10:56:34.216404915 CET	49735	443	192.168.2.4	52.222.232.144
Mar 19, 2025 10:56:34.216413021 CET	443	49735	52.222.232.144	192.168.2.4
Mar 19, 2025 10:56:34.216484070 CET	49735	443	192.168.2.4	52.222.232.144
Mar 19, 2025 10:56:34.218736887 CET	443	49735	52.222.232.144	192.168.2.4
Mar 19, 2025 10:56:34.218786001 CET	443	49735	52.222.232.144	192.168.2.4
Mar 19, 2025 10:56:34.218844891 CET	49735	443	192.168.2.4	52.222.232.144
Mar 19, 2025 10:56:34.218853951 CET	443	49735	52.222.232.144	192.168.2.4
Mar 19, 2025 10:56:34.218883038 CET	49735	443	192.168.2.4	52.222.232.144
Mar 19, 2025 10:56:34.218971014 CET	49735	443	192.168.2.4	52.222.232.144
Mar 19, 2025 10:56:34.220288992 CET	443	49735	52.222.232.144	192.168.2.4
Mar 19, 2025 10:56:34.220362902 CET	49735	443	192.168.2.4	52.222.232.144
Mar 19, 2025 10:56:34.220371962 CET	443	49735	52.222.232.144	192.168.2.4
Mar 19, 2025 10:56:34.220397949 CET	443	49735	52.222.232.144	192.168.2.4
Mar 19, 2025 10:56:34.220443010 CET	49735	443	192.168.2.4	52.222.232.144
Mar 19, 2025 10:56:34.221470118 CET	443	49735	52.222.232.144	192.168.2.4
Mar 19, 2025 10:56:34.221570969 CET	49735	443	192.168.2.4	52.222.232.144
Mar 19, 2025 10:56:34.221584082 CET	443	49735	52.222.232.144	192.168.2.4
Mar 19, 2025 10:56:34.221596956 CET	443	49735	52.222.232.144	192.168.2.4
Mar 19, 2025 10:56:34.228368044 CET	443	49734	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.232341051 CET	443	49733	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.258289099 CET	443	49734	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.258332968 CET	443	49734	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.258369923 CET	443	49734	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.258407116 CET	443	49734	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.258413076 CET	49734	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.258441925 CET	443	49734	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.258457899 CET	49734	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.258498907 CET	443	49734	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.258528948 CET	443	49734	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.258543968 CET	49734	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.258548975 CET	443	49734	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.258629084 CET	49734	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.258635044 CET	443	49734	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.262329102 CET	443	49733	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.262386084 CET	443	49733	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.262479067 CET	443	49733	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.262525082 CET	49733	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.262541056 CET	443	49733	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.262592077 CET	443	49733	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.262623072 CET	49733	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.262629032 CET	443	49733	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.262665987 CET	49733	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.262671947 CET	443	49733	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.262743950 CET	443	49733	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.262785912 CET	49733	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.262789965 CET	443	49733	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.263019085 CET	443	49734	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.263055086 CET	443	49734	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.263072014 CET	49734	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.263099909 CET	443	49734	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.263112068 CET	443	49733	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.263134003 CET	443	49734	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.263158083 CET	49733	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.263158083 CET	49734	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.263164043 CET	443	49733	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.263173103 CET	443	49734	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.263241053 CET	49734	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.264478922 CET	443	49734	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.264533997 CET	443	49734	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.264584064 CET	443	49734	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.264627934 CET	49734	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.264642954 CET	443	49734	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.264749050 CET	49734	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.265710115 CET	443	49734	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.265769005 CET	443	49734	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.265800953 CET	443	49734	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.265810966 CET	49734	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.265829086 CET	443	49734	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.265995979 CET	49734	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.266006947 CET	443	49734	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.266371012 CET	443	49734	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.266410112 CET	443	49734	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.266421080 CET	49734	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.266432047 CET	443	49734	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.266468048 CET	49734	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.266477108 CET	443	49734	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.266506910 CET	443	49734	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.266592026 CET	443	49734	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.266616106 CET	49734	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.266634941 CET	49734	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.266856909 CET	443	49733	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.266906023 CET	443	49733	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.266907930 CET	49734	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.266926050 CET	443	49734	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.266927004 CET	49733	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.266932011 CET	443	49733	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.266973019 CET	49733	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.266985893 CET	443	49733	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.267524958 CET	443	49733	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.267565966 CET	49733	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.267570972 CET	443	49733	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.267683983 CET	443	49733	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.267724991 CET	443	49733	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.267749071 CET	49733	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.267755032 CET	443	49733	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.267887115 CET	49733	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.268789053 CET	443	49733	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.268872023 CET	443	49733	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.268908024 CET	443	49733	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.268959999 CET	49733	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.268965960 CET	443	49733	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.269013882 CET	49733	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.269284964 CET	443	49733	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.269368887 CET	443	49733	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.269404888 CET	49733	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.269409895 CET	443	49733	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.269468069 CET	443	49733	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.269507885 CET	49733	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.269512892 CET	443	49733	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.269650936 CET	443	49733	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.269696951 CET	49733	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.275487900 CET	49733	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.275501966 CET	443	49733	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.310982943 CET	49736	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.311017990 CET	443	49736	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.311075926 CET	49736	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.311229944 CET	49736	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.311242104 CET	443	49736	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.311606884 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.311652899 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.311749935 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.311846972 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.311856985 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.340879917 CET	443	49736	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.341280937 CET	49736	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.341280937 CET	49736	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.341299057 CET	443	49736	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.344127893 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.344472885 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.344624043 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.344636917 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.407548904 CET	443	49736	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.407617092 CET	443	49736	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.407768965 CET	49736	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.408123016 CET	49736	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.408133030 CET	443	49736	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.420908928 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.421034098 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.421097040 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.421124935 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.421200037 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.421288967 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.421376944 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.421462059 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.421484947 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.421493053 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.421638966 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.421716928 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.421727896 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.421794891 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.422139883 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.425288916 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.425376892 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.425426006 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.425435066 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.425590992 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.425604105 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.425741911 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.425828934 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.425870895 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.425878048 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.425976038 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.425997972 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.426006079 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.426095963 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.426659107 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.426810026 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.426851988 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.426872015 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.426961899 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.427175999 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.427182913 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.427663088 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.427747965 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.427807093 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.427814960 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.427896976 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.427959919 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.427968979 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.428054094 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.428061008 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.428332090 CET	443	49735	52.222.232.144	192.168.2.4
Mar 19, 2025 10:56:34.428409100 CET	49735	443	192.168.2.4	52.222.232.144
Mar 19, 2025 10:56:34.430025101 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.430105925 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.430151939 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.430160046 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.430202961 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.430313110 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.430463076 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.430546999 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.430552006 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.430576086 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.430723906 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.430783987 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.430802107 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.430845976 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.430854082 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.431196928 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.431253910 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.431271076 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.431283951 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.431387901 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.431396008 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.431545019 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.432151079 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.432248116 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.432301044 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.432318926 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.432351112 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.432399035 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.432399035 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.432406902 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.433129072 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.433258057 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.433264971 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.433300972 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.433347940 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.433365107 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.433388948 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.433434963 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.433443069 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.433492899 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.434148073 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.434235096 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.434284925 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.434284925 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.434294939 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.434359074 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.434875965 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.434959888 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.435161114 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.435214043 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.435256004 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.435307980 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.435347080 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.435436010 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.436019897 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.436117887 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.436213017 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.436300993 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.436322927 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.436383963 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.436853886 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.436898947 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.436949968 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.437035084 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.437043905 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.437076092 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.437167883 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.437212944 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.437212944 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.437223911 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.437252998 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.437350035 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.437360048 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.437659025 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.437895060 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.437961102 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.437988997 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.438041925 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.438081980 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.438148022 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.438174009 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.438224077 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.438261986 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.438361883 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.438498974 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.438591957 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.438638926 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.438638926 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.438647032 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.438688993 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.438711882 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.438719988 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.438739061 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.438781977 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.438863993 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.438893080 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.438899994 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.438967943 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.438967943 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.439409971 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.439469099 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.439486027 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.439513922 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.439606905 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.439610004 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.439631939 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.439681053 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.439733982 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.439826012 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.439876080 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.439876080 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.439886093 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.439913988 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.439965963 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.439982891 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.440299034 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.440794945 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.440859079 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.440958977 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.441000938 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.441020012 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.441035986 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.441050053 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.441099882 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.441201925 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.441257000 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.441272974 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.441322088 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.441322088 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.441329002 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.441410065 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.441423893 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.441472054 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.441504955 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.441521883 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.441559076 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.441559076 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.441776991 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.442080021 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.442121983 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.442153931 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.442171097 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.442192078 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.442219019 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.442243099 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.442282915 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.442306995 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.442313910 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.442363977 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.442363977 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.443077087 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.443119049 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.443176031 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.443176031 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.443185091 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.443300009 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.443346024 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.443357944 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.443357944 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.443376064 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.443407059 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.443407059 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.443429947 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.443526983 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.443564892 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.443615913 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.443623066 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.443639994 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.443676949 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.443700075 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.443706036 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.443728924 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.443762064 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.443762064 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.443769932 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.443818092 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.443818092 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.444560051 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.444602013 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.444686890 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.444694996 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.444705963 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.444765091 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.444768906 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.444796085 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.444820881 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.444839001 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.444894075 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.444894075 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.444901943 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.444947958 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.444972992 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.445012093 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.445066929 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.445066929 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.445075989 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.445118904 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.445164919 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.445177078 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.445177078 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.445190907 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.445214987 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.445317030 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.445328951 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.445348978 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.445389032 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.445396900 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.445396900 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.445416927 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.445441008 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.445555925 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.446119070 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.446161985 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.446211100 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.446211100 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.446221113 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.446309090 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.446357012 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.446362972 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.446384907 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.446441889 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.446441889 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.446527958 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.446573973 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.446592093 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.446605921 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.446652889 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.446652889 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.446680069 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.446758986 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.446767092 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.446969986 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.447007895 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.447058916 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.447058916 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.447069883 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.447150946 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.447187901 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.447240114 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.447240114 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.447251081 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.447292089 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.447329998 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.447379112 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.447379112 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.447386980 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.447458982 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.447880030 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.454262972 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.455688000 CET	49737	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:34.455701113 CET	443	49737	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:34.466250896 CET	49678	443	192.168.2.4	20.189.173.27
Mar 19, 2025 10:56:35.071111917 CET	49671	443	192.168.2.4	204.79.197.203
Mar 19, 2025 10:56:35.073205948 CET	49678	443	192.168.2.4	20.189.173.27
Mar 19, 2025 10:56:35.151262045 CET	49741	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.151295900 CET	443	49741	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.151359081 CET	49741	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.151561975 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.151601076 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.151662111 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.151835918 CET	49741	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.151860952 CET	443	49741	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.152179956 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.152199984 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.178411961 CET	443	49741	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.178519011 CET	49741	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.179608107 CET	49741	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.179851055 CET	443	49741	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.180591106 CET	49741	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.185919046 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.186003923 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.187233925 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.188005924 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.188252926 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.224334955 CET	443	49741	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.228322983 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.254302979 CET	443	49741	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.254404068 CET	443	49741	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.254473925 CET	49741	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.257860899 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.257992029 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.258074045 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.258078098 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.258107901 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.258167028 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.258193970 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.258342981 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.258394957 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.258409023 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.258486032 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.258531094 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.258538008 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.259222031 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.259279013 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.259287119 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.262909889 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.262993097 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.262999058 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.263016939 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.263102055 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.263111115 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.263390064 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.263438940 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.263446093 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.263535976 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.263581038 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.263587952 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.264229059 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.264290094 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.264297962 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.264395952 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.264445066 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.264452934 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.265117884 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.265197992 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.265245914 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.265253067 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.265342951 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.265348911 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.265372992 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.265491009 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.265877962 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.266022921 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.266097069 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.266149998 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.266158104 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.266352892 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.266666889 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.267575026 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.267657042 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.267703056 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.267712116 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.267769098 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.267775059 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.267867088 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.267921925 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.267929077 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.268016100 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.268069029 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.268076897 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.268172979 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.268218040 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.268227100 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.268989086 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.269048929 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.269056082 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.269134045 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.269140005 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.269153118 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.269213915 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.269221067 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.269265890 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.269927979 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.269982100 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.270610094 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.270665884 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.270701885 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.270749092 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.270785093 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.270834923 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.271612883 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.271656990 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.271702051 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.271755934 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.272514105 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.272567034 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.272609949 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.272660971 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.272694111 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.272747040 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.273591042 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.273639917 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.273648024 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.273690939 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.273736000 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.273745060 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.273789883 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.273837090 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.273844957 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.273888111 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.273931980 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.273940086 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.273974895 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.274018049 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.274024963 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.274209023 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.274446964 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.274501085 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.274540901 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.274585009 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.274626970 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.274674892 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.274966955 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.275007963 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.275017977 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.275063992 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.275115967 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.275158882 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.275207043 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.275255919 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.275304079 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.275351048 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.275394917 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.275425911 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.275475025 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.275966883 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.276026964 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.276063919 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.276122093 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.276160002 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.276216030 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.276263952 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.276313066 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.276362896 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.276412010 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.277416945 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.277470112 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.277515888 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.277565002 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.277611971 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.277657032 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.277717113 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.277757883 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.277821064 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.277877092 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.277939081 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.277990103 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.278033972 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.278088093 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.278151989 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.278203964 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.278248072 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.278266907 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.278301954 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.278302908 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.278316021 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.278333902 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.278352022 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.278666973 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.278707981 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.278723955 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.278737068 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.278770924 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.278847933 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.278891087 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.278908014 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.278922081 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.278940916 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.279963017 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.280004025 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.280045986 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.280055046 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.280072927 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.280211926 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.280250072 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.280333996 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.280344009 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.280364990 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.280402899 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.280426025 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.280436039 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.280463934 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.280808926 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.280849934 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.280913115 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.280921936 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.282325029 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.282366037 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.282388926 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.282404900 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.282433033 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.282561064 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.282599926 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.282620907 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.282634974 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.282674074 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.282732010 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.282773018 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.282797098 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.282804966 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.282816887 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.282883883 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.282927036 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.282943010 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.282953978 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.283001900 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.283092022 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.283132076 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.283165932 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.283173084 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.283194065 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.283257961 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.283299923 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.283313036 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.283328056 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.283345938 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.283364058 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.283458948 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.283495903 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.283515930 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.283526897 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.283550978 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.283615112 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.283658981 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.283665895 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.283682108 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.283714056 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.283883095 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.283921003 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.283941031 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.283951998 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.283976078 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.284225941 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.284272909 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.284288883 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.284300089 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.284328938 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.284490108 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.284527063 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.284547091 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.284558058 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.284570932 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.284589052 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.284656048 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.284699917 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.284713984 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.284725904 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.284754038 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.284828901 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.284866095 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.284887075 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.284897089 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.284943104 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.284965038 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.285108089 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.285141945 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.285172939 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.301716089 CET	49741	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.301745892 CET	443	49741	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:35.305311918 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.310543060 CET	49742	443	192.168.2.4	104.18.160.117
Mar 19, 2025 10:56:35.310565948 CET	443	49742	104.18.160.117	192.168.2.4
Mar 19, 2025 10:56:36.276949883 CET	49678	443	192.168.2.4	20.189.173.27
Mar 19, 2025 10:56:38.680449009 CET	49678	443	192.168.2.4	20.189.173.27
Mar 19, 2025 10:56:42.983441114 CET	443	49730	142.250.186.36	192.168.2.4
Mar 19, 2025 10:56:42.983499050 CET	443	49730	142.250.186.36	192.168.2.4
Mar 19, 2025 10:56:42.983550072 CET	49730	443	192.168.2.4	142.250.186.36
Mar 19, 2025 10:56:43.492830038 CET	49678	443	192.168.2.4	20.189.173.27
Mar 19, 2025 10:56:44.673563004 CET	49730	443	192.168.2.4	142.250.186.36
Mar 19, 2025 10:56:44.673594952 CET	443	49730	142.250.186.36	192.168.2.4
Mar 19, 2025 10:56:44.673897028 CET	49671	443	192.168.2.4	204.79.197.203
Mar 19, 2025 10:56:48.989470005 CET	443	49731	104.18.36.248	192.168.2.4
Mar 19, 2025 10:56:48.989624977 CET	443	49731	104.18.36.248	192.168.2.4
Mar 19, 2025 10:56:48.989684105 CET	49731	443	192.168.2.4	104.18.36.248
Mar 19, 2025 10:56:50.822829008 CET	49731	443	192.168.2.4	104.18.36.248
Mar 19, 2025 10:56:50.822863102 CET	443	49731	104.18.36.248	192.168.2.4
Mar 19, 2025 10:56:53.108026028 CET	49678	443	192.168.2.4	20.189.173.27
Mar 19, 2025 10:57:10.683578968 CET	80	49713	84.201.210.39	192.168.2.4
Mar 19, 2025 10:57:10.683859110 CET	49713	80	192.168.2.4	84.201.210.39
Mar 19, 2025 10:57:10.684021950 CET	49713	80	192.168.2.4	84.201.210.39
Mar 19, 2025 10:57:10.688710928 CET	80	49713	84.201.210.39	192.168.2.4
Mar 19, 2025 10:57:11.849991083 CET	80	49716	84.201.210.39	192.168.2.4
Mar 19, 2025 10:57:11.850172043 CET	49716	80	192.168.2.4	84.201.210.39
Mar 19, 2025 10:57:11.850333929 CET	49716	80	192.168.2.4	84.201.210.39
Mar 19, 2025 10:57:11.855402946 CET	80	49716	84.201.210.39	192.168.2.4
Mar 19, 2025 10:57:11.886646986 CET	80	49717	84.201.210.39	192.168.2.4
Mar 19, 2025 10:57:11.886759996 CET	49717	80	192.168.2.4	84.201.210.39
Mar 19, 2025 10:57:11.886796951 CET	49717	80	192.168.2.4	84.201.210.39
Mar 19, 2025 10:57:11.891423941 CET	80	49717	84.201.210.39	192.168.2.4
Mar 19, 2025 10:57:11.899727106 CET	49715	80	192.168.2.4	142.250.184.195
Mar 19, 2025 10:57:11.904685974 CET	80	49715	142.250.184.195	192.168.2.4
Mar 19, 2025 10:57:11.904762983 CET	49715	80	192.168.2.4	142.250.184.195
Mar 19, 2025 10:57:12.138837099 CET	49718	443	192.168.2.4	104.126.37.128
Mar 19, 2025 10:57:12.140276909 CET	49719	80	192.168.2.4	2.23.77.188
Mar 19, 2025 10:57:33.009752989 CET	49752	443	192.168.2.4	142.250.186.36
Mar 19, 2025 10:57:33.009807110 CET	443	49752	142.250.186.36	192.168.2.4
Mar 19, 2025 10:57:33.009982109 CET	49752	443	192.168.2.4	142.250.186.36
Mar 19, 2025 10:57:33.010442972 CET	49752	443	192.168.2.4	142.250.186.36
Mar 19, 2025 10:57:33.010463953 CET	443	49752	142.250.186.36	192.168.2.4
Mar 19, 2025 10:57:33.042376995 CET	443	49752	142.250.186.36	192.168.2.4
Mar 19, 2025 10:57:33.042802095 CET	49752	443	192.168.2.4	142.250.186.36
Mar 19, 2025 10:57:33.088325024 CET	443	49752	142.250.186.36	192.168.2.4
Mar 19, 2025 10:57:43.034873962 CET	443	49752	142.250.186.36	192.168.2.4
Mar 19, 2025 10:57:43.034939051 CET	443	49752	142.250.186.36	192.168.2.4
Mar 19, 2025 10:57:43.034998894 CET	49752	443	192.168.2.4	142.250.186.36
Mar 19, 2025 10:57:44.843978882 CET	49752	443	192.168.2.4	142.250.186.36
Mar 19, 2025 10:57:44.844057083 CET	443	49752	142.250.186.36	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 19, 2025 10:56:28.839287043 CET	53	54691	1.1.1.1	192.168.2.4
Mar 19, 2025 10:56:28.997454882 CET	53	65097	1.1.1.1	192.168.2.4
Mar 19, 2025 10:56:32.946791887 CET	50107	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:56:32.947025061 CET	59863	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:56:32.955344915 CET	53	50107	1.1.1.1	192.168.2.4
Mar 19, 2025 10:56:32.955717087 CET	53	59863	1.1.1.1	192.168.2.4
Mar 19, 2025 10:56:33.957561016 CET	54400	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:56:33.957673073 CET	49427	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:56:33.967489958 CET	53	49427	1.1.1.1	192.168.2.4
Mar 19, 2025 10:56:33.968126059 CET	53	54400	1.1.1.1	192.168.2.4
Mar 19, 2025 10:56:34.143948078 CET	54231	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:56:34.144093037 CET	56837	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:56:34.144598961 CET	50552	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:56:34.144944906 CET	52149	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:56:34.150908947 CET	53	54231	1.1.1.1	192.168.2.4
Mar 19, 2025 10:56:34.151279926 CET	53	56837	1.1.1.1	192.168.2.4
Mar 19, 2025 10:56:34.152406931 CET	53	52149	1.1.1.1	192.168.2.4
Mar 19, 2025 10:56:34.152440071 CET	53	50552	1.1.1.1	192.168.2.4
Mar 19, 2025 10:56:35.141206026 CET	58460	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:56:35.141405106 CET	58338	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:56:35.149432898 CET	53	58460	1.1.1.1	192.168.2.4
Mar 19, 2025 10:56:35.149935961 CET	53	58338	1.1.1.1	192.168.2.4
Mar 19, 2025 10:56:44.652834892 CET	61681	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:56:44.652968884 CET	52881	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:56:44.699243069 CET	53	61681	1.1.1.1	192.168.2.4
Mar 19, 2025 10:56:44.704987049 CET	53	52881	1.1.1.1	192.168.2.4
Mar 19, 2025 10:56:44.706193924 CET	58358	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:56:44.722332954 CET	53	58358	1.1.1.1	192.168.2.4
Mar 19, 2025 10:56:44.769313097 CET	64644	53	192.168.2.4	8.8.8.8
Mar 19, 2025 10:56:44.769503117 CET	63565	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:56:44.776160002 CET	53	63565	1.1.1.1	192.168.2.4
Mar 19, 2025 10:56:44.778070927 CET	53	64644	8.8.8.8	192.168.2.4
Mar 19, 2025 10:56:45.780033112 CET	60884	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:56:45.780249119 CET	51272	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:56:45.787527084 CET	53	60884	1.1.1.1	192.168.2.4
Mar 19, 2025 10:56:45.794826984 CET	53	51272	1.1.1.1	192.168.2.4
Mar 19, 2025 10:56:45.926704884 CET	53	58932	1.1.1.1	192.168.2.4
Mar 19, 2025 10:56:50.823187113 CET	65126	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:56:50.823309898 CET	59111	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:56:50.830888987 CET	53	59111	1.1.1.1	192.168.2.4
Mar 19, 2025 10:56:50.831568003 CET	53	65126	1.1.1.1	192.168.2.4
Mar 19, 2025 10:56:50.857397079 CET	61566	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:56:50.873135090 CET	53	61566	1.1.1.1	192.168.2.4
Mar 19, 2025 10:56:59.754328966 CET	64503	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:56:59.754684925 CET	58663	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:56:59.770386934 CET	53	64503	1.1.1.1	192.168.2.4
Mar 19, 2025 10:56:59.773735046 CET	53	58663	1.1.1.1	192.168.2.4
Mar 19, 2025 10:56:59.775013924 CET	59995	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:56:59.790604115 CET	53	59995	1.1.1.1	192.168.2.4
Mar 19, 2025 10:56:59.824976921 CET	51796	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:56:59.825514078 CET	57901	53	192.168.2.4	8.8.8.8
Mar 19, 2025 10:56:59.831650972 CET	53	51796	1.1.1.1	192.168.2.4
Mar 19, 2025 10:56:59.833590031 CET	53	57901	8.8.8.8	192.168.2.4
Mar 19, 2025 10:57:04.908173084 CET	53	63249	1.1.1.1	192.168.2.4
Mar 19, 2025 10:57:08.588438034 CET	53429	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:57:08.588596106 CET	58481	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:57:08.596246958 CET	53	53429	1.1.1.1	192.168.2.4
Mar 19, 2025 10:57:08.603630066 CET	53	58481	1.1.1.1	192.168.2.4
Mar 19, 2025 10:57:08.604404926 CET	63978	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:57:08.620798111 CET	53	63978	1.1.1.1	192.168.2.4
Mar 19, 2025 10:57:08.637830019 CET	50221	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:57:08.638170004 CET	56269	53	192.168.2.4	8.8.8.8
Mar 19, 2025 10:57:08.645055056 CET	53	50221	1.1.1.1	192.168.2.4
Mar 19, 2025 10:57:08.647099018 CET	53	56269	8.8.8.8	192.168.2.4
Mar 19, 2025 10:57:27.264739037 CET	53	54289	1.1.1.1	192.168.2.4
Mar 19, 2025 10:57:27.892857075 CET	53	64619	1.1.1.1	192.168.2.4
Mar 19, 2025 10:57:28.208348989 CET	53	51100	1.1.1.1	192.168.2.4
Mar 19, 2025 10:57:33.874047041 CET	138	138	192.168.2.4	192.168.2.255
Mar 19, 2025 10:57:38.659672976 CET	49825	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:57:38.659823895 CET	62936	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:57:38.674977064 CET	53	62936	1.1.1.1	192.168.2.4
Mar 19, 2025 10:57:38.676099062 CET	53	49825	1.1.1.1	192.168.2.4
Mar 19, 2025 10:57:38.676696062 CET	65438	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:57:38.692125082 CET	53	65438	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Mar 19, 2025 10:56:45.801959991 CET	192.168.2.4	1.1.1.1	c237	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 19, 2025 10:56:32.946791887 CET	192.168.2.4	1.1.1.1	0xd5bf	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:56:32.947025061 CET	192.168.2.4	1.1.1.1	0x3f77	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 19, 2025 10:56:33.957561016 CET	192.168.2.4	1.1.1.1	0xe533	Standard query (0)	sso-robinhood---net-cdn--auth.webflow.io	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:56:33.957673073 CET	192.168.2.4	1.1.1.1	0x420f	Standard query (0)	sso-robinhood---net-cdn--auth.webflow.io	65	IN (0x0001)	false
Mar 19, 2025 10:56:34.143948078 CET	192.168.2.4	1.1.1.1	0x3df3	Standard query (0)	cdn.prod.website-files.com	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:56:34.144093037 CET	192.168.2.4	1.1.1.1	0x1f35	Standard query (0)	cdn.prod.website-files.com	65	IN (0x0001)	false
Mar 19, 2025 10:56:34.144598961 CET	192.168.2.4	1.1.1.1	0x399	Standard query (0)	d3e54v103j8qbb.cloudfront.net	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:56:34.144944906 CET	192.168.2.4	1.1.1.1	0x5940	Standard query (0)	d3e54v103j8qbb.cloudfront.net	65	IN (0x0001)	false
Mar 19, 2025 10:56:35.141206026 CET	192.168.2.4	1.1.1.1	0x6f47	Standard query (0)	cdn.prod.website-files.com	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:56:35.141405106 CET	192.168.2.4	1.1.1.1	0x9dc5	Standard query (0)	cdn.prod.website-files.com	65	IN (0x0001)	false
Mar 19, 2025 10:56:44.652834892 CET	192.168.2.4	1.1.1.1	0x8727	Standard query (0)	robenboodlogi.info	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:56:44.652968884 CET	192.168.2.4	1.1.1.1	0x6668	Standard query (0)	robenboodlogi.info	65	IN (0x0001)	false
Mar 19, 2025 10:56:44.706193924 CET	192.168.2.4	1.1.1.1	0xb8f6	Standard query (0)	robenboodlogi.info	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:56:44.769313097 CET	192.168.2.4	8.8.8.8	0xe59c	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:56:44.769503117 CET	192.168.2.4	1.1.1.1	0x5df6	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:56:45.780033112 CET	192.168.2.4	1.1.1.1	0xf129	Standard query (0)	robenboodlogi.info	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:56:45.780249119 CET	192.168.2.4	1.1.1.1	0xd629	Standard query (0)	robenboodlogi.info	65	IN (0x0001)	false
Mar 19, 2025 10:56:50.823187113 CET	192.168.2.4	1.1.1.1	0xad1	Standard query (0)	robenboodlogi.info	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:56:50.823309898 CET	192.168.2.4	1.1.1.1	0x4b98	Standard query (0)	robenboodlogi.info	65	IN (0x0001)	false
Mar 19, 2025 10:56:50.857397079 CET	192.168.2.4	1.1.1.1	0xaf52	Standard query (0)	robenboodlogi.info	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:56:59.754328966 CET	192.168.2.4	1.1.1.1	0xc747	Standard query (0)	robenboodlogi.info	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:56:59.754684925 CET	192.168.2.4	1.1.1.1	0xb134	Standard query (0)	robenboodlogi.info	65	IN (0x0001)	false
Mar 19, 2025 10:56:59.775013924 CET	192.168.2.4	1.1.1.1	0x7ef1	Standard query (0)	robenboodlogi.info	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:56:59.824976921 CET	192.168.2.4	1.1.1.1	0x4514	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:56:59.825514078 CET	192.168.2.4	8.8.8.8	0x102	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:57:08.588438034 CET	192.168.2.4	1.1.1.1	0x744d	Standard query (0)	robenboodlogi.info	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:57:08.588596106 CET	192.168.2.4	1.1.1.1	0x1880	Standard query (0)	robenboodlogi.info	65	IN (0x0001)	false
Mar 19, 2025 10:57:08.604404926 CET	192.168.2.4	1.1.1.1	0x4b85	Standard query (0)	robenboodlogi.info	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:57:08.637830019 CET	192.168.2.4	1.1.1.1	0xdc7c	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:57:08.638170004 CET	192.168.2.4	8.8.8.8	0xcb6d	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:57:38.659672976 CET	192.168.2.4	1.1.1.1	0x910c	Standard query (0)	robenboodlogi.info	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:57:38.659823895 CET	192.168.2.4	1.1.1.1	0xbd5c	Standard query (0)	robenboodlogi.info	65	IN (0x0001)	false
Mar 19, 2025 10:57:38.676696062 CET	192.168.2.4	1.1.1.1	0x2457	Standard query (0)	robenboodlogi.info	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 19, 2025 10:56:32.955344915 CET	1.1.1.1	192.168.2.4	0xd5bf	No error (0)	www.google.com		142.250.186.36	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:56:32.955717087 CET	1.1.1.1	192.168.2.4	0x3f77	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 19, 2025 10:56:33.967489958 CET	1.1.1.1	192.168.2.4	0x420f	No error (0)	sso-robinhood---net-cdn--auth.webflow.io			65	IN (0x0001)	false
Mar 19, 2025 10:56:33.968126059 CET	1.1.1.1	192.168.2.4	0xe533	No error (0)	sso-robinhood---net-cdn--auth.webflow.io		104.18.36.248	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:56:33.968126059 CET	1.1.1.1	192.168.2.4	0xe533	No error (0)	sso-robinhood---net-cdn--auth.webflow.io		172.64.151.8	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:56:34.150908947 CET	1.1.1.1	192.168.2.4	0x3df3	No error (0)	cdn.prod.website-files.com		104.18.160.117	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:56:34.150908947 CET	1.1.1.1	192.168.2.4	0x3df3	No error (0)	cdn.prod.website-files.com		104.18.161.117	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:56:34.151279926 CET	1.1.1.1	192.168.2.4	0x1f35	No error (0)	cdn.prod.website-files.com			65	IN (0x0001)	false
Mar 19, 2025 10:56:34.152440071 CET	1.1.1.1	192.168.2.4	0x399	No error (0)	d3e54v103j8qbb.cloudfront.net		52.222.232.144	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:56:34.152440071 CET	1.1.1.1	192.168.2.4	0x399	No error (0)	d3e54v103j8qbb.cloudfront.net		52.222.232.39	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:56:34.152440071 CET	1.1.1.1	192.168.2.4	0x399	No error (0)	d3e54v103j8qbb.cloudfront.net		52.222.232.47	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:56:34.152440071 CET	1.1.1.1	192.168.2.4	0x399	No error (0)	d3e54v103j8qbb.cloudfront.net		52.222.232.99	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:56:35.149432898 CET	1.1.1.1	192.168.2.4	0x6f47	No error (0)	cdn.prod.website-files.com		104.18.160.117	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:56:35.149432898 CET	1.1.1.1	192.168.2.4	0x6f47	No error (0)	cdn.prod.website-files.com		104.18.161.117	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:56:35.149935961 CET	1.1.1.1	192.168.2.4	0x9dc5	No error (0)	cdn.prod.website-files.com			65	IN (0x0001)	false
Mar 19, 2025 10:56:44.699243069 CET	1.1.1.1	192.168.2.4	0x8727	Name error (3)	robenboodlogi.info	none	none	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:56:44.704987049 CET	1.1.1.1	192.168.2.4	0x6668	Name error (3)	robenboodlogi.info	none	none	65	IN (0x0001)	false
Mar 19, 2025 10:56:44.722332954 CET	1.1.1.1	192.168.2.4	0xb8f6	Name error (3)	robenboodlogi.info	none	none	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:56:44.776160002 CET	1.1.1.1	192.168.2.4	0x5df6	No error (0)	google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:56:44.778070927 CET	8.8.8.8	192.168.2.4	0xe59c	No error (0)	google.com		142.251.37.110	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:56:45.787527084 CET	1.1.1.1	192.168.2.4	0xf129	Name error (3)	robenboodlogi.info	none	none	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:56:45.794826984 CET	1.1.1.1	192.168.2.4	0xd629	Name error (3)	robenboodlogi.info	none	none	65	IN (0x0001)	false
Mar 19, 2025 10:56:50.830888987 CET	1.1.1.1	192.168.2.4	0x4b98	Name error (3)	robenboodlogi.info	none	none	65	IN (0x0001)	false
Mar 19, 2025 10:56:50.831568003 CET	1.1.1.1	192.168.2.4	0xad1	Name error (3)	robenboodlogi.info	none	none	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:56:50.873135090 CET	1.1.1.1	192.168.2.4	0xaf52	Name error (3)	robenboodlogi.info	none	none	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:56:59.770386934 CET	1.1.1.1	192.168.2.4	0xc747	Name error (3)	robenboodlogi.info	none	none	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:56:59.773735046 CET	1.1.1.1	192.168.2.4	0xb134	Name error (3)	robenboodlogi.info	none	none	65	IN (0x0001)	false
Mar 19, 2025 10:56:59.790604115 CET	1.1.1.1	192.168.2.4	0x7ef1	Name error (3)	robenboodlogi.info	none	none	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:56:59.831650972 CET	1.1.1.1	192.168.2.4	0x4514	No error (0)	google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:56:59.833590031 CET	8.8.8.8	192.168.2.4	0x102	No error (0)	google.com		142.251.37.110	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:57:08.596246958 CET	1.1.1.1	192.168.2.4	0x744d	Name error (3)	robenboodlogi.info	none	none	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:57:08.603630066 CET	1.1.1.1	192.168.2.4	0x1880	Name error (3)	robenboodlogi.info	none	none	65	IN (0x0001)	false
Mar 19, 2025 10:57:08.620798111 CET	1.1.1.1	192.168.2.4	0x4b85	Name error (3)	robenboodlogi.info	none	none	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:57:08.645055056 CET	1.1.1.1	192.168.2.4	0xdc7c	No error (0)	google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:57:08.647099018 CET	8.8.8.8	192.168.2.4	0xcb6d	No error (0)	google.com		142.251.37.110	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:57:38.674977064 CET	1.1.1.1	192.168.2.4	0xbd5c	Name error (3)	robenboodlogi.info	none	none	65	IN (0x0001)	false
Mar 19, 2025 10:57:38.676099062 CET	1.1.1.1	192.168.2.4	0x910c	Name error (3)	robenboodlogi.info	none	none	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:57:38.692125082 CET	1.1.1.1	192.168.2.4	0x2457	Name error (3)	robenboodlogi.info	none	none	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

sso-robinhood---net-cdn--auth.webflow.io

cdn.prod.website-files.com

d3e54v103j8qbb.cloudfront.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49732	104.18.36.248	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 09:56:33 UTC	690	OUT	GET / HTTP/1.1 Host: sso-robinhood---net-cdn--auth.webflow.io Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 09:56:34 UTC	825	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 09:56:34 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close CF-Ray: 922c19c0cc53e7bc-FRA CF-Cache-Status: HIT Age: 248812 Last-Modified: Wed, 12 Mar 2025 12:20:38 GMT content-security-policy: frame-ancestors 'self' https://.webflow.com http://.webflow.com http://*.webflow.io http://webflow.com https://webflow.com surrogate-control: max-age=2147483647 surrogate-key: sso-robinhood---net-cdn--auth.webflow.io 678a121f08be05e6ab130df5 pageId:678a121f08be05e6ab130dfc x-lambda-id: 4503e242-e5ca-4921-8bf0-97e87bda374e vary: Accept-Encoding Set-Cookie: _cfuvid=_L9fultkNCWHQDrP3QcqkGOOIsv6BVsO2LCljToFB8w-1742378194075-0.0.1.1-604800000; path=/; domain=.webflow.io; HttpOnly; Secure; SameSite=None Server: cloudflare alt-svc: h3=":443"; ma=86400
2025-03-19 09:56:34 UTC	544	IN	Data Raw: 63 39 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 21 2d 2d 20 54 68 69 73 20 73 69 74 65 20 77 61 73 20 63 72 65 61 74 65 64 20 69 6e 20 57 65 62 66 6c 6f 77 2e 20 68 74 74 70 73 3a 2f 2f 77 65 62 66 6c 6f 77 2e 63 6f 6d 20 2d 2d 3e 3c 21 2d 2d 20 4c 61 73 74 20 50 75 62 6c 69 73 68 65 64 3a 20 46 72 69 20 4a 61 6e 20 31 37 20 32 30 32 35 20 30 38 3a 31 39 3a 32 36 20 47 4d 54 2b 30 30 30 30 20 28 43 6f 6f 72 64 69 6e 61 74 65 64 20 55 6e 69 76 65 72 73 61 6c 20 54 69 6d 65 29 20 2d 2d 3e 3c 68 74 6d 6c 20 64 61 74 61 2d 77 66 2d 64 6f 6d 61 69 6e 3d 22 73 73 6f 2d 72 6f 62 69 6e 68 6f 6f 64 2d 2d 2d 6e 65 74 2d 63 64 6e 2d 2d 61 75 74 68 2e 77 65 62 66 6c 6f 77 2e 69 6f 22 20 64 61 74 61 2d 77 66 2d 70 61 67 65 3d 22 36 37 38 61 31 32 31 66 Data Ascii: c94<!DOCTYPE html>... This site was created in Webflow. https://webflow.com -->... Last Published: Fri Jan 17 2025 08:19:26 GMT+0000 (Coordinated Universal Time) --><html data-wf-domain="sso-robinhood---net-cdn--auth.webflow.io" data-wf-page="678a121f
2025-03-19 09:56:34 UTC	1369	IN	Data Raw: 6e 64 20 63 72 79 70 74 6f 63 75 72 72 65 6e 63 69 65 73 2e 20 57 69 74 68 20 61 20 75 73 65 72 2d 66 72 69 65 6e 64 6c 79 20 69 6e 74 65 72 66 61 63 65 2c 20 69 74 20 68 61 73 20 67 61 69 6e 65 64 20 70 6f 70 75 6c 61 72 69 74 79 20 61 6d 6f 6e 67 20 62 65 67 69 6e 6e 65 72 73 20 61 6e 64 20 73 65 61 73 6f 6e 65 64 20 74 72 61 64 65 72 73 20 61 6c 69 6b 65 2e 20 57 68 65 74 68 65 72 20 79 6f 75 26 23 78 32 37 3b 72 65 20 6c 6f 6f 6b 69 6e 67 20 74 6f 20 73 74 61 72 74 20 79 6f 75 72 20 66 69 72 73 74 20 69 6e 76 65 73 74 6d 65 6e 74 20 70 6f 72 74 66 6f 6c 69 6f 20 6f 72 20 72 65 66 69 6e 65 20 61 6e 20 65 78 69 73 74 69 6e 67 20 73 74 72 61 74 65 67 79 2c 20 52 6f 62 69 6e 68 6f 6f 64 20 70 72 6f 76 69 64 65 73 20 61 20 73 65 61 6d 6c 65 73 73 20 70 6c Data Ascii: nd cryptocurrencies. With a user-friendly interface, it has gained popularity among beginners and seasoned traders alike. Whether you're looking to start your first investment portfolio or refine an existing strategy, Robinhood provides a seamless pl
2025-03-19 09:56:34 UTC	1314	IN	Data Raw: 77 69 64 74 68 3a 20 31 33 34 38 70 78 29 20 31 30 30 76 77 2c 20 31 33 34 38 70 78 22 20 73 72 63 73 65 74 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 70 72 6f 64 2e 77 65 62 73 69 74 65 2d 66 69 6c 65 73 2e 63 6f 6d 2f 36 37 38 61 31 32 31 66 30 38 62 65 30 35 65 36 61 62 31 33 30 64 66 35 2f 36 37 38 61 31 32 34 31 64 34 36 33 32 35 34 61 35 64 36 31 30 65 62 37 5f 53 63 72 65 65 6e 73 68 6f 74 25 32 30 32 30 32 35 2d 30 31 2d 30 38 25 32 30 61 74 25 32 30 31 33 2d 33 39 2d 31 34 25 32 30 43 6f 6d 6d 69 73 73 69 6f 6e 2d 66 72 65 65 25 32 30 53 74 6f 63 6b 25 32 30 54 72 61 64 69 6e 67 25 32 30 25 32 36 25 32 30 49 6e 76 65 73 74 69 6e 67 25 32 30 41 70 70 25 32 30 52 6f 62 69 6e 68 6f 6f 64 2d 70 2d 35 30 30 2e 70 6e 67 20 35 30 30 77 2c 20 68 74 74 70 Data Ascii: width: 1348px) 100vw, 1348px" srcset="https://cdn.prod.website-files.com/678a121f08be05e6ab130df5/678a1241d463254a5d610eb7_Screenshot%202025-01-08%20at%2013-39-14%20Commission-free%20Stock%20Trading%20%26%20Investing%20App%20Robinhood-p-500.png 500w, http
2025-03-19 09:56:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49734	104.18.160.117	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 09:56:34 UTC	685	OUT	GET /678a121f08be05e6ab130df5/css/sso-robinhood---net-cdn--auth.webflow.ce67eee42.css HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Referer: https://sso-robinhood---net-cdn--auth.webflow.io/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 09:56:34 UTC	632	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 09:56:34 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close x-amz-id-2: gO79eu7OIpD6qmmBZoFp29iWnJwHf5sr9wZU0CezsZg/65Gp8RXomsOKZfnQMYNe2THSNwt9TNs= x-amz-request-id: S25RFKNGTYBSC7HN Last-Modified: Fri, 17 Jan 2025 08:19:27 GMT ETag: W/"b6a57deb813fab88fe5f35ba5bb2c342" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000, immutable x-amz-version-id: alX5hD4AOtZMYXg3S7NYmZK6EACC3uJq CF-Cache-Status: HIT Age: 114798 Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 922c19c20dc61f99-FRA alt-svc: h3=":443"; ma=86400
2025-03-19 09:56:34 UTC	737	IN	Data Raw: 37 64 33 38 0d 0a 68 74 6d 6c 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 3b 0a 20 20 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 62 6f 64 79 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 7d 0a 0a 61 72 74 69 63 6c 65 2c 20 61 73 69 64 65 2c 20 64 65 74 61 69 6c 73 2c 20 66 69 67 63 61 70 74 69 6f 6e 2c 20 66 69 67 75 72 65 2c 20 66 6f 6f 74 65 72 2c 20 68 65 61 64 65 72 2c 20 68 67 72 6f 75 70 2c 20 6d 61 69 6e 2c 20 6d 65 6e 75 2c 20 6e 61 76 2c 20 73 65 63 74 69 6f 6e 2c 20 73 75 6d 6d 61 72 79 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 7d 0a Data Ascii: 7d38html { -webkit-text-size-adjust: 100%; -ms-text-size-adjust: 100%; font-family: sans-serif;}body { margin: 0;}article, aside, details, figcaption, figure, footer, header, hgroup, main, menu, nav, section, summary { display: block;}
2025-03-19 09:56:34 UTC	1369	IN	Data Raw: 20 38 30 25 3b 0a 7d 0a 0a 73 75 62 2c 20 73 75 70 20 7b 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 62 61 73 65 6c 69 6e 65 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 37 35 25 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 30 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 7d 0a 0a 73 75 70 20 7b 0a 20 20 74 6f 70 3a 20 2d 2e 35 65 6d 3b 0a 7d 0a 0a 73 75 62 20 7b 0a 20 20 62 6f 74 74 6f 6d 3a 20 2d 2e 32 35 65 6d 3b 0a 7d 0a 0a 69 6d 67 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 30 3b 0a 7d 0a 0a 73 76 67 3a 6e 6f 74 28 3a 72 6f 6f 74 29 20 7b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 0a 68 72 20 7b 0a 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 0a 20 20 Data Ascii: 80%;}sub, sup { vertical-align: baseline; font-size: 75%; line-height: 0; position: relative;}sup { top: -.5em;}sub { bottom: -.25em;}img { border: 0;}svg:not(:root) { overflow: hidden;}hr { box-sizing: content-box;
2025-03-19 09:56:34 UTC	1369	IN	Data Raw: 65 72 2d 73 70 61 63 69 6e 67 3a 20 30 3b 0a 7d 0a 0a 74 64 2c 20 74 68 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 7d 0a 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 77 65 62 66 6c 6f 77 2d 69 63 6f 6e 73 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 22 64 61 74 61 3a 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 66 6f 6e 74 2d 74 74 66 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3b 62 61 73 65 36 34 2c 41 41 45 41 41 41 41 4c 41 49 41 41 41 77 41 77 54 31 4d 76 4d 67 38 53 42 69 55 41 41 41 43 38 41 41 41 41 59 47 4e 74 59 58 44 70 50 2b 61 34 41 41 41 42 48 41 41 41 41 46 78 6e 59 58 4e 77 41 41 41 41 45 41 41 41 41 58 67 41 41 41 41 49 5a 32 78 35 5a 6d 68 53 32 58 45 41 41 41 47 41 41 41 41 44 48 47 68 6c 59 57 51 Data Ascii: er-spacing: 0;}td, th { padding: 0;}@font-face { font-family: webflow-icons; src: url("data:application/x-font-ttf;charset=utf-8;base64,AAEAAAALAIAAAwAwT1MvMg8SBiUAAAC8AAAAYGNtYXDpP+a4AAABHAAAAFxnYXNwAAAAEAAAAXgAAAAIZ2x5ZmhS2XEAAAGAAAADHGhlYWQ
2025-03-19 09:56:34 UTC	1369	IN	Data Raw: 69 45 67 62 30 74 4b 56 56 56 4b 53 32 38 67 49 53 45 67 62 30 74 4b 56 56 56 4b 53 32 38 67 49 51 41 42 41 41 41 42 77 41 49 41 41 38 41 41 45 67 41 41 45 7a 51 33 50 67 45 33 4e 6a 4d 78 46 53 49 48 44 67 45 48 42 68 55 78 49 77 41 6f 4b 49 74 65 58 57 70 56 53 6b 74 76 49 43 46 6d 41 63 42 71 58 56 36 4c 4b 43 68 6d 49 53 42 76 53 30 70 56 41 41 41 41 41 67 41 41 2f 38 41 46 74 67 50 41 41 44 49 41 4f 67 41 41 41 52 59 58 48 67 45 58 46 68 55 55 42 77 34 42 42 77 59 48 49 78 55 68 49 69 63 75 41 53 63 6d 4e 54 51 33 50 67 45 33 4e 6a 4d 78 4f 41 45 78 4e 44 63 2b 41 54 63 32 4d 7a 49 58 48 67 45 58 46 68 63 56 41 54 4d 4a 41 54 4d 56 4d 7a 55 45 6a 44 38 33 4e 6c 41 58 46 78 59 58 54 6a 55 31 50 51 4c 38 6b 7a 30 31 4e 6b 38 58 46 78 63 58 54 7a 59 31 Data Ascii: iEgb0tKVVVKS28gISEgb0tKVVVKS28gIQABAAABwAIAA8AAEgAAEzQ3PgE3NjMxFSIHDgEHBhUxIwAoKIteXWpVSktvICFmAcBqXV6LKChmISBvS0pVAAAAAgAA/8AFtgPAADIAOgAAARYXHgEXFhUUBw4BBwYHIxUhIicuAScmNTQ3PgE3NjMxOAExNDc+ATc2MzIXHgEXFhcVATMJATMVMzUEjD83NlAXFxYXTjU1PQL8kz01Nk8XFxcXTzY1
2025-03-19 09:56:34 UTC	1369	IN	Data Raw: 2d 22 5d 2c 20 5b 63 6c 61 73 73 2a 3d 22 20 77 2d 69 63 6f 6e 2d 22 5d 20 7b 0a 20 20 73 70 65 61 6b 3a 20 6e 6f 6e 65 3b 0a 20 20 66 6f 6e 74 2d 76 61 72 69 61 6e 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 6e 6f 6e 65 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 20 61 6e 74 69 61 6c 69 61 73 65 64 3b 0a 20 20 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 20 67 72 61 79 73 63 61 6c 65 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 77 65 62 66 6c 6f 77 2d 69 63 Data Ascii: -"], [class*=" w-icon-"] { speak: none; font-variant: normal; text-transform: none; -webkit-font-smoothing: antialiased; -moz-osx-font-smoothing: grayscale; font-style: normal; font-weight: normal; line-height: 1; font-family: webflow-ic
2025-03-19 09:56:34 UTC	1369	IN	Data Raw: 65 72 2d 72 61 64 69 75 73 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 39 70 78 20 31 35 70 78 3b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 7d 0a 0a 69 6e 70 75 74 2e 77 2d 62 75 74 74 6f 6e 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 20 62 75 74 74 6f 6e 3b 0a 7d 0a 0a 68 74 6d 6c 5b 64 61 74 61 2d 77 2d 64 79 6e 70 61 67 65 5d 20 5b 64 61 74 61 2d 77 2d 63 6c 6f 61 6b 5d 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 2e 77 2d 63 6f 64 65 2d 62 6c 6f 63 6b 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 75 6e 73 65 74 3b 0a 7d 0a 0a 70 72 65 2e 77 2d 63 6f 64 65 2d 62 6c Data Ascii: er-radius: 0; padding: 9px 15px; text-decoration: none; display: inline-block;}input.w-button { -webkit-appearance: button;}html[data-w-dynpage] [data-w-cloak] { color: #0000 !important;}.w-code-block { margin: unset;}pre.w-code-bl
2025-03-19 09:56:34 UTC	1369	IN	Data Raw: 6e 73 65 74 3b 0a 20 20 77 6f 72 64 2d 77 72 61 70 3a 20 75 6e 73 65 74 3b 0a 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 75 6e 73 65 74 3b 0a 7d 0a 0a 2e 77 2d 77 65 62 66 6c 6f 77 2d 62 61 64 67 65 20 7b 0a 20 20 77 68 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 77 72 61 70 3b 0a 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 30 20 31 70 78 20 23 30 30 30 30 30 30 31 61 2c 20 30 20 31 70 78 20 33 70 78 20 23 30 30 30 30 30 30 31 61 3b 0a 20 20 76 69 73 69 62 69 6c 69 74 79 3a 20 76 69 73 69 62 6c 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 6f 70 61 63 69 74 79 3a 20 31 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 32 31 34 37 34 38 33 36 34 37 20 21 69 6d 70 6f 72 74 Data Ascii: nset; word-wrap: unset; transition: unset;}.w-webflow-badge { white-space: nowrap; cursor: pointer; box-shadow: 0 0 0 1px #0000001a, 0 1px 3px #0000001a; visibility: visible !important; opacity: 1 !important; z-index: 2147483647 !import
2025-03-19 09:56:34 UTC	1369	IN	Data Raw: 65 2d 68 65 69 67 68 74 3a 20 31 38 70 78 3b 0a 7d 0a 0a 70 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 3b 0a 7d 0a 0a 62 6c 6f 63 6b 71 75 6f 74 65 20 7b 0a 20 20 62 6f 72 64 65 72 2d 6c 65 66 74 3a 20 35 70 78 20 73 6f 6c 69 64 20 23 65 32 65 32 65 32 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 20 32 30 70 78 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 32 70 78 3b 0a 7d 0a 0a 66 69 67 75 72 65 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 30 70 78 3b 0a 7d 0a 0a 66 69 67 63 61 70 74 69 6f 6e 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e Data Ascii: e-height: 18px;}p { margin-top: 0; margin-bottom: 10px;}blockquote { border-left: 5px solid #e2e2e2; margin: 0 0 10px; padding: 10px 20px; font-size: 18px; line-height: 22px;}figure { margin: 0 0 10px;}figcaption { text-align
2025-03-19 09:56:34 UTC	1369	IN	Data Raw: 74 3a 20 33 38 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 38 70 78 20 31 32 70 78 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 32 38 35 37 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2e 77 2d 69 6e 70 75 74 3a 3a 70 6c 61 63 65 68 6f 6c 64 65 72 2c 20 2e 77 2d 73 65 6c 65 63 74 3a 3a 70 6c 61 63 65 68 6f 6c 64 65 72 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 39 39 39 3b 0a 7d 0a 0a 2e 77 2d 69 6e 70 75 74 3a 66 6f 63 75 73 2c 20 2e 77 2d 73 65 6c 65 63 74 3a 66 6f 63 75 73 20 7b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 33 38 39 38 65 63 3b 0a 20 20 6f 75 74 6c 69 6e 65 3a 20 30 3b Data Ascii: t: 38px; margin-bottom: 10px; padding: 8px 12px; font-size: 14px; line-height: 1.42857; display: block;}.w-input::placeholder, .w-select::placeholder { color: #999;}.w-input:focus, .w-select:focus { border-color: #3898ec; outline: 0;
2025-03-19 09:56:34 UTC	1369	IN	Data Raw: 3a 20 2e 31 70 78 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 0a 2e 77 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 2d 64 65 66 61 75 6c 74 2c 20 2e 77 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 2d 75 70 6c 6f 61 64 69 6e 67 2c 20 2e 77 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 2d 73 75 63 63 65 73 73 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 33 33 33 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2e 77 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 2d 65 72 72 6f 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 30 70 78 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2e 77 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 2d 64 65 66 61 75 Data Ascii: : .1px; position: absolute; overflow: hidden;}.w-file-upload-default, .w-file-upload-uploading, .w-file-upload-success { color: #333; display: inline-block;}.w-file-upload-error { margin-top: 10px; display: block;}.w-file-upload-defau

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49733	104.18.160.117	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 09:56:34 UTC	662	OUT	GET /678a121f08be05e6ab130df5/js/webflow.77ac24386eb2a8dacabbd68092c045ec.js HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://sso-robinhood---net-cdn--auth.webflow.io/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 09:56:34 UTC	654	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 09:56:34 GMT Content-Type: text/javascript Content-Length: 37349 Connection: close x-amz-id-2: gooMz8IWLIquvBwmqZ8X6rXgRDGDN5CEINxweQeKH153lWsFqVAN4BVtTdTNqt1pAeBMXs+dpMQ= x-amz-request-id: DHFAMJGJYYEMVGAD Last-Modified: Fri, 17 Jan 2025 08:19:27 GMT ETag: "fc7ef472a2bca6fbdb8ab8235dec64e0" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000, immutable x-amz-version-id: NGGIe8b.zX2ALv7_EQEMkpud2o2USsCZ CF-Cache-Status: HIT Age: 133696 Accept-Ranges: bytes Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 922c19c20dc74d26-FRA alt-svc: h3=":443"; ma=86400
2025-03-19 09:56:34 UTC	715	IN	Data Raw: 0a 2f 2a 21 0a 20 2a 20 57 65 62 66 6c 6f 77 3a 20 46 72 6f 6e 74 2d 65 6e 64 20 73 69 74 65 20 6c 69 62 72 61 72 79 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 4d 49 54 0a 20 2a 20 49 6e 6c 69 6e 65 20 73 63 72 69 70 74 73 20 6d 61 79 20 61 63 63 65 73 73 20 74 68 65 20 61 70 69 20 75 73 69 6e 67 20 61 6e 20 61 73 79 6e 63 20 68 61 6e 64 6c 65 72 3a 0a 20 2a 20 20 20 76 61 72 20 57 65 62 66 6c 6f 77 20 3d 20 57 65 62 66 6c 6f 77 20 7c 7c 20 5b 5d 3b 0a 20 2a 20 20 20 57 65 62 66 6c 6f 77 2e 70 75 73 68 28 72 65 61 64 79 46 75 6e 63 74 69 6f 6e 29 3b 0a 20 2a 2f 0a 0a 28 28 29 3d 3e 7b 76 61 72 20 6c 74 3d 28 65 2c 79 29 3d 3e 28 29 3d 3e 28 79 7c 7c 65 28 28 79 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 29 2e 65 78 70 6f 72 74 73 2c 79 29 2c 79 2e 65 78 70 6f 72 Data Ascii: /! Webflow: Front-end site library * @license MIT * Inline scripts may access the api using an async handler: * var Webflow = Webflow \|\| []; * Webflow.push(readyFunction); */(()=>{var lt=(e,y)=>()=>(y\|\|e((y={exports:{}}).exports,y),y.expor
2025-03-19 09:56:34 UTC	1369	IN	Data Raw: 6e 69 74 73 20 64 6f 20 6e 6f 74 20 6d 61 74 63 68 20 5b 22 2b 74 2b 22 5d 3a 20 22 2b 6e 2b 22 2c 20 22 2b 69 29 7d 66 75 6e 63 74 69 6f 6e 20 49 28 74 2c 6e 2c 69 29 7b 69 66 28 6e 21 3d 3d 76 6f 69 64 20 30 26 26 28 69 3d 6e 29 2c 74 3d 3d 3d 76 6f 69 64 20 30 29 72 65 74 75 72 6e 20 69 3b 76 61 72 20 72 3d 69 3b 72 65 74 75 72 6e 20 77 65 2e 74 65 73 74 28 74 29 7c 7c 21 58 74 2e 74 65 73 74 28 74 29 3f 72 3d 70 61 72 73 65 49 6e 74 28 74 2c 31 30 29 3a 58 74 2e 74 65 73 74 28 74 29 26 26 28 72 3d 31 65 33 2a 70 61 72 73 65 46 6c 6f 61 74 28 74 29 29 2c 30 3e 72 26 26 28 72 3d 30 29 2c 72 3d 3d 3d 72 3f 72 3a 69 7d 66 75 6e 63 74 69 6f 6e 20 42 28 74 29 7b 65 74 2e 64 65 62 75 67 26 26 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 Data Ascii: nits do not match ["+t+"]: "+n+", "+i)}function I(t,n,i){if(n!==void 0&&(i=n),t===void 0)return i;var r=i;return we.test(t)\|\|!Xt.test(t)?r=parseInt(t,10):Xt.test(t)&&(r=1e3*parseFloat(t)),0>r&&(r=0),r===r?r:i}function B(t){et.debug&&window&&window.console
2025-03-19 09:56:34 UTC	1369	IN	Data Raw: 75 72 6e 20 69 2a 74 2f 72 2b 6e 7d 5d 2c 22 65 61 73 65 2d 69 6e 2d 71 75 61 64 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 35 35 30 2c 20 30 2e 30 38 35 2c 20 30 2e 36 38 30 2c 20 30 2e 35 33 30 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 29 7b 72 65 74 75 72 6e 20 69 2a 28 74 2f 3d 72 29 2a 74 2b 6e 7d 5d 2c 22 65 61 73 65 2d 6f 75 74 2d 71 75 61 64 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 32 35 30 2c 20 30 2e 34 36 30 2c 20 30 2e 34 35 30 2c 20 30 2e 39 34 30 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 29 7b 72 65 74 75 72 6e 2d 69 2a 28 74 2f 3d 72 29 2a 28 74 2d 32 29 2b 6e 7d 5d 2c 22 65 61 73 65 2d 69 6e 2d 6f 75 74 2d 71 75 61 64 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 35 Data Ascii: urn it/r+n}],"ease-in-quad":["cubic-bezier(0.550, 0.085, 0.680, 0.530)",function(t,n,i,r){return i(t/=r)t+n}],"ease-out-quad":["cubic-bezier(0.250, 0.460, 0.450, 0.940)",function(t,n,i,r){return-i(t/=r)*(t-2)+n}],"ease-in-out-quad":["cubic-bezier(0.45
2025-03-19 09:56:34 UTC	1369	IN	Data Raw: 29 2b 6e 7d 5d 2c 22 65 61 73 65 2d 69 6e 2d 73 69 6e 65 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 37 30 2c 20 30 2c 20 30 2e 37 34 35 2c 20 30 2e 37 31 35 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 29 7b 72 65 74 75 72 6e 2d 69 2a 4d 61 74 68 2e 63 6f 73 28 74 2f 72 2a 28 4d 61 74 68 2e 50 49 2f 32 29 29 2b 69 2b 6e 7d 5d 2c 22 65 61 73 65 2d 6f 75 74 2d 73 69 6e 65 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 33 39 30 2c 20 30 2e 35 37 35 2c 20 30 2e 35 36 35 2c 20 31 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 29 7b 72 65 74 75 72 6e 20 69 2a 4d 61 74 68 2e 73 69 6e 28 74 2f 72 2a 28 4d 61 74 68 2e 50 49 2f 32 29 29 2b 6e 7d 5d 2c 22 65 61 73 65 2d 69 6e 2d 6f 75 74 2d 73 69 6e 65 22 3a 5b 22 63 Data Ascii: )+n}],"ease-in-sine":["cubic-bezier(0.470, 0, 0.745, 0.715)",function(t,n,i,r){return-iMath.cos(t/r(Math.PI/2))+i+n}],"ease-out-sine":["cubic-bezier(0.390, 0.575, 0.565, 1)",function(t,n,i,r){return iMath.sin(t/r(Math.PI/2))+n}],"ease-in-out-sine":["c
2025-03-19 09:56:34 UTC	1369	IN	Data Raw: 3d 3d 3d 76 6f 69 64 20 30 26 26 28 73 3d 31 2e 37 30 31 35 38 29 2c 69 2a 28 28 74 3d 74 2f 72 2d 31 29 2a 74 2a 28 28 73 2b 31 29 2a 74 2b 73 29 2b 31 29 2b 6e 7d 5d 2c 22 65 61 73 65 2d 69 6e 2d 6f 75 74 2d 62 61 63 6b 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 36 38 30 2c 20 2d 30 2e 35 35 30 2c 20 30 2e 32 36 35 2c 20 31 2e 35 35 30 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 2c 73 29 7b 72 65 74 75 72 6e 20 73 3d 3d 3d 76 6f 69 64 20 30 26 26 28 73 3d 31 2e 37 30 31 35 38 29 2c 28 74 2f 3d 72 2f 32 29 3c 31 3f 69 2f 32 2a 74 2a 74 2a 28 28 28 73 2a 3d 31 2e 35 32 35 29 2b 31 29 2a 74 2d 73 29 2b 6e 3a 69 2f 32 2a 28 28 74 2d 3d 32 29 2a 74 2a 28 28 28 73 2a 3d 31 2e 35 32 35 29 2b 31 29 2a 74 2b 73 29 2b 32 29 2b 6e 7d 5d Data Ascii: ===void 0&&(s=1.70158),i((t=t/r-1)t((s+1)t+s)+1)+n}],"ease-in-out-back":["cubic-bezier(0.680, -0.550, 0.265, 1.550)",function(t,n,i,r,s){return s===void 0&&(s=1.70158),(t/=r/2)<1?i/2tt(((s=1.525)+1)t-s)+n:i/2((t-=2)t(((s=1.525)+1)t+s)+2)+n}]
2025-03-19 09:56:34 UTC	1369	IN	Data Raw: 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 7c 7c 48 2e 6d 73 52 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 3b 72 65 74 75 72 6e 20 74 26 26 68 2e 62 69 6e 64 3f 74 2e 62 69 6e 64 28 48 29 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 48 2e 73 65 74 54 69 6d 65 6f 75 74 28 6e 2c 31 36 29 7d 7d 28 29 2c 63 74 3d 79 2e 6e 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 48 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2c 6e 3d 74 26 26 28 74 2e 6e 6f 77 7c 7c 74 2e 77 65 62 6b 69 74 4e 6f 77 7c 7c 74 2e 6d 73 4e 6f 77 7c 7c 74 2e 6d 6f 7a 4e 6f 77 29 3b 72 65 74 75 72 6e 20 6e 26 26 68 2e 62 69 6e 64 3f 6e 2e 62 69 6e 64 28 74 29 3a 44 61 74 65 2e 6e 6f 77 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 2b 6e 65 77 20 44 61 74 65 7d 7d 28 29 Data Ascii: nimationFrame\|\|H.msRequestAnimationFrame;return t&&h.bind?t.bind(H):function(n){H.setTimeout(n,16)}}(),ct=y.now=function(){var t=H.performance,n=t&&(t.now\|\|t.webkitNow\|\|t.msNow\|\|t.mozNow);return n&&h.bind?n.bind(t):Date.now\|\|function(){return+new Date}}()
2025-03-19 09:56:34 UTC	1369	IN	Data Raw: 65 2e 70 75 73 68 28 7b 6f 70 74 69 6f 6e 73 3a 77 7d 29 3a 28 74 68 69 73 2e 74 69 6d 65 72 3d 6e 65 77 20 71 74 28 7b 64 75 72 61 74 69 6f 6e 3a 77 2c 63 6f 6e 74 65 78 74 3a 74 68 69 73 2c 63 6f 6d 70 6c 65 74 65 3a 6f 7d 29 2c 74 68 69 73 2e 61 63 74 69 76 65 3d 21 30 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 77 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 61 63 74 69 76 65 3f 28 74 68 69 73 2e 71 75 65 75 65 2e 70 75 73 68 28 7b 6f 70 74 69 6f 6e 73 3a 77 2c 61 72 67 73 3a 61 72 67 75 6d 65 6e 74 73 7d 29 2c 76 6f 69 64 28 74 68 69 73 2e 74 69 6d 65 72 2e 63 6f 6d 70 6c 65 74 65 3d 6f 29 29 3a 42 28 22 4e 6f 20 61 63 74 69 76 65 20 74 72 61 6e 73 69 74 69 6f 6e 20 74 69 6d 65 72 2e 20 55 73 65 20 73 74 61 72 74 28 29 20 6f 72 20 77 61 69 74 28 29 20 62 65 Data Ascii: e.push({options:w}):(this.timer=new qt({duration:w,context:this,complete:o}),this.active=!0)}function s(w){return this.active?(this.queue.push({options:w,args:arguments}),void(this.timer.complete=o)):B("No active transition timer. Use start() or wait() be
2025-03-19 09:56:34 UTC	1369	IN	Data Raw: 74 29 7d 59 26 26 6e 74 26 26 59 2e 63 61 6c 6c 28 74 68 69 73 2c 6e 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 77 29 7b 77 2e 73 74 6f 70 28 29 7d 66 75 6e 63 74 69 6f 6e 20 41 74 28 77 2c 4f 29 7b 77 2e 73 65 74 28 4f 29 7d 66 75 6e 63 74 69 6f 6e 20 67 65 28 77 29 7b 74 68 69 73 2e 24 65 6c 2e 63 73 73 28 77 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 74 28 77 2c 4f 29 7b 74 5b 77 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 68 69 6c 64 72 65 6e 3f 79 65 2e 63 61 6c 6c 28 74 68 69 73 2c 4f 2c 61 72 67 75 6d 65 6e 74 73 29 3a 28 74 68 69 73 2e 65 6c 26 26 4f 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 2c 74 68 69 73 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 77 2c 4f 29 7b 76 61 72 20 59 2c 4e 3d 74 68 69 Data Ascii: t)}Y&&nt&&Y.call(this,nt)}function j(w){w.stop()}function At(w,O){w.set(O)}function ge(w){this.$el.css(w)}function ot(w,O){t[w]=function(){return this.children?ye.call(this,O,arguments):(this.el&&O.apply(this,arguments),this)}}function ye(w,O){var Y,N=thi
2025-03-19 09:56:34 UTC	1369	IN	Data Raw: 3a 30 7d 3b 74 2e 69 6e 69 74 3d 66 75 6e 63 74 69 6f 6e 28 6f 2c 70 2c 78 2c 4b 29 7b 74 68 69 73 2e 24 65 6c 3d 6f 2c 74 68 69 73 2e 65 6c 3d 6f 5b 30 5d 3b 76 61 72 20 63 3d 70 5b 30 5d 3b 78 5b 32 5d 26 26 28 63 3d 78 5b 32 5d 29 2c 48 74 5b 63 5d 26 26 28 63 3d 48 74 5b 63 5d 29 2c 74 68 69 73 2e 6e 61 6d 65 3d 63 2c 74 68 69 73 2e 74 79 70 65 3d 78 5b 31 5d 2c 74 68 69 73 2e 64 75 72 61 74 69 6f 6e 3d 49 28 70 5b 31 5d 2c 74 68 69 73 2e 64 75 72 61 74 69 6f 6e 2c 73 2e 64 75 72 61 74 69 6f 6e 29 2c 74 68 69 73 2e 65 61 73 65 3d 69 28 70 5b 32 5d 2c 74 68 69 73 2e 65 61 73 65 2c 73 2e 65 61 73 65 29 2c 74 68 69 73 2e 64 65 6c 61 79 3d 49 28 70 5b 33 5d 2c 74 68 69 73 2e 64 65 6c 61 79 2c 73 2e 64 65 6c 61 79 29 2c 74 68 69 73 2e 73 70 61 6e 3d 74 68 Data Ascii: :0};t.init=function(o,p,x,K){this.$el=o,this.el=o[0];var c=p[0];x[2]&&(c=x[2]),Ht[c]&&(c=Ht[c]),this.name=c,this.type=x[1],this.duration=I(p[1],this.duration,s.duration),this.ease=i(p[2],this.ease,s.ease),this.delay=I(p[3],this.delay,s.delay),this.span=th
2025-03-19 09:56:34 UTC	1369	IN	Data Raw: 7c 74 68 69 73 2e 6e 65 78 74 53 74 79 6c 65 29 26 26 28 74 68 69 73 2e 61 63 74 69 76 65 3d 21 31 2c 74 68 69 73 2e 6e 65 78 74 53 74 79 6c 65 3d 6e 75 6c 6c 2c 62 74 28 74 68 69 73 2e 65 6c 2c 74 68 69 73 2e 6e 61 6d 65 2c 74 68 69 73 2e 67 65 74 28 29 29 29 3b 76 61 72 20 6f 3d 74 68 69 73 2e 74 77 65 65 6e 3b 6f 26 26 6f 2e 63 6f 6e 74 65 78 74 26 26 6f 2e 64 65 73 74 72 6f 79 28 29 7d 2c 74 2e 63 6f 6e 76 65 72 74 3d 66 75 6e 63 74 69 6f 6e 28 6f 2c 70 29 7b 69 66 28 6f 3d 3d 22 61 75 74 6f 22 26 26 74 68 69 73 2e 61 75 74 6f 29 72 65 74 75 72 6e 20 6f 3b 76 61 72 20 78 2c 4b 3d 74 79 70 65 6f 66 20 6f 3d 3d 22 6e 75 6d 62 65 72 22 2c 63 3d 74 79 70 65 6f 66 20 6f 3d 3d 22 73 74 72 69 6e 67 22 3b 73 77 69 74 63 68 28 70 29 7b 63 61 73 65 20 66 3a 69 Data Ascii: \|this.nextStyle)&&(this.active=!1,this.nextStyle=null,bt(this.el,this.name,this.get()));var o=this.tween;o&&o.context&&o.destroy()},t.convert=function(o,p){if(o=="auto"&&this.auto)return o;var x,K=typeof o=="number",c=typeof o=="string";switch(p){case f:i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49735	52.222.232.144	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 09:56:34 UTC	678	OUT	GET /js/jquery-3.5.1.min.dc5e7f18c8.js?site=678a121f08be05e6ab130df5 HTTP/1.1 Host: d3e54v103j8qbb.cloudfront.net Connection: keep-alive Origin: https://sso-robinhood---net-cdn--auth.webflow.io sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://sso-robinhood---net-cdn--auth.webflow.io/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 09:56:34 UTC	551	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 89476 Connection: close Last-Modified: Mon, 20 Jul 2020 17:53:02 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 19 Mar 2025 00:14:30 GMT Cache-Control: max-age=84600, must-revalidate Etag: "dc5e7f18c8d36ac1d3d4753a87c98d0a" Via: 1.1 803246727539350977d724c9e4a027c6.cloudfront.net (CloudFront) Age: 34926 Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: WW-NYU0UrKqJoAj1VvwSWbdgYR3enoKDNGarucDA4fS1LnrZ8Hrnjw==
2025-03-19 09:56:34 UTC	15833	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 Data Ascii: /! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery
2025-03-19 09:56:34 UTC	16384	IN	Data Raw: 6e 74 4e 6f 64 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 2c 61 2c 73 2c 75 2c 6c 3d 79 21 3d 3d 6d 3f 22 6e 65 78 74 53 69 62 6c 69 6e 67 22 3a 22 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 22 2c 63 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 66 3d 78 26 26 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 70 3d 21 6e 26 26 21 78 2c 64 3d 21 31 3b 69 66 28 63 29 7b 69 66 28 79 29 7b 77 68 69 6c 65 28 6c 29 7b 61 3d 65 3b 77 68 69 6c 65 28 61 3d 61 5b 6c 5d 29 69 66 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 21 31 3b 75 3d 6c 3d 22 6f 6e 6c 79 22 3d 3d 3d 68 26 26 21 75 26 26 Data Ascii: ntNode}:function(e,t,n){var r,i,o,a,s,u,l=y!==m?"nextSibling":"previousSibling",c=e.parentNode,f=x&&e.nodeName.toLowerCase(),p=!n&&!x,d=!1;if(c){if(y){while(l){a=e;while(a=a[l])if(x?a.nodeName.toLowerCase()===f:1===a.nodeType)return!1;u=l="only"===h&&!u&&
2025-03-19 09:56:34 UTC	16384	IN	Data Raw: 6c 3f 43 2e 73 65 74 54 69 6d 65 6f 75 74 28 53 2e 72 65 61 64 79 29 3a 28 45 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 42 29 2c 43 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 42 29 29 3b 76 61 72 20 24 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 29 7b 76 61 72 20 73 3d 30 2c 75 3d 65 2e 6c 65 6e 67 74 68 2c 6c 3d 6e 75 6c 6c 3d 3d 6e 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 77 28 6e 29 29 66 6f 72 28 73 20 69 6e 20 69 3d 21 30 2c 6e 29 24 28 65 2c 74 2c 73 2c 6e 5b 73 5d 2c 21 30 2c 6f 2c 61 29 3b 65 6c 73 65 20 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 26 26 28 69 3d 21 30 2c 6d 28 72 29 7c 7c 28 61 3d 21 30 29 2c 6c 26 26 28 61 Data Ascii: l?C.setTimeout(S.ready):(E.addEventListener("DOMContentLoaded",B),C.addEventListener("load",B));var $=function(e,t,n,r,i,o,a){var s=0,u=e.length,l=null==n;if("object"===w(n))for(s in i=!0,n)$(e,t,s,n[s],!0,o,a);else if(void 0!==r&&(i=!0,m(r)\|\|(a=!0),l&&(a
2025-03-19 09:56:34 UTC	16384	IN	Data Raw: 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 29 7d 2c 6c 29 3a 62 28 75 2e 74 65 78 74 43 6f 6e 74 65 6e 74 2e 72 65 70 6c 61 63 65 28 6a 65 2c 22 22 29 2c 75 2c 6c 29 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 52 65 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 2c 69 3d 74 3f 53 2e 66 69 6c 74 65 72 28 74 2c 65 29 3a 65 2c 6f 3d 30 3b 6e 75 6c 6c 21 3d 28 72 3d 69 5b 6f 5d 29 3b 6f 2b 2b 29 6e 7c 7c 31 21 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 7c 7c 53 2e 63 6c 65 61 6e 44 61 74 61 28 76 65 28 72 29 29 2c 72 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 28 6e 26 26 69 65 28 72 29 26 26 79 65 28 76 65 28 72 2c 22 73 63 72 69 70 74 22 29 29 2c 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 72 29 29 3b 72 65 74 75 72 6e 20 Data Ascii: ibute("nonce")},l):b(u.textContent.replace(je,""),u,l))}return n}function Re(e,t,n){for(var r,i=t?S.filter(t,e):e,o=0;null!=(r=i[o]);o++)n\|\|1!==r.nodeType\|\|S.cleanData(ve(r)),r.parentNode&&(n&&ie(r)&&ye(ve(r,"script")),r.parentNode.removeChild(r));return

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49736	104.18.160.117	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 09:56:34 UTC	711	OUT	GET /678a121f08be05e6ab130df5/678a1252ad2f1326a88bfd5f_dgdgdg.png HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://sso-robinhood---net-cdn--auth.webflow.io/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 09:56:34 UTC	644	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 09:56:34 GMT Content-Type: image/png Content-Length: 803 Connection: close x-amz-id-2: FVmkxIwxV6hnbNCz86MDOE3TsoG5ySGc9AMzsbT7hpAKIT0XcKJC39Hq9baw86bKkPSH89aQLU0= x-amz-request-id: T5G69CQ9X6VM0MG5 Last-Modified: Fri, 17 Jan 2025 08:18:27 GMT ETag: "c8f0cef2d937562902daa9c3c0b67ca3" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, must-revalidate x-amz-version-id: 25aUKbT5_o.hSINPBGI_0TiOVMjBVQpT CF-Cache-Status: HIT Age: 132119 Accept-Ranges: bytes Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 922c19c2ff5c3641-FRA alt-svc: h3=":443"; ma=86400
2025-03-19 09:56:34 UTC	725	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 02 b8 49 44 41 54 58 47 ed 96 4d 68 13 41 18 86 df 4d 76 37 a9 5b aa 97 22 62 10 d4 0a 0a 82 0a 96 16 2f fe 54 4b 82 20 52 d4 8a 8a 54 84 18 fc ab 20 82 82 5e 94 d6 fa 47 05 ab 54 ad 07 c1 a2 a2 d5 7a d0 83 15 a9 f4 a2 34 45 bd e8 21 7a 10 ad 5a 4b 6d 4b ac f9 d9 64 d7 6f 93 8d d9 16 93 9d 4d 23 b9 f4 81 65 33 33 61 e6 9d f7 fb be 99 e5 fc 2a 54 14 10 9b fe 2e 18 53 02 0a 2e 20 6f 49 18 8f 01 df 3f d9 f0 73 80 83 e0 00 5c f3 15 14 cf 30 9f 3a 2f 02 7a 3a 05 5c 3d e6 40 70 98 03 c7 25 fb 38 f2 f6 e0 c5 30 Data Ascii: PNGIHDR szzsRGBgAMAapHYsodIDATXGMhAMv7["b/TK RT ^GTz4E!zZKmKdoM#e33a*T.S. oI?s\0:/z:\=@p%80
2025-03-19 09:56:34 UTC	78	IN	Data Raw: e6 75 71 0d 53 01 2f 9f f0 a8 de 21 33 9f 6c 56 31 15 d0 db c5 c3 bd d3 fc 56 cb 95 ec 39 40 23 ef fd 76 2c 2a b7 7e c0 b0 92 97 8f d2 c9 c0 7c 10 fd 2f a6 04 14 58 00 f0 07 6b fc e1 8a c3 30 56 c5 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: uqS/!3lV1V9@#v,*~\|/Xk0VIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49737	104.18.160.117	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 09:56:34 UTC	816	OUT	GET /678a121f08be05e6ab130df5/678a1241d463254a5d610eb7_Screenshot%202025-01-08%20at%2013-39-14%20Commission-free%20Stock%20Trading%20%26%20Investing%20App%20Robinhood.png HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://sso-robinhood---net-cdn--auth.webflow.io/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 09:56:34 UTC	721	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 09:56:34 GMT Content-Type: image/png Content-Length: 544845 Connection: close x-amz-id-2: IfSTJV0JJPjurPQLBw/XZ/wtZsy3EumCh2z2zstxM5Ruq7MrWJvSMsxizRHM2R9K1HteXzbPcwEkzOGC+WGGY/bhReFqv6YzH+kQnh3b6HU= x-amz-request-id: HNP5GDFF7QCC9K2G Last-Modified: Fri, 17 Jan 2025 08:18:11 GMT ETag: "35baa4c2960f7adaa6f26cc982435555" x-amz-storage-class: INTELLIGENT_TIERING x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, must-revalidate x-amz-version-id: Xf_qKiYFstKoBKdyWXNthHavvnwy4Lin CF-Cache-Status: HIT Age: 132119 Accept-Ranges: bytes Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 922c19c2fbc24d6e-FRA alt-svc: h3=":443"; ma=86400
2025-03-19 09:56:34 UTC	648	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 44 00 00 03 00 08 06 00 00 00 ec 65 6d 17 00 00 20 00 49 44 41 54 78 5e ec 7d 07 80 64 69 55 f5 ed 9c 73 ce b9 a7 27 ef cc 6c 64 59 d8 95 20 48 10 04 89 06 04 03 a2 80 28 08 fe 80 88 22 4a 10 15 09 8a 02 8a a0 88 04 49 0a 88 0a cb c2 e6 9d dd 9d 9c 43 4f ec ee e9 c9 a9 e3 7f ce f7 ea ab 7a 5d 5d e1 55 7a af 66 e6 7e b2 ee ec d4 0b df 3b 5f 3e f7 dc 7b 0b 44 64 11 ff 68 51 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 e0 ba 47 a0 40 09 d1 eb be 8d f5 03 15 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 20 84 80 12 a2 da 15 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 Data Ascii: PNGIHDRDem IDATx^}diUs'ldY H("JICOz]]Uzf~;_>{DdhQE@PE@PE@PE@PEG@E@PE@PE@PE@PE E@PE@PE@PE@P
2025-03-19 09:56:34 UTC	1369	IN	Data Raw: 93 93 e9 3f f8 1a bc b3 b5 b5 55 9a 9a 9a 0c 21 7c cf 3d f7 c8 4b 5e f2 12 b9 7c f9 b2 7c e2 13 9f 90 cf 7d ee 73 81 7c d1 fb df ff 7e 79 ee 73 9f 2b 95 95 95 81 bc ff 5a 79 e9 c5 8b 17 e5 5b df fa 96 fc e1 1f fe a1 af 55 56 42 d4 57 b8 f5 65 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 a4 8f 00 d5 a0 6f 7b db db e4 7b df fb 9e 7c e4 23 1f 91 83 07 0f a6 ff b0 eb f8 4e 2a 32 df fa d6 b7 ca d3 9e f6 34 21 39 f9 85 2f 7c c1 97 af e5 bb 5e f8 c2 17 1a a2 5a 8b 77 04 a8 1a fd f2 97 bf 2c ef 7d ef 7b bd df 94 c1 95 4a 88 66 00 9e de aa 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 1f 08 d0 0d fe 9b df fc a6 1c 39 72 44 de fe f6 b7 2b 11 ea 11 f4 e1 e1 61 f9 e0 07 3f 28 d5 d5 d5 f2 d2 97 be 54 ce Data Ascii: ?U!\|=K^\|\|}s\|~ys+Zy[UVBWe"("("("o{{\|#N*24!9/\|^Zw,}{Jf("("("(9rD+a?(T
2025-03-19 09:56:34 UTC	1369	IN	Data Raw: c0 b3 ac 31 ef 5f bf 7e bd bc f2 95 af 34 ec fd 8f 7e f4 23 93 a8 69 71 71 d1 33 88 5e 09 51 7e c7 3b df f9 4e f3 dc 0f 7d e8 43 31 49 db 78 2f 55 42 d4 73 73 e4 dd 85 24 8d bf f2 95 af c8 ff fb 7f ff 2f ef ea a6 15 ca 7f 04 3e f6 b1 8f c9 9d 77 de b9 cc 20 14 74 cd f3 b5 5e a9 e0 f2 fb bf ff fb f2 c3 1f fe 50 1e 7c f0 c1 65 b7 d1 12 cc 05 f5 e7 7e ee e7 52 79 64 5e 5c 9b 8d ba ff da af fd 9a bc f5 ad 6f 35 86 be 5c 26 2a bc 16 e7 c7 6c e0 9b 17 1d 45 2b a1 08 28 02 8a 80 22 a0 08 04 88 00 63 5e 52 54 43 d1 d3 aa 55 ab cc 7e e3 e4 c9 93 f2 37 7f f3 37 72 f6 ec d9 00 6b 76 6d bc fa e6 9b 6f 36 67 cc be be be 6b a3 c2 d7 70 2d 8b 8a 8a 4c 06 f3 b1 b1 b1 98 9e c8 b1 3e ed 85 2f 7c a1 e1 7c b4 f8 8f 00 b9 c1 6c 85 90 c8 0b 42 94 aa cb b7 bd ed 6d 61 24 4f 9c Data Ascii: 1_~4~#iqq3^Q~;N}C1Ix/UBss$/>w t^P\|e~Ryd^\o5\&*lE+("c^RTCU~77rkvmo6gkp-L>/\|\|lBma$O
2025-03-19 09:56:34 UTC	1369	IN	Data Raw: 44 ff e7 7f fe 47 06 07 07 0d 89 c9 ce 4f b5 18 63 86 52 29 f8 83 1f fc c0 d4 8d 9d 95 2a 54 5a 73 48 54 32 2b 5c 7b 7b bb 21 74 29 79 e7 7f f3 bb e9 5e 4f 95 2a dd f8 39 c1 5b 42 94 13 03 89 d0 99 99 19 69 6d 6d 35 ef 21 41 c9 3a 5b 12 93 98 90 d4 62 c2 29 86 16 20 a9 cb b8 2c e7 cf 9f 97 9f f9 99 9f 31 16 38 96 d5 ab 57 0b eb dc d6 d6 26 93 93 93 42 e5 ad 4d 3a f5 a6 37 bd c9 a8 00 59 48 2c b0 1d 48 ae d2 85 94 cf 5c b9 72 a5 21 eb 38 21 dc 48 84 28 17 1e e2 6f 0f 3c c4 92 fd 84 09 bb d8 5e 3f fd d3 3f 6d 30 73 13 86 fc 33 15 83 c4 91 7d 96 24 b2 25 0e 49 a6 b1 4f 53 59 c9 42 52 8d cf 88 56 87 45 1f fa 52 ad 07 09 23 4b d2 f1 3d ee 3a b8 07 0d bf 87 6a 3b 2a 5b dd 8a 52 7b f8 64 02 33 f6 41 b7 72 6d f3 e6 cd 4b 08 1a fe 4e b5 b6 fd 2e aa f6 48 c6 33 64 Data Ascii: DGOcR)TZsHT2+\{{!t)y^O9[Bimm5!A:[b) ,18W&BM:7YH,H\r!8!H(o<^??m0s3}$%IOSYBRVER#K=:j;*[R{d3ArmKN.H3d
2025-03-19 09:56:34 UTC	1369	IN	Data Raw: 2c 89 08 51 92 99 76 3f c9 3a 71 9d e4 f9 93 8a 5f 16 bb 17 e7 9f ad d1 35 96 b7 87 bb 0d 13 89 8b fc fc 6e f2 40 dc c7 b2 6f 7a 29 14 91 91 af f1 a3 d0 43 85 c6 59 b7 02 94 67 4d fe 1d 3d 99 dd bf 33 01 17 3d 89 d9 6f 28 ec 62 a1 58 80 f7 92 6f 22 4f 40 83 00 f7 ed dc d3 90 27 a3 a8 ce 5d 78 1d 49 57 ee 9b 58 c8 0b f1 0c 45 85 37 79 2f 9e 3f 29 14 a4 51 81 7b 76 3e 8f e7 60 bf 0a bd ca 39 36 b2 51 02 25 44 e9 7a 4a f5 24 0b c1 24 e1 44 6b 92 db 85 98 6a c8 44 99 e3 dd 20 24 cb 32 cf 83 e3 f3 9f ff 7c a3 f0 24 49 ca c6 63 66 78 76 7e ca 6e 6d e1 61 82 f1 01 49 62 b0 33 59 42 94 93 39 0f 95 b6 90 b0 a1 aa 94 83 c6 92 a7 f1 08 51 4e b6 74 e5 b7 85 07 17 12 64 24 22 a9 78 b1 0a 51 76 32 76 68 5b f8 5c 76 44 92 ae 6c f4 57 bc e2 15 a6 73 92 3c e6 26 df 5d 48 Data Ascii: ,Qv?:q_5n@oz)CYgM=3=o(bXo"O@']xIWXE7y/?)Q{v>`96Q%DzJ$$DkjD $2\|$Icfxv~nmaIb3YB9QNtd$"xQv2vh[\vDlWs<&]H
2025-03-19 09:56:34 UTC	1369	IN	Data Raw: 86 f5 a3 f1 8d 6b 08 f7 5d 3c e7 53 e9 16 eb cc ef f5 99 d9 bc 8e b1 56 c9 85 b8 39 84 6c 3e 3f de b3 12 11 a2 b1 04 14 d6 3b 92 7b 50 ee 0f dd a1 e3 f8 9b 17 85 68 74 2e 8b 20 e2 8b f2 1c 4a 6f 24 fe db 4b f1 53 21 ca fa 50 9c c7 9c 1a 34 36 90 23 a2 98 8d e4 33 8b 25 44 49 7e 92 9c a4 00 c7 1a cb d9 2e 0c 5f 61 15 a2 14 d7 51 09 4b 52 35 9a f8 b4 df ed 85 10 25 39 6b 63 98 5a be 29 9a 58 f5 82 63 3a d7 90 1b 60 88 c7 6c 94 40 09 51 12 7d 6c 4c 1e 7c 39 09 91 a0 74 77 c0 7f fc c7 7f 14 06 65 f6 5a 2c 79 41 77 5b ba b6 bb 0b 27 5d 2b f9 e5 3b a9 2c a2 f2 91 1d 99 93 a9 bb 70 12 67 47 e3 84 3c 36 36 16 56 88 92 48 fc ec 67 3f bb e4 5a eb 96 46 62 91 44 47 3c 42 94 04 15 27 10 5b 38 39 50 a9 f0 ce 77 be d3 fc 3b 5e 96 79 76 54 ba d9 f3 90 c7 43 21 15 b4 94 Data Ascii: k]<SV9l>?;{Pht. Jo$KS!P46#3%DI~._aQKR5%9kcZ)Xc:`l@Q}lL\|9tweZ,yAw[']+;,pgG<66VHg?ZFbDG<B'[89Pw;^yvTC!
2025-03-19 09:56:34 UTC	1369	IN	Data Raw: 28 81 11 a2 54 99 90 90 64 42 23 12 8d 9c dc 48 ca d9 42 b7 64 c6 20 49 a5 d8 c9 92 49 83 78 e8 8d 2e 9c e8 a8 1c 65 bc 12 5a a3 f8 4e c6 d7 b4 ff 6d af e7 06 9c 64 11 89 8b f7 bc e7 3d 61 42 94 aa 51 92 20 4c 7c c4 c2 7b c9 84 73 40 73 62 67 1c d4 5c 13 a2 d6 9d 9f 87 60 ba fd 5b 97 42 0e 46 7e 0f ad 5b 54 b5 f2 77 d6 87 56 0b 12 65 3b 77 ee 34 75 66 e0 5f 4a c1 29 bf 67 8c c6 cf 7f fe f3 86 38 e5 81 c4 fe b7 c5 c1 aa 51 6f 34 42 94 df cf 36 25 f1 e9 8e 93 69 d5 39 ec b7 ee d8 9c 89 0e da 96 64 e2 b3 18 7a c0 ed 32 6f 17 09 fe 66 09 9c e8 3e eb b5 1e 6c 3f 86 4c 20 89 cd c2 83 22 63 c5 46 c7 6b e1 6f fc 0e ba 82 d8 6b a9 3e 7e f8 e1 87 c5 ad 2e 4d a4 10 b5 0b 1c c9 77 4b 5c 32 3e 2f ef cf 86 42 34 95 31 ef d7 b5 3c 9c 73 7c 90 60 60 21 f1 43 95 35 43 5e Data Ascii: (TdB#HBd IIx.eZNmd=aBQ L\|{s@sbg\`[BF~[TwVe;w4uf_J)g8Qo4B6%i9dz2of>l?L "cFkok>~.MwK\2>/B41<s\|``!C5C^
2025-03-19 09:56:34 UTC	1369	IN	Data Raw: 55 97 74 fd b7 7f 4f 57 81 f2 f2 72 33 21 b8 e3 73 d2 dd 8b 8c 3d 17 06 ba 7d b1 d3 32 d1 13 2d 13 cc 46 6e 0b 9f c5 b8 0f 24 5c e9 da ee 2e 74 db a2 cb 01 7f 63 5d dc 04 a7 fb 3a 32 f5 74 55 60 9d e9 62 60 dd e7 a3 71 e7 f3 a8 9a 25 79 4a 95 2e 63 bc 32 36 03 ad 0a 7e 07 73 ce 56 9f d0 e7 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 d7 1a 02 f4 5e ad ab ab 33 21 06 f2 bd 44 87 70 8b 0e 31 96 cf f5 a7 02 f9 e0 c1 83 61 a5 ab d7 ba 52 70 47 be 27 9f 0a 15 a0 f4 1e 26 97 63 b3 d1 d3 9b 2a 9b ea cd 20 09 51 aa cc 6d 18 a9 6c e0 1e 08 21 4a 76 9a c4 db b3 9f fd ec 6c 7c 83 3e 43 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 81 eb 06 01 e6 5d 61 b2 64 92 6e 24 ec b4 64 1f 01 e6 65 a1 57 2c c5 6a d6 eb d7 eb Data Ascii: UtOWr3!s=}2-Fn$\.tc]:2tU`b`q%yJ.c26~sV("("("(^3!Dp1aRpG'&c* Qml!Jvl\|>CPE@PE@PE@P]adn$deW,j
2025-03-19 09:56:34 UTC	1369	IN	Data Raw: 94 10 0d 02 75 7d a7 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 04 82 80 12 a2 81 c0 ae 2f 55 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 81 20 10 50 42 34 08 d4 f5 9d 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 10 08 02 4a 88 06 02 bb be 54 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 82 40 a0 60 11 25 88 17 eb 3b 15 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 c8 05 02 3f be ef 5e b9 f3 a9 4f cb c5 a3 f5 99 8a 80 22 70 1d 20 50 d0 50 53 6a 08 51 cb 8a 16 e0 4f 85 05 73 d2 d6 52 27 63 63 43 72 e1 c2 15 d9 b9 7b 5c ce e3 df bc 86 92 52 Data Ascii: u}"("("("("/UE@PE@PE@PE@P PB4"("("("("JTPE@PE@PE@PE@P@`%;E@PE@PE@PE@?^O"p PPSjQOsR'ccCr{\R
2025-03-19 09:56:34 UTC	1369	IN	Data Raw: 84 e8 8c bb 2d d2 fe 30 af cb 6c d8 34 50 54 00 83 4f 4b bd 14 c2 08 35 01 92 3c 77 84 e8 52 3a 31 32 4e e7 a4 aa b2 44 ba ba 7a cd f8 b8 8a 8d 55 ee bf 7e e9 ce 9b ff 55 08 42 b4 1a f5 e8 ed 1f c1 fa 7d d0 18 8c 3d d5 23 09 4b ea 99 44 c5 fa 57 5c 54 08 e3 5b 03 fe 5d 24 e3 c7 fc 27 47 22 6d 42 03 6f a1 74 76 75 e3 c0 7e 5e 4e 9f 3d ef eb 5e d7 ec f2 50 99 a2 82 19 19 19 ea 96 4b 57 e6 30 46 4f 05 26 0e 59 c4 dc c9 f5 96 46 ef ce ae 16 08 55 e6 30 7f 9e 09 ef 47 3d 0f ba ac 5c e8 10 69 4d 8d 75 d2 dc dc 2c 47 8f 9d 40 7d 48 de 7b ea ad 59 a9 41 ec 87 80 44 2f 2e 80 41 a1 db d4 65 ef be 43 f8 77 71 0e df b7 fc d1 ce 29 da ee b9 b9 b2 cc 49 7b 4b b5 b4 b4 b6 62 3c 4d 83 74 a4 d1 38 f8 33 1b eb 48 e3 6c 09 8c a5 3d 5d ed 52 57 df 04 d1 c7 21 b9 70 31 f8 76 Data Ascii: -0l4PTOK5<wR:12NDzU~UB}=#KDW\T[]$'G"mBotvu~^N=^PKW0FO&YFU0G=\iMu,G@}H{YAD/.AeCwq)I{Kb<Mt83Hl=]RW!p1v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49741	104.18.160.117	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 09:56:35 UTC	450	OUT	GET /678a121f08be05e6ab130df5/678a1252ad2f1326a88bfd5f_dgdgdg.png HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 09:56:35 UTC	644	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 09:56:35 GMT Content-Type: image/png Content-Length: 803 Connection: close x-amz-id-2: FVmkxIwxV6hnbNCz86MDOE3TsoG5ySGc9AMzsbT7hpAKIT0XcKJC39Hq9baw86bKkPSH89aQLU0= x-amz-request-id: T5G69CQ9X6VM0MG5 Last-Modified: Fri, 17 Jan 2025 08:18:27 GMT ETag: "c8f0cef2d937562902daa9c3c0b67ca3" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, must-revalidate x-amz-version-id: 25aUKbT5_o.hSINPBGI_0TiOVMjBVQpT CF-Cache-Status: HIT Age: 132120 Accept-Ranges: bytes Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 922c19c84bbbd28a-FRA alt-svc: h3=":443"; ma=86400
2025-03-19 09:56:35 UTC	725	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 02 b8 49 44 41 54 58 47 ed 96 4d 68 13 41 18 86 df 4d 76 37 a9 5b aa 97 22 62 10 d4 0a 0a 82 0a 96 16 2f fe 54 4b 82 20 52 d4 8a 8a 54 84 18 fc ab 20 82 82 5e 94 d6 fa 47 05 ab 54 ad 07 c1 a2 a2 d5 7a d0 83 15 a9 f4 a2 34 45 bd e8 21 7a 10 ad 5a 4b 6d 4b ac f9 d9 64 d7 6f 93 8d d9 16 93 9d 4d 23 b9 f4 81 65 33 33 61 e6 9d f7 fb be 99 e5 fc 2a 54 14 10 9b fe 2e 18 53 02 0a 2e 20 6f 49 18 8f 01 df 3f d9 f0 73 80 83 e0 00 5c f3 15 14 cf 30 9f 3a 2f 02 7a 3a 05 5c 3d e6 40 70 98 03 c7 25 fb 38 f2 f6 e0 c5 30 Data Ascii: PNGIHDR szzsRGBgAMAapHYsodIDATXGMhAMv7["b/TK RT ^GTz4E!zZKmKdoM#e33a*T.S. oI?s\0:/z:\=@p%80
2025-03-19 09:56:35 UTC	78	IN	Data Raw: e6 75 71 0d 53 01 2f 9f f0 a8 de 21 33 9f 6c 56 31 15 d0 db c5 c3 bd d3 fc 56 cb 95 ec 39 40 23 ef fd 76 2c 2a b7 7e c0 b0 92 97 8f d2 c9 c0 7c 10 fd 2f a6 04 14 58 00 f0 07 6b fc e1 8a c3 30 56 c5 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: uqS/!3lV1V9@#v,*~\|/Xk0VIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49742	104.18.160.117	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 09:56:35 UTC	555	OUT	GET /678a121f08be05e6ab130df5/678a1241d463254a5d610eb7_Screenshot%202025-01-08%20at%2013-39-14%20Commission-free%20Stock%20Trading%20%26%20Investing%20App%20Robinhood.png HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 09:56:35 UTC	721	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 09:56:35 GMT Content-Type: image/png Content-Length: 544845 Connection: close x-amz-id-2: IfSTJV0JJPjurPQLBw/XZ/wtZsy3EumCh2z2zstxM5Ruq7MrWJvSMsxizRHM2R9K1HteXzbPcwEkzOGC+WGGY/bhReFqv6YzH+kQnh3b6HU= x-amz-request-id: HNP5GDFF7QCC9K2G Last-Modified: Fri, 17 Jan 2025 08:18:11 GMT ETag: "35baa4c2960f7adaa6f26cc982435555" x-amz-storage-class: INTELLIGENT_TIERING x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, must-revalidate x-amz-version-id: Xf_qKiYFstKoBKdyWXNthHavvnwy4Lin CF-Cache-Status: HIT Age: 132120 Accept-Ranges: bytes Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 922c19c8482bd26a-FRA alt-svc: h3=":443"; ma=86400
2025-03-19 09:56:35 UTC	648	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 44 00 00 03 00 08 06 00 00 00 ec 65 6d 17 00 00 20 00 49 44 41 54 78 5e ec 7d 07 80 64 69 55 f5 ed 9c 73 ce b9 a7 27 ef cc 6c 64 59 d8 95 20 48 10 04 89 06 04 03 a2 80 28 08 fe 80 88 22 4a 10 15 09 8a 02 8a a0 88 04 49 0a 88 0a cb c2 e6 9d dd 9d 9c 43 4f ec ee e9 c9 a9 e3 7f ce f7 ea ab 7a 5d 5d e1 55 7a af 66 e6 7e b2 ee ec d4 0b df 3b 5f 3e f7 dc 7b 0b 44 64 11 ff 68 51 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 e0 ba 47 a0 40 09 d1 eb be 8d f5 03 15 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 20 84 80 12 a2 da 15 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 Data Ascii: PNGIHDRDem IDATx^}diUs'ldY H("JICOz]]Uzf~;_>{DdhQE@PE@PE@PE@PEG@E@PE@PE@PE@PE E@PE@PE@PE@P
2025-03-19 09:56:35 UTC	1369	IN	Data Raw: 93 93 e9 3f f8 1a bc b3 b5 b5 55 9a 9a 9a 0c 21 7c cf 3d f7 c8 4b 5e f2 12 b9 7c f9 b2 7c e2 13 9f 90 cf 7d ee 73 81 7c d1 fb df ff 7e 79 ee 73 9f 2b 95 95 95 81 bc ff 5a 79 e9 c5 8b 17 e5 5b df fa 96 fc e1 1f fe a1 af 55 56 42 d4 57 b8 f5 65 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 a4 8f 00 d5 a0 6f 7b db db e4 7b df fb 9e 7c e4 23 1f 91 83 07 0f a6 ff b0 eb f8 4e 2a 32 df fa d6 b7 ca d3 9e f6 34 21 39 f9 85 2f 7c c1 97 af e5 bb 5e f8 c2 17 1a a2 5a 8b 77 04 a8 1a fd f2 97 bf 2c ef 7d ef 7b bd df 94 c1 95 4a 88 66 00 9e de aa 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 1f 08 d0 0d fe 9b df fc a6 1c 39 72 44 de fe f6 b7 2b 11 ea 11 f4 e1 e1 61 f9 e0 07 3f 28 d5 d5 d5 f2 d2 97 be 54 ce Data Ascii: ?U!\|=K^\|\|}s\|~ys+Zy[UVBWe"("("("o{{\|#N*24!9/\|^Zw,}{Jf("("("(9rD+a?(T
2025-03-19 09:56:35 UTC	1369	IN	Data Raw: c0 b3 ac 31 ef 5f bf 7e bd bc f2 95 af 34 ec fd 8f 7e f4 23 93 a8 69 71 71 d1 33 88 5e 09 51 7e c7 3b df f9 4e f3 dc 0f 7d e8 43 31 49 db 78 2f 55 42 d4 73 73 e4 dd 85 24 8d bf f2 95 af c8 ff fb 7f ff 2f ef ea a6 15 ca 7f 04 3e f6 b1 8f c9 9d 77 de b9 cc 20 14 74 cd f3 b5 5e a9 e0 f2 fb bf ff fb f2 c3 1f fe 50 1e 7c f0 c1 65 b7 d1 12 cc 05 f5 e7 7e ee e7 52 79 64 5e 5c 9b 8d ba ff da af fd 9a bc f5 ad 6f 35 86 be 5c 26 2a bc 16 e7 c7 6c e0 9b 17 1d 45 2b a1 08 28 02 8a 80 22 a0 08 04 88 00 63 5e 52 54 43 d1 d3 aa 55 ab cc 7e e3 e4 c9 93 f2 37 7f f3 37 72 f6 ec d9 00 6b 76 6d bc fa e6 9b 6f 36 67 cc be be be 6b a3 c2 d7 70 2d 8b 8a 8a 4c 06 f3 b1 b1 b1 98 9e c8 b1 3e ed 85 2f 7c a1 e1 7c b4 f8 8f 00 b9 c1 6c 85 90 c8 0b 42 94 aa cb b7 bd ed 6d 61 24 4f 9c Data Ascii: 1_~4~#iqq3^Q~;N}C1Ix/UBss$/>w t^P\|e~Ryd^\o5\&*lE+("c^RTCU~77rkvmo6gkp-L>/\|\|lBma$O
2025-03-19 09:56:35 UTC	1369	IN	Data Raw: 44 ff e7 7f fe 47 06 07 07 0d 89 c9 ce 4f b5 18 63 86 52 29 f8 83 1f fc c0 d4 8d 9d 95 2a 54 5a 73 48 54 32 2b 5c 7b 7b bb 21 74 29 79 e7 7f f3 bb e9 5e 4f 95 2a dd f8 39 c1 5b 42 94 13 03 89 d0 99 99 19 69 6d 6d 35 ef 21 41 c9 3a 5b 12 93 98 90 d4 62 c2 29 86 16 20 a9 cb b8 2c e7 cf 9f 97 9f f9 99 9f 31 16 38 96 d5 ab 57 0b eb dc d6 d6 26 93 93 93 42 e5 ad 4d 3a f5 a6 37 bd c9 a8 00 59 48 2c b0 1d 48 ae d2 85 94 cf 5c b9 72 a5 21 eb 38 21 dc 48 84 28 17 1e e2 6f 0f 3c c4 92 fd 84 09 bb d8 5e 3f fd d3 3f 6d 30 73 13 86 fc 33 15 83 c4 91 7d 96 24 b2 25 0e 49 a6 b1 4f 53 59 c9 42 52 8d cf 88 56 87 45 1f fa 52 ad 07 09 23 4b d2 f1 3d ee 3a b8 07 0d bf 87 6a 3b 2a 5b dd 8a 52 7b f8 64 02 33 f6 41 b7 72 6d f3 e6 cd 4b 08 1a fe 4e b5 b6 fd 2e aa f6 48 c6 33 64 Data Ascii: DGOcR)TZsHT2+\{{!t)y^O9[Bimm5!A:[b) ,18W&BM:7YH,H\r!8!H(o<^??m0s3}$%IOSYBRVER#K=:j;*[R{d3ArmKN.H3d
2025-03-19 09:56:35 UTC	1369	IN	Data Raw: 2c 89 08 51 92 99 76 3f c9 3a 71 9d e4 f9 93 8a 5f 16 bb 17 e7 9f ad d1 35 96 b7 87 bb 0d 13 89 8b fc fc 6e f2 40 dc c7 b2 6f 7a 29 14 91 91 af f1 a3 d0 43 85 c6 59 b7 02 94 67 4d fe 1d 3d 99 dd bf 33 01 17 3d 89 d9 6f 28 ec 62 a1 58 80 f7 92 6f 22 4f 40 83 00 f7 ed dc d3 90 27 a3 a8 ce 5d 78 1d 49 57 ee 9b 58 c8 0b f1 0c 45 85 37 79 2f 9e 3f 29 14 a4 51 81 7b 76 3e 8f e7 60 bf 0a bd ca 39 36 b2 51 02 25 44 e9 7a 4a f5 24 0b c1 24 e1 44 6b 92 db 85 98 6a c8 44 99 e3 dd 20 24 cb 32 cf 83 e3 f3 9f ff 7c a3 f0 24 49 ca c6 63 66 78 76 7e ca 6e 6d e1 61 82 f1 01 49 62 b0 33 59 42 94 93 39 0f 95 b6 90 b0 a1 aa 94 83 c6 92 a7 f1 08 51 4e b6 74 e5 b7 85 07 17 12 64 24 22 a9 78 b1 0a 51 76 32 76 68 5b f8 5c 76 44 92 ae 6c f4 57 bc e2 15 a6 73 92 3c e6 26 df 5d 48 Data Ascii: ,Qv?:q_5n@oz)CYgM=3=o(bXo"O@']xIWXE7y/?)Q{v>`96Q%DzJ$$DkjD $2\|$Icfxv~nmaIb3YB9QNtd$"xQv2vh[\vDlWs<&]H
2025-03-19 09:56:35 UTC	1369	IN	Data Raw: 86 f5 a3 f1 8d 6b 08 f7 5d 3c e7 53 e9 16 eb cc ef f5 99 d9 bc 8e b1 56 c9 85 b8 39 84 6c 3e 3f de b3 12 11 a2 b1 04 14 d6 3b 92 7b 50 ee 0f dd a1 e3 f8 9b 17 85 68 74 2e 8b 20 e2 8b f2 1c 4a 6f 24 fe db 4b f1 53 21 ca fa 50 9c c7 9c 1a 34 36 90 23 a2 98 8d e4 33 8b 25 44 49 7e 92 9c a4 00 c7 1a cb d9 2e 0c 5f 61 15 a2 14 d7 51 09 4b 52 35 9a f8 b4 df ed 85 10 25 39 6b 63 98 5a be 29 9a 58 f5 82 63 3a d7 90 1b 60 88 c7 6c 94 40 09 51 12 7d 6c 4c 1e 7c 39 09 91 a0 74 77 c0 7f fc c7 7f 14 06 65 f6 5a 2c 79 41 77 5b ba b6 bb 0b 27 5d 2b f9 e5 3b a9 2c a2 f2 91 1d 99 93 a9 bb 70 12 67 47 e3 84 3c 36 36 16 56 88 92 48 fc ec 67 3f bb e4 5a eb 96 46 62 91 44 47 3c 42 94 04 15 27 10 5b 38 39 50 a9 f0 ce 77 be d3 fc 3b 5e 96 79 76 54 ba d9 f3 90 c7 43 21 15 b4 94 Data Ascii: k]<SV9l>?;{Pht. Jo$KS!P46#3%DI~._aQKR5%9kcZ)Xc:`l@Q}lL\|9tweZ,yAw[']+;,pgG<66VHg?ZFbDG<B'[89Pw;^yvTC!
2025-03-19 09:56:35 UTC	1369	IN	Data Raw: 28 81 11 a2 54 99 90 90 64 42 23 12 8d 9c dc 48 ca d9 42 b7 64 c6 20 49 a5 d8 c9 92 49 83 78 e8 8d 2e 9c e8 a8 1c 65 bc 12 5a a3 f8 4e c6 d7 b4 ff 6d af e7 06 9c 64 11 89 8b f7 bc e7 3d 61 42 94 aa 51 92 20 4c 7c c4 c2 7b c9 84 73 40 73 62 67 1c d4 5c 13 a2 d6 9d 9f 87 60 ba fd 5b 97 42 0e 46 7e 0f ad 5b 54 b5 f2 77 d6 87 56 0b 12 65 3b 77 ee 34 75 66 e0 5f 4a c1 29 bf 67 8c c6 cf 7f fe f3 86 38 e5 81 c4 fe b7 c5 c1 aa 51 6f 34 42 94 df cf 36 25 f1 e9 8e 93 69 d5 39 ec b7 ee d8 9c 89 0e da 96 64 e2 b3 18 7a c0 ed 32 6f 17 09 fe 66 09 9c e8 3e eb b5 1e 6c 3f 86 4c 20 89 cd c2 83 22 63 c5 46 c7 6b e1 6f fc 0e ba 82 d8 6b a9 3e 7e f8 e1 87 c5 ad 2e 4d a4 10 b5 0b 1c c9 77 4b 5c 32 3e 2f ef cf 86 42 34 95 31 ef d7 b5 3c 9c 73 7c 90 60 60 21 f1 43 95 35 43 5e Data Ascii: (TdB#HBd IIx.eZNmd=aBQ L\|{s@sbg\`[BF~[TwVe;w4uf_J)g8Qo4B6%i9dz2of>l?L "cFkok>~.MwK\2>/B41<s\|``!C5C^
2025-03-19 09:56:35 UTC	1369	IN	Data Raw: 55 97 74 fd b7 7f 4f 57 81 f2 f2 72 33 21 b8 e3 73 d2 dd 8b 8c 3d 17 06 ba 7d b1 d3 32 d1 13 2d 13 cc 46 6e 0b 9f c5 b8 0f 24 5c e9 da ee 2e 74 db a2 cb 01 7f 63 5d dc 04 a7 fb 3a 32 f5 74 55 60 9d e9 62 60 dd e7 a3 71 e7 f3 a8 9a 25 79 4a 95 2e 63 bc 32 36 03 ad 0a 7e 07 73 ce 56 9f d0 e7 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 d7 1a 02 f4 5e ad ab ab 33 21 06 f2 bd 44 87 70 8b 0e 31 96 cf f5 a7 02 f9 e0 c1 83 61 a5 ab d7 ba 52 70 47 be 27 9f 0a 15 a0 f4 1e 26 97 63 b3 d1 d3 9b 2a 9b ea cd 20 09 51 aa cc 6d 18 a9 6c e0 1e 08 21 4a 76 9a c4 db b3 9f fd ec 6c 7c 83 3e 43 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 81 eb 06 01 e6 5d 61 b2 64 92 6e 24 ec b4 64 1f 01 e6 65 a1 57 2c c5 6a d6 eb d7 eb Data Ascii: UtOWr3!s=}2-Fn$\.tc]:2tU`b`q%yJ.c26~sV("("("(^3!Dp1aRpG'&c* Qml!Jvl\|>CPE@PE@PE@P]adn$deW,j
2025-03-19 09:56:35 UTC	1369	IN	Data Raw: 94 10 0d 02 75 7d a7 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 04 82 80 12 a2 81 c0 ae 2f 55 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 81 20 10 50 42 34 08 d4 f5 9d 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 10 08 02 4a 88 06 02 bb be 54 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 82 40 a0 60 11 25 88 17 eb 3b 15 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 c8 05 02 3f be ef 5e b9 f3 a9 4f cb c5 a3 f5 99 8a 80 22 70 1d 20 50 d0 50 53 6a 08 51 cb 8a 16 e0 4f 85 05 73 d2 d6 52 27 63 63 43 72 e1 c2 15 d9 b9 7b 5c ce e3 df bc 86 92 52 Data Ascii: u}"("("("("/UE@PE@PE@PE@P PB4"("("("("JTPE@PE@PE@PE@P@`%;E@PE@PE@PE@?^O"p PPSjQOsR'ccCr{\R
2025-03-19 09:56:35 UTC	1369	IN	Data Raw: 84 e8 8c bb 2d d2 fe 30 af cb 6c d8 34 50 54 00 83 4f 4b bd 14 c2 08 35 01 92 3c 77 84 e8 52 3a 31 32 4e e7 a4 aa b2 44 ba ba 7a cd f8 b8 8a 8d 55 ee bf 7e e9 ce 9b ff 55 08 42 b4 1a f5 e8 ed 1f c1 fa 7d d0 18 8c 3d d5 23 09 4b ea 99 44 c5 fa 57 5c 54 08 e3 5b 03 fe 5d 24 e3 c7 fc 27 47 22 6d 42 03 6f a1 74 76 75 e3 c0 7e 5e 4e 9f 3d ef eb 5e d7 ec f2 50 99 a2 82 19 19 19 ea 96 4b 57 e6 30 46 4f 05 26 0e 59 c4 dc c9 f5 96 46 ef ce ae 16 08 55 e6 30 7f 9e 09 ef 47 3d 0f ba ac 5c e8 10 69 4d 8d 75 d2 dc dc 2c 47 8f 9d 40 7d 48 de 7b ea ad 59 a9 41 ec 87 80 44 2f 2e 80 41 a1 db d4 65 ef be 43 f8 77 71 0e df b7 fc d1 ce 29 da ee b9 b9 b2 cc 49 7b 4b b5 b4 b4 b6 62 3c 4d 83 74 a4 d1 38 f8 33 1b eb 48 e3 6c 09 8c a5 3d 5d ed 52 57 df 04 d1 c7 21 b9 70 31 f8 76 Data Ascii: -0l4PTOK5<wR:12NDzU~UB}=#KDW\T[]$'G"mBotvu~^N=^PKW0FO&YFU0G=\iMu,G@}H{YAD/.AeCwq)I{Kb<Mt83Hl=]RW!p1v

Statistics

CPU Usage

• chrome.exe
• chrome.exe
• chrome.exe

Click to jump to process

Memory Usage

• chrome.exe
• chrome.exe
• chrome.exe

Click to jump to process

Click to jump to process

Target ID:	1
Start time:	05:56:24
Start date:	19/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff786830000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	05:56:26
Start date:	19/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2004,i,15634055504048365914,5295760618512104828,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2132 /prefetch:3
Imagebase:	0x7ff786830000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	4
Start time:	05:56:32
Start date:	19/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://sso-robinhood---net-cdn--auth.webflow.io/"
Imagebase:	0x7ff786830000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://sso-robinhood---net-cdn--auth.webflow.io/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 1596, Parent PID: 3556

General

File Activities

File Opened

Windows Analysis Report
https://sso-robinhood---net-cdn--auth.webflow.io/