Edit tour

Windows Analysis Report
https://sso-robinhood-net--cdn-auth.webflow.io/

Overview

General Information

Sample URL:	https://sso-robinhood-net--cdn-auth.webflow.io/
Analysis ID:	1642765
Infos:

Detection

HTMLPhisher

Score:	60
Range:	0 - 100
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Yara detected HtmlPhish64

AI detected suspicious URL

Creates files inside the system directory

Deletes files inside the Windows folder

Detected non-DNS traffic on DNS port

HTML body contains low number of good links

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4376 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 1480 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2044,i,14281106701017814361,4991699053126300690,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2080 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6244 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://sso-robinhood-net--cdn-auth.webflow.io/" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
0.0.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security

Joe Sandbox Signatures

• AV Detection
• Phishing
• Compliance
• Networking
• System Summary

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://sso-robinhood-net--cdn-auth.webflow.io/

Avira URL Cloud: detection malicious, Label: phishing

Phishing

Yara detected HtmlPhish64

Source: Yara match

File source: 0.0.pages.csv, type: HTML

AI detected suspicious URL

Source: https://sso-robinhood-net--cdn-auth.webflow.io

Joe Sandbox AI: The URL 'https://sso-robinhood-net--cdn-auth.webflow.io' appears to be attempting to mimic a legitimate Robinhood URL. The use of 'sso' and 'cdn-auth' suggests an attempt to appear as a secure login or content delivery network, which are common elements in legitimate URLs. The domain 'webflow.io' is a legitimate platform for hosting websites, which could be used for legitimate purposes, but in this context, it is likely being used to create a deceptive URL. The structural similarity is high due to the inclusion of 'robinhood' and the use of terms like 'sso' and 'cdn-auth' that are associated with security and authentication. The likelihood of user confusion is high, as users may believe they are interacting with a secure Robinhood service. However, the use of 'webflow.io' as the main domain suggests a potential for typosquatting, as it is not directly associated with Robinhood's official domain.

Source: https://sso-robinhood-net--cdn-auth.webflow.io/

HTTP Parser: Number of links: 0

Source: https://sso-robinhood-net--cdn-auth.webflow.io/

HTTP Parser: No <meta name="author".. found

Source: https://sso-robinhood-net--cdn-auth.webflow.io/

HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 142.250.184.196:443 -> 192.168.2.9:49691 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.36.248:443 -> 192.168.2.9:49693 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.36.248:443 -> 192.168.2.9:49692 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.161.117:443 -> 192.168.2.9:49694 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.222.232.144:443 -> 192.168.2.9:49696 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.161.117:443 -> 192.168.2.9:49695 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.160.117:443 -> 192.168.2.9:49704 version: TLS 1.2

Source: global traffic	TCP traffic: 192.168.2.9:49258 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.9:52645 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.215
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.73.143
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.63
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.215
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.18.3
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.18.3
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.18.3
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.18.3
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.18.3
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.18.3
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.18.3
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.18.3
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: sso-robinhood-net--cdn-auth.webflow.ioConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /678a174507adb9ecf0e5709b/css/sso-robinhood-net--cdn-auth.webflow.ce67eee42.css HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://sso-robinhood-net--cdn-auth.webflow.io/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/jquery-3.5.1.min.dc5e7f18c8.js?site=678a174507adb9ecf0e5709b HTTP/1.1Host: d3e54v103j8qbb.cloudfront.netConnection: keep-aliveOrigin: https://sso-robinhood-net--cdn-auth.webflow.iosec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://sso-robinhood-net--cdn-auth.webflow.io/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /678a174507adb9ecf0e5709b/js/webflow.77ac24386eb2a8dacabbd68092c045ec.js HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://sso-robinhood-net--cdn-auth.webflow.io/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /678a174507adb9ecf0e5709b/678a1771bbb1a2124595aab5_dgdgdg.png HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://sso-robinhood-net--cdn-auth.webflow.io/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /678a174507adb9ecf0e5709b/678a175f2b47ac7e1e8eb33f_Screenshot%202025-01-08%20at%2013-39-14%20Commission-free%20Stock%20Trading%20%26%20Investing%20App%20Robinhood.png HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://sso-robinhood-net--cdn-auth.webflow.io/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /678a174507adb9ecf0e5709b/678a1771bbb1a2124595aab5_dgdgdg.png HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /678a174507adb9ecf0e5709b/678a175f2b47ac7e1e8eb33f_Screenshot%202025-01-08%20at%2013-39-14%20Commission-free%20Stock%20Trading%20%26%20Investing%20App%20Robinhood.png HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIlKHLAQiJo8sBCIWgzQEI/qXOAQiB1s4BCKXgzgEIxOHOAQiu5M4BCN/kzgEIjOXOAQ==Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /r/gsr1.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog
Source: global traffic	HTTP traffic detected: GET /r/r4.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: sso-robinhood-net--cdn-auth.webflow.io
Source: global traffic	DNS traffic detected: DNS query: cdn.prod.website-files.com
Source: global traffic	DNS traffic detected: DNS query: d3e54v103j8qbb.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: robenboodlogi.info
Source: global traffic	DNS traffic detected: DNS query: google.com

Source: chromecache_57.1.dr	String found in binary or memory: http://underscorejs.org
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://2k.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://33across.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://360yield.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://3lift.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://a-mo.net
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://acxiom.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://ad-score.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://ad-stir.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://ad.gt
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://adentifi.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://adform.net
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://adingo.jp
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://admatrix.jp
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://admission.net
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://admixer.net
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://adnami.io
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://adnxs.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://adroll.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://adsafeprotected.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://adscale.de
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://adsmeasurement.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://adsrvr.org
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://adswizz.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://adthrive.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://adtrafficquality.google
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://advividnetwork.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://aggregation-service-site-dot-clz200258-datateam-italy.ew.r.appspot.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://akpytela.cz
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://alketech.eu
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://amazon-adsystem.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://aniview.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://anonymised.io
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://apex-football.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://aphub.ai
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://appconsent.io
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://appier.net
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://appsflyer.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://appsflyersdk.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://aqfer.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://atirun.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://atomex.net
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://audience360.com.au
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://audienceproject.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://authorizedvault.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://avads.net
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://ayads.io
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://azubiyo.de
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://beaconmax.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://bidswitch.net
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://bidtheatre.net
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://blendee.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://bluems.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://boost-web.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://bounceexchange.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://bypass.jp
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://casalemedia.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://cazamba.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://cdn-net.com
Source: chromecache_62.1.dr	String found in binary or memory: https://cdn.prod.website-files.com/678a174507adb9ecf0e5709b/678a175f2b47ac7e1e8eb33f_Screenshot%2020
Source: chromecache_62.1.dr	String found in binary or memory: https://cdn.prod.website-files.com/678a174507adb9ecf0e5709b/678a1771bbb1a2124595aab5_dgdgdg.png
Source: chromecache_62.1.dr	String found in binary or memory: https://cdn.prod.website-files.com/678a174507adb9ecf0e5709b/css/sso-robinhood-net--cdn-auth.webflow.
Source: chromecache_62.1.dr	String found in binary or memory: https://cdn.prod.website-files.com/678a174507adb9ecf0e5709b/js/webflow.77ac24386eb2a8dacabbd68092c04
Source: chromecache_62.1.dr	String found in binary or memory: https://cdn.prod.website-files.com/img/webclip.png
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://clickonometrics.pl
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://connatix.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://connected-stories.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://convertunits.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://coupang.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://cpx.to
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://crcldu.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://creative-serving.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://creativecdn.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://criteo.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://ctnsnet.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://d-edgeconnect.media
Source: chromecache_62.1.dr	String found in binary or memory: https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=678a174507adb9ecf0e5709
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://dabbs.net
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://dailymail.co.uk
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://dailymotion.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://daum.net
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://deepintent.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://demand.supply
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://display.io
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://disqus.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://docomo.ne.jp
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://dotdashmeredith.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://dotomi.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://doubleclick.net
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://doubleverify.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://dreammail.jp
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://dynalyst.jp
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://ebayadservices.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://ebis.ne.jp
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://edkt.io
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://elle.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://elnacional.cat
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://eloan.co.jp
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://euleriancdn.net
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://explorefledge.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://ezoic.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://fanbyte.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://fandom.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://finn.no
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://flashtalking.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://fout.jp
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://fwmrm.net
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://gama.globo
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://get3rdspace.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://getcapi.co
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://getyourguide.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://ghtinc.com
Source: chromecache_57.1.dr	String found in binary or memory: https://github.com/bkwld/tram
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://globo.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://gmossp-sp.jp
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://gokwik.co
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://google-analytics.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://googleadservices.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://googlesyndication.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://grxchange.gr
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://gsspat.jp
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://gumgum.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://gunosy.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://halcy.de
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://html-load.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://i-mobile.co.jp
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://im-apps.net
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://impact-ad.jp
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://indexww.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://ingereck.net
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://inmobi.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://innovid.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://iobeya.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://jivox.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://jkforum.net
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://kargo.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://kidoz.net
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://kompaspublishing.nl
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://ladsp.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://linkedin.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://logly.co.jp
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://lucead.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://lwadm.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://mail.ru
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://media.net
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://media6degrees.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://mediaintelligence.de
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://mediamath.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://mediavine.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://metro.co.uk
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://microad.jp
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://momento.dev
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://moshimo.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://naver.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://nexxen.tech
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://nhnace.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://nodals.io
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://onet.pl
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://onetag-sys.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://open-bid.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://openx.net
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://optable.co
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://outbrain.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://paa-reporting-advertising.amazon
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://payment.goog
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://permutive.app
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://pinterest.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://postrelease.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://presage.io
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://primecaster.net
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://privacy-sandbox-demos-ad-server.dev
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://privacy-sandbox-demos-dsp-a.dev
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://privacy-sandbox-demos-dsp-b.dev
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://privacy-sandbox-demos-dsp-x.dev
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://privacy-sandbox-demos-dsp-y.dev
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://privacy-sandbox-demos-dsp.dev
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://privacy-sandbox-demos-ssp-a.dev
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://privacy-sandbox-demos-ssp-b.dev
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://privacy-sandbox-demos-ssp-x.dev
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://privacy-sandbox-demos-ssp-y.dev
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://privacy-sandbox-demos-ssp.dev
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://privacy-sandbox-test.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://privacy-sandcastle-dev-ad-server.web.app
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://privacy-sandcastle-dev-dsp-a1.web.app
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://privacy-sandcastle-dev-dsp-b1.web.app
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://privacy-sandcastle-dev-dsp-x.web.app
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://privacy-sandcastle-dev-dsp-y.web.app
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://privacy-sandcastle-dev-dsp.web.app
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://privacy-sandcastle-dev-ssp-a.web.app
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://privacy-sandcastle-dev-ssp-b.web.app
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://privacy-sandcastle-dev-ssp-x.web.app
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://privacy-sandcastle-dev-ssp-y.web.app
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://privacy-sandcastle-dev-ssp.web.app
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://ptb-msmt-static-5jyy5ulagq-uc.a.run.app
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://pub.network
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://pubmatic.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://pubtm.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://quantserve.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://quora.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://r2b2.io
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://relevant-digital.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://retargetly.com
Source: chromecache_62.1.dr	String found in binary or memory: https://robenboodlogi.info/logi/
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://rubiconproject.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://samplicio.us
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://sascdn.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://seedtag.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://semafor.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://sephora.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://shared-storage-demo-content-producer.web.app
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://shared-storage-demo-publisher-a.web.app
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://shared-storage-demo-publisher-b.web.app
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://shinobi.jp
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://shinystat.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://simeola.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://singular.net
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://sitescout.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://smadexprivacysandbox.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://snapchat.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://socdm.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://sportradarserving.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://stackadapt.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://storygize.net
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://superfine.org
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://t13.io
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://taboola.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://tailtarget.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://tamedia.com.tw
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://tangooserver.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://teads.tv
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://theryn.io
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://tiktok.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://tncid.app
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://toponad.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://torneos.gg
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://tpmark.net
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://tribalfusion.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://trip.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://triptease.io
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://trkkn.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://tya-dev.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://uinterbox.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://undertone.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://unrulymedia.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://uol.com.br
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://usemax.de
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://validate.audio
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://verve.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://vg.no
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://vidazoo.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://vpadn.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://washingtonpost.com
Source: chromecache_62.1.dr	String found in binary or memory: https://webflow.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://weborama-tech.ru
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://weborama.fr
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://wepowerconnections.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://worldhistory.org
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://wp.pl
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://yahoo.co.jp
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://yahoo.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://yelp.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://yieldlab.net
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://yieldmo.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://youronlinechoices.eu

Source: unknown	Network traffic detected: HTTP traffic on port 49699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49695 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49693 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49691 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52648
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49699
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49696
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52648 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49695
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49694
Source: unknown	Network traffic detected: HTTP traffic on port 49694 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49693
Source: unknown	Network traffic detected: HTTP traffic on port 49696 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49692
Source: unknown	Network traffic detected: HTTP traffic on port 49692 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49691
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704

Source: unknown	HTTPS traffic detected: 142.250.184.196:443 -> 192.168.2.9:49691 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.36.248:443 -> 192.168.2.9:49693 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.36.248:443 -> 192.168.2.9:49692 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.161.117:443 -> 192.168.2.9:49694 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.222.232.144:443 -> 192.168.2.9:49696 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.161.117:443 -> 192.168.2.9:49695 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.160.117:443 -> 192.168.2.9:49704 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\scoped_dir4376_871285527	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4376_1121715122	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4376_1121715122\privacy-sandbox-attestations.dat	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4376_1121715122\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4376_1121715122\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4376_1121715122\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4376_1121715122\manifest.fingerprint	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\scoped_dir4376_1254683917	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir4376_871285527

Jump to behavior

Source: classification engine

Classification label: mal60.phis.win@29/20@33/7

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2044,i,14281106701017814361,4991699053126300690,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2080 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://sso-robinhood-net--cdn-auth.webflow.io/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2044,i,14281106701017814361,4991699053126300690,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2080 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://sso-robinhood-net--cdn-auth.webflow.io/	100%	Avira URL Cloud	phishing

Source	Detection	Scanner	Label	Link
https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=678a174507adb9ecf0e5709	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
d3e54v103j8qbb.cloudfront.net	52.222.232.144	true	false	high
google.com	142.250.184.206	true	false	high
sso-robinhood-net--cdn-auth.webflow.io	104.18.36.248	true	true	unknown
cdn.prod.website-files.com	104.18.161.117	true	false	high
www.google.com	142.250.184.196	true	false	high
robenboodlogi.info	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://cdn.prod.website-files.com/678a174507adb9ecf0e5709b/678a1771bbb1a2124595aab5_dgdgdg.png	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://mediavine.com	privacy-sandbox-attestations.dat.0.dr	false		high
https://connatix.com	privacy-sandbox-attestations.dat.0.dr	false		high
https://yelp.com	privacy-sandbox-attestations.dat.0.dr	false		high
https://nodals.io	privacy-sandbox-attestations.dat.0.dr	false		high
https://getyourguide.com	privacy-sandbox-attestations.dat.0.dr	false		high
https://mediaintelligence.de	privacy-sandbox-attestations.dat.0.dr	false		high
https://privacy-sandcastle-dev-dsp.web.app	privacy-sandbox-attestations.dat.0.dr	false		high
http://underscorejs.org	chromecache_57.1.dr	false		high
https://privacy-sandbox-demos-dsp-a.dev	privacy-sandbox-attestations.dat.0.dr	false		high
https://permutive.app	privacy-sandbox-attestations.dat.0.dr	false		high
https://privacy-sandbox-demos-dsp.dev	privacy-sandbox-attestations.dat.0.dr	false		high
https://adthrive.com	privacy-sandbox-attestations.dat.0.dr	false		high
https://ad.gt	privacy-sandbox-attestations.dat.0.dr	false		high
https://gumgum.com	privacy-sandbox-attestations.dat.0.dr	false		high
https://trkkn.com	privacy-sandbox-attestations.dat.0.dr	false		high
https://logly.co.jp	privacy-sandbox-attestations.dat.0.dr	false		high
https://media6degrees.com	privacy-sandbox-attestations.dat.0.dr	false		high
https://webflow.com	chromecache_62.1.dr	false		high
https://privacy-sandcastle-dev-ssp.web.app	privacy-sandbox-attestations.dat.0.dr	false		high
https://inmobi.com	privacy-sandbox-attestations.dat.0.dr	false		high
https://33across.com	privacy-sandbox-attestations.dat.0.dr	false		high
https://dreammail.jp	privacy-sandbox-attestations.dat.0.dr	false		high
https://jkforum.net	privacy-sandbox-attestations.dat.0.dr	false		high
https://iobeya.com	privacy-sandbox-attestations.dat.0.dr	false		high
https://a-mo.net	privacy-sandbox-attestations.dat.0.dr	false		high
https://ebis.ne.jp	privacy-sandbox-attestations.dat.0.dr	false		high
https://privacy-sandbox-demos-ssp-y.dev	privacy-sandbox-attestations.dat.0.dr	false		high
https://aphub.ai	privacy-sandbox-attestations.dat.0.dr	false		high
https://gama.globo	privacy-sandbox-attestations.dat.0.dr	false		high
https://audienceproject.com	privacy-sandbox-attestations.dat.0.dr	false		high
https://adsrvr.org	privacy-sandbox-attestations.dat.0.dr	false		high
https://finn.no	privacy-sandbox-attestations.dat.0.dr	false		high
https://lucead.com	privacy-sandbox-attestations.dat.0.dr	false		high
https://verve.com	privacy-sandbox-attestations.dat.0.dr	false		high
https://r2b2.io	privacy-sandbox-attestations.dat.0.dr	false		high
https://bluems.com	privacy-sandbox-attestations.dat.0.dr	false		high
https://edkt.io	privacy-sandbox-attestations.dat.0.dr	false		high
https://atomex.net	privacy-sandbox-attestations.dat.0.dr	false		high
https://crcldu.com	privacy-sandbox-attestations.dat.0.dr	false		high
https://rubiconproject.com	privacy-sandbox-attestations.dat.0.dr	false		high
https://sitescout.com	privacy-sandbox-attestations.dat.0.dr	false		high
https://apex-football.com	privacy-sandbox-attestations.dat.0.dr	false		high
https://dotomi.com	privacy-sandbox-attestations.dat.0.dr	false		high
https://ctnsnet.com	privacy-sandbox-attestations.dat.0.dr	false		high
https://toponad.com	privacy-sandbox-attestations.dat.0.dr	false		high
https://shinobi.jp	privacy-sandbox-attestations.dat.0.dr	false		high
https://superfine.org	privacy-sandbox-attestations.dat.0.dr	false		high
https://360yield.com	privacy-sandbox-attestations.dat.0.dr	false		high
https://usemax.de	privacy-sandbox-attestations.dat.0.dr	false		high
https://display.io	privacy-sandbox-attestations.dat.0.dr	false		high
https://adform.net	privacy-sandbox-attestations.dat.0.dr	false		high
https://eloan.co.jp	privacy-sandbox-attestations.dat.0.dr	false		high
https://postrelease.com	privacy-sandbox-attestations.dat.0.dr	false		high
https://aqfer.com	privacy-sandbox-attestations.dat.0.dr	false		high
https://docomo.ne.jp	privacy-sandbox-attestations.dat.0.dr	false		high
https://shared-storage-demo-publisher-a.web.app	privacy-sandbox-attestations.dat.0.dr	false		high
https://weborama-tech.ru	privacy-sandbox-attestations.dat.0.dr	false		high
https://innovid.com	privacy-sandbox-attestations.dat.0.dr	false		high
https://demand.supply	privacy-sandbox-attestations.dat.0.dr	false		high
https://nexxen.tech	privacy-sandbox-attestations.dat.0.dr	false		high
https://2k.com	privacy-sandbox-attestations.dat.0.dr	false		high
https://cdn.prod.website-files.com/678a174507adb9ecf0e5709b/678a175f2b47ac7e1e8eb33f_Screenshot%2020	chromecache_62.1.dr	false		high
https://advividnetwork.com	privacy-sandbox-attestations.dat.0.dr	false		high
https://undertone.com	privacy-sandbox-attestations.dat.0.dr	false		high
https://creative-serving.com	privacy-sandbox-attestations.dat.0.dr	false		high
https://unrulymedia.com	privacy-sandbox-attestations.dat.0.dr	false		high
https://tailtarget.com	privacy-sandbox-attestations.dat.0.dr	false		high
https://paa-reporting-advertising.amazon	privacy-sandbox-attestations.dat.0.dr	false		high
https://privacy-sandbox-demos-ssp-b.dev	privacy-sandbox-attestations.dat.0.dr	false		high
https://bypass.jp	privacy-sandbox-attestations.dat.0.dr	false		high
https://dotdashmeredith.com	privacy-sandbox-attestations.dat.0.dr	false		high
https://atirun.com	privacy-sandbox-attestations.dat.0.dr	false		high
https://adingo.jp	privacy-sandbox-attestations.dat.0.dr	false		high
https://impact-ad.jp	privacy-sandbox-attestations.dat.0.dr	false		high
https://admatrix.jp	privacy-sandbox-attestations.dat.0.dr	false		high
https://openx.net	privacy-sandbox-attestations.dat.0.dr	false		high
https://taboola.com	privacy-sandbox-attestations.dat.0.dr	false		high
https://ayads.io	privacy-sandbox-attestations.dat.0.dr	false		high
https://i-mobile.co.jp	privacy-sandbox-attestations.dat.0.dr	false		high
https://uinterbox.com	privacy-sandbox-attestations.dat.0.dr	false		high
https://mail.ru	privacy-sandbox-attestations.dat.0.dr	false		high
https://simeola.com	privacy-sandbox-attestations.dat.0.dr	false		high
https://gmossp-sp.jp	privacy-sandbox-attestations.dat.0.dr	false		high
https://primecaster.net	privacy-sandbox-attestations.dat.0.dr	false		high
https://privacy-sandcastle-dev-ssp-a.web.app	privacy-sandbox-attestations.dat.0.dr	false		high
https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=678a174507adb9ecf0e5709	chromecache_62.1.dr	false	Avira URL Cloud: safe	unknown
https://worldhistory.org	privacy-sandbox-attestations.dat.0.dr	false		high
https://adnxs.com	privacy-sandbox-attestations.dat.0.dr	false		high
https://dabbs.net	privacy-sandbox-attestations.dat.0.dr	false		high
https://seedtag.com	privacy-sandbox-attestations.dat.0.dr	false		high
https://casalemedia.com	privacy-sandbox-attestations.dat.0.dr	false		high
https://robenboodlogi.info/logi/	chromecache_62.1.dr	false		high
https://privacy-sandcastle-dev-dsp-x.web.app	privacy-sandbox-attestations.dat.0.dr	false		high
https://authorizedvault.com	privacy-sandbox-attestations.dat.0.dr	false		high
https://privacy-sandcastle-dev-ssp-y.web.app	privacy-sandbox-attestations.dat.0.dr	false		high
https://sportradarserving.com	privacy-sandbox-attestations.dat.0.dr	false		high
https://semafor.com	privacy-sandbox-attestations.dat.0.dr	false		high
https://lwadm.com	privacy-sandbox-attestations.dat.0.dr	false		high
https://appconsent.io	privacy-sandbox-attestations.dat.0.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.36.248	sso-robinhood-net--cdn-auth.webflow.io	United States	13335	CLOUDFLARENETUS	true
142.250.184.196	www.google.com	United States	15169	GOOGLEUS	false
104.18.160.117	unknown	United States	13335	CLOUDFLARENETUS	false
104.18.161.117	cdn.prod.website-files.com	United States	13335	CLOUDFLARENETUS	false
52.222.232.144	d3e54v103j8qbb.cloudfront.net	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.9
192.168.2.6

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1642765
Start date and time:	2025-03-19 10:59:23 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 13s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://sso-robinhood-net--cdn-auth.webflow.io/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal60.phis.win@29/20@33/7
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): sppsvc.exe, SIHClient.exe, SgrmBroker.exe, TextInputHost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.99, 172.217.16.206, 142.250.185.78, 64.233.167.84, 172.217.18.14, 173.194.76.84, 142.250.184.238, 2.16.164.17, 142.250.184.206, 216.58.206.78, 142.250.185.142, 172.217.23.110, 142.250.185.227, 142.250.185.110, 34.104.35.123, 216.58.206.67, 199.232.210.172, 4.175.87.197, 2.23.227.208, 23.60.203.209
Excluded domains from analysis (whitelisted): www.bing.com, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, dns.msftncsi.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com, c.pki.goog
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://sso-robinhood-net--cdn-auth.webflow.io/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1792
Entropy (8bit):	6.019348476983808
Encrypted:	false
SSDEEP:	48:p/hP+drAdRW37aktiyC2xCe69xqYGCRk7NOzPI4Ek:RSQw37anyC+CDGGccA4f
MD5:	0F48EA696FDF31DABB72FD4A472E4A93
SHA1:	A24862DAB4B7146073F74165D733E8EDA45C5185
SHA-256:	57645239B1AECD3BFF0EDF2C489A55221855D4DD690541F57129449D34DC2CE6
SHA-512:	1A32EE516B00800EBE49A17D0DC05A0A21589016A28A6B0CA2934A951DF0E09CDF46B75A9DE7AF62435807DF1EEB10F128284E03AD84A324F7F71EE9AD191CBF
Malicious:	false
Reputation:	low
Preview:	[{"description":"treehash per file","signed_content":{"payload":"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","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"D1yGWCJ13w_a4aZS-GmRy1UaSnKuPyDaexx705PHm_LYjgxXA8UjTQ9bScleEJZkORAwk9gKs65NUkOIZOPGdPUDhQg3gDWqrESXFzPZk4RzaEwwlPh-33zUE0qWXcz4FwKu1WGN_Ok4HrKRgdihn7ea4OvP8VqvfNRP56CMpOuQxMLdGtj33weeTm9wBG2D-g2De2hqPBC6G0Jr9FnJ_wLkuNsuMmotIuVgQMViTCStpvxyrUiSyBwWdJH9By924Uu66zgVGLnpcv5tMoSwVylMy3ouQ3_lj2ul-hu5YJa7RzW2gOxCwb7ZtnFkfFx

C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4376_1121715122\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.9364303497856072
Encrypted:	false
SSDEEP:	3:SQ/SHHHWbcM8VH5DM/4+MlRddVGWSDn:SQ/+HNMEZR+MlPdVGWSD
MD5:	ABB7EA6FFEFB13622CB47C36A07B9175
SHA1:	E593E3B6161F9DF88BACBEF7987BF76F3A886FD5
SHA-256:	6AC28AE1C8DFDE9830AC0B6C6DF657731FB2C895701AFE13F5682F82C5C69137
SHA-512:	5F514012BDD35FB413288E161BD0277EB89AC8B0204C1D63603DDEF119946E77D71DCBFD5D2A7694D945595029538F43D0C00DABC2CE2820528EFAEBB121018B
Malicious:	false
Reputation:	low
Preview:	1.5c635bbbb3bfc63910e29a0be9ff5ee0990cca2d3aaa56e4f4cd2c480c81b7df

C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4376_1121715122\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	97
Entropy (8bit):	4.60145350054745
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifF1mYTdFKS1oMUm:F6VlMXdTHKS1oVm
MD5:	A6B4EE3137180CAD95E7BEFB62CBF122
SHA1:	FA26A56140944B21D6A1ECC7FB3EFC0D97D3EF23
SHA-256:	A1742392406FF6DD5BFD1B2C080EB66BBD7474561A62FD8AB3CCD8300597135D
SHA-512:	35AE8B940797600B727DACED0ACF856263D219697DB923747D745D990C8798ADA5159AC36544A6EC5952F74809D5489A371C6BB44325DEE7BBE52965240188E0
Malicious:	false
Reputation:	low
Preview:	{. "manifest_version": 2,. "name": "Privacy Sandbox Attestations",. "version": "2025.3.12.0".}

C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4376_1121715122\privacy-sandbox-attestations.dat

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	7422
Entropy (8bit):	5.070572988249595
Encrypted:	false
SSDEEP:	192:I+0f6TueVE9GihNKybjrbgfJsSCiJig+pBWh3zJmOlwy1T:R0f6TudccKybbghsSCeig+vW31m7YT
MD5:	BA9EB9F524A133FEB268463CE7BE918D
SHA1:	B91835A18402B8652939B5A25F8DDF1DBD0418A0
SHA-256:	5103766F23C8FE7FD12DC97F4B8671BC954943BCECFCA4842346E9F2F5FB27AD
SHA-512:	8FC4B4C4EDDC5EF2ADDAD4FBC52A289C5F59018AAD09A8891AE0F4457908153632B6575155A2256EA13754C1EB329AC9F93050316A3F27429B9CFAC06D9725A0
Malicious:	false
Reputation:	low
Preview:	.........https://2k.com..https://33across.com..https://360yield.com..https://3lift.com..https://ad-score.com..https://ad.gt..https://adentifi.com..https://adform.net..https://adingo.jp..https://admatrix.jp..https://admixer.net..https://adnami.io..https://adnxs.com..https://adsafeprotected.com..https://adsrvr.org..https://adthrive.com..https://advividnetwork.com.Nhttps://aggregation-service-site-dot-clz200258-datateam-italy.ew.r.appspot.com..https://anonymised.io..https://aphub.ai..https://appier.net..https://avads.net..https://ayads.io..https://bidswitch.net..https://bidtheatre.net..https://bing.com..https://blendee.com..https://bounceexchange.com..https://bypass.jp..https://casalemedia.com..https://cdn-net.com..https://clickonometrics.pl..https://connected-stories.com..https://crcldu.com..https://creativecdn.com..https://criteo.com..https://ctnsnet.com..https://dabbs.net..https://daum.net..https://display.io..https://dotdashmeredith.com..https://dotomi.com..https://doubleclick.net..ht

Chrome Cache Entry: 56

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (2587)
Category:	downloaded
Size (bytes):	36230
Entropy (8bit):	5.229407486730831
Encrypted:	false
SSDEEP:	768:AyNf7A1RE/GqyFVF54mkxWaIi1aUuF9Zl0F6FhF8FPqkowKji/JVx1:Aye1REeqyP0XcPyjowKjK
MD5:	CE67EEE42C89568CEA3E40F6459BEBDB
SHA1:	2893E67BA934122231F741F77F24BB2F0DFEAED6
SHA-256:	C219BD77B1A92CCD8E6A3EE098A0BC34A65F56C666660FF934B4638D4AD681F3
SHA-512:	50F0AE74E0FA09ADA3CE88D6518F02835D77665FC0817724EFE068806C3F2C89BFE3035C65EC55020A22F0E69B61C8977948A4E0D631BE2D193464F7F8922FB5
Malicious:	false
Reputation:	low
URL:	https://cdn.prod.website-files.com/678a174507adb9ecf0e5709b/css/sso-robinhood-net--cdn-auth.webflow.ce67eee42.css
Preview:	html {. -webkit-text-size-adjust: 100%;. -ms-text-size-adjust: 100%;. font-family: sans-serif;.}..body {. margin: 0;.}..article, aside, details, figcaption, figure, footer, header, hgroup, main, menu, nav, section, summary {. display: block;.}..audio, canvas, progress, video {. vertical-align: baseline;. display: inline-block;.}..audio:not([controls]) {. height: 0;. display: none;.}..[hidden], template {. display: none;.}..a {. background-color: #0000;.}..a:active, a:hover {. outline: 0;.}..abbr[title] {. border-bottom: 1px dotted;.}..b, strong {. font-weight: bold;.}..dfn {. font-style: italic;.}..h1 {. margin: .67em 0;. font-size: 2em;.}..mark {. color: #000;. background: #ff0;.}..small {. font-size: 80%;.}..sub, sup {. vertical-align: baseline;. font-size: 75%;. line-height: 0;. position: relative;.}..sup {. top: -.5em;.}..sub {. bottom: -.25em;.}..img {. border: 0;.}..svg:not(:root) {. overflow: hidden;.}..hr {. box-sizing: content-box;. height: 0;.}..

Chrome Cache Entry: 57

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21513)
Category:	downloaded
Size (bytes):	37349
Entropy (8bit):	5.44100455597547
Encrypted:	false
SSDEEP:	768:G5p9WeNujJ4zgTyxOv5GAUdxKzPQfsJe184wEWpqvyqL/q:G5p9WeNul4zC5jMkOyqO
MD5:	FC7EF472A2BCA6FBDB8AB8235DEC64E0
SHA1:	39637DA0AC71621757C5CEE728307E30A9D7FE61
SHA-256:	D148CEDE7C0523EBC7C9FBBA7F4EB5AD8D2C7A449814A9177190F20708D31AAB
SHA-512:	72CCEBC092F1D2A32AD8A29E312207870FADD08178862B2132E3A0CCC6316B3C9FBFD83DCECECA96E23FB86F1B378CA611B79E4790B602CDDE235F16E7D31210
Malicious:	false
Reputation:	low
URL:	https://cdn.prod.website-files.com/678a174507adb9ecf0e5709b/js/webflow.77ac24386eb2a8dacabbd68092c045ec.js
Preview:	./!. Webflow: Front-end site library. * @license MIT. * Inline scripts may access the api using an async handler:. * var Webflow = Webflow \|\| [];. * Webflow.push(readyFunction);. /..(()=>{var lt=(e,y)=>()=>(y\|\|e((y={exports:{}}).exports,y),y.exports);var Pt=lt(()=>{"use strict";window.tram=function(e){function y(t,n){var i=new J.Bare;return i.init(t,n)}function l(t){return t.replace(/[A-Z]/g,function(n){return"-"+n.toLowerCase()})}function T(t){var n=parseInt(t.slice(1),16),i=n>>16&255,r=n>>8&255,s=255&n;return[i,r,s]}function C(t,n,i){return"#"+(1<<24\|t<<16\|n<<8\|i).toString(16).slice(1)}function g(){}function L(t,n){B("Type warning: Expected: ["+t+"] Got: ["+typeof n+"] "+n)}function _(t,n,i){B("Units do not match ["+t+"]: "+n+", "+i)}function I(t,n,i){if(n!==void 0&&(i=n),t===void 0)return i;var r=i;return we.test(t)\|\|!Xt.test(t)?r=parseInt(t,10):Xt.test(t)&&(r=1e3parseFloat(t)),0>r&&(r=0),r===r?r:i}function B(t){et.debug&&window&&window.console.warn(t)}function U(t){for(var

Chrome Cache Entry: 58

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1348 x 768, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	544845
Entropy (8bit):	7.994826952111587
Encrypted:	true
SSDEEP:	12288:5iMxt4uS0ktCT9BHI6vr1RUunodhs0aY5ZbcnVSYtFCC3l:57xnX8CRB7vr1uuodhXbcnVFT3l
MD5:	35BAA4C2960F7ADAA6F26CC982435555
SHA1:	CD19A546FAFFE2EE076AE098BD7B4E1020BB3CEA
SHA-256:	EA591836E01D6D30A24617BD80F40E8C69EEE2716A193D9ADBE835DD91354146
SHA-512:	CFBA6922813605BCDB264E812B0811167E98A7FD8462D1C6CB6390C98A3828669485C55731EF441054F78E560703A2F17513142F70FBFA2E6A59BB892EF9AAC7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...D..........em... .IDATx^.}..diU..s..'..ldY. H........(...."J.........I........CO.........z]].Uz.f.~......;_>..{.Dd..hQ...E@.P...E@.P...E@.P...E@.P...E.G.@.......E@.P...E@.P...E@.P...E@.P...E ........E@.P...E@.P...E@.P...E@.P...E..A@......C..E@.P...E@.P...E@.P...E@.P...E@.Q...."..(..."..(..."..(..."..(..."p. .........."..(..."..(..."..(..."..(...".....E@.P...E@.P...E@.P...E@.P...E@..a.PB.ij.PE@.P...E@.P...E@.P...E@.P...E@.PBT.."..(..."..(..."..(..."..(..(.+V....ur.]wIss.466..n.2==-.N....)...{.....+/ `...Mo...!)--...b)( .w...E........g.\|.c.....G....h ..K..E@.P...E@.P...E@.P...E@.H........^JJJ.+_.....?.......?......U....!\|.=..K^...\|..\|.....}.s.\|....~y.s.+......Zy....[.........UVB.W..e.."..(..."..(..."..(..."......o{...{...\|.#..........N*2......4!9../\|....^.....Z.w.....,.}.{....J.f....(..."..(..."..(..."..(.............9rD....+......a...?(......T.;........o\|..RUU..z...N.>m...."..hN..+..."..(..."..(..."..(..."........o..(.....9...w..o4

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	803
Entropy (8bit):	7.582551628276611
Encrypted:	false
SSDEEP:	12:6v/7iQ/6mUO77GjYE1NfSxipER2CJUsWIZGj8fWWHIZ90C6IhHeBs9c+8DVDnb8d:PmUOXkYcpfpc2C6HgJe9l+Bs++8Jajn
MD5:	C8F0CEF2D937562902DAA9C3C0B67CA3
SHA1:	99D0D6C68F2C00ACF5CB853A402AF4D18690C0F6
SHA-256:	73862EF843D3D50565F0495EC3C08ACB45E0DA61968DBC54D431232E86B44278
SHA-512:	44E35CD1909D50DEF4A518EF818E1D751F15F1475BFA781209D76CBC6D4E69537034FFED48D95F921821DCE77E9F847F0BD27D5CA00C901E90D75405CADC1A77
Malicious:	false
Reputation:	low
URL:	https://cdn.prod.website-files.com/678a174507adb9ecf0e5709b/678a1771bbb1a2124595aab5_dgdgdg.png
Preview:	.PNG........IHDR... ... .....szz.....sRGB.........gAMA......a.....pHYs..........o.d....IDATXG.Mh.A...Mv7.[.."b......../.TK. R..T.... ..^...G..T......z.....4E..!z..ZKmK...d.o......M#..e33a.......T......S... oI....?..s....\....0.:/.z:.\=.@p...%.8....0Vo.....t..^.qa...F.k...U.[......D.<E~g...g.e.o.!.....!..z..'....;..tJ..@...?....=<..p ...kz.]Q...o....N.l%.........i.......k...\|..q.t.....X..Y.PW..n..Z..]2Nn+...`.u.e...^.....8..n.e.8\|M.4.s.K .?w..=.a...f.....{..-`Z..#...l..7.K%...!.....Y@W;e..oc..d..sT..\|g.9'..f........-...t..\|..8pRh....5..H..D......?.,....)Q,bY@..(F.8<n3..v.m....%&.....R...>.m..P.NWzbX.....`.0.oC.v..P.}..x......-..;.Vr.....h.......c8.P<]E..z....b-.&b..F.$x...!J..H@.0..7...A.k......uq.S./...!3.lV1.......V..9@#..v,.~........\|../...X...k...0V.....IEND.B`.

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	803
Entropy (8bit):	7.582551628276611
Encrypted:	false
SSDEEP:	12:6v/7iQ/6mUO77GjYE1NfSxipER2CJUsWIZGj8fWWHIZ90C6IhHeBs9c+8DVDnb8d:PmUOXkYcpfpc2C6HgJe9l+Bs++8Jajn
MD5:	C8F0CEF2D937562902DAA9C3C0B67CA3
SHA1:	99D0D6C68F2C00ACF5CB853A402AF4D18690C0F6
SHA-256:	73862EF843D3D50565F0495EC3C08ACB45E0DA61968DBC54D431232E86B44278
SHA-512:	44E35CD1909D50DEF4A518EF818E1D751F15F1475BFA781209D76CBC6D4E69537034FFED48D95F921821DCE77E9F847F0BD27D5CA00C901E90D75405CADC1A77
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....sRGB.........gAMA......a.....pHYs..........o.d....IDATXG.Mh.A...Mv7.[.."b......../.TK. R..T.... ..^...G..T......z.....4E..!z..ZKmK...d.o......M#..e33a.......T......S... oI....?..s....\....0.:/.z:.\=.@p...%.8....0Vo.....t..^.qa...F.k...U.[......D.<E~g...g.e.o.!.....!..z..'....;..tJ..@...?....=<..p ...kz.]Q...o....N.l%.........i.......k...\|..q.t.....X..Y.PW..n..Z..]2Nn+...`.u.e...^.....8..n.e.8\|M.4.s.K .?w..=.a...f.....{..-`Z..#...l..7.K%...!.....Y@W;e..oc..d..sT..\|g.9'..f........-...t..\|..8pRh....5..H..D......?.,....)Q,bY@..(F.8<n3..v.m....%&.....R...>.m..P.NWzbX.....`.0.oC.v..P.}..x......-..;.Vr.....h.......c8.P<]E..z....b-.&b..F.$x...!J..H@.0..7...A.k......uq.S./...!3.lV1.......V..9@#..v,.~........\|../...X...k...0V.....IEND.B`.

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	81369
Entropy (8bit):	5.291887605773591
Encrypted:	false
SSDEEP:	1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0Q/:AYh8eip3huuf6Iidl2
MD5:	37A252F53522A0993CE5A0C1A0A79DE1
SHA1:	BA57881A444FA0A98D477CE65C3B1B41845520AF
SHA-256:	EE8C8EE6BBB69AE67388DEECFC7C43DEF7380B84A41C3036890A84B6BFEC27EC
SHA-512:	A4808423220C3B964B7ECD1C60A9052BAF56CE51C8158CF5933ECEBB75C70123A69F50C6A16FFAB2DF60A333901148708DD1D67252C1610A244CF190E09448BD
Malicious:	false
Reputation:	low
URL:	https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=678a174507adb9ecf0e5709b
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (3233), with no line terminators
Category:	downloaded
Size (bytes):	3234
Entropy (8bit):	5.385848704397079
Encrypted:	false
SSDEEP:	96:NLySPu6f/O4jbdLTi/8bp7ifL7iNt7ij7i/7il1f:NZWN4vd3BpWjWNtWjW/Wl1f
MD5:	A7D41D0F636FFC12F7721E7C45844612
SHA1:	AC7C83D4512685F11482DEEDF4F048886A049C98
SHA-256:	9097DED8DC87FB3DB43E9630118EBAC45834E6F922A8D3C647767E8B090560F1
SHA-512:	66D68D5AB9785A8F03666F574100305629D70190DB86B7291B52219F85E018B6036D5FA929813A9A79216CE8DD6457A080F07E14E6536BFFAABF611701D0EAD6
Malicious:	false
Reputation:	low
URL:	https://sso-robinhood-net--cdn-auth.webflow.io/
Preview:	<!DOCTYPE html> This site was created in Webflow. https://webflow.com --> Last Published: Fri Jan 17 2025 08:41:20 GMT+0000 (Coordinated Universal Time) --><html data-wf-domain="sso-robinhood-net--cdn-auth.webflow.io" data-wf-page="678a174507adb9ecf0e570a5" data-wf-site="678a174507adb9ecf0e5709b" data-wf-status="1"><head><meta charset="utf-8"/><title>Log In \| Robinhood. \| Sign In to Your Account \| Robinhood Login</title><meta content="Robinhood Login is a commission-free trading platform that simplifies investing in stocks, ETFs, options, and cryptocurrencies. With a user-friendly interface, it has gained popularity among beginners and seasoned traders alike. Whether you're looking to start your first investment portfolio or refine an existing strategy, Robinhood provides a seamless platform to trade with confidence." name="description"/><meta content="width=device-width, initial-scale=1" name="viewport"/><meta content="Webflow" name="generator"/><link href="https://cdn.p

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6914)
Category:	downloaded
Size (bytes):	6919
Entropy (8bit):	5.796686198912573
Encrypted:	false
SSDEEP:	192:pcnhL6B7UcUKliS5BjD3OXN6666V/bphOwhwf5X:SDcUvSLy6666BbjdC5X
MD5:	5C6055807D82B1E01D0A90E3D40BCE18
SHA1:	FA8C9F65957320009A62BDF235D12D154078D6E7
SHA-256:	DA642608B8D40B948856BA137439D5070D65709B9FE04E234415B4FE5F511D23
SHA-512:	84B7C0228DA9FA457F500B5BED06552A23157CCA1F002E8C9887DAADC8F567C0994932BD1C9BA9E46BF9E5DE0D4C802E57863D8D8CCEA11FD077D114402C9237
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE
Preview:	)]}'.["",["zdf mediathek streaming","limburg zug lkw","google pixel 9a","bvb borussia dortmund","byd auto","emilie dequenne","opel zoo giraffenbaby","xenoblade chronicles x nintendo switch"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"CiAIkk4SGwoXVHJlbmRzIGJlaSBTdWNoYW5mcmFnZW4oCg\u003d\u003d","google:suggestdetail":[{"zl":10002},{"zl":10002},{"zl":10002},{"google:entityinfo":"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

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1348 x 768, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	544845
Entropy (8bit):	7.994826952111587
Encrypted:	true
SSDEEP:	12288:5iMxt4uS0ktCT9BHI6vr1RUunodhs0aY5ZbcnVSYtFCC3l:57xnX8CRB7vr1uuodhXbcnVFT3l
MD5:	35BAA4C2960F7ADAA6F26CC982435555
SHA1:	CD19A546FAFFE2EE076AE098BD7B4E1020BB3CEA
SHA-256:	EA591836E01D6D30A24617BD80F40E8C69EEE2716A193D9ADBE835DD91354146
SHA-512:	CFBA6922813605BCDB264E812B0811167E98A7FD8462D1C6CB6390C98A3828669485C55731EF441054F78E560703A2F17513142F70FBFA2E6A59BB892EF9AAC7
Malicious:	false
Reputation:	low
URL:	https://cdn.prod.website-files.com/678a174507adb9ecf0e5709b/678a175f2b47ac7e1e8eb33f_Screenshot%202025-01-08%20at%2013-39-14%20Commission-free%20Stock%20Trading%20%26%20Investing%20App%20Robinhood.png
Preview:	.PNG........IHDR...D..........em... .IDATx^.}..diU..s..'..ldY. H........(...."J.........I........CO.........z]].Uz.f.~......;_>..{.Dd..hQ...E@.P...E@.P...E@.P...E@.P...E.G.@.......E@.P...E@.P...E@.P...E@.P...E ........E@.P...E@.P...E@.P...E@.P...E..A@......C..E@.P...E@.P...E@.P...E@.P...E@.Q...."..(..."..(..."..(..."..(..."p. .........."..(..."..(..."..(..."..(...".....E@.P...E@.P...E@.P...E@.P...E@..a.PB.ij.PE@.P...E@.P...E@.P...E@.P...E@.PBT.."..(..."..(..."..(..."..(..(.+V....ur.]wIss.466..n.2==-.N....)...{.....+/ `...Mo...!)--...b)( .w...E........g.\|.c.....G....h ..K..E@.P...E@.P...E@.P...E@.H........^JJJ.+_.....?.......?......U....!\|.=..K^...\|..\|.....}.s.\|....~y.s.+......Zy....[.........UVB.W..e.."..(..."..(..."..(..."......o{...{...\|.#..........N*2......4!9../\|....^.....Z.w.....,.}.{....J.f....(..."..(..."..(..."..(.............9rD....+......a...?(......T.;........o\|..RUU..z...N.>m...."..hN..+..."..(..."..(..."..(..."........o..(.....9...w..o4

Total Packets: 427
• 443 (HTTPS)
• 80 (HTTP)
• 53 (DNS)

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 19, 2025 11:00:19.290612936 CET	49673	443	192.168.2.9	2.23.227.215
Mar 19, 2025 11:00:24.910487890 CET	49676	80	192.168.2.9	2.23.73.143
Mar 19, 2025 11:00:24.910535097 CET	49677	443	192.168.2.9	2.19.104.63
Mar 19, 2025 11:00:27.421078920 CET	49691	443	192.168.2.9	142.250.184.196
Mar 19, 2025 11:00:27.421108007 CET	443	49691	142.250.184.196	192.168.2.9
Mar 19, 2025 11:00:27.421186924 CET	49691	443	192.168.2.9	142.250.184.196
Mar 19, 2025 11:00:27.421442986 CET	49691	443	192.168.2.9	142.250.184.196
Mar 19, 2025 11:00:27.421453953 CET	443	49691	142.250.184.196	192.168.2.9
Mar 19, 2025 11:00:27.456348896 CET	443	49691	142.250.184.196	192.168.2.9
Mar 19, 2025 11:00:27.456412077 CET	49691	443	192.168.2.9	142.250.184.196
Mar 19, 2025 11:00:27.457873106 CET	49691	443	192.168.2.9	142.250.184.196
Mar 19, 2025 11:00:27.458266020 CET	443	49691	142.250.184.196	192.168.2.9
Mar 19, 2025 11:00:27.503206968 CET	49691	443	192.168.2.9	142.250.184.196
Mar 19, 2025 11:00:28.890836000 CET	49673	443	192.168.2.9	2.23.227.215
Mar 19, 2025 11:00:28.953064919 CET	49692	443	192.168.2.9	104.18.36.248
Mar 19, 2025 11:00:28.953119993 CET	443	49692	104.18.36.248	192.168.2.9
Mar 19, 2025 11:00:28.953321934 CET	49692	443	192.168.2.9	104.18.36.248
Mar 19, 2025 11:00:28.953687906 CET	49693	443	192.168.2.9	104.18.36.248
Mar 19, 2025 11:00:28.953712940 CET	443	49693	104.18.36.248	192.168.2.9
Mar 19, 2025 11:00:28.953779936 CET	49693	443	192.168.2.9	104.18.36.248
Mar 19, 2025 11:00:28.953891039 CET	49693	443	192.168.2.9	104.18.36.248
Mar 19, 2025 11:00:28.953902960 CET	443	49693	104.18.36.248	192.168.2.9
Mar 19, 2025 11:00:28.954391956 CET	49692	443	192.168.2.9	104.18.36.248
Mar 19, 2025 11:00:28.954411983 CET	443	49692	104.18.36.248	192.168.2.9
Mar 19, 2025 11:00:28.983922005 CET	443	49693	104.18.36.248	192.168.2.9
Mar 19, 2025 11:00:28.983994961 CET	49693	443	192.168.2.9	104.18.36.248
Mar 19, 2025 11:00:28.985295057 CET	49693	443	192.168.2.9	104.18.36.248
Mar 19, 2025 11:00:28.985564947 CET	443	49693	104.18.36.248	192.168.2.9
Mar 19, 2025 11:00:28.985873938 CET	49693	443	192.168.2.9	104.18.36.248
Mar 19, 2025 11:00:28.986078978 CET	443	49692	104.18.36.248	192.168.2.9
Mar 19, 2025 11:00:28.986181974 CET	49692	443	192.168.2.9	104.18.36.248
Mar 19, 2025 11:00:28.987833977 CET	49692	443	192.168.2.9	104.18.36.248
Mar 19, 2025 11:00:28.988074064 CET	443	49692	104.18.36.248	192.168.2.9
Mar 19, 2025 11:00:29.028337002 CET	443	49693	104.18.36.248	192.168.2.9
Mar 19, 2025 11:00:29.039406061 CET	49692	443	192.168.2.9	104.18.36.248
Mar 19, 2025 11:00:29.060990095 CET	443	49693	104.18.36.248	192.168.2.9
Mar 19, 2025 11:00:29.061043024 CET	443	49693	104.18.36.248	192.168.2.9
Mar 19, 2025 11:00:29.061319113 CET	49693	443	192.168.2.9	104.18.36.248
Mar 19, 2025 11:00:29.061341047 CET	443	49693	104.18.36.248	192.168.2.9
Mar 19, 2025 11:00:29.061604977 CET	443	49693	104.18.36.248	192.168.2.9
Mar 19, 2025 11:00:29.061664104 CET	49693	443	192.168.2.9	104.18.36.248
Mar 19, 2025 11:00:29.062352896 CET	49693	443	192.168.2.9	104.18.36.248
Mar 19, 2025 11:00:29.062366962 CET	443	49693	104.18.36.248	192.168.2.9
Mar 19, 2025 11:00:29.091793060 CET	49694	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.091840029 CET	443	49694	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.091918945 CET	49694	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.091968060 CET	49695	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.092001915 CET	443	49695	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.092052937 CET	49695	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.092202902 CET	49694	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.092217922 CET	443	49694	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.092319012 CET	49695	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.092331886 CET	443	49695	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.093470097 CET	49696	443	192.168.2.9	52.222.232.144
Mar 19, 2025 11:00:29.093502998 CET	443	49696	52.222.232.144	192.168.2.9
Mar 19, 2025 11:00:29.093569040 CET	49696	443	192.168.2.9	52.222.232.144
Mar 19, 2025 11:00:29.093735933 CET	49696	443	192.168.2.9	52.222.232.144
Mar 19, 2025 11:00:29.093750954 CET	443	49696	52.222.232.144	192.168.2.9
Mar 19, 2025 11:00:29.123867989 CET	443	49694	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.123986006 CET	49694	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.124808073 CET	443	49696	52.222.232.144	192.168.2.9
Mar 19, 2025 11:00:29.124876976 CET	49696	443	192.168.2.9	52.222.232.144
Mar 19, 2025 11:00:29.126214027 CET	49694	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.126508951 CET	443	49694	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.127363920 CET	49696	443	192.168.2.9	52.222.232.144
Mar 19, 2025 11:00:29.127626896 CET	443	49696	52.222.232.144	192.168.2.9
Mar 19, 2025 11:00:29.128531933 CET	49694	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.129920006 CET	49696	443	192.168.2.9	52.222.232.144
Mar 19, 2025 11:00:29.130212069 CET	443	49695	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.130270004 CET	49695	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.132463932 CET	49695	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.132764101 CET	443	49695	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.133332014 CET	49695	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.143497944 CET	443	49696	52.222.232.144	192.168.2.9
Mar 19, 2025 11:00:29.143522024 CET	443	49696	52.222.232.144	192.168.2.9
Mar 19, 2025 11:00:29.143537998 CET	443	49696	52.222.232.144	192.168.2.9
Mar 19, 2025 11:00:29.143608093 CET	49696	443	192.168.2.9	52.222.232.144
Mar 19, 2025 11:00:29.143639088 CET	443	49696	52.222.232.144	192.168.2.9
Mar 19, 2025 11:00:29.143682003 CET	49696	443	192.168.2.9	52.222.232.144
Mar 19, 2025 11:00:29.147414923 CET	443	49696	52.222.232.144	192.168.2.9
Mar 19, 2025 11:00:29.147433043 CET	443	49696	52.222.232.144	192.168.2.9
Mar 19, 2025 11:00:29.147471905 CET	49696	443	192.168.2.9	52.222.232.144
Mar 19, 2025 11:00:29.147495031 CET	443	49696	52.222.232.144	192.168.2.9
Mar 19, 2025 11:00:29.147524118 CET	49696	443	192.168.2.9	52.222.232.144
Mar 19, 2025 11:00:29.147545099 CET	49696	443	192.168.2.9	52.222.232.144
Mar 19, 2025 11:00:29.150784016 CET	443	49696	52.222.232.144	192.168.2.9
Mar 19, 2025 11:00:29.150801897 CET	443	49696	52.222.232.144	192.168.2.9
Mar 19, 2025 11:00:29.150890112 CET	49696	443	192.168.2.9	52.222.232.144
Mar 19, 2025 11:00:29.150913954 CET	443	49696	52.222.232.144	192.168.2.9
Mar 19, 2025 11:00:29.151151896 CET	49696	443	192.168.2.9	52.222.232.144
Mar 19, 2025 11:00:29.154383898 CET	443	49696	52.222.232.144	192.168.2.9
Mar 19, 2025 11:00:29.154409885 CET	443	49696	52.222.232.144	192.168.2.9
Mar 19, 2025 11:00:29.154443026 CET	49696	443	192.168.2.9	52.222.232.144
Mar 19, 2025 11:00:29.154457092 CET	443	49696	52.222.232.144	192.168.2.9
Mar 19, 2025 11:00:29.154479980 CET	49696	443	192.168.2.9	52.222.232.144
Mar 19, 2025 11:00:29.154498100 CET	49696	443	192.168.2.9	52.222.232.144
Mar 19, 2025 11:00:29.157119989 CET	443	49696	52.222.232.144	192.168.2.9
Mar 19, 2025 11:00:29.157138109 CET	443	49696	52.222.232.144	192.168.2.9
Mar 19, 2025 11:00:29.157207966 CET	49696	443	192.168.2.9	52.222.232.144
Mar 19, 2025 11:00:29.157211065 CET	443	49696	52.222.232.144	192.168.2.9
Mar 19, 2025 11:00:29.157257080 CET	49696	443	192.168.2.9	52.222.232.144
Mar 19, 2025 11:00:29.157653093 CET	49696	443	192.168.2.9	52.222.232.144
Mar 19, 2025 11:00:29.157675028 CET	443	49696	52.222.232.144	192.168.2.9
Mar 19, 2025 11:00:29.176333904 CET	443	49694	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.176342010 CET	443	49695	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.187071085 CET	443	49695	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.187176943 CET	443	49695	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.187236071 CET	443	49695	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.187280893 CET	49695	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.187293053 CET	443	49695	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.187305927 CET	443	49695	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.187388897 CET	49695	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.187645912 CET	443	49695	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.187763929 CET	49695	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.187778950 CET	443	49695	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.187999010 CET	443	49695	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.188059092 CET	49695	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.188060045 CET	443	49695	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.188072920 CET	443	49695	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.188146114 CET	49695	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.190706968 CET	443	49694	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.190747976 CET	443	49694	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.190913916 CET	49694	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.190934896 CET	443	49694	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.191075087 CET	443	49694	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.191098928 CET	443	49694	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.191123962 CET	443	49694	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.191140890 CET	49694	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.191147089 CET	443	49694	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.191167116 CET	49694	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.191698074 CET	443	49694	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.191742897 CET	49694	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.191746950 CET	443	49694	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.192130089 CET	443	49695	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.192246914 CET	443	49695	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.192542076 CET	49695	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.192559004 CET	443	49695	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.193116903 CET	443	49695	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.193172932 CET	49695	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.193181992 CET	443	49695	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.193242073 CET	443	49695	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.193299055 CET	443	49695	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.193341017 CET	49695	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.193350077 CET	443	49695	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.193566084 CET	49695	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.194072962 CET	443	49694	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.194106102 CET	443	49695	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.194133043 CET	49694	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.194137096 CET	443	49694	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.194253922 CET	443	49695	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.194325924 CET	443	49695	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.194353104 CET	49695	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.194360971 CET	443	49695	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.194422007 CET	49695	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.194438934 CET	443	49695	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.195127010 CET	443	49695	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.195199966 CET	443	49695	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.195269108 CET	49695	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.195283890 CET	443	49695	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.195440054 CET	49695	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.195446014 CET	443	49695	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.195997953 CET	443	49695	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.196093082 CET	49695	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.196104050 CET	443	49695	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.196136951 CET	443	49695	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.196221113 CET	49695	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.196221113 CET	443	49694	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.196248055 CET	443	49694	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.196273088 CET	49694	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.196293116 CET	443	49694	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.196338892 CET	49694	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.196777105 CET	443	49694	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.196841955 CET	443	49694	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.196868896 CET	443	49694	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.196919918 CET	49694	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.196930885 CET	443	49694	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.197680950 CET	443	49694	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.197709084 CET	443	49694	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.197726965 CET	49694	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.197736979 CET	443	49694	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.197909117 CET	49694	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.198087931 CET	443	49694	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.198137999 CET	49695	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.198162079 CET	443	49695	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.198582888 CET	443	49694	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.198627949 CET	443	49694	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.198642015 CET	49694	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.198652983 CET	443	49694	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.198811054 CET	49694	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.198817015 CET	443	49694	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.199081898 CET	443	49694	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.199170113 CET	443	49694	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.199201107 CET	49694	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.199224949 CET	49694	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.201364040 CET	49694	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.201395035 CET	443	49694	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.225898027 CET	49698	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.225946903 CET	443	49698	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.226125956 CET	49698	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.226396084 CET	49698	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.226416111 CET	443	49698	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.253546000 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.253598928 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.253679037 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.254301071 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.254334927 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.263905048 CET	443	49698	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.264326096 CET	49698	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.264600039 CET	49698	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.264610052 CET	443	49698	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.284499884 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.295641899 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.296753883 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.296781063 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.334083080 CET	443	49698	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.334177971 CET	443	49698	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.334502935 CET	49698	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.336194992 CET	49698	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.336219072 CET	443	49698	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.358795881 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.358933926 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.359009027 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.359025955 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.359085083 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.359164000 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.359184027 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.359275103 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.359366894 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.359421015 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.359436989 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.359484911 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.359498978 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.359586000 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.359652996 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.359668016 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.363500118 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.363616943 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.363619089 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.363651037 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.363707066 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.363742113 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.363907099 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.363956928 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.363971949 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.364073038 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.364145994 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.364156961 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.364181042 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.364270926 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.364506006 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.364679098 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.364862919 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.364933014 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.364948988 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.364998102 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.365010977 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.366025925 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.366125107 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.366127968 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.366156101 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.366255045 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.366269112 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.366381884 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.366451025 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.366463900 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.368040085 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.368129969 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.368144035 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.368335009 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.368421078 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.368428946 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.368457079 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.368716002 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.368802071 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.368810892 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.368839025 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.368942022 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.368951082 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.368994951 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.369129896 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.369609118 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.369694948 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.369703054 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.370174885 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.370233059 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.370240927 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.370275974 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.370281935 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.370434046 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.370488882 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.370496988 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.370536089 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.371021032 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.371081114 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.371592045 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.371653080 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.371915102 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.371985912 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.372371912 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.372443914 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.372819901 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.372939110 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.373270988 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.373348951 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.373616934 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.373675108 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.373858929 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.373910904 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.374329090 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.374424934 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.374711990 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.374818087 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.375260115 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.375303984 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.375339031 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.375363111 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.375369072 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.375401974 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.375401974 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.375581980 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.376277924 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.376328945 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.376349926 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.376355886 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.376367092 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.376385927 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.376418114 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.376421928 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.377239943 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.377279043 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.377293110 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.377305984 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.377331018 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.378032923 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.378103971 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.378133059 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.378139019 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.378166914 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.379033089 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.379076004 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.379110098 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.379117012 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.379146099 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.379934072 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.379973888 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.379987001 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.379996061 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.380006075 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.380023003 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.380047083 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.380052090 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.380721092 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.380759954 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.380781889 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.380788088 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.380806923 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.380814075 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.380840063 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.381793022 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.381834984 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.381864071 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.381866932 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.381880045 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.381915092 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.381942987 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.382740021 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.382788897 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.382793903 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.382800102 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.382822037 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.382831097 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.382848024 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.382852077 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.382884979 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.383654118 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.383692980 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.383725882 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.383734941 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.383739948 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.383774996 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.383796930 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.384591103 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.384654999 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.384783030 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.384788990 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.384829998 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.385550976 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.385581017 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.385618925 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.385626078 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.385679007 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.386499882 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.386522055 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.386580944 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.386586905 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.386621952 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.388317108 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.388340950 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.388592958 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.388613939 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.388658047 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.389194965 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.389224052 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.389271021 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.389282942 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.389312029 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.389332056 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.390110970 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.390137911 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.390202045 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.390209913 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.390256882 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.391067028 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.391092062 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.391134024 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.391139984 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.391181946 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.391201019 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.392318010 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.392352104 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.392417908 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.392435074 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.392468929 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.393265963 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.393294096 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.393343925 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.393354893 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.393383026 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.393399954 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.394257069 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.394282103 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.394330025 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.394345999 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.394371986 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.394392014 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.395143986 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.395168066 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.395222902 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.395239115 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.395265102 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.395282030 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.395899057 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.395924091 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.396094084 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.396109104 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.396147966 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.396900892 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.396924019 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.397010088 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.397022009 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.397063017 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.397849083 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.397869110 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.397917986 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.397928953 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.397975922 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.398749113 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.398768902 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.398869038 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.398880005 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.398917913 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.399290085 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.399310112 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.399374962 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.399384022 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.399422884 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.400218964 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.400245905 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.400321007 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.400333881 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.400504112 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.401145935 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.401168108 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.401177883 CET	49704	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.401216984 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.401220083 CET	443	49704	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.401226997 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.401271105 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.401297092 CET	49704	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.401310921 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.401696920 CET	49704	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.401738882 CET	443	49704	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.402344942 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.402405024 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.402426958 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.402462959 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.402470112 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.402493000 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.402501106 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.402517080 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.402518988 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.402533054 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.402556896 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.402620077 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.403913975 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.403978109 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.404015064 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.404038906 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.409351110 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.409660101 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.426043034 CET	443	49704	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.426143885 CET	49704	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.439414978 CET	49704	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.439815998 CET	443	49704	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.440027952 CET	49699	443	192.168.2.9	104.18.161.117
Mar 19, 2025 11:00:29.440064907 CET	443	49699	104.18.161.117	192.168.2.9
Mar 19, 2025 11:00:29.441664934 CET	49704	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.451114893 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.451174021 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.451401949 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.451610088 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.451625109 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.481271029 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.483063936 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.484057903 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.484075069 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.484327078 CET	443	49704	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.505084038 CET	443	49704	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.505181074 CET	443	49704	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.505388975 CET	49704	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.510302067 CET	49704	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.510324001 CET	443	49704	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.545614958 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.545763016 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.545847893 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.545914888 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.545938015 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.545968056 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.546010017 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.546057940 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.546101093 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.546138048 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.546278000 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.546355009 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.546402931 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.546416044 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.546469927 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.546726942 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.550128937 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.550182104 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.550196886 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.550272942 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.550326109 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.550331116 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.550483942 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.550563097 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.550580978 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.550586939 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.550622940 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.550641060 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.551282883 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.551338911 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.551347971 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.551422119 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.551516056 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.551523924 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.552134037 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.552208900 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.552208900 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.552232027 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.552294970 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.552346945 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.552474976 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.552670956 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.552678108 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.554860115 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.554943085 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.554944038 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.554965973 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.555012941 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.555059910 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.555355072 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.555402040 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.555409908 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.555499077 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.555578947 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.555633068 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.555638075 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.555676937 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.555680990 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.555779934 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.556067944 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.556073904 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.556534052 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.556593895 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.556600094 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.556639910 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.556684971 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.556689978 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.556725025 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.557337999 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.557518005 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.557568073 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.557576895 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.557611942 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.557666063 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.557722092 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.558487892 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.558563948 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.558697939 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.558760881 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.558815002 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.558864117 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.559736013 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.559792042 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.559854031 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.559906960 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.560297012 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.560369015 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.560507059 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.560553074 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.560667038 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.560719967 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.561105013 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.561161995 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.561314106 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.561372042 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.561553955 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.561609983 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.561650038 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.561713934 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.561904907 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.561961889 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.562130928 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.562191963 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.562308073 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.562371969 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.562391996 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.562446117 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.562839985 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.562933922 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.562947035 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.563007116 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.563201904 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.563254118 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.563290119 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.563344955 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.563676119 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.563781977 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.563858032 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.563910961 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.564083099 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.564137936 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.564167976 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.564213037 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.564264059 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.564321041 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.564635992 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.564692974 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.564745903 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.564804077 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.565016985 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.565068007 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.565165043 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.565217018 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.565313101 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.565365076 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.565505981 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.565584898 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.565593004 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.565617085 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.565638065 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.565892935 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.565946102 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.565953016 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.565988064 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.565975904 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.566013098 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.566035986 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.566207886 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.566255093 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.566260099 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.566298008 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.566618919 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.566637993 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.566675901 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.566679955 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.566701889 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.566721916 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.567148924 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.567193031 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.567231894 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.567241907 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.567267895 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.567671061 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.567715883 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.567744017 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.567751884 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.567775011 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.568685055 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.568725109 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.568751097 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.568763971 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.568790913 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.569420099 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.569463968 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.569489002 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.569502115 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.569538116 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.569794893 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.569834948 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.569863081 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.569869041 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.569907904 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.570473909 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.570513010 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.570538998 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.570547104 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.570565939 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.571269989 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.571315050 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.571330070 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.571346998 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.571374893 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.572051048 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.572089911 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.572122097 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.572129965 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.572150946 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.572565079 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.572663069 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.572695971 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.572701931 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.572724104 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.573493004 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.573532104 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.573564053 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.573571920 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.573596001 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.573658943 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.573703051 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.573715925 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.573744059 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.573776960 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.575396061 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.575437069 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.575464010 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.575474024 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.575498104 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.575659990 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.575702906 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.575714111 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.575741053 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.575762987 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.575889111 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.575926065 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.575947046 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.575956106 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.575979948 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.576014042 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.576066017 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.576071024 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.576092958 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.576129913 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.576464891 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.576508999 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.576533079 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.576541901 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.576565027 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.576630116 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.576677084 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.576688051 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.576708078 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.576756001 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.577487946 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.577534914 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.577557087 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.577568054 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.577589989 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.578177929 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.578223944 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.578238964 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.578258038 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.578291893 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.578350067 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.578397036 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.578403950 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.578486919 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:29.578545094 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.578881025 CET	49705	443	192.168.2.9	104.18.160.117
Mar 19, 2025 11:00:29.578902960 CET	443	49705	104.18.160.117	192.168.2.9
Mar 19, 2025 11:00:31.397953033 CET	49691	443	192.168.2.9	142.250.184.196
Mar 19, 2025 11:00:31.442173004 CET	443	49691	142.250.184.196	192.168.2.9
Mar 19, 2025 11:00:31.442226887 CET	443	49691	142.250.184.196	192.168.2.9
Mar 19, 2025 11:00:31.442253113 CET	443	49691	142.250.184.196	192.168.2.9
Mar 19, 2025 11:00:31.442289114 CET	443	49691	142.250.184.196	192.168.2.9
Mar 19, 2025 11:00:31.442293882 CET	49691	443	192.168.2.9	142.250.184.196
Mar 19, 2025 11:00:31.442316055 CET	443	49691	142.250.184.196	192.168.2.9
Mar 19, 2025 11:00:31.442369938 CET	443	49691	142.250.184.196	192.168.2.9
Mar 19, 2025 11:00:31.442439079 CET	49691	443	192.168.2.9	142.250.184.196
Mar 19, 2025 11:00:31.442439079 CET	49691	443	192.168.2.9	142.250.184.196
Mar 19, 2025 11:00:31.442447901 CET	443	49691	142.250.184.196	192.168.2.9
Mar 19, 2025 11:00:31.450753927 CET	443	49691	142.250.184.196	192.168.2.9
Mar 19, 2025 11:00:31.450819969 CET	49691	443	192.168.2.9	142.250.184.196
Mar 19, 2025 11:00:31.451723099 CET	49691	443	192.168.2.9	142.250.184.196
Mar 19, 2025 11:00:31.451750040 CET	443	49691	142.250.184.196	192.168.2.9
Mar 19, 2025 11:00:40.047782898 CET	49709	80	192.168.2.9	172.217.18.3
Mar 19, 2025 11:00:40.052400112 CET	80	49709	172.217.18.3	192.168.2.9
Mar 19, 2025 11:00:40.052459955 CET	49709	80	192.168.2.9	172.217.18.3
Mar 19, 2025 11:00:40.052598000 CET	49709	80	192.168.2.9	172.217.18.3
Mar 19, 2025 11:00:40.057240963 CET	80	49709	172.217.18.3	192.168.2.9
Mar 19, 2025 11:00:40.306459904 CET	80	49709	172.217.18.3	192.168.2.9
Mar 19, 2025 11:00:40.306682110 CET	80	49709	172.217.18.3	192.168.2.9
Mar 19, 2025 11:00:40.306723118 CET	49709	80	192.168.2.9	172.217.18.3
Mar 19, 2025 11:00:40.322021961 CET	49709	80	192.168.2.9	172.217.18.3
Mar 19, 2025 11:00:40.329576969 CET	80	49709	172.217.18.3	192.168.2.9
Mar 19, 2025 11:00:40.384700060 CET	49709	80	192.168.2.9	172.217.18.3
Mar 19, 2025 11:00:41.284478903 CET	49258	53	192.168.2.9	1.1.1.1
Mar 19, 2025 11:00:41.289400101 CET	53	49258	1.1.1.1	192.168.2.9
Mar 19, 2025 11:00:41.289490938 CET	49258	53	192.168.2.9	1.1.1.1
Mar 19, 2025 11:00:41.294588089 CET	53	49258	1.1.1.1	192.168.2.9
Mar 19, 2025 11:00:41.309390068 CET	49258	53	192.168.2.9	1.1.1.1
Mar 19, 2025 11:00:41.314351082 CET	53	49258	1.1.1.1	192.168.2.9
Mar 19, 2025 11:00:41.314408064 CET	49258	53	192.168.2.9	1.1.1.1
Mar 19, 2025 11:00:43.973745108 CET	443	49692	104.18.36.248	192.168.2.9
Mar 19, 2025 11:00:43.973824024 CET	443	49692	104.18.36.248	192.168.2.9
Mar 19, 2025 11:00:43.975641012 CET	49692	443	192.168.2.9	104.18.36.248
Mar 19, 2025 11:00:43.995460987 CET	49692	443	192.168.2.9	104.18.36.248
Mar 19, 2025 11:00:43.995498896 CET	443	49692	104.18.36.248	192.168.2.9
Mar 19, 2025 11:00:51.771131039 CET	49671	443	192.168.2.9	204.79.197.203
Mar 19, 2025 11:00:52.083214998 CET	49671	443	192.168.2.9	204.79.197.203
Mar 19, 2025 11:00:52.692591906 CET	49671	443	192.168.2.9	204.79.197.203
Mar 19, 2025 11:00:53.895749092 CET	49671	443	192.168.2.9	204.79.197.203
Mar 19, 2025 11:00:56.300834894 CET	49671	443	192.168.2.9	204.79.197.203
Mar 19, 2025 11:01:00.316828012 CET	49678	443	192.168.2.9	52.182.141.63
Mar 19, 2025 11:01:00.628891945 CET	49678	443	192.168.2.9	52.182.141.63
Mar 19, 2025 11:01:01.020919085 CET	49679	80	192.168.2.9	2.17.190.73
Mar 19, 2025 11:01:01.113488913 CET	49671	443	192.168.2.9	204.79.197.203
Mar 19, 2025 11:01:01.238512993 CET	49678	443	192.168.2.9	52.182.141.63
Mar 19, 2025 11:01:01.332770109 CET	49679	80	192.168.2.9	2.17.190.73
Mar 19, 2025 11:01:01.942500114 CET	49679	80	192.168.2.9	2.17.190.73
Mar 19, 2025 11:01:02.441632986 CET	49678	443	192.168.2.9	52.182.141.63
Mar 19, 2025 11:01:03.144752026 CET	49679	80	192.168.2.9	2.17.190.73
Mar 19, 2025 11:01:04.629395962 CET	49681	80	192.168.2.9	204.79.197.203
Mar 19, 2025 11:01:04.847889900 CET	49678	443	192.168.2.9	52.182.141.63
Mar 19, 2025 11:01:04.941606045 CET	49681	80	192.168.2.9	204.79.197.203
Mar 19, 2025 11:01:05.551016092 CET	49679	80	192.168.2.9	2.17.190.73
Mar 19, 2025 11:01:05.551016092 CET	49681	80	192.168.2.9	204.79.197.203
Mar 19, 2025 11:01:06.752480030 CET	49681	80	192.168.2.9	204.79.197.203
Mar 19, 2025 11:01:09.160811901 CET	49681	80	192.168.2.9	204.79.197.203
Mar 19, 2025 11:01:09.660789013 CET	49678	443	192.168.2.9	52.182.141.63
Mar 19, 2025 11:01:10.363132000 CET	49679	80	192.168.2.9	2.17.190.73
Mar 19, 2025 11:01:10.722524881 CET	49671	443	192.168.2.9	204.79.197.203
Mar 19, 2025 11:01:13.973747015 CET	49681	80	192.168.2.9	204.79.197.203
Mar 19, 2025 11:01:19.269488096 CET	49678	443	192.168.2.9	52.182.141.63
Mar 19, 2025 11:01:19.972645044 CET	49679	80	192.168.2.9	2.17.190.73
Mar 19, 2025 11:01:23.582134962 CET	49681	80	192.168.2.9	204.79.197.203
Mar 19, 2025 11:01:23.933249950 CET	52645	53	192.168.2.9	1.1.1.1
Mar 19, 2025 11:01:23.937998056 CET	53	52645	1.1.1.1	192.168.2.9
Mar 19, 2025 11:01:23.938081980 CET	52645	53	192.168.2.9	1.1.1.1
Mar 19, 2025 11:01:23.942753077 CET	53	52645	1.1.1.1	192.168.2.9
Mar 19, 2025 11:01:23.953623056 CET	52645	53	192.168.2.9	1.1.1.1
Mar 19, 2025 11:01:23.958467007 CET	53	52645	1.1.1.1	192.168.2.9
Mar 19, 2025 11:01:23.958554029 CET	52645	53	192.168.2.9	1.1.1.1
Mar 19, 2025 11:01:27.474589109 CET	52648	443	192.168.2.9	142.250.184.196
Mar 19, 2025 11:01:27.474632025 CET	443	52648	142.250.184.196	192.168.2.9
Mar 19, 2025 11:01:27.474729061 CET	52648	443	192.168.2.9	142.250.184.196
Mar 19, 2025 11:01:27.474932909 CET	52648	443	192.168.2.9	142.250.184.196
Mar 19, 2025 11:01:27.474947929 CET	443	52648	142.250.184.196	192.168.2.9
Mar 19, 2025 11:01:27.505410910 CET	443	52648	142.250.184.196	192.168.2.9
Mar 19, 2025 11:01:27.505789042 CET	52648	443	192.168.2.9	142.250.184.196
Mar 19, 2025 11:01:27.552330971 CET	443	52648	142.250.184.196	192.168.2.9
Mar 19, 2025 11:01:37.599826097 CET	443	52648	142.250.184.196	192.168.2.9
Mar 19, 2025 11:01:37.599984884 CET	443	52648	142.250.184.196	192.168.2.9
Mar 19, 2025 11:01:37.600188971 CET	52648	443	192.168.2.9	142.250.184.196
Mar 19, 2025 11:01:38.486880064 CET	52648	443	192.168.2.9	142.250.184.196
Mar 19, 2025 11:01:38.486920118 CET	443	52648	142.250.184.196	192.168.2.9
Mar 19, 2025 11:01:40.363827944 CET	49709	80	192.168.2.9	172.217.18.3
Mar 19, 2025 11:01:40.599777937 CET	80	49709	172.217.18.3	192.168.2.9
Mar 19, 2025 11:01:40.599894047 CET	49709	80	192.168.2.9	172.217.18.3

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 19, 2025 11:00:23.241852045 CET	53	57926	1.1.1.1	192.168.2.9
Mar 19, 2025 11:00:23.379137039 CET	53	58173	1.1.1.1	192.168.2.9
Mar 19, 2025 11:00:23.392606020 CET	53	56253	1.1.1.1	192.168.2.9
Mar 19, 2025 11:00:23.565521002 CET	53	49913	1.1.1.1	192.168.2.9
Mar 19, 2025 11:00:27.412326097 CET	58262	53	192.168.2.9	1.1.1.1
Mar 19, 2025 11:00:27.413170099 CET	56864	53	192.168.2.9	1.1.1.1
Mar 19, 2025 11:00:27.418879032 CET	53	58262	1.1.1.1	192.168.2.9
Mar 19, 2025 11:00:27.420120955 CET	53	56864	1.1.1.1	192.168.2.9
Mar 19, 2025 11:00:28.939830065 CET	53568	53	192.168.2.9	1.1.1.1
Mar 19, 2025 11:00:28.940610886 CET	51703	53	192.168.2.9	1.1.1.1
Mar 19, 2025 11:00:28.951469898 CET	53	53568	1.1.1.1	192.168.2.9
Mar 19, 2025 11:00:28.952439070 CET	53	51703	1.1.1.1	192.168.2.9
Mar 19, 2025 11:00:29.083806992 CET	51785	53	192.168.2.9	1.1.1.1
Mar 19, 2025 11:00:29.084045887 CET	54551	53	192.168.2.9	1.1.1.1
Mar 19, 2025 11:00:29.084986925 CET	49976	53	192.168.2.9	1.1.1.1
Mar 19, 2025 11:00:29.085463047 CET	50047	53	192.168.2.9	1.1.1.1
Mar 19, 2025 11:00:29.090713978 CET	53	51785	1.1.1.1	192.168.2.9
Mar 19, 2025 11:00:29.091172934 CET	53	54551	1.1.1.1	192.168.2.9
Mar 19, 2025 11:00:29.092216015 CET	53	50047	1.1.1.1	192.168.2.9
Mar 19, 2025 11:00:29.093039989 CET	53	49976	1.1.1.1	192.168.2.9
Mar 19, 2025 11:00:29.374519110 CET	60234	53	192.168.2.9	1.1.1.1
Mar 19, 2025 11:00:29.374819040 CET	62904	53	192.168.2.9	1.1.1.1
Mar 19, 2025 11:00:29.388216972 CET	53	60234	1.1.1.1	192.168.2.9
Mar 19, 2025 11:00:29.388226032 CET	53	62904	1.1.1.1	192.168.2.9
Mar 19, 2025 11:00:40.695426941 CET	53	59259	1.1.1.1	192.168.2.9
Mar 19, 2025 11:00:41.283941031 CET	53	57249	1.1.1.1	192.168.2.9
Mar 19, 2025 11:00:43.756130934 CET	58491	53	192.168.2.9	1.1.1.1
Mar 19, 2025 11:00:43.756130934 CET	65047	53	192.168.2.9	1.1.1.1
Mar 19, 2025 11:00:43.763771057 CET	53	58491	1.1.1.1	192.168.2.9
Mar 19, 2025 11:00:43.772847891 CET	53	65047	1.1.1.1	192.168.2.9
Mar 19, 2025 11:00:43.783739090 CET	60380	53	192.168.2.9	1.1.1.1
Mar 19, 2025 11:00:43.799563885 CET	53	60380	1.1.1.1	192.168.2.9
Mar 19, 2025 11:00:43.867001057 CET	61747	53	192.168.2.9	1.1.1.1
Mar 19, 2025 11:00:43.867003918 CET	63362	53	192.168.2.9	8.8.8.8
Mar 19, 2025 11:00:43.873853922 CET	53	61747	1.1.1.1	192.168.2.9
Mar 19, 2025 11:00:43.874151945 CET	53	63362	8.8.8.8	192.168.2.9
Mar 19, 2025 11:00:44.905173063 CET	57883	53	192.168.2.9	1.1.1.1
Mar 19, 2025 11:00:44.905812979 CET	51091	53	192.168.2.9	1.1.1.1
Mar 19, 2025 11:00:44.912667036 CET	53	57883	1.1.1.1	192.168.2.9
Mar 19, 2025 11:00:44.920749903 CET	53	51091	1.1.1.1	192.168.2.9
Mar 19, 2025 11:00:49.943252087 CET	57873	53	192.168.2.9	1.1.1.1
Mar 19, 2025 11:00:49.943695068 CET	56200	53	192.168.2.9	1.1.1.1
Mar 19, 2025 11:00:49.950506926 CET	53	57873	1.1.1.1	192.168.2.9
Mar 19, 2025 11:00:49.951538086 CET	53	56200	1.1.1.1	192.168.2.9
Mar 19, 2025 11:00:49.954082966 CET	58457	53	192.168.2.9	1.1.1.1
Mar 19, 2025 11:00:49.962425947 CET	53	58457	1.1.1.1	192.168.2.9
Mar 19, 2025 11:00:55.730312109 CET	54983	53	192.168.2.9	1.1.1.1
Mar 19, 2025 11:00:55.730536938 CET	57155	53	192.168.2.9	1.1.1.1
Mar 19, 2025 11:00:55.744966030 CET	53	54983	1.1.1.1	192.168.2.9
Mar 19, 2025 11:00:55.746668100 CET	53	57155	1.1.1.1	192.168.2.9
Mar 19, 2025 11:00:55.749639034 CET	51373	53	192.168.2.9	1.1.1.1
Mar 19, 2025 11:00:55.756789923 CET	53	51373	1.1.1.1	192.168.2.9
Mar 19, 2025 11:00:55.813585997 CET	60668	53	192.168.2.9	1.1.1.1
Mar 19, 2025 11:00:55.814429045 CET	51991	53	192.168.2.9	8.8.8.8
Mar 19, 2025 11:00:55.820712090 CET	53	60668	1.1.1.1	192.168.2.9
Mar 19, 2025 11:00:55.830117941 CET	53	51991	8.8.8.8	192.168.2.9
Mar 19, 2025 11:00:59.701169968 CET	53	49278	1.1.1.1	192.168.2.9
Mar 19, 2025 11:01:07.806324959 CET	53498	53	192.168.2.9	1.1.1.1
Mar 19, 2025 11:01:07.806545019 CET	64894	53	192.168.2.9	1.1.1.1
Mar 19, 2025 11:01:08.430088043 CET	53	64894	1.1.1.1	192.168.2.9
Mar 19, 2025 11:01:08.430661917 CET	53	53498	1.1.1.1	192.168.2.9
Mar 19, 2025 11:01:08.431526899 CET	58635	53	192.168.2.9	1.1.1.1
Mar 19, 2025 11:01:08.439606905 CET	53	58635	1.1.1.1	192.168.2.9
Mar 19, 2025 11:01:08.453516960 CET	58826	53	192.168.2.9	1.1.1.1
Mar 19, 2025 11:01:08.453788042 CET	59169	53	192.168.2.9	8.8.8.8
Mar 19, 2025 11:01:08.460354090 CET	53	59169	8.8.8.8	192.168.2.9
Mar 19, 2025 11:01:08.460458040 CET	53	58826	1.1.1.1	192.168.2.9
Mar 19, 2025 11:01:22.403765917 CET	53	60042	1.1.1.1	192.168.2.9
Mar 19, 2025 11:01:22.833606958 CET	53	57477	1.1.1.1	192.168.2.9
Mar 19, 2025 11:01:23.932780981 CET	53	52557	1.1.1.1	192.168.2.9
Mar 19, 2025 11:01:25.404617071 CET	53	59916	1.1.1.1	192.168.2.9
Mar 19, 2025 11:01:38.474417925 CET	52772	53	192.168.2.9	1.1.1.1
Mar 19, 2025 11:01:38.475184917 CET	55763	53	192.168.2.9	1.1.1.1
Mar 19, 2025 11:01:38.481597900 CET	53	52772	1.1.1.1	192.168.2.9
Mar 19, 2025 11:01:38.490255117 CET	53	55763	1.1.1.1	192.168.2.9
Mar 19, 2025 11:01:38.490854979 CET	57095	53	192.168.2.9	1.1.1.1
Mar 19, 2025 11:01:38.505950928 CET	53	57095	1.1.1.1	192.168.2.9

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Mar 19, 2025 11:00:44.920826912 CET	192.168.2.9	1.1.1.1	c23c	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 19, 2025 11:00:27.412326097 CET	192.168.2.9	1.1.1.1	0xa33f	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:00:27.413170099 CET	192.168.2.9	1.1.1.1	0x920d	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 19, 2025 11:00:28.939830065 CET	192.168.2.9	1.1.1.1	0x6540	Standard query (0)	sso-robinhood-net--cdn-auth.webflow.io	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:00:28.940610886 CET	192.168.2.9	1.1.1.1	0x3c30	Standard query (0)	sso-robinhood-net--cdn-auth.webflow.io	65	IN (0x0001)	false
Mar 19, 2025 11:00:29.083806992 CET	192.168.2.9	1.1.1.1	0x4e66	Standard query (0)	cdn.prod.website-files.com	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:00:29.084045887 CET	192.168.2.9	1.1.1.1	0xea7c	Standard query (0)	cdn.prod.website-files.com	65	IN (0x0001)	false
Mar 19, 2025 11:00:29.084986925 CET	192.168.2.9	1.1.1.1	0x16d	Standard query (0)	d3e54v103j8qbb.cloudfront.net	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:00:29.085463047 CET	192.168.2.9	1.1.1.1	0xbdc	Standard query (0)	d3e54v103j8qbb.cloudfront.net	65	IN (0x0001)	false
Mar 19, 2025 11:00:29.374519110 CET	192.168.2.9	1.1.1.1	0x5452	Standard query (0)	cdn.prod.website-files.com	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:00:29.374819040 CET	192.168.2.9	1.1.1.1	0xebaf	Standard query (0)	cdn.prod.website-files.com	65	IN (0x0001)	false
Mar 19, 2025 11:00:43.756130934 CET	192.168.2.9	1.1.1.1	0x58e8	Standard query (0)	robenboodlogi.info	65	IN (0x0001)	false
Mar 19, 2025 11:00:43.756130934 CET	192.168.2.9	1.1.1.1	0x5901	Standard query (0)	robenboodlogi.info	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:00:43.783739090 CET	192.168.2.9	1.1.1.1	0xf6b3	Standard query (0)	robenboodlogi.info	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:00:43.867001057 CET	192.168.2.9	1.1.1.1	0xb898	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:00:43.867003918 CET	192.168.2.9	8.8.8.8	0xb54d	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:00:44.905173063 CET	192.168.2.9	1.1.1.1	0xabe2	Standard query (0)	robenboodlogi.info	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:00:44.905812979 CET	192.168.2.9	1.1.1.1	0x4cca	Standard query (0)	robenboodlogi.info	65	IN (0x0001)	false
Mar 19, 2025 11:00:49.943252087 CET	192.168.2.9	1.1.1.1	0x23f5	Standard query (0)	robenboodlogi.info	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:00:49.943695068 CET	192.168.2.9	1.1.1.1	0x569f	Standard query (0)	robenboodlogi.info	65	IN (0x0001)	false
Mar 19, 2025 11:00:49.954082966 CET	192.168.2.9	1.1.1.1	0x4b1b	Standard query (0)	robenboodlogi.info	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:00:55.730312109 CET	192.168.2.9	1.1.1.1	0xdbd7	Standard query (0)	robenboodlogi.info	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:00:55.730536938 CET	192.168.2.9	1.1.1.1	0x1045	Standard query (0)	robenboodlogi.info	65	IN (0x0001)	false
Mar 19, 2025 11:00:55.749639034 CET	192.168.2.9	1.1.1.1	0x500f	Standard query (0)	robenboodlogi.info	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:00:55.813585997 CET	192.168.2.9	1.1.1.1	0xfa46	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:00:55.814429045 CET	192.168.2.9	8.8.8.8	0x8198	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:01:07.806324959 CET	192.168.2.9	1.1.1.1	0xf1a0	Standard query (0)	robenboodlogi.info	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:01:07.806545019 CET	192.168.2.9	1.1.1.1	0x50e	Standard query (0)	robenboodlogi.info	65	IN (0x0001)	false
Mar 19, 2025 11:01:08.431526899 CET	192.168.2.9	1.1.1.1	0x6c1	Standard query (0)	robenboodlogi.info	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:01:08.453516960 CET	192.168.2.9	1.1.1.1	0x67a	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:01:08.453788042 CET	192.168.2.9	8.8.8.8	0x9efb	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:01:38.474417925 CET	192.168.2.9	1.1.1.1	0x8e61	Standard query (0)	robenboodlogi.info	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:01:38.475184917 CET	192.168.2.9	1.1.1.1	0xdd8d	Standard query (0)	robenboodlogi.info	65	IN (0x0001)	false
Mar 19, 2025 11:01:38.490854979 CET	192.168.2.9	1.1.1.1	0x48	Standard query (0)	robenboodlogi.info	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 19, 2025 11:00:27.418879032 CET	1.1.1.1	192.168.2.9	0xa33f	No error (0)	www.google.com		142.250.184.196	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:00:27.420120955 CET	1.1.1.1	192.168.2.9	0x920d	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 19, 2025 11:00:28.951469898 CET	1.1.1.1	192.168.2.9	0x6540	No error (0)	sso-robinhood-net--cdn-auth.webflow.io		104.18.36.248	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:00:28.951469898 CET	1.1.1.1	192.168.2.9	0x6540	No error (0)	sso-robinhood-net--cdn-auth.webflow.io		172.64.151.8	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:00:28.952439070 CET	1.1.1.1	192.168.2.9	0x3c30	No error (0)	sso-robinhood-net--cdn-auth.webflow.io			65	IN (0x0001)	false
Mar 19, 2025 11:00:29.090713978 CET	1.1.1.1	192.168.2.9	0x4e66	No error (0)	cdn.prod.website-files.com		104.18.161.117	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:00:29.090713978 CET	1.1.1.1	192.168.2.9	0x4e66	No error (0)	cdn.prod.website-files.com		104.18.160.117	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:00:29.091172934 CET	1.1.1.1	192.168.2.9	0xea7c	No error (0)	cdn.prod.website-files.com			65	IN (0x0001)	false
Mar 19, 2025 11:00:29.093039989 CET	1.1.1.1	192.168.2.9	0x16d	No error (0)	d3e54v103j8qbb.cloudfront.net		52.222.232.144	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:00:29.093039989 CET	1.1.1.1	192.168.2.9	0x16d	No error (0)	d3e54v103j8qbb.cloudfront.net		52.222.232.39	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:00:29.093039989 CET	1.1.1.1	192.168.2.9	0x16d	No error (0)	d3e54v103j8qbb.cloudfront.net		52.222.232.47	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:00:29.093039989 CET	1.1.1.1	192.168.2.9	0x16d	No error (0)	d3e54v103j8qbb.cloudfront.net		52.222.232.99	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:00:29.388216972 CET	1.1.1.1	192.168.2.9	0x5452	No error (0)	cdn.prod.website-files.com		104.18.160.117	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:00:29.388216972 CET	1.1.1.1	192.168.2.9	0x5452	No error (0)	cdn.prod.website-files.com		104.18.161.117	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:00:29.388226032 CET	1.1.1.1	192.168.2.9	0xebaf	No error (0)	cdn.prod.website-files.com			65	IN (0x0001)	false
Mar 19, 2025 11:00:43.763771057 CET	1.1.1.1	192.168.2.9	0x58e8	Name error (3)	robenboodlogi.info	none	none	65	IN (0x0001)	false
Mar 19, 2025 11:00:43.772847891 CET	1.1.1.1	192.168.2.9	0x5901	Name error (3)	robenboodlogi.info	none	none	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:00:43.799563885 CET	1.1.1.1	192.168.2.9	0xf6b3	Name error (3)	robenboodlogi.info	none	none	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:00:43.873853922 CET	1.1.1.1	192.168.2.9	0xb898	No error (0)	google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:00:43.874151945 CET	8.8.8.8	192.168.2.9	0xb54d	No error (0)	google.com		142.251.37.110	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:00:44.912667036 CET	1.1.1.1	192.168.2.9	0xabe2	Name error (3)	robenboodlogi.info	none	none	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:00:44.920749903 CET	1.1.1.1	192.168.2.9	0x4cca	Name error (3)	robenboodlogi.info	none	none	65	IN (0x0001)	false
Mar 19, 2025 11:00:49.950506926 CET	1.1.1.1	192.168.2.9	0x23f5	Name error (3)	robenboodlogi.info	none	none	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:00:49.951538086 CET	1.1.1.1	192.168.2.9	0x569f	Name error (3)	robenboodlogi.info	none	none	65	IN (0x0001)	false
Mar 19, 2025 11:00:49.962425947 CET	1.1.1.1	192.168.2.9	0x4b1b	Name error (3)	robenboodlogi.info	none	none	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:00:55.744966030 CET	1.1.1.1	192.168.2.9	0xdbd7	Name error (3)	robenboodlogi.info	none	none	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:00:55.746668100 CET	1.1.1.1	192.168.2.9	0x1045	Name error (3)	robenboodlogi.info	none	none	65	IN (0x0001)	false
Mar 19, 2025 11:00:55.756789923 CET	1.1.1.1	192.168.2.9	0x500f	Name error (3)	robenboodlogi.info	none	none	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:00:55.820712090 CET	1.1.1.1	192.168.2.9	0xfa46	No error (0)	google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:00:55.830117941 CET	8.8.8.8	192.168.2.9	0x8198	No error (0)	google.com		142.251.37.110	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:01:08.430088043 CET	1.1.1.1	192.168.2.9	0x50e	Name error (3)	robenboodlogi.info	none	none	65	IN (0x0001)	false
Mar 19, 2025 11:01:08.430661917 CET	1.1.1.1	192.168.2.9	0xf1a0	Name error (3)	robenboodlogi.info	none	none	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:01:08.439606905 CET	1.1.1.1	192.168.2.9	0x6c1	Name error (3)	robenboodlogi.info	none	none	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:01:08.460354090 CET	8.8.8.8	192.168.2.9	0x9efb	No error (0)	google.com		142.251.37.110	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:01:08.460458040 CET	1.1.1.1	192.168.2.9	0x67a	No error (0)	google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:01:38.481597900 CET	1.1.1.1	192.168.2.9	0x8e61	Name error (3)	robenboodlogi.info	none	none	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:01:38.490255117 CET	1.1.1.1	192.168.2.9	0xdd8d	Name error (3)	robenboodlogi.info	none	none	65	IN (0x0001)	false
Mar 19, 2025 11:01:38.505950928 CET	1.1.1.1	192.168.2.9	0x48	Name error (3)	robenboodlogi.info	none	none	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

sso-robinhood-net--cdn-auth.webflow.io

cdn.prod.website-files.com

d3e54v103j8qbb.cloudfront.net

www.google.com

c.pki.goog

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.9	49709	172.217.18.3	80

Timestamp	Bytes transferred	Direction	Data
Mar 19, 2025 11:00:40.052598000 CET	202	OUT	GET /r/gsr1.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 19, 2025 11:00:40.306459904 CET	222	IN	HTTP/1.1 304 Not Modified Date: Wed, 19 Mar 2025 09:48:43 GMT Expires: Wed, 19 Mar 2025 10:38:43 GMT Age: 717 Last-Modified: Tue, 07 Jan 2025 07:28:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding
Mar 19, 2025 11:00:40.306682110 CET	222	IN	HTTP/1.1 304 Not Modified Date: Wed, 19 Mar 2025 09:48:43 GMT Expires: Wed, 19 Mar 2025 10:38:43 GMT Age: 717 Last-Modified: Tue, 07 Jan 2025 07:28:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding
Mar 19, 2025 11:00:40.322021961 CET	200	OUT	GET /r/r4.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 19, 2025 11:00:40.329576969 CET	222	IN	HTTP/1.1 304 Not Modified Date: Wed, 19 Mar 2025 09:48:48 GMT Expires: Wed, 19 Mar 2025 10:38:48 GMT Age: 712 Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.9	49693	104.18.36.248	443	1480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:00:28 UTC	688	OUT	GET / HTTP/1.1 Host: sso-robinhood-net--cdn-auth.webflow.io Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:00:29 UTC	823	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 10:00:29 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close CF-Ray: 922c1f7d6f81dcbc-FRA CF-Cache-Status: HIT Age: 136281 Last-Modified: Sun, 16 Mar 2025 12:49:01 GMT content-security-policy: frame-ancestors 'self' https://.webflow.com http://.webflow.com http://*.webflow.io http://webflow.com https://webflow.com surrogate-control: max-age=2147483647 surrogate-key: sso-robinhood-net--cdn-auth.webflow.io 678a174507adb9ecf0e5709b pageId:678a174507adb9ecf0e570a5 x-lambda-id: 4939096e-112c-4d6d-b190-8def861801bb vary: Accept-Encoding Set-Cookie: _cfuvid=l4TK0UkqSgnRGpFxiPlYKWhn9mhRv5s2KtR5cFdrT7k-1742378429059-0.0.1.1-604800000; path=/; domain=.webflow.io; HttpOnly; Secure; SameSite=None Server: cloudflare alt-svc: h3=":443"; ma=86400
2025-03-19 10:00:29 UTC	546	IN	Data Raw: 63 61 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 21 2d 2d 20 54 68 69 73 20 73 69 74 65 20 77 61 73 20 63 72 65 61 74 65 64 20 69 6e 20 57 65 62 66 6c 6f 77 2e 20 68 74 74 70 73 3a 2f 2f 77 65 62 66 6c 6f 77 2e 63 6f 6d 20 2d 2d 3e 3c 21 2d 2d 20 4c 61 73 74 20 50 75 62 6c 69 73 68 65 64 3a 20 46 72 69 20 4a 61 6e 20 31 37 20 32 30 32 35 20 30 38 3a 34 31 3a 32 30 20 47 4d 54 2b 30 30 30 30 20 28 43 6f 6f 72 64 69 6e 61 74 65 64 20 55 6e 69 76 65 72 73 61 6c 20 54 69 6d 65 29 20 2d 2d 3e 3c 68 74 6d 6c 20 64 61 74 61 2d 77 66 2d 64 6f 6d 61 69 6e 3d 22 73 73 6f 2d 72 6f 62 69 6e 68 6f 6f 64 2d 6e 65 74 2d 2d 63 64 6e 2d 61 75 74 68 2e 77 65 62 66 6c 6f 77 2e 69 6f 22 20 64 61 74 61 2d 77 66 2d 70 61 67 65 3d 22 36 37 38 61 31 37 34 35 30 37 Data Ascii: ca2<!DOCTYPE html>... This site was created in Webflow. https://webflow.com -->... Last Published: Fri Jan 17 2025 08:41:20 GMT+0000 (Coordinated Universal Time) --><html data-wf-domain="sso-robinhood-net--cdn-auth.webflow.io" data-wf-page="678a174507
2025-03-19 10:00:29 UTC	1369	IN	Data Raw: 46 73 2c 20 6f 70 74 69 6f 6e 73 2c 20 61 6e 64 20 63 72 79 70 74 6f 63 75 72 72 65 6e 63 69 65 73 2e 20 57 69 74 68 20 61 20 75 73 65 72 2d 66 72 69 65 6e 64 6c 79 20 69 6e 74 65 72 66 61 63 65 2c 20 69 74 20 68 61 73 20 67 61 69 6e 65 64 20 70 6f 70 75 6c 61 72 69 74 79 20 61 6d 6f 6e 67 20 62 65 67 69 6e 6e 65 72 73 20 61 6e 64 20 73 65 61 73 6f 6e 65 64 20 74 72 61 64 65 72 73 20 61 6c 69 6b 65 2e 20 57 68 65 74 68 65 72 20 79 6f 75 26 23 78 32 37 3b 72 65 20 6c 6f 6f 6b 69 6e 67 20 74 6f 20 73 74 61 72 74 20 79 6f 75 72 20 66 69 72 73 74 20 69 6e 76 65 73 74 6d 65 6e 74 20 70 6f 72 74 66 6f 6c 69 6f 20 6f 72 20 72 65 66 69 6e 65 20 61 6e 20 65 78 69 73 74 69 6e 67 20 73 74 72 61 74 65 67 79 2c 20 52 6f 62 69 6e 68 6f 6f 64 20 70 72 6f 76 69 64 65 73 Data Ascii: Fs, options, and cryptocurrencies. With a user-friendly interface, it has gained popularity among beginners and seasoned traders alike. Whether you're looking to start your first investment portfolio or refine an existing strategy, Robinhood provides
2025-03-19 10:00:29 UTC	1326	IN	Data Raw: 73 69 7a 65 73 3d 22 28 6d 61 78 2d 77 69 64 74 68 3a 20 31 33 34 38 70 78 29 20 31 30 30 76 77 2c 20 31 33 34 38 70 78 22 20 73 72 63 73 65 74 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 70 72 6f 64 2e 77 65 62 73 69 74 65 2d 66 69 6c 65 73 2e 63 6f 6d 2f 36 37 38 61 31 37 34 35 30 37 61 64 62 39 65 63 66 30 65 35 37 30 39 62 2f 36 37 38 61 31 37 35 66 32 62 34 37 61 63 37 65 31 65 38 65 62 33 33 66 5f 53 63 72 65 65 6e 73 68 6f 74 25 32 30 32 30 32 35 2d 30 31 2d 30 38 25 32 30 61 74 25 32 30 31 33 2d 33 39 2d 31 34 25 32 30 43 6f 6d 6d 69 73 73 69 6f 6e 2d 66 72 65 65 25 32 30 53 74 6f 63 6b 25 32 30 54 72 61 64 69 6e 67 25 32 30 25 32 36 25 32 30 49 6e 76 65 73 74 69 6e 67 25 32 30 41 70 70 25 32 30 52 6f 62 69 6e 68 6f 6f 64 2d 70 2d 35 30 30 2e 70 6e Data Ascii: sizes="(max-width: 1348px) 100vw, 1348px" srcset="https://cdn.prod.website-files.com/678a174507adb9ecf0e5709b/678a175f2b47ac7e1e8eb33f_Screenshot%202025-01-08%20at%2013-39-14%20Commission-free%20Stock%20Trading%20%26%20Investing%20App%20Robinhood-p-500.pn
2025-03-19 10:00:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.9	49694	104.18.161.117	443	1480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:00:29 UTC	681	OUT	GET /678a174507adb9ecf0e5709b/css/sso-robinhood-net--cdn-auth.webflow.ce67eee42.css HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Referer: https://sso-robinhood-net--cdn-auth.webflow.io/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:00:29 UTC	632	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 10:00:29 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close x-amz-id-2: kxV/30jqCdikDzFI+Isn4JWgwrEJEZ/nDg8CfW1D8korwJjflIGGP923Kom7eTO8ilfnSObOIrY= x-amz-request-id: CP1K9BG94N1AFDR1 Last-Modified: Fri, 17 Jan 2025 08:41:21 GMT ETag: W/"b6a57deb813fab88fe5f35ba5bb2c342" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000, immutable x-amz-version-id: vwwB6LPCB02JQfLkmzkNuiHbMAQa3K7Z CF-Cache-Status: HIT Age: 132361 Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 922c1f7e5f031957-FRA alt-svc: h3=":443"; ma=86400
2025-03-19 10:00:29 UTC	737	IN	Data Raw: 37 64 33 38 0d 0a 68 74 6d 6c 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 3b 0a 20 20 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 62 6f 64 79 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 7d 0a 0a 61 72 74 69 63 6c 65 2c 20 61 73 69 64 65 2c 20 64 65 74 61 69 6c 73 2c 20 66 69 67 63 61 70 74 69 6f 6e 2c 20 66 69 67 75 72 65 2c 20 66 6f 6f 74 65 72 2c 20 68 65 61 64 65 72 2c 20 68 67 72 6f 75 70 2c 20 6d 61 69 6e 2c 20 6d 65 6e 75 2c 20 6e 61 76 2c 20 73 65 63 74 69 6f 6e 2c 20 73 75 6d 6d 61 72 79 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 7d 0a Data Ascii: 7d38html { -webkit-text-size-adjust: 100%; -ms-text-size-adjust: 100%; font-family: sans-serif;}body { margin: 0;}article, aside, details, figcaption, figure, footer, header, hgroup, main, menu, nav, section, summary { display: block;}
2025-03-19 10:00:29 UTC	1369	IN	Data Raw: 20 38 30 25 3b 0a 7d 0a 0a 73 75 62 2c 20 73 75 70 20 7b 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 62 61 73 65 6c 69 6e 65 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 37 35 25 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 30 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 7d 0a 0a 73 75 70 20 7b 0a 20 20 74 6f 70 3a 20 2d 2e 35 65 6d 3b 0a 7d 0a 0a 73 75 62 20 7b 0a 20 20 62 6f 74 74 6f 6d 3a 20 2d 2e 32 35 65 6d 3b 0a 7d 0a 0a 69 6d 67 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 30 3b 0a 7d 0a 0a 73 76 67 3a 6e 6f 74 28 3a 72 6f 6f 74 29 20 7b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 0a 68 72 20 7b 0a 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 0a 20 20 Data Ascii: 80%;}sub, sup { vertical-align: baseline; font-size: 75%; line-height: 0; position: relative;}sup { top: -.5em;}sub { bottom: -.25em;}img { border: 0;}svg:not(:root) { overflow: hidden;}hr { box-sizing: content-box;
2025-03-19 10:00:29 UTC	1369	IN	Data Raw: 65 72 2d 73 70 61 63 69 6e 67 3a 20 30 3b 0a 7d 0a 0a 74 64 2c 20 74 68 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 7d 0a 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 77 65 62 66 6c 6f 77 2d 69 63 6f 6e 73 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 22 64 61 74 61 3a 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 66 6f 6e 74 2d 74 74 66 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3b 62 61 73 65 36 34 2c 41 41 45 41 41 41 41 4c 41 49 41 41 41 77 41 77 54 31 4d 76 4d 67 38 53 42 69 55 41 41 41 43 38 41 41 41 41 59 47 4e 74 59 58 44 70 50 2b 61 34 41 41 41 42 48 41 41 41 41 46 78 6e 59 58 4e 77 41 41 41 41 45 41 41 41 41 58 67 41 41 41 41 49 5a 32 78 35 5a 6d 68 53 32 58 45 41 41 41 47 41 41 41 41 44 48 47 68 6c 59 57 51 Data Ascii: er-spacing: 0;}td, th { padding: 0;}@font-face { font-family: webflow-icons; src: url("data:application/x-font-ttf;charset=utf-8;base64,AAEAAAALAIAAAwAwT1MvMg8SBiUAAAC8AAAAYGNtYXDpP+a4AAABHAAAAFxnYXNwAAAAEAAAAXgAAAAIZ2x5ZmhS2XEAAAGAAAADHGhlYWQ
2025-03-19 10:00:29 UTC	1369	IN	Data Raw: 69 45 67 62 30 74 4b 56 56 56 4b 53 32 38 67 49 53 45 67 62 30 74 4b 56 56 56 4b 53 32 38 67 49 51 41 42 41 41 41 42 77 41 49 41 41 38 41 41 45 67 41 41 45 7a 51 33 50 67 45 33 4e 6a 4d 78 46 53 49 48 44 67 45 48 42 68 55 78 49 77 41 6f 4b 49 74 65 58 57 70 56 53 6b 74 76 49 43 46 6d 41 63 42 71 58 56 36 4c 4b 43 68 6d 49 53 42 76 53 30 70 56 41 41 41 41 41 67 41 41 2f 38 41 46 74 67 50 41 41 44 49 41 4f 67 41 41 41 52 59 58 48 67 45 58 46 68 55 55 42 77 34 42 42 77 59 48 49 78 55 68 49 69 63 75 41 53 63 6d 4e 54 51 33 50 67 45 33 4e 6a 4d 78 4f 41 45 78 4e 44 63 2b 41 54 63 32 4d 7a 49 58 48 67 45 58 46 68 63 56 41 54 4d 4a 41 54 4d 56 4d 7a 55 45 6a 44 38 33 4e 6c 41 58 46 78 59 58 54 6a 55 31 50 51 4c 38 6b 7a 30 31 4e 6b 38 58 46 78 63 58 54 7a 59 31 Data Ascii: iEgb0tKVVVKS28gISEgb0tKVVVKS28gIQABAAABwAIAA8AAEgAAEzQ3PgE3NjMxFSIHDgEHBhUxIwAoKIteXWpVSktvICFmAcBqXV6LKChmISBvS0pVAAAAAgAA/8AFtgPAADIAOgAAARYXHgEXFhUUBw4BBwYHIxUhIicuAScmNTQ3PgE3NjMxOAExNDc+ATc2MzIXHgEXFhcVATMJATMVMzUEjD83NlAXFxYXTjU1PQL8kz01Nk8XFxcXTzY1
2025-03-19 10:00:29 UTC	1369	IN	Data Raw: 2d 22 5d 2c 20 5b 63 6c 61 73 73 2a 3d 22 20 77 2d 69 63 6f 6e 2d 22 5d 20 7b 0a 20 20 73 70 65 61 6b 3a 20 6e 6f 6e 65 3b 0a 20 20 66 6f 6e 74 2d 76 61 72 69 61 6e 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 6e 6f 6e 65 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 20 61 6e 74 69 61 6c 69 61 73 65 64 3b 0a 20 20 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 20 67 72 61 79 73 63 61 6c 65 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 77 65 62 66 6c 6f 77 2d 69 63 Data Ascii: -"], [class*=" w-icon-"] { speak: none; font-variant: normal; text-transform: none; -webkit-font-smoothing: antialiased; -moz-osx-font-smoothing: grayscale; font-style: normal; font-weight: normal; line-height: 1; font-family: webflow-ic
2025-03-19 10:00:29 UTC	1369	IN	Data Raw: 65 72 2d 72 61 64 69 75 73 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 39 70 78 20 31 35 70 78 3b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 7d 0a 0a 69 6e 70 75 74 2e 77 2d 62 75 74 74 6f 6e 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 20 62 75 74 74 6f 6e 3b 0a 7d 0a 0a 68 74 6d 6c 5b 64 61 74 61 2d 77 2d 64 79 6e 70 61 67 65 5d 20 5b 64 61 74 61 2d 77 2d 63 6c 6f 61 6b 5d 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 2e 77 2d 63 6f 64 65 2d 62 6c 6f 63 6b 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 75 6e 73 65 74 3b 0a 7d 0a 0a 70 72 65 2e 77 2d 63 6f 64 65 2d 62 6c Data Ascii: er-radius: 0; padding: 9px 15px; text-decoration: none; display: inline-block;}input.w-button { -webkit-appearance: button;}html[data-w-dynpage] [data-w-cloak] { color: #0000 !important;}.w-code-block { margin: unset;}pre.w-code-bl
2025-03-19 10:00:29 UTC	1369	IN	Data Raw: 6e 73 65 74 3b 0a 20 20 77 6f 72 64 2d 77 72 61 70 3a 20 75 6e 73 65 74 3b 0a 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 75 6e 73 65 74 3b 0a 7d 0a 0a 2e 77 2d 77 65 62 66 6c 6f 77 2d 62 61 64 67 65 20 7b 0a 20 20 77 68 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 77 72 61 70 3b 0a 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 30 20 31 70 78 20 23 30 30 30 30 30 30 31 61 2c 20 30 20 31 70 78 20 33 70 78 20 23 30 30 30 30 30 30 31 61 3b 0a 20 20 76 69 73 69 62 69 6c 69 74 79 3a 20 76 69 73 69 62 6c 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 6f 70 61 63 69 74 79 3a 20 31 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 32 31 34 37 34 38 33 36 34 37 20 21 69 6d 70 6f 72 74 Data Ascii: nset; word-wrap: unset; transition: unset;}.w-webflow-badge { white-space: nowrap; cursor: pointer; box-shadow: 0 0 0 1px #0000001a, 0 1px 3px #0000001a; visibility: visible !important; opacity: 1 !important; z-index: 2147483647 !import
2025-03-19 10:00:29 UTC	1369	IN	Data Raw: 65 2d 68 65 69 67 68 74 3a 20 31 38 70 78 3b 0a 7d 0a 0a 70 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 3b 0a 7d 0a 0a 62 6c 6f 63 6b 71 75 6f 74 65 20 7b 0a 20 20 62 6f 72 64 65 72 2d 6c 65 66 74 3a 20 35 70 78 20 73 6f 6c 69 64 20 23 65 32 65 32 65 32 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 20 32 30 70 78 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 32 70 78 3b 0a 7d 0a 0a 66 69 67 75 72 65 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 30 70 78 3b 0a 7d 0a 0a 66 69 67 63 61 70 74 69 6f 6e 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e Data Ascii: e-height: 18px;}p { margin-top: 0; margin-bottom: 10px;}blockquote { border-left: 5px solid #e2e2e2; margin: 0 0 10px; padding: 10px 20px; font-size: 18px; line-height: 22px;}figure { margin: 0 0 10px;}figcaption { text-align
2025-03-19 10:00:29 UTC	1369	IN	Data Raw: 74 3a 20 33 38 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 38 70 78 20 31 32 70 78 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 32 38 35 37 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2e 77 2d 69 6e 70 75 74 3a 3a 70 6c 61 63 65 68 6f 6c 64 65 72 2c 20 2e 77 2d 73 65 6c 65 63 74 3a 3a 70 6c 61 63 65 68 6f 6c 64 65 72 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 39 39 39 3b 0a 7d 0a 0a 2e 77 2d 69 6e 70 75 74 3a 66 6f 63 75 73 2c 20 2e 77 2d 73 65 6c 65 63 74 3a 66 6f 63 75 73 20 7b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 33 38 39 38 65 63 3b 0a 20 20 6f 75 74 6c 69 6e 65 3a 20 30 3b Data Ascii: t: 38px; margin-bottom: 10px; padding: 8px 12px; font-size: 14px; line-height: 1.42857; display: block;}.w-input::placeholder, .w-select::placeholder { color: #999;}.w-input:focus, .w-select:focus { border-color: #3898ec; outline: 0;
2025-03-19 10:00:29 UTC	1369	IN	Data Raw: 3a 20 2e 31 70 78 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 0a 2e 77 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 2d 64 65 66 61 75 6c 74 2c 20 2e 77 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 2d 75 70 6c 6f 61 64 69 6e 67 2c 20 2e 77 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 2d 73 75 63 63 65 73 73 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 33 33 33 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2e 77 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 2d 65 72 72 6f 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 30 70 78 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2e 77 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 2d 64 65 66 61 75 Data Ascii: : .1px; position: absolute; overflow: hidden;}.w-file-upload-default, .w-file-upload-uploading, .w-file-upload-success { color: #333; display: inline-block;}.w-file-upload-error { margin-top: 10px; display: block;}.w-file-upload-defau

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.9	49696	52.222.232.144	443	1480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:00:29 UTC	674	OUT	GET /js/jquery-3.5.1.min.dc5e7f18c8.js?site=678a174507adb9ecf0e5709b HTTP/1.1 Host: d3e54v103j8qbb.cloudfront.net Connection: keep-alive Origin: https://sso-robinhood-net--cdn-auth.webflow.io sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://sso-robinhood-net--cdn-auth.webflow.io/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:00:29 UTC	551	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 89476 Connection: close Last-Modified: Mon, 20 Jul 2020 17:53:02 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 19 Mar 2025 00:14:30 GMT Cache-Control: max-age=84600, must-revalidate Etag: "dc5e7f18c8d36ac1d3d4753a87c98d0a" Via: 1.1 3d34e163f3f1a0c4a397ad818b79a810.cloudfront.net (CloudFront) Age: 35161 Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: GQcDbuPmds_XRudePpjzXCjtRlWVSsd6KKB78bJKMgNfKg9lfQLXKw==
2025-03-19 10:00:29 UTC	15833	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 Data Ascii: /! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery
2025-03-19 10:00:29 UTC	16384	IN	Data Raw: 6e 74 4e 6f 64 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 2c 61 2c 73 2c 75 2c 6c 3d 79 21 3d 3d 6d 3f 22 6e 65 78 74 53 69 62 6c 69 6e 67 22 3a 22 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 22 2c 63 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 66 3d 78 26 26 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 70 3d 21 6e 26 26 21 78 2c 64 3d 21 31 3b 69 66 28 63 29 7b 69 66 28 79 29 7b 77 68 69 6c 65 28 6c 29 7b 61 3d 65 3b 77 68 69 6c 65 28 61 3d 61 5b 6c 5d 29 69 66 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 21 31 3b 75 3d 6c 3d 22 6f 6e 6c 79 22 3d 3d 3d 68 26 26 21 75 26 26 Data Ascii: ntNode}:function(e,t,n){var r,i,o,a,s,u,l=y!==m?"nextSibling":"previousSibling",c=e.parentNode,f=x&&e.nodeName.toLowerCase(),p=!n&&!x,d=!1;if(c){if(y){while(l){a=e;while(a=a[l])if(x?a.nodeName.toLowerCase()===f:1===a.nodeType)return!1;u=l="only"===h&&!u&&
2025-03-19 10:00:29 UTC	16384	IN	Data Raw: 6c 3f 43 2e 73 65 74 54 69 6d 65 6f 75 74 28 53 2e 72 65 61 64 79 29 3a 28 45 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 42 29 2c 43 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 42 29 29 3b 76 61 72 20 24 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 29 7b 76 61 72 20 73 3d 30 2c 75 3d 65 2e 6c 65 6e 67 74 68 2c 6c 3d 6e 75 6c 6c 3d 3d 6e 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 77 28 6e 29 29 66 6f 72 28 73 20 69 6e 20 69 3d 21 30 2c 6e 29 24 28 65 2c 74 2c 73 2c 6e 5b 73 5d 2c 21 30 2c 6f 2c 61 29 3b 65 6c 73 65 20 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 26 26 28 69 3d 21 30 2c 6d 28 72 29 7c 7c 28 61 3d 21 30 29 2c 6c 26 26 28 61 Data Ascii: l?C.setTimeout(S.ready):(E.addEventListener("DOMContentLoaded",B),C.addEventListener("load",B));var $=function(e,t,n,r,i,o,a){var s=0,u=e.length,l=null==n;if("object"===w(n))for(s in i=!0,n)$(e,t,s,n[s],!0,o,a);else if(void 0!==r&&(i=!0,m(r)\|\|(a=!0),l&&(a
2025-03-19 10:00:29 UTC	16384	IN	Data Raw: 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 29 7d 2c 6c 29 3a 62 28 75 2e 74 65 78 74 43 6f 6e 74 65 6e 74 2e 72 65 70 6c 61 63 65 28 6a 65 2c 22 22 29 2c 75 2c 6c 29 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 52 65 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 2c 69 3d 74 3f 53 2e 66 69 6c 74 65 72 28 74 2c 65 29 3a 65 2c 6f 3d 30 3b 6e 75 6c 6c 21 3d 28 72 3d 69 5b 6f 5d 29 3b 6f 2b 2b 29 6e 7c 7c 31 21 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 7c 7c 53 2e 63 6c 65 61 6e 44 61 74 61 28 76 65 28 72 29 29 2c 72 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 28 6e 26 26 69 65 28 72 29 26 26 79 65 28 76 65 28 72 2c 22 73 63 72 69 70 74 22 29 29 2c 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 72 29 29 3b 72 65 74 75 72 6e 20 Data Ascii: ibute("nonce")},l):b(u.textContent.replace(je,""),u,l))}return n}function Re(e,t,n){for(var r,i=t?S.filter(t,e):e,o=0;null!=(r=i[o]);o++)n\|\|1!==r.nodeType\|\|S.cleanData(ve(r)),r.parentNode&&(n&&ie(r)&&ye(ve(r,"script")),r.parentNode.removeChild(r));return
2025-03-19 10:00:29 UTC	16384	IN	Data Raw: 70 65 65 64 73 5b 72 5d 7c 7c 72 2c 65 3d 65 7c 7c 22 66 78 22 2c 74 68 69 73 2e 71 75 65 75 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 43 2e 73 65 74 54 69 6d 65 6f 75 74 28 65 2c 72 29 3b 74 2e 73 74 6f 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 43 2e 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 6e 29 7d 7d 29 7d 2c 72 74 3d 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 2c 69 74 3d 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 65 6c 65 63 74 22 29 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6f 70 74 69 6f 6e 22 29 29 2c 72 74 2e 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 2c 79 2e 63 68 65 63 6b 4f 6e 3d 22 22 21 3d 3d 72 74 2e 76 61 6c 75 65 2c 79 2e 6f Data Ascii: peeds[r]\|\|r,e=e\|\|"fx",this.queue(e,function(e,t){var n=C.setTimeout(e,r);t.stop=function(){C.clearTimeout(n)}})},rt=E.createElement("input"),it=E.createElement("select").appendChild(E.createElement("option")),rt.type="checkbox",y.checkOn=""!==rt.value,y.o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.9	49695	104.18.161.117	443	1480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:00:29 UTC	660	OUT	GET /678a174507adb9ecf0e5709b/js/webflow.77ac24386eb2a8dacabbd68092c045ec.js HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://sso-robinhood-net--cdn-auth.webflow.io/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:00:29 UTC	674	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 10:00:29 GMT Content-Type: text/javascript Content-Length: 37349 Connection: close x-amz-id-2: ffGS6eVPiKrvp8t+I/ZMc2yLoDvNWUZHLkt7I75z1oKs9zKIxFLgpxUxYoC/3Vk/HcIf1uX9WM7ceRXW0kYB4HBuJnX0mRvE x-amz-request-id: QBJFZ52ZSNE0E0E4 Last-Modified: Fri, 17 Jan 2025 08:41:21 GMT ETag: "fc7ef472a2bca6fbdb8ab8235dec64e0" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000, immutable x-amz-version-id: HI2d3sSFmL7qbTgxMXnHTdC2YqItgBUM CF-Cache-Status: HIT Age: 132361 Accept-Ranges: bytes Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 922c1f7e5891bb65-FRA alt-svc: h3=":443"; ma=86400
2025-03-19 10:00:29 UTC	695	IN	Data Raw: 0a 2f 2a 21 0a 20 2a 20 57 65 62 66 6c 6f 77 3a 20 46 72 6f 6e 74 2d 65 6e 64 20 73 69 74 65 20 6c 69 62 72 61 72 79 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 4d 49 54 0a 20 2a 20 49 6e 6c 69 6e 65 20 73 63 72 69 70 74 73 20 6d 61 79 20 61 63 63 65 73 73 20 74 68 65 20 61 70 69 20 75 73 69 6e 67 20 61 6e 20 61 73 79 6e 63 20 68 61 6e 64 6c 65 72 3a 0a 20 2a 20 20 20 76 61 72 20 57 65 62 66 6c 6f 77 20 3d 20 57 65 62 66 6c 6f 77 20 7c 7c 20 5b 5d 3b 0a 20 2a 20 20 20 57 65 62 66 6c 6f 77 2e 70 75 73 68 28 72 65 61 64 79 46 75 6e 63 74 69 6f 6e 29 3b 0a 20 2a 2f 0a 0a 28 28 29 3d 3e 7b 76 61 72 20 6c 74 3d 28 65 2c 79 29 3d 3e 28 29 3d 3e 28 79 7c 7c 65 28 28 79 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 29 2e 65 78 70 6f 72 74 73 2c 79 29 2c 79 2e 65 78 70 6f 72 Data Ascii: /! Webflow: Front-end site library * @license MIT * Inline scripts may access the api using an async handler: * var Webflow = Webflow \|\| []; * Webflow.push(readyFunction); */(()=>{var lt=(e,y)=>()=>(y\|\|e((y={exports:{}}).exports,y),y.expor
2025-03-19 10:00:29 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 20 5f 28 74 2c 6e 2c 69 29 7b 42 28 22 55 6e 69 74 73 20 64 6f 20 6e 6f 74 20 6d 61 74 63 68 20 5b 22 2b 74 2b 22 5d 3a 20 22 2b 6e 2b 22 2c 20 22 2b 69 29 7d 66 75 6e 63 74 69 6f 6e 20 49 28 74 2c 6e 2c 69 29 7b 69 66 28 6e 21 3d 3d 76 6f 69 64 20 30 26 26 28 69 3d 6e 29 2c 74 3d 3d 3d 76 6f 69 64 20 30 29 72 65 74 75 72 6e 20 69 3b 76 61 72 20 72 3d 69 3b 72 65 74 75 72 6e 20 77 65 2e 74 65 73 74 28 74 29 7c 7c 21 58 74 2e 74 65 73 74 28 74 29 3f 72 3d 70 61 72 73 65 49 6e 74 28 74 2c 31 30 29 3a 58 74 2e 74 65 73 74 28 74 29 26 26 28 72 3d 31 65 33 2a 70 61 72 73 65 46 6c 6f 61 74 28 74 29 29 2c 30 3e 72 26 26 28 72 3d 30 29 2c 72 3d 3d 3d 72 3f 72 3a 69 7d 66 75 6e 63 74 69 6f 6e 20 42 28 74 29 7b 65 74 2e 64 65 62 75 67 26 26 77 69 Data Ascii: nction _(t,n,i){B("Units do not match ["+t+"]: "+n+", "+i)}function I(t,n,i){if(n!==void 0&&(i=n),t===void 0)return i;var r=i;return we.test(t)\|\|!Xt.test(t)?r=parseInt(t,10):Xt.test(t)&&(r=1e3*parseFloat(t)),0>r&&(r=0),r===r?r:i}function B(t){et.debug&&wi
2025-03-19 10:00:29 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 29 7b 72 65 74 75 72 6e 20 69 2a 74 2f 72 2b 6e 7d 5d 2c 22 65 61 73 65 2d 69 6e 2d 71 75 61 64 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 35 35 30 2c 20 30 2e 30 38 35 2c 20 30 2e 36 38 30 2c 20 30 2e 35 33 30 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 29 7b 72 65 74 75 72 6e 20 69 2a 28 74 2f 3d 72 29 2a 74 2b 6e 7d 5d 2c 22 65 61 73 65 2d 6f 75 74 2d 71 75 61 64 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 32 35 30 2c 20 30 2e 34 36 30 2c 20 30 2e 34 35 30 2c 20 30 2e 39 34 30 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 29 7b 72 65 74 75 72 6e 2d 69 2a 28 74 2f 3d 72 29 2a 28 74 2d 32 29 2b 6e 7d 5d 2c 22 65 61 73 65 2d 69 6e 2d 6f 75 74 2d 71 75 61 64 22 Data Ascii: unction(t,n,i,r){return it/r+n}],"ease-in-quad":["cubic-bezier(0.550, 0.085, 0.680, 0.530)",function(t,n,i,r){return i(t/=r)t+n}],"ease-out-quad":["cubic-bezier(0.250, 0.460, 0.450, 0.940)",function(t,n,i,r){return-i(t/=r)*(t-2)+n}],"ease-in-out-quad"
2025-03-19 10:00:29 UTC	1369	IN	Data Raw: 2f 32 2a 28 28 74 2d 3d 32 29 2a 74 2a 74 2a 74 2a 74 2b 32 29 2b 6e 7d 5d 2c 22 65 61 73 65 2d 69 6e 2d 73 69 6e 65 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 37 30 2c 20 30 2c 20 30 2e 37 34 35 2c 20 30 2e 37 31 35 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 29 7b 72 65 74 75 72 6e 2d 69 2a 4d 61 74 68 2e 63 6f 73 28 74 2f 72 2a 28 4d 61 74 68 2e 50 49 2f 32 29 29 2b 69 2b 6e 7d 5d 2c 22 65 61 73 65 2d 6f 75 74 2d 73 69 6e 65 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 33 39 30 2c 20 30 2e 35 37 35 2c 20 30 2e 35 36 35 2c 20 31 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 29 7b 72 65 74 75 72 6e 20 69 2a 4d 61 74 68 2e 73 69 6e 28 74 2f 72 2a 28 4d 61 74 68 2e 50 49 2f 32 29 29 2b 6e 7d 5d 2c 22 65 Data Ascii: /2((t-=2)tttt+2)+n}],"ease-in-sine":["cubic-bezier(0.470, 0, 0.745, 0.715)",function(t,n,i,r){return-iMath.cos(t/r(Math.PI/2))+i+n}],"ease-out-sine":["cubic-bezier(0.390, 0.575, 0.565, 1)",function(t,n,i,r){return iMath.sin(t/r*(Math.PI/2))+n}],"e
2025-03-19 10:00:29 UTC	1369	IN	Data Raw: 28 74 2c 6e 2c 69 2c 72 2c 73 29 7b 72 65 74 75 72 6e 20 73 3d 3d 3d 76 6f 69 64 20 30 26 26 28 73 3d 31 2e 37 30 31 35 38 29 2c 69 2a 28 28 74 3d 74 2f 72 2d 31 29 2a 74 2a 28 28 73 2b 31 29 2a 74 2b 73 29 2b 31 29 2b 6e 7d 5d 2c 22 65 61 73 65 2d 69 6e 2d 6f 75 74 2d 62 61 63 6b 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 36 38 30 2c 20 2d 30 2e 35 35 30 2c 20 30 2e 32 36 35 2c 20 31 2e 35 35 30 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 2c 73 29 7b 72 65 74 75 72 6e 20 73 3d 3d 3d 76 6f 69 64 20 30 26 26 28 73 3d 31 2e 37 30 31 35 38 29 2c 28 74 2f 3d 72 2f 32 29 3c 31 3f 69 2f 32 2a 74 2a 74 2a 28 28 28 73 2a 3d 31 2e 35 32 35 29 2b 31 29 2a 74 2d 73 29 2b 6e 3a 69 2f 32 2a 28 28 74 2d 3d 32 29 2a 74 2a 28 28 28 73 2a 3d 31 Data Ascii: (t,n,i,r,s){return s===void 0&&(s=1.70158),i((t=t/r-1)t((s+1)t+s)+1)+n}],"ease-in-out-back":["cubic-bezier(0.680, -0.550, 0.265, 1.550)",function(t,n,i,r,s){return s===void 0&&(s=1.70158),(t/=r/2)<1?i/2tt(((s=1.525)+1)t-s)+n:i/2((t-=2)t(((s*=1
2025-03-19 10:00:29 UTC	1369	IN	Data Raw: 6f 6e 46 72 61 6d 65 7c 7c 48 2e 6f 52 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 7c 7c 48 2e 6d 73 52 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 3b 72 65 74 75 72 6e 20 74 26 26 68 2e 62 69 6e 64 3f 74 2e 62 69 6e 64 28 48 29 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 48 2e 73 65 74 54 69 6d 65 6f 75 74 28 6e 2c 31 36 29 7d 7d 28 29 2c 63 74 3d 79 2e 6e 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 48 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2c 6e 3d 74 26 26 28 74 2e 6e 6f 77 7c 7c 74 2e 77 65 62 6b 69 74 4e 6f 77 7c 7c 74 2e 6d 73 4e 6f 77 7c 7c 74 2e 6d 6f 7a 4e 6f 77 29 3b 72 65 74 75 72 6e 20 6e 26 26 68 2e 62 69 6e 64 3f 6e 2e 62 69 6e 64 28 74 29 3a 44 61 74 65 2e 6e 6f 77 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: onFrame\|\|H.oRequestAnimationFrame\|\|H.msRequestAnimationFrame;return t&&h.bind?t.bind(H):function(n){H.setTimeout(n,16)}}(),ct=y.now=function(){var t=H.performance,n=t&&(t.now\|\|t.webkitNow\|\|t.msNow\|\|t.mozNow);return n&&h.bind?n.bind(t):Date.now\|\|function()
2025-03-19 10:00:29 UTC	1369	IN	Data Raw: 68 69 73 2e 61 63 74 69 76 65 3f 74 68 69 73 2e 71 75 65 75 65 2e 70 75 73 68 28 7b 6f 70 74 69 6f 6e 73 3a 77 7d 29 3a 28 74 68 69 73 2e 74 69 6d 65 72 3d 6e 65 77 20 71 74 28 7b 64 75 72 61 74 69 6f 6e 3a 77 2c 63 6f 6e 74 65 78 74 3a 74 68 69 73 2c 63 6f 6d 70 6c 65 74 65 3a 6f 7d 29 2c 74 68 69 73 2e 61 63 74 69 76 65 3d 21 30 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 77 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 61 63 74 69 76 65 3f 28 74 68 69 73 2e 71 75 65 75 65 2e 70 75 73 68 28 7b 6f 70 74 69 6f 6e 73 3a 77 2c 61 72 67 73 3a 61 72 67 75 6d 65 6e 74 73 7d 29 2c 76 6f 69 64 28 74 68 69 73 2e 74 69 6d 65 72 2e 63 6f 6d 70 6c 65 74 65 3d 6f 29 29 3a 42 28 22 4e 6f 20 61 63 74 69 76 65 20 74 72 61 6e 73 69 74 69 6f 6e 20 74 69 6d 65 72 2e 20 55 73 65 20 Data Ascii: his.active?this.queue.push({options:w}):(this.timer=new qt({duration:w,context:this,complete:o}),this.active=!0)}function s(w){return this.active?(this.queue.push({options:w,args:arguments}),void(this.timer.complete=o)):B("No active transition timer. Use
2025-03-19 10:00:29 UTC	1369	IN	Data Raw: 2c 4e 29 7d 4f 2e 63 61 6c 6c 28 74 68 69 73 2c 74 74 2c 73 74 29 7d 59 26 26 6e 74 26 26 59 2e 63 61 6c 6c 28 74 68 69 73 2c 6e 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 77 29 7b 77 2e 73 74 6f 70 28 29 7d 66 75 6e 63 74 69 6f 6e 20 41 74 28 77 2c 4f 29 7b 77 2e 73 65 74 28 4f 29 7d 66 75 6e 63 74 69 6f 6e 20 67 65 28 77 29 7b 74 68 69 73 2e 24 65 6c 2e 63 73 73 28 77 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 74 28 77 2c 4f 29 7b 74 5b 77 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 68 69 6c 64 72 65 6e 3f 79 65 2e 63 61 6c 6c 28 74 68 69 73 2c 4f 2c 61 72 67 75 6d 65 6e 74 73 29 3a 28 74 68 69 73 2e 65 6c 26 26 4f 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 2c 74 68 69 73 29 7d 7d 66 75 6e 63 74 69 6f 6e Data Ascii: ,N)}O.call(this,tt,st)}Y&&nt&&Y.call(this,nt)}function j(w){w.stop()}function At(w,O){w.set(O)}function ge(w){this.$el.css(w)}function ot(w,O){t[w]=function(){return this.children?ye.call(this,O,arguments):(this.el&&O.apply(this,arguments),this)}}function
2025-03-19 10:00:29 UTC	1369	IN	Data Raw: 30 30 2c 65 61 73 65 3a 22 65 61 73 65 22 2c 64 65 6c 61 79 3a 30 7d 3b 74 2e 69 6e 69 74 3d 66 75 6e 63 74 69 6f 6e 28 6f 2c 70 2c 78 2c 4b 29 7b 74 68 69 73 2e 24 65 6c 3d 6f 2c 74 68 69 73 2e 65 6c 3d 6f 5b 30 5d 3b 76 61 72 20 63 3d 70 5b 30 5d 3b 78 5b 32 5d 26 26 28 63 3d 78 5b 32 5d 29 2c 48 74 5b 63 5d 26 26 28 63 3d 48 74 5b 63 5d 29 2c 74 68 69 73 2e 6e 61 6d 65 3d 63 2c 74 68 69 73 2e 74 79 70 65 3d 78 5b 31 5d 2c 74 68 69 73 2e 64 75 72 61 74 69 6f 6e 3d 49 28 70 5b 31 5d 2c 74 68 69 73 2e 64 75 72 61 74 69 6f 6e 2c 73 2e 64 75 72 61 74 69 6f 6e 29 2c 74 68 69 73 2e 65 61 73 65 3d 69 28 70 5b 32 5d 2c 74 68 69 73 2e 65 61 73 65 2c 73 2e 65 61 73 65 29 2c 74 68 69 73 2e 64 65 6c 61 79 3d 49 28 70 5b 33 5d 2c 74 68 69 73 2e 64 65 6c 61 79 2c 73 Data Ascii: 00,ease:"ease",delay:0};t.init=function(o,p,x,K){this.$el=o,this.el=o[0];var c=p[0];x[2]&&(c=x[2]),Ht[c]&&(c=Ht[c]),this.name=c,this.type=x[1],this.duration=I(p[1],this.duration,s.duration),this.ease=i(p[2],this.ease,s.ease),this.delay=I(p[3],this.delay,s
2025-03-19 10:00:29 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 29 7b 28 74 68 69 73 2e 61 63 74 69 76 65 7c 7c 74 68 69 73 2e 6e 65 78 74 53 74 79 6c 65 29 26 26 28 74 68 69 73 2e 61 63 74 69 76 65 3d 21 31 2c 74 68 69 73 2e 6e 65 78 74 53 74 79 6c 65 3d 6e 75 6c 6c 2c 62 74 28 74 68 69 73 2e 65 6c 2c 74 68 69 73 2e 6e 61 6d 65 2c 74 68 69 73 2e 67 65 74 28 29 29 29 3b 76 61 72 20 6f 3d 74 68 69 73 2e 74 77 65 65 6e 3b 6f 26 26 6f 2e 63 6f 6e 74 65 78 74 26 26 6f 2e 64 65 73 74 72 6f 79 28 29 7d 2c 74 2e 63 6f 6e 76 65 72 74 3d 66 75 6e 63 74 69 6f 6e 28 6f 2c 70 29 7b 69 66 28 6f 3d 3d 22 61 75 74 6f 22 26 26 74 68 69 73 2e 61 75 74 6f 29 72 65 74 75 72 6e 20 6f 3b 76 61 72 20 78 2c 4b 3d 74 79 70 65 6f 66 20 6f 3d 3d 22 6e 75 6d 62 65 72 22 2c 63 3d 74 79 70 65 6f 66 20 6f 3d 3d 22 73 74 72 69 6e 67 Data Ascii: tion(){(this.active\|\|this.nextStyle)&&(this.active=!1,this.nextStyle=null,bt(this.el,this.name,this.get()));var o=this.tween;o&&o.context&&o.destroy()},t.convert=function(o,p){if(o=="auto"&&this.auto)return o;var x,K=typeof o=="number",c=typeof o=="string

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.9	49698	104.18.161.117	443	1480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:00:29 UTC	709	OUT	GET /678a174507adb9ecf0e5709b/678a1771bbb1a2124595aab5_dgdgdg.png HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://sso-robinhood-net--cdn-auth.webflow.io/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:00:29 UTC	676	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 10:00:29 GMT Content-Type: image/png Content-Length: 803 Connection: close x-amz-id-2: eGElMtEkVV22NIZwaGVRQvFYIuLB7238Kz3wmwJwmFnG/9GZzzyFdMB2PliQ+eb+LNpL6OJ6t1ZD9WIda8PwCGecgJ/EnfN7wIWnxbYZdow= x-amz-request-id: 9WQF4WBXS10BBBXJ Last-Modified: Fri, 17 Jan 2025 08:40:19 GMT ETag: "c8f0cef2d937562902daa9c3c0b67ca3" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, must-revalidate x-amz-version-id: jaQDMLDKsPp8nX9ra1IDxhropJ08juNQ CF-Cache-Status: HIT Age: 132360 Accept-Ranges: bytes Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 922c1f7f395a18c1-FRA alt-svc: h3=":443"; ma=86400
2025-03-19 10:00:29 UTC	693	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 02 b8 49 44 41 54 58 47 ed 96 4d 68 13 41 18 86 df 4d 76 37 a9 5b aa 97 22 62 10 d4 0a 0a 82 0a 96 16 2f fe 54 4b 82 20 52 d4 8a 8a 54 84 18 fc ab 20 82 82 5e 94 d6 fa 47 05 ab 54 ad 07 c1 a2 a2 d5 7a d0 83 15 a9 f4 a2 34 45 bd e8 21 7a 10 ad 5a 4b 6d 4b ac f9 d9 64 d7 6f 93 8d d9 16 93 9d 4d 23 b9 f4 81 65 33 33 61 e6 9d f7 fb be 99 e5 fc 2a 54 14 10 9b fe 2e 18 53 02 0a 2e 20 6f 49 18 8f 01 df 3f d9 f0 73 80 83 e0 00 5c f3 15 14 cf 30 9f 3a 2f 02 7a 3a 05 5c 3d e6 40 70 98 03 c7 25 fb 38 f2 f6 e0 c5 30 Data Ascii: PNGIHDR szzsRGBgAMAapHYsodIDATXGMhAMv7["b/TK RT ^GTz4E!zZKmKdoM#e33a*T.S. oI?s\0:/z:\=@p%80
2025-03-19 10:00:29 UTC	110	IN	Data Raw: 46 eb ab 24 78 ea a2 a8 aa 8d 21 4a 9b 95 48 40 be 30 0d c1 37 ca f4 91 41 0e 6b b7 ca f4 a5 a3 e6 75 71 0d 53 01 2f 9f f0 a8 de 21 33 9f 6c 56 31 15 d0 db c5 c3 bd d3 fc 56 cb 95 ec 39 40 23 ef fd 76 2c 2a b7 7e c0 b0 92 97 8f d2 c9 c0 7c 10 fd 2f a6 04 14 58 00 f0 07 6b fc e1 8a c3 30 56 c5 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: F$x!JH@07AkuqS/!3lV1V9@#v,*~\|/Xk0VIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.9	49699	104.18.161.117	443	1480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:00:29 UTC	814	OUT	GET /678a174507adb9ecf0e5709b/678a175f2b47ac7e1e8eb33f_Screenshot%202025-01-08%20at%2013-39-14%20Commission-free%20Stock%20Trading%20%26%20Investing%20App%20Robinhood.png HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://sso-robinhood-net--cdn-auth.webflow.io/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:00:29 UTC	701	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 10:00:29 GMT Content-Type: image/png Content-Length: 544845 Connection: close x-amz-id-2: it3PI85ysWjsKyOY1XCfLknGo9dhh8JW5SPg4Cg44SBMUeO2/FIJ6ycs9yVt2vDL+jAiLZIO07iV9ZLPFckciA== x-amz-request-id: 9WQ5N4GZ7MS78YFB Last-Modified: Fri, 17 Jan 2025 08:40:01 GMT ETag: "35baa4c2960f7adaa6f26cc982435555" x-amz-storage-class: INTELLIGENT_TIERING x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, must-revalidate x-amz-version-id: NOnJVIzQzNO2jAAQsa1bFgn3Nj0FRmxo CF-Cache-Status: HIT Age: 132360 Accept-Ranges: bytes Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 922c1f7f6d001e45-FRA alt-svc: h3=":443"; ma=86400
2025-03-19 10:00:29 UTC	668	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 44 00 00 03 00 08 06 00 00 00 ec 65 6d 17 00 00 20 00 49 44 41 54 78 5e ec 7d 07 80 64 69 55 f5 ed 9c 73 ce b9 a7 27 ef cc 6c 64 59 d8 95 20 48 10 04 89 06 04 03 a2 80 28 08 fe 80 88 22 4a 10 15 09 8a 02 8a a0 88 04 49 0a 88 0a cb c2 e6 9d dd 9d 9c 43 4f ec ee e9 c9 a9 e3 7f ce f7 ea ab 7a 5d 5d e1 55 7a af 66 e6 7e b2 ee ec d4 0b df 3b 5f 3e f7 dc 7b 0b 44 64 11 ff 68 51 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 e0 ba 47 a0 40 09 d1 eb be 8d f5 03 15 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 20 84 80 12 a2 da 15 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 Data Ascii: PNGIHDRDem IDATx^}diUs'ldY H("JICOz]]Uzf~;_>{DdhQE@PE@PE@PE@PEG@E@PE@PE@PE@PE E@PE@PE@PE@P
2025-03-19 10:00:29 UTC	1369	IN	Data Raw: c8 4b 5e f2 12 b9 7c f9 b2 7c e2 13 9f 90 cf 7d ee 73 81 7c d1 fb df ff 7e 79 ee 73 9f 2b 95 95 95 81 bc ff 5a 79 e9 c5 8b 17 e5 5b df fa 96 fc e1 1f fe a1 af 55 56 42 d4 57 b8 f5 65 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 a4 8f 00 d5 a0 6f 7b db db e4 7b df fb 9e 7c e4 23 1f 91 83 07 0f a6 ff b0 eb f8 4e 2a 32 df fa d6 b7 ca d3 9e f6 34 21 39 f9 85 2f 7c c1 97 af e5 bb 5e f8 c2 17 1a a2 5a 8b 77 04 a8 1a fd f2 97 bf 2c ef 7d ef 7b bd df 94 c1 95 4a 88 66 00 9e de aa 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 1f 08 d0 0d fe 9b df fc a6 1c 39 72 44 de fe f6 b7 2b 11 ea 11 f4 e1 e1 61 f9 e0 07 3f 28 d5 d5 d5 f2 d2 97 be 54 ce 9d 3b e7 f1 ce d4 2e eb ee ee 96 6f 7c e3 1b 52 55 55 95 da Data Ascii: K^\|\|}s\|~ys+Zy[UVBWe"("("("o{{\|#N*24!9/\|^Zw,}{Jf("("("(9rD+a?(T;.o\|RUU
2025-03-19 10:00:29 UTC	1369	IN	Data Raw: 93 a8 69 71 71 d1 33 88 5e 09 51 7e c7 3b df f9 4e f3 dc 0f 7d e8 43 31 49 db 78 2f 55 42 d4 73 73 e4 dd 85 24 8d bf f2 95 af c8 ff fb 7f ff 2f ef ea a6 15 ca 7f 04 3e f6 b1 8f c9 9d 77 de b9 cc 20 14 74 cd f3 b5 5e a9 e0 f2 fb bf ff fb f2 c3 1f fe 50 1e 7c f0 c1 65 b7 d1 12 cc 05 f5 e7 7e ee e7 52 79 64 5e 5c 9b 8d ba ff da af fd 9a bc f5 ad 6f 35 86 be 5c 26 2a bc 16 e7 c7 6c e0 9b 17 1d 45 2b a1 08 28 02 8a 80 22 a0 08 04 88 00 63 5e 52 54 43 d1 d3 aa 55 ab cc 7e e3 e4 c9 93 f2 37 7f f3 37 72 f6 ec d9 00 6b 76 6d bc fa e6 9b 6f 36 67 cc be be be 6b a3 c2 d7 70 2d 8b 8a 8a 4c 06 f3 b1 b1 b1 98 9e c8 b1 3e ed 85 2f 7c a1 e1 7c b4 f8 8f 00 b9 c1 6c 85 90 c8 0b 42 94 aa cb b7 bd ed 6d 61 24 4f 9c 38 61 26 ce 5f ff f5 5f 97 6d db b6 19 89 38 3f 9a 16 25 ba Data Ascii: iqq3^Q~;N}C1Ix/UBss$/>w t^P\|e~Ryd^\o5\&*lE+("c^RTCU~77rkvmo6gkp-L>/\|\|lBma$O8a&__m8?%
2025-03-19 10:00:29 UTC	1369	IN	Data Raw: f8 83 1f fc c0 d4 8d 9d 95 2a 54 5a 73 48 54 32 2b 5c 7b 7b bb 21 74 29 79 e7 7f f3 bb e9 5e 4f 95 2a dd f8 39 c1 5b 42 94 13 03 89 d0 99 99 19 69 6d 6d 35 ef 21 41 c9 3a 5b 12 93 98 90 d4 62 c2 29 86 16 20 a9 cb b8 2c e7 cf 9f 97 9f f9 99 9f 31 16 38 96 d5 ab 57 0b eb dc d6 d6 26 93 93 93 42 e5 ad 4d 3a f5 a6 37 bd c9 a8 00 59 48 2c b0 1d 48 ae d2 85 94 cf 5c b9 72 a5 21 eb 38 21 dc 48 84 28 17 1e e2 6f 0f 3c c4 92 fd 84 09 bb d8 5e 3f fd d3 3f 6d 30 73 13 86 fc 33 15 83 c4 91 7d 96 24 b2 25 0e 49 a6 b1 4f 53 59 c9 42 52 8d cf 88 56 87 45 1f fa 52 ad 07 09 23 4b d2 f1 3d ee 3a b8 07 0d bf 87 6a 3b 2a 5b dd 8a 52 7b f8 64 02 33 f6 41 b7 72 6d f3 e6 cd 4b 08 1a fe 4e b5 b6 fd 2e aa f6 48 c6 33 64 80 5d e0 a8 74 23 06 5e c8 1d d6 8f 0b 3d 09 30 8e 25 8e 49 Data Ascii: TZsHT2+\{{!t)y^O9[Bimm5!A:[b) ,18W&BM:7YH,H\r!8!H(o<^??m0s3}$%IOSYBRVER#K=:j;*[R{d3ArmKN.H3d]t#^=0%I
2025-03-19 10:00:29 UTC	1369	IN	Data Raw: e7 9f ad d1 35 96 b7 87 bb 0d 13 89 8b fc fc 6e f2 40 dc c7 b2 6f 7a 29 14 91 91 af f1 a3 d0 43 85 c6 59 b7 02 94 67 4d fe 1d 3d 99 dd bf 33 01 17 3d 89 d9 6f 28 ec 62 a1 58 80 f7 92 6f 22 4f 40 83 00 f7 ed dc d3 90 27 a3 a8 ce 5d 78 1d 49 57 ee 9b 58 c8 0b f1 0c 45 85 37 79 2f 9e 3f 29 14 a4 51 81 7b 76 3e 8f e7 60 bf 0a bd ca 39 36 b2 51 02 25 44 e9 7a 4a f5 24 0b c1 24 e1 44 6b 92 db 85 98 6a c8 44 99 e3 dd 20 24 cb 32 cf 83 e3 f3 9f ff 7c a3 f0 24 49 ca c6 63 66 78 76 7e ca 6e 6d e1 61 82 f1 01 49 62 b0 33 59 42 94 93 39 0f 95 b6 90 b0 a1 aa 94 83 c6 92 a7 f1 08 51 4e b6 74 e5 b7 85 07 17 12 64 24 22 a9 78 b1 0a 51 76 32 76 68 5b f8 5c 76 44 92 ae 6c f4 57 bc e2 15 a6 73 92 3c e6 26 df 5d 48 80 31 8e 05 27 2a 4e a0 3c 20 51 c9 c7 ef 63 a7 b1 e5 13 9f Data Ascii: 5n@oz)CYgM=3=o(bXo"O@']xIWXE7y/?)Q{v>`96Q%DzJ$$DkjD $2\|$Icfxv~nmaIb3YB9QNtd$"xQv2vh[\vDlWs<&]H1'*N< Qc
2025-03-19 10:00:29 UTC	1369	IN	Data Raw: bc 8e b1 56 c9 85 b8 39 84 6c 3e 3f de b3 12 11 a2 b1 04 14 d6 3b 92 7b 50 ee 0f dd a1 e3 f8 9b 17 85 68 74 2e 8b 20 e2 8b f2 1c 4a 6f 24 fe db 4b f1 53 21 ca fa 50 9c c7 9c 1a 34 36 90 23 a2 98 8d e4 33 8b 25 44 49 7e 92 9c a4 00 c7 1a cb d9 2e 0c 5f 61 15 a2 14 d7 51 09 4b 52 35 9a f8 b4 df ed 85 10 25 39 6b 63 98 5a be 29 9a 58 f5 82 63 3a d7 90 1b 60 88 c7 6c 94 40 09 51 12 7d 6c 4c 1e 7c 39 09 91 a0 74 77 c0 7f fc c7 7f 14 06 65 f6 5a 2c 79 41 77 5b ba b6 bb 0b 27 5d 2b f9 e5 3b a9 2c a2 f2 91 1d 99 93 a9 bb 70 12 67 47 e3 84 3c 36 36 16 56 88 92 48 fc ec 67 3f bb e4 5a eb 96 46 62 91 44 47 3c 42 94 04 15 27 10 5b 38 39 50 a9 f0 ce 77 be d3 fc 3b 5e 96 79 76 54 ba d9 f3 90 c7 43 21 15 b4 94 47 c7 b2 5a b1 e3 92 58 25 d9 4a 4b 1c 5d 42 a9 ae 23 2e ee Data Ascii: V9l>?;{Pht. Jo$KS!P46#3%DI~._aQKR5%9kcZ)Xc:`l@Q}lL\|9tweZ,yAw[']+;,pgG<66VHg?ZFbDG<B'[89Pw;^yvTC!GZX%JK]B#.
2025-03-19 10:00:29 UTC	1369	IN	Data Raw: 64 c6 20 49 a5 d8 c9 92 49 83 78 e8 8d 2e 9c e8 a8 1c 65 bc 12 5a a3 f8 4e c6 d7 b4 ff 6d af e7 06 9c 64 11 89 8b f7 bc e7 3d 61 42 94 aa 51 92 20 4c 7c c4 c2 7b c9 84 73 40 73 62 67 1c d4 5c 13 a2 d6 9d 9f 87 60 ba fd 5b 97 42 0e 46 7e 0f ad 5b 54 b5 f2 77 d6 87 56 0b 12 65 3b 77 ee 34 75 66 e0 5f 4a c1 29 bf 67 8c c6 cf 7f fe f3 86 38 e5 81 c4 fe b7 c5 c1 aa 51 6f 34 42 94 df cf 36 25 f1 e9 8e 93 69 d5 39 ec b7 ee d8 9c 89 0e da 96 64 e2 b3 18 7a c0 ed 32 6f 17 09 fe 66 09 9c e8 3e eb b5 1e 6c 3f 86 4c 20 89 cd c2 83 22 63 c5 46 c7 6b e1 6f fc 0e ba 82 d8 6b a9 3e 7e f8 e1 87 c5 ad 2e 4d a4 10 b5 0b 1c c9 77 4b 5c 32 3e 2f ef cf 86 42 34 95 31 ef d7 b5 3c 9c 73 7c 90 60 60 21 f1 43 95 35 43 5e b0 c4 22 77 ac c2 97 63 90 18 93 94 e4 f5 d1 59 e6 49 c6 c4 Data Ascii: d IIx.eZNmd=aBQ L\|{s@sbg\`[BF~[TwVe;w4uf_J)g8Qo4B6%i9dz2of>l?L "cFkok>~.MwK\2>/B41<s\|``!C5C^"wcYI
2025-03-19 10:00:29 UTC	1369	IN	Data Raw: 8c 3d 17 06 ba 7d b1 d3 32 d1 13 2d 13 cc 46 6e 0b 9f c5 b8 0f 24 5c e9 da ee 2e 74 db a2 cb 01 7f 63 5d dc 04 a7 fb 3a 32 f5 74 55 60 9d e9 62 60 dd e7 a3 71 e7 f3 a8 9a 25 79 4a 95 2e 63 bc 32 36 03 ad 0a 7e 07 73 ce 56 9f d0 e7 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 d7 1a 02 f4 5e ad ab ab 33 21 06 f2 bd 44 87 70 8b 0e 31 96 cf f5 a7 02 f9 e0 c1 83 61 a5 ab d7 ba 52 70 47 be 27 9f 0a 15 a0 f4 1e 26 97 63 b3 d1 d3 9b 2a 9b ea cd 20 09 51 aa cc 6d 18 a9 6c e0 1e 08 21 4a 76 9a c4 db b3 9f fd ec 6c 7c 83 3e 43 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 81 eb 06 01 e6 5d 61 b2 64 92 6e 24 ec b4 64 1f 01 e6 65 a1 57 2c c5 6a d6 eb d7 eb 5b 18 cb 9f ae e4 f4 cc d5 92 7b 04 16 16 16 8c 62 9a 82 bd Data Ascii: =}2-Fn$\.tc]:2tU`b`q%yJ.c26~sV("("("(^3!Dp1aRpG'&c* Qml!Jvl\|>CPE@PE@PE@P]adn$deW,j[{b
2025-03-19 10:00:29 UTC	1369	IN	Data Raw: 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 04 82 80 12 a2 81 c0 ae 2f 55 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 81 20 10 50 42 34 08 d4 f5 9d 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 10 08 02 4a 88 06 02 bb be 54 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 82 40 a0 60 11 25 88 17 eb 3b 15 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 c8 05 02 3f be ef 5e b9 f3 a9 4f cb c5 a3 f5 99 8a 80 22 70 1d 20 50 d0 50 53 6a 08 51 cb 8a 16 e0 4f 85 05 73 d2 d6 52 27 63 63 43 72 e1 c2 15 d9 b9 7b 5c ce e3 df bc 86 92 52 2d fe 22 e0 50 d6 05 52 28 0b d2 54 5f 2c 1b 36 ac 90 f9 c5 Data Ascii: "("("/UE@PE@PE@PE@P PB4"("("("("JTPE@PE@PE@PE@P@`%;E@PE@PE@PE@?^O"p PPSjQOsR'ccCr{\R-"PR(T_,6
2025-03-19 10:00:29 UTC	1369	IN	Data Raw: 14 c2 08 35 01 92 3c 77 84 e8 52 3a 31 32 4e e7 a4 aa b2 44 ba ba 7a cd f8 b8 8a 8d 55 ee bf 7e e9 ce 9b ff 55 08 42 b4 1a f5 e8 ed 1f c1 fa 7d d0 18 8c 3d d5 23 09 4b ea 99 44 c5 fa 57 5c 54 08 e3 5b 03 fe 5d 24 e3 c7 fc 27 47 22 6d 42 03 6f a1 74 76 75 e3 c0 7e 5e 4e 9f 3d ef eb 5e d7 ec f2 50 99 a2 82 19 19 19 ea 96 4b 57 e6 30 46 4f 05 26 0e 59 c4 dc c9 f5 96 46 ef ce ae 16 08 55 e6 30 7f 9e 09 ef 47 3d 0f ba ac 5c e8 10 69 4d 8d 75 d2 dc dc 2c 47 8f 9d 40 7d 48 de 7b ea ad 59 a9 41 ec 87 80 44 2f 2e 80 41 a1 db d4 65 ef be 43 f8 77 71 0e df b7 fc d1 ce 29 da ee b9 b9 b2 cc 49 7b 4b b5 b4 b4 b6 62 3c 4d 83 74 a4 d1 38 f8 33 1b eb 48 e3 6c 09 8c a5 3d 5d ed 52 57 df 04 d1 c7 21 b9 70 31 f8 76 0c 9f bf 30 f6 ba da eb 65 f5 9a 0d f2 83 fb 1e 81 81 e8 4a Data Ascii: 5<wR:12NDzU~UB}=#KDW\T[]$'G"mBotvu~^N=^PKW0FO&YFU0G=\iMu,G@}H{YAD/.AeCwq)I{Kb<Mt83Hl=]RW!p1v0eJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.9	49704	104.18.160.117	443	1480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:00:29 UTC	450	OUT	GET /678a174507adb9ecf0e5709b/678a1771bbb1a2124595aab5_dgdgdg.png HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:00:29 UTC	676	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 10:00:29 GMT Content-Type: image/png Content-Length: 803 Connection: close x-amz-id-2: eGElMtEkVV22NIZwaGVRQvFYIuLB7238Kz3wmwJwmFnG/9GZzzyFdMB2PliQ+eb+LNpL6OJ6t1ZD9WIda8PwCGecgJ/EnfN7wIWnxbYZdow= x-amz-request-id: 9WQF4WBXS10BBBXJ Last-Modified: Fri, 17 Jan 2025 08:40:19 GMT ETag: "c8f0cef2d937562902daa9c3c0b67ca3" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, must-revalidate x-amz-version-id: jaQDMLDKsPp8nX9ra1IDxhropJ08juNQ CF-Cache-Status: HIT Age: 132360 Accept-Ranges: bytes Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 922c1f803c5d3831-FRA alt-svc: h3=":443"; ma=86400
2025-03-19 10:00:29 UTC	693	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 02 b8 49 44 41 54 58 47 ed 96 4d 68 13 41 18 86 df 4d 76 37 a9 5b aa 97 22 62 10 d4 0a 0a 82 0a 96 16 2f fe 54 4b 82 20 52 d4 8a 8a 54 84 18 fc ab 20 82 82 5e 94 d6 fa 47 05 ab 54 ad 07 c1 a2 a2 d5 7a d0 83 15 a9 f4 a2 34 45 bd e8 21 7a 10 ad 5a 4b 6d 4b ac f9 d9 64 d7 6f 93 8d d9 16 93 9d 4d 23 b9 f4 81 65 33 33 61 e6 9d f7 fb be 99 e5 fc 2a 54 14 10 9b fe 2e 18 53 02 0a 2e 20 6f 49 18 8f 01 df 3f d9 f0 73 80 83 e0 00 5c f3 15 14 cf 30 9f 3a 2f 02 7a 3a 05 5c 3d e6 40 70 98 03 c7 25 fb 38 f2 f6 e0 c5 30 Data Ascii: PNGIHDR szzsRGBgAMAapHYsodIDATXGMhAMv7["b/TK RT ^GTz4E!zZKmKdoM#e33a*T.S. oI?s\0:/z:\=@p%80
2025-03-19 10:00:29 UTC	110	IN	Data Raw: 46 eb ab 24 78 ea a2 a8 aa 8d 21 4a 9b 95 48 40 be 30 0d c1 37 ca f4 91 41 0e 6b b7 ca f4 a5 a3 e6 75 71 0d 53 01 2f 9f f0 a8 de 21 33 9f 6c 56 31 15 d0 db c5 c3 bd d3 fc 56 cb 95 ec 39 40 23 ef fd 76 2c 2a b7 7e c0 b0 92 97 8f d2 c9 c0 7c 10 fd 2f a6 04 14 58 00 f0 07 6b fc e1 8a c3 30 56 c5 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: F$x!JH@07AkuqS/!3lV1V9@#v,*~\|/Xk0VIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.9	49705	104.18.160.117	443	1480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:00:29 UTC	555	OUT	GET /678a174507adb9ecf0e5709b/678a175f2b47ac7e1e8eb33f_Screenshot%202025-01-08%20at%2013-39-14%20Commission-free%20Stock%20Trading%20%26%20Investing%20App%20Robinhood.png HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:00:29 UTC	701	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 10:00:29 GMT Content-Type: image/png Content-Length: 544845 Connection: close x-amz-id-2: it3PI85ysWjsKyOY1XCfLknGo9dhh8JW5SPg4Cg44SBMUeO2/FIJ6ycs9yVt2vDL+jAiLZIO07iV9ZLPFckciA== x-amz-request-id: 9WQ5N4GZ7MS78YFB Last-Modified: Fri, 17 Jan 2025 08:40:01 GMT ETag: "35baa4c2960f7adaa6f26cc982435555" x-amz-storage-class: INTELLIGENT_TIERING x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, must-revalidate x-amz-version-id: NOnJVIzQzNO2jAAQsa1bFgn3Nj0FRmxo CF-Cache-Status: HIT Age: 132360 Accept-Ranges: bytes Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 922c1f809f2bd2b7-FRA alt-svc: h3=":443"; ma=86400
2025-03-19 10:00:29 UTC	668	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 44 00 00 03 00 08 06 00 00 00 ec 65 6d 17 00 00 20 00 49 44 41 54 78 5e ec 7d 07 80 64 69 55 f5 ed 9c 73 ce b9 a7 27 ef cc 6c 64 59 d8 95 20 48 10 04 89 06 04 03 a2 80 28 08 fe 80 88 22 4a 10 15 09 8a 02 8a a0 88 04 49 0a 88 0a cb c2 e6 9d dd 9d 9c 43 4f ec ee e9 c9 a9 e3 7f ce f7 ea ab 7a 5d 5d e1 55 7a af 66 e6 7e b2 ee ec d4 0b df 3b 5f 3e f7 dc 7b 0b 44 64 11 ff 68 51 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 e0 ba 47 a0 40 09 d1 eb be 8d f5 03 15 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 20 84 80 12 a2 da 15 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 Data Ascii: PNGIHDRDem IDATx^}diUs'ldY H("JICOz]]Uzf~;_>{DdhQE@PE@PE@PE@PEG@E@PE@PE@PE@PE E@PE@PE@PE@P
2025-03-19 10:00:29 UTC	1369	IN	Data Raw: c8 4b 5e f2 12 b9 7c f9 b2 7c e2 13 9f 90 cf 7d ee 73 81 7c d1 fb df ff 7e 79 ee 73 9f 2b 95 95 95 81 bc ff 5a 79 e9 c5 8b 17 e5 5b df fa 96 fc e1 1f fe a1 af 55 56 42 d4 57 b8 f5 65 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 a4 8f 00 d5 a0 6f 7b db db e4 7b df fb 9e 7c e4 23 1f 91 83 07 0f a6 ff b0 eb f8 4e 2a 32 df fa d6 b7 ca d3 9e f6 34 21 39 f9 85 2f 7c c1 97 af e5 bb 5e f8 c2 17 1a a2 5a 8b 77 04 a8 1a fd f2 97 bf 2c ef 7d ef 7b bd df 94 c1 95 4a 88 66 00 9e de aa 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 1f 08 d0 0d fe 9b df fc a6 1c 39 72 44 de fe f6 b7 2b 11 ea 11 f4 e1 e1 61 f9 e0 07 3f 28 d5 d5 d5 f2 d2 97 be 54 ce 9d 3b e7 f1 ce d4 2e eb ee ee 96 6f 7c e3 1b 52 55 55 95 da Data Ascii: K^\|\|}s\|~ys+Zy[UVBWe"("("("o{{\|#N*24!9/\|^Zw,}{Jf("("("(9rD+a?(T;.o\|RUU
2025-03-19 10:00:29 UTC	1369	IN	Data Raw: 93 a8 69 71 71 d1 33 88 5e 09 51 7e c7 3b df f9 4e f3 dc 0f 7d e8 43 31 49 db 78 2f 55 42 d4 73 73 e4 dd 85 24 8d bf f2 95 af c8 ff fb 7f ff 2f ef ea a6 15 ca 7f 04 3e f6 b1 8f c9 9d 77 de b9 cc 20 14 74 cd f3 b5 5e a9 e0 f2 fb bf ff fb f2 c3 1f fe 50 1e 7c f0 c1 65 b7 d1 12 cc 05 f5 e7 7e ee e7 52 79 64 5e 5c 9b 8d ba ff da af fd 9a bc f5 ad 6f 35 86 be 5c 26 2a bc 16 e7 c7 6c e0 9b 17 1d 45 2b a1 08 28 02 8a 80 22 a0 08 04 88 00 63 5e 52 54 43 d1 d3 aa 55 ab cc 7e e3 e4 c9 93 f2 37 7f f3 37 72 f6 ec d9 00 6b 76 6d bc fa e6 9b 6f 36 67 cc be be be 6b a3 c2 d7 70 2d 8b 8a 8a 4c 06 f3 b1 b1 b1 98 9e c8 b1 3e ed 85 2f 7c a1 e1 7c b4 f8 8f 00 b9 c1 6c 85 90 c8 0b 42 94 aa cb b7 bd ed 6d 61 24 4f 9c 38 61 26 ce 5f ff f5 5f 97 6d db b6 19 89 38 3f 9a 16 25 ba Data Ascii: iqq3^Q~;N}C1Ix/UBss$/>w t^P\|e~Ryd^\o5\&*lE+("c^RTCU~77rkvmo6gkp-L>/\|\|lBma$O8a&__m8?%
2025-03-19 10:00:29 UTC	1369	IN	Data Raw: f8 83 1f fc c0 d4 8d 9d 95 2a 54 5a 73 48 54 32 2b 5c 7b 7b bb 21 74 29 79 e7 7f f3 bb e9 5e 4f 95 2a dd f8 39 c1 5b 42 94 13 03 89 d0 99 99 19 69 6d 6d 35 ef 21 41 c9 3a 5b 12 93 98 90 d4 62 c2 29 86 16 20 a9 cb b8 2c e7 cf 9f 97 9f f9 99 9f 31 16 38 96 d5 ab 57 0b eb dc d6 d6 26 93 93 93 42 e5 ad 4d 3a f5 a6 37 bd c9 a8 00 59 48 2c b0 1d 48 ae d2 85 94 cf 5c b9 72 a5 21 eb 38 21 dc 48 84 28 17 1e e2 6f 0f 3c c4 92 fd 84 09 bb d8 5e 3f fd d3 3f 6d 30 73 13 86 fc 33 15 83 c4 91 7d 96 24 b2 25 0e 49 a6 b1 4f 53 59 c9 42 52 8d cf 88 56 87 45 1f fa 52 ad 07 09 23 4b d2 f1 3d ee 3a b8 07 0d bf 87 6a 3b 2a 5b dd 8a 52 7b f8 64 02 33 f6 41 b7 72 6d f3 e6 cd 4b 08 1a fe 4e b5 b6 fd 2e aa f6 48 c6 33 64 80 5d e0 a8 74 23 06 5e c8 1d d6 8f 0b 3d 09 30 8e 25 8e 49 Data Ascii: TZsHT2+\{{!t)y^O9[Bimm5!A:[b) ,18W&BM:7YH,H\r!8!H(o<^??m0s3}$%IOSYBRVER#K=:j;*[R{d3ArmKN.H3d]t#^=0%I
2025-03-19 10:00:29 UTC	1369	IN	Data Raw: e7 9f ad d1 35 96 b7 87 bb 0d 13 89 8b fc fc 6e f2 40 dc c7 b2 6f 7a 29 14 91 91 af f1 a3 d0 43 85 c6 59 b7 02 94 67 4d fe 1d 3d 99 dd bf 33 01 17 3d 89 d9 6f 28 ec 62 a1 58 80 f7 92 6f 22 4f 40 83 00 f7 ed dc d3 90 27 a3 a8 ce 5d 78 1d 49 57 ee 9b 58 c8 0b f1 0c 45 85 37 79 2f 9e 3f 29 14 a4 51 81 7b 76 3e 8f e7 60 bf 0a bd ca 39 36 b2 51 02 25 44 e9 7a 4a f5 24 0b c1 24 e1 44 6b 92 db 85 98 6a c8 44 99 e3 dd 20 24 cb 32 cf 83 e3 f3 9f ff 7c a3 f0 24 49 ca c6 63 66 78 76 7e ca 6e 6d e1 61 82 f1 01 49 62 b0 33 59 42 94 93 39 0f 95 b6 90 b0 a1 aa 94 83 c6 92 a7 f1 08 51 4e b6 74 e5 b7 85 07 17 12 64 24 22 a9 78 b1 0a 51 76 32 76 68 5b f8 5c 76 44 92 ae 6c f4 57 bc e2 15 a6 73 92 3c e6 26 df 5d 48 80 31 8e 05 27 2a 4e a0 3c 20 51 c9 c7 ef 63 a7 b1 e5 13 9f Data Ascii: 5n@oz)CYgM=3=o(bXo"O@']xIWXE7y/?)Q{v>`96Q%DzJ$$DkjD $2\|$Icfxv~nmaIb3YB9QNtd$"xQv2vh[\vDlWs<&]H1'*N< Qc
2025-03-19 10:00:29 UTC	1369	IN	Data Raw: bc 8e b1 56 c9 85 b8 39 84 6c 3e 3f de b3 12 11 a2 b1 04 14 d6 3b 92 7b 50 ee 0f dd a1 e3 f8 9b 17 85 68 74 2e 8b 20 e2 8b f2 1c 4a 6f 24 fe db 4b f1 53 21 ca fa 50 9c c7 9c 1a 34 36 90 23 a2 98 8d e4 33 8b 25 44 49 7e 92 9c a4 00 c7 1a cb d9 2e 0c 5f 61 15 a2 14 d7 51 09 4b 52 35 9a f8 b4 df ed 85 10 25 39 6b 63 98 5a be 29 9a 58 f5 82 63 3a d7 90 1b 60 88 c7 6c 94 40 09 51 12 7d 6c 4c 1e 7c 39 09 91 a0 74 77 c0 7f fc c7 7f 14 06 65 f6 5a 2c 79 41 77 5b ba b6 bb 0b 27 5d 2b f9 e5 3b a9 2c a2 f2 91 1d 99 93 a9 bb 70 12 67 47 e3 84 3c 36 36 16 56 88 92 48 fc ec 67 3f bb e4 5a eb 96 46 62 91 44 47 3c 42 94 04 15 27 10 5b 38 39 50 a9 f0 ce 77 be d3 fc 3b 5e 96 79 76 54 ba d9 f3 90 c7 43 21 15 b4 94 47 c7 b2 5a b1 e3 92 58 25 d9 4a 4b 1c 5d 42 a9 ae 23 2e ee Data Ascii: V9l>?;{Pht. Jo$KS!P46#3%DI~._aQKR5%9kcZ)Xc:`l@Q}lL\|9tweZ,yAw[']+;,pgG<66VHg?ZFbDG<B'[89Pw;^yvTC!GZX%JK]B#.
2025-03-19 10:00:29 UTC	1369	IN	Data Raw: 64 c6 20 49 a5 d8 c9 92 49 83 78 e8 8d 2e 9c e8 a8 1c 65 bc 12 5a a3 f8 4e c6 d7 b4 ff 6d af e7 06 9c 64 11 89 8b f7 bc e7 3d 61 42 94 aa 51 92 20 4c 7c c4 c2 7b c9 84 73 40 73 62 67 1c d4 5c 13 a2 d6 9d 9f 87 60 ba fd 5b 97 42 0e 46 7e 0f ad 5b 54 b5 f2 77 d6 87 56 0b 12 65 3b 77 ee 34 75 66 e0 5f 4a c1 29 bf 67 8c c6 cf 7f fe f3 86 38 e5 81 c4 fe b7 c5 c1 aa 51 6f 34 42 94 df cf 36 25 f1 e9 8e 93 69 d5 39 ec b7 ee d8 9c 89 0e da 96 64 e2 b3 18 7a c0 ed 32 6f 17 09 fe 66 09 9c e8 3e eb b5 1e 6c 3f 86 4c 20 89 cd c2 83 22 63 c5 46 c7 6b e1 6f fc 0e ba 82 d8 6b a9 3e 7e f8 e1 87 c5 ad 2e 4d a4 10 b5 0b 1c c9 77 4b 5c 32 3e 2f ef cf 86 42 34 95 31 ef d7 b5 3c 9c 73 7c 90 60 60 21 f1 43 95 35 43 5e b0 c4 22 77 ac c2 97 63 90 18 93 94 e4 f5 d1 59 e6 49 c6 c4 Data Ascii: d IIx.eZNmd=aBQ L\|{s@sbg\`[BF~[TwVe;w4uf_J)g8Qo4B6%i9dz2of>l?L "cFkok>~.MwK\2>/B41<s\|``!C5C^"wcYI
2025-03-19 10:00:29 UTC	1369	IN	Data Raw: 8c 3d 17 06 ba 7d b1 d3 32 d1 13 2d 13 cc 46 6e 0b 9f c5 b8 0f 24 5c e9 da ee 2e 74 db a2 cb 01 7f 63 5d dc 04 a7 fb 3a 32 f5 74 55 60 9d e9 62 60 dd e7 a3 71 e7 f3 a8 9a 25 79 4a 95 2e 63 bc 32 36 03 ad 0a 7e 07 73 ce 56 9f d0 e7 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 d7 1a 02 f4 5e ad ab ab 33 21 06 f2 bd 44 87 70 8b 0e 31 96 cf f5 a7 02 f9 e0 c1 83 61 a5 ab d7 ba 52 70 47 be 27 9f 0a 15 a0 f4 1e 26 97 63 b3 d1 d3 9b 2a 9b ea cd 20 09 51 aa cc 6d 18 a9 6c e0 1e 08 21 4a 76 9a c4 db b3 9f fd ec 6c 7c 83 3e 43 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 81 eb 06 01 e6 5d 61 b2 64 92 6e 24 ec b4 64 1f 01 e6 65 a1 57 2c c5 6a d6 eb d7 eb 5b 18 cb 9f ae e4 f4 cc d5 92 7b 04 16 16 16 8c 62 9a 82 bd Data Ascii: =}2-Fn$\.tc]:2tU`b`q%yJ.c26~sV("("("(^3!Dp1aRpG'&c* Qml!Jvl\|>CPE@PE@PE@P]adn$deW,j[{b
2025-03-19 10:00:29 UTC	1369	IN	Data Raw: 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 04 82 80 12 a2 81 c0 ae 2f 55 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 81 20 10 50 42 34 08 d4 f5 9d 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 10 08 02 4a 88 06 02 bb be 54 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 82 40 a0 60 11 25 88 17 eb 3b 15 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 c8 05 02 3f be ef 5e b9 f3 a9 4f cb c5 a3 f5 99 8a 80 22 70 1d 20 50 d0 50 53 6a 08 51 cb 8a 16 e0 4f 85 05 73 d2 d6 52 27 63 63 43 72 e1 c2 15 d9 b9 7b 5c ce e3 df bc 86 92 52 2d fe 22 e0 50 d6 05 52 28 0b d2 54 5f 2c 1b 36 ac 90 f9 c5 Data Ascii: "("("/UE@PE@PE@PE@P PB4"("("("("JTPE@PE@PE@PE@P@`%;E@PE@PE@PE@?^O"p PPSjQOsR'ccCr{\R-"PR(T_,6
2025-03-19 10:00:29 UTC	1369	IN	Data Raw: 14 c2 08 35 01 92 3c 77 84 e8 52 3a 31 32 4e e7 a4 aa b2 44 ba ba 7a cd f8 b8 8a 8d 55 ee bf 7e e9 ce 9b ff 55 08 42 b4 1a f5 e8 ed 1f c1 fa 7d d0 18 8c 3d d5 23 09 4b ea 99 44 c5 fa 57 5c 54 08 e3 5b 03 fe 5d 24 e3 c7 fc 27 47 22 6d 42 03 6f a1 74 76 75 e3 c0 7e 5e 4e 9f 3d ef eb 5e d7 ec f2 50 99 a2 82 19 19 19 ea 96 4b 57 e6 30 46 4f 05 26 0e 59 c4 dc c9 f5 96 46 ef ce ae 16 08 55 e6 30 7f 9e 09 ef 47 3d 0f ba ac 5c e8 10 69 4d 8d 75 d2 dc dc 2c 47 8f 9d 40 7d 48 de 7b ea ad 59 a9 41 ec 87 80 44 2f 2e 80 41 a1 db d4 65 ef be 43 f8 77 71 0e df b7 fc d1 ce 29 da ee b9 b9 b2 cc 49 7b 4b b5 b4 b4 b6 62 3c 4d 83 74 a4 d1 38 f8 33 1b eb 48 e3 6c 09 8c a5 3d 5d ed 52 57 df 04 d1 c7 21 b9 70 31 f8 76 0c 9f bf 30 f6 ba da eb 65 f5 9a 0d f2 83 fb 1e 81 81 e8 4a Data Ascii: 5<wR:12NDzU~UB}=#KDW\T[]$'G"mBotvu~^N=^PKW0FO&YFU0G=\iMu,G@}H{YAD/.AeCwq)I{Kb<Mt83Hl=]RW!p1v0eJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.9	49691	142.250.184.196	443	1480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:00:31 UTC	575	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIlKHLAQiJo8sBCIWgzQEI/qXOAQiB1s4BCKXgzgEIxOHOAQiu5M4BCN/kzgEIjOXOAQ== Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:00:31 UTC	1303	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 10:00:31 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-bOlJaoq8InJNoYxgCNqEzw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Downlink Accept-CH: RTT Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-19 10:00:31 UTC	75	IN	Data Raw: 31 37 37 63 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 7a 64 66 20 6d 65 64 69 61 74 68 65 6b 20 73 74 72 65 61 6d 69 6e 67 22 2c 22 6c 69 6d 62 75 72 67 20 7a 75 67 20 6c 6b 77 22 2c 22 67 6f 6f 67 6c 65 20 70 69 78 65 6c 20 39 Data Ascii: 177c)]}'["",["zdf mediathek streaming","limburg zug lkw","google pixel 9
2025-03-19 10:00:31 UTC	1378	IN	Data Raw: 61 22 2c 22 62 76 62 20 62 6f 72 75 73 73 69 61 20 64 6f 72 74 6d 75 6e 64 22 2c 22 62 79 64 20 61 75 74 6f 22 2c 22 65 6d 69 6c 69 65 20 64 65 71 75 65 6e 6e 65 22 2c 22 6f 70 65 6c 20 7a 6f 6f 20 67 69 72 61 66 66 65 6e 62 61 62 79 22 2c 22 78 65 6e 6f 62 6c 61 64 65 20 63 68 72 6f 6e 69 63 6c 65 73 20 78 20 6e 69 6e 74 65 6e 64 6f 20 73 77 69 74 63 68 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 67 72 6f 75 70 73 69 6e 66 6f 22 3a 22 43 69 41 49 6b 6b 34 53 47 77 6f 58 56 48 4a 6c 62 6d 52 7a 49 47 4a 6c 61 53 42 54 64 57 4e 6f 59 57 35 6d Data Ascii: a","bvb borussia dortmund","byd auto","emilie dequenne","opel zoo giraffenbaby","xenoblade chronicles x nintendo switch"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"CiAIkk4SGwoXVHJlbmRzIGJlaSBTdWNoYW5m
2025-03-19 10:00:31 UTC	1378	IN	Data Raw: 51 76 52 6e 4e 33 61 33 56 68 4e 6e 63 34 5a 6e 4e 43 51 58 68 6d 5a 6b 68 30 55 6e 56 52 57 6b 4e 59 59 56 56 7a 56 7a 5a 76 64 6b 56 5a 61 46 68 74 61 45 31 47 61 44 64 6e 57 47 4e 4e 57 44 64 59 56 57 68 7a 53 30 70 48 4f 48 70 79 63 44 63 34 51 7a 4a 33 62 6e 6f 32 4c 31 46 4d 4e 46 56 6f 62 6b 34 76 55 32 78 68 65 6d 46 46 61 47 35 53 52 6a 56 79 4e 56 64 76 62 6b 64 69 63 58 46 33 54 30 6c 72 52 54 56 4f 64 6e 64 6c 55 6b 64 46 51 57 78 6d 52 46 5a 57 63 48 63 78 55 48 70 43 55 31 63 78 64 30 77 79 57 55 39 6f 4d 44 52 51 64 6b 35 49 62 55 4d 33 53 32 59 31 55 44 6c 4c 51 31 70 77 56 55 52 6d 54 6e 64 42 4d 6d 39 5a 52 6b 56 36 56 47 5a 70 4e 31 64 48 64 55 68 56 5a 30 35 74 4e 47 74 4e 4e 6b 56 52 4e 48 64 4a 54 58 4d 77 52 31 5a 46 53 45 52 78 53 Data Ascii: QvRnN3a3VhNnc4ZnNCQXhmZkh0UnVRWkNYYVVzVzZvdkVZaFhtaE1GaDdnWGNNWDdYVWhzS0pHOHpycDc4QzJ3bno2L1FMNFVobk4vU2xhemFFaG5SRjVyNVdvbkdicXF3T0lrRTVOdndlUkdFQWxmRFZWcHcxUHpCU1cxd0wyWU9oMDRQdk5IbUM3S2Y1UDlLQ1pwVURmTndBMm9ZRkV6VGZpN1dHdUhVZ05tNGtNNkVRNHdJTXMwR1ZFSERxS
2025-03-19 10:00:31 UTC	1378	IN	Data Raw: 4e 58 67 7a 64 56 46 75 5a 79 74 4f 51 6d 64 30 55 44 68 4b 52 54 46 70 64 6b 46 71 54 55 64 55 54 33 5a 33 53 6d 68 43 4f 46 52 6a 52 57 68 4d 53 6a 4a 6e 54 6e 46 46 55 58 64 45 5a 6c 46 6b 53 48 6f 31 57 6c 55 30 4e 6e 52 42 64 6d 4e 53 64 32 64 52 52 55 4a 4b 64 6a 4e 6d 52 6b 46 42 51 57 78 36 61 30 59 31 53 6c 6b 30 64 48 4e 75 4e 45 70 31 64 31 5a 33 53 6c 5a 4a 5a 6e 64 4e 5a 33 5a 71 57 56 5a 6d 57 6b 6b 78 56 31 56 42 65 46 64 75 64 6d 52 6a 51 55 31 54 52 54 56 52 51 57 64 57 51 56 5a 58 56 32 5a 56 54 48 70 55 4d 6c 42 33 53 43 74 61 52 44 52 70 64 45 52 73 55 6c 46 34 65 57 49 79 51 56 56 35 56 6b 35 50 54 48 51 78 5a 55 35 54 4e 6d 74 4d 4d 32 6c 79 55 6a 5a 33 52 55 35 77 4f 47 35 50 51 33 5a 42 52 6c 5a 5a 64 6c 6c 36 59 6a 68 30 5a 54 4e Data Ascii: NXgzdVFuZytOQmd0UDhKRTFpdkFqTUdUT3Z3SmhCOFRjRWhMSjJnTnFFUXdEZlFkSHo1WlU0NnRBdmNSd2dRRUJKdjNmRkFBQWx6a0Y1Slk0dHNuNEp1d1Z3SlZJZndNZ3ZqWVZmWkkxV1VBeFdudmRjQU1TRTVRQWdWQVZXV2ZVTHpUMlB3SCtaRDRpdERsUlF4eWIyQVV5Vk5PTHQxZU5TNmtMM2lyUjZ3RU5wOG5PQ3ZBRlZZdll6Yjh0ZTN
2025-03-19 10:00:31 UTC	1378	IN	Data Raw: 4a 51 6b 46 33 52 55 5a 43 51 57 4e 48 51 6e 64 42 51 55 46 42 51 55 46 42 51 55 56 44 51 58 64 42 52 55 56 52 56 55 64 46 61 55 5a 43 56 56 46 6a 65 46 6c 5a 52 56 52 4a 61 55 31 35 59 32 46 48 65 45 5a 43 56 6b 4e 5a 63 45 68 6f 54 54 52 4c 55 33 64 6b 53 47 6b 34 5a 69 39 46 51 55 4a 72 51 6b 46 42 53 55 52 42 55 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 52 55 46 52 54 55 5a 42 64 69 39 46 51 55 49 34 55 6b 46 42 53 55 52 42 55 55 46 45 51 55 46 4e 51 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 6b 46 6e 54 56 4a 4a 55 30 6c 34 59 31 4a 4a 56 46 46 6d 4c 32 46 42 51 58 64 45 51 56 46 42 51 30 56 52 54 56 4a 42 52 44 68 42 56 45 46 53 56 32 46 74 64 47 52 6a 62 58 55 79 54 56 5a 68 56 57 35 55 63 6b 64 79 4d 6b 64 6f 59 57 Data Ascii: JQkF3RUZCQWNHQndBQUFBQUFBQUVDQXdBRUVRVUdFaUZCVVFjeFlZRVRJaU15Y2FHeEZCVkNZcEhoTTRLU3dkSGk4Zi9FQUJrQkFBSURBUUFBQUFBQUFBQUFBQUFBQUFBRUFRTUZBdi9FQUI4UkFBSURBUUFEQUFNQUFBQUFBQUFBQUFBQkFnTVJJU0l4Y1JJVFFmL2FBQXdEQVFBQ0VRTVJBRDhBVEFSV2FtdGRjbXUyTVZhVW5UckdyMkdoYW
2025-03-19 10:00:31 UTC	433	IN	Data Raw: 47 39 35 65 56 6f 7a 55 6a 42 33 55 56 4a 71 65 58 42 4c 59 54 68 71 56 6e 42 73 4e 48 42 4d 4b 30 63 78 62 32 4e 30 62 6b 70 69 51 6b 77 31 52 30 73 31 53 56 4e 52 57 54 59 35 4d 6d 56 73 52 57 55 77 52 57 6c 33 59 57 68 79 4d 57 6c 76 4f 56 56 55 51 6d 39 33 54 31 68 79 5a 6a 64 56 63 6b 74 49 54 58 4a 36 57 47 70 54 53 6d 46 6e 57 55 56 69 59 6e 42 4d 53 48 4a 72 51 56 56 55 4e 6e 4d 79 54 6d 39 69 64 54 5a 72 55 57 4a 73 64 31 64 61 56 6a 68 4e 61 6b 5a 46 55 46 70 47 4c 32 39 33 4d 48 64 6c 4d 33 52 70 55 47 56 57 52 56 42 36 54 6c 64 68 61 55 38 76 59 6e 68 4f 4d 56 4a 55 4f 48 46 79 54 47 46 6e 53 6e 4a 68 65 48 41 76 52 46 56 43 5a 6b 6c 45 4f 54 5a 7a 4d 58 41 76 64 45 35 50 64 47 34 32 65 45 77 35 53 32 46 79 5a 6c 64 61 4d 58 6b 30 61 6c 4e 6d Data Ascii: G95eVozUjB3UVJqeXBLYThqVnBsNHBMK0cxb2N0bkpiQkw1R0s1SVNRWTY5MmVsRWUwRWl3YWhyMWlvOVVUQm93T1hyZjdVcktITXJ6WGpTSmFnWUViYnBMSHJrQVVUNnMyTm9idTZrUWJsd1daVjhNakZFUFpGL293MHdlM3RpUGVWRVB6TldhaU8vYnhOMVJUOHFyTGFnSnJheHAvRFVCZklEOTZzMXAvdE5PdG42eEw5S2FyZldaMXk0alNm
2025-03-19 10:00:31 UTC	89	IN	Data Raw: 35 33 0d 0a 52 46 42 46 65 55 51 79 59 33 4a 73 56 45 67 30 51 54 52 50 55 6a 68 6a 57 54 68 68 55 48 52 75 57 56 6c 4b 54 48 56 55 53 7a 63 79 55 56 46 77 51 58 70 71 61 6c 4e 6f 63 7a 56 4b 4e 6b 64 34 4d 31 70 42 56 6b 46 51 63 55 4a 31 53 45 4e 72 4e 30 70 0d 0a Data Ascii: 53RFBFeUQyY3JsVEg0QTRPUjhjWThhUHRuWVlKTHVUSzcyUVFwQXpqalNoczVKNkd4M1pBVkFQcUJ1SENrN0p
2025-03-19 10:00:31 UTC	831	IN	Data Raw: 33 33 38 0d 0a 48 61 6c 5a 43 63 6e 41 31 56 7a 46 46 59 7a 68 48 61 6c 51 32 61 48 46 79 54 47 6c 4b 59 31 49 79 63 30 70 50 4e 6c 64 4b 64 30 4e 36 53 45 4a 51 5a 6a 4e 42 52 48 70 76 61 33 5a 4b 53 47 35 73 5a 30 46 50 4f 58 56 77 61 6e 70 4b 65 6a 6c 44 53 31 4a 31 4d 48 70 59 62 31 6f 33 55 57 46 69 53 45 74 32 63 58 56 48 62 44 4e 6c 55 48 64 49 65 44 55 78 51 57 31 73 61 57 6c 73 64 44 56 49 61 56 70 4a 4c 32 5a 43 59 6a 68 58 54 7a 63 72 4f 55 5a 5a 56 30 68 45 54 33 4e 58 63 6c 4e 30 62 6d 64 71 52 6b 46 6d 55 45 5a 50 62 6c 6f 33 64 47 5a 5a 59 58 5a 77 65 56 64 55 65 58 46 73 4f 55 4e 4e 54 6b 64 34 4e 48 51 30 61 58 45 31 65 56 68 33 61 32 35 74 59 6c 42 32 52 58 4e 43 4d 55 35 54 52 46 52 69 57 58 4a 6d 57 46 5a 32 53 6b 70 4d 52 47 52 52 57 Data Ascii: 338HalZCcnA1VzFFYzhHalQ2aHFyTGlKY1Iyc0pPNldKd0N6SEJQZjNBRHpva3ZKSG5sZ0FPOXVwanpKejlDS1J1MHpYb1o3UWFiSEt2cXVHbDNlUHdIeDUxQW1saWlsdDVIaVpJL2ZCYjhXTzcrOUZZV0hET3NXclN0bmdqRkFmUEZPblo3dGZZYXZweVdUeXFsOUNNTkd4NHQ0aXE1eVh3a25tYlB2RXNCMU5TRFRiWXJmWFZ2SkpMRGRRW
2025-03-19 10:00:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Statistics

CPU Usage

• chrome.exe
• chrome.exe
• chrome.exe

Click to jump to process

Memory Usage

• chrome.exe
• chrome.exe
• chrome.exe

Click to jump to process

Click to jump to process

Target ID:	0
Start time:	06:00:20
Start date:	19/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff7da530000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	06:00:21
Start date:	19/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2044,i,14281106701017814361,4991699053126300690,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2080 /prefetch:3
Imagebase:	0x7ff7da530000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	5
Start time:	06:00:28
Start date:	19/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://sso-robinhood-net--cdn-auth.webflow.io/"
Imagebase:	0x7ff7da530000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://sso-robinhood-net--cdn-auth.webflow.io/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4376_1121715122\_metadata\verified_contents.json

C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4376_1121715122\manifest.fingerprint

C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4376_1121715122\manifest.json

C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4376_1121715122\privacy-sandbox-attestations.dat

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTP Packets

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Windows Analysis Report
https://sso-robinhood-net--cdn-auth.webflow.io/