Edit tour

Windows Analysis Report
https://sso-robinhood-nett-cdn--auth.webflow.io/

Overview

General Information

Sample URL:	https://sso-robinhood-nett-cdn--auth.webflow.io/
Analysis ID:	1642766
Infos:

Detection

HTMLPhisher

Score:	60
Range:	0 - 100
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Yara detected HtmlPhish64

AI detected suspicious URL

Creates files inside the system directory

Deletes files inside the Windows folder

HTML body contains low number of good links

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2868 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 5888 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2012,i,16234513530984416712,16261496549647889113,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2040 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6372 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://sso-robinhood-nett-cdn--auth.webflow.io/" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
0.0.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security

Suricata Signatures

ET MALWARE Possible Zeus GameOver/FluBot Related DGA NXDOMAIN Responses

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-03-19T11:01:59.850639+0100	2018316	1	A Network Trojan was detected	1.1.1.1	53	192.168.2.10	55237	UDP

Joe Sandbox Signatures

• AV Detection
• Phishing
• Compliance
• Networking
• System Summary

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://sso-robinhood-nett-cdn--auth.webflow.io/

Avira URL Cloud: detection malicious, Label: phishing

Phishing

Yara detected HtmlPhish64

Source: Yara match

File source: 0.0.pages.csv, type: HTML

AI detected suspicious URL

Source: https://sso-robinhood-nett-cdn--auth.webflow.io

Joe Sandbox AI: The URL 'https://sso-robinhood-nett-cdn--auth.webflow.io' appears to be attempting to mimic a legitimate Robinhood URL. The use of 'sso' and 'auth' in the subdomain suggests an attempt to imitate a single sign-on or authentication service, which is common in phishing attempts. The inclusion of 'robinhood' in the subdomain is a direct reference to the brand, and the use of 'nett' instead of 'net' could be a typographical trick to mislead users. The domain 'webflow.io' is a legitimate platform for hosting websites, which could be used for legitimate purposes, but in this context, it adds to the suspicion due to the misleading subdomain structure. The structural similarity and the context of the subdomain usage suggest a high likelihood of typosquatting.

Source: https://sso-robinhood-nett-cdn--auth.webflow.io/

HTTP Parser: Number of links: 0

Source: https://sso-robinhood-nett-cdn--auth.webflow.io/

HTTP Parser: No <meta name="author".. found

Source: https://sso-robinhood-nett-cdn--auth.webflow.io/

HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 142.250.186.132:443 -> 192.168.2.10:49690 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.36.248:443 -> 192.168.2.10:49691 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.36.248:443 -> 192.168.2.10:49692 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.160.117:443 -> 192.168.2.10:49693 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.222.232.39:443 -> 192.168.2.10:49695 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.160.117:443 -> 192.168.2.10:49694 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.222.232.39:443 -> 192.168.2.10:49698 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.222.232.39:443 -> 192.168.2.10:49699 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.160.117:443 -> 192.168.2.10:49701 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.222.232.144:443 -> 192.168.2.10:49702 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.222.232.144:443 -> 192.168.2.10:49703 version: TLS 1.2

Source: Network traffic

Suricata IDS: 2018316 - Severity 1 - ET MALWARE Possible Zeus GameOver/FluBot Related DGA NXDOMAIN Responses : 1.1.1.1:53 -> 192.168.2.10:55237

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.185.131
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.185.131
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.185.131
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.185.131
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.185.131
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.26
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.26
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.26
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.26
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.26
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.26
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.26
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.185.131
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.185.131
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: sso-robinhood-nett-cdn--auth.webflow.ioConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /678a1405aa5eaaf7916ec6e6/css/sso-robinhood-nett-cdn--auth.webflow.ce67eee42.css HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://sso-robinhood-nett-cdn--auth.webflow.io/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/jquery-3.5.1.min.dc5e7f18c8.js?site=678a1405aa5eaaf7916ec6e6 HTTP/1.1Host: d3e54v103j8qbb.cloudfront.netConnection: keep-aliveOrigin: https://sso-robinhood-nett-cdn--auth.webflow.iosec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://sso-robinhood-nett-cdn--auth.webflow.io/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /678a1405aa5eaaf7916ec6e6/js/webflow.77ac24386eb2a8dacabbd68092c045ec.js HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://sso-robinhood-nett-cdn--auth.webflow.io/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /678a1405aa5eaaf7916ec6e6/678a14258d705ca679da820b_Screenshot%202025-01-08%20at%2013-39-14%20Commission-free%20Stock%20Trading%20%26%20Investing%20App%20Robinhood.png HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://sso-robinhood-nett-cdn--auth.webflow.io/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/webflow-badge-icon-d2.89e12c322e.svg HTTP/1.1Host: d3e54v103j8qbb.cloudfront.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://sso-robinhood-nett-cdn--auth.webflow.io/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/webflow-badge-text-d2.c82cec3b78.svg HTTP/1.1Host: d3e54v103j8qbb.cloudfront.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://sso-robinhood-nett-cdn--auth.webflow.io/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /678a1405aa5eaaf7916ec6e6/678a14353258d0825bbf37b7_dgdgdg.png HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://sso-robinhood-nett-cdn--auth.webflow.io/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /678a1405aa5eaaf7916ec6e6/678a14258d705ca679da820b_Screenshot%202025-01-08%20at%2013-39-14%20Commission-free%20Stock%20Trading%20%26%20Investing%20App%20Robinhood.png HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/webflow-badge-icon-d2.89e12c322e.svg HTTP/1.1Host: d3e54v103j8qbb.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/webflow-badge-text-d2.c82cec3b78.svg HTTP/1.1Host: d3e54v103j8qbb.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /678a1405aa5eaaf7916ec6e6/678a14353258d0825bbf37b7_dgdgdg.png HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiKo8sBCIWgzQEI/aXOAQiA1s4BCMDYzgEIydzOAQjg4M4BCOXjzgEIr+TOAQjI5M4BCN/kzgEIi+XOAQiO5c4BSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /r/gsr1.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog
Source: global traffic	HTTP traffic detected: GET /r/r4.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: sso-robinhood-nett-cdn--auth.webflow.io
Source: global traffic	DNS traffic detected: DNS query: cdn.prod.website-files.com
Source: global traffic	DNS traffic detected: DNS query: d3e54v103j8qbb.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: robenboodlogi.info
Source: global traffic	DNS traffic detected: DNS query: google.com

Source: chromecache_60.1.dr	String found in binary or memory: http://underscorejs.org
Source: chromecache_64.1.dr	String found in binary or memory: https://cdn.prod.website-files.com/678a1405aa5eaaf7916ec6e6/678a14258d705ca679da820b_Screenshot%2020
Source: chromecache_64.1.dr	String found in binary or memory: https://cdn.prod.website-files.com/678a1405aa5eaaf7916ec6e6/678a14353258d0825bbf37b7_dgdgdg.png
Source: chromecache_64.1.dr	String found in binary or memory: https://cdn.prod.website-files.com/678a1405aa5eaaf7916ec6e6/css/sso-robinhood-nett-cdn--auth.webflow
Source: chromecache_64.1.dr	String found in binary or memory: https://cdn.prod.website-files.com/678a1405aa5eaaf7916ec6e6/js/webflow.77ac24386eb2a8dacabbd68092c04
Source: chromecache_64.1.dr	String found in binary or memory: https://cdn.prod.website-files.com/img/webclip.png
Source: chromecache_64.1.dr	String found in binary or memory: https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=678a1405aa5eaaf7916ec6e
Source: chromecache_60.1.dr	String found in binary or memory: https://github.com/bkwld/tram
Source: chromecache_64.1.dr	String found in binary or memory: https://robenboodlogi.info/logi/
Source: chromecache_64.1.dr	String found in binary or memory: https://webflow.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown	Network traffic detected: HTTP traffic on port 49699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49695 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49697 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49693 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49691 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49690 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49699
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49697
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49695
Source: unknown	Network traffic detected: HTTP traffic on port 49694 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49694
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49693
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49692
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49692 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49691
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49690
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723

Source: unknown	HTTPS traffic detected: 142.250.186.132:443 -> 192.168.2.10:49690 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.36.248:443 -> 192.168.2.10:49691 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.36.248:443 -> 192.168.2.10:49692 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.160.117:443 -> 192.168.2.10:49693 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.222.232.39:443 -> 192.168.2.10:49695 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.160.117:443 -> 192.168.2.10:49694 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.222.232.39:443 -> 192.168.2.10:49698 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.222.232.39:443 -> 192.168.2.10:49699 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.160.117:443 -> 192.168.2.10:49701 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.222.232.144:443 -> 192.168.2.10:49702 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.222.232.144:443 -> 192.168.2.10:49703 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir2868_175755470

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir2868_175755470

Jump to behavior

Source: classification engine

Classification label: mal60.phis.win@28/22@40/8

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2012,i,16234513530984416712,16261496549647889113,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2040 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://sso-robinhood-nett-cdn--auth.webflow.io/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2012,i,16234513530984416712,16261496549647889113,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2040 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://sso-robinhood-nett-cdn--auth.webflow.io/	100%	Avira URL Cloud	phishing

Source	Detection	Scanner	Label	Link
https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=678a1405aa5eaaf7916ec6e	0%	Avira URL Cloud	safe
https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=678a1405aa5eaaf7916ec6e6	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
d3e54v103j8qbb.cloudfront.net	52.222.232.39	true	false	high
google.com	142.251.37.110	true	false	high
cdn.prod.website-files.com	104.18.160.117	true	false	high
www.google.com	142.250.186.132	true	false	high
sso-robinhood-nett-cdn--auth.webflow.io	104.18.36.248	true	true	unknown
robenboodlogi.info	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://sso-robinhood-nett-cdn--auth.webflow.io/	true		unknown
https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=678a1405aa5eaaf7916ec6e6	false	Avira URL Cloud: safe	unknown
https://cdn.prod.website-files.com/678a1405aa5eaaf7916ec6e6/678a14258d705ca679da820b_Screenshot%202025-01-08%20at%2013-39-14%20Commission-free%20Stock%20Trading%20%26%20Investing%20App%20Robinhood.png	false		high
https://cdn.prod.website-files.com/678a1405aa5eaaf7916ec6e6/css/sso-robinhood-nett-cdn--auth.webflow.ce67eee42.css	false		high
https://d3e54v103j8qbb.cloudfront.net/img/webflow-badge-text-d2.c82cec3b78.svg	false		high
https://cdn.prod.website-files.com/678a1405aa5eaaf7916ec6e6/678a14353258d0825bbf37b7_dgdgdg.png	false		high
https://cdn.prod.website-files.com/678a1405aa5eaaf7916ec6e6/js/webflow.77ac24386eb2a8dacabbd68092c045ec.js	false		high
https://d3e54v103j8qbb.cloudfront.net/img/webflow-badge-icon-d2.89e12c322e.svg	false		high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://cdn.prod.website-files.com/678a1405aa5eaaf7916ec6e6/js/webflow.77ac24386eb2a8dacabbd68092c04	chromecache_64.1.dr	false		high
https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=678a1405aa5eaaf7916ec6e	chromecache_64.1.dr	false	Avira URL Cloud: safe	unknown
http://underscorejs.org	chromecache_60.1.dr	false		high
https://cdn.prod.website-files.com/678a1405aa5eaaf7916ec6e6/678a14258d705ca679da820b_Screenshot%2020	chromecache_64.1.dr	false		high
https://cdn.prod.website-files.com/img/webclip.png	chromecache_64.1.dr	false		high
https://robenboodlogi.info/logi/	chromecache_64.1.dr	false		high
https://cdn.prod.website-files.com/678a1405aa5eaaf7916ec6e6/css/sso-robinhood-nett-cdn--auth.webflow	chromecache_64.1.dr	false		high
https://github.com/bkwld/tram	chromecache_60.1.dr	false		high
https://webflow.com	chromecache_64.1.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.36.248	sso-robinhood-nett-cdn--auth.webflow.io	United States	13335	CLOUDFLARENETUS	true
52.222.232.39	d3e54v103j8qbb.cloudfront.net	United States	16509	AMAZON-02US	false
104.18.160.117	cdn.prod.website-files.com	United States	13335	CLOUDFLARENETUS	false
142.250.186.132	www.google.com	United States	15169	GOOGLEUS	false
52.222.232.144	unknown	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.6
192.168.2.10
192.168.2.24

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1642766
Start date and time:	2025-03-19 10:59:55 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 12s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://sso-robinhood-nett-cdn--auth.webflow.io/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	17
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal60.phis.win@28/22@40/8
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, sppsvc.exe, SIHClient.exe, Sgrmuserer.exe, conhost.exe, TextInputHost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.163, 142.250.181.238, 74.125.71.84, 142.250.184.206, 142.250.185.142, 172.217.23.110, 88.221.110.91, 142.250.74.206, 216.58.212.142, 216.58.206.35, 142.250.185.163, 142.250.184.238, 172.202.163.200, 23.199.214.10, 2.23.227.208
Excluded domains from analysis (whitelisted): www.bing.com, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com, c.pki.goog
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://sso-robinhood-nett-cdn--auth.webflow.io/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (2587)
Category:	downloaded
Size (bytes):	36230
Entropy (8bit):	5.229407486730831
Encrypted:	false
SSDEEP:	768:AyNf7A1RE/GqyFVF54mkxWaIi1aUuF9Zl0F6FhF8FPqkowKji/JVx1:Aye1REeqyP0XcPyjowKjK
MD5:	CE67EEE42C89568CEA3E40F6459BEBDB
SHA1:	2893E67BA934122231F741F77F24BB2F0DFEAED6
SHA-256:	C219BD77B1A92CCD8E6A3EE098A0BC34A65F56C666660FF934B4638D4AD681F3
SHA-512:	50F0AE74E0FA09ADA3CE88D6518F02835D77665FC0817724EFE068806C3F2C89BFE3035C65EC55020A22F0E69B61C8977948A4E0D631BE2D193464F7F8922FB5
Malicious:	false
Reputation:	low
URL:	https://cdn.prod.website-files.com/678a1405aa5eaaf7916ec6e6/css/sso-robinhood-nett-cdn--auth.webflow.ce67eee42.css
Preview:	html {. -webkit-text-size-adjust: 100%;. -ms-text-size-adjust: 100%;. font-family: sans-serif;.}..body {. margin: 0;.}..article, aside, details, figcaption, figure, footer, header, hgroup, main, menu, nav, section, summary {. display: block;.}..audio, canvas, progress, video {. vertical-align: baseline;. display: inline-block;.}..audio:not([controls]) {. height: 0;. display: none;.}..[hidden], template {. display: none;.}..a {. background-color: #0000;.}..a:active, a:hover {. outline: 0;.}..abbr[title] {. border-bottom: 1px dotted;.}..b, strong {. font-weight: bold;.}..dfn {. font-style: italic;.}..h1 {. margin: .67em 0;. font-size: 2em;.}..mark {. color: #000;. background: #ff0;.}..small {. font-size: 80%;.}..sub, sup {. vertical-align: baseline;. font-size: 75%;. line-height: 0;. position: relative;.}..sup {. top: -.5em;.}..sub {. bottom: -.25em;.}..img {. border: 0;.}..svg:not(:root) {. overflow: hidden;.}..hr {. box-sizing: content-box;. height: 0;.}..

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	803
Entropy (8bit):	7.582551628276611
Encrypted:	false
SSDEEP:	12:6v/7iQ/6mUO77GjYE1NfSxipER2CJUsWIZGj8fWWHIZ90C6IhHeBs9c+8DVDnb8d:PmUOXkYcpfpc2C6HgJe9l+Bs++8Jajn
MD5:	C8F0CEF2D937562902DAA9C3C0B67CA3
SHA1:	99D0D6C68F2C00ACF5CB853A402AF4D18690C0F6
SHA-256:	73862EF843D3D50565F0495EC3C08ACB45E0DA61968DBC54D431232E86B44278
SHA-512:	44E35CD1909D50DEF4A518EF818E1D751F15F1475BFA781209D76CBC6D4E69537034FFED48D95F921821DCE77E9F847F0BD27D5CA00C901E90D75405CADC1A77
Malicious:	false
Reputation:	low
URL:	https://cdn.prod.website-files.com/678a1405aa5eaaf7916ec6e6/678a14353258d0825bbf37b7_dgdgdg.png
Preview:	.PNG........IHDR... ... .....szz.....sRGB.........gAMA......a.....pHYs..........o.d....IDATXG.Mh.A...Mv7.[.."b......../.TK. R..T.... ..^...G..T......z.....4E..!z..ZKmK...d.o......M#..e33a.......T......S... oI....?..s....\....0.:/.z:.\=.@p...%.8....0Vo.....t..^.qa...F.k...U.[......D.<E~g...g.e.o.!.....!..z..'....;..tJ..@...?....=<..p ...kz.]Q...o....N.l%.........i.......k...\|..q.t.....X..Y.PW..n..Z..]2Nn+...`.u.e...^.....8..n.e.8\|M.4.s.K .?w..=.a...f.....{..-`Z..#...l..7.K%...!.....Y@W;e..oc..d..sT..\|g.9'..f........-...t..\|..8pRh....5..H..D......?.,....)Q,bY@..(F.8<n3..v.m....%&.....R...>.m..P.NWzbX.....`.0.oC.v..P.}..x......-..;.Vr.....h.......c8.P<]E..z....b-.&b..F.$x...!J..H@.0..7...A.k......uq.S./...!3.lV1.......V..9@#..v,.~........\|../...X...k...0V.....IEND.B`.

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21513)
Category:	downloaded
Size (bytes):	37349
Entropy (8bit):	5.44100455597547
Encrypted:	false
SSDEEP:	768:G5p9WeNujJ4zgTyxOv5GAUdxKzPQfsJe184wEWpqvyqL/q:G5p9WeNul4zC5jMkOyqO
MD5:	FC7EF472A2BCA6FBDB8AB8235DEC64E0
SHA1:	39637DA0AC71621757C5CEE728307E30A9D7FE61
SHA-256:	D148CEDE7C0523EBC7C9FBBA7F4EB5AD8D2C7A449814A9177190F20708D31AAB
SHA-512:	72CCEBC092F1D2A32AD8A29E312207870FADD08178862B2132E3A0CCC6316B3C9FBFD83DCECECA96E23FB86F1B378CA611B79E4790B602CDDE235F16E7D31210
Malicious:	false
Reputation:	low
URL:	https://cdn.prod.website-files.com/678a1405aa5eaaf7916ec6e6/js/webflow.77ac24386eb2a8dacabbd68092c045ec.js
Preview:	./!. Webflow: Front-end site library. * @license MIT. * Inline scripts may access the api using an async handler:. * var Webflow = Webflow \|\| [];. * Webflow.push(readyFunction);. /..(()=>{var lt=(e,y)=>()=>(y\|\|e((y={exports:{}}).exports,y),y.exports);var Pt=lt(()=>{"use strict";window.tram=function(e){function y(t,n){var i=new J.Bare;return i.init(t,n)}function l(t){return t.replace(/[A-Z]/g,function(n){return"-"+n.toLowerCase()})}function T(t){var n=parseInt(t.slice(1),16),i=n>>16&255,r=n>>8&255,s=255&n;return[i,r,s]}function C(t,n,i){return"#"+(1<<24\|t<<16\|n<<8\|i).toString(16).slice(1)}function g(){}function L(t,n){B("Type warning: Expected: ["+t+"] Got: ["+typeof n+"] "+n)}function _(t,n,i){B("Units do not match ["+t+"]: "+n+", "+i)}function I(t,n,i){if(n!==void 0&&(i=n),t===void 0)return i;var r=i;return we.test(t)\|\|!Xt.test(t)?r=parseInt(t,10):Xt.test(t)&&(r=1e3parseFloat(t)),0>r&&(r=0),r===r?r:i}function B(t){et.debug&&window&&window.console.warn(t)}function U(t){for(var

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1348 x 768, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	544845
Entropy (8bit):	7.994826952111587
Encrypted:	true
SSDEEP:	12288:5iMxt4uS0ktCT9BHI6vr1RUunodhs0aY5ZbcnVSYtFCC3l:57xnX8CRB7vr1uuodhXbcnVFT3l
MD5:	35BAA4C2960F7ADAA6F26CC982435555
SHA1:	CD19A546FAFFE2EE076AE098BD7B4E1020BB3CEA
SHA-256:	EA591836E01D6D30A24617BD80F40E8C69EEE2716A193D9ADBE835DD91354146
SHA-512:	CFBA6922813605BCDB264E812B0811167E98A7FD8462D1C6CB6390C98A3828669485C55731EF441054F78E560703A2F17513142F70FBFA2E6A59BB892EF9AAC7
Malicious:	false
Reputation:	low
URL:	https://cdn.prod.website-files.com/678a1405aa5eaaf7916ec6e6/678a14258d705ca679da820b_Screenshot%202025-01-08%20at%2013-39-14%20Commission-free%20Stock%20Trading%20%26%20Investing%20App%20Robinhood.png
Preview:	.PNG........IHDR...D..........em... .IDATx^.}..diU..s..'..ldY. H........(...."J.........I........CO.........z]].Uz.f.~......;_>..{.Dd..hQ...E@.P...E@.P...E@.P...E@.P...E.G.@.......E@.P...E@.P...E@.P...E@.P...E ........E@.P...E@.P...E@.P...E@.P...E..A@......C..E@.P...E@.P...E@.P...E@.P...E@.Q...."..(..."..(..."..(..."..(..."p. .........."..(..."..(..."..(..."..(...".....E@.P...E@.P...E@.P...E@.P...E@..a.PB.ij.PE@.P...E@.P...E@.P...E@.P...E@.PBT.."..(..."..(..."..(..."..(..(.+V....ur.]wIss.466..n.2==-.N....)...{.....+/ `...Mo...!)--...b)( .w...E........g.\|.c.....G....h ..K..E@.P...E@.P...E@.P...E@.H........^JJJ.+_.....?.......?......U....!\|.=..K^...\|..\|.....}.s.\|....~y.s.+......Zy....[.........UVB.W..e.."..(..."..(..."..(..."......o{...{...\|.#..........N*2......4!9../\|....^.....Z.w.....,.}.{....J.f....(..."..(..."..(..."..(.............9rD....+......a...?(......T.;........o\|..RUU..z...N.>m...."..hN..+..."..(..."..(..."..(..."........o..(.....9...w..o4

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	9912
Entropy (8bit):	3.9529563769674163
Encrypted:	false
SSDEEP:	192:gLTccPJ37c1fhYJ0VCa8wDY+WCYTx4Pqze9CJCmVjDsUGoT:9KMV8AITHz4Xm9lGoT
MD5:	C82CEC3B78A2B2D267BBFE3C7E838068
SHA1:	70ED58A020C395EED69E3000CB27B7B0FA191360
SHA-256:	3202CB640FADA345AB99415BD087F28E6FEA1C3009DBA51D183CC37BCE036CD7
SHA-512:	85EEF3C4FC445742ED656ACC0600CCECF4F88043E5F2638484E73C6543E5CFB4DD7FBBFA90FC34628C2A1FA1BB0BC5052DF8C1EB454534674BAA4A34C4D94F6B
Malicious:	false
Reputation:	low
Preview:	<svg width="118" height="12" viewBox="0 0 118 12" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M0.525024 0.896484H3.05432L6.00776 8.26622L8.89905 0.896484H11.3531V11H9.47327V3.79949L6.6637 11H5.18713L2.3844 3.92077V11H0.525024V0.896484Z" fill="#080808"/>.<path d="M16.152 11.1367C15.4912 11.1367 14.901 10.9704 14.3815 10.6377C13.8665 10.305 13.4609 9.84017 13.1647 9.24316C12.8684 8.6416 12.7226 7.94889 12.7272 7.16504C12.7272 6.38118 12.8776 5.69076 13.1783 5.09375C13.4791 4.49674 13.8893 4.03646 14.4088 3.71289C14.9329 3.38477 15.5276 3.22298 16.193 3.22754C16.6305 3.22754 17.0361 3.30957 17.4098 3.47363C17.7835 3.63314 18.0934 3.85417 18.3395 4.13672C18.5901 4.41471 18.7542 4.71777 18.8317 5.0459L18.4967 5.03223V3.37109H20.3698V11H18.5172L18.524 9.52344L18.8522 9.33203C18.7428 9.66927 18.5559 9.97461 18.2916 10.248C18.0273 10.5215 17.7083 10.738 17.3346 10.8975C16.9609 11.057 16.5667 11.1367 16.152 11.1367ZM16.5621 9.55078C16.9495 9.55078 17.2936 9.45052 17.5944 9.25C17.89

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	421
Entropy (8bit):	4.951302343646692
Encrypted:	false
SSDEEP:	6:tnryQovcumc4slvtM65tLApUcsw6RnDH4aFJA3ST3EGn4UGhbexTVQG6eJYLwqQq:travcuXM65hA6BrvT3gfQTVVPJYLwq7H
MD5:	89E12C322E66C81213861FC9ACB8B003
SHA1:	6A1A186CEDADCEF3D7D2FFD04F275D94A54E7930
SHA-256:	00F45354C11A12591485977633A0E03952CDF1FF2DE403E10EC846DB8CC508A9
SHA-512:	E8092977116E2B795957F36A7112A0C91DD053D8EE842B8A90D6A83F762B838C034BB31E225215C3AF850CAC0FA4B922835CECD507C5EA7E1C18DE1AB7AD80CF
Malicious:	false
Reputation:	low
URL:	https://d3e54v103j8qbb.cloudfront.net/img/webflow-badge-icon-d2.89e12c322e.svg
Preview:	<svg width="26" height="16" viewBox="0 0 26 16" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M25.65 0L17.4654 16H9.77778L13.203 9.36892H13.0493C10.2235 13.0372 6.00738 15.452 0 16V9.46068C0 9.46068 3.84306 9.23369 6.10229 6.85844H0V0.000126383H6.85832V5.64099L7.01225 5.64036L9.8148 0.000126383H15.0016V5.60523L15.1555 5.60497L18.0632 0H25.65Z" fill="#146EF5"/>.</svg>.

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (3217), with no line terminators
Category:	downloaded
Size (bytes):	3218
Entropy (8bit):	5.375880589395966
Encrypted:	false
SSDEEP:	96:N3ytx1u6f/O4jbBLT3bppifLpiNtpijpi/pilh3:NMxcN4vB3rpojoNtojo/olh3
MD5:	EC39462914045DEFF9D058D0E66EFD77
SHA1:	9A0ADE1CBFB0575565A046D57DD1B7A961A747A8
SHA-256:	ACB4912D0246AB51A2C6D93FDBE19841948BC6924F3844C359EFCA29FED3ECCE
SHA-512:	31E64585F5087DC9714D441CCDB99ECB7A400D17F2F94ADB4F89280C1172E75C06DE92A38E573E49555C413BD9548C9C88062CC9B3F1924C4D4EB31410CDF77D
Malicious:	false
Reputation:	low
URL:	https://sso-robinhood-nett-cdn--auth.webflow.io/
Preview:	<!DOCTYPE html> This site was created in Webflow. https://webflow.com --> Last Published: Fri Jan 17 2025 08:27:37 GMT+0000 (Coordinated Universal Time) --><html data-wf-domain="sso-robinhood-nett-cdn--auth.webflow.io" data-wf-page="678a1405aa5eaaf7916ec6ed" data-wf-site="678a1405aa5eaaf7916ec6e6" data-wf-status="1"><head><meta charset="utf-8"/><title>Log In \| Robinhood. - Sign In to Your Account</title><meta content="Robinhood Login is a commission-free trading platform that simplifies investing in stocks, ETFs, options, and cryptocurrencies. With a user-friendly interface, it has gained popularity among beginners and seasoned traders alike. Whether you're looking to start your first investment portfolio or refine an existing strategy, Robinhood provides a seamless platform to trade with confidence." name="description"/><meta content="width=device-width, initial-scale=1" name="viewport"/><meta content="Webflow" name="generator"/><link href="https://cdn.prod.website-files

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	421
Entropy (8bit):	4.951302343646692
Encrypted:	false
SSDEEP:	6:tnryQovcumc4slvtM65tLApUcsw6RnDH4aFJA3ST3EGn4UGhbexTVQG6eJYLwqQq:travcuXM65hA6BrvT3gfQTVVPJYLwq7H
MD5:	89E12C322E66C81213861FC9ACB8B003
SHA1:	6A1A186CEDADCEF3D7D2FFD04F275D94A54E7930
SHA-256:	00F45354C11A12591485977633A0E03952CDF1FF2DE403E10EC846DB8CC508A9
SHA-512:	E8092977116E2B795957F36A7112A0C91DD053D8EE842B8A90D6A83F762B838C034BB31E225215C3AF850CAC0FA4B922835CECD507C5EA7E1C18DE1AB7AD80CF
Malicious:	false
Reputation:	low
Preview:	<svg width="26" height="16" viewBox="0 0 26 16" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M25.65 0L17.4654 16H9.77778L13.203 9.36892H13.0493C10.2235 13.0372 6.00738 15.452 0 16V9.46068C0 9.46068 3.84306 9.23369 6.10229 6.85844H0V0.000126383H6.85832V5.64099L7.01225 5.64036L9.8148 0.000126383H15.0016V5.60523L15.1555 5.60497L18.0632 0H25.65Z" fill="#146EF5"/>.</svg>.

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	89476
Entropy (8bit):	5.2896589255084425
Encrypted:	false
SSDEEP:	1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1
MD5:	DC5E7F18C8D36AC1D3D4753A87C98D0A
SHA1:	C8E1C8B386DC5B7A9184C763C88D19A346EB3342
SHA-256:	F7F6A5894F1D19DDAD6FA392B2ECE2C5E578CBF7DA4EA805B6885EB6985B6E3D
SHA-512:	6CB4F4426F559C06190DF97229C05A436820D21498350AC9F118A5625758435171418A022ED523BAE46E668F9F8EA871FEAB6AFF58AD2740B67A30F196D65516
Malicious:	false
Reputation:	low
URL:	https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=678a1405aa5eaaf7916ec6e6
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1348 x 768, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	544845
Entropy (8bit):	7.994826952111587
Encrypted:	true
SSDEEP:	12288:5iMxt4uS0ktCT9BHI6vr1RUunodhs0aY5ZbcnVSYtFCC3l:57xnX8CRB7vr1uuodhXbcnVFT3l
MD5:	35BAA4C2960F7ADAA6F26CC982435555
SHA1:	CD19A546FAFFE2EE076AE098BD7B4E1020BB3CEA
SHA-256:	EA591836E01D6D30A24617BD80F40E8C69EEE2716A193D9ADBE835DD91354146
SHA-512:	CFBA6922813605BCDB264E812B0811167E98A7FD8462D1C6CB6390C98A3828669485C55731EF441054F78E560703A2F17513142F70FBFA2E6A59BB892EF9AAC7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...D..........em... .IDATx^.}..diU..s..'..ldY. H........(...."J.........I........CO.........z]].Uz.f.~......;_>..{.Dd..hQ...E@.P...E@.P...E@.P...E@.P...E.G.@.......E@.P...E@.P...E@.P...E@.P...E ........E@.P...E@.P...E@.P...E@.P...E..A@......C..E@.P...E@.P...E@.P...E@.P...E@.Q...."..(..."..(..."..(..."..(..."p. .........."..(..."..(..."..(..."..(...".....E@.P...E@.P...E@.P...E@.P...E@..a.PB.ij.PE@.P...E@.P...E@.P...E@.P...E@.PBT.."..(..."..(..."..(..."..(..(.+V....ur.]wIss.466..n.2==-.N....)...{.....+/ `...Mo...!)--...b)( .w...E........g.\|.c.....G....h ..K..E@.P...E@.P...E@.P...E@.H........^JJJ.+_.....?.......?......U....!\|.=..K^...\|..\|.....}.s.\|....~y.s.+......Zy....[.........UVB.W..e.."..(..."..(..."..(..."......o{...{...\|.#..........N*2......4!9../\|....^.....Z.w.....,.}.{....J.f....(..."..(..."..(..."..(.............9rD....+......a...?(......T.;........o\|..RUU..z...N.>m...."..hN..+..."..(..."..(..."..(..."........o..(.....9...w..o4

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	9912
Entropy (8bit):	3.9529563769674163
Encrypted:	false
SSDEEP:	192:gLTccPJ37c1fhYJ0VCa8wDY+WCYTx4Pqze9CJCmVjDsUGoT:9KMV8AITHz4Xm9lGoT
MD5:	C82CEC3B78A2B2D267BBFE3C7E838068
SHA1:	70ED58A020C395EED69E3000CB27B7B0FA191360
SHA-256:	3202CB640FADA345AB99415BD087F28E6FEA1C3009DBA51D183CC37BCE036CD7
SHA-512:	85EEF3C4FC445742ED656ACC0600CCECF4F88043E5F2638484E73C6543E5CFB4DD7FBBFA90FC34628C2A1FA1BB0BC5052DF8C1EB454534674BAA4A34C4D94F6B
Malicious:	false
Reputation:	low
URL:	https://d3e54v103j8qbb.cloudfront.net/img/webflow-badge-text-d2.c82cec3b78.svg
Preview:	<svg width="118" height="12" viewBox="0 0 118 12" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M0.525024 0.896484H3.05432L6.00776 8.26622L8.89905 0.896484H11.3531V11H9.47327V3.79949L6.6637 11H5.18713L2.3844 3.92077V11H0.525024V0.896484Z" fill="#080808"/>.<path d="M16.152 11.1367C15.4912 11.1367 14.901 10.9704 14.3815 10.6377C13.8665 10.305 13.4609 9.84017 13.1647 9.24316C12.8684 8.6416 12.7226 7.94889 12.7272 7.16504C12.7272 6.38118 12.8776 5.69076 13.1783 5.09375C13.4791 4.49674 13.8893 4.03646 14.4088 3.71289C14.9329 3.38477 15.5276 3.22298 16.193 3.22754C16.6305 3.22754 17.0361 3.30957 17.4098 3.47363C17.7835 3.63314 18.0934 3.85417 18.3395 4.13672C18.5901 4.41471 18.7542 4.71777 18.8317 5.0459L18.4967 5.03223V3.37109H20.3698V11H18.5172L18.524 9.52344L18.8522 9.33203C18.7428 9.66927 18.5559 9.97461 18.2916 10.248C18.0273 10.5215 17.7083 10.738 17.3346 10.8975C16.9609 11.057 16.5667 11.1367 16.152 11.1367ZM16.5621 9.55078C16.9495 9.55078 17.2936 9.45052 17.5944 9.25C17.89

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (6739)
Category:	downloaded
Size (bytes):	6745
Entropy (8bit):	5.784280825076477
Encrypted:	false
SSDEEP:	192:9kN6666Vd2kibIKvSGB4vACN6666VvmQr2gq/hGO:966666+XbXeYE6666lr2gqYO
MD5:	5081CB6B148C810A1EDE7AF60B1A3089
SHA1:	39215A5B0DF3E77B0860C671362964C96D4D4476
SHA-256:	E7C3BDC991B9A54B5A921B4DC207328503E98EC4F969D2C6751B450D998AAD15
SHA-512:	A38C2F48844079C9F37B428148BFFDB3C7AB0CCF8D92970FE2C06AC0E38C32A81DABCF22288225AB2FA2322EF2F19545D366EAF49D7240E98D0F667D8E1B776C
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE
Preview:	)]}'.["",["jakob johnson","xenoblade chronicles x nintendo switch","frosch camping","zdf mediathek streaming","tunnel gr.felfing","steffi graf","nintendo direct","rheinmetall aktien"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"CiAIkk4SGwoXVHJlbmRzIGJlaSBTdWNoYW5mcmFnZW4oCg\u003d\u003d","google:suggestdetail":[{"google:entityinfo":"Cg0vZy8xMWg1NTdycjBkEiNEZXV0c2NoZXIgQW1lcmljYW4tRm9vdGJhbGwtU3BpZWxlcjLzEGRhdGE6aW1hZ2UvanBlZztiYXNlNjQsLzlqLzRBQVFTa1pKUmdBQkFRQUFBUUFCQUFELzJ3Q0VBQWtHQndnSEJna0lCd2dLQ2drTERSWVBEUXdNRFJzVUZSQVdJQjBpSWlBZEh4OGtLRFFzSkNZeEp4OGZMVDB0TVRVM09qbzZJeXMvUkQ4NFF6UTVPamNCQ2dvS0RRd05HZzhQR2pjbEh5VTNOemMzTnpjM056YzNOemMzTnpjM056YzNOemMzTnpjM056YzNOemMzTnpjM056YzNOemMzTnpjM056YzNOemMzTi8vQUFCRUlBRUFBUUFNQklnQUNFUUVERVFIL3hBQWNBQUFEQVFBREFRRUFBQUFBQUFBQUFBQUZCZ2NFQVFJRENBRC94QUEwRUFBQ0FRSUVCQVFEQmdjQUFBQUFBQUFCQWdNRUVRQUZFaUVHTVVGUkUyRnhnUWNpa1JRak1sS2hzUlZDWW5LU3dkSC94QUFZQVFBREFRRUFBQUFBQUFBQUFBQUFBQUFDQXdRQkFQL0VB

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	803
Entropy (8bit):	7.582551628276611
Encrypted:	false
SSDEEP:	12:6v/7iQ/6mUO77GjYE1NfSxipER2CJUsWIZGj8fWWHIZ90C6IhHeBs9c+8DVDnb8d:PmUOXkYcpfpc2C6HgJe9l+Bs++8Jajn
MD5:	C8F0CEF2D937562902DAA9C3C0B67CA3
SHA1:	99D0D6C68F2C00ACF5CB853A402AF4D18690C0F6
SHA-256:	73862EF843D3D50565F0495EC3C08ACB45E0DA61968DBC54D431232E86B44278
SHA-512:	44E35CD1909D50DEF4A518EF818E1D751F15F1475BFA781209D76CBC6D4E69537034FFED48D95F921821DCE77E9F847F0BD27D5CA00C901E90D75405CADC1A77
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....sRGB.........gAMA......a.....pHYs..........o.d....IDATXG.Mh.A...Mv7.[.."b......../.TK. R..T.... ..^...G..T......z.....4E..!z..ZKmK...d.o......M#..e33a.......T......S... oI....?..s....\....0.:/.z:.\=.@p...%.8....0Vo.....t..^.qa...F.k...U.[......D.<E~g...g.e.o.!.....!..z..'....;..tJ..@...?....=<..p ...kz.]Q...o....N.l%.........i.......k...\|..q.t.....X..Y.PW..n..Z..]2Nn+...`.u.e...^.....8..n.e.8\|M.4.s.K .?w..=.a...f.....{..-`Z..#...l..7.K%...!.....Y@W;e..oc..d..sT..\|g.9'..f........-...t..\|..8pRh....5..H..D......?.,....)Q,bY@..(F.8<n3..v.m....%&.....R...>.m..P.NWzbX.....`.0.oC.v..P.}..x......-..;.Vr.....h.......c8.P<]E..z....b-.&b..F.$x...!J..H@.0..7...A.k......uq.S./...!3.lV1.......V..9@#..v,.~........\|../...X...k...0V.....IEND.B`.

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2025-03-19T11:01:59.850639+0100	2018316	ET MALWARE Possible Zeus GameOver/FluBot Related DGA NXDOMAIN Responses	1	1.1.1.1	53	192.168.2.10	55237	UDP

Network Port Distribution

Total Packets: 441
• 443 (HTTPS)
• 80 (HTTP)
• 53 (DNS)

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 19, 2025 11:01:00.711641073 CET	49690	443	192.168.2.10	142.250.186.132
Mar 19, 2025 11:01:00.711702108 CET	443	49690	142.250.186.132	192.168.2.10
Mar 19, 2025 11:01:00.711776972 CET	49690	443	192.168.2.10	142.250.186.132
Mar 19, 2025 11:01:00.711946964 CET	49690	443	192.168.2.10	142.250.186.132
Mar 19, 2025 11:01:00.711966038 CET	443	49690	142.250.186.132	192.168.2.10
Mar 19, 2025 11:01:00.748963118 CET	443	49690	142.250.186.132	192.168.2.10
Mar 19, 2025 11:01:00.749059916 CET	49690	443	192.168.2.10	142.250.186.132
Mar 19, 2025 11:01:00.751267910 CET	49690	443	192.168.2.10	142.250.186.132
Mar 19, 2025 11:01:00.751282930 CET	443	49690	142.250.186.132	192.168.2.10
Mar 19, 2025 11:01:00.751543999 CET	443	49690	142.250.186.132	192.168.2.10
Mar 19, 2025 11:01:00.795725107 CET	49690	443	192.168.2.10	142.250.186.132
Mar 19, 2025 11:01:02.596216917 CET	49691	443	192.168.2.10	104.18.36.248
Mar 19, 2025 11:01:02.596267939 CET	443	49691	104.18.36.248	192.168.2.10
Mar 19, 2025 11:01:02.596560955 CET	49691	443	192.168.2.10	104.18.36.248
Mar 19, 2025 11:01:02.596565962 CET	49692	443	192.168.2.10	104.18.36.248
Mar 19, 2025 11:01:02.596600056 CET	443	49692	104.18.36.248	192.168.2.10
Mar 19, 2025 11:01:02.596648932 CET	49692	443	192.168.2.10	104.18.36.248
Mar 19, 2025 11:01:02.596927881 CET	49692	443	192.168.2.10	104.18.36.248
Mar 19, 2025 11:01:02.596940994 CET	443	49692	104.18.36.248	192.168.2.10
Mar 19, 2025 11:01:02.597151995 CET	49691	443	192.168.2.10	104.18.36.248
Mar 19, 2025 11:01:02.597167969 CET	443	49691	104.18.36.248	192.168.2.10
Mar 19, 2025 11:01:02.627785921 CET	443	49691	104.18.36.248	192.168.2.10
Mar 19, 2025 11:01:02.627789021 CET	443	49692	104.18.36.248	192.168.2.10
Mar 19, 2025 11:01:02.627860069 CET	49692	443	192.168.2.10	104.18.36.248
Mar 19, 2025 11:01:02.627980947 CET	49691	443	192.168.2.10	104.18.36.248
Mar 19, 2025 11:01:02.633466005 CET	49691	443	192.168.2.10	104.18.36.248
Mar 19, 2025 11:01:02.633760929 CET	443	49691	104.18.36.248	192.168.2.10
Mar 19, 2025 11:01:02.633791924 CET	49692	443	192.168.2.10	104.18.36.248
Mar 19, 2025 11:01:02.634032965 CET	443	49692	104.18.36.248	192.168.2.10
Mar 19, 2025 11:01:02.634145975 CET	49691	443	192.168.2.10	104.18.36.248
Mar 19, 2025 11:01:02.676337957 CET	443	49691	104.18.36.248	192.168.2.10
Mar 19, 2025 11:01:02.690640926 CET	49692	443	192.168.2.10	104.18.36.248
Mar 19, 2025 11:01:02.725169897 CET	443	49691	104.18.36.248	192.168.2.10
Mar 19, 2025 11:01:02.725224018 CET	443	49691	104.18.36.248	192.168.2.10
Mar 19, 2025 11:01:02.725250006 CET	443	49691	104.18.36.248	192.168.2.10
Mar 19, 2025 11:01:02.725277901 CET	49691	443	192.168.2.10	104.18.36.248
Mar 19, 2025 11:01:02.725301981 CET	443	49691	104.18.36.248	192.168.2.10
Mar 19, 2025 11:01:02.725342989 CET	49691	443	192.168.2.10	104.18.36.248
Mar 19, 2025 11:01:02.725351095 CET	443	49691	104.18.36.248	192.168.2.10
Mar 19, 2025 11:01:02.725383997 CET	443	49691	104.18.36.248	192.168.2.10
Mar 19, 2025 11:01:02.725423098 CET	49691	443	192.168.2.10	104.18.36.248
Mar 19, 2025 11:01:02.726248026 CET	49691	443	192.168.2.10	104.18.36.248
Mar 19, 2025 11:01:02.726260900 CET	443	49691	104.18.36.248	192.168.2.10
Mar 19, 2025 11:01:02.806759119 CET	49693	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:02.806798935 CET	443	49693	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:02.806809902 CET	49694	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:02.806847095 CET	443	49694	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:02.806865931 CET	49693	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:02.806895971 CET	49694	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:02.807674885 CET	49695	443	192.168.2.10	52.222.232.39
Mar 19, 2025 11:01:02.807683945 CET	443	49695	52.222.232.39	192.168.2.10
Mar 19, 2025 11:01:02.807734013 CET	49695	443	192.168.2.10	52.222.232.39
Mar 19, 2025 11:01:02.808079958 CET	49694	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:02.808092117 CET	443	49694	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:02.808171034 CET	49693	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:02.808183908 CET	443	49693	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:02.808549881 CET	49695	443	192.168.2.10	52.222.232.39
Mar 19, 2025 11:01:02.808562040 CET	443	49695	52.222.232.39	192.168.2.10
Mar 19, 2025 11:01:02.838958025 CET	443	49693	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:02.839010000 CET	49693	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:02.840028048 CET	443	49695	52.222.232.39	192.168.2.10
Mar 19, 2025 11:01:02.840174913 CET	49695	443	192.168.2.10	52.222.232.39
Mar 19, 2025 11:01:02.842365026 CET	49693	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:02.842478037 CET	443	49694	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:02.842592955 CET	49694	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:02.842701912 CET	443	49693	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:02.846132040 CET	49695	443	192.168.2.10	52.222.232.39
Mar 19, 2025 11:01:02.846400976 CET	443	49695	52.222.232.39	192.168.2.10
Mar 19, 2025 11:01:02.846468925 CET	49693	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:02.847686052 CET	49694	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:02.847966909 CET	443	49694	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:02.848859072 CET	49695	443	192.168.2.10	52.222.232.39
Mar 19, 2025 11:01:02.849489927 CET	49694	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:02.861233950 CET	443	49695	52.222.232.39	192.168.2.10
Mar 19, 2025 11:01:02.861254930 CET	443	49695	52.222.232.39	192.168.2.10
Mar 19, 2025 11:01:02.861268997 CET	443	49695	52.222.232.39	192.168.2.10
Mar 19, 2025 11:01:02.861339092 CET	49695	443	192.168.2.10	52.222.232.39
Mar 19, 2025 11:01:02.861355066 CET	443	49695	52.222.232.39	192.168.2.10
Mar 19, 2025 11:01:02.861375093 CET	49695	443	192.168.2.10	52.222.232.39
Mar 19, 2025 11:01:02.861460924 CET	49695	443	192.168.2.10	52.222.232.39
Mar 19, 2025 11:01:02.866406918 CET	443	49695	52.222.232.39	192.168.2.10
Mar 19, 2025 11:01:02.866421938 CET	443	49695	52.222.232.39	192.168.2.10
Mar 19, 2025 11:01:02.866525888 CET	49695	443	192.168.2.10	52.222.232.39
Mar 19, 2025 11:01:02.866537094 CET	443	49695	52.222.232.39	192.168.2.10
Mar 19, 2025 11:01:02.866590977 CET	49695	443	192.168.2.10	52.222.232.39
Mar 19, 2025 11:01:02.868175983 CET	443	49695	52.222.232.39	192.168.2.10
Mar 19, 2025 11:01:02.868191004 CET	443	49695	52.222.232.39	192.168.2.10
Mar 19, 2025 11:01:02.868279934 CET	49695	443	192.168.2.10	52.222.232.39
Mar 19, 2025 11:01:02.868288040 CET	443	49695	52.222.232.39	192.168.2.10
Mar 19, 2025 11:01:02.868345976 CET	49695	443	192.168.2.10	52.222.232.39
Mar 19, 2025 11:01:02.871522903 CET	443	49695	52.222.232.39	192.168.2.10
Mar 19, 2025 11:01:02.871563911 CET	443	49695	52.222.232.39	192.168.2.10
Mar 19, 2025 11:01:02.871630907 CET	49695	443	192.168.2.10	52.222.232.39
Mar 19, 2025 11:01:02.871630907 CET	49695	443	192.168.2.10	52.222.232.39
Mar 19, 2025 11:01:02.871638060 CET	443	49695	52.222.232.39	192.168.2.10
Mar 19, 2025 11:01:02.871701002 CET	49695	443	192.168.2.10	52.222.232.39
Mar 19, 2025 11:01:02.874300957 CET	443	49695	52.222.232.39	192.168.2.10
Mar 19, 2025 11:01:02.874334097 CET	443	49695	52.222.232.39	192.168.2.10
Mar 19, 2025 11:01:02.874381065 CET	49695	443	192.168.2.10	52.222.232.39
Mar 19, 2025 11:01:02.874388933 CET	443	49695	52.222.232.39	192.168.2.10
Mar 19, 2025 11:01:02.874424934 CET	49695	443	192.168.2.10	52.222.232.39
Mar 19, 2025 11:01:02.874424934 CET	49695	443	192.168.2.10	52.222.232.39
Mar 19, 2025 11:01:02.875406981 CET	443	49695	52.222.232.39	192.168.2.10
Mar 19, 2025 11:01:02.875525951 CET	443	49695	52.222.232.39	192.168.2.10
Mar 19, 2025 11:01:02.875526905 CET	49695	443	192.168.2.10	52.222.232.39
Mar 19, 2025 11:01:02.876341105 CET	49695	443	192.168.2.10	52.222.232.39
Mar 19, 2025 11:01:02.880196095 CET	49695	443	192.168.2.10	52.222.232.39
Mar 19, 2025 11:01:02.880214930 CET	443	49695	52.222.232.39	192.168.2.10
Mar 19, 2025 11:01:02.888328075 CET	443	49693	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:02.896323919 CET	443	49694	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:02.899091959 CET	443	49693	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:02.899147034 CET	443	49693	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:02.899216890 CET	443	49693	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:02.899243116 CET	443	49693	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:02.899281025 CET	49693	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:02.899281025 CET	49693	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:02.899293900 CET	443	49693	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:02.899569035 CET	443	49693	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:02.899596930 CET	443	49693	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:02.899621010 CET	443	49693	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:02.899652004 CET	49693	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:02.899652004 CET	49693	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:02.899658918 CET	443	49693	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:02.904084921 CET	443	49693	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:02.904114008 CET	443	49693	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:02.904136896 CET	443	49693	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:02.904186010 CET	49693	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:02.904186010 CET	49693	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:02.904192924 CET	443	49693	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:02.904577971 CET	443	49693	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:02.904715061 CET	443	49693	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:02.904742956 CET	443	49693	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:02.904768944 CET	443	49693	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:02.904783964 CET	49693	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:02.904783964 CET	49693	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:02.904791117 CET	443	49693	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:02.905457020 CET	49693	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:02.905462980 CET	443	49693	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:02.905937910 CET	443	49693	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:02.905975103 CET	443	49693	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:02.905999899 CET	443	49693	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:02.906032085 CET	49693	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:02.906032085 CET	49693	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:02.906039000 CET	443	49693	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:02.906459093 CET	443	49693	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:02.906483889 CET	443	49693	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:02.906682014 CET	49693	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:02.906687975 CET	443	49693	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:02.906810999 CET	443	49693	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:02.906857967 CET	443	49693	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:02.906893015 CET	49693	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:02.906893015 CET	49693	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:02.906900883 CET	443	49693	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:02.906924009 CET	443	49693	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:02.907949924 CET	49693	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:02.907949924 CET	49693	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:02.939517975 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:02.939559937 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:02.939616919 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:02.939790010 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:02.939800024 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:02.964138985 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:02.964685917 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:02.964845896 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:02.964852095 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.009619951 CET	443	49694	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.009670019 CET	443	49694	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.009701967 CET	443	49694	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.009716988 CET	49694	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.009748936 CET	443	49694	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.009785891 CET	49694	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.009785891 CET	443	49694	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.009798050 CET	443	49694	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.009839058 CET	49694	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.009846926 CET	443	49694	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.009879112 CET	443	49694	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.009906054 CET	443	49694	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.009912014 CET	49694	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.009918928 CET	443	49694	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.009962082 CET	49694	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.010962009 CET	443	49694	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.014144897 CET	443	49694	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.014174938 CET	443	49694	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.014188051 CET	49694	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.014199972 CET	443	49694	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.014252901 CET	49694	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.014259100 CET	443	49694	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.014678001 CET	443	49694	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.014707088 CET	443	49694	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.014714956 CET	49694	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.014723063 CET	443	49694	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.014753103 CET	443	49694	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.014754057 CET	49694	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.014763117 CET	443	49694	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.014800072 CET	49694	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.015489101 CET	443	49694	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.015537024 CET	443	49694	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.015573978 CET	49694	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.015580893 CET	443	49694	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.016390085 CET	443	49694	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.016424894 CET	443	49694	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.016428947 CET	49694	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.016434908 CET	443	49694	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.016478062 CET	443	49694	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.016485929 CET	49694	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.016493082 CET	443	49694	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.016541004 CET	49694	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.016546965 CET	443	49694	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.016556978 CET	443	49694	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.016604900 CET	49694	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.023395061 CET	49694	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.023412943 CET	443	49694	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.035274982 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.035330057 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.035365105 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.035370111 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.035378933 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.035409927 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.035415888 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.035445929 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.035480022 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.035480976 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.035492897 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.035546064 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.035562992 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.035569906 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.035602093 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.036484957 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.039824963 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.039854050 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.039865971 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.039871931 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.039912939 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.039917946 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.040160894 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.040189028 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.040205956 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.040211916 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.040245056 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.040266037 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.041002989 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.041033030 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.041043043 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.041049004 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.041085958 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.041091919 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.041866064 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.041901112 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.041906118 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.041912079 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.041949987 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.041950941 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.041961908 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.042001963 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.042009115 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.044493914 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.044527054 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.044532061 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.044539928 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.044572115 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.044656038 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.044920921 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.044954062 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.044955015 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.044969082 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.045001984 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.045007944 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.045047045 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.045078039 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.045083046 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.045092106 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.045124054 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.045130014 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.045912981 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.045963049 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.045968056 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.045986891 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.046021938 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.046026945 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.046057940 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.046611071 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.046720982 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.046766043 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.046771049 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.046813011 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.046845913 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.046895027 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.047755957 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.047802925 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.047867060 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.047900915 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.047911882 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.047916889 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.047944069 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.047965050 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.048719883 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.048763037 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.048827887 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.048872948 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.049608946 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.049664021 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.049738884 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.049799919 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.049834967 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.049875021 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.050411940 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.050462961 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.050542116 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.050582886 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.050688028 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.050720930 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.050802946 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.050843000 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.051100016 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.051140070 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.051245928 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.051275015 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.051286936 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.051291943 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.051302910 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.051321983 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.051431894 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.051470995 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.051853895 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.051894903 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.051949978 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.051995993 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.052090883 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.052129030 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.052213907 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.052253962 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.052925110 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.052947998 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.053005934 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.053014040 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.053051949 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.053091049 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.053143024 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.053286076 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.053328037 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.053332090 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.053374052 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.053407907 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.053442955 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.053977013 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.054023027 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.054071903 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.054115057 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.054272890 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.054322958 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.054327965 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.054369926 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.054425001 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.054470062 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.054475069 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.054527998 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.054757118 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.054912090 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.054959059 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.054963112 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.055005074 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.055087090 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.055129051 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.055520058 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.055526972 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.055545092 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.055567980 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.055573940 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.055598974 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.055684090 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.056519032 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.056541920 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.056571007 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.056600094 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.056627035 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.056632996 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.056655884 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.056699038 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.057070017 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.057096004 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.057135105 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.057141066 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.057162046 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.057179928 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.057545900 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.057562113 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.057594061 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.057601929 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.057615042 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.057643890 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.057653904 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.057660103 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.057684898 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.057713032 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.058267117 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.058286905 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.058360100 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.058360100 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.058367968 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.058399916 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.058593035 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.058615923 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.058640003 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.058648109 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.058674097 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.058690071 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.059073925 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.059089899 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.059122086 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.059129000 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.059155941 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.059175014 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.059595108 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.059613943 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.059667110 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.059674025 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.059708118 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.060120106 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.060136080 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.060163021 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.060168982 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.060197115 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.060214043 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.060550928 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.060590982 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.060604095 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.060607910 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.060656071 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.060969114 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.060992956 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.061022043 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.061027050 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.061043024 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.061060905 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.061069012 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.061086893 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.061111927 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.061681032 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.061700106 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.061731100 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.061736107 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.061770916 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.062146902 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.062171936 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.062194109 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.062199116 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.062220097 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.062649965 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.062665939 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.062702894 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.062709093 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.062740088 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.062757969 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.062787056 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.062800884 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.062807083 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.062835932 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.063461065 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.063497066 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.063522100 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.063527107 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.063559055 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.063561916 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.063575029 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.063594103 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.063632965 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.063638926 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.063657045 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.063693047 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.063699007 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.063709021 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.063733101 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.063759089 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.130853891 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.160300016 CET	49698	443	192.168.2.10	52.222.232.39
Mar 19, 2025 11:01:03.160337925 CET	443	49698	52.222.232.39	192.168.2.10
Mar 19, 2025 11:01:03.160393953 CET	49698	443	192.168.2.10	52.222.232.39
Mar 19, 2025 11:01:03.160572052 CET	49698	443	192.168.2.10	52.222.232.39
Mar 19, 2025 11:01:03.160583973 CET	443	49698	52.222.232.39	192.168.2.10
Mar 19, 2025 11:01:03.161025047 CET	49699	443	192.168.2.10	52.222.232.39
Mar 19, 2025 11:01:03.161057949 CET	443	49699	52.222.232.39	192.168.2.10
Mar 19, 2025 11:01:03.161130905 CET	49699	443	192.168.2.10	52.222.232.39
Mar 19, 2025 11:01:03.161221981 CET	49699	443	192.168.2.10	52.222.232.39
Mar 19, 2025 11:01:03.161238909 CET	443	49699	52.222.232.39	192.168.2.10
Mar 19, 2025 11:01:03.162667990 CET	49697	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.162698984 CET	443	49697	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.186423063 CET	443	49698	52.222.232.39	192.168.2.10
Mar 19, 2025 11:01:03.186490059 CET	49698	443	192.168.2.10	52.222.232.39
Mar 19, 2025 11:01:03.190227985 CET	49698	443	192.168.2.10	52.222.232.39
Mar 19, 2025 11:01:03.190463066 CET	443	49698	52.222.232.39	192.168.2.10
Mar 19, 2025 11:01:03.191415071 CET	49698	443	192.168.2.10	52.222.232.39
Mar 19, 2025 11:01:03.191437960 CET	443	49699	52.222.232.39	192.168.2.10
Mar 19, 2025 11:01:03.191498041 CET	49699	443	192.168.2.10	52.222.232.39
Mar 19, 2025 11:01:03.192117929 CET	49699	443	192.168.2.10	52.222.232.39
Mar 19, 2025 11:01:03.192382097 CET	443	49699	52.222.232.39	192.168.2.10
Mar 19, 2025 11:01:03.192684889 CET	49699	443	192.168.2.10	52.222.232.39
Mar 19, 2025 11:01:03.200968981 CET	443	49698	52.222.232.39	192.168.2.10
Mar 19, 2025 11:01:03.201246977 CET	443	49698	52.222.232.39	192.168.2.10
Mar 19, 2025 11:01:03.201288939 CET	49698	443	192.168.2.10	52.222.232.39
Mar 19, 2025 11:01:03.202011108 CET	49698	443	192.168.2.10	52.222.232.39
Mar 19, 2025 11:01:03.202024937 CET	443	49698	52.222.232.39	192.168.2.10
Mar 19, 2025 11:01:03.206197977 CET	443	49699	52.222.232.39	192.168.2.10
Mar 19, 2025 11:01:03.206232071 CET	443	49699	52.222.232.39	192.168.2.10
Mar 19, 2025 11:01:03.206258059 CET	443	49699	52.222.232.39	192.168.2.10
Mar 19, 2025 11:01:03.206305981 CET	49699	443	192.168.2.10	52.222.232.39
Mar 19, 2025 11:01:03.206319094 CET	443	49699	52.222.232.39	192.168.2.10
Mar 19, 2025 11:01:03.206358910 CET	49699	443	192.168.2.10	52.222.232.39
Mar 19, 2025 11:01:03.206496000 CET	443	49699	52.222.232.39	192.168.2.10
Mar 19, 2025 11:01:03.206542015 CET	443	49699	52.222.232.39	192.168.2.10
Mar 19, 2025 11:01:03.206577063 CET	49699	443	192.168.2.10	52.222.232.39
Mar 19, 2025 11:01:03.212023020 CET	49693	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.212049961 CET	443	49693	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.213495970 CET	49699	443	192.168.2.10	52.222.232.39
Mar 19, 2025 11:01:03.213505030 CET	443	49699	52.222.232.39	192.168.2.10
Mar 19, 2025 11:01:03.257921934 CET	49700	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.257956982 CET	443	49700	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.258008957 CET	49700	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.258219957 CET	49700	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.258229017 CET	443	49700	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.281750917 CET	443	49700	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.285154104 CET	49700	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.285154104 CET	49700	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.285166025 CET	443	49700	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.293776035 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.293809891 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.294028997 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.294028997 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.294051886 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.299638987 CET	49703	443	192.168.2.10	52.222.232.144
Mar 19, 2025 11:01:03.299643040 CET	49702	443	192.168.2.10	52.222.232.144
Mar 19, 2025 11:01:03.299673080 CET	443	49703	52.222.232.144	192.168.2.10
Mar 19, 2025 11:01:03.299689054 CET	443	49702	52.222.232.144	192.168.2.10
Mar 19, 2025 11:01:03.299791098 CET	49703	443	192.168.2.10	52.222.232.144
Mar 19, 2025 11:01:03.299792051 CET	49702	443	192.168.2.10	52.222.232.144
Mar 19, 2025 11:01:03.300158024 CET	49702	443	192.168.2.10	52.222.232.144
Mar 19, 2025 11:01:03.300169945 CET	443	49702	52.222.232.144	192.168.2.10
Mar 19, 2025 11:01:03.300442934 CET	49703	443	192.168.2.10	52.222.232.144
Mar 19, 2025 11:01:03.300458908 CET	443	49703	52.222.232.144	192.168.2.10
Mar 19, 2025 11:01:03.320847034 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.321001053 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.321494102 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.321723938 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.322060108 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.325297117 CET	443	49702	52.222.232.144	192.168.2.10
Mar 19, 2025 11:01:03.325800896 CET	49702	443	192.168.2.10	52.222.232.144
Mar 19, 2025 11:01:03.325800896 CET	49702	443	192.168.2.10	52.222.232.144
Mar 19, 2025 11:01:03.326044083 CET	443	49703	52.222.232.144	192.168.2.10
Mar 19, 2025 11:01:03.326093912 CET	443	49702	52.222.232.144	192.168.2.10
Mar 19, 2025 11:01:03.326109886 CET	49703	443	192.168.2.10	52.222.232.144
Mar 19, 2025 11:01:03.326515913 CET	49703	443	192.168.2.10	52.222.232.144
Mar 19, 2025 11:01:03.326653957 CET	49702	443	192.168.2.10	52.222.232.144
Mar 19, 2025 11:01:03.326739073 CET	443	49703	52.222.232.144	192.168.2.10
Mar 19, 2025 11:01:03.328258991 CET	49703	443	192.168.2.10	52.222.232.144
Mar 19, 2025 11:01:03.341175079 CET	443	49702	52.222.232.144	192.168.2.10
Mar 19, 2025 11:01:03.341681957 CET	443	49703	52.222.232.144	192.168.2.10
Mar 19, 2025 11:01:03.341694117 CET	443	49702	52.222.232.144	192.168.2.10
Mar 19, 2025 11:01:03.341701984 CET	443	49703	52.222.232.144	192.168.2.10
Mar 19, 2025 11:01:03.341738939 CET	443	49703	52.222.232.144	192.168.2.10
Mar 19, 2025 11:01:03.341773033 CET	49703	443	192.168.2.10	52.222.232.144
Mar 19, 2025 11:01:03.341775894 CET	49702	443	192.168.2.10	52.222.232.144
Mar 19, 2025 11:01:03.341905117 CET	49703	443	192.168.2.10	52.222.232.144
Mar 19, 2025 11:01:03.342447996 CET	49702	443	192.168.2.10	52.222.232.144
Mar 19, 2025 11:01:03.342463017 CET	443	49702	52.222.232.144	192.168.2.10
Mar 19, 2025 11:01:03.345433950 CET	49703	443	192.168.2.10	52.222.232.144
Mar 19, 2025 11:01:03.345455885 CET	443	49703	52.222.232.144	192.168.2.10
Mar 19, 2025 11:01:03.351079941 CET	443	49700	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.351174116 CET	443	49700	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.351937056 CET	49700	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.352487087 CET	49700	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.352509975 CET	443	49700	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.359420061 CET	49704	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.359460115 CET	443	49704	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.359709978 CET	49704	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.361475945 CET	49704	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.361504078 CET	443	49704	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.364331007 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.391834021 CET	443	49704	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.393930912 CET	49704	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.394364119 CET	49704	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.394421101 CET	443	49704	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.409362078 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.409410954 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.409445047 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.409481049 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.409512043 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.409521103 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.409553051 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.409569025 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.409593105 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.409620047 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.409622908 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.409636974 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.410087109 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.410115957 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.414057016 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.414093971 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.414100885 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.414118052 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.414158106 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.414160013 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.414396048 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.414427042 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.414431095 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.414443016 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.414515018 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.414546967 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.414578915 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.414594889 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.415302992 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.415338993 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.415339947 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.415352106 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.415416956 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.415450096 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.415467024 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.416297913 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.416332006 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.416342020 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.416358948 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.416393995 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.416794062 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.417485952 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.417501926 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.418963909 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.418998957 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.419034004 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.419049025 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.419322014 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.419353008 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.419358969 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.419370890 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.419430017 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.419461966 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.419477940 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.420201063 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.420228958 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.420234919 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.420248985 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.420294046 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.420321941 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.421086073 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.421086073 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.421098948 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.421453953 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.421469927 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.424841881 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.424887896 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.424926043 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.425034046 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.425034046 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.425061941 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.425086021 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.425487995 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.425543070 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.425575018 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.425614119 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.425630093 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.425673962 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.425693035 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.426237106 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.426280022 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.426295996 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.426337004 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.426803112 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.426965952 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.427001953 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.427006960 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.427018881 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.427042007 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.427058935 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.427079916 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.427079916 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.427098989 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.427139044 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.427975893 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.428144932 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.428170919 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.428206921 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.428224087 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.428276062 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.428332090 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.429495096 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.429510117 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.429524899 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.429560900 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.429671049 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.430015087 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.430047035 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.430061102 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.430098057 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.430927992 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.430958986 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.430983067 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.430994034 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.431014061 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.431045055 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.431045055 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.431102991 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.431140900 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.431171894 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.431173086 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.431185007 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.431205988 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.431219101 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.431246042 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.431247950 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.431247950 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.431266069 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.431301117 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.431302071 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.432291985 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.432324886 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.432369947 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.432401896 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.432441950 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.432456970 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.432492971 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.432526112 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.432532072 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.432543039 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.432569027 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.433063030 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.433121920 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.433135986 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.433187008 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.433646917 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.433680058 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.433685064 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.433697939 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.433734894 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.433734894 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.434395075 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.434458017 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.434458017 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.434477091 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.434509993 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.434539080 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.434578896 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.434595108 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.435246944 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.435261965 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.435286999 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.435302019 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.435338020 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.435338020 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.435410023 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.435424089 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.435448885 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.435461998 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.435497046 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.436693907 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.436714888 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.436739922 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.436753035 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.436800003 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.436800003 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.437356949 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.437375069 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.437400103 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.437417030 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.437447071 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.437447071 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.437477112 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.437498093 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.437514067 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.437700987 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.437737942 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.437741041 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.437761068 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.437798023 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.437798023 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.437859058 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.437875032 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.438554049 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.438575983 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.438592911 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.438606977 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.438638926 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.438638926 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.439734936 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.439754963 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.439775944 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.439789057 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.439826012 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.439826012 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.441107988 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.441128969 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.441163063 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.441163063 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.441179037 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.441214085 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.441227913 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.441241980 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.441283941 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.441298008 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.441334009 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.441389084 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.441401958 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.441479921 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.441494942 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.442082882 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.442097902 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.442173958 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.442174911 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.442195892 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.442262888 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.442276955 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.442320108 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.442333937 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.442358971 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.442372084 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.442375898 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.443073034 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.443087101 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.443100929 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.443118095 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.443146944 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.443146944 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.443255901 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.443269014 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.443293095 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.443305016 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.443339109 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.443393946 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.443407059 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.443447113 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.443479061 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.443480015 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.443494081 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.443516970 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.443527937 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.445486069 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.460253000 CET	443	49704	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.460417032 CET	443	49704	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.463093042 CET	49704	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.492233038 CET	49704	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.492233038 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.492254972 CET	443	49704	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:03.497492075 CET	49701	443	192.168.2.10	104.18.160.117
Mar 19, 2025 11:01:03.497513056 CET	443	49701	104.18.160.117	192.168.2.10
Mar 19, 2025 11:01:04.568687916 CET	49672	443	192.168.2.10	204.79.197.203
Mar 19, 2025 11:01:04.878551006 CET	49672	443	192.168.2.10	204.79.197.203
Mar 19, 2025 11:01:05.270180941 CET	49690	443	192.168.2.10	142.250.186.132
Mar 19, 2025 11:01:05.316329956 CET	443	49690	142.250.186.132	192.168.2.10
Mar 19, 2025 11:01:05.320713997 CET	443	49690	142.250.186.132	192.168.2.10
Mar 19, 2025 11:01:05.320765018 CET	443	49690	142.250.186.132	192.168.2.10
Mar 19, 2025 11:01:05.320796967 CET	443	49690	142.250.186.132	192.168.2.10
Mar 19, 2025 11:01:05.320806980 CET	49690	443	192.168.2.10	142.250.186.132
Mar 19, 2025 11:01:05.320827961 CET	443	49690	142.250.186.132	192.168.2.10
Mar 19, 2025 11:01:05.320862055 CET	443	49690	142.250.186.132	192.168.2.10
Mar 19, 2025 11:01:05.320867062 CET	49690	443	192.168.2.10	142.250.186.132
Mar 19, 2025 11:01:05.320878029 CET	443	49690	142.250.186.132	192.168.2.10
Mar 19, 2025 11:01:05.320916891 CET	49690	443	192.168.2.10	142.250.186.132
Mar 19, 2025 11:01:05.320925951 CET	443	49690	142.250.186.132	192.168.2.10
Mar 19, 2025 11:01:05.330085039 CET	443	49690	142.250.186.132	192.168.2.10
Mar 19, 2025 11:01:05.330182076 CET	49690	443	192.168.2.10	142.250.186.132
Mar 19, 2025 11:01:05.341243029 CET	49690	443	192.168.2.10	142.250.186.132
Mar 19, 2025 11:01:05.341253042 CET	443	49690	142.250.186.132	192.168.2.10
Mar 19, 2025 11:01:05.482944012 CET	49672	443	192.168.2.10	204.79.197.203
Mar 19, 2025 11:01:06.689436913 CET	49672	443	192.168.2.10	204.79.197.203
Mar 19, 2025 11:01:09.092447996 CET	49672	443	192.168.2.10	204.79.197.203
Mar 19, 2025 11:01:11.206063032 CET	49715	80	192.168.2.10	142.250.185.131
Mar 19, 2025 11:01:11.211307049 CET	80	49715	142.250.185.131	192.168.2.10
Mar 19, 2025 11:01:11.211378098 CET	49715	80	192.168.2.10	142.250.185.131
Mar 19, 2025 11:01:11.211493015 CET	49715	80	192.168.2.10	142.250.185.131
Mar 19, 2025 11:01:11.216887951 CET	80	49715	142.250.185.131	192.168.2.10
Mar 19, 2025 11:01:11.227997065 CET	80	49715	142.250.185.131	192.168.2.10
Mar 19, 2025 11:01:11.233644962 CET	49715	80	192.168.2.10	142.250.185.131
Mar 19, 2025 11:01:11.256936073 CET	80	49715	142.250.185.131	192.168.2.10
Mar 19, 2025 11:01:11.297075033 CET	49715	80	192.168.2.10	142.250.185.131
Mar 19, 2025 11:01:12.983906031 CET	49678	443	192.168.2.10	20.189.173.26
Mar 19, 2025 11:01:13.306113958 CET	49678	443	192.168.2.10	20.189.173.26
Mar 19, 2025 11:01:13.905359983 CET	49672	443	192.168.2.10	204.79.197.203
Mar 19, 2025 11:01:13.905359983 CET	49678	443	192.168.2.10	20.189.173.26
Mar 19, 2025 11:01:15.108458042 CET	49678	443	192.168.2.10	20.189.173.26
Mar 19, 2025 11:01:17.530726910 CET	49678	443	192.168.2.10	20.189.173.26
Mar 19, 2025 11:01:17.616677046 CET	443	49692	104.18.36.248	192.168.2.10
Mar 19, 2025 11:01:17.616744041 CET	443	49692	104.18.36.248	192.168.2.10
Mar 19, 2025 11:01:17.616797924 CET	49692	443	192.168.2.10	104.18.36.248
Mar 19, 2025 11:01:17.896516085 CET	49692	443	192.168.2.10	104.18.36.248
Mar 19, 2025 11:01:17.896564007 CET	443	49692	104.18.36.248	192.168.2.10
Mar 19, 2025 11:01:22.342458963 CET	49678	443	192.168.2.10	20.189.173.26
Mar 19, 2025 11:01:23.519515991 CET	49672	443	192.168.2.10	204.79.197.203
Mar 19, 2025 11:01:31.952687979 CET	49678	443	192.168.2.10	20.189.173.26
Mar 19, 2025 11:02:00.766123056 CET	49723	443	192.168.2.10	142.250.186.132
Mar 19, 2025 11:02:00.766166925 CET	443	49723	142.250.186.132	192.168.2.10
Mar 19, 2025 11:02:00.766237974 CET	49723	443	192.168.2.10	142.250.186.132
Mar 19, 2025 11:02:00.766407967 CET	49723	443	192.168.2.10	142.250.186.132
Mar 19, 2025 11:02:00.766421080 CET	443	49723	142.250.186.132	192.168.2.10
Mar 19, 2025 11:02:00.797796011 CET	443	49723	142.250.186.132	192.168.2.10
Mar 19, 2025 11:02:00.798304081 CET	49723	443	192.168.2.10	142.250.186.132
Mar 19, 2025 11:02:00.840325117 CET	443	49723	142.250.186.132	192.168.2.10
Mar 19, 2025 11:02:10.796694994 CET	443	49723	142.250.186.132	192.168.2.10
Mar 19, 2025 11:02:10.796761036 CET	443	49723	142.250.186.132	192.168.2.10
Mar 19, 2025 11:02:10.796941042 CET	49723	443	192.168.2.10	142.250.186.132
Mar 19, 2025 11:02:10.799365044 CET	49723	443	192.168.2.10	142.250.186.132
Mar 19, 2025 11:02:10.799385071 CET	443	49723	142.250.186.132	192.168.2.10
Mar 19, 2025 11:02:11.296576023 CET	49715	80	192.168.2.10	142.250.185.131
Mar 19, 2025 11:02:11.301425934 CET	80	49715	142.250.185.131	192.168.2.10
Mar 19, 2025 11:02:11.301798105 CET	49715	80	192.168.2.10	142.250.185.131

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 19, 2025 11:00:56.431977987 CET	53	52737	1.1.1.1	192.168.2.10
Mar 19, 2025 11:00:56.497565031 CET	53	63333	1.1.1.1	192.168.2.10
Mar 19, 2025 11:00:56.938699961 CET	53	54920	1.1.1.1	192.168.2.10
Mar 19, 2025 11:01:00.703265905 CET	61468	53	192.168.2.10	1.1.1.1
Mar 19, 2025 11:01:00.703634977 CET	65250	53	192.168.2.10	1.1.1.1
Mar 19, 2025 11:01:00.710355997 CET	53	65250	1.1.1.1	192.168.2.10
Mar 19, 2025 11:01:00.710632086 CET	53	61468	1.1.1.1	192.168.2.10
Mar 19, 2025 11:01:02.570362091 CET	56941	53	192.168.2.10	1.1.1.1
Mar 19, 2025 11:01:02.570584059 CET	53605	53	192.168.2.10	1.1.1.1
Mar 19, 2025 11:01:02.580208063 CET	53	56941	1.1.1.1	192.168.2.10
Mar 19, 2025 11:01:02.601432085 CET	53	53605	1.1.1.1	192.168.2.10
Mar 19, 2025 11:01:02.796482086 CET	56875	53	192.168.2.10	1.1.1.1
Mar 19, 2025 11:01:02.796663046 CET	55148	53	192.168.2.10	1.1.1.1
Mar 19, 2025 11:01:02.797844887 CET	52595	53	192.168.2.10	1.1.1.1
Mar 19, 2025 11:01:02.798297882 CET	52801	53	192.168.2.10	1.1.1.1
Mar 19, 2025 11:01:02.805716991 CET	53	52801	1.1.1.1	192.168.2.10
Mar 19, 2025 11:01:02.805988073 CET	53	56875	1.1.1.1	192.168.2.10
Mar 19, 2025 11:01:02.805998087 CET	53	55148	1.1.1.1	192.168.2.10
Mar 19, 2025 11:01:02.807060003 CET	53	52595	1.1.1.1	192.168.2.10
Mar 19, 2025 11:01:03.284647942 CET	65334	53	192.168.2.10	1.1.1.1
Mar 19, 2025 11:01:03.285252094 CET	58010	53	192.168.2.10	1.1.1.1
Mar 19, 2025 11:01:03.290499926 CET	61177	53	192.168.2.10	1.1.1.1
Mar 19, 2025 11:01:03.291893005 CET	58327	53	192.168.2.10	1.1.1.1
Mar 19, 2025 11:01:03.292409897 CET	53	65334	1.1.1.1	192.168.2.10
Mar 19, 2025 11:01:03.292831898 CET	53	58010	1.1.1.1	192.168.2.10
Mar 19, 2025 11:01:03.297950029 CET	53	61177	1.1.1.1	192.168.2.10
Mar 19, 2025 11:01:03.298533916 CET	53	58327	1.1.1.1	192.168.2.10
Mar 19, 2025 11:01:13.918840885 CET	53	52186	1.1.1.1	192.168.2.10
Mar 19, 2025 11:01:17.754539967 CET	57217	53	192.168.2.10	1.1.1.1
Mar 19, 2025 11:01:17.754925013 CET	59757	53	192.168.2.10	1.1.1.1
Mar 19, 2025 11:01:17.783363104 CET	53	57217	1.1.1.1	192.168.2.10
Mar 19, 2025 11:01:17.797509909 CET	62477	53	192.168.2.10	1.1.1.1
Mar 19, 2025 11:01:17.802577019 CET	53	59757	1.1.1.1	192.168.2.10
Mar 19, 2025 11:01:17.846151114 CET	53	62477	1.1.1.1	192.168.2.10
Mar 19, 2025 11:01:17.923881054 CET	59368	53	192.168.2.10	1.1.1.1
Mar 19, 2025 11:01:17.924336910 CET	58947	53	192.168.2.10	1.1.1.1
Mar 19, 2025 11:01:17.931751966 CET	53	59368	1.1.1.1	192.168.2.10
Mar 19, 2025 11:01:17.931780100 CET	53	58947	1.1.1.1	192.168.2.10
Mar 19, 2025 11:01:18.059206009 CET	54465	53	192.168.2.10	8.8.8.8
Mar 19, 2025 11:01:18.059834003 CET	62936	53	192.168.2.10	1.1.1.1
Mar 19, 2025 11:01:18.065753937 CET	53	54465	8.8.8.8	192.168.2.10
Mar 19, 2025 11:01:18.066387892 CET	53	62936	1.1.1.1	192.168.2.10
Mar 19, 2025 11:01:19.033049107 CET	50596	53	192.168.2.10	1.1.1.1
Mar 19, 2025 11:01:19.033345938 CET	64760	53	192.168.2.10	1.1.1.1
Mar 19, 2025 11:01:19.047485113 CET	53	50596	1.1.1.1	192.168.2.10
Mar 19, 2025 11:01:19.048713923 CET	53	64760	1.1.1.1	192.168.2.10
Mar 19, 2025 11:01:24.084321976 CET	60926	53	192.168.2.10	1.1.1.1
Mar 19, 2025 11:01:24.084662914 CET	60325	53	192.168.2.10	1.1.1.1
Mar 19, 2025 11:01:24.099059105 CET	53	60325	1.1.1.1	192.168.2.10
Mar 19, 2025 11:01:24.105639935 CET	53	60926	1.1.1.1	192.168.2.10
Mar 19, 2025 11:01:24.107429028 CET	54311	53	192.168.2.10	1.1.1.1
Mar 19, 2025 11:01:24.123217106 CET	53	54311	1.1.1.1	192.168.2.10
Mar 19, 2025 11:01:29.771115065 CET	57976	53	192.168.2.10	1.1.1.1
Mar 19, 2025 11:01:29.771348953 CET	58080	53	192.168.2.10	1.1.1.1
Mar 19, 2025 11:01:29.779222965 CET	53	58080	1.1.1.1	192.168.2.10
Mar 19, 2025 11:01:29.779819965 CET	53	57976	1.1.1.1	192.168.2.10
Mar 19, 2025 11:01:29.784187078 CET	52800	53	192.168.2.10	1.1.1.1
Mar 19, 2025 11:01:29.791172028 CET	53	52800	1.1.1.1	192.168.2.10
Mar 19, 2025 11:01:29.792987108 CET	62541	53	192.168.2.10	1.1.1.1
Mar 19, 2025 11:01:29.793143034 CET	52435	53	192.168.2.10	1.1.1.1
Mar 19, 2025 11:01:29.800518036 CET	53	62541	1.1.1.1	192.168.2.10
Mar 19, 2025 11:01:29.808760881 CET	53	52435	1.1.1.1	192.168.2.10
Mar 19, 2025 11:01:29.833623886 CET	60640	53	192.168.2.10	1.1.1.1
Mar 19, 2025 11:01:29.833952904 CET	61334	53	192.168.2.10	8.8.8.8
Mar 19, 2025 11:01:29.840595007 CET	53	61334	8.8.8.8	192.168.2.10
Mar 19, 2025 11:01:29.840673923 CET	53	60640	1.1.1.1	192.168.2.10
Mar 19, 2025 11:01:32.992458105 CET	53	61029	1.1.1.1	192.168.2.10
Mar 19, 2025 11:01:48.078674078 CET	50479	53	192.168.2.10	1.1.1.1
Mar 19, 2025 11:01:48.085839033 CET	53	50479	1.1.1.1	192.168.2.10
Mar 19, 2025 11:01:55.929490089 CET	53	63168	1.1.1.1	192.168.2.10
Mar 19, 2025 11:01:56.074415922 CET	53	62652	1.1.1.1	192.168.2.10
Mar 19, 2025 11:01:58.647754908 CET	53	58535	1.1.1.1	192.168.2.10
Mar 19, 2025 11:01:59.842895031 CET	55237	53	192.168.2.10	1.1.1.1
Mar 19, 2025 11:01:59.843305111 CET	49852	53	192.168.2.10	1.1.1.1
Mar 19, 2025 11:01:59.850639105 CET	53	55237	1.1.1.1	192.168.2.10
Mar 19, 2025 11:01:59.858838081 CET	53	49852	1.1.1.1	192.168.2.10
Mar 19, 2025 11:01:59.861618996 CET	60686	53	192.168.2.10	1.1.1.1
Mar 19, 2025 11:01:59.872776985 CET	53	60686	1.1.1.1	192.168.2.10
Mar 19, 2025 11:02:05.705893993 CET	55711	53	192.168.2.10	1.1.1.1
Mar 19, 2025 11:02:05.706542015 CET	49862	53	192.168.2.10	1.1.1.1
Mar 19, 2025 11:02:05.801588058 CET	53	55711	1.1.1.1	192.168.2.10
Mar 19, 2025 11:02:05.802241087 CET	53	49862	1.1.1.1	192.168.2.10
Mar 19, 2025 11:02:05.803349972 CET	49719	53	192.168.2.10	1.1.1.1
Mar 19, 2025 11:02:05.811131954 CET	53	49719	1.1.1.1	192.168.2.10
Mar 19, 2025 11:02:05.826488972 CET	56983	53	192.168.2.10	1.1.1.1
Mar 19, 2025 11:02:05.827769995 CET	49991	53	192.168.2.10	8.8.8.8
Mar 19, 2025 11:02:05.833272934 CET	53	56983	1.1.1.1	192.168.2.10
Mar 19, 2025 11:02:05.834042072 CET	53	49991	8.8.8.8	192.168.2.10
Mar 19, 2025 11:02:11.632460117 CET	138	138	192.168.2.10	192.168.2.255

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Mar 19, 2025 11:01:02.601504087 CET	192.168.2.10	1.1.1.1	c24c	(Port unreachable)	Destination Unreachable
Mar 19, 2025 11:01:17.802638054 CET	192.168.2.10	1.1.1.1	c23d	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 19, 2025 11:01:00.703265905 CET	192.168.2.10	1.1.1.1	0x1bdb	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:01:00.703634977 CET	192.168.2.10	1.1.1.1	0x2b3	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 19, 2025 11:01:02.570362091 CET	192.168.2.10	1.1.1.1	0x7354	Standard query (0)	sso-robinhood-nett-cdn--auth.webflow.io	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:01:02.570584059 CET	192.168.2.10	1.1.1.1	0xac0a	Standard query (0)	sso-robinhood-nett-cdn--auth.webflow.io	65	IN (0x0001)	false
Mar 19, 2025 11:01:02.796482086 CET	192.168.2.10	1.1.1.1	0x2dd2	Standard query (0)	cdn.prod.website-files.com	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:01:02.796663046 CET	192.168.2.10	1.1.1.1	0xa69c	Standard query (0)	cdn.prod.website-files.com	65	IN (0x0001)	false
Mar 19, 2025 11:01:02.797844887 CET	192.168.2.10	1.1.1.1	0x9d21	Standard query (0)	d3e54v103j8qbb.cloudfront.net	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:01:02.798297882 CET	192.168.2.10	1.1.1.1	0x4d6f	Standard query (0)	d3e54v103j8qbb.cloudfront.net	65	IN (0x0001)	false
Mar 19, 2025 11:01:03.284647942 CET	192.168.2.10	1.1.1.1	0x540d	Standard query (0)	cdn.prod.website-files.com	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:01:03.285252094 CET	192.168.2.10	1.1.1.1	0x2d51	Standard query (0)	cdn.prod.website-files.com	65	IN (0x0001)	false
Mar 19, 2025 11:01:03.290499926 CET	192.168.2.10	1.1.1.1	0xb9c6	Standard query (0)	d3e54v103j8qbb.cloudfront.net	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:01:03.291893005 CET	192.168.2.10	1.1.1.1	0x4925	Standard query (0)	d3e54v103j8qbb.cloudfront.net	65	IN (0x0001)	false
Mar 19, 2025 11:01:17.754539967 CET	192.168.2.10	1.1.1.1	0x826	Standard query (0)	robenboodlogi.info	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:01:17.754925013 CET	192.168.2.10	1.1.1.1	0xcc5d	Standard query (0)	robenboodlogi.info	65	IN (0x0001)	false
Mar 19, 2025 11:01:17.797509909 CET	192.168.2.10	1.1.1.1	0x20d0	Standard query (0)	robenboodlogi.info	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:01:17.923881054 CET	192.168.2.10	1.1.1.1	0xf94	Standard query (0)	robenboodlogi.info	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:01:17.924336910 CET	192.168.2.10	1.1.1.1	0xf42d	Standard query (0)	robenboodlogi.info	65	IN (0x0001)	false
Mar 19, 2025 11:01:18.059206009 CET	192.168.2.10	8.8.8.8	0xfb75	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:01:18.059834003 CET	192.168.2.10	1.1.1.1	0xc51e	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:01:19.033049107 CET	192.168.2.10	1.1.1.1	0xd484	Standard query (0)	robenboodlogi.info	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:01:19.033345938 CET	192.168.2.10	1.1.1.1	0x9c51	Standard query (0)	robenboodlogi.info	65	IN (0x0001)	false
Mar 19, 2025 11:01:24.084321976 CET	192.168.2.10	1.1.1.1	0x434e	Standard query (0)	robenboodlogi.info	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:01:24.084662914 CET	192.168.2.10	1.1.1.1	0xeec9	Standard query (0)	robenboodlogi.info	65	IN (0x0001)	false
Mar 19, 2025 11:01:24.107429028 CET	192.168.2.10	1.1.1.1	0xf3bd	Standard query (0)	robenboodlogi.info	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:01:29.771115065 CET	192.168.2.10	1.1.1.1	0xbc6f	Standard query (0)	robenboodlogi.info	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:01:29.771348953 CET	192.168.2.10	1.1.1.1	0x2e39	Standard query (0)	robenboodlogi.info	65	IN (0x0001)	false
Mar 19, 2025 11:01:29.784187078 CET	192.168.2.10	1.1.1.1	0x2d4f	Standard query (0)	robenboodlogi.info	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:01:29.792987108 CET	192.168.2.10	1.1.1.1	0xef3a	Standard query (0)	robenboodlogi.info	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:01:29.793143034 CET	192.168.2.10	1.1.1.1	0xa44e	Standard query (0)	robenboodlogi.info	65	IN (0x0001)	false
Mar 19, 2025 11:01:29.833623886 CET	192.168.2.10	1.1.1.1	0x164e	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:01:29.833952904 CET	192.168.2.10	8.8.8.8	0xc144	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:01:48.078674078 CET	192.168.2.10	1.1.1.1	0x98bc	Standard query (0)	robenboodlogi.info	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:01:59.842895031 CET	192.168.2.10	1.1.1.1	0x3614	Standard query (0)	robenboodlogi.info	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:01:59.843305111 CET	192.168.2.10	1.1.1.1	0xbe37	Standard query (0)	robenboodlogi.info	65	IN (0x0001)	false
Mar 19, 2025 11:01:59.861618996 CET	192.168.2.10	1.1.1.1	0xc1ad	Standard query (0)	robenboodlogi.info	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:02:05.705893993 CET	192.168.2.10	1.1.1.1	0xc612	Standard query (0)	robenboodlogi.info	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:02:05.706542015 CET	192.168.2.10	1.1.1.1	0x89a4	Standard query (0)	robenboodlogi.info	65	IN (0x0001)	false
Mar 19, 2025 11:02:05.803349972 CET	192.168.2.10	1.1.1.1	0xc53a	Standard query (0)	robenboodlogi.info	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:02:05.826488972 CET	192.168.2.10	1.1.1.1	0x6fc5	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:02:05.827769995 CET	192.168.2.10	8.8.8.8	0xb78d	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 19, 2025 11:01:00.710355997 CET	1.1.1.1	192.168.2.10	0x2b3	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 19, 2025 11:01:00.710632086 CET	1.1.1.1	192.168.2.10	0x1bdb	No error (0)	www.google.com		142.250.186.132	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:01:02.580208063 CET	1.1.1.1	192.168.2.10	0x7354	No error (0)	sso-robinhood-nett-cdn--auth.webflow.io		104.18.36.248	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:01:02.580208063 CET	1.1.1.1	192.168.2.10	0x7354	No error (0)	sso-robinhood-nett-cdn--auth.webflow.io		172.64.151.8	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:01:02.601432085 CET	1.1.1.1	192.168.2.10	0xac0a	No error (0)	sso-robinhood-nett-cdn--auth.webflow.io			65	IN (0x0001)	false
Mar 19, 2025 11:01:02.805988073 CET	1.1.1.1	192.168.2.10	0x2dd2	No error (0)	cdn.prod.website-files.com		104.18.160.117	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:01:02.805988073 CET	1.1.1.1	192.168.2.10	0x2dd2	No error (0)	cdn.prod.website-files.com		104.18.161.117	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:01:02.805998087 CET	1.1.1.1	192.168.2.10	0xa69c	No error (0)	cdn.prod.website-files.com			65	IN (0x0001)	false
Mar 19, 2025 11:01:02.807060003 CET	1.1.1.1	192.168.2.10	0x9d21	No error (0)	d3e54v103j8qbb.cloudfront.net		52.222.232.39	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:01:02.807060003 CET	1.1.1.1	192.168.2.10	0x9d21	No error (0)	d3e54v103j8qbb.cloudfront.net		52.222.232.47	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:01:02.807060003 CET	1.1.1.1	192.168.2.10	0x9d21	No error (0)	d3e54v103j8qbb.cloudfront.net		52.222.232.144	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:01:02.807060003 CET	1.1.1.1	192.168.2.10	0x9d21	No error (0)	d3e54v103j8qbb.cloudfront.net		52.222.232.99	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:01:03.292409897 CET	1.1.1.1	192.168.2.10	0x540d	No error (0)	cdn.prod.website-files.com		104.18.160.117	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:01:03.292409897 CET	1.1.1.1	192.168.2.10	0x540d	No error (0)	cdn.prod.website-files.com		104.18.161.117	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:01:03.292831898 CET	1.1.1.1	192.168.2.10	0x2d51	No error (0)	cdn.prod.website-files.com			65	IN (0x0001)	false
Mar 19, 2025 11:01:03.297950029 CET	1.1.1.1	192.168.2.10	0xb9c6	No error (0)	d3e54v103j8qbb.cloudfront.net		52.222.232.144	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:01:03.297950029 CET	1.1.1.1	192.168.2.10	0xb9c6	No error (0)	d3e54v103j8qbb.cloudfront.net		52.222.232.99	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:01:03.297950029 CET	1.1.1.1	192.168.2.10	0xb9c6	No error (0)	d3e54v103j8qbb.cloudfront.net		52.222.232.47	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:01:03.297950029 CET	1.1.1.1	192.168.2.10	0xb9c6	No error (0)	d3e54v103j8qbb.cloudfront.net		52.222.232.39	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:01:17.783363104 CET	1.1.1.1	192.168.2.10	0x826	Name error (3)	robenboodlogi.info	none	none	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:01:17.802577019 CET	1.1.1.1	192.168.2.10	0xcc5d	Name error (3)	robenboodlogi.info	none	none	65	IN (0x0001)	false
Mar 19, 2025 11:01:17.846151114 CET	1.1.1.1	192.168.2.10	0x20d0	Name error (3)	robenboodlogi.info	none	none	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:01:17.931751966 CET	1.1.1.1	192.168.2.10	0xf94	Name error (3)	robenboodlogi.info	none	none	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:01:17.931780100 CET	1.1.1.1	192.168.2.10	0xf42d	Name error (3)	robenboodlogi.info	none	none	65	IN (0x0001)	false
Mar 19, 2025 11:01:18.065753937 CET	8.8.8.8	192.168.2.10	0xfb75	No error (0)	google.com		142.251.37.110	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:01:18.066387892 CET	1.1.1.1	192.168.2.10	0xc51e	No error (0)	google.com		172.217.16.142	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:01:19.047485113 CET	1.1.1.1	192.168.2.10	0xd484	Name error (3)	robenboodlogi.info	none	none	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:01:19.048713923 CET	1.1.1.1	192.168.2.10	0x9c51	Name error (3)	robenboodlogi.info	none	none	65	IN (0x0001)	false
Mar 19, 2025 11:01:24.099059105 CET	1.1.1.1	192.168.2.10	0xeec9	Name error (3)	robenboodlogi.info	none	none	65	IN (0x0001)	false
Mar 19, 2025 11:01:24.105639935 CET	1.1.1.1	192.168.2.10	0x434e	Name error (3)	robenboodlogi.info	none	none	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:01:24.123217106 CET	1.1.1.1	192.168.2.10	0xf3bd	Name error (3)	robenboodlogi.info	none	none	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:01:29.779222965 CET	1.1.1.1	192.168.2.10	0x2e39	Name error (3)	robenboodlogi.info	none	none	65	IN (0x0001)	false
Mar 19, 2025 11:01:29.779819965 CET	1.1.1.1	192.168.2.10	0xbc6f	Name error (3)	robenboodlogi.info	none	none	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:01:29.791172028 CET	1.1.1.1	192.168.2.10	0x2d4f	Name error (3)	robenboodlogi.info	none	none	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:01:29.800518036 CET	1.1.1.1	192.168.2.10	0xef3a	Name error (3)	robenboodlogi.info	none	none	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:01:29.808760881 CET	1.1.1.1	192.168.2.10	0xa44e	Name error (3)	robenboodlogi.info	none	none	65	IN (0x0001)	false
Mar 19, 2025 11:01:29.840595007 CET	8.8.8.8	192.168.2.10	0xc144	No error (0)	google.com		142.251.37.110	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:01:29.840673923 CET	1.1.1.1	192.168.2.10	0x164e	No error (0)	google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:01:48.085839033 CET	1.1.1.1	192.168.2.10	0x98bc	Name error (3)	robenboodlogi.info	none	none	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:01:59.850639105 CET	1.1.1.1	192.168.2.10	0x3614	Name error (3)	robenboodlogi.info	none	none	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:01:59.858838081 CET	1.1.1.1	192.168.2.10	0xbe37	Name error (3)	robenboodlogi.info	none	none	65	IN (0x0001)	false
Mar 19, 2025 11:01:59.872776985 CET	1.1.1.1	192.168.2.10	0xc1ad	Name error (3)	robenboodlogi.info	none	none	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:02:05.801588058 CET	1.1.1.1	192.168.2.10	0xc612	Name error (3)	robenboodlogi.info	none	none	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:02:05.802241087 CET	1.1.1.1	192.168.2.10	0x89a4	Name error (3)	robenboodlogi.info	none	none	65	IN (0x0001)	false
Mar 19, 2025 11:02:05.811131954 CET	1.1.1.1	192.168.2.10	0xc53a	Name error (3)	robenboodlogi.info	none	none	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:02:05.833272934 CET	1.1.1.1	192.168.2.10	0x6fc5	No error (0)	google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:02:05.834042072 CET	8.8.8.8	192.168.2.10	0xb78d	No error (0)	google.com		142.251.37.110	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

sso-robinhood-nett-cdn--auth.webflow.io

cdn.prod.website-files.com

d3e54v103j8qbb.cloudfront.net

www.google.com

c.pki.goog

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.10	49715	142.250.185.131	80

Timestamp	Bytes transferred	Direction	Data
Mar 19, 2025 11:01:11.211493015 CET	202	OUT	GET /r/gsr1.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 19, 2025 11:01:11.227997065 CET	223	IN	HTTP/1.1 304 Not Modified Date: Wed, 19 Mar 2025 09:15:49 GMT Expires: Wed, 19 Mar 2025 10:05:49 GMT Last-Modified: Tue, 07 Jan 2025 07:28:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding Age: 2722
Mar 19, 2025 11:01:11.233644962 CET	200	OUT	GET /r/r4.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 19, 2025 11:01:11.256936073 CET	223	IN	HTTP/1.1 304 Not Modified Date: Wed, 19 Mar 2025 09:40:11 GMT Expires: Wed, 19 Mar 2025 10:30:11 GMT Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding Age: 1260

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.10	49691	104.18.36.248	443	5888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:01:02 UTC	689	OUT	GET / HTTP/1.1 Host: sso-robinhood-nett-cdn--auth.webflow.io Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:01:02 UTC	824	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 10:01:02 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close CF-Ray: 922c204fbea53720-FRA CF-Cache-Status: HIT Age: 136309 Last-Modified: Tue, 11 Mar 2025 11:22:17 GMT content-security-policy: frame-ancestors 'self' https://.webflow.com http://.webflow.com http://*.webflow.io http://webflow.com https://webflow.com surrogate-control: max-age=2147483647 surrogate-key: sso-robinhood-nett-cdn--auth.webflow.io 678a1405aa5eaaf7916ec6e6 pageId:678a1405aa5eaaf7916ec6ed x-lambda-id: c5b50d0d-1729-4ad8-84fa-263a81c2017e vary: Accept-Encoding Set-Cookie: _cfuvid=G1EOLfZ5tiCNdeGEN7baDK_b7w20lbHEuOkTNCME4gY-1742378462722-0.0.1.1-604800000; path=/; domain=.webflow.io; HttpOnly; Secure; SameSite=None Server: cloudflare alt-svc: h3=":443"; ma=86400
2025-03-19 10:01:02 UTC	545	IN	Data Raw: 63 39 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 21 2d 2d 20 54 68 69 73 20 73 69 74 65 20 77 61 73 20 63 72 65 61 74 65 64 20 69 6e 20 57 65 62 66 6c 6f 77 2e 20 68 74 74 70 73 3a 2f 2f 77 65 62 66 6c 6f 77 2e 63 6f 6d 20 2d 2d 3e 3c 21 2d 2d 20 4c 61 73 74 20 50 75 62 6c 69 73 68 65 64 3a 20 46 72 69 20 4a 61 6e 20 31 37 20 32 30 32 35 20 30 38 3a 32 37 3a 33 37 20 47 4d 54 2b 30 30 30 30 20 28 43 6f 6f 72 64 69 6e 61 74 65 64 20 55 6e 69 76 65 72 73 61 6c 20 54 69 6d 65 29 20 2d 2d 3e 3c 68 74 6d 6c 20 64 61 74 61 2d 77 66 2d 64 6f 6d 61 69 6e 3d 22 73 73 6f 2d 72 6f 62 69 6e 68 6f 6f 64 2d 6e 65 74 74 2d 63 64 6e 2d 2d 61 75 74 68 2e 77 65 62 66 6c 6f 77 2e 69 6f 22 20 64 61 74 61 2d 77 66 2d 70 61 67 65 3d 22 36 37 38 61 31 34 30 35 61 Data Ascii: c92<!DOCTYPE html>... This site was created in Webflow. https://webflow.com -->... Last Published: Fri Jan 17 2025 08:27:37 GMT+0000 (Coordinated Universal Time) --><html data-wf-domain="sso-robinhood-nett-cdn--auth.webflow.io" data-wf-page="678a1405a
2025-03-19 10:01:02 UTC	1369	IN	Data Raw: 20 63 72 79 70 74 6f 63 75 72 72 65 6e 63 69 65 73 2e 20 57 69 74 68 20 61 20 75 73 65 72 2d 66 72 69 65 6e 64 6c 79 20 69 6e 74 65 72 66 61 63 65 2c 20 69 74 20 68 61 73 20 67 61 69 6e 65 64 20 70 6f 70 75 6c 61 72 69 74 79 20 61 6d 6f 6e 67 20 62 65 67 69 6e 6e 65 72 73 20 61 6e 64 20 73 65 61 73 6f 6e 65 64 20 74 72 61 64 65 72 73 20 61 6c 69 6b 65 2e 20 57 68 65 74 68 65 72 20 79 6f 75 26 23 78 32 37 3b 72 65 20 6c 6f 6f 6b 69 6e 67 20 74 6f 20 73 74 61 72 74 20 79 6f 75 72 20 66 69 72 73 74 20 69 6e 76 65 73 74 6d 65 6e 74 20 70 6f 72 74 66 6f 6c 69 6f 20 6f 72 20 72 65 66 69 6e 65 20 61 6e 20 65 78 69 73 74 69 6e 67 20 73 74 72 61 74 65 67 79 2c 20 52 6f 62 69 6e 68 6f 6f 64 20 70 72 6f 76 69 64 65 73 20 61 20 73 65 61 6d 6c 65 73 73 20 70 6c 61 74 Data Ascii: cryptocurrencies. With a user-friendly interface, it has gained popularity among beginners and seasoned traders alike. Whether you're looking to start your first investment portfolio or refine an existing strategy, Robinhood provides a seamless plat
2025-03-19 10:01:02 UTC	1311	IN	Data Raw: 74 68 3a 20 31 33 34 38 70 78 29 20 31 30 30 76 77 2c 20 31 33 34 38 70 78 22 20 73 72 63 73 65 74 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 70 72 6f 64 2e 77 65 62 73 69 74 65 2d 66 69 6c 65 73 2e 63 6f 6d 2f 36 37 38 61 31 34 30 35 61 61 35 65 61 61 66 37 39 31 36 65 63 36 65 36 2f 36 37 38 61 31 34 32 35 38 64 37 30 35 63 61 36 37 39 64 61 38 32 30 62 5f 53 63 72 65 65 6e 73 68 6f 74 25 32 30 32 30 32 35 2d 30 31 2d 30 38 25 32 30 61 74 25 32 30 31 33 2d 33 39 2d 31 34 25 32 30 43 6f 6d 6d 69 73 73 69 6f 6e 2d 66 72 65 65 25 32 30 53 74 6f 63 6b 25 32 30 54 72 61 64 69 6e 67 25 32 30 25 32 36 25 32 30 49 6e 76 65 73 74 69 6e 67 25 32 30 41 70 70 25 32 30 52 6f 62 69 6e 68 6f 6f 64 2d 70 2d 35 30 30 2e 70 6e 67 20 35 30 30 77 2c 20 68 74 74 70 73 3a 2f Data Ascii: th: 1348px) 100vw, 1348px" srcset="https://cdn.prod.website-files.com/678a1405aa5eaaf7916ec6e6/678a14258d705ca679da820b_Screenshot%202025-01-08%20at%2013-39-14%20Commission-free%20Stock%20Trading%20%26%20Investing%20App%20Robinhood-p-500.png 500w, https:/
2025-03-19 10:01:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.10	49693	104.18.160.117	443	5888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:01:02 UTC	683	OUT	GET /678a1405aa5eaaf7916ec6e6/css/sso-robinhood-nett-cdn--auth.webflow.ce67eee42.css HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Referer: https://sso-robinhood-nett-cdn--auth.webflow.io/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:01:02 UTC	632	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 10:01:02 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close x-amz-id-2: m2+jFPBRDslrMaj0bo6/j1xvSt7DzmacFHIpBzG0fDIO4iY78bQvPqq9GQmT55GpXNEX/Ia5ytE= x-amz-request-id: 5MHT72YR7MD8KB99 Last-Modified: Fri, 17 Jan 2025 08:27:38 GMT ETag: W/"b6a57deb813fab88fe5f35ba5bb2c342" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000, immutable x-amz-version-id: KDbo2gkd463vhF1eFqfW4bkM..W.9tQI CF-Cache-Status: HIT Age: 134243 Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 922c205108582eec-FRA alt-svc: h3=":443"; ma=86400
2025-03-19 10:01:02 UTC	737	IN	Data Raw: 37 64 33 38 0d 0a 68 74 6d 6c 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 3b 0a 20 20 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 62 6f 64 79 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 7d 0a 0a 61 72 74 69 63 6c 65 2c 20 61 73 69 64 65 2c 20 64 65 74 61 69 6c 73 2c 20 66 69 67 63 61 70 74 69 6f 6e 2c 20 66 69 67 75 72 65 2c 20 66 6f 6f 74 65 72 2c 20 68 65 61 64 65 72 2c 20 68 67 72 6f 75 70 2c 20 6d 61 69 6e 2c 20 6d 65 6e 75 2c 20 6e 61 76 2c 20 73 65 63 74 69 6f 6e 2c 20 73 75 6d 6d 61 72 79 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 7d 0a Data Ascii: 7d38html { -webkit-text-size-adjust: 100%; -ms-text-size-adjust: 100%; font-family: sans-serif;}body { margin: 0;}article, aside, details, figcaption, figure, footer, header, hgroup, main, menu, nav, section, summary { display: block;}
2025-03-19 10:01:02 UTC	1369	IN	Data Raw: 20 38 30 25 3b 0a 7d 0a 0a 73 75 62 2c 20 73 75 70 20 7b 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 62 61 73 65 6c 69 6e 65 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 37 35 25 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 30 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 7d 0a 0a 73 75 70 20 7b 0a 20 20 74 6f 70 3a 20 2d 2e 35 65 6d 3b 0a 7d 0a 0a 73 75 62 20 7b 0a 20 20 62 6f 74 74 6f 6d 3a 20 2d 2e 32 35 65 6d 3b 0a 7d 0a 0a 69 6d 67 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 30 3b 0a 7d 0a 0a 73 76 67 3a 6e 6f 74 28 3a 72 6f 6f 74 29 20 7b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 0a 68 72 20 7b 0a 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 0a 20 20 Data Ascii: 80%;}sub, sup { vertical-align: baseline; font-size: 75%; line-height: 0; position: relative;}sup { top: -.5em;}sub { bottom: -.25em;}img { border: 0;}svg:not(:root) { overflow: hidden;}hr { box-sizing: content-box;
2025-03-19 10:01:02 UTC	1369	IN	Data Raw: 65 72 2d 73 70 61 63 69 6e 67 3a 20 30 3b 0a 7d 0a 0a 74 64 2c 20 74 68 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 7d 0a 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 77 65 62 66 6c 6f 77 2d 69 63 6f 6e 73 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 22 64 61 74 61 3a 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 66 6f 6e 74 2d 74 74 66 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3b 62 61 73 65 36 34 2c 41 41 45 41 41 41 41 4c 41 49 41 41 41 77 41 77 54 31 4d 76 4d 67 38 53 42 69 55 41 41 41 43 38 41 41 41 41 59 47 4e 74 59 58 44 70 50 2b 61 34 41 41 41 42 48 41 41 41 41 46 78 6e 59 58 4e 77 41 41 41 41 45 41 41 41 41 58 67 41 41 41 41 49 5a 32 78 35 5a 6d 68 53 32 58 45 41 41 41 47 41 41 41 41 44 48 47 68 6c 59 57 51 Data Ascii: er-spacing: 0;}td, th { padding: 0;}@font-face { font-family: webflow-icons; src: url("data:application/x-font-ttf;charset=utf-8;base64,AAEAAAALAIAAAwAwT1MvMg8SBiUAAAC8AAAAYGNtYXDpP+a4AAABHAAAAFxnYXNwAAAAEAAAAXgAAAAIZ2x5ZmhS2XEAAAGAAAADHGhlYWQ
2025-03-19 10:01:02 UTC	1369	IN	Data Raw: 69 45 67 62 30 74 4b 56 56 56 4b 53 32 38 67 49 53 45 67 62 30 74 4b 56 56 56 4b 53 32 38 67 49 51 41 42 41 41 41 42 77 41 49 41 41 38 41 41 45 67 41 41 45 7a 51 33 50 67 45 33 4e 6a 4d 78 46 53 49 48 44 67 45 48 42 68 55 78 49 77 41 6f 4b 49 74 65 58 57 70 56 53 6b 74 76 49 43 46 6d 41 63 42 71 58 56 36 4c 4b 43 68 6d 49 53 42 76 53 30 70 56 41 41 41 41 41 67 41 41 2f 38 41 46 74 67 50 41 41 44 49 41 4f 67 41 41 41 52 59 58 48 67 45 58 46 68 55 55 42 77 34 42 42 77 59 48 49 78 55 68 49 69 63 75 41 53 63 6d 4e 54 51 33 50 67 45 33 4e 6a 4d 78 4f 41 45 78 4e 44 63 2b 41 54 63 32 4d 7a 49 58 48 67 45 58 46 68 63 56 41 54 4d 4a 41 54 4d 56 4d 7a 55 45 6a 44 38 33 4e 6c 41 58 46 78 59 58 54 6a 55 31 50 51 4c 38 6b 7a 30 31 4e 6b 38 58 46 78 63 58 54 7a 59 31 Data Ascii: iEgb0tKVVVKS28gISEgb0tKVVVKS28gIQABAAABwAIAA8AAEgAAEzQ3PgE3NjMxFSIHDgEHBhUxIwAoKIteXWpVSktvICFmAcBqXV6LKChmISBvS0pVAAAAAgAA/8AFtgPAADIAOgAAARYXHgEXFhUUBw4BBwYHIxUhIicuAScmNTQ3PgE3NjMxOAExNDc+ATc2MzIXHgEXFhcVATMJATMVMzUEjD83NlAXFxYXTjU1PQL8kz01Nk8XFxcXTzY1
2025-03-19 10:01:02 UTC	1369	IN	Data Raw: 2d 22 5d 2c 20 5b 63 6c 61 73 73 2a 3d 22 20 77 2d 69 63 6f 6e 2d 22 5d 20 7b 0a 20 20 73 70 65 61 6b 3a 20 6e 6f 6e 65 3b 0a 20 20 66 6f 6e 74 2d 76 61 72 69 61 6e 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 6e 6f 6e 65 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 20 61 6e 74 69 61 6c 69 61 73 65 64 3b 0a 20 20 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 20 67 72 61 79 73 63 61 6c 65 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 77 65 62 66 6c 6f 77 2d 69 63 Data Ascii: -"], [class*=" w-icon-"] { speak: none; font-variant: normal; text-transform: none; -webkit-font-smoothing: antialiased; -moz-osx-font-smoothing: grayscale; font-style: normal; font-weight: normal; line-height: 1; font-family: webflow-ic
2025-03-19 10:01:02 UTC	1369	IN	Data Raw: 65 72 2d 72 61 64 69 75 73 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 39 70 78 20 31 35 70 78 3b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 7d 0a 0a 69 6e 70 75 74 2e 77 2d 62 75 74 74 6f 6e 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 20 62 75 74 74 6f 6e 3b 0a 7d 0a 0a 68 74 6d 6c 5b 64 61 74 61 2d 77 2d 64 79 6e 70 61 67 65 5d 20 5b 64 61 74 61 2d 77 2d 63 6c 6f 61 6b 5d 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 2e 77 2d 63 6f 64 65 2d 62 6c 6f 63 6b 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 75 6e 73 65 74 3b 0a 7d 0a 0a 70 72 65 2e 77 2d 63 6f 64 65 2d 62 6c Data Ascii: er-radius: 0; padding: 9px 15px; text-decoration: none; display: inline-block;}input.w-button { -webkit-appearance: button;}html[data-w-dynpage] [data-w-cloak] { color: #0000 !important;}.w-code-block { margin: unset;}pre.w-code-bl
2025-03-19 10:01:02 UTC	1369	IN	Data Raw: 6e 73 65 74 3b 0a 20 20 77 6f 72 64 2d 77 72 61 70 3a 20 75 6e 73 65 74 3b 0a 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 75 6e 73 65 74 3b 0a 7d 0a 0a 2e 77 2d 77 65 62 66 6c 6f 77 2d 62 61 64 67 65 20 7b 0a 20 20 77 68 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 77 72 61 70 3b 0a 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 30 20 31 70 78 20 23 30 30 30 30 30 30 31 61 2c 20 30 20 31 70 78 20 33 70 78 20 23 30 30 30 30 30 30 31 61 3b 0a 20 20 76 69 73 69 62 69 6c 69 74 79 3a 20 76 69 73 69 62 6c 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 6f 70 61 63 69 74 79 3a 20 31 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 32 31 34 37 34 38 33 36 34 37 20 21 69 6d 70 6f 72 74 Data Ascii: nset; word-wrap: unset; transition: unset;}.w-webflow-badge { white-space: nowrap; cursor: pointer; box-shadow: 0 0 0 1px #0000001a, 0 1px 3px #0000001a; visibility: visible !important; opacity: 1 !important; z-index: 2147483647 !import
2025-03-19 10:01:02 UTC	1369	IN	Data Raw: 65 2d 68 65 69 67 68 74 3a 20 31 38 70 78 3b 0a 7d 0a 0a 70 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 3b 0a 7d 0a 0a 62 6c 6f 63 6b 71 75 6f 74 65 20 7b 0a 20 20 62 6f 72 64 65 72 2d 6c 65 66 74 3a 20 35 70 78 20 73 6f 6c 69 64 20 23 65 32 65 32 65 32 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 20 32 30 70 78 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 32 70 78 3b 0a 7d 0a 0a 66 69 67 75 72 65 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 30 70 78 3b 0a 7d 0a 0a 66 69 67 63 61 70 74 69 6f 6e 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e Data Ascii: e-height: 18px;}p { margin-top: 0; margin-bottom: 10px;}blockquote { border-left: 5px solid #e2e2e2; margin: 0 0 10px; padding: 10px 20px; font-size: 18px; line-height: 22px;}figure { margin: 0 0 10px;}figcaption { text-align
2025-03-19 10:01:02 UTC	1369	IN	Data Raw: 74 3a 20 33 38 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 38 70 78 20 31 32 70 78 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 32 38 35 37 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2e 77 2d 69 6e 70 75 74 3a 3a 70 6c 61 63 65 68 6f 6c 64 65 72 2c 20 2e 77 2d 73 65 6c 65 63 74 3a 3a 70 6c 61 63 65 68 6f 6c 64 65 72 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 39 39 39 3b 0a 7d 0a 0a 2e 77 2d 69 6e 70 75 74 3a 66 6f 63 75 73 2c 20 2e 77 2d 73 65 6c 65 63 74 3a 66 6f 63 75 73 20 7b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 33 38 39 38 65 63 3b 0a 20 20 6f 75 74 6c 69 6e 65 3a 20 30 3b Data Ascii: t: 38px; margin-bottom: 10px; padding: 8px 12px; font-size: 14px; line-height: 1.42857; display: block;}.w-input::placeholder, .w-select::placeholder { color: #999;}.w-input:focus, .w-select:focus { border-color: #3898ec; outline: 0;
2025-03-19 10:01:02 UTC	1369	IN	Data Raw: 3a 20 2e 31 70 78 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 0a 2e 77 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 2d 64 65 66 61 75 6c 74 2c 20 2e 77 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 2d 75 70 6c 6f 61 64 69 6e 67 2c 20 2e 77 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 2d 73 75 63 63 65 73 73 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 33 33 33 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2e 77 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 2d 65 72 72 6f 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 30 70 78 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2e 77 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 2d 64 65 66 61 75 Data Ascii: : .1px; position: absolute; overflow: hidden;}.w-file-upload-default, .w-file-upload-uploading, .w-file-upload-success { color: #333; display: inline-block;}.w-file-upload-error { margin-top: 10px; display: block;}.w-file-upload-defau

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.10	49695	52.222.232.39	443	5888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:01:02 UTC	676	OUT	GET /js/jquery-3.5.1.min.dc5e7f18c8.js?site=678a1405aa5eaaf7916ec6e6 HTTP/1.1 Host: d3e54v103j8qbb.cloudfront.net Connection: keep-alive Origin: https://sso-robinhood-nett-cdn--auth.webflow.io sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://sso-robinhood-nett-cdn--auth.webflow.io/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:01:02 UTC	551	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 89476 Connection: close Last-Modified: Mon, 20 Jul 2020 17:53:02 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 19 Mar 2025 00:14:30 GMT Cache-Control: max-age=84600, must-revalidate Etag: "dc5e7f18c8d36ac1d3d4753a87c98d0a" Via: 1.1 ed91e9c9d6be32c45c1d670b7d4a6616.cloudfront.net (CloudFront) Age: 35194 Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: MlKrYk-cY0JG5KWdfTPB__c1iE54rFAe1MmLo_BZbD5hzp3rHt2AAQ==
2025-03-19 10:01:02 UTC	15833	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 Data Ascii: /! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery
2025-03-19 10:01:02 UTC	16384	IN	Data Raw: 6e 74 4e 6f 64 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 2c 61 2c 73 2c 75 2c 6c 3d 79 21 3d 3d 6d 3f 22 6e 65 78 74 53 69 62 6c 69 6e 67 22 3a 22 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 22 2c 63 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 66 3d 78 26 26 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 70 3d 21 6e 26 26 21 78 2c 64 3d 21 31 3b 69 66 28 63 29 7b 69 66 28 79 29 7b 77 68 69 6c 65 28 6c 29 7b 61 3d 65 3b 77 68 69 6c 65 28 61 3d 61 5b 6c 5d 29 69 66 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 21 31 3b 75 3d 6c 3d 22 6f 6e 6c 79 22 3d 3d 3d 68 26 26 21 75 26 26 Data Ascii: ntNode}:function(e,t,n){var r,i,o,a,s,u,l=y!==m?"nextSibling":"previousSibling",c=e.parentNode,f=x&&e.nodeName.toLowerCase(),p=!n&&!x,d=!1;if(c){if(y){while(l){a=e;while(a=a[l])if(x?a.nodeName.toLowerCase()===f:1===a.nodeType)return!1;u=l="only"===h&&!u&&
2025-03-19 10:01:02 UTC	16384	IN	Data Raw: 6c 3f 43 2e 73 65 74 54 69 6d 65 6f 75 74 28 53 2e 72 65 61 64 79 29 3a 28 45 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 42 29 2c 43 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 42 29 29 3b 76 61 72 20 24 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 29 7b 76 61 72 20 73 3d 30 2c 75 3d 65 2e 6c 65 6e 67 74 68 2c 6c 3d 6e 75 6c 6c 3d 3d 6e 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 77 28 6e 29 29 66 6f 72 28 73 20 69 6e 20 69 3d 21 30 2c 6e 29 24 28 65 2c 74 2c 73 2c 6e 5b 73 5d 2c 21 30 2c 6f 2c 61 29 3b 65 6c 73 65 20 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 26 26 28 69 3d 21 30 2c 6d 28 72 29 7c 7c 28 61 3d 21 30 29 2c 6c 26 26 28 61 Data Ascii: l?C.setTimeout(S.ready):(E.addEventListener("DOMContentLoaded",B),C.addEventListener("load",B));var $=function(e,t,n,r,i,o,a){var s=0,u=e.length,l=null==n;if("object"===w(n))for(s in i=!0,n)$(e,t,s,n[s],!0,o,a);else if(void 0!==r&&(i=!0,m(r)\|\|(a=!0),l&&(a
2025-03-19 10:01:02 UTC	16384	IN	Data Raw: 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 29 7d 2c 6c 29 3a 62 28 75 2e 74 65 78 74 43 6f 6e 74 65 6e 74 2e 72 65 70 6c 61 63 65 28 6a 65 2c 22 22 29 2c 75 2c 6c 29 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 52 65 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 2c 69 3d 74 3f 53 2e 66 69 6c 74 65 72 28 74 2c 65 29 3a 65 2c 6f 3d 30 3b 6e 75 6c 6c 21 3d 28 72 3d 69 5b 6f 5d 29 3b 6f 2b 2b 29 6e 7c 7c 31 21 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 7c 7c 53 2e 63 6c 65 61 6e 44 61 74 61 28 76 65 28 72 29 29 2c 72 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 28 6e 26 26 69 65 28 72 29 26 26 79 65 28 76 65 28 72 2c 22 73 63 72 69 70 74 22 29 29 2c 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 72 29 29 3b 72 65 74 75 72 6e 20 Data Ascii: ibute("nonce")},l):b(u.textContent.replace(je,""),u,l))}return n}function Re(e,t,n){for(var r,i=t?S.filter(t,e):e,o=0;null!=(r=i[o]);o++)n\|\|1!==r.nodeType\|\|S.cleanData(ve(r)),r.parentNode&&(n&&ie(r)&&ye(ve(r,"script")),r.parentNode.removeChild(r));return
2025-03-19 10:01:02 UTC	16384	IN	Data Raw: 70 65 65 64 73 5b 72 5d 7c 7c 72 2c 65 3d 65 7c 7c 22 66 78 22 2c 74 68 69 73 2e 71 75 65 75 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 43 2e 73 65 74 54 69 6d 65 6f 75 74 28 65 2c 72 29 3b 74 2e 73 74 6f 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 43 2e 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 6e 29 7d 7d 29 7d 2c 72 74 3d 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 2c 69 74 3d 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 65 6c 65 63 74 22 29 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6f 70 74 69 6f 6e 22 29 29 2c 72 74 2e 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 2c 79 2e 63 68 65 63 6b 4f 6e 3d 22 22 21 3d 3d 72 74 2e 76 61 6c 75 65 2c 79 2e 6f Data Ascii: peeds[r]\|\|r,e=e\|\|"fx",this.queue(e,function(e,t){var n=C.setTimeout(e,r);t.stop=function(){C.clearTimeout(n)}})},rt=E.createElement("input"),it=E.createElement("select").appendChild(E.createElement("option")),rt.type="checkbox",y.checkOn=""!==rt.value,y.o
2025-03-19 10:01:02 UTC	8107	IN	Data Raw: 69 73 2e 63 68 69 6c 64 4e 6f 64 65 73 29 7d 29 2c 74 68 69 73 7d 7d 29 2c 53 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2e 68 69 64 64 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 53 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2e 76 69 73 69 62 6c 65 28 65 29 7d 2c 53 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2e 76 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 21 28 65 2e 6f 66 66 73 65 74 57 69 64 74 68 7c 7c 65 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7c 7c 65 2e 67 65 74 43 6c 69 65 6e 74 52 65 63 74 73 28 29 2e 6c 65 6e 67 74 68 29 7d 2c 53 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 2e 78 68 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6e 65 77 20 43 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 Data Ascii: is.childNodes)}),this}}),S.expr.pseudos.hidden=function(e){return!S.expr.pseudos.visible(e)},S.expr.pseudos.visible=function(e){return!!(e.offsetWidth\|\|e.offsetHeight\|\|e.getClientRects().length)},S.ajaxSettings.xhr=function(){try{return new C.XMLHttpReque

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.10	49694	104.18.160.117	443	5888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:01:02 UTC	661	OUT	GET /678a1405aa5eaaf7916ec6e6/js/webflow.77ac24386eb2a8dacabbd68092c045ec.js HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://sso-robinhood-nett-cdn--auth.webflow.io/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:01:03 UTC	673	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 10:01:03 GMT Content-Type: text/javascript Content-Length: 37349 Connection: close x-amz-id-2: F2sc6t+UX2kliWZ+HHlfYE4DXAB2fM7JXP03FmDJCpErai3tCgQG72QTwh6OXvTWntYzJV6nUr1hn4luWM2EpjhjDRLq/4d72b7FgXo5m0c= x-amz-request-id: FBASZMQJCS6KFSMX Last-Modified: Fri, 17 Jan 2025 08:27:38 GMT ETag: "fc7ef472a2bca6fbdb8ab8235dec64e0" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000, immutable x-amz-version-id: RZQtrqXwXWWXZmPt3jtW86Pkw.YHdZNQ CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 922c20511e6b39ce-FRA alt-svc: h3=":443"; ma=86400
2025-03-19 10:01:03 UTC	696	IN	Data Raw: 0a 2f 2a 21 0a 20 2a 20 57 65 62 66 6c 6f 77 3a 20 46 72 6f 6e 74 2d 65 6e 64 20 73 69 74 65 20 6c 69 62 72 61 72 79 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 4d 49 54 0a 20 2a 20 49 6e 6c 69 6e 65 20 73 63 72 69 70 74 73 20 6d 61 79 20 61 63 63 65 73 73 20 74 68 65 20 61 70 69 20 75 73 69 6e 67 20 61 6e 20 61 73 79 6e 63 20 68 61 6e 64 6c 65 72 3a 0a 20 2a 20 20 20 76 61 72 20 57 65 62 66 6c 6f 77 20 3d 20 57 65 62 66 6c 6f 77 20 7c 7c 20 5b 5d 3b 0a 20 2a 20 20 20 57 65 62 66 6c 6f 77 2e 70 75 73 68 28 72 65 61 64 79 46 75 6e 63 74 69 6f 6e 29 3b 0a 20 2a 2f 0a 0a 28 28 29 3d 3e 7b 76 61 72 20 6c 74 3d 28 65 2c 79 29 3d 3e 28 29 3d 3e 28 79 7c 7c 65 28 28 79 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 29 2e 65 78 70 6f 72 74 73 2c 79 29 2c 79 2e 65 78 70 6f 72 Data Ascii: /! Webflow: Front-end site library * @license MIT * Inline scripts may access the api using an async handler: * var Webflow = Webflow \|\| []; * Webflow.push(readyFunction); */(()=>{var lt=(e,y)=>()=>(y\|\|e((y={exports:{}}).exports,y),y.expor
2025-03-19 10:01:03 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 20 5f 28 74 2c 6e 2c 69 29 7b 42 28 22 55 6e 69 74 73 20 64 6f 20 6e 6f 74 20 6d 61 74 63 68 20 5b 22 2b 74 2b 22 5d 3a 20 22 2b 6e 2b 22 2c 20 22 2b 69 29 7d 66 75 6e 63 74 69 6f 6e 20 49 28 74 2c 6e 2c 69 29 7b 69 66 28 6e 21 3d 3d 76 6f 69 64 20 30 26 26 28 69 3d 6e 29 2c 74 3d 3d 3d 76 6f 69 64 20 30 29 72 65 74 75 72 6e 20 69 3b 76 61 72 20 72 3d 69 3b 72 65 74 75 72 6e 20 77 65 2e 74 65 73 74 28 74 29 7c 7c 21 58 74 2e 74 65 73 74 28 74 29 3f 72 3d 70 61 72 73 65 49 6e 74 28 74 2c 31 30 29 3a 58 74 2e 74 65 73 74 28 74 29 26 26 28 72 3d 31 65 33 2a 70 61 72 73 65 46 6c 6f 61 74 28 74 29 29 2c 30 3e 72 26 26 28 72 3d 30 29 2c 72 3d 3d 3d 72 3f 72 3a 69 7d 66 75 6e 63 74 69 6f 6e 20 42 28 74 29 7b 65 74 2e 64 65 62 75 67 26 26 77 69 6e Data Ascii: ction _(t,n,i){B("Units do not match ["+t+"]: "+n+", "+i)}function I(t,n,i){if(n!==void 0&&(i=n),t===void 0)return i;var r=i;return we.test(t)\|\|!Xt.test(t)?r=parseInt(t,10):Xt.test(t)&&(r=1e3*parseFloat(t)),0>r&&(r=0),r===r?r:i}function B(t){et.debug&&win
2025-03-19 10:01:03 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 29 7b 72 65 74 75 72 6e 20 69 2a 74 2f 72 2b 6e 7d 5d 2c 22 65 61 73 65 2d 69 6e 2d 71 75 61 64 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 35 35 30 2c 20 30 2e 30 38 35 2c 20 30 2e 36 38 30 2c 20 30 2e 35 33 30 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 29 7b 72 65 74 75 72 6e 20 69 2a 28 74 2f 3d 72 29 2a 74 2b 6e 7d 5d 2c 22 65 61 73 65 2d 6f 75 74 2d 71 75 61 64 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 32 35 30 2c 20 30 2e 34 36 30 2c 20 30 2e 34 35 30 2c 20 30 2e 39 34 30 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 29 7b 72 65 74 75 72 6e 2d 69 2a 28 74 2f 3d 72 29 2a 28 74 2d 32 29 2b 6e 7d 5d 2c 22 65 61 73 65 2d 69 6e 2d 6f 75 74 2d 71 75 61 64 22 3a Data Ascii: nction(t,n,i,r){return it/r+n}],"ease-in-quad":["cubic-bezier(0.550, 0.085, 0.680, 0.530)",function(t,n,i,r){return i(t/=r)t+n}],"ease-out-quad":["cubic-bezier(0.250, 0.460, 0.450, 0.940)",function(t,n,i,r){return-i(t/=r)*(t-2)+n}],"ease-in-out-quad":
2025-03-19 10:01:03 UTC	1369	IN	Data Raw: 32 2a 28 28 74 2d 3d 32 29 2a 74 2a 74 2a 74 2a 74 2b 32 29 2b 6e 7d 5d 2c 22 65 61 73 65 2d 69 6e 2d 73 69 6e 65 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 37 30 2c 20 30 2c 20 30 2e 37 34 35 2c 20 30 2e 37 31 35 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 29 7b 72 65 74 75 72 6e 2d 69 2a 4d 61 74 68 2e 63 6f 73 28 74 2f 72 2a 28 4d 61 74 68 2e 50 49 2f 32 29 29 2b 69 2b 6e 7d 5d 2c 22 65 61 73 65 2d 6f 75 74 2d 73 69 6e 65 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 33 39 30 2c 20 30 2e 35 37 35 2c 20 30 2e 35 36 35 2c 20 31 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 29 7b 72 65 74 75 72 6e 20 69 2a 4d 61 74 68 2e 73 69 6e 28 74 2f 72 2a 28 4d 61 74 68 2e 50 49 2f 32 29 29 2b 6e 7d 5d 2c 22 65 61 Data Ascii: 2((t-=2)tttt+2)+n}],"ease-in-sine":["cubic-bezier(0.470, 0, 0.745, 0.715)",function(t,n,i,r){return-iMath.cos(t/r(Math.PI/2))+i+n}],"ease-out-sine":["cubic-bezier(0.390, 0.575, 0.565, 1)",function(t,n,i,r){return iMath.sin(t/r*(Math.PI/2))+n}],"ea
2025-03-19 10:01:03 UTC	1369	IN	Data Raw: 74 2c 6e 2c 69 2c 72 2c 73 29 7b 72 65 74 75 72 6e 20 73 3d 3d 3d 76 6f 69 64 20 30 26 26 28 73 3d 31 2e 37 30 31 35 38 29 2c 69 2a 28 28 74 3d 74 2f 72 2d 31 29 2a 74 2a 28 28 73 2b 31 29 2a 74 2b 73 29 2b 31 29 2b 6e 7d 5d 2c 22 65 61 73 65 2d 69 6e 2d 6f 75 74 2d 62 61 63 6b 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 36 38 30 2c 20 2d 30 2e 35 35 30 2c 20 30 2e 32 36 35 2c 20 31 2e 35 35 30 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 2c 73 29 7b 72 65 74 75 72 6e 20 73 3d 3d 3d 76 6f 69 64 20 30 26 26 28 73 3d 31 2e 37 30 31 35 38 29 2c 28 74 2f 3d 72 2f 32 29 3c 31 3f 69 2f 32 2a 74 2a 74 2a 28 28 28 73 2a 3d 31 2e 35 32 35 29 2b 31 29 2a 74 2d 73 29 2b 6e 3a 69 2f 32 2a 28 28 74 2d 3d 32 29 2a 74 2a 28 28 28 73 2a 3d 31 2e Data Ascii: t,n,i,r,s){return s===void 0&&(s=1.70158),i((t=t/r-1)t((s+1)t+s)+1)+n}],"ease-in-out-back":["cubic-bezier(0.680, -0.550, 0.265, 1.550)",function(t,n,i,r,s){return s===void 0&&(s=1.70158),(t/=r/2)<1?i/2tt(((s=1.525)+1)t-s)+n:i/2((t-=2)t(((s*=1.
2025-03-19 10:01:03 UTC	1369	IN	Data Raw: 6e 46 72 61 6d 65 7c 7c 48 2e 6f 52 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 7c 7c 48 2e 6d 73 52 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 3b 72 65 74 75 72 6e 20 74 26 26 68 2e 62 69 6e 64 3f 74 2e 62 69 6e 64 28 48 29 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 48 2e 73 65 74 54 69 6d 65 6f 75 74 28 6e 2c 31 36 29 7d 7d 28 29 2c 63 74 3d 79 2e 6e 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 48 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2c 6e 3d 74 26 26 28 74 2e 6e 6f 77 7c 7c 74 2e 77 65 62 6b 69 74 4e 6f 77 7c 7c 74 2e 6d 73 4e 6f 77 7c 7c 74 2e 6d 6f 7a 4e 6f 77 29 3b 72 65 74 75 72 6e 20 6e 26 26 68 2e 62 69 6e 64 3f 6e 2e 62 69 6e 64 28 74 29 3a 44 61 74 65 2e 6e 6f 77 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: nFrame\|\|H.oRequestAnimationFrame\|\|H.msRequestAnimationFrame;return t&&h.bind?t.bind(H):function(n){H.setTimeout(n,16)}}(),ct=y.now=function(){var t=H.performance,n=t&&(t.now\|\|t.webkitNow\|\|t.msNow\|\|t.mozNow);return n&&h.bind?n.bind(t):Date.now\|\|function(){
2025-03-19 10:01:03 UTC	1369	IN	Data Raw: 69 73 2e 61 63 74 69 76 65 3f 74 68 69 73 2e 71 75 65 75 65 2e 70 75 73 68 28 7b 6f 70 74 69 6f 6e 73 3a 77 7d 29 3a 28 74 68 69 73 2e 74 69 6d 65 72 3d 6e 65 77 20 71 74 28 7b 64 75 72 61 74 69 6f 6e 3a 77 2c 63 6f 6e 74 65 78 74 3a 74 68 69 73 2c 63 6f 6d 70 6c 65 74 65 3a 6f 7d 29 2c 74 68 69 73 2e 61 63 74 69 76 65 3d 21 30 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 77 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 61 63 74 69 76 65 3f 28 74 68 69 73 2e 71 75 65 75 65 2e 70 75 73 68 28 7b 6f 70 74 69 6f 6e 73 3a 77 2c 61 72 67 73 3a 61 72 67 75 6d 65 6e 74 73 7d 29 2c 76 6f 69 64 28 74 68 69 73 2e 74 69 6d 65 72 2e 63 6f 6d 70 6c 65 74 65 3d 6f 29 29 3a 42 28 22 4e 6f 20 61 63 74 69 76 65 20 74 72 61 6e 73 69 74 69 6f 6e 20 74 69 6d 65 72 2e 20 55 73 65 20 73 Data Ascii: is.active?this.queue.push({options:w}):(this.timer=new qt({duration:w,context:this,complete:o}),this.active=!0)}function s(w){return this.active?(this.queue.push({options:w,args:arguments}),void(this.timer.complete=o)):B("No active transition timer. Use s
2025-03-19 10:01:03 UTC	1369	IN	Data Raw: 4e 29 7d 4f 2e 63 61 6c 6c 28 74 68 69 73 2c 74 74 2c 73 74 29 7d 59 26 26 6e 74 26 26 59 2e 63 61 6c 6c 28 74 68 69 73 2c 6e 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 77 29 7b 77 2e 73 74 6f 70 28 29 7d 66 75 6e 63 74 69 6f 6e 20 41 74 28 77 2c 4f 29 7b 77 2e 73 65 74 28 4f 29 7d 66 75 6e 63 74 69 6f 6e 20 67 65 28 77 29 7b 74 68 69 73 2e 24 65 6c 2e 63 73 73 28 77 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 74 28 77 2c 4f 29 7b 74 5b 77 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 68 69 6c 64 72 65 6e 3f 79 65 2e 63 61 6c 6c 28 74 68 69 73 2c 4f 2c 61 72 67 75 6d 65 6e 74 73 29 3a 28 74 68 69 73 2e 65 6c 26 26 4f 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 2c 74 68 69 73 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 Data Ascii: N)}O.call(this,tt,st)}Y&&nt&&Y.call(this,nt)}function j(w){w.stop()}function At(w,O){w.set(O)}function ge(w){this.$el.css(w)}function ot(w,O){t[w]=function(){return this.children?ye.call(this,O,arguments):(this.el&&O.apply(this,arguments),this)}}function
2025-03-19 10:01:03 UTC	1369	IN	Data Raw: 30 2c 65 61 73 65 3a 22 65 61 73 65 22 2c 64 65 6c 61 79 3a 30 7d 3b 74 2e 69 6e 69 74 3d 66 75 6e 63 74 69 6f 6e 28 6f 2c 70 2c 78 2c 4b 29 7b 74 68 69 73 2e 24 65 6c 3d 6f 2c 74 68 69 73 2e 65 6c 3d 6f 5b 30 5d 3b 76 61 72 20 63 3d 70 5b 30 5d 3b 78 5b 32 5d 26 26 28 63 3d 78 5b 32 5d 29 2c 48 74 5b 63 5d 26 26 28 63 3d 48 74 5b 63 5d 29 2c 74 68 69 73 2e 6e 61 6d 65 3d 63 2c 74 68 69 73 2e 74 79 70 65 3d 78 5b 31 5d 2c 74 68 69 73 2e 64 75 72 61 74 69 6f 6e 3d 49 28 70 5b 31 5d 2c 74 68 69 73 2e 64 75 72 61 74 69 6f 6e 2c 73 2e 64 75 72 61 74 69 6f 6e 29 2c 74 68 69 73 2e 65 61 73 65 3d 69 28 70 5b 32 5d 2c 74 68 69 73 2e 65 61 73 65 2c 73 2e 65 61 73 65 29 2c 74 68 69 73 2e 64 65 6c 61 79 3d 49 28 70 5b 33 5d 2c 74 68 69 73 2e 64 65 6c 61 79 2c 73 2e Data Ascii: 0,ease:"ease",delay:0};t.init=function(o,p,x,K){this.$el=o,this.el=o[0];var c=p[0];x[2]&&(c=x[2]),Ht[c]&&(c=Ht[c]),this.name=c,this.type=x[1],this.duration=I(p[1],this.duration,s.duration),this.ease=i(p[2],this.ease,s.ease),this.delay=I(p[3],this.delay,s.
2025-03-19 10:01:03 UTC	1369	IN	Data Raw: 69 6f 6e 28 29 7b 28 74 68 69 73 2e 61 63 74 69 76 65 7c 7c 74 68 69 73 2e 6e 65 78 74 53 74 79 6c 65 29 26 26 28 74 68 69 73 2e 61 63 74 69 76 65 3d 21 31 2c 74 68 69 73 2e 6e 65 78 74 53 74 79 6c 65 3d 6e 75 6c 6c 2c 62 74 28 74 68 69 73 2e 65 6c 2c 74 68 69 73 2e 6e 61 6d 65 2c 74 68 69 73 2e 67 65 74 28 29 29 29 3b 76 61 72 20 6f 3d 74 68 69 73 2e 74 77 65 65 6e 3b 6f 26 26 6f 2e 63 6f 6e 74 65 78 74 26 26 6f 2e 64 65 73 74 72 6f 79 28 29 7d 2c 74 2e 63 6f 6e 76 65 72 74 3d 66 75 6e 63 74 69 6f 6e 28 6f 2c 70 29 7b 69 66 28 6f 3d 3d 22 61 75 74 6f 22 26 26 74 68 69 73 2e 61 75 74 6f 29 72 65 74 75 72 6e 20 6f 3b 76 61 72 20 78 2c 4b 3d 74 79 70 65 6f 66 20 6f 3d 3d 22 6e 75 6d 62 65 72 22 2c 63 3d 74 79 70 65 6f 66 20 6f 3d 3d 22 73 74 72 69 6e 67 22 Data Ascii: ion(){(this.active\|\|this.nextStyle)&&(this.active=!1,this.nextStyle=null,bt(this.el,this.name,this.get()));var o=this.tween;o&&o.context&&o.destroy()},t.convert=function(o,p){if(o=="auto"&&this.auto)return o;var x,K=typeof o=="number",c=typeof o=="string"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.10	49697	104.18.160.117	443	5888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:01:02 UTC	815	OUT	GET /678a1405aa5eaaf7916ec6e6/678a14258d705ca679da820b_Screenshot%202025-01-08%20at%2013-39-14%20Commission-free%20Stock%20Trading%20%26%20Investing%20App%20Robinhood.png HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://sso-robinhood-nett-cdn--auth.webflow.io/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:01:03 UTC	689	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 10:01:03 GMT Content-Type: image/png Content-Length: 544845 Connection: close x-amz-id-2: 6nt41OLvDFb/Hj+23uHbniGyi/BQfwzj94PPUiIyrweoBInAwAO3xBXodJxH6VWpqlqhCJS03OM= x-amz-request-id: YST8PWA125VVX3E9 Last-Modified: Fri, 17 Jan 2025 08:26:16 GMT ETag: "35baa4c2960f7adaa6f26cc982435555" x-amz-storage-class: INTELLIGENT_TIERING x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, must-revalidate x-amz-version-id: MmjORXROuCUDozhw.wu04xk_Z78BEFBb CF-Cache-Status: HIT Age: 132399 Accept-Ranges: bytes Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 922c2051dbb29742-FRA alt-svc: h3=":443"; ma=86400
2025-03-19 10:01:03 UTC	680	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 44 00 00 03 00 08 06 00 00 00 ec 65 6d 17 00 00 20 00 49 44 41 54 78 5e ec 7d 07 80 64 69 55 f5 ed 9c 73 ce b9 a7 27 ef cc 6c 64 59 d8 95 20 48 10 04 89 06 04 03 a2 80 28 08 fe 80 88 22 4a 10 15 09 8a 02 8a a0 88 04 49 0a 88 0a cb c2 e6 9d dd 9d 9c 43 4f ec ee e9 c9 a9 e3 7f ce f7 ea ab 7a 5d 5d e1 55 7a af 66 e6 7e b2 ee ec d4 0b df 3b 5f 3e f7 dc 7b 0b 44 64 11 ff 68 51 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 e0 ba 47 a0 40 09 d1 eb be 8d f5 03 15 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 20 84 80 12 a2 da 15 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 Data Ascii: PNGIHDRDem IDATx^}diUs'ldY H("JICOz]]Uzf~;_>{DdhQE@PE@PE@PE@PEG@E@PE@PE@PE@PE E@PE@PE@PE@P
2025-03-19 10:01:03 UTC	1369	IN	Data Raw: 9f 90 cf 7d ee 73 81 7c d1 fb df ff 7e 79 ee 73 9f 2b 95 95 95 81 bc ff 5a 79 e9 c5 8b 17 e5 5b df fa 96 fc e1 1f fe a1 af 55 56 42 d4 57 b8 f5 65 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 a4 8f 00 d5 a0 6f 7b db db e4 7b df fb 9e 7c e4 23 1f 91 83 07 0f a6 ff b0 eb f8 4e 2a 32 df fa d6 b7 ca d3 9e f6 34 21 39 f9 85 2f 7c c1 97 af e5 bb 5e f8 c2 17 1a a2 5a 8b 77 04 a8 1a fd f2 97 bf 2c ef 7d ef 7b bd df 94 c1 95 4a 88 66 00 9e de aa 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 1f 08 d0 0d fe 9b df fc a6 1c 39 72 44 de fe f6 b7 2b 11 ea 11 f4 e1 e1 61 f9 e0 07 3f 28 d5 d5 d5 f2 d2 97 be 54 ce 9d 3b e7 f1 ce d4 2e eb ee ee 96 6f 7c e3 1b 52 55 55 95 da 8d 7a f5 12 04 4e 9f 3e 6d 08 e5 89 Data Ascii: }s\|~ys+Zy[UVBWe"("("("o{{\|#N*24!9/\|^Zw,}{Jf("("("(9rD+a?(T;.o\|RUUzN>m
2025-03-19 10:01:03 UTC	1369	IN	Data Raw: c7 3b df f9 4e f3 dc 0f 7d e8 43 31 49 db 78 2f 55 42 d4 73 73 e4 dd 85 24 8d bf f2 95 af c8 ff fb 7f ff 2f ef ea a6 15 ca 7f 04 3e f6 b1 8f c9 9d 77 de b9 cc 20 14 74 cd f3 b5 5e a9 e0 f2 fb bf ff fb f2 c3 1f fe 50 1e 7c f0 c1 65 b7 d1 12 cc 05 f5 e7 7e ee e7 52 79 64 5e 5c 9b 8d ba ff da af fd 9a bc f5 ad 6f 35 86 be 5c 26 2a bc 16 e7 c7 6c e0 9b 17 1d 45 2b a1 08 28 02 8a 80 22 a0 08 04 88 00 63 5e 52 54 43 d1 d3 aa 55 ab cc 7e e3 e4 c9 93 f2 37 7f f3 37 72 f6 ec d9 00 6b 76 6d bc fa e6 9b 6f 36 67 cc be be be 6b a3 c2 d7 70 2d 8b 8a 8a 4c 06 f3 b1 b1 b1 98 9e c8 b1 3e ed 85 2f 7c a1 e1 7c b4 f8 8f 00 b9 c1 6c 85 90 c8 0b 42 94 aa cb b7 bd ed 6d 61 24 4f 9c 38 61 26 ce 5f ff f5 5f 97 6d db b6 19 89 38 3f 9a 16 25 ba c4 9f 39 73 26 26 ea 96 10 65 60 dc Data Ascii: ;N}C1Ix/UBss$/>w t^P\|e~Ryd^\o5\&*lE+("c^RTCU~77rkvmo6gkp-L>/\|\|lBma$O8a&__m8?%9s&&e`
2025-03-19 10:01:03 UTC	1369	IN	Data Raw: 73 48 54 32 2b 5c 7b 7b bb 21 74 29 79 e7 7f f3 bb e9 5e 4f 95 2a dd f8 39 c1 5b 42 94 13 03 89 d0 99 99 19 69 6d 6d 35 ef 21 41 c9 3a 5b 12 93 98 90 d4 62 c2 29 86 16 20 a9 cb b8 2c e7 cf 9f 97 9f f9 99 9f 31 16 38 96 d5 ab 57 0b eb dc d6 d6 26 93 93 93 42 e5 ad 4d 3a f5 a6 37 bd c9 a8 00 59 48 2c b0 1d 48 ae d2 85 94 cf 5c b9 72 a5 21 eb 38 21 dc 48 84 28 17 1e e2 6f 0f 3c c4 92 fd 84 09 bb d8 5e 3f fd d3 3f 6d 30 73 13 86 fc 33 15 83 c4 91 7d 96 24 b2 25 0e 49 a6 b1 4f 53 59 c9 42 52 8d cf 88 56 87 45 1f fa 52 ad 07 09 23 4b d2 f1 3d ee 3a b8 07 0d bf 87 6a 3b 2a 5b dd 8a 52 7b f8 64 02 33 f6 41 b7 72 6d f3 e6 cd 4b 08 1a fe 4e b5 b6 fd 2e aa f6 48 c6 33 64 80 5d e0 a8 74 23 06 5e c8 1d d6 8f 0b 3d 09 30 8e 25 8e 49 5b a8 ca 65 3f a5 a2 35 a8 ec 7d 24 Data Ascii: sHT2+\{{!t)y^O9[Bimm5!A:[b) ,18W&BM:7YH,H\r!8!H(o<^??m0s3}$%IOSYBRVER#K=:j;[R{d3ArmKN.H3d]t#^=0%I[e?5}$
2025-03-19 10:01:03 UTC	1369	IN	Data Raw: 8b fc fc 6e f2 40 dc c7 b2 6f 7a 29 14 91 91 af f1 a3 d0 43 85 c6 59 b7 02 94 67 4d fe 1d 3d 99 dd bf 33 01 17 3d 89 d9 6f 28 ec 62 a1 58 80 f7 92 6f 22 4f 40 83 00 f7 ed dc d3 90 27 a3 a8 ce 5d 78 1d 49 57 ee 9b 58 c8 0b f1 0c 45 85 37 79 2f 9e 3f 29 14 a4 51 81 7b 76 3e 8f e7 60 bf 0a bd ca 39 36 b2 51 02 25 44 e9 7a 4a f5 24 0b c1 24 e1 44 6b 92 db 85 98 6a c8 44 99 e3 dd 20 24 cb 32 cf 83 e3 f3 9f ff 7c a3 f0 24 49 ca c6 63 66 78 76 7e ca 6e 6d e1 61 82 f1 01 49 62 b0 33 59 42 94 93 39 0f 95 b6 90 b0 a1 aa 94 83 c6 92 a7 f1 08 51 4e b6 74 e5 b7 85 07 17 12 64 24 22 a9 78 b1 0a 51 76 32 76 68 5b f8 5c 76 44 92 ae 6c f4 57 bc e2 15 a6 73 92 3c e6 26 df 5d 48 80 31 8e 05 27 2a 4e a0 3c 20 51 c9 c7 ef 63 a7 b1 e5 13 9f f8 84 f9 2e 2e 40 5c 90 18 dc 9a 6a Data Ascii: n@oz)CYgM=3=o(bXo"O@']xIWXE7y/?)Q{v>`96Q%DzJ$$DkjD $2\|$Icfxv~nmaIb3YB9QNtd$"xQv2vh[\vDlWs<&]H1'*N< Qc..@\j
2025-03-19 10:01:03 UTC	1369	IN	Data Raw: de b3 12 11 a2 b1 04 14 d6 3b 92 7b 50 ee 0f dd a1 e3 f8 9b 17 85 68 74 2e 8b 20 e2 8b f2 1c 4a 6f 24 fe db 4b f1 53 21 ca fa 50 9c c7 9c 1a 34 36 90 23 a2 98 8d e4 33 8b 25 44 49 7e 92 9c a4 00 c7 1a cb d9 2e 0c 5f 61 15 a2 14 d7 51 09 4b 52 35 9a f8 b4 df ed 85 10 25 39 6b 63 98 5a be 29 9a 58 f5 82 63 3a d7 90 1b 60 88 c7 6c 94 40 09 51 12 7d 6c 4c 1e 7c 39 09 91 a0 74 77 c0 7f fc c7 7f 14 06 65 f6 5a 2c 79 41 77 5b ba b6 bb 0b 27 5d 2b f9 e5 3b a9 2c a2 f2 91 1d 99 93 a9 bb 70 12 67 47 e3 84 3c 36 36 16 56 88 92 48 fc ec 67 3f bb e4 5a eb 96 46 62 91 44 47 3c 42 94 04 15 27 10 5b 38 39 50 a9 f0 ce 77 be d3 fc 3b 5e 96 79 76 54 ba d9 f3 90 c7 43 21 15 b4 94 47 c7 b2 5a b1 e3 92 58 25 d9 4a 4b 1c 5d 42 a9 ae 23 2e ee 42 d5 2d e3 99 d2 1d 80 13 14 27 59 Data Ascii: ;{Pht. Jo$KS!P46#3%DI~._aQKR5%9kcZ)Xc:`l@Q}lL\|9tweZ,yAw[']+;,pgG<66VHg?ZFbDG<B'[89Pw;^yvTC!GZX%JK]B#.B-'Y
2025-03-19 10:01:03 UTC	1369	IN	Data Raw: 8d 2e 9c e8 a8 1c 65 bc 12 5a a3 f8 4e c6 d7 b4 ff 6d af e7 06 9c 64 11 89 8b f7 bc e7 3d 61 42 94 aa 51 92 20 4c 7c c4 c2 7b c9 84 73 40 73 62 67 1c d4 5c 13 a2 d6 9d 9f 87 60 ba fd 5b 97 42 0e 46 7e 0f ad 5b 54 b5 f2 77 d6 87 56 0b 12 65 3b 77 ee 34 75 66 e0 5f 4a c1 29 bf 67 8c c6 cf 7f fe f3 86 38 e5 81 c4 fe b7 c5 c1 aa 51 6f 34 42 94 df cf 36 25 f1 e9 8e 93 69 d5 39 ec b7 ee d8 9c 89 0e da 96 64 e2 b3 18 7a c0 ed 32 6f 17 09 fe 66 09 9c e8 3e eb b5 1e 6c 3f 86 4c 20 89 cd c2 83 22 63 c5 46 c7 6b e1 6f fc 0e ba 82 d8 6b a9 3e 7e f8 e1 87 c5 ad 2e 4d a4 10 b5 0b 1c c9 77 4b 5c 32 3e 2f ef cf 86 42 34 95 31 ef d7 b5 3c 9c 73 7c 90 60 60 21 f1 43 95 35 43 5e b0 c4 22 77 ac c2 97 63 90 18 93 94 e4 f5 d1 59 e6 49 c6 c4 4b aa 94 ac 8f 24 6b cb 44 fd 2f ba Data Ascii: .eZNmd=aBQ L\|{s@sbg\`[BF~[TwVe;w4uf_J)g8Qo4B6%i9dz2of>l?L "cFkok>~.MwK\2>/B41<s\|``!C5C^"wcYIK$kD/
2025-03-19 10:01:03 UTC	1369	IN	Data Raw: 13 cc 46 6e 0b 9f c5 b8 0f 24 5c e9 da ee 2e 74 db a2 cb 01 7f 63 5d dc 04 a7 fb 3a 32 f5 74 55 60 9d e9 62 60 dd e7 a3 71 e7 f3 a8 9a 25 79 4a 95 2e 63 bc 32 36 03 ad 0a 7e 07 73 ce 56 9f d0 e7 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 d7 1a 02 f4 5e ad ab ab 33 21 06 f2 bd 44 87 70 8b 0e 31 96 cf f5 a7 02 f9 e0 c1 83 61 a5 ab d7 ba 52 70 47 be 27 9f 0a 15 a0 f4 1e 26 97 63 b3 d1 d3 9b 2a 9b ea cd 20 09 51 aa cc 6d 18 a9 6c e0 1e 08 21 4a 76 9a c4 db b3 9f fd ec 6c 7c 83 3e 43 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 81 eb 06 01 e6 5d 61 b2 64 92 6e 24 ec b4 64 1f 01 e6 65 a1 57 2c c5 6a d6 eb d7 eb 5b 18 cb 9f ae e4 f4 cc d5 92 7b 04 16 16 16 8c 62 9a 82 bd 6c 95 40 08 51 66 e6 fc 87 7f f8 07 Data Ascii: Fn$\.tc]:2tU`b`q%yJ.c26~sV("("("(^3!Dp1aRpG'&c* Qml!Jvl\|>CPE@PE@PE@P]adn$deW,j[{bl@Qf
2025-03-19 10:01:03 UTC	1369	IN	Data Raw: 02 8a 80 22 a0 08 04 82 80 12 a2 81 c0 ae 2f 55 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 81 20 10 50 42 34 08 d4 f5 9d 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 10 08 02 4a 88 06 02 bb be 54 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 82 40 a0 60 11 25 88 17 eb 3b 15 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 c8 05 02 3f be ef 5e b9 f3 a9 4f cb c5 a3 f5 99 8a 80 22 70 1d 20 50 d0 50 53 6a 08 51 cb 8a 16 e0 4f 85 05 73 d2 d6 52 27 63 63 43 72 e1 c2 15 d9 b9 7b 5c ce e3 df bc 86 92 52 2d fe 22 e0 50 d6 05 52 28 0b d2 54 5f 2c 1b 36 ac 90 f9 c5 4a 79 f8 b1 ed 72 ee fc 45 fc 92 ff Data Ascii: "/UE@PE@PE@PE@P PB4"("("("("JTPE@PE@PE@PE@P@`%;E@PE@PE@PE@?^O"p PPSjQOsR'ccCr{\R-"PR(T_,6JyrE
2025-03-19 10:01:03 UTC	1369	IN	Data Raw: 31 32 4e e7 a4 aa b2 44 ba ba 7a cd f8 b8 8a 8d 55 ee bf 7e e9 ce 9b ff 55 08 42 b4 1a f5 e8 ed 1f c1 fa 7d d0 18 8c 3d d5 23 09 4b ea 99 44 c5 fa 57 5c 54 08 e3 5b 03 fe 5d 24 e3 c7 fc 27 47 22 6d 42 03 6f a1 74 76 75 e3 c0 7e 5e 4e 9f 3d ef eb 5e d7 ec f2 50 99 a2 82 19 19 19 ea 96 4b 57 e6 30 46 4f 05 26 0e 59 c4 dc c9 f5 96 46 ef ce ae 16 08 55 e6 30 7f 9e 09 ef 47 3d 0f ba ac 5c e8 10 69 4d 8d 75 d2 dc dc 2c 47 8f 9d 40 7d 48 de 7b ea ad 59 a9 41 ec 87 80 44 2f 2e 80 41 a1 db d4 65 ef be 43 f8 77 71 0e df b7 fc d1 ce 29 da ee b9 b9 b2 cc 49 7b 4b b5 b4 b4 b6 62 3c 4d 83 74 a4 d1 38 f8 33 1b eb 48 e3 6c 09 8c a5 3d 5d ed 52 57 df 04 d1 c7 21 b9 70 31 f8 76 0c 9f bf 30 f6 ba da eb 65 f5 9a 0d f2 83 fb 1e 81 81 e8 4a 1e f4 b1 a5 6d 6e a4 33 9c 37 b1 c7 Data Ascii: 12NDzU~UB}=#KDW\T[]$'G"mBotvu~^N=^PKW0FO&YFU0G=\iMu,G@}H{YAD/.AeCwq)I{Kb<Mt83Hl=]RW!p1v0eJmn37

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.10	49698	52.222.232.39	443	5888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:01:03 UTC	693	OUT	GET /img/webflow-badge-icon-d2.89e12c322e.svg HTTP/1.1 Host: d3e54v103j8qbb.cloudfront.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://sso-robinhood-nett-cdn--auth.webflow.io/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:01:03 UTC	578	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 421 Connection: close Last-Modified: Thu, 21 Sep 2023 16:04:04 GMT X-Amz-Server-Side-Encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 19 Mar 2025 00:28:20 GMT Cache-Control: max-age=84600, must-revalidate Etag: "89e12c322e66c81213861fc9acb8b003" Via: 1.1 a89f27dcb39a061266ddc18ab5416cba.cloudfront.net (CloudFront) Age: 34364 Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: j9sDEK3Mxswg4AWIhpZO8gCcP2OIARPlowzBSYsgy1ZQArqyYiaZiA==
2025-03-19 10:01:03 UTC	421	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 32 36 22 20 68 65 69 67 68 74 3d 22 31 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 36 20 31 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 32 35 2e 36 35 20 30 4c 31 37 2e 34 36 35 34 20 31 36 48 39 2e 37 37 37 37 38 4c 31 33 2e 32 30 33 20 39 2e 33 36 38 39 32 48 31 33 2e 30 34 39 33 43 31 30 2e 32 32 33 35 20 31 33 2e 30 33 37 32 20 36 2e 30 30 37 33 38 20 31 35 2e 34 35 32 20 30 20 31 36 56 39 2e 34 36 30 36 38 43 30 20 39 2e 34 36 30 36 38 20 33 2e 38 34 33 Data Ascii: <svg width="26" height="16" viewBox="0 0 26 16" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M25.65 0L17.4654 16H9.77778L13.203 9.36892H13.0493C10.2235 13.0372 6.00738 15.452 0 16V9.46068C0 9.46068 3.843

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.10	49699	52.222.232.39	443	5888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:01:03 UTC	693	OUT	GET /img/webflow-badge-text-d2.c82cec3b78.svg HTTP/1.1 Host: d3e54v103j8qbb.cloudfront.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://sso-robinhood-nett-cdn--auth.webflow.io/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:01:03 UTC	579	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 9912 Connection: close Last-Modified: Thu, 21 Sep 2023 16:04:31 GMT X-Amz-Server-Side-Encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 19 Mar 2025 05:10:32 GMT Cache-Control: max-age=84600, must-revalidate Etag: "c82cec3b78a2b2d267bbfe3c7e838068" Via: 1.1 8a6f67a9421de326f43e9107751b580e.cloudfront.net (CloudFront) Age: 17432 Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: pRcGFHJMZ7DD_btcGgTCW3a8TammjJaQ4VNCaix5HXhEP2pDardueQ==
2025-03-19 10:01:03 UTC	9912	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 31 38 22 20 68 65 69 67 68 74 3d 22 31 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 31 38 20 31 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 30 2e 35 32 35 30 32 34 20 30 2e 38 39 36 34 38 34 48 33 2e 30 35 34 33 32 4c 36 2e 30 30 37 37 36 20 38 2e 32 36 36 32 32 4c 38 2e 38 39 39 30 35 20 30 2e 38 39 36 34 38 34 48 31 31 2e 33 35 33 31 56 31 31 48 39 2e 34 37 33 32 37 56 33 2e 37 39 39 34 39 4c 36 2e 36 36 33 37 20 31 31 48 35 2e 31 38 37 31 33 4c 32 2e 33 38 34 34 20 33 2e 39 32 30 37 37 56 31 31 48 30 2e 35 32 35 30 32 34 56 30 2e 38 39 36 34 38 34 5a 22 20 66 69 6c 6c 3d Data Ascii: <svg width="118" height="12" viewBox="0 0 118 12" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M0.525024 0.896484H3.05432L6.00776 8.26622L8.89905 0.896484H11.3531V11H9.47327V3.79949L6.6637 11H5.18713L2.3844 3.92077V11H0.525024V0.896484Z" fill=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.10	49700	104.18.160.117	443	5888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:01:03 UTC	710	OUT	GET /678a1405aa5eaaf7916ec6e6/678a14353258d0825bbf37b7_dgdgdg.png HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://sso-robinhood-nett-cdn--auth.webflow.io/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:01:03 UTC	656	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 10:01:03 GMT Content-Type: image/png Content-Length: 803 Connection: close x-amz-id-2: ISKWL3jcdrme4qTVcCZiDQDyJ5h7JNJVYW3RsPOdC8nM+wHOkzDSbRvkotNU8mM2fYus74fqo1iilsrEsuiTmg== x-amz-request-id: B5JXAM4WQ30AXBHA Last-Modified: Fri, 17 Jan 2025 08:26:30 GMT ETag: "c8f0cef2d937562902daa9c3c0b67ca3" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, must-revalidate x-amz-version-id: KwXzT7AXY0RaCab3OqZYfXGQBrBWFwvM CF-Cache-Status: HIT Age: 132399 Accept-Ranges: bytes Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 922c2053db86d232-FRA alt-svc: h3=":443"; ma=86400
2025-03-19 10:01:03 UTC	713	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 02 b8 49 44 41 54 58 47 ed 96 4d 68 13 41 18 86 df 4d 76 37 a9 5b aa 97 22 62 10 d4 0a 0a 82 0a 96 16 2f fe 54 4b 82 20 52 d4 8a 8a 54 84 18 fc ab 20 82 82 5e 94 d6 fa 47 05 ab 54 ad 07 c1 a2 a2 d5 7a d0 83 15 a9 f4 a2 34 45 bd e8 21 7a 10 ad 5a 4b 6d 4b ac f9 d9 64 d7 6f 93 8d d9 16 93 9d 4d 23 b9 f4 81 65 33 33 61 e6 9d f7 fb be 99 e5 fc 2a 54 14 10 9b fe 2e 18 53 02 0a 2e 20 6f 49 18 8f 01 df 3f d9 f0 73 80 83 e0 00 5c f3 15 14 cf 30 9f 3a 2f 02 7a 3a 05 5c 3d e6 40 70 98 03 c7 25 fb 38 f2 f6 e0 c5 30 Data Ascii: PNGIHDR szzsRGBgAMAapHYsodIDATXGMhAMv7["b/TK RT ^GTz4E!zZKmKdoM#e33a*T.S. oI?s\0:/z:\=@p%80
2025-03-19 10:01:03 UTC	90	IN	Data Raw: 37 ca f4 91 41 0e 6b b7 ca f4 a5 a3 e6 75 71 0d 53 01 2f 9f f0 a8 de 21 33 9f 6c 56 31 15 d0 db c5 c3 bd d3 fc 56 cb 95 ec 39 40 23 ef fd 76 2c 2a b7 7e c0 b0 92 97 8f d2 c9 c0 7c 10 fd 2f a6 04 14 58 00 f0 07 6b fc e1 8a c3 30 56 c5 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: 7AkuqS/!3lV1V9@#v,*~\|/Xk0VIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.10	49701	104.18.160.117	443	5888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:01:03 UTC	555	OUT	GET /678a1405aa5eaaf7916ec6e6/678a14258d705ca679da820b_Screenshot%202025-01-08%20at%2013-39-14%20Commission-free%20Stock%20Trading%20%26%20Investing%20App%20Robinhood.png HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:01:03 UTC	689	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 10:01:03 GMT Content-Type: image/png Content-Length: 544845 Connection: close x-amz-id-2: 6nt41OLvDFb/Hj+23uHbniGyi/BQfwzj94PPUiIyrweoBInAwAO3xBXodJxH6VWpqlqhCJS03OM= x-amz-request-id: YST8PWA125VVX3E9 Last-Modified: Fri, 17 Jan 2025 08:26:16 GMT ETag: "35baa4c2960f7adaa6f26cc982435555" x-amz-storage-class: INTELLIGENT_TIERING x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, must-revalidate x-amz-version-id: MmjORXROuCUDozhw.wu04xk_Z78BEFBb CF-Cache-Status: HIT Age: 132399 Accept-Ranges: bytes Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 922c2054195beded-FRA alt-svc: h3=":443"; ma=86400
2025-03-19 10:01:03 UTC	680	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 44 00 00 03 00 08 06 00 00 00 ec 65 6d 17 00 00 20 00 49 44 41 54 78 5e ec 7d 07 80 64 69 55 f5 ed 9c 73 ce b9 a7 27 ef cc 6c 64 59 d8 95 20 48 10 04 89 06 04 03 a2 80 28 08 fe 80 88 22 4a 10 15 09 8a 02 8a a0 88 04 49 0a 88 0a cb c2 e6 9d dd 9d 9c 43 4f ec ee e9 c9 a9 e3 7f ce f7 ea ab 7a 5d 5d e1 55 7a af 66 e6 7e b2 ee ec d4 0b df 3b 5f 3e f7 dc 7b 0b 44 64 11 ff 68 51 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 e0 ba 47 a0 40 09 d1 eb be 8d f5 03 15 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 20 84 80 12 a2 da 15 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 Data Ascii: PNGIHDRDem IDATx^}diUs'ldY H("JICOz]]Uzf~;_>{DdhQE@PE@PE@PE@PEG@E@PE@PE@PE@PE E@PE@PE@PE@P
2025-03-19 10:01:03 UTC	1369	IN	Data Raw: 9f 90 cf 7d ee 73 81 7c d1 fb df ff 7e 79 ee 73 9f 2b 95 95 95 81 bc ff 5a 79 e9 c5 8b 17 e5 5b df fa 96 fc e1 1f fe a1 af 55 56 42 d4 57 b8 f5 65 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 a4 8f 00 d5 a0 6f 7b db db e4 7b df fb 9e 7c e4 23 1f 91 83 07 0f a6 ff b0 eb f8 4e 2a 32 df fa d6 b7 ca d3 9e f6 34 21 39 f9 85 2f 7c c1 97 af e5 bb 5e f8 c2 17 1a a2 5a 8b 77 04 a8 1a fd f2 97 bf 2c ef 7d ef 7b bd df 94 c1 95 4a 88 66 00 9e de aa 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 1f 08 d0 0d fe 9b df fc a6 1c 39 72 44 de fe f6 b7 2b 11 ea 11 f4 e1 e1 61 f9 e0 07 3f 28 d5 d5 d5 f2 d2 97 be 54 ce 9d 3b e7 f1 ce d4 2e eb ee ee 96 6f 7c e3 1b 52 55 55 95 da 8d 7a f5 12 04 4e 9f 3e 6d 08 e5 89 Data Ascii: }s\|~ys+Zy[UVBWe"("("("o{{\|#N*24!9/\|^Zw,}{Jf("("("(9rD+a?(T;.o\|RUUzN>m
2025-03-19 10:01:03 UTC	1369	IN	Data Raw: c7 3b df f9 4e f3 dc 0f 7d e8 43 31 49 db 78 2f 55 42 d4 73 73 e4 dd 85 24 8d bf f2 95 af c8 ff fb 7f ff 2f ef ea a6 15 ca 7f 04 3e f6 b1 8f c9 9d 77 de b9 cc 20 14 74 cd f3 b5 5e a9 e0 f2 fb bf ff fb f2 c3 1f fe 50 1e 7c f0 c1 65 b7 d1 12 cc 05 f5 e7 7e ee e7 52 79 64 5e 5c 9b 8d ba ff da af fd 9a bc f5 ad 6f 35 86 be 5c 26 2a bc 16 e7 c7 6c e0 9b 17 1d 45 2b a1 08 28 02 8a 80 22 a0 08 04 88 00 63 5e 52 54 43 d1 d3 aa 55 ab cc 7e e3 e4 c9 93 f2 37 7f f3 37 72 f6 ec d9 00 6b 76 6d bc fa e6 9b 6f 36 67 cc be be be 6b a3 c2 d7 70 2d 8b 8a 8a 4c 06 f3 b1 b1 b1 98 9e c8 b1 3e ed 85 2f 7c a1 e1 7c b4 f8 8f 00 b9 c1 6c 85 90 c8 0b 42 94 aa cb b7 bd ed 6d 61 24 4f 9c 38 61 26 ce 5f ff f5 5f 97 6d db b6 19 89 38 3f 9a 16 25 ba c4 9f 39 73 26 26 ea 96 10 65 60 dc Data Ascii: ;N}C1Ix/UBss$/>w t^P\|e~Ryd^\o5\&*lE+("c^RTCU~77rkvmo6gkp-L>/\|\|lBma$O8a&__m8?%9s&&e`
2025-03-19 10:01:03 UTC	1369	IN	Data Raw: 73 48 54 32 2b 5c 7b 7b bb 21 74 29 79 e7 7f f3 bb e9 5e 4f 95 2a dd f8 39 c1 5b 42 94 13 03 89 d0 99 99 19 69 6d 6d 35 ef 21 41 c9 3a 5b 12 93 98 90 d4 62 c2 29 86 16 20 a9 cb b8 2c e7 cf 9f 97 9f f9 99 9f 31 16 38 96 d5 ab 57 0b eb dc d6 d6 26 93 93 93 42 e5 ad 4d 3a f5 a6 37 bd c9 a8 00 59 48 2c b0 1d 48 ae d2 85 94 cf 5c b9 72 a5 21 eb 38 21 dc 48 84 28 17 1e e2 6f 0f 3c c4 92 fd 84 09 bb d8 5e 3f fd d3 3f 6d 30 73 13 86 fc 33 15 83 c4 91 7d 96 24 b2 25 0e 49 a6 b1 4f 53 59 c9 42 52 8d cf 88 56 87 45 1f fa 52 ad 07 09 23 4b d2 f1 3d ee 3a b8 07 0d bf 87 6a 3b 2a 5b dd 8a 52 7b f8 64 02 33 f6 41 b7 72 6d f3 e6 cd 4b 08 1a fe 4e b5 b6 fd 2e aa f6 48 c6 33 64 80 5d e0 a8 74 23 06 5e c8 1d d6 8f 0b 3d 09 30 8e 25 8e 49 5b a8 ca 65 3f a5 a2 35 a8 ec 7d 24 Data Ascii: sHT2+\{{!t)y^O9[Bimm5!A:[b) ,18W&BM:7YH,H\r!8!H(o<^??m0s3}$%IOSYBRVER#K=:j;[R{d3ArmKN.H3d]t#^=0%I[e?5}$
2025-03-19 10:01:03 UTC	1369	IN	Data Raw: 8b fc fc 6e f2 40 dc c7 b2 6f 7a 29 14 91 91 af f1 a3 d0 43 85 c6 59 b7 02 94 67 4d fe 1d 3d 99 dd bf 33 01 17 3d 89 d9 6f 28 ec 62 a1 58 80 f7 92 6f 22 4f 40 83 00 f7 ed dc d3 90 27 a3 a8 ce 5d 78 1d 49 57 ee 9b 58 c8 0b f1 0c 45 85 37 79 2f 9e 3f 29 14 a4 51 81 7b 76 3e 8f e7 60 bf 0a bd ca 39 36 b2 51 02 25 44 e9 7a 4a f5 24 0b c1 24 e1 44 6b 92 db 85 98 6a c8 44 99 e3 dd 20 24 cb 32 cf 83 e3 f3 9f ff 7c a3 f0 24 49 ca c6 63 66 78 76 7e ca 6e 6d e1 61 82 f1 01 49 62 b0 33 59 42 94 93 39 0f 95 b6 90 b0 a1 aa 94 83 c6 92 a7 f1 08 51 4e b6 74 e5 b7 85 07 17 12 64 24 22 a9 78 b1 0a 51 76 32 76 68 5b f8 5c 76 44 92 ae 6c f4 57 bc e2 15 a6 73 92 3c e6 26 df 5d 48 80 31 8e 05 27 2a 4e a0 3c 20 51 c9 c7 ef 63 a7 b1 e5 13 9f f8 84 f9 2e 2e 40 5c 90 18 dc 9a 6a Data Ascii: n@oz)CYgM=3=o(bXo"O@']xIWXE7y/?)Q{v>`96Q%DzJ$$DkjD $2\|$Icfxv~nmaIb3YB9QNtd$"xQv2vh[\vDlWs<&]H1'*N< Qc..@\j
2025-03-19 10:01:03 UTC	1369	IN	Data Raw: de b3 12 11 a2 b1 04 14 d6 3b 92 7b 50 ee 0f dd a1 e3 f8 9b 17 85 68 74 2e 8b 20 e2 8b f2 1c 4a 6f 24 fe db 4b f1 53 21 ca fa 50 9c c7 9c 1a 34 36 90 23 a2 98 8d e4 33 8b 25 44 49 7e 92 9c a4 00 c7 1a cb d9 2e 0c 5f 61 15 a2 14 d7 51 09 4b 52 35 9a f8 b4 df ed 85 10 25 39 6b 63 98 5a be 29 9a 58 f5 82 63 3a d7 90 1b 60 88 c7 6c 94 40 09 51 12 7d 6c 4c 1e 7c 39 09 91 a0 74 77 c0 7f fc c7 7f 14 06 65 f6 5a 2c 79 41 77 5b ba b6 bb 0b 27 5d 2b f9 e5 3b a9 2c a2 f2 91 1d 99 93 a9 bb 70 12 67 47 e3 84 3c 36 36 16 56 88 92 48 fc ec 67 3f bb e4 5a eb 96 46 62 91 44 47 3c 42 94 04 15 27 10 5b 38 39 50 a9 f0 ce 77 be d3 fc 3b 5e 96 79 76 54 ba d9 f3 90 c7 43 21 15 b4 94 47 c7 b2 5a b1 e3 92 58 25 d9 4a 4b 1c 5d 42 a9 ae 23 2e ee 42 d5 2d e3 99 d2 1d 80 13 14 27 59 Data Ascii: ;{Pht. Jo$KS!P46#3%DI~._aQKR5%9kcZ)Xc:`l@Q}lL\|9tweZ,yAw[']+;,pgG<66VHg?ZFbDG<B'[89Pw;^yvTC!GZX%JK]B#.B-'Y
2025-03-19 10:01:03 UTC	1369	IN	Data Raw: 8d 2e 9c e8 a8 1c 65 bc 12 5a a3 f8 4e c6 d7 b4 ff 6d af e7 06 9c 64 11 89 8b f7 bc e7 3d 61 42 94 aa 51 92 20 4c 7c c4 c2 7b c9 84 73 40 73 62 67 1c d4 5c 13 a2 d6 9d 9f 87 60 ba fd 5b 97 42 0e 46 7e 0f ad 5b 54 b5 f2 77 d6 87 56 0b 12 65 3b 77 ee 34 75 66 e0 5f 4a c1 29 bf 67 8c c6 cf 7f fe f3 86 38 e5 81 c4 fe b7 c5 c1 aa 51 6f 34 42 94 df cf 36 25 f1 e9 8e 93 69 d5 39 ec b7 ee d8 9c 89 0e da 96 64 e2 b3 18 7a c0 ed 32 6f 17 09 fe 66 09 9c e8 3e eb b5 1e 6c 3f 86 4c 20 89 cd c2 83 22 63 c5 46 c7 6b e1 6f fc 0e ba 82 d8 6b a9 3e 7e f8 e1 87 c5 ad 2e 4d a4 10 b5 0b 1c c9 77 4b 5c 32 3e 2f ef cf 86 42 34 95 31 ef d7 b5 3c 9c 73 7c 90 60 60 21 f1 43 95 35 43 5e b0 c4 22 77 ac c2 97 63 90 18 93 94 e4 f5 d1 59 e6 49 c6 c4 4b aa 94 ac 8f 24 6b cb 44 fd 2f ba Data Ascii: .eZNmd=aBQ L\|{s@sbg\`[BF~[TwVe;w4uf_J)g8Qo4B6%i9dz2of>l?L "cFkok>~.MwK\2>/B41<s\|``!C5C^"wcYIK$kD/
2025-03-19 10:01:03 UTC	1369	IN	Data Raw: 13 cc 46 6e 0b 9f c5 b8 0f 24 5c e9 da ee 2e 74 db a2 cb 01 7f 63 5d dc 04 a7 fb 3a 32 f5 74 55 60 9d e9 62 60 dd e7 a3 71 e7 f3 a8 9a 25 79 4a 95 2e 63 bc 32 36 03 ad 0a 7e 07 73 ce 56 9f d0 e7 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 d7 1a 02 f4 5e ad ab ab 33 21 06 f2 bd 44 87 70 8b 0e 31 96 cf f5 a7 02 f9 e0 c1 83 61 a5 ab d7 ba 52 70 47 be 27 9f 0a 15 a0 f4 1e 26 97 63 b3 d1 d3 9b 2a 9b ea cd 20 09 51 aa cc 6d 18 a9 6c e0 1e 08 21 4a 76 9a c4 db b3 9f fd ec 6c 7c 83 3e 43 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 81 eb 06 01 e6 5d 61 b2 64 92 6e 24 ec b4 64 1f 01 e6 65 a1 57 2c c5 6a d6 eb d7 eb 5b 18 cb 9f ae e4 f4 cc d5 92 7b 04 16 16 16 8c 62 9a 82 bd 6c 95 40 08 51 66 e6 fc 87 7f f8 07 Data Ascii: Fn$\.tc]:2tU`b`q%yJ.c26~sV("("("(^3!Dp1aRpG'&c* Qml!Jvl\|>CPE@PE@PE@P]adn$deW,j[{bl@Qf
2025-03-19 10:01:03 UTC	1369	IN	Data Raw: 02 8a 80 22 a0 08 04 82 80 12 a2 81 c0 ae 2f 55 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 81 20 10 50 42 34 08 d4 f5 9d 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 10 08 02 4a 88 06 02 bb be 54 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 82 40 a0 60 11 25 88 17 eb 3b 15 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 c8 05 02 3f be ef 5e b9 f3 a9 4f cb c5 a3 f5 99 8a 80 22 70 1d 20 50 d0 50 53 6a 08 51 cb 8a 16 e0 4f 85 05 73 d2 d6 52 27 63 63 43 72 e1 c2 15 d9 b9 7b 5c ce e3 df bc 86 92 52 2d fe 22 e0 50 d6 05 52 28 0b d2 54 5f 2c 1b 36 ac 90 f9 c5 4a 79 f8 b1 ed 72 ee fc 45 fc 92 ff Data Ascii: "/UE@PE@PE@PE@P PB4"("("("("JTPE@PE@PE@PE@P@`%;E@PE@PE@PE@?^O"p PPSjQOsR'ccCr{\R-"PR(T_,6JyrE
2025-03-19 10:01:03 UTC	1369	IN	Data Raw: 31 32 4e e7 a4 aa b2 44 ba ba 7a cd f8 b8 8a 8d 55 ee bf 7e e9 ce 9b ff 55 08 42 b4 1a f5 e8 ed 1f c1 fa 7d d0 18 8c 3d d5 23 09 4b ea 99 44 c5 fa 57 5c 54 08 e3 5b 03 fe 5d 24 e3 c7 fc 27 47 22 6d 42 03 6f a1 74 76 75 e3 c0 7e 5e 4e 9f 3d ef eb 5e d7 ec f2 50 99 a2 82 19 19 19 ea 96 4b 57 e6 30 46 4f 05 26 0e 59 c4 dc c9 f5 96 46 ef ce ae 16 08 55 e6 30 7f 9e 09 ef 47 3d 0f ba ac 5c e8 10 69 4d 8d 75 d2 dc dc 2c 47 8f 9d 40 7d 48 de 7b ea ad 59 a9 41 ec 87 80 44 2f 2e 80 41 a1 db d4 65 ef be 43 f8 77 71 0e df b7 fc d1 ce 29 da ee b9 b9 b2 cc 49 7b 4b b5 b4 b4 b6 62 3c 4d 83 74 a4 d1 38 f8 33 1b eb 48 e3 6c 09 8c a5 3d 5d ed 52 57 df 04 d1 c7 21 b9 70 31 f8 76 0c 9f bf 30 f6 ba da eb 65 f5 9a 0d f2 83 fb 1e 81 81 e8 4a 1e f4 b1 a5 6d 6e a4 33 9c 37 b1 c7 Data Ascii: 12NDzU~UB}=#KDW\T[]$'G"mBotvu~^N=^PKW0FO&YFU0G=\iMu,G@}H{YAD/.AeCwq)I{Kb<Mt83Hl=]RW!p1v0eJmn37

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.10	49702	52.222.232.144	443	5888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:01:03 UTC	433	OUT	GET /img/webflow-badge-icon-d2.89e12c322e.svg HTTP/1.1 Host: d3e54v103j8qbb.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:01:03 UTC	578	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 421 Connection: close Last-Modified: Thu, 21 Sep 2023 16:04:04 GMT X-Amz-Server-Side-Encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 19 Mar 2025 00:28:20 GMT Cache-Control: max-age=84600, must-revalidate Etag: "89e12c322e66c81213861fc9acb8b003" Via: 1.1 f2c65205154aaf89a2c7bbc8fe8fdaba.cloudfront.net (CloudFront) Age: 34364 Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: xqMloBM5xblU_fQ17-kk96rvrlXjXaAHMVbqGq2U40XyfyF_GdBiJg==
2025-03-19 10:01:03 UTC	421	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 32 36 22 20 68 65 69 67 68 74 3d 22 31 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 36 20 31 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 32 35 2e 36 35 20 30 4c 31 37 2e 34 36 35 34 20 31 36 48 39 2e 37 37 37 37 38 4c 31 33 2e 32 30 33 20 39 2e 33 36 38 39 32 48 31 33 2e 30 34 39 33 43 31 30 2e 32 32 33 35 20 31 33 2e 30 33 37 32 20 36 2e 30 30 37 33 38 20 31 35 2e 34 35 32 20 30 20 31 36 56 39 2e 34 36 30 36 38 43 30 20 39 2e 34 36 30 36 38 20 33 2e 38 34 33 Data Ascii: <svg width="26" height="16" viewBox="0 0 26 16" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M25.65 0L17.4654 16H9.77778L13.203 9.36892H13.0493C10.2235 13.0372 6.00738 15.452 0 16V9.46068C0 9.46068 3.843

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.10	49703	52.222.232.144	443	5888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:01:03 UTC	433	OUT	GET /img/webflow-badge-text-d2.c82cec3b78.svg HTTP/1.1 Host: d3e54v103j8qbb.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:01:03 UTC	579	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 9912 Connection: close Last-Modified: Thu, 21 Sep 2023 16:04:31 GMT X-Amz-Server-Side-Encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 19 Mar 2025 05:10:32 GMT Cache-Control: max-age=84600, must-revalidate Etag: "c82cec3b78a2b2d267bbfe3c7e838068" Via: 1.1 e59bea79ab5f15feda92136bc7b74158.cloudfront.net (CloudFront) Age: 17432 Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: w5ojA4dWV12k-OBh4WuNqjDcNkDVpmL8Pb3ElXdErc3OuHhNOHcQ-A==
2025-03-19 10:01:03 UTC	9912	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 31 38 22 20 68 65 69 67 68 74 3d 22 31 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 31 38 20 31 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 30 2e 35 32 35 30 32 34 20 30 2e 38 39 36 34 38 34 48 33 2e 30 35 34 33 32 4c 36 2e 30 30 37 37 36 20 38 2e 32 36 36 32 32 4c 38 2e 38 39 39 30 35 20 30 2e 38 39 36 34 38 34 48 31 31 2e 33 35 33 31 56 31 31 48 39 2e 34 37 33 32 37 56 33 2e 37 39 39 34 39 4c 36 2e 36 36 33 37 20 31 31 48 35 2e 31 38 37 31 33 4c 32 2e 33 38 34 34 20 33 2e 39 32 30 37 37 56 31 31 48 30 2e 35 32 35 30 32 34 56 30 2e 38 39 36 34 38 34 5a 22 20 66 69 6c 6c 3d Data Ascii: <svg width="118" height="12" viewBox="0 0 118 12" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M0.525024 0.896484H3.05432L6.00776 8.26622L8.89905 0.896484H11.3531V11H9.47327V3.79949L6.6637 11H5.18713L2.3844 3.92077V11H0.525024V0.896484Z" fill=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.10	49704	104.18.160.117	443	5888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:01:03 UTC	450	OUT	GET /678a1405aa5eaaf7916ec6e6/678a14353258d0825bbf37b7_dgdgdg.png HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:01:03 UTC	656	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 10:01:03 GMT Content-Type: image/png Content-Length: 803 Connection: close x-amz-id-2: ISKWL3jcdrme4qTVcCZiDQDyJ5h7JNJVYW3RsPOdC8nM+wHOkzDSbRvkotNU8mM2fYus74fqo1iilsrEsuiTmg== x-amz-request-id: B5JXAM4WQ30AXBHA Last-Modified: Fri, 17 Jan 2025 08:26:30 GMT ETag: "c8f0cef2d937562902daa9c3c0b67ca3" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, must-revalidate x-amz-version-id: KwXzT7AXY0RaCab3OqZYfXGQBrBWFwvM CF-Cache-Status: HIT Age: 132399 Accept-Ranges: bytes Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 922c2054896692b7-FRA alt-svc: h3=":443"; ma=86400
2025-03-19 10:01:03 UTC	713	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 02 b8 49 44 41 54 58 47 ed 96 4d 68 13 41 18 86 df 4d 76 37 a9 5b aa 97 22 62 10 d4 0a 0a 82 0a 96 16 2f fe 54 4b 82 20 52 d4 8a 8a 54 84 18 fc ab 20 82 82 5e 94 d6 fa 47 05 ab 54 ad 07 c1 a2 a2 d5 7a d0 83 15 a9 f4 a2 34 45 bd e8 21 7a 10 ad 5a 4b 6d 4b ac f9 d9 64 d7 6f 93 8d d9 16 93 9d 4d 23 b9 f4 81 65 33 33 61 e6 9d f7 fb be 99 e5 fc 2a 54 14 10 9b fe 2e 18 53 02 0a 2e 20 6f 49 18 8f 01 df 3f d9 f0 73 80 83 e0 00 5c f3 15 14 cf 30 9f 3a 2f 02 7a 3a 05 5c 3d e6 40 70 98 03 c7 25 fb 38 f2 f6 e0 c5 30 Data Ascii: PNGIHDR szzsRGBgAMAapHYsodIDATXGMhAMv7["b/TK RT ^GTz4E!zZKmKdoM#e33a*T.S. oI?s\0:/z:\=@p%80
2025-03-19 10:01:03 UTC	90	IN	Data Raw: 37 ca f4 91 41 0e 6b b7 ca f4 a5 a3 e6 75 71 0d 53 01 2f 9f f0 a8 de 21 33 9f 6c 56 31 15 d0 db c5 c3 bd d3 fc 56 cb 95 ec 39 40 23 ef fd 76 2c 2a b7 7e c0 b0 92 97 8f d2 c9 c0 7c 10 fd 2f a6 04 14 58 00 f0 07 6b fc e1 8a c3 30 56 c5 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: 7AkuqS/!3lV1V9@#v,*~\|/Xk0VIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.10	49690	142.250.186.132	443	5888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:01:05 UTC	599	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiKo8sBCIWgzQEI/aXOAQiA1s4BCMDYzgEIydzOAQjg4M4BCOXjzgEIr+TOAQjI5M4BCN/kzgEIi+XOAQiO5c4B Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:01:05 UTC	1303	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 10:01:05 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-P8iewDTO43wMHQdI8Wzf5w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Downlink Accept-CH: RTT Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-19 10:01:05 UTC	75	IN	Data Raw: 31 39 33 32 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 6a 61 6b 6f 62 20 6a 6f 68 6e 73 6f 6e 22 2c 22 78 65 6e 6f 62 6c 61 64 65 20 63 68 72 6f 6e 69 63 6c 65 73 20 78 20 6e 69 6e 74 65 6e 64 6f 20 73 77 69 74 63 68 22 2c 22 66 Data Ascii: 1932)]}'["",["jakob johnson","xenoblade chronicles x nintendo switch","f
2025-03-19 10:01:05 UTC	1378	IN	Data Raw: 72 6f 73 63 68 20 63 61 6d 70 69 6e 67 22 2c 22 7a 64 66 20 6d 65 64 69 61 74 68 65 6b 20 73 74 72 65 61 6d 69 6e 67 22 2c 22 74 75 6e 6e 65 6c 20 67 72 c3 a4 66 65 6c 66 69 6e 67 22 2c 22 73 74 65 66 66 69 20 67 72 61 66 22 2c 22 6e 69 6e 74 65 6e 64 6f 20 64 69 72 65 63 74 22 2c 22 72 68 65 69 6e 6d 65 74 61 6c 6c 20 61 6b 74 69 65 6e 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 67 72 6f 75 70 73 69 6e 66 6f 22 3a 22 43 69 41 49 6b 6b 34 53 47 77 6f 58 56 48 4a 6c 62 6d 52 7a 49 47 4a 6c 61 53 42 54 64 57 4e 6f 59 57 35 6d 63 6d 46 6e 5a 57 Data Ascii: rosch camping","zdf mediathek streaming","tunnel grfelfing","steffi graf","nintendo direct","rheinmetall aktien"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"CiAIkk4SGwoXVHJlbmRzIGJlaSBTdWNoYW5mcmFnZW
2025-03-19 10:01:05 UTC	1378	IN	Data Raw: 75 65 6a 4a 4c 4e 48 46 69 55 6e 4a 6d 56 55 46 71 55 44 68 42 54 55 4e 42 55 57 4a 6e 52 53 39 4c 55 32 52 34 64 47 5a 6d 57 56 6b 31 57 45 31 77 63 32 74 36 61 30 35 54 56 55 39 74 62 32 70 6d 56 31 70 58 64 56 4e 58 63 32 51 35 64 6b 6c 72 59 7a 64 69 61 31 6c 50 56 55 31 71 57 6d 70 74 61 32 31 61 4d 45 35 48 62 6d 67 32 59 6a 46 30 54 57 63 78 52 6b 49 77 54 32 35 5a 61 47 49 32 61 6c 6c 59 4e 57 35 6a 59 33 4e 5a 52 7a 46 69 65 6b 46 4f 52 33 64 50 55 6b 38 33 4d 56 70 36 55 30 35 35 4e 6d 68 58 61 46 6c 53 52 54 6c 54 55 58 45 33 62 6e 4e 6d 54 45 64 6b 57 56 42 74 64 6e 5a 30 5a 79 74 73 53 33 4e 72 5a 44 42 52 63 55 52 31 52 6b 6b 31 57 58 6c 35 64 30 4e 46 61 30 31 4e 54 56 56 70 55 6e 56 54 56 45 31 32 51 32 67 72 4d 58 4e 49 55 46 68 45 4d 56 Data Ascii: uejJLNHFiUnJmVUFqUDhBTUNBUWJnRS9LU2R4dGZmWVk1WE1wc2t6a05TVU9tb2pmV1pXdVNXc2Q5dklrYzdia1lPVU1qWmpta21aME5Hbmg2YjF0TWcxRkIwT25ZaGI2allYNW5jY3NZRzFiekFOR3dPUk83MVp6U055NmhXaFlSRTlTUXE3bnNmTEdkWVBtdnZ0ZytsS3NrZDBRcUR1Rkk1WXl5d0NFa01NTVVpUnVTVE12Q2grMXNIUFhEMV
2025-03-19 10:01:05 UTC	1378	IN	Data Raw: 47 56 56 5a 57 34 7a 4d 54 46 50 4e 57 4d 34 63 58 64 49 61 33 68 46 4e 47 51 30 57 58 70 59 65 45 5a 72 62 47 78 71 62 32 64 71 61 44 52 35 52 48 4a 6b 56 30 68 4a 4d 6b 63 7a 55 57 52 6a 56 69 74 4d 54 54 52 6b 53 56 64 57 5a 6d 31 30 64 54 4a 75 59 6a 5a 6b 54 55 46 78 51 32 68 78 61 45 56 71 51 30 6c 4e 55 30 38 76 54 45 4a 44 55 45 77 31 63 6a 4d 34 56 31 4e 4b 4c 30 35 6b 63 30 64 47 52 31 4e 6c 4f 47 74 7a 64 6d 51 77 56 6b 64 50 65 54 68 52 63 57 74 7a 56 57 30 34 56 47 39 52 5a 6e 6c 6e 57 54 52 78 52 6a 68 54 52 6a 46 61 4e 55 56 4b 56 57 64 54 53 58 68 43 57 44 5a 5a 65 55 4e 75 63 55 56 7a 57 47 70 70 62 58 51 76 55 45 64 69 54 6a 6c 4e 5a 47 45 7a 56 6b 70 44 5a 30 5a 5a 4d 55 5a 61 63 6e 4d 72 4d 58 6c 4d 53 47 45 31 4d 6a 64 5a 4d 30 46 70 Data Ascii: GVVZW4zMTFPNWM4cXdIa3hFNGQ0WXpYeEZrbGxqb2dqaDR5RHJkV0hJMkczUWRjVitMTTRkSVdWZm10dTJuYjZkTUFxQ2hxaEVqQ0lNU08vTEJDUEw1cjM4V1NKL05kc0dGR1NlOGtzdmQwVkdPeThRcWtzVW04VG9RZnlnWTRxRjhTRjFaNUVKVWdTSXhCWDZZeUNucUVzWGppbXQvUEdiTjlNZGEzVkpDZ0ZZMUZacnMrMXlMSGE1MjdZM0Fp
2025-03-19 10:01:05 UTC	1378	IN	Data Raw: 6c 55 54 56 56 46 61 6b 31 72 54 43 38 79 5a 30 46 4e 51 58 64 46 51 55 46 6f 52 55 52 46 55 55 45 76 51 55 4a 58 64 31 56 4e 64 46 46 4b 59 57 31 48 57 56 46 48 53 6c 4e 44 64 79 74 4d 4e 6b 68 33 4d 57 4a 56 4f 44 45 34 62 33 46 70 54 58 70 36 4e 32 39 75 57 57 49 72 65 6d 70 59 5a 57 56 6d 55 48 6f 35 5a 46 46 69 55 32 46 68 62 6d 38 35 63 31 52 4b 53 46 5a 7a 54 33 67 7a 57 6b 6b 7a 51 54 67 33 61 56 51 30 4b 32 63 34 64 46 52 4c 52 33 5a 79 53 54 46 72 61 6d 78 4d 54 31 4e 44 62 55 31 45 53 30 56 49 4b 79 74 6d 55 46 5a 50 57 47 70 61 51 31 46 56 63 6b 45 31 4d 69 39 42 55 6d 35 45 59 33 42 50 65 55 56 68 63 56 63 33 55 47 78 77 53 47 73 30 53 44 64 61 4d 58 4a 6f 4e 6a 52 79 53 30 64 77 57 56 56 76 63 47 46 72 64 55 46 44 62 31 5a 70 55 55 49 31 57 Data Ascii: lUTVVFak1rTC8yZ0FNQXdFQUFoRURFUUEvQUJXd1VNdFFKYW1HWVFHSlNDdytMNkh3MWJVODE4b3FpTXp6N29uWWIrempYZWVmUHo5ZFFiU2Fhbm85c1RKSFZzT3gzWkkzQTg3aVQ0K2c4dFRLR3ZySTFramxMT1NDbU1ES0VIKytmUFZPWGpaQ1FVckE1Mi9BUm5EY3BPeUVhcVc3UGxwSGs0SDdaMXJoNjRyS0dwWVVvcGFrdUFDb1ZpUUI1W
2025-03-19 10:01:05 UTC	871	IN	Data Raw: 59 30 56 6e 61 48 51 77 61 6c 4e 54 4f 46 42 4b 53 6e 4e 45 55 44 63 34 4e 54 46 4b 62 32 74 4c 65 55 4e 51 51 6d 68 47 54 6d 5a 6b 4d 79 74 48 52 56 6b 35 64 54 64 57 56 6b 64 72 64 46 52 6a 56 6d 56 52 63 48 4e 61 54 56 41 79 61 6d 68 52 52 6b 68 51 61 6e 4a 55 55 58 4e 44 51 58 4e 70 62 46 64 36 4f 45 70 50 59 32 46 78 4b 33 5a 58 56 43 74 70 65 55 64 4e 61 31 4e 43 61 31 52 6e 4b 30 4a 5a 57 6b 64 7a 51 56 64 68 57 46 4e 54 57 58 4e 4c 61 43 73 77 55 30 31 54 57 45 46 57 4d 46 46 61 62 33 42 47 51 54 64 31 4e 32 4a 34 4f 55 31 5a 4b 33 56 6f 53 30 39 76 55 54 51 7a 59 32 46 4e 54 33 52 76 57 46 63 79 4d 69 74 56 59 30 49 30 4f 45 67 7a 4f 57 52 42 61 32 6c 72 57 58 70 71 4e 57 46 6b 57 56 46 58 61 46 4e 61 56 7a 49 34 4d 6e 42 70 52 55 74 33 57 57 4e Data Ascii: Y0VnaHQwalNTOFBKSnNEUDc4NTFKb2tLeUNQQmhGTmZkMytHRVk5dTdWVkdrdFRjVmVRcHNaTVAyamhRRkhQanJUUXNDQXNpbFd6OEpPY2FxK3ZXVCtpeUdNa1NCa1RnK0JZWkdzQVdhWFNTWXNLaCswU01TWEFWMFFab3BGQTd1N2J4OU1ZK3VoS09vUTQzY2FNT3RvWFcyMitVY0I0OEgzOWRBa2lrWXpqNWFkWVFXaFNaVzI4MnBpRUt3WWN
2025-03-19 10:01:05 UTC	226	IN	Data Raw: 64 63 0d 0a 65 76 61 6e 63 65 22 3a 5b 31 32 35 37 2c 31 32 35 36 2c 31 32 35 35 2c 31 32 35 34 2c 31 32 35 33 2c 31 32 35 32 2c 31 32 35 31 2c 31 32 35 30 5d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 73 75 62 74 79 70 65 73 22 3a 5b 5b 33 2c 31 34 33 2c 33 36 32 2c 33 30 38 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 2c 33 30 38 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 2c 33 30 38 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 2c 33 30 38 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 2c 33 30 38 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 2c 33 30 38 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 2c 33 30 38 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 2c 33 30 38 5d 5d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 0d 0a Data Ascii: dcevance":[1257,1256,1255,1254,1253,1252,1251,1250],"google:suggestsubtypes":[[3,143,362,308],[3,143,362,308],[3,143,362,308],[3,143,362,308],[3,143,362,308],[3,143,362,308],[3,143,362,308],[3,143,362,308]],"google:suggest
2025-03-19 10:01:05 UTC	81	IN	Data Raw: 34 62 0d 0a 74 79 70 65 22 3a 5b 22 45 4e 54 49 54 59 22 2c 22 51 55 45 52 59 22 2c 22 51 55 45 52 59 22 2c 22 51 55 45 52 59 22 2c 22 51 55 45 52 59 22 2c 22 45 4e 54 49 54 59 22 2c 22 51 55 45 52 59 22 2c 22 51 55 45 52 59 22 5d 7d 5d 0d 0a Data Ascii: 4btype":["ENTITY","QUERY","QUERY","QUERY","QUERY","ENTITY","QUERY","QUERY"]}]
2025-03-19 10:01:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Statistics

CPU Usage

• chrome.exe
• chrome.exe
• chrome.exe

Click to jump to process

Memory Usage

• chrome.exe
• chrome.exe
• chrome.exe

Click to jump to process

Click to jump to process

Target ID:	0
Start time:	06:00:50
Start date:	19/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff7ea9f0000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	06:00:54
Start date:	19/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2012,i,16234513530984416712,16261496549647889113,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2040 /prefetch:3
Imagebase:	0x7ff7ea9f0000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	5
Start time:	06:01:01
Start date:	19/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://sso-robinhood-nett-cdn--auth.webflow.io/"
Imagebase:	0x7ff7ea9f0000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://sso-robinhood-nett-cdn--auth.webflow.io/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Static File Info

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTP Packets

HTTPS Proxied Packets

Statistics

CPU Usage

Windows Analysis Report
https://sso-robinhood-nett-cdn--auth.webflow.io/