Edit tour

Windows Analysis Report
https://sso-robinhood-net--logi--auth.webflow.io/

Overview

General Information

Sample URL:	https://sso-robinhood-net--logi--auth.webflow.io/
Analysis ID:	1642794
Infos:

Detection

HTMLPhisher

Score:	60
Range:	0 - 100
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Yara detected HtmlPhish64

AI detected suspicious URL

Creates files inside the system directory

Deletes files inside the Windows folder

HTML body contains low number of good links

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6040 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7108 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2040,i,14966389648286687626,4343684295556244983,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2088 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7676 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2040,i,14966389648286687626,4343684295556244983,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=3324 /prefetch:8 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7872 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://sso-robinhood-net--logi--auth.webflow.io/" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
0.0.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security

Joe Sandbox Signatures

• AV Detection
• Phishing
• Compliance
• Networking
• System Summary

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://sso-robinhood-net--logi--auth.webflow.io/

Avira URL Cloud: detection malicious, Label: phishing

Phishing

Yara detected HtmlPhish64

Source: Yara match

File source: 0.0.pages.csv, type: HTML

AI detected suspicious URL

Source: https://sso-robinhood-net--logi--auth.webflow.io

Joe Sandbox AI: The URL 'https://sso-robinhood-net--logi--auth.webflow.io' appears to be attempting to mimic a legitimate Robinhood login page. The use of 'sso-robinhood-net' suggests an attempt to imitate a single sign-on (SSO) service for Robinhood, which is a known financial services brand. The domain 'webflow.io' is a legitimate platform for hosting websites, but its use here could be misleading. The structural elements, such as the use of 'sso' and 'auth', are common in legitimate login URLs, increasing the likelihood of user confusion. The similarity score is high due to the visual and structural resemblance to a legitimate Robinhood login URL, and the spoofed score is high due to the potential for user deception.

Source: https://sso-robinhood-net--logi--auth.webflow.io/

HTTP Parser: Number of links: 0

Source: https://sso-robinhood-net--logi--auth.webflow.io/

HTTP Parser: No <meta name="author".. found

Source: https://sso-robinhood-net--logi--auth.webflow.io/

HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 142.250.186.36:443 -> 192.168.2.5:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.36.248:443 -> 192.168.2.5:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.36.248:443 -> 192.168.2.5:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.161.117:443 -> 192.168.2.5:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.161.117:443 -> 192.168.2.5:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.222.232.39:443 -> 192.168.2.5:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.222.232.39:443 -> 192.168.2.5:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.222.232.39:443 -> 192.168.2.5:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.222.232.47:443 -> 192.168.2.5:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.222.232.47:443 -> 192.168.2.5:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.161.117:443 -> 192.168.2.5:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.161.117:443 -> 192.168.2.5:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.36:443 -> 192.168.2.5:49750 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.184.195
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.184.195
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.96.80
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.77.188
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: sso-robinhood-net--logi--auth.webflow.ioConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /678a1feff5acbcd11712c8a8/css/sso-robinhood-net--logi--auth.webflow.ce67eee42.css HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://sso-robinhood-net--logi--auth.webflow.io/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /678a1feff5acbcd11712c8a8/js/webflow.77ac24386eb2a8dacabbd68092c045ec.js HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://sso-robinhood-net--logi--auth.webflow.io/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/jquery-3.5.1.min.dc5e7f18c8.js?site=678a1feff5acbcd11712c8a8 HTTP/1.1Host: d3e54v103j8qbb.cloudfront.netConnection: keep-aliveOrigin: https://sso-robinhood-net--logi--auth.webflow.iosec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://sso-robinhood-net--logi--auth.webflow.io/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /678a1feff5acbcd11712c8a8/678a200b066780736b751886_Screenshot%202025-01-08%20at%2013-39-14%20Commission-free%20Stock%20Trading%20%26%20Investing%20App%20Robinhood.png HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://sso-robinhood-net--logi--auth.webflow.io/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/webflow-badge-icon-d2.89e12c322e.svg HTTP/1.1Host: d3e54v103j8qbb.cloudfront.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://sso-robinhood-net--logi--auth.webflow.io/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/webflow-badge-text-d2.c82cec3b78.svg HTTP/1.1Host: d3e54v103j8qbb.cloudfront.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://sso-robinhood-net--logi--auth.webflow.io/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /678a1feff5acbcd11712c8a8/678a201c03cb6c53a063f37d_dgdgdg.png HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://sso-robinhood-net--logi--auth.webflow.io/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/webflow-badge-icon-d2.89e12c322e.svg HTTP/1.1Host: d3e54v103j8qbb.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/webflow-badge-text-d2.c82cec3b78.svg HTTP/1.1Host: d3e54v103j8qbb.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /678a1feff5acbcd11712c8a8/678a200b066780736b751886_Screenshot%202025-01-08%20at%2013-39-14%20Commission-free%20Stock%20Trading%20%26%20Investing%20App%20Robinhood.png HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /678a1feff5acbcd11712c8a8/678a201c03cb6c53a063f37d_dgdgdg.png HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiJo8sBCIWgzQEI9s/OAQjI0c4BCIDWzgEI0uDOAQiv5M4BCOLkzgEIi+XOAQ==Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: sso-robinhood-net--logi--auth.webflow.io
Source: global traffic	DNS traffic detected: DNS query: cdn.prod.website-files.com
Source: global traffic	DNS traffic detected: DNS query: d3e54v103j8qbb.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: robenboodlogi.info
Source: global traffic	DNS traffic detected: DNS query: google.com

Source: chromecache_99.6.dr	String found in binary or memory: http://underscorejs.org
Source: chromecache_96.6.dr	String found in binary or memory: https://cdn.prod.website-files.com/678a1feff5acbcd11712c8a8/678a200b066780736b751886_Screenshot%2020
Source: chromecache_96.6.dr	String found in binary or memory: https://cdn.prod.website-files.com/678a1feff5acbcd11712c8a8/678a201c03cb6c53a063f37d_dgdgdg.png
Source: chromecache_96.6.dr	String found in binary or memory: https://cdn.prod.website-files.com/678a1feff5acbcd11712c8a8/css/sso-robinhood-net--logi--auth.webflo
Source: chromecache_96.6.dr	String found in binary or memory: https://cdn.prod.website-files.com/678a1feff5acbcd11712c8a8/js/webflow.77ac24386eb2a8dacabbd68092c04
Source: chromecache_96.6.dr	String found in binary or memory: https://cdn.prod.website-files.com/img/webclip.png
Source: chromecache_96.6.dr	String found in binary or memory: https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=678a1feff5acbcd11712c8a
Source: chromecache_99.6.dr	String found in binary or memory: https://github.com/bkwld/tram
Source: chromecache_96.6.dr	String found in binary or memory: https://robenboodlogi.info/logi/
Source: chromecache_96.6.dr	String found in binary or memory: https://webflow.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443

Source: unknown	HTTPS traffic detected: 142.250.186.36:443 -> 192.168.2.5:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.36.248:443 -> 192.168.2.5:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.36.248:443 -> 192.168.2.5:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.161.117:443 -> 192.168.2.5:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.161.117:443 -> 192.168.2.5:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.222.232.39:443 -> 192.168.2.5:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.222.232.39:443 -> 192.168.2.5:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.222.232.39:443 -> 192.168.2.5:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.222.232.47:443 -> 192.168.2.5:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.222.232.47:443 -> 192.168.2.5:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.161.117:443 -> 192.168.2.5:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.161.117:443 -> 192.168.2.5:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.36:443 -> 192.168.2.5:49750 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir6040_1320811841

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir6040_1320811841

Jump to behavior

Source: classification engine

Classification label: mal60.phis.win@29/22@31/7

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2040,i,14966389648286687626,4343684295556244983,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2088 /prefetch:3
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2040,i,14966389648286687626,4343684295556244983,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=3324 /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://sso-robinhood-net--logi--auth.webflow.io/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2040,i,14966389648286687626,4343684295556244983,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2088 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2040,i,14966389648286687626,4343684295556244983,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=3324 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://sso-robinhood-net--logi--auth.webflow.io/	100%	Avira URL Cloud	phishing

Source	Detection	Scanner	Label	Link
https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=678a1feff5acbcd11712c8a	0%	Avira URL Cloud	safe
https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=678a1feff5acbcd11712c8a8	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
d3e54v103j8qbb.cloudfront.net	52.222.232.39	true	false	high
sso-robinhood-net--logi--auth.webflow.io	104.18.36.248	true	true	unknown
google.com	142.250.184.238	true	false	high
cdn.prod.website-files.com	104.18.161.117	true	false	high
www.google.com	142.250.186.36	true	false	high
robenboodlogi.info	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://cdn.prod.website-files.com/678a1feff5acbcd11712c8a8/css/sso-robinhood-net--logi--auth.webflow.ce67eee42.css	false		high
https://sso-robinhood-net--logi--auth.webflow.io/	true		unknown
https://cdn.prod.website-files.com/678a1feff5acbcd11712c8a8/js/webflow.77ac24386eb2a8dacabbd68092c045ec.js	false		high
https://d3e54v103j8qbb.cloudfront.net/img/webflow-badge-text-d2.c82cec3b78.svg	false		high
https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=678a1feff5acbcd11712c8a8	false	Avira URL Cloud: safe	unknown
https://d3e54v103j8qbb.cloudfront.net/img/webflow-badge-icon-d2.89e12c322e.svg	false		high
https://cdn.prod.website-files.com/678a1feff5acbcd11712c8a8/678a201c03cb6c53a063f37d_dgdgdg.png	false		high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE	false		high
https://cdn.prod.website-files.com/678a1feff5acbcd11712c8a8/678a200b066780736b751886_Screenshot%202025-01-08%20at%2013-39-14%20Commission-free%20Stock%20Trading%20%26%20Investing%20App%20Robinhood.png	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=678a1feff5acbcd11712c8a	chromecache_96.6.dr	false	Avira URL Cloud: safe	unknown
http://underscorejs.org	chromecache_99.6.dr	false		high
https://cdn.prod.website-files.com/678a1feff5acbcd11712c8a8/js/webflow.77ac24386eb2a8dacabbd68092c04	chromecache_96.6.dr	false		high
https://cdn.prod.website-files.com/678a1feff5acbcd11712c8a8/678a200b066780736b751886_Screenshot%2020	chromecache_96.6.dr	false		high
https://cdn.prod.website-files.com/img/webclip.png	chromecache_96.6.dr	false		high
https://cdn.prod.website-files.com/678a1feff5acbcd11712c8a8/css/sso-robinhood-net--logi--auth.webflo	chromecache_96.6.dr	false		high
https://robenboodlogi.info/logi/	chromecache_96.6.dr	false		high
https://github.com/bkwld/tram	chromecache_99.6.dr	false		high
https://webflow.com	chromecache_96.6.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.36.248	sso-robinhood-net--logi--auth.webflow.io	United States	13335	CLOUDFLARENETUS	true
52.222.232.39	d3e54v103j8qbb.cloudfront.net	United States	16509	AMAZON-02US	false
142.250.186.36	www.google.com	United States	15169	GOOGLEUS	false
104.18.161.117	cdn.prod.website-files.com	United States	13335	CLOUDFLARENETUS	false
52.222.232.47	unknown	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.6
192.168.2.5

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1642794
Start date and time:	2025-03-19 11:17:39 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 8s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://sso-robinhood-net--logi--auth.webflow.io/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	18
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal60.phis.win@29/22@31/7
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, BackgroundTransferHost.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 23.60.203.209, 142.250.185.163, 142.250.185.206, 74.125.71.84, 142.250.186.174, 142.250.184.238, 216.58.206.78, 172.217.16.206, 172.217.18.14, 216.58.212.142, 216.58.206.46, 142.250.184.206, 142.250.185.110, 216.58.212.163, 34.104.35.123, 142.250.186.163, 20.12.23.50, 20.199.58.43, 150.171.27.10
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, clientservices.googleapis.com, g.bing.com, fs-wildcard.microsoft.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, e16604.dscf.akamaiedge.net, arc.msn.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, redirector.gvt1.com, edgedl.me.gvt1.com, update.googleapis.com, clients.l.google.com, prod.fs.microsoft.com.akadns.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://sso-robinhood-net--logi--auth.webflow.io/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1348 x 768, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	544845
Entropy (8bit):	7.994826952111587
Encrypted:	true
SSDEEP:	12288:5iMxt4uS0ktCT9BHI6vr1RUunodhs0aY5ZbcnVSYtFCC3l:57xnX8CRB7vr1uuodhXbcnVFT3l
MD5:	35BAA4C2960F7ADAA6F26CC982435555
SHA1:	CD19A546FAFFE2EE076AE098BD7B4E1020BB3CEA
SHA-256:	EA591836E01D6D30A24617BD80F40E8C69EEE2716A193D9ADBE835DD91354146
SHA-512:	CFBA6922813605BCDB264E812B0811167E98A7FD8462D1C6CB6390C98A3828669485C55731EF441054F78E560703A2F17513142F70FBFA2E6A59BB892EF9AAC7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...D..........em... .IDATx^.}..diU..s..'..ldY. H........(...."J.........I........CO.........z]].Uz.f.~......;_>..{.Dd..hQ...E@.P...E@.P...E@.P...E@.P...E.G.@.......E@.P...E@.P...E@.P...E@.P...E ........E@.P...E@.P...E@.P...E@.P...E..A@......C..E@.P...E@.P...E@.P...E@.P...E@.Q...."..(..."..(..."..(..."..(..."p. .........."..(..."..(..."..(..."..(...".....E@.P...E@.P...E@.P...E@.P...E@..a.PB.ij.PE@.P...E@.P...E@.P...E@.P...E@.PBT.."..(..."..(..."..(..."..(..(.+V....ur.]wIss.466..n.2==-.N....)...{.....+/ `...Mo...!)--...b)( .w...E........g.\|.c.....G....h ..K..E@.P...E@.P...E@.P...E@.H........^JJJ.+_.....?.......?......U....!\|.=..K^...\|..\|.....}.s.\|....~y.s.+......Zy....[.........UVB.W..e.."..(..."..(..."..(..."......o{...{...\|.#..........N*2......4!9../\|....^.....Z.w.....,.}.{....J.f....(..."..(..."..(..."..(.............9rD....+......a...?(......T.;........o\|..RUU..z...N.>m...."..hN..+..."..(..."..(..."..(..."........o..(.....9...w..o4

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	9912
Entropy (8bit):	3.9529563769674163
Encrypted:	false
SSDEEP:	192:gLTccPJ37c1fhYJ0VCa8wDY+WCYTx4Pqze9CJCmVjDsUGoT:9KMV8AITHz4Xm9lGoT
MD5:	C82CEC3B78A2B2D267BBFE3C7E838068
SHA1:	70ED58A020C395EED69E3000CB27B7B0FA191360
SHA-256:	3202CB640FADA345AB99415BD087F28E6FEA1C3009DBA51D183CC37BCE036CD7
SHA-512:	85EEF3C4FC445742ED656ACC0600CCECF4F88043E5F2638484E73C6543E5CFB4DD7FBBFA90FC34628C2A1FA1BB0BC5052DF8C1EB454534674BAA4A34C4D94F6B
Malicious:	false
Reputation:	low
Preview:	<svg width="118" height="12" viewBox="0 0 118 12" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M0.525024 0.896484H3.05432L6.00776 8.26622L8.89905 0.896484H11.3531V11H9.47327V3.79949L6.6637 11H5.18713L2.3844 3.92077V11H0.525024V0.896484Z" fill="#080808"/>.<path d="M16.152 11.1367C15.4912 11.1367 14.901 10.9704 14.3815 10.6377C13.8665 10.305 13.4609 9.84017 13.1647 9.24316C12.8684 8.6416 12.7226 7.94889 12.7272 7.16504C12.7272 6.38118 12.8776 5.69076 13.1783 5.09375C13.4791 4.49674 13.8893 4.03646 14.4088 3.71289C14.9329 3.38477 15.5276 3.22298 16.193 3.22754C16.6305 3.22754 17.0361 3.30957 17.4098 3.47363C17.7835 3.63314 18.0934 3.85417 18.3395 4.13672C18.5901 4.41471 18.7542 4.71777 18.8317 5.0459L18.4967 5.03223V3.37109H20.3698V11H18.5172L18.524 9.52344L18.8522 9.33203C18.7428 9.66927 18.5559 9.97461 18.2916 10.248C18.0273 10.5215 17.7083 10.738 17.3346 10.8975C16.9609 11.057 16.5667 11.1367 16.152 11.1367ZM16.5621 9.55078C16.9495 9.55078 17.2936 9.45052 17.5944 9.25C17.89

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	421
Entropy (8bit):	4.951302343646692
Encrypted:	false
SSDEEP:	6:tnryQovcumc4slvtM65tLApUcsw6RnDH4aFJA3ST3EGn4UGhbexTVQG6eJYLwqQq:travcuXM65hA6BrvT3gfQTVVPJYLwq7H
MD5:	89E12C322E66C81213861FC9ACB8B003
SHA1:	6A1A186CEDADCEF3D7D2FFD04F275D94A54E7930
SHA-256:	00F45354C11A12591485977633A0E03952CDF1FF2DE403E10EC846DB8CC508A9
SHA-512:	E8092977116E2B795957F36A7112A0C91DD053D8EE842B8A90D6A83F762B838C034BB31E225215C3AF850CAC0FA4B922835CECD507C5EA7E1C18DE1AB7AD80CF
Malicious:	false
Reputation:	low
Preview:	<svg width="26" height="16" viewBox="0 0 26 16" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M25.65 0L17.4654 16H9.77778L13.203 9.36892H13.0493C10.2235 13.0372 6.00738 15.452 0 16V9.46068C0 9.46068 3.84306 9.23369 6.10229 6.85844H0V0.000126383H6.85832V5.64099L7.01225 5.64036L9.8148 0.000126383H15.0016V5.60523L15.1555 5.60497L18.0632 0H25.65Z" fill="#146EF5"/>.</svg>.

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (9246)
Category:	downloaded
Size (bytes):	9255
Entropy (8bit):	5.765925446938698
Encrypted:	false
SSDEEP:	192:XKzN6666V6j4WPdq3NpmlZsFd666667YGhW4TdVPcm23bcrCa9dH6666bVZHMX9f:XKJ6666FWPdqSM66666sNqdVPCcWaPHA
MD5:	D551E7C7EAE2D97D8FFCDDF8892BDA77
SHA1:	AC11DFE2CAC745070CEAE8F945F2AB07DB6CAF34
SHA-256:	19FF852DA78E2BCAA4CCB75C76738CF643CE1DB8EB82DBEEF59BF5F80CF315CE
SHA-512:	534C207C6B4B1F9D3B5465875DD9BE366796CDD5E3E362E1C8E920CF1F9221F2D3F158A5D7C8D67A301CB418D80945BB6DFE9D794B8FE280437C12532FD7A773
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE
Preview:	)]}'.["",["jonas omlin","n.rnberg neues stadion","bambu lab h2d","one ui","tarifverhandlungen .ffentlichen dienst","horst lichter bares f.r rares","peter gul.csi","byd aktien"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"CiAIkk4SGwoXVHJlbmRzIGJlaSBTdWNoYW5mcmFnZW4oCg\u003d\u003d","google:suggestdetail":[{"google:entityinfo":"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

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	9912
Entropy (8bit):	3.9529563769674163
Encrypted:	false
SSDEEP:	192:gLTccPJ37c1fhYJ0VCa8wDY+WCYTx4Pqze9CJCmVjDsUGoT:9KMV8AITHz4Xm9lGoT
MD5:	C82CEC3B78A2B2D267BBFE3C7E838068
SHA1:	70ED58A020C395EED69E3000CB27B7B0FA191360
SHA-256:	3202CB640FADA345AB99415BD087F28E6FEA1C3009DBA51D183CC37BCE036CD7
SHA-512:	85EEF3C4FC445742ED656ACC0600CCECF4F88043E5F2638484E73C6543E5CFB4DD7FBBFA90FC34628C2A1FA1BB0BC5052DF8C1EB454534674BAA4A34C4D94F6B
Malicious:	false
Reputation:	low
URL:	https://d3e54v103j8qbb.cloudfront.net/img/webflow-badge-text-d2.c82cec3b78.svg
Preview:	<svg width="118" height="12" viewBox="0 0 118 12" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M0.525024 0.896484H3.05432L6.00776 8.26622L8.89905 0.896484H11.3531V11H9.47327V3.79949L6.6637 11H5.18713L2.3844 3.92077V11H0.525024V0.896484Z" fill="#080808"/>.<path d="M16.152 11.1367C15.4912 11.1367 14.901 10.9704 14.3815 10.6377C13.8665 10.305 13.4609 9.84017 13.1647 9.24316C12.8684 8.6416 12.7226 7.94889 12.7272 7.16504C12.7272 6.38118 12.8776 5.69076 13.1783 5.09375C13.4791 4.49674 13.8893 4.03646 14.4088 3.71289C14.9329 3.38477 15.5276 3.22298 16.193 3.22754C16.6305 3.22754 17.0361 3.30957 17.4098 3.47363C17.7835 3.63314 18.0934 3.85417 18.3395 4.13672C18.5901 4.41471 18.7542 4.71777 18.8317 5.0459L18.4967 5.03223V3.37109H20.3698V11H18.5172L18.524 9.52344L18.8522 9.33203C18.7428 9.66927 18.5559 9.97461 18.2916 10.248C18.0273 10.5215 17.7083 10.738 17.3346 10.8975C16.9609 11.057 16.5667 11.1367 16.152 11.1367ZM16.5621 9.55078C16.9495 9.55078 17.2936 9.45052 17.5944 9.25C17.89

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1348 x 768, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	544845
Entropy (8bit):	7.994826952111587
Encrypted:	true
SSDEEP:	12288:5iMxt4uS0ktCT9BHI6vr1RUunodhs0aY5ZbcnVSYtFCC3l:57xnX8CRB7vr1uuodhXbcnVFT3l
MD5:	35BAA4C2960F7ADAA6F26CC982435555
SHA1:	CD19A546FAFFE2EE076AE098BD7B4E1020BB3CEA
SHA-256:	EA591836E01D6D30A24617BD80F40E8C69EEE2716A193D9ADBE835DD91354146
SHA-512:	CFBA6922813605BCDB264E812B0811167E98A7FD8462D1C6CB6390C98A3828669485C55731EF441054F78E560703A2F17513142F70FBFA2E6A59BB892EF9AAC7
Malicious:	false
Reputation:	low
URL:	https://cdn.prod.website-files.com/678a1feff5acbcd11712c8a8/678a200b066780736b751886_Screenshot%202025-01-08%20at%2013-39-14%20Commission-free%20Stock%20Trading%20%26%20Investing%20App%20Robinhood.png
Preview:	.PNG........IHDR...D..........em... .IDATx^.}..diU..s..'..ldY. H........(...."J.........I........CO.........z]].Uz.f.~......;_>..{.Dd..hQ...E@.P...E@.P...E@.P...E@.P...E.G.@.......E@.P...E@.P...E@.P...E@.P...E ........E@.P...E@.P...E@.P...E@.P...E..A@......C..E@.P...E@.P...E@.P...E@.P...E@.Q...."..(..."..(..."..(..."..(..."p. .........."..(..."..(..."..(..."..(...".....E@.P...E@.P...E@.P...E@.P...E@..a.PB.ij.PE@.P...E@.P...E@.P...E@.P...E@.PBT.."..(..."..(..."..(..."..(..(.+V....ur.]wIss.466..n.2==-.N....)...{.....+/ `...Mo...!)--...b)( .w...E........g.\|.c.....G....h ..K..E@.P...E@.P...E@.P...E@.H........^JJJ.+_.....?.......?......U....!\|.=..K^...\|..\|.....}.s.\|....~y.s.+......Zy....[.........UVB.W..e.."..(..."..(..."..(..."......o{...{...\|.#..........N*2......4!9../\|....^.....Z.w.....,.}.{....J.f....(..."..(..."..(..."..(.............9rD....+......a...?(......T.;........o\|..RUU..z...N.>m...."..hN..+..."..(..."..(..."..(..."........o..(.....9...w..o4

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (2587)
Category:	downloaded
Size (bytes):	36230
Entropy (8bit):	5.229407486730831
Encrypted:	false
SSDEEP:	768:AyNf7A1RE/GqyFVF54mkxWaIi1aUuF9Zl0F6FhF8FPqkowKji/JVx1:Aye1REeqyP0XcPyjowKjK
MD5:	CE67EEE42C89568CEA3E40F6459BEBDB
SHA1:	2893E67BA934122231F741F77F24BB2F0DFEAED6
SHA-256:	C219BD77B1A92CCD8E6A3EE098A0BC34A65F56C666660FF934B4638D4AD681F3
SHA-512:	50F0AE74E0FA09ADA3CE88D6518F02835D77665FC0817724EFE068806C3F2C89BFE3035C65EC55020A22F0E69B61C8977948A4E0D631BE2D193464F7F8922FB5
Malicious:	false
Reputation:	low
URL:	https://cdn.prod.website-files.com/678a1feff5acbcd11712c8a8/css/sso-robinhood-net--logi--auth.webflow.ce67eee42.css
Preview:	html {. -webkit-text-size-adjust: 100%;. -ms-text-size-adjust: 100%;. font-family: sans-serif;.}..body {. margin: 0;.}..article, aside, details, figcaption, figure, footer, header, hgroup, main, menu, nav, section, summary {. display: block;.}..audio, canvas, progress, video {. vertical-align: baseline;. display: inline-block;.}..audio:not([controls]) {. height: 0;. display: none;.}..[hidden], template {. display: none;.}..a {. background-color: #0000;.}..a:active, a:hover {. outline: 0;.}..abbr[title] {. border-bottom: 1px dotted;.}..b, strong {. font-weight: bold;.}..dfn {. font-style: italic;.}..h1 {. margin: .67em 0;. font-size: 2em;.}..mark {. color: #000;. background: #ff0;.}..small {. font-size: 80%;.}..sub, sup {. vertical-align: baseline;. font-size: 75%;. line-height: 0;. position: relative;.}..sup {. top: -.5em;.}..sub {. bottom: -.25em;.}..img {. border: 0;.}..svg:not(:root) {. overflow: hidden;.}..hr {. box-sizing: content-box;. height: 0;.}..

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	803
Entropy (8bit):	7.582551628276611
Encrypted:	false
SSDEEP:	12:6v/7iQ/6mUO77GjYE1NfSxipER2CJUsWIZGj8fWWHIZ90C6IhHeBs9c+8DVDnb8d:PmUOXkYcpfpc2C6HgJe9l+Bs++8Jajn
MD5:	C8F0CEF2D937562902DAA9C3C0B67CA3
SHA1:	99D0D6C68F2C00ACF5CB853A402AF4D18690C0F6
SHA-256:	73862EF843D3D50565F0495EC3C08ACB45E0DA61968DBC54D431232E86B44278
SHA-512:	44E35CD1909D50DEF4A518EF818E1D751F15F1475BFA781209D76CBC6D4E69537034FFED48D95F921821DCE77E9F847F0BD27D5CA00C901E90D75405CADC1A77
Malicious:	false
Reputation:	low
URL:	https://cdn.prod.website-files.com/678a1feff5acbcd11712c8a8/678a201c03cb6c53a063f37d_dgdgdg.png
Preview:	.PNG........IHDR... ... .....szz.....sRGB.........gAMA......a.....pHYs..........o.d....IDATXG.Mh.A...Mv7.[.."b......../.TK. R..T.... ..^...G..T......z.....4E..!z..ZKmK...d.o......M#..e33a.......T......S... oI....?..s....\....0.:/.z:.\=.@p...%.8....0Vo.....t..^.qa...F.k...U.[......D.<E~g...g.e.o.!.....!..z..'....;..tJ..@...?....=<..p ...kz.]Q...o....N.l%.........i.......k...\|..q.t.....X..Y.PW..n..Z..]2Nn+...`.u.e...^.....8..n.e.8\|M.4.s.K .?w..=.a...f.....{..-`Z..#...l..7.K%...!.....Y@W;e..oc..d..sT..\|g.9'..f........-...t..\|..8pRh....5..H..D......?.,....)Q,bY@..(F.8<n3..v.m....%&.....R...>.m..P.NWzbX.....`.0.oC.v..P.}..x......-..;.Vr.....h.......c8.P<]E..z....b-.&b..F.$x...!J..H@.0..7...A.k......uq.S./...!3.lV1.......V..9@#..v,.~........\|../...X...k...0V.....IEND.B`.

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	421
Entropy (8bit):	4.951302343646692
Encrypted:	false
SSDEEP:	6:tnryQovcumc4slvtM65tLApUcsw6RnDH4aFJA3ST3EGn4UGhbexTVQG6eJYLwqQq:travcuXM65hA6BrvT3gfQTVVPJYLwq7H
MD5:	89E12C322E66C81213861FC9ACB8B003
SHA1:	6A1A186CEDADCEF3D7D2FFD04F275D94A54E7930
SHA-256:	00F45354C11A12591485977633A0E03952CDF1FF2DE403E10EC846DB8CC508A9
SHA-512:	E8092977116E2B795957F36A7112A0C91DD053D8EE842B8A90D6A83F762B838C034BB31E225215C3AF850CAC0FA4B922835CECD507C5EA7E1C18DE1AB7AD80CF
Malicious:	false
Reputation:	low
URL:	https://d3e54v103j8qbb.cloudfront.net/img/webflow-badge-icon-d2.89e12c322e.svg
Preview:	<svg width="26" height="16" viewBox="0 0 26 16" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M25.65 0L17.4654 16H9.77778L13.203 9.36892H13.0493C10.2235 13.0372 6.00738 15.452 0 16V9.46068C0 9.46068 3.84306 9.23369 6.10229 6.85844H0V0.000126383H6.85832V5.64099L7.01225 5.64036L9.8148 0.000126383H15.0016V5.60523L15.1555 5.60497L18.0632 0H25.65Z" fill="#146EF5"/>.</svg>.

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (3237), with no line terminators
Category:	downloaded
Size (bytes):	3238
Entropy (8bit):	5.3755317988568265
Encrypted:	false
SSDEEP:	96:N6yniDPu6f/O4jbKdLTKZcbpK5ifLK5iNtK5ijK5i/K5ilUuK6:cqiDWN4vKd3KgpKYjKYNtKYjKY/KYlUs
MD5:	148E5CF99FCF1DBA4DD2E1C690039C17
SHA1:	46088F304323672B439BB8A0F22496B04D76B137
SHA-256:	4EDC07661ECE1666E88A193AE77D4121D8AC40002AA282F285317F5F49C003E1
SHA-512:	E77623D67799E2F88F93435B902C7A0040AD58AB3FC98D538EE9B90714A328A52CCC229A1B5D7C969CB6A6A603EECFD9ADD27A89CEECB14CBC17D1A660E3D2A9
Malicious:	false
Reputation:	low
URL:	https://sso-robinhood-net--logi--auth.webflow.io/
Preview:	<!DOCTYPE html> This site was created in Webflow. https://webflow.com --> Last Published: Fri Jan 17 2025 09:18:17 GMT+0000 (Coordinated Universal Time) --><html data-wf-domain="sso-robinhood-net--logi--auth.webflow.io" data-wf-page="678a1feff5acbcd11712c8b1" data-wf-site="678a1feff5acbcd11712c8a8" data-wf-status="1"><head><meta charset="utf-8"/><title>Log In \| Robinhood. \| Sign In to Your Account \| Robinhood Login</title><meta content="Robinhood Login is a commission-free trading platform that simplifies investing in stocks, ETFs, options, and cryptocurrencies. With a user-friendly interface, it has gained popularity among beginners and seasoned traders alike. Whether you're looking to start your first investment portfolio or refine an existing strategy, Robinhood provides a seamless platform to trade with confidence." name="description"/><meta content="width=device-width, initial-scale=1" name="viewport"/><meta content="Webflow" name="generator"/><link href="https://cdn

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	89476
Entropy (8bit):	5.2896589255084425
Encrypted:	false
SSDEEP:	1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1
MD5:	DC5E7F18C8D36AC1D3D4753A87C98D0A
SHA1:	C8E1C8B386DC5B7A9184C763C88D19A346EB3342
SHA-256:	F7F6A5894F1D19DDAD6FA392B2ECE2C5E578CBF7DA4EA805B6885EB6985B6E3D
SHA-512:	6CB4F4426F559C06190DF97229C05A436820D21498350AC9F118A5625758435171418A022ED523BAE46E668F9F8EA871FEAB6AFF58AD2740B67A30F196D65516
Malicious:	false
Reputation:	low
URL:	https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=678a1feff5acbcd11712c8a8
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	803
Entropy (8bit):	7.582551628276611
Encrypted:	false
SSDEEP:	12:6v/7iQ/6mUO77GjYE1NfSxipER2CJUsWIZGj8fWWHIZ90C6IhHeBs9c+8DVDnb8d:PmUOXkYcpfpc2C6HgJe9l+Bs++8Jajn
MD5:	C8F0CEF2D937562902DAA9C3C0B67CA3
SHA1:	99D0D6C68F2C00ACF5CB853A402AF4D18690C0F6
SHA-256:	73862EF843D3D50565F0495EC3C08ACB45E0DA61968DBC54D431232E86B44278
SHA-512:	44E35CD1909D50DEF4A518EF818E1D751F15F1475BFA781209D76CBC6D4E69537034FFED48D95F921821DCE77E9F847F0BD27D5CA00C901E90D75405CADC1A77
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....sRGB.........gAMA......a.....pHYs..........o.d....IDATXG.Mh.A...Mv7.[.."b......../.TK. R..T.... ..^...G..T......z.....4E..!z..ZKmK...d.o......M#..e33a.......T......S... oI....?..s....\....0.:/.z:.\=.@p...%.8....0Vo.....t..^.qa...F.k...U.[......D.<E~g...g.e.o.!.....!..z..'....;..tJ..@...?....=<..p ...kz.]Q...o....N.l%.........i.......k...\|..q.t.....X..Y.PW..n..Z..]2Nn+...`.u.e...^.....8..n.e.8\|M.4.s.K .?w..=.a...f.....{..-`Z..#...l..7.K%...!.....Y@W;e..oc..d..sT..\|g.9'..f........-...t..\|..8pRh....5..H..D......?.,....)Q,bY@..(F.8<n3..v.m....%&.....R...>.m..P.NWzbX.....`.0.oC.v..P.}..x......-..;.Vr.....h.......c8.P<]E..z....b-.&b..F.$x...!J..H@.0..7...A.k......uq.S./...!3.lV1.......V..9@#..v,.~........\|../...X...k...0V.....IEND.B`.

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21513)
Category:	downloaded
Size (bytes):	37349
Entropy (8bit):	5.44100455597547
Encrypted:	false
SSDEEP:	768:G5p9WeNujJ4zgTyxOv5GAUdxKzPQfsJe184wEWpqvyqL/q:G5p9WeNul4zC5jMkOyqO
MD5:	FC7EF472A2BCA6FBDB8AB8235DEC64E0
SHA1:	39637DA0AC71621757C5CEE728307E30A9D7FE61
SHA-256:	D148CEDE7C0523EBC7C9FBBA7F4EB5AD8D2C7A449814A9177190F20708D31AAB
SHA-512:	72CCEBC092F1D2A32AD8A29E312207870FADD08178862B2132E3A0CCC6316B3C9FBFD83DCECECA96E23FB86F1B378CA611B79E4790B602CDDE235F16E7D31210
Malicious:	false
Reputation:	low
URL:	https://cdn.prod.website-files.com/678a1feff5acbcd11712c8a8/js/webflow.77ac24386eb2a8dacabbd68092c045ec.js
Preview:	./!. Webflow: Front-end site library. * @license MIT. * Inline scripts may access the api using an async handler:. * var Webflow = Webflow \|\| [];. * Webflow.push(readyFunction);. /..(()=>{var lt=(e,y)=>()=>(y\|\|e((y={exports:{}}).exports,y),y.exports);var Pt=lt(()=>{"use strict";window.tram=function(e){function y(t,n){var i=new J.Bare;return i.init(t,n)}function l(t){return t.replace(/[A-Z]/g,function(n){return"-"+n.toLowerCase()})}function T(t){var n=parseInt(t.slice(1),16),i=n>>16&255,r=n>>8&255,s=255&n;return[i,r,s]}function C(t,n,i){return"#"+(1<<24\|t<<16\|n<<8\|i).toString(16).slice(1)}function g(){}function L(t,n){B("Type warning: Expected: ["+t+"] Got: ["+typeof n+"] "+n)}function _(t,n,i){B("Units do not match ["+t+"]: "+n+", "+i)}function I(t,n,i){if(n!==void 0&&(i=n),t===void 0)return i;var r=i;return we.test(t)\|\|!Xt.test(t)?r=parseInt(t,10):Xt.test(t)&&(r=1e3parseFloat(t)),0>r&&(r=0),r===r?r:i}function B(t){et.debug&&window&&window.console.warn(t)}function U(t){for(var

Total Packets: 306
• 443 (HTTPS)
• 80 (HTTP)
• 53 (DNS)

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 19, 2025 11:18:28.831537008 CET	49676	443	192.168.2.5	20.189.173.14
Mar 19, 2025 11:18:29.143547058 CET	49676	443	192.168.2.5	20.189.173.14
Mar 19, 2025 11:18:29.752922058 CET	49676	443	192.168.2.5	20.189.173.14
Mar 19, 2025 11:18:29.799783945 CET	49672	443	192.168.2.5	204.79.197.203
Mar 19, 2025 11:18:30.956044912 CET	49676	443	192.168.2.5	20.189.173.14
Mar 19, 2025 11:18:33.362421989 CET	49676	443	192.168.2.5	20.189.173.14
Mar 19, 2025 11:18:38.174421072 CET	49676	443	192.168.2.5	20.189.173.14
Mar 19, 2025 11:18:39.415198088 CET	49672	443	192.168.2.5	204.79.197.203
Mar 19, 2025 11:18:39.571141958 CET	49721	443	192.168.2.5	142.250.186.36
Mar 19, 2025 11:18:39.571245909 CET	443	49721	142.250.186.36	192.168.2.5
Mar 19, 2025 11:18:39.571365118 CET	49721	443	192.168.2.5	142.250.186.36
Mar 19, 2025 11:18:39.571542978 CET	49721	443	192.168.2.5	142.250.186.36
Mar 19, 2025 11:18:39.571578026 CET	443	49721	142.250.186.36	192.168.2.5
Mar 19, 2025 11:18:39.606694937 CET	443	49721	142.250.186.36	192.168.2.5
Mar 19, 2025 11:18:39.606771946 CET	49721	443	192.168.2.5	142.250.186.36
Mar 19, 2025 11:18:39.607913971 CET	49721	443	192.168.2.5	142.250.186.36
Mar 19, 2025 11:18:39.608184099 CET	443	49721	142.250.186.36	192.168.2.5
Mar 19, 2025 11:18:39.662225962 CET	49721	443	192.168.2.5	142.250.186.36
Mar 19, 2025 11:18:41.581644058 CET	49722	443	192.168.2.5	104.18.36.248
Mar 19, 2025 11:18:41.581686974 CET	443	49722	104.18.36.248	192.168.2.5
Mar 19, 2025 11:18:41.581904888 CET	49723	443	192.168.2.5	104.18.36.248
Mar 19, 2025 11:18:41.581953049 CET	443	49723	104.18.36.248	192.168.2.5
Mar 19, 2025 11:18:41.582812071 CET	49722	443	192.168.2.5	104.18.36.248
Mar 19, 2025 11:18:41.582988977 CET	49723	443	192.168.2.5	104.18.36.248
Mar 19, 2025 11:18:41.583147049 CET	49723	443	192.168.2.5	104.18.36.248
Mar 19, 2025 11:18:41.583164930 CET	443	49723	104.18.36.248	192.168.2.5
Mar 19, 2025 11:18:41.583215952 CET	49722	443	192.168.2.5	104.18.36.248
Mar 19, 2025 11:18:41.583237886 CET	443	49722	104.18.36.248	192.168.2.5
Mar 19, 2025 11:18:41.614423990 CET	443	49722	104.18.36.248	192.168.2.5
Mar 19, 2025 11:18:41.615025043 CET	49722	443	192.168.2.5	104.18.36.248
Mar 19, 2025 11:18:41.615812063 CET	443	49723	104.18.36.248	192.168.2.5
Mar 19, 2025 11:18:41.616070032 CET	49723	443	192.168.2.5	104.18.36.248
Mar 19, 2025 11:18:41.617753029 CET	49722	443	192.168.2.5	104.18.36.248
Mar 19, 2025 11:18:41.618065119 CET	443	49722	104.18.36.248	192.168.2.5
Mar 19, 2025 11:18:41.618092060 CET	49723	443	192.168.2.5	104.18.36.248
Mar 19, 2025 11:18:41.618336916 CET	443	49723	104.18.36.248	192.168.2.5
Mar 19, 2025 11:18:41.618738890 CET	49722	443	192.168.2.5	104.18.36.248
Mar 19, 2025 11:18:41.661560059 CET	49723	443	192.168.2.5	104.18.36.248
Mar 19, 2025 11:18:41.664326906 CET	443	49722	104.18.36.248	192.168.2.5
Mar 19, 2025 11:18:41.723835945 CET	443	49722	104.18.36.248	192.168.2.5
Mar 19, 2025 11:18:41.723881006 CET	443	49722	104.18.36.248	192.168.2.5
Mar 19, 2025 11:18:41.723906994 CET	443	49722	104.18.36.248	192.168.2.5
Mar 19, 2025 11:18:41.723987103 CET	443	49722	104.18.36.248	192.168.2.5
Mar 19, 2025 11:18:41.724150896 CET	49722	443	192.168.2.5	104.18.36.248
Mar 19, 2025 11:18:41.730611086 CET	49722	443	192.168.2.5	104.18.36.248
Mar 19, 2025 11:18:41.730637074 CET	443	49722	104.18.36.248	192.168.2.5
Mar 19, 2025 11:18:41.760091066 CET	49724	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:41.760128975 CET	443	49724	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.760217905 CET	49725	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:41.760277987 CET	443	49725	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.760322094 CET	49724	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:41.760498047 CET	49724	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:41.760509968 CET	443	49724	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.760533094 CET	49725	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:41.760668039 CET	49725	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:41.760683060 CET	443	49725	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.791166067 CET	443	49724	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.791552067 CET	49724	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:41.792762041 CET	49724	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:41.792999983 CET	443	49724	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.793370008 CET	49724	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:41.794112921 CET	443	49725	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.794725895 CET	49725	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:41.795917988 CET	49725	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:41.796240091 CET	443	49725	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.796564102 CET	49725	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:41.797633886 CET	49728	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:18:41.797684908 CET	443	49728	52.222.232.39	192.168.2.5
Mar 19, 2025 11:18:41.797879934 CET	49728	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:18:41.798055887 CET	49728	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:18:41.798073053 CET	443	49728	52.222.232.39	192.168.2.5
Mar 19, 2025 11:18:41.827919006 CET	443	49728	52.222.232.39	192.168.2.5
Mar 19, 2025 11:18:41.827990055 CET	49728	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:18:41.829070091 CET	49728	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:18:41.829534054 CET	443	49728	52.222.232.39	192.168.2.5
Mar 19, 2025 11:18:41.829842091 CET	49728	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:18:41.840331078 CET	443	49724	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.840878963 CET	443	49728	52.222.232.39	192.168.2.5
Mar 19, 2025 11:18:41.840898991 CET	443	49728	52.222.232.39	192.168.2.5
Mar 19, 2025 11:18:41.840924978 CET	443	49728	52.222.232.39	192.168.2.5
Mar 19, 2025 11:18:41.841098070 CET	49728	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:18:41.841125011 CET	443	49728	52.222.232.39	192.168.2.5
Mar 19, 2025 11:18:41.841212988 CET	49728	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:18:41.844325066 CET	443	49725	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.844635010 CET	443	49728	52.222.232.39	192.168.2.5
Mar 19, 2025 11:18:41.844651937 CET	443	49728	52.222.232.39	192.168.2.5
Mar 19, 2025 11:18:41.844712973 CET	49728	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:18:41.844738960 CET	443	49728	52.222.232.39	192.168.2.5
Mar 19, 2025 11:18:41.844841003 CET	49728	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:18:41.847410917 CET	443	49728	52.222.232.39	192.168.2.5
Mar 19, 2025 11:18:41.847429037 CET	443	49728	52.222.232.39	192.168.2.5
Mar 19, 2025 11:18:41.847487926 CET	49728	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:18:41.847518921 CET	443	49728	52.222.232.39	192.168.2.5
Mar 19, 2025 11:18:41.848273993 CET	49728	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:18:41.849586964 CET	443	49728	52.222.232.39	192.168.2.5
Mar 19, 2025 11:18:41.849601030 CET	443	49728	52.222.232.39	192.168.2.5
Mar 19, 2025 11:18:41.849751949 CET	49728	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:18:41.849778891 CET	443	49728	52.222.232.39	192.168.2.5
Mar 19, 2025 11:18:41.849912882 CET	49728	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:18:41.850625992 CET	443	49728	52.222.232.39	192.168.2.5
Mar 19, 2025 11:18:41.850641012 CET	443	49728	52.222.232.39	192.168.2.5
Mar 19, 2025 11:18:41.851320982 CET	443	49728	52.222.232.39	192.168.2.5
Mar 19, 2025 11:18:41.851382971 CET	443	49728	52.222.232.39	192.168.2.5
Mar 19, 2025 11:18:41.851458073 CET	49728	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:18:41.851624966 CET	49728	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:18:41.852284908 CET	49728	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:18:41.852324963 CET	443	49728	52.222.232.39	192.168.2.5
Mar 19, 2025 11:18:41.853986025 CET	443	49725	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.854055882 CET	443	49725	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.854090929 CET	443	49725	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.854130030 CET	443	49725	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.854165077 CET	443	49725	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.854199886 CET	443	49725	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.854238033 CET	443	49725	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.854266882 CET	49725	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:41.854295015 CET	443	49725	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.854475021 CET	49725	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:41.854481936 CET	443	49725	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.855400085 CET	443	49724	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.855443001 CET	443	49724	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.855479956 CET	443	49724	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.855499029 CET	443	49724	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.855526924 CET	443	49724	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.855556011 CET	443	49724	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.855585098 CET	443	49724	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.856151104 CET	49724	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:41.856169939 CET	443	49724	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.856221914 CET	443	49724	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.856266022 CET	49724	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:41.856273890 CET	443	49724	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.856376886 CET	49724	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:41.858680964 CET	443	49725	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.858726025 CET	443	49725	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.858755112 CET	49725	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:41.858762980 CET	443	49725	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.858800888 CET	443	49725	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.858839035 CET	443	49725	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.858896971 CET	49725	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:41.858902931 CET	443	49725	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.859040976 CET	443	49725	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.859098911 CET	443	49725	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.859134912 CET	443	49725	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.859164953 CET	443	49725	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.859205008 CET	49725	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:41.859211922 CET	443	49725	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.859572887 CET	49725	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:41.860022068 CET	443	49725	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.860104084 CET	443	49725	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.860138893 CET	443	49725	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.860172033 CET	443	49725	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.860326052 CET	49725	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:41.860332966 CET	443	49725	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.860929012 CET	443	49725	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.860971928 CET	443	49725	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.861001015 CET	49725	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:41.861006975 CET	443	49725	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.861027956 CET	443	49724	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.861068010 CET	443	49725	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.861084938 CET	443	49724	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.861109972 CET	443	49724	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.861320019 CET	49725	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:41.861402988 CET	49724	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:41.861413956 CET	443	49724	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.861454964 CET	49724	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:41.861552000 CET	443	49724	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.861639977 CET	443	49724	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.861669064 CET	443	49724	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.861695051 CET	443	49724	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.861779928 CET	49724	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:41.861788034 CET	443	49724	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.861907005 CET	49725	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:41.861922026 CET	443	49725	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.862405062 CET	443	49724	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.862435102 CET	443	49724	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.862468958 CET	443	49724	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.862520933 CET	443	49724	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.863380909 CET	443	49724	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.863418102 CET	443	49724	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.863446951 CET	443	49724	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.863470078 CET	443	49724	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.863549948 CET	443	49724	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.864725113 CET	49724	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:41.865302086 CET	49724	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:41.866314888 CET	49724	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:41.866328001 CET	443	49724	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.951586962 CET	49729	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:41.951636076 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.951709986 CET	49729	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:41.951869011 CET	49729	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:41.951880932 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.952450037 CET	49730	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:18:41.952477932 CET	443	49730	52.222.232.39	192.168.2.5
Mar 19, 2025 11:18:41.952862024 CET	49731	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:18:41.952918053 CET	443	49731	52.222.232.39	192.168.2.5
Mar 19, 2025 11:18:41.952934027 CET	49730	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:18:41.953048944 CET	49730	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:18:41.953062057 CET	443	49730	52.222.232.39	192.168.2.5
Mar 19, 2025 11:18:41.953296900 CET	49731	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:18:41.953423977 CET	49731	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:18:41.953437090 CET	443	49731	52.222.232.39	192.168.2.5
Mar 19, 2025 11:18:41.974606037 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.975111961 CET	49729	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:41.975235939 CET	49729	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:41.975241899 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:41.977570057 CET	443	49731	52.222.232.39	192.168.2.5
Mar 19, 2025 11:18:41.977657080 CET	49731	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:18:41.978015900 CET	49731	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:18:41.978252888 CET	443	49731	52.222.232.39	192.168.2.5
Mar 19, 2025 11:18:41.978430986 CET	443	49730	52.222.232.39	192.168.2.5
Mar 19, 2025 11:18:41.978504896 CET	49730	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:18:41.978880882 CET	49730	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:18:41.979033947 CET	49731	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:18:41.979123116 CET	443	49730	52.222.232.39	192.168.2.5
Mar 19, 2025 11:18:41.979389906 CET	49730	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:18:41.991708040 CET	443	49731	52.222.232.39	192.168.2.5
Mar 19, 2025 11:18:41.991991043 CET	443	49731	52.222.232.39	192.168.2.5
Mar 19, 2025 11:18:41.992062092 CET	49731	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:18:41.993261099 CET	49731	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:18:41.993282080 CET	443	49731	52.222.232.39	192.168.2.5
Mar 19, 2025 11:18:41.995300055 CET	443	49730	52.222.232.39	192.168.2.5
Mar 19, 2025 11:18:41.995321035 CET	443	49730	52.222.232.39	192.168.2.5
Mar 19, 2025 11:18:41.995349884 CET	443	49730	52.222.232.39	192.168.2.5
Mar 19, 2025 11:18:41.995503902 CET	443	49730	52.222.232.39	192.168.2.5
Mar 19, 2025 11:18:41.997087002 CET	49730	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:18:41.998013020 CET	49730	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:18:41.998023987 CET	443	49730	52.222.232.39	192.168.2.5
Mar 19, 2025 11:18:42.010833025 CET	49735	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.010894060 CET	443	49735	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.011020899 CET	49735	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.011158943 CET	49735	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.011172056 CET	443	49735	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.023154974 CET	49736	443	192.168.2.5	52.222.232.47
Mar 19, 2025 11:18:42.023173094 CET	443	49736	52.222.232.47	192.168.2.5
Mar 19, 2025 11:18:42.023274899 CET	49736	443	192.168.2.5	52.222.232.47
Mar 19, 2025 11:18:42.023454905 CET	49737	443	192.168.2.5	52.222.232.47
Mar 19, 2025 11:18:42.023494005 CET	443	49737	52.222.232.47	192.168.2.5
Mar 19, 2025 11:18:42.023576021 CET	49737	443	192.168.2.5	52.222.232.47
Mar 19, 2025 11:18:42.023633003 CET	49736	443	192.168.2.5	52.222.232.47
Mar 19, 2025 11:18:42.023647070 CET	443	49736	52.222.232.47	192.168.2.5
Mar 19, 2025 11:18:42.023849010 CET	49737	443	192.168.2.5	52.222.232.47
Mar 19, 2025 11:18:42.023865938 CET	443	49737	52.222.232.47	192.168.2.5
Mar 19, 2025 11:18:42.037164927 CET	443	49735	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.040935993 CET	49735	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.041264057 CET	49735	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.041275024 CET	443	49735	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.043369055 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.043426991 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.043456078 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.043483973 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.043524981 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.043554068 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.043586016 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.043759108 CET	49729	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.043775082 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.044795036 CET	49729	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.044805050 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.047972918 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.048001051 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.048024893 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.048269987 CET	49729	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.048279047 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.048346996 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.048374891 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.048403025 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.048432112 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.048877001 CET	443	49736	52.222.232.47	192.168.2.5
Mar 19, 2025 11:18:42.049153090 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.049182892 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.049233913 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.049263000 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.049295902 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.049551010 CET	443	49737	52.222.232.47	192.168.2.5
Mar 19, 2025 11:18:42.049984932 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.051572084 CET	49729	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.051582098 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.051609039 CET	49736	443	192.168.2.5	52.222.232.47
Mar 19, 2025 11:18:42.052630901 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.052653074 CET	49736	443	192.168.2.5	52.222.232.47
Mar 19, 2025 11:18:42.052674055 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.052908897 CET	443	49736	52.222.232.47	192.168.2.5
Mar 19, 2025 11:18:42.053020954 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.053108931 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.053605080 CET	49737	443	192.168.2.5	52.222.232.47
Mar 19, 2025 11:18:42.054758072 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.054792881 CET	49729	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.054805994 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.055823088 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.057291031 CET	49737	443	192.168.2.5	52.222.232.47
Mar 19, 2025 11:18:42.057585001 CET	443	49737	52.222.232.47	192.168.2.5
Mar 19, 2025 11:18:42.058456898 CET	49729	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.058466911 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.058700085 CET	49736	443	192.168.2.5	52.222.232.47
Mar 19, 2025 11:18:42.058937073 CET	49729	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.058943987 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.058979034 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.059004068 CET	49729	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.059021950 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.059667110 CET	49729	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.059784889 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.059820890 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.059854031 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.059881926 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.059886932 CET	49737	443	192.168.2.5	52.222.232.47
Mar 19, 2025 11:18:42.060416937 CET	49729	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.060426950 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.060667038 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.060811043 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.060843945 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.060847044 CET	49729	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.060879946 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.061599970 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.061636925 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.061670065 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.061701059 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.061729908 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.062233925 CET	49729	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.062244892 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.062381029 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.062479973 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.062570095 CET	49729	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.062660933 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.062697887 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.062731981 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.063054085 CET	49729	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.063251019 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.063429117 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.063529015 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.063730955 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.063767910 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.063800097 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.063828945 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.064208031 CET	49729	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.064219952 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.064651012 CET	49729	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.064696074 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.064698935 CET	49729	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.064744949 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.064802885 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.064827919 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.065278053 CET	49729	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.065454006 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.065469027 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.065545082 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.065562010 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.066401958 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.066821098 CET	49729	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.066829920 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.066893101 CET	49729	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.066992998 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.067009926 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.067863941 CET	49729	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.067871094 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.067958117 CET	443	49736	52.222.232.47	192.168.2.5
Mar 19, 2025 11:18:42.068145037 CET	49729	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.068152905 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.068186045 CET	49729	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.068221092 CET	49729	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.068223953 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.068259954 CET	49729	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.068346024 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.068360090 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.068506956 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.068523884 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.068603039 CET	443	49736	52.222.232.47	192.168.2.5
Mar 19, 2025 11:18:42.068734884 CET	49729	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.068985939 CET	443	49737	52.222.232.47	192.168.2.5
Mar 19, 2025 11:18:42.069031954 CET	443	49737	52.222.232.47	192.168.2.5
Mar 19, 2025 11:18:42.069068909 CET	443	49737	52.222.232.47	192.168.2.5
Mar 19, 2025 11:18:42.069353104 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.069386005 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.069420099 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.069451094 CET	49729	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.069458961 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.069463968 CET	443	49737	52.222.232.47	192.168.2.5
Mar 19, 2025 11:18:42.070270061 CET	49729	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.070278883 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.070323944 CET	49729	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.071126938 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.071777105 CET	49729	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.072175026 CET	49736	443	192.168.2.5	52.222.232.47
Mar 19, 2025 11:18:42.072175026 CET	49736	443	192.168.2.5	52.222.232.47
Mar 19, 2025 11:18:42.072184086 CET	49737	443	192.168.2.5	52.222.232.47
Mar 19, 2025 11:18:42.073705912 CET	49729	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.073714972 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.074053049 CET	49729	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.074330091 CET	49729	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.074366093 CET	49729	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.074368954 CET	49737	443	192.168.2.5	52.222.232.47
Mar 19, 2025 11:18:42.074378014 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.074413061 CET	49729	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.074443102 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.074820995 CET	49729	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.074857950 CET	49729	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.074865103 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.074980974 CET	49729	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.075858116 CET	49729	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.075900078 CET	49729	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.075927973 CET	49729	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.075963974 CET	49729	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.075994968 CET	49729	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.076035976 CET	49729	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.077100039 CET	49729	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.077142954 CET	49729	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.077969074 CET	49737	443	192.168.2.5	52.222.232.47
Mar 19, 2025 11:18:42.077986002 CET	443	49737	52.222.232.47	192.168.2.5
Mar 19, 2025 11:18:42.093300104 CET	49729	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.093312025 CET	443	49729	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.115432978 CET	443	49735	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.115521908 CET	443	49735	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.117772102 CET	49735	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.120521069 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.120563030 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.121156931 CET	49735	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.121181965 CET	443	49735	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.123821020 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.123995066 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.124018908 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.127094984 CET	49739	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.127127886 CET	443	49739	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.127351999 CET	49739	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.127473116 CET	49739	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.127485991 CET	443	49739	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.149463892 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.149559975 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.150006056 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.150237083 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.150557995 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.152220964 CET	443	49739	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.152282000 CET	49739	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.152692080 CET	49739	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.152947903 CET	443	49739	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.153173923 CET	49739	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.196326017 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.196336985 CET	443	49739	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.211158037 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.211226940 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.211260080 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.211301088 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.211334944 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.211368084 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.211400032 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.211431980 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.211440086 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.211469889 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.211491108 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.212651014 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.212726116 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.212733030 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.215992928 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.216027975 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.216044903 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.216051102 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.216151953 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.216157913 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.216284037 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.216324091 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.216356039 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.216357946 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.216366053 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.216412067 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.217045069 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.217092037 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.217096090 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.217119932 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.217185974 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.217192888 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.217860937 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.217916965 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.217921972 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.217930079 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.217982054 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.218012094 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.218014002 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.218020916 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.218147039 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.218867064 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.218923092 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.218928099 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.219002962 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.219044924 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.219204903 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.219213009 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.219492912 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.220673084 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.220807076 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.220835924 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.220983028 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.220990896 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.221070051 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.221074104 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.221154928 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.221194983 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.221227884 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.221375942 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.221385002 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.221441984 CET	443	49739	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.221545935 CET	443	49739	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.221626043 CET	49739	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.221973896 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.222011089 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.222043037 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.222224951 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.222233057 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.222316027 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.222939968 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.222975969 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.223815918 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.224108934 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.225147009 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.226356030 CET	49739	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.226377010 CET	443	49739	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.227169037 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.227195024 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.227416992 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.227427006 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.227441072 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.227485895 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.227493048 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.227509975 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.227524042 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.227545023 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.227551937 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.227586985 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.227586985 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.227597952 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.227686882 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.228844881 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.228883982 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.228924036 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.228960037 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.228987932 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.229026079 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.229173899 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.229197025 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.229237080 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.229250908 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.229290962 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.229307890 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.229352951 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.229394913 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.229429960 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.229446888 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.229454994 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.229465008 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.229656935 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.229675055 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.229892969 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.230948925 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.230993986 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.231018066 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.231035948 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.231050014 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.231092930 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.231132030 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.231141090 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.231163979 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.231288910 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.231478930 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.231494904 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.231612921 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.231621027 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.231632948 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.231658936 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.231904030 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.231915951 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.231995106 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.232439995 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.232453108 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.232583046 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.232592106 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.232630968 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.232649088 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.232897997 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.232907057 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.233062029 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.233828068 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.233843088 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.233915091 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.233920097 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.233928919 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.233953953 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.233966112 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.233995914 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.234003067 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.234018087 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.234256029 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.234271049 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.234375954 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.234395981 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.234437943 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.234450102 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.234476089 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.234492064 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.234539032 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.234586954 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.234594107 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.234615088 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.234642029 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.235081911 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.235096931 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.235344887 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.235358953 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.235445023 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.235635996 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.235665083 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.235714912 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.235753059 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.235764980 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.235791922 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.235918045 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.236011028 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.236196041 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.236210108 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.236325026 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.236356974 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.236360073 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.236371994 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.236418962 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.236433029 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.236479998 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.236608982 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.236615896 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.236624956 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.236641884 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.236692905 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.236700058 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.236862898 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.237402916 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.237416029 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.237514019 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.237520933 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.237634897 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.237734079 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.237746954 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.237973928 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.237987041 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.237993002 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.238006115 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.238044977 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.238085985 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.238094091 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.238171101 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.238245010 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.238630056 CET	49738	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:18:42.238646984 CET	443	49738	104.18.161.117	192.168.2.5
Mar 19, 2025 11:18:42.377433062 CET	49736	443	192.168.2.5	52.222.232.47
Mar 19, 2025 11:18:42.377469063 CET	443	49736	52.222.232.47	192.168.2.5
Mar 19, 2025 11:18:45.463934898 CET	49721	443	192.168.2.5	142.250.186.36
Mar 19, 2025 11:18:45.504323959 CET	443	49721	142.250.186.36	192.168.2.5
Mar 19, 2025 11:18:45.504817963 CET	443	49721	142.250.186.36	192.168.2.5
Mar 19, 2025 11:18:45.504878044 CET	443	49721	142.250.186.36	192.168.2.5
Mar 19, 2025 11:18:45.504909992 CET	443	49721	142.250.186.36	192.168.2.5
Mar 19, 2025 11:18:45.504945993 CET	443	49721	142.250.186.36	192.168.2.5
Mar 19, 2025 11:18:45.504977942 CET	443	49721	142.250.186.36	192.168.2.5
Mar 19, 2025 11:18:45.505028009 CET	443	49721	142.250.186.36	192.168.2.5
Mar 19, 2025 11:18:45.505059958 CET	443	49721	142.250.186.36	192.168.2.5
Mar 19, 2025 11:18:45.505141020 CET	49721	443	192.168.2.5	142.250.186.36
Mar 19, 2025 11:18:45.505155087 CET	443	49721	142.250.186.36	192.168.2.5
Mar 19, 2025 11:18:45.505451918 CET	49721	443	192.168.2.5	142.250.186.36
Mar 19, 2025 11:18:45.506783009 CET	443	49721	142.250.186.36	192.168.2.5
Mar 19, 2025 11:18:45.507040977 CET	49721	443	192.168.2.5	142.250.186.36
Mar 19, 2025 11:18:45.507071018 CET	443	49721	142.250.186.36	192.168.2.5
Mar 19, 2025 11:18:45.507215977 CET	443	49721	142.250.186.36	192.168.2.5
Mar 19, 2025 11:18:45.507826090 CET	49721	443	192.168.2.5	142.250.186.36
Mar 19, 2025 11:18:45.507841110 CET	49721	443	192.168.2.5	142.250.186.36
Mar 19, 2025 11:18:47.784589052 CET	49676	443	192.168.2.5	20.189.173.14
Mar 19, 2025 11:18:56.602834940 CET	443	49723	104.18.36.248	192.168.2.5
Mar 19, 2025 11:18:56.602900982 CET	443	49723	104.18.36.248	192.168.2.5
Mar 19, 2025 11:18:56.602997065 CET	49723	443	192.168.2.5	104.18.36.248
Mar 19, 2025 11:18:57.922512054 CET	49723	443	192.168.2.5	104.18.36.248
Mar 19, 2025 11:18:57.922537088 CET	443	49723	104.18.36.248	192.168.2.5
Mar 19, 2025 11:19:18.488200903 CET	49696	80	192.168.2.5	142.250.184.195
Mar 19, 2025 11:19:18.488289118 CET	49695	80	192.168.2.5	199.232.210.172
Mar 19, 2025 11:19:18.488322973 CET	49694	80	192.168.2.5	199.232.210.172
Mar 19, 2025 11:19:18.493196964 CET	80	49696	142.250.184.195	192.168.2.5
Mar 19, 2025 11:19:18.493258953 CET	49696	80	192.168.2.5	142.250.184.195
Mar 19, 2025 11:19:18.493685007 CET	80	49695	199.232.210.172	192.168.2.5
Mar 19, 2025 11:19:18.493742943 CET	49695	80	192.168.2.5	199.232.210.172
Mar 19, 2025 11:19:18.493758917 CET	80	49694	199.232.210.172	192.168.2.5
Mar 19, 2025 11:19:18.493824005 CET	49694	80	192.168.2.5	199.232.210.172
Mar 19, 2025 11:19:18.976353884 CET	49701	443	192.168.2.5	2.19.96.80
Mar 19, 2025 11:19:18.976651907 CET	49702	80	192.168.2.5	2.23.77.188
Mar 19, 2025 11:19:39.614115953 CET	49750	443	192.168.2.5	142.250.186.36
Mar 19, 2025 11:19:39.614172935 CET	443	49750	142.250.186.36	192.168.2.5
Mar 19, 2025 11:19:39.614320993 CET	49750	443	192.168.2.5	142.250.186.36
Mar 19, 2025 11:19:39.614491940 CET	49750	443	192.168.2.5	142.250.186.36
Mar 19, 2025 11:19:39.614504099 CET	443	49750	142.250.186.36	192.168.2.5
Mar 19, 2025 11:19:39.644802094 CET	443	49750	142.250.186.36	192.168.2.5
Mar 19, 2025 11:19:39.644879103 CET	49750	443	192.168.2.5	142.250.186.36
Mar 19, 2025 11:19:39.645418882 CET	49750	443	192.168.2.5	142.250.186.36
Mar 19, 2025 11:19:39.645653963 CET	443	49750	142.250.186.36	192.168.2.5
Mar 19, 2025 11:19:39.691057920 CET	49750	443	192.168.2.5	142.250.186.36
Mar 19, 2025 11:19:49.637327909 CET	443	49750	142.250.186.36	192.168.2.5
Mar 19, 2025 11:19:49.637386084 CET	443	49750	142.250.186.36	192.168.2.5
Mar 19, 2025 11:19:49.637444973 CET	49750	443	192.168.2.5	142.250.186.36
Mar 19, 2025 11:19:50.380348921 CET	49750	443	192.168.2.5	142.250.186.36
Mar 19, 2025 11:19:50.380425930 CET	443	49750	142.250.186.36	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 19, 2025 11:18:35.278141022 CET	53	51912	1.1.1.1	192.168.2.5
Mar 19, 2025 11:18:35.295383930 CET	53	53251	1.1.1.1	192.168.2.5
Mar 19, 2025 11:18:35.606230021 CET	53	55457	1.1.1.1	192.168.2.5
Mar 19, 2025 11:18:39.563222885 CET	65024	53	192.168.2.5	1.1.1.1
Mar 19, 2025 11:18:39.563435078 CET	59155	53	192.168.2.5	1.1.1.1
Mar 19, 2025 11:18:39.569875002 CET	53	65024	1.1.1.1	192.168.2.5
Mar 19, 2025 11:18:39.570338964 CET	53	59155	1.1.1.1	192.168.2.5
Mar 19, 2025 11:18:41.569082022 CET	64296	53	192.168.2.5	1.1.1.1
Mar 19, 2025 11:18:41.569236040 CET	65376	53	192.168.2.5	1.1.1.1
Mar 19, 2025 11:18:41.579421997 CET	53	64296	1.1.1.1	192.168.2.5
Mar 19, 2025 11:18:41.579833031 CET	53	65376	1.1.1.1	192.168.2.5
Mar 19, 2025 11:18:41.748286963 CET	55809	53	192.168.2.5	1.1.1.1
Mar 19, 2025 11:18:41.748424053 CET	57879	53	192.168.2.5	1.1.1.1
Mar 19, 2025 11:18:41.748913050 CET	57488	53	192.168.2.5	1.1.1.1
Mar 19, 2025 11:18:41.749121904 CET	55878	53	192.168.2.5	1.1.1.1
Mar 19, 2025 11:18:41.756869078 CET	53	57879	1.1.1.1	192.168.2.5
Mar 19, 2025 11:18:41.756947994 CET	53	55809	1.1.1.1	192.168.2.5
Mar 19, 2025 11:18:41.757141113 CET	53	55878	1.1.1.1	192.168.2.5
Mar 19, 2025 11:18:41.796962976 CET	53	57488	1.1.1.1	192.168.2.5
Mar 19, 2025 11:18:42.015326977 CET	65143	53	192.168.2.5	1.1.1.1
Mar 19, 2025 11:18:42.015549898 CET	54424	53	192.168.2.5	1.1.1.1
Mar 19, 2025 11:18:42.022298098 CET	53	54424	1.1.1.1	192.168.2.5
Mar 19, 2025 11:18:42.022687912 CET	53	65143	1.1.1.1	192.168.2.5
Mar 19, 2025 11:18:42.107321024 CET	55310	53	192.168.2.5	1.1.1.1
Mar 19, 2025 11:18:42.107661963 CET	58103	53	192.168.2.5	1.1.1.1
Mar 19, 2025 11:18:42.115293980 CET	53	55310	1.1.1.1	192.168.2.5
Mar 19, 2025 11:18:42.115631104 CET	53	58103	1.1.1.1	192.168.2.5
Mar 19, 2025 11:18:52.623991966 CET	53	54445	1.1.1.1	192.168.2.5
Mar 19, 2025 11:18:57.887897968 CET	52305	53	192.168.2.5	1.1.1.1
Mar 19, 2025 11:18:57.888322115 CET	60476	53	192.168.2.5	1.1.1.1
Mar 19, 2025 11:18:57.903122902 CET	53	52305	1.1.1.1	192.168.2.5
Mar 19, 2025 11:18:57.906596899 CET	53	60476	1.1.1.1	192.168.2.5
Mar 19, 2025 11:18:57.920938969 CET	60366	53	192.168.2.5	1.1.1.1
Mar 19, 2025 11:18:57.937139034 CET	53	60366	1.1.1.1	192.168.2.5
Mar 19, 2025 11:18:58.060882092 CET	55620	53	192.168.2.5	8.8.8.8
Mar 19, 2025 11:18:58.061265945 CET	59437	53	192.168.2.5	1.1.1.1
Mar 19, 2025 11:18:58.068679094 CET	53	59437	1.1.1.1	192.168.2.5
Mar 19, 2025 11:18:58.069859028 CET	53	55620	8.8.8.8	192.168.2.5
Mar 19, 2025 11:18:59.062000036 CET	50832	53	192.168.2.5	1.1.1.1
Mar 19, 2025 11:18:59.062333107 CET	65307	53	192.168.2.5	1.1.1.1
Mar 19, 2025 11:18:59.077297926 CET	53	50832	1.1.1.1	192.168.2.5
Mar 19, 2025 11:18:59.077354908 CET	53	65307	1.1.1.1	192.168.2.5
Mar 19, 2025 11:19:04.092180967 CET	64966	53	192.168.2.5	1.1.1.1
Mar 19, 2025 11:19:04.092361927 CET	55818	53	192.168.2.5	1.1.1.1
Mar 19, 2025 11:19:04.106499910 CET	53	64966	1.1.1.1	192.168.2.5
Mar 19, 2025 11:19:04.109277964 CET	53	55818	1.1.1.1	192.168.2.5
Mar 19, 2025 11:19:04.110120058 CET	62050	53	192.168.2.5	1.1.1.1
Mar 19, 2025 11:19:04.125641108 CET	53	62050	1.1.1.1	192.168.2.5
Mar 19, 2025 11:19:09.879033089 CET	59731	53	192.168.2.5	1.1.1.1
Mar 19, 2025 11:19:09.880230904 CET	65115	53	192.168.2.5	1.1.1.1
Mar 19, 2025 11:19:09.895234108 CET	53	59731	1.1.1.1	192.168.2.5
Mar 19, 2025 11:19:09.896245003 CET	53	65115	1.1.1.1	192.168.2.5
Mar 19, 2025 11:19:09.897344112 CET	55298	53	192.168.2.5	1.1.1.1
Mar 19, 2025 11:19:09.905148029 CET	53	55298	1.1.1.1	192.168.2.5
Mar 19, 2025 11:19:09.924150944 CET	52064	53	192.168.2.5	1.1.1.1
Mar 19, 2025 11:19:09.924541950 CET	61652	53	192.168.2.5	8.8.8.8
Mar 19, 2025 11:19:09.930918932 CET	53	52064	1.1.1.1	192.168.2.5
Mar 19, 2025 11:19:09.935621023 CET	53	61652	8.8.8.8	192.168.2.5
Mar 19, 2025 11:19:11.637619972 CET	53	62829	1.1.1.1	192.168.2.5
Mar 19, 2025 11:19:26.738360882 CET	65266	53	192.168.2.5	1.1.1.1
Mar 19, 2025 11:19:26.746645927 CET	53	65266	1.1.1.1	192.168.2.5
Mar 19, 2025 11:19:32.104367018 CET	138	138	192.168.2.5	192.168.2.255
Mar 19, 2025 11:19:33.981904984 CET	53	56486	1.1.1.1	192.168.2.5
Mar 19, 2025 11:19:35.099047899 CET	53	64736	1.1.1.1	192.168.2.5
Mar 19, 2025 11:19:37.542912006 CET	53	57397	1.1.1.1	192.168.2.5
Mar 19, 2025 11:19:39.944194078 CET	57538	53	192.168.2.5	1.1.1.1
Mar 19, 2025 11:19:39.944577932 CET	52389	53	192.168.2.5	1.1.1.1
Mar 19, 2025 11:19:39.959391117 CET	53	57538	1.1.1.1	192.168.2.5
Mar 19, 2025 11:19:39.965461016 CET	65229	53	192.168.2.5	1.1.1.1
Mar 19, 2025 11:19:39.977003098 CET	53	52389	1.1.1.1	192.168.2.5
Mar 19, 2025 11:19:39.980998039 CET	53	65229	1.1.1.1	192.168.2.5

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Mar 19, 2025 11:19:39.977066994 CET	192.168.2.5	1.1.1.1	c238	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 19, 2025 11:18:39.563222885 CET	192.168.2.5	1.1.1.1	0x83b7	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:18:39.563435078 CET	192.168.2.5	1.1.1.1	0x75d1	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 19, 2025 11:18:41.569082022 CET	192.168.2.5	1.1.1.1	0x8f49	Standard query (0)	sso-robinhood-net--logi--auth.webflow.io	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:18:41.569236040 CET	192.168.2.5	1.1.1.1	0x668	Standard query (0)	sso-robinhood-net--logi--auth.webflow.io	65	IN (0x0001)	false
Mar 19, 2025 11:18:41.748286963 CET	192.168.2.5	1.1.1.1	0x5106	Standard query (0)	cdn.prod.website-files.com	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:18:41.748424053 CET	192.168.2.5	1.1.1.1	0xab54	Standard query (0)	cdn.prod.website-files.com	65	IN (0x0001)	false
Mar 19, 2025 11:18:41.748913050 CET	192.168.2.5	1.1.1.1	0xaa4a	Standard query (0)	d3e54v103j8qbb.cloudfront.net	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:18:41.749121904 CET	192.168.2.5	1.1.1.1	0xa796	Standard query (0)	d3e54v103j8qbb.cloudfront.net	65	IN (0x0001)	false
Mar 19, 2025 11:18:42.015326977 CET	192.168.2.5	1.1.1.1	0xdbf3	Standard query (0)	d3e54v103j8qbb.cloudfront.net	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:18:42.015549898 CET	192.168.2.5	1.1.1.1	0x7fa0	Standard query (0)	d3e54v103j8qbb.cloudfront.net	65	IN (0x0001)	false
Mar 19, 2025 11:18:42.107321024 CET	192.168.2.5	1.1.1.1	0x1ac0	Standard query (0)	cdn.prod.website-files.com	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:18:42.107661963 CET	192.168.2.5	1.1.1.1	0xc295	Standard query (0)	cdn.prod.website-files.com	65	IN (0x0001)	false
Mar 19, 2025 11:18:57.887897968 CET	192.168.2.5	1.1.1.1	0x4b10	Standard query (0)	robenboodlogi.info	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:18:57.888322115 CET	192.168.2.5	1.1.1.1	0xb6c9	Standard query (0)	robenboodlogi.info	65	IN (0x0001)	false
Mar 19, 2025 11:18:57.920938969 CET	192.168.2.5	1.1.1.1	0x8dfc	Standard query (0)	robenboodlogi.info	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:18:58.060882092 CET	192.168.2.5	8.8.8.8	0x685e	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:18:58.061265945 CET	192.168.2.5	1.1.1.1	0xbd78	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:18:59.062000036 CET	192.168.2.5	1.1.1.1	0x271	Standard query (0)	robenboodlogi.info	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:18:59.062333107 CET	192.168.2.5	1.1.1.1	0xc509	Standard query (0)	robenboodlogi.info	65	IN (0x0001)	false
Mar 19, 2025 11:19:04.092180967 CET	192.168.2.5	1.1.1.1	0x416c	Standard query (0)	robenboodlogi.info	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:19:04.092361927 CET	192.168.2.5	1.1.1.1	0xe1f4	Standard query (0)	robenboodlogi.info	65	IN (0x0001)	false
Mar 19, 2025 11:19:04.110120058 CET	192.168.2.5	1.1.1.1	0x5a7e	Standard query (0)	robenboodlogi.info	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:19:09.879033089 CET	192.168.2.5	1.1.1.1	0x4e8f	Standard query (0)	robenboodlogi.info	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:19:09.880230904 CET	192.168.2.5	1.1.1.1	0x1bd3	Standard query (0)	robenboodlogi.info	65	IN (0x0001)	false
Mar 19, 2025 11:19:09.897344112 CET	192.168.2.5	1.1.1.1	0xef5a	Standard query (0)	robenboodlogi.info	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:19:09.924150944 CET	192.168.2.5	1.1.1.1	0x6126	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:19:09.924541950 CET	192.168.2.5	8.8.8.8	0x686c	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:19:26.738360882 CET	192.168.2.5	1.1.1.1	0x90da	Standard query (0)	robenboodlogi.info	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:19:39.944194078 CET	192.168.2.5	1.1.1.1	0x9f18	Standard query (0)	robenboodlogi.info	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:19:39.944577932 CET	192.168.2.5	1.1.1.1	0xde1a	Standard query (0)	robenboodlogi.info	65	IN (0x0001)	false
Mar 19, 2025 11:19:39.965461016 CET	192.168.2.5	1.1.1.1	0xd326	Standard query (0)	robenboodlogi.info	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 19, 2025 11:18:39.569875002 CET	1.1.1.1	192.168.2.5	0x83b7	No error (0)	www.google.com		142.250.186.36	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:18:39.570338964 CET	1.1.1.1	192.168.2.5	0x75d1	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 19, 2025 11:18:41.579421997 CET	1.1.1.1	192.168.2.5	0x8f49	No error (0)	sso-robinhood-net--logi--auth.webflow.io		104.18.36.248	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:18:41.579421997 CET	1.1.1.1	192.168.2.5	0x8f49	No error (0)	sso-robinhood-net--logi--auth.webflow.io		172.64.151.8	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:18:41.579833031 CET	1.1.1.1	192.168.2.5	0x668	No error (0)	sso-robinhood-net--logi--auth.webflow.io			65	IN (0x0001)	false
Mar 19, 2025 11:18:41.756869078 CET	1.1.1.1	192.168.2.5	0xab54	No error (0)	cdn.prod.website-files.com			65	IN (0x0001)	false
Mar 19, 2025 11:18:41.756947994 CET	1.1.1.1	192.168.2.5	0x5106	No error (0)	cdn.prod.website-files.com		104.18.161.117	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:18:41.756947994 CET	1.1.1.1	192.168.2.5	0x5106	No error (0)	cdn.prod.website-files.com		104.18.160.117	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:18:41.796962976 CET	1.1.1.1	192.168.2.5	0xaa4a	No error (0)	d3e54v103j8qbb.cloudfront.net		52.222.232.39	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:18:41.796962976 CET	1.1.1.1	192.168.2.5	0xaa4a	No error (0)	d3e54v103j8qbb.cloudfront.net		52.222.232.144	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:18:41.796962976 CET	1.1.1.1	192.168.2.5	0xaa4a	No error (0)	d3e54v103j8qbb.cloudfront.net		52.222.232.47	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:18:41.796962976 CET	1.1.1.1	192.168.2.5	0xaa4a	No error (0)	d3e54v103j8qbb.cloudfront.net		52.222.232.99	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:18:42.022687912 CET	1.1.1.1	192.168.2.5	0xdbf3	No error (0)	d3e54v103j8qbb.cloudfront.net		52.222.232.47	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:18:42.022687912 CET	1.1.1.1	192.168.2.5	0xdbf3	No error (0)	d3e54v103j8qbb.cloudfront.net		52.222.232.99	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:18:42.022687912 CET	1.1.1.1	192.168.2.5	0xdbf3	No error (0)	d3e54v103j8qbb.cloudfront.net		52.222.232.39	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:18:42.022687912 CET	1.1.1.1	192.168.2.5	0xdbf3	No error (0)	d3e54v103j8qbb.cloudfront.net		52.222.232.144	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:18:42.115293980 CET	1.1.1.1	192.168.2.5	0x1ac0	No error (0)	cdn.prod.website-files.com		104.18.161.117	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:18:42.115293980 CET	1.1.1.1	192.168.2.5	0x1ac0	No error (0)	cdn.prod.website-files.com		104.18.160.117	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:18:42.115631104 CET	1.1.1.1	192.168.2.5	0xc295	No error (0)	cdn.prod.website-files.com			65	IN (0x0001)	false
Mar 19, 2025 11:18:57.903122902 CET	1.1.1.1	192.168.2.5	0x4b10	Name error (3)	robenboodlogi.info	none	none	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:18:57.906596899 CET	1.1.1.1	192.168.2.5	0xb6c9	Name error (3)	robenboodlogi.info	none	none	65	IN (0x0001)	false
Mar 19, 2025 11:18:57.937139034 CET	1.1.1.1	192.168.2.5	0x8dfc	Name error (3)	robenboodlogi.info	none	none	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:18:58.068679094 CET	1.1.1.1	192.168.2.5	0xbd78	No error (0)	google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:18:58.069859028 CET	8.8.8.8	192.168.2.5	0x685e	No error (0)	google.com		142.251.37.110	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:18:59.077297926 CET	1.1.1.1	192.168.2.5	0x271	Name error (3)	robenboodlogi.info	none	none	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:18:59.077354908 CET	1.1.1.1	192.168.2.5	0xc509	Name error (3)	robenboodlogi.info	none	none	65	IN (0x0001)	false
Mar 19, 2025 11:19:04.106499910 CET	1.1.1.1	192.168.2.5	0x416c	Name error (3)	robenboodlogi.info	none	none	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:19:04.109277964 CET	1.1.1.1	192.168.2.5	0xe1f4	Name error (3)	robenboodlogi.info	none	none	65	IN (0x0001)	false
Mar 19, 2025 11:19:04.125641108 CET	1.1.1.1	192.168.2.5	0x5a7e	Name error (3)	robenboodlogi.info	none	none	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:19:09.895234108 CET	1.1.1.1	192.168.2.5	0x4e8f	Name error (3)	robenboodlogi.info	none	none	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:19:09.896245003 CET	1.1.1.1	192.168.2.5	0x1bd3	Name error (3)	robenboodlogi.info	none	none	65	IN (0x0001)	false
Mar 19, 2025 11:19:09.905148029 CET	1.1.1.1	192.168.2.5	0xef5a	Name error (3)	robenboodlogi.info	none	none	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:19:09.930918932 CET	1.1.1.1	192.168.2.5	0x6126	No error (0)	google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:19:09.935621023 CET	8.8.8.8	192.168.2.5	0x686c	No error (0)	google.com		142.251.37.110	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:19:26.746645927 CET	1.1.1.1	192.168.2.5	0x90da	Name error (3)	robenboodlogi.info	none	none	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:19:39.959391117 CET	1.1.1.1	192.168.2.5	0x9f18	Name error (3)	robenboodlogi.info	none	none	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:19:39.977003098 CET	1.1.1.1	192.168.2.5	0xde1a	Name error (3)	robenboodlogi.info	none	none	65	IN (0x0001)	false
Mar 19, 2025 11:19:39.980998039 CET	1.1.1.1	192.168.2.5	0xd326	Name error (3)	robenboodlogi.info	none	none	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

sso-robinhood-net--logi--auth.webflow.io

cdn.prod.website-files.com

d3e54v103j8qbb.cloudfront.net

www.google.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49722	104.18.36.248	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:18:41 UTC	690	OUT	GET / HTTP/1.1 Host: sso-robinhood-net--logi--auth.webflow.io Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:18:41 UTC	825	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 10:18:41 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close CF-Ray: 922c3a2a5a434d59-FRA CF-Cache-Status: HIT Age: 139838 Last-Modified: Mon, 17 Mar 2025 04:57:05 GMT content-security-policy: frame-ancestors 'self' https://.webflow.com http://.webflow.com http://*.webflow.io http://webflow.com https://webflow.com surrogate-control: max-age=2147483647 surrogate-key: sso-robinhood-net--logi--auth.webflow.io 678a1feff5acbcd11712c8a8 pageId:678a1feff5acbcd11712c8b1 x-lambda-id: 9a7a2068-69e4-4b3b-8083-402dd62d6363 vary: Accept-Encoding Set-Cookie: _cfuvid=ED1tvQqgmX07Tlz3bC.JikSzgxi2D2bqBpz9IEqUkOk-1742379521720-0.0.1.1-604800000; path=/; domain=.webflow.io; HttpOnly; Secure; SameSite=None Server: cloudflare alt-svc: h3=":443"; ma=86400
2025-03-19 10:18:41 UTC	544	IN	Data Raw: 63 61 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 21 2d 2d 20 54 68 69 73 20 73 69 74 65 20 77 61 73 20 63 72 65 61 74 65 64 20 69 6e 20 57 65 62 66 6c 6f 77 2e 20 68 74 74 70 73 3a 2f 2f 77 65 62 66 6c 6f 77 2e 63 6f 6d 20 2d 2d 3e 3c 21 2d 2d 20 4c 61 73 74 20 50 75 62 6c 69 73 68 65 64 3a 20 46 72 69 20 4a 61 6e 20 31 37 20 32 30 32 35 20 30 39 3a 31 38 3a 31 37 20 47 4d 54 2b 30 30 30 30 20 28 43 6f 6f 72 64 69 6e 61 74 65 64 20 55 6e 69 76 65 72 73 61 6c 20 54 69 6d 65 29 20 2d 2d 3e 3c 68 74 6d 6c 20 64 61 74 61 2d 77 66 2d 64 6f 6d 61 69 6e 3d 22 73 73 6f 2d 72 6f 62 69 6e 68 6f 6f 64 2d 6e 65 74 2d 2d 6c 6f 67 69 2d 2d 61 75 74 68 2e 77 65 62 66 6c 6f 77 2e 69 6f 22 20 64 61 74 61 2d 77 66 2d 70 61 67 65 3d 22 36 37 38 61 31 66 65 66 Data Ascii: ca6<!DOCTYPE html>... This site was created in Webflow. https://webflow.com -->... Last Published: Fri Jan 17 2025 09:18:17 GMT+0000 (Coordinated Universal Time) --><html data-wf-domain="sso-robinhood-net--logi--auth.webflow.io" data-wf-page="678a1fef
2025-03-19 10:18:41 UTC	1369	IN	Data Raw: 2c 20 45 54 46 73 2c 20 6f 70 74 69 6f 6e 73 2c 20 61 6e 64 20 63 72 79 70 74 6f 63 75 72 72 65 6e 63 69 65 73 2e 20 57 69 74 68 20 61 20 75 73 65 72 2d 66 72 69 65 6e 64 6c 79 20 69 6e 74 65 72 66 61 63 65 2c 20 69 74 20 68 61 73 20 67 61 69 6e 65 64 20 70 6f 70 75 6c 61 72 69 74 79 20 61 6d 6f 6e 67 20 62 65 67 69 6e 6e 65 72 73 20 61 6e 64 20 73 65 61 73 6f 6e 65 64 20 74 72 61 64 65 72 73 20 61 6c 69 6b 65 2e 20 57 68 65 74 68 65 72 20 79 6f 75 26 23 78 32 37 3b 72 65 20 6c 6f 6f 6b 69 6e 67 20 74 6f 20 73 74 61 72 74 20 79 6f 75 72 20 66 69 72 73 74 20 69 6e 76 65 73 74 6d 65 6e 74 20 70 6f 72 74 66 6f 6c 69 6f 20 6f 72 20 72 65 66 69 6e 65 20 61 6e 20 65 78 69 73 74 69 6e 67 20 73 74 72 61 74 65 67 79 2c 20 52 6f 62 69 6e 68 6f 6f 64 20 70 72 6f 76 Data Ascii: , ETFs, options, and cryptocurrencies. With a user-friendly interface, it has gained popularity among beginners and seasoned traders alike. Whether you're looking to start your first investment portfolio or refine an existing strategy, Robinhood prov
2025-03-19 10:18:41 UTC	1332	IN	Data Raw: 6c 61 7a 79 22 20 73 69 7a 65 73 3d 22 28 6d 61 78 2d 77 69 64 74 68 3a 20 31 33 34 38 70 78 29 20 31 30 30 76 77 2c 20 31 33 34 38 70 78 22 20 73 72 63 73 65 74 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 70 72 6f 64 2e 77 65 62 73 69 74 65 2d 66 69 6c 65 73 2e 63 6f 6d 2f 36 37 38 61 31 66 65 66 66 35 61 63 62 63 64 31 31 37 31 32 63 38 61 38 2f 36 37 38 61 32 30 30 62 30 36 36 37 38 30 37 33 36 62 37 35 31 38 38 36 5f 53 63 72 65 65 6e 73 68 6f 74 25 32 30 32 30 32 35 2d 30 31 2d 30 38 25 32 30 61 74 25 32 30 31 33 2d 33 39 2d 31 34 25 32 30 43 6f 6d 6d 69 73 73 69 6f 6e 2d 66 72 65 65 25 32 30 53 74 6f 63 6b 25 32 30 54 72 61 64 69 6e 67 25 32 30 25 32 36 25 32 30 49 6e 76 65 73 74 69 6e 67 25 32 30 41 70 70 25 32 30 52 6f 62 69 6e 68 6f 6f 64 2d 70 2d Data Ascii: lazy" sizes="(max-width: 1348px) 100vw, 1348px" srcset="https://cdn.prod.website-files.com/678a1feff5acbcd11712c8a8/678a200b066780736b751886_Screenshot%202025-01-08%20at%2013-39-14%20Commission-free%20Stock%20Trading%20%26%20Investing%20App%20Robinhood-p-
2025-03-19 10:18:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49724	104.18.161.117	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:18:41 UTC	685	OUT	GET /678a1feff5acbcd11712c8a8/css/sso-robinhood-net--logi--auth.webflow.ce67eee42.css HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Referer: https://sso-robinhood-net--logi--auth.webflow.io/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:18:41 UTC	632	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 10:18:41 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close x-amz-id-2: kzeuWM9ICe37L1lYBKjKhdd/2vgtjm/cfOnCrPbDicAkdZP7N/Y9gCtjZfs3GkULmVVq/qmm2SQ= x-amz-request-id: 1JPH0MBTTMSPH4NR Last-Modified: Fri, 17 Jan 2025 09:18:18 GMT ETag: W/"b6a57deb813fab88fe5f35ba5bb2c342" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000, immutable x-amz-version-id: tU1HmCiGnXe0pAsNTsRcvJyKqLTNKN5f CF-Cache-Status: HIT Age: 135778 Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 922c3a2b7f9a9bfa-FRA alt-svc: h3=":443"; ma=86400
2025-03-19 10:18:41 UTC	737	IN	Data Raw: 37 64 33 38 0d 0a 68 74 6d 6c 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 3b 0a 20 20 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 62 6f 64 79 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 7d 0a 0a 61 72 74 69 63 6c 65 2c 20 61 73 69 64 65 2c 20 64 65 74 61 69 6c 73 2c 20 66 69 67 63 61 70 74 69 6f 6e 2c 20 66 69 67 75 72 65 2c 20 66 6f 6f 74 65 72 2c 20 68 65 61 64 65 72 2c 20 68 67 72 6f 75 70 2c 20 6d 61 69 6e 2c 20 6d 65 6e 75 2c 20 6e 61 76 2c 20 73 65 63 74 69 6f 6e 2c 20 73 75 6d 6d 61 72 79 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 7d 0a Data Ascii: 7d38html { -webkit-text-size-adjust: 100%; -ms-text-size-adjust: 100%; font-family: sans-serif;}body { margin: 0;}article, aside, details, figcaption, figure, footer, header, hgroup, main, menu, nav, section, summary { display: block;}
2025-03-19 10:18:41 UTC	1369	IN	Data Raw: 20 38 30 25 3b 0a 7d 0a 0a 73 75 62 2c 20 73 75 70 20 7b 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 62 61 73 65 6c 69 6e 65 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 37 35 25 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 30 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 7d 0a 0a 73 75 70 20 7b 0a 20 20 74 6f 70 3a 20 2d 2e 35 65 6d 3b 0a 7d 0a 0a 73 75 62 20 7b 0a 20 20 62 6f 74 74 6f 6d 3a 20 2d 2e 32 35 65 6d 3b 0a 7d 0a 0a 69 6d 67 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 30 3b 0a 7d 0a 0a 73 76 67 3a 6e 6f 74 28 3a 72 6f 6f 74 29 20 7b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 0a 68 72 20 7b 0a 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 0a 20 20 Data Ascii: 80%;}sub, sup { vertical-align: baseline; font-size: 75%; line-height: 0; position: relative;}sup { top: -.5em;}sub { bottom: -.25em;}img { border: 0;}svg:not(:root) { overflow: hidden;}hr { box-sizing: content-box;
2025-03-19 10:18:41 UTC	1369	IN	Data Raw: 65 72 2d 73 70 61 63 69 6e 67 3a 20 30 3b 0a 7d 0a 0a 74 64 2c 20 74 68 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 7d 0a 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 77 65 62 66 6c 6f 77 2d 69 63 6f 6e 73 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 22 64 61 74 61 3a 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 66 6f 6e 74 2d 74 74 66 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3b 62 61 73 65 36 34 2c 41 41 45 41 41 41 41 4c 41 49 41 41 41 77 41 77 54 31 4d 76 4d 67 38 53 42 69 55 41 41 41 43 38 41 41 41 41 59 47 4e 74 59 58 44 70 50 2b 61 34 41 41 41 42 48 41 41 41 41 46 78 6e 59 58 4e 77 41 41 41 41 45 41 41 41 41 58 67 41 41 41 41 49 5a 32 78 35 5a 6d 68 53 32 58 45 41 41 41 47 41 41 41 41 44 48 47 68 6c 59 57 51 Data Ascii: er-spacing: 0;}td, th { padding: 0;}@font-face { font-family: webflow-icons; src: url("data:application/x-font-ttf;charset=utf-8;base64,AAEAAAALAIAAAwAwT1MvMg8SBiUAAAC8AAAAYGNtYXDpP+a4AAABHAAAAFxnYXNwAAAAEAAAAXgAAAAIZ2x5ZmhS2XEAAAGAAAADHGhlYWQ
2025-03-19 10:18:41 UTC	1369	IN	Data Raw: 69 45 67 62 30 74 4b 56 56 56 4b 53 32 38 67 49 53 45 67 62 30 74 4b 56 56 56 4b 53 32 38 67 49 51 41 42 41 41 41 42 77 41 49 41 41 38 41 41 45 67 41 41 45 7a 51 33 50 67 45 33 4e 6a 4d 78 46 53 49 48 44 67 45 48 42 68 55 78 49 77 41 6f 4b 49 74 65 58 57 70 56 53 6b 74 76 49 43 46 6d 41 63 42 71 58 56 36 4c 4b 43 68 6d 49 53 42 76 53 30 70 56 41 41 41 41 41 67 41 41 2f 38 41 46 74 67 50 41 41 44 49 41 4f 67 41 41 41 52 59 58 48 67 45 58 46 68 55 55 42 77 34 42 42 77 59 48 49 78 55 68 49 69 63 75 41 53 63 6d 4e 54 51 33 50 67 45 33 4e 6a 4d 78 4f 41 45 78 4e 44 63 2b 41 54 63 32 4d 7a 49 58 48 67 45 58 46 68 63 56 41 54 4d 4a 41 54 4d 56 4d 7a 55 45 6a 44 38 33 4e 6c 41 58 46 78 59 58 54 6a 55 31 50 51 4c 38 6b 7a 30 31 4e 6b 38 58 46 78 63 58 54 7a 59 31 Data Ascii: iEgb0tKVVVKS28gISEgb0tKVVVKS28gIQABAAABwAIAA8AAEgAAEzQ3PgE3NjMxFSIHDgEHBhUxIwAoKIteXWpVSktvICFmAcBqXV6LKChmISBvS0pVAAAAAgAA/8AFtgPAADIAOgAAARYXHgEXFhUUBw4BBwYHIxUhIicuAScmNTQ3PgE3NjMxOAExNDc+ATc2MzIXHgEXFhcVATMJATMVMzUEjD83NlAXFxYXTjU1PQL8kz01Nk8XFxcXTzY1
2025-03-19 10:18:41 UTC	1369	IN	Data Raw: 2d 22 5d 2c 20 5b 63 6c 61 73 73 2a 3d 22 20 77 2d 69 63 6f 6e 2d 22 5d 20 7b 0a 20 20 73 70 65 61 6b 3a 20 6e 6f 6e 65 3b 0a 20 20 66 6f 6e 74 2d 76 61 72 69 61 6e 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 6e 6f 6e 65 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 20 61 6e 74 69 61 6c 69 61 73 65 64 3b 0a 20 20 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 20 67 72 61 79 73 63 61 6c 65 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 77 65 62 66 6c 6f 77 2d 69 63 Data Ascii: -"], [class*=" w-icon-"] { speak: none; font-variant: normal; text-transform: none; -webkit-font-smoothing: antialiased; -moz-osx-font-smoothing: grayscale; font-style: normal; font-weight: normal; line-height: 1; font-family: webflow-ic
2025-03-19 10:18:41 UTC	1369	IN	Data Raw: 65 72 2d 72 61 64 69 75 73 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 39 70 78 20 31 35 70 78 3b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 7d 0a 0a 69 6e 70 75 74 2e 77 2d 62 75 74 74 6f 6e 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 20 62 75 74 74 6f 6e 3b 0a 7d 0a 0a 68 74 6d 6c 5b 64 61 74 61 2d 77 2d 64 79 6e 70 61 67 65 5d 20 5b 64 61 74 61 2d 77 2d 63 6c 6f 61 6b 5d 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 2e 77 2d 63 6f 64 65 2d 62 6c 6f 63 6b 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 75 6e 73 65 74 3b 0a 7d 0a 0a 70 72 65 2e 77 2d 63 6f 64 65 2d 62 6c Data Ascii: er-radius: 0; padding: 9px 15px; text-decoration: none; display: inline-block;}input.w-button { -webkit-appearance: button;}html[data-w-dynpage] [data-w-cloak] { color: #0000 !important;}.w-code-block { margin: unset;}pre.w-code-bl
2025-03-19 10:18:41 UTC	1369	IN	Data Raw: 6e 73 65 74 3b 0a 20 20 77 6f 72 64 2d 77 72 61 70 3a 20 75 6e 73 65 74 3b 0a 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 75 6e 73 65 74 3b 0a 7d 0a 0a 2e 77 2d 77 65 62 66 6c 6f 77 2d 62 61 64 67 65 20 7b 0a 20 20 77 68 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 77 72 61 70 3b 0a 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 30 20 31 70 78 20 23 30 30 30 30 30 30 31 61 2c 20 30 20 31 70 78 20 33 70 78 20 23 30 30 30 30 30 30 31 61 3b 0a 20 20 76 69 73 69 62 69 6c 69 74 79 3a 20 76 69 73 69 62 6c 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 6f 70 61 63 69 74 79 3a 20 31 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 32 31 34 37 34 38 33 36 34 37 20 21 69 6d 70 6f 72 74 Data Ascii: nset; word-wrap: unset; transition: unset;}.w-webflow-badge { white-space: nowrap; cursor: pointer; box-shadow: 0 0 0 1px #0000001a, 0 1px 3px #0000001a; visibility: visible !important; opacity: 1 !important; z-index: 2147483647 !import
2025-03-19 10:18:41 UTC	1369	IN	Data Raw: 65 2d 68 65 69 67 68 74 3a 20 31 38 70 78 3b 0a 7d 0a 0a 70 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 3b 0a 7d 0a 0a 62 6c 6f 63 6b 71 75 6f 74 65 20 7b 0a 20 20 62 6f 72 64 65 72 2d 6c 65 66 74 3a 20 35 70 78 20 73 6f 6c 69 64 20 23 65 32 65 32 65 32 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 20 32 30 70 78 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 32 70 78 3b 0a 7d 0a 0a 66 69 67 75 72 65 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 30 70 78 3b 0a 7d 0a 0a 66 69 67 63 61 70 74 69 6f 6e 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e Data Ascii: e-height: 18px;}p { margin-top: 0; margin-bottom: 10px;}blockquote { border-left: 5px solid #e2e2e2; margin: 0 0 10px; padding: 10px 20px; font-size: 18px; line-height: 22px;}figure { margin: 0 0 10px;}figcaption { text-align
2025-03-19 10:18:41 UTC	1369	IN	Data Raw: 74 3a 20 33 38 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 38 70 78 20 31 32 70 78 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 32 38 35 37 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2e 77 2d 69 6e 70 75 74 3a 3a 70 6c 61 63 65 68 6f 6c 64 65 72 2c 20 2e 77 2d 73 65 6c 65 63 74 3a 3a 70 6c 61 63 65 68 6f 6c 64 65 72 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 39 39 39 3b 0a 7d 0a 0a 2e 77 2d 69 6e 70 75 74 3a 66 6f 63 75 73 2c 20 2e 77 2d 73 65 6c 65 63 74 3a 66 6f 63 75 73 20 7b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 33 38 39 38 65 63 3b 0a 20 20 6f 75 74 6c 69 6e 65 3a 20 30 3b Data Ascii: t: 38px; margin-bottom: 10px; padding: 8px 12px; font-size: 14px; line-height: 1.42857; display: block;}.w-input::placeholder, .w-select::placeholder { color: #999;}.w-input:focus, .w-select:focus { border-color: #3898ec; outline: 0;
2025-03-19 10:18:41 UTC	1369	IN	Data Raw: 3a 20 2e 31 70 78 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 0a 2e 77 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 2d 64 65 66 61 75 6c 74 2c 20 2e 77 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 2d 75 70 6c 6f 61 64 69 6e 67 2c 20 2e 77 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 2d 73 75 63 63 65 73 73 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 33 33 33 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2e 77 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 2d 65 72 72 6f 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 30 70 78 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2e 77 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 2d 64 65 66 61 75 Data Ascii: : .1px; position: absolute; overflow: hidden;}.w-file-upload-default, .w-file-upload-uploading, .w-file-upload-success { color: #333; display: inline-block;}.w-file-upload-error { margin-top: 10px; display: block;}.w-file-upload-defau

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49725	104.18.161.117	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:18:41 UTC	662	OUT	GET /678a1feff5acbcd11712c8a8/js/webflow.77ac24386eb2a8dacabbd68092c045ec.js HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://sso-robinhood-net--logi--auth.webflow.io/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:18:41 UTC	654	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 10:18:41 GMT Content-Type: text/javascript Content-Length: 37349 Connection: close x-amz-id-2: A1/ytZdwFh/h7MeGXUYiqVZI/Jpm9b5qzgRnMiPIdjO2lunoyyKN7xfqbq/NPYAO2jsftw19QC0= x-amz-request-id: 6804X9ZTCH1B0WEF Last-Modified: Fri, 17 Jan 2025 09:18:18 GMT ETag: "fc7ef472a2bca6fbdb8ab8235dec64e0" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000, immutable x-amz-version-id: GDuOqY4CSSSEQHl3p.cfPRtsJdfHOLVJ CF-Cache-Status: HIT Age: 135778 Accept-Ranges: bytes Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 922c3a2b7f0b1cc3-FRA alt-svc: h3=":443"; ma=86400
2025-03-19 10:18:41 UTC	715	IN	Data Raw: 0a 2f 2a 21 0a 20 2a 20 57 65 62 66 6c 6f 77 3a 20 46 72 6f 6e 74 2d 65 6e 64 20 73 69 74 65 20 6c 69 62 72 61 72 79 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 4d 49 54 0a 20 2a 20 49 6e 6c 69 6e 65 20 73 63 72 69 70 74 73 20 6d 61 79 20 61 63 63 65 73 73 20 74 68 65 20 61 70 69 20 75 73 69 6e 67 20 61 6e 20 61 73 79 6e 63 20 68 61 6e 64 6c 65 72 3a 0a 20 2a 20 20 20 76 61 72 20 57 65 62 66 6c 6f 77 20 3d 20 57 65 62 66 6c 6f 77 20 7c 7c 20 5b 5d 3b 0a 20 2a 20 20 20 57 65 62 66 6c 6f 77 2e 70 75 73 68 28 72 65 61 64 79 46 75 6e 63 74 69 6f 6e 29 3b 0a 20 2a 2f 0a 0a 28 28 29 3d 3e 7b 76 61 72 20 6c 74 3d 28 65 2c 79 29 3d 3e 28 29 3d 3e 28 79 7c 7c 65 28 28 79 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 29 2e 65 78 70 6f 72 74 73 2c 79 29 2c 79 2e 65 78 70 6f 72 Data Ascii: /! Webflow: Front-end site library * @license MIT * Inline scripts may access the api using an async handler: * var Webflow = Webflow \|\| []; * Webflow.push(readyFunction); */(()=>{var lt=(e,y)=>()=>(y\|\|e((y={exports:{}}).exports,y),y.expor
2025-03-19 10:18:41 UTC	1369	IN	Data Raw: 6e 69 74 73 20 64 6f 20 6e 6f 74 20 6d 61 74 63 68 20 5b 22 2b 74 2b 22 5d 3a 20 22 2b 6e 2b 22 2c 20 22 2b 69 29 7d 66 75 6e 63 74 69 6f 6e 20 49 28 74 2c 6e 2c 69 29 7b 69 66 28 6e 21 3d 3d 76 6f 69 64 20 30 26 26 28 69 3d 6e 29 2c 74 3d 3d 3d 76 6f 69 64 20 30 29 72 65 74 75 72 6e 20 69 3b 76 61 72 20 72 3d 69 3b 72 65 74 75 72 6e 20 77 65 2e 74 65 73 74 28 74 29 7c 7c 21 58 74 2e 74 65 73 74 28 74 29 3f 72 3d 70 61 72 73 65 49 6e 74 28 74 2c 31 30 29 3a 58 74 2e 74 65 73 74 28 74 29 26 26 28 72 3d 31 65 33 2a 70 61 72 73 65 46 6c 6f 61 74 28 74 29 29 2c 30 3e 72 26 26 28 72 3d 30 29 2c 72 3d 3d 3d 72 3f 72 3a 69 7d 66 75 6e 63 74 69 6f 6e 20 42 28 74 29 7b 65 74 2e 64 65 62 75 67 26 26 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 Data Ascii: nits do not match ["+t+"]: "+n+", "+i)}function I(t,n,i){if(n!==void 0&&(i=n),t===void 0)return i;var r=i;return we.test(t)\|\|!Xt.test(t)?r=parseInt(t,10):Xt.test(t)&&(r=1e3*parseFloat(t)),0>r&&(r=0),r===r?r:i}function B(t){et.debug&&window&&window.console
2025-03-19 10:18:41 UTC	1369	IN	Data Raw: 75 72 6e 20 69 2a 74 2f 72 2b 6e 7d 5d 2c 22 65 61 73 65 2d 69 6e 2d 71 75 61 64 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 35 35 30 2c 20 30 2e 30 38 35 2c 20 30 2e 36 38 30 2c 20 30 2e 35 33 30 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 29 7b 72 65 74 75 72 6e 20 69 2a 28 74 2f 3d 72 29 2a 74 2b 6e 7d 5d 2c 22 65 61 73 65 2d 6f 75 74 2d 71 75 61 64 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 32 35 30 2c 20 30 2e 34 36 30 2c 20 30 2e 34 35 30 2c 20 30 2e 39 34 30 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 29 7b 72 65 74 75 72 6e 2d 69 2a 28 74 2f 3d 72 29 2a 28 74 2d 32 29 2b 6e 7d 5d 2c 22 65 61 73 65 2d 69 6e 2d 6f 75 74 2d 71 75 61 64 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 35 Data Ascii: urn it/r+n}],"ease-in-quad":["cubic-bezier(0.550, 0.085, 0.680, 0.530)",function(t,n,i,r){return i(t/=r)t+n}],"ease-out-quad":["cubic-bezier(0.250, 0.460, 0.450, 0.940)",function(t,n,i,r){return-i(t/=r)*(t-2)+n}],"ease-in-out-quad":["cubic-bezier(0.45
2025-03-19 10:18:41 UTC	1369	IN	Data Raw: 29 2b 6e 7d 5d 2c 22 65 61 73 65 2d 69 6e 2d 73 69 6e 65 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 37 30 2c 20 30 2c 20 30 2e 37 34 35 2c 20 30 2e 37 31 35 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 29 7b 72 65 74 75 72 6e 2d 69 2a 4d 61 74 68 2e 63 6f 73 28 74 2f 72 2a 28 4d 61 74 68 2e 50 49 2f 32 29 29 2b 69 2b 6e 7d 5d 2c 22 65 61 73 65 2d 6f 75 74 2d 73 69 6e 65 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 33 39 30 2c 20 30 2e 35 37 35 2c 20 30 2e 35 36 35 2c 20 31 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 29 7b 72 65 74 75 72 6e 20 69 2a 4d 61 74 68 2e 73 69 6e 28 74 2f 72 2a 28 4d 61 74 68 2e 50 49 2f 32 29 29 2b 6e 7d 5d 2c 22 65 61 73 65 2d 69 6e 2d 6f 75 74 2d 73 69 6e 65 22 3a 5b 22 63 Data Ascii: )+n}],"ease-in-sine":["cubic-bezier(0.470, 0, 0.745, 0.715)",function(t,n,i,r){return-iMath.cos(t/r(Math.PI/2))+i+n}],"ease-out-sine":["cubic-bezier(0.390, 0.575, 0.565, 1)",function(t,n,i,r){return iMath.sin(t/r(Math.PI/2))+n}],"ease-in-out-sine":["c
2025-03-19 10:18:41 UTC	1369	IN	Data Raw: 3d 3d 3d 76 6f 69 64 20 30 26 26 28 73 3d 31 2e 37 30 31 35 38 29 2c 69 2a 28 28 74 3d 74 2f 72 2d 31 29 2a 74 2a 28 28 73 2b 31 29 2a 74 2b 73 29 2b 31 29 2b 6e 7d 5d 2c 22 65 61 73 65 2d 69 6e 2d 6f 75 74 2d 62 61 63 6b 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 36 38 30 2c 20 2d 30 2e 35 35 30 2c 20 30 2e 32 36 35 2c 20 31 2e 35 35 30 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 2c 73 29 7b 72 65 74 75 72 6e 20 73 3d 3d 3d 76 6f 69 64 20 30 26 26 28 73 3d 31 2e 37 30 31 35 38 29 2c 28 74 2f 3d 72 2f 32 29 3c 31 3f 69 2f 32 2a 74 2a 74 2a 28 28 28 73 2a 3d 31 2e 35 32 35 29 2b 31 29 2a 74 2d 73 29 2b 6e 3a 69 2f 32 2a 28 28 74 2d 3d 32 29 2a 74 2a 28 28 28 73 2a 3d 31 2e 35 32 35 29 2b 31 29 2a 74 2b 73 29 2b 32 29 2b 6e 7d 5d Data Ascii: ===void 0&&(s=1.70158),i((t=t/r-1)t((s+1)t+s)+1)+n}],"ease-in-out-back":["cubic-bezier(0.680, -0.550, 0.265, 1.550)",function(t,n,i,r,s){return s===void 0&&(s=1.70158),(t/=r/2)<1?i/2tt(((s=1.525)+1)t-s)+n:i/2((t-=2)t(((s=1.525)+1)t+s)+2)+n}]
2025-03-19 10:18:41 UTC	1369	IN	Data Raw: 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 7c 7c 48 2e 6d 73 52 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 3b 72 65 74 75 72 6e 20 74 26 26 68 2e 62 69 6e 64 3f 74 2e 62 69 6e 64 28 48 29 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 48 2e 73 65 74 54 69 6d 65 6f 75 74 28 6e 2c 31 36 29 7d 7d 28 29 2c 63 74 3d 79 2e 6e 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 48 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2c 6e 3d 74 26 26 28 74 2e 6e 6f 77 7c 7c 74 2e 77 65 62 6b 69 74 4e 6f 77 7c 7c 74 2e 6d 73 4e 6f 77 7c 7c 74 2e 6d 6f 7a 4e 6f 77 29 3b 72 65 74 75 72 6e 20 6e 26 26 68 2e 62 69 6e 64 3f 6e 2e 62 69 6e 64 28 74 29 3a 44 61 74 65 2e 6e 6f 77 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 2b 6e 65 77 20 44 61 74 65 7d 7d 28 29 Data Ascii: nimationFrame\|\|H.msRequestAnimationFrame;return t&&h.bind?t.bind(H):function(n){H.setTimeout(n,16)}}(),ct=y.now=function(){var t=H.performance,n=t&&(t.now\|\|t.webkitNow\|\|t.msNow\|\|t.mozNow);return n&&h.bind?n.bind(t):Date.now\|\|function(){return+new Date}}()
2025-03-19 10:18:41 UTC	1369	IN	Data Raw: 65 2e 70 75 73 68 28 7b 6f 70 74 69 6f 6e 73 3a 77 7d 29 3a 28 74 68 69 73 2e 74 69 6d 65 72 3d 6e 65 77 20 71 74 28 7b 64 75 72 61 74 69 6f 6e 3a 77 2c 63 6f 6e 74 65 78 74 3a 74 68 69 73 2c 63 6f 6d 70 6c 65 74 65 3a 6f 7d 29 2c 74 68 69 73 2e 61 63 74 69 76 65 3d 21 30 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 77 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 61 63 74 69 76 65 3f 28 74 68 69 73 2e 71 75 65 75 65 2e 70 75 73 68 28 7b 6f 70 74 69 6f 6e 73 3a 77 2c 61 72 67 73 3a 61 72 67 75 6d 65 6e 74 73 7d 29 2c 76 6f 69 64 28 74 68 69 73 2e 74 69 6d 65 72 2e 63 6f 6d 70 6c 65 74 65 3d 6f 29 29 3a 42 28 22 4e 6f 20 61 63 74 69 76 65 20 74 72 61 6e 73 69 74 69 6f 6e 20 74 69 6d 65 72 2e 20 55 73 65 20 73 74 61 72 74 28 29 20 6f 72 20 77 61 69 74 28 29 20 62 65 Data Ascii: e.push({options:w}):(this.timer=new qt({duration:w,context:this,complete:o}),this.active=!0)}function s(w){return this.active?(this.queue.push({options:w,args:arguments}),void(this.timer.complete=o)):B("No active transition timer. Use start() or wait() be
2025-03-19 10:18:41 UTC	1369	IN	Data Raw: 74 29 7d 59 26 26 6e 74 26 26 59 2e 63 61 6c 6c 28 74 68 69 73 2c 6e 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 77 29 7b 77 2e 73 74 6f 70 28 29 7d 66 75 6e 63 74 69 6f 6e 20 41 74 28 77 2c 4f 29 7b 77 2e 73 65 74 28 4f 29 7d 66 75 6e 63 74 69 6f 6e 20 67 65 28 77 29 7b 74 68 69 73 2e 24 65 6c 2e 63 73 73 28 77 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 74 28 77 2c 4f 29 7b 74 5b 77 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 68 69 6c 64 72 65 6e 3f 79 65 2e 63 61 6c 6c 28 74 68 69 73 2c 4f 2c 61 72 67 75 6d 65 6e 74 73 29 3a 28 74 68 69 73 2e 65 6c 26 26 4f 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 2c 74 68 69 73 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 77 2c 4f 29 7b 76 61 72 20 59 2c 4e 3d 74 68 69 Data Ascii: t)}Y&&nt&&Y.call(this,nt)}function j(w){w.stop()}function At(w,O){w.set(O)}function ge(w){this.$el.css(w)}function ot(w,O){t[w]=function(){return this.children?ye.call(this,O,arguments):(this.el&&O.apply(this,arguments),this)}}function ye(w,O){var Y,N=thi
2025-03-19 10:18:41 UTC	1369	IN	Data Raw: 3a 30 7d 3b 74 2e 69 6e 69 74 3d 66 75 6e 63 74 69 6f 6e 28 6f 2c 70 2c 78 2c 4b 29 7b 74 68 69 73 2e 24 65 6c 3d 6f 2c 74 68 69 73 2e 65 6c 3d 6f 5b 30 5d 3b 76 61 72 20 63 3d 70 5b 30 5d 3b 78 5b 32 5d 26 26 28 63 3d 78 5b 32 5d 29 2c 48 74 5b 63 5d 26 26 28 63 3d 48 74 5b 63 5d 29 2c 74 68 69 73 2e 6e 61 6d 65 3d 63 2c 74 68 69 73 2e 74 79 70 65 3d 78 5b 31 5d 2c 74 68 69 73 2e 64 75 72 61 74 69 6f 6e 3d 49 28 70 5b 31 5d 2c 74 68 69 73 2e 64 75 72 61 74 69 6f 6e 2c 73 2e 64 75 72 61 74 69 6f 6e 29 2c 74 68 69 73 2e 65 61 73 65 3d 69 28 70 5b 32 5d 2c 74 68 69 73 2e 65 61 73 65 2c 73 2e 65 61 73 65 29 2c 74 68 69 73 2e 64 65 6c 61 79 3d 49 28 70 5b 33 5d 2c 74 68 69 73 2e 64 65 6c 61 79 2c 73 2e 64 65 6c 61 79 29 2c 74 68 69 73 2e 73 70 61 6e 3d 74 68 Data Ascii: :0};t.init=function(o,p,x,K){this.$el=o,this.el=o[0];var c=p[0];x[2]&&(c=x[2]),Ht[c]&&(c=Ht[c]),this.name=c,this.type=x[1],this.duration=I(p[1],this.duration,s.duration),this.ease=i(p[2],this.ease,s.ease),this.delay=I(p[3],this.delay,s.delay),this.span=th
2025-03-19 10:18:41 UTC	1369	IN	Data Raw: 7c 74 68 69 73 2e 6e 65 78 74 53 74 79 6c 65 29 26 26 28 74 68 69 73 2e 61 63 74 69 76 65 3d 21 31 2c 74 68 69 73 2e 6e 65 78 74 53 74 79 6c 65 3d 6e 75 6c 6c 2c 62 74 28 74 68 69 73 2e 65 6c 2c 74 68 69 73 2e 6e 61 6d 65 2c 74 68 69 73 2e 67 65 74 28 29 29 29 3b 76 61 72 20 6f 3d 74 68 69 73 2e 74 77 65 65 6e 3b 6f 26 26 6f 2e 63 6f 6e 74 65 78 74 26 26 6f 2e 64 65 73 74 72 6f 79 28 29 7d 2c 74 2e 63 6f 6e 76 65 72 74 3d 66 75 6e 63 74 69 6f 6e 28 6f 2c 70 29 7b 69 66 28 6f 3d 3d 22 61 75 74 6f 22 26 26 74 68 69 73 2e 61 75 74 6f 29 72 65 74 75 72 6e 20 6f 3b 76 61 72 20 78 2c 4b 3d 74 79 70 65 6f 66 20 6f 3d 3d 22 6e 75 6d 62 65 72 22 2c 63 3d 74 79 70 65 6f 66 20 6f 3d 3d 22 73 74 72 69 6e 67 22 3b 73 77 69 74 63 68 28 70 29 7b 63 61 73 65 20 66 3a 69 Data Ascii: \|this.nextStyle)&&(this.active=!1,this.nextStyle=null,bt(this.el,this.name,this.get()));var o=this.tween;o&&o.context&&o.destroy()},t.convert=function(o,p){if(o=="auto"&&this.auto)return o;var x,K=typeof o=="number",c=typeof o=="string";switch(p){case f:i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49728	52.222.232.39	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:18:41 UTC	678	OUT	GET /js/jquery-3.5.1.min.dc5e7f18c8.js?site=678a1feff5acbcd11712c8a8 HTTP/1.1 Host: d3e54v103j8qbb.cloudfront.net Connection: keep-alive Origin: https://sso-robinhood-net--logi--auth.webflow.io sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://sso-robinhood-net--logi--auth.webflow.io/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:18:41 UTC	551	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 89476 Connection: close Last-Modified: Mon, 20 Jul 2020 17:53:02 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 19 Mar 2025 00:14:30 GMT Cache-Control: max-age=84600, must-revalidate Etag: "dc5e7f18c8d36ac1d3d4753a87c98d0a" Via: 1.1 89e34e3fd814f1393ef77867b93dd12e.cloudfront.net (CloudFront) Age: 36253 Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: BotmBWex_SOY_hm_5tWubzL63HPRnqBA19c1R1ARJWCFRw64di4zzw==
2025-03-19 10:18:41 UTC	15833	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 Data Ascii: /! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery
2025-03-19 10:18:41 UTC	16384	IN	Data Raw: 6e 74 4e 6f 64 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 2c 61 2c 73 2c 75 2c 6c 3d 79 21 3d 3d 6d 3f 22 6e 65 78 74 53 69 62 6c 69 6e 67 22 3a 22 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 22 2c 63 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 66 3d 78 26 26 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 70 3d 21 6e 26 26 21 78 2c 64 3d 21 31 3b 69 66 28 63 29 7b 69 66 28 79 29 7b 77 68 69 6c 65 28 6c 29 7b 61 3d 65 3b 77 68 69 6c 65 28 61 3d 61 5b 6c 5d 29 69 66 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 21 31 3b 75 3d 6c 3d 22 6f 6e 6c 79 22 3d 3d 3d 68 26 26 21 75 26 26 Data Ascii: ntNode}:function(e,t,n){var r,i,o,a,s,u,l=y!==m?"nextSibling":"previousSibling",c=e.parentNode,f=x&&e.nodeName.toLowerCase(),p=!n&&!x,d=!1;if(c){if(y){while(l){a=e;while(a=a[l])if(x?a.nodeName.toLowerCase()===f:1===a.nodeType)return!1;u=l="only"===h&&!u&&
2025-03-19 10:18:41 UTC	16384	IN	Data Raw: 6c 3f 43 2e 73 65 74 54 69 6d 65 6f 75 74 28 53 2e 72 65 61 64 79 29 3a 28 45 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 42 29 2c 43 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 42 29 29 3b 76 61 72 20 24 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 29 7b 76 61 72 20 73 3d 30 2c 75 3d 65 2e 6c 65 6e 67 74 68 2c 6c 3d 6e 75 6c 6c 3d 3d 6e 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 77 28 6e 29 29 66 6f 72 28 73 20 69 6e 20 69 3d 21 30 2c 6e 29 24 28 65 2c 74 2c 73 2c 6e 5b 73 5d 2c 21 30 2c 6f 2c 61 29 3b 65 6c 73 65 20 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 26 26 28 69 3d 21 30 2c 6d 28 72 29 7c 7c 28 61 3d 21 30 29 2c 6c 26 26 28 61 Data Ascii: l?C.setTimeout(S.ready):(E.addEventListener("DOMContentLoaded",B),C.addEventListener("load",B));var $=function(e,t,n,r,i,o,a){var s=0,u=e.length,l=null==n;if("object"===w(n))for(s in i=!0,n)$(e,t,s,n[s],!0,o,a);else if(void 0!==r&&(i=!0,m(r)\|\|(a=!0),l&&(a
2025-03-19 10:18:41 UTC	16384	IN	Data Raw: 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 29 7d 2c 6c 29 3a 62 28 75 2e 74 65 78 74 43 6f 6e 74 65 6e 74 2e 72 65 70 6c 61 63 65 28 6a 65 2c 22 22 29 2c 75 2c 6c 29 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 52 65 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 2c 69 3d 74 3f 53 2e 66 69 6c 74 65 72 28 74 2c 65 29 3a 65 2c 6f 3d 30 3b 6e 75 6c 6c 21 3d 28 72 3d 69 5b 6f 5d 29 3b 6f 2b 2b 29 6e 7c 7c 31 21 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 7c 7c 53 2e 63 6c 65 61 6e 44 61 74 61 28 76 65 28 72 29 29 2c 72 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 28 6e 26 26 69 65 28 72 29 26 26 79 65 28 76 65 28 72 2c 22 73 63 72 69 70 74 22 29 29 2c 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 72 29 29 3b 72 65 74 75 72 6e 20 Data Ascii: ibute("nonce")},l):b(u.textContent.replace(je,""),u,l))}return n}function Re(e,t,n){for(var r,i=t?S.filter(t,e):e,o=0;null!=(r=i[o]);o++)n\|\|1!==r.nodeType\|\|S.cleanData(ve(r)),r.parentNode&&(n&&ie(r)&&ye(ve(r,"script")),r.parentNode.removeChild(r));return
2025-03-19 10:18:41 UTC	16384	IN	Data Raw: 70 65 65 64 73 5b 72 5d 7c 7c 72 2c 65 3d 65 7c 7c 22 66 78 22 2c 74 68 69 73 2e 71 75 65 75 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 43 2e 73 65 74 54 69 6d 65 6f 75 74 28 65 2c 72 29 3b 74 2e 73 74 6f 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 43 2e 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 6e 29 7d 7d 29 7d 2c 72 74 3d 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 2c 69 74 3d 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 65 6c 65 63 74 22 29 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6f 70 74 69 6f 6e 22 29 29 2c 72 74 2e 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 2c 79 2e 63 68 65 63 6b 4f 6e 3d 22 22 21 3d 3d 72 74 2e 76 61 6c 75 65 2c 79 2e 6f Data Ascii: peeds[r]\|\|r,e=e\|\|"fx",this.queue(e,function(e,t){var n=C.setTimeout(e,r);t.stop=function(){C.clearTimeout(n)}})},rt=E.createElement("input"),it=E.createElement("select").appendChild(E.createElement("option")),rt.type="checkbox",y.checkOn=""!==rt.value,y.o
2025-03-19 10:18:41 UTC	8107	IN	Data Raw: 69 73 2e 63 68 69 6c 64 4e 6f 64 65 73 29 7d 29 2c 74 68 69 73 7d 7d 29 2c 53 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2e 68 69 64 64 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 53 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2e 76 69 73 69 62 6c 65 28 65 29 7d 2c 53 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2e 76 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 21 28 65 2e 6f 66 66 73 65 74 57 69 64 74 68 7c 7c 65 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7c 7c 65 2e 67 65 74 43 6c 69 65 6e 74 52 65 63 74 73 28 29 2e 6c 65 6e 67 74 68 29 7d 2c 53 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 2e 78 68 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6e 65 77 20 43 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 Data Ascii: is.childNodes)}),this}}),S.expr.pseudos.hidden=function(e){return!S.expr.pseudos.visible(e)},S.expr.pseudos.visible=function(e){return!!(e.offsetWidth\|\|e.offsetHeight\|\|e.getClientRects().length)},S.ajaxSettings.xhr=function(){try{return new C.XMLHttpReque

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49729	104.18.161.117	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:18:41 UTC	816	OUT	GET /678a1feff5acbcd11712c8a8/678a200b066780736b751886_Screenshot%202025-01-08%20at%2013-39-14%20Commission-free%20Stock%20Trading%20%26%20Investing%20App%20Robinhood.png HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://sso-robinhood-net--logi--auth.webflow.io/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:18:42 UTC	689	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 10:18:42 GMT Content-Type: image/png Content-Length: 544845 Connection: close x-amz-id-2: hwGJyIot5/XDtoRc+6CTQIijw/2lcjD5EECn+MewtdgRshbzyMHfwxjtrh3A5es6dpuW4zjjIwQ= x-amz-request-id: WBVV6P9QATJ8198G Last-Modified: Fri, 17 Jan 2025 09:17:01 GMT ETag: "35baa4c2960f7adaa6f26cc982435555" x-amz-storage-class: INTELLIGENT_TIERING x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, must-revalidate x-amz-version-id: heQ9IaR7hPBgW5TI5etPh9Rw3NF1.tNb CF-Cache-Status: HIT Age: 135779 Accept-Ranges: bytes Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 922c3a2ca8279265-FRA alt-svc: h3=":443"; ma=86400
2025-03-19 10:18:42 UTC	680	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 44 00 00 03 00 08 06 00 00 00 ec 65 6d 17 00 00 20 00 49 44 41 54 78 5e ec 7d 07 80 64 69 55 f5 ed 9c 73 ce b9 a7 27 ef cc 6c 64 59 d8 95 20 48 10 04 89 06 04 03 a2 80 28 08 fe 80 88 22 4a 10 15 09 8a 02 8a a0 88 04 49 0a 88 0a cb c2 e6 9d dd 9d 9c 43 4f ec ee e9 c9 a9 e3 7f ce f7 ea ab 7a 5d 5d e1 55 7a af 66 e6 7e b2 ee ec d4 0b df 3b 5f 3e f7 dc 7b 0b 44 64 11 ff 68 51 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 e0 ba 47 a0 40 09 d1 eb be 8d f5 03 15 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 20 84 80 12 a2 da 15 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 Data Ascii: PNGIHDRDem IDATx^}diUs'ldY H("JICOz]]Uzf~;_>{DdhQE@PE@PE@PE@PEG@E@PE@PE@PE@PE E@PE@PE@PE@P
2025-03-19 10:18:42 UTC	1369	IN	Data Raw: 9f 90 cf 7d ee 73 81 7c d1 fb df ff 7e 79 ee 73 9f 2b 95 95 95 81 bc ff 5a 79 e9 c5 8b 17 e5 5b df fa 96 fc e1 1f fe a1 af 55 56 42 d4 57 b8 f5 65 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 a4 8f 00 d5 a0 6f 7b db db e4 7b df fb 9e 7c e4 23 1f 91 83 07 0f a6 ff b0 eb f8 4e 2a 32 df fa d6 b7 ca d3 9e f6 34 21 39 f9 85 2f 7c c1 97 af e5 bb 5e f8 c2 17 1a a2 5a 8b 77 04 a8 1a fd f2 97 bf 2c ef 7d ef 7b bd df 94 c1 95 4a 88 66 00 9e de aa 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 1f 08 d0 0d fe 9b df fc a6 1c 39 72 44 de fe f6 b7 2b 11 ea 11 f4 e1 e1 61 f9 e0 07 3f 28 d5 d5 d5 f2 d2 97 be 54 ce 9d 3b e7 f1 ce d4 2e eb ee ee 96 6f 7c e3 1b 52 55 55 95 da 8d 7a f5 12 04 4e 9f 3e 6d 08 e5 89 Data Ascii: }s\|~ys+Zy[UVBWe"("("("o{{\|#N*24!9/\|^Zw,}{Jf("("("(9rD+a?(T;.o\|RUUzN>m
2025-03-19 10:18:42 UTC	1369	IN	Data Raw: c7 3b df f9 4e f3 dc 0f 7d e8 43 31 49 db 78 2f 55 42 d4 73 73 e4 dd 85 24 8d bf f2 95 af c8 ff fb 7f ff 2f ef ea a6 15 ca 7f 04 3e f6 b1 8f c9 9d 77 de b9 cc 20 14 74 cd f3 b5 5e a9 e0 f2 fb bf ff fb f2 c3 1f fe 50 1e 7c f0 c1 65 b7 d1 12 cc 05 f5 e7 7e ee e7 52 79 64 5e 5c 9b 8d ba ff da af fd 9a bc f5 ad 6f 35 86 be 5c 26 2a bc 16 e7 c7 6c e0 9b 17 1d 45 2b a1 08 28 02 8a 80 22 a0 08 04 88 00 63 5e 52 54 43 d1 d3 aa 55 ab cc 7e e3 e4 c9 93 f2 37 7f f3 37 72 f6 ec d9 00 6b 76 6d bc fa e6 9b 6f 36 67 cc be be be 6b a3 c2 d7 70 2d 8b 8a 8a 4c 06 f3 b1 b1 b1 98 9e c8 b1 3e ed 85 2f 7c a1 e1 7c b4 f8 8f 00 b9 c1 6c 85 90 c8 0b 42 94 aa cb b7 bd ed 6d 61 24 4f 9c 38 61 26 ce 5f ff f5 5f 97 6d db b6 19 89 38 3f 9a 16 25 ba c4 9f 39 73 26 26 ea 96 10 65 60 dc Data Ascii: ;N}C1Ix/UBss$/>w t^P\|e~Ryd^\o5\&*lE+("c^RTCU~77rkvmo6gkp-L>/\|\|lBma$O8a&__m8?%9s&&e`
2025-03-19 10:18:42 UTC	1369	IN	Data Raw: 73 48 54 32 2b 5c 7b 7b bb 21 74 29 79 e7 7f f3 bb e9 5e 4f 95 2a dd f8 39 c1 5b 42 94 13 03 89 d0 99 99 19 69 6d 6d 35 ef 21 41 c9 3a 5b 12 93 98 90 d4 62 c2 29 86 16 20 a9 cb b8 2c e7 cf 9f 97 9f f9 99 9f 31 16 38 96 d5 ab 57 0b eb dc d6 d6 26 93 93 93 42 e5 ad 4d 3a f5 a6 37 bd c9 a8 00 59 48 2c b0 1d 48 ae d2 85 94 cf 5c b9 72 a5 21 eb 38 21 dc 48 84 28 17 1e e2 6f 0f 3c c4 92 fd 84 09 bb d8 5e 3f fd d3 3f 6d 30 73 13 86 fc 33 15 83 c4 91 7d 96 24 b2 25 0e 49 a6 b1 4f 53 59 c9 42 52 8d cf 88 56 87 45 1f fa 52 ad 07 09 23 4b d2 f1 3d ee 3a b8 07 0d bf 87 6a 3b 2a 5b dd 8a 52 7b f8 64 02 33 f6 41 b7 72 6d f3 e6 cd 4b 08 1a fe 4e b5 b6 fd 2e aa f6 48 c6 33 64 80 5d e0 a8 74 23 06 5e c8 1d d6 8f 0b 3d 09 30 8e 25 8e 49 5b a8 ca 65 3f a5 a2 35 a8 ec 7d 24 Data Ascii: sHT2+\{{!t)y^O9[Bimm5!A:[b) ,18W&BM:7YH,H\r!8!H(o<^??m0s3}$%IOSYBRVER#K=:j;[R{d3ArmKN.H3d]t#^=0%I[e?5}$
2025-03-19 10:18:42 UTC	1369	IN	Data Raw: 8b fc fc 6e f2 40 dc c7 b2 6f 7a 29 14 91 91 af f1 a3 d0 43 85 c6 59 b7 02 94 67 4d fe 1d 3d 99 dd bf 33 01 17 3d 89 d9 6f 28 ec 62 a1 58 80 f7 92 6f 22 4f 40 83 00 f7 ed dc d3 90 27 a3 a8 ce 5d 78 1d 49 57 ee 9b 58 c8 0b f1 0c 45 85 37 79 2f 9e 3f 29 14 a4 51 81 7b 76 3e 8f e7 60 bf 0a bd ca 39 36 b2 51 02 25 44 e9 7a 4a f5 24 0b c1 24 e1 44 6b 92 db 85 98 6a c8 44 99 e3 dd 20 24 cb 32 cf 83 e3 f3 9f ff 7c a3 f0 24 49 ca c6 63 66 78 76 7e ca 6e 6d e1 61 82 f1 01 49 62 b0 33 59 42 94 93 39 0f 95 b6 90 b0 a1 aa 94 83 c6 92 a7 f1 08 51 4e b6 74 e5 b7 85 07 17 12 64 24 22 a9 78 b1 0a 51 76 32 76 68 5b f8 5c 76 44 92 ae 6c f4 57 bc e2 15 a6 73 92 3c e6 26 df 5d 48 80 31 8e 05 27 2a 4e a0 3c 20 51 c9 c7 ef 63 a7 b1 e5 13 9f f8 84 f9 2e 2e 40 5c 90 18 dc 9a 6a Data Ascii: n@oz)CYgM=3=o(bXo"O@']xIWXE7y/?)Q{v>`96Q%DzJ$$DkjD $2\|$Icfxv~nmaIb3YB9QNtd$"xQv2vh[\vDlWs<&]H1'*N< Qc..@\j
2025-03-19 10:18:42 UTC	1369	IN	Data Raw: de b3 12 11 a2 b1 04 14 d6 3b 92 7b 50 ee 0f dd a1 e3 f8 9b 17 85 68 74 2e 8b 20 e2 8b f2 1c 4a 6f 24 fe db 4b f1 53 21 ca fa 50 9c c7 9c 1a 34 36 90 23 a2 98 8d e4 33 8b 25 44 49 7e 92 9c a4 00 c7 1a cb d9 2e 0c 5f 61 15 a2 14 d7 51 09 4b 52 35 9a f8 b4 df ed 85 10 25 39 6b 63 98 5a be 29 9a 58 f5 82 63 3a d7 90 1b 60 88 c7 6c 94 40 09 51 12 7d 6c 4c 1e 7c 39 09 91 a0 74 77 c0 7f fc c7 7f 14 06 65 f6 5a 2c 79 41 77 5b ba b6 bb 0b 27 5d 2b f9 e5 3b a9 2c a2 f2 91 1d 99 93 a9 bb 70 12 67 47 e3 84 3c 36 36 16 56 88 92 48 fc ec 67 3f bb e4 5a eb 96 46 62 91 44 47 3c 42 94 04 15 27 10 5b 38 39 50 a9 f0 ce 77 be d3 fc 3b 5e 96 79 76 54 ba d9 f3 90 c7 43 21 15 b4 94 47 c7 b2 5a b1 e3 92 58 25 d9 4a 4b 1c 5d 42 a9 ae 23 2e ee 42 d5 2d e3 99 d2 1d 80 13 14 27 59 Data Ascii: ;{Pht. Jo$KS!P46#3%DI~._aQKR5%9kcZ)Xc:`l@Q}lL\|9tweZ,yAw[']+;,pgG<66VHg?ZFbDG<B'[89Pw;^yvTC!GZX%JK]B#.B-'Y
2025-03-19 10:18:42 UTC	1369	IN	Data Raw: 8d 2e 9c e8 a8 1c 65 bc 12 5a a3 f8 4e c6 d7 b4 ff 6d af e7 06 9c 64 11 89 8b f7 bc e7 3d 61 42 94 aa 51 92 20 4c 7c c4 c2 7b c9 84 73 40 73 62 67 1c d4 5c 13 a2 d6 9d 9f 87 60 ba fd 5b 97 42 0e 46 7e 0f ad 5b 54 b5 f2 77 d6 87 56 0b 12 65 3b 77 ee 34 75 66 e0 5f 4a c1 29 bf 67 8c c6 cf 7f fe f3 86 38 e5 81 c4 fe b7 c5 c1 aa 51 6f 34 42 94 df cf 36 25 f1 e9 8e 93 69 d5 39 ec b7 ee d8 9c 89 0e da 96 64 e2 b3 18 7a c0 ed 32 6f 17 09 fe 66 09 9c e8 3e eb b5 1e 6c 3f 86 4c 20 89 cd c2 83 22 63 c5 46 c7 6b e1 6f fc 0e ba 82 d8 6b a9 3e 7e f8 e1 87 c5 ad 2e 4d a4 10 b5 0b 1c c9 77 4b 5c 32 3e 2f ef cf 86 42 34 95 31 ef d7 b5 3c 9c 73 7c 90 60 60 21 f1 43 95 35 43 5e b0 c4 22 77 ac c2 97 63 90 18 93 94 e4 f5 d1 59 e6 49 c6 c4 4b aa 94 ac 8f 24 6b cb 44 fd 2f ba Data Ascii: .eZNmd=aBQ L\|{s@sbg\`[BF~[TwVe;w4uf_J)g8Qo4B6%i9dz2of>l?L "cFkok>~.MwK\2>/B41<s\|``!C5C^"wcYIK$kD/
2025-03-19 10:18:42 UTC	1369	IN	Data Raw: 13 cc 46 6e 0b 9f c5 b8 0f 24 5c e9 da ee 2e 74 db a2 cb 01 7f 63 5d dc 04 a7 fb 3a 32 f5 74 55 60 9d e9 62 60 dd e7 a3 71 e7 f3 a8 9a 25 79 4a 95 2e 63 bc 32 36 03 ad 0a 7e 07 73 ce 56 9f d0 e7 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 d7 1a 02 f4 5e ad ab ab 33 21 06 f2 bd 44 87 70 8b 0e 31 96 cf f5 a7 02 f9 e0 c1 83 61 a5 ab d7 ba 52 70 47 be 27 9f 0a 15 a0 f4 1e 26 97 63 b3 d1 d3 9b 2a 9b ea cd 20 09 51 aa cc 6d 18 a9 6c e0 1e 08 21 4a 76 9a c4 db b3 9f fd ec 6c 7c 83 3e 43 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 81 eb 06 01 e6 5d 61 b2 64 92 6e 24 ec b4 64 1f 01 e6 65 a1 57 2c c5 6a d6 eb d7 eb 5b 18 cb 9f ae e4 f4 cc d5 92 7b 04 16 16 16 8c 62 9a 82 bd 6c 95 40 08 51 66 e6 fc 87 7f f8 07 Data Ascii: Fn$\.tc]:2tU`b`q%yJ.c26~sV("("("(^3!Dp1aRpG'&c* Qml!Jvl\|>CPE@PE@PE@P]adn$deW,j[{bl@Qf
2025-03-19 10:18:42 UTC	1369	IN	Data Raw: 02 8a 80 22 a0 08 04 82 80 12 a2 81 c0 ae 2f 55 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 81 20 10 50 42 34 08 d4 f5 9d 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 10 08 02 4a 88 06 02 bb be 54 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 82 40 a0 60 11 25 88 17 eb 3b 15 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 c8 05 02 3f be ef 5e b9 f3 a9 4f cb c5 a3 f5 99 8a 80 22 70 1d 20 50 d0 50 53 6a 08 51 cb 8a 16 e0 4f 85 05 73 d2 d6 52 27 63 63 43 72 e1 c2 15 d9 b9 7b 5c ce e3 df bc 86 92 52 2d fe 22 e0 50 d6 05 52 28 0b d2 54 5f 2c 1b 36 ac 90 f9 c5 4a 79 f8 b1 ed 72 ee fc 45 fc 92 ff Data Ascii: "/UE@PE@PE@PE@P PB4"("("("("JTPE@PE@PE@PE@P@`%;E@PE@PE@PE@?^O"p PPSjQOsR'ccCr{\R-"PR(T_,6JyrE
2025-03-19 10:18:42 UTC	1369	IN	Data Raw: 31 32 4e e7 a4 aa b2 44 ba ba 7a cd f8 b8 8a 8d 55 ee bf 7e e9 ce 9b ff 55 08 42 b4 1a f5 e8 ed 1f c1 fa 7d d0 18 8c 3d d5 23 09 4b ea 99 44 c5 fa 57 5c 54 08 e3 5b 03 fe 5d 24 e3 c7 fc 27 47 22 6d 42 03 6f a1 74 76 75 e3 c0 7e 5e 4e 9f 3d ef eb 5e d7 ec f2 50 99 a2 82 19 19 19 ea 96 4b 57 e6 30 46 4f 05 26 0e 59 c4 dc c9 f5 96 46 ef ce ae 16 08 55 e6 30 7f 9e 09 ef 47 3d 0f ba ac 5c e8 10 69 4d 8d 75 d2 dc dc 2c 47 8f 9d 40 7d 48 de 7b ea ad 59 a9 41 ec 87 80 44 2f 2e 80 41 a1 db d4 65 ef be 43 f8 77 71 0e df b7 fc d1 ce 29 da ee b9 b9 b2 cc 49 7b 4b b5 b4 b4 b6 62 3c 4d 83 74 a4 d1 38 f8 33 1b eb 48 e3 6c 09 8c a5 3d 5d ed 52 57 df 04 d1 c7 21 b9 70 31 f8 76 0c 9f bf 30 f6 ba da eb 65 f5 9a 0d f2 83 fb 1e 81 81 e8 4a 1e f4 b1 a5 6d 6e a4 33 9c 37 b1 c7 Data Ascii: 12NDzU~UB}=#KDW\T[]$'G"mBotvu~^N=^PKW0FO&YFU0G=\iMu,G@}H{YAD/.AeCwq)I{Kb<Mt83Hl=]RW!p1v0eJmn37

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49731	52.222.232.39	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:18:41 UTC	694	OUT	GET /img/webflow-badge-icon-d2.89e12c322e.svg HTTP/1.1 Host: d3e54v103j8qbb.cloudfront.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://sso-robinhood-net--logi--auth.webflow.io/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:18:41 UTC	578	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 421 Connection: close Last-Modified: Thu, 21 Sep 2023 16:04:04 GMT X-Amz-Server-Side-Encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 19 Mar 2025 00:28:20 GMT Cache-Control: max-age=84600, must-revalidate Etag: "89e12c322e66c81213861fc9acb8b003" Via: 1.1 3d34e163f3f1a0c4a397ad818b79a810.cloudfront.net (CloudFront) Age: 35422 Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: uHz6KSGFwNIf1DB73nC8vl0ykVrh_N-rth28n7x33q9q6pIKhk_NcQ==
2025-03-19 10:18:41 UTC	421	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 32 36 22 20 68 65 69 67 68 74 3d 22 31 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 36 20 31 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 32 35 2e 36 35 20 30 4c 31 37 2e 34 36 35 34 20 31 36 48 39 2e 37 37 37 37 38 4c 31 33 2e 32 30 33 20 39 2e 33 36 38 39 32 48 31 33 2e 30 34 39 33 43 31 30 2e 32 32 33 35 20 31 33 2e 30 33 37 32 20 36 2e 30 30 37 33 38 20 31 35 2e 34 35 32 20 30 20 31 36 56 39 2e 34 36 30 36 38 43 30 20 39 2e 34 36 30 36 38 20 33 2e 38 34 33 Data Ascii: <svg width="26" height="16" viewBox="0 0 26 16" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M25.65 0L17.4654 16H9.77778L13.203 9.36892H13.0493C10.2235 13.0372 6.00738 15.452 0 16V9.46068C0 9.46068 3.843

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49730	52.222.232.39	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:18:41 UTC	694	OUT	GET /img/webflow-badge-text-d2.c82cec3b78.svg HTTP/1.1 Host: d3e54v103j8qbb.cloudfront.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://sso-robinhood-net--logi--auth.webflow.io/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:18:41 UTC	579	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 9912 Connection: close Last-Modified: Thu, 21 Sep 2023 16:04:31 GMT X-Amz-Server-Side-Encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 19 Mar 2025 05:10:32 GMT Cache-Control: max-age=84600, must-revalidate Etag: "c82cec3b78a2b2d267bbfe3c7e838068" Via: 1.1 387adc951beb5181d840dfb5d1f09488.cloudfront.net (CloudFront) Age: 18490 Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: VoczegXQ76Q6tKtvrtZJixhp9tyLW1h6ElasB_YeEheojp20oxiOgg==
2025-03-19 10:18:41 UTC	9912	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 31 38 22 20 68 65 69 67 68 74 3d 22 31 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 31 38 20 31 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 30 2e 35 32 35 30 32 34 20 30 2e 38 39 36 34 38 34 48 33 2e 30 35 34 33 32 4c 36 2e 30 30 37 37 36 20 38 2e 32 36 36 32 32 4c 38 2e 38 39 39 30 35 20 30 2e 38 39 36 34 38 34 48 31 31 2e 33 35 33 31 56 31 31 48 39 2e 34 37 33 32 37 56 33 2e 37 39 39 34 39 4c 36 2e 36 36 33 37 20 31 31 48 35 2e 31 38 37 31 33 4c 32 2e 33 38 34 34 20 33 2e 39 32 30 37 37 56 31 31 48 30 2e 35 32 35 30 32 34 56 30 2e 38 39 36 34 38 34 5a 22 20 66 69 6c 6c 3d Data Ascii: <svg width="118" height="12" viewBox="0 0 118 12" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M0.525024 0.896484H3.05432L6.00776 8.26622L8.89905 0.896484H11.3531V11H9.47327V3.79949L6.6637 11H5.18713L2.3844 3.92077V11H0.525024V0.896484Z" fill=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49735	104.18.161.117	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:18:42 UTC	711	OUT	GET /678a1feff5acbcd11712c8a8/678a201c03cb6c53a063f37d_dgdgdg.png HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://sso-robinhood-net--logi--auth.webflow.io/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:18:42 UTC	676	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 10:18:42 GMT Content-Type: image/png Content-Length: 803 Connection: close x-amz-id-2: NU1MLvQevT3+p9U6hQCT/JSofqresNRDABVE4KYW3vgT8GHnHmGt3lQUQO5aOZKYuwm25z5cz4wEF/CN5UiWkvZLCkl71iZtgH4UqqzZ3rk= x-amz-request-id: 1JPKARKY5AJHKJMN Last-Modified: Fri, 17 Jan 2025 09:17:18 GMT ETag: "c8f0cef2d937562902daa9c3c0b67ca3" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, must-revalidate x-amz-version-id: IrW7Iq3NNuDt.f0T3YoIveFwu4Fpu1aN CF-Cache-Status: HIT Age: 135779 Accept-Ranges: bytes Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 922c3a2d18be1d88-FRA alt-svc: h3=":443"; ma=86400
2025-03-19 10:18:42 UTC	693	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 02 b8 49 44 41 54 58 47 ed 96 4d 68 13 41 18 86 df 4d 76 37 a9 5b aa 97 22 62 10 d4 0a 0a 82 0a 96 16 2f fe 54 4b 82 20 52 d4 8a 8a 54 84 18 fc ab 20 82 82 5e 94 d6 fa 47 05 ab 54 ad 07 c1 a2 a2 d5 7a d0 83 15 a9 f4 a2 34 45 bd e8 21 7a 10 ad 5a 4b 6d 4b ac f9 d9 64 d7 6f 93 8d d9 16 93 9d 4d 23 b9 f4 81 65 33 33 61 e6 9d f7 fb be 99 e5 fc 2a 54 14 10 9b fe 2e 18 53 02 0a 2e 20 6f 49 18 8f 01 df 3f d9 f0 73 80 83 e0 00 5c f3 15 14 cf 30 9f 3a 2f 02 7a 3a 05 5c 3d e6 40 70 98 03 c7 25 fb 38 f2 f6 e0 c5 30 Data Ascii: PNGIHDR szzsRGBgAMAapHYsodIDATXGMhAMv7["b/TK RT ^GTz4E!zZKmKdoM#e33a*T.S. oI?s\0:/z:\=@p%80
2025-03-19 10:18:42 UTC	110	IN	Data Raw: 46 eb ab 24 78 ea a2 a8 aa 8d 21 4a 9b 95 48 40 be 30 0d c1 37 ca f4 91 41 0e 6b b7 ca f4 a5 a3 e6 75 71 0d 53 01 2f 9f f0 a8 de 21 33 9f 6c 56 31 15 d0 db c5 c3 bd d3 fc 56 cb 95 ec 39 40 23 ef fd 76 2c 2a b7 7e c0 b0 92 97 8f d2 c9 c0 7c 10 fd 2f a6 04 14 58 00 f0 07 6b fc e1 8a c3 30 56 c5 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: F$x!JH@07AkuqS/!3lV1V9@#v,*~\|/Xk0VIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49736	52.222.232.47	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:18:42 UTC	433	OUT	GET /img/webflow-badge-icon-d2.89e12c322e.svg HTTP/1.1 Host: d3e54v103j8qbb.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:18:42 UTC	578	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 421 Connection: close Last-Modified: Thu, 21 Sep 2023 16:04:04 GMT X-Amz-Server-Side-Encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 19 Mar 2025 00:28:20 GMT Cache-Control: max-age=84600, must-revalidate Etag: "89e12c322e66c81213861fc9acb8b003" Via: 1.1 ce765e91525a836efb6bc0a409334a5e.cloudfront.net (CloudFront) Age: 35423 Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: PZ3rBh7G4IH4OBSa3lb3Z1VE_kFwKJE_4GUEa5Pms9oeosjG2lJlsw==
2025-03-19 10:18:42 UTC	421	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 32 36 22 20 68 65 69 67 68 74 3d 22 31 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 36 20 31 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 32 35 2e 36 35 20 30 4c 31 37 2e 34 36 35 34 20 31 36 48 39 2e 37 37 37 37 38 4c 31 33 2e 32 30 33 20 39 2e 33 36 38 39 32 48 31 33 2e 30 34 39 33 43 31 30 2e 32 32 33 35 20 31 33 2e 30 33 37 32 20 36 2e 30 30 37 33 38 20 31 35 2e 34 35 32 20 30 20 31 36 56 39 2e 34 36 30 36 38 43 30 20 39 2e 34 36 30 36 38 20 33 2e 38 34 33 Data Ascii: <svg width="26" height="16" viewBox="0 0 26 16" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M25.65 0L17.4654 16H9.77778L13.203 9.36892H13.0493C10.2235 13.0372 6.00738 15.452 0 16V9.46068C0 9.46068 3.843

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49737	52.222.232.47	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:18:42 UTC	433	OUT	GET /img/webflow-badge-text-d2.c82cec3b78.svg HTTP/1.1 Host: d3e54v103j8qbb.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:18:42 UTC	579	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 9912 Connection: close Last-Modified: Thu, 21 Sep 2023 16:04:31 GMT X-Amz-Server-Side-Encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 19 Mar 2025 05:10:32 GMT Cache-Control: max-age=84600, must-revalidate Etag: "c82cec3b78a2b2d267bbfe3c7e838068" Via: 1.1 e59bea79ab5f15feda92136bc7b74158.cloudfront.net (CloudFront) Age: 18491 Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: kkt_YNoW4G7cl3-lXhNIrz7y2rL5PLyGk3faHhGio_Q43WM8bIxW4g==
2025-03-19 10:18:42 UTC	9912	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 31 38 22 20 68 65 69 67 68 74 3d 22 31 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 31 38 20 31 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 30 2e 35 32 35 30 32 34 20 30 2e 38 39 36 34 38 34 48 33 2e 30 35 34 33 32 4c 36 2e 30 30 37 37 36 20 38 2e 32 36 36 32 32 4c 38 2e 38 39 39 30 35 20 30 2e 38 39 36 34 38 34 48 31 31 2e 33 35 33 31 56 31 31 48 39 2e 34 37 33 32 37 56 33 2e 37 39 39 34 39 4c 36 2e 36 36 33 37 20 31 31 48 35 2e 31 38 37 31 33 4c 32 2e 33 38 34 34 20 33 2e 39 32 30 37 37 56 31 31 48 30 2e 35 32 35 30 32 34 56 30 2e 38 39 36 34 38 34 5a 22 20 66 69 6c 6c 3d Data Ascii: <svg width="118" height="12" viewBox="0 0 118 12" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M0.525024 0.896484H3.05432L6.00776 8.26622L8.89905 0.896484H11.3531V11H9.47327V3.79949L6.6637 11H5.18713L2.3844 3.92077V11H0.525024V0.896484Z" fill=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49738	104.18.161.117	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:18:42 UTC	555	OUT	GET /678a1feff5acbcd11712c8a8/678a200b066780736b751886_Screenshot%202025-01-08%20at%2013-39-14%20Commission-free%20Stock%20Trading%20%26%20Investing%20App%20Robinhood.png HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:18:42 UTC	689	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 10:18:42 GMT Content-Type: image/png Content-Length: 544845 Connection: close x-amz-id-2: hwGJyIot5/XDtoRc+6CTQIijw/2lcjD5EECn+MewtdgRshbzyMHfwxjtrh3A5es6dpuW4zjjIwQ= x-amz-request-id: WBVV6P9QATJ8198G Last-Modified: Fri, 17 Jan 2025 09:17:01 GMT ETag: "35baa4c2960f7adaa6f26cc982435555" x-amz-storage-class: INTELLIGENT_TIERING x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, must-revalidate x-amz-version-id: heQ9IaR7hPBgW5TI5etPh9Rw3NF1.tNb CF-Cache-Status: HIT Age: 135779 Accept-Ranges: bytes Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 922c3a2db9a5dc78-FRA alt-svc: h3=":443"; ma=86400
2025-03-19 10:18:42 UTC	680	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 44 00 00 03 00 08 06 00 00 00 ec 65 6d 17 00 00 20 00 49 44 41 54 78 5e ec 7d 07 80 64 69 55 f5 ed 9c 73 ce b9 a7 27 ef cc 6c 64 59 d8 95 20 48 10 04 89 06 04 03 a2 80 28 08 fe 80 88 22 4a 10 15 09 8a 02 8a a0 88 04 49 0a 88 0a cb c2 e6 9d dd 9d 9c 43 4f ec ee e9 c9 a9 e3 7f ce f7 ea ab 7a 5d 5d e1 55 7a af 66 e6 7e b2 ee ec d4 0b df 3b 5f 3e f7 dc 7b 0b 44 64 11 ff 68 51 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 e0 ba 47 a0 40 09 d1 eb be 8d f5 03 15 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 20 84 80 12 a2 da 15 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 Data Ascii: PNGIHDRDem IDATx^}diUs'ldY H("JICOz]]Uzf~;_>{DdhQE@PE@PE@PE@PEG@E@PE@PE@PE@PE E@PE@PE@PE@P
2025-03-19 10:18:42 UTC	1369	IN	Data Raw: 9f 90 cf 7d ee 73 81 7c d1 fb df ff 7e 79 ee 73 9f 2b 95 95 95 81 bc ff 5a 79 e9 c5 8b 17 e5 5b df fa 96 fc e1 1f fe a1 af 55 56 42 d4 57 b8 f5 65 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 a4 8f 00 d5 a0 6f 7b db db e4 7b df fb 9e 7c e4 23 1f 91 83 07 0f a6 ff b0 eb f8 4e 2a 32 df fa d6 b7 ca d3 9e f6 34 21 39 f9 85 2f 7c c1 97 af e5 bb 5e f8 c2 17 1a a2 5a 8b 77 04 a8 1a fd f2 97 bf 2c ef 7d ef 7b bd df 94 c1 95 4a 88 66 00 9e de aa 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 1f 08 d0 0d fe 9b df fc a6 1c 39 72 44 de fe f6 b7 2b 11 ea 11 f4 e1 e1 61 f9 e0 07 3f 28 d5 d5 d5 f2 d2 97 be 54 ce 9d 3b e7 f1 ce d4 2e eb ee ee 96 6f 7c e3 1b 52 55 55 95 da 8d 7a f5 12 04 4e 9f 3e 6d 08 e5 89 Data Ascii: }s\|~ys+Zy[UVBWe"("("("o{{\|#N*24!9/\|^Zw,}{Jf("("("(9rD+a?(T;.o\|RUUzN>m
2025-03-19 10:18:42 UTC	1369	IN	Data Raw: c7 3b df f9 4e f3 dc 0f 7d e8 43 31 49 db 78 2f 55 42 d4 73 73 e4 dd 85 24 8d bf f2 95 af c8 ff fb 7f ff 2f ef ea a6 15 ca 7f 04 3e f6 b1 8f c9 9d 77 de b9 cc 20 14 74 cd f3 b5 5e a9 e0 f2 fb bf ff fb f2 c3 1f fe 50 1e 7c f0 c1 65 b7 d1 12 cc 05 f5 e7 7e ee e7 52 79 64 5e 5c 9b 8d ba ff da af fd 9a bc f5 ad 6f 35 86 be 5c 26 2a bc 16 e7 c7 6c e0 9b 17 1d 45 2b a1 08 28 02 8a 80 22 a0 08 04 88 00 63 5e 52 54 43 d1 d3 aa 55 ab cc 7e e3 e4 c9 93 f2 37 7f f3 37 72 f6 ec d9 00 6b 76 6d bc fa e6 9b 6f 36 67 cc be be be 6b a3 c2 d7 70 2d 8b 8a 8a 4c 06 f3 b1 b1 b1 98 9e c8 b1 3e ed 85 2f 7c a1 e1 7c b4 f8 8f 00 b9 c1 6c 85 90 c8 0b 42 94 aa cb b7 bd ed 6d 61 24 4f 9c 38 61 26 ce 5f ff f5 5f 97 6d db b6 19 89 38 3f 9a 16 25 ba c4 9f 39 73 26 26 ea 96 10 65 60 dc Data Ascii: ;N}C1Ix/UBss$/>w t^P\|e~Ryd^\o5\&*lE+("c^RTCU~77rkvmo6gkp-L>/\|\|lBma$O8a&__m8?%9s&&e`
2025-03-19 10:18:42 UTC	1369	IN	Data Raw: 73 48 54 32 2b 5c 7b 7b bb 21 74 29 79 e7 7f f3 bb e9 5e 4f 95 2a dd f8 39 c1 5b 42 94 13 03 89 d0 99 99 19 69 6d 6d 35 ef 21 41 c9 3a 5b 12 93 98 90 d4 62 c2 29 86 16 20 a9 cb b8 2c e7 cf 9f 97 9f f9 99 9f 31 16 38 96 d5 ab 57 0b eb dc d6 d6 26 93 93 93 42 e5 ad 4d 3a f5 a6 37 bd c9 a8 00 59 48 2c b0 1d 48 ae d2 85 94 cf 5c b9 72 a5 21 eb 38 21 dc 48 84 28 17 1e e2 6f 0f 3c c4 92 fd 84 09 bb d8 5e 3f fd d3 3f 6d 30 73 13 86 fc 33 15 83 c4 91 7d 96 24 b2 25 0e 49 a6 b1 4f 53 59 c9 42 52 8d cf 88 56 87 45 1f fa 52 ad 07 09 23 4b d2 f1 3d ee 3a b8 07 0d bf 87 6a 3b 2a 5b dd 8a 52 7b f8 64 02 33 f6 41 b7 72 6d f3 e6 cd 4b 08 1a fe 4e b5 b6 fd 2e aa f6 48 c6 33 64 80 5d e0 a8 74 23 06 5e c8 1d d6 8f 0b 3d 09 30 8e 25 8e 49 5b a8 ca 65 3f a5 a2 35 a8 ec 7d 24 Data Ascii: sHT2+\{{!t)y^O9[Bimm5!A:[b) ,18W&BM:7YH,H\r!8!H(o<^??m0s3}$%IOSYBRVER#K=:j;[R{d3ArmKN.H3d]t#^=0%I[e?5}$
2025-03-19 10:18:42 UTC	1369	IN	Data Raw: 8b fc fc 6e f2 40 dc c7 b2 6f 7a 29 14 91 91 af f1 a3 d0 43 85 c6 59 b7 02 94 67 4d fe 1d 3d 99 dd bf 33 01 17 3d 89 d9 6f 28 ec 62 a1 58 80 f7 92 6f 22 4f 40 83 00 f7 ed dc d3 90 27 a3 a8 ce 5d 78 1d 49 57 ee 9b 58 c8 0b f1 0c 45 85 37 79 2f 9e 3f 29 14 a4 51 81 7b 76 3e 8f e7 60 bf 0a bd ca 39 36 b2 51 02 25 44 e9 7a 4a f5 24 0b c1 24 e1 44 6b 92 db 85 98 6a c8 44 99 e3 dd 20 24 cb 32 cf 83 e3 f3 9f ff 7c a3 f0 24 49 ca c6 63 66 78 76 7e ca 6e 6d e1 61 82 f1 01 49 62 b0 33 59 42 94 93 39 0f 95 b6 90 b0 a1 aa 94 83 c6 92 a7 f1 08 51 4e b6 74 e5 b7 85 07 17 12 64 24 22 a9 78 b1 0a 51 76 32 76 68 5b f8 5c 76 44 92 ae 6c f4 57 bc e2 15 a6 73 92 3c e6 26 df 5d 48 80 31 8e 05 27 2a 4e a0 3c 20 51 c9 c7 ef 63 a7 b1 e5 13 9f f8 84 f9 2e 2e 40 5c 90 18 dc 9a 6a Data Ascii: n@oz)CYgM=3=o(bXo"O@']xIWXE7y/?)Q{v>`96Q%DzJ$$DkjD $2\|$Icfxv~nmaIb3YB9QNtd$"xQv2vh[\vDlWs<&]H1'*N< Qc..@\j
2025-03-19 10:18:42 UTC	1369	IN	Data Raw: de b3 12 11 a2 b1 04 14 d6 3b 92 7b 50 ee 0f dd a1 e3 f8 9b 17 85 68 74 2e 8b 20 e2 8b f2 1c 4a 6f 24 fe db 4b f1 53 21 ca fa 50 9c c7 9c 1a 34 36 90 23 a2 98 8d e4 33 8b 25 44 49 7e 92 9c a4 00 c7 1a cb d9 2e 0c 5f 61 15 a2 14 d7 51 09 4b 52 35 9a f8 b4 df ed 85 10 25 39 6b 63 98 5a be 29 9a 58 f5 82 63 3a d7 90 1b 60 88 c7 6c 94 40 09 51 12 7d 6c 4c 1e 7c 39 09 91 a0 74 77 c0 7f fc c7 7f 14 06 65 f6 5a 2c 79 41 77 5b ba b6 bb 0b 27 5d 2b f9 e5 3b a9 2c a2 f2 91 1d 99 93 a9 bb 70 12 67 47 e3 84 3c 36 36 16 56 88 92 48 fc ec 67 3f bb e4 5a eb 96 46 62 91 44 47 3c 42 94 04 15 27 10 5b 38 39 50 a9 f0 ce 77 be d3 fc 3b 5e 96 79 76 54 ba d9 f3 90 c7 43 21 15 b4 94 47 c7 b2 5a b1 e3 92 58 25 d9 4a 4b 1c 5d 42 a9 ae 23 2e ee 42 d5 2d e3 99 d2 1d 80 13 14 27 59 Data Ascii: ;{Pht. Jo$KS!P46#3%DI~._aQKR5%9kcZ)Xc:`l@Q}lL\|9tweZ,yAw[']+;,pgG<66VHg?ZFbDG<B'[89Pw;^yvTC!GZX%JK]B#.B-'Y
2025-03-19 10:18:42 UTC	1369	IN	Data Raw: 8d 2e 9c e8 a8 1c 65 bc 12 5a a3 f8 4e c6 d7 b4 ff 6d af e7 06 9c 64 11 89 8b f7 bc e7 3d 61 42 94 aa 51 92 20 4c 7c c4 c2 7b c9 84 73 40 73 62 67 1c d4 5c 13 a2 d6 9d 9f 87 60 ba fd 5b 97 42 0e 46 7e 0f ad 5b 54 b5 f2 77 d6 87 56 0b 12 65 3b 77 ee 34 75 66 e0 5f 4a c1 29 bf 67 8c c6 cf 7f fe f3 86 38 e5 81 c4 fe b7 c5 c1 aa 51 6f 34 42 94 df cf 36 25 f1 e9 8e 93 69 d5 39 ec b7 ee d8 9c 89 0e da 96 64 e2 b3 18 7a c0 ed 32 6f 17 09 fe 66 09 9c e8 3e eb b5 1e 6c 3f 86 4c 20 89 cd c2 83 22 63 c5 46 c7 6b e1 6f fc 0e ba 82 d8 6b a9 3e 7e f8 e1 87 c5 ad 2e 4d a4 10 b5 0b 1c c9 77 4b 5c 32 3e 2f ef cf 86 42 34 95 31 ef d7 b5 3c 9c 73 7c 90 60 60 21 f1 43 95 35 43 5e b0 c4 22 77 ac c2 97 63 90 18 93 94 e4 f5 d1 59 e6 49 c6 c4 4b aa 94 ac 8f 24 6b cb 44 fd 2f ba Data Ascii: .eZNmd=aBQ L\|{s@sbg\`[BF~[TwVe;w4uf_J)g8Qo4B6%i9dz2of>l?L "cFkok>~.MwK\2>/B41<s\|``!C5C^"wcYIK$kD/
2025-03-19 10:18:42 UTC	1369	IN	Data Raw: 13 cc 46 6e 0b 9f c5 b8 0f 24 5c e9 da ee 2e 74 db a2 cb 01 7f 63 5d dc 04 a7 fb 3a 32 f5 74 55 60 9d e9 62 60 dd e7 a3 71 e7 f3 a8 9a 25 79 4a 95 2e 63 bc 32 36 03 ad 0a 7e 07 73 ce 56 9f d0 e7 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 d7 1a 02 f4 5e ad ab ab 33 21 06 f2 bd 44 87 70 8b 0e 31 96 cf f5 a7 02 f9 e0 c1 83 61 a5 ab d7 ba 52 70 47 be 27 9f 0a 15 a0 f4 1e 26 97 63 b3 d1 d3 9b 2a 9b ea cd 20 09 51 aa cc 6d 18 a9 6c e0 1e 08 21 4a 76 9a c4 db b3 9f fd ec 6c 7c 83 3e 43 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 81 eb 06 01 e6 5d 61 b2 64 92 6e 24 ec b4 64 1f 01 e6 65 a1 57 2c c5 6a d6 eb d7 eb 5b 18 cb 9f ae e4 f4 cc d5 92 7b 04 16 16 16 8c 62 9a 82 bd 6c 95 40 08 51 66 e6 fc 87 7f f8 07 Data Ascii: Fn$\.tc]:2tU`b`q%yJ.c26~sV("("("(^3!Dp1aRpG'&c* Qml!Jvl\|>CPE@PE@PE@P]adn$deW,j[{bl@Qf
2025-03-19 10:18:42 UTC	1369	IN	Data Raw: 02 8a 80 22 a0 08 04 82 80 12 a2 81 c0 ae 2f 55 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 81 20 10 50 42 34 08 d4 f5 9d 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 10 08 02 4a 88 06 02 bb be 54 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 82 40 a0 60 11 25 88 17 eb 3b 15 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 c8 05 02 3f be ef 5e b9 f3 a9 4f cb c5 a3 f5 99 8a 80 22 70 1d 20 50 d0 50 53 6a 08 51 cb 8a 16 e0 4f 85 05 73 d2 d6 52 27 63 63 43 72 e1 c2 15 d9 b9 7b 5c ce e3 df bc 86 92 52 2d fe 22 e0 50 d6 05 52 28 0b d2 54 5f 2c 1b 36 ac 90 f9 c5 4a 79 f8 b1 ed 72 ee fc 45 fc 92 ff Data Ascii: "/UE@PE@PE@PE@P PB4"("("("("JTPE@PE@PE@PE@P@`%;E@PE@PE@PE@?^O"p PPSjQOsR'ccCr{\R-"PR(T_,6JyrE
2025-03-19 10:18:42 UTC	1369	IN	Data Raw: 31 32 4e e7 a4 aa b2 44 ba ba 7a cd f8 b8 8a 8d 55 ee bf 7e e9 ce 9b ff 55 08 42 b4 1a f5 e8 ed 1f c1 fa 7d d0 18 8c 3d d5 23 09 4b ea 99 44 c5 fa 57 5c 54 08 e3 5b 03 fe 5d 24 e3 c7 fc 27 47 22 6d 42 03 6f a1 74 76 75 e3 c0 7e 5e 4e 9f 3d ef eb 5e d7 ec f2 50 99 a2 82 19 19 19 ea 96 4b 57 e6 30 46 4f 05 26 0e 59 c4 dc c9 f5 96 46 ef ce ae 16 08 55 e6 30 7f 9e 09 ef 47 3d 0f ba ac 5c e8 10 69 4d 8d 75 d2 dc dc 2c 47 8f 9d 40 7d 48 de 7b ea ad 59 a9 41 ec 87 80 44 2f 2e 80 41 a1 db d4 65 ef be 43 f8 77 71 0e df b7 fc d1 ce 29 da ee b9 b9 b2 cc 49 7b 4b b5 b4 b4 b6 62 3c 4d 83 74 a4 d1 38 f8 33 1b eb 48 e3 6c 09 8c a5 3d 5d ed 52 57 df 04 d1 c7 21 b9 70 31 f8 76 0c 9f bf 30 f6 ba da eb 65 f5 9a 0d f2 83 fb 1e 81 81 e8 4a 1e f4 b1 a5 6d 6e a4 33 9c 37 b1 c7 Data Ascii: 12NDzU~UB}=#KDW\T[]$'G"mBotvu~^N=^PKW0FO&YFU0G=\iMu,G@}H{YAD/.AeCwq)I{Kb<Mt83Hl=]RW!p1v0eJmn37

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49739	104.18.161.117	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:18:42 UTC	450	OUT	GET /678a1feff5acbcd11712c8a8/678a201c03cb6c53a063f37d_dgdgdg.png HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:18:42 UTC	676	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 10:18:42 GMT Content-Type: image/png Content-Length: 803 Connection: close x-amz-id-2: NU1MLvQevT3+p9U6hQCT/JSofqresNRDABVE4KYW3vgT8GHnHmGt3lQUQO5aOZKYuwm25z5cz4wEF/CN5UiWkvZLCkl71iZtgH4UqqzZ3rk= x-amz-request-id: 1JPKARKY5AJHKJMN Last-Modified: Fri, 17 Jan 2025 09:17:18 GMT ETag: "c8f0cef2d937562902daa9c3c0b67ca3" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, must-revalidate x-amz-version-id: IrW7Iq3NNuDt.f0T3YoIveFwu4Fpu1aN CF-Cache-Status: HIT Age: 135779 Accept-Ranges: bytes Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 922c3a2dcde203e0-FRA alt-svc: h3=":443"; ma=86400
2025-03-19 10:18:42 UTC	693	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 02 b8 49 44 41 54 58 47 ed 96 4d 68 13 41 18 86 df 4d 76 37 a9 5b aa 97 22 62 10 d4 0a 0a 82 0a 96 16 2f fe 54 4b 82 20 52 d4 8a 8a 54 84 18 fc ab 20 82 82 5e 94 d6 fa 47 05 ab 54 ad 07 c1 a2 a2 d5 7a d0 83 15 a9 f4 a2 34 45 bd e8 21 7a 10 ad 5a 4b 6d 4b ac f9 d9 64 d7 6f 93 8d d9 16 93 9d 4d 23 b9 f4 81 65 33 33 61 e6 9d f7 fb be 99 e5 fc 2a 54 14 10 9b fe 2e 18 53 02 0a 2e 20 6f 49 18 8f 01 df 3f d9 f0 73 80 83 e0 00 5c f3 15 14 cf 30 9f 3a 2f 02 7a 3a 05 5c 3d e6 40 70 98 03 c7 25 fb 38 f2 f6 e0 c5 30 Data Ascii: PNGIHDR szzsRGBgAMAapHYsodIDATXGMhAMv7["b/TK RT ^GTz4E!zZKmKdoM#e33a*T.S. oI?s\0:/z:\=@p%80
2025-03-19 10:18:42 UTC	110	IN	Data Raw: 46 eb ab 24 78 ea a2 a8 aa 8d 21 4a 9b 95 48 40 be 30 0d c1 37 ca f4 91 41 0e 6b b7 ca f4 a5 a3 e6 75 71 0d 53 01 2f 9f f0 a8 de 21 33 9f 6c 56 31 15 d0 db c5 c3 bd d3 fc 56 cb 95 ec 39 40 23 ef fd 76 2c 2a b7 7e c0 b0 92 97 8f d2 c9 c0 7c 10 fd 2f a6 04 14 58 00 f0 07 6b fc e1 8a c3 30 56 c5 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: F$x!JH@07AkuqS/!3lV1V9@#v,*~\|/Xk0VIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49721	142.250.186.36	443	7108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:18:45 UTC	575	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiJo8sBCIWgzQEI9s/OAQjI0c4BCIDWzgEI0uDOAQiv5M4BCOLkzgEIi+XOAQ== Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:18:45 UTC	1303	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 10:18:45 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-lW-1lIXQjwBWC2eYwJpSZA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Downlink Accept-CH: RTT Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-19 10:18:45 UTC	75	IN	Data Raw: 31 34 64 64 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 6a 6f 6e 61 73 20 6f 6d 6c 69 6e 22 2c 22 6e c3 bc 72 6e 62 65 72 67 20 6e 65 75 65 73 20 73 74 61 64 69 6f 6e 22 2c 22 62 61 6d 62 75 20 6c 61 62 20 68 32 64 22 2c 22 6f 6e Data Ascii: 14dd)]}'["",["jonas omlin","nrnberg neues stadion","bambu lab h2d","on
2025-03-19 10:18:45 UTC	1378	IN	Data Raw: 65 20 75 69 22 2c 22 74 61 72 69 66 76 65 72 68 61 6e 64 6c 75 6e 67 65 6e 20 c3 b6 66 66 65 6e 74 6c 69 63 68 65 6e 20 64 69 65 6e 73 74 22 2c 22 68 6f 72 73 74 20 6c 69 63 68 74 65 72 20 62 61 72 65 73 20 66 c3 bc 72 20 72 61 72 65 73 22 2c 22 70 65 74 65 72 20 67 75 6c c3 a1 63 73 69 22 2c 22 62 79 64 20 61 6b 74 69 65 6e 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 67 72 6f 75 70 73 69 6e 66 6f 22 3a 22 43 69 41 49 6b 6b 34 53 47 77 6f 58 56 48 4a 6c 62 6d 52 7a 49 47 4a 6c 61 53 42 54 64 57 4e 6f 59 57 35 6d 63 6d 46 6e 5a 57 34 6f 43 67 Data Ascii: e ui","tarifverhandlungen ffentlichen dienst","horst lichter bares fr rares","peter gulcsi","byd aktien"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"CiAIkk4SGwoXVHJlbmRzIGJlaSBTdWNoYW5mcmFnZW4oCg
2025-03-19 10:18:45 UTC	1378	IN	Data Raw: 54 65 55 39 78 55 47 78 59 56 53 73 76 4d 30 39 4c 57 47 45 32 61 6e 4a 78 4d 48 55 30 59 33 4e 6a 62 6a 67 32 54 32 35 55 59 55 59 7a 54 45 74 35 54 45 70 42 4e 48 6c 6a 5a 47 68 74 63 47 4a 52 63 32 35 56 53 46 70 53 56 6c 4a 6c 56 45 78 68 64 31 4e 55 56 46 4a 74 55 6b 46 42 54 6d 64 50 54 54 56 4a 53 44 67 32 55 54 6c 51 62 32 78 78 4d 58 68 6a 56 45 52 4c 62 33 64 42 53 48 4a 58 4d 31 42 33 51 33 42 51 63 46 55 79 61 56 4e 54 64 58 55 78 4f 57 67 33 53 45 70 34 56 6b 78 43 59 6c 68 72 54 7a 46 70 56 6d 74 56 4f 57 70 74 64 57 55 7a 4d 31 64 48 4d 6c 4a 57 64 47 39 5a 52 55 6c 50 55 47 78 56 61 32 34 33 4d 44 4d 32 56 6a 5a 6e 64 6e 52 5a 64 56 4a 61 4d 6e 68 49 61 55 31 4e 61 6b 70 33 51 6c 55 33 56 46 4a 5a 63 6b 55 35 53 46 46 6b 55 47 68 75 5a 6b Data Ascii: TeU9xUGxYVSsvM09LWGE2anJxMHU0Y3Njbjg2T25UYUYzTEt5TEpBNHljZGhtcGJRc25VSFpSVlJlVExhd1NUVFJtUkFBTmdPTTVJSDg2UTlQb2xxMXhjVERLb3dBSHJXM1B3Q3BQcFUyaVNTdXUxOWg3SEp4VkxCYlhrTzFpVmtVOWptdWUzM1dHMlJWdG9ZRUlPUGxVa243MDM2VjZndnRZdVJaMnhIaU1Nakp3QlU3VFJZckU5SFFkUGhuZk
2025-03-19 10:18:45 UTC	1378	IN	Data Raw: 33 46 50 55 45 74 79 53 32 5a 6f 52 56 59 7a 4d 6d 59 76 4f 57 73 39 4f 67 74 4b 62 32 35 68 63 79 42 50 62 57 78 70 62 6b 6f 48 49 7a 51 79 4e 44 49 30 4d 6c 49 36 5a 33 4e 66 63 33 4e 77 50 57 56 4b 65 6d 6f 30 64 46 5a 51 4d 58 70 6a 4d 46 52 44 62 7a 4e 79 55 32 63 79 65 6d 6b 77 4d 31 6c 51 56 47 6c 36 63 33 4a 51 55 33 6c 34 56 33 6c 4e 58 30 35 35 59 33 64 45 51 55 67 79 64 55 4e 54 4f 48 41 47 63 41 63 5c 75 30 30 33 64 22 2c 22 7a 6c 22 3a 31 30 30 30 32 7d 2c 7b 22 7a 6c 22 3a 31 30 30 30 32 7d 2c 7b 22 7a 6c 22 3a 31 30 30 30 32 7d 2c 7b 22 7a 6c 22 3a 31 30 30 30 32 7d 2c 7b 22 7a 6c 22 3a 31 30 30 30 32 7d 2c 7b 22 67 6f 6f 67 6c 65 3a 65 6e 74 69 74 79 69 6e 66 6f 22 3a 22 43 67 77 76 5a 79 38 78 63 54 5a 73 4e 44 52 32 65 57 67 53 48 30 4a Data Ascii: 3FPUEtyS2ZoRVYzMmYvOWs9OgtKb25hcyBPbWxpbkoHIzQyNDI0MlI6Z3Nfc3NwPWVKemo0dFZQMXpjMFRDbzNyU2cyemkwM1lQVGl6c3JQU3l4V3lNX055Y3dEQUgydUNTOHAGcAc\u003d","zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"google:entityinfo":"CgwvZy8xcTZsNDR2eWgSH0J
2025-03-19 10:18:45 UTC	1140	IN	Data Raw: 46 34 57 55 52 76 59 30 5a 73 61 31 64 4b 52 46 6c 45 57 6d 49 79 4e 57 52 6a 51 7a 4a 71 61 57 46 32 52 55 56 4c 54 57 74 77 56 55 31 48 55 54 64 59 64 44 46 49 56 47 4a 47 64 57 31 78 62 47 78 6f 52 57 4a 68 55 79 39 4a 4d 6b 64 33 51 54 59 30 52 7a 68 4c 4d 48 70 32 61 58 6c 7a 59 58 49 30 5a 33 46 35 4e 30 56 70 54 6e 56 35 56 57 59 33 55 55 39 5a 4b 33 51 34 55 33 6c 59 61 55 49 32 51 58 4a 45 56 57 46 75 63 48 56 73 64 57 4e 6d 63 44 56 6c 56 30 4a 46 63 56 5a 57 56 6a 4a 30 5a 58 52 4d 56 55 64 44 55 6d 31 72 54 57 39 70 57 57 39 4d 61 7a 4d 7a 64 47 4a 47 55 6d 35 34 62 48 56 4d 61 32 74 36 64 56 56 77 4d 48 70 52 52 6b 6b 30 51 58 52 4f 5a 6a 64 54 55 45 35 68 51 6c 70 68 5a 56 4a 55 53 57 39 31 63 6e 46 6b 61 6d 64 51 56 54 41 35 54 30 6f 31 52 Data Ascii: F4WURvY0Zsa1dKRFlEWmIyNWRjQzJqaWF2RUVLTWtwVU1HUTdYdDFIVGJGdW1xbGxoRWJhUy9JMkd3QTY0RzhLMHp2aXlzYXI0Z3F5N0VpTnV5VWY3UU9ZK3Q4U3lYaUI2QXJEVWFucHVsdWNmcDVlV0JFcVZWVjJ0ZXRMVUdDUm1rTW9pWW9MazMzdGJGUm54bHVMa2t6dVVwMHpRRkk0QXROZjdTUE5hQlphZVJUSW91cnFkamdQVTA5T0o1R
2025-03-19 10:18:45 UTC	94	IN	Data Raw: 35 38 0d 0a 5a 6b 56 49 62 32 5a 4d 4d 6b 5a 51 54 6e 6c 35 55 55 4e 48 51 31 5a 47 63 55 70 6c 4e 6d 68 68 4c 32 68 31 5a 48 4e 4a 5a 56 4e 55 54 6c 51 34 55 6c 5a 47 55 6d 77 30 59 31 56 7a 61 47 78 58 51 6e 56 35 53 33 45 32 52 6e 4a 79 57 57 4e 31 5a 30 35 31 62 48 5a 4d 0d 0a Data Ascii: 58ZkVIb2ZMMkZQTnl5UUNHQ1ZGcUplNmhhL2h1ZHNJZVNUTlQ4UlZGUmw0Y1VzaGxXQnV5S3E2RnJyWWN1Z051bHZM
2025-03-19 10:18:45 UTC	1378	IN	Data Raw: 65 66 32 0d 0a 52 47 4a 54 65 6a 46 6b 59 6c 56 34 62 56 5a 72 51 57 6c 4b 4d 58 52 7a 52 48 42 30 64 55 78 6a 4e 31 68 42 4b 32 31 4d 62 45 31 35 4e 6e 6c 4c 63 6c 64 59 52 54 42 61 61 58 46 34 53 48 52 46 4e 7a 56 56 63 55 70 45 4e 45 55 7a 4c 30 46 46 65 47 31 51 4f 46 4a 77 57 47 68 4f 52 46 4e 51 65 6b 70 6c 55 54 63 72 5a 30 49 76 4f 57 5a 55 52 44 4e 55 4d 55 31 6a 4c 33 64 45 62 55 70 59 4d 6c 56 7a 59 6d 35 72 51 6e 70 50 54 57 59 30 64 48 4a 4c 62 58 42 36 4e 6e 4e 68 63 33 5a 79 55 6a 4a 54 54 56 64 30 4d 30 46 6c 4e 32 4a 35 64 43 38 7a 5a 31 68 77 51 32 39 33 55 45 56 51 56 44 5a 71 63 32 35 6d 51 6d 78 57 57 44 4a 34 52 31 64 78 61 57 68 49 4e 57 70 6e 53 48 63 32 4c 31 52 47 53 33 42 72 56 31 4a 46 56 32 35 61 4d 57 45 7a 5a 55 6f 79 65 46 Data Ascii: ef2RGJTejFkYlV4bVZrQWlKMXRzRHB0dUxjN1hBK21MbE15NnlLcldYRTBaaXF4SHRFNzVVcUpENEUzL0FFeG1QOFJwWGhORFNQekplUTcrZ0IvOWZURDNUMU1jL3dEbUpYMlVzYm5rQnpPTWY0dHJLbXB6NnNhc3ZyUjJTTVd0M0FlN2J5dC8zZ1hwQ293UEVQVDZqc25mQmxWWDJ4R1dxaWhINWpnSHc2L1RGS3BrV1JFV25aMWEzZUoyeF
2025-03-19 10:18:45 UTC	1378	IN	Data Raw: 51 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 52 55 4e 43 51 55 31 47 51 56 41 76 52 55 46 44 52 56 4a 42 51 55 56 46 51 57 64 4a 51 30 46 33 51 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 52 55 46 42 5a 30 31 53 51 6b 4a 4a 61 45 31 53 54 57 6c 52 56 55 78 43 4c 7a 6c 76 51 55 52 42 54 55 4a 42 51 55 6c 53 51 58 68 46 51 56 42 33 51 30 6b 77 4c 31 52 34 61 30 5a 57 51 58 70 53 4e 33 56 34 61 30 56 53 5a 6b 70 42 53 48 52 59 64 48 4a 4c 65 56 46 6f 5a 32 45 78 65 54 4d 77 57 6e 51 35 61 6c 6b 32 56 56 46 6b 61 7a 55 35 52 6b 78 74 54 7a 56 32 59 6e 64 58 62 48 4a 46 65 6e 6c 72 57 6a 51 33 52 48 56 55 4e 30 4e 74 56 56 68 6f 61 55 31 46 63 6d 56 68 64 45 5a 48 4e 44 56 61 57 54 51 35 4b 31 42 79 61 32 59 34 56 54 55 76 57 6e 52 77 63 31 64 77 4b 30 6f Data Ascii: QUFBQUFBQUFBQUFBRUNCQU1GQVAvRUFDRVJBQUVFQWdJQ0F3QUFBQUFBQUFBQUFBRUFBZ01SQkJJaE1STWlRVUxCLzlvQURBTUJBQUlSQXhFQVB3Q0kwL1R4a0ZWQXpSN3V4a0VSZkpBSHRYdHJLeVFoZ2ExeTMwWnQ5alk2VVFkazU5RkxtTzV2YndXbHJFenlrWjQ3RHVUN0NtVVhoaU1FcmVhdEZHNDVaWTQ5K1Bya2Y4VTUvWnRwc1dwK0o
2025-03-19 10:18:45 UTC	1077	IN	Data Raw: 64 6c 53 33 68 68 64 6e 46 76 4f 47 74 33 64 30 56 6d 63 53 39 32 4f 47 59 7a 63 6a 59 78 54 7a 64 46 54 6e 55 7a 51 6a 56 33 52 46 4e 76 4d 30 5a 72 53 6c 4e 5a 53 56 52 6a 55 30 52 71 65 6b 70 36 4e 6c 42 76 5a 33 64 6a 5a 6c 41 79 63 57 56 57 4e 33 49 78 51 7a 5a 31 51 6d 6c 34 62 56 42 35 64 6b 5a 74 4b 30 49 72 63 46 52 49 52 6d 52 36 4d 32 46 50 63 6b 30 72 65 47 63 30 61 6d 70 56 61 32 4e 6b 4c 32 4d 76 54 6b 52 69 65 45 68 6a 56 32 6c 70 64 33 5a 4d 57 6a 4e 72 63 32 31 44 65 46 4e 34 64 6d 63 33 51 55 31 4d 64 56 55 35 4f 58 56 4c 59 6c 52 59 54 6e 70 4c 64 6d 78 4f 64 6d 52 45 4d 47 70 71 56 46 6c 6e 4c 7a 42 71 61 57 77 77 4b 32 78 34 65 6e 6c 4d 55 45 6c 74 4b 32 4e 4a 52 31 42 5a 57 58 70 71 62 69 39 42 53 48 70 54 54 6b 78 6d 63 33 46 6a 63 Data Ascii: dlS3hhdnFvOGt3d0VmcS92OGYzcjYxTzdFTnUzQjV3RFNvM0ZrSlNZSVRjU0Rqekp6NlBvZ3djZlAycWVWN3IxQzZ1Qml4bVB5dkZtK0IrcFRIRmR6M2FPck0reGc0ampVa2NkL2MvTkRieEhjV2lpd3ZMWjNrc21DeFN4dmc3QU1MdVU5OXVLYlRYTnpLdmxOdmREMGpqVFlnLzBqaWwwK2x4enlMUEltK2NJR1BZWXpqbi9BSHpTTkxmc3Fjc
2025-03-19 10:18:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Statistics

CPU Usage

• chrome.exe
• chrome.exe
• chrome.exe
• chrome.exe

Click to jump to process

Memory Usage

• chrome.exe
• chrome.exe
• chrome.exe
• chrome.exe

Click to jump to process

Click to jump to process

Target ID:	4
Start time:	06:18:29
Start date:	19/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff75a750000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	6
Start time:	06:18:33
Start date:	19/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2040,i,14966389648286687626,4343684295556244983,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2088 /prefetch:3
Imagebase:	0x7ff75a750000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	8
Start time:	06:18:36
Start date:	19/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2040,i,14966389648286687626,4343684295556244983,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=3324 /prefetch:8
Imagebase:	0x7ff75a750000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	11
Start time:	06:18:40
Start date:	19/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://sso-robinhood-net--logi--auth.webflow.io/"
Imagebase:	0x7ff75a750000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://sso-robinhood-net--logi--auth.webflow.io/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 94

Chrome Cache Entry: 95

Chrome Cache Entry: 96

Chrome Cache Entry: 97

Chrome Cache Entry: 98

Chrome Cache Entry: 99

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

Windows Analysis Report
https://sso-robinhood-net--logi--auth.webflow.io/