Edit tour

Windows Analysis Report
https://sso-robinhood-net-cdy--auth.webflow.io/

Overview

General Information

Sample URL:	https://sso-robinhood-net-cdy--auth.webflow.io/
Analysis ID:	1642807
Infos:

Detection

HTMLPhisher

Score:	60
Range:	0 - 100
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Yara detected HtmlPhish64

AI detected suspicious URL

Creates files inside the system directory

Deletes files inside the Windows folder

HTML body contains low number of good links

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3492 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 5344 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1764,i,15234223184877867171,6909692746380502297,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2152 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6900 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://sso-robinhood-net-cdy--auth.webflow.io/" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
0.0.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security

Suricata Signatures

ET MALWARE Possible Zeus GameOver/FluBot Related DGA NXDOMAIN Responses

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-03-19T11:24:54.484101+0100	2018316	1	A Network Trojan was detected	1.1.1.1	53	192.168.2.4	58824	UDP

Joe Sandbox Signatures

• AV Detection
• Phishing
• Compliance
• Networking
• System Summary

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://sso-robinhood-net-cdy--auth.webflow.io/

Avira URL Cloud: detection malicious, Label: phishing

Phishing

Yara detected HtmlPhish64

Source: Yara match

File source: 0.0.pages.csv, type: HTML

AI detected suspicious URL

Source: https://sso-robinhood-net-cdy--auth.webflow.io

Joe Sandbox AI: The URL 'https://sso-robinhood-net-cdy--auth.webflow.io' appears to be attempting to mimic a legitimate Robinhood URL. The use of 'sso' (Single Sign-On) and 'auth' (authentication) in the subdomain suggests an attempt to create a sense of legitimacy and urgency, potentially misleading users into thinking they are accessing a secure login page. The domain 'webflow.io' is a legitimate platform for hosting websites, which could be used for unrelated purposes, but in this context, it adds to the suspicion due to the structural similarity to a legitimate Robinhood URL. The use of 'robinhood-net' in the subdomain is a clear attempt to visually and structurally mimic the legitimate brand. The similarity score is high due to these factors, and the likelihood of typosquatting is also high given the context and structure of the URL.

Source: https://sso-robinhood-net-cdy--auth.webflow.io/

HTTP Parser: Number of links: 0

Source: https://sso-robinhood-net-cdy--auth.webflow.io/

HTTP Parser: No <meta name="author".. found

Source: https://sso-robinhood-net-cdy--auth.webflow.io/

HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 142.250.185.68:443 -> 192.168.2.4:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.36.248:443 -> 192.168.2.4:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.36.248:443 -> 192.168.2.4:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.161.117:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.222.232.99:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.161.117:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.161.117:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.161.117:443 -> 192.168.2.4:49741 version: TLS 1.2

Source: Network traffic

Suricata IDS: 2018316 - Severity 1 - ET MALWARE Possible Zeus GameOver/FluBot Related DGA NXDOMAIN Responses : 1.1.1.1:53 -> 192.168.2.4:58824

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 216.58.206.67
Source: unknown	TCP traffic detected without corresponding DNS query: 216.58.206.67
Source: unknown	TCP traffic detected without corresponding DNS query: 216.58.206.67
Source: unknown	TCP traffic detected without corresponding DNS query: 216.58.206.67
Source: unknown	TCP traffic detected without corresponding DNS query: 216.58.206.67
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 216.58.206.67
Source: unknown	TCP traffic detected without corresponding DNS query: 216.58.206.67
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: sso-robinhood-net-cdy--auth.webflow.ioConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /678a1ac1977f9a10a0673b0b/css/sso-robinhood-net-cdy--auth.webflow.ce67eee42.css HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://sso-robinhood-net-cdy--auth.webflow.io/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/jquery-3.5.1.min.dc5e7f18c8.js?site=678a1ac1977f9a10a0673b0b HTTP/1.1Host: d3e54v103j8qbb.cloudfront.netConnection: keep-aliveOrigin: https://sso-robinhood-net-cdy--auth.webflow.iosec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://sso-robinhood-net-cdy--auth.webflow.io/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /678a1ac1977f9a10a0673b0b/js/webflow.77ac24386eb2a8dacabbd68092c045ec.js HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://sso-robinhood-net-cdy--auth.webflow.io/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /678a1ac1977f9a10a0673b0b/678a1ae8e1729f54b7b9efd0_Screenshot%202025-01-08%20at%2013-39-14%20Commission-free%20Stock%20Trading%20%26%20Investing%20App%20Robinhood.png HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://sso-robinhood-net-cdy--auth.webflow.io/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /678a1ac1977f9a10a0673b0b/678a1af807adb9ecf0e96c3f_dgdgdg.png HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://sso-robinhood-net-cdy--auth.webflow.io/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /678a1ac1977f9a10a0673b0b/678a1ae8e1729f54b7b9efd0_Screenshot%202025-01-08%20at%2013-39-14%20Commission-free%20Stock%20Trading%20%26%20Investing%20App%20Robinhood.png HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /678a1ac1977f9a10a0673b0b/678a1af807adb9ecf0e96c3f_dgdgdg.png HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /r/gsr1.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog
Source: global traffic	HTTP traffic detected: GET /r/r4.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: sso-robinhood-net-cdy--auth.webflow.io
Source: global traffic	DNS traffic detected: DNS query: cdn.prod.website-files.com
Source: global traffic	DNS traffic detected: DNS query: d3e54v103j8qbb.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: robenboodlogi.info
Source: global traffic	DNS traffic detected: DNS query: google.com

Source: chromecache_62.1.dr	String found in binary or memory: http://underscorejs.org
Source: chromecache_56.1.dr	String found in binary or memory: https://cdn.prod.website-files.com/678a1ac1977f9a10a0673b0b/678a1ae8e1729f54b7b9efd0_Screenshot%2020
Source: chromecache_56.1.dr	String found in binary or memory: https://cdn.prod.website-files.com/678a1ac1977f9a10a0673b0b/678a1af807adb9ecf0e96c3f_dgdgdg.png
Source: chromecache_56.1.dr	String found in binary or memory: https://cdn.prod.website-files.com/678a1ac1977f9a10a0673b0b/css/sso-robinhood-net-cdy--auth.webflow.
Source: chromecache_56.1.dr	String found in binary or memory: https://cdn.prod.website-files.com/678a1ac1977f9a10a0673b0b/js/webflow.77ac24386eb2a8dacabbd68092c04
Source: chromecache_56.1.dr	String found in binary or memory: https://cdn.prod.website-files.com/img/webclip.png
Source: chromecache_56.1.dr	String found in binary or memory: https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=678a1ac1977f9a10a0673b0
Source: chromecache_62.1.dr	String found in binary or memory: https://github.com/bkwld/tram
Source: chromecache_56.1.dr	String found in binary or memory: https://robenboodlogi.info/logi/
Source: chromecache_56.1.dr	String found in binary or memory: https://webflow.com

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443

Source: unknown	HTTPS traffic detected: 142.250.185.68:443 -> 192.168.2.4:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.36.248:443 -> 192.168.2.4:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.36.248:443 -> 192.168.2.4:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.161.117:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.222.232.99:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.161.117:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.161.117:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.161.117:443 -> 192.168.2.4:49741 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir3492_1245634761

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir3492_1245634761

Jump to behavior

Source: classification engine

Classification label: mal60.phis.win@27/14@32/5

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1764,i,15234223184877867171,6909692746380502297,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2152 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://sso-robinhood-net-cdy--auth.webflow.io/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1764,i,15234223184877867171,6909692746380502297,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2152 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://sso-robinhood-net-cdy--auth.webflow.io/	100%	Avira URL Cloud	phishing

Source	Detection	Scanner	Label	Link
https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=678a1ac1977f9a10a0673b0	0%	Avira URL Cloud	safe
https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=678a1ac1977f9a10a0673b0b	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
d3e54v103j8qbb.cloudfront.net	52.222.232.99	true	false	high
google.com	142.251.37.110	true	false	high
cdn.prod.website-files.com	104.18.161.117	true	false	high
www.google.com	142.250.185.68	true	false	high
sso-robinhood-net-cdy--auth.webflow.io	104.18.36.248	true	true	unknown
robenboodlogi.info	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://sso-robinhood-net-cdy--auth.webflow.io/	true		unknown
https://cdn.prod.website-files.com/678a1ac1977f9a10a0673b0b/js/webflow.77ac24386eb2a8dacabbd68092c045ec.js	false		high
https://cdn.prod.website-files.com/678a1ac1977f9a10a0673b0b/678a1af807adb9ecf0e96c3f_dgdgdg.png	false		high
https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=678a1ac1977f9a10a0673b0b	false	Avira URL Cloud: safe	unknown
https://cdn.prod.website-files.com/678a1ac1977f9a10a0673b0b/678a1ae8e1729f54b7b9efd0_Screenshot%202025-01-08%20at%2013-39-14%20Commission-free%20Stock%20Trading%20%26%20Investing%20App%20Robinhood.png	false		high
https://cdn.prod.website-files.com/678a1ac1977f9a10a0673b0b/css/sso-robinhood-net-cdy--auth.webflow.ce67eee42.css	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://cdn.prod.website-files.com/678a1ac1977f9a10a0673b0b/678a1ae8e1729f54b7b9efd0_Screenshot%2020	chromecache_56.1.dr	false		high
https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=678a1ac1977f9a10a0673b0	chromecache_56.1.dr	false	Avira URL Cloud: safe	unknown
http://underscorejs.org	chromecache_62.1.dr	false		high
https://cdn.prod.website-files.com/img/webclip.png	chromecache_56.1.dr	false		high
https://robenboodlogi.info/logi/	chromecache_56.1.dr	false		high
https://cdn.prod.website-files.com/678a1ac1977f9a10a0673b0b/js/webflow.77ac24386eb2a8dacabbd68092c04	chromecache_56.1.dr	false		high
https://github.com/bkwld/tram	chromecache_62.1.dr	false		high
https://cdn.prod.website-files.com/678a1ac1977f9a10a0673b0b/css/sso-robinhood-net-cdy--auth.webflow.	chromecache_56.1.dr	false		high
https://webflow.com	chromecache_56.1.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.36.248	sso-robinhood-net-cdy--auth.webflow.io	United States	13335	CLOUDFLARENETUS	true
142.250.185.68	www.google.com	United States	15169	GOOGLEUS	false
104.18.161.117	cdn.prod.website-files.com	United States	13335	CLOUDFLARENETUS	false
52.222.232.99	d3e54v103j8qbb.cloudfront.net	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1642807
Start date and time:	2025-03-19 11:23:40 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 12s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://sso-robinhood-net-cdy--auth.webflow.io/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	19
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal60.phis.win@27/14@32/5
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, RuntimeBroker.exe, ShellExperienceHost.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.195, 216.58.206.78, 142.250.110.84, 216.58.206.46, 142.250.184.206, 142.250.186.110, 216.58.212.142, 199.232.210.172, 142.250.186.174, 142.250.185.78, 142.250.185.110, 172.217.16.142, 216.58.212.174, 172.217.16.195, 142.250.186.99, 23.60.203.209, 52.149.20.212
Excluded domains from analysis (whitelisted): fs.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, accounts.google.com, redirector.gvt1.com, slscr.update.microsoft.com, update.googleapis.com, ctldl.windowsupdate.com, clientservices.googleapis.com, clients.l.google.com, c.pki.goog, fe3cr.delivery.mp.microsoft.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://sso-robinhood-net-cdy--auth.webflow.io/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (3233), with no line terminators
Category:	downloaded
Size (bytes):	3234
Entropy (8bit):	5.386575003596328
Encrypted:	false
SSDEEP:	96:NsydPu6f/O4jbDLTobp+ifL+iNt+ij+i/+ilis:eCWN4vD3GpRjRNtRjR/Rlis
MD5:	64FC4C1BD2F243313F236F9951500C1D
SHA1:	7CB36BA47B13F8388C608C9E2A5508831E16126A
SHA-256:	B75F059F95F76C5EDD6F9090ADE62673EDD75E8953F19F8B33859CEFCADEDB81
SHA-512:	F189A706946E75028F8B5619811DF107E3028E3C751FFD556AF30A0A55D2A560D6EFCC53FD8544C56B2F3FC85282EFE18BC0D1AD9A7665CDEEA302FD3CCC2A63
Malicious:	false
Reputation:	low
URL:	https://sso-robinhood-net-cdy--auth.webflow.io/
Preview:	<!DOCTYPE html> This site was created in Webflow. https://webflow.com --> Last Published: Fri Jan 17 2025 08:56:05 GMT+0000 (Coordinated Universal Time) --><html data-wf-domain="sso-robinhood-net-cdy--auth.webflow.io" data-wf-page="678a1ac1977f9a10a0673b63" data-wf-site="678a1ac1977f9a10a0673b0b" data-wf-status="1"><head><meta charset="utf-8"/><title>Log In \| Robinhood. \| Sign In to Your Account \| Robinhood Login</title><meta content="Robinhood Login is a commission-free trading platform that simplifies investing in stocks, ETFs, options, and cryptocurrencies. With a user-friendly interface, it has gained popularity among beginners and seasoned traders alike. Whether you're looking to start your first investment portfolio or refine an existing strategy, Robinhood provides a seamless platform to trade with confidence." name="description"/><meta content="width=device-width, initial-scale=1" name="viewport"/><meta content="Webflow" name="generator"/><link href="https://cdn.p

Chrome Cache Entry: 57

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	81369
Entropy (8bit):	5.291887605773591
Encrypted:	false
SSDEEP:	1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0Q/:AYh8eip3huuf6Iidl2
MD5:	37A252F53522A0993CE5A0C1A0A79DE1
SHA1:	BA57881A444FA0A98D477CE65C3B1B41845520AF
SHA-256:	EE8C8EE6BBB69AE67388DEECFC7C43DEF7380B84A41C3036890A84B6BFEC27EC
SHA-512:	A4808423220C3B964B7ECD1C60A9052BAF56CE51C8158CF5933ECEBB75C70123A69F50C6A16FFAB2DF60A333901148708DD1D67252C1610A244CF190E09448BD
Malicious:	false
Reputation:	low
URL:	https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=678a1ac1977f9a10a0673b0b
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 58

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	803
Entropy (8bit):	7.582551628276611
Encrypted:	false
SSDEEP:	12:6v/7iQ/6mUO77GjYE1NfSxipER2CJUsWIZGj8fWWHIZ90C6IhHeBs9c+8DVDnb8d:PmUOXkYcpfpc2C6HgJe9l+Bs++8Jajn
MD5:	C8F0CEF2D937562902DAA9C3C0B67CA3
SHA1:	99D0D6C68F2C00ACF5CB853A402AF4D18690C0F6
SHA-256:	73862EF843D3D50565F0495EC3C08ACB45E0DA61968DBC54D431232E86B44278
SHA-512:	44E35CD1909D50DEF4A518EF818E1D751F15F1475BFA781209D76CBC6D4E69537034FFED48D95F921821DCE77E9F847F0BD27D5CA00C901E90D75405CADC1A77
Malicious:	false
Reputation:	low
URL:	https://cdn.prod.website-files.com/678a1ac1977f9a10a0673b0b/678a1af807adb9ecf0e96c3f_dgdgdg.png
Preview:	.PNG........IHDR... ... .....szz.....sRGB.........gAMA......a.....pHYs..........o.d....IDATXG.Mh.A...Mv7.[.."b......../.TK. R..T.... ..^...G..T......z.....4E..!z..ZKmK...d.o......M#..e33a.......T......S... oI....?..s....\....0.:/.z:.\=.@p...%.8....0Vo.....t..^.qa...F.k...U.[......D.<E~g...g.e.o.!.....!..z..'....;..tJ..@...?....=<..p ...kz.]Q...o....N.l%.........i.......k...\|..q.t.....X..Y.PW..n..Z..]2Nn+...`.u.e...^.....8..n.e.8\|M.4.s.K .?w..=.a...f.....{..-`Z..#...l..7.K%...!.....Y@W;e..oc..d..sT..\|g.9'..f........-...t..\|..8pRh....5..H..D......?.,....)Q,bY@..(F.8<n3..v.m....%&.....R...>.m..P.NWzbX.....`.0.oC.v..P.}..x......-..;.Vr.....h.......c8.P<]E..z....b-.&b..F.$x...!J..H@.0..7...A.k......uq.S./...!3.lV1.......V..9@#..v,.~........\|../...X...k...0V.....IEND.B`.

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (2587)
Category:	downloaded
Size (bytes):	36230
Entropy (8bit):	5.229407486730831
Encrypted:	false
SSDEEP:	768:AyNf7A1RE/GqyFVF54mkxWaIi1aUuF9Zl0F6FhF8FPqkowKji/JVx1:Aye1REeqyP0XcPyjowKjK
MD5:	CE67EEE42C89568CEA3E40F6459BEBDB
SHA1:	2893E67BA934122231F741F77F24BB2F0DFEAED6
SHA-256:	C219BD77B1A92CCD8E6A3EE098A0BC34A65F56C666660FF934B4638D4AD681F3
SHA-512:	50F0AE74E0FA09ADA3CE88D6518F02835D77665FC0817724EFE068806C3F2C89BFE3035C65EC55020A22F0E69B61C8977948A4E0D631BE2D193464F7F8922FB5
Malicious:	false
Reputation:	low
URL:	https://cdn.prod.website-files.com/678a1ac1977f9a10a0673b0b/css/sso-robinhood-net-cdy--auth.webflow.ce67eee42.css
Preview:	html {. -webkit-text-size-adjust: 100%;. -ms-text-size-adjust: 100%;. font-family: sans-serif;.}..body {. margin: 0;.}..article, aside, details, figcaption, figure, footer, header, hgroup, main, menu, nav, section, summary {. display: block;.}..audio, canvas, progress, video {. vertical-align: baseline;. display: inline-block;.}..audio:not([controls]) {. height: 0;. display: none;.}..[hidden], template {. display: none;.}..a {. background-color: #0000;.}..a:active, a:hover {. outline: 0;.}..abbr[title] {. border-bottom: 1px dotted;.}..b, strong {. font-weight: bold;.}..dfn {. font-style: italic;.}..h1 {. margin: .67em 0;. font-size: 2em;.}..mark {. color: #000;. background: #ff0;.}..small {. font-size: 80%;.}..sub, sup {. vertical-align: baseline;. font-size: 75%;. line-height: 0;. position: relative;.}..sup {. top: -.5em;.}..sub {. bottom: -.25em;.}..img {. border: 0;.}..svg:not(:root) {. overflow: hidden;.}..hr {. box-sizing: content-box;. height: 0;.}..

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1348 x 768, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	544845
Entropy (8bit):	7.994826952111587
Encrypted:	true
SSDEEP:	12288:5iMxt4uS0ktCT9BHI6vr1RUunodhs0aY5ZbcnVSYtFCC3l:57xnX8CRB7vr1uuodhXbcnVFT3l
MD5:	35BAA4C2960F7ADAA6F26CC982435555
SHA1:	CD19A546FAFFE2EE076AE098BD7B4E1020BB3CEA
SHA-256:	EA591836E01D6D30A24617BD80F40E8C69EEE2716A193D9ADBE835DD91354146
SHA-512:	CFBA6922813605BCDB264E812B0811167E98A7FD8462D1C6CB6390C98A3828669485C55731EF441054F78E560703A2F17513142F70FBFA2E6A59BB892EF9AAC7
Malicious:	false
Reputation:	low
URL:	https://cdn.prod.website-files.com/678a1ac1977f9a10a0673b0b/678a1ae8e1729f54b7b9efd0_Screenshot%202025-01-08%20at%2013-39-14%20Commission-free%20Stock%20Trading%20%26%20Investing%20App%20Robinhood.png
Preview:	.PNG........IHDR...D..........em... .IDATx^.}..diU..s..'..ldY. H........(...."J.........I........CO.........z]].Uz.f.~......;_>..{.Dd..hQ...E@.P...E@.P...E@.P...E@.P...E.G.@.......E@.P...E@.P...E@.P...E@.P...E ........E@.P...E@.P...E@.P...E@.P...E..A@......C..E@.P...E@.P...E@.P...E@.P...E@.Q...."..(..."..(..."..(..."..(..."p. .........."..(..."..(..."..(..."..(...".....E@.P...E@.P...E@.P...E@.P...E@..a.PB.ij.PE@.P...E@.P...E@.P...E@.P...E@.PBT.."..(..."..(..."..(..."..(..(.+V....ur.]wIss.466..n.2==-.N....)...{.....+/ `...Mo...!)--...b)( .w...E........g.\|.c.....G....h ..K..E@.P...E@.P...E@.P...E@.H........^JJJ.+_.....?.......?......U....!\|.=..K^...\|..\|.....}.s.\|....~y.s.+......Zy....[.........UVB.W..e.."..(..."..(..."..(..."......o{...{...\|.#..........N*2......4!9../\|....^.....Z.w.....,.}.{....J.f....(..."..(..."..(..."..(.............9rD....+......a...?(......T.;........o\|..RUU..z...N.>m...."..hN..+..."..(..."..(..."..(..."........o..(.....9...w..o4

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1348 x 768, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	544845
Entropy (8bit):	7.994826952111587
Encrypted:	true
SSDEEP:	12288:5iMxt4uS0ktCT9BHI6vr1RUunodhs0aY5ZbcnVSYtFCC3l:57xnX8CRB7vr1uuodhXbcnVFT3l
MD5:	35BAA4C2960F7ADAA6F26CC982435555
SHA1:	CD19A546FAFFE2EE076AE098BD7B4E1020BB3CEA
SHA-256:	EA591836E01D6D30A24617BD80F40E8C69EEE2716A193D9ADBE835DD91354146
SHA-512:	CFBA6922813605BCDB264E812B0811167E98A7FD8462D1C6CB6390C98A3828669485C55731EF441054F78E560703A2F17513142F70FBFA2E6A59BB892EF9AAC7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...D..........em... .IDATx^.}..diU..s..'..ldY. H........(...."J.........I........CO.........z]].Uz.f.~......;_>..{.Dd..hQ...E@.P...E@.P...E@.P...E@.P...E.G.@.......E@.P...E@.P...E@.P...E@.P...E ........E@.P...E@.P...E@.P...E@.P...E..A@......C..E@.P...E@.P...E@.P...E@.P...E@.Q...."..(..."..(..."..(..."..(..."p. .........."..(..."..(..."..(..."..(...".....E@.P...E@.P...E@.P...E@.P...E@..a.PB.ij.PE@.P...E@.P...E@.P...E@.P...E@.PBT.."..(..."..(..."..(..."..(..(.+V....ur.]wIss.466..n.2==-.N....)...{.....+/ `...Mo...!)--...b)( .w...E........g.\|.c.....G....h ..K..E@.P...E@.P...E@.P...E@.H........^JJJ.+_.....?.......?......U....!\|.=..K^...\|..\|.....}.s.\|....~y.s.+......Zy....[.........UVB.W..e.."..(..."..(..."..(..."......o{...{...\|.#..........N*2......4!9../\|....^.....Z.w.....,.}.{....J.f....(..."..(..."..(..."..(.............9rD....+......a...?(......T.;........o\|..RUU..z...N.>m...."..hN..+..."..(..."..(..."..(..."........o..(.....9...w..o4

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21513)
Category:	downloaded
Size (bytes):	37349
Entropy (8bit):	5.44100455597547
Encrypted:	false
SSDEEP:	768:G5p9WeNujJ4zgTyxOv5GAUdxKzPQfsJe184wEWpqvyqL/q:G5p9WeNul4zC5jMkOyqO
MD5:	FC7EF472A2BCA6FBDB8AB8235DEC64E0
SHA1:	39637DA0AC71621757C5CEE728307E30A9D7FE61
SHA-256:	D148CEDE7C0523EBC7C9FBBA7F4EB5AD8D2C7A449814A9177190F20708D31AAB
SHA-512:	72CCEBC092F1D2A32AD8A29E312207870FADD08178862B2132E3A0CCC6316B3C9FBFD83DCECECA96E23FB86F1B378CA611B79E4790B602CDDE235F16E7D31210
Malicious:	false
Reputation:	low
URL:	https://cdn.prod.website-files.com/678a1ac1977f9a10a0673b0b/js/webflow.77ac24386eb2a8dacabbd68092c045ec.js
Preview:	./!. Webflow: Front-end site library. * @license MIT. * Inline scripts may access the api using an async handler:. * var Webflow = Webflow \|\| [];. * Webflow.push(readyFunction);. /..(()=>{var lt=(e,y)=>()=>(y\|\|e((y={exports:{}}).exports,y),y.exports);var Pt=lt(()=>{"use strict";window.tram=function(e){function y(t,n){var i=new J.Bare;return i.init(t,n)}function l(t){return t.replace(/[A-Z]/g,function(n){return"-"+n.toLowerCase()})}function T(t){var n=parseInt(t.slice(1),16),i=n>>16&255,r=n>>8&255,s=255&n;return[i,r,s]}function C(t,n,i){return"#"+(1<<24\|t<<16\|n<<8\|i).toString(16).slice(1)}function g(){}function L(t,n){B("Type warning: Expected: ["+t+"] Got: ["+typeof n+"] "+n)}function _(t,n,i){B("Units do not match ["+t+"]: "+n+", "+i)}function I(t,n,i){if(n!==void 0&&(i=n),t===void 0)return i;var r=i;return we.test(t)\|\|!Xt.test(t)?r=parseInt(t,10):Xt.test(t)&&(r=1e3parseFloat(t)),0>r&&(r=0),r===r?r:i}function B(t){et.debug&&window&&window.console.warn(t)}function U(t){for(var

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	803
Entropy (8bit):	7.582551628276611
Encrypted:	false
SSDEEP:	12:6v/7iQ/6mUO77GjYE1NfSxipER2CJUsWIZGj8fWWHIZ90C6IhHeBs9c+8DVDnb8d:PmUOXkYcpfpc2C6HgJe9l+Bs++8Jajn
MD5:	C8F0CEF2D937562902DAA9C3C0B67CA3
SHA1:	99D0D6C68F2C00ACF5CB853A402AF4D18690C0F6
SHA-256:	73862EF843D3D50565F0495EC3C08ACB45E0DA61968DBC54D431232E86B44278
SHA-512:	44E35CD1909D50DEF4A518EF818E1D751F15F1475BFA781209D76CBC6D4E69537034FFED48D95F921821DCE77E9F847F0BD27D5CA00C901E90D75405CADC1A77
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....sRGB.........gAMA......a.....pHYs..........o.d....IDATXG.Mh.A...Mv7.[.."b......../.TK. R..T.... ..^...G..T......z.....4E..!z..ZKmK...d.o......M#..e33a.......T......S... oI....?..s....\....0.:/.z:.\=.@p...%.8....0Vo.....t..^.qa...F.k...U.[......D.<E~g...g.e.o.!.....!..z..'....;..tJ..@...?....=<..p ...kz.]Q...o....N.l%.........i.......k...\|..q.t.....X..Y.PW..n..Z..]2Nn+...`.u.e...^.....8..n.e.8\|M.4.s.K .?w..=.a...f.....{..-`Z..#...l..7.K%...!.....Y@W;e..oc..d..sT..\|g.9'..f........-...t..\|..8pRh....5..H..D......?.,....)Q,bY@..(F.8<n3..v.m....%&.....R...>.m..P.NWzbX.....`.0.oC.v..P.}..x......-..;.Vr.....h.......c8.P<]E..z....b-.&b..F.$x...!J..H@.0..7...A.k......uq.S./...!3.lV1.......V..9@#..v,.~........\|../...X...k...0V.....IEND.B`.

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2025-03-19T11:24:54.484101+0100	2018316	ET MALWARE Possible Zeus GameOver/FluBot Related DGA NXDOMAIN Responses	1	1.1.1.1	53	192.168.2.4	58824	UDP

Network Port Distribution

Total Packets: 418
• 443 (HTTPS)
• 80 (HTTP)
• 53 (DNS)

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 19, 2025 11:24:31.836580038 CET	49680	443	192.168.2.4	204.79.197.222
Mar 19, 2025 11:24:40.174922943 CET	49671	443	192.168.2.4	204.79.197.203
Mar 19, 2025 11:24:40.518666029 CET	49671	443	192.168.2.4	204.79.197.203
Mar 19, 2025 11:24:41.290141106 CET	49671	443	192.168.2.4	204.79.197.203
Mar 19, 2025 11:24:41.447721958 CET	49680	443	192.168.2.4	204.79.197.222
Mar 19, 2025 11:24:42.601422071 CET	49671	443	192.168.2.4	204.79.197.203
Mar 19, 2025 11:24:45.007906914 CET	49671	443	192.168.2.4	204.79.197.203
Mar 19, 2025 11:24:45.579205990 CET	49726	443	192.168.2.4	142.250.185.68
Mar 19, 2025 11:24:45.579248905 CET	443	49726	142.250.185.68	192.168.2.4
Mar 19, 2025 11:24:45.579329014 CET	49726	443	192.168.2.4	142.250.185.68
Mar 19, 2025 11:24:45.580327034 CET	49726	443	192.168.2.4	142.250.185.68
Mar 19, 2025 11:24:45.580343962 CET	443	49726	142.250.185.68	192.168.2.4
Mar 19, 2025 11:24:45.624646902 CET	443	49726	142.250.185.68	192.168.2.4
Mar 19, 2025 11:24:45.625757933 CET	49726	443	192.168.2.4	142.250.185.68
Mar 19, 2025 11:24:45.625757933 CET	49726	443	192.168.2.4	142.250.185.68
Mar 19, 2025 11:24:45.625788927 CET	443	49726	142.250.185.68	192.168.2.4
Mar 19, 2025 11:24:45.626287937 CET	443	49726	142.250.185.68	192.168.2.4
Mar 19, 2025 11:24:45.679491997 CET	49726	443	192.168.2.4	142.250.185.68
Mar 19, 2025 11:24:46.286216021 CET	49728	443	192.168.2.4	104.18.36.248
Mar 19, 2025 11:24:46.286250114 CET	443	49728	104.18.36.248	192.168.2.4
Mar 19, 2025 11:24:46.286461115 CET	49728	443	192.168.2.4	104.18.36.248
Mar 19, 2025 11:24:46.286972046 CET	49729	443	192.168.2.4	104.18.36.248
Mar 19, 2025 11:24:46.287018061 CET	443	49729	104.18.36.248	192.168.2.4
Mar 19, 2025 11:24:46.287086964 CET	49729	443	192.168.2.4	104.18.36.248
Mar 19, 2025 11:24:46.287183046 CET	49728	443	192.168.2.4	104.18.36.248
Mar 19, 2025 11:24:46.287199020 CET	443	49728	104.18.36.248	192.168.2.4
Mar 19, 2025 11:24:46.287256956 CET	49729	443	192.168.2.4	104.18.36.248
Mar 19, 2025 11:24:46.287273884 CET	443	49729	104.18.36.248	192.168.2.4
Mar 19, 2025 11:24:46.345097065 CET	443	49728	104.18.36.248	192.168.2.4
Mar 19, 2025 11:24:46.345161915 CET	49728	443	192.168.2.4	104.18.36.248
Mar 19, 2025 11:24:46.350116014 CET	49728	443	192.168.2.4	104.18.36.248
Mar 19, 2025 11:24:46.350125074 CET	443	49728	104.18.36.248	192.168.2.4
Mar 19, 2025 11:24:46.350357056 CET	443	49728	104.18.36.248	192.168.2.4
Mar 19, 2025 11:24:46.350876093 CET	49728	443	192.168.2.4	104.18.36.248
Mar 19, 2025 11:24:46.351259947 CET	443	49729	104.18.36.248	192.168.2.4
Mar 19, 2025 11:24:46.351316929 CET	49729	443	192.168.2.4	104.18.36.248
Mar 19, 2025 11:24:46.354847908 CET	49729	443	192.168.2.4	104.18.36.248
Mar 19, 2025 11:24:46.354870081 CET	443	49729	104.18.36.248	192.168.2.4
Mar 19, 2025 11:24:46.355340004 CET	443	49729	104.18.36.248	192.168.2.4
Mar 19, 2025 11:24:46.392347097 CET	443	49728	104.18.36.248	192.168.2.4
Mar 19, 2025 11:24:46.401037931 CET	49729	443	192.168.2.4	104.18.36.248
Mar 19, 2025 11:24:46.425137043 CET	443	49728	104.18.36.248	192.168.2.4
Mar 19, 2025 11:24:46.425172091 CET	443	49728	104.18.36.248	192.168.2.4
Mar 19, 2025 11:24:46.425211906 CET	443	49728	104.18.36.248	192.168.2.4
Mar 19, 2025 11:24:46.425250053 CET	49728	443	192.168.2.4	104.18.36.248
Mar 19, 2025 11:24:46.425273895 CET	443	49728	104.18.36.248	192.168.2.4
Mar 19, 2025 11:24:46.425304890 CET	443	49728	104.18.36.248	192.168.2.4
Mar 19, 2025 11:24:46.425309896 CET	49728	443	192.168.2.4	104.18.36.248
Mar 19, 2025 11:24:46.425355911 CET	49728	443	192.168.2.4	104.18.36.248
Mar 19, 2025 11:24:46.426350117 CET	49728	443	192.168.2.4	104.18.36.248
Mar 19, 2025 11:24:46.426368952 CET	443	49728	104.18.36.248	192.168.2.4
Mar 19, 2025 11:24:46.459867001 CET	49731	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.459969997 CET	443	49731	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.460059881 CET	49731	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.460235119 CET	49732	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.460273027 CET	443	49732	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.460381031 CET	49732	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.460654020 CET	49731	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.460697889 CET	443	49731	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.460971117 CET	49733	443	192.168.2.4	52.222.232.99
Mar 19, 2025 11:24:46.461026907 CET	443	49733	52.222.232.99	192.168.2.4
Mar 19, 2025 11:24:46.461110115 CET	49733	443	192.168.2.4	52.222.232.99
Mar 19, 2025 11:24:46.461364985 CET	49733	443	192.168.2.4	52.222.232.99
Mar 19, 2025 11:24:46.461393118 CET	443	49733	52.222.232.99	192.168.2.4
Mar 19, 2025 11:24:46.461577892 CET	49732	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.461591959 CET	443	49732	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.490976095 CET	443	49731	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.491077900 CET	49731	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.492376089 CET	49731	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.492624998 CET	443	49731	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.493395090 CET	49731	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.493907928 CET	443	49733	52.222.232.99	192.168.2.4
Mar 19, 2025 11:24:46.493988037 CET	49733	443	192.168.2.4	52.222.232.99
Mar 19, 2025 11:24:46.494905949 CET	49733	443	192.168.2.4	52.222.232.99
Mar 19, 2025 11:24:46.495250940 CET	443	49733	52.222.232.99	192.168.2.4
Mar 19, 2025 11:24:46.495443106 CET	49733	443	192.168.2.4	52.222.232.99
Mar 19, 2025 11:24:46.498539925 CET	443	49732	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.498625994 CET	49732	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.499661922 CET	49732	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.500053883 CET	443	49732	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.505419016 CET	443	49733	52.222.232.99	192.168.2.4
Mar 19, 2025 11:24:46.505450964 CET	443	49733	52.222.232.99	192.168.2.4
Mar 19, 2025 11:24:46.505470037 CET	443	49733	52.222.232.99	192.168.2.4
Mar 19, 2025 11:24:46.505505085 CET	49733	443	192.168.2.4	52.222.232.99
Mar 19, 2025 11:24:46.505523920 CET	443	49733	52.222.232.99	192.168.2.4
Mar 19, 2025 11:24:46.505542040 CET	49733	443	192.168.2.4	52.222.232.99
Mar 19, 2025 11:24:46.505572081 CET	49733	443	192.168.2.4	52.222.232.99
Mar 19, 2025 11:24:46.509526014 CET	443	49733	52.222.232.99	192.168.2.4
Mar 19, 2025 11:24:46.509547949 CET	443	49733	52.222.232.99	192.168.2.4
Mar 19, 2025 11:24:46.509593964 CET	49733	443	192.168.2.4	52.222.232.99
Mar 19, 2025 11:24:46.509599924 CET	443	49733	52.222.232.99	192.168.2.4
Mar 19, 2025 11:24:46.509639978 CET	49733	443	192.168.2.4	52.222.232.99
Mar 19, 2025 11:24:46.509665966 CET	49733	443	192.168.2.4	52.222.232.99
Mar 19, 2025 11:24:46.512212038 CET	443	49733	52.222.232.99	192.168.2.4
Mar 19, 2025 11:24:46.512236118 CET	443	49733	52.222.232.99	192.168.2.4
Mar 19, 2025 11:24:46.512310982 CET	49733	443	192.168.2.4	52.222.232.99
Mar 19, 2025 11:24:46.512315035 CET	443	49733	52.222.232.99	192.168.2.4
Mar 19, 2025 11:24:46.512393951 CET	49733	443	192.168.2.4	52.222.232.99
Mar 19, 2025 11:24:46.513958931 CET	443	49733	52.222.232.99	192.168.2.4
Mar 19, 2025 11:24:46.513983965 CET	443	49733	52.222.232.99	192.168.2.4
Mar 19, 2025 11:24:46.514038086 CET	49733	443	192.168.2.4	52.222.232.99
Mar 19, 2025 11:24:46.514044046 CET	443	49733	52.222.232.99	192.168.2.4
Mar 19, 2025 11:24:46.514085054 CET	49733	443	192.168.2.4	52.222.232.99
Mar 19, 2025 11:24:46.514115095 CET	49733	443	192.168.2.4	52.222.232.99
Mar 19, 2025 11:24:46.515398026 CET	443	49733	52.222.232.99	192.168.2.4
Mar 19, 2025 11:24:46.515427113 CET	443	49733	52.222.232.99	192.168.2.4
Mar 19, 2025 11:24:46.515494108 CET	49733	443	192.168.2.4	52.222.232.99
Mar 19, 2025 11:24:46.515499115 CET	443	49733	52.222.232.99	192.168.2.4
Mar 19, 2025 11:24:46.515512943 CET	443	49733	52.222.232.99	192.168.2.4
Mar 19, 2025 11:24:46.515537977 CET	49733	443	192.168.2.4	52.222.232.99
Mar 19, 2025 11:24:46.515562057 CET	49733	443	192.168.2.4	52.222.232.99
Mar 19, 2025 11:24:46.517708063 CET	49732	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.517930031 CET	49733	443	192.168.2.4	52.222.232.99
Mar 19, 2025 11:24:46.524427891 CET	49733	443	192.168.2.4	52.222.232.99
Mar 19, 2025 11:24:46.524440050 CET	443	49733	52.222.232.99	192.168.2.4
Mar 19, 2025 11:24:46.540324926 CET	443	49731	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.557555914 CET	443	49731	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.557605982 CET	443	49731	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.557636023 CET	443	49731	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.557667017 CET	443	49731	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.557698965 CET	443	49731	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.557738066 CET	443	49731	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.557785034 CET	49731	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.557785988 CET	49731	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.557785988 CET	49731	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.557869911 CET	443	49731	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.558342934 CET	443	49731	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.558408976 CET	49731	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.558429003 CET	443	49731	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.562321901 CET	443	49731	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.562355042 CET	443	49731	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.562388897 CET	443	49731	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.562408924 CET	49731	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.562427044 CET	443	49731	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.562455893 CET	49731	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.562560081 CET	443	49731	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.562607050 CET	443	49731	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.562608004 CET	49731	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.562621117 CET	443	49731	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.562664032 CET	49731	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.562678099 CET	443	49731	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.562722921 CET	443	49731	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.562963009 CET	49731	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.562977076 CET	443	49731	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.563664913 CET	443	49731	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.563704014 CET	443	49731	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.563716888 CET	49731	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.563730955 CET	443	49731	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.563787937 CET	49731	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.563796997 CET	443	49731	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.563807011 CET	443	49731	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.563848972 CET	49731	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.563863993 CET	443	49731	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.564332962 CET	443	49732	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.564630032 CET	443	49731	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.564662933 CET	443	49731	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.564685106 CET	49731	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.564699888 CET	443	49731	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.564758062 CET	49731	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.564771891 CET	443	49731	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.564790010 CET	443	49731	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.564842939 CET	49731	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.565376043 CET	49731	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.565408945 CET	443	49731	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.574807882 CET	443	49732	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.574858904 CET	443	49732	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.574902058 CET	443	49732	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.574944019 CET	443	49732	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.574949026 CET	49732	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.574985027 CET	443	49732	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.575001001 CET	49732	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.575030088 CET	443	49732	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.575067997 CET	443	49732	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.575095892 CET	49732	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.575104952 CET	443	49732	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.575150967 CET	443	49732	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.575165033 CET	49732	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.575171947 CET	443	49732	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.575231075 CET	49732	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.575773001 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.575830936 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.575957060 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.576087952 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.576117039 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.580463886 CET	443	49732	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.580538034 CET	443	49732	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.580570936 CET	443	49732	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.580576897 CET	49732	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.580600023 CET	443	49732	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.580657005 CET	49732	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.580841064 CET	443	49732	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.580913067 CET	443	49732	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.580946922 CET	49732	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.580951929 CET	443	49732	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.580964088 CET	443	49732	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.580992937 CET	49732	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.581001997 CET	443	49732	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.581796885 CET	443	49732	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.581840038 CET	443	49732	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.581876040 CET	443	49732	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.581909895 CET	443	49732	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.581928968 CET	49732	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.581957102 CET	443	49732	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.581973076 CET	49732	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.582001925 CET	49732	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.582748890 CET	443	49732	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.582823992 CET	443	49732	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.582859039 CET	443	49732	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.582866907 CET	49732	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.582874060 CET	443	49732	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.582937002 CET	443	49732	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.582942963 CET	49732	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.582990885 CET	49732	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.583350897 CET	49732	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.583368063 CET	443	49732	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.599337101 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.600006104 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.601298094 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.601336956 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.620043039 CET	49736	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.620076895 CET	443	49736	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.620136023 CET	49736	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.620446920 CET	49736	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.620471001 CET	443	49736	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.656284094 CET	443	49736	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.680552959 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.680609941 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.680640936 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.680674076 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.680700064 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.680706978 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.680741072 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.680752993 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.680752993 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.680788994 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.680823088 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.680874109 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.680890083 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.681988001 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.682046890 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.682063103 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.685635090 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.685671091 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.685687065 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.685703993 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.685754061 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.685760021 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.685772896 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.685820103 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.685825109 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.685837984 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.685894966 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.685908079 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.686625957 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.686665058 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.686676979 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.686690092 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.686738014 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.686750889 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.687570095 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.687603951 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.687617064 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.687629938 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.687674046 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.687680006 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.687695026 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.687745094 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.688205004 CET	49736	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.688327074 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.688405991 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.688443899 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.688484907 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.688499928 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.688548088 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.688800097 CET	49736	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.688807964 CET	443	49736	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.689097881 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.690543890 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.690583944 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.690613031 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.690618038 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.690640926 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.690690994 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.690705061 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.690747976 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.690782070 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.690798998 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.690817118 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.690840960 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.691104889 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.691153049 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.691170931 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.691193104 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.691250086 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.691262960 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.691306114 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.691894054 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.692053080 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.692102909 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.692116022 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.692142010 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.692174911 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.692187071 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.692219019 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.693252087 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.693303108 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.693319082 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.693340063 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.693380117 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.693386078 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.693397999 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.693552971 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.693577051 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.694246054 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.694298029 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.694309950 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.694319010 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.694351912 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.694360018 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.694370985 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.694385052 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.694441080 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.695138931 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.695198059 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.695228100 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.695302963 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.696188927 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.696263075 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.696422100 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.696470022 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.696486950 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.696531057 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.696578026 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.696625948 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.696640015 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.696686983 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.696894884 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.696938038 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.696950912 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.696969032 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.697000027 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.697027922 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.697072983 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.697087049 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.697170019 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.697381973 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.697432041 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.697453976 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.697474957 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.697494984 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.697500944 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.697514057 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.697519064 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.697534084 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.697554111 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.697576046 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.697596073 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.697602034 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.697628975 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.698421955 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.698467970 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.698468924 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.698486090 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.698519945 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.698533058 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.698573112 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.698580980 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.698586941 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.698613882 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.698613882 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.698652983 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.698658943 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.698666096 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.698815107 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.699346066 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.699388981 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.699397087 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.699407101 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.699449062 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.699451923 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.699465036 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.699493885 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.699505091 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.699513912 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.699518919 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.699549913 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.699549913 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.699588060 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.699589968 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.699600935 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.699634075 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.700227976 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.700273037 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.700278044 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.700284004 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.700323105 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.700368881 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.700413942 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.700423002 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.700428963 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.700460911 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.700468063 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.702058077 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.702083111 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.702125072 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.702131033 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.702142954 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.702162981 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.702167988 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.702184916 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.702192068 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.702202082 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.702224016 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.702234030 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.702239990 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.702245951 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.702269077 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.702285051 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.702291965 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.702316046 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.702348948 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.702617884 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.702640057 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.702693939 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.702699900 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.702725887 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.702760935 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.702761889 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.702771902 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.702811003 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.702816963 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.702821970 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.702860117 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.702876091 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.703548908 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.703572035 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.703614950 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.703620911 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.703648090 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.703660965 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.703666925 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.703672886 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.703696012 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.703716040 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.703722000 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.703747988 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.703762054 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.704510927 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.704525948 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.704586029 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.704592943 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.704648972 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.704668045 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.704709053 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.704715014 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.704740047 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.704762936 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.704771996 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.704787016 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.704821110 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.704827070 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.704850912 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.704858065 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.705214977 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.705231905 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.705282927 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.705290079 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.705367088 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.705372095 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.705379009 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.705408096 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.705435991 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.705456018 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.705460072 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.705498934 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.705507040 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.705529928 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.705564022 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.705569983 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.705595016 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.705606937 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.705666065 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.705682039 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.705734015 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.705740929 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.705791950 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.707094908 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.707110882 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.707148075 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.707153082 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.707181931 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.707199097 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.707740068 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.707763910 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.707819939 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.707834005 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.707863092 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.707882881 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.707981110 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.707997084 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.708040953 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.708054066 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.708079100 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.708096027 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.708213091 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.708229065 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.708270073 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.708282948 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.708334923 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.708334923 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.708410978 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.708429098 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.708472013 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.708473921 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.708486080 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.708493948 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.708549976 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.708575010 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.708619118 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.712228060 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.720840931 CET	49735	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.720869064 CET	443	49735	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.729597092 CET	443	49736	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.729823112 CET	443	49736	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:46.729877949 CET	49736	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.788378000 CET	49736	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:46.788413048 CET	443	49736	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.181014061 CET	49678	443	192.168.2.4	20.189.173.27
Mar 19, 2025 11:24:47.280989885 CET	49741	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.281030893 CET	443	49741	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.281090975 CET	49741	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.281327963 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.281379938 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.281428099 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.281974077 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.281992912 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.282254934 CET	49741	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.282268047 CET	443	49741	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.326301098 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.326381922 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.326637030 CET	443	49741	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.326693058 CET	49741	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.327153921 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.327166080 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.327426910 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.327502966 CET	49741	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.327507973 CET	443	49741	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.327677011 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.327737093 CET	443	49741	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.327980042 CET	49741	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.372323036 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.372334003 CET	443	49741	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.401318073 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.401403904 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.401437044 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.401463032 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.401482105 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.401525021 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.401544094 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.401549101 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.401561022 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.401596069 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.401603937 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.401645899 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.401798010 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.404587984 CET	443	49741	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.404674053 CET	443	49741	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.404721975 CET	49741	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.405194044 CET	49741	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.405208111 CET	443	49741	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.406379938 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.406409025 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.406444073 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.406445980 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.406462908 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.406480074 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.406491041 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.406528950 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.406537056 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.406873941 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.406904936 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.406924963 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.406935930 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.406968117 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.406974077 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.407691956 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.407722950 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.407737970 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.407748938 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.407840967 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.407846928 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.408529997 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.408562899 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.408595085 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.408602953 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.408613920 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.408627033 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.410610914 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.410648108 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.410664082 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.410677910 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.410898924 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.410906076 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.411834955 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.411894083 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.411906004 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.412103891 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.412139893 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.412147045 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.412154913 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.412187099 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.412192106 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.413141966 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.413175106 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.413203955 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.413207054 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.413219929 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.413259983 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.413264990 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.413292885 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.413331985 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.413338900 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.414113998 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.414171934 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.414175987 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.414187908 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.414215088 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.415004015 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.415051937 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.415086031 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.415124893 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.415790081 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.415847063 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.415890932 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.415936947 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.416723967 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.416779041 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.416825056 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.416871071 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.416888952 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.416898966 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.416913033 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.416997910 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.417701960 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.417737007 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.417749882 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.417758942 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.417774916 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.417805910 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.417874098 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.417913914 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.418741941 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.418793917 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.418823957 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.418865919 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.418894053 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.418937922 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.419003963 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.419045925 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.419718981 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.419750929 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.419773102 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.419784069 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.419800043 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.419822931 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.419862032 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.419867992 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.419914007 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.420090914 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.420140028 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.420404911 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.420449018 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.420452118 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.420460939 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.420486927 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.420561075 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.420593977 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.420605898 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.420612097 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.420634985 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.421360970 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.421391010 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.421418905 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.421431065 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.421443939 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.421499014 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.421540022 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.421546936 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.421591043 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.421614885 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.421658039 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.422158957 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.422203064 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.422349930 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.422390938 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.422512054 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.422561884 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.422573090 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.422625065 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.422710896 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.422745943 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.422760010 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.422766924 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.422781944 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.422784090 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.422820091 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.422826052 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.422892094 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.423214912 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.423261881 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.423379898 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.423427105 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.423444033 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.423480034 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.423546076 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.423585892 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.424223900 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.424263954 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.424285889 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.424295902 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.424315929 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.424628973 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.424648046 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.424679995 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.424690008 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.424715996 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.425302029 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.425314903 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.425370932 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.425383091 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.425417900 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.425950050 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.425965071 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.426014900 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.426026106 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.426265001 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.426310062 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.426325083 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.426354885 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.426364899 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.426383018 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.426397085 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.426753998 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.426768064 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.426805973 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.426814079 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.426827908 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.426856041 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.427120924 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.427138090 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.427186966 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.427191973 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.427202940 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.427223921 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.427234888 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.427242994 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.427257061 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.427279949 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.427813053 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.427828074 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.427882910 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.427891970 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.427926064 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.428045034 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.428065062 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.428102016 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.428102970 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.428117990 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.428123951 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.428138971 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.428147078 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.428177118 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.428180933 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.428201914 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.428212881 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.428297043 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.428319931 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.428345919 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.428353071 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.428371906 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.428385019 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.429596901 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.429610968 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.429663897 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.429678917 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.429898977 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.429915905 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.429930925 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.429938078 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.429992914 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.430022955 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.430036068 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.430080891 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.430087090 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.430196047 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.430213928 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.430243015 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.430248976 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.430270910 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.430295944 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.430296898 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.430310965 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.430331945 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.430351973 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.430355072 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.430355072 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.430365086 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.430377007 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.430408001 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.430478096 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.430495977 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.430529118 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.430533886 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.430556059 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.430685997 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.430701971 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.430725098 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.430731058 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.430747986 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.430775881 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.431061029 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.431093931 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.431118965 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.431127071 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.431139946 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.431143045 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.431179047 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.431390047 CET	49742	443	192.168.2.4	104.18.161.117
Mar 19, 2025 11:24:47.431404114 CET	443	49742	104.18.161.117	192.168.2.4
Mar 19, 2025 11:24:47.492482901 CET	49678	443	192.168.2.4	20.189.173.27
Mar 19, 2025 11:24:48.101968050 CET	49678	443	192.168.2.4	20.189.173.27
Mar 19, 2025 11:24:49.305020094 CET	49678	443	192.168.2.4	20.189.173.27
Mar 19, 2025 11:24:49.820741892 CET	49671	443	192.168.2.4	204.79.197.203
Mar 19, 2025 11:24:51.710890055 CET	49678	443	192.168.2.4	20.189.173.27
Mar 19, 2025 11:24:54.836957932 CET	49745	80	192.168.2.4	216.58.206.67
Mar 19, 2025 11:24:54.841685057 CET	80	49745	216.58.206.67	192.168.2.4
Mar 19, 2025 11:24:54.841783047 CET	49745	80	192.168.2.4	216.58.206.67
Mar 19, 2025 11:24:54.842417002 CET	49745	80	192.168.2.4	216.58.206.67
Mar 19, 2025 11:24:54.847047091 CET	80	49745	216.58.206.67	192.168.2.4
Mar 19, 2025 11:24:54.858455896 CET	80	49745	216.58.206.67	192.168.2.4
Mar 19, 2025 11:24:54.864443064 CET	49745	80	192.168.2.4	216.58.206.67
Mar 19, 2025 11:24:54.871784925 CET	80	49745	216.58.206.67	192.168.2.4
Mar 19, 2025 11:24:54.915901899 CET	49745	80	192.168.2.4	216.58.206.67
Mar 19, 2025 11:24:55.609603882 CET	443	49726	142.250.185.68	192.168.2.4
Mar 19, 2025 11:24:55.609667063 CET	443	49726	142.250.185.68	192.168.2.4
Mar 19, 2025 11:24:55.609718084 CET	49726	443	192.168.2.4	142.250.185.68
Mar 19, 2025 11:24:55.733946085 CET	49726	443	192.168.2.4	142.250.185.68
Mar 19, 2025 11:24:55.733977079 CET	443	49726	142.250.185.68	192.168.2.4
Mar 19, 2025 11:24:56.512954950 CET	49678	443	192.168.2.4	20.189.173.27
Mar 19, 2025 11:24:59.424948931 CET	49671	443	192.168.2.4	204.79.197.203
Mar 19, 2025 11:25:01.333277941 CET	443	49729	104.18.36.248	192.168.2.4
Mar 19, 2025 11:25:01.333352089 CET	443	49729	104.18.36.248	192.168.2.4
Mar 19, 2025 11:25:01.333482027 CET	49729	443	192.168.2.4	104.18.36.248
Mar 19, 2025 11:25:01.353617907 CET	49729	443	192.168.2.4	104.18.36.248
Mar 19, 2025 11:25:01.353651047 CET	443	49729	104.18.36.248	192.168.2.4
Mar 19, 2025 11:25:06.117131948 CET	49678	443	192.168.2.4	20.189.173.27
Mar 19, 2025 11:25:45.635082960 CET	49752	443	192.168.2.4	142.250.185.68
Mar 19, 2025 11:25:45.635132074 CET	443	49752	142.250.185.68	192.168.2.4
Mar 19, 2025 11:25:45.635332108 CET	49752	443	192.168.2.4	142.250.185.68
Mar 19, 2025 11:25:45.635473967 CET	49752	443	192.168.2.4	142.250.185.68
Mar 19, 2025 11:25:45.635487080 CET	443	49752	142.250.185.68	192.168.2.4
Mar 19, 2025 11:25:45.665415049 CET	443	49752	142.250.185.68	192.168.2.4
Mar 19, 2025 11:25:45.665702105 CET	49752	443	192.168.2.4	142.250.185.68
Mar 19, 2025 11:25:45.708323956 CET	443	49752	142.250.185.68	192.168.2.4
Mar 19, 2025 11:25:54.962449074 CET	49745	80	192.168.2.4	216.58.206.67
Mar 19, 2025 11:25:54.967479944 CET	80	49745	216.58.206.67	192.168.2.4
Mar 19, 2025 11:25:54.967560053 CET	49745	80	192.168.2.4	216.58.206.67
Mar 19, 2025 11:25:55.681752920 CET	443	49752	142.250.185.68	192.168.2.4
Mar 19, 2025 11:25:55.681830883 CET	443	49752	142.250.185.68	192.168.2.4
Mar 19, 2025 11:25:55.681907892 CET	49752	443	192.168.2.4	142.250.185.68
Mar 19, 2025 11:25:57.354422092 CET	49752	443	192.168.2.4	142.250.185.68
Mar 19, 2025 11:25:57.354473114 CET	443	49752	142.250.185.68	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 19, 2025 11:24:41.154311895 CET	53	50470	1.1.1.1	192.168.2.4
Mar 19, 2025 11:24:41.214020014 CET	53	63248	1.1.1.1	192.168.2.4
Mar 19, 2025 11:24:41.510518074 CET	53	56981	1.1.1.1	192.168.2.4
Mar 19, 2025 11:24:45.571084976 CET	62288	53	192.168.2.4	1.1.1.1
Mar 19, 2025 11:24:45.571232080 CET	49385	53	192.168.2.4	1.1.1.1
Mar 19, 2025 11:24:45.578234911 CET	53	49385	1.1.1.1	192.168.2.4
Mar 19, 2025 11:24:45.578267097 CET	53	62288	1.1.1.1	192.168.2.4
Mar 19, 2025 11:24:46.273366928 CET	59644	53	192.168.2.4	1.1.1.1
Mar 19, 2025 11:24:46.273556948 CET	65247	53	192.168.2.4	1.1.1.1
Mar 19, 2025 11:24:46.284748077 CET	53	59644	1.1.1.1	192.168.2.4
Mar 19, 2025 11:24:46.284837961 CET	53	65247	1.1.1.1	192.168.2.4
Mar 19, 2025 11:24:46.449327946 CET	65437	53	192.168.2.4	1.1.1.1
Mar 19, 2025 11:24:46.449707985 CET	50472	53	192.168.2.4	1.1.1.1
Mar 19, 2025 11:24:46.450279951 CET	52162	53	192.168.2.4	1.1.1.1
Mar 19, 2025 11:24:46.450623989 CET	56368	53	192.168.2.4	1.1.1.1
Mar 19, 2025 11:24:46.458060980 CET	53	50472	1.1.1.1	192.168.2.4
Mar 19, 2025 11:24:46.458312988 CET	53	65437	1.1.1.1	192.168.2.4
Mar 19, 2025 11:24:46.459460020 CET	53	52162	1.1.1.1	192.168.2.4
Mar 19, 2025 11:24:46.459700108 CET	53	56368	1.1.1.1	192.168.2.4
Mar 19, 2025 11:24:47.270987034 CET	60995	53	192.168.2.4	1.1.1.1
Mar 19, 2025 11:24:47.271245956 CET	58651	53	192.168.2.4	1.1.1.1
Mar 19, 2025 11:24:47.278717995 CET	53	60995	1.1.1.1	192.168.2.4
Mar 19, 2025 11:24:47.279679060 CET	53	58651	1.1.1.1	192.168.2.4
Mar 19, 2025 11:24:54.468480110 CET	58824	53	192.168.2.4	1.1.1.1
Mar 19, 2025 11:24:54.468599081 CET	54814	53	192.168.2.4	1.1.1.1
Mar 19, 2025 11:24:54.484067917 CET	53	54814	1.1.1.1	192.168.2.4
Mar 19, 2025 11:24:54.484101057 CET	53	58824	1.1.1.1	192.168.2.4
Mar 19, 2025 11:24:54.608107090 CET	50558	53	192.168.2.4	1.1.1.1
Mar 19, 2025 11:24:54.615863085 CET	53	50558	1.1.1.1	192.168.2.4
Mar 19, 2025 11:24:54.695729017 CET	50358	53	192.168.2.4	8.8.8.8
Mar 19, 2025 11:24:54.696182013 CET	63419	53	192.168.2.4	1.1.1.1
Mar 19, 2025 11:24:54.702374935 CET	53	50358	8.8.8.8	192.168.2.4
Mar 19, 2025 11:24:54.702856064 CET	53	63419	1.1.1.1	192.168.2.4
Mar 19, 2025 11:24:55.711198092 CET	64714	53	192.168.2.4	1.1.1.1
Mar 19, 2025 11:24:55.712002039 CET	54953	53	192.168.2.4	1.1.1.1
Mar 19, 2025 11:24:55.718842983 CET	53	64714	1.1.1.1	192.168.2.4
Mar 19, 2025 11:24:55.727066040 CET	53	54953	1.1.1.1	192.168.2.4
Mar 19, 2025 11:24:55.734343052 CET	64443	53	192.168.2.4	1.1.1.1
Mar 19, 2025 11:24:55.734586954 CET	59024	53	192.168.2.4	1.1.1.1
Mar 19, 2025 11:24:55.741961956 CET	53	64443	1.1.1.1	192.168.2.4
Mar 19, 2025 11:24:55.750042915 CET	53	59024	1.1.1.1	192.168.2.4
Mar 19, 2025 11:24:58.568100929 CET	53	54622	1.1.1.1	192.168.2.4
Mar 19, 2025 11:25:00.772671938 CET	56333	53	192.168.2.4	1.1.1.1
Mar 19, 2025 11:25:00.772820950 CET	64970	53	192.168.2.4	1.1.1.1
Mar 19, 2025 11:25:00.780234098 CET	53	64970	1.1.1.1	192.168.2.4
Mar 19, 2025 11:25:00.787518024 CET	53	56333	1.1.1.1	192.168.2.4
Mar 19, 2025 11:25:00.793231964 CET	57555	53	192.168.2.4	1.1.1.1
Mar 19, 2025 11:25:00.835652113 CET	53	57555	1.1.1.1	192.168.2.4
Mar 19, 2025 11:25:06.571858883 CET	51095	53	192.168.2.4	1.1.1.1
Mar 19, 2025 11:25:06.571999073 CET	60573	53	192.168.2.4	1.1.1.1
Mar 19, 2025 11:25:06.587220907 CET	53	60573	1.1.1.1	192.168.2.4
Mar 19, 2025 11:25:06.620537996 CET	53	51095	1.1.1.1	192.168.2.4
Mar 19, 2025 11:25:06.623415947 CET	50849	53	192.168.2.4	1.1.1.1
Mar 19, 2025 11:25:06.631455898 CET	53	50849	1.1.1.1	192.168.2.4
Mar 19, 2025 11:25:06.643922091 CET	61635	53	192.168.2.4	1.1.1.1
Mar 19, 2025 11:25:06.644141912 CET	51402	53	192.168.2.4	8.8.8.8
Mar 19, 2025 11:25:06.650768042 CET	53	61635	1.1.1.1	192.168.2.4
Mar 19, 2025 11:25:06.652400017 CET	53	51402	8.8.8.8	192.168.2.4
Mar 19, 2025 11:25:17.560158014 CET	53	60093	1.1.1.1	192.168.2.4
Mar 19, 2025 11:25:32.665157080 CET	50032	53	192.168.2.4	1.1.1.1
Mar 19, 2025 11:25:32.672532082 CET	53	50032	1.1.1.1	192.168.2.4
Mar 19, 2025 11:25:36.665395975 CET	57545	53	192.168.2.4	1.1.1.1
Mar 19, 2025 11:25:36.665595055 CET	64415	53	192.168.2.4	1.1.1.1
Mar 19, 2025 11:25:36.673352003 CET	53	64415	1.1.1.1	192.168.2.4
Mar 19, 2025 11:25:36.681219101 CET	53	57545	1.1.1.1	192.168.2.4
Mar 19, 2025 11:25:36.682435036 CET	64340	53	192.168.2.4	1.1.1.1
Mar 19, 2025 11:25:36.691107035 CET	53	64340	1.1.1.1	192.168.2.4
Mar 19, 2025 11:25:40.594620943 CET	53	56230	1.1.1.1	192.168.2.4
Mar 19, 2025 11:25:40.894773960 CET	53	61978	1.1.1.1	192.168.2.4
Mar 19, 2025 11:25:43.563361883 CET	53	53247	1.1.1.1	192.168.2.4
Mar 19, 2025 11:25:46.749439955 CET	138	138	192.168.2.4	192.168.2.255
Mar 19, 2025 11:25:53.072339058 CET	49559	53	192.168.2.4	1.1.1.1
Mar 19, 2025 11:25:53.186408997 CET	53	49559	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Mar 19, 2025 11:24:55.750125885 CET	192.168.2.4	1.1.1.1	c237	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 19, 2025 11:24:45.571084976 CET	192.168.2.4	1.1.1.1	0x1bb3	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:24:45.571232080 CET	192.168.2.4	1.1.1.1	0x18d6	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 19, 2025 11:24:46.273366928 CET	192.168.2.4	1.1.1.1	0x4625	Standard query (0)	sso-robinhood-net-cdy--auth.webflow.io	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:24:46.273556948 CET	192.168.2.4	1.1.1.1	0xbc3b	Standard query (0)	sso-robinhood-net-cdy--auth.webflow.io	65	IN (0x0001)	false
Mar 19, 2025 11:24:46.449327946 CET	192.168.2.4	1.1.1.1	0xfb67	Standard query (0)	cdn.prod.website-files.com	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:24:46.449707985 CET	192.168.2.4	1.1.1.1	0x247b	Standard query (0)	cdn.prod.website-files.com	65	IN (0x0001)	false
Mar 19, 2025 11:24:46.450279951 CET	192.168.2.4	1.1.1.1	0x8996	Standard query (0)	d3e54v103j8qbb.cloudfront.net	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:24:46.450623989 CET	192.168.2.4	1.1.1.1	0xb3f8	Standard query (0)	d3e54v103j8qbb.cloudfront.net	65	IN (0x0001)	false
Mar 19, 2025 11:24:47.270987034 CET	192.168.2.4	1.1.1.1	0x6ec6	Standard query (0)	cdn.prod.website-files.com	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:24:47.271245956 CET	192.168.2.4	1.1.1.1	0x55b7	Standard query (0)	cdn.prod.website-files.com	65	IN (0x0001)	false
Mar 19, 2025 11:24:54.468480110 CET	192.168.2.4	1.1.1.1	0x431c	Standard query (0)	robenboodlogi.info	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:24:54.468599081 CET	192.168.2.4	1.1.1.1	0x606c	Standard query (0)	robenboodlogi.info	65	IN (0x0001)	false
Mar 19, 2025 11:24:54.608107090 CET	192.168.2.4	1.1.1.1	0x7aa5	Standard query (0)	robenboodlogi.info	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:24:54.695729017 CET	192.168.2.4	8.8.8.8	0xbbdd	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:24:54.696182013 CET	192.168.2.4	1.1.1.1	0xf9fe	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:24:55.711198092 CET	192.168.2.4	1.1.1.1	0x172b	Standard query (0)	robenboodlogi.info	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:24:55.712002039 CET	192.168.2.4	1.1.1.1	0x8f1d	Standard query (0)	robenboodlogi.info	65	IN (0x0001)	false
Mar 19, 2025 11:24:55.734343052 CET	192.168.2.4	1.1.1.1	0x74f9	Standard query (0)	robenboodlogi.info	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:24:55.734586954 CET	192.168.2.4	1.1.1.1	0x1ca4	Standard query (0)	robenboodlogi.info	65	IN (0x0001)	false
Mar 19, 2025 11:25:00.772671938 CET	192.168.2.4	1.1.1.1	0x5c2c	Standard query (0)	robenboodlogi.info	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:25:00.772820950 CET	192.168.2.4	1.1.1.1	0x9356	Standard query (0)	robenboodlogi.info	65	IN (0x0001)	false
Mar 19, 2025 11:25:00.793231964 CET	192.168.2.4	1.1.1.1	0xa30b	Standard query (0)	robenboodlogi.info	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:25:06.571858883 CET	192.168.2.4	1.1.1.1	0xf2c4	Standard query (0)	robenboodlogi.info	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:25:06.571999073 CET	192.168.2.4	1.1.1.1	0x9626	Standard query (0)	robenboodlogi.info	65	IN (0x0001)	false
Mar 19, 2025 11:25:06.623415947 CET	192.168.2.4	1.1.1.1	0x5755	Standard query (0)	robenboodlogi.info	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:25:06.643922091 CET	192.168.2.4	1.1.1.1	0x412	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:25:06.644141912 CET	192.168.2.4	8.8.8.8	0xb8e7	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:25:32.665157080 CET	192.168.2.4	1.1.1.1	0x7d3a	Standard query (0)	robenboodlogi.info	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:25:36.665395975 CET	192.168.2.4	1.1.1.1	0xe7c0	Standard query (0)	robenboodlogi.info	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:25:36.665595055 CET	192.168.2.4	1.1.1.1	0x47a5	Standard query (0)	robenboodlogi.info	65	IN (0x0001)	false
Mar 19, 2025 11:25:36.682435036 CET	192.168.2.4	1.1.1.1	0xe56e	Standard query (0)	robenboodlogi.info	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:25:53.072339058 CET	192.168.2.4	1.1.1.1	0x7ee5	Standard query (0)	robenboodlogi.info	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 19, 2025 11:24:45.578234911 CET	1.1.1.1	192.168.2.4	0x18d6	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 19, 2025 11:24:45.578267097 CET	1.1.1.1	192.168.2.4	0x1bb3	No error (0)	www.google.com		142.250.185.68	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:24:46.284748077 CET	1.1.1.1	192.168.2.4	0x4625	No error (0)	sso-robinhood-net-cdy--auth.webflow.io		104.18.36.248	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:24:46.284748077 CET	1.1.1.1	192.168.2.4	0x4625	No error (0)	sso-robinhood-net-cdy--auth.webflow.io		172.64.151.8	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:24:46.284837961 CET	1.1.1.1	192.168.2.4	0xbc3b	No error (0)	sso-robinhood-net-cdy--auth.webflow.io			65	IN (0x0001)	false
Mar 19, 2025 11:24:46.458060980 CET	1.1.1.1	192.168.2.4	0x247b	No error (0)	cdn.prod.website-files.com			65	IN (0x0001)	false
Mar 19, 2025 11:24:46.458312988 CET	1.1.1.1	192.168.2.4	0xfb67	No error (0)	cdn.prod.website-files.com		104.18.161.117	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:24:46.458312988 CET	1.1.1.1	192.168.2.4	0xfb67	No error (0)	cdn.prod.website-files.com		104.18.160.117	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:24:46.459460020 CET	1.1.1.1	192.168.2.4	0x8996	No error (0)	d3e54v103j8qbb.cloudfront.net		52.222.232.99	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:24:46.459460020 CET	1.1.1.1	192.168.2.4	0x8996	No error (0)	d3e54v103j8qbb.cloudfront.net		52.222.232.39	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:24:46.459460020 CET	1.1.1.1	192.168.2.4	0x8996	No error (0)	d3e54v103j8qbb.cloudfront.net		52.222.232.47	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:24:46.459460020 CET	1.1.1.1	192.168.2.4	0x8996	No error (0)	d3e54v103j8qbb.cloudfront.net		52.222.232.144	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:24:47.278717995 CET	1.1.1.1	192.168.2.4	0x6ec6	No error (0)	cdn.prod.website-files.com		104.18.161.117	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:24:47.278717995 CET	1.1.1.1	192.168.2.4	0x6ec6	No error (0)	cdn.prod.website-files.com		104.18.160.117	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:24:47.279679060 CET	1.1.1.1	192.168.2.4	0x55b7	No error (0)	cdn.prod.website-files.com			65	IN (0x0001)	false
Mar 19, 2025 11:24:54.484067917 CET	1.1.1.1	192.168.2.4	0x606c	Name error (3)	robenboodlogi.info	none	none	65	IN (0x0001)	false
Mar 19, 2025 11:24:54.484101057 CET	1.1.1.1	192.168.2.4	0x431c	Name error (3)	robenboodlogi.info	none	none	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:24:54.615863085 CET	1.1.1.1	192.168.2.4	0x7aa5	Name error (3)	robenboodlogi.info	none	none	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:24:54.702374935 CET	8.8.8.8	192.168.2.4	0xbbdd	No error (0)	google.com		142.251.37.110	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:24:54.702856064 CET	1.1.1.1	192.168.2.4	0xf9fe	No error (0)	google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:24:55.718842983 CET	1.1.1.1	192.168.2.4	0x172b	Name error (3)	robenboodlogi.info	none	none	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:24:55.727066040 CET	1.1.1.1	192.168.2.4	0x8f1d	Name error (3)	robenboodlogi.info	none	none	65	IN (0x0001)	false
Mar 19, 2025 11:24:55.741961956 CET	1.1.1.1	192.168.2.4	0x74f9	Name error (3)	robenboodlogi.info	none	none	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:24:55.750042915 CET	1.1.1.1	192.168.2.4	0x1ca4	Name error (3)	robenboodlogi.info	none	none	65	IN (0x0001)	false
Mar 19, 2025 11:25:00.780234098 CET	1.1.1.1	192.168.2.4	0x9356	Name error (3)	robenboodlogi.info	none	none	65	IN (0x0001)	false
Mar 19, 2025 11:25:00.787518024 CET	1.1.1.1	192.168.2.4	0x5c2c	Name error (3)	robenboodlogi.info	none	none	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:25:00.835652113 CET	1.1.1.1	192.168.2.4	0xa30b	Name error (3)	robenboodlogi.info	none	none	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:25:06.587220907 CET	1.1.1.1	192.168.2.4	0x9626	Name error (3)	robenboodlogi.info	none	none	65	IN (0x0001)	false
Mar 19, 2025 11:25:06.620537996 CET	1.1.1.1	192.168.2.4	0xf2c4	Name error (3)	robenboodlogi.info	none	none	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:25:06.631455898 CET	1.1.1.1	192.168.2.4	0x5755	Name error (3)	robenboodlogi.info	none	none	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:25:06.650768042 CET	1.1.1.1	192.168.2.4	0x412	No error (0)	google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:25:06.652400017 CET	8.8.8.8	192.168.2.4	0xb8e7	No error (0)	google.com		142.251.37.110	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:25:32.672532082 CET	1.1.1.1	192.168.2.4	0x7d3a	Name error (3)	robenboodlogi.info	none	none	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:25:36.673352003 CET	1.1.1.1	192.168.2.4	0x47a5	Name error (3)	robenboodlogi.info	none	none	65	IN (0x0001)	false
Mar 19, 2025 11:25:36.681219101 CET	1.1.1.1	192.168.2.4	0xe7c0	Name error (3)	robenboodlogi.info	none	none	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:25:36.691107035 CET	1.1.1.1	192.168.2.4	0xe56e	Name error (3)	robenboodlogi.info	none	none	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:25:53.186408997 CET	1.1.1.1	192.168.2.4	0x7ee5	Name error (3)	robenboodlogi.info	none	none	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

sso-robinhood-net-cdy--auth.webflow.io

cdn.prod.website-files.com

d3e54v103j8qbb.cloudfront.net

c.pki.goog

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.4	49745	216.58.206.67	80

Timestamp	Bytes transferred	Direction	Data
Mar 19, 2025 11:24:54.842417002 CET	202	OUT	GET /r/gsr1.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 19, 2025 11:24:54.858455896 CET	222	IN	HTTP/1.1 304 Not Modified Date: Wed, 19 Mar 2025 10:12:22 GMT Expires: Wed, 19 Mar 2025 11:02:22 GMT Last-Modified: Tue, 07 Jan 2025 07:28:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding Age: 752
Mar 19, 2025 11:24:54.864443064 CET	200	OUT	GET /r/r4.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 19, 2025 11:24:54.871784925 CET	222	IN	HTTP/1.1 304 Not Modified Date: Wed, 19 Mar 2025 10:12:44 GMT Expires: Wed, 19 Mar 2025 11:02:44 GMT Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding Age: 730

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49728	104.18.36.248	443	5344	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:24:46 UTC	688	OUT	GET / HTTP/1.1 Host: sso-robinhood-net-cdy--auth.webflow.io Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:24:46 UTC	823	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 10:24:46 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close CF-Ray: 922c4311fca2dbd4-FRA CF-Cache-Status: HIT Age: 140501 Last-Modified: Thu, 13 Mar 2025 20:25:38 GMT content-security-policy: frame-ancestors 'self' https://.webflow.com http://.webflow.com http://*.webflow.io http://webflow.com https://webflow.com surrogate-control: max-age=2147483647 surrogate-key: sso-robinhood-net-cdy--auth.webflow.io 678a1ac1977f9a10a0673b0b pageId:678a1ac1977f9a10a0673b63 x-lambda-id: fea7fc64-ac0e-405f-9685-a83e28b1c1be vary: Accept-Encoding Set-Cookie: _cfuvid=3okfglzUjPly9TR90m59lxb8.vVcHjA9ok.L0tgOkD0-1742379886421-0.0.1.1-604800000; path=/; domain=.webflow.io; HttpOnly; Secure; SameSite=None Server: cloudflare alt-svc: h3=":443"; ma=86400
2025-03-19 10:24:46 UTC	546	IN	Data Raw: 63 61 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 21 2d 2d 20 54 68 69 73 20 73 69 74 65 20 77 61 73 20 63 72 65 61 74 65 64 20 69 6e 20 57 65 62 66 6c 6f 77 2e 20 68 74 74 70 73 3a 2f 2f 77 65 62 66 6c 6f 77 2e 63 6f 6d 20 2d 2d 3e 3c 21 2d 2d 20 4c 61 73 74 20 50 75 62 6c 69 73 68 65 64 3a 20 46 72 69 20 4a 61 6e 20 31 37 20 32 30 32 35 20 30 38 3a 35 36 3a 30 35 20 47 4d 54 2b 30 30 30 30 20 28 43 6f 6f 72 64 69 6e 61 74 65 64 20 55 6e 69 76 65 72 73 61 6c 20 54 69 6d 65 29 20 2d 2d 3e 3c 68 74 6d 6c 20 64 61 74 61 2d 77 66 2d 64 6f 6d 61 69 6e 3d 22 73 73 6f 2d 72 6f 62 69 6e 68 6f 6f 64 2d 6e 65 74 2d 63 64 79 2d 2d 61 75 74 68 2e 77 65 62 66 6c 6f 77 2e 69 6f 22 20 64 61 74 61 2d 77 66 2d 70 61 67 65 3d 22 36 37 38 61 31 61 63 31 39 37 Data Ascii: ca2<!DOCTYPE html>... This site was created in Webflow. https://webflow.com -->... Last Published: Fri Jan 17 2025 08:56:05 GMT+0000 (Coordinated Universal Time) --><html data-wf-domain="sso-robinhood-net-cdy--auth.webflow.io" data-wf-page="678a1ac197
2025-03-19 10:24:46 UTC	1369	IN	Data Raw: 46 73 2c 20 6f 70 74 69 6f 6e 73 2c 20 61 6e 64 20 63 72 79 70 74 6f 63 75 72 72 65 6e 63 69 65 73 2e 20 57 69 74 68 20 61 20 75 73 65 72 2d 66 72 69 65 6e 64 6c 79 20 69 6e 74 65 72 66 61 63 65 2c 20 69 74 20 68 61 73 20 67 61 69 6e 65 64 20 70 6f 70 75 6c 61 72 69 74 79 20 61 6d 6f 6e 67 20 62 65 67 69 6e 6e 65 72 73 20 61 6e 64 20 73 65 61 73 6f 6e 65 64 20 74 72 61 64 65 72 73 20 61 6c 69 6b 65 2e 20 57 68 65 74 68 65 72 20 79 6f 75 26 23 78 32 37 3b 72 65 20 6c 6f 6f 6b 69 6e 67 20 74 6f 20 73 74 61 72 74 20 79 6f 75 72 20 66 69 72 73 74 20 69 6e 76 65 73 74 6d 65 6e 74 20 70 6f 72 74 66 6f 6c 69 6f 20 6f 72 20 72 65 66 69 6e 65 20 61 6e 20 65 78 69 73 74 69 6e 67 20 73 74 72 61 74 65 67 79 2c 20 52 6f 62 69 6e 68 6f 6f 64 20 70 72 6f 76 69 64 65 73 Data Ascii: Fs, options, and cryptocurrencies. With a user-friendly interface, it has gained popularity among beginners and seasoned traders alike. Whether you're looking to start your first investment portfolio or refine an existing strategy, Robinhood provides
2025-03-19 10:24:46 UTC	1326	IN	Data Raw: 73 69 7a 65 73 3d 22 28 6d 61 78 2d 77 69 64 74 68 3a 20 31 33 34 38 70 78 29 20 31 30 30 76 77 2c 20 31 33 34 38 70 78 22 20 73 72 63 73 65 74 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 70 72 6f 64 2e 77 65 62 73 69 74 65 2d 66 69 6c 65 73 2e 63 6f 6d 2f 36 37 38 61 31 61 63 31 39 37 37 66 39 61 31 30 61 30 36 37 33 62 30 62 2f 36 37 38 61 31 61 65 38 65 31 37 32 39 66 35 34 62 37 62 39 65 66 64 30 5f 53 63 72 65 65 6e 73 68 6f 74 25 32 30 32 30 32 35 2d 30 31 2d 30 38 25 32 30 61 74 25 32 30 31 33 2d 33 39 2d 31 34 25 32 30 43 6f 6d 6d 69 73 73 69 6f 6e 2d 66 72 65 65 25 32 30 53 74 6f 63 6b 25 32 30 54 72 61 64 69 6e 67 25 32 30 25 32 36 25 32 30 49 6e 76 65 73 74 69 6e 67 25 32 30 41 70 70 25 32 30 52 6f 62 69 6e 68 6f 6f 64 2d 70 2d 35 30 30 2e 70 6e Data Ascii: sizes="(max-width: 1348px) 100vw, 1348px" srcset="https://cdn.prod.website-files.com/678a1ac1977f9a10a0673b0b/678a1ae8e1729f54b7b9efd0_Screenshot%202025-01-08%20at%2013-39-14%20Commission-free%20Stock%20Trading%20%26%20Investing%20App%20Robinhood-p-500.pn
2025-03-19 10:24:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49731	104.18.161.117	443	5344	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:24:46 UTC	681	OUT	GET /678a1ac1977f9a10a0673b0b/css/sso-robinhood-net-cdy--auth.webflow.ce67eee42.css HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Referer: https://sso-robinhood-net-cdy--auth.webflow.io/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:24:46 UTC	652	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 10:24:46 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close x-amz-id-2: f9JXnaLd0FGUJtM6Qc+lgEyU75MhJWlpbU0PYKr+07gb7FuhsiIGMEW9amiMZdA6wSR6gwdBqP/pGxg+oe8fzCV+YFwKWIG/ x-amz-request-id: ZYTGVFN2HGXCBYS4 Last-Modified: Fri, 17 Jan 2025 08:56:06 GMT ETag: W/"b6a57deb813fab88fe5f35ba5bb2c342" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000, immutable x-amz-version-id: K9IcLT4aXtilnRdVHAAT387eimyRpSZU CF-Cache-Status: HIT Age: 135762 Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 922c4312dc1218d8-FRA alt-svc: h3=":443"; ma=86400
2025-03-19 10:24:46 UTC	717	IN	Data Raw: 37 64 32 34 0d 0a 68 74 6d 6c 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 3b 0a 20 20 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 62 6f 64 79 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 7d 0a 0a 61 72 74 69 63 6c 65 2c 20 61 73 69 64 65 2c 20 64 65 74 61 69 6c 73 2c 20 66 69 67 63 61 70 74 69 6f 6e 2c 20 66 69 67 75 72 65 2c 20 66 6f 6f 74 65 72 2c 20 68 65 61 64 65 72 2c 20 68 67 72 6f 75 70 2c 20 6d 61 69 6e 2c 20 6d 65 6e 75 2c 20 6e 61 76 2c 20 73 65 63 74 69 6f 6e 2c 20 73 75 6d 6d 61 72 79 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 7d 0a Data Ascii: 7d24html { -webkit-text-size-adjust: 100%; -ms-text-size-adjust: 100%; font-family: sans-serif;}body { margin: 0;}article, aside, details, figcaption, figure, footer, header, hgroup, main, menu, nav, section, summary { display: block;}
2025-03-19 10:24:46 UTC	1369	IN	Data Raw: 73 6d 61 6c 6c 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 38 30 25 3b 0a 7d 0a 0a 73 75 62 2c 20 73 75 70 20 7b 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 62 61 73 65 6c 69 6e 65 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 37 35 25 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 30 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 7d 0a 0a 73 75 70 20 7b 0a 20 20 74 6f 70 3a 20 2d 2e 35 65 6d 3b 0a 7d 0a 0a 73 75 62 20 7b 0a 20 20 62 6f 74 74 6f 6d 3a 20 2d 2e 32 35 65 6d 3b 0a 7d 0a 0a 69 6d 67 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 30 3b 0a 7d 0a 0a 73 76 67 3a 6e 6f 74 28 3a 72 6f 6f 74 29 20 7b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 0a 68 72 20 7b 0a 20 20 62 6f 78 2d 73 69 7a Data Ascii: small { font-size: 80%;}sub, sup { vertical-align: baseline; font-size: 75%; line-height: 0; position: relative;}sup { top: -.5em;}sub { bottom: -.25em;}img { border: 0;}svg:not(:root) { overflow: hidden;}hr { box-siz
2025-03-19 10:24:46 UTC	1369	IN	Data Raw: 73 65 3a 20 63 6f 6c 6c 61 70 73 65 3b 0a 20 20 62 6f 72 64 65 72 2d 73 70 61 63 69 6e 67 3a 20 30 3b 0a 7d 0a 0a 74 64 2c 20 74 68 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 7d 0a 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 77 65 62 66 6c 6f 77 2d 69 63 6f 6e 73 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 22 64 61 74 61 3a 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 66 6f 6e 74 2d 74 74 66 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3b 62 61 73 65 36 34 2c 41 41 45 41 41 41 41 4c 41 49 41 41 41 77 41 77 54 31 4d 76 4d 67 38 53 42 69 55 41 41 41 43 38 41 41 41 41 59 47 4e 74 59 58 44 70 50 2b 61 34 41 41 41 42 48 41 41 41 41 46 78 6e 59 58 4e 77 41 41 41 41 45 41 41 41 41 58 67 41 41 41 41 49 5a 32 78 35 5a 6d 68 Data Ascii: se: collapse; border-spacing: 0;}td, th { padding: 0;}@font-face { font-family: webflow-icons; src: url("data:application/x-font-ttf;charset=utf-8;base64,AAEAAAALAIAAAwAwT1MvMg8SBiUAAAC8AAAAYGNtYXDpP+a4AAABHAAAAFxnYXNwAAAAEAAAAXgAAAAIZ2x5Zmh
2025-03-19 10:24:46 UTC	1369	IN	Data Raw: 79 67 6f 4b 43 69 4c 58 6c 31 71 61 6c 31 65 69 79 67 6f 5a 69 45 67 62 30 74 4b 56 56 56 4b 53 32 38 67 49 53 45 67 62 30 74 4b 56 56 56 4b 53 32 38 67 49 51 41 42 41 41 41 42 77 41 49 41 41 38 41 41 45 67 41 41 45 7a 51 33 50 67 45 33 4e 6a 4d 78 46 53 49 48 44 67 45 48 42 68 55 78 49 77 41 6f 4b 49 74 65 58 57 70 56 53 6b 74 76 49 43 46 6d 41 63 42 71 58 56 36 4c 4b 43 68 6d 49 53 42 76 53 30 70 56 41 41 41 41 41 67 41 41 2f 38 41 46 74 67 50 41 41 44 49 41 4f 67 41 41 41 52 59 58 48 67 45 58 46 68 55 55 42 77 34 42 42 77 59 48 49 78 55 68 49 69 63 75 41 53 63 6d 4e 54 51 33 50 67 45 33 4e 6a 4d 78 4f 41 45 78 4e 44 63 2b 41 54 63 32 4d 7a 49 58 48 67 45 58 46 68 63 56 41 54 4d 4a 41 54 4d 56 4d 7a 55 45 6a 44 38 33 4e 6c 41 58 46 78 59 58 54 6a 55 31 Data Ascii: ygoKCiLXl1qal1eiygoZiEgb0tKVVVKS28gISEgb0tKVVVKS28gIQABAAABwAIAA8AAEgAAEzQ3PgE3NjMxFSIHDgEHBhUxIwAoKIteXWpVSktvICFmAcBqXV6LKChmISBvS0pVAAAAAgAA/8AFtgPAADIAOgAAARYXHgEXFhUUBw4BBwYHIxUhIicuAScmNTQ3PgE3NjMxOAExNDc+ATc2MzIXHgEXFhcVATMJATMVMzUEjD83NlAXFxYXTjU1
2025-03-19 10:24:46 UTC	1369	IN	Data Raw: 3b 0a 7d 0a 0a 5b 63 6c 61 73 73 5e 3d 22 77 2d 69 63 6f 6e 2d 22 5d 2c 20 5b 63 6c 61 73 73 2a 3d 22 20 77 2d 69 63 6f 6e 2d 22 5d 20 7b 0a 20 20 73 70 65 61 6b 3a 20 6e 6f 6e 65 3b 0a 20 20 66 6f 6e 74 2d 76 61 72 69 61 6e 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 6e 6f 6e 65 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 20 61 6e 74 69 61 6c 69 61 73 65 64 3b 0a 20 20 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 20 67 72 61 79 73 63 61 6c 65 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 3b 0a 20 20 66 6f 6e Data Ascii: ;}[class^="w-icon-"], [class*=" w-icon-"] { speak: none; font-variant: normal; text-transform: none; -webkit-font-smoothing: antialiased; -moz-osx-font-smoothing: grayscale; font-style: normal; font-weight: normal; line-height: 1; fon
2025-03-19 10:24:46 UTC	1369	IN	Data Raw: 0a 20 20 62 6f 72 64 65 72 3a 20 30 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 39 70 78 20 31 35 70 78 3b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 7d 0a 0a 69 6e 70 75 74 2e 77 2d 62 75 74 74 6f 6e 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 20 62 75 74 74 6f 6e 3b 0a 7d 0a 0a 68 74 6d 6c 5b 64 61 74 61 2d 77 2d 64 79 6e 70 61 67 65 5d 20 5b 64 61 74 61 2d 77 2d 63 6c 6f 61 6b 5d 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 2e 77 2d 63 6f 64 65 2d 62 6c 6f 63 6b 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 75 6e 73 Data Ascii: border: 0; border-radius: 0; padding: 9px 15px; text-decoration: none; display: inline-block;}input.w-button { -webkit-appearance: button;}html[data-w-dynpage] [data-w-cloak] { color: #0000 !important;}.w-code-block { margin: uns
2025-03-19 10:24:46 UTC	1369	IN	Data Raw: 74 3b 0a 20 20 77 6f 72 64 2d 73 70 61 63 69 6e 67 3a 20 75 6e 73 65 74 3b 0a 20 20 77 6f 72 64 2d 77 72 61 70 3a 20 75 6e 73 65 74 3b 0a 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 75 6e 73 65 74 3b 0a 7d 0a 0a 2e 77 2d 77 65 62 66 6c 6f 77 2d 62 61 64 67 65 20 7b 0a 20 20 77 68 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 77 72 61 70 3b 0a 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 30 20 31 70 78 20 23 30 30 30 30 30 30 31 61 2c 20 30 20 31 70 78 20 33 70 78 20 23 30 30 30 30 30 30 31 61 3b 0a 20 20 76 69 73 69 62 69 6c 69 74 79 3a 20 76 69 73 69 62 6c 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 6f 70 61 63 69 74 79 3a 20 31 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 7a 2d 69 6e 64 65 78 Data Ascii: t; word-spacing: unset; word-wrap: unset; transition: unset;}.w-webflow-badge { white-space: nowrap; cursor: pointer; box-shadow: 0 0 0 1px #0000001a, 0 1px 3px #0000001a; visibility: visible !important; opacity: 1 !important; z-index
2025-03-19 10:24:46 UTC	1369	IN	Data Raw: 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 38 70 78 3b 0a 7d 0a 0a 70 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 3b 0a 7d 0a 0a 62 6c 6f 63 6b 71 75 6f 74 65 20 7b 0a 20 20 62 6f 72 64 65 72 2d 6c 65 66 74 3a 20 35 70 78 20 73 6f 6c 69 64 20 23 65 32 65 32 65 32 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 20 32 30 70 78 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 32 70 78 3b 0a 7d 0a 0a 66 69 67 75 72 65 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 30 70 78 3b 0a 7d 0a 0a 66 69 67 63 61 Data Ascii: nt-size: 12px; line-height: 18px;}p { margin-top: 0; margin-bottom: 10px;}blockquote { border-left: 5px solid #e2e2e2; margin: 0 0 10px; padding: 10px 20px; font-size: 18px; line-height: 22px;}figure { margin: 0 0 10px;}figca
2025-03-19 10:24:46 UTC	1369	IN	Data Raw: 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 33 38 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 38 70 78 20 31 32 70 78 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 32 38 35 37 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2e 77 2d 69 6e 70 75 74 3a 3a 70 6c 61 63 65 68 6f 6c 64 65 72 2c 20 2e 77 2d 73 65 6c 65 63 74 3a 3a 70 6c 61 63 65 68 6f 6c 64 65 72 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 39 39 39 3b 0a 7d 0a 0a 2e 77 2d 69 6e 70 75 74 3a 66 6f 63 75 73 2c 20 2e 77 2d 73 65 6c 65 63 74 3a 66 6f 63 75 73 20 7b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 33 Data Ascii: width: 100%; height: 38px; margin-bottom: 10px; padding: 8px 12px; font-size: 14px; line-height: 1.42857; display: block;}.w-input::placeholder, .w-select::placeholder { color: #999;}.w-input:focus, .w-select:focus { border-color: #3
2025-03-19 10:24:46 UTC	1369	IN	Data Raw: 69 64 74 68 3a 20 2e 31 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 2e 31 70 78 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 0a 2e 77 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 2d 64 65 66 61 75 6c 74 2c 20 2e 77 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 2d 75 70 6c 6f 61 64 69 6e 67 2c 20 2e 77 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 2d 73 75 63 63 65 73 73 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 33 33 33 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2e 77 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 2d 65 72 72 6f 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 30 70 78 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 7d 0a 0a Data Ascii: idth: .1px; height: .1px; position: absolute; overflow: hidden;}.w-file-upload-default, .w-file-upload-uploading, .w-file-upload-success { color: #333; display: inline-block;}.w-file-upload-error { margin-top: 10px; display: block;}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49733	52.222.232.99	443	5344	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:24:46 UTC	674	OUT	GET /js/jquery-3.5.1.min.dc5e7f18c8.js?site=678a1ac1977f9a10a0673b0b HTTP/1.1 Host: d3e54v103j8qbb.cloudfront.net Connection: keep-alive Origin: https://sso-robinhood-net-cdy--auth.webflow.io sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://sso-robinhood-net-cdy--auth.webflow.io/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:24:46 UTC	551	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 89476 Connection: close Last-Modified: Mon, 20 Jul 2020 17:53:02 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 19 Mar 2025 00:14:30 GMT Cache-Control: max-age=84600, must-revalidate Etag: "dc5e7f18c8d36ac1d3d4753a87c98d0a" Via: 1.1 7831c78db9d585e32d354900cc00dca6.cloudfront.net (CloudFront) Age: 36618 Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: q6RsAF_oiIx5jHlUQzUqXmP-9GP8GJ86A332dZ-9l29o7Smo67hmlA==
2025-03-19 10:24:46 UTC	15833	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 Data Ascii: /! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery
2025-03-19 10:24:46 UTC	16384	IN	Data Raw: 6e 74 4e 6f 64 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 2c 61 2c 73 2c 75 2c 6c 3d 79 21 3d 3d 6d 3f 22 6e 65 78 74 53 69 62 6c 69 6e 67 22 3a 22 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 22 2c 63 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 66 3d 78 26 26 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 70 3d 21 6e 26 26 21 78 2c 64 3d 21 31 3b 69 66 28 63 29 7b 69 66 28 79 29 7b 77 68 69 6c 65 28 6c 29 7b 61 3d 65 3b 77 68 69 6c 65 28 61 3d 61 5b 6c 5d 29 69 66 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 21 31 3b 75 3d 6c 3d 22 6f 6e 6c 79 22 3d 3d 3d 68 26 26 21 75 26 26 Data Ascii: ntNode}:function(e,t,n){var r,i,o,a,s,u,l=y!==m?"nextSibling":"previousSibling",c=e.parentNode,f=x&&e.nodeName.toLowerCase(),p=!n&&!x,d=!1;if(c){if(y){while(l){a=e;while(a=a[l])if(x?a.nodeName.toLowerCase()===f:1===a.nodeType)return!1;u=l="only"===h&&!u&&
2025-03-19 10:24:46 UTC	16384	IN	Data Raw: 6c 3f 43 2e 73 65 74 54 69 6d 65 6f 75 74 28 53 2e 72 65 61 64 79 29 3a 28 45 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 42 29 2c 43 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 42 29 29 3b 76 61 72 20 24 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 29 7b 76 61 72 20 73 3d 30 2c 75 3d 65 2e 6c 65 6e 67 74 68 2c 6c 3d 6e 75 6c 6c 3d 3d 6e 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 77 28 6e 29 29 66 6f 72 28 73 20 69 6e 20 69 3d 21 30 2c 6e 29 24 28 65 2c 74 2c 73 2c 6e 5b 73 5d 2c 21 30 2c 6f 2c 61 29 3b 65 6c 73 65 20 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 26 26 28 69 3d 21 30 2c 6d 28 72 29 7c 7c 28 61 3d 21 30 29 2c 6c 26 26 28 61 Data Ascii: l?C.setTimeout(S.ready):(E.addEventListener("DOMContentLoaded",B),C.addEventListener("load",B));var $=function(e,t,n,r,i,o,a){var s=0,u=e.length,l=null==n;if("object"===w(n))for(s in i=!0,n)$(e,t,s,n[s],!0,o,a);else if(void 0!==r&&(i=!0,m(r)\|\|(a=!0),l&&(a
2025-03-19 10:24:46 UTC	16384	IN	Data Raw: 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 29 7d 2c 6c 29 3a 62 28 75 2e 74 65 78 74 43 6f 6e 74 65 6e 74 2e 72 65 70 6c 61 63 65 28 6a 65 2c 22 22 29 2c 75 2c 6c 29 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 52 65 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 2c 69 3d 74 3f 53 2e 66 69 6c 74 65 72 28 74 2c 65 29 3a 65 2c 6f 3d 30 3b 6e 75 6c 6c 21 3d 28 72 3d 69 5b 6f 5d 29 3b 6f 2b 2b 29 6e 7c 7c 31 21 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 7c 7c 53 2e 63 6c 65 61 6e 44 61 74 61 28 76 65 28 72 29 29 2c 72 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 28 6e 26 26 69 65 28 72 29 26 26 79 65 28 76 65 28 72 2c 22 73 63 72 69 70 74 22 29 29 2c 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 72 29 29 3b 72 65 74 75 72 6e 20 Data Ascii: ibute("nonce")},l):b(u.textContent.replace(je,""),u,l))}return n}function Re(e,t,n){for(var r,i=t?S.filter(t,e):e,o=0;null!=(r=i[o]);o++)n\|\|1!==r.nodeType\|\|S.cleanData(ve(r)),r.parentNode&&(n&&ie(r)&&ye(ve(r,"script")),r.parentNode.removeChild(r));return
2025-03-19 10:24:46 UTC	16384	IN	Data Raw: 70 65 65 64 73 5b 72 5d 7c 7c 72 2c 65 3d 65 7c 7c 22 66 78 22 2c 74 68 69 73 2e 71 75 65 75 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 43 2e 73 65 74 54 69 6d 65 6f 75 74 28 65 2c 72 29 3b 74 2e 73 74 6f 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 43 2e 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 6e 29 7d 7d 29 7d 2c 72 74 3d 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 2c 69 74 3d 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 65 6c 65 63 74 22 29 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6f 70 74 69 6f 6e 22 29 29 2c 72 74 2e 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 2c 79 2e 63 68 65 63 6b 4f 6e 3d 22 22 21 3d 3d 72 74 2e 76 61 6c 75 65 2c 79 2e 6f Data Ascii: peeds[r]\|\|r,e=e\|\|"fx",this.queue(e,function(e,t){var n=C.setTimeout(e,r);t.stop=function(){C.clearTimeout(n)}})},rt=E.createElement("input"),it=E.createElement("select").appendChild(E.createElement("option")),rt.type="checkbox",y.checkOn=""!==rt.value,y.o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49732	104.18.161.117	443	5344	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:24:46 UTC	660	OUT	GET /678a1ac1977f9a10a0673b0b/js/webflow.77ac24386eb2a8dacabbd68092c045ec.js HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://sso-robinhood-net-cdy--auth.webflow.io/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:24:46 UTC	654	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 10:24:46 GMT Content-Type: text/javascript Content-Length: 37349 Connection: close x-amz-id-2: 44Waz1P2Zuyf8gP4pQhArVD4BXhvrrjRrFhQL1L8IJXZHyblH+mU0v+5y7rG+YREsZtg0Q73SME= x-amz-request-id: ZYTZEMDHBCNRBDRS Last-Modified: Fri, 17 Jan 2025 08:56:06 GMT ETag: "fc7ef472a2bca6fbdb8ab8235dec64e0" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000, immutable x-amz-version-id: KGGk2RZkWdumOY9erUz77enknL__LYKV CF-Cache-Status: HIT Age: 135762 Accept-Ranges: bytes Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 922c4312ea5730cf-FRA alt-svc: h3=":443"; ma=86400
2025-03-19 10:24:46 UTC	715	IN	Data Raw: 0a 2f 2a 21 0a 20 2a 20 57 65 62 66 6c 6f 77 3a 20 46 72 6f 6e 74 2d 65 6e 64 20 73 69 74 65 20 6c 69 62 72 61 72 79 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 4d 49 54 0a 20 2a 20 49 6e 6c 69 6e 65 20 73 63 72 69 70 74 73 20 6d 61 79 20 61 63 63 65 73 73 20 74 68 65 20 61 70 69 20 75 73 69 6e 67 20 61 6e 20 61 73 79 6e 63 20 68 61 6e 64 6c 65 72 3a 0a 20 2a 20 20 20 76 61 72 20 57 65 62 66 6c 6f 77 20 3d 20 57 65 62 66 6c 6f 77 20 7c 7c 20 5b 5d 3b 0a 20 2a 20 20 20 57 65 62 66 6c 6f 77 2e 70 75 73 68 28 72 65 61 64 79 46 75 6e 63 74 69 6f 6e 29 3b 0a 20 2a 2f 0a 0a 28 28 29 3d 3e 7b 76 61 72 20 6c 74 3d 28 65 2c 79 29 3d 3e 28 29 3d 3e 28 79 7c 7c 65 28 28 79 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 29 2e 65 78 70 6f 72 74 73 2c 79 29 2c 79 2e 65 78 70 6f 72 Data Ascii: /! Webflow: Front-end site library * @license MIT * Inline scripts may access the api using an async handler: * var Webflow = Webflow \|\| []; * Webflow.push(readyFunction); */(()=>{var lt=(e,y)=>()=>(y\|\|e((y={exports:{}}).exports,y),y.expor
2025-03-19 10:24:46 UTC	1369	IN	Data Raw: 6e 69 74 73 20 64 6f 20 6e 6f 74 20 6d 61 74 63 68 20 5b 22 2b 74 2b 22 5d 3a 20 22 2b 6e 2b 22 2c 20 22 2b 69 29 7d 66 75 6e 63 74 69 6f 6e 20 49 28 74 2c 6e 2c 69 29 7b 69 66 28 6e 21 3d 3d 76 6f 69 64 20 30 26 26 28 69 3d 6e 29 2c 74 3d 3d 3d 76 6f 69 64 20 30 29 72 65 74 75 72 6e 20 69 3b 76 61 72 20 72 3d 69 3b 72 65 74 75 72 6e 20 77 65 2e 74 65 73 74 28 74 29 7c 7c 21 58 74 2e 74 65 73 74 28 74 29 3f 72 3d 70 61 72 73 65 49 6e 74 28 74 2c 31 30 29 3a 58 74 2e 74 65 73 74 28 74 29 26 26 28 72 3d 31 65 33 2a 70 61 72 73 65 46 6c 6f 61 74 28 74 29 29 2c 30 3e 72 26 26 28 72 3d 30 29 2c 72 3d 3d 3d 72 3f 72 3a 69 7d 66 75 6e 63 74 69 6f 6e 20 42 28 74 29 7b 65 74 2e 64 65 62 75 67 26 26 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 Data Ascii: nits do not match ["+t+"]: "+n+", "+i)}function I(t,n,i){if(n!==void 0&&(i=n),t===void 0)return i;var r=i;return we.test(t)\|\|!Xt.test(t)?r=parseInt(t,10):Xt.test(t)&&(r=1e3*parseFloat(t)),0>r&&(r=0),r===r?r:i}function B(t){et.debug&&window&&window.console
2025-03-19 10:24:46 UTC	1369	IN	Data Raw: 75 72 6e 20 69 2a 74 2f 72 2b 6e 7d 5d 2c 22 65 61 73 65 2d 69 6e 2d 71 75 61 64 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 35 35 30 2c 20 30 2e 30 38 35 2c 20 30 2e 36 38 30 2c 20 30 2e 35 33 30 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 29 7b 72 65 74 75 72 6e 20 69 2a 28 74 2f 3d 72 29 2a 74 2b 6e 7d 5d 2c 22 65 61 73 65 2d 6f 75 74 2d 71 75 61 64 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 32 35 30 2c 20 30 2e 34 36 30 2c 20 30 2e 34 35 30 2c 20 30 2e 39 34 30 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 29 7b 72 65 74 75 72 6e 2d 69 2a 28 74 2f 3d 72 29 2a 28 74 2d 32 29 2b 6e 7d 5d 2c 22 65 61 73 65 2d 69 6e 2d 6f 75 74 2d 71 75 61 64 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 35 Data Ascii: urn it/r+n}],"ease-in-quad":["cubic-bezier(0.550, 0.085, 0.680, 0.530)",function(t,n,i,r){return i(t/=r)t+n}],"ease-out-quad":["cubic-bezier(0.250, 0.460, 0.450, 0.940)",function(t,n,i,r){return-i(t/=r)*(t-2)+n}],"ease-in-out-quad":["cubic-bezier(0.45
2025-03-19 10:24:46 UTC	1369	IN	Data Raw: 29 2b 6e 7d 5d 2c 22 65 61 73 65 2d 69 6e 2d 73 69 6e 65 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 37 30 2c 20 30 2c 20 30 2e 37 34 35 2c 20 30 2e 37 31 35 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 29 7b 72 65 74 75 72 6e 2d 69 2a 4d 61 74 68 2e 63 6f 73 28 74 2f 72 2a 28 4d 61 74 68 2e 50 49 2f 32 29 29 2b 69 2b 6e 7d 5d 2c 22 65 61 73 65 2d 6f 75 74 2d 73 69 6e 65 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 33 39 30 2c 20 30 2e 35 37 35 2c 20 30 2e 35 36 35 2c 20 31 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 29 7b 72 65 74 75 72 6e 20 69 2a 4d 61 74 68 2e 73 69 6e 28 74 2f 72 2a 28 4d 61 74 68 2e 50 49 2f 32 29 29 2b 6e 7d 5d 2c 22 65 61 73 65 2d 69 6e 2d 6f 75 74 2d 73 69 6e 65 22 3a 5b 22 63 Data Ascii: )+n}],"ease-in-sine":["cubic-bezier(0.470, 0, 0.745, 0.715)",function(t,n,i,r){return-iMath.cos(t/r(Math.PI/2))+i+n}],"ease-out-sine":["cubic-bezier(0.390, 0.575, 0.565, 1)",function(t,n,i,r){return iMath.sin(t/r(Math.PI/2))+n}],"ease-in-out-sine":["c
2025-03-19 10:24:46 UTC	1369	IN	Data Raw: 3d 3d 3d 76 6f 69 64 20 30 26 26 28 73 3d 31 2e 37 30 31 35 38 29 2c 69 2a 28 28 74 3d 74 2f 72 2d 31 29 2a 74 2a 28 28 73 2b 31 29 2a 74 2b 73 29 2b 31 29 2b 6e 7d 5d 2c 22 65 61 73 65 2d 69 6e 2d 6f 75 74 2d 62 61 63 6b 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 36 38 30 2c 20 2d 30 2e 35 35 30 2c 20 30 2e 32 36 35 2c 20 31 2e 35 35 30 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 2c 73 29 7b 72 65 74 75 72 6e 20 73 3d 3d 3d 76 6f 69 64 20 30 26 26 28 73 3d 31 2e 37 30 31 35 38 29 2c 28 74 2f 3d 72 2f 32 29 3c 31 3f 69 2f 32 2a 74 2a 74 2a 28 28 28 73 2a 3d 31 2e 35 32 35 29 2b 31 29 2a 74 2d 73 29 2b 6e 3a 69 2f 32 2a 28 28 74 2d 3d 32 29 2a 74 2a 28 28 28 73 2a 3d 31 2e 35 32 35 29 2b 31 29 2a 74 2b 73 29 2b 32 29 2b 6e 7d 5d Data Ascii: ===void 0&&(s=1.70158),i((t=t/r-1)t((s+1)t+s)+1)+n}],"ease-in-out-back":["cubic-bezier(0.680, -0.550, 0.265, 1.550)",function(t,n,i,r,s){return s===void 0&&(s=1.70158),(t/=r/2)<1?i/2tt(((s=1.525)+1)t-s)+n:i/2((t-=2)t(((s=1.525)+1)t+s)+2)+n}]
2025-03-19 10:24:46 UTC	1369	IN	Data Raw: 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 7c 7c 48 2e 6d 73 52 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 3b 72 65 74 75 72 6e 20 74 26 26 68 2e 62 69 6e 64 3f 74 2e 62 69 6e 64 28 48 29 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 48 2e 73 65 74 54 69 6d 65 6f 75 74 28 6e 2c 31 36 29 7d 7d 28 29 2c 63 74 3d 79 2e 6e 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 48 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2c 6e 3d 74 26 26 28 74 2e 6e 6f 77 7c 7c 74 2e 77 65 62 6b 69 74 4e 6f 77 7c 7c 74 2e 6d 73 4e 6f 77 7c 7c 74 2e 6d 6f 7a 4e 6f 77 29 3b 72 65 74 75 72 6e 20 6e 26 26 68 2e 62 69 6e 64 3f 6e 2e 62 69 6e 64 28 74 29 3a 44 61 74 65 2e 6e 6f 77 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 2b 6e 65 77 20 44 61 74 65 7d 7d 28 29 Data Ascii: nimationFrame\|\|H.msRequestAnimationFrame;return t&&h.bind?t.bind(H):function(n){H.setTimeout(n,16)}}(),ct=y.now=function(){var t=H.performance,n=t&&(t.now\|\|t.webkitNow\|\|t.msNow\|\|t.mozNow);return n&&h.bind?n.bind(t):Date.now\|\|function(){return+new Date}}()
2025-03-19 10:24:46 UTC	1369	IN	Data Raw: 65 2e 70 75 73 68 28 7b 6f 70 74 69 6f 6e 73 3a 77 7d 29 3a 28 74 68 69 73 2e 74 69 6d 65 72 3d 6e 65 77 20 71 74 28 7b 64 75 72 61 74 69 6f 6e 3a 77 2c 63 6f 6e 74 65 78 74 3a 74 68 69 73 2c 63 6f 6d 70 6c 65 74 65 3a 6f 7d 29 2c 74 68 69 73 2e 61 63 74 69 76 65 3d 21 30 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 77 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 61 63 74 69 76 65 3f 28 74 68 69 73 2e 71 75 65 75 65 2e 70 75 73 68 28 7b 6f 70 74 69 6f 6e 73 3a 77 2c 61 72 67 73 3a 61 72 67 75 6d 65 6e 74 73 7d 29 2c 76 6f 69 64 28 74 68 69 73 2e 74 69 6d 65 72 2e 63 6f 6d 70 6c 65 74 65 3d 6f 29 29 3a 42 28 22 4e 6f 20 61 63 74 69 76 65 20 74 72 61 6e 73 69 74 69 6f 6e 20 74 69 6d 65 72 2e 20 55 73 65 20 73 74 61 72 74 28 29 20 6f 72 20 77 61 69 74 28 29 20 62 65 Data Ascii: e.push({options:w}):(this.timer=new qt({duration:w,context:this,complete:o}),this.active=!0)}function s(w){return this.active?(this.queue.push({options:w,args:arguments}),void(this.timer.complete=o)):B("No active transition timer. Use start() or wait() be
2025-03-19 10:24:46 UTC	1369	IN	Data Raw: 74 29 7d 59 26 26 6e 74 26 26 59 2e 63 61 6c 6c 28 74 68 69 73 2c 6e 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 77 29 7b 77 2e 73 74 6f 70 28 29 7d 66 75 6e 63 74 69 6f 6e 20 41 74 28 77 2c 4f 29 7b 77 2e 73 65 74 28 4f 29 7d 66 75 6e 63 74 69 6f 6e 20 67 65 28 77 29 7b 74 68 69 73 2e 24 65 6c 2e 63 73 73 28 77 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 74 28 77 2c 4f 29 7b 74 5b 77 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 68 69 6c 64 72 65 6e 3f 79 65 2e 63 61 6c 6c 28 74 68 69 73 2c 4f 2c 61 72 67 75 6d 65 6e 74 73 29 3a 28 74 68 69 73 2e 65 6c 26 26 4f 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 2c 74 68 69 73 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 77 2c 4f 29 7b 76 61 72 20 59 2c 4e 3d 74 68 69 Data Ascii: t)}Y&&nt&&Y.call(this,nt)}function j(w){w.stop()}function At(w,O){w.set(O)}function ge(w){this.$el.css(w)}function ot(w,O){t[w]=function(){return this.children?ye.call(this,O,arguments):(this.el&&O.apply(this,arguments),this)}}function ye(w,O){var Y,N=thi
2025-03-19 10:24:46 UTC	1369	IN	Data Raw: 3a 30 7d 3b 74 2e 69 6e 69 74 3d 66 75 6e 63 74 69 6f 6e 28 6f 2c 70 2c 78 2c 4b 29 7b 74 68 69 73 2e 24 65 6c 3d 6f 2c 74 68 69 73 2e 65 6c 3d 6f 5b 30 5d 3b 76 61 72 20 63 3d 70 5b 30 5d 3b 78 5b 32 5d 26 26 28 63 3d 78 5b 32 5d 29 2c 48 74 5b 63 5d 26 26 28 63 3d 48 74 5b 63 5d 29 2c 74 68 69 73 2e 6e 61 6d 65 3d 63 2c 74 68 69 73 2e 74 79 70 65 3d 78 5b 31 5d 2c 74 68 69 73 2e 64 75 72 61 74 69 6f 6e 3d 49 28 70 5b 31 5d 2c 74 68 69 73 2e 64 75 72 61 74 69 6f 6e 2c 73 2e 64 75 72 61 74 69 6f 6e 29 2c 74 68 69 73 2e 65 61 73 65 3d 69 28 70 5b 32 5d 2c 74 68 69 73 2e 65 61 73 65 2c 73 2e 65 61 73 65 29 2c 74 68 69 73 2e 64 65 6c 61 79 3d 49 28 70 5b 33 5d 2c 74 68 69 73 2e 64 65 6c 61 79 2c 73 2e 64 65 6c 61 79 29 2c 74 68 69 73 2e 73 70 61 6e 3d 74 68 Data Ascii: :0};t.init=function(o,p,x,K){this.$el=o,this.el=o[0];var c=p[0];x[2]&&(c=x[2]),Ht[c]&&(c=Ht[c]),this.name=c,this.type=x[1],this.duration=I(p[1],this.duration,s.duration),this.ease=i(p[2],this.ease,s.ease),this.delay=I(p[3],this.delay,s.delay),this.span=th
2025-03-19 10:24:46 UTC	1369	IN	Data Raw: 7c 74 68 69 73 2e 6e 65 78 74 53 74 79 6c 65 29 26 26 28 74 68 69 73 2e 61 63 74 69 76 65 3d 21 31 2c 74 68 69 73 2e 6e 65 78 74 53 74 79 6c 65 3d 6e 75 6c 6c 2c 62 74 28 74 68 69 73 2e 65 6c 2c 74 68 69 73 2e 6e 61 6d 65 2c 74 68 69 73 2e 67 65 74 28 29 29 29 3b 76 61 72 20 6f 3d 74 68 69 73 2e 74 77 65 65 6e 3b 6f 26 26 6f 2e 63 6f 6e 74 65 78 74 26 26 6f 2e 64 65 73 74 72 6f 79 28 29 7d 2c 74 2e 63 6f 6e 76 65 72 74 3d 66 75 6e 63 74 69 6f 6e 28 6f 2c 70 29 7b 69 66 28 6f 3d 3d 22 61 75 74 6f 22 26 26 74 68 69 73 2e 61 75 74 6f 29 72 65 74 75 72 6e 20 6f 3b 76 61 72 20 78 2c 4b 3d 74 79 70 65 6f 66 20 6f 3d 3d 22 6e 75 6d 62 65 72 22 2c 63 3d 74 79 70 65 6f 66 20 6f 3d 3d 22 73 74 72 69 6e 67 22 3b 73 77 69 74 63 68 28 70 29 7b 63 61 73 65 20 66 3a 69 Data Ascii: \|this.nextStyle)&&(this.active=!1,this.nextStyle=null,bt(this.el,this.name,this.get()));var o=this.tween;o&&o.context&&o.destroy()},t.convert=function(o,p){if(o=="auto"&&this.auto)return o;var x,K=typeof o=="number",c=typeof o=="string";switch(p){case f:i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49735	104.18.161.117	443	5344	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:24:46 UTC	814	OUT	GET /678a1ac1977f9a10a0673b0b/678a1ae8e1729f54b7b9efd0_Screenshot%202025-01-08%20at%2013-39-14%20Commission-free%20Stock%20Trading%20%26%20Investing%20App%20Robinhood.png HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://sso-robinhood-net-cdy--auth.webflow.io/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:24:46 UTC	709	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 10:24:46 GMT Content-Type: image/png Content-Length: 544845 Connection: close x-amz-id-2: 0YcxNC6CZR3+kDsn3BpTBrRK8sc6OT84pQXTzT+1iDGCqF8gfO651v80PkcTXPwGoSS7S9dGM7+2PJBsQkK5ZEv8+ARKlpcn x-amz-request-id: YSTB5SHXWYZVPZ5G Last-Modified: Fri, 17 Jan 2025 08:55:06 GMT ETag: "35baa4c2960f7adaa6f26cc982435555" x-amz-storage-class: INTELLIGENT_TIERING x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, must-revalidate x-amz-version-id: 9b9TnRUpfhbsMXpAvHJiCJGuVKudZWMI CF-Cache-Status: HIT Age: 135761 Accept-Ranges: bytes Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 922c4313a9e033e8-FRA alt-svc: h3=":443"; ma=86400
2025-03-19 10:24:46 UTC	660	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 44 00 00 03 00 08 06 00 00 00 ec 65 6d 17 00 00 20 00 49 44 41 54 78 5e ec 7d 07 80 64 69 55 f5 ed 9c 73 ce b9 a7 27 ef cc 6c 64 59 d8 95 20 48 10 04 89 06 04 03 a2 80 28 08 fe 80 88 22 4a 10 15 09 8a 02 8a a0 88 04 49 0a 88 0a cb c2 e6 9d dd 9d 9c 43 4f ec ee e9 c9 a9 e3 7f ce f7 ea ab 7a 5d 5d e1 55 7a af 66 e6 7e b2 ee ec d4 0b df 3b 5f 3e f7 dc 7b 0b 44 64 11 ff 68 51 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 e0 ba 47 a0 40 09 d1 eb be 8d f5 03 15 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 20 84 80 12 a2 da 15 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 Data Ascii: PNGIHDRDem IDATx^}diUs'ldY H("JICOz]]Uzf~;_>{DdhQE@PE@PE@PE@PEG@E@PE@PE@PE@PE E@PE@PE@PE@P
2025-03-19 10:24:46 UTC	1369	IN	Data Raw: 9a 9a 0c 21 7c cf 3d f7 c8 4b 5e f2 12 b9 7c f9 b2 7c e2 13 9f 90 cf 7d ee 73 81 7c d1 fb df ff 7e 79 ee 73 9f 2b 95 95 95 81 bc ff 5a 79 e9 c5 8b 17 e5 5b df fa 96 fc e1 1f fe a1 af 55 56 42 d4 57 b8 f5 65 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 a4 8f 00 d5 a0 6f 7b db db e4 7b df fb 9e 7c e4 23 1f 91 83 07 0f a6 ff b0 eb f8 4e 2a 32 df fa d6 b7 ca d3 9e f6 34 21 39 f9 85 2f 7c c1 97 af e5 bb 5e f8 c2 17 1a a2 5a 8b 77 04 a8 1a fd f2 97 bf 2c ef 7d ef 7b bd df 94 c1 95 4a 88 66 00 9e de aa 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 1f 08 d0 0d fe 9b df fc a6 1c 39 72 44 de fe f6 b7 2b 11 ea 11 f4 e1 e1 61 f9 e0 07 3f 28 d5 d5 d5 f2 d2 97 be 54 ce 9d 3b e7 f1 ce d4 2e eb ee ee 96 6f Data Ascii: !\|=K^\|\|}s\|~ys+Zy[UVBWe"("("("o{{\|#N*24!9/\|^Zw,}{Jf("("("(9rD+a?(T;.o
2025-03-19 10:24:46 UTC	1369	IN	Data Raw: af 34 ec fd 8f 7e f4 23 93 a8 69 71 71 d1 33 88 5e 09 51 7e c7 3b df f9 4e f3 dc 0f 7d e8 43 31 49 db 78 2f 55 42 d4 73 73 e4 dd 85 24 8d bf f2 95 af c8 ff fb 7f ff 2f ef ea a6 15 ca 7f 04 3e f6 b1 8f c9 9d 77 de b9 cc 20 14 74 cd f3 b5 5e a9 e0 f2 fb bf ff fb f2 c3 1f fe 50 1e 7c f0 c1 65 b7 d1 12 cc 05 f5 e7 7e ee e7 52 79 64 5e 5c 9b 8d ba ff da af fd 9a bc f5 ad 6f 35 86 be 5c 26 2a bc 16 e7 c7 6c e0 9b 17 1d 45 2b a1 08 28 02 8a 80 22 a0 08 04 88 00 63 5e 52 54 43 d1 d3 aa 55 ab cc 7e e3 e4 c9 93 f2 37 7f f3 37 72 f6 ec d9 00 6b 76 6d bc fa e6 9b 6f 36 67 cc be be be 6b a3 c2 d7 70 2d 8b 8a 8a 4c 06 f3 b1 b1 b1 98 9e c8 b1 3e ed 85 2f 7c a1 e1 7c b4 f8 8f 00 b9 c1 6c 85 90 c8 0b 42 94 aa cb b7 bd ed 6d 61 24 4f 9c 38 61 26 ce 5f ff f5 5f 97 6d db b6 Data Ascii: 4~#iqq3^Q~;N}C1Ix/UBss$/>w t^P\|e~Ryd^\o5\&*lE+("c^RTCU~77rkvmo6gkp-L>/\|\|lBma$O8a&__m
2025-03-19 10:24:46 UTC	1369	IN	Data Raw: ce 4f b5 18 63 86 52 29 f8 83 1f fc c0 d4 8d 9d 95 2a 54 5a 73 48 54 32 2b 5c 7b 7b bb 21 74 29 79 e7 7f f3 bb e9 5e 4f 95 2a dd f8 39 c1 5b 42 94 13 03 89 d0 99 99 19 69 6d 6d 35 ef 21 41 c9 3a 5b 12 93 98 90 d4 62 c2 29 86 16 20 a9 cb b8 2c e7 cf 9f 97 9f f9 99 9f 31 16 38 96 d5 ab 57 0b eb dc d6 d6 26 93 93 93 42 e5 ad 4d 3a f5 a6 37 bd c9 a8 00 59 48 2c b0 1d 48 ae d2 85 94 cf 5c b9 72 a5 21 eb 38 21 dc 48 84 28 17 1e e2 6f 0f 3c c4 92 fd 84 09 bb d8 5e 3f fd d3 3f 6d 30 73 13 86 fc 33 15 83 c4 91 7d 96 24 b2 25 0e 49 a6 b1 4f 53 59 c9 42 52 8d cf 88 56 87 45 1f fa 52 ad 07 09 23 4b d2 f1 3d ee 3a b8 07 0d bf 87 6a 3b 2a 5b dd 8a 52 7b f8 64 02 33 f6 41 b7 72 6d f3 e6 cd 4b 08 1a fe 4e b5 b6 fd 2e aa f6 48 c6 33 64 80 5d e0 a8 74 23 06 5e c8 1d d6 8f Data Ascii: OcR)TZsHT2+\{{!t)y^O9[Bimm5!A:[b) ,18W&BM:7YH,H\r!8!H(o<^??m0s3}$%IOSYBRVER#K=:j;*[R{d3ArmKN.H3d]t#^
2025-03-19 10:24:46 UTC	1369	IN	Data Raw: e4 f9 93 8a 5f 16 bb 17 e7 9f ad d1 35 96 b7 87 bb 0d 13 89 8b fc fc 6e f2 40 dc c7 b2 6f 7a 29 14 91 91 af f1 a3 d0 43 85 c6 59 b7 02 94 67 4d fe 1d 3d 99 dd bf 33 01 17 3d 89 d9 6f 28 ec 62 a1 58 80 f7 92 6f 22 4f 40 83 00 f7 ed dc d3 90 27 a3 a8 ce 5d 78 1d 49 57 ee 9b 58 c8 0b f1 0c 45 85 37 79 2f 9e 3f 29 14 a4 51 81 7b 76 3e 8f e7 60 bf 0a bd ca 39 36 b2 51 02 25 44 e9 7a 4a f5 24 0b c1 24 e1 44 6b 92 db 85 98 6a c8 44 99 e3 dd 20 24 cb 32 cf 83 e3 f3 9f ff 7c a3 f0 24 49 ca c6 63 66 78 76 7e ca 6e 6d e1 61 82 f1 01 49 62 b0 33 59 42 94 93 39 0f 95 b6 90 b0 a1 aa 94 83 c6 92 a7 f1 08 51 4e b6 74 e5 b7 85 07 17 12 64 24 22 a9 78 b1 0a 51 76 32 76 68 5b f8 5c 76 44 92 ae 6c f4 57 bc e2 15 a6 73 92 3c e6 26 df 5d 48 80 31 8e 05 27 2a 4e a0 3c 20 51 c9 Data Ascii: _5n@oz)CYgM=3=o(bXo"O@']xIWXE7y/?)Q{v>`96Q%DzJ$$DkjD $2\|$Icfxv~nmaIb3YB9QNtd$"xQv2vh[\vDlWs<&]H1'*N< Q
2025-03-19 10:24:46 UTC	1369	IN	Data Raw: e9 16 eb cc ef f5 99 d9 bc 8e b1 56 c9 85 b8 39 84 6c 3e 3f de b3 12 11 a2 b1 04 14 d6 3b 92 7b 50 ee 0f dd a1 e3 f8 9b 17 85 68 74 2e 8b 20 e2 8b f2 1c 4a 6f 24 fe db 4b f1 53 21 ca fa 50 9c c7 9c 1a 34 36 90 23 a2 98 8d e4 33 8b 25 44 49 7e 92 9c a4 00 c7 1a cb d9 2e 0c 5f 61 15 a2 14 d7 51 09 4b 52 35 9a f8 b4 df ed 85 10 25 39 6b 63 98 5a be 29 9a 58 f5 82 63 3a d7 90 1b 60 88 c7 6c 94 40 09 51 12 7d 6c 4c 1e 7c 39 09 91 a0 74 77 c0 7f fc c7 7f 14 06 65 f6 5a 2c 79 41 77 5b ba b6 bb 0b 27 5d 2b f9 e5 3b a9 2c a2 f2 91 1d 99 93 a9 bb 70 12 67 47 e3 84 3c 36 36 16 56 88 92 48 fc ec 67 3f bb e4 5a eb 96 46 62 91 44 47 3c 42 94 04 15 27 10 5b 38 39 50 a9 f0 ce 77 be d3 fc 3b 5e 96 79 76 54 ba d9 f3 90 c7 43 21 15 b4 94 47 c7 b2 5a b1 e3 92 58 25 d9 4a 4b Data Ascii: V9l>?;{Pht. Jo$KS!P46#3%DI~._aQKR5%9kcZ)Xc:`l@Q}lL\|9tweZ,yAw[']+;,pgG<66VHg?ZFbDG<B'[89Pw;^yvTC!GZX%JK
2025-03-19 10:24:46 UTC	1369	IN	Data Raw: 8d 9c dc 48 ca d9 42 b7 64 c6 20 49 a5 d8 c9 92 49 83 78 e8 8d 2e 9c e8 a8 1c 65 bc 12 5a a3 f8 4e c6 d7 b4 ff 6d af e7 06 9c 64 11 89 8b f7 bc e7 3d 61 42 94 aa 51 92 20 4c 7c c4 c2 7b c9 84 73 40 73 62 67 1c d4 5c 13 a2 d6 9d 9f 87 60 ba fd 5b 97 42 0e 46 7e 0f ad 5b 54 b5 f2 77 d6 87 56 0b 12 65 3b 77 ee 34 75 66 e0 5f 4a c1 29 bf 67 8c c6 cf 7f fe f3 86 38 e5 81 c4 fe b7 c5 c1 aa 51 6f 34 42 94 df cf 36 25 f1 e9 8e 93 69 d5 39 ec b7 ee d8 9c 89 0e da 96 64 e2 b3 18 7a c0 ed 32 6f 17 09 fe 66 09 9c e8 3e eb b5 1e 6c 3f 86 4c 20 89 cd c2 83 22 63 c5 46 c7 6b e1 6f fc 0e ba 82 d8 6b a9 3e 7e f8 e1 87 c5 ad 2e 4d a4 10 b5 0b 1c c9 77 4b 5c 32 3e 2f ef cf 86 42 34 95 31 ef d7 b5 3c 9c 73 7c 90 60 60 21 f1 43 95 35 43 5e b0 c4 22 77 ac c2 97 63 90 18 93 94 Data Ascii: HBd IIx.eZNmd=aBQ L\|{s@sbg\`[BF~[TwVe;w4uf_J)g8Qo4B6%i9dz2of>l?L "cFkok>~.MwK\2>/B41<s\|``!C5C^"wc
2025-03-19 10:24:46 UTC	1369	IN	Data Raw: 33 21 b8 e3 73 d2 dd 8b 8c 3d 17 06 ba 7d b1 d3 32 d1 13 2d 13 cc 46 6e 0b 9f c5 b8 0f 24 5c e9 da ee 2e 74 db a2 cb 01 7f 63 5d dc 04 a7 fb 3a 32 f5 74 55 60 9d e9 62 60 dd e7 a3 71 e7 f3 a8 9a 25 79 4a 95 2e 63 bc 32 36 03 ad 0a 7e 07 73 ce 56 9f d0 e7 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 d7 1a 02 f4 5e ad ab ab 33 21 06 f2 bd 44 87 70 8b 0e 31 96 cf f5 a7 02 f9 e0 c1 83 61 a5 ab d7 ba 52 70 47 be 27 9f 0a 15 a0 f4 1e 26 97 63 b3 d1 d3 9b 2a 9b ea cd 20 09 51 aa cc 6d 18 a9 6c e0 1e 08 21 4a 76 9a c4 db b3 9f fd ec 6c 7c 83 3e 43 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 81 eb 06 01 e6 5d 61 b2 64 92 6e 24 ec b4 64 1f 01 e6 65 a1 57 2c c5 6a d6 eb d7 eb 5b 18 cb 9f ae e4 f4 cc d5 92 7b 04 Data Ascii: 3!s=}2-Fn$\.tc]:2tU`b`q%yJ.c26~sV("("("(^3!Dp1aRpG'&c* Qml!Jvl\|>CPE@PE@PE@P]adn$deW,j[{
2025-03-19 10:24:46 UTC	1369	IN	Data Raw: 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 04 82 80 12 a2 81 c0 ae 2f 55 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 81 20 10 50 42 34 08 d4 f5 9d 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 10 08 02 4a 88 06 02 bb be 54 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 82 40 a0 60 11 25 88 17 eb 3b 15 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 c8 05 02 3f be ef 5e b9 f3 a9 4f cb c5 a3 f5 99 8a 80 22 70 1d 20 50 d0 50 53 6a 08 51 cb 8a 16 e0 4f 85 05 73 d2 d6 52 27 63 63 43 72 e1 c2 15 d9 b9 7b 5c ce e3 df bc 86 92 52 2d fe 22 e0 50 d6 05 52 28 0b d2 54 Data Ascii: "("("("/UE@PE@PE@PE@P PB4"("("("("JTPE@PE@PE@PE@P@`%;E@PE@PE@PE@?^O"p PPSjQOsR'ccCr{\R-"PR(T
2025-03-19 10:24:46 UTC	1369	IN	Data Raw: 34 50 54 00 83 4f 4b bd 14 c2 08 35 01 92 3c 77 84 e8 52 3a 31 32 4e e7 a4 aa b2 44 ba ba 7a cd f8 b8 8a 8d 55 ee bf 7e e9 ce 9b ff 55 08 42 b4 1a f5 e8 ed 1f c1 fa 7d d0 18 8c 3d d5 23 09 4b ea 99 44 c5 fa 57 5c 54 08 e3 5b 03 fe 5d 24 e3 c7 fc 27 47 22 6d 42 03 6f a1 74 76 75 e3 c0 7e 5e 4e 9f 3d ef eb 5e d7 ec f2 50 99 a2 82 19 19 19 ea 96 4b 57 e6 30 46 4f 05 26 0e 59 c4 dc c9 f5 96 46 ef ce ae 16 08 55 e6 30 7f 9e 09 ef 47 3d 0f ba ac 5c e8 10 69 4d 8d 75 d2 dc dc 2c 47 8f 9d 40 7d 48 de 7b ea ad 59 a9 41 ec 87 80 44 2f 2e 80 41 a1 db d4 65 ef be 43 f8 77 71 0e df b7 fc d1 ce 29 da ee b9 b9 b2 cc 49 7b 4b b5 b4 b4 b6 62 3c 4d 83 74 a4 d1 38 f8 33 1b eb 48 e3 6c 09 8c a5 3d 5d ed 52 57 df 04 d1 c7 21 b9 70 31 f8 76 0c 9f bf 30 f6 ba da eb 65 f5 9a 0d Data Ascii: 4PTOK5<wR:12NDzU~UB}=#KDW\T[]$'G"mBotvu~^N=^PKW0FO&YFU0G=\iMu,G@}H{YAD/.AeCwq)I{Kb<Mt83Hl=]RW!p1v0e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49736	104.18.161.117	443	5344	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:24:46 UTC	709	OUT	GET /678a1ac1977f9a10a0673b0b/678a1af807adb9ecf0e96c3f_dgdgdg.png HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://sso-robinhood-net-cdy--auth.webflow.io/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:24:46 UTC	656	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 10:24:46 GMT Content-Type: image/png Content-Length: 803 Connection: close x-amz-id-2: ezktaKN+K4S+Tk3coM6Mutqv8fWYyePxnd6oQamVLppMZhyqZB7vYbJrqWiWNV7B68JBq0nuydFMxDMgzlxCSA== x-amz-request-id: YST6RZ5YCH8Q4PC7 Last-Modified: Fri, 17 Jan 2025 08:55:21 GMT ETag: "c8f0cef2d937562902daa9c3c0b67ca3" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, must-revalidate x-amz-version-id: fQNMpmEpA.9pOjJA7fJU8aupZnW8EHz4 CF-Cache-Status: HIT Age: 135761 Accept-Ranges: bytes Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 922c4313fdd7d2fa-FRA alt-svc: h3=":443"; ma=86400
2025-03-19 10:24:46 UTC	713	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 02 b8 49 44 41 54 58 47 ed 96 4d 68 13 41 18 86 df 4d 76 37 a9 5b aa 97 22 62 10 d4 0a 0a 82 0a 96 16 2f fe 54 4b 82 20 52 d4 8a 8a 54 84 18 fc ab 20 82 82 5e 94 d6 fa 47 05 ab 54 ad 07 c1 a2 a2 d5 7a d0 83 15 a9 f4 a2 34 45 bd e8 21 7a 10 ad 5a 4b 6d 4b ac f9 d9 64 d7 6f 93 8d d9 16 93 9d 4d 23 b9 f4 81 65 33 33 61 e6 9d f7 fb be 99 e5 fc 2a 54 14 10 9b fe 2e 18 53 02 0a 2e 20 6f 49 18 8f 01 df 3f d9 f0 73 80 83 e0 00 5c f3 15 14 cf 30 9f 3a 2f 02 7a 3a 05 5c 3d e6 40 70 98 03 c7 25 fb 38 f2 f6 e0 c5 30 Data Ascii: PNGIHDR szzsRGBgAMAapHYsodIDATXGMhAMv7["b/TK RT ^GTz4E!zZKmKdoM#e33a*T.S. oI?s\0:/z:\=@p%80
2025-03-19 10:24:46 UTC	90	IN	Data Raw: 37 ca f4 91 41 0e 6b b7 ca f4 a5 a3 e6 75 71 0d 53 01 2f 9f f0 a8 de 21 33 9f 6c 56 31 15 d0 db c5 c3 bd d3 fc 56 cb 95 ec 39 40 23 ef fd 76 2c 2a b7 7e c0 b0 92 97 8f d2 c9 c0 7c 10 fd 2f a6 04 14 58 00 f0 07 6b fc e1 8a c3 30 56 c5 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: 7AkuqS/!3lV1V9@#v,*~\|/Xk0VIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49742	104.18.161.117	443	5344	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:24:47 UTC	555	OUT	GET /678a1ac1977f9a10a0673b0b/678a1ae8e1729f54b7b9efd0_Screenshot%202025-01-08%20at%2013-39-14%20Commission-free%20Stock%20Trading%20%26%20Investing%20App%20Robinhood.png HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:24:47 UTC	709	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 10:24:47 GMT Content-Type: image/png Content-Length: 544845 Connection: close x-amz-id-2: 0YcxNC6CZR3+kDsn3BpTBrRK8sc6OT84pQXTzT+1iDGCqF8gfO651v80PkcTXPwGoSS7S9dGM7+2PJBsQkK5ZEv8+ARKlpcn x-amz-request-id: YSTB5SHXWYZVPZ5G Last-Modified: Fri, 17 Jan 2025 08:55:06 GMT ETag: "35baa4c2960f7adaa6f26cc982435555" x-amz-storage-class: INTELLIGENT_TIERING x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, must-revalidate x-amz-version-id: 9b9TnRUpfhbsMXpAvHJiCJGuVKudZWMI CF-Cache-Status: HIT Age: 135762 Accept-Ranges: bytes Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 922c43181efddbbf-FRA alt-svc: h3=":443"; ma=86400
2025-03-19 10:24:47 UTC	660	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 44 00 00 03 00 08 06 00 00 00 ec 65 6d 17 00 00 20 00 49 44 41 54 78 5e ec 7d 07 80 64 69 55 f5 ed 9c 73 ce b9 a7 27 ef cc 6c 64 59 d8 95 20 48 10 04 89 06 04 03 a2 80 28 08 fe 80 88 22 4a 10 15 09 8a 02 8a a0 88 04 49 0a 88 0a cb c2 e6 9d dd 9d 9c 43 4f ec ee e9 c9 a9 e3 7f ce f7 ea ab 7a 5d 5d e1 55 7a af 66 e6 7e b2 ee ec d4 0b df 3b 5f 3e f7 dc 7b 0b 44 64 11 ff 68 51 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 e0 ba 47 a0 40 09 d1 eb be 8d f5 03 15 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 20 84 80 12 a2 da 15 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 Data Ascii: PNGIHDRDem IDATx^}diUs'ldY H("JICOz]]Uzf~;_>{DdhQE@PE@PE@PE@PEG@E@PE@PE@PE@PE E@PE@PE@PE@P
2025-03-19 10:24:47 UTC	1369	IN	Data Raw: 9a 9a 0c 21 7c cf 3d f7 c8 4b 5e f2 12 b9 7c f9 b2 7c e2 13 9f 90 cf 7d ee 73 81 7c d1 fb df ff 7e 79 ee 73 9f 2b 95 95 95 81 bc ff 5a 79 e9 c5 8b 17 e5 5b df fa 96 fc e1 1f fe a1 af 55 56 42 d4 57 b8 f5 65 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 a4 8f 00 d5 a0 6f 7b db db e4 7b df fb 9e 7c e4 23 1f 91 83 07 0f a6 ff b0 eb f8 4e 2a 32 df fa d6 b7 ca d3 9e f6 34 21 39 f9 85 2f 7c c1 97 af e5 bb 5e f8 c2 17 1a a2 5a 8b 77 04 a8 1a fd f2 97 bf 2c ef 7d ef 7b bd df 94 c1 95 4a 88 66 00 9e de aa 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 1f 08 d0 0d fe 9b df fc a6 1c 39 72 44 de fe f6 b7 2b 11 ea 11 f4 e1 e1 61 f9 e0 07 3f 28 d5 d5 d5 f2 d2 97 be 54 ce 9d 3b e7 f1 ce d4 2e eb ee ee 96 6f Data Ascii: !\|=K^\|\|}s\|~ys+Zy[UVBWe"("("("o{{\|#N*24!9/\|^Zw,}{Jf("("("(9rD+a?(T;.o
2025-03-19 10:24:47 UTC	1369	IN	Data Raw: af 34 ec fd 8f 7e f4 23 93 a8 69 71 71 d1 33 88 5e 09 51 7e c7 3b df f9 4e f3 dc 0f 7d e8 43 31 49 db 78 2f 55 42 d4 73 73 e4 dd 85 24 8d bf f2 95 af c8 ff fb 7f ff 2f ef ea a6 15 ca 7f 04 3e f6 b1 8f c9 9d 77 de b9 cc 20 14 74 cd f3 b5 5e a9 e0 f2 fb bf ff fb f2 c3 1f fe 50 1e 7c f0 c1 65 b7 d1 12 cc 05 f5 e7 7e ee e7 52 79 64 5e 5c 9b 8d ba ff da af fd 9a bc f5 ad 6f 35 86 be 5c 26 2a bc 16 e7 c7 6c e0 9b 17 1d 45 2b a1 08 28 02 8a 80 22 a0 08 04 88 00 63 5e 52 54 43 d1 d3 aa 55 ab cc 7e e3 e4 c9 93 f2 37 7f f3 37 72 f6 ec d9 00 6b 76 6d bc fa e6 9b 6f 36 67 cc be be be 6b a3 c2 d7 70 2d 8b 8a 8a 4c 06 f3 b1 b1 b1 98 9e c8 b1 3e ed 85 2f 7c a1 e1 7c b4 f8 8f 00 b9 c1 6c 85 90 c8 0b 42 94 aa cb b7 bd ed 6d 61 24 4f 9c 38 61 26 ce 5f ff f5 5f 97 6d db b6 Data Ascii: 4~#iqq3^Q~;N}C1Ix/UBss$/>w t^P\|e~Ryd^\o5\&*lE+("c^RTCU~77rkvmo6gkp-L>/\|\|lBma$O8a&__m
2025-03-19 10:24:47 UTC	1369	IN	Data Raw: ce 4f b5 18 63 86 52 29 f8 83 1f fc c0 d4 8d 9d 95 2a 54 5a 73 48 54 32 2b 5c 7b 7b bb 21 74 29 79 e7 7f f3 bb e9 5e 4f 95 2a dd f8 39 c1 5b 42 94 13 03 89 d0 99 99 19 69 6d 6d 35 ef 21 41 c9 3a 5b 12 93 98 90 d4 62 c2 29 86 16 20 a9 cb b8 2c e7 cf 9f 97 9f f9 99 9f 31 16 38 96 d5 ab 57 0b eb dc d6 d6 26 93 93 93 42 e5 ad 4d 3a f5 a6 37 bd c9 a8 00 59 48 2c b0 1d 48 ae d2 85 94 cf 5c b9 72 a5 21 eb 38 21 dc 48 84 28 17 1e e2 6f 0f 3c c4 92 fd 84 09 bb d8 5e 3f fd d3 3f 6d 30 73 13 86 fc 33 15 83 c4 91 7d 96 24 b2 25 0e 49 a6 b1 4f 53 59 c9 42 52 8d cf 88 56 87 45 1f fa 52 ad 07 09 23 4b d2 f1 3d ee 3a b8 07 0d bf 87 6a 3b 2a 5b dd 8a 52 7b f8 64 02 33 f6 41 b7 72 6d f3 e6 cd 4b 08 1a fe 4e b5 b6 fd 2e aa f6 48 c6 33 64 80 5d e0 a8 74 23 06 5e c8 1d d6 8f Data Ascii: OcR)TZsHT2+\{{!t)y^O9[Bimm5!A:[b) ,18W&BM:7YH,H\r!8!H(o<^??m0s3}$%IOSYBRVER#K=:j;*[R{d3ArmKN.H3d]t#^
2025-03-19 10:24:47 UTC	1369	IN	Data Raw: e4 f9 93 8a 5f 16 bb 17 e7 9f ad d1 35 96 b7 87 bb 0d 13 89 8b fc fc 6e f2 40 dc c7 b2 6f 7a 29 14 91 91 af f1 a3 d0 43 85 c6 59 b7 02 94 67 4d fe 1d 3d 99 dd bf 33 01 17 3d 89 d9 6f 28 ec 62 a1 58 80 f7 92 6f 22 4f 40 83 00 f7 ed dc d3 90 27 a3 a8 ce 5d 78 1d 49 57 ee 9b 58 c8 0b f1 0c 45 85 37 79 2f 9e 3f 29 14 a4 51 81 7b 76 3e 8f e7 60 bf 0a bd ca 39 36 b2 51 02 25 44 e9 7a 4a f5 24 0b c1 24 e1 44 6b 92 db 85 98 6a c8 44 99 e3 dd 20 24 cb 32 cf 83 e3 f3 9f ff 7c a3 f0 24 49 ca c6 63 66 78 76 7e ca 6e 6d e1 61 82 f1 01 49 62 b0 33 59 42 94 93 39 0f 95 b6 90 b0 a1 aa 94 83 c6 92 a7 f1 08 51 4e b6 74 e5 b7 85 07 17 12 64 24 22 a9 78 b1 0a 51 76 32 76 68 5b f8 5c 76 44 92 ae 6c f4 57 bc e2 15 a6 73 92 3c e6 26 df 5d 48 80 31 8e 05 27 2a 4e a0 3c 20 51 c9 Data Ascii: _5n@oz)CYgM=3=o(bXo"O@']xIWXE7y/?)Q{v>`96Q%DzJ$$DkjD $2\|$Icfxv~nmaIb3YB9QNtd$"xQv2vh[\vDlWs<&]H1'*N< Q
2025-03-19 10:24:47 UTC	1369	IN	Data Raw: e9 16 eb cc ef f5 99 d9 bc 8e b1 56 c9 85 b8 39 84 6c 3e 3f de b3 12 11 a2 b1 04 14 d6 3b 92 7b 50 ee 0f dd a1 e3 f8 9b 17 85 68 74 2e 8b 20 e2 8b f2 1c 4a 6f 24 fe db 4b f1 53 21 ca fa 50 9c c7 9c 1a 34 36 90 23 a2 98 8d e4 33 8b 25 44 49 7e 92 9c a4 00 c7 1a cb d9 2e 0c 5f 61 15 a2 14 d7 51 09 4b 52 35 9a f8 b4 df ed 85 10 25 39 6b 63 98 5a be 29 9a 58 f5 82 63 3a d7 90 1b 60 88 c7 6c 94 40 09 51 12 7d 6c 4c 1e 7c 39 09 91 a0 74 77 c0 7f fc c7 7f 14 06 65 f6 5a 2c 79 41 77 5b ba b6 bb 0b 27 5d 2b f9 e5 3b a9 2c a2 f2 91 1d 99 93 a9 bb 70 12 67 47 e3 84 3c 36 36 16 56 88 92 48 fc ec 67 3f bb e4 5a eb 96 46 62 91 44 47 3c 42 94 04 15 27 10 5b 38 39 50 a9 f0 ce 77 be d3 fc 3b 5e 96 79 76 54 ba d9 f3 90 c7 43 21 15 b4 94 47 c7 b2 5a b1 e3 92 58 25 d9 4a 4b Data Ascii: V9l>?;{Pht. Jo$KS!P46#3%DI~._aQKR5%9kcZ)Xc:`l@Q}lL\|9tweZ,yAw[']+;,pgG<66VHg?ZFbDG<B'[89Pw;^yvTC!GZX%JK
2025-03-19 10:24:47 UTC	1369	IN	Data Raw: 8d 9c dc 48 ca d9 42 b7 64 c6 20 49 a5 d8 c9 92 49 83 78 e8 8d 2e 9c e8 a8 1c 65 bc 12 5a a3 f8 4e c6 d7 b4 ff 6d af e7 06 9c 64 11 89 8b f7 bc e7 3d 61 42 94 aa 51 92 20 4c 7c c4 c2 7b c9 84 73 40 73 62 67 1c d4 5c 13 a2 d6 9d 9f 87 60 ba fd 5b 97 42 0e 46 7e 0f ad 5b 54 b5 f2 77 d6 87 56 0b 12 65 3b 77 ee 34 75 66 e0 5f 4a c1 29 bf 67 8c c6 cf 7f fe f3 86 38 e5 81 c4 fe b7 c5 c1 aa 51 6f 34 42 94 df cf 36 25 f1 e9 8e 93 69 d5 39 ec b7 ee d8 9c 89 0e da 96 64 e2 b3 18 7a c0 ed 32 6f 17 09 fe 66 09 9c e8 3e eb b5 1e 6c 3f 86 4c 20 89 cd c2 83 22 63 c5 46 c7 6b e1 6f fc 0e ba 82 d8 6b a9 3e 7e f8 e1 87 c5 ad 2e 4d a4 10 b5 0b 1c c9 77 4b 5c 32 3e 2f ef cf 86 42 34 95 31 ef d7 b5 3c 9c 73 7c 90 60 60 21 f1 43 95 35 43 5e b0 c4 22 77 ac c2 97 63 90 18 93 94 Data Ascii: HBd IIx.eZNmd=aBQ L\|{s@sbg\`[BF~[TwVe;w4uf_J)g8Qo4B6%i9dz2of>l?L "cFkok>~.MwK\2>/B41<s\|``!C5C^"wc
2025-03-19 10:24:47 UTC	1369	IN	Data Raw: 33 21 b8 e3 73 d2 dd 8b 8c 3d 17 06 ba 7d b1 d3 32 d1 13 2d 13 cc 46 6e 0b 9f c5 b8 0f 24 5c e9 da ee 2e 74 db a2 cb 01 7f 63 5d dc 04 a7 fb 3a 32 f5 74 55 60 9d e9 62 60 dd e7 a3 71 e7 f3 a8 9a 25 79 4a 95 2e 63 bc 32 36 03 ad 0a 7e 07 73 ce 56 9f d0 e7 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 d7 1a 02 f4 5e ad ab ab 33 21 06 f2 bd 44 87 70 8b 0e 31 96 cf f5 a7 02 f9 e0 c1 83 61 a5 ab d7 ba 52 70 47 be 27 9f 0a 15 a0 f4 1e 26 97 63 b3 d1 d3 9b 2a 9b ea cd 20 09 51 aa cc 6d 18 a9 6c e0 1e 08 21 4a 76 9a c4 db b3 9f fd ec 6c 7c 83 3e 43 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 81 eb 06 01 e6 5d 61 b2 64 92 6e 24 ec b4 64 1f 01 e6 65 a1 57 2c c5 6a d6 eb d7 eb 5b 18 cb 9f ae e4 f4 cc d5 92 7b 04 Data Ascii: 3!s=}2-Fn$\.tc]:2tU`b`q%yJ.c26~sV("("("(^3!Dp1aRpG'&c* Qml!Jvl\|>CPE@PE@PE@P]adn$deW,j[{
2025-03-19 10:24:47 UTC	1369	IN	Data Raw: 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 04 82 80 12 a2 81 c0 ae 2f 55 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 81 20 10 50 42 34 08 d4 f5 9d 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 a0 08 28 02 8a 80 22 10 08 02 4a 88 06 02 bb be 54 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 82 40 a0 60 11 25 88 17 eb 3b 15 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 50 04 14 01 45 40 11 c8 05 02 3f be ef 5e b9 f3 a9 4f cb c5 a3 f5 99 8a 80 22 70 1d 20 50 d0 50 53 6a 08 51 cb 8a 16 e0 4f 85 05 73 d2 d6 52 27 63 63 43 72 e1 c2 15 d9 b9 7b 5c ce e3 df bc 86 92 52 2d fe 22 e0 50 d6 05 52 28 0b d2 54 Data Ascii: "("("("/UE@PE@PE@PE@P PB4"("("("("JTPE@PE@PE@PE@P@`%;E@PE@PE@PE@?^O"p PPSjQOsR'ccCr{\R-"PR(T
2025-03-19 10:24:47 UTC	1369	IN	Data Raw: 34 50 54 00 83 4f 4b bd 14 c2 08 35 01 92 3c 77 84 e8 52 3a 31 32 4e e7 a4 aa b2 44 ba ba 7a cd f8 b8 8a 8d 55 ee bf 7e e9 ce 9b ff 55 08 42 b4 1a f5 e8 ed 1f c1 fa 7d d0 18 8c 3d d5 23 09 4b ea 99 44 c5 fa 57 5c 54 08 e3 5b 03 fe 5d 24 e3 c7 fc 27 47 22 6d 42 03 6f a1 74 76 75 e3 c0 7e 5e 4e 9f 3d ef eb 5e d7 ec f2 50 99 a2 82 19 19 19 ea 96 4b 57 e6 30 46 4f 05 26 0e 59 c4 dc c9 f5 96 46 ef ce ae 16 08 55 e6 30 7f 9e 09 ef 47 3d 0f ba ac 5c e8 10 69 4d 8d 75 d2 dc dc 2c 47 8f 9d 40 7d 48 de 7b ea ad 59 a9 41 ec 87 80 44 2f 2e 80 41 a1 db d4 65 ef be 43 f8 77 71 0e df b7 fc d1 ce 29 da ee b9 b9 b2 cc 49 7b 4b b5 b4 b4 b6 62 3c 4d 83 74 a4 d1 38 f8 33 1b eb 48 e3 6c 09 8c a5 3d 5d ed 52 57 df 04 d1 c7 21 b9 70 31 f8 76 0c 9f bf 30 f6 ba da eb 65 f5 9a 0d Data Ascii: 4PTOK5<wR:12NDzU~UB}=#KDW\T[]$'G"mBotvu~^N=^PKW0FO&YFU0G=\iMu,G@}H{YAD/.AeCwq)I{Kb<Mt83Hl=]RW!p1v0e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49741	104.18.161.117	443	5344	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:24:47 UTC	450	OUT	GET /678a1ac1977f9a10a0673b0b/678a1af807adb9ecf0e96c3f_dgdgdg.png HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:24:47 UTC	656	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 10:24:47 GMT Content-Type: image/png Content-Length: 803 Connection: close x-amz-id-2: ezktaKN+K4S+Tk3coM6Mutqv8fWYyePxnd6oQamVLppMZhyqZB7vYbJrqWiWNV7B68JBq0nuydFMxDMgzlxCSA== x-amz-request-id: YST6RZ5YCH8Q4PC7 Last-Modified: Fri, 17 Jan 2025 08:55:21 GMT ETag: "c8f0cef2d937562902daa9c3c0b67ca3" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, must-revalidate x-amz-version-id: fQNMpmEpA.9pOjJA7fJU8aupZnW8EHz4 CF-Cache-Status: HIT Age: 135762 Accept-Ranges: bytes Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 922c43181bef1957-FRA alt-svc: h3=":443"; ma=86400
2025-03-19 10:24:47 UTC	713	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 02 b8 49 44 41 54 58 47 ed 96 4d 68 13 41 18 86 df 4d 76 37 a9 5b aa 97 22 62 10 d4 0a 0a 82 0a 96 16 2f fe 54 4b 82 20 52 d4 8a 8a 54 84 18 fc ab 20 82 82 5e 94 d6 fa 47 05 ab 54 ad 07 c1 a2 a2 d5 7a d0 83 15 a9 f4 a2 34 45 bd e8 21 7a 10 ad 5a 4b 6d 4b ac f9 d9 64 d7 6f 93 8d d9 16 93 9d 4d 23 b9 f4 81 65 33 33 61 e6 9d f7 fb be 99 e5 fc 2a 54 14 10 9b fe 2e 18 53 02 0a 2e 20 6f 49 18 8f 01 df 3f d9 f0 73 80 83 e0 00 5c f3 15 14 cf 30 9f 3a 2f 02 7a 3a 05 5c 3d e6 40 70 98 03 c7 25 fb 38 f2 f6 e0 c5 30 Data Ascii: PNGIHDR szzsRGBgAMAapHYsodIDATXGMhAMv7["b/TK RT ^GTz4E!zZKmKdoM#e33a*T.S. oI?s\0:/z:\=@p%80
2025-03-19 10:24:47 UTC	90	IN	Data Raw: 37 ca f4 91 41 0e 6b b7 ca f4 a5 a3 e6 75 71 0d 53 01 2f 9f f0 a8 de 21 33 9f 6c 56 31 15 d0 db c5 c3 bd d3 fc 56 cb 95 ec 39 40 23 ef fd 76 2c 2a b7 7e c0 b0 92 97 8f d2 c9 c0 7c 10 fd 2f a6 04 14 58 00 f0 07 6b fc e1 8a c3 30 56 c5 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: 7AkuqS/!3lV1V9@#v,*~\|/Xk0VIENDB`

Statistics

CPU Usage

• chrome.exe
• chrome.exe
• chrome.exe

Click to jump to process

Memory Usage

• chrome.exe
• chrome.exe
• chrome.exe

Click to jump to process

Click to jump to process

Target ID:	0
Start time:	06:24:36
Start date:	19/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff786830000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	06:24:39
Start date:	19/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1764,i,15234223184877867171,6909692746380502297,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2152 /prefetch:3
Imagebase:	0x7ff786830000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	06:24:45
Start date:	19/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://sso-robinhood-net-cdy--auth.webflow.io/"
Imagebase:	0x7ff786830000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://sso-robinhood-net-cdy--auth.webflow.io/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Static File Info

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTP Packets

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 3492, Parent PID: 1760

General

Windows Analysis Report
https://sso-robinhood-net-cdy--auth.webflow.io/