Edit tour

Windows Analysis Report
https://en--sso---coinbasepro---authh---cdn.webflow.io/

Overview

General Information

Sample URL:	https://en--sso---coinbasepro---authh---cdn.webflow.io/
Analysis ID:	1642808
Infos:

Detection

HTMLPhisher

Score:	68
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Yara detected HtmlPhish64

AI detected suspicious URL

Creates files inside the system directory

Deletes files inside the Windows folder

Detected non-DNS traffic on DNS port

Classification

Process Tree

System is w10x64

chrome.exe (PID: 7008 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 520 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2248,i,9931422667892187248,13732509038317616662,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2268 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7328 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2248,i,9931422667892187248,13732509038317616662,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=3508 /prefetch:8 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7492 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://en--sso---coinbasepro---authh---cdn.webflow.io/" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
0.0.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security

Joe Sandbox Signatures

• AV Detection
• Phishing
• Compliance
• Networking
• System Summary

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://en--sso---coinbasepro---authh---cdn.webflow.io/

Avira URL Cloud: detection malicious, Label: phishing

Phishing

AI detected phishing page

Source: https://en--sso---coinbasepro---authh---cdn.webflow.io/

Joe Sandbox AI: Score: 9 Reasons: The brand 'Coinbase' is well-known and associated with the domain 'coinbase.com'., The URL 'en--sso---coinbasepro---authh---cdn.webflow.io' contains multiple hyphens and unusual patterns, which are common indicators of phishing., The domain 'webflow.io' is not directly associated with Coinbase, which raises suspicion., The use of 'coinbasepro' in the URL could be an attempt to mimic a legitimate service offered by Coinbase, but the structure is suspicious., The presence of 'cdn' in the URL might suggest a content delivery network, but the overall structure is misleading and not typical for a legitimate Coinbase URL. DOM: 0.0.pages.csv

Yara detected HtmlPhish64

Source: Yara match

File source: 0.0.pages.csv, type: HTML

AI detected suspicious URL

Source: https://en--sso---coinbasepro---authh---cdn.webflow.io

Joe Sandbox AI: The URL 'https://en--sso---coinbasepro---authh---cdn.webflow.io' appears to be a typosquatting attempt targeting Coinbase Pro. The legitimate URL for Coinbase Pro is 'https://pro.coinbase.com'. The analyzed URL uses multiple hyphens and subdomains to mimic the structure of a legitimate authentication or CDN service, which is a common tactic in phishing attempts. The use of 'coinbasepro' in the subdomain is a direct reference to the brand, and the additional elements like 'sso', 'authh', and 'cdn' are likely intended to create a sense of legitimacy and urgency, potentially confusing users into believing they are interacting with a secure service. The domain 'webflow.io' is a legitimate platform for hosting websites, but in this context, it is being used to host a potentially deceptive site. The high similarity score is due to the structural mimicry and the use of brand-specific terms, while the high spoofed score reflects the likelihood of user confusion and the deceptive intent behind the URL's construction.

Source: unknown	HTTPS traffic detected: 142.250.74.196:443 -> 192.168.2.5:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.36.248:443 -> 192.168.2.5:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.36.248:443 -> 192.168.2.5:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.160.117:443 -> 192.168.2.5:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.160.117:443 -> 192.168.2.5:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.222.232.39:443 -> 192.168.2.5:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.222.232.39:443 -> 192.168.2.5:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.222.232.39:443 -> 192.168.2.5:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.222.232.144:443 -> 192.168.2.5:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.222.232.144:443 -> 192.168.2.5:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.161.117:443 -> 192.168.2.5:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.161.117:443 -> 192.168.2.5:49743 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.5:58367 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.77.188
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.77.188
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 216.58.206.67
Source: unknown	TCP traffic detected without corresponding DNS query: 2.16.100.168
Source: unknown	TCP traffic detected without corresponding DNS query: 2.16.100.168
Source: unknown	TCP traffic detected without corresponding DNS query: 216.58.206.67
Source: unknown	TCP traffic detected without corresponding DNS query: 2.16.100.168
Source: unknown	TCP traffic detected without corresponding DNS query: 2.16.100.168
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.122.4
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.77.188
Source: unknown	TCP traffic detected without corresponding DNS query: 2.16.100.168
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: en--sso---coinbasepro---authh---cdn.webflow.ioConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /672c8ed4cb80f3f27fd1a2ea/css/en--sso---coinbasepro---authh---cdn.webflow.cbe1464be.css HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://en--sso---coinbasepro---authh---cdn.webflow.io/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /672c8ed4cb80f3f27fd1a2ea/js/webflow.7e939bc70.js HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://en--sso---coinbasepro---authh---cdn.webflow.io/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/jquery-3.5.1.min.dc5e7f18c8.js?site=672c8ed4cb80f3f27fd1a2ea HTTP/1.1Host: d3e54v103j8qbb.cloudfront.netConnection: keep-aliveOrigin: https://en--sso---coinbasepro---authh---cdn.webflow.iosec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://en--sso---coinbasepro---authh---cdn.webflow.io/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /672c8ed4cb80f3f27fd1a2ea/672c90415b45abb454a192f1_coinbase%20pro%20login-p-1600.png HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://en--sso---coinbasepro---authh---cdn.webflow.io/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/webflow-badge-icon-d2.89e12c322e.svg HTTP/1.1Host: d3e54v103j8qbb.cloudfront.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://en--sso---coinbasepro---authh---cdn.webflow.io/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/webflow-badge-text-d2.c82cec3b78.svg HTTP/1.1Host: d3e54v103j8qbb.cloudfront.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://en--sso---coinbasepro---authh---cdn.webflow.io/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/favicon.ico HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://en--sso---coinbasepro---authh---cdn.webflow.io/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /672c8ed4cb80f3f27fd1a2ea/672c90415b45abb454a192f1_coinbase%20pro%20login-p-1600.png HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/favicon.ico HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/webflow-badge-icon-d2.89e12c322e.svg HTTP/1.1Host: d3e54v103j8qbb.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/webflow-badge-text-d2.c82cec3b78.svg HTTP/1.1Host: d3e54v103j8qbb.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: en--sso---coinbasepro---authh---cdn.webflow.io
Source: global traffic	DNS traffic detected: DNS query: cdn.prod.website-files.com
Source: global traffic	DNS traffic detected: DNS query: d3e54v103j8qbb.cloudfront.net

Source: chromecache_103.6.dr	String found in binary or memory: http://underscorejs.org
Source: chromecache_94.6.dr	String found in binary or memory: https://cdn.prod.website-files.com/672c8ed4cb80f3f27fd1a2ea/672c90415b45abb454a192f1_coinbase%20pro%
Source: chromecache_94.6.dr	String found in binary or memory: https://cdn.prod.website-files.com/672c8ed4cb80f3f27fd1a2ea/css/en--sso---coinbasepro---authh---cdn.
Source: chromecache_94.6.dr	String found in binary or memory: https://cdn.prod.website-files.com/672c8ed4cb80f3f27fd1a2ea/js/webflow.7e939bc70.js
Source: chromecache_94.6.dr	String found in binary or memory: https://cdn.prod.website-files.com/img/favicon.ico
Source: chromecache_94.6.dr	String found in binary or memory: https://cdn.prod.website-files.com/img/webclip.png
Source: chromecache_94.6.dr	String found in binary or memory: https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=672c8ed4cb80f3f27fd1a2e
Source: chromecache_103.6.dr	String found in binary or memory: https://github.com/bkwld/tram
Source: chromecache_94.6.dr	String found in binary or memory: https://webflow.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58375 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49693 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58375
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443

Source: unknown	HTTPS traffic detected: 142.250.74.196:443 -> 192.168.2.5:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.36.248:443 -> 192.168.2.5:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.36.248:443 -> 192.168.2.5:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.160.117:443 -> 192.168.2.5:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.160.117:443 -> 192.168.2.5:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.222.232.39:443 -> 192.168.2.5:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.222.232.39:443 -> 192.168.2.5:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.222.232.39:443 -> 192.168.2.5:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.222.232.144:443 -> 192.168.2.5:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.222.232.144:443 -> 192.168.2.5:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.161.117:443 -> 192.168.2.5:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.161.117:443 -> 192.168.2.5:49743 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir7008_1466061792

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir7008_1466061792

Jump to behavior

Source: classification engine

Classification label: mal68.phis.win@23/20@12/7

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2248,i,9931422667892187248,13732509038317616662,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2268 /prefetch:3
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2248,i,9931422667892187248,13732509038317616662,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=3508 /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://en--sso---coinbasepro---authh---cdn.webflow.io/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2248,i,9931422667892187248,13732509038317616662,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2268 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2248,i,9931422667892187248,13732509038317616662,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=3508 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://en--sso---coinbasepro---authh---cdn.webflow.io/	100%	Avira URL Cloud	phishing

Source	Detection	Scanner	Label	Link
https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=672c8ed4cb80f3f27fd1a2ea	0%	Avira URL Cloud	safe
https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=672c8ed4cb80f3f27fd1a2e	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
en--sso---coinbasepro---authh---cdn.webflow.io	104.18.36.248	true	true	unknown
d3e54v103j8qbb.cloudfront.net	52.222.232.39	true	false	high
cdn.prod.website-files.com	104.18.160.117	true	false	high
www.google.com	142.250.74.196	true	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://cdn.prod.website-files.com/672c8ed4cb80f3f27fd1a2ea/672c90415b45abb454a192f1_coinbase%20pro%20login-p-1600.png	false		high
https://cdn.prod.website-files.com/img/favicon.ico	false		high
https://en--sso---coinbasepro---authh---cdn.webflow.io/	true		unknown
https://d3e54v103j8qbb.cloudfront.net/img/webflow-badge-text-d2.c82cec3b78.svg	false		high
https://cdn.prod.website-files.com/672c8ed4cb80f3f27fd1a2ea/js/webflow.7e939bc70.js	false		high
https://d3e54v103j8qbb.cloudfront.net/img/webflow-badge-icon-d2.89e12c322e.svg	false		high
https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=672c8ed4cb80f3f27fd1a2ea	false	Avira URL Cloud: safe	unknown
https://cdn.prod.website-files.com/672c8ed4cb80f3f27fd1a2ea/css/en--sso---coinbasepro---authh---cdn.webflow.cbe1464be.css	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://cdn.prod.website-files.com/672c8ed4cb80f3f27fd1a2ea/672c90415b45abb454a192f1_coinbase%20pro%	chromecache_94.6.dr	false		high
http://underscorejs.org	chromecache_103.6.dr	false		high
https://cdn.prod.website-files.com/672c8ed4cb80f3f27fd1a2ea/css/en--sso---coinbasepro---authh---cdn.	chromecache_94.6.dr	false		high
https://cdn.prod.website-files.com/img/webclip.png	chromecache_94.6.dr	false		high
https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=672c8ed4cb80f3f27fd1a2e	chromecache_94.6.dr	false	Avira URL Cloud: safe	unknown
https://github.com/bkwld/tram	chromecache_103.6.dr	false		high
https://webflow.com	chromecache_94.6.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.36.248	en--sso---coinbasepro---authh---cdn.webflow.io	United States	13335	CLOUDFLARENETUS	true
52.222.232.39	d3e54v103j8qbb.cloudfront.net	United States	16509	AMAZON-02US	false
104.18.160.117	cdn.prod.website-files.com	United States	13335	CLOUDFLARENETUS	false
104.18.161.117	unknown	United States	13335	CLOUDFLARENETUS	false
52.222.232.144	unknown	United States	16509	AMAZON-02US	false
142.250.74.196	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1642808
Start date and time:	2025-03-19 11:24:41 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 4s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://en--sso---coinbasepro---authh---cdn.webflow.io/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	17
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal68.phis.win@23/20@12/7
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, BackgroundTransferHost.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 23.60.203.209, 74.125.71.84, 172.217.16.142, 142.250.184.195, 142.250.185.174, 142.250.186.142, 216.58.212.174, 142.250.186.174, 142.250.185.110, 172.217.18.14, 142.250.184.238, 216.58.212.142, 142.250.185.78, 216.58.206.46, 142.250.186.163, 34.104.35.123, 172.217.16.131, 4.175.87.197, 20.86.201.138, 150.171.28.10
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, clientservices.googleapis.com, g.bing.com, fs-wildcard.microsoft.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, e16604.dscf.akamaiedge.net, arc.msn.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, redirector.gvt1.com, edgedl.me.gvt1.com, update.googleapis.com, clients.l.google.com, prod.fs.microsoft.com.akadns.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://en--sso---coinbasepro---authh---cdn.webflow.io/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	15086
Entropy (8bit):	3.4582181256178264
Encrypted:	false
SSDEEP:	96:jQ2eQFXKn5O0NkoqpWyRuaoiQ5733LimpFim+xuUbw:jzFan5O0qbMy4d3bBWnuU
MD5:	1F894F487D068A2CED95D5CD4F88598C
SHA1:	743A2C39F538650D53664D19AB5079CFC9BA55D2
SHA-256:	4239819D399860EB27D8A73417F9BD108D45D11676F68B5EDAAE328EC197D55E
SHA-512:	A9BD551FA9F297083351B37DDE9CE6080D14433D26215561875C5A3E8C6EA8ABBE8F5F3204793A7EF9690A4563A2BC640E6A32CFF15F9A9BB42CD322CE1F2717
Malicious:	false
Reputation:	low
URL:	https://cdn.prod.website-files.com/img/favicon.ico
Preview:	......00.... ..%..6... .... ......%........ .h....6..(...0...`..... ......$..................92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	421
Entropy (8bit):	4.951302343646692
Encrypted:	false
SSDEEP:	6:tnryQovcumc4slvtM65tLApUcsw6RnDH4aFJA3ST3EGn4UGhbexTVQG6eJYLwqQq:travcuXM65hA6BrvT3gfQTVVPJYLwq7H
MD5:	89E12C322E66C81213861FC9ACB8B003
SHA1:	6A1A186CEDADCEF3D7D2FFD04F275D94A54E7930
SHA-256:	00F45354C11A12591485977633A0E03952CDF1FF2DE403E10EC846DB8CC508A9
SHA-512:	E8092977116E2B795957F36A7112A0C91DD053D8EE842B8A90D6A83F762B838C034BB31E225215C3AF850CAC0FA4B922835CECD507C5EA7E1C18DE1AB7AD80CF
Malicious:	false
Reputation:	low
Preview:	<svg width="26" height="16" viewBox="0 0 26 16" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M25.65 0L17.4654 16H9.77778L13.203 9.36892H13.0493C10.2235 13.0372 6.00738 15.452 0 16V9.46068C0 9.46068 3.84306 9.23369 6.10229 6.85844H0V0.000126383H6.85832V5.64099L7.01225 5.64036L9.8148 0.000126383H15.0016V5.60523L15.1555 5.60497L18.0632 0H25.65Z" fill="#146EF5"/>.</svg>.

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	9912
Entropy (8bit):	3.9529563769674163
Encrypted:	false
SSDEEP:	192:gLTccPJ37c1fhYJ0VCa8wDY+WCYTx4Pqze9CJCmVjDsUGoT:9KMV8AITHz4Xm9lGoT
MD5:	C82CEC3B78A2B2D267BBFE3C7E838068
SHA1:	70ED58A020C395EED69E3000CB27B7B0FA191360
SHA-256:	3202CB640FADA345AB99415BD087F28E6FEA1C3009DBA51D183CC37BCE036CD7
SHA-512:	85EEF3C4FC445742ED656ACC0600CCECF4F88043E5F2638484E73C6543E5CFB4DD7FBBFA90FC34628C2A1FA1BB0BC5052DF8C1EB454534674BAA4A34C4D94F6B
Malicious:	false
Reputation:	low
URL:	https://d3e54v103j8qbb.cloudfront.net/img/webflow-badge-text-d2.c82cec3b78.svg
Preview:	<svg width="118" height="12" viewBox="0 0 118 12" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M0.525024 0.896484H3.05432L6.00776 8.26622L8.89905 0.896484H11.3531V11H9.47327V3.79949L6.6637 11H5.18713L2.3844 3.92077V11H0.525024V0.896484Z" fill="#080808"/>.<path d="M16.152 11.1367C15.4912 11.1367 14.901 10.9704 14.3815 10.6377C13.8665 10.305 13.4609 9.84017 13.1647 9.24316C12.8684 8.6416 12.7226 7.94889 12.7272 7.16504C12.7272 6.38118 12.8776 5.69076 13.1783 5.09375C13.4791 4.49674 13.8893 4.03646 14.4088 3.71289C14.9329 3.38477 15.5276 3.22298 16.193 3.22754C16.6305 3.22754 17.0361 3.30957 17.4098 3.47363C17.7835 3.63314 18.0934 3.85417 18.3395 4.13672C18.5901 4.41471 18.7542 4.71777 18.8317 5.0459L18.4967 5.03223V3.37109H20.3698V11H18.5172L18.524 9.52344L18.8522 9.33203C18.7428 9.66927 18.5559 9.97461 18.2916 10.248C18.0273 10.5215 17.7083 10.738 17.3346 10.8975C16.9609 11.057 16.5667 11.1367 16.152 11.1367ZM16.5621 9.55078C16.9495 9.55078 17.2936 9.45052 17.5944 9.25C17.89

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21513)
Category:	downloaded
Size (bytes):	37349
Entropy (8bit):	5.44100455597547
Encrypted:	false
SSDEEP:	768:G5p9WeNujJ4zgTyxOv5GAUdxc4vyqLgxwEWpA8pziQfsJeG:G5p9WeNul4zC5jMXyqpM
MD5:	7E939BC705E46316013FC26650185A6E
SHA1:	31BDB7FBA1081F47B36A73226B173C55DD715F6F
SHA-256:	FCF8B8299787278F2B1362B64E8F79DED08975B41BE2841DEDCD8DEC2F5580F8
SHA-512:	D834DD21BEA8C59F2D31FFB82D6751263DE13BCD4801165D70599423CBDF25D3E8C91CBDFE7BB898A4B1702CDC73F6B5F03A97A0C71408245EDBF93DCDE2F4A9
Malicious:	false
Reputation:	low
URL:	https://cdn.prod.website-files.com/672c8ed4cb80f3f27fd1a2ea/js/webflow.7e939bc70.js
Preview:	./!. Webflow: Front-end site library. * @license MIT. * Inline scripts may access the api using an async handler:. * var Webflow = Webflow \|\| [];. * Webflow.push(readyFunction);. /..(()=>{var lt=(e,y)=>()=>(y\|\|e((y={exports:{}}).exports,y),y.exports);var Pt=lt(()=>{"use strict";window.tram=function(e){function y(t,n){var i=new J.Bare;return i.init(t,n)}function l(t){return t.replace(/[A-Z]/g,function(n){return"-"+n.toLowerCase()})}function T(t){var n=parseInt(t.slice(1),16),i=n>>16&255,r=n>>8&255,s=255&n;return[i,r,s]}function C(t,n,i){return"#"+(1<<24\|t<<16\|n<<8\|i).toString(16).slice(1)}function g(){}function L(t,n){B("Type warning: Expected: ["+t+"] Got: ["+typeof n+"] "+n)}function _(t,n,i){B("Units do not match ["+t+"]: "+n+", "+i)}function I(t,n,i){if(n!==void 0&&(i=n),t===void 0)return i;var r=i;return we.test(t)\|\|!Xt.test(t)?r=parseInt(t,10):Xt.test(t)&&(r=1e3parseFloat(t)),0>r&&(r=0),r===r?r:i}function B(t){et.debug&&window&&window.console.warn(t)}function U(t){for(var

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1600 x 3028, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	432695
Entropy (8bit):	7.985200820320328
Encrypted:	false
SSDEEP:	12288:1jlo4kyUN4MVjzh2vHPbq6bqeuF9Rq57zs8IBkVLO1i:1m4QxziDStqhHIiOw
MD5:	AA13E128CB0BE5A20A44BBA7A0340E4C
SHA1:	93624EB191F8E27B27E84FF8045E3AFC3ADA597E
SHA-256:	8F44A392DA0D316AB13F233CE96F7FA25B6992FEC8FA79FD97910FB992E17F48
SHA-512:	702C0FD1EE8EC3D1BBFBEDD48D743AEBBF40B817DE4288603208AAC0528BF7873A873C0906A9D43B54B5FD15D05DFAB7B107FF50E775F94856BFC33AF06392B2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...........K.....PLTE.....1.....6..2.."................/..4..3.....)..5...........,.....-..+..1..(../.....#........0................ %.......#'...........7...7.......8......!&+....:!..!... %)...!3A...#(................7s..%+........ ..!."<..%..$...../. (#..+.2..2...,0615;...TUW7;@...<AH.....,...$,4NNQ....... ....,.#%)`di...EGL....GX\`.$......!V-+/..'.".3e2...?IT......e2....GR]...&%2..., ....#H&......($2V+.(%4kko;{....x6....:s6..........G.......lpy+=O.......vJ#.....5itv{y}..n&O[hC/'.qs..T?4....>'.... N..0...5Z.'Gl..{C.;....0W...........\.rO,\|....'..o..@!..:......dF.G,.=.k.....8..p\Pv~....L.Bs..az....Q..?r..\|Q.....y\mn........]...%_.Zg\|..E..Km.....CT.F.o.U3.pB....!.....b..l7...Y../c.[.J._3+z..L.......dh.Vp.....q..Z.P.r...z;_.I..t.^..2$D.$..{.........{..a..p.......pHYs............... .IDATx...lSW..M.FH6.Fs....}e.=g...V..j.9..3.6..J........&[]W..1.~..pb..4n..B.8J.f..8.i.P ..$..D..Z...F.. .9..g..\|@..@...kq....x........A..I...\. .. ( ..

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (2587)
Category:	downloaded
Size (bytes):	36142
Entropy (8bit):	5.228259456769189
Encrypted:	false
SSDEEP:	768:AyNf7A1RE/TEqyFVF54mkxWaIi1aUuF9Zl0F6FhF8FPqkowKji/JVx1:Aye1RELEqyP0XcPyjowKjK
MD5:	CBE1464BE1E8989A5163549B4DF061B7
SHA1:	B48EB7D9291B1658EFD7CFD582912B4FBCE91013
SHA-256:	63475D8EB9DE5C9D1602E5B1DC4A9F2CEFBFE34035A88A6405EEF0B82146D998
SHA-512:	952F46471B66536C8495678A4B467E369D48C38077B7C7885CA2C5BD064EED7876066A7893614061D5A6ED975743FEEB95D9869DB6E346C07C8F515B0B78DFD1
Malicious:	false
Reputation:	low
URL:	https://cdn.prod.website-files.com/672c8ed4cb80f3f27fd1a2ea/css/en--sso---coinbasepro---authh---cdn.webflow.cbe1464be.css
Preview:	html {. -webkit-text-size-adjust: 100%;. -ms-text-size-adjust: 100%;. font-family: sans-serif;.}..body {. margin: 0;.}..article, aside, details, figcaption, figure, footer, header, hgroup, main, menu, nav, section, summary {. display: block;.}..audio, canvas, progress, video {. vertical-align: baseline;. display: inline-block;.}..audio:not([controls]) {. height: 0;. display: none;.}..[hidden], template {. display: none;.}..a {. background-color: #0000;.}..a:active, a:hover {. outline: 0;.}..abbr[title] {. border-bottom: 1px dotted;.}..b, strong {. font-weight: bold;.}..dfn {. font-style: italic;.}..h1 {. margin: .67em 0;. font-size: 2em;.}..mark {. color: #000;. background: #ff0;.}..small {. font-size: 80%;.}..sub, sup {. vertical-align: baseline;. font-size: 75%;. line-height: 0;. position: relative;.}..sup {. top: -.5em;.}..sub {. bottom: -.25em;.}..img {. border: 0;.}..svg:not(:root) {. overflow: hidden;.}..hr {. box-sizing: content-box;. height: 0;.}..

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (2532), with no line terminators
Category:	downloaded
Size (bytes):	2534
Entropy (8bit):	5.353829532111191
Encrypted:	false
SSDEEP:	48:YRycNTNViSywXzbVWVLgnC4iGba2o+wb+DVAilkzDSVAotVAQVAq1VAodVAib7bL:GyITNFywjbVWVLTZbwVFlQSVBtV3VzV3
MD5:	C9E336530761B15559660427C689F953
SHA1:	CE08FF4521750DE89290BC0411F6933AE52C0F59
SHA-256:	0B3B1445C852E4C31B3A4A9DB4EA262B9B63BD198D1585FD44F5B926507086C5
SHA-512:	1F9EFAD9E578A08B9B1A7A854BF42BC91781E976D67A4F887589CE6CEF84715B4DCC05139AFA9C2D9A7884352D6EC323D89122708F2DE8C2EFAB2A7998F94F42
Malicious:	false
Reputation:	low
URL:	https://en--sso---coinbasepro---authh---cdn.webflow.io/
Preview:	<!DOCTYPE html> This site was created in Webflow. https://webflow.com --> Last Published: Thu Nov 07 2024 10:10:55 GMT+0000 (Coordinated Universal Time) --><html data-wf-domain="en--sso---coinbasepro---authh---cdn.webflow.io" data-wf-page="672c8ed4cb80f3f27fd1a2f1" data-wf-site="672c8ed4cb80f3f27fd1a2ea" data-wf-status="1"><head><meta charset="utf-8"/><title>Official Site. \| Coinbase Pro \| Digital Asset Exchange.</title><meta content="Login to Coinbase Pro to experience advanced cryptocurrency trading. Access secure features, manage your assets, and trade with confidence on a trusted platform." name="description"/><meta content="width=device-width, initial-scale=1" name="viewport"/><meta content="Webflow" name="generator"/><link href="https://cdn.prod.website-files.com/672c8ed4cb80f3f27fd1a2ea/css/en--sso---coinbasepro---authh---cdn.webflow.cbe1464be.css" rel="stylesheet" type="text/css"/><script type="text/javascript">!function(o,c){var n=c.documentElement,t=" w-mod-";n.clas

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	15086
Entropy (8bit):	3.4582181256178264
Encrypted:	false
SSDEEP:	96:jQ2eQFXKn5O0NkoqpWyRuaoiQ5733LimpFim+xuUbw:jzFan5O0qbMy4d3bBWnuU
MD5:	1F894F487D068A2CED95D5CD4F88598C
SHA1:	743A2C39F538650D53664D19AB5079CFC9BA55D2
SHA-256:	4239819D399860EB27D8A73417F9BD108D45D11676F68B5EDAAE328EC197D55E
SHA-512:	A9BD551FA9F297083351B37DDE9CE6080D14433D26215561875C5A3E8C6EA8ABBE8F5F3204793A7EF9690A4563A2BC640E6A32CFF15F9A9BB42CD322CE1F2717
Malicious:	false
Reputation:	low
Preview:	......00.... ..%..6... .... ......%........ .h....6..(...0...`..... ......$..................92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92+.92

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	89476
Entropy (8bit):	5.2896589255084425
Encrypted:	false
SSDEEP:	1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1
MD5:	DC5E7F18C8D36AC1D3D4753A87C98D0A
SHA1:	C8E1C8B386DC5B7A9184C763C88D19A346EB3342
SHA-256:	F7F6A5894F1D19DDAD6FA392B2ECE2C5E578CBF7DA4EA805B6885EB6985B6E3D
SHA-512:	6CB4F4426F559C06190DF97229C05A436820D21498350AC9F118A5625758435171418A022ED523BAE46E668F9F8EA871FEAB6AFF58AD2740B67A30F196D65516
Malicious:	false
Reputation:	low
URL:	https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=672c8ed4cb80f3f27fd1a2ea
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	9912
Entropy (8bit):	3.9529563769674163
Encrypted:	false
SSDEEP:	192:gLTccPJ37c1fhYJ0VCa8wDY+WCYTx4Pqze9CJCmVjDsUGoT:9KMV8AITHz4Xm9lGoT
MD5:	C82CEC3B78A2B2D267BBFE3C7E838068
SHA1:	70ED58A020C395EED69E3000CB27B7B0FA191360
SHA-256:	3202CB640FADA345AB99415BD087F28E6FEA1C3009DBA51D183CC37BCE036CD7
SHA-512:	85EEF3C4FC445742ED656ACC0600CCECF4F88043E5F2638484E73C6543E5CFB4DD7FBBFA90FC34628C2A1FA1BB0BC5052DF8C1EB454534674BAA4A34C4D94F6B
Malicious:	false
Reputation:	low
Preview:	<svg width="118" height="12" viewBox="0 0 118 12" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M0.525024 0.896484H3.05432L6.00776 8.26622L8.89905 0.896484H11.3531V11H9.47327V3.79949L6.6637 11H5.18713L2.3844 3.92077V11H0.525024V0.896484Z" fill="#080808"/>.<path d="M16.152 11.1367C15.4912 11.1367 14.901 10.9704 14.3815 10.6377C13.8665 10.305 13.4609 9.84017 13.1647 9.24316C12.8684 8.6416 12.7226 7.94889 12.7272 7.16504C12.7272 6.38118 12.8776 5.69076 13.1783 5.09375C13.4791 4.49674 13.8893 4.03646 14.4088 3.71289C14.9329 3.38477 15.5276 3.22298 16.193 3.22754C16.6305 3.22754 17.0361 3.30957 17.4098 3.47363C17.7835 3.63314 18.0934 3.85417 18.3395 4.13672C18.5901 4.41471 18.7542 4.71777 18.8317 5.0459L18.4967 5.03223V3.37109H20.3698V11H18.5172L18.524 9.52344L18.8522 9.33203C18.7428 9.66927 18.5559 9.97461 18.2916 10.248C18.0273 10.5215 17.7083 10.738 17.3346 10.8975C16.9609 11.057 16.5667 11.1367 16.152 11.1367ZM16.5621 9.55078C16.9495 9.55078 17.2936 9.45052 17.5944 9.25C17.89

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1600 x 3028, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	432695
Entropy (8bit):	7.985200820320328
Encrypted:	false
SSDEEP:	12288:1jlo4kyUN4MVjzh2vHPbq6bqeuF9Rq57zs8IBkVLO1i:1m4QxziDStqhHIiOw
MD5:	AA13E128CB0BE5A20A44BBA7A0340E4C
SHA1:	93624EB191F8E27B27E84FF8045E3AFC3ADA597E
SHA-256:	8F44A392DA0D316AB13F233CE96F7FA25B6992FEC8FA79FD97910FB992E17F48
SHA-512:	702C0FD1EE8EC3D1BBFBEDD48D743AEBBF40B817DE4288603208AAC0528BF7873A873C0906A9D43B54B5FD15D05DFAB7B107FF50E775F94856BFC33AF06392B2
Malicious:	false
Reputation:	low
URL:	https://cdn.prod.website-files.com/672c8ed4cb80f3f27fd1a2ea/672c90415b45abb454a192f1_coinbase%20pro%20login-p-1600.png
Preview:	.PNG........IHDR...@...........K.....PLTE.....1.....6..2.."................/..4..3.....)..5...........,.....-..+..1..(../.....#........0................ %.......#'...........7...7.......8......!&+....:!..!... %)...!3A...#(................7s..%+........ ..!."<..%..$...../. (#..+.2..2...,0615;...TUW7;@...<AH.....,...$,4NNQ....... ....,.#%)`di...EGL....GX\`.$......!V-+/..'.".3e2...?IT......e2....GR]...&%2..., ....#H&......($2V+.(%4kko;{....x6....:s6..........G.......lpy+=O.......vJ#.....5itv{y}..n&O[hC/'.qs..T?4....>'.... N..0...5Z.'Gl..{C.;....0W...........\.rO,\|....'..o..@!..:......dF.G,.=.k.....8..p\Pv~....L.Bs..az....Q..?r..\|Q.....y\mn........]...%_.Zg\|..E..Km.....CT.F.o.U3.pB....!.....b..l7...Y../c.[.J._3+z..L.......dh.Vp.....q..Z.P.r...z;_.I..t.^..2$D.$..{.........{..a..p.......pHYs............... .IDATx...lSW..M.FH6.Fs....}e.=g...V..j.9..3.6..J........&[]W..1.~..pb..4n..B.8J.f..8.i.P ..$..D..Z...F.. .9..g..\|@..@...kq....x........A..I...\. .. ( ..

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	421
Entropy (8bit):	4.951302343646692
Encrypted:	false
SSDEEP:	6:tnryQovcumc4slvtM65tLApUcsw6RnDH4aFJA3ST3EGn4UGhbexTVQG6eJYLwqQq:travcuXM65hA6BrvT3gfQTVVPJYLwq7H
MD5:	89E12C322E66C81213861FC9ACB8B003
SHA1:	6A1A186CEDADCEF3D7D2FFD04F275D94A54E7930
SHA-256:	00F45354C11A12591485977633A0E03952CDF1FF2DE403E10EC846DB8CC508A9
SHA-512:	E8092977116E2B795957F36A7112A0C91DD053D8EE842B8A90D6A83F762B838C034BB31E225215C3AF850CAC0FA4B922835CECD507C5EA7E1C18DE1AB7AD80CF
Malicious:	false
Reputation:	low
URL:	https://d3e54v103j8qbb.cloudfront.net/img/webflow-badge-icon-d2.89e12c322e.svg
Preview:	<svg width="26" height="16" viewBox="0 0 26 16" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M25.65 0L17.4654 16H9.77778L13.203 9.36892H13.0493C10.2235 13.0372 6.00738 15.452 0 16V9.46068C0 9.46068 3.84306 9.23369 6.10229 6.85844H0V0.000126383H6.85832V5.64099L7.01225 5.64036L9.8148 0.000126383H15.0016V5.60523L15.1555 5.60497L18.0632 0H25.65Z" fill="#146EF5"/>.</svg>.

Total Packets: 386
• 443 (HTTPS)
• 80 (HTTP)
• 53 (DNS)

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 19, 2025 11:25:31.985610008 CET	49676	443	192.168.2.5	20.189.173.14
Mar 19, 2025 11:25:32.297415972 CET	49676	443	192.168.2.5	20.189.173.14
Mar 19, 2025 11:25:32.859900951 CET	49679	80	192.168.2.5	2.23.77.188
Mar 19, 2025 11:25:32.906758070 CET	49676	443	192.168.2.5	20.189.173.14
Mar 19, 2025 11:25:32.947130919 CET	49672	443	192.168.2.5	204.79.197.203
Mar 19, 2025 11:25:34.109939098 CET	49676	443	192.168.2.5	20.189.173.14
Mar 19, 2025 11:25:36.516256094 CET	49676	443	192.168.2.5	20.189.173.14
Mar 19, 2025 11:25:41.359910011 CET	49676	443	192.168.2.5	20.189.173.14
Mar 19, 2025 11:25:42.469280958 CET	49679	80	192.168.2.5	2.23.77.188
Mar 19, 2025 11:25:42.547471046 CET	49672	443	192.168.2.5	204.79.197.203
Mar 19, 2025 11:25:44.478339911 CET	49726	443	192.168.2.5	142.250.74.196
Mar 19, 2025 11:25:44.478377104 CET	443	49726	142.250.74.196	192.168.2.5
Mar 19, 2025 11:25:44.478492022 CET	49726	443	192.168.2.5	142.250.74.196
Mar 19, 2025 11:25:44.478650093 CET	49726	443	192.168.2.5	142.250.74.196
Mar 19, 2025 11:25:44.478662014 CET	443	49726	142.250.74.196	192.168.2.5
Mar 19, 2025 11:25:44.515763044 CET	443	49726	142.250.74.196	192.168.2.5
Mar 19, 2025 11:25:44.515831947 CET	49726	443	192.168.2.5	142.250.74.196
Mar 19, 2025 11:25:44.517082930 CET	49726	443	192.168.2.5	142.250.74.196
Mar 19, 2025 11:25:44.517398119 CET	443	49726	142.250.74.196	192.168.2.5
Mar 19, 2025 11:25:44.562935114 CET	49726	443	192.168.2.5	142.250.74.196
Mar 19, 2025 11:25:45.331953049 CET	49727	443	192.168.2.5	104.18.36.248
Mar 19, 2025 11:25:45.332011938 CET	443	49727	104.18.36.248	192.168.2.5
Mar 19, 2025 11:25:45.332231998 CET	49727	443	192.168.2.5	104.18.36.248
Mar 19, 2025 11:25:45.332581997 CET	49728	443	192.168.2.5	104.18.36.248
Mar 19, 2025 11:25:45.332613945 CET	443	49728	104.18.36.248	192.168.2.5
Mar 19, 2025 11:25:45.332791090 CET	49728	443	192.168.2.5	104.18.36.248
Mar 19, 2025 11:25:45.333014965 CET	49727	443	192.168.2.5	104.18.36.248
Mar 19, 2025 11:25:45.333039999 CET	443	49727	104.18.36.248	192.168.2.5
Mar 19, 2025 11:25:45.333118916 CET	49728	443	192.168.2.5	104.18.36.248
Mar 19, 2025 11:25:45.333133936 CET	443	49728	104.18.36.248	192.168.2.5
Mar 19, 2025 11:25:45.364837885 CET	443	49727	104.18.36.248	192.168.2.5
Mar 19, 2025 11:25:45.364940882 CET	49727	443	192.168.2.5	104.18.36.248
Mar 19, 2025 11:25:45.366219997 CET	49727	443	192.168.2.5	104.18.36.248
Mar 19, 2025 11:25:45.366482973 CET	443	49727	104.18.36.248	192.168.2.5
Mar 19, 2025 11:25:45.367274046 CET	49727	443	192.168.2.5	104.18.36.248
Mar 19, 2025 11:25:45.367640018 CET	443	49728	104.18.36.248	192.168.2.5
Mar 19, 2025 11:25:45.367777109 CET	49728	443	192.168.2.5	104.18.36.248
Mar 19, 2025 11:25:45.369622946 CET	49728	443	192.168.2.5	104.18.36.248
Mar 19, 2025 11:25:45.369939089 CET	443	49728	104.18.36.248	192.168.2.5
Mar 19, 2025 11:25:45.408329010 CET	443	49727	104.18.36.248	192.168.2.5
Mar 19, 2025 11:25:45.411007881 CET	49728	443	192.168.2.5	104.18.36.248
Mar 19, 2025 11:25:45.446643114 CET	443	49727	104.18.36.248	192.168.2.5
Mar 19, 2025 11:25:45.446674109 CET	443	49727	104.18.36.248	192.168.2.5
Mar 19, 2025 11:25:45.446801901 CET	49727	443	192.168.2.5	104.18.36.248
Mar 19, 2025 11:25:45.446829081 CET	443	49727	104.18.36.248	192.168.2.5
Mar 19, 2025 11:25:45.446839094 CET	443	49727	104.18.36.248	192.168.2.5
Mar 19, 2025 11:25:45.446888924 CET	49727	443	192.168.2.5	104.18.36.248
Mar 19, 2025 11:25:45.447918892 CET	49727	443	192.168.2.5	104.18.36.248
Mar 19, 2025 11:25:45.447935104 CET	443	49727	104.18.36.248	192.168.2.5
Mar 19, 2025 11:25:45.510809898 CET	49729	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.510875940 CET	443	49729	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.510938883 CET	49729	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.514348984 CET	49730	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.514456034 CET	443	49730	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.514552116 CET	49730	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.514969110 CET	49729	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.515006065 CET	443	49729	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.515256882 CET	49731	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:25:45.515278101 CET	443	49731	52.222.232.39	192.168.2.5
Mar 19, 2025 11:25:45.515394926 CET	49731	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:25:45.515615940 CET	49730	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.515649080 CET	443	49730	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.515803099 CET	49731	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:25:45.515815973 CET	443	49731	52.222.232.39	192.168.2.5
Mar 19, 2025 11:25:45.545666933 CET	443	49730	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.545773029 CET	49730	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.547296047 CET	443	49729	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.547382116 CET	49729	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.551152945 CET	49730	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.551553965 CET	443	49730	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.552500963 CET	49730	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.552598000 CET	443	49731	52.222.232.39	192.168.2.5
Mar 19, 2025 11:25:45.552699089 CET	49731	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:25:45.552805901 CET	49729	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.553040028 CET	443	49729	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.553461075 CET	49729	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.553941011 CET	49731	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:25:45.553951979 CET	443	49731	52.222.232.39	192.168.2.5
Mar 19, 2025 11:25:45.554331064 CET	443	49731	52.222.232.39	192.168.2.5
Mar 19, 2025 11:25:45.554841995 CET	49731	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:25:45.565485001 CET	443	49731	52.222.232.39	192.168.2.5
Mar 19, 2025 11:25:45.565505028 CET	443	49731	52.222.232.39	192.168.2.5
Mar 19, 2025 11:25:45.565535069 CET	443	49731	52.222.232.39	192.168.2.5
Mar 19, 2025 11:25:45.565588951 CET	49731	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:25:45.565602064 CET	443	49731	52.222.232.39	192.168.2.5
Mar 19, 2025 11:25:45.565634012 CET	49731	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:25:45.565654993 CET	49731	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:25:45.570067883 CET	443	49731	52.222.232.39	192.168.2.5
Mar 19, 2025 11:25:45.570084095 CET	443	49731	52.222.232.39	192.168.2.5
Mar 19, 2025 11:25:45.570190907 CET	49731	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:25:45.570199966 CET	443	49731	52.222.232.39	192.168.2.5
Mar 19, 2025 11:25:45.570293903 CET	49731	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:25:45.572062016 CET	443	49731	52.222.232.39	192.168.2.5
Mar 19, 2025 11:25:45.572077036 CET	443	49731	52.222.232.39	192.168.2.5
Mar 19, 2025 11:25:45.572165966 CET	49731	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:25:45.572174072 CET	443	49731	52.222.232.39	192.168.2.5
Mar 19, 2025 11:25:45.572227955 CET	49731	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:25:45.574170113 CET	443	49731	52.222.232.39	192.168.2.5
Mar 19, 2025 11:25:45.574186087 CET	443	49731	52.222.232.39	192.168.2.5
Mar 19, 2025 11:25:45.574258089 CET	49731	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:25:45.574265957 CET	443	49731	52.222.232.39	192.168.2.5
Mar 19, 2025 11:25:45.574362040 CET	49731	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:25:45.575428963 CET	443	49731	52.222.232.39	192.168.2.5
Mar 19, 2025 11:25:45.575443029 CET	443	49731	52.222.232.39	192.168.2.5
Mar 19, 2025 11:25:45.575540066 CET	49731	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:25:45.575546980 CET	443	49731	52.222.232.39	192.168.2.5
Mar 19, 2025 11:25:45.575563908 CET	443	49731	52.222.232.39	192.168.2.5
Mar 19, 2025 11:25:45.575627089 CET	443	49731	52.222.232.39	192.168.2.5
Mar 19, 2025 11:25:45.575629950 CET	49731	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:25:45.575686932 CET	49731	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:25:45.578336000 CET	49731	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:25:45.583702087 CET	49731	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:25:45.583712101 CET	443	49731	52.222.232.39	192.168.2.5
Mar 19, 2025 11:25:45.596324921 CET	443	49730	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.596324921 CET	443	49729	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.609518051 CET	443	49730	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.609630108 CET	443	49730	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.609724045 CET	443	49730	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.609755039 CET	49730	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.609771013 CET	443	49730	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.609847069 CET	49730	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.609854937 CET	443	49730	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.609947920 CET	443	49730	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.610006094 CET	49730	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.610013008 CET	443	49730	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.610099077 CET	443	49730	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.610153913 CET	49730	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.610161066 CET	443	49730	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.613900900 CET	443	49730	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.613985062 CET	49730	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.613991976 CET	443	49730	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.614033937 CET	443	49730	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.614097118 CET	49730	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.614397049 CET	443	49730	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.614552021 CET	443	49730	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.614609957 CET	49730	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.614618063 CET	443	49730	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.614708900 CET	443	49730	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.614787102 CET	49730	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.614795923 CET	443	49730	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.614819050 CET	443	49730	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.614968061 CET	443	49730	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.615036964 CET	49730	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.615044117 CET	443	49730	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.615094900 CET	49730	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.615288973 CET	443	49730	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.615447998 CET	443	49730	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.615508080 CET	49730	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.615514994 CET	443	49730	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.615612030 CET	443	49730	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.615678072 CET	49730	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.615684986 CET	443	49730	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.616148949 CET	443	49730	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.616224051 CET	49730	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.616231918 CET	443	49730	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.616499901 CET	443	49730	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.616779089 CET	49730	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.617229939 CET	49730	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.617239952 CET	443	49730	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.617495060 CET	443	49729	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.617537975 CET	443	49729	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.617569923 CET	443	49729	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.617605925 CET	443	49729	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.617620945 CET	49729	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.617633104 CET	443	49729	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.617647886 CET	49729	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.617671013 CET	443	49729	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.617707014 CET	443	49729	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.617717028 CET	49729	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.617722988 CET	443	49729	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.617759943 CET	49729	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.617768049 CET	443	49729	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.622288942 CET	443	49729	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.622338057 CET	443	49729	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.622371912 CET	443	49729	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.622419119 CET	49729	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.622425079 CET	443	49729	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.622437000 CET	443	49729	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.622462034 CET	49729	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.622488022 CET	49729	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.622498989 CET	443	49729	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.622790098 CET	443	49729	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.622823000 CET	443	49729	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.622845888 CET	49729	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.622853994 CET	443	49729	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.622910023 CET	443	49729	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.622931957 CET	49729	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.622939110 CET	443	49729	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.622996092 CET	49729	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.623003006 CET	443	49729	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.623809099 CET	443	49729	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.623841047 CET	443	49729	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.623877048 CET	443	49729	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.623881102 CET	49729	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.623888016 CET	443	49729	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.623933077 CET	49729	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.623941898 CET	443	49729	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.623982906 CET	49729	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.624694109 CET	443	49729	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.624738932 CET	443	49729	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.624789000 CET	49729	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.624795914 CET	443	49729	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.624835014 CET	443	49729	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.624885082 CET	49729	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.628484011 CET	49729	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.628493071 CET	443	49729	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.762213945 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.762260914 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.762465954 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.762814999 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.762830973 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.764563084 CET	49737	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:25:45.764606953 CET	443	49737	52.222.232.39	192.168.2.5
Mar 19, 2025 11:25:45.764832973 CET	49737	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:25:45.764955044 CET	49737	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:25:45.764971972 CET	443	49737	52.222.232.39	192.168.2.5
Mar 19, 2025 11:25:45.766972065 CET	49738	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:25:45.766983986 CET	443	49738	52.222.232.39	192.168.2.5
Mar 19, 2025 11:25:45.767180920 CET	49738	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:25:45.767708063 CET	49738	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:25:45.767726898 CET	443	49738	52.222.232.39	192.168.2.5
Mar 19, 2025 11:25:45.790153027 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.790380955 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.790663004 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.790668964 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.799143076 CET	443	49737	52.222.232.39	192.168.2.5
Mar 19, 2025 11:25:45.799259901 CET	49737	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:25:45.800570965 CET	443	49738	52.222.232.39	192.168.2.5
Mar 19, 2025 11:25:45.800641060 CET	49738	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:25:45.804830074 CET	49738	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:25:45.805241108 CET	443	49738	52.222.232.39	192.168.2.5
Mar 19, 2025 11:25:45.806078911 CET	49737	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:25:45.806395054 CET	443	49737	52.222.232.39	192.168.2.5
Mar 19, 2025 11:25:45.807219028 CET	49737	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:25:45.807290077 CET	49738	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:25:45.816035986 CET	443	49737	52.222.232.39	192.168.2.5
Mar 19, 2025 11:25:45.816756964 CET	443	49737	52.222.232.39	192.168.2.5
Mar 19, 2025 11:25:45.816809893 CET	49737	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:25:45.817176104 CET	443	49738	52.222.232.39	192.168.2.5
Mar 19, 2025 11:25:45.817207098 CET	443	49738	52.222.232.39	192.168.2.5
Mar 19, 2025 11:25:45.817250013 CET	443	49738	52.222.232.39	192.168.2.5
Mar 19, 2025 11:25:45.817276955 CET	49738	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:25:45.817289114 CET	443	49738	52.222.232.39	192.168.2.5
Mar 19, 2025 11:25:45.817332029 CET	443	49738	52.222.232.39	192.168.2.5
Mar 19, 2025 11:25:45.817364931 CET	49738	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:25:45.817390919 CET	49738	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:25:45.829921007 CET	49737	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:25:45.829935074 CET	443	49737	52.222.232.39	192.168.2.5
Mar 19, 2025 11:25:45.857646942 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.857683897 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.857774973 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.857841015 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.857856035 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.858012915 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.858273983 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.858566999 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.858592033 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.858637094 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.858645916 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.858731031 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.859918118 CET	49738	443	192.168.2.5	52.222.232.39
Mar 19, 2025 11:25:45.859934092 CET	443	49738	52.222.232.39	192.168.2.5
Mar 19, 2025 11:25:45.862338066 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.862395048 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.862432957 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.862454891 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.862464905 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.862540960 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.862694979 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.862754107 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.862790108 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.862804890 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.862813950 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.863058090 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.863439083 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.863584042 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.863609076 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.863634109 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.863641024 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.863712072 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.863719940 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.864429951 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.864459991 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.864494085 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.864507914 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.864517927 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.864545107 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.865164042 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.865195036 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.865227938 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.865255117 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.865262985 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.865288973 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.867934942 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.867961884 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.867999077 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.868026018 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.868030071 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.868037939 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.868063927 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.868083000 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.868084908 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.868092060 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.868132114 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.868139029 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.868890047 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.868933916 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.868964911 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.869021893 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.869039059 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.869791031 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.869837046 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.869844913 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.869874001 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.869890928 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.869899035 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.869935036 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.869944096 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.870667934 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.870731115 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.871025085 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.871077061 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.871171951 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.871226072 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.871234894 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.871289015 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.872164965 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.872215986 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.872222900 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.872279882 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.872292042 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.872335911 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.872876883 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.872939110 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.873174906 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.873223066 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.873701096 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.873765945 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.873900890 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.873966932 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.873975992 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.874023914 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.874057055 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.874105930 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.874469042 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.874530077 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.874536037 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.874583006 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.874614000 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.874670029 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.875050068 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.875104904 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.875116110 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.875184059 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.875284910 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.875334978 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.875365019 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.875416040 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.875418901 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.875431061 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.875474930 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.876260996 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.876323938 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.876323938 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.876336098 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.876385927 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.876405954 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.876420021 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.876441956 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.876449108 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.876473904 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.876481056 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.876511097 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.876538038 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.876574993 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.876585960 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.877100945 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.877154112 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.877162933 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.877381086 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.877429008 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.877437115 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.877451897 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.877497911 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.877507925 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.877513885 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.877559900 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.877571106 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.877582073 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.877605915 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.877610922 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.877660036 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.877670050 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.878019094 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.878103018 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.878155947 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.878230095 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.878278971 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.878284931 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.878340960 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.878360987 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.878420115 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.879376888 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.879415989 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.879463911 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.879472017 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.879487038 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.879771948 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.879786968 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.879838943 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.879847050 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.880198002 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.880213022 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.880275965 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.880286932 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.880312920 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.880661011 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.880676031 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.880726099 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.880734921 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.881004095 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.881019115 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.881058931 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.881069899 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.881093025 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.881491899 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.881508112 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.881580114 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.881587029 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.881901026 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.881916046 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.881968975 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.881977081 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.882008076 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.882286072 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.882299900 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.882345915 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.882353067 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.882385969 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.882703066 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.882718086 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.882771015 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.882781982 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.883034945 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.883049965 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.883094072 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.883101940 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.883143902 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.883454084 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.883469105 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.883533955 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.883543015 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.883879900 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.883896112 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.883959055 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.883965969 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.883996964 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.884249926 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.884263992 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.884325981 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.884339094 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.884344101 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.884398937 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.884449959 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.884459019 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.884469986 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.884522915 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.920279026 CET	49739	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.920320988 CET	443	49739	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.920483112 CET	49739	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.921412945 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.927500963 CET	49736	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.927525043 CET	443	49736	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.929316998 CET	49739	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.929332972 CET	443	49739	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.954951048 CET	443	49739	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:45.959772110 CET	49739	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.960091114 CET	49739	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:45.960104942 CET	443	49739	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:46.018843889 CET	443	49739	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:46.018899918 CET	443	49739	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:46.018934965 CET	443	49739	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:46.018981934 CET	443	49739	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:46.019023895 CET	443	49739	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:46.019038916 CET	49739	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:46.019058943 CET	443	49739	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:46.019072056 CET	443	49739	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:46.019113064 CET	49739	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:46.019131899 CET	443	49739	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:46.019177914 CET	49739	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:46.019190073 CET	443	49739	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:46.019726038 CET	443	49739	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:46.019788027 CET	49739	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:46.019794941 CET	443	49739	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:46.023354053 CET	443	49739	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:46.023610115 CET	443	49739	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:46.023698092 CET	49739	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:46.235594988 CET	49739	443	192.168.2.5	104.18.160.117
Mar 19, 2025 11:25:46.235627890 CET	443	49739	104.18.160.117	192.168.2.5
Mar 19, 2025 11:25:46.316204071 CET	49740	443	192.168.2.5	52.222.232.144
Mar 19, 2025 11:25:46.316241980 CET	443	49740	52.222.232.144	192.168.2.5
Mar 19, 2025 11:25:46.316345930 CET	49741	443	192.168.2.5	52.222.232.144
Mar 19, 2025 11:25:46.316379070 CET	49740	443	192.168.2.5	52.222.232.144
Mar 19, 2025 11:25:46.316390038 CET	443	49741	52.222.232.144	192.168.2.5
Mar 19, 2025 11:25:46.316521883 CET	49741	443	192.168.2.5	52.222.232.144
Mar 19, 2025 11:25:46.316664934 CET	49740	443	192.168.2.5	52.222.232.144
Mar 19, 2025 11:25:46.316678047 CET	443	49740	52.222.232.144	192.168.2.5
Mar 19, 2025 11:25:46.316819906 CET	49741	443	192.168.2.5	52.222.232.144
Mar 19, 2025 11:25:46.316836119 CET	443	49741	52.222.232.144	192.168.2.5
Mar 19, 2025 11:25:46.320645094 CET	49742	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.320679903 CET	443	49742	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.320797920 CET	49742	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.321075916 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.321104050 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.321237087 CET	49742	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.321257114 CET	443	49742	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.321261883 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.321347952 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.321358919 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.347875118 CET	443	49741	52.222.232.144	192.168.2.5
Mar 19, 2025 11:25:46.347991943 CET	49741	443	192.168.2.5	52.222.232.144
Mar 19, 2025 11:25:46.348212957 CET	443	49740	52.222.232.144	192.168.2.5
Mar 19, 2025 11:25:46.348315954 CET	49740	443	192.168.2.5	52.222.232.144
Mar 19, 2025 11:25:46.348803043 CET	443	49742	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.348871946 CET	49742	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.349839926 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.349976063 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.383131027 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.383538008 CET	49742	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.383589029 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.383816004 CET	49740	443	192.168.2.5	52.222.232.144
Mar 19, 2025 11:25:46.383944988 CET	443	49742	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.384135962 CET	443	49740	52.222.232.144	192.168.2.5
Mar 19, 2025 11:25:46.385130882 CET	49741	443	192.168.2.5	52.222.232.144
Mar 19, 2025 11:25:46.385452032 CET	443	49741	52.222.232.144	192.168.2.5
Mar 19, 2025 11:25:46.385782003 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.385874033 CET	49742	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.385979891 CET	49741	443	192.168.2.5	52.222.232.144
Mar 19, 2025 11:25:46.385982990 CET	49740	443	192.168.2.5	52.222.232.144
Mar 19, 2025 11:25:46.394217968 CET	443	49740	52.222.232.144	192.168.2.5
Mar 19, 2025 11:25:46.394413948 CET	443	49740	52.222.232.144	192.168.2.5
Mar 19, 2025 11:25:46.394516945 CET	49740	443	192.168.2.5	52.222.232.144
Mar 19, 2025 11:25:46.396100998 CET	443	49741	52.222.232.144	192.168.2.5
Mar 19, 2025 11:25:46.396125078 CET	443	49741	52.222.232.144	192.168.2.5
Mar 19, 2025 11:25:46.396177053 CET	443	49741	52.222.232.144	192.168.2.5
Mar 19, 2025 11:25:46.396190882 CET	443	49741	52.222.232.144	192.168.2.5
Mar 19, 2025 11:25:46.396202087 CET	49741	443	192.168.2.5	52.222.232.144
Mar 19, 2025 11:25:46.396239042 CET	49741	443	192.168.2.5	52.222.232.144
Mar 19, 2025 11:25:46.397780895 CET	49740	443	192.168.2.5	52.222.232.144
Mar 19, 2025 11:25:46.397811890 CET	443	49740	52.222.232.144	192.168.2.5
Mar 19, 2025 11:25:46.404278040 CET	49741	443	192.168.2.5	52.222.232.144
Mar 19, 2025 11:25:46.404330015 CET	443	49741	52.222.232.144	192.168.2.5
Mar 19, 2025 11:25:46.420577049 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.420646906 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.420696974 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.420743942 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.420788050 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.420823097 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.420838118 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.420854092 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.420890093 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.420926094 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.420932055 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.420980930 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.420985937 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.425144911 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.425194979 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.425245047 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.425270081 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.425282955 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.425331116 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.425369024 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.425369024 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.425376892 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.425622940 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.425669909 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.425712109 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.425714970 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.425718069 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.425760984 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.425765991 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.425801039 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.426779032 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.426959991 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.427020073 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.427031040 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.427119970 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.427198887 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.427310944 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.427320004 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.427628040 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.427645922 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.427654982 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.427710056 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.427717924 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.427835941 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.427932978 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.427941084 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.428335905 CET	443	49742	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.429884911 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.429950953 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.429968119 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.430169106 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.430248022 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.430262089 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.430273056 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.430351973 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.430360079 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.430921078 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.430999994 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.431000948 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.431029081 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.431124926 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.431132078 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.432069063 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.432159901 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.432214022 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.432214975 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.432223082 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.432271957 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.432276964 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.433029890 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.433104992 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.433114052 CET	443	49742	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.433125019 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.433135033 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.433182001 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.433188915 CET	443	49742	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.433223963 CET	443	49742	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.433235884 CET	49742	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.433264017 CET	443	49742	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.433304071 CET	443	49742	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.433326960 CET	49742	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.433336020 CET	443	49742	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.433379889 CET	443	49742	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.433388948 CET	49742	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.433396101 CET	443	49742	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.433445930 CET	49742	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.433455944 CET	443	49742	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.433549881 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.433659077 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.433660030 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.433684111 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.433705091 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.434510946 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.434602022 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.434633017 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.434643030 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.434659004 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.434686899 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.434746981 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.434758902 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.434792995 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.434834003 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.434839964 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.434875011 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.435429096 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.435509920 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.435548067 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.435558081 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.435569048 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.436028957 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.436120987 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.436122894 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.436147928 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.436186075 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.436238050 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.436321974 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.436331034 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.436374903 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.436379910 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.436407089 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.436444998 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.436888933 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.436949968 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.436959982 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.436992884 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.437038898 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.437038898 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.437047005 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.437127113 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.437237024 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.437243938 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.437366009 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.437966108 CET	443	49742	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.437999010 CET	443	49742	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.438020945 CET	49742	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.438029051 CET	443	49742	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.438055038 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.438091040 CET	443	49742	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.438101053 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.438122988 CET	49742	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.438136101 CET	49742	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.438149929 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.438225985 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.438235044 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.438260078 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.438352108 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.438352108 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.438460112 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.438469887 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.438482046 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.438517094 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.438517094 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.438601971 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.438678026 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.438685894 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.438713074 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.438760996 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.438760996 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.438767910 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.438810110 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.438875914 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.438883066 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.438918114 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.438919067 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.438941002 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.438977003 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.439037085 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.439086914 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.439095020 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.439141035 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.439527988 CET	49742	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.439527035 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.439542055 CET	443	49742	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.439588070 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.439620972 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.439685106 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.439713001 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.439788103 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.439788103 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.439812899 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.439850092 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.439873934 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.439901114 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.439948082 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.440499067 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.440592051 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.440622091 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.440632105 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.440644026 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.440680027 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.440736055 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.440743923 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.440766096 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.440860033 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.440866947 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.440922976 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.441001892 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.441009998 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.441071033 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.441287041 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.441338062 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.441355944 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.441373110 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.441384077 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.441409111 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.441447973 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.441494942 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.441504002 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.441632032 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.443197966 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.443240881 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.443324089 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.443324089 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.443335056 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.443463087 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.443500042 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.443538904 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.443553925 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.443566084 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.443641901 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.443680048 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.443738937 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.443738937 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.443748951 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.443830013 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.443866968 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.443906069 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.443913937 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.443943024 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.444000959 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.444040060 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.444065094 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.444072962 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.444133043 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.444138050 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.444178104 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.444217920 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.444225073 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.444323063 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.444647074 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.444684982 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.444727898 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.444741964 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.444814920 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.445491076 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.445544004 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.445548058 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.445569992 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.445638895 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.445744991 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.445782900 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.445806980 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.445815086 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.445868969 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.445943117 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.445959091 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.446022987 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.446039915 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.446074963 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.446111917 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.446147919 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.446156025 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.446213007 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.446223021 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.446247101 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.446284056 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.446400881 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:46.446453094 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.470104933 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.471434116 CET	49743	443	192.168.2.5	104.18.161.117
Mar 19, 2025 11:25:46.471453905 CET	443	49743	104.18.161.117	192.168.2.5
Mar 19, 2025 11:25:50.969222069 CET	49676	443	192.168.2.5	20.189.173.14
Mar 19, 2025 11:25:52.086479902 CET	58367	53	192.168.2.5	1.1.1.1
Mar 19, 2025 11:25:52.091229916 CET	53	58367	1.1.1.1	192.168.2.5
Mar 19, 2025 11:25:52.091618061 CET	58367	53	192.168.2.5	1.1.1.1
Mar 19, 2025 11:25:52.097826004 CET	53	58367	1.1.1.1	192.168.2.5
Mar 19, 2025 11:25:52.114037991 CET	58367	53	192.168.2.5	1.1.1.1
Mar 19, 2025 11:25:52.119786024 CET	53	58367	1.1.1.1	192.168.2.5
Mar 19, 2025 11:25:52.119879961 CET	58367	53	192.168.2.5	1.1.1.1
Mar 19, 2025 11:25:54.539885044 CET	443	49726	142.250.74.196	192.168.2.5
Mar 19, 2025 11:25:54.539952993 CET	443	49726	142.250.74.196	192.168.2.5
Mar 19, 2025 11:25:54.540004969 CET	49726	443	192.168.2.5	142.250.74.196
Mar 19, 2025 11:25:56.363203049 CET	49726	443	192.168.2.5	142.250.74.196
Mar 19, 2025 11:25:56.363255978 CET	443	49726	142.250.74.196	192.168.2.5
Mar 19, 2025 11:26:00.352667093 CET	443	49728	104.18.36.248	192.168.2.5
Mar 19, 2025 11:26:00.352736950 CET	443	49728	104.18.36.248	192.168.2.5
Mar 19, 2025 11:26:00.352787971 CET	49728	443	192.168.2.5	104.18.36.248
Mar 19, 2025 11:26:00.362030029 CET	49728	443	192.168.2.5	104.18.36.248
Mar 19, 2025 11:26:00.362049103 CET	443	49728	104.18.36.248	192.168.2.5
Mar 19, 2025 11:26:19.751518011 CET	49691	80	192.168.2.5	216.58.206.67
Mar 19, 2025 11:26:19.751610994 CET	49688	80	192.168.2.5	2.16.100.168
Mar 19, 2025 11:26:19.751662970 CET	49692	80	192.168.2.5	2.16.100.168
Mar 19, 2025 11:26:19.756575108 CET	80	49691	216.58.206.67	192.168.2.5
Mar 19, 2025 11:26:19.756650925 CET	49691	80	192.168.2.5	216.58.206.67
Mar 19, 2025 11:26:19.757049084 CET	80	49688	2.16.100.168	192.168.2.5
Mar 19, 2025 11:26:19.757066011 CET	80	49692	2.16.100.168	192.168.2.5
Mar 19, 2025 11:26:19.757122040 CET	49688	80	192.168.2.5	2.16.100.168
Mar 19, 2025 11:26:19.757122040 CET	49692	80	192.168.2.5	2.16.100.168
Mar 19, 2025 11:26:20.176919937 CET	49693	443	192.168.2.5	2.19.122.4
Mar 19, 2025 11:26:20.177086115 CET	49700	80	192.168.2.5	2.23.77.188
Mar 19, 2025 11:26:20.177217007 CET	49696	80	192.168.2.5	2.16.100.168
Mar 19, 2025 11:26:44.533292055 CET	58375	443	192.168.2.5	142.250.74.196
Mar 19, 2025 11:26:44.533343077 CET	443	58375	142.250.74.196	192.168.2.5
Mar 19, 2025 11:26:44.533430099 CET	58375	443	192.168.2.5	142.250.74.196
Mar 19, 2025 11:26:44.533659935 CET	58375	443	192.168.2.5	142.250.74.196
Mar 19, 2025 11:26:44.533668995 CET	443	58375	142.250.74.196	192.168.2.5
Mar 19, 2025 11:26:44.569205999 CET	443	58375	142.250.74.196	192.168.2.5
Mar 19, 2025 11:26:44.569581985 CET	58375	443	192.168.2.5	142.250.74.196
Mar 19, 2025 11:26:44.612318039 CET	443	58375	142.250.74.196	192.168.2.5
Mar 19, 2025 11:26:54.557960987 CET	443	58375	142.250.74.196	192.168.2.5
Mar 19, 2025 11:26:54.558027983 CET	443	58375	142.250.74.196	192.168.2.5
Mar 19, 2025 11:26:54.558156967 CET	58375	443	192.168.2.5	142.250.74.196
Mar 19, 2025 11:26:56.362864017 CET	58375	443	192.168.2.5	142.250.74.196
Mar 19, 2025 11:26:56.362895966 CET	443	58375	142.250.74.196	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 19, 2025 11:25:40.107464075 CET	53	59793	1.1.1.1	192.168.2.5
Mar 19, 2025 11:25:40.108290911 CET	53	57105	1.1.1.1	192.168.2.5
Mar 19, 2025 11:25:40.302866936 CET	53	53498	1.1.1.1	192.168.2.5
Mar 19, 2025 11:25:44.470345020 CET	58623	53	192.168.2.5	1.1.1.1
Mar 19, 2025 11:25:44.470484972 CET	59894	53	192.168.2.5	1.1.1.1
Mar 19, 2025 11:25:44.477097034 CET	53	59894	1.1.1.1	192.168.2.5
Mar 19, 2025 11:25:44.477523088 CET	53	58623	1.1.1.1	192.168.2.5
Mar 19, 2025 11:25:45.320022106 CET	64570	53	192.168.2.5	1.1.1.1
Mar 19, 2025 11:25:45.320382118 CET	58314	53	192.168.2.5	1.1.1.1
Mar 19, 2025 11:25:45.331041098 CET	53	64570	1.1.1.1	192.168.2.5
Mar 19, 2025 11:25:45.331078053 CET	53	58314	1.1.1.1	192.168.2.5
Mar 19, 2025 11:25:45.502438068 CET	65407	53	192.168.2.5	1.1.1.1
Mar 19, 2025 11:25:45.502729893 CET	64230	53	192.168.2.5	1.1.1.1
Mar 19, 2025 11:25:45.503937960 CET	58371	53	192.168.2.5	1.1.1.1
Mar 19, 2025 11:25:45.504327059 CET	54867	53	192.168.2.5	1.1.1.1
Mar 19, 2025 11:25:45.509692907 CET	53	64230	1.1.1.1	192.168.2.5
Mar 19, 2025 11:25:45.510247946 CET	53	65407	1.1.1.1	192.168.2.5
Mar 19, 2025 11:25:45.510566950 CET	53	58371	1.1.1.1	192.168.2.5
Mar 19, 2025 11:25:45.511105061 CET	53	54867	1.1.1.1	192.168.2.5
Mar 19, 2025 11:25:46.307080030 CET	55828	53	192.168.2.5	1.1.1.1
Mar 19, 2025 11:25:46.307255030 CET	53264	53	192.168.2.5	1.1.1.1
Mar 19, 2025 11:25:46.311749935 CET	52402	53	192.168.2.5	1.1.1.1
Mar 19, 2025 11:25:46.312166929 CET	64126	53	192.168.2.5	1.1.1.1
Mar 19, 2025 11:25:46.314934015 CET	53	55828	1.1.1.1	192.168.2.5
Mar 19, 2025 11:25:46.315552950 CET	53	53264	1.1.1.1	192.168.2.5
Mar 19, 2025 11:25:46.318934917 CET	53	52402	1.1.1.1	192.168.2.5
Mar 19, 2025 11:25:46.319952011 CET	53	64126	1.1.1.1	192.168.2.5
Mar 19, 2025 11:25:52.085757971 CET	53	59708	1.1.1.1	192.168.2.5
Mar 19, 2025 11:25:57.260626078 CET	53	50130	1.1.1.1	192.168.2.5
Mar 19, 2025 11:26:16.071599960 CET	53	64855	1.1.1.1	192.168.2.5
Mar 19, 2025 11:26:35.259166956 CET	138	138	192.168.2.5	192.168.2.255
Mar 19, 2025 11:26:38.563038111 CET	53	61110	1.1.1.1	192.168.2.5
Mar 19, 2025 11:26:39.732405901 CET	53	54535	1.1.1.1	192.168.2.5
Mar 19, 2025 11:26:42.415906906 CET	53	52543	1.1.1.1	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 19, 2025 11:25:44.470345020 CET	192.168.2.5	1.1.1.1	0x9b5a	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:25:44.470484972 CET	192.168.2.5	1.1.1.1	0x779a	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 19, 2025 11:25:45.320022106 CET	192.168.2.5	1.1.1.1	0x3db9	Standard query (0)	en--sso---coinbasepro---authh---cdn.webflow.io	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:25:45.320382118 CET	192.168.2.5	1.1.1.1	0x8687	Standard query (0)	en--sso---coinbasepro---authh---cdn.webflow.io	65	IN (0x0001)	false
Mar 19, 2025 11:25:45.502438068 CET	192.168.2.5	1.1.1.1	0xb0c4	Standard query (0)	cdn.prod.website-files.com	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:25:45.502729893 CET	192.168.2.5	1.1.1.1	0xc89e	Standard query (0)	cdn.prod.website-files.com	65	IN (0x0001)	false
Mar 19, 2025 11:25:45.503937960 CET	192.168.2.5	1.1.1.1	0x371c	Standard query (0)	d3e54v103j8qbb.cloudfront.net	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:25:45.504327059 CET	192.168.2.5	1.1.1.1	0xd7bf	Standard query (0)	d3e54v103j8qbb.cloudfront.net	65	IN (0x0001)	false
Mar 19, 2025 11:25:46.307080030 CET	192.168.2.5	1.1.1.1	0xce7	Standard query (0)	d3e54v103j8qbb.cloudfront.net	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:25:46.307255030 CET	192.168.2.5	1.1.1.1	0x34ec	Standard query (0)	d3e54v103j8qbb.cloudfront.net	65	IN (0x0001)	false
Mar 19, 2025 11:25:46.311749935 CET	192.168.2.5	1.1.1.1	0xf1e5	Standard query (0)	cdn.prod.website-files.com	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:25:46.312166929 CET	192.168.2.5	1.1.1.1	0x2b4f	Standard query (0)	cdn.prod.website-files.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Mar 19, 2025 11:25:44.477097034 CET	1.1.1.1	192.168.2.5	0x779a	No error (0)	www.google.com		65	IN (0x0001)	false
Mar 19, 2025 11:25:44.477523088 CET	1.1.1.1	192.168.2.5	0x9b5a	No error (0)	www.google.com	142.250.74.196	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:25:45.331041098 CET	1.1.1.1	192.168.2.5	0x3db9	No error (0)	en--sso---coinbasepro---authh---cdn.webflow.io	104.18.36.248	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:25:45.331041098 CET	1.1.1.1	192.168.2.5	0x3db9	No error (0)	en--sso---coinbasepro---authh---cdn.webflow.io	172.64.151.8	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:25:45.331078053 CET	1.1.1.1	192.168.2.5	0x8687	No error (0)	en--sso---coinbasepro---authh---cdn.webflow.io		65	IN (0x0001)	false
Mar 19, 2025 11:25:45.509692907 CET	1.1.1.1	192.168.2.5	0xc89e	No error (0)	cdn.prod.website-files.com		65	IN (0x0001)	false
Mar 19, 2025 11:25:45.510247946 CET	1.1.1.1	192.168.2.5	0xb0c4	No error (0)	cdn.prod.website-files.com	104.18.160.117	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:25:45.510247946 CET	1.1.1.1	192.168.2.5	0xb0c4	No error (0)	cdn.prod.website-files.com	104.18.161.117	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:25:45.510566950 CET	1.1.1.1	192.168.2.5	0x371c	No error (0)	d3e54v103j8qbb.cloudfront.net	52.222.232.39	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:25:45.510566950 CET	1.1.1.1	192.168.2.5	0x371c	No error (0)	d3e54v103j8qbb.cloudfront.net	52.222.232.99	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:25:45.510566950 CET	1.1.1.1	192.168.2.5	0x371c	No error (0)	d3e54v103j8qbb.cloudfront.net	52.222.232.47	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:25:45.510566950 CET	1.1.1.1	192.168.2.5	0x371c	No error (0)	d3e54v103j8qbb.cloudfront.net	52.222.232.144	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:25:46.314934015 CET	1.1.1.1	192.168.2.5	0xce7	No error (0)	d3e54v103j8qbb.cloudfront.net	52.222.232.144	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:25:46.314934015 CET	1.1.1.1	192.168.2.5	0xce7	No error (0)	d3e54v103j8qbb.cloudfront.net	52.222.232.39	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:25:46.314934015 CET	1.1.1.1	192.168.2.5	0xce7	No error (0)	d3e54v103j8qbb.cloudfront.net	52.222.232.47	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:25:46.314934015 CET	1.1.1.1	192.168.2.5	0xce7	No error (0)	d3e54v103j8qbb.cloudfront.net	52.222.232.99	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:25:46.318934917 CET	1.1.1.1	192.168.2.5	0xf1e5	No error (0)	cdn.prod.website-files.com	104.18.161.117	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:25:46.318934917 CET	1.1.1.1	192.168.2.5	0xf1e5	No error (0)	cdn.prod.website-files.com	104.18.160.117	A (IP address)	IN (0x0001)	false
Mar 19, 2025 11:25:46.319952011 CET	1.1.1.1	192.168.2.5	0x2b4f	No error (0)	cdn.prod.website-files.com		65	IN (0x0001)	false

HTTP Request Dependency Graph

en--sso---coinbasepro---authh---cdn.webflow.io

cdn.prod.website-files.com

d3e54v103j8qbb.cloudfront.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49727	104.18.36.248	443	520	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:25:45 UTC	696	OUT	GET / HTTP/1.1 Host: en--sso---coinbasepro---authh---cdn.webflow.io Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:25:45 UTC	831	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 10:25:45 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close CF-Ray: 922c4482db0555e7-FRA CF-Cache-Status: HIT Age: 140621 Last-Modified: Sun, 16 Mar 2025 17:53:24 GMT content-security-policy: frame-ancestors 'self' https://.webflow.com http://.webflow.com http://*.webflow.io http://webflow.com https://webflow.com surrogate-control: max-age=2147483647 surrogate-key: en--sso---coinbasepro---authh---cdn.webflow.io 672c8ed4cb80f3f27fd1a2ea pageId:672c8ed4cb80f3f27fd1a2f1 x-lambda-id: ab8b2147-7560-4f48-af75-2ef911026d7c vary: Accept-Encoding Set-Cookie: _cfuvid=DrqDfB2Jbgtzpg1kX7zWROW5Prwpo2N8YyV4OfxGWw8-1742379945443-0.0.1.1-604800000; path=/; domain=.webflow.io; HttpOnly; Secure; SameSite=None Server: cloudflare alt-svc: h3=":443"; ma=86400
2025-03-19 10:25:45 UTC	538	IN	Data Raw: 39 65 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 21 2d 2d 20 54 68 69 73 20 73 69 74 65 20 77 61 73 20 63 72 65 61 74 65 64 20 69 6e 20 57 65 62 66 6c 6f 77 2e 20 68 74 74 70 73 3a 2f 2f 77 65 62 66 6c 6f 77 2e 63 6f 6d 20 2d 2d 3e 3c 21 2d 2d 20 4c 61 73 74 20 50 75 62 6c 69 73 68 65 64 3a 20 54 68 75 20 4e 6f 76 20 30 37 20 32 30 32 34 20 31 30 3a 31 30 3a 35 35 20 47 4d 54 2b 30 30 30 30 20 28 43 6f 6f 72 64 69 6e 61 74 65 64 20 55 6e 69 76 65 72 73 61 6c 20 54 69 6d 65 29 20 2d 2d 3e 3c 68 74 6d 6c 20 64 61 74 61 2d 77 66 2d 64 6f 6d 61 69 6e 3d 22 65 6e 2d 2d 73 73 6f 2d 2d 2d 63 6f 69 6e 62 61 73 65 70 72 6f 2d 2d 2d 61 75 74 68 68 2d 2d 2d 63 64 6e 2e 77 65 62 66 6c 6f 77 2e 69 6f 22 20 64 61 74 61 2d 77 66 2d 70 61 67 65 3d 22 36 37 Data Ascii: 9e6<!DOCTYPE html>... This site was created in Webflow. https://webflow.com -->... Last Published: Thu Nov 07 2024 10:10:55 GMT+0000 (Coordinated Universal Time) --><html data-wf-domain="en--sso---coinbasepro---authh---cdn.webflow.io" data-wf-page="67
2025-03-19 10:25:45 UTC	1369	IN	Data Raw: 65 61 74 75 72 65 73 2c 20 6d 61 6e 61 67 65 20 79 6f 75 72 20 61 73 73 65 74 73 2c 20 61 6e 64 20 74 72 61 64 65 20 77 69 74 68 20 63 6f 6e 66 69 64 65 6e 63 65 20 6f 6e 20 61 20 74 72 75 73 74 65 64 20 70 6c 61 74 66 6f 72 6d 2e 22 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 2f 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 2f 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 57 65 62 66 6c 6f 77 22 20 6e 61 6d 65 3d 22 67 65 6e 65 72 61 74 6f 72 22 2f 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 70 72 6f 64 2e 77 65 62 73 69 74 65 2d 66 69 6c 65 73 2e 63 6f Data Ascii: eatures, manage your assets, and trade with confidence on a trusted platform." name="description"/><meta content="width=device-width, initial-scale=1" name="viewport"/><meta content="Webflow" name="generator"/><link href="https://cdn.prod.website-files.co
2025-03-19 10:25:45 UTC	634	IN	Data Raw: 74 74 70 73 3a 2f 2f 63 64 6e 2e 70 72 6f 64 2e 77 65 62 73 69 74 65 2d 66 69 6c 65 73 2e 63 6f 6d 2f 36 37 32 63 38 65 64 34 63 62 38 30 66 33 66 32 37 66 64 31 61 32 65 61 2f 36 37 32 63 39 30 34 31 35 62 34 35 61 62 62 34 35 34 61 31 39 32 66 31 5f 63 6f 69 6e 62 61 73 65 25 32 30 70 72 6f 25 32 30 6c 6f 67 69 6e 2d 70 2d 31 36 30 30 2e 70 6e 67 20 31 36 30 30 77 2c 20 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 70 72 6f 64 2e 77 65 62 73 69 74 65 2d 66 69 6c 65 73 2e 63 6f 6d 2f 36 37 32 63 38 65 64 34 63 62 38 30 66 33 66 32 37 66 64 31 61 32 65 61 2f 36 37 32 63 39 30 34 31 35 62 34 35 61 62 62 34 35 34 61 31 39 32 66 31 5f 63 6f 69 6e 62 61 73 65 25 32 30 70 72 6f 25 32 30 6c 6f 67 69 6e 2e 70 6e 67 20 31 39 32 30 77 22 20 61 6c 74 3d 22 22 2f 3e 3c 73 63 Data Ascii: ttps://cdn.prod.website-files.com/672c8ed4cb80f3f27fd1a2ea/672c90415b45abb454a192f1_coinbase%20pro%20login-p-1600.png 1600w, https://cdn.prod.website-files.com/672c8ed4cb80f3f27fd1a2ea/672c90415b45abb454a192f1_coinbase%20pro%20login.png 1920w" alt=""/><sc
2025-03-19 10:25:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49730	104.18.160.117	443	520	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:25:45 UTC	697	OUT	GET /672c8ed4cb80f3f27fd1a2ea/css/en--sso---coinbasepro---authh---cdn.webflow.cbe1464be.css HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Referer: https://en--sso---coinbasepro---authh---cdn.webflow.io/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:25:45 UTC	632	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 10:25:45 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close x-amz-id-2: efa1q4TAHg/OFceb5A2C92TOyZkypXG/qIzxEVNRswwHuIRCdzTzeIpfJ1cEXM2fG1IZMQaaVdM= x-amz-request-id: YX5PKJ4BT7HKZTQ8 Last-Modified: Thu, 07 Nov 2024 10:10:56 GMT ETag: W/"1af682f3d4fc0e2e665573818c5ac5ee" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000, immutable x-amz-version-id: qCLewO0sN3sQzpMhe94RSSYWCtUGiNXB CF-Cache-Status: HIT Age: 139356 Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 922c4483ec1b9bee-FRA alt-svc: h3=":443"; ma=86400
2025-03-19 10:25:45 UTC	737	IN	Data Raw: 37 64 33 38 0d 0a 68 74 6d 6c 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 3b 0a 20 20 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 62 6f 64 79 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 7d 0a 0a 61 72 74 69 63 6c 65 2c 20 61 73 69 64 65 2c 20 64 65 74 61 69 6c 73 2c 20 66 69 67 63 61 70 74 69 6f 6e 2c 20 66 69 67 75 72 65 2c 20 66 6f 6f 74 65 72 2c 20 68 65 61 64 65 72 2c 20 68 67 72 6f 75 70 2c 20 6d 61 69 6e 2c 20 6d 65 6e 75 2c 20 6e 61 76 2c 20 73 65 63 74 69 6f 6e 2c 20 73 75 6d 6d 61 72 79 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 7d 0a Data Ascii: 7d38html { -webkit-text-size-adjust: 100%; -ms-text-size-adjust: 100%; font-family: sans-serif;}body { margin: 0;}article, aside, details, figcaption, figure, footer, header, hgroup, main, menu, nav, section, summary { display: block;}
2025-03-19 10:25:45 UTC	1369	IN	Data Raw: 20 38 30 25 3b 0a 7d 0a 0a 73 75 62 2c 20 73 75 70 20 7b 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 62 61 73 65 6c 69 6e 65 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 37 35 25 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 30 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 7d 0a 0a 73 75 70 20 7b 0a 20 20 74 6f 70 3a 20 2d 2e 35 65 6d 3b 0a 7d 0a 0a 73 75 62 20 7b 0a 20 20 62 6f 74 74 6f 6d 3a 20 2d 2e 32 35 65 6d 3b 0a 7d 0a 0a 69 6d 67 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 30 3b 0a 7d 0a 0a 73 76 67 3a 6e 6f 74 28 3a 72 6f 6f 74 29 20 7b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 0a 68 72 20 7b 0a 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 0a 20 20 Data Ascii: 80%;}sub, sup { vertical-align: baseline; font-size: 75%; line-height: 0; position: relative;}sup { top: -.5em;}sub { bottom: -.25em;}img { border: 0;}svg:not(:root) { overflow: hidden;}hr { box-sizing: content-box;
2025-03-19 10:25:45 UTC	1369	IN	Data Raw: 65 72 2d 73 70 61 63 69 6e 67 3a 20 30 3b 0a 7d 0a 0a 74 64 2c 20 74 68 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 7d 0a 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 77 65 62 66 6c 6f 77 2d 69 63 6f 6e 73 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 22 64 61 74 61 3a 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 66 6f 6e 74 2d 74 74 66 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3b 62 61 73 65 36 34 2c 41 41 45 41 41 41 41 4c 41 49 41 41 41 77 41 77 54 31 4d 76 4d 67 38 53 42 69 55 41 41 41 43 38 41 41 41 41 59 47 4e 74 59 58 44 70 50 2b 61 34 41 41 41 42 48 41 41 41 41 46 78 6e 59 58 4e 77 41 41 41 41 45 41 41 41 41 58 67 41 41 41 41 49 5a 32 78 35 5a 6d 68 53 32 58 45 41 41 41 47 41 41 41 41 44 48 47 68 6c 59 57 51 Data Ascii: er-spacing: 0;}td, th { padding: 0;}@font-face { font-family: webflow-icons; src: url("data:application/x-font-ttf;charset=utf-8;base64,AAEAAAALAIAAAwAwT1MvMg8SBiUAAAC8AAAAYGNtYXDpP+a4AAABHAAAAFxnYXNwAAAAEAAAAXgAAAAIZ2x5ZmhS2XEAAAGAAAADHGhlYWQ
2025-03-19 10:25:45 UTC	1369	IN	Data Raw: 69 45 67 62 30 74 4b 56 56 56 4b 53 32 38 67 49 53 45 67 62 30 74 4b 56 56 56 4b 53 32 38 67 49 51 41 42 41 41 41 42 77 41 49 41 41 38 41 41 45 67 41 41 45 7a 51 33 50 67 45 33 4e 6a 4d 78 46 53 49 48 44 67 45 48 42 68 55 78 49 77 41 6f 4b 49 74 65 58 57 70 56 53 6b 74 76 49 43 46 6d 41 63 42 71 58 56 36 4c 4b 43 68 6d 49 53 42 76 53 30 70 56 41 41 41 41 41 67 41 41 2f 38 41 46 74 67 50 41 41 44 49 41 4f 67 41 41 41 52 59 58 48 67 45 58 46 68 55 55 42 77 34 42 42 77 59 48 49 78 55 68 49 69 63 75 41 53 63 6d 4e 54 51 33 50 67 45 33 4e 6a 4d 78 4f 41 45 78 4e 44 63 2b 41 54 63 32 4d 7a 49 58 48 67 45 58 46 68 63 56 41 54 4d 4a 41 54 4d 56 4d 7a 55 45 6a 44 38 33 4e 6c 41 58 46 78 59 58 54 6a 55 31 50 51 4c 38 6b 7a 30 31 4e 6b 38 58 46 78 63 58 54 7a 59 31 Data Ascii: iEgb0tKVVVKS28gISEgb0tKVVVKS28gIQABAAABwAIAA8AAEgAAEzQ3PgE3NjMxFSIHDgEHBhUxIwAoKIteXWpVSktvICFmAcBqXV6LKChmISBvS0pVAAAAAgAA/8AFtgPAADIAOgAAARYXHgEXFhUUBw4BBwYHIxUhIicuAScmNTQ3PgE3NjMxOAExNDc+ATc2MzIXHgEXFhcVATMJATMVMzUEjD83NlAXFxYXTjU1PQL8kz01Nk8XFxcXTzY1
2025-03-19 10:25:45 UTC	1369	IN	Data Raw: 2d 22 5d 2c 20 5b 63 6c 61 73 73 2a 3d 22 20 77 2d 69 63 6f 6e 2d 22 5d 20 7b 0a 20 20 73 70 65 61 6b 3a 20 6e 6f 6e 65 3b 0a 20 20 66 6f 6e 74 2d 76 61 72 69 61 6e 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 6e 6f 6e 65 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 20 61 6e 74 69 61 6c 69 61 73 65 64 3b 0a 20 20 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 20 67 72 61 79 73 63 61 6c 65 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 77 65 62 66 6c 6f 77 2d 69 63 Data Ascii: -"], [class*=" w-icon-"] { speak: none; font-variant: normal; text-transform: none; -webkit-font-smoothing: antialiased; -moz-osx-font-smoothing: grayscale; font-style: normal; font-weight: normal; line-height: 1; font-family: webflow-ic
2025-03-19 10:25:45 UTC	1369	IN	Data Raw: 65 72 2d 72 61 64 69 75 73 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 39 70 78 20 31 35 70 78 3b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 7d 0a 0a 69 6e 70 75 74 2e 77 2d 62 75 74 74 6f 6e 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 20 62 75 74 74 6f 6e 3b 0a 7d 0a 0a 68 74 6d 6c 5b 64 61 74 61 2d 77 2d 64 79 6e 70 61 67 65 5d 20 5b 64 61 74 61 2d 77 2d 63 6c 6f 61 6b 5d 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 2e 77 2d 63 6f 64 65 2d 62 6c 6f 63 6b 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 75 6e 73 65 74 3b 0a 7d 0a 0a 70 72 65 2e 77 2d 63 6f 64 65 2d 62 6c Data Ascii: er-radius: 0; padding: 9px 15px; text-decoration: none; display: inline-block;}input.w-button { -webkit-appearance: button;}html[data-w-dynpage] [data-w-cloak] { color: #0000 !important;}.w-code-block { margin: unset;}pre.w-code-bl
2025-03-19 10:25:45 UTC	1369	IN	Data Raw: 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 77 72 61 70 3b 0a 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 30 20 31 70 78 20 23 30 30 30 30 30 30 31 61 2c 20 30 20 31 70 78 20 33 70 78 20 23 30 30 30 30 30 30 31 61 3b 0a 20 20 76 69 73 69 62 69 6c 69 74 79 3a 20 76 69 73 69 62 6c 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 32 31 34 37 34 38 33 36 34 37 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 61 61 61 64 62 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 6f 70 61 63 69 74 79 3a 20 31 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 Data Ascii: ite-space: nowrap; cursor: pointer; box-shadow: 0 0 0 1px #0000001a, 0 1px 3px #0000001a; visibility: visible !important; z-index: 2147483647 !important; color: #aaadb0 !important; opacity: 1 !important; background-color: #fff !important;
2025-03-19 10:25:45 UTC	1369	IN	Data Raw: 6c 65 66 74 3a 20 35 70 78 20 73 6f 6c 69 64 20 23 65 32 65 32 65 32 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 20 32 30 70 78 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 32 70 78 3b 0a 7d 0a 0a 66 69 67 75 72 65 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 30 70 78 3b 0a 7d 0a 0a 66 69 67 63 61 70 74 69 6f 6e 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 35 70 78 3b 0a 7d 0a 0a 75 6c 2c 20 6f 6c 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 3b 0a 20 20 70 61 64 64 69 Data Ascii: left: 5px solid #e2e2e2; margin: 0 0 10px; padding: 10px 20px; font-size: 18px; line-height: 22px;}figure { margin: 0 0 10px;}figcaption { text-align: center; margin-top: 5px;}ul, ol { margin-top: 0; margin-bottom: 10px; paddi
2025-03-19 10:25:45 UTC	1369	IN	Data Raw: 2e 34 32 38 35 37 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2e 77 2d 69 6e 70 75 74 3a 3a 70 6c 61 63 65 68 6f 6c 64 65 72 2c 20 2e 77 2d 73 65 6c 65 63 74 3a 3a 70 6c 61 63 65 68 6f 6c 64 65 72 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 39 39 39 3b 0a 7d 0a 0a 2e 77 2d 69 6e 70 75 74 3a 66 6f 63 75 73 2c 20 2e 77 2d 73 65 6c 65 63 74 3a 66 6f 63 75 73 20 7b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 33 38 39 38 65 63 3b 0a 20 20 6f 75 74 6c 69 6e 65 3a 20 30 3b 0a 7d 0a 0a 2e 77 2d 69 6e 70 75 74 5b 64 69 73 61 62 6c 65 64 5d 2c 20 2e 77 2d 73 65 6c 65 63 74 5b 64 69 73 61 62 6c 65 64 5d 2c 20 2e 77 2d 69 6e 70 75 74 5b 72 65 61 64 6f 6e 6c 79 5d 2c 20 2e 77 2d 73 65 6c 65 63 74 5b 72 65 61 64 6f 6e 6c 79 5d 2c 20 66 69 Data Ascii: .42857; display: block;}.w-input::placeholder, .w-select::placeholder { color: #999;}.w-input:focus, .w-select:focus { border-color: #3898ec; outline: 0;}.w-input[disabled], .w-select[disabled], .w-input[readonly], .w-select[readonly], fi
2025-03-19 10:25:45 UTC	1369	IN	Data Raw: 6f 61 64 2d 75 70 6c 6f 61 64 69 6e 67 2c 20 2e 77 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 2d 73 75 63 63 65 73 73 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 33 33 33 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2e 77 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 2d 65 72 72 6f 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 30 70 78 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2e 77 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 2d 64 65 66 61 75 6c 74 2e 77 2d 68 69 64 64 65 6e 2c 20 2e 77 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 2d 75 70 6c 6f 61 64 69 6e 67 2e 77 2d 68 69 64 64 65 6e 2c 20 2e 77 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 2d 65 72 72 6f 72 2e 77 2d 68 69 64 64 65 6e 2c 20 2e 77 2d 66 69 6c 65 2d 75 Data Ascii: oad-uploading, .w-file-upload-success { color: #333; display: inline-block;}.w-file-upload-error { margin-top: 10px; display: block;}.w-file-upload-default.w-hidden, .w-file-upload-uploading.w-hidden, .w-file-upload-error.w-hidden, .w-file-u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49729	104.18.160.117	443	520	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:25:45 UTC	645	OUT	GET /672c8ed4cb80f3f27fd1a2ea/js/webflow.7e939bc70.js HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://en--sso---coinbasepro---authh---cdn.webflow.io/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:25:45 UTC	651	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 10:25:45 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close x-amz-id-2: LowMyb7yOrJz6YY5UB6SIfaaKK/80e2/ZUeG430VYpPfzqWnCphiUhOMV7j+KNnzVo2gUaLxbDU8DoGRWT0S2A== x-amz-request-id: 79JV4SR5K5VKKK5D Last-Modified: Thu, 07 Nov 2024 10:10:56 GMT ETag: W/"f9dd65064b62ccff2d97c44d8b6fb974" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000, immutable x-amz-version-id: _h0uOyoLDaUYd31i60XC2hIJaM7xKJyq CF-Cache-Status: HIT Age: 139356 Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 922c4483fe751e18-FRA alt-svc: h3=":443"; ma=86400
2025-03-19 10:25:45 UTC	718	IN	Data Raw: 37 64 32 35 0d 0a 0a 2f 2a 21 0a 20 2a 20 57 65 62 66 6c 6f 77 3a 20 46 72 6f 6e 74 2d 65 6e 64 20 73 69 74 65 20 6c 69 62 72 61 72 79 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 4d 49 54 0a 20 2a 20 49 6e 6c 69 6e 65 20 73 63 72 69 70 74 73 20 6d 61 79 20 61 63 63 65 73 73 20 74 68 65 20 61 70 69 20 75 73 69 6e 67 20 61 6e 20 61 73 79 6e 63 20 68 61 6e 64 6c 65 72 3a 0a 20 2a 20 20 20 76 61 72 20 57 65 62 66 6c 6f 77 20 3d 20 57 65 62 66 6c 6f 77 20 7c 7c 20 5b 5d 3b 0a 20 2a 20 20 20 57 65 62 66 6c 6f 77 2e 70 75 73 68 28 72 65 61 64 79 46 75 6e 63 74 69 6f 6e 29 3b 0a 20 2a 2f 0a 0a 28 28 29 3d 3e 7b 76 61 72 20 6c 74 3d 28 65 2c 79 29 3d 3e 28 29 3d 3e 28 79 7c 7c 65 28 28 79 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 29 2e 65 78 70 6f 72 74 73 2c 79 29 2c 79 Data Ascii: 7d25/! Webflow: Front-end site library * @license MIT * Inline scripts may access the api using an async handler: * var Webflow = Webflow \|\| []; * Webflow.push(readyFunction); */(()=>{var lt=(e,y)=>()=>(y\|\|e((y={exports:{}}).exports,y),y
2025-03-19 10:25:45 UTC	1369	IN	Data Raw: 28 22 55 6e 69 74 73 20 64 6f 20 6e 6f 74 20 6d 61 74 63 68 20 5b 22 2b 74 2b 22 5d 3a 20 22 2b 6e 2b 22 2c 20 22 2b 69 29 7d 66 75 6e 63 74 69 6f 6e 20 49 28 74 2c 6e 2c 69 29 7b 69 66 28 6e 21 3d 3d 76 6f 69 64 20 30 26 26 28 69 3d 6e 29 2c 74 3d 3d 3d 76 6f 69 64 20 30 29 72 65 74 75 72 6e 20 69 3b 76 61 72 20 72 3d 69 3b 72 65 74 75 72 6e 20 77 65 2e 74 65 73 74 28 74 29 7c 7c 21 58 74 2e 74 65 73 74 28 74 29 3f 72 3d 70 61 72 73 65 49 6e 74 28 74 2c 31 30 29 3a 58 74 2e 74 65 73 74 28 74 29 26 26 28 72 3d 31 65 33 2a 70 61 72 73 65 46 6c 6f 61 74 28 74 29 29 2c 30 3e 72 26 26 28 72 3d 30 29 2c 72 3d 3d 3d 72 3f 72 3a 69 7d 66 75 6e 63 74 69 6f 6e 20 42 28 74 29 7b 65 74 2e 64 65 62 75 67 26 26 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 63 6f 6e 73 Data Ascii: ("Units do not match ["+t+"]: "+n+", "+i)}function I(t,n,i){if(n!==void 0&&(i=n),t===void 0)return i;var r=i;return we.test(t)\|\|!Xt.test(t)?r=parseInt(t,10):Xt.test(t)&&(r=1e3*parseFloat(t)),0>r&&(r=0),r===r?r:i}function B(t){et.debug&&window&&window.cons
2025-03-19 10:25:45 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 69 2a 74 2f 72 2b 6e 7d 5d 2c 22 65 61 73 65 2d 69 6e 2d 71 75 61 64 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 35 35 30 2c 20 30 2e 30 38 35 2c 20 30 2e 36 38 30 2c 20 30 2e 35 33 30 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 29 7b 72 65 74 75 72 6e 20 69 2a 28 74 2f 3d 72 29 2a 74 2b 6e 7d 5d 2c 22 65 61 73 65 2d 6f 75 74 2d 71 75 61 64 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 32 35 30 2c 20 30 2e 34 36 30 2c 20 30 2e 34 35 30 2c 20 30 2e 39 34 30 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 29 7b 72 65 74 75 72 6e 2d 69 2a 28 74 2f 3d 72 29 2a 28 74 2d 32 29 2b 6e 7d 5d 2c 22 65 61 73 65 2d 69 6e 2d 6f 75 74 2d 71 75 61 64 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 Data Ascii: return it/r+n}],"ease-in-quad":["cubic-bezier(0.550, 0.085, 0.680, 0.530)",function(t,n,i,r){return i(t/=r)t+n}],"ease-out-quad":["cubic-bezier(0.250, 0.460, 0.450, 0.940)",function(t,n,i,r){return-i(t/=r)*(t-2)+n}],"ease-in-out-quad":["cubic-bezier(0
2025-03-19 10:25:45 UTC	1369	IN	Data Raw: 74 2b 32 29 2b 6e 7d 5d 2c 22 65 61 73 65 2d 69 6e 2d 73 69 6e 65 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 37 30 2c 20 30 2c 20 30 2e 37 34 35 2c 20 30 2e 37 31 35 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 29 7b 72 65 74 75 72 6e 2d 69 2a 4d 61 74 68 2e 63 6f 73 28 74 2f 72 2a 28 4d 61 74 68 2e 50 49 2f 32 29 29 2b 69 2b 6e 7d 5d 2c 22 65 61 73 65 2d 6f 75 74 2d 73 69 6e 65 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 33 39 30 2c 20 30 2e 35 37 35 2c 20 30 2e 35 36 35 2c 20 31 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 29 7b 72 65 74 75 72 6e 20 69 2a 4d 61 74 68 2e 73 69 6e 28 74 2f 72 2a 28 4d 61 74 68 2e 50 49 2f 32 29 29 2b 6e 7d 5d 2c 22 65 61 73 65 2d 69 6e 2d 6f 75 74 2d 73 69 6e 65 22 3a Data Ascii: t+2)+n}],"ease-in-sine":["cubic-bezier(0.470, 0, 0.745, 0.715)",function(t,n,i,r){return-iMath.cos(t/r(Math.PI/2))+i+n}],"ease-out-sine":["cubic-bezier(0.390, 0.575, 0.565, 1)",function(t,n,i,r){return iMath.sin(t/r(Math.PI/2))+n}],"ease-in-out-sine":
2025-03-19 10:25:45 UTC	1369	IN	Data Raw: 6e 20 73 3d 3d 3d 76 6f 69 64 20 30 26 26 28 73 3d 31 2e 37 30 31 35 38 29 2c 69 2a 28 28 74 3d 74 2f 72 2d 31 29 2a 74 2a 28 28 73 2b 31 29 2a 74 2b 73 29 2b 31 29 2b 6e 7d 5d 2c 22 65 61 73 65 2d 69 6e 2d 6f 75 74 2d 62 61 63 6b 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 36 38 30 2c 20 2d 30 2e 35 35 30 2c 20 30 2e 32 36 35 2c 20 31 2e 35 35 30 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 2c 73 29 7b 72 65 74 75 72 6e 20 73 3d 3d 3d 76 6f 69 64 20 30 26 26 28 73 3d 31 2e 37 30 31 35 38 29 2c 28 74 2f 3d 72 2f 32 29 3c 31 3f 69 2f 32 2a 74 2a 74 2a 28 28 28 73 2a 3d 31 2e 35 32 35 29 2b 31 29 2a 74 2d 73 29 2b 6e 3a 69 2f 32 2a 28 28 74 2d 3d 32 29 2a 74 2a 28 28 28 73 2a 3d 31 2e 35 32 35 29 2b 31 29 2a 74 2b 73 29 2b 32 29 2b Data Ascii: n s===void 0&&(s=1.70158),i((t=t/r-1)t((s+1)t+s)+1)+n}],"ease-in-out-back":["cubic-bezier(0.680, -0.550, 0.265, 1.550)",function(t,n,i,r,s){return s===void 0&&(s=1.70158),(t/=r/2)<1?i/2tt(((s=1.525)+1)t-s)+n:i/2((t-=2)t(((s=1.525)+1)t+s)+2)+
2025-03-19 10:25:45 UTC	1369	IN	Data Raw: 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 7c 7c 48 2e 6d 73 52 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 3b 72 65 74 75 72 6e 20 74 26 26 68 2e 62 69 6e 64 3f 74 2e 62 69 6e 64 28 48 29 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 48 2e 73 65 74 54 69 6d 65 6f 75 74 28 6e 2c 31 36 29 7d 7d 28 29 2c 63 74 3d 79 2e 6e 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 48 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2c 6e 3d 74 26 26 28 74 2e 6e 6f 77 7c 7c 74 2e 77 65 62 6b 69 74 4e 6f 77 7c 7c 74 2e 6d 73 4e 6f 77 7c 7c 74 2e 6d 6f 7a 4e 6f 77 29 3b 72 65 74 75 72 6e 20 6e 26 26 68 2e 62 69 6e 64 3f 6e 2e 62 69 6e 64 28 74 29 3a 44 61 74 65 2e 6e 6f 77 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 2b 6e 65 77 20 44 61 74 65 7d Data Ascii: stAnimationFrame\|\|H.msRequestAnimationFrame;return t&&h.bind?t.bind(H):function(n){H.setTimeout(n,16)}}(),ct=y.now=function(){var t=H.performance,n=t&&(t.now\|\|t.webkitNow\|\|t.msNow\|\|t.mozNow);return n&&h.bind?n.bind(t):Date.now\|\|function(){return+new Date}
2025-03-19 10:25:45 UTC	1369	IN	Data Raw: 75 65 75 65 2e 70 75 73 68 28 7b 6f 70 74 69 6f 6e 73 3a 77 7d 29 3a 28 74 68 69 73 2e 74 69 6d 65 72 3d 6e 65 77 20 71 74 28 7b 64 75 72 61 74 69 6f 6e 3a 77 2c 63 6f 6e 74 65 78 74 3a 74 68 69 73 2c 63 6f 6d 70 6c 65 74 65 3a 6f 7d 29 2c 74 68 69 73 2e 61 63 74 69 76 65 3d 21 30 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 77 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 61 63 74 69 76 65 3f 28 74 68 69 73 2e 71 75 65 75 65 2e 70 75 73 68 28 7b 6f 70 74 69 6f 6e 73 3a 77 2c 61 72 67 73 3a 61 72 67 75 6d 65 6e 74 73 7d 29 2c 76 6f 69 64 28 74 68 69 73 2e 74 69 6d 65 72 2e 63 6f 6d 70 6c 65 74 65 3d 6f 29 29 3a 42 28 22 4e 6f 20 61 63 74 69 76 65 20 74 72 61 6e 73 69 74 69 6f 6e 20 74 69 6d 65 72 2e 20 55 73 65 20 73 74 61 72 74 28 29 20 6f 72 20 77 61 69 74 28 29 Data Ascii: ueue.push({options:w}):(this.timer=new qt({duration:w,context:this,complete:o}),this.active=!0)}function s(w){return this.active?(this.queue.push({options:w,args:arguments}),void(this.timer.complete=o)):B("No active transition timer. Use start() or wait()
2025-03-19 10:25:45 UTC	1369	IN	Data Raw: 74 2c 73 74 29 7d 59 26 26 6e 74 26 26 59 2e 63 61 6c 6c 28 74 68 69 73 2c 6e 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 77 29 7b 77 2e 73 74 6f 70 28 29 7d 66 75 6e 63 74 69 6f 6e 20 41 74 28 77 2c 4f 29 7b 77 2e 73 65 74 28 4f 29 7d 66 75 6e 63 74 69 6f 6e 20 67 65 28 77 29 7b 74 68 69 73 2e 24 65 6c 2e 63 73 73 28 77 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 74 28 77 2c 4f 29 7b 74 5b 77 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 68 69 6c 64 72 65 6e 3f 79 65 2e 63 61 6c 6c 28 74 68 69 73 2c 4f 2c 61 72 67 75 6d 65 6e 74 73 29 3a 28 74 68 69 73 2e 65 6c 26 26 4f 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 2c 74 68 69 73 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 77 2c 4f 29 7b 76 61 72 20 59 2c 4e 3d Data Ascii: t,st)}Y&&nt&&Y.call(this,nt)}function j(w){w.stop()}function At(w,O){w.set(O)}function ge(w){this.$el.css(w)}function ot(w,O){t[w]=function(){return this.children?ye.call(this,O,arguments):(this.el&&O.apply(this,arguments),this)}}function ye(w,O){var Y,N=
2025-03-19 10:25:45 UTC	1369	IN	Data Raw: 6c 61 79 3a 30 7d 3b 74 2e 69 6e 69 74 3d 66 75 6e 63 74 69 6f 6e 28 6f 2c 70 2c 78 2c 4b 29 7b 74 68 69 73 2e 24 65 6c 3d 6f 2c 74 68 69 73 2e 65 6c 3d 6f 5b 30 5d 3b 76 61 72 20 63 3d 70 5b 30 5d 3b 78 5b 32 5d 26 26 28 63 3d 78 5b 32 5d 29 2c 48 74 5b 63 5d 26 26 28 63 3d 48 74 5b 63 5d 29 2c 74 68 69 73 2e 6e 61 6d 65 3d 63 2c 74 68 69 73 2e 74 79 70 65 3d 78 5b 31 5d 2c 74 68 69 73 2e 64 75 72 61 74 69 6f 6e 3d 49 28 70 5b 31 5d 2c 74 68 69 73 2e 64 75 72 61 74 69 6f 6e 2c 73 2e 64 75 72 61 74 69 6f 6e 29 2c 74 68 69 73 2e 65 61 73 65 3d 69 28 70 5b 32 5d 2c 74 68 69 73 2e 65 61 73 65 2c 73 2e 65 61 73 65 29 2c 74 68 69 73 2e 64 65 6c 61 79 3d 49 28 70 5b 33 5d 2c 74 68 69 73 2e 64 65 6c 61 79 2c 73 2e 64 65 6c 61 79 29 2c 74 68 69 73 2e 73 70 61 6e Data Ascii: lay:0};t.init=function(o,p,x,K){this.$el=o,this.el=o[0];var c=p[0];x[2]&&(c=x[2]),Ht[c]&&(c=Ht[c]),this.name=c,this.type=x[1],this.duration=I(p[1],this.duration,s.duration),this.ease=i(p[2],this.ease,s.ease),this.delay=I(p[3],this.delay,s.delay),this.span
2025-03-19 10:25:45 UTC	1369	IN	Data Raw: 76 65 7c 7c 74 68 69 73 2e 6e 65 78 74 53 74 79 6c 65 29 26 26 28 74 68 69 73 2e 61 63 74 69 76 65 3d 21 31 2c 74 68 69 73 2e 6e 65 78 74 53 74 79 6c 65 3d 6e 75 6c 6c 2c 62 74 28 74 68 69 73 2e 65 6c 2c 74 68 69 73 2e 6e 61 6d 65 2c 74 68 69 73 2e 67 65 74 28 29 29 29 3b 76 61 72 20 6f 3d 74 68 69 73 2e 74 77 65 65 6e 3b 6f 26 26 6f 2e 63 6f 6e 74 65 78 74 26 26 6f 2e 64 65 73 74 72 6f 79 28 29 7d 2c 74 2e 63 6f 6e 76 65 72 74 3d 66 75 6e 63 74 69 6f 6e 28 6f 2c 70 29 7b 69 66 28 6f 3d 3d 22 61 75 74 6f 22 26 26 74 68 69 73 2e 61 75 74 6f 29 72 65 74 75 72 6e 20 6f 3b 76 61 72 20 78 2c 4b 3d 74 79 70 65 6f 66 20 6f 3d 3d 22 6e 75 6d 62 65 72 22 2c 63 3d 74 79 70 65 6f 66 20 6f 3d 3d 22 73 74 72 69 6e 67 22 3b 73 77 69 74 63 68 28 70 29 7b 63 61 73 65 20 Data Ascii: ve\|\|this.nextStyle)&&(this.active=!1,this.nextStyle=null,bt(this.el,this.name,this.get()));var o=this.tween;o&&o.context&&o.destroy()},t.convert=function(o,p){if(o=="auto"&&this.auto)return o;var x,K=typeof o=="number",c=typeof o=="string";switch(p){case

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49731	52.222.232.39	443	520	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:25:45 UTC	690	OUT	GET /js/jquery-3.5.1.min.dc5e7f18c8.js?site=672c8ed4cb80f3f27fd1a2ea HTTP/1.1 Host: d3e54v103j8qbb.cloudfront.net Connection: keep-alive Origin: https://en--sso---coinbasepro---authh---cdn.webflow.io sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://en--sso---coinbasepro---authh---cdn.webflow.io/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:25:45 UTC	551	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 89476 Connection: close Last-Modified: Mon, 20 Jul 2020 17:53:02 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 19 Mar 2025 00:14:30 GMT Cache-Control: max-age=84600, must-revalidate Etag: "dc5e7f18c8d36ac1d3d4753a87c98d0a" Via: 1.1 82386e4e4f56a0c01411d1aea6f3fd46.cloudfront.net (CloudFront) Age: 36677 Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: BNvgncqJLPB38k_GFtTROCCTEjM5OJYfDaamJprtZU9bBC3dtE5oaA==
2025-03-19 10:25:45 UTC	15833	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 Data Ascii: /! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery
2025-03-19 10:25:45 UTC	16384	IN	Data Raw: 6e 74 4e 6f 64 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 2c 61 2c 73 2c 75 2c 6c 3d 79 21 3d 3d 6d 3f 22 6e 65 78 74 53 69 62 6c 69 6e 67 22 3a 22 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 22 2c 63 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 66 3d 78 26 26 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 70 3d 21 6e 26 26 21 78 2c 64 3d 21 31 3b 69 66 28 63 29 7b 69 66 28 79 29 7b 77 68 69 6c 65 28 6c 29 7b 61 3d 65 3b 77 68 69 6c 65 28 61 3d 61 5b 6c 5d 29 69 66 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 21 31 3b 75 3d 6c 3d 22 6f 6e 6c 79 22 3d 3d 3d 68 26 26 21 75 26 26 Data Ascii: ntNode}:function(e,t,n){var r,i,o,a,s,u,l=y!==m?"nextSibling":"previousSibling",c=e.parentNode,f=x&&e.nodeName.toLowerCase(),p=!n&&!x,d=!1;if(c){if(y){while(l){a=e;while(a=a[l])if(x?a.nodeName.toLowerCase()===f:1===a.nodeType)return!1;u=l="only"===h&&!u&&
2025-03-19 10:25:45 UTC	16384	IN	Data Raw: 6c 3f 43 2e 73 65 74 54 69 6d 65 6f 75 74 28 53 2e 72 65 61 64 79 29 3a 28 45 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 42 29 2c 43 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 42 29 29 3b 76 61 72 20 24 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 29 7b 76 61 72 20 73 3d 30 2c 75 3d 65 2e 6c 65 6e 67 74 68 2c 6c 3d 6e 75 6c 6c 3d 3d 6e 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 77 28 6e 29 29 66 6f 72 28 73 20 69 6e 20 69 3d 21 30 2c 6e 29 24 28 65 2c 74 2c 73 2c 6e 5b 73 5d 2c 21 30 2c 6f 2c 61 29 3b 65 6c 73 65 20 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 26 26 28 69 3d 21 30 2c 6d 28 72 29 7c 7c 28 61 3d 21 30 29 2c 6c 26 26 28 61 Data Ascii: l?C.setTimeout(S.ready):(E.addEventListener("DOMContentLoaded",B),C.addEventListener("load",B));var $=function(e,t,n,r,i,o,a){var s=0,u=e.length,l=null==n;if("object"===w(n))for(s in i=!0,n)$(e,t,s,n[s],!0,o,a);else if(void 0!==r&&(i=!0,m(r)\|\|(a=!0),l&&(a
2025-03-19 10:25:45 UTC	16384	IN	Data Raw: 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 29 7d 2c 6c 29 3a 62 28 75 2e 74 65 78 74 43 6f 6e 74 65 6e 74 2e 72 65 70 6c 61 63 65 28 6a 65 2c 22 22 29 2c 75 2c 6c 29 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 52 65 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 2c 69 3d 74 3f 53 2e 66 69 6c 74 65 72 28 74 2c 65 29 3a 65 2c 6f 3d 30 3b 6e 75 6c 6c 21 3d 28 72 3d 69 5b 6f 5d 29 3b 6f 2b 2b 29 6e 7c 7c 31 21 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 7c 7c 53 2e 63 6c 65 61 6e 44 61 74 61 28 76 65 28 72 29 29 2c 72 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 28 6e 26 26 69 65 28 72 29 26 26 79 65 28 76 65 28 72 2c 22 73 63 72 69 70 74 22 29 29 2c 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 72 29 29 3b 72 65 74 75 72 6e 20 Data Ascii: ibute("nonce")},l):b(u.textContent.replace(je,""),u,l))}return n}function Re(e,t,n){for(var r,i=t?S.filter(t,e):e,o=0;null!=(r=i[o]);o++)n\|\|1!==r.nodeType\|\|S.cleanData(ve(r)),r.parentNode&&(n&&ie(r)&&ye(ve(r,"script")),r.parentNode.removeChild(r));return
2025-03-19 10:25:45 UTC	16384	IN	Data Raw: 70 65 65 64 73 5b 72 5d 7c 7c 72 2c 65 3d 65 7c 7c 22 66 78 22 2c 74 68 69 73 2e 71 75 65 75 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 43 2e 73 65 74 54 69 6d 65 6f 75 74 28 65 2c 72 29 3b 74 2e 73 74 6f 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 43 2e 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 6e 29 7d 7d 29 7d 2c 72 74 3d 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 2c 69 74 3d 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 65 6c 65 63 74 22 29 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6f 70 74 69 6f 6e 22 29 29 2c 72 74 2e 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 2c 79 2e 63 68 65 63 6b 4f 6e 3d 22 22 21 3d 3d 72 74 2e 76 61 6c 75 65 2c 79 2e 6f Data Ascii: peeds[r]\|\|r,e=e\|\|"fx",this.queue(e,function(e,t){var n=C.setTimeout(e,r);t.stop=function(){C.clearTimeout(n)}})},rt=E.createElement("input"),it=E.createElement("select").appendChild(E.createElement("option")),rt.type="checkbox",y.checkOn=""!==rt.value,y.o
2025-03-19 10:25:45 UTC	8107	IN	Data Raw: 69 73 2e 63 68 69 6c 64 4e 6f 64 65 73 29 7d 29 2c 74 68 69 73 7d 7d 29 2c 53 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2e 68 69 64 64 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 53 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2e 76 69 73 69 62 6c 65 28 65 29 7d 2c 53 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2e 76 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 21 28 65 2e 6f 66 66 73 65 74 57 69 64 74 68 7c 7c 65 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7c 7c 65 2e 67 65 74 43 6c 69 65 6e 74 52 65 63 74 73 28 29 2e 6c 65 6e 67 74 68 29 7d 2c 53 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 2e 78 68 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6e 65 77 20 43 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 Data Ascii: is.childNodes)}),this}}),S.expr.pseudos.hidden=function(e){return!S.expr.pseudos.visible(e)},S.expr.pseudos.visible=function(e){return!!(e.offsetWidth\|\|e.offsetHeight\|\|e.getClientRects().length)},S.ajaxSettings.xhr=function(){try{return new C.XMLHttpReque

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49736	104.18.160.117	443	520	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:25:45 UTC	740	OUT	GET /672c8ed4cb80f3f27fd1a2ea/672c90415b45abb454a192f1_coinbase%20pro%20login-p-1600.png HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://en--sso---coinbasepro---authh---cdn.webflow.io/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:25:45 UTC	689	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 10:25:45 GMT Content-Type: image/png Content-Length: 432695 Connection: close x-amz-id-2: bBAevmDfZHKtvh3UcFLcUPh52AqBVvtWKdhWlGlQBYHNMTJH+axyJB1lZXWnPg4i2nEkyN6xCJk= x-amz-request-id: KRMT6WR5YH1ME8B7 Last-Modified: Thu, 07 Nov 2024 10:03:00 GMT ETag: "aa13e128cb0be5a20a44bba7a0340e4c" x-amz-storage-class: INTELLIGENT_TIERING x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, must-revalidate x-amz-version-id: JlCAWBKSwKKN91RZi9_x3SVUyCLqgmk4 CF-Cache-Status: HIT Age: 128475 Accept-Ranges: bytes Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 922c44858d7f972c-FRA alt-svc: h3=":443"; ma=86400
2025-03-19 10:25:45 UTC	680	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 06 40 00 00 0b d4 08 03 00 00 00 f1 f2 4b 00 00 00 03 00 50 4c 54 45 0a 0b 0d 02 1c 31 10 11 16 01 1d 36 0d 1b 32 0a 18 22 01 04 0b f9 f9 f9 01 06 0d 00 00 00 03 18 2a 02 1b 2f 01 1c 34 01 1c 33 02 1a 2e 03 17 29 01 1d 35 09 0e 14 09 0f 17 0a 11 17 03 19 2c 09 09 0b 03 19 2d 03 19 2b 02 1b 31 04 17 28 02 1a 2f 12 13 18 1b 1e 23 02 04 07 05 0a 0e 03 1b 30 02 06 09 01 01 04 01 01 01 00 02 09 02 07 0e 1d 20 25 0a 0b 0f 00 04 0c 1e 23 27 ff ff ff 04 07 0c 0c 11 16 00 1e 37 08 09 0d 37 1c 18 07 0c 10 00 1e 38 07 08 0a 09 0d 12 21 26 2b 13 14 19 19 3a 21 19 1c 21 14 18 1e 20 25 29 0f 10 14 21 33 41 0d 0e 12 23 28 2e 07 0c 14 04 05 09 04 09 10 f2 f2 f2 05 05 04 37 73 f5 1f 25 2b 10 16 1d 0e 14 1a 16 1a 20 05 Data Ascii: PNGIHDR@KPLTE162"*/43.)5,-+1(/#0 %#'778!&+:!! %)!3A#(.7s%+
2025-03-19 10:25:45 UTC	1369	IN	Data Raw: 45 07 07 4b 6d 91 f4 cb 99 04 09 43 54 a0 46 de ad 6f c8 55 33 a5 70 42 8d d3 fa 0d 21 7f c7 db ec 8e ad ce 93 62 1a fd 6c 37 aa c0 d8 59 8e c9 2f 63 d9 5b ad 4a e6 5f 33 2b 7a d5 d0 9d 4c a4 b3 c4 bb cd e0 06 0a 64 68 c5 56 70 13 0f 1b 81 fd 71 c4 f7 5a b9 50 13 72 ad f8 cd 7a 3b 5f ba 49 b1 f0 74 d7 5e bd 86 32 24 44 b1 24 91 c9 7b 93 fd ed d7 fd b7 b1 fe dc 8c 7b 80 ef 61 a1 da a2 70 a0 a4 9a 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 20 00 49 44 41 54 78 9c ec bd 0d 6c 53 57 ba ef 4d 0e 46 48 36 f5 46 73 f7 dd 1e a7 7d 65 e9 3d 67 ce cc 92 fa 56 91 de 6a e6 9e 9c 39 9a 0c 33 a7 36 ed 2e 4a 89 0b 8d 0d 9c db d3 aa 93 26 5b 5d 57 c6 83 d3 31 b9 7e db 82 89 70 62 b3 e3 34 6e 95 af 42 ec 38 4a d2 66 82 c3 38 09 69 14 50 20 09 a4 Data Ascii: EKmCTFoU3pB!bl7Y/c[J_3+zLdhVpqZPrz;_It^2$D${{appHYs IDATxlSWMFH6Fs}e=gVj936.J&[]W1~pb4nB8Jf8iP
2025-03-19 10:25:45 UTC	1369	IN	Data Raw: 12 5b 93 27 cb 1b 45 d1 22 cb f2 6f c5 3a 39 53 ce c9 83 eb 37 2e 71 69 ec 26 69 08 b3 68 35 1a 8d 2c 6f 29 0e b6 d6 9d e9 c9 7c 25 6e ca 93 e5 a6 33 b5 10 58 66 77 4d 6d d3 2b 9a 0c f9 15 4d b6 2c cb 39 4c 40 b2 f3 64 59 fe cb e2 8e d2 fa f3 8d ce 8e 8e 4f c8 c0 1a 39 47 d4 c8 9b 5e 84 54 6d b1 44 f7 d5 5a e4 1c 59 ce d1 88 62 9e 2c 6f 61 9f 72 7e 8c 7d b2 a4 e7 bc c8 32 b0 65 c9 fc 5a 4b da 2f 90 e6 2a 01 ce 14 f3 e4 1c d1 22 6f 62 97 bd 38 d5 e2 d9 2f 80 f1 72 20 b1 79 b2 fc 17 0d 0b 35 3f 3b 53 ce 94 37 6a 64 59 de 68 5b 3c 68 1a 6d 74 76 7c e3 f3 f4 d0 3c 59 de f4 aa 26 ef 95 4c 59 8e e7 c9 f2 ab 6b f2 5e 81 d0 58 82 37 bd aa 69 da a4 1c d8 08 51 6b 96 05 a2 a5 d8 5a d2 71 d4 da 60 39 d3 f3 2a 98 20 0f 12 98 29 cb 5b a0 31 38 ba af 8a dd 4d f3 73 7f Data Ascii: ['E"o:9S7.qi&ih5,o)\|%n3XfwMm+M,9L@dYO9G^TmDZYb,oar~}2eZK/"ob8/r y5?;S7jdYh[<hmtv\|<Y&LYk^X7iQkZq`9 )[18Ms
2025-03-19 10:25:45 UTC	1369	IN	Data Raw: a6 18 5a da 22 df 66 f4 12 cf a0 94 f0 8f fe 73 b8 d7 33 de 38 fa b7 69 f7 d0 ef c2 c5 c1 c1 c6 ef 36 84 4f 90 53 7b 2f 92 ef 37 3c bd b4 80 d0 a8 3f b8 f7 6b 7f f0 e5 44 d1 c1 93 ce c3 d3 f6 e1 3f 85 a7 ed c3 7f be 4a 1a a4 3b 08 48 cd 9f 9a 26 6a ae f9 20 4a cf fe 50 77 4d d3 44 4d 7d 77 cd 9f ea 7d 97 af 91 c1 5f 8e 75 d7 54 76 33 01 c9 8c 1e 74 15 93 01 d0 84 f3 fe c8 e9 bd 83 bf 5d 34 e0 f5 e7 4f 42 3b a3 22 20 79 fe ef f2 26 3c a7 f7 96 ef 9c 06 01 19 fd bf 4a fd a3 5d be 48 d9 d7 be d1 5d 8d 11 d7 de ce 84 3f e2 da db f3 ce 84 b3 bd e8 a4 f3 c0 15 67 d1 c7 e5 1b 17 37 1b cb af d8 e5 fb fe 6b eb d9 bd df 90 1b 27 9c d5 bd 9e d6 09 67 fb de 93 ce cf 7a 9d df 46 fd e7 36 84 af 7b de 68 f1 7c 19 48 f8 ce 5e 81 03 d6 9e 3e 32 1e 18 6b b1 0e 15 1d a8 5d Data Ascii: Z"fs38i6OS{/7<?kD?J;H&j JPwMDM}w}_uTv3t]4OB;" y&<J]H]?g7k'gzF6{h\|H^>2k]
2025-03-19 10:25:45 UTC	1369	IN	Data Raw: 1a 2d 53 44 cd 04 b8 49 ce d3 c5 9e ce 49 32 90 f0 3b ed c4 3a 90 37 61 25 97 a1 23 d9 39 1e f5 7f f7 16 6d 82 76 2e 75 a0 ee 82 ac bc 4e ec c4 ee 19 bf e6 b6 da ad c3 f5 7e 62 3d fa 51 e4 53 f2 fd 86 ec 69 f2 fd 86 9b e4 f4 1d 9a b0 1a 83 b1 d0 44 64 cb a4 9d 58 dd 9e 2f 4b 1b 23 cf d7 5d 21 a3 7f 91 fa 7d e7 2c 2d 84 e4 ba 23 3b 26 89 f3 23 12 8c 56 10 72 dc 1d 6c e8 26 ce 86 6e 62 27 91 25 3d 10 c8 9a 75 a0 ae 85 64 bd 44 46 5f b9 42 08 f1 74 4e 93 ef bb 7c 6d 81 44 e3 e8 d3 93 76 ab dd 39 1c 6d 24 b9 a4 66 e4 24 7c d6 96 36 12 3b 19 7d a3 85 e4 da 3d 4b cc 17 61 f9 25 ce 86 0d a5 d0 4c d6 56 15 9e 24 c1 1d e1 2e b8 b8 ed ad 49 3b 39 fb a9 0f 82 7e b2 98 bc 44 48 cd 0e e5 c0 33 bd e4 86 b6 ae 97 45 ba a8 07 a2 89 35 15 13 16 0c 74 f1 93 e6 b1 6b 64 3c Data Ascii: -SDII2;:7a%#9mv.uN~b=QSiDdX/K#]!},-#;&#Vrl&nb'%=udDF_BtN\|mDv9m$f$\|6;}=Ka%LV$.I;9~DH3E5tkd<
2025-03-19 10:25:45 UTC	1369	IN	Data Raw: 63 a1 a6 67 eb e6 4c 3f 57 0f ec de ad f4 81 dc 72 25 0a c8 fd 83 02 92 12 da ed 1f 16 b5 97 9d b1 c0 c2 23 22 ad 74 95 95 38 3e d3 c0 9a 16 95 7b cb b6 d3 ca bd 7b 65 58 49 e3 4c 59 51 66 dc 55 e6 a2 67 f6 b6 97 ed 83 45 16 45 cd 67 7b db 8b b6 d3 cc 33 65 fb 44 ad ec d8 db d1 be b7 12 de b0 44 0b 9c e3 92 97 b9 ff 81 3c fa 2c d3 3e 36 65 59 b9 3b 9e b6 e4 6a bc 97 a2 2f 8a 6c fe e0 6d ec ee cf bf 6d 1e 3a 0a c8 03 00 05 24 35 04 58 05 8e 13 e7 2c 67 a7 ac b3 c4 7e 91 30 f9 b3 84 b0 f8 10 2c c6 c4 4e 50 4e 66 ab c7 69 35 22 97 5c 42 69 e6 00 0b 64 99 3e dc 8b f2 68 2c 20 fc 13 35 e7 42 a1 89 e2 b2 2d b2 bb 4b da d2 cb b9 ab 2b f3 2e 78 68 a1 7d a1 55 3f 44 ce 1e 67 50 40 10 04 79 64 c0 df 03 59 5e a0 80 20 08 f2 c8 80 02 b2 bc 40 01 41 10 e4 91 01 05 64 Data Ascii: cgL?Wr%#"t8>{{eXILYQfUgEEg{3eDD<,>6eY;j/lmm:$5X,g~0,NPNfi5"\Bid>h, 5B-K+.xh}U?DgP@ydY^ @Ad
2025-03-19 10:25:45 UTC	1369	IN	Data Raw: fc ef 0e 59 3f 21 a4 f9 b5 d0 49 62 f7 74 36 4d 78 8e da 9d c3 4f 96 36 12 cf 05 fb 8d a9 16 42 9c 83 38 7e 03 59 0e a0 80 a4 40 ec a6 3d 2b 2b cb 5b d6 b3 73 aa bb e6 f3 0c 5a 1c dc 93 91 af bd 1e 69 45 17 24 45 5e 9c 2a 76 9e 76 38 2e 92 1b 5d be a1 ca 49 67 e7 21 32 2e 8d f8 8e 57 1f f4 8d fe 76 51 51 c8 98 a8 49 34 b6 ed 9c 6a 71 36 ec 3b d6 18 6c 5d 52 40 c8 59 87 eb c0 d6 13 9e ea ca ee 9a ed 13 c1 5d 23 8d df 75 f9 da de 6c 71 ee 4f 5f f8 12 db d8 25 cf 45 f7 78 97 ef e2 47 e7 9a ba 6b 5e 9f 24 c3 a5 fe e3 db 5e 4f f8 db 26 c9 c0 58 77 a4 a7 ff e8 68 7d b1 75 e0 f5 d7 1b 6b 5e ef 5d dc 01 fd 63 97 bf 6d 43 bf fb 72 a8 c5 3a 7e cd 3e 54 d8 eb 1c bf 52 b3 a9 85 8c 6e 9f 18 15 35 52 9f bd cd e1 72 ed 08 75 d7 74 e4 8e 77 f9 da 3e 68 81 ec 37 1f ab 70 Data Ascii: Y?!Ibt6MxO6B8~Y@=++[sZiE$E^*vv8.]Ig!2.WvQQI4jq6;l]R@Y]#ulqO_%ExGk^$^O&Xwh}uk^]cmCr:~>TRn5Rrutw>h7p
2025-03-19 10:25:45 UTC	1369	IN	Data Raw: 57 6d 0c 4e ad 15 c6 ea 5d ad d9 f5 2e b8 c6 18 3d e8 70 38 1c d5 c7 b6 6d 1a 1b 39 50 db 74 c4 e1 78 43 aa 77 d4 8e d5 bb 6a 43 47 5c bb ea 1d af 8f 1c f8 4b 46 7f b9 1c 2d da f6 59 b1 f3 70 38 7a d0 b1 6d 13 de 6c c8 72 00 05 24 15 62 c9 85 36 6c 92 f4 04 fc 85 b5 15 f1 95 f0 3e b0 49 d2 cf 95 05 4c 44 49 92 04 4d 4c 92 a0 0f 24 b0 d4 b2 21 12 2b 85 98 44 55 db 8b 4b 9d 9c 2c b2 98 52 52 b0 16 a6 f2 65 89 9a 78 95 0c 30 7d fd 00 00 20 00 49 44 41 54 24 6a 24 ba 12 d6 2e 31 4b 52 58 92 d8 2a 26 f0 61 0c 48 69 4a 10 90 dc 6c db d2 e1 68 34 b1 00 1c 5e a5 64 0c e2 37 07 c2 1a b3 72 0d 5b 98 13 10 f3 25 49 54 b2 0f 86 30 4b e9 31 49 a2 14 f2 27 6a 24 69 ac f8 78 c3 a1 a3 91 aa 64 10 08 f2 e3 83 02 92 12 33 6b 17 59 f2 95 3f 96 7b 58 28 0f 59 c8 a2 cc 7e f0 Data Ascii: WmN].=p8m9PtxCwjCG\KF-Yp8zmlr$b6l>ILDIML$!+DUK,RRex0} IDAT$j$.1KRX*&aHiJlh4^d7r[%IT0K1I'j$ixd3kY?{X(Y~
2025-03-19 10:25:45 UTC	1369	IN	Data Raw: c7 00 1f 03 2d 36 61 21 08 82 20 3f 18 2b 0c 08 82 20 08 92 02 d8 89 8e 20 08 82 a4 04 7a 20 08 82 20 48 4a a0 80 20 08 82 20 29 81 4d 58 08 82 20 48 4a a0 07 82 20 08 82 a4 04 ce 03 c1 49 00 38 09 00 27 01 e0 63 80 8f 81 36 a5 79 20 6c 46 a1 32 af f0 d6 3f b8 0f 6d 80 f7 01 3e 0b 58 1f 60 9d 68 58 cc 06 d8 84 85 20 08 82 dc 47 13 96 41 f1 48 c0 29 51 ff e0 3e b4 01 de 07 f8 2c 60 7d 80 75 a2 61 29 1b a0 07 82 20 08 82 a4 04 76 a2 63 0f 2a f6 a0 62 0f 2a 3e 06 f8 18 68 53 eb 44 47 10 04 41 90 14 40 01 79 bc d1 72 1c 67 78 d4 59 3c 0f 77 97 3d 38 0b b8 8f 24 3c 80 20 16 42 0d 92 e3 38 75 68 0b 82 3c 52 c0 0f 4a 01 38 58 f1 71 b0 81 51 9a 0f e5 79 41 c7 3f ac 78 79 9d 4e 98 b7 4f 80 ef f7 18 9e a0 63 09 5c f2 3c 88 67 e1 f0 78 bd 4e c7 3a f6 6e bb 88 a5 4d Data Ascii: -6a! ?+ z HJ )MX HJ I8'c6y lF2?m>X`hX GAH)Q>,`}ua) vcb>hSDGA@yrgxY<w=8$< B8uh<RJ8XqQyA?xyNOc\<gxN:nM
2025-03-19 10:25:45 UTC	1369	IN	Data Raw: 3b 9b 64 39 f3 79 96 73 66 04 9b c9 ac 1a 4e a9 f5 93 61 e4 4b 4c 40 d8 76 0e cf 59 64 f9 0f c9 72 10 58 d9 a8 16 58 95 9d 09 06 52 0a d9 b4 8a 25 0f d2 27 b0 2c fc 36 1d c2 ce cc 94 e5 7c 8e 9d 62 c8 93 e5 bf 68 33 e5 9c e7 15 53 e7 d3 74 6d 86 bc e9 7c 31 89 ec 81 33 63 06 93 92 45 39 33 46 6d 90 45 93 79 cd 4c fa 78 38 f4 07 76 67 40 8a e2 5a 2d 18 9d d9 3c 7f 8e c1 d2 93 76 78 1e 4a 8b 87 73 92 69 87 fb 4a 30 99 57 26 ef 15 08 60 e3 7a c8 91 81 cf 00 73 2c 83 27 05 3f f8 07 63 03 f4 40 1e 37 84 f5 8a 80 b0 6d 26 20 9b be 70 13 42 4e 75 3e 0f 0a 42 2d fd 17 a0 3f f8 78 c3 46 aa 9b e9 a4 3e 57 58 ec 26 c4 79 b6 56 ca 3b f4 09 21 24 32 f8 0b 78 e0 8d 79 7d 17 a0 ef f8 78 f9 5b 54 c7 1b f9 d0 17 3e 42 88 f5 d4 e0 96 c0 21 62 55 ba ea ad e4 f2 2a 9e 37 9f Data Ascii: ;d9ysfNaKL@vYdrXXR%',6\|bh3Stm\|13cE93FmEyLx8vg@Z-<vxJsiJ0W&`zs,'?c@7m& pBNu>B-?xF>WX&yV;!$2xy}x[T>B!bU*7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49737	52.222.232.39	443	520	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:25:45 UTC	700	OUT	GET /img/webflow-badge-icon-d2.89e12c322e.svg HTTP/1.1 Host: d3e54v103j8qbb.cloudfront.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://en--sso---coinbasepro---authh---cdn.webflow.io/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:25:45 UTC	578	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 421 Connection: close Last-Modified: Thu, 21 Sep 2023 16:04:04 GMT X-Amz-Server-Side-Encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 19 Mar 2025 00:28:20 GMT Cache-Control: max-age=84600, must-revalidate Etag: "89e12c322e66c81213861fc9acb8b003" Via: 1.1 5519a8cb450b567e8b7111ae986a9b4c.cloudfront.net (CloudFront) Age: 35846 Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: 6UmfFmbm7X8u5GSNE-bOMxyT_VdETKsN67NCUHMdQIi-9JmrcNRRWg==
2025-03-19 10:25:45 UTC	421	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 32 36 22 20 68 65 69 67 68 74 3d 22 31 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 36 20 31 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 32 35 2e 36 35 20 30 4c 31 37 2e 34 36 35 34 20 31 36 48 39 2e 37 37 37 37 38 4c 31 33 2e 32 30 33 20 39 2e 33 36 38 39 32 48 31 33 2e 30 34 39 33 43 31 30 2e 32 32 33 35 20 31 33 2e 30 33 37 32 20 36 2e 30 30 37 33 38 20 31 35 2e 34 35 32 20 30 20 31 36 56 39 2e 34 36 30 36 38 43 30 20 39 2e 34 36 30 36 38 20 33 2e 38 34 33 Data Ascii: <svg width="26" height="16" viewBox="0 0 26 16" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M25.65 0L17.4654 16H9.77778L13.203 9.36892H13.0493C10.2235 13.0372 6.00738 15.452 0 16V9.46068C0 9.46068 3.843

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49738	52.222.232.39	443	520	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:25:45 UTC	700	OUT	GET /img/webflow-badge-text-d2.c82cec3b78.svg HTTP/1.1 Host: d3e54v103j8qbb.cloudfront.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://en--sso---coinbasepro---authh---cdn.webflow.io/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:25:45 UTC	579	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 9912 Connection: close Last-Modified: Thu, 21 Sep 2023 16:04:31 GMT X-Amz-Server-Side-Encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 19 Mar 2025 05:10:32 GMT Cache-Control: max-age=84600, must-revalidate Etag: "c82cec3b78a2b2d267bbfe3c7e838068" Via: 1.1 64f5a3ab7bfb476c633b87746aced0ee.cloudfront.net (CloudFront) Age: 18914 Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: qT5VxuqRNqcocW0haeNSMyl796AgTXD_cuKlO0zDZVxlD3aipR2xGg==
2025-03-19 10:25:45 UTC	9912	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 31 38 22 20 68 65 69 67 68 74 3d 22 31 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 31 38 20 31 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 30 2e 35 32 35 30 32 34 20 30 2e 38 39 36 34 38 34 48 33 2e 30 35 34 33 32 4c 36 2e 30 30 37 37 36 20 38 2e 32 36 36 32 32 4c 38 2e 38 39 39 30 35 20 30 2e 38 39 36 34 38 34 48 31 31 2e 33 35 33 31 56 31 31 48 39 2e 34 37 33 32 37 56 33 2e 37 39 39 34 39 4c 36 2e 36 36 33 37 20 31 31 48 35 2e 31 38 37 31 33 4c 32 2e 33 38 34 34 20 33 2e 39 32 30 37 37 56 31 31 48 30 2e 35 32 35 30 32 34 56 30 2e 38 39 36 34 38 34 5a 22 20 66 69 6c 6c 3d Data Ascii: <svg width="118" height="12" viewBox="0 0 118 12" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M0.525024 0.896484H3.05432L6.00776 8.26622L8.89905 0.896484H11.3531V11H9.47327V3.79949L6.6637 11H5.18713L2.3844 3.92077V11H0.525024V0.896484Z" fill=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49739	104.18.160.117	443	520	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:25:45 UTC	672	OUT	GET /img/favicon.ico HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://en--sso---coinbasepro---authh---cdn.webflow.io/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:25:46 UTC	645	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 10:25:46 GMT Content-Type: image/x-icon Content-Length: 15086 Connection: close x-amz-id-2: QRs3q+dhKhAMTlvzYZ9HsOXkYLhQn66tiVr3vbhVW/V2FbAxceQ9QjMXwPqcyzjtLgD1BjyzKEE= x-amz-request-id: BSTN61CAHM9SMTMC Last-Modified: Thu, 05 Oct 2023 23:38:20 GMT ETag: "1f894f487d068a2ced95d5cd4f88598c" x-amz-server-side-encryption: AES256 Cache-Control: max-age=84600, must-revalidate x-amz-version-id: C5TuT6ObkzP1GjuEGkIHJatwDHqj5J6N CF-Cache-Status: HIT Age: 19647 Accept-Ranges: bytes Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 922c44868de3dcc8-FRA alt-svc: h3=":443"; ma=86400
2025-03-19 10:25:46 UTC	724	IN	Data Raw: 00 00 01 00 03 00 30 30 00 00 01 00 20 00 a8 25 00 00 36 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 de 25 00 00 10 10 00 00 01 00 20 00 68 04 00 00 86 36 00 00 28 00 00 00 30 00 00 00 60 00 00 00 01 00 20 00 00 00 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 39 32 2b 88 39 32 2b f3 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 Data Ascii: 00 %6 % h6(0` $92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+9
2025-03-19 10:25:46 UTC	1369	IN	Data Raw: 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 Data Ascii: +92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+9
2025-03-19 10:25:46 UTC	1369	IN	Data Raw: ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 Data Ascii: 92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92
2025-03-19 10:25:46 UTC	1369	IN	Data Raw: f8 f8 f8 ff f8 f8 f8 ff f8 f8 f8 ff f7 f7 f7 ff 8e 8a 86 ff 37 30 29 ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 38 30 29 ff 50 49 43 ff e0 e0 df ff f8 f9 f9 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f9 f9 f9 ff f9 f9 f9 ff e2 e1 e0 ff 9a 96 93 ff 4b 44 3e ff 44 3d 36 ff c9 c7 c5 ff f9 fa fa ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f9 f9 f9 ff d6 d5 d4 ff 4f 49 42 ff 38 31 29 ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b Data Ascii: 70)92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+80)PICKD>D=6OIB81)92+92+92+92+92+92+92+92+92+
2025-03-19 10:25:46 UTC	1369	IN	Data Raw: f9 f9 ff de dd dc ff 56 50 4a ff 37 30 29 ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 38 31 2a ff 4b 45 3f ff c0 be bc ff d3 d2 d1 ff d2 d1 d0 ff d2 d1 d0 ff d1 cf ce ff d9 d8 d6 ff f5 f4 f4 ff f8 f8 f8 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f8 f8 f8 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f8 f8 f8 ff 9c 99 96 ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff Data Ascii: VPJ70)92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+81*KE?92+92+92+92+92+92+92+92+92+92+92+92+92+
2025-03-19 10:25:46 UTC	1369	IN	Data Raw: 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 3c 36 2f ff 53 4d 47 ff 57 51 4b ff 56 50 4b ff 56 50 4b ff 56 50 4b ff 57 51 4b ff 50 4a 44 ff 3b 34 2d ff 38 31 2a ff 41 3a 33 ff 56 50 4a ff 56 51 4b ff 56 50 4b ff 57 51 4b ff 54 4e 48 ff 3f 38 31 ff 39 32 2a ff 3a 33 2d ff 50 4a 44 ff 57 51 4b ff 56 50 4b ff 56 50 4b ff 56 50 4b ff 56 50 4b ff 57 51 4b ff 4f 49 43 ff 3a 33 2c ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 Data Ascii: +92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+<6/SMGWQKVPKVPKVPKWQKPJD;4-81A:3VPJVQKVPKWQKTNH?8192:3-PJDWQKVPKVPKVPKVPKWQKOIC:3,92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+9
2025-03-19 10:25:46 UTC	1369	IN	Data Raw: ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 Data Ascii: 92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92
2025-03-19 10:25:46 UTC	1369	IN	Data Raw: 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b f3 39 32 2b 89 39 32 2b f4 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b Data Ascii: 92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+
2025-03-19 10:25:46 UTC	1369	IN	Data Raw: 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff Data Ascii: 2+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+
2025-03-19 10:25:46 UTC	1369	IN	Data Raw: 2b ff 39 32 2b ff 3c 35 2e ff 54 4e 48 ff 76 72 6d ff b2 b0 ad ff eb ea ea ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f8 f8 f8 ff f3 f3 f3 ff f6 f6 f6 ff f7 f7 f7 ff f7 f7 f7 ff f8 f8 f8 ff ef ef ef ff 72 6d 68 ff 36 2f 28 ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 3f 39 32 ff 68 63 5d ff 6e 69 64 ff 74 6f 6b ff b1 ae ab ff f5 f5 f5 ff f7 f8 f8 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f8 f8 f8 ff f7 f7 f7 ff f7 f7 f7 ff fa fa fa ff c0 be bc ff 41 3b 34 ff 38 31 2a ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 Data Ascii: +92+<5.TNHvrmrmh6/(92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+?92hc]nidtokA;481*92+92+92+92+92+92+92+92+92+92+92+92+9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49743	104.18.161.117	443	520	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:25:46 UTC	473	OUT	GET /672c8ed4cb80f3f27fd1a2ea/672c90415b45abb454a192f1_coinbase%20pro%20login-p-1600.png HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:25:46 UTC	689	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 10:25:46 GMT Content-Type: image/png Content-Length: 432695 Connection: close x-amz-id-2: bBAevmDfZHKtvh3UcFLcUPh52AqBVvtWKdhWlGlQBYHNMTJH+axyJB1lZXWnPg4i2nEkyN6xCJk= x-amz-request-id: KRMT6WR5YH1ME8B7 Last-Modified: Thu, 07 Nov 2024 10:03:00 GMT ETag: "aa13e128cb0be5a20a44bba7a0340e4c" x-amz-storage-class: INTELLIGENT_TIERING x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, must-revalidate x-amz-version-id: JlCAWBKSwKKN91RZi9_x3SVUyCLqgmk4 CF-Cache-Status: HIT Age: 128476 Accept-Ranges: bytes Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 922c44890a370ad6-FRA alt-svc: h3=":443"; ma=86400
2025-03-19 10:25:46 UTC	680	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 06 40 00 00 0b d4 08 03 00 00 00 f1 f2 4b 00 00 00 03 00 50 4c 54 45 0a 0b 0d 02 1c 31 10 11 16 01 1d 36 0d 1b 32 0a 18 22 01 04 0b f9 f9 f9 01 06 0d 00 00 00 03 18 2a 02 1b 2f 01 1c 34 01 1c 33 02 1a 2e 03 17 29 01 1d 35 09 0e 14 09 0f 17 0a 11 17 03 19 2c 09 09 0b 03 19 2d 03 19 2b 02 1b 31 04 17 28 02 1a 2f 12 13 18 1b 1e 23 02 04 07 05 0a 0e 03 1b 30 02 06 09 01 01 04 01 01 01 00 02 09 02 07 0e 1d 20 25 0a 0b 0f 00 04 0c 1e 23 27 ff ff ff 04 07 0c 0c 11 16 00 1e 37 08 09 0d 37 1c 18 07 0c 10 00 1e 38 07 08 0a 09 0d 12 21 26 2b 13 14 19 19 3a 21 19 1c 21 14 18 1e 20 25 29 0f 10 14 21 33 41 0d 0e 12 23 28 2e 07 0c 14 04 05 09 04 09 10 f2 f2 f2 05 05 04 37 73 f5 1f 25 2b 10 16 1d 0e 14 1a 16 1a 20 05 Data Ascii: PNGIHDR@KPLTE162"*/43.)5,-+1(/#0 %#'778!&+:!! %)!3A#(.7s%+
2025-03-19 10:25:46 UTC	1369	IN	Data Raw: 45 07 07 4b 6d 91 f4 cb 99 04 09 43 54 a0 46 de ad 6f c8 55 33 a5 70 42 8d d3 fa 0d 21 7f c7 db ec 8e ad ce 93 62 1a fd 6c 37 aa c0 d8 59 8e c9 2f 63 d9 5b ad 4a e6 5f 33 2b 7a d5 d0 9d 4c a4 b3 c4 bb cd e0 06 0a 64 68 c5 56 70 13 0f 1b 81 fd 71 c4 f7 5a b9 50 13 72 ad f8 cd 7a 3b 5f ba 49 b1 f0 74 d7 5e bd 86 32 24 44 b1 24 91 c9 7b 93 fd ed d7 fd b7 b1 fe dc 8c 7b 80 ef 61 a1 da a2 70 a0 a4 9a 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 20 00 49 44 41 54 78 9c ec bd 0d 6c 53 57 ba ef 4d 0e 46 48 36 f5 46 73 f7 dd 1e a7 7d 65 e9 3d 67 ce cc 92 fa 56 91 de 6a e6 9e 9c 39 9a 0c 33 a7 36 ed 2e 4a 89 0b 8d 0d 9c db d3 aa 93 26 5b 5d 57 c6 83 d3 31 b9 7e db 82 89 70 62 b3 e3 34 6e 95 af 42 ec 38 4a d2 66 82 c3 38 09 69 14 50 20 09 a4 Data Ascii: EKmCTFoU3pB!bl7Y/c[J_3+zLdhVpqZPrz;_It^2$D${{appHYs IDATxlSWMFH6Fs}e=gVj936.J&[]W1~pb4nB8Jf8iP
2025-03-19 10:25:46 UTC	1369	IN	Data Raw: 12 5b 93 27 cb 1b 45 d1 22 cb f2 6f c5 3a 39 53 ce c9 83 eb 37 2e 71 69 ec 26 69 08 b3 68 35 1a 8d 2c 6f 29 0e b6 d6 9d e9 c9 7c 25 6e ca 93 e5 a6 33 b5 10 58 66 77 4d 6d d3 2b 9a 0c f9 15 4d b6 2c cb 39 4c 40 b2 f3 64 59 fe cb e2 8e d2 fa f3 8d ce 8e 8e 4f c8 c0 1a 39 47 d4 c8 9b 5e 84 54 6d b1 44 f7 d5 5a e4 1c 59 ce d1 88 62 9e 2c 6f 61 9f 72 7e 8c 7d b2 a4 e7 bc c8 32 b0 65 c9 fc 5a 4b da 2f 90 e6 2a 01 ce 14 f3 e4 1c d1 22 6f 62 97 bd 38 d5 e2 d9 2f 80 f1 72 20 b1 79 b2 fc 17 0d 0b 35 3f 3b 53 ce 94 37 6a 64 59 de 68 5b 3c 68 1a 6d 74 76 7c e3 f3 f4 d0 3c 59 de f4 aa 26 ef 95 4c 59 8e e7 c9 f2 ab 6b f2 5e 81 d0 58 82 37 bd aa 69 da a4 1c d8 08 51 6b 96 05 a2 a5 d8 5a d2 71 d4 da 60 39 d3 f3 2a 98 20 0f 12 98 29 cb 5b a0 31 38 ba af 8a dd 4d f3 73 7f Data Ascii: ['E"o:9S7.qi&ih5,o)\|%n3XfwMm+M,9L@dYO9G^TmDZYb,oar~}2eZK/"ob8/r y5?;S7jdYh[<hmtv\|<Y&LYk^X7iQkZq`9 )[18Ms
2025-03-19 10:25:46 UTC	1369	IN	Data Raw: a6 18 5a da 22 df 66 f4 12 cf a0 94 f0 8f fe 73 b8 d7 33 de 38 fa b7 69 f7 d0 ef c2 c5 c1 c1 c6 ef 36 84 4f 90 53 7b 2f 92 ef 37 3c bd b4 80 d0 a8 3f b8 f7 6b 7f f0 e5 44 d1 c1 93 ce c3 d3 f6 e1 3f 85 a7 ed c3 7f be 4a 1a a4 3b 08 48 cd 9f 9a 26 6a ae f9 20 4a cf fe 50 77 4d d3 44 4d 7d 77 cd 9f ea 7d 97 af 91 c1 5f 8e 75 d7 54 76 33 01 c9 8c 1e 74 15 93 01 d0 84 f3 fe c8 e9 bd 83 bf 5d 34 e0 f5 e7 4f 42 3b a3 22 20 79 fe ef f2 26 3c a7 f7 96 ef 9c 06 01 19 fd bf 4a fd a3 5d be 48 d9 d7 be d1 5d 8d 11 d7 de ce 84 3f e2 da db f3 ce 84 b3 bd e8 a4 f3 c0 15 67 d1 c7 e5 1b 17 37 1b cb af d8 e5 fb fe 6b eb d9 bd df 90 1b 27 9c d5 bd 9e d6 09 67 fb de 93 ce cf 7a 9d df 46 fd e7 36 84 af 7b de 68 f1 7c 19 48 f8 ce 5e 81 03 d6 9e 3e 32 1e 18 6b b1 0e 15 1d a8 5d Data Ascii: Z"fs38i6OS{/7<?kD?J;H&j JPwMDM}w}_uTv3t]4OB;" y&<J]H]?g7k'gzF6{h\|H^>2k]
2025-03-19 10:25:46 UTC	1369	IN	Data Raw: 1a 2d 53 44 cd 04 b8 49 ce d3 c5 9e ce 49 32 90 f0 3b ed c4 3a 90 37 61 25 97 a1 23 d9 39 1e f5 7f f7 16 6d 82 76 2e 75 a0 ee 82 ac bc 4e ec c4 ee 19 bf e6 b6 da ad c3 f5 7e 62 3d fa 51 e4 53 f2 fd 86 ec 69 f2 fd 86 9b e4 f4 1d 9a b0 1a 83 b1 d0 44 64 cb a4 9d 58 dd 9e 2f 4b 1b 23 cf d7 5d 21 a3 7f 91 fa 7d e7 2c 2d 84 e4 ba 23 3b 26 89 f3 23 12 8c 56 10 72 dc 1d 6c e8 26 ce 86 6e 62 27 91 25 3d 10 c8 9a 75 a0 ae 85 64 bd 44 46 5f b9 42 08 f1 74 4e 93 ef bb 7c 6d 81 44 e3 e8 d3 93 76 ab dd 39 1c 6d 24 b9 a4 66 e4 24 7c d6 96 36 12 3b 19 7d a3 85 e4 da 3d 4b cc 17 61 f9 25 ce 86 0d a5 d0 4c d6 56 15 9e 24 c1 1d e1 2e b8 b8 ed ad 49 3b 39 fb a9 0f 82 7e b2 98 bc 44 48 cd 0e e5 c0 33 bd e4 86 b6 ae 97 45 ba a8 07 a2 89 35 15 13 16 0c 74 f1 93 e6 b1 6b 64 3c Data Ascii: -SDII2;:7a%#9mv.uN~b=QSiDdX/K#]!},-#;&#Vrl&nb'%=udDF_BtN\|mDv9m$f$\|6;}=Ka%LV$.I;9~DH3E5tkd<
2025-03-19 10:25:46 UTC	1369	IN	Data Raw: 63 a1 a6 67 eb e6 4c 3f 57 0f ec de ad f4 81 dc 72 25 0a c8 fd 83 02 92 12 da ed 1f 16 b5 97 9d b1 c0 c2 23 22 ad 74 95 95 38 3e d3 c0 9a 16 95 7b cb b6 d3 ca bd 7b 65 58 49 e3 4c 59 51 66 dc 55 e6 a2 67 f6 b6 97 ed 83 45 16 45 cd 67 7b db 8b b6 d3 cc 33 65 fb 44 ad ec d8 db d1 be b7 12 de b0 44 0b 9c e3 92 97 b9 ff 81 3c fa 2c d3 3e 36 65 59 b9 3b 9e b6 e4 6a bc 97 a2 2f 8a 6c fe e0 6d ec ee cf bf 6d 1e 3a 0a c8 03 00 05 24 35 04 58 05 8e 13 e7 2c 67 a7 ac b3 c4 7e 91 30 f9 b3 84 b0 f8 10 2c c6 c4 4e 50 4e 66 ab c7 69 35 22 97 5c 42 69 e6 00 0b 64 99 3e dc 8b f2 68 2c 20 fc 13 35 e7 42 a1 89 e2 b2 2d b2 bb 4b da d2 cb b9 ab 2b f3 2e 78 68 a1 7d a1 55 3f 44 ce 1e 67 50 40 10 04 79 64 c0 df 03 59 5e a0 80 20 08 f2 c8 80 02 b2 bc 40 01 41 10 e4 91 01 05 64 Data Ascii: cgL?Wr%#"t8>{{eXILYQfUgEEg{3eDD<,>6eY;j/lmm:$5X,g~0,NPNfi5"\Bid>h, 5B-K+.xh}U?DgP@ydY^ @Ad
2025-03-19 10:25:46 UTC	1369	IN	Data Raw: fc ef 0e 59 3f 21 a4 f9 b5 d0 49 62 f7 74 36 4d 78 8e da 9d c3 4f 96 36 12 cf 05 fb 8d a9 16 42 9c 83 38 7e 03 59 0e a0 80 a4 40 ec a6 3d 2b 2b cb 5b d6 b3 73 aa bb e6 f3 0c 5a 1c dc 93 91 af bd 1e 69 45 17 24 45 5e 9c 2a 76 9e 76 38 2e 92 1b 5d be a1 ca 49 67 e7 21 32 2e 8d f8 8e 57 1f f4 8d fe 76 51 51 c8 98 a8 49 34 b6 ed 9c 6a 71 36 ec 3b d6 18 6c 5d 52 40 c8 59 87 eb c0 d6 13 9e ea ca ee 9a ed 13 c1 5d 23 8d df 75 f9 da de 6c 71 ee 4f 5f f8 12 db d8 25 cf 45 f7 78 97 ef e2 47 e7 9a ba 6b 5e 9f 24 c3 a5 fe e3 db 5e 4f f8 db 26 c9 c0 58 77 a4 a7 ff e8 68 7d b1 75 e0 f5 d7 1b 6b 5e ef 5d dc 01 fd 63 97 bf 6d 43 bf fb 72 a8 c5 3a 7e cd 3e 54 d8 eb 1c bf 52 b3 a9 85 8c 6e 9f 18 15 35 52 9f bd cd e1 72 ed 08 75 d7 74 e4 8e 77 f9 da 3e 68 81 ec 37 1f ab 70 Data Ascii: Y?!Ibt6MxO6B8~Y@=++[sZiE$E^*vv8.]Ig!2.WvQQI4jq6;l]R@Y]#ulqO_%ExGk^$^O&Xwh}uk^]cmCr:~>TRn5Rrutw>h7p
2025-03-19 10:25:46 UTC	1369	IN	Data Raw: 57 6d 0c 4e ad 15 c6 ea 5d ad d9 f5 2e b8 c6 18 3d e8 70 38 1c d5 c7 b6 6d 1a 1b 39 50 db 74 c4 e1 78 43 aa 77 d4 8e d5 bb 6a 43 47 5c bb ea 1d af 8f 1c f8 4b 46 7f b9 1c 2d da f6 59 b1 f3 70 38 7a d0 b1 6d 13 de 6c c8 72 00 05 24 15 62 c9 85 36 6c 92 f4 04 fc 85 b5 15 f1 95 f0 3e b0 49 d2 cf 95 05 4c 44 49 92 04 4d 4c 92 a0 0f 24 b0 d4 b2 21 12 2b 85 98 44 55 db 8b 4b 9d 9c 2c b2 98 52 52 b0 16 a6 f2 65 89 9a 78 95 0c 30 7d fd 00 00 20 00 49 44 41 54 24 6a 24 ba 12 d6 2e 31 4b 52 58 92 d8 2a 26 f0 61 0c 48 69 4a 10 90 dc 6c db d2 e1 68 34 b1 00 1c 5e a5 64 0c e2 37 07 c2 1a b3 72 0d 5b 98 13 10 f3 25 49 54 b2 0f 86 30 4b e9 31 49 a2 14 f2 27 6a 24 69 ac f8 78 c3 a1 a3 91 aa 64 10 08 f2 e3 83 02 92 12 33 6b 17 59 f2 95 3f 96 7b 58 28 0f 59 c8 a2 cc 7e f0 Data Ascii: WmN].=p8m9PtxCwjCG\KF-Yp8zmlr$b6l>ILDIML$!+DUK,RRex0} IDAT$j$.1KRX*&aHiJlh4^d7r[%IT0K1I'j$ixd3kY?{X(Y~
2025-03-19 10:25:46 UTC	1369	IN	Data Raw: c7 00 1f 03 2d 36 61 21 08 82 20 3f 18 2b 0c 08 82 20 08 92 02 d8 89 8e 20 08 82 a4 04 7a 20 08 82 20 48 4a a0 80 20 08 82 20 29 81 4d 58 08 82 20 48 4a a0 07 82 20 08 82 a4 04 ce 03 c1 49 00 38 09 00 27 01 e0 63 80 8f 81 36 a5 79 20 6c 46 a1 32 af f0 d6 3f b8 0f 6d 80 f7 01 3e 0b 58 1f 60 9d 68 58 cc 06 d8 84 85 20 08 82 dc 47 13 96 41 f1 48 c0 29 51 ff e0 3e b4 01 de 07 f8 2c 60 7d 80 75 a2 61 29 1b a0 07 82 20 08 82 a4 04 76 a2 63 0f 2a f6 a0 62 0f 2a 3e 06 f8 18 68 53 eb 44 47 10 04 41 90 14 40 01 79 bc d1 72 1c 67 78 d4 59 3c 0f 77 97 3d 38 0b b8 8f 24 3c 80 20 16 42 0d 92 e3 38 75 68 0b 82 3c 52 c0 0f 4a 01 38 58 f1 71 b0 81 51 9a 0f e5 79 41 c7 3f ac 78 79 9d 4e 98 b7 4f 80 ef f7 18 9e a0 63 09 5c f2 3c 88 67 e1 f0 78 bd 4e c7 3a f6 6e bb 88 a5 4d Data Ascii: -6a! ?+ z HJ )MX HJ I8'c6y lF2?m>X`hX GAH)Q>,`}ua) vcb>hSDGA@yrgxY<w=8$< B8uh<RJ8XqQyA?xyNOc\<gxN:nM
2025-03-19 10:25:46 UTC	1369	IN	Data Raw: 3b 9b 64 39 f3 79 96 73 66 04 9b c9 ac 1a 4e a9 f5 93 61 e4 4b 4c 40 d8 76 0e cf 59 64 f9 0f c9 72 10 58 d9 a8 16 58 95 9d 09 06 52 0a d9 b4 8a 25 0f d2 27 b0 2c fc 36 1d c2 ce cc 94 e5 7c 8e 9d 62 c8 93 e5 bf 68 33 e5 9c e7 15 53 e7 d3 74 6d 86 bc e9 7c 31 89 ec 81 33 63 06 93 92 45 39 33 46 6d 90 45 93 79 cd 4c fa 78 38 f4 07 76 67 40 8a e2 5a 2d 18 9d d9 3c 7f 8e c1 d2 93 76 78 1e 4a 8b 87 73 92 69 87 fb 4a 30 99 57 26 ef 15 08 60 e3 7a c8 91 81 cf 00 73 2c 83 27 05 3f f8 07 63 03 f4 40 1e 37 84 f5 8a 80 b0 6d 26 20 9b be 70 13 42 4e 75 3e 0f 0a 42 2d fd 17 a0 3f f8 78 c3 46 aa 9b e9 a4 3e 57 58 ec 26 c4 79 b6 56 ca 3b f4 09 21 24 32 f8 0b 78 e0 8d 79 7d 17 a0 ef f8 78 f9 5b 54 c7 1b f9 d0 17 3e 42 88 f5 d4 e0 96 c0 21 62 55 ba ea ad e4 f2 2a 9e 37 9f Data Ascii: ;d9ysfNaKL@vYdrXXR%',6\|bh3Stm\|13cE93FmEyLx8vg@Z-<vxJsiJ0W&`zs,'?c@7m& pBNu>B-?xF>WX&yV;!$2xy}x[T>B!bU*7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49742	104.18.161.117	443	520	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:25:46 UTC	405	OUT	GET /img/favicon.ico HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:25:46 UTC	645	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 10:25:46 GMT Content-Type: image/x-icon Content-Length: 15086 Connection: close x-amz-id-2: QRs3q+dhKhAMTlvzYZ9HsOXkYLhQn66tiVr3vbhVW/V2FbAxceQ9QjMXwPqcyzjtLgD1BjyzKEE= x-amz-request-id: BSTN61CAHM9SMTMC Last-Modified: Thu, 05 Oct 2023 23:38:20 GMT ETag: "1f894f487d068a2ced95d5cd4f88598c" x-amz-server-side-encryption: AES256 Cache-Control: max-age=84600, must-revalidate x-amz-version-id: C5TuT6ObkzP1GjuEGkIHJatwDHqj5J6N CF-Cache-Status: HIT Age: 19647 Accept-Ranges: bytes Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 922c44890f0e3645-FRA alt-svc: h3=":443"; ma=86400
2025-03-19 10:25:46 UTC	724	IN	Data Raw: 00 00 01 00 03 00 30 30 00 00 01 00 20 00 a8 25 00 00 36 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 de 25 00 00 10 10 00 00 01 00 20 00 68 04 00 00 86 36 00 00 28 00 00 00 30 00 00 00 60 00 00 00 01 00 20 00 00 00 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 39 32 2b 88 39 32 2b f3 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 Data Ascii: 00 %6 % h6(0` $92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+9
2025-03-19 10:25:46 UTC	1369	IN	Data Raw: 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 Data Ascii: +92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+9
2025-03-19 10:25:46 UTC	1369	IN	Data Raw: ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 Data Ascii: 92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92
2025-03-19 10:25:46 UTC	1369	IN	Data Raw: f8 f8 f8 ff f8 f8 f8 ff f8 f8 f8 ff f7 f7 f7 ff 8e 8a 86 ff 37 30 29 ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 38 30 29 ff 50 49 43 ff e0 e0 df ff f8 f9 f9 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f9 f9 f9 ff f9 f9 f9 ff e2 e1 e0 ff 9a 96 93 ff 4b 44 3e ff 44 3d 36 ff c9 c7 c5 ff f9 fa fa ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f9 f9 f9 ff d6 d5 d4 ff 4f 49 42 ff 38 31 29 ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b Data Ascii: 70)92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+80)PICKD>D=6OIB81)92+92+92+92+92+92+92+92+92+
2025-03-19 10:25:46 UTC	1369	IN	Data Raw: f9 f9 ff de dd dc ff 56 50 4a ff 37 30 29 ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 38 31 2a ff 4b 45 3f ff c0 be bc ff d3 d2 d1 ff d2 d1 d0 ff d2 d1 d0 ff d1 cf ce ff d9 d8 d6 ff f5 f4 f4 ff f8 f8 f8 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f8 f8 f8 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f8 f8 f8 ff 9c 99 96 ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff Data Ascii: VPJ70)92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+81*KE?92+92+92+92+92+92+92+92+92+92+92+92+92+
2025-03-19 10:25:46 UTC	1369	IN	Data Raw: 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 3c 36 2f ff 53 4d 47 ff 57 51 4b ff 56 50 4b ff 56 50 4b ff 56 50 4b ff 57 51 4b ff 50 4a 44 ff 3b 34 2d ff 38 31 2a ff 41 3a 33 ff 56 50 4a ff 56 51 4b ff 56 50 4b ff 57 51 4b ff 54 4e 48 ff 3f 38 31 ff 39 32 2a ff 3a 33 2d ff 50 4a 44 ff 57 51 4b ff 56 50 4b ff 56 50 4b ff 56 50 4b ff 56 50 4b ff 57 51 4b ff 4f 49 43 ff 3a 33 2c ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 Data Ascii: +92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+<6/SMGWQKVPKVPKVPKWQKPJD;4-81A:3VPJVQKVPKWQKTNH?8192:3-PJDWQKVPKVPKVPKVPKWQKOIC:3,92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+9
2025-03-19 10:25:46 UTC	1369	IN	Data Raw: ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 Data Ascii: 92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92
2025-03-19 10:25:46 UTC	1369	IN	Data Raw: 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b f3 39 32 2b 89 39 32 2b f4 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b Data Ascii: 92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+
2025-03-19 10:25:46 UTC	1369	IN	Data Raw: 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff Data Ascii: 2+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+
2025-03-19 10:25:46 UTC	1369	IN	Data Raw: 2b ff 39 32 2b ff 3c 35 2e ff 54 4e 48 ff 76 72 6d ff b2 b0 ad ff eb ea ea ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f8 f8 f8 ff f3 f3 f3 ff f6 f6 f6 ff f7 f7 f7 ff f7 f7 f7 ff f8 f8 f8 ff ef ef ef ff 72 6d 68 ff 36 2f 28 ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 3f 39 32 ff 68 63 5d ff 6e 69 64 ff 74 6f 6b ff b1 ae ab ff f5 f5 f5 ff f7 f8 f8 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f8 f8 f8 ff f7 f7 f7 ff f7 f7 f7 ff fa fa fa ff c0 be bc ff 41 3b 34 ff 38 31 2a ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 Data Ascii: +92+<5.TNHvrmrmh6/(92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+?92hc]nidtokA;481*92+92+92+92+92+92+92+92+92+92+92+92+9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49740	52.222.232.144	443	520	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:25:46 UTC	433	OUT	GET /img/webflow-badge-icon-d2.89e12c322e.svg HTTP/1.1 Host: d3e54v103j8qbb.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:25:46 UTC	578	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 421 Connection: close Last-Modified: Thu, 21 Sep 2023 16:04:04 GMT X-Amz-Server-Side-Encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 19 Mar 2025 00:28:20 GMT Cache-Control: max-age=84600, must-revalidate Etag: "89e12c322e66c81213861fc9acb8b003" Via: 1.1 5519a8cb450b567e8b7111ae986a9b4c.cloudfront.net (CloudFront) Age: 35847 Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: anouqukasn9DHl2y4n0mHHdjA93Btnc6LXvP4Ohc3Aqo9eYBluflyg==
2025-03-19 10:25:46 UTC	421	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 32 36 22 20 68 65 69 67 68 74 3d 22 31 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 36 20 31 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 32 35 2e 36 35 20 30 4c 31 37 2e 34 36 35 34 20 31 36 48 39 2e 37 37 37 37 38 4c 31 33 2e 32 30 33 20 39 2e 33 36 38 39 32 48 31 33 2e 30 34 39 33 43 31 30 2e 32 32 33 35 20 31 33 2e 30 33 37 32 20 36 2e 30 30 37 33 38 20 31 35 2e 34 35 32 20 30 20 31 36 56 39 2e 34 36 30 36 38 43 30 20 39 2e 34 36 30 36 38 20 33 2e 38 34 33 Data Ascii: <svg width="26" height="16" viewBox="0 0 26 16" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M25.65 0L17.4654 16H9.77778L13.203 9.36892H13.0493C10.2235 13.0372 6.00738 15.452 0 16V9.46068C0 9.46068 3.843

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49741	52.222.232.144	443	520	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:25:46 UTC	433	OUT	GET /img/webflow-badge-text-d2.c82cec3b78.svg HTTP/1.1 Host: d3e54v103j8qbb.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:25:46 UTC	579	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 9912 Connection: close Last-Modified: Thu, 21 Sep 2023 16:04:31 GMT X-Amz-Server-Side-Encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 19 Mar 2025 05:10:32 GMT Cache-Control: max-age=84600, must-revalidate Etag: "c82cec3b78a2b2d267bbfe3c7e838068" Via: 1.1 88f858f045c3909fad9cebbada511aee.cloudfront.net (CloudFront) Age: 18915 Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: w6Om0Q5CZ_SjVj1q5CsXiSipJwTLPfSs3HZGqxULqVcRf4grECg3pg==
2025-03-19 10:25:46 UTC	9912	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 31 38 22 20 68 65 69 67 68 74 3d 22 31 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 31 38 20 31 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 30 2e 35 32 35 30 32 34 20 30 2e 38 39 36 34 38 34 48 33 2e 30 35 34 33 32 4c 36 2e 30 30 37 37 36 20 38 2e 32 36 36 32 32 4c 38 2e 38 39 39 30 35 20 30 2e 38 39 36 34 38 34 48 31 31 2e 33 35 33 31 56 31 31 48 39 2e 34 37 33 32 37 56 33 2e 37 39 39 34 39 4c 36 2e 36 36 33 37 20 31 31 48 35 2e 31 38 37 31 33 4c 32 2e 33 38 34 34 20 33 2e 39 32 30 37 37 56 31 31 48 30 2e 35 32 35 30 32 34 56 30 2e 38 39 36 34 38 34 5a 22 20 66 69 6c 6c 3d Data Ascii: <svg width="118" height="12" viewBox="0 0 118 12" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M0.525024 0.896484H3.05432L6.00776 8.26622L8.89905 0.896484H11.3531V11H9.47327V3.79949L6.6637 11H5.18713L2.3844 3.92077V11H0.525024V0.896484Z" fill=

Statistics

CPU Usage

• chrome.exe
• chrome.exe
• chrome.exe
• chrome.exe

Click to jump to process

Memory Usage

• chrome.exe
• chrome.exe
• chrome.exe
• chrome.exe

Click to jump to process

Click to jump to process

Target ID:	3
Start time:	06:25:33
Start date:	19/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff652ae0000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	6
Start time:	06:25:39
Start date:	19/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2248,i,9931422667892187248,13732509038317616662,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2268 /prefetch:3
Imagebase:	0x7ff652ae0000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	7
Start time:	06:25:41
Start date:	19/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2248,i,9931422667892187248,13732509038317616662,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=3508 /prefetch:8
Imagebase:	0x7ff652ae0000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	8
Start time:	06:25:44
Start date:	19/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://en--sso---coinbasepro---authh---cdn.webflow.io/"
Imagebase:	0x7ff652ae0000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://en--sso---coinbasepro---authh---cdn.webflow.io/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 93

Chrome Cache Entry: 94

Chrome Cache Entry: 95

Chrome Cache Entry: 96

Chrome Cache Entry: 97

Chrome Cache Entry: 98

Chrome Cache Entry: 99

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 7008, Parent PID: 5484

Windows Analysis Report
https://en--sso---coinbasepro---authh---cdn.webflow.io/