Edit tour

Windows Analysis Report
http://www.mywelcomepackreward.be/

Overview

General Information

Sample URL:	http://www.mywelcomepackreward.be/
Analysis ID:	1520167
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

HTML page contains hidden javascript code

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3720 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5312 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=1980,i,7807176154066329382,13733837652376969656,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5936 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.mywelcomepackreward.be/" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://www.mywelcomepackreward.be/

Avira URL Cloud: detection malicious, Label: phishing

Antivirus detection for URL or domain

Source: https://www.mywelcomepackreward.be/	Avira URL Cloud: Label: phishing
Source: https://mywelcomepackreward.be/	Avira URL Cloud: Label: phishing

Source: https://reward.bnpparibasfortis.be/en/

HTTP Parser: Base64 decoded: <svg xmlns="http://www.w3.org/2000/svg" width="264" height="176" viewBox="0 0 264 176"> <g fill="none" fill-rule="evenodd"> <g> <g> <g> <g> <path fill="#DEE8F1" d="M179.23...

Source: https://reward.bnpparibasfortis.be/en/	HTTP Parser: No favicon
Source: https://reward.bnpparibasfortis.be/en/	HTTP Parser: No favicon
Source: https://reward.bnpparibasfortis.be/en/	HTTP Parser: No favicon
Source: https://reward.bnpparibasfortis.be/nl/	HTTP Parser: No favicon
Source: https://reward.bnpparibasfortis.be/nl/	HTTP Parser: No favicon
Source: https://reward.bnpparibasfortis.be/fr/	HTTP Parser: No favicon
Source: https://reward.bnpparibasfortis.be/fr/	HTTP Parser: No favicon
Source: https://reward.bnpparibasfortis.be/nl/faq/	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.7:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.7:49714 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 13.95.65.251
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.mywelcomepackreward.beConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: mywelcomepackreward.beConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: reward.bnpparibasfortis.beConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en/ HTTP/1.1Host: reward.bnpparibasfortis.beConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=t52pb1i7e8qg4530a9bsrst2m2
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /css/main.css?v=3accddf64b1dd03abeb9b0b3e5a7ba44 HTTP/1.1Host: reward.bnpparibasfortis.beConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://reward.bnpparibasfortis.be/en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=eagqj4746f62pt7vm5ebioip55; language=en
Source: global traffic	HTTP traffic detected: GET /js/vendor/modernizr-2.8.3.min.js HTTP/1.1Host: reward.bnpparibasfortis.beConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://reward.bnpparibasfortis.be/en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=eagqj4746f62pt7vm5ebioip55; language=en
Source: global traffic	HTTP traffic detected: GET /images/logo.png HTTP/1.1Host: reward.bnpparibasfortis.beConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://reward.bnpparibasfortis.be/en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=eagqj4746f62pt7vm5ebioip55; language=en
Source: global traffic	HTTP traffic detected: GET /images/cadeau.png HTTP/1.1Host: reward.bnpparibasfortis.beConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://reward.bnpparibasfortis.be/en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=eagqj4746f62pt7vm5ebioip55; language=en
Source: global traffic	HTTP traffic detected: GET /jquery-1.12.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://reward.bnpparibasfortis.be/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/vendor/modernizr-2.8.3.min.js HTTP/1.1Host: reward.bnpparibasfortis.beConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=eagqj4746f62pt7vm5ebioip55; language=en
Source: global traffic	HTTP traffic detected: GET /css/square/green.css HTTP/1.1Host: reward.bnpparibasfortis.beConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://reward.bnpparibasfortis.be/css/main.css?v=3accddf64b1dd03abeb9b0b3e5a7ba44Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=eagqj4746f62pt7vm5ebioip55; language=en
Source: global traffic	HTTP traffic detected: GET /images/logo.png HTTP/1.1Host: reward.bnpparibasfortis.beConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=eagqj4746f62pt7vm5ebioip55; language=en
Source: global traffic	HTTP traffic detected: GET /images/cadeau.png HTTP/1.1Host: reward.bnpparibasfortis.beConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=eagqj4746f62pt7vm5ebioip55; language=en
Source: global traffic	HTTP traffic detected: GET /js/plugins.min.js?v=3accddf64b1dd03abeb9b0b3e5a7ba44 HTTP/1.1Host: reward.bnpparibasfortis.beConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://reward.bnpparibasfortis.be/en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=eagqj4746f62pt7vm5ebioip55; language=en
Source: global traffic	HTTP traffic detected: GET /jquery-1.12.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/main.min.js?v=3accddf64b1dd03abeb9b0b3e5a7ba44 HTTP/1.1Host: reward.bnpparibasfortis.beConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://reward.bnpparibasfortis.be/en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=eagqj4746f62pt7vm5ebioip55; language=en
Source: global traffic	HTTP traffic detected: GET /js/plugins.min.js?v=3accddf64b1dd03abeb9b0b3e5a7ba44 HTTP/1.1Host: reward.bnpparibasfortis.beConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=eagqj4746f62pt7vm5ebioip55; language=en
Source: global traffic	HTTP traffic detected: GET /resources/one-portal/wcm/js/vendors/pagebus.js HTTP/1.1Host: www.bnpparibasfortis.beConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://reward.bnpparibasfortis.be/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resources/cookie-consent/cookie.js HTTP/1.1Host: www.bnpparibasfortis.beConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://reward.bnpparibasfortis.be/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/main.min.js?v=3accddf64b1dd03abeb9b0b3e5a7ba44 HTTP/1.1Host: reward.bnpparibasfortis.beConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=eagqj4746f62pt7vm5ebioip55; language=en
Source: global traffic	HTTP traffic detected: GET /resources/one-portal/wcm/js/vendors/pagebus.js HTTP/1.1Host: www.bnpparibasfortis.beConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: distributorid=52FB001; per_ebew_web=!EETAZJ+EVWvtcTvJQBLV4NPltLg7SCws45pKAOUVfrXnqbkqrBxLBRxZhwA/gDugD1SrnZs6q2eaqmI=; TS018554d6=0171aa623060eed254b8d0690ddddb717091dd823ba2ea79654b2de1acfb5919c9eb306890ba40983f77a4ced3e37de1670e2c942f; TS1f0cd59e027=08c24362caab200005794eb46630dcbf494396303a966cdd78eb390a4ed6c157372c015af87b0e7a08e229ec041130001893c5c069d9100dd1bafc8623207845404ce7d700d546f933783141f0ef14be97079465db9e3bc27011633bf798bdee
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: reward.bnpparibasfortis.beConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://reward.bnpparibasfortis.be/en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=eagqj4746f62pt7vm5ebioip55; language=en
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: reward.bnpparibasfortis.beConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=eagqj4746f62pt7vm5ebioip55; language=en
Source: global traffic	HTTP traffic detected: GET /resources/cookie-consent/cookie.js HTTP/1.1Host: www.bnpparibasfortis.beConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: distributorid=52FB001; per_ebew_web=!EETAZJ+EVWvtcTvJQBLV4NPltLg7SCws45pKAOUVfrXnqbkqrBxLBRxZhwA/gDugD1SrnZs6q2eaqmI=; TS018554d6=0171aa623060eed254b8d0690ddddb717091dd823ba2ea79654b2de1acfb5919c9eb306890ba40983f77a4ced3e37de1670e2c942f; TS1f0cd59e027=08c24362caab200005794eb46630dcbf494396303a966cdd78eb390a4ed6c157372c015af87b0e7a08e229ec041130001893c5c069d9100dd1bafc8623207845404ce7d700d546f933783141f0ef14be97079465db9e3bc27011633bf798bdee
Source: global traffic	HTTP traffic detected: GET /nl/ HTTP/1.1Host: reward.bnpparibasfortis.beConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=eagqj4746f62pt7vm5ebioip55; language=en
Source: global traffic	HTTP traffic detected: GET /fr/ HTTP/1.1Host: reward.bnpparibasfortis.beConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=06fi3fkegau0nvc23gvlied0r4; language=nl
Source: global traffic	HTTP traffic detected: GET /en/faq/ HTTP/1.1Host: reward.bnpparibasfortis.beConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=1qbna6up7g0jrku671k7h1gs45; language=fr
Source: global traffic	HTTP traffic detected: GET /en/log-off/ HTTP/1.1Host: reward.bnpparibasfortis.beConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=oi10k8fp8l980h8tgsmv5k4pr1; language=en
Source: global traffic	HTTP traffic detected: GET /en/ HTTP/1.1Host: reward.bnpparibasfortis.beConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: language=en; PHPSESSID=o7lp5kr5n32dltb6lut6j3mqk6
Source: global traffic	HTTP traffic detected: GET /en/ HTTP/1.1Host: reward.bnpparibasfortis.beConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: language=en; PHPSESSID=3anr0ifglfs3kdsmfl71p4g390
Source: global traffic	HTTP traffic detected: GET /nl/faq/ HTTP/1.1Host: reward.bnpparibasfortis.beConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: language=en; PHPSESSID=3qtks0f939fk8n10oobvn7mqu6
Source: global traffic	HTTP traffic detected: GET /nl/log-off/ HTTP/1.1Host: reward.bnpparibasfortis.beConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=0gqogan005p6ps7jcpvj776bs4; language=nl
Source: global traffic	HTTP traffic detected: GET /nl/ HTTP/1.1Host: reward.bnpparibasfortis.beConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: language=nl; PHPSESSID=4j2ksk0kjes72nl72k8i36o6q2
Source: global traffic	HTTP traffic detected: GET /fr/faq/ HTTP/1.1Host: reward.bnpparibasfortis.beConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: language=nl; PHPSESSID=6thivvfp3dn7hfp7uijia4l1n0
Source: global traffic	HTTP traffic detected: GET /fr/log-off/ HTTP/1.1Host: reward.bnpparibasfortis.beConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=eaf090cevpqr4rbim4i5dr4795; language=fr
Source: global traffic	HTTP traffic detected: GET /fr/ HTTP/1.1Host: reward.bnpparibasfortis.beConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: language=fr; PHPSESSID=2nqpdmgpkeu3o31v11u7skccj2
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.mywelcomepackreward.beConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.mywelcomepackreward.be
Source: global traffic	DNS traffic detected: DNS query: mywelcomepackreward.be
Source: global traffic	DNS traffic detected: DNS query: reward.bnpparibasfortis.be
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: www.bnpparibasfortis.be

Source: chromecache_70.4.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_70.4.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_73.4.dr, chromecache_86.4.dr	String found in binary or memory: http://modernizr.com/download/#-fontface-backgroundsize-borderimage-borderradius-boxshadow-flexbox-h
Source: chromecache_74.4.dr, chromecache_75.4.dr	String found in binary or memory: http://openajax.org
Source: chromecache_74.4.dr, chromecache_75.4.dr	String found in binary or memory: http://openajax.org/hub
Source: chromecache_74.4.dr, chromecache_75.4.dr	String found in binary or memory: http://tibco.com/PageBus
Source: chromecache_74.4.dr, chromecache_75.4.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_74.4.dr, chromecache_75.4.dr	String found in binary or memory: http://www.openajax.org/member/wiki/OpenAjax_Hub_Specification
Source: chromecache_85.4.dr	String found in binary or memory: https://easybanking.p1.qafintro.be/
Source: chromecache_88.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2)
Source: chromecache_88.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS2mu1aB.woff2)
Source: chromecache_88.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2)
Source: chromecache_88.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2)
Source: chromecache_88.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2)
Source: chromecache_88.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2)
Source: chromecache_88.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2)
Source: chromecache_88.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSymu1aB.woff2)
Source: chromecache_88.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2)
Source: chromecache_88.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTVOmu1aB.woff2)
Source: chromecache_85.4.dr	String found in binary or memory: https://p1.easybanking.qabnpparibasfortis.be/
Source: chromecache_85.4.dr	String found in binary or memory: https://players.brightcove.net/1890328962001/default_default/index.html?videoId=
Source: chromecache_83.4.dr, chromecache_85.4.dr	String found in binary or memory: https://players.brightcove.net/6012566768001/YypspJ4Yl_default/index.html?videoId=
Source: chromecache_85.4.dr	String found in binary or memory: https://www.bnpparibasfortis.be/
Source: chromecache_85.4.dr	String found in binary or memory: https://www.bnpparibasfortis.com/footer-pages/cookie-policy
Source: chromecache_85.4.dr	String found in binary or memory: https://www.bnpparibasfortis.com/fr/footer-pages/politique-en-matiere-de-cookies
Source: chromecache_85.4.dr	String found in binary or memory: https://www.bnpparibasfortis.com/nl/footer-pages/cookiebeleid
Source: chromecache_85.4.dr	String found in binary or memory: https://www.fintro.be/
Source: chromecache_85.4.dr	String found in binary or memory: https://www.hellobank.be/fr/pages-legales/cookies
Source: chromecache_85.4.dr	String found in binary or memory: https://www.hellobank.be/legal-notice/cookies
Source: chromecache_85.4.dr	String found in binary or memory: https://www.hellobank.be/nl/wettelijke-info/cookies
Source: chromecache_85.4.dr	String found in binary or memory: https://www.qabnpparibasfortis.com/footer-pages/cookie-policy
Source: chromecache_85.4.dr	String found in binary or memory: https://www.qabnpparibasfortis.com/fr/footer-pages/politique-en-matiere-de-cookies
Source: chromecache_85.4.dr	String found in binary or memory: https://www.qabnpparibasfortis.com/nl/footer-pages/cookiebeleid
Source: chromecache_85.4.dr	String found in binary or memory: https://www.qahellobank.be/fr/pages-legales/cookies
Source: chromecache_85.4.dr	String found in binary or memory: https://www.qahellobank.be/legal-notice/cookies
Source: chromecache_85.4.dr	String found in binary or memory: https://www.qahellobank.be/nl/wettelijke-info/cookies

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.7:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.7:49714 version: TLS 1.2

Source: classification engine

Classification label: mal56.win@26/37@20/7

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=1980,i,7807176154066329382,13733837652376969656,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.mywelcomepackreward.be/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=1980,i,7807176154066329382,13733837652376969656,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Ok
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Ok
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Installieren

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
http://www.mywelcomepackreward.be/	100%	Avira URL Cloud	phishing

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
http://fontawesome.io	0%	URL Reputation	safe
http://fontawesome.io/license	0%	URL Reputation	safe
https://www.mywelcomepackreward.be/	100%	Avira URL Cloud	phishing
https://www.qabnpparibasfortis.com/nl/footer-pages/cookiebeleid	0%	Avira URL Cloud	safe
http://tibco.com/PageBus	0%	Avira URL Cloud	safe
https://www.bnpparibasfortis.be/resources/one-portal/wcm/js/vendors/pagebus.js	0%	Avira URL Cloud	safe
https://reward.bnpparibasfortis.be/fr/log-off/	0%	Avira URL Cloud	safe
https://www.qahellobank.be/nl/wettelijke-info/cookies	0%	Avira URL Cloud	safe
https://www.qabnpparibasfortis.com/fr/footer-pages/politique-en-matiere-de-cookies	0%	Avira URL Cloud	safe
https://www.bnpparibasfortis.com/nl/footer-pages/cookiebeleid	0%	Avira URL Cloud	safe
http://www.openajax.org/member/wiki/OpenAjax_Hub_Specification	0%	Avira URL Cloud	safe
https://www.fintro.be/	0%	Avira URL Cloud	safe
https://players.brightcove.net/6012566768001/YypspJ4Yl_default/index.html?videoId=	0%	Avira URL Cloud	safe
http://openajax.org	0%	Avira URL Cloud	safe
https://reward.bnpparibasfortis.be/	0%	Avira URL Cloud	safe
https://reward.bnpparibasfortis.be/nl/log-off/	0%	Avira URL Cloud	safe
https://p1.easybanking.qabnpparibasfortis.be/	0%	Avira URL Cloud	safe
http://modernizr.com/download/#-fontface-backgroundsize-borderimage-borderradius-boxshadow-flexbox-h	0%	Avira URL Cloud	safe
https://easybanking.p1.qafintro.be/	0%	Avira URL Cloud	safe
http://openajax.org/hub	0%	Avira URL Cloud	safe
https://reward.bnpparibasfortis.be/favicon.ico	0%	Avira URL Cloud	safe
https://www.bnpparibasfortis.be/	0%	Avira URL Cloud	safe
https://reward.bnpparibasfortis.be/en/log-off/	0%	Avira URL Cloud	safe
https://mywelcomepackreward.be/	100%	Avira URL Cloud	phishing
https://reward.bnpparibasfortis.be/images/cadeau.png	0%	Avira URL Cloud	safe
https://reward.bnpparibasfortis.be/js/plugins.min.js?v=3accddf64b1dd03abeb9b0b3e5a7ba44	0%	Avira URL Cloud	safe
https://reward.bnpparibasfortis.be/js/vendor/modernizr-2.8.3.min.js	0%	Avira URL Cloud	safe
http://www.apache.org/licenses/LICENSE-2.0	0%	Avira URL Cloud	safe
https://www.qahellobank.be/fr/pages-legales/cookies	0%	Avira URL Cloud	safe
https://www.hellobank.be/fr/pages-legales/cookies	0%	Avira URL Cloud	safe
https://www.qabnpparibasfortis.com/footer-pages/cookie-policy	0%	Avira URL Cloud	safe
https://www.qahellobank.be/legal-notice/cookies	0%	Avira URL Cloud	safe
https://www.hellobank.be/nl/wettelijke-info/cookies	0%	Avira URL Cloud	safe
https://reward.bnpparibasfortis.be/images/logo.png	0%	Avira URL Cloud	safe
https://reward.bnpparibasfortis.be/css/square/green.css	0%	Avira URL Cloud	safe
https://reward.bnpparibasfortis.be/js/main.min.js?v=3accddf64b1dd03abeb9b0b3e5a7ba44	0%	Avira URL Cloud	safe
https://www.hellobank.be/legal-notice/cookies	0%	Avira URL Cloud	safe
https://players.brightcove.net/1890328962001/default_default/index.html?videoId=	0%	Avira URL Cloud	safe
https://reward.bnpparibasfortis.be/css/main.css?v=3accddf64b1dd03abeb9b0b3e5a7ba44	0%	Avira URL Cloud	safe
https://www.bnpparibasfortis.com/fr/footer-pages/politique-en-matiere-de-cookies	0%	Avira URL Cloud	safe
https://code.jquery.com/jquery-1.12.0.min.js	0%	Avira URL Cloud	safe
https://www.bnpparibasfortis.com/footer-pages/cookie-policy	0%	Avira URL Cloud	safe
https://www.bnpparibasfortis.be/resources/cookie-consent/cookie.js	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
www.mywelcomepackreward.be	5.134.4.156	true	false	unknown
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
code.jquery.com	151.101.66.137	true	false	unknown
www.bnpparibasfortis.be	193.58.4.82	true	false	unknown
reward.bnpparibasfortis.be	83.217.75.108	true	false	unknown
www.google.com	172.217.18.4	true	false	unknown
mywelcomepackreward.be	5.134.4.156	true	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.mywelcomepackreward.be/	false	Avira URL Cloud: phishing	unknown
https://reward.bnpparibasfortis.be/fr/log-off/	false	Avira URL Cloud: safe	unknown
https://reward.bnpparibasfortis.be/nl/faq/	false		unknown
https://www.bnpparibasfortis.be/resources/one-portal/wcm/js/vendors/pagebus.js	false	Avira URL Cloud: safe	unknown
https://reward.bnpparibasfortis.be/	false	Avira URL Cloud: safe	unknown
https://reward.bnpparibasfortis.be/favicon.ico	false	Avira URL Cloud: safe	unknown
https://reward.bnpparibasfortis.be/nl/log-off/	false	Avira URL Cloud: safe	unknown
https://reward.bnpparibasfortis.be/en/	false		unknown
https://reward.bnpparibasfortis.be/en/log-off/	false	Avira URL Cloud: safe	unknown
https://mywelcomepackreward.be/	false	Avira URL Cloud: phishing	unknown
https://reward.bnpparibasfortis.be/images/cadeau.png	false	Avira URL Cloud: safe	unknown
https://reward.bnpparibasfortis.be/js/plugins.min.js?v=3accddf64b1dd03abeb9b0b3e5a7ba44	false	Avira URL Cloud: safe	unknown
https://reward.bnpparibasfortis.be/js/vendor/modernizr-2.8.3.min.js	false	Avira URL Cloud: safe	unknown
https://reward.bnpparibasfortis.be/nl/	false		unknown
http://www.mywelcomepackreward.be/	true		unknown
https://reward.bnpparibasfortis.be/images/logo.png	false	Avira URL Cloud: safe	unknown
https://reward.bnpparibasfortis.be/css/square/green.css	false	Avira URL Cloud: safe	unknown
https://reward.bnpparibasfortis.be/js/main.min.js?v=3accddf64b1dd03abeb9b0b3e5a7ba44	false	Avira URL Cloud: safe	unknown
https://reward.bnpparibasfortis.be/fr/	false		unknown
https://reward.bnpparibasfortis.be/fr/faq/	false		unknown
https://reward.bnpparibasfortis.be/css/main.css?v=3accddf64b1dd03abeb9b0b3e5a7ba44	false	Avira URL Cloud: safe	unknown
https://code.jquery.com/jquery-1.12.0.min.js	false	Avira URL Cloud: safe	unknown
https://reward.bnpparibasfortis.be/en/faq/	false		unknown
https://www.bnpparibasfortis.be/resources/cookie-consent/cookie.js	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://tibco.com/PageBus	chromecache_74.4.dr, chromecache_75.4.dr	false	Avira URL Cloud: safe	unknown
https://www.qahellobank.be/nl/wettelijke-info/cookies	chromecache_85.4.dr	false	Avira URL Cloud: safe	unknown
http://fontawesome.io	chromecache_70.4.dr	false	URL Reputation: safe	unknown
https://www.fintro.be/	chromecache_85.4.dr	false	Avira URL Cloud: safe	unknown
https://www.qabnpparibasfortis.com/nl/footer-pages/cookiebeleid	chromecache_85.4.dr	false	Avira URL Cloud: safe	unknown
http://www.openajax.org/member/wiki/OpenAjax_Hub_Specification	chromecache_74.4.dr, chromecache_75.4.dr	false	Avira URL Cloud: safe	unknown
https://www.bnpparibasfortis.com/nl/footer-pages/cookiebeleid	chromecache_85.4.dr	false	Avira URL Cloud: safe	unknown
https://www.qabnpparibasfortis.com/fr/footer-pages/politique-en-matiere-de-cookies	chromecache_85.4.dr	false	Avira URL Cloud: safe	unknown
https://players.brightcove.net/6012566768001/YypspJ4Yl_default/index.html?videoId=	chromecache_83.4.dr, chromecache_85.4.dr	false	Avira URL Cloud: safe	unknown
http://openajax.org	chromecache_74.4.dr, chromecache_75.4.dr	false	Avira URL Cloud: safe	unknown
https://p1.easybanking.qabnpparibasfortis.be/	chromecache_85.4.dr	false	Avira URL Cloud: safe	unknown
http://modernizr.com/download/#-fontface-backgroundsize-borderimage-borderradius-boxshadow-flexbox-h	chromecache_73.4.dr, chromecache_86.4.dr	false	Avira URL Cloud: safe	unknown
http://openajax.org/hub	chromecache_74.4.dr, chromecache_75.4.dr	false	Avira URL Cloud: safe	unknown
https://easybanking.p1.qafintro.be/	chromecache_85.4.dr	false	Avira URL Cloud: safe	unknown
https://www.bnpparibasfortis.be/	chromecache_85.4.dr	false	Avira URL Cloud: safe	unknown
http://www.apache.org/licenses/LICENSE-2.0	chromecache_74.4.dr, chromecache_75.4.dr	false	Avira URL Cloud: safe	unknown
https://www.qahellobank.be/fr/pages-legales/cookies	chromecache_85.4.dr	false	Avira URL Cloud: safe	unknown
https://www.hellobank.be/fr/pages-legales/cookies	chromecache_85.4.dr	false	Avira URL Cloud: safe	unknown
https://www.qabnpparibasfortis.com/footer-pages/cookie-policy	chromecache_85.4.dr	false	Avira URL Cloud: safe	unknown
https://www.qahellobank.be/legal-notice/cookies	chromecache_85.4.dr	false	Avira URL Cloud: safe	unknown
http://fontawesome.io/license	chromecache_70.4.dr	false	URL Reputation: safe	unknown
https://www.hellobank.be/nl/wettelijke-info/cookies	chromecache_85.4.dr	false	Avira URL Cloud: safe	unknown
https://players.brightcove.net/1890328962001/default_default/index.html?videoId=	chromecache_85.4.dr	false	Avira URL Cloud: safe	unknown
https://www.hellobank.be/legal-notice/cookies	chromecache_85.4.dr	false	Avira URL Cloud: safe	unknown
https://www.bnpparibasfortis.com/footer-pages/cookie-policy	chromecache_85.4.dr	false	Avira URL Cloud: safe	unknown
https://www.bnpparibasfortis.com/fr/footer-pages/politique-en-matiere-de-cookies	chromecache_85.4.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
83.217.75.108	reward.bnpparibasfortis.be	Belgium	34762	COMBELL-ASBE	false
172.217.18.4	www.google.com	United States	15169	GOOGLEUS	false
193.58.4.82	www.bnpparibasfortis.be	Belgium	25215	BNP-PARIBASFranceFR	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
5.134.4.156	www.mywelcomepackreward.be	Belgium	34762	COMBELL-ASBE	false
151.101.66.137	code.jquery.com	United States	54113	FASTLYUS	false

Private

IP
192.168.2.7

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1520167
Start date and time:	2024-09-27 05:59:39 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 45s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://www.mywelcomepackreward.be/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.win@26/37@20/7
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://reward.bnpparibasfortis.be/nl/ Browse: https://reward.bnpparibasfortis.be/fr/ Browse: https://reward.bnpparibasfortis.be/en/faq/ Browse: https://reward.bnpparibasfortis.be/en/log-off/ Browse: https://reward.bnpparibasfortis.be/en/ Browse: https://reward.bnpparibasfortis.be/nl/faq/ Browse: https://reward.bnpparibasfortis.be/nl/log-off/ Browse: https://reward.bnpparibasfortis.be/fr/faq/ Browse: https://reward.bnpparibasfortis.be/fr/log-off/

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.67, 142.250.186.78, 64.233.184.84, 34.104.35.123, 20.114.59.183, 142.250.186.74, 199.232.210.172, 172.217.16.195, 20.3.187.198, 13.85.23.206, 142.250.186.106, 142.250.74.202, 172.217.16.202, 172.217.23.106, 142.250.185.106, 142.250.184.234, 142.250.185.138, 172.217.18.106, 142.250.185.202, 216.58.212.138, 142.250.185.170, 142.250.185.74, 172.217.18.10, 142.250.185.234, 142.250.186.138, 216.58.206.67, 172.217.16.138, 93.184.221.240, 142.250.186.46
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, time.windows.com, wu.azureedge.net, clients2.google.com, glb.cws.prod.dcat.dsp.trafficmanager.net, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, sls.update.microsoft.com, update.googleapis.com, hlb.apr-52dd2-0.edgecastdns.net, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, clients1.google.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ctldl.windowsupdate.com.delivery.microsoft.com, fonts.gstatic.com, wu.ec.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://www.mywelcomepackreward.be/

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Input	Output
URL: https://reward.bnpparibasfortis.be/en/ Model: jbxai	{ "brand":["BNP Paribas Fortis"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Accept all cookies", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://reward.bnpparibasfortis.be/en/ Model: jbxai	{ "brand":["BNP Paribas Fortis"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Strictly necessary cookies only", "text_input_field_labels":["Choose cookies yourself", "Accept all cookies"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://reward.bnpparibasfortis.be/nl/ Model: jbxai	{ "brand":["BNP Paribas Fortis"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Alle cookies aanvaarden", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://reward.bnpparibasfortis.be/nl/ Model: jbxai	{ "brand":["BNP Paribas Fortis"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://reward.bnpparibasfortis.be/fr/ Model: jbxai	{ "brand":["BNP Paribas Fortis"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Choisir soi-mme les cookies", "text_input_field_labels":["Choisir soi-mme les cookies", "Les cookies strictement ncessaires"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://reward.bnpparibasfortis.be/fr/ Model: jbxai	{ "brand":["BNP Paribas Fortis"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Choisir soi-mme les cookies", "text_input_field_labels":["sonnel", "mon cadet"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://reward.bnpparibasfortis.be/nl/faq/ Model: jbxai	{ "brand":["BNP Paribas Fortis"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://reward.bnpparibasfortis.be/en/faq/ Model: jbxai	{ "brand":["BNP Paribas Fortis"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Accept all cookies", "text_input_field_labels":["Contact customer", "How can I contact the customer service", "Who is responding to my questions", "Which questions can I ask", "General question", "Why do I receive a gift from BNP Paribas Fortis", "Can I trust this, a gift from BNP Paribas Fortis?"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://reward.bnpparibasfortis.be/nl/faq/ Model: jbxai	{ "brand":["BNP Paribas Fortis"], "contains_trigger_text":true, "trigger_text":"cookies? Hoe meer u weet, des te persoonlijker uw ervaring", "prominent_button_name":"Strikt noodzakelijke cookies", "text_input_field_labels":["Klantendienst"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://reward.bnpparibasfortis.be/en/faq/ Model: jbxai	{ "brand":["BNP Paribas Fortis"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Accept all cookies", "text_input_field_labels":["Contact customer", "How can I contact the customer service", "Who is responding to my questions", "Which questions can I ask", "General question", "Why do I receive a gift from BNP Paribas Fortis", "Can I trust this, a gift from BNP Paribas Fortis?"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://reward.bnpparibasfortis.be/fr/faq/ Model: jbxai	{ "brand":["BNP Paribas Fortis"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://reward.bnpparibasfortis.be/fr/faq/ Model: jbxai	{ "brand":["BNP Paribas Fortis"], "contains_trigger_text":true, "trigger_text":"cookies? Plus vous en acceptez, plus votre experience sera personalisee", "prominent_button_name":"accepter tous les cookies", "text_input_field_labels":["contactez le service", "comment puis-je confiance en votre site"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://reward.bnpparibasfortis.be/fr/faq/ Model: jbxai	{ "brand":["BNP Paribas Fortis"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Choisir soi-mme les cookies", "text_input_field_labels":["Choisir soi-mme les cookies", "Les cookies strictement ncessaires"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 258 x 58, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	8089
Entropy (8bit):	7.925300867983645
Encrypted:	false
SSDEEP:	192:dsIuXdY0mrLMGT6FkxQY5d8+QMXE27UcFWPfmDe:dGqT0kxVzjXxU0Wn4e
MD5:	3F9E574D328B582F9672C56069C1B413
SHA1:	1CD1244D3DFF47F72C35B1D39A4C0B68A9B7205D
SHA-256:	BE97210EAF9FB622116633DFBC229C852602AB4B594F4F4CD52A9604051A2F1F
SHA-512:	28E732276EDF2A7EB6CCF1EC088685BF2CE707E4D24DC94BFBD123A8A719AB6769EA6247BE7A94EBF0CD70FBA620B295026C8E39F23CB9C1C5633F55A3A0C748
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......:.....[.W$....tEXtSoftware.Adobe ImageReadyq.e<...kiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.154911, 2013/10/29-11:47:16 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:03801174072068118083E6736DDE3AD0" xmpMM:DocumentID="xmp.did:857AA3FADD0C11E39BBFCB4DE8222701" xmpMM:InstanceID="xmp.iid:857AA3F9DD0C11E39BBFCB4DE8222701" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0fc1b2e4-95c3-436f-b505-c60198f8cc96" stRef:documentID="xmp.did:03801174072068118083E6736DDE3AD0"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>........IDATx..].xU..?o..H.l.$..&...B...].+Vkq

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32060)
Category:	dropped
Size (bytes):	97362
Entropy (8bit):	5.373609500169285
Encrypted:	false
SSDEEP:	1536:eYE1JVoiB9JqZdXXe2pD3PgoIK6alrUSTJWFk/zkZ4HWLZoHsrOa99fwk6b7/Hpu:V4KZ+S3WLZICOaLfwk67qD1PaUa98Hrn
MD5:	CBB11B58473B2D672F4ED53ABBB67336
SHA1:	66F47B885D587AA9A6C453AE3F2C9A382E5C7EC7
SHA-256:	5F1AB65FE2AD6B381A1AE036716475BF78C9B2E309528CF22170C1DDEEFDDCBF
SHA-512:	2BB663ECF1AC1E4D9FA58DC9C2F6EEA3D9CA739E353287C5AEB2DA5143BDCEA8219C9C5B677667DF95BF65E5EF6D3D91B52BA3C466F0F0F824AA9A195D76C687
Malicious:	false
Reputation:	low
Preview:	/! jQuery v1.12.0 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="1.12.0",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.ca

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (30539)
Category:	downloaded
Size (bytes):	58351
Entropy (8bit):	5.187367341167139
Encrypted:	false
SSDEEP:	768:ae2oQzNfq0qFH98+o+Jqf8YK4kq/saFJLP:V2oeWHy+4E6kq/sCP
MD5:	11BB8CC5B67777FDCE6371A35B1AF407
SHA1:	F019EBD25FEF30419169387F473351C1CA468C5B
SHA-256:	6A95051079DB93B90FEEFA00F4DBAE8AB25E53F4E0ABA946AA69612988CD43D1
SHA-512:	B2ED32007587143248AD4DD734E82DE1511C8FFA38E5C991BBB84BD2D9E692A365B9552F95C2D2D8B87DA51879F29C6EDA05CAC3507C927F8F4F10606862636C
Malicious:	false
Reputation:	low
URL:	https://reward.bnpparibasfortis.be/css/main.css?v=3accddf64b1dd03abeb9b0b3e5a7ba44
Preview:	./! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css /@import url("https://fonts.googleapis.com/css?family=Open+Sans:400,600,700,300");@import url("square/green.css");html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background-color:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:bold}dfn{font-style:italic}h1{font-size:2em;margin:0.67em 0}mark{background:#ff0;color:#000}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sup{top:-0.5em}sub{bottom:-0.25em}img{border:0}svg:not(:root){overflow:hidden}figure{margin:1em 40px}hr{box-sizing:content-box;height:0}pre{overflow:au

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 306 x 390, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	9377
Entropy (8bit):	7.811705616321291
Encrypted:	false
SSDEEP:	192:g911n8zpqES4X9p43ysytBjpHCzapPofptNdfYhhnKS1:lzoESs9pbsyPjpHCEPoff/f2QS1
MD5:	2817373FDF9B3C9C7946AEC265AAB0C4
SHA1:	D6EE3AF23A42F766837D6EF67A4372454DC9B2C6
SHA-256:	D63BE387BF527571F293C53B53EB157F067198656570E8E0202262A1FEEC3CAB
SHA-512:	3A9DDFD725EB5993716DE2B1C3260FB17B4CD860B8E099DC06D4131B18D1E5A2A03A20DD9208ECE194B5661233D5DB7D48B84F927FF2CF5BCB2B10DF9AA0D5B8
Malicious:	false
Reputation:	low
URL:	https://reward.bnpparibasfortis.be/images/cadeau.png
Preview:	.PNG........IHDR...2.................tEXtSoftware.Adobe ImageReadyq.e<...kiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.154911, 2013/10/29-11:47:16 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:03801174072068118083E6736DDE3AD0" xmpMM:DocumentID="xmp.did:31405FE9DD0E11E39BBFCB4DE8222701" xmpMM:InstanceID="xmp.iid:31405FE8DD0E11E39BBFCB4DE8222701" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0fc1b2e4-95c3-436f-b505-c60198f8cc96" stRef:documentID="xmp.did:03801174072068118083E6736DDE3AD0"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?> .\... .IDATx....]...H.....g...Ek.1JM-.E.....

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 306 x 390, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	9377
Entropy (8bit):	7.811705616321291
Encrypted:	false
SSDEEP:	192:g911n8zpqES4X9p43ysytBjpHCzapPofptNdfYhhnKS1:lzoESs9pbsyPjpHCEPoff/f2QS1
MD5:	2817373FDF9B3C9C7946AEC265AAB0C4
SHA1:	D6EE3AF23A42F766837D6EF67A4372454DC9B2C6
SHA-256:	D63BE387BF527571F293C53B53EB157F067198656570E8E0202262A1FEEC3CAB
SHA-512:	3A9DDFD725EB5993716DE2B1C3260FB17B4CD860B8E099DC06D4131B18D1E5A2A03A20DD9208ECE194B5661233D5DB7D48B84F927FF2CF5BCB2B10DF9AA0D5B8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2.................tEXtSoftware.Adobe ImageReadyq.e<...kiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.154911, 2013/10/29-11:47:16 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:03801174072068118083E6736DDE3AD0" xmpMM:DocumentID="xmp.did:31405FE9DD0E11E39BBFCB4DE8222701" xmpMM:InstanceID="xmp.iid:31405FE8DD0E11E39BBFCB4DE8222701" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0fc1b2e4-95c3-436f-b505-c60198f8cc96" stRef:documentID="xmp.did:03801174072068118083E6736DDE3AD0"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?> .\... .IDATx....]...H.....g...Ek.1JM-.E.....

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (14856)
Category:	dropped
Size (bytes):	15514
Entropy (8bit):	5.324256944531109
Encrypted:	false
SSDEEP:	384:AEDDCHW519TpJGd+xesmAnx6KQoZRY5y60Hh1pD:ACDtjebAgKr25y60H1
MD5:	DA941A6E1E1DF098744318F6D25BA13A
SHA1:	15F441D0DF5A01EFC674D62B88C0C95BF233656A
SHA-256:	2B0F8526E7A1B0F1FB42E8ACEC3C1E7737A1A3065B773EBD13A492952F557967
SHA-512:	12433661EF87910890B2FA7545AB19153119338AC31CC8789FA851E202B2591CF86BF5094BB2072078CDC3E7984C187749F5FEF4389C1395FCC9D115EAEF9B83
Malicious:	false
Reputation:	low
Preview:	/* Modernizr 2.8.3 (Custom Build) \| MIT & BSD. * Build: http://modernizr.com/download/#-fontface-backgroundsize-borderimage-borderradius-boxshadow-flexbox-hsla-multiplebgs-opacity-rgba-textshadow-cssanimations-csscolumns-generatedcontent-cssgradients-cssreflections-csstransforms-csstransforms3d-csstransitions-applicationcache-canvas-canvastext-draganddrop-hashchange-history-audio-video-indexeddb-input-inputtypes-localstorage-postmessage-sessionstorage-websockets-websqldatabase-webworkers-geolocation-inlinesvg-smil-svg-svgclippaths-touch-webgl-shiv-mq-cssclasses-addtest-prefixed-teststyles-testprop-testallprops-hasevent-prefixes-domprefixes-load. */.;window.Modernizr=function(a,b,c){function D(a){j.cssText=a}function E(a,b){return D(n.join(a+";")+(b\|\|""))}function F(a,b){return typeof a===b}function G(a,b){return!!~(""+a).indexOf(b)}function H(a,b){for(var d in a){var e=a[d];if(!G(e,"-")&&j[e]!==c)return b=="pfx"?e:!0}return!1}function I(a,b,d){for(var e in a){var f=b[a[e]];if(f!==c)ret

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	12671
Entropy (8bit):	5.072527821067884
Encrypted:	false
SSDEEP:	192:qQQDvnjHxJvnjHYsIVoWVgECaHAAtAR3aaXkHwvnZ9pI+MjwhOhcJIQl1UBHnlke:qQQDPlJPMsIVzNcWgl1iqDcygb
MD5:	67FA6843637118854CBEE2FBE00F6D6C
SHA1:	621CBB5764506F5875F33175BBD21BDB969E5E8A
SHA-256:	2204BD69D3721B82B7B1CE780F9BF1DFAB7BA0240804BD5C3D910942836A7E62
SHA-512:	C474D88FEE87A03B93E0A9624A22702D31D4EA1C24EE078F8175A6CF10C09F7CCF4045E4C44AA89B93F6F4927FC2959B03070B429F9E4DD0FDEC7328BA1E07FA
Malicious:	false
Reputation:	low
URL:	https://www.bnpparibasfortis.be/resources/one-portal/wcm/js/vendors/pagebus.js
Preview:	/*. TIBCO PageBus(TM) version 2.0.0. * . * Copyright (c) 2006-2009, TIBCO Software Inc.. * All rights reserved.. . Licensed under the Apache License, Version 2.0 (the "License"); you may not . * use this file except in compliance with the License. You may obtain a copy . * of the License at http://www.apache.org/licenses/LICENSE-2.0 . Unless. * required by applicable law or agreed to in writing, software distributed. * under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR . * CONDITIONS OF ANY KIND, either express or implied. See the License for the . * specific language governing permissions and limitations under the License.. . . * Includes code from the official reference implementation of the OpenAjax. * Hub that is provided by OpenAjax Alliance. Specification is available at:. . http://www.openajax.org/member/wiki/OpenAjax_Hub_Specification. . Copyright 2006-2009 OpenAjax Alliance. . Licensed under the Apache License, Version 2.0 (the "Licen

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	12671
Entropy (8bit):	5.072527821067884
Encrypted:	false
SSDEEP:	192:qQQDvnjHxJvnjHYsIVoWVgECaHAAtAR3aaXkHwvnZ9pI+MjwhOhcJIQl1UBHnlke:qQQDPlJPMsIVzNcWgl1iqDcygb
MD5:	67FA6843637118854CBEE2FBE00F6D6C
SHA1:	621CBB5764506F5875F33175BBD21BDB969E5E8A
SHA-256:	2204BD69D3721B82B7B1CE780F9BF1DFAB7BA0240804BD5C3D910942836A7E62
SHA-512:	C474D88FEE87A03B93E0A9624A22702D31D4EA1C24EE078F8175A6CF10C09F7CCF4045E4C44AA89B93F6F4927FC2959B03070B429F9E4DD0FDEC7328BA1E07FA
Malicious:	false
Reputation:	low
Preview:	/*. TIBCO PageBus(TM) version 2.0.0. * . * Copyright (c) 2006-2009, TIBCO Software Inc.. * All rights reserved.. . Licensed under the Apache License, Version 2.0 (the "License"); you may not . * use this file except in compliance with the License. You may obtain a copy . * of the License at http://www.apache.org/licenses/LICENSE-2.0 . Unless. * required by applicable law or agreed to in writing, software distributed. * under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR . * CONDITIONS OF ANY KIND, either express or implied. See the License for the . * specific language governing permissions and limitations under the License.. . . * Includes code from the official reference implementation of the OpenAjax. * Hub that is provided by OpenAjax Alliance. Specification is available at:. . http://www.openajax.org/member/wiki/OpenAjax_Hub_Specification. . Copyright 2006-2009 OpenAjax Alliance. . Licensed under the Apache License, Version 2.0 (the "Licen

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 258 x 58, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	8089
Entropy (8bit):	7.925300867983645
Encrypted:	false
SSDEEP:	192:dsIuXdY0mrLMGT6FkxQY5d8+QMXE27UcFWPfmDe:dGqT0kxVzjXxU0Wn4e
MD5:	3F9E574D328B582F9672C56069C1B413
SHA1:	1CD1244D3DFF47F72C35B1D39A4C0B68A9B7205D
SHA-256:	BE97210EAF9FB622116633DFBC229C852602AB4B594F4F4CD52A9604051A2F1F
SHA-512:	28E732276EDF2A7EB6CCF1EC088685BF2CE707E4D24DC94BFBD123A8A719AB6769EA6247BE7A94EBF0CD70FBA620B295026C8E39F23CB9C1C5633F55A3A0C748
Malicious:	false
Reputation:	low
URL:	https://reward.bnpparibasfortis.be/images/logo.png
Preview:	.PNG........IHDR.......:.....[.W$....tEXtSoftware.Adobe ImageReadyq.e<...kiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.154911, 2013/10/29-11:47:16 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:03801174072068118083E6736DDE3AD0" xmpMM:DocumentID="xmp.did:857AA3FADD0C11E39BBFCB4DE8222701" xmpMM:InstanceID="xmp.iid:857AA3F9DD0C11E39BBFCB4DE8222701" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0fc1b2e4-95c3-436f-b505-c60198f8cc96" stRef:documentID="xmp.did:03801174072068118083E6736DDE3AD0"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>........IDATx..].xU..?o..H.l.$..&...B...].+Vkq

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (16204), with no line terminators
Category:	dropped
Size (bytes):	16583
Entropy (8bit):	5.621268253312235
Encrypted:	false
SSDEEP:	384:0bDyZ7NT/JvaBKklbO211vr7cHId18BnudWG1C9m8:0uNg1sk8BudWG1wV
MD5:	50622F83276B901FA0A0F3E0628275E9
SHA1:	7FA584E0E932AFBD21D28926C2E0EDE67505CA47
SHA-256:	58264663DDB9080FFF8EE6849C5528EE31759BE1DF8AD237C484155250B980B7
SHA-512:	D137A1D3122EEB72B3798D0D74EBBE78E5E3F8360F3A2F73BDEEEF9BFF2402D7B6514DD2166E699CA36F8822A0D276B6A4F8B1C9F5272BD487567FE30D693B92
Malicious:	false
Reputation:	low
Preview:	!function(){for(var e,t=function(){},n=["assert","clear","count","debug","dir","dirxml","error","exception","group","groupCollapsed","groupEnd","info","log","markTimeline","profile","profileEnd","table","time","timeEnd","timeline","timelineEnd","timeStamp","trace","warn"],r=n.length,a=window.console=window.console\|\|{};r--;)e=n[r],a[e]\|\|(a[e]=t)}(),eval(function(e,t,n,r,a,i){for(a=function(e){return(t>e?"":a(e/t))+String.fromCharCode(e%t+161)};n--;)r[n]&&(e=e.replace(new RegExp(a(n),"g"),r[n]));return e}(". .(){. .={'.':.(){. ...},'.':{'.':.(){. .....},'.':.(){. .....}},'.':.(){. ...},'.':.(){. ...},'.':.(){. ...},'.':.(){. ...},'.':.(){. ...},'.':.(){. ...},'.':.(){. ...},'.':.(){. ...},'.':.(){. ...},'.':.(){. ...},'.':.(){. ...},'.':.(){. ...},'.':.(){. ...},'.':.(){. ...},'.':.(){. ...}};$..=.;. .={'.':'.','.':{'.':.,'.':'.'},'.':'.','.':.,'.':.,'.':.,'.':.,'.':.,'

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (16204), with no line terminators
Category:	downloaded
Size (bytes):	16583
Entropy (8bit):	5.621268253312235
Encrypted:	false
SSDEEP:	384:0bDyZ7NT/JvaBKklbO211vr7cHId18BnudWG1C9m8:0uNg1sk8BudWG1wV
MD5:	50622F83276B901FA0A0F3E0628275E9
SHA1:	7FA584E0E932AFBD21D28926C2E0EDE67505CA47
SHA-256:	58264663DDB9080FFF8EE6849C5528EE31759BE1DF8AD237C484155250B980B7
SHA-512:	D137A1D3122EEB72B3798D0D74EBBE78E5E3F8360F3A2F73BDEEEF9BFF2402D7B6514DD2166E699CA36F8822A0D276B6A4F8B1C9F5272BD487567FE30D693B92
Malicious:	false
Reputation:	low
URL:	https://reward.bnpparibasfortis.be/js/plugins.min.js?v=3accddf64b1dd03abeb9b0b3e5a7ba44
Preview:	!function(){for(var e,t=function(){},n=["assert","clear","count","debug","dir","dirxml","error","exception","group","groupCollapsed","groupEnd","info","log","markTimeline","profile","profileEnd","table","time","timeEnd","timeline","timelineEnd","timeStamp","trace","warn"],r=n.length,a=window.console=window.console\|\|{};r--;)e=n[r],a[e]\|\|(a[e]=t)}(),eval(function(e,t,n,r,a,i){for(a=function(e){return(t>e?"":a(e/t))+String.fromCharCode(e%t+161)};n--;)r[n]&&(e=e.replace(new RegExp(a(n),"g"),r[n]));return e}(". .(){. .={'.':.(){. ...},'.':{'.':.(){. .....},'.':.(){. .....}},'.':.(){. ...},'.':.(){. ...},'.':.(){. ...},'.':.(){. ...},'.':.(){. ...},'.':.(){. ...},'.':.(){. ...},'.':.(){. ...},'.':.(){. ...},'.':.(){. ...},'.':.(){. ...},'.':.(){. ...},'.':.(){. ...},'.':.(){. ...},'.':.(){. ...}};$..=.;. .={'.':'.','.':{'.':.,'.':'.'},'.':'.','.':.,'.':.,'.':.,'.':.,'.':.,'

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1502
Entropy (8bit):	4.693155771791612
Encrypted:	false
SSDEEP:	24:TJjyEoqGDiXDOJ9NL2nb42oZWy42n842ODE6A6nsG646oxy46nn46Os7hWy2I6j3:TYJf9quIIyG6TlbFR5U
MD5:	76731F31E579F858CC971C791BE7090E
SHA1:	F52AE1D1D73BE3205752E28A3E4177A53BFE8135
SHA-256:	A5C671A264CA9463FB16D2389DF96D47183DC541714E3CE6F4C81624872C9692
SHA-512:	80265F1334C4C97EAD8F5E1BECCAF7ED061172C558E5FB9A9A1009B8D84A7412BB209A8274CB39C69498A79644552199B12676A0237B7A9517331E0304F935FF
Malicious:	false
Reputation:	low
URL:	https://reward.bnpparibasfortis.be/css/square/green.css
Preview:	/* iCheck plugin Square skin, green.----------------------------------- /..icheckbox_square-green,..iradio_square-green {. display: inline-block;. display: inline;. vertical-align: middle;. margin: 0;. padding: 0;. width: 22px;. height: 22px;. background: url(green.png) no-repeat;. border: none;. cursor: pointer;.}...icheckbox_square-green {. background-position: 0 0;.}. .icheckbox_square-green.hover {. background-position: -24px 0;. }. .icheckbox_square-green.checked {. background-position: -48px 0;. }. .icheckbox_square-green.disabled {. background-position: -72px 0;. cursor: default;. }. .icheckbox_square-green.checked.disabled {. background-position: -96px 0;. }...iradio_square-green {. background-position: -120px 0;.}. .iradio_square-green.hover {. background-position: -144px 0;. }. .iradio_square-green.checked {. background-position: -168px 0;. }. .iradio_

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32060)
Category:	downloaded
Size (bytes):	97362
Entropy (8bit):	5.373609500169285
Encrypted:	false
SSDEEP:	1536:eYE1JVoiB9JqZdXXe2pD3PgoIK6alrUSTJWFk/zkZ4HWLZoHsrOa99fwk6b7/Hpu:V4KZ+S3WLZICOaLfwk67qD1PaUa98Hrn
MD5:	CBB11B58473B2D672F4ED53ABBB67336
SHA1:	66F47B885D587AA9A6C453AE3F2C9A382E5C7EC7
SHA-256:	5F1AB65FE2AD6B381A1AE036716475BF78C9B2E309528CF22170C1DDEEFDDCBF
SHA-512:	2BB663ECF1AC1E4D9FA58DC9C2F6EEA3D9CA739E353287C5AEB2DA5143BDCEA8219C9C5B677667DF95BF65E5EF6D3D91B52BA3C466F0F0F824AA9A195D76C687
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-1.12.0.min.js
Preview:	/! jQuery v1.12.0 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="1.12.0",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.ca

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 8 bits/pixel
Category:	dropped
Size (bytes):	2238
Entropy (8bit):	4.680291297992444
Encrypted:	false
SSDEEP:	24:sukQcaVVnx2oTEZstYxHo4ChfgTInZJFRcZTnukfJDe4f+IP2DllrH:SQ9Vx2oTEZIJBgcnZm1ukfpf3KT
MD5:	CDF34246AFCFCBA5C97FB6E842021DF6
SHA1:	936DBB5F699BD48AFD1A021C80C4143A1E18B2AF
SHA-256:	F69033022860C466C2D4C526018A5C9C6FEF56AC47AE7D83CD0FC5F45EE9DCAE
SHA-512:	8AC60D522F2978C5364E9B5EC5058B5B856857D665310DBEBF889A2C32319B5E253D5D145ECAC179B0979C02A08C2ECE7166E7E6A4FCE31C4E5FCAB9E1675F07
Malicious:	false
Reputation:	low
Preview:	...... ..............(... ...@...............................e...i...i...k...k...m...n...o...o...p...o...q...q...r...s...s...r...s...t...t...t...u...u...v...w...x...w...v...x...y...x...y...w...y...z...w...{...z...{...z...z...y...{...x...{...{...{...z...\|...{...{...\|...}...~...}...~...................~.........................................&...#...$...#...(...'...)...*...-.../...0...1...6...1......./...4...2...2...:...4...>...:...@...@...G...@...N...I...L...L...P...J...R...T...X...V..._...[...]...\...i...c...f...k...k...h...i...r...l...e...p...i...r...u...r...s...}...\|...}...~...............................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:H3+kY:XbY
MD5:	1C1F22951596012A2B9E55E11D9D3E5F
SHA1:	DC85B927D5A4E10B3C0CEA28F3990671CEA7E467
SHA-256:	4F0D61DC477D6E2DC33C75AD7ABA3773D70D3A46F4C4487F904C9B0CC06636ED
SHA-512:	24E55A6C5F3BE1EF071777BA31AA568E60888D74D9B438E5B70BB3CB4113EBE7615740DA15CA4E775A59DFE0C11F3FD9D4515EB26298891DB16C38D1B8F5C1FC
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAmN9LpTN2A3whIFDbsrr-I=?alt=proto
Preview:	CgkKBw27K6/iGgA=

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25615), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	234624
Entropy (8bit):	5.584137779780965
Encrypted:	false
SSDEEP:	6144:yhRGN5K+zaFamE0G8qctzoY1a/agtf/VPK+mc5gvmc5gYmc5gTmc5gYSQ8Sq/:eGmDQ0gjKegHgggjgpB/
MD5:	4A3FE7DE1D86D19055E1762B54AEDA63
SHA1:	B6D943F54217B057B6AED34235A490BA53B32410
SHA-256:	51520194E7A7542BD7729E13B98B4B0128486451BCC1B9CB9D281A7A5E3BA65C
SHA-512:	9A421B22EC26DF59B4D70A988A260180A8228BDDF6C649DAAB08432A8004470398E99F0AB20181DC8B3C81623B9330C41F5A9D021DAB361606CF544FED6520AD
Malicious:	false
Reputation:	low
Preview:	if (typeof getCookie == "undefined") {. // eslint-disable-next-line. function getCookie(cname) {. const name = cname + "=";. const decodedCookie = decodeURIComponent(document.cookie);. const ca = decodedCookie.split(';');. for (let i = 0; i < ca.length; i++) {. let c = ca[i];. while (c.charAt(0) == ' ') {. c = c.substring(1);. }. if (c.indexOf(name) == 0) {. return c.substring(name.length, c.length);. }. }. return "";. }.}..if (typeof PageBus !== "undefined") {. window.PageBus.subscribe('cc.policy.popup', this, function () {.. if (!document.getElementById('cookies_overlay')) {. // eslint-disable-next-line. if (getCookie("COOKIES_SETTINGS") != undefined) {. var popupLang = (typeof window.sfAxes1 === "undefined") ? "en" : window.sfAxes1;. var popupBrand = (typeof window.sfAxes3 === "undefined"

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5891), with no line terminators
Category:	downloaded
Size (bytes):	5891
Entropy (8bit):	5.113903803467884
Encrypted:	false
SSDEEP:	96:3t9fQ9cpcBOd8XISS6Bb1TohZWTDSTPeBAsBG3eXYom:3tEk8YYiZW6zeBAs03j
MD5:	E050CD4768DF7AF31B1BDF433612FD08
SHA1:	C688432F6F83158187F0ED2B7E705183839084A0
SHA-256:	782C3F91EC67BDD070B56427E75A3D2B1B85E31A279BB6A28675B2B6B42B5DAC
SHA-512:	BD9C602BABE4E54B0801F651DB07EBFCFA40B0B82FDB7B466D8C2ABB14DC35CA904167ED88B4DD1EEE1970FF0B49BC231AB836F3D5897421C2DE06BC5F150B3A
Malicious:	false
Reputation:	low
URL:	https://reward.bnpparibasfortis.be/js/main.min.js?v=3accddf64b1dd03abeb9b0b3e5a7ba44
Preview:	$(document).ready(function(){function e(){$(".choice_item h2").css({height:"auto"});var e=$(".choice_item h2").map(function(){return $(this).outerHeight()}),t=Math.max.apply(this,e);$(".choice_item h2").css({height:t+"px"}),$(".choice_item h2 span").each(function(e,t){marCorr=($(this).parent().height()-$(this).height())/2,$(this).css({margin:marCorr+"px 0 0 0"})}),$(".choice_item_overview h2 span").each(function(e,t){marCorr=($(this).parent().height()-$(this).height())/2,$(this).css({margin:marCorr+"px 0 0 0"})}),$("#techbox").each(function(e,t){marCorr=($(window).height()-$(this).height())/2,$(this).css({margin:marCorr+"px auto 0 auto"})}),errorHeight=$("#producterror").outerHeight()+5,$("#producterror").css("top","-"+errorHeight+"px"),conditionErrorHeight=$("#conditionerror").outerHeight()+5,$("#conditionerror").css("top","-"+conditionErrorHeight+"px"),productErrorHeight=$("#producterrorlock").outerHeight()+5,$("#producterrorlock").css("top","-"+productErrorHeight+"px")}function t(){

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25615), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	234624
Entropy (8bit):	5.584137779780965
Encrypted:	false
SSDEEP:	6144:yhRGN5K+zaFamE0G8qctzoY1a/agtf/VPK+mc5gvmc5gYmc5gTmc5gYSQ8Sq/:eGmDQ0gjKegHgggjgpB/
MD5:	4A3FE7DE1D86D19055E1762B54AEDA63
SHA1:	B6D943F54217B057B6AED34235A490BA53B32410
SHA-256:	51520194E7A7542BD7729E13B98B4B0128486451BCC1B9CB9D281A7A5E3BA65C
SHA-512:	9A421B22EC26DF59B4D70A988A260180A8228BDDF6C649DAAB08432A8004470398E99F0AB20181DC8B3C81623B9330C41F5A9D021DAB361606CF544FED6520AD
Malicious:	false
Reputation:	low
URL:	https://www.bnpparibasfortis.be/resources/cookie-consent/cookie.js
Preview:	if (typeof getCookie == "undefined") {. // eslint-disable-next-line. function getCookie(cname) {. const name = cname + "=";. const decodedCookie = decodeURIComponent(document.cookie);. const ca = decodedCookie.split(';');. for (let i = 0; i < ca.length; i++) {. let c = ca[i];. while (c.charAt(0) == ' ') {. c = c.substring(1);. }. if (c.indexOf(name) == 0) {. return c.substring(name.length, c.length);. }. }. return "";. }.}..if (typeof PageBus !== "undefined") {. window.PageBus.subscribe('cc.policy.popup', this, function () {.. if (!document.getElementById('cookies_overlay')) {. // eslint-disable-next-line. if (getCookie("COOKIES_SETTINGS") != undefined) {. var popupLang = (typeof window.sfAxes1 === "undefined") ? "en" : window.sfAxes1;. var popupBrand = (typeof window.sfAxes3 === "undefined"

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (14856)
Category:	downloaded
Size (bytes):	15514
Entropy (8bit):	5.324256944531109
Encrypted:	false
SSDEEP:	384:AEDDCHW519TpJGd+xesmAnx6KQoZRY5y60Hh1pD:ACDtjebAgKr25y60H1
MD5:	DA941A6E1E1DF098744318F6D25BA13A
SHA1:	15F441D0DF5A01EFC674D62B88C0C95BF233656A
SHA-256:	2B0F8526E7A1B0F1FB42E8ACEC3C1E7737A1A3065B773EBD13A492952F557967
SHA-512:	12433661EF87910890B2FA7545AB19153119338AC31CC8789FA851E202B2591CF86BF5094BB2072078CDC3E7984C187749F5FEF4389C1395FCC9D115EAEF9B83
Malicious:	false
Reputation:	low
URL:	https://reward.bnpparibasfortis.be/js/vendor/modernizr-2.8.3.min.js
Preview:	/* Modernizr 2.8.3 (Custom Build) \| MIT & BSD. * Build: http://modernizr.com/download/#-fontface-backgroundsize-borderimage-borderradius-boxshadow-flexbox-hsla-multiplebgs-opacity-rgba-textshadow-cssanimations-csscolumns-generatedcontent-cssgradients-cssreflections-csstransforms-csstransforms3d-csstransitions-applicationcache-canvas-canvastext-draganddrop-hashchange-history-audio-video-indexeddb-input-inputtypes-localstorage-postmessage-sessionstorage-websockets-websqldatabase-webworkers-geolocation-inlinesvg-smil-svg-svgclippaths-touch-webgl-shiv-mq-cssclasses-addtest-prefixed-teststyles-testprop-testallprops-hasevent-prefixes-domprefixes-load. */.;window.Modernizr=function(a,b,c){function D(a){j.cssText=a}function E(a,b){return D(n.join(a+";")+(b\|\|""))}function F(a,b){return typeof a===b}function G(a,b){return!!~(""+a).indexOf(b)}function H(a,b){for(var d in a){var e=a[d];if(!G(e,"-")&&j[e]!==c)return b=="pfx"?e:!0}return!1}function I(a,b,d){for(var e in a){var f=b[a[e]];if(f!==c)ret

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Category:	downloaded
Size (bytes):	48236
Entropy (8bit):	7.994912604882335
Encrypted:	true
SSDEEP:	768:uj6JxavgLx5rjTH3CdZ3y11o4uMb2IVEhiB6z6GAAHJApICtBgso6HaOjTXHRWK:ujoa4LxZPCdm3B2IVEhiB62apApISxos
MD5:	015C126A3520C9A8F6A27979D0266E96
SHA1:	2ACF956561D44434A6D84204670CF849D3215D5F
SHA-256:	3C4D6A1421C7DDB7E404521FE8C4CD5BE5AF446D7689CD880BE26612EAAD3CFA
SHA-512:	02A20F2788BB1C3B2C7D3142C664CDEC306B6BA5366E57E33C008EDB3EB78638B98DC03CDF932A9DC440DED7827956F99117E7A3A4D55ACADD29B006032D9C5C
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
Preview:	wOF2.......l......D...............................O..B..h?HVAR.x.`?STAT.$'...0+...\|.../V........+..2.0..6.6.$..`. ..~......[B4q.....t..P.M_.z...1..R.S...u.#..R....fR.1.N.v.N.P...;.2........!Z......Qs...5f.G.K.an2&....2.........C.H.t..N!.....nh.<(.vN.....j.._.L.P.t..Ai.%.............._I.i,..o,C.].H.X9.....a.=N....k.....n.L..k.f.u..{...:.}^\[..~5...Z`...........`!...%4..,...K0..&.a/....P....S....m.Z......u...D.j.F...f.0`I.`.`.h#..)(FQ.F!o$........S.).MV8%Rh...r...x...T]$.=......Y...!.3.&U..."....Q....{.l/0..d..4iJ/..}...3....i[Z..NG.WD...>.[U..Q.h..@m.=..S...1C2...d...<..v.?.q.f..n...OUz.....&Z......Z."..N.....n...9.B..C..W....}...W..6Zs.i.+Z........jB.n..x.8M.....q..@I....-.%..,C,..K..#.2...4)/.v_..x.<....t.....%[.4?.=j.V..jj''..W.u..q....I.L.=......E...\.M.7{.>......W........C.`...,9$......\..o........y...4A..m.P.,X..=?.:................wF`..+.P..........M!.4.......l.>M..t.ff5r..^..Z.g...!fA,hIIQ...e.R>B.AH.VuX..>..\.=.ky...1>C....>C.c.;...6D.

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	22388
Entropy (8bit):	5.340794659982224
Encrypted:	false
SSDEEP:	192:N/dB0q4e6uyfrbqGIwYMH17o/A85q1H6uy2rbqGIwYRe1qW/uaDqPN6uyIrbqGIO:ZFuq9PUhq9IW/q935Cq9C
MD5:	CB6AFEA6EE75D2FC22E4A22512425465
SHA1:	F91258C83A54D1D44DF8637909885B300B5D305B
SHA-256:	31FE46164CE2459191CA1F7727FD742CE01833EE4F705459E88D43F53FCC9F80
SHA-512:	91FDA973E0A4490AC58E5F3881A5600E41721DB09714047CE3666C680961710DC060D454FA1A668D8D43A21D9D8358CEF90BE89D199AA9BD4124D32F9F8FBF0B
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Open+Sans:400,600,700,300"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 300;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 300;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 300;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Open Sans';. font-style: normal;

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 8 bits/pixel
Category:	downloaded
Size (bytes):	2238
Entropy (8bit):	4.680291297992444
Encrypted:	false
SSDEEP:	24:sukQcaVVnx2oTEZstYxHo4ChfgTInZJFRcZTnukfJDe4f+IP2DllrH:SQ9Vx2oTEZIJBgcnZm1ukfpf3KT
MD5:	CDF34246AFCFCBA5C97FB6E842021DF6
SHA1:	936DBB5F699BD48AFD1A021C80C4143A1E18B2AF
SHA-256:	F69033022860C466C2D4C526018A5C9C6FEF56AC47AE7D83CD0FC5F45EE9DCAE
SHA-512:	8AC60D522F2978C5364E9B5EC5058B5B856857D665310DBEBF889A2C32319B5E253D5D145ECAC179B0979C02A08C2ECE7166E7E6A4FCE31C4E5FCAB9E1675F07
Malicious:	false
Reputation:	low
URL:	https://reward.bnpparibasfortis.be/favicon.ico
Preview:	...... ..............(... ...@...............................e...i...i...k...k...m...n...o...o...p...o...q...q...r...s...s...r...s...t...t...t...u...u...v...w...x...w...v...x...y...x...y...w...y...z...w...{...z...{...z...z...y...{...x...{...{...{...z...\|...{...{...\|...}...~...}...~...................~.........................................&...#...$...#...(...'...)...*...-.../...0...1...6...1......./...4...2...2...:...4...>...:...@...@...G...@...N...I...L...L...P...J...R...T...X...V..._...[...]...\...i...c...f...k...k...h...i...r...l...e...p...i...r...u...r...s...}...\|...}...~...............................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5891), with no line terminators
Category:	dropped
Size (bytes):	5891
Entropy (8bit):	5.113903803467884
Encrypted:	false
SSDEEP:	96:3t9fQ9cpcBOd8XISS6Bb1TohZWTDSTPeBAsBG3eXYom:3tEk8YYiZW6zeBAs03j
MD5:	E050CD4768DF7AF31B1BDF433612FD08
SHA1:	C688432F6F83158187F0ED2B7E705183839084A0
SHA-256:	782C3F91EC67BDD070B56427E75A3D2B1B85E31A279BB6A28675B2B6B42B5DAC
SHA-512:	BD9C602BABE4E54B0801F651DB07EBFCFA40B0B82FDB7B466D8C2ABB14DC35CA904167ED88B4DD1EEE1970FF0B49BC231AB836F3D5897421C2DE06BC5F150B3A
Malicious:	false
Reputation:	low
Preview:	$(document).ready(function(){function e(){$(".choice_item h2").css({height:"auto"});var e=$(".choice_item h2").map(function(){return $(this).outerHeight()}),t=Math.max.apply(this,e);$(".choice_item h2").css({height:t+"px"}),$(".choice_item h2 span").each(function(e,t){marCorr=($(this).parent().height()-$(this).height())/2,$(this).css({margin:marCorr+"px 0 0 0"})}),$(".choice_item_overview h2 span").each(function(e,t){marCorr=($(this).parent().height()-$(this).height())/2,$(this).css({margin:marCorr+"px 0 0 0"})}),$("#techbox").each(function(e,t){marCorr=($(window).height()-$(this).height())/2,$(this).css({margin:marCorr+"px auto 0 auto"})}),errorHeight=$("#producterror").outerHeight()+5,$("#producterror").css("top","-"+errorHeight+"px"),conditionErrorHeight=$("#conditionerror").outerHeight()+5,$("#conditionerror").css("top","-"+conditionErrorHeight+"px"),productErrorHeight=$("#producterrorlock").outerHeight()+5,$("#producterrorlock").css("top","-"+productErrorHeight+"px")}function t(){

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 27, 2024 06:00:31.480724096 CEST	49671	443	192.168.2.7	204.79.197.203
Sep 27, 2024 06:00:33.371246099 CEST	49674	443	192.168.2.7	104.98.116.138
Sep 27, 2024 06:00:33.371328115 CEST	49675	443	192.168.2.7	104.98.116.138
Sep 27, 2024 06:00:33.527506113 CEST	49672	443	192.168.2.7	104.98.116.138
Sep 27, 2024 06:00:36.293306112 CEST	49671	443	192.168.2.7	204.79.197.203
Sep 27, 2024 06:00:38.401923895 CEST	49677	443	192.168.2.7	20.50.201.200
Sep 27, 2024 06:00:38.933744907 CEST	49677	443	192.168.2.7	20.50.201.200
Sep 27, 2024 06:00:39.730649948 CEST	49677	443	192.168.2.7	20.50.201.200
Sep 27, 2024 06:00:41.324434042 CEST	49677	443	192.168.2.7	20.50.201.200
Sep 27, 2024 06:00:43.123112917 CEST	49674	443	192.168.2.7	104.98.116.138
Sep 27, 2024 06:00:43.123126030 CEST	49675	443	192.168.2.7	104.98.116.138
Sep 27, 2024 06:00:43.214076996 CEST	49672	443	192.168.2.7	104.98.116.138
Sep 27, 2024 06:00:44.146473885 CEST	49704	443	192.168.2.7	172.217.18.4
Sep 27, 2024 06:00:44.146511078 CEST	443	49704	172.217.18.4	192.168.2.7
Sep 27, 2024 06:00:44.146605968 CEST	49704	443	192.168.2.7	172.217.18.4
Sep 27, 2024 06:00:44.146851063 CEST	49704	443	192.168.2.7	172.217.18.4
Sep 27, 2024 06:00:44.146862984 CEST	443	49704	172.217.18.4	192.168.2.7
Sep 27, 2024 06:00:44.424738884 CEST	49677	443	192.168.2.7	20.50.201.200
Sep 27, 2024 06:00:44.450428963 CEST	49705	80	192.168.2.7	5.134.4.156
Sep 27, 2024 06:00:44.452497005 CEST	49706	80	192.168.2.7	5.134.4.156
Sep 27, 2024 06:00:44.455214977 CEST	80	49705	5.134.4.156	192.168.2.7
Sep 27, 2024 06:00:44.455279112 CEST	49705	80	192.168.2.7	5.134.4.156
Sep 27, 2024 06:00:44.455509901 CEST	49705	80	192.168.2.7	5.134.4.156
Sep 27, 2024 06:00:44.457274914 CEST	80	49706	5.134.4.156	192.168.2.7
Sep 27, 2024 06:00:44.457355022 CEST	49706	80	192.168.2.7	5.134.4.156
Sep 27, 2024 06:00:44.460273981 CEST	80	49705	5.134.4.156	192.168.2.7
Sep 27, 2024 06:00:44.789772034 CEST	443	49704	172.217.18.4	192.168.2.7
Sep 27, 2024 06:00:44.795183897 CEST	49704	443	192.168.2.7	172.217.18.4
Sep 27, 2024 06:00:44.795222998 CEST	443	49704	172.217.18.4	192.168.2.7
Sep 27, 2024 06:00:44.796277046 CEST	443	49704	172.217.18.4	192.168.2.7
Sep 27, 2024 06:00:44.796341896 CEST	49704	443	192.168.2.7	172.217.18.4
Sep 27, 2024 06:00:44.797705889 CEST	49704	443	192.168.2.7	172.217.18.4
Sep 27, 2024 06:00:44.797774076 CEST	443	49704	172.217.18.4	192.168.2.7
Sep 27, 2024 06:00:44.918469906 CEST	49704	443	192.168.2.7	172.217.18.4
Sep 27, 2024 06:00:44.918507099 CEST	443	49704	172.217.18.4	192.168.2.7
Sep 27, 2024 06:00:44.968406916 CEST	49704	443	192.168.2.7	172.217.18.4
Sep 27, 2024 06:00:45.088227987 CEST	80	49705	5.134.4.156	192.168.2.7
Sep 27, 2024 06:00:45.137790918 CEST	49705	80	192.168.2.7	5.134.4.156
Sep 27, 2024 06:00:45.343808889 CEST	49707	443	192.168.2.7	5.134.4.156
Sep 27, 2024 06:00:45.343842983 CEST	443	49707	5.134.4.156	192.168.2.7
Sep 27, 2024 06:00:45.344058990 CEST	49707	443	192.168.2.7	5.134.4.156
Sep 27, 2024 06:00:45.344297886 CEST	49707	443	192.168.2.7	5.134.4.156
Sep 27, 2024 06:00:45.344314098 CEST	443	49707	5.134.4.156	192.168.2.7
Sep 27, 2024 06:00:45.627545118 CEST	443	49698	104.98.116.138	192.168.2.7
Sep 27, 2024 06:00:45.627707958 CEST	49698	443	192.168.2.7	104.98.116.138
Sep 27, 2024 06:00:45.902786016 CEST	49671	443	192.168.2.7	204.79.197.203
Sep 27, 2024 06:00:46.176568031 CEST	443	49707	5.134.4.156	192.168.2.7
Sep 27, 2024 06:00:46.178400993 CEST	49707	443	192.168.2.7	5.134.4.156
Sep 27, 2024 06:00:46.178419113 CEST	443	49707	5.134.4.156	192.168.2.7
Sep 27, 2024 06:00:46.179614067 CEST	443	49707	5.134.4.156	192.168.2.7
Sep 27, 2024 06:00:46.179697990 CEST	49707	443	192.168.2.7	5.134.4.156
Sep 27, 2024 06:00:46.181520939 CEST	49707	443	192.168.2.7	5.134.4.156
Sep 27, 2024 06:00:46.181592941 CEST	443	49707	5.134.4.156	192.168.2.7
Sep 27, 2024 06:00:46.182591915 CEST	49707	443	192.168.2.7	5.134.4.156
Sep 27, 2024 06:00:46.182600021 CEST	443	49707	5.134.4.156	192.168.2.7
Sep 27, 2024 06:00:46.231920004 CEST	49707	443	192.168.2.7	5.134.4.156
Sep 27, 2024 06:00:46.541142941 CEST	443	49707	5.134.4.156	192.168.2.7
Sep 27, 2024 06:00:46.541225910 CEST	443	49707	5.134.4.156	192.168.2.7
Sep 27, 2024 06:00:46.541265965 CEST	49707	443	192.168.2.7	5.134.4.156
Sep 27, 2024 06:00:46.542371988 CEST	49707	443	192.168.2.7	5.134.4.156
Sep 27, 2024 06:00:46.542390108 CEST	443	49707	5.134.4.156	192.168.2.7
Sep 27, 2024 06:00:46.707542896 CEST	49710	443	192.168.2.7	5.134.4.156
Sep 27, 2024 06:00:46.707593918 CEST	443	49710	5.134.4.156	192.168.2.7
Sep 27, 2024 06:00:46.707660913 CEST	49710	443	192.168.2.7	5.134.4.156
Sep 27, 2024 06:00:46.708560944 CEST	49710	443	192.168.2.7	5.134.4.156
Sep 27, 2024 06:00:46.708581924 CEST	443	49710	5.134.4.156	192.168.2.7
Sep 27, 2024 06:00:47.384891033 CEST	443	49710	5.134.4.156	192.168.2.7
Sep 27, 2024 06:00:47.385202885 CEST	49710	443	192.168.2.7	5.134.4.156
Sep 27, 2024 06:00:47.385219097 CEST	443	49710	5.134.4.156	192.168.2.7
Sep 27, 2024 06:00:47.386275053 CEST	443	49710	5.134.4.156	192.168.2.7
Sep 27, 2024 06:00:47.386363029 CEST	49710	443	192.168.2.7	5.134.4.156
Sep 27, 2024 06:00:47.788594007 CEST	49710	443	192.168.2.7	5.134.4.156
Sep 27, 2024 06:00:47.788856983 CEST	49710	443	192.168.2.7	5.134.4.156
Sep 27, 2024 06:00:47.788872957 CEST	443	49710	5.134.4.156	192.168.2.7
Sep 27, 2024 06:00:47.788997889 CEST	443	49710	5.134.4.156	192.168.2.7
Sep 27, 2024 06:00:47.837574959 CEST	49710	443	192.168.2.7	5.134.4.156
Sep 27, 2024 06:00:47.837587118 CEST	443	49710	5.134.4.156	192.168.2.7
Sep 27, 2024 06:00:47.882616997 CEST	49710	443	192.168.2.7	5.134.4.156
Sep 27, 2024 06:00:47.972814083 CEST	443	49710	5.134.4.156	192.168.2.7
Sep 27, 2024 06:00:47.973005056 CEST	443	49710	5.134.4.156	192.168.2.7
Sep 27, 2024 06:00:47.973109961 CEST	49710	443	192.168.2.7	5.134.4.156
Sep 27, 2024 06:00:47.979151964 CEST	49710	443	192.168.2.7	5.134.4.156
Sep 27, 2024 06:00:47.979171991 CEST	443	49710	5.134.4.156	192.168.2.7
Sep 27, 2024 06:00:48.049082041 CEST	49711	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:48.049125910 CEST	443	49711	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:48.049280882 CEST	49711	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:48.050043106 CEST	49711	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:48.050066948 CEST	443	49711	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:48.552334070 CEST	49712	443	192.168.2.7	184.28.90.27
Sep 27, 2024 06:00:48.552383900 CEST	443	49712	184.28.90.27	192.168.2.7
Sep 27, 2024 06:00:48.552485943 CEST	49712	443	192.168.2.7	184.28.90.27
Sep 27, 2024 06:00:48.555404902 CEST	49712	443	192.168.2.7	184.28.90.27
Sep 27, 2024 06:00:48.555421114 CEST	443	49712	184.28.90.27	192.168.2.7
Sep 27, 2024 06:00:48.701522112 CEST	443	49711	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:48.703023911 CEST	49711	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:48.703052998 CEST	443	49711	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:48.704052925 CEST	443	49711	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:48.704144001 CEST	49711	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:48.706357956 CEST	49711	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:48.706409931 CEST	443	49711	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:48.706945896 CEST	49711	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:48.706953049 CEST	443	49711	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:48.752001047 CEST	49711	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:48.976568937 CEST	443	49711	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:48.976634026 CEST	443	49711	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:48.976675987 CEST	443	49711	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:48.976737022 CEST	49711	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:48.976764917 CEST	443	49711	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:48.976792097 CEST	443	49711	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:48.976843119 CEST	49711	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:49.192373991 CEST	443	49712	184.28.90.27	192.168.2.7
Sep 27, 2024 06:00:49.192460060 CEST	49712	443	192.168.2.7	184.28.90.27
Sep 27, 2024 06:00:49.196150064 CEST	49712	443	192.168.2.7	184.28.90.27
Sep 27, 2024 06:00:49.196161985 CEST	443	49712	184.28.90.27	192.168.2.7
Sep 27, 2024 06:00:49.196510077 CEST	443	49712	184.28.90.27	192.168.2.7
Sep 27, 2024 06:00:49.237198114 CEST	49712	443	192.168.2.7	184.28.90.27
Sep 27, 2024 06:00:49.283411026 CEST	443	49712	184.28.90.27	192.168.2.7
Sep 27, 2024 06:00:49.378865004 CEST	49711	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:49.378889084 CEST	443	49711	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:49.411364079 CEST	49713	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:49.411433935 CEST	443	49713	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:49.411536932 CEST	49713	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:49.412285089 CEST	49713	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:49.412305117 CEST	443	49713	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:50.389266968 CEST	49677	443	192.168.2.7	20.50.201.200
Sep 27, 2024 06:00:50.440071106 CEST	443	49712	184.28.90.27	192.168.2.7
Sep 27, 2024 06:00:50.440150976 CEST	443	49712	184.28.90.27	192.168.2.7
Sep 27, 2024 06:00:50.440210104 CEST	49712	443	192.168.2.7	184.28.90.27
Sep 27, 2024 06:00:50.440407991 CEST	49712	443	192.168.2.7	184.28.90.27
Sep 27, 2024 06:00:50.440428972 CEST	443	49712	184.28.90.27	192.168.2.7
Sep 27, 2024 06:00:50.476929903 CEST	49714	443	192.168.2.7	184.28.90.27
Sep 27, 2024 06:00:50.476977110 CEST	443	49714	184.28.90.27	192.168.2.7
Sep 27, 2024 06:00:50.477062941 CEST	49714	443	192.168.2.7	184.28.90.27
Sep 27, 2024 06:00:50.477492094 CEST	49714	443	192.168.2.7	184.28.90.27
Sep 27, 2024 06:00:50.477504969 CEST	443	49714	184.28.90.27	192.168.2.7
Sep 27, 2024 06:00:51.270210981 CEST	443	49713	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:51.284286976 CEST	49713	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:51.284358025 CEST	443	49713	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:51.284838915 CEST	443	49713	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:51.286045074 CEST	49713	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:51.286129951 CEST	443	49713	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:51.286197901 CEST	49713	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:51.329180956 CEST	49713	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:51.329220057 CEST	443	49713	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:51.332493067 CEST	443	49714	184.28.90.27	192.168.2.7
Sep 27, 2024 06:00:51.332580090 CEST	49714	443	192.168.2.7	184.28.90.27
Sep 27, 2024 06:00:51.335103989 CEST	49714	443	192.168.2.7	184.28.90.27
Sep 27, 2024 06:00:51.335114002 CEST	443	49714	184.28.90.27	192.168.2.7
Sep 27, 2024 06:00:51.335365057 CEST	443	49714	184.28.90.27	192.168.2.7
Sep 27, 2024 06:00:51.336472988 CEST	49714	443	192.168.2.7	184.28.90.27
Sep 27, 2024 06:00:51.383407116 CEST	443	49714	184.28.90.27	192.168.2.7
Sep 27, 2024 06:00:51.530997038 CEST	443	49713	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:51.531027079 CEST	443	49713	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:51.531035900 CEST	443	49713	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:51.531117916 CEST	49713	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:51.531152964 CEST	443	49713	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:51.531256914 CEST	49713	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:51.531517029 CEST	443	49713	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:51.531586885 CEST	443	49713	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:51.532877922 CEST	49713	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:51.568900108 CEST	49713	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:51.568981886 CEST	443	49713	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:51.610582113 CEST	443	49714	184.28.90.27	192.168.2.7
Sep 27, 2024 06:00:51.610649109 CEST	443	49714	184.28.90.27	192.168.2.7
Sep 27, 2024 06:00:51.610752106 CEST	49714	443	192.168.2.7	184.28.90.27
Sep 27, 2024 06:00:51.848767042 CEST	49715	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:51.848807096 CEST	443	49715	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:51.849030018 CEST	49715	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:51.849699974 CEST	49716	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:51.849764109 CEST	443	49716	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:51.849814892 CEST	49716	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:51.850281954 CEST	49716	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:51.850297928 CEST	443	49716	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:51.850434065 CEST	49715	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:51.850449085 CEST	443	49715	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:51.851064920 CEST	49717	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:51.851108074 CEST	443	49717	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:51.851171017 CEST	49717	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:51.851522923 CEST	49717	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:51.851532936 CEST	443	49717	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:51.852158070 CEST	49718	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:51.852165937 CEST	443	49718	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:51.852230072 CEST	49718	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:51.852585077 CEST	49718	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:51.852593899 CEST	443	49718	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:51.877228022 CEST	49714	443	192.168.2.7	184.28.90.27
Sep 27, 2024 06:00:51.877257109 CEST	443	49714	184.28.90.27	192.168.2.7
Sep 27, 2024 06:00:51.877269030 CEST	49714	443	192.168.2.7	184.28.90.27
Sep 27, 2024 06:00:51.877274990 CEST	443	49714	184.28.90.27	192.168.2.7
Sep 27, 2024 06:00:52.467598915 CEST	443	49715	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:52.467941999 CEST	49715	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:52.467959881 CEST	443	49715	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:52.468353987 CEST	443	49715	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:52.469060898 CEST	49715	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:52.469172001 CEST	443	49715	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:52.469254971 CEST	49715	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:52.471306086 CEST	443	49718	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:52.471611977 CEST	49718	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:52.471626043 CEST	443	49718	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:52.473023891 CEST	443	49718	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:52.473114967 CEST	49718	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:52.473448038 CEST	49718	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:52.473510981 CEST	443	49718	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:52.473622084 CEST	49718	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:52.473628044 CEST	443	49718	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:52.483067036 CEST	443	49717	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:52.483351946 CEST	49717	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:52.483360052 CEST	443	49717	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:52.485780954 CEST	443	49717	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:52.485838890 CEST	49717	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:52.486289024 CEST	49717	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:52.486469030 CEST	49717	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:52.486473083 CEST	443	49717	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:52.486746073 CEST	443	49717	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:52.494119883 CEST	443	49716	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:52.494364977 CEST	49716	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:52.494388103 CEST	443	49716	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:52.494683027 CEST	443	49716	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:52.495109081 CEST	49716	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:52.495161057 CEST	443	49716	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:52.495260954 CEST	49716	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:52.511449099 CEST	443	49715	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:52.515997887 CEST	49718	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:52.531126976 CEST	49717	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:52.531140089 CEST	443	49717	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:52.539402962 CEST	443	49716	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:52.578357935 CEST	49717	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:52.734682083 CEST	443	49718	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:52.734704971 CEST	443	49718	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:52.734711885 CEST	443	49718	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:52.734745026 CEST	443	49718	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:52.734771013 CEST	443	49718	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:52.734842062 CEST	49718	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:52.734842062 CEST	49718	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:52.734859943 CEST	443	49718	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:52.734930992 CEST	49718	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:52.738504887 CEST	49718	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:52.738523960 CEST	443	49718	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:52.746577978 CEST	443	49717	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:52.746612072 CEST	443	49717	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:52.746622086 CEST	443	49717	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:52.746650934 CEST	443	49717	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:52.746709108 CEST	49717	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:52.746709108 CEST	49717	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:52.746723890 CEST	443	49717	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:52.746740103 CEST	443	49717	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:52.746793985 CEST	49717	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:52.749847889 CEST	49717	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:52.749874115 CEST	443	49717	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:52.756426096 CEST	443	49716	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:52.756449938 CEST	443	49716	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:52.756491899 CEST	443	49716	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:52.756509066 CEST	443	49716	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:52.756516933 CEST	49716	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:52.756627083 CEST	49716	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:52.758059025 CEST	49716	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:52.758076906 CEST	443	49716	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:52.758903027 CEST	49720	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:52.758939981 CEST	443	49720	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:52.759221077 CEST	49721	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:52.759253025 CEST	443	49721	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:52.759262085 CEST	49720	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:52.759287119 CEST	49721	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:52.760385036 CEST	49721	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:52.760396004 CEST	443	49721	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:52.760987043 CEST	49720	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:52.760999918 CEST	443	49720	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:52.762191057 CEST	49722	443	192.168.2.7	151.101.66.137
Sep 27, 2024 06:00:52.762223959 CEST	443	49722	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:52.762335062 CEST	49722	443	192.168.2.7	151.101.66.137
Sep 27, 2024 06:00:52.764319897 CEST	49722	443	192.168.2.7	151.101.66.137
Sep 27, 2024 06:00:52.764338970 CEST	443	49722	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:52.765271902 CEST	49723	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:52.765283108 CEST	443	49723	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:52.765348911 CEST	49723	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:52.765943050 CEST	49723	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:52.765953064 CEST	443	49723	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:52.768238068 CEST	49724	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:52.768280983 CEST	443	49724	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:52.768342018 CEST	49724	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:52.768604994 CEST	49724	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:52.768620968 CEST	443	49724	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:52.811724901 CEST	443	49715	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:52.811750889 CEST	443	49715	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:52.811765909 CEST	443	49715	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:52.812161922 CEST	49715	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:52.812175989 CEST	443	49715	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:52.812279940 CEST	49715	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:52.815902948 CEST	443	49715	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:52.815921068 CEST	443	49715	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:52.816008091 CEST	49715	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:52.816016912 CEST	443	49715	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:52.857408047 CEST	49715	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:52.894545078 CEST	443	49715	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:52.894572020 CEST	443	49715	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:52.894665956 CEST	49715	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:52.894675016 CEST	443	49715	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:52.894720078 CEST	49715	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:52.902172089 CEST	443	49715	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:52.902259111 CEST	49715	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:52.902266026 CEST	443	49715	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:52.902282000 CEST	443	49715	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:52.902329922 CEST	49715	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:52.903003931 CEST	49715	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:52.903014898 CEST	443	49715	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:52.911241055 CEST	49725	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:52.911289930 CEST	443	49725	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:52.911355019 CEST	49725	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:52.911720991 CEST	49725	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:52.911742926 CEST	443	49725	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:53.242909908 CEST	443	49722	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:53.243205070 CEST	49722	443	192.168.2.7	151.101.66.137
Sep 27, 2024 06:00:53.243227005 CEST	443	49722	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:53.244250059 CEST	443	49722	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:53.244307995 CEST	49722	443	192.168.2.7	151.101.66.137
Sep 27, 2024 06:00:53.250349998 CEST	49722	443	192.168.2.7	151.101.66.137
Sep 27, 2024 06:00:53.250518084 CEST	443	49722	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:53.250621080 CEST	49722	443	192.168.2.7	151.101.66.137
Sep 27, 2024 06:00:53.250632048 CEST	443	49722	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:53.295814037 CEST	49722	443	192.168.2.7	151.101.66.137
Sep 27, 2024 06:00:53.347593069 CEST	443	49722	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:53.348141909 CEST	443	49722	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:53.348174095 CEST	443	49722	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:53.348196983 CEST	49722	443	192.168.2.7	151.101.66.137
Sep 27, 2024 06:00:53.348215103 CEST	443	49722	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:53.348244905 CEST	443	49722	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:53.348268986 CEST	49722	443	192.168.2.7	151.101.66.137
Sep 27, 2024 06:00:53.348274946 CEST	443	49722	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:53.348313093 CEST	49722	443	192.168.2.7	151.101.66.137
Sep 27, 2024 06:00:53.350317001 CEST	443	49722	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:53.353037119 CEST	443	49722	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:53.353075027 CEST	443	49722	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:53.353104115 CEST	49722	443	192.168.2.7	151.101.66.137
Sep 27, 2024 06:00:53.353117943 CEST	443	49722	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:53.353159904 CEST	49722	443	192.168.2.7	151.101.66.137
Sep 27, 2024 06:00:53.355846882 CEST	443	49722	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:53.355983973 CEST	443	49722	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:53.356038094 CEST	49722	443	192.168.2.7	151.101.66.137
Sep 27, 2024 06:00:53.356051922 CEST	443	49722	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:53.405487061 CEST	49722	443	192.168.2.7	151.101.66.137
Sep 27, 2024 06:00:53.406929016 CEST	443	49721	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:53.407227039 CEST	49721	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:53.407255888 CEST	443	49721	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:53.408787012 CEST	443	49721	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:53.408849955 CEST	49721	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:53.408871889 CEST	443	49723	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:53.409178019 CEST	49723	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:53.409207106 CEST	443	49723	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:53.409733057 CEST	443	49723	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:53.409790039 CEST	49721	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:53.409888029 CEST	443	49721	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:53.410299063 CEST	49723	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:53.410392046 CEST	443	49723	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:53.410628080 CEST	49721	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:53.410648108 CEST	443	49721	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:53.410846949 CEST	49723	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:53.413620949 CEST	443	49724	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:53.413894892 CEST	49724	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:53.413923979 CEST	443	49724	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:53.414833069 CEST	443	49724	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:53.414887905 CEST	49724	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:53.415256023 CEST	49724	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:53.415326118 CEST	443	49724	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:53.415417910 CEST	49724	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:53.415426970 CEST	443	49724	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:53.436172962 CEST	443	49722	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:53.436242104 CEST	443	49722	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:53.436316967 CEST	49722	443	192.168.2.7	151.101.66.137
Sep 27, 2024 06:00:53.436341047 CEST	443	49722	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:53.436513901 CEST	443	49722	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:53.436562061 CEST	49722	443	192.168.2.7	151.101.66.137
Sep 27, 2024 06:00:53.436568975 CEST	443	49722	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:53.436922073 CEST	443	49722	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:53.436973095 CEST	49722	443	192.168.2.7	151.101.66.137
Sep 27, 2024 06:00:53.436980009 CEST	443	49722	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:53.437284946 CEST	443	49722	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:53.437314034 CEST	443	49722	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:53.437354088 CEST	49722	443	192.168.2.7	151.101.66.137
Sep 27, 2024 06:00:53.437361956 CEST	443	49722	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:53.437398911 CEST	49722	443	192.168.2.7	151.101.66.137
Sep 27, 2024 06:00:53.437767982 CEST	443	49722	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:53.438755989 CEST	443	49722	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:53.438793898 CEST	443	49722	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:53.438802958 CEST	49722	443	192.168.2.7	151.101.66.137
Sep 27, 2024 06:00:53.438812017 CEST	443	49722	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:53.438853025 CEST	49722	443	192.168.2.7	151.101.66.137
Sep 27, 2024 06:00:53.438946962 CEST	443	49722	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:53.441432953 CEST	443	49722	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:53.441476107 CEST	443	49722	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:53.441523075 CEST	49722	443	192.168.2.7	151.101.66.137
Sep 27, 2024 06:00:53.441538095 CEST	443	49722	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:53.441582918 CEST	443	49722	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:53.441591978 CEST	49722	443	192.168.2.7	151.101.66.137
Sep 27, 2024 06:00:53.441597939 CEST	443	49722	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:53.441632986 CEST	49722	443	192.168.2.7	151.101.66.137
Sep 27, 2024 06:00:53.444279909 CEST	443	49722	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:53.444663048 CEST	443	49722	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:53.444686890 CEST	443	49722	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:53.444708109 CEST	443	49722	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:53.444715977 CEST	49722	443	192.168.2.7	151.101.66.137
Sep 27, 2024 06:00:53.444727898 CEST	443	49722	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:53.444763899 CEST	49722	443	192.168.2.7	151.101.66.137
Sep 27, 2024 06:00:53.450586081 CEST	49721	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:53.455410004 CEST	443	49723	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:53.465420961 CEST	49724	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:53.489964962 CEST	443	49720	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:53.490514040 CEST	49720	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:53.490536928 CEST	443	49720	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:53.491497993 CEST	443	49720	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:53.491588116 CEST	49720	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:53.492125034 CEST	49720	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:53.492211103 CEST	443	49720	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:53.492333889 CEST	49720	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:53.492341995 CEST	443	49720	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:53.524597883 CEST	443	49722	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:53.524657965 CEST	443	49722	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:53.524682045 CEST	443	49722	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:53.524707079 CEST	443	49722	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:53.524729013 CEST	443	49722	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:53.524739027 CEST	49722	443	192.168.2.7	151.101.66.137
Sep 27, 2024 06:00:53.524758101 CEST	443	49722	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:53.524811983 CEST	49722	443	192.168.2.7	151.101.66.137
Sep 27, 2024 06:00:53.524818897 CEST	443	49722	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:53.525104046 CEST	443	49722	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:53.525130033 CEST	443	49722	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:53.525192976 CEST	49722	443	192.168.2.7	151.101.66.137
Sep 27, 2024 06:00:53.525199890 CEST	443	49722	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:53.525248051 CEST	49722	443	192.168.2.7	151.101.66.137
Sep 27, 2024 06:00:53.526482105 CEST	443	49722	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:53.526489973 CEST	443	49722	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:53.526530981 CEST	443	49722	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:53.526572943 CEST	49722	443	192.168.2.7	151.101.66.137
Sep 27, 2024 06:00:53.526580095 CEST	443	49722	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:53.526622057 CEST	49722	443	192.168.2.7	151.101.66.137
Sep 27, 2024 06:00:53.526644945 CEST	49722	443	192.168.2.7	151.101.66.137
Sep 27, 2024 06:00:53.527950048 CEST	443	49722	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:53.527966976 CEST	443	49722	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:53.527997017 CEST	443	49722	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:53.528019905 CEST	49722	443	192.168.2.7	151.101.66.137
Sep 27, 2024 06:00:53.528034925 CEST	443	49722	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:53.528067112 CEST	443	49722	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:53.528073072 CEST	49722	443	192.168.2.7	151.101.66.137
Sep 27, 2024 06:00:53.528116941 CEST	49722	443	192.168.2.7	151.101.66.137
Sep 27, 2024 06:00:53.534251928 CEST	49722	443	192.168.2.7	151.101.66.137
Sep 27, 2024 06:00:53.534266949 CEST	443	49722	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:53.535422087 CEST	443	49725	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:53.536999941 CEST	49725	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:53.537017107 CEST	443	49725	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:53.537435055 CEST	443	49725	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:53.538130999 CEST	49725	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:53.538229942 CEST	443	49725	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:53.538467884 CEST	49725	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:53.544488907 CEST	49728	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:53.544534922 CEST	443	49728	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:53.544605017 CEST	49728	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:53.545260906 CEST	49728	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:53.545274019 CEST	443	49728	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:53.546304941 CEST	49720	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:53.565639973 CEST	49729	443	192.168.2.7	151.101.66.137
Sep 27, 2024 06:00:53.565668106 CEST	443	49729	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:53.565743923 CEST	49729	443	192.168.2.7	151.101.66.137
Sep 27, 2024 06:00:53.566209078 CEST	49729	443	192.168.2.7	151.101.66.137
Sep 27, 2024 06:00:53.566219091 CEST	443	49729	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:53.583401918 CEST	443	49725	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:53.679347992 CEST	443	49723	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:53.679382086 CEST	443	49723	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:53.679480076 CEST	443	49723	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:53.679533958 CEST	49723	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:53.680443048 CEST	443	49724	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:53.680479050 CEST	443	49724	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:53.680490017 CEST	443	49724	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:53.680546045 CEST	49724	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:53.680557013 CEST	443	49724	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:53.680603981 CEST	49724	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:53.708901882 CEST	443	49721	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:53.708986044 CEST	443	49721	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:53.709006071 CEST	443	49721	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:53.709045887 CEST	443	49721	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:53.709086895 CEST	443	49721	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:53.709249020 CEST	49721	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:53.709249973 CEST	49721	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:53.709280968 CEST	443	49721	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:53.709348917 CEST	49721	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:53.758986950 CEST	443	49720	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:53.759022951 CEST	443	49720	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:53.759032965 CEST	443	49720	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:53.759058952 CEST	443	49720	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:53.759062052 CEST	443	49720	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:53.759088993 CEST	49720	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:53.759123087 CEST	443	49720	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:53.759138107 CEST	49720	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:53.759140968 CEST	443	49720	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:53.759182930 CEST	49720	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:53.764044046 CEST	49723	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:53.764066935 CEST	443	49723	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:53.879092932 CEST	443	49725	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:53.879153013 CEST	443	49725	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:53.879196882 CEST	443	49725	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:53.879235983 CEST	49725	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:53.879256010 CEST	443	49725	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:53.879282951 CEST	49725	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:53.879300117 CEST	49725	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:53.879323959 CEST	443	49725	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:53.879508972 CEST	443	49725	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:53.879561901 CEST	49725	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:53.963848114 CEST	49724	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:53.963891983 CEST	443	49724	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:53.975856066 CEST	49721	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:53.975891113 CEST	443	49721	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:54.021526098 CEST	49720	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:54.021572113 CEST	443	49720	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:54.021945000 CEST	49725	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:54.021976948 CEST	443	49725	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:54.068559885 CEST	443	49729	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:54.068993092 CEST	49729	443	192.168.2.7	151.101.66.137
Sep 27, 2024 06:00:54.069015980 CEST	443	49729	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:54.070035934 CEST	443	49729	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:54.070091963 CEST	49729	443	192.168.2.7	151.101.66.137
Sep 27, 2024 06:00:54.071511984 CEST	49733	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:54.071561098 CEST	443	49733	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:54.071647882 CEST	49733	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:54.072119951 CEST	49729	443	192.168.2.7	151.101.66.137
Sep 27, 2024 06:00:54.072263002 CEST	443	49729	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:54.072477102 CEST	49729	443	192.168.2.7	151.101.66.137
Sep 27, 2024 06:00:54.072655916 CEST	49733	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:54.072671890 CEST	443	49733	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:54.073502064 CEST	49734	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:54.073517084 CEST	443	49734	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:54.073571920 CEST	49734	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:54.073864937 CEST	49734	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:54.073873997 CEST	443	49734	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:54.096868992 CEST	49735	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:54.096915960 CEST	443	49735	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:54.096978903 CEST	49735	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:54.098928928 CEST	49735	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:54.098967075 CEST	443	49735	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:54.119414091 CEST	443	49729	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:54.127098083 CEST	49729	443	192.168.2.7	151.101.66.137
Sep 27, 2024 06:00:54.127116919 CEST	443	49729	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:54.181701899 CEST	49729	443	192.168.2.7	151.101.66.137
Sep 27, 2024 06:00:54.181721926 CEST	443	49729	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:54.183856010 CEST	443	49729	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:54.183868885 CEST	443	49729	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:54.183902025 CEST	443	49729	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:54.183924913 CEST	443	49729	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:54.183932066 CEST	443	49729	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:54.183937073 CEST	49729	443	192.168.2.7	151.101.66.137
Sep 27, 2024 06:00:54.183958054 CEST	443	49729	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:54.183973074 CEST	49729	443	192.168.2.7	151.101.66.137
Sep 27, 2024 06:00:54.183978081 CEST	443	49729	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:54.183991909 CEST	49729	443	192.168.2.7	151.101.66.137
Sep 27, 2024 06:00:54.197041035 CEST	443	49728	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:54.207741976 CEST	49728	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:54.207825899 CEST	443	49728	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:54.208198071 CEST	443	49728	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:54.208775997 CEST	49728	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:54.208870888 CEST	443	49728	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:54.209148884 CEST	49728	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:54.229470968 CEST	49729	443	192.168.2.7	151.101.66.137
Sep 27, 2024 06:00:54.255425930 CEST	443	49728	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:54.263519049 CEST	443	49729	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:54.263530970 CEST	443	49729	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:54.263559103 CEST	443	49729	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:54.263572931 CEST	443	49729	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:54.263583899 CEST	443	49729	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:54.263598919 CEST	443	49729	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:54.263608932 CEST	49729	443	192.168.2.7	151.101.66.137
Sep 27, 2024 06:00:54.263631105 CEST	49729	443	192.168.2.7	151.101.66.137
Sep 27, 2024 06:00:54.263664007 CEST	49729	443	192.168.2.7	151.101.66.137
Sep 27, 2024 06:00:54.274755955 CEST	443	49729	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:54.274766922 CEST	443	49729	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:54.274805069 CEST	443	49729	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:54.274836063 CEST	49729	443	192.168.2.7	151.101.66.137
Sep 27, 2024 06:00:54.274842978 CEST	443	49729	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:54.274878025 CEST	49729	443	192.168.2.7	151.101.66.137
Sep 27, 2024 06:00:54.356969118 CEST	443	49729	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:54.356995106 CEST	443	49729	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:54.357121944 CEST	49729	443	192.168.2.7	151.101.66.137
Sep 27, 2024 06:00:54.357150078 CEST	443	49729	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:54.357189894 CEST	49729	443	192.168.2.7	151.101.66.137
Sep 27, 2024 06:00:54.359539986 CEST	443	49729	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:54.359560966 CEST	443	49729	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:54.359637976 CEST	49729	443	192.168.2.7	151.101.66.137
Sep 27, 2024 06:00:54.359653950 CEST	443	49729	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:54.360893965 CEST	49729	443	192.168.2.7	151.101.66.137
Sep 27, 2024 06:00:54.363380909 CEST	443	49729	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:54.363426924 CEST	443	49729	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:54.363496065 CEST	49729	443	192.168.2.7	151.101.66.137
Sep 27, 2024 06:00:54.363504887 CEST	443	49729	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:54.363559008 CEST	443	49729	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:54.363562107 CEST	49729	443	192.168.2.7	151.101.66.137
Sep 27, 2024 06:00:54.363595009 CEST	49729	443	192.168.2.7	151.101.66.137
Sep 27, 2024 06:00:54.373806953 CEST	49729	443	192.168.2.7	151.101.66.137
Sep 27, 2024 06:00:54.373836994 CEST	443	49729	151.101.66.137	192.168.2.7
Sep 27, 2024 06:00:54.469331980 CEST	443	49728	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:54.469357014 CEST	443	49728	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:54.469427109 CEST	49728	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:54.469432116 CEST	443	49728	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:54.469480038 CEST	49728	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:54.471118927 CEST	49728	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:54.471137047 CEST	443	49728	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:54.476269960 CEST	49739	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:54.476314068 CEST	443	49739	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:54.476418018 CEST	49739	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:54.476640940 CEST	49739	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:54.476659060 CEST	443	49739	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:54.721702099 CEST	443	49704	172.217.18.4	192.168.2.7
Sep 27, 2024 06:00:54.721770048 CEST	443	49704	172.217.18.4	192.168.2.7
Sep 27, 2024 06:00:54.721852064 CEST	49704	443	192.168.2.7	172.217.18.4
Sep 27, 2024 06:00:54.752743006 CEST	443	49735	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:54.753046989 CEST	49735	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:54.753088951 CEST	443	49735	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:54.753420115 CEST	443	49735	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:54.753784895 CEST	49735	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:54.753859043 CEST	443	49735	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:54.753973007 CEST	49735	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:54.799400091 CEST	443	49735	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:54.985454082 CEST	443	49734	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:54.985774994 CEST	49734	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:54.985806942 CEST	443	49734	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:54.986844063 CEST	443	49734	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:54.986907005 CEST	49734	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:54.987881899 CEST	49734	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:54.987993956 CEST	443	49734	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:54.988101959 CEST	49734	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:54.988115072 CEST	443	49734	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:54.988820076 CEST	443	49733	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:54.989011049 CEST	49733	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:54.989027023 CEST	443	49733	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:54.989900112 CEST	443	49733	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:54.989963055 CEST	49733	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:54.990221977 CEST	49733	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:54.990286112 CEST	443	49733	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:54.990345955 CEST	49733	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:55.027529001 CEST	49734	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:55.031409979 CEST	443	49733	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.035465002 CEST	49733	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:55.035495043 CEST	443	49733	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.054552078 CEST	443	49735	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:55.054579020 CEST	443	49735	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:55.054594994 CEST	443	49735	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:55.054642916 CEST	49735	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:55.054676056 CEST	443	49735	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:55.054704905 CEST	49735	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:55.054723024 CEST	49735	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:55.054867029 CEST	443	49735	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:55.054910898 CEST	49735	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:55.054919004 CEST	443	49735	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:55.054948092 CEST	443	49735	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:55.055001974 CEST	49735	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:55.056643009 CEST	49735	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:55.056663990 CEST	443	49735	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:55.066773891 CEST	49704	443	192.168.2.7	172.217.18.4
Sep 27, 2024 06:00:55.066814899 CEST	443	49704	172.217.18.4	192.168.2.7
Sep 27, 2024 06:00:55.089857101 CEST	49733	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:55.123135090 CEST	443	49739	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:55.123370886 CEST	49739	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:55.123397112 CEST	443	49739	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:55.123732090 CEST	443	49739	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:55.124104977 CEST	49739	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:55.124171019 CEST	443	49739	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:55.124269009 CEST	49739	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:55.171396971 CEST	443	49739	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:55.174511909 CEST	49739	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:55.210378885 CEST	443	49734	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.210407972 CEST	443	49734	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.210414886 CEST	443	49734	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.210427999 CEST	443	49734	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.210436106 CEST	443	49734	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.210489035 CEST	49734	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:55.210517883 CEST	443	49734	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.210556984 CEST	49734	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:55.211000919 CEST	443	49734	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.211061954 CEST	443	49734	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.211885929 CEST	443	49733	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.211918116 CEST	443	49733	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.211922884 CEST	49734	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:55.211929083 CEST	443	49733	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.211942911 CEST	443	49733	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.211950064 CEST	443	49733	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.211960077 CEST	443	49733	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.211966038 CEST	49733	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:55.211977005 CEST	443	49733	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.212007046 CEST	49733	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:55.212050915 CEST	49733	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:55.212055922 CEST	443	49733	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.212312937 CEST	49734	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:55.212331057 CEST	443	49734	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.212341070 CEST	49734	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:55.212862968 CEST	49734	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:55.235763073 CEST	49740	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:55.235804081 CEST	443	49740	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.235866070 CEST	49740	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:55.236133099 CEST	49740	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:55.236141920 CEST	443	49740	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.263957977 CEST	49733	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:55.304219007 CEST	443	49733	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.304229975 CEST	443	49733	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.304258108 CEST	443	49733	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.304265022 CEST	443	49733	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.304311991 CEST	49733	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:55.304331064 CEST	443	49733	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.304373026 CEST	49733	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:55.304389000 CEST	49733	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:55.385994911 CEST	443	49739	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:55.386020899 CEST	443	49739	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:55.386059999 CEST	443	49739	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:55.386092901 CEST	443	49739	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:55.386121988 CEST	49739	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:55.386168003 CEST	49739	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:55.387728930 CEST	49739	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:55.387746096 CEST	443	49739	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:55.400161982 CEST	443	49733	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.400177002 CEST	443	49733	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.400206089 CEST	443	49733	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.400238991 CEST	443	49733	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.400262117 CEST	49733	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:55.400290966 CEST	443	49733	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.400307894 CEST	49733	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:55.400329113 CEST	49733	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:55.401568890 CEST	443	49733	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.401587963 CEST	443	49733	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.401644945 CEST	49733	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:55.401654959 CEST	443	49733	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.401719093 CEST	49733	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:55.403093100 CEST	443	49733	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.403114080 CEST	443	49733	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.403160095 CEST	49733	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:55.403168917 CEST	443	49733	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.403199911 CEST	49733	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:55.403215885 CEST	49733	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:55.496172905 CEST	443	49733	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.496196985 CEST	443	49733	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.496260881 CEST	49733	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:55.496290922 CEST	443	49733	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.496320963 CEST	49733	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:55.496340990 CEST	49733	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:55.497594118 CEST	443	49733	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.497616053 CEST	443	49733	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.497687101 CEST	49733	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:55.497724056 CEST	443	49733	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.497754097 CEST	49733	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:55.497905970 CEST	49733	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:55.498220921 CEST	443	49733	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.498236895 CEST	443	49733	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.498286009 CEST	49733	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:55.498306990 CEST	443	49733	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.498328924 CEST	49733	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:55.498354912 CEST	49733	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:55.499751091 CEST	443	49733	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.499777079 CEST	443	49733	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.499857903 CEST	49733	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:55.499872923 CEST	443	49733	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.499965906 CEST	49733	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:55.500475883 CEST	443	49733	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.500502110 CEST	443	49733	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.500559092 CEST	49733	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:55.500574112 CEST	443	49733	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.500600100 CEST	49733	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:55.500623941 CEST	49733	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:55.533056974 CEST	443	49733	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.533087969 CEST	443	49733	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.533173084 CEST	49733	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:55.533195972 CEST	443	49733	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.533241987 CEST	49733	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:55.589358091 CEST	443	49733	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.589384079 CEST	443	49733	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.589463949 CEST	49733	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:55.589484930 CEST	443	49733	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.589509010 CEST	49733	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:55.589519024 CEST	49733	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:55.590121984 CEST	443	49733	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.590140104 CEST	443	49733	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.590174913 CEST	49733	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:55.590182066 CEST	443	49733	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.590226889 CEST	49733	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:55.590374947 CEST	443	49733	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.590392113 CEST	443	49733	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.590440035 CEST	49733	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:55.590446949 CEST	443	49733	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.590511084 CEST	49733	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:55.591253042 CEST	443	49733	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.591308117 CEST	49733	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:55.591315031 CEST	443	49733	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.591341972 CEST	443	49733	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.591377020 CEST	49733	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:55.593105078 CEST	49733	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:55.593120098 CEST	443	49733	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.886181116 CEST	49741	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:55.886218071 CEST	443	49741	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:55.886287928 CEST	49741	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:55.886640072 CEST	49741	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:55.886652946 CEST	443	49741	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:55.954906940 CEST	443	49740	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.955367088 CEST	49740	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:55.955395937 CEST	443	49740	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.956435919 CEST	443	49740	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.956490993 CEST	49740	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:55.957129955 CEST	49740	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:55.957178116 CEST	443	49740	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.957499027 CEST	49740	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:55.957504988 CEST	443	49740	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:55.997678041 CEST	49740	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:56.294595957 CEST	443	49740	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:56.294627905 CEST	443	49740	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:56.294636011 CEST	443	49740	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:56.294701099 CEST	443	49740	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:56.294737101 CEST	49740	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:56.294775963 CEST	443	49740	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:56.294799089 CEST	443	49740	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:56.294802904 CEST	49740	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:56.294830084 CEST	49740	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:56.294876099 CEST	49740	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:56.535761118 CEST	443	49741	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:56.575880051 CEST	49741	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:56.715267897 CEST	49741	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:56.715296030 CEST	443	49741	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:56.715823889 CEST	443	49741	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:56.762434006 CEST	49741	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:56.804043055 CEST	49741	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:56.804174900 CEST	443	49741	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:56.808865070 CEST	49741	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:56.851416111 CEST	443	49741	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:56.857717037 CEST	49740	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:56.857757092 CEST	443	49740	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:57.004179001 CEST	443	49741	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:57.004206896 CEST	443	49741	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:57.004286051 CEST	443	49741	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:57.004327059 CEST	49741	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:57.005007029 CEST	49741	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:57.005033970 CEST	443	49741	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:57.485958099 CEST	49743	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:57.486022949 CEST	443	49743	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:57.486095905 CEST	49743	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:57.486618042 CEST	49743	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:57.486634016 CEST	443	49743	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:57.497766018 CEST	49744	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:57.497807980 CEST	443	49744	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:57.497879028 CEST	49744	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:57.498300076 CEST	49744	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:57.498315096 CEST	443	49744	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:58.184175014 CEST	443	49744	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:58.184874058 CEST	49744	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:58.184900045 CEST	443	49744	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:58.185384989 CEST	443	49744	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:58.190546989 CEST	49744	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:58.190625906 CEST	443	49744	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:58.192171097 CEST	443	49743	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:58.193983078 CEST	49744	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:58.194001913 CEST	49743	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:58.194050074 CEST	443	49743	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:58.194426060 CEST	443	49743	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:58.195405006 CEST	49743	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:58.195405006 CEST	49743	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:58.195436954 CEST	443	49743	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:58.195496082 CEST	443	49743	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:58.235409975 CEST	443	49744	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:58.246766090 CEST	49743	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:58.460007906 CEST	443	49744	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:58.460037947 CEST	443	49744	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:58.460114002 CEST	443	49744	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:58.461680889 CEST	49744	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:58.504750967 CEST	49744	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:00:58.504769087 CEST	443	49744	83.217.75.108	192.168.2.7
Sep 27, 2024 06:00:58.599920034 CEST	443	49743	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:58.599951982 CEST	443	49743	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:58.599960089 CEST	443	49743	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:58.599981070 CEST	443	49743	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:58.599997997 CEST	443	49743	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:58.600008965 CEST	443	49743	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:58.600033045 CEST	49743	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:58.600055933 CEST	443	49743	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:58.600079060 CEST	49743	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:58.600395918 CEST	49743	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:58.602519989 CEST	443	49743	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:58.602535963 CEST	443	49743	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:58.602576971 CEST	443	49743	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:58.602659941 CEST	49743	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:58.602659941 CEST	49743	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:58.602674007 CEST	443	49743	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:58.653018951 CEST	49743	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:58.717911959 CEST	443	49743	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:58.717941999 CEST	443	49743	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:58.718286037 CEST	49743	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:58.718339920 CEST	443	49743	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:58.718628883 CEST	49743	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:58.721102953 CEST	443	49743	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:58.721122026 CEST	443	49743	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:58.721159935 CEST	443	49743	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:58.721193075 CEST	443	49743	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:58.721199989 CEST	49743	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:58.721218109 CEST	443	49743	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:58.721251965 CEST	49743	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:58.721290112 CEST	49743	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:58.734430075 CEST	443	49743	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:58.734445095 CEST	443	49743	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:58.734595060 CEST	49743	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:58.734613895 CEST	443	49743	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:58.778014898 CEST	49743	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:58.815887928 CEST	443	49743	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:58.815959930 CEST	443	49743	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:58.816013098 CEST	49743	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:58.816066027 CEST	443	49743	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:58.816116095 CEST	49743	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:58.818706036 CEST	49743	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:58.818913937 CEST	443	49743	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:58.818953037 CEST	443	49743	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:58.819037914 CEST	49743	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:58.819037914 CEST	49743	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:58.819056988 CEST	443	49743	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:58.820399046 CEST	443	49743	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:58.820430040 CEST	443	49743	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:58.820471048 CEST	49743	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:58.820486069 CEST	443	49743	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:58.820524931 CEST	49743	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:58.822089911 CEST	49743	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:58.845127106 CEST	443	49743	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:58.845145941 CEST	443	49743	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:58.845278025 CEST	49743	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:58.845295906 CEST	443	49743	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:58.845383883 CEST	49743	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:58.847069979 CEST	443	49743	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:58.847084045 CEST	443	49743	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:58.847229004 CEST	49743	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:58.847242117 CEST	443	49743	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:58.847300053 CEST	49743	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:58.904843092 CEST	443	49743	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:58.904870033 CEST	443	49743	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:58.904997110 CEST	49743	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:58.905028105 CEST	443	49743	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:58.906797886 CEST	49743	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:58.907259941 CEST	443	49743	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:58.907279015 CEST	443	49743	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:58.907465935 CEST	49743	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:58.907474995 CEST	443	49743	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:58.907778025 CEST	49743	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:58.909070015 CEST	443	49743	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:58.909090042 CEST	443	49743	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:58.909182072 CEST	49743	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:58.909188986 CEST	443	49743	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:58.909887075 CEST	443	49743	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:58.909979105 CEST	443	49743	193.58.4.82	192.168.2.7
Sep 27, 2024 06:00:58.909995079 CEST	49743	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:58.910082102 CEST	49743	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:58.910228014 CEST	49743	443	192.168.2.7	193.58.4.82
Sep 27, 2024 06:00:58.910250902 CEST	443	49743	193.58.4.82	192.168.2.7
Sep 27, 2024 06:01:02.387105942 CEST	49677	443	192.168.2.7	20.50.201.200
Sep 27, 2024 06:01:03.532664061 CEST	49747	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:03.532717943 CEST	443	49747	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:03.532841921 CEST	49747	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:03.533253908 CEST	49748	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:03.533368111 CEST	443	49748	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:03.533438921 CEST	49748	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:03.539006948 CEST	49748	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:03.539036989 CEST	443	49748	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:03.539803982 CEST	49747	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:03.539820910 CEST	443	49747	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:04.177001953 CEST	443	49747	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:04.177301884 CEST	49747	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:04.177336931 CEST	443	49747	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:04.177695990 CEST	443	49747	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:04.178085089 CEST	49747	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:04.178168058 CEST	443	49747	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:04.178258896 CEST	49747	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:04.188986063 CEST	443	49748	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:04.189265013 CEST	49748	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:04.189282894 CEST	443	49748	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:04.189744949 CEST	443	49748	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:04.190182924 CEST	49748	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:04.190253019 CEST	443	49748	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:04.223443985 CEST	443	49747	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:04.234021902 CEST	49748	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:04.466557980 CEST	443	49747	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:04.466593981 CEST	443	49747	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:04.466660976 CEST	443	49747	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:04.466664076 CEST	49747	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:04.466725111 CEST	49747	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:04.467794895 CEST	49747	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:04.467818975 CEST	443	49747	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:06.626066923 CEST	49750	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:06.626113892 CEST	443	49750	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:06.626199007 CEST	49750	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:06.626709938 CEST	49750	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:06.626719952 CEST	443	49750	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:06.636557102 CEST	49748	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:06.679398060 CEST	443	49748	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:06.847954988 CEST	443	49748	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:06.847990990 CEST	443	49748	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:06.848011971 CEST	443	49748	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:06.848054886 CEST	49748	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:06.848071098 CEST	443	49748	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:06.848112106 CEST	49748	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:06.848151922 CEST	443	49748	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:06.848191023 CEST	49748	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:06.883997917 CEST	49748	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:06.884031057 CEST	443	49748	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:07.368211031 CEST	443	49750	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:07.368541002 CEST	49750	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:07.368607998 CEST	443	49750	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:07.369091034 CEST	443	49750	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:07.369538069 CEST	49750	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:07.369632006 CEST	443	49750	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:07.420631886 CEST	49750	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:09.877233028 CEST	49752	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:09.877281904 CEST	443	49752	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:09.877545118 CEST	49752	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:09.879000902 CEST	49752	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:09.879019022 CEST	443	49752	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:09.885529041 CEST	49750	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:09.931422949 CEST	443	49750	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:10.157010078 CEST	443	49750	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:10.157044888 CEST	443	49750	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:10.157053947 CEST	443	49750	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:10.157072067 CEST	443	49750	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:10.157079935 CEST	443	49750	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:10.157083035 CEST	443	49750	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:10.157160044 CEST	49750	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:10.157183886 CEST	443	49750	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:10.157227039 CEST	49750	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:10.165060997 CEST	443	49750	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:10.165128946 CEST	49750	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:10.165146112 CEST	443	49750	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:10.165163040 CEST	443	49750	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:10.165205002 CEST	49750	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:10.228816986 CEST	49750	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:10.228857994 CEST	443	49750	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:10.504936934 CEST	443	49752	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:10.550199032 CEST	49752	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:10.550215006 CEST	443	49752	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:10.550544977 CEST	443	49752	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:10.551162004 CEST	49752	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:10.551214933 CEST	443	49752	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:10.591300011 CEST	49752	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:14.009484053 CEST	49753	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:14.009535074 CEST	443	49753	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:14.009603024 CEST	49753	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:14.011203051 CEST	49753	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:14.011221886 CEST	443	49753	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:14.071609974 CEST	49752	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:14.119398117 CEST	443	49752	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:14.256613970 CEST	443	49752	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:14.256642103 CEST	443	49752	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:14.256650925 CEST	443	49752	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:14.256721020 CEST	443	49752	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:14.256803036 CEST	49752	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:14.257405043 CEST	49752	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:14.258929014 CEST	49752	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:14.258929014 CEST	49752	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:14.258951902 CEST	443	49752	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:14.263084888 CEST	49752	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:14.640278101 CEST	443	49753	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:14.640899897 CEST	49753	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:14.640924931 CEST	443	49753	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:14.641819954 CEST	443	49753	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:14.642478943 CEST	49753	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:14.642623901 CEST	443	49753	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:14.642832041 CEST	49753	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:14.685769081 CEST	49753	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:14.685781956 CEST	443	49753	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:14.902045012 CEST	443	49753	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:14.902128935 CEST	443	49753	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:14.902211905 CEST	443	49753	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:14.902247906 CEST	49753	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:14.902267933 CEST	443	49753	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:14.902303934 CEST	443	49753	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:14.902333021 CEST	49753	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:14.902482033 CEST	49753	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:14.911988020 CEST	49753	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:14.912009001 CEST	443	49753	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:25.526381016 CEST	49754	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:25.526422977 CEST	443	49754	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:25.526488066 CEST	49754	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:25.526715040 CEST	49755	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:25.526767015 CEST	443	49755	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:25.526815891 CEST	49755	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:25.527046919 CEST	49754	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:25.527061939 CEST	443	49754	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:25.527311087 CEST	49755	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:25.527321100 CEST	443	49755	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:26.344147921 CEST	443	49755	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:26.344469070 CEST	49755	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:26.344480991 CEST	443	49755	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:26.344811916 CEST	443	49755	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:26.345307112 CEST	49755	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:26.345364094 CEST	443	49755	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:26.345427036 CEST	49755	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:26.361072063 CEST	443	49754	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:26.361469984 CEST	49754	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:26.361480951 CEST	443	49754	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:26.361814976 CEST	443	49754	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:26.362261057 CEST	49754	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:26.362306118 CEST	443	49754	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:26.389401913 CEST	49755	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:26.389410019 CEST	443	49755	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:26.405766964 CEST	49754	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:26.605597019 CEST	443	49755	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:26.605613947 CEST	443	49755	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:26.605665922 CEST	443	49755	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:26.605690956 CEST	443	49755	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:26.605756044 CEST	49755	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:26.605756044 CEST	49755	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:26.773516893 CEST	49755	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:26.773546934 CEST	443	49755	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:29.461098909 CEST	49706	80	192.168.2.7	5.134.4.156
Sep 27, 2024 06:01:29.465987921 CEST	80	49706	5.134.4.156	192.168.2.7
Sep 27, 2024 06:01:29.523488045 CEST	49756	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:29.523545980 CEST	443	49756	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:29.523957014 CEST	49756	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:29.524413109 CEST	49756	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:29.524426937 CEST	443	49756	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:29.528372049 CEST	49754	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:29.571402073 CEST	443	49754	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:29.813394070 CEST	443	49754	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:29.813430071 CEST	443	49754	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:29.813436985 CEST	443	49754	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:29.813498020 CEST	443	49754	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:29.813505888 CEST	49754	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:29.813533068 CEST	443	49754	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:29.813544035 CEST	443	49754	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:29.813572884 CEST	49754	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:29.813572884 CEST	49754	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:29.821120024 CEST	443	49754	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:29.821199894 CEST	443	49754	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:29.821242094 CEST	49754	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:29.821259022 CEST	49754	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:29.834059954 CEST	49754	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:29.834074020 CEST	443	49754	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:30.095870018 CEST	49705	80	192.168.2.7	5.134.4.156
Sep 27, 2024 06:01:30.100881100 CEST	80	49705	5.134.4.156	192.168.2.7
Sep 27, 2024 06:01:30.158855915 CEST	443	49756	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:30.159101009 CEST	49756	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:30.159145117 CEST	443	49756	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:30.159497023 CEST	443	49756	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:30.159944057 CEST	49756	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:30.160029888 CEST	443	49756	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:30.208400965 CEST	49756	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:32.769058943 CEST	49758	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:32.769105911 CEST	443	49758	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:32.769171953 CEST	49758	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:32.771508932 CEST	49758	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:32.771526098 CEST	443	49758	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:32.783118010 CEST	49756	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:32.827408075 CEST	443	49756	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:32.962759018 CEST	443	49756	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:32.962790966 CEST	443	49756	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:32.962833881 CEST	443	49756	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:32.962848902 CEST	49756	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:32.962878942 CEST	443	49756	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:32.962894917 CEST	443	49756	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:32.962929010 CEST	49756	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:32.964598894 CEST	49756	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:32.964621067 CEST	443	49756	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:33.407401085 CEST	443	49758	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:33.407809019 CEST	49758	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:33.407819986 CEST	443	49758	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:33.408225060 CEST	443	49758	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:33.408865929 CEST	49758	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:33.408963919 CEST	443	49758	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:33.409055948 CEST	49758	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:33.451666117 CEST	49758	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:33.451678991 CEST	443	49758	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:33.671487093 CEST	443	49758	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:33.671523094 CEST	443	49758	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:33.671565056 CEST	443	49758	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:33.671582937 CEST	49758	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:33.671595097 CEST	443	49758	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:33.671613932 CEST	443	49758	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:33.671633959 CEST	49758	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:33.671659946 CEST	49758	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:33.674132109 CEST	49758	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:33.674148083 CEST	443	49758	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:44.932949066 CEST	49706	80	192.168.2.7	5.134.4.156
Sep 27, 2024 06:01:44.933490038 CEST	49761	443	192.168.2.7	172.217.18.4
Sep 27, 2024 06:01:44.933528900 CEST	443	49761	172.217.18.4	192.168.2.7
Sep 27, 2024 06:01:44.933588028 CEST	49761	443	192.168.2.7	172.217.18.4
Sep 27, 2024 06:01:44.934217930 CEST	49761	443	192.168.2.7	172.217.18.4
Sep 27, 2024 06:01:44.934231043 CEST	443	49761	172.217.18.4	192.168.2.7
Sep 27, 2024 06:01:44.938361883 CEST	80	49706	5.134.4.156	192.168.2.7
Sep 27, 2024 06:01:44.938437939 CEST	49706	80	192.168.2.7	5.134.4.156
Sep 27, 2024 06:01:45.597431898 CEST	443	49761	172.217.18.4	192.168.2.7
Sep 27, 2024 06:01:45.639018059 CEST	49761	443	192.168.2.7	172.217.18.4
Sep 27, 2024 06:01:45.645942926 CEST	49761	443	192.168.2.7	172.217.18.4
Sep 27, 2024 06:01:45.645950079 CEST	443	49761	172.217.18.4	192.168.2.7
Sep 27, 2024 06:01:45.646893024 CEST	49762	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:45.646922112 CEST	443	49762	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:45.647028923 CEST	49762	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:45.647192001 CEST	443	49761	172.217.18.4	192.168.2.7
Sep 27, 2024 06:01:45.647206068 CEST	49763	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:45.647260904 CEST	443	49763	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:45.647339106 CEST	49763	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:45.648382902 CEST	49762	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:45.648401022 CEST	443	49762	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:45.649069071 CEST	49761	443	192.168.2.7	172.217.18.4
Sep 27, 2024 06:01:45.649276972 CEST	443	49761	172.217.18.4	192.168.2.7
Sep 27, 2024 06:01:45.649358034 CEST	49763	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:45.649372101 CEST	443	49763	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:45.689512968 CEST	49761	443	192.168.2.7	172.217.18.4
Sep 27, 2024 06:01:46.272133112 CEST	443	49762	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:46.283901930 CEST	443	49763	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:46.455401897 CEST	49762	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:46.456845999 CEST	49763	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:47.112451077 CEST	49763	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:47.112512112 CEST	443	49763	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:47.112900019 CEST	49762	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:47.112922907 CEST	443	49762	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:47.113439083 CEST	443	49762	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:47.114016056 CEST	443	49763	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:47.114795923 CEST	49762	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:47.114871025 CEST	443	49762	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:47.115137100 CEST	49763	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:47.115231037 CEST	443	49763	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:47.115529060 CEST	49762	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:47.155683041 CEST	49763	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:47.163407087 CEST	443	49762	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:47.380081892 CEST	443	49762	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:47.380109072 CEST	443	49762	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:47.380115986 CEST	443	49762	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:47.380140066 CEST	443	49762	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:47.380148888 CEST	443	49762	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:47.380156994 CEST	443	49762	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:47.380321026 CEST	49762	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:47.380321026 CEST	49762	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:47.380332947 CEST	443	49762	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:47.380381107 CEST	49762	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:47.385710001 CEST	443	49762	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:47.385724068 CEST	443	49762	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:47.385782957 CEST	49762	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:47.385801077 CEST	443	49762	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:47.385838032 CEST	49762	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:47.385948896 CEST	49762	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:47.386297941 CEST	49762	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:47.386313915 CEST	443	49762	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:50.112222910 CEST	80	49705	5.134.4.156	192.168.2.7
Sep 27, 2024 06:01:50.112417936 CEST	49705	80	192.168.2.7	5.134.4.156
Sep 27, 2024 06:01:51.014780045 CEST	49705	80	192.168.2.7	5.134.4.156
Sep 27, 2024 06:01:51.032613993 CEST	80	49705	5.134.4.156	192.168.2.7
Sep 27, 2024 06:01:54.068995953 CEST	49764	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:54.069055080 CEST	443	49764	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:54.069153070 CEST	49764	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:54.069777966 CEST	49764	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:54.069792032 CEST	443	49764	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:54.097083092 CEST	49763	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:54.139447927 CEST	443	49763	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:54.282710075 CEST	443	49763	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:54.282732964 CEST	443	49763	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:54.282741070 CEST	443	49763	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:54.282767057 CEST	443	49763	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:54.282798052 CEST	49763	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:54.282835960 CEST	443	49763	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:54.282850027 CEST	49763	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:54.282897949 CEST	49763	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:54.285319090 CEST	49763	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:54.285341024 CEST	443	49763	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:54.721793890 CEST	443	49764	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:54.752262115 CEST	49764	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:54.752274036 CEST	443	49764	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:54.752675056 CEST	443	49764	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:54.772311926 CEST	49764	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:54.772403002 CEST	443	49764	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:54.772742987 CEST	49764	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:54.819395065 CEST	443	49764	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:55.014168024 CEST	443	49764	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:55.014194965 CEST	443	49764	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:55.014204025 CEST	443	49764	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:55.014269114 CEST	443	49764	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:55.014286995 CEST	49764	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:55.014334917 CEST	49764	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:55.015026093 CEST	49764	443	192.168.2.7	83.217.75.108
Sep 27, 2024 06:01:55.015054941 CEST	443	49764	83.217.75.108	192.168.2.7
Sep 27, 2024 06:01:55.498073101 CEST	443	49761	172.217.18.4	192.168.2.7
Sep 27, 2024 06:01:55.498162031 CEST	443	49761	172.217.18.4	192.168.2.7
Sep 27, 2024 06:01:55.498310089 CEST	49761	443	192.168.2.7	172.217.18.4
Sep 27, 2024 06:01:57.373790979 CEST	49761	443	192.168.2.7	172.217.18.4
Sep 27, 2024 06:01:57.373825073 CEST	443	49761	172.217.18.4	192.168.2.7

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 27, 2024 06:00:43.195077896 CEST	53	55174	1.1.1.1	192.168.2.7
Sep 27, 2024 06:00:43.196368933 CEST	53	53511	1.1.1.1	192.168.2.7
Sep 27, 2024 06:00:44.138391018 CEST	61893	53	192.168.2.7	1.1.1.1
Sep 27, 2024 06:00:44.138601065 CEST	65023	53	192.168.2.7	1.1.1.1
Sep 27, 2024 06:00:44.145169020 CEST	53	65023	1.1.1.1	192.168.2.7
Sep 27, 2024 06:00:44.145330906 CEST	53	61893	1.1.1.1	192.168.2.7
Sep 27, 2024 06:00:44.269407034 CEST	53	51136	1.1.1.1	192.168.2.7
Sep 27, 2024 06:00:44.371747017 CEST	52527	53	192.168.2.7	1.1.1.1
Sep 27, 2024 06:00:44.371895075 CEST	51395	53	192.168.2.7	1.1.1.1
Sep 27, 2024 06:00:44.420574903 CEST	53	51395	1.1.1.1	192.168.2.7
Sep 27, 2024 06:00:44.449443102 CEST	53	52527	1.1.1.1	192.168.2.7
Sep 27, 2024 06:00:44.986471891 CEST	123	123	192.168.2.7	13.95.65.251
Sep 27, 2024 06:00:45.156445980 CEST	123	123	13.95.65.251	192.168.2.7
Sep 27, 2024 06:00:45.306405067 CEST	61500	53	192.168.2.7	1.1.1.1
Sep 27, 2024 06:00:45.306555033 CEST	49452	53	192.168.2.7	1.1.1.1
Sep 27, 2024 06:00:45.338859081 CEST	53	49452	1.1.1.1	192.168.2.7
Sep 27, 2024 06:00:45.343233109 CEST	53	61500	1.1.1.1	192.168.2.7
Sep 27, 2024 06:00:46.554567099 CEST	53588	53	192.168.2.7	1.1.1.1
Sep 27, 2024 06:00:46.555113077 CEST	51521	53	192.168.2.7	1.1.1.1
Sep 27, 2024 06:00:46.592524052 CEST	53	51521	1.1.1.1	192.168.2.7
Sep 27, 2024 06:00:46.622282028 CEST	53	53588	1.1.1.1	192.168.2.7
Sep 27, 2024 06:00:48.027570009 CEST	51623	53	192.168.2.7	1.1.1.1
Sep 27, 2024 06:00:48.028434038 CEST	51732	53	192.168.2.7	1.1.1.1
Sep 27, 2024 06:00:48.043144941 CEST	53	51732	1.1.1.1	192.168.2.7
Sep 27, 2024 06:00:48.048048973 CEST	53	51623	1.1.1.1	192.168.2.7
Sep 27, 2024 06:00:52.745724916 CEST	63996	53	192.168.2.7	1.1.1.1
Sep 27, 2024 06:00:52.746221066 CEST	53998	53	192.168.2.7	1.1.1.1
Sep 27, 2024 06:00:52.752814054 CEST	53	63996	1.1.1.1	192.168.2.7
Sep 27, 2024 06:00:52.753686905 CEST	58806	53	192.168.2.7	1.1.1.1
Sep 27, 2024 06:00:52.754029989 CEST	64840	53	192.168.2.7	1.1.1.1
Sep 27, 2024 06:00:52.759531975 CEST	53	53998	1.1.1.1	192.168.2.7
Sep 27, 2024 06:00:52.760663986 CEST	53	64840	1.1.1.1	192.168.2.7
Sep 27, 2024 06:00:52.760845900 CEST	53	58806	1.1.1.1	192.168.2.7
Sep 27, 2024 06:00:52.918337107 CEST	53	55017	1.1.1.1	192.168.2.7
Sep 27, 2024 06:00:53.554661989 CEST	55937	53	192.168.2.7	1.1.1.1
Sep 27, 2024 06:00:53.554945946 CEST	65400	53	192.168.2.7	1.1.1.1
Sep 27, 2024 06:00:53.561713934 CEST	53	65400	1.1.1.1	192.168.2.7
Sep 27, 2024 06:00:53.561943054 CEST	53	55937	1.1.1.1	192.168.2.7
Sep 27, 2024 06:00:54.041121006 CEST	60428	53	192.168.2.7	1.1.1.1
Sep 27, 2024 06:00:54.041511059 CEST	50469	53	192.168.2.7	1.1.1.1
Sep 27, 2024 06:00:54.068394899 CEST	53	60428	1.1.1.1	192.168.2.7
Sep 27, 2024 06:00:54.069708109 CEST	53	50469	1.1.1.1	192.168.2.7
Sep 27, 2024 06:00:55.221162081 CEST	55733	53	192.168.2.7	1.1.1.1
Sep 27, 2024 06:00:55.221491098 CEST	54777	53	192.168.2.7	1.1.1.1
Sep 27, 2024 06:00:55.228837967 CEST	53	55733	1.1.1.1	192.168.2.7
Sep 27, 2024 06:00:55.235397100 CEST	53	54777	1.1.1.1	192.168.2.7
Sep 27, 2024 06:00:55.892395973 CEST	53	63867	1.1.1.1	192.168.2.7
Sep 27, 2024 06:01:01.566431046 CEST	53	53157	1.1.1.1	192.168.2.7
Sep 27, 2024 06:01:20.566386938 CEST	53	58273	1.1.1.1	192.168.2.7
Sep 27, 2024 06:01:35.988797903 CEST	138	138	192.168.2.7	192.168.2.255
Sep 27, 2024 06:01:43.090150118 CEST	53	54832	1.1.1.1	192.168.2.7
Sep 27, 2024 06:01:43.333739996 CEST	53	51552	1.1.1.1	192.168.2.7
Sep 27, 2024 06:01:54.085407019 CEST	53	62234	1.1.1.1	192.168.2.7
Sep 27, 2024 06:02:14.598771095 CEST	53	64515	1.1.1.1	192.168.2.7

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Sep 27, 2024 06:00:52.759615898 CEST	192.168.2.7	1.1.1.1	c231	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 27, 2024 06:00:44.138391018 CEST	192.168.2.7	1.1.1.1	0x33b	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:00:44.138601065 CEST	192.168.2.7	1.1.1.1	0x69ba	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 27, 2024 06:00:44.371747017 CEST	192.168.2.7	1.1.1.1	0x8f8b	Standard query (0)	www.mywelcomepackreward.be	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:00:44.371895075 CEST	192.168.2.7	1.1.1.1	0xa13e	Standard query (0)	www.mywelcomepackreward.be	65	IN (0x0001)	false
Sep 27, 2024 06:00:45.306405067 CEST	192.168.2.7	1.1.1.1	0x3702	Standard query (0)	www.mywelcomepackreward.be	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:00:45.306555033 CEST	192.168.2.7	1.1.1.1	0xb2af	Standard query (0)	www.mywelcomepackreward.be	65	IN (0x0001)	false
Sep 27, 2024 06:00:46.554567099 CEST	192.168.2.7	1.1.1.1	0xa316	Standard query (0)	mywelcomepackreward.be	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:00:46.555113077 CEST	192.168.2.7	1.1.1.1	0x5930	Standard query (0)	mywelcomepackreward.be	65	IN (0x0001)	false
Sep 27, 2024 06:00:48.027570009 CEST	192.168.2.7	1.1.1.1	0x41e1	Standard query (0)	reward.bnpparibasfortis.be	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:00:48.028434038 CEST	192.168.2.7	1.1.1.1	0x20c2	Standard query (0)	reward.bnpparibasfortis.be	65	IN (0x0001)	false
Sep 27, 2024 06:00:52.745724916 CEST	192.168.2.7	1.1.1.1	0xa1c1	Standard query (0)	reward.bnpparibasfortis.be	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:00:52.746221066 CEST	192.168.2.7	1.1.1.1	0x932e	Standard query (0)	reward.bnpparibasfortis.be	65	IN (0x0001)	false
Sep 27, 2024 06:00:52.753686905 CEST	192.168.2.7	1.1.1.1	0x977f	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:00:52.754029989 CEST	192.168.2.7	1.1.1.1	0x7391	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Sep 27, 2024 06:00:53.554661989 CEST	192.168.2.7	1.1.1.1	0x757e	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:00:53.554945946 CEST	192.168.2.7	1.1.1.1	0x53a9	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Sep 27, 2024 06:00:54.041121006 CEST	192.168.2.7	1.1.1.1	0x2d9b	Standard query (0)	www.bnpparibasfortis.be	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:00:54.041511059 CEST	192.168.2.7	1.1.1.1	0xb4c7	Standard query (0)	www.bnpparibasfortis.be	65	IN (0x0001)	false
Sep 27, 2024 06:00:55.221162081 CEST	192.168.2.7	1.1.1.1	0xe01a	Standard query (0)	www.bnpparibasfortis.be	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:00:55.221491098 CEST	192.168.2.7	1.1.1.1	0x1110	Standard query (0)	www.bnpparibasfortis.be	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Sep 27, 2024 06:00:44.145169020 CEST	1.1.1.1	192.168.2.7	0x69ba	No error (0)	www.google.com		65	IN (0x0001)	false
Sep 27, 2024 06:00:44.145330906 CEST	1.1.1.1	192.168.2.7	0x33b	No error (0)	www.google.com	172.217.18.4	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:00:44.449443102 CEST	1.1.1.1	192.168.2.7	0x8f8b	No error (0)	www.mywelcomepackreward.be	5.134.4.156	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:00:45.343233109 CEST	1.1.1.1	192.168.2.7	0x3702	No error (0)	www.mywelcomepackreward.be	5.134.4.156	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:00:46.622282028 CEST	1.1.1.1	192.168.2.7	0xa316	No error (0)	mywelcomepackreward.be	5.134.4.156	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:00:48.048048973 CEST	1.1.1.1	192.168.2.7	0x41e1	No error (0)	reward.bnpparibasfortis.be	83.217.75.108	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:00:52.752814054 CEST	1.1.1.1	192.168.2.7	0xa1c1	No error (0)	reward.bnpparibasfortis.be	83.217.75.108	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:00:52.760845900 CEST	1.1.1.1	192.168.2.7	0x977f	No error (0)	code.jquery.com	151.101.66.137	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:00:52.760845900 CEST	1.1.1.1	192.168.2.7	0x977f	No error (0)	code.jquery.com	151.101.194.137	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:00:52.760845900 CEST	1.1.1.1	192.168.2.7	0x977f	No error (0)	code.jquery.com	151.101.2.137	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:00:52.760845900 CEST	1.1.1.1	192.168.2.7	0x977f	No error (0)	code.jquery.com	151.101.130.137	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:00:53.101866007 CEST	1.1.1.1	192.168.2.7	0x3103	No error (0)	bg.microsoft.map.fastly.net	199.232.210.172	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:00:53.101866007 CEST	1.1.1.1	192.168.2.7	0x3103	No error (0)	bg.microsoft.map.fastly.net	199.232.214.172	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:00:53.561943054 CEST	1.1.1.1	192.168.2.7	0x757e	No error (0)	code.jquery.com	151.101.66.137	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:00:53.561943054 CEST	1.1.1.1	192.168.2.7	0x757e	No error (0)	code.jquery.com	151.101.194.137	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:00:53.561943054 CEST	1.1.1.1	192.168.2.7	0x757e	No error (0)	code.jquery.com	151.101.2.137	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:00:53.561943054 CEST	1.1.1.1	192.168.2.7	0x757e	No error (0)	code.jquery.com	151.101.130.137	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:00:54.068394899 CEST	1.1.1.1	192.168.2.7	0x2d9b	No error (0)	www.bnpparibasfortis.be	193.58.4.82	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:00:55.228837967 CEST	1.1.1.1	192.168.2.7	0xe01a	No error (0)	www.bnpparibasfortis.be	193.58.4.82	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:06.934854031 CEST	1.1.1.1	192.168.2.7	0xe5ca	No error (0)	bg.microsoft.map.fastly.net	199.232.210.172	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:06.934854031 CEST	1.1.1.1	192.168.2.7	0xe5ca	No error (0)	bg.microsoft.map.fastly.net	199.232.214.172	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:35.676417112 CEST	1.1.1.1	192.168.2.7	0xaf61	No error (0)	bg.microsoft.map.fastly.net	199.232.214.172	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:35.676417112 CEST	1.1.1.1	192.168.2.7	0xaf61	No error (0)	bg.microsoft.map.fastly.net	199.232.210.172	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

www.mywelcomepackreward.be

mywelcomepackreward.be

reward.bnpparibasfortis.be

fs.microsoft.com

https:

code.jquery.com

www.bnpparibasfortis.be

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49705	5.134.4.156	80	5312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 27, 2024 06:00:44.455509901 CEST	441	OUT	GET / HTTP/1.1 Host: www.mywelcomepackreward.be Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 27, 2024 06:00:45.088227987 CEST	365	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Fri, 27 Sep 2024 04:00:45 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Location: https://www.mywelcomepackreward.be/ Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>
Sep 27, 2024 06:01:30.095870018 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.7	49706	5.134.4.156	80	5312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 27, 2024 06:01:29.461098909 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49707	5.134.4.156	443	5312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:00:46 UTC	669	OUT	GET / HTTP/1.1 Host: www.mywelcomepackreward.be Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:00:46 UTC	280	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Fri, 27 Sep 2024 04:00:46 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 239 Connection: close Location: https://mywelcomepackreward.be/ Cache-Control: max-age=0 Expires: Fri, 27 Sep 2024 04:00:46 GMT
2024-09-27 04:00:46 UTC	239	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 79 77 65 6c 63 6f 6d 65 70 61 63 6b 72 65 77 61 72 64 2e 62 65 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://mywelcomepackreward.be/">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.7	49710	5.134.4.156	443	5312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:00:47 UTC	665	OUT	GET / HTTP/1.1 Host: mywelcomepackreward.be Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:00:47 UTC	335	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 27 Sep 2024 04:00:47 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close Location: https://reward.bnpparibasfortis.be/ Cache-Control: max-age=0 Expires: Fri, 27 Sep 2024 04:00:47 GMT X-Frame-Options: DENY X-UA-Compatible: IE=Edge,chrome=1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.7	49711	83.217.75.108	443	5312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:00:48 UTC	669	OUT	GET / HTTP/1.1 Host: reward.bnpparibasfortis.be Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:00:48 UTC	529	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 27 Sep 2024 04:00:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Set-Cookie: PHPSESSID=t52pb1i7e8qg4530a9bsrst2m2; path=/; domain=reward.bnpparibasfortis.be; secure; HttpOnly Location: https://reward.bnpparibasfortis.be/en/ X-Frame-Options: DENY X-UA-Compatible: IE=Edge,chrome=1
2024-09-27 04:00:48 UTC	7161	IN	Data Raw: 31 62 65 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 21 2d 2d 5b 69 66 20 49 45 5d 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 69 6d 61 67 65 74 6f 6f 6c 62 61 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 20 63 6f Data Ascii: 1bec<!DOCTYPE html><html class="no-js" lang="en"><head> <meta charset="utf-8"> <meta http-equiv="x-ua-compatible" content="ie=edge"> ...[if IE]><meta http-equiv="imagetoolbar" content="no"><![endif]--> <meta name="format-detection" co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.7	49712	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:00:49 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-27 04:00:50 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=45925 Date: Fri, 27 Sep 2024 04:00:49 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.7	49713	83.217.75.108	443	5312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:00:51 UTC	718	OUT	GET /en/ HTTP/1.1 Host: reward.bnpparibasfortis.be Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=t52pb1i7e8qg4530a9bsrst2m2
2024-09-27 04:00:51 UTC	630	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 04:00:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Set-Cookie: PHPSESSID=eagqj4746f62pt7vm5ebioip55; path=/; domain=reward.bnpparibasfortis.be; secure; HttpOnly Set-Cookie: language=en; expires=Sat, 27-Sep-2025 04:00:51 GMT; Max-Age=31536000; path=/; domain=reward.bnpparibasfortis.be; secure; httponly Vary: Accept-Encoding X-Frame-Options: DENY X-UA-Compatible: IE=Edge,chrome=1
2024-09-27 04:00:51 UTC	7161	IN	Data Raw: 31 62 65 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 21 2d 2d 5b 69 66 20 49 45 5d 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 69 6d 61 67 65 74 6f 6f 6c 62 61 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 20 63 6f Data Ascii: 1bec<!DOCTYPE html><html class="no-js" lang="en"><head> <meta charset="utf-8"> <meta http-equiv="x-ua-compatible" content="ie=edge"> ...[if IE]><meta http-equiv="imagetoolbar" content="no"><![endif]--> <meta name="format-detection" co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.7	49714	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:00:51 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-27 04:00:51 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=45869 Date: Fri, 27 Sep 2024 04:00:51 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-27 04:00:51 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.7	49715	83.217.75.108	443	5312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:00:52 UTC	660	OUT	GET /css/main.css?v=3accddf64b1dd03abeb9b0b3e5a7ba44 HTTP/1.1 Host: reward.bnpparibasfortis.be Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://reward.bnpparibasfortis.be/en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=eagqj4746f62pt7vm5ebioip55; language=en
2024-09-27 04:00:52 UTC	339	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 04:00:52 GMT Content-Type: text/css; charset=utf-8 Content-Length: 58351 Connection: close Last-Modified: Tue, 22 May 2018 17:25:56 GMT Accept-Ranges: bytes Cache-Control: max-age=31536000 Expires: Sat, 27 Sep 2025 04:00:52 GMT Vary: Accept-Encoding X-Frame-Options: DENY
2024-09-27 04:00:52 UTC	16045	IN	Data Raw: ef bb bf 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 33 2e 30 2e 33 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 6e 65 63 6f 6c 61 73 2f 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 2a 2f 40 69 6d 70 6f 72 74 20 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4f 70 65 6e 2b 53 61 6e 73 3a 34 30 30 2c 36 30 30 2c 37 30 30 2c 33 30 30 22 29 3b 40 69 6d 70 6f 72 74 20 75 72 6c 28 22 73 71 75 61 72 65 2f 67 72 65 65 6e 2e 63 73 73 22 29 3b 68 74 6d 6c 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 61 6e 73 2d 73 65 72 69 66 3b 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 74 Data Ascii: /! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css /@import url("https://fonts.googleapis.com/css?family=Open+Sans:400,600,700,300");@import url("square/green.css");html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-t
2024-09-27 04:00:52 UTC	16384	IN	Data Raw: 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 35 30 30 70 78 29 7b 2e 63 68 6f 69 63 65 5f 65 78 74 72 61 5f 69 6e 6e 65 72 5f 72 20 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 38 70 78 7d 7d 2e 63 68 6f 69 63 65 5f 65 78 74 72 61 5f 69 6e 6e 65 72 5f 72 20 2e 74 78 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 3b 6d 61 72 67 69 6e 3a 32 30 70 78 20 30 20 30 20 30 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 30 2e 30 33 65 6d 3b 63 6f 6c 6f 72 3a 23 36 30 36 30 36 30 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 35 30 30 70 78 29 7b Data Ascii: en and (max-width: 500px){.choice_extra_inner_r h1{font-size:20px;line-height:28px}}.choice_extra_inner_r .txt{font-size:14px;line-height:24px;margin:20px 0 0 0;font-weight:300;letter-spacing:0.03em;color:#606060}@media only screen and (max-width: 500px){
2024-09-27 04:00:52 UTC	16384	IN	Data Raw: 20 66 61 2d 73 70 69 6e 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 7d 7d 2e 66 61 2d 72 6f 74 61 74 65 2d 39 30 7b 2d 6d 73 2d 66 69 6c 74 65 72 3a 22 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 42 61 73 69 63 49 6d 61 67 65 28 72 6f 74 61 74 69 6f 6e 3d 31 29 22 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 39 30 64 65 67 29 3b 2d 6d 73 2d 74 72 61 6e 73 Data Ascii: fa-spin{0%{-webkit-transform:rotate(0deg);transform:rotate(0deg)}100%{-webkit-transform:rotate(359deg);transform:rotate(359deg)}}.fa-rotate-90{-ms-filter:"progid:DXImageTransform.Microsoft.BasicImage(rotation=1)";-webkit-transform:rotate(90deg);-ms-trans
2024-09-27 04:00:52 UTC	9538	IN	Data Raw: 7d 2e 66 61 2d 61 75 74 6f 6d 6f 62 69 6c 65 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 63 61 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 86 b9 22 7d 2e 66 61 2d 63 61 62 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 74 61 78 69 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 86 ba 22 7d 2e 66 61 2d 74 72 65 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 86 bb 22 7d 2e 66 61 2d 73 70 6f 74 69 66 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 86 bc 22 7d 2e 66 61 2d 64 65 76 69 61 6e 74 61 72 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 86 bd 22 7d 2e 66 61 2d 73 6f 75 6e 64 63 6c 6f 75 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 86 be 22 7d 2e 66 61 2d 64 61 74 61 62 61 73 65 3a 62 65 66 6f 72 65 7b 63 6f 6e Data Ascii: }.fa-automobile:before,.fa-car:before{content:""}.fa-cab:before,.fa-taxi:before{content:""}.fa-tree:before{content:""}.fa-spotify:before{content:""}.fa-deviantart:before{content:""}.fa-soundcloud:before{content:""}.fa-database:before{con

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.7	49718	83.217.75.108	443	5312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:00:52 UTC	631	OUT	GET /js/vendor/modernizr-2.8.3.min.js HTTP/1.1 Host: reward.bnpparibasfortis.be Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://reward.bnpparibasfortis.be/en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=eagqj4746f62pt7vm5ebioip55; language=en
2024-09-27 04:00:52 UTC	353	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 04:00:52 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 15514 Connection: close Last-Modified: Tue, 22 May 2018 17:26:17 GMT Accept-Ranges: bytes Cache-Control: max-age=31536000 Expires: Sat, 27 Sep 2025 04:00:52 GMT Vary: Accept-Encoding X-Frame-Options: DENY
2024-09-27 04:00:52 UTC	15514	IN	Data Raw: 2f 2a 20 4d 6f 64 65 72 6e 69 7a 72 20 32 2e 38 2e 33 20 28 43 75 73 74 6f 6d 20 42 75 69 6c 64 29 20 7c 20 4d 49 54 20 26 20 42 53 44 0a 20 2a 20 42 75 69 6c 64 3a 20 68 74 74 70 3a 2f 2f 6d 6f 64 65 72 6e 69 7a 72 2e 63 6f 6d 2f 64 6f 77 6e 6c 6f 61 64 2f 23 2d 66 6f 6e 74 66 61 63 65 2d 62 61 63 6b 67 72 6f 75 6e 64 73 69 7a 65 2d 62 6f 72 64 65 72 69 6d 61 67 65 2d 62 6f 72 64 65 72 72 61 64 69 75 73 2d 62 6f 78 73 68 61 64 6f 77 2d 66 6c 65 78 62 6f 78 2d 68 73 6c 61 2d 6d 75 6c 74 69 70 6c 65 62 67 73 2d 6f 70 61 63 69 74 79 2d 72 67 62 61 2d 74 65 78 74 73 68 61 64 6f 77 2d 63 73 73 61 6e 69 6d 61 74 69 6f 6e 73 2d 63 73 73 63 6f 6c 75 6d 6e 73 2d 67 65 6e 65 72 61 74 65 64 63 6f 6e 74 65 6e 74 2d 63 73 73 67 72 61 64 69 65 6e 74 73 2d 63 73 73 72 Data Ascii: /* Modernizr 2.8.3 (Custom Build) \| MIT & BSD * Build: http://modernizr.com/download/#-fontface-backgroundsize-borderimage-borderradius-boxshadow-flexbox-hsla-multiplebgs-opacity-rgba-textshadow-cssanimations-csscolumns-generatedcontent-cssgradients-cssr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.7	49717	83.217.75.108	443	5312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:00:52 UTC	674	OUT	GET /images/logo.png HTTP/1.1 Host: reward.bnpparibasfortis.be Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://reward.bnpparibasfortis.be/en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=eagqj4746f62pt7vm5ebioip55; language=en
2024-09-27 04:00:52 UTC	300	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 04:00:52 GMT Content-Type: image/png Content-Length: 8089 Connection: close Last-Modified: Tue, 22 May 2018 17:25:58 GMT Accept-Ranges: bytes Cache-Control: max-age=2592000 Expires: Sun, 27 Oct 2024 04:00:52 GMT X-Frame-Options: DENY
2024-09-27 04:00:52 UTC	8089	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 02 00 00 00 3a 08 06 00 00 00 5b 11 57 24 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 6b 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 35 2d 63 30 32 31 20 37 39 2e 31 35 34 39 31 31 2c 20 32 30 31 33 2f 31 30 2f 32 39 2d 31 31 3a 34 37 3a 31 36 20 20 Data Ascii: PNGIHDR:[W$tEXtSoftwareAdobe ImageReadyqe<kiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.154911, 2013/10/29-11:47:16

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.7	49716	83.217.75.108	443	5312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:00:52 UTC	676	OUT	GET /images/cadeau.png HTTP/1.1 Host: reward.bnpparibasfortis.be Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://reward.bnpparibasfortis.be/en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=eagqj4746f62pt7vm5ebioip55; language=en
2024-09-27 04:00:52 UTC	300	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 04:00:52 GMT Content-Type: image/png Content-Length: 9377 Connection: close Last-Modified: Tue, 22 May 2018 17:25:58 GMT Accept-Ranges: bytes Cache-Control: max-age=2592000 Expires: Sun, 27 Oct 2024 04:00:52 GMT X-Frame-Options: DENY
2024-09-27 04:00:52 UTC	9377	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 32 00 00 01 86 08 06 00 00 00 f8 9d 0d a6 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 6b 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 35 2d 63 30 32 31 20 37 39 2e 31 35 34 39 31 31 2c 20 32 30 31 33 2f 31 30 2f 32 39 2d 31 31 3a 34 37 3a 31 36 20 20 Data Ascii: PNGIHDR2tEXtSoftwareAdobe ImageReadyqe<kiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.154911, 2013/10/29-11:47:16

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.7	49722	151.101.66.137	443	5312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:00:53 UTC	545	OUT	GET /jquery-1.12.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://reward.bnpparibasfortis.be/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:00:53 UTC	610	IN	HTTP/1.1 200 OK Connection: close Content-Length: 97362 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-17c52" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 843321 Date: Fri, 27 Sep 2024 04:00:53 GMT X-Served-By: cache-lga21956-LGA, cache-ewr-kewr1740075-EWR X-Cache: HIT, HIT X-Cache-Hits: 52, 0 X-Timer: S1727409653.300496,VS0,VE1 Vary: Accept-Encoding
2024-09-27 04:00:53 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 31 2e 31 32 2e 30 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 69 74 68 20 61 20 64 6f 63 75 6d 65 Data Ascii: /! jQuery v1.12.0 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a docume
2024-09-27 04:00:53 UTC	1378	IN	Data Raw: 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 68 3d 31 2c 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6a 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 67 26 26 28 6a 3d 67 2c 67 3d 61 72 67 75 6d 65 6e 74 73 5b 68 5d 7c 7c 7b 7d 2c 68 2b 2b 29 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 7c 7c 6e 2e 69 73 46 75 6e 63 74 69 6f 6e 28 67 29 7c 7c 28 67 3d 7b 7d 29 2c 68 3d 3d 3d 69 26 26 28 67 3d 74 68 69 73 2c 68 2d 2d 29 3b 69 3e 68 3b 68 2b 2b 29 69 66 28 6e 75 6c 6c 21 3d 28 65 3d 61 72 67 75 6d 65 6e 74 73 5b 68 5d 29 29 66 6f 72 28 64 20 69 6e 20 65 29 61 3d 67 5b 64 5d 2c 63 3d 65 5b 64 5d 2c 67 21 3d 3d 63 26 26 28 6a 26 26 63 26 26 28 6e 2e 69 73 50 Data Ascii: ,b,c,d,e,f,g=arguments[0]\|\|{},h=1,i=arguments.length,j=!1;for("boolean"==typeof g&&(j=g,g=arguments[h]\|\|{},h++),"object"==typeof g\|\|n.isFunction(g)\|\|(g={}),h===i&&(g=this,h--);i>h;h++)if(null!=(e=arguments[h]))for(d in e)a=g[d],c=e[d],g!==c&&(j&&c&&(n.isP
2024-09-27 04:00:53 UTC	1378	IN	Data Raw: 65 74 75 72 6e 20 61 2e 72 65 70 6c 61 63 65 28 70 2c 22 6d 73 2d 22 29 2e 72 65 70 6c 61 63 65 28 71 2c 72 29 7d 2c 6e 6f 64 65 4e 61 6d 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 2e 6e 6f 64 65 4e 61 6d 65 26 26 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 3d 30 3b 69 66 28 73 28 61 29 29 7b 66 6f 72 28 63 3d 61 2e 6c 65 6e 67 74 68 3b 63 3e 64 3b 64 2b 2b 29 69 66 28 62 2e 63 61 6c 6c 28 61 5b 64 5d 2c 64 2c 61 5b 64 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 7d 65 6c 73 65 20 66 6f 72 28 64 20 69 6e 20 61 29 69 66 28 62 2e 63 61 6c 6c 28 61 5b 64 5d 2c 64 2c 61 5b Data Ascii: eturn a.replace(p,"ms-").replace(q,r)},nodeName:function(a,b){return a.nodeName&&a.nodeName.toLowerCase()===b.toLowerCase()},each:function(a,b){var c,d=0;if(s(a)){for(c=a.length;c>d;d++)if(b.call(a[d],d,a[d])===!1)break}else for(d in a)if(b.call(a[d],d,a[
2024-09-27 04:00:53 UTC	1378	IN	Data Raw: 65 61 6e 20 4e 75 6d 62 65 72 20 53 74 72 69 6e 67 20 46 75 6e 63 74 69 6f 6e 20 41 72 72 61 79 20 44 61 74 65 20 52 65 67 45 78 70 20 4f 62 6a 65 63 74 20 45 72 72 6f 72 20 53 79 6d 62 6f 6c 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 5b 22 5b 6f 62 6a 65 63 74 20 22 2b 62 2b 22 5d 22 5d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 73 28 61 29 7b 76 61 72 20 62 3d 21 21 61 26 26 22 6c 65 6e 67 74 68 22 69 6e 20 61 26 26 61 2e 6c 65 6e 67 74 68 2c 63 3d 6e 2e 74 79 70 65 28 61 29 3b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 63 7c 7c 6e 2e 69 73 57 69 6e 64 6f 77 28 61 29 3f 21 31 3a 22 61 72 72 61 79 22 3d 3d 3d 63 7c 7c 30 3d 3d 3d 62 7c 7c 22 6e 75 6d 62 65 72 Data Ascii: ean Number String Function Array Date RegExp Object Error Symbol".split(" "),function(a,b){i["[object "+b+"]"]=b.toLowerCase()});function s(a){var b=!!a&&"length"in a&&a.length,c=n.type(a);return"function"===c\|\|n.isWindow(a)?!1:"array"===c\|\|0===b\|\|"number
2024-09-27 04:00:53 UTC	1378	IN	Data Raw: 4e 29 2c 50 53 45 55 44 4f 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4f 29 2c 43 48 49 4c 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 3a 28 6f 6e 6c 79 7c 66 69 72 73 74 7c 6c 61 73 74 7c 6e 74 68 7c 6e 74 68 2d 6c 61 73 74 29 2d 28 63 68 69 6c 64 7c 6f 66 2d 74 79 70 65 29 28 3f 3a 5c 5c 28 22 2b 4c 2b 22 2a 28 65 76 65 6e 7c 6f 64 64 7c 28 28 5b 2b 2d 5d 7c 29 28 5c 5c 64 2a 29 6e 7c 29 22 2b 4c 2b 22 2a 28 3f 3a 28 5b 2b 2d 5d 7c 29 22 2b 4c 2b 22 2a 28 5c 5c 64 2b 29 7c 29 29 22 2b 4c 2b 22 2a 5c 5c 29 7c 29 22 2c 22 69 22 29 2c 62 6f 6f 6c 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 3f 3a 22 2b 4b 2b 22 29 24 22 2c 22 69 22 29 2c 6e 65 65 64 73 43 6f 6e 74 65 78 74 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4c 2b 22 2a 5b 3e 2b 7e 5d 7c Data Ascii: N),PSEUDO:new RegExp("^"+O),CHILD:new RegExp("^:(only\|first\|last\|nth\|nth-last)-(child\|of-type)(?:\$"+L+"(even\|odd\|(([+-]\|)(\\d)n\|)"+L+"(?:([+-]\|)"+L+"(\\d+)\|))"+L+"\$\|)","i"),bool:new RegExp("^(?:"+K+")$","i"),needsContext:new RegExp("^"+L+"[>+~]\|
2024-09-27 04:00:53 UTC	1378	IN	Data Raw: 79 43 6c 61 73 73 4e 61 6d 65 26 26 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 64 2c 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 66 29 29 2c 64 7d 69 66 28 63 2e 71 73 61 26 26 21 41 5b 61 2b 22 20 22 5d 26 26 28 21 71 7c 7c 21 71 2e 74 65 73 74 28 61 29 29 29 7b 69 66 28 31 21 3d 3d 78 29 77 3d 62 2c 73 3d 61 3b 65 6c 73 65 20 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7b 28 6b 3d 62 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 6b 3d 6b 2e 72 65 70 6c 61 63 65 28 61 61 2c 22 5c 5c 24 26 22 29 3a 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 6b Data Ascii: yClassName&&b.getElementsByClassName)return H.apply(d,b.getElementsByClassName(f)),d}if(c.qsa&&!A[a+" "]&&(!q\|\|!q.test(a))){if(1!==x)w=b,s=a;else if("object"!==b.nodeName.toLowerCase()){(k=b.getAttribute("id"))?k=k.replace(aa,"\\$&"):b.setAttribute("id",k
2024-09-27 04:00:53 UTC	1378	IN	Data Raw: 28 67 2d 2d 29 63 5b 65 3d 66 5b 67 5d 5d 26 26 28 63 5b 65 5d 3d 21 28 64 5b 65 5d 3d 63 5b 65 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 61 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 26 61 7d 63 3d 66 61 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 66 3d 66 61 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 26 26 28 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3b 72 65 74 75 72 6e 20 62 3f 22 48 54 4d 4c 22 21 3d 3d 62 2e 6e 6f 64 65 4e 61 6d 65 3a 21 31 7d 2c 6d 3d 66 61 2e 73 65 74 44 6f 63 75 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: (g--)c[e=f[g]]&&(c[e]=!(d[e]=c[e]))})})}function oa(a){return a&&"undefined"!=typeof a.getElementsByTagName&&a}c=fa.support={},f=fa.isXML=function(a){var b=a&&(a.ownerDocument\|\|a).documentElement;return b?"HTML"!==b.nodeName:!1},m=fa.setDocument=function(
2024-09-27 04:00:53 UTC	1378	IN	Data Raw: 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 61 29 3a 63 2e 71 73 61 3f 62 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 61 29 3a 76 6f 69 64 20 30 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 3d 5b 5d 2c 65 3d 30 2c 66 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 61 29 3b 69 66 28 22 2a 22 3d 3d 3d 61 29 7b 77 68 69 6c 65 28 63 3d 66 5b 65 2b 2b 5d 29 31 3d 3d 3d 63 2e 6e 6f 64 65 54 79 70 65 26 26 64 2e 70 75 73 68 28 63 29 3b 72 65 74 75 72 6e 20 64 7d 72 65 74 75 72 6e 20 66 7d 2c 64 2e 66 69 6e 64 2e 43 4c 41 53 53 3d 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d Data Ascii: mentsByTagName(a):c.qsa?b.querySelectorAll(a):void 0}:function(a,b){var c,d=[],e=0,f=b.getElementsByTagName(a);if("*"===a){while(c=f[e++])1===c.nodeType&&d.push(c);return d}return f},d.find.CLASS=c.getElementsByClassName&&function(a,b){return"undefined"!=
2024-09-27 04:00:53 UTC	1378	IN	Data Raw: 71 2e 6c 65 6e 67 74 68 26 26 6e 65 77 20 52 65 67 45 78 70 28 71 2e 6a 6f 69 6e 28 22 7c 22 29 29 2c 72 3d 72 2e 6c 65 6e 67 74 68 26 26 6e 65 77 20 52 65 67 45 78 70 28 72 2e 6a 6f 69 6e 28 22 7c 22 29 29 2c 62 3d 5a 2e 74 65 73 74 28 6f 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 29 2c 74 3d 62 7c 7c 5a 2e 74 65 73 74 28 6f 2e 63 6f 6e 74 61 69 6e 73 29 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 39 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 3f 61 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3a 61 2c 64 3d 62 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 61 3d 3d 3d 64 7c 7c 21 28 21 64 7c 7c 31 21 3d 3d 64 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 28 63 2e 63 6f 6e 74 61 69 6e 73 3f 63 2e 63 Data Ascii: q.length&&new RegExp(q.join("\|")),r=r.length&&new RegExp(r.join("\|")),b=Z.test(o.compareDocumentPosition),t=b\|\|Z.test(o.contains)?function(a,b){var c=9===a.nodeType?a.documentElement:a,d=b&&b.parentNode;return a===d\|\|!(!d\|\|1!==d.nodeType\|\|!(c.contains?c.c
2024-09-27 04:00:53 UTC	1378	IN	Data Raw: 61 74 63 68 28 65 29 7b 7d 72 65 74 75 72 6e 20 66 61 28 62 2c 6e 2c 6e 75 6c 6c 2c 5b 61 5d 29 2e 6c 65 6e 67 74 68 3e 30 7d 2c 66 61 2e 63 6f 6e 74 61 69 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 28 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 29 21 3d 3d 6e 26 26 6d 28 61 29 2c 74 28 61 2c 62 29 7d 2c 66 61 2e 61 74 74 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 28 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 29 21 3d 3d 6e 26 26 6d 28 61 29 3b 76 61 72 20 65 3d 64 2e 61 74 74 72 48 61 6e 64 6c 65 5b 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 2c 66 3d 65 26 26 44 2e 63 61 6c 6c 28 64 2e 61 74 74 72 48 61 6e 64 6c 65 2c 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3f 65 28 61 2c 62 2c 21 70 29 3a Data Ascii: atch(e){}return fa(b,n,null,[a]).length>0},fa.contains=function(a,b){return(a.ownerDocument\|\|a)!==n&&m(a),t(a,b)},fa.attr=function(a,b){(a.ownerDocument\|\|a)!==n&&m(a);var e=d.attrHandle[b.toLowerCase()],f=e&&D.call(d.attrHandle,b.toLowerCase())?e(a,b,!p):

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.7	49721	83.217.75.108	443	5312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:00:53 UTC	441	OUT	GET /js/vendor/modernizr-2.8.3.min.js HTTP/1.1 Host: reward.bnpparibasfortis.be Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=eagqj4746f62pt7vm5ebioip55; language=en
2024-09-27 04:00:53 UTC	353	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 04:00:53 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 15514 Connection: close Last-Modified: Tue, 22 May 2018 17:26:17 GMT Accept-Ranges: bytes Cache-Control: max-age=31536000 Expires: Sat, 27 Sep 2025 04:00:53 GMT Vary: Accept-Encoding X-Frame-Options: DENY
2024-09-27 04:00:53 UTC	15514	IN	Data Raw: 2f 2a 20 4d 6f 64 65 72 6e 69 7a 72 20 32 2e 38 2e 33 20 28 43 75 73 74 6f 6d 20 42 75 69 6c 64 29 20 7c 20 4d 49 54 20 26 20 42 53 44 0a 20 2a 20 42 75 69 6c 64 3a 20 68 74 74 70 3a 2f 2f 6d 6f 64 65 72 6e 69 7a 72 2e 63 6f 6d 2f 64 6f 77 6e 6c 6f 61 64 2f 23 2d 66 6f 6e 74 66 61 63 65 2d 62 61 63 6b 67 72 6f 75 6e 64 73 69 7a 65 2d 62 6f 72 64 65 72 69 6d 61 67 65 2d 62 6f 72 64 65 72 72 61 64 69 75 73 2d 62 6f 78 73 68 61 64 6f 77 2d 66 6c 65 78 62 6f 78 2d 68 73 6c 61 2d 6d 75 6c 74 69 70 6c 65 62 67 73 2d 6f 70 61 63 69 74 79 2d 72 67 62 61 2d 74 65 78 74 73 68 61 64 6f 77 2d 63 73 73 61 6e 69 6d 61 74 69 6f 6e 73 2d 63 73 73 63 6f 6c 75 6d 6e 73 2d 67 65 6e 65 72 61 74 65 64 63 6f 6e 74 65 6e 74 2d 63 73 73 67 72 61 64 69 65 6e 74 73 2d 63 73 73 72 Data Ascii: /* Modernizr 2.8.3 (Custom Build) \| MIT & BSD * Build: http://modernizr.com/download/#-fontface-backgroundsize-borderimage-borderradius-boxshadow-flexbox-hsla-multiplebgs-opacity-rgba-textshadow-cssanimations-csscolumns-generatedcontent-cssgradients-cssr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.7	49723	83.217.75.108	443	5312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:00:53 UTC	677	OUT	GET /css/square/green.css HTTP/1.1 Host: reward.bnpparibasfortis.be Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://reward.bnpparibasfortis.be/css/main.css?v=3accddf64b1dd03abeb9b0b3e5a7ba44 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=eagqj4746f62pt7vm5ebioip55; language=en
2024-09-27 04:00:53 UTC	338	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 04:00:53 GMT Content-Type: text/css; charset=utf-8 Content-Length: 1502 Connection: close Last-Modified: Tue, 22 May 2018 17:26:13 GMT Accept-Ranges: bytes Cache-Control: max-age=31536000 Expires: Sat, 27 Sep 2025 04:00:53 GMT Vary: Accept-Encoding X-Frame-Options: DENY
2024-09-27 04:00:53 UTC	1502	IN	Data Raw: 2f 2a 20 69 43 68 65 63 6b 20 70 6c 75 67 69 6e 20 53 71 75 61 72 65 20 73 6b 69 6e 2c 20 67 72 65 65 6e 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 2a 2f 0a 2e 69 63 68 65 63 6b 62 6f 78 5f 73 71 75 61 72 65 2d 67 72 65 65 6e 2c 0a 2e 69 72 61 64 69 6f 5f 73 71 75 61 72 65 2d 67 72 65 65 6e 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 20 20 2a 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 0a 20 20 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 32 32 70 78 3b 0a 20 20 20 20 68 65 69 Data Ascii: /* iCheck plugin Square skin, green----------------------------------- /.icheckbox_square-green,.iradio_square-green { display: inline-block; display: inline; vertical-align: middle; margin: 0; padding: 0; width: 22px; hei

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.7	49724	83.217.75.108	443	5312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:00:53 UTC	424	OUT	GET /images/logo.png HTTP/1.1 Host: reward.bnpparibasfortis.be Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=eagqj4746f62pt7vm5ebioip55; language=en
2024-09-27 04:00:53 UTC	300	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 04:00:53 GMT Content-Type: image/png Content-Length: 8089 Connection: close Last-Modified: Tue, 22 May 2018 17:25:58 GMT Accept-Ranges: bytes Cache-Control: max-age=2592000 Expires: Sun, 27 Oct 2024 04:00:53 GMT X-Frame-Options: DENY
2024-09-27 04:00:53 UTC	8089	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 02 00 00 00 3a 08 06 00 00 00 5b 11 57 24 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 6b 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 35 2d 63 30 32 31 20 37 39 2e 31 35 34 39 31 31 2c 20 32 30 31 33 2f 31 30 2f 32 39 2d 31 31 3a 34 37 3a 31 36 20 20 Data Ascii: PNGIHDR:[W$tEXtSoftwareAdobe ImageReadyqe<kiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.154911, 2013/10/29-11:47:16

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.7	49720	83.217.75.108	443	5312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:00:53 UTC	426	OUT	GET /images/cadeau.png HTTP/1.1 Host: reward.bnpparibasfortis.be Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=eagqj4746f62pt7vm5ebioip55; language=en
2024-09-27 04:00:53 UTC	300	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 04:00:53 GMT Content-Type: image/png Content-Length: 9377 Connection: close Last-Modified: Tue, 22 May 2018 17:25:58 GMT Accept-Ranges: bytes Cache-Control: max-age=2592000 Expires: Sun, 27 Oct 2024 04:00:53 GMT X-Frame-Options: DENY
2024-09-27 04:00:53 UTC	9377	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 32 00 00 01 86 08 06 00 00 00 f8 9d 0d a6 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 6b 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 35 2d 63 30 32 31 20 37 39 2e 31 35 34 39 31 31 2c 20 32 30 31 33 2f 31 30 2f 32 39 2d 31 31 3a 34 37 3a 31 36 20 20 Data Ascii: PNGIHDR2tEXtSoftwareAdobe ImageReadyqe<kiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.154911, 2013/10/29-11:47:16

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.7	49725	83.217.75.108	443	5312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:00:53 UTC	651	OUT	GET /js/plugins.min.js?v=3accddf64b1dd03abeb9b0b3e5a7ba44 HTTP/1.1 Host: reward.bnpparibasfortis.be Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://reward.bnpparibasfortis.be/en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=eagqj4746f62pt7vm5ebioip55; language=en
2024-09-27 04:00:53 UTC	353	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 04:00:53 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 16583 Connection: close Last-Modified: Tue, 22 May 2018 17:26:00 GMT Accept-Ranges: bytes Cache-Control: max-age=31536000 Expires: Sat, 27 Sep 2025 04:00:53 GMT Vary: Accept-Encoding X-Frame-Options: DENY
2024-09-27 04:00:53 UTC	16031	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 2c 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 6e 3d 5b 22 61 73 73 65 72 74 22 2c 22 63 6c 65 61 72 22 2c 22 63 6f 75 6e 74 22 2c 22 64 65 62 75 67 22 2c 22 64 69 72 22 2c 22 64 69 72 78 6d 6c 22 2c 22 65 72 72 6f 72 22 2c 22 65 78 63 65 70 74 69 6f 6e 22 2c 22 67 72 6f 75 70 22 2c 22 67 72 6f 75 70 43 6f 6c 6c 61 70 73 65 64 22 2c 22 67 72 6f 75 70 45 6e 64 22 2c 22 69 6e 66 6f 22 2c 22 6c 6f 67 22 2c 22 6d 61 72 6b 54 69 6d 65 6c 69 6e 65 22 2c 22 70 72 6f 66 69 6c 65 22 2c 22 70 72 6f 66 69 6c 65 45 6e 64 22 2c 22 74 61 62 6c 65 22 2c 22 74 69 6d 65 22 2c 22 74 69 6d 65 45 6e 64 22 2c 22 74 69 6d 65 6c 69 6e 65 22 2c 22 74 69 6d 65 6c 69 6e 65 45 6e 64 22 2c 22 74 69 6d 65 53 74 61 6d 70 Data Ascii: !function(){for(var e,t=function(){},n=["assert","clear","count","debug","dir","dirxml","error","exception","group","groupCollapsed","groupEnd","info","log","markTimeline","profile","profileEnd","table","time","timeEnd","timeline","timelineEnd","timeStamp
2024-09-27 04:00:53 UTC	552	IN	Data Raw: 53 74 72 69 6e 67 28 6f 29 2c 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 5b 69 2e 72 61 77 3f 61 3a 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 29 2c 22 3d 22 2c 69 2e 72 61 77 3f 6f 3a 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 6f 29 2c 75 2e 65 78 70 69 72 65 73 3f 22 3b 20 65 78 70 69 72 65 73 3d 22 2b 75 2e 65 78 70 69 72 65 73 2e 74 6f 55 54 43 53 74 72 69 6e 67 28 29 3a 22 22 2c 75 2e 70 61 74 68 3f 22 3b 20 70 61 74 68 3d 22 2b 75 2e 70 61 74 68 3a 22 22 2c 75 2e 64 6f 6d 61 69 6e 3f 22 3b 20 64 6f 6d 61 69 6e 3d 22 2b 75 2e 64 6f 6d 61 69 6e 3a 22 22 2c 75 2e 73 65 63 75 72 65 3f 22 3b 20 73 65 63 75 72 65 22 3a 22 22 5d 2e 6a 6f 69 6e 28 22 22 29 7d 66 6f 72 28 76 61 72 20 6c 3d 69 2e 72 61 77 3f 74 3a 6e 2c 64 Data Ascii: String(o),document.cookie=[i.raw?a:encodeURIComponent(a),"=",i.raw?o:encodeURIComponent(o),u.expires?"; expires="+u.expires.toUTCString():"",u.path?"; path="+u.path:"",u.domain?"; domain="+u.domain:"",u.secure?"; secure":""].join("")}for(var l=i.raw?t:n,d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.7	49729	151.101.66.137	443	5312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:00:54 UTC	359	OUT	GET /jquery-1.12.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:00:54 UTC	610	IN	HTTP/1.1 200 OK Connection: close Content-Length: 97362 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-17c52" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 27 Sep 2024 04:00:54 GMT Age: 843322 X-Served-By: cache-lga21956-LGA, cache-ewr-kewr1740049-EWR X-Cache: HIT, HIT X-Cache-Hits: 52, 1 X-Timer: S1727409654.127752,VS0,VE1 Vary: Accept-Encoding
2024-09-27 04:00:54 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 31 2e 31 32 2e 30 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 69 74 68 20 61 20 64 6f 63 75 6d 65 Data Ascii: /! jQuery v1.12.0 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a docume
2024-09-27 04:00:54 UTC	16384	IN	Data Raw: 7b 72 65 74 75 72 6e 20 66 61 28 61 2c 62 29 2e 6c 65 6e 67 74 68 3e 30 7d 7d 29 2c 63 6f 6e 74 61 69 6e 73 3a 68 61 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3d 61 2e 72 65 70 6c 61 63 65 28 62 61 2c 63 61 29 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 28 62 2e 74 65 78 74 43 6f 6e 74 65 6e 74 7c 7c 62 2e 69 6e 6e 65 72 54 65 78 74 7c 7c 65 28 62 29 29 2e 69 6e 64 65 78 4f 66 28 61 29 3e 2d 31 7d 7d 29 2c 6c 61 6e 67 3a 68 61 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 56 2e 74 65 73 74 28 61 7c 7c 22 22 29 7c 7c 66 61 2e 65 72 72 6f 72 28 22 75 6e 73 75 70 70 6f 72 74 65 64 20 6c 61 6e 67 3a 20 22 2b 61 29 2c 61 3d 61 2e 72 65 70 6c 61 63 65 28 62 61 2c 63 61 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 Data Ascii: {return fa(a,b).length>0}}),contains:ha(function(a){return a=a.replace(ba,ca),function(b){return(b.textContent\|\|b.innerText\|\|e(b)).indexOf(a)>-1}}),lang:ha(function(a){return V.test(a\|\|"")\|\|fa.error("unsupported lang: "+a),a=a.replace(ba,ca).toLowerCase()
2024-09-27 04:00:54 UTC	16384	IN	Data Raw: 61 6d 65 6c 43 61 73 65 29 29 3a 62 20 69 6e 20 64 3f 62 3d 5b 62 5d 3a 28 62 3d 6e 2e 63 61 6d 65 6c 43 61 73 65 28 62 29 2c 62 3d 62 20 69 6e 20 64 3f 5b 62 5d 3a 62 2e 73 70 6c 69 74 28 22 20 22 29 29 2c 65 3d 62 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 65 2d 2d 29 64 65 6c 65 74 65 20 64 5b 62 5b 65 5d 5d 3b 69 66 28 63 3f 21 51 28 64 29 3a 21 6e 2e 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 28 64 29 29 72 65 74 75 72 6e 7d 28 63 7c 7c 28 64 65 6c 65 74 65 20 67 5b 68 5d 2e 64 61 74 61 2c 51 28 67 5b 68 5d 29 29 29 26 26 28 66 3f 6e 2e 63 6c 65 61 6e 44 61 74 61 28 5b 61 5d 2c 21 30 29 3a 6c 2e 64 65 6c 65 74 65 45 78 70 61 6e 64 6f 7c 7c 67 21 3d 67 2e 77 69 6e 64 6f 77 3f 64 65 6c 65 74 65 20 67 5b 68 5d 3a 67 5b 68 5d 3d 76 6f 69 64 20 30 29 7d 7d 7d Data Ascii: amelCase)):b in d?b=[b]:(b=n.camelCase(b),b=b in d?[b]:b.split(" ")),e=b.length;while(e--)delete d[b[e]];if(c?!Q(d):!n.isEmptyObject(d))return}(c\|\|(delete g[h].data,Q(g[h])))&&(f?n.cleanData([a],!0):l.deleteExpando\|\|g!=g.window?delete g[h]:g[h]=void 0)}}}
2024-09-27 04:00:54 UTC	16384	IN	Data Raw: 2c 6c 2e 63 68 61 6e 67 65 7c 7c 28 6e 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2e 63 68 61 6e 67 65 3d 7b 73 65 74 75 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6b 61 2e 74 65 73 74 28 74 68 69 73 2e 6e 6f 64 65 4e 61 6d 65 29 3f 28 28 22 63 68 65 63 6b 62 6f 78 22 3d 3d 3d 74 68 69 73 2e 74 79 70 65 7c 7c 22 72 61 64 69 6f 22 3d 3d 3d 74 68 69 73 2e 74 79 70 65 29 26 26 28 6e 2e 65 76 65 6e 74 2e 61 64 64 28 74 68 69 73 2c 22 70 72 6f 70 65 72 74 79 63 68 61 6e 67 65 2e 5f 63 68 61 6e 67 65 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 63 68 65 63 6b 65 64 22 3d 3d 3d 61 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 70 72 6f 70 65 72 74 79 4e 61 6d 65 26 26 28 74 68 69 73 2e 5f 6a 75 73 74 43 68 61 6e 67 65 64 3d 21 30 29 7d 29 2c 6e 2e Data Ascii: ,l.change\|\|(n.event.special.change={setup:function(){return ka.test(this.nodeName)?(("checkbox"===this.type\|\|"radio"===this.type)&&(n.event.add(this,"propertychange._change",function(a){"checked"===a.originalEvent.propertyName&&(this._justChanged=!0)}),n.
2024-09-27 04:00:54 UTC	16384	IN	Data Raw: 69 6f 6e 73 2e 73 74 65 70 26 26 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 73 74 65 70 2e 63 61 6c 6c 28 74 68 69 73 2e 65 6c 65 6d 2c 74 68 69 73 2e 6e 6f 77 2c 74 68 69 73 29 2c 63 26 26 63 2e 73 65 74 3f 63 2e 73 65 74 28 74 68 69 73 29 3a 67 62 2e 70 72 6f 70 48 6f 6f 6b 73 2e 5f 64 65 66 61 75 6c 74 2e 73 65 74 28 74 68 69 73 29 2c 74 68 69 73 7d 7d 2c 67 62 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 2e 70 72 6f 74 6f 74 79 70 65 3d 67 62 2e 70 72 6f 74 6f 74 79 70 65 2c 67 62 2e 70 72 6f 70 48 6f 6f 6b 73 3d 7b 5f 64 65 66 61 75 6c 74 3a 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 72 65 74 75 72 6e 20 31 21 3d 3d 61 2e 65 6c 65 6d 2e 6e 6f 64 65 54 79 70 65 7c 7c 6e 75 6c 6c 21 3d 61 2e 65 6c 65 6d 5b 61 2e 70 72 6f 70 5d 26 Data Ascii: ions.step&&this.options.step.call(this.elem,this.now,this),c&&c.set?c.set(this):gb.propHooks._default.set(this),this}},gb.prototype.init.prototype=gb.prototype,gb.propHooks={_default:{get:function(a){var b;return 1!==a.elem.nodeType\|\|null!=a.elem[a.prop]&
2024-09-27 04:00:54 UTC	15442	IN	Data Raw: 75 6e 73 68 69 66 74 28 6a 29 2c 67 28 6a 29 2c 21 31 29 7d 29 2c 69 7d 72 65 74 75 72 6e 20 67 28 62 2e 64 61 74 61 54 79 70 65 73 5b 30 5d 29 7c 7c 21 65 5b 22 2a 22 5d 26 26 67 28 22 2a 22 29 7d 66 75 6e 63 74 69 6f 6e 20 55 62 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 2c 65 3d 6e 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 2e 66 6c 61 74 4f 70 74 69 6f 6e 73 7c 7c 7b 7d 3b 66 6f 72 28 64 20 69 6e 20 62 29 76 6f 69 64 20 30 21 3d 3d 62 5b 64 5d 26 26 28 28 65 5b 64 5d 3f 61 3a 63 7c 7c 28 63 3d 7b 7d 29 29 5b 64 5d 3d 62 5b 64 5d 29 3b 72 65 74 75 72 6e 20 63 26 26 6e 2e 65 78 74 65 6e 64 28 21 30 2c 61 2c 63 29 2c 61 7d 66 75 6e 63 74 69 6f 6e 20 56 62 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 2c 65 2c 66 2c 67 2c 68 3d 61 2e 63 6f 6e 74 65 6e 74 73 2c 69 3d 61 Data Ascii: unshift(j),g(j),!1)}),i}return g(b.dataTypes[0])\|\|!e[""]&&g("")}function Ub(a,b){var c,d,e=n.ajaxSettings.flatOptions\|\|{};for(d in b)void 0!==b[d]&&((e[d]?a:c\|\|(c={}))[d]=b[d]);return c&&n.extend(!0,a,c),a}function Vb(a,b,c){var d,e,f,g,h=a.contents,i=a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.7	49728	83.217.75.108	443	5312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:00:54 UTC	648	OUT	GET /js/main.min.js?v=3accddf64b1dd03abeb9b0b3e5a7ba44 HTTP/1.1 Host: reward.bnpparibasfortis.be Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://reward.bnpparibasfortis.be/en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=eagqj4746f62pt7vm5ebioip55; language=en
2024-09-27 04:00:54 UTC	352	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 04:00:54 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 5891 Connection: close Last-Modified: Thu, 29 Nov 2018 09:36:40 GMT Accept-Ranges: bytes Cache-Control: max-age=31536000 Expires: Sat, 27 Sep 2025 04:00:54 GMT Vary: Accept-Encoding X-Frame-Options: DENY
2024-09-27 04:00:54 UTC	5891	IN	Data Raw: 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 24 28 22 2e 63 68 6f 69 63 65 5f 69 74 65 6d 20 68 32 22 29 2e 63 73 73 28 7b 68 65 69 67 68 74 3a 22 61 75 74 6f 22 7d 29 3b 76 61 72 20 65 3d 24 28 22 2e 63 68 6f 69 63 65 5f 69 74 65 6d 20 68 32 22 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 24 28 74 68 69 73 29 2e 6f 75 74 65 72 48 65 69 67 68 74 28 29 7d 29 2c 74 3d 4d 61 74 68 2e 6d 61 78 2e 61 70 70 6c 79 28 74 68 69 73 2c 65 29 3b 24 28 22 2e 63 68 6f 69 63 65 5f 69 74 65 6d 20 68 32 22 29 2e 63 73 73 28 7b 68 65 69 67 68 74 3a 74 2b 22 70 78 22 7d 29 2c 24 28 22 2e 63 68 6f 69 63 65 5f 69 74 65 6d 20 68 32 20 73 70 61 6e 22 29 2e 65 61 63 68 28 Data Ascii: $(document).ready(function(){function e(){$(".choice_item h2").css({height:"auto"});var e=$(".choice_item h2").map(function(){return $(this).outerHeight()}),t=Math.max.apply(this,e);$(".choice_item h2").css({height:t+"px"}),$(".choice_item h2 span").each(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.7	49735	83.217.75.108	443	5312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:00:54 UTC	461	OUT	GET /js/plugins.min.js?v=3accddf64b1dd03abeb9b0b3e5a7ba44 HTTP/1.1 Host: reward.bnpparibasfortis.be Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=eagqj4746f62pt7vm5ebioip55; language=en
2024-09-27 04:00:55 UTC	353	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 04:00:54 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 16583 Connection: close Last-Modified: Tue, 22 May 2018 17:26:00 GMT Accept-Ranges: bytes Cache-Control: max-age=31536000 Expires: Sat, 27 Sep 2025 04:00:54 GMT Vary: Accept-Encoding X-Frame-Options: DENY
2024-09-27 04:00:55 UTC	16031	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 2c 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 6e 3d 5b 22 61 73 73 65 72 74 22 2c 22 63 6c 65 61 72 22 2c 22 63 6f 75 6e 74 22 2c 22 64 65 62 75 67 22 2c 22 64 69 72 22 2c 22 64 69 72 78 6d 6c 22 2c 22 65 72 72 6f 72 22 2c 22 65 78 63 65 70 74 69 6f 6e 22 2c 22 67 72 6f 75 70 22 2c 22 67 72 6f 75 70 43 6f 6c 6c 61 70 73 65 64 22 2c 22 67 72 6f 75 70 45 6e 64 22 2c 22 69 6e 66 6f 22 2c 22 6c 6f 67 22 2c 22 6d 61 72 6b 54 69 6d 65 6c 69 6e 65 22 2c 22 70 72 6f 66 69 6c 65 22 2c 22 70 72 6f 66 69 6c 65 45 6e 64 22 2c 22 74 61 62 6c 65 22 2c 22 74 69 6d 65 22 2c 22 74 69 6d 65 45 6e 64 22 2c 22 74 69 6d 65 6c 69 6e 65 22 2c 22 74 69 6d 65 6c 69 6e 65 45 6e 64 22 2c 22 74 69 6d 65 53 74 61 6d 70 Data Ascii: !function(){for(var e,t=function(){},n=["assert","clear","count","debug","dir","dirxml","error","exception","group","groupCollapsed","groupEnd","info","log","markTimeline","profile","profileEnd","table","time","timeEnd","timeline","timelineEnd","timeStamp
2024-09-27 04:00:55 UTC	552	IN	Data Raw: 53 74 72 69 6e 67 28 6f 29 2c 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 5b 69 2e 72 61 77 3f 61 3a 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 29 2c 22 3d 22 2c 69 2e 72 61 77 3f 6f 3a 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 6f 29 2c 75 2e 65 78 70 69 72 65 73 3f 22 3b 20 65 78 70 69 72 65 73 3d 22 2b 75 2e 65 78 70 69 72 65 73 2e 74 6f 55 54 43 53 74 72 69 6e 67 28 29 3a 22 22 2c 75 2e 70 61 74 68 3f 22 3b 20 70 61 74 68 3d 22 2b 75 2e 70 61 74 68 3a 22 22 2c 75 2e 64 6f 6d 61 69 6e 3f 22 3b 20 64 6f 6d 61 69 6e 3d 22 2b 75 2e 64 6f 6d 61 69 6e 3a 22 22 2c 75 2e 73 65 63 75 72 65 3f 22 3b 20 73 65 63 75 72 65 22 3a 22 22 5d 2e 6a 6f 69 6e 28 22 22 29 7d 66 6f 72 28 76 61 72 20 6c 3d 69 2e 72 61 77 3f 74 3a 6e 2c 64 Data Ascii: String(o),document.cookie=[i.raw?a:encodeURIComponent(a),"=",i.raw?o:encodeURIComponent(o),u.expires?"; expires="+u.expires.toUTCString():"",u.path?"; path="+u.path:"",u.domain?"; domain="+u.domain:"",u.secure?"; secure":""].join("")}for(var l=i.raw?t:n,d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.7	49734	193.58.4.82	443	5312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:00:54 UTC	578	OUT	GET /resources/one-portal/wcm/js/vendors/pagebus.js HTTP/1.1 Host: www.bnpparibasfortis.be Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://reward.bnpparibasfortis.be/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:00:55 UTC	1206	IN	HTTP/1.1 200 OK accept-ranges: bytes content-length: 12671 content-type: application/javascript date: Fri, 27 Sep 2024 04:00:55 GMT etag: "9c62f-317f-5f8968a24be80" last-modified: Wed, 05 Apr 2023 13:12:10 GMT p3p: CP="NON CUR OTPi OUR UNI NOR" vary: Segment, Accept-Encoding x-frame-options: SAMEORIGIN x-content-type-options: nosniff cache-control: max-age=300, public expires: Fri, 27 Sep 2024 04:05:55 GMT x-xss-protection: 1; mode=block content-security-policy: reflected-xss block strict-transport-security: max-age=31536000; includeSubDomains Connection: close Set-Cookie: distributorid=52FB001; Path=/; Secure; Set-Cookie: per_ebew_web=!E/XI8RdFyxK58CjJQBLV4NPltLg7SPK7NV1Sg6+lK3/sMDEESIgB9uKxusRwIocpJjDxPliRrV82rYY=; expires=Fri, 27-Sep-2024 04:15:55 GMT; path=/; Httponly; Secure Set-Cookie: TS018554d6=0171aa6230a5ef2957c451b72f812462944e90f4f34ab0507c53f09abd6aa751eec1ef0cb10d68b20f98b0d7b391a627e7c69755f6; Path=/; Secure; HTTPOnly Set-Cookie: TS1f0cd59e027=08c24362caab2000b2388d0253fed84823835b29968fc92c645d0bf1c21a63b70ddbda47b68c1adb0809298a651130008fcdb8b1c3c3d318d1bafc8623207845ccfbf57d749d82160711f28a4ea10a307a90f51a1b15db7a827d22f2a2990881; Secure; Path=/
2024-09-27 04:00:55 UTC	12671	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 54 49 42 43 4f 20 50 61 67 65 42 75 73 28 54 4d 29 20 76 65 72 73 69 6f 6e 20 32 2e 30 2e 30 0a 20 2a 20 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 36 2d 32 30 30 39 2c 20 54 49 42 43 4f 20 53 6f 66 74 77 61 72 65 20 49 6e 63 2e 0a 20 2a 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 41 70 61 63 68 65 20 4c 69 63 65 6e 73 65 2c 20 56 65 72 73 69 6f 6e 20 32 2e 30 20 28 74 68 65 20 22 4c 69 63 65 6e 73 65 22 29 3b 20 79 6f 75 20 6d 61 79 20 6e 6f 74 20 0a 20 2a 20 75 73 65 20 74 68 69 73 20 66 69 6c 65 20 65 78 63 65 70 74 20 69 6e 20 63 6f 6d 70 6c 69 61 6e 63 65 20 77 69 74 68 20 74 68 65 20 4c 69 63 65 6e 73 65 2e 20 59 Data Ascii: /** * TIBCO PageBus(TM) version 2.0.0 * * Copyright (c) 2006-2009, TIBCO Software Inc. * All rights reserved. * * Licensed under the Apache License, Version 2.0 (the "License"); you may not * use this file except in compliance with the License. Y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.7	49733	193.58.4.82	443	5312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:00:54 UTC	566	OUT	GET /resources/cookie-consent/cookie.js HTTP/1.1 Host: www.bnpparibasfortis.be Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://reward.bnpparibasfortis.be/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:00:55 UTC	1208	IN	HTTP/1.1 200 OK accept-ranges: bytes content-length: 234624 content-type: application/javascript date: Fri, 27 Sep 2024 04:00:55 GMT etag: "e1f26-39480-6191c1349b4d1" last-modified: Thu, 23 May 2024 09:57:13 GMT p3p: CP="NON CUR OTPi OUR UNI NOR" vary: Segment, Accept-Encoding x-frame-options: SAMEORIGIN x-content-type-options: nosniff cache-control: max-age=300, public expires: Fri, 27 Sep 2024 04:05:55 GMT x-xss-protection: 1; mode=block content-security-policy: reflected-xss block strict-transport-security: max-age=31536000; includeSubDomains Connection: close Set-Cookie: distributorid=52FB001; Path=/; Secure; Set-Cookie: per_ebew_web=!EETAZJ+EVWvtcTvJQBLV4NPltLg7SCws45pKAOUVfrXnqbkqrBxLBRxZhwA/gDugD1SrnZs6q2eaqmI=; expires=Fri, 27-Sep-2024 04:15:55 GMT; path=/; Httponly; Secure Set-Cookie: TS018554d6=0171aa623060eed254b8d0690ddddb717091dd823ba2ea79654b2de1acfb5919c9eb306890ba40983f77a4ced3e37de1670e2c942f; Path=/; Secure; HTTPOnly Set-Cookie: TS1f0cd59e027=08c24362caab200005794eb46630dcbf494396303a966cdd78eb390a4ed6c157372c015af87b0e7a08e229ec041130001893c5c069d9100dd1bafc8623207845404ce7d700d546f933783141f0ef14be97079465db9e3bc27011633bf798bdee; Secure; Path=/
2024-09-27 04:00:55 UTC	15176	IN	Data Raw: 69 66 20 28 74 79 70 65 6f 66 20 67 65 74 43 6f 6f 6b 69 65 20 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 29 20 7b 0a 20 20 20 20 2f 2f 20 65 73 6c 69 6e 74 2d 64 69 73 61 62 6c 65 2d 6e 65 78 74 2d 6c 69 6e 65 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 67 65 74 43 6f 6f 6b 69 65 28 63 6e 61 6d 65 29 20 7b 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 6e 61 6d 65 20 3d 20 63 6e 61 6d 65 20 2b 20 22 3d 22 3b 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 64 65 63 6f 64 65 64 43 6f 6f 6b 69 65 20 3d 20 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 29 3b 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 63 61 20 3d 20 64 65 63 6f 64 65 64 43 6f 6f 6b 69 65 2e 73 70 6c 69 74 28 27 3b 27 29 3b 0a 20 20 20 20 20 20 Data Ascii: if (typeof getCookie == "undefined") { // eslint-disable-next-line function getCookie(cname) { const name = cname + "="; const decodedCookie = decodeURIComponent(document.cookie); const ca = decodedCookie.split(';');
2024-09-27 04:00:55 UTC	613	IN	Data Raw: 20 63 6c 61 73 73 3d 5c 22 63 6f 6f 6b 69 65 5f 62 6c 6f 63 6b 5f 6f 76 65 72 6c 61 79 5c 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 62 6c 6f 63 6b 5f 6f 76 65 72 6c 61 79 5f 63 6f 6e 74 61 69 6e 65 72 5c 22 3e 3c 68 32 20 63 6c 61 73 73 3d 5c 22 70 61 64 2d 62 31 30 20 66 6f 6e 74 5f 33 32 20 74 65 78 74 5f 63 65 6e 74 65 72 5c 22 3e 57 69 6a 7a 69 67 20 75 77 20 63 6f 6f 6b 69 65 2d 69 6e 73 74 65 6c 6c 69 6e 67 65 6e 20 6f 6d 20 64 65 20 76 69 64 65 6f 26 72 73 71 75 6f 72 3b 73 20 74 65 20 62 65 6b 69 6a 6b 65 6e 3c 2f 68 32 3e 3c 70 20 63 6c 61 73 73 3d 5c 22 70 61 64 2d 62 31 30 5c 22 3e 57 69 6c 74 20 75 20 64 65 7a 65 20 76 69 64 65 6f 20 65 6e 20 61 6c 6c 65 20 67 65 64 65 65 6c 64 65 20 63 6f 6e 74 65 6e 74 20 76 61 6e 20 6f 6e 7a 65 20 77 65 Data Ascii: class=\"cookie_block_overlay\"><div class=\"block_overlay_container\"><h2 class=\"pad-b10 font_32 text_center\">Wijzig uw cookie-instellingen om de video&rsquor;s te bekijken</h2><p class=\"pad-b10\">Wilt u deze video en alle gedeelde content van onze we
2024-09-27 04:00:55 UTC	16320	IN	Data Raw: 69 76 20 63 6c 61 73 73 3d 5c 22 63 63 5f 73 77 69 74 63 68 5f 62 6c 6f 63 6b 5c 22 3e 3c 6c 61 62 65 6c 20 63 6c 61 73 73 3d 5c 22 63 63 5f 73 77 69 74 63 68 5c 22 3e 3c 69 6e 70 75 74 20 63 6c 61 73 73 3d 5c 22 63 63 5f 69 6e 70 75 74 5c 22 20 74 79 70 65 3d 5c 22 63 68 65 63 6b 62 6f 78 5c 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 63 63 5f 73 6c 69 64 65 72 5c 22 3e 3c 2f 73 70 61 6e 3e 3c 2f 6c 61 62 65 6c 3e 3c 70 3e 43 6f 6f 6b 69 65 73 20 76 6f 6f 72 20 68 65 74 20 64 65 6c 65 6e 20 76 61 6e 20 69 6e 68 6f 75 64 3c 2f 70 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 22 0a 20 20 20 20 7d 0a 20 20 20 20 65 6c 73 65 20 69 66 20 28 6c 61 6e 67 75 61 67 65 20 26 26 20 6c 61 6e 67 75 61 67 65 20 3d 3d 3d 20 27 64 65 27 29 20 7b 0a 20 20 Data Ascii: iv class=\"cc_switch_block\"><label class=\"cc_switch\"><input class=\"cc_input\" type=\"checkbox\"><span class=\"cc_slider\"></span></label><p>Cookies voor het delen van inhoud</p></div></div></div>" } else if (language && language === 'de') {
2024-09-27 04:00:55 UTC	64	IN	Data Raw: 2f 27 2b 0d 0a 27 2f 2a 20 72 65 73 65 74 20 2a 2f 27 2b 0d 0a 27 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 27 2b 0d 0a 27 68 74 6d 6c 2c 20 62 6f 64 79 2c 20 64 69 76 2c 20 73 70 61 Data Ascii: /'+'/* reset */'+'@charset "UTF-8";'+'html, body, div, spa
2024-09-27 04:00:55 UTC	16320	IN	Data Raw: 6e 2c 20 61 70 70 6c 65 74 2c 20 6f 62 6a 65 63 74 2c 20 69 66 72 61 6d 65 2c 20 68 31 2c 20 68 32 2c 20 68 33 2c 20 68 34 2c 20 68 35 2c 20 68 36 2c 20 70 2c 20 62 6c 6f 63 6b 71 75 6f 74 65 2c 20 70 72 65 2c 20 61 2c 20 61 62 62 72 2c 20 61 63 72 6f 6e 79 6d 2c 20 61 64 64 72 65 73 73 2c 20 62 69 67 2c 20 63 69 74 65 2c 20 63 6f 64 65 2c 20 64 65 6c 2c 20 64 66 6e 2c 20 65 6d 2c 20 69 6d 67 2c 20 69 6e 73 2c 20 6b 62 64 2c 20 71 2c 20 73 2c 20 73 61 6d 70 2c 20 73 6d 61 6c 6c 2c 20 73 74 72 69 6b 65 2c 20 73 74 72 6f 6e 67 2c 20 73 75 62 2c 20 73 75 70 2c 20 74 74 2c 20 76 61 72 2c 20 62 2c 20 75 2c 20 69 2c 20 63 65 6e 74 65 72 2c 20 64 6c 2c 20 64 74 2c 20 64 64 2c 20 6f 6c 2c 20 75 6c 2c 20 6c 69 2c 20 66 69 65 6c 64 73 65 74 2c 20 66 6f 72 6d 2c 20 Data Ascii: n, applet, object, iframe, h1, h2, h3, h4, h5, h6, p, blockquote, pre, a, abbr, acronym, address, big, cite, code, del, dfn, em, img, ins, kbd, q, s, samp, small, strike, strong, sub, sup, tt, var, b, u, i, center, dl, dt, dd, ol, ul, li, fieldset, form,
2024-09-27 04:00:55 UTC	64	IN	Data Raw: 4c 6a 45 79 4e 53 41 78 4c 6a 6b 32 4d 79 30 75 4f 44 4d 78 49 44 51 75 4d 54 49 7a 4c 54 45 75 4d 6a 6b 67 4e 69 34 7a 4f 53 30 78 4c 6a 49 35 49 44 59 75 4d 54 55 34 4c 53 34 77 4e 54 55 67 Data Ascii: LjEyNSAxLjk2My0uODMxIDQuMTIzLTEuMjkgNi4zOS0xLjI5IDYuMTU4LS4wNTUg
2024-09-27 04:00:55 UTC	16320	IN	Data Raw: 4d 54 49 75 4e 54 55 7a 49 44 4d 75 4e 44 6b 34 49 44 45 31 4c 6a 59 7a 4e 69 41 35 4c 6a 63 33 4c 6a 67 35 4d 79 41 78 4c 6a 6b 7a 4d 69 41 78 4c 6a 4d 33 4e 69 41 30 4c 6a 41 34 49 44 45 75 4d 7a 55 67 4e 69 34 7a 4e 69 49 67 64 48 4a 68 62 6e 4e 6d 62 33 4a 74 50 53 4a 30 63 6d 46 75 63 32 78 68 64 47 55 6f 4c 54 55 34 4f 43 34 77 4d 44 41 77 4d 44 41 73 49 43 30 79 4d 44 41 75 4d 44 41 77 4d 44 41 77 4b 53 42 30 63 6d 46 75 63 32 78 68 64 47 55 6f 4d 7a 45 34 4c 6a 41 77 4d 44 41 77 4d 43 77 67 4d 54 59 77 4c 6a 41 77 4d 44 41 77 4d 43 6b 67 64 48 4a 68 62 6e 4e 73 59 58 52 6c 4b 44 49 33 4d 43 34 77 4d 44 41 77 4d 44 41 73 49 44 51 77 4c 6a 41 77 4d 44 41 77 4d 43 6b 67 64 48 4a 68 62 6e 4e 73 59 58 52 6c 4b 44 49 32 4c 6a 41 77 4d 44 41 77 4d 43 77 Data Ascii: MTIuNTUzIDMuNDk4IDE1LjYzNiA5Ljc3Ljg5MyAxLjkzMiAxLjM3NiA0LjA4IDEuMzUgNi4zNiIgdHJhbnNmb3JtPSJ0cmFuc2xhdGUoLTU4OC4wMDAwMDAsIC0yMDAuMDAwMDAwKSB0cmFuc2xhdGUoMzE4LjAwMDAwMCwgMTYwLjAwMDAwMCkgdHJhbnNsYXRlKDI3MC4wMDAwMDAsIDQwLjAwMDAwMCkgdHJhbnNsYXRlKDI2LjAwMDAwMCw
2024-09-27 04:00:55 UTC	64	IN	Data Raw: 4f 54 4e 44 4e 44 59 7a 49 69 42 6b 50 53 4a 4e 4d 54 63 77 4c 6a 6b 30 4d 69 41 78 4d 44 49 75 4d 6a 56 6f 4c 54 67 75 4e 6a 6c 6a 4c 53 34 31 4e 54 49 67 4d 43 30 78 4c 53 34 30 4e 44 59 74 Data Ascii: OTNDNDYzIiBkPSJNMTcwLjk0MiAxMDIuMjVoLTguNjljLS41NTIgMC0xLS40NDYt
2024-09-27 04:00:55 UTC	16320	IN	Data Raw: 4d 53 30 78 49 44 41 74 4c 6a 55 31 4d 69 34 30 4e 44 67 74 4d 53 41 78 4c 54 46 6f 4f 43 34 32 4f 57 4d 75 4e 54 55 79 49 44 41 67 4d 53 41 75 4e 44 51 34 49 44 45 67 4d 53 41 77 49 43 34 31 4e 54 51 74 4c 6a 51 30 4f 43 41 78 4c 54 45 67 4d 53 49 67 64 48 4a 68 62 6e 4e 6d 62 33 4a 74 50 53 4a 30 63 6d 46 75 63 32 78 68 64 47 55 6f 4c 54 55 34 4f 43 34 77 4d 44 41 77 4d 44 41 73 49 43 30 79 4d 44 41 75 4d 44 41 77 4d 44 41 77 4b 53 42 30 63 6d 46 75 63 32 78 68 64 47 55 6f 4d 7a 45 34 4c 6a 41 77 4d 44 41 77 4d 43 77 67 4d 54 59 77 4c 6a 41 77 4d 44 41 77 4d 43 6b 67 64 48 4a 68 62 6e 4e 73 59 58 52 6c 4b 44 49 33 4d 43 34 77 4d 44 41 77 4d 44 41 73 49 44 51 77 4c 6a 41 77 4d 44 41 77 4d 43 6b 67 64 48 4a 68 62 6e 4e 73 59 58 52 6c 4b 44 49 32 4c 6a 41 Data Ascii: MS0xIDAtLjU1Mi40NDgtMSAxLTFoOC42OWMuNTUyIDAgMSAuNDQ4IDEgMSAwIC41NTQtLjQ0OCAxLTEgMSIgdHJhbnNmb3JtPSJ0cmFuc2xhdGUoLTU4OC4wMDAwMDAsIC0yMDAuMDAwMDAwKSB0cmFuc2xhdGUoMzE4LjAwMDAwMCwgMTYwLjAwMDAwMCkgdHJhbnNsYXRlKDI3MC4wMDAwMDAsIDQwLjAwMDAwMCkgdHJhbnNsYXRlKDI2LjA
2024-09-27 04:00:55 UTC	64	IN	Data Raw: 4e 7a 63 78 4c 44 6b 35 4c 6a 45 77 4e 44 59 7a 4e 44 4d 67 4f 44 55 75 4e 6a 59 7a 4c 44 6b 32 4c 6a 59 78 4d 7a 59 7a 4e 44 4d 67 51 7a 67 33 4c 6a 59 79 4e 69 77 35 4e 53 34 33 4f 44 49 32 Data Ascii: NzcxLDk5LjEwNDYzNDMgODUuNjYzLDk2LjYxMzYzNDMgQzg3LjYyNiw5NS43ODI2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.7	49739	83.217.75.108	443	5312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:00:55 UTC	458	OUT	GET /js/main.min.js?v=3accddf64b1dd03abeb9b0b3e5a7ba44 HTTP/1.1 Host: reward.bnpparibasfortis.be Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=eagqj4746f62pt7vm5ebioip55; language=en
2024-09-27 04:00:55 UTC	352	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 04:00:55 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 5891 Connection: close Last-Modified: Thu, 29 Nov 2018 09:36:40 GMT Accept-Ranges: bytes Cache-Control: max-age=31536000 Expires: Sat, 27 Sep 2025 04:00:55 GMT Vary: Accept-Encoding X-Frame-Options: DENY
2024-09-27 04:00:55 UTC	5891	IN	Data Raw: 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 24 28 22 2e 63 68 6f 69 63 65 5f 69 74 65 6d 20 68 32 22 29 2e 63 73 73 28 7b 68 65 69 67 68 74 3a 22 61 75 74 6f 22 7d 29 3b 76 61 72 20 65 3d 24 28 22 2e 63 68 6f 69 63 65 5f 69 74 65 6d 20 68 32 22 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 24 28 74 68 69 73 29 2e 6f 75 74 65 72 48 65 69 67 68 74 28 29 7d 29 2c 74 3d 4d 61 74 68 2e 6d 61 78 2e 61 70 70 6c 79 28 74 68 69 73 2c 65 29 3b 24 28 22 2e 63 68 6f 69 63 65 5f 69 74 65 6d 20 68 32 22 29 2e 63 73 73 28 7b 68 65 69 67 68 74 3a 74 2b 22 70 78 22 7d 29 2c 24 28 22 2e 63 68 6f 69 63 65 5f 69 74 65 6d 20 68 32 20 73 70 61 6e 22 29 2e 65 61 63 68 28 Data Ascii: $(document).ready(function(){function e(){$(".choice_item h2").css({height:"auto"});var e=$(".choice_item h2").map(function(){return $(this).outerHeight()}),t=Math.max.apply(this,e);$(".choice_item h2").css({height:t+"px"}),$(".choice_item h2 span").each(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.7	49740	193.58.4.82	443	5312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:00:55 UTC	847	OUT	GET /resources/one-portal/wcm/js/vendors/pagebus.js HTTP/1.1 Host: www.bnpparibasfortis.be Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: distributorid=52FB001; per_ebew_web=!EETAZJ+EVWvtcTvJQBLV4NPltLg7SCws45pKAOUVfrXnqbkqrBxLBRxZhwA/gDugD1SrnZs6q2eaqmI=; TS018554d6=0171aa623060eed254b8d0690ddddb717091dd823ba2ea79654b2de1acfb5919c9eb306890ba40983f77a4ced3e37de1670e2c942f; TS1f0cd59e027=08c24362caab200005794eb46630dcbf494396303a966cdd78eb390a4ed6c157372c015af87b0e7a08e229ec041130001893c5c069d9100dd1bafc8623207845404ce7d700d546f933783141f0ef14be97079465db9e3bc27011633bf798bdee
2024-09-27 04:00:56 UTC	611	IN	HTTP/1.1 200 OK accept-ranges: bytes content-type: application/javascript etag: "9c62f-317f-5f8968a24be80" last-modified: Wed, 05 Apr 2023 13:12:10 GMT p3p: CP="NON CUR OTPi OUR UNI NOR" vary: Segment, Accept-Encoding x-frame-options: SAMEORIGIN x-content-type-options: nosniff cache-control: max-age=300, public x-xss-protection: 1; mode=block content-security-policy: reflected-xss block strict-transport-security: max-age=31536000; includeSubDomains Connection: close Date: Fri, 27 Sep 2024 04:00:56 GMT Expires: Fri, 27 Sep 2024 04:05:56 GMT Age: 1 Content-Length: 12671
2024-09-27 04:00:56 UTC	12671	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 54 49 42 43 4f 20 50 61 67 65 42 75 73 28 54 4d 29 20 76 65 72 73 69 6f 6e 20 32 2e 30 2e 30 0a 20 2a 20 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 36 2d 32 30 30 39 2c 20 54 49 42 43 4f 20 53 6f 66 74 77 61 72 65 20 49 6e 63 2e 0a 20 2a 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 41 70 61 63 68 65 20 4c 69 63 65 6e 73 65 2c 20 56 65 72 73 69 6f 6e 20 32 2e 30 20 28 74 68 65 20 22 4c 69 63 65 6e 73 65 22 29 3b 20 79 6f 75 20 6d 61 79 20 6e 6f 74 20 0a 20 2a 20 75 73 65 20 74 68 69 73 20 66 69 6c 65 20 65 78 63 65 70 74 20 69 6e 20 63 6f 6d 70 6c 69 61 6e 63 65 20 77 69 74 68 20 74 68 65 20 4c 69 63 65 6e 73 65 2e 20 59 Data Ascii: /** * TIBCO PageBus(TM) version 2.0.0 * * Copyright (c) 2006-2009, TIBCO Software Inc. * All rights reserved. * * Licensed under the Apache License, Version 2.0 (the "License"); you may not * use this file except in compliance with the License. Y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.7	49741	83.217.75.108	443	5312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:00:56 UTC	670	OUT	GET /favicon.ico HTTP/1.1 Host: reward.bnpparibasfortis.be Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://reward.bnpparibasfortis.be/en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=eagqj4746f62pt7vm5ebioip55; language=en
2024-09-27 04:00:57 UTC	325	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 04:00:56 GMT Content-Type: image/x-icon Content-Length: 2238 Connection: close Last-Modified: Tue, 22 May 2018 17:25:54 GMT Accept-Ranges: bytes Cache-Control: max-age=604800 Expires: Fri, 04 Oct 2024 04:00:56 GMT Vary: Accept-Encoding X-Frame-Options: DENY
2024-09-27 04:00:57 UTC	2238	IN	Data Raw: 00 00 01 00 01 00 20 20 00 00 01 00 08 00 a8 08 00 00 16 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 65 8b 00 00 69 8e 00 00 69 8f 00 00 6b 8f 00 00 6b 90 00 00 6d 92 00 00 6e 92 00 00 6f 92 00 00 6f 93 00 00 70 93 00 00 6f 94 00 00 71 94 00 00 71 95 00 00 72 95 00 00 73 95 00 00 73 95 02 00 72 96 00 00 73 96 00 00 74 96 00 00 74 96 02 00 74 97 00 00 75 97 00 00 75 98 00 00 76 98 00 00 77 99 00 00 78 99 00 00 77 99 01 00 76 98 07 00 78 9a 00 00 79 9a 00 00 78 9a 02 00 79 9a 02 00 77 99 07 00 79 9b 00 00 7a 9b 00 00 77 99 08 00 7b 9b 00 00 7a 9b 01 00 7b 9b 02 00 7a 9a 06 00 7a 9b 03 00 79 9a 07 00 7b 9c 00 00 78 9a 08 00 7b 9c 01 00 7b 9c 02 00 7b 9c 03 00 7a 9b 07 00 7c Data Ascii: ( @eiikkmnoopoqqrssrstttuuvwxwvxyxywyzw{z{zzy{x{{{z\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.7	49744	83.217.75.108	443	5312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:00:58 UTC	420	OUT	GET /favicon.ico HTTP/1.1 Host: reward.bnpparibasfortis.be Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=eagqj4746f62pt7vm5ebioip55; language=en
2024-09-27 04:00:58 UTC	325	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 04:00:58 GMT Content-Type: image/x-icon Content-Length: 2238 Connection: close Last-Modified: Tue, 22 May 2018 17:25:54 GMT Accept-Ranges: bytes Cache-Control: max-age=604800 Expires: Fri, 04 Oct 2024 04:00:58 GMT Vary: Accept-Encoding X-Frame-Options: DENY
2024-09-27 04:00:58 UTC	2238	IN	Data Raw: 00 00 01 00 01 00 20 20 00 00 01 00 08 00 a8 08 00 00 16 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 65 8b 00 00 69 8e 00 00 69 8f 00 00 6b 8f 00 00 6b 90 00 00 6d 92 00 00 6e 92 00 00 6f 92 00 00 6f 93 00 00 70 93 00 00 6f 94 00 00 71 94 00 00 71 95 00 00 72 95 00 00 73 95 00 00 73 95 02 00 72 96 00 00 73 96 00 00 74 96 00 00 74 96 02 00 74 97 00 00 75 97 00 00 75 98 00 00 76 98 00 00 77 99 00 00 78 99 00 00 77 99 01 00 76 98 07 00 78 9a 00 00 79 9a 00 00 78 9a 02 00 79 9a 02 00 77 99 07 00 79 9b 00 00 7a 9b 00 00 77 99 08 00 7b 9b 00 00 7a 9b 01 00 7b 9b 02 00 7a 9a 06 00 7a 9b 03 00 79 9a 07 00 7b 9c 00 00 78 9a 08 00 7b 9c 01 00 7b 9c 02 00 7b 9c 03 00 7a 9b 07 00 7c Data Ascii: ( @eiikkmnoopoqqrssrstttuuvwxwvxyxywyzw{z{zzy{x{{{z\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.7	49743	193.58.4.82	443	5312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:00:58 UTC	835	OUT	GET /resources/cookie-consent/cookie.js HTTP/1.1 Host: www.bnpparibasfortis.be Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: distributorid=52FB001; per_ebew_web=!EETAZJ+EVWvtcTvJQBLV4NPltLg7SCws45pKAOUVfrXnqbkqrBxLBRxZhwA/gDugD1SrnZs6q2eaqmI=; TS018554d6=0171aa623060eed254b8d0690ddddb717091dd823ba2ea79654b2de1acfb5919c9eb306890ba40983f77a4ced3e37de1670e2c942f; TS1f0cd59e027=08c24362caab200005794eb46630dcbf494396303a966cdd78eb390a4ed6c157372c015af87b0e7a08e229ec041130001893c5c069d9100dd1bafc8623207845404ce7d700d546f933783141f0ef14be97079465db9e3bc27011633bf798bdee
2024-09-27 04:00:58 UTC	612	IN	HTTP/1.1 200 OK accept-ranges: bytes content-type: application/javascript etag: "e1f26-39480-6191c1349b4d1" last-modified: Thu, 23 May 2024 09:57:13 GMT p3p: CP="NON CUR OTPi OUR UNI NOR" vary: Segment, Accept-Encoding x-frame-options: SAMEORIGIN x-content-type-options: nosniff cache-control: max-age=300, public x-xss-protection: 1; mode=block content-security-policy: reflected-xss block strict-transport-security: max-age=31536000; includeSubDomains Connection: close Date: Fri, 27 Sep 2024 04:00:58 GMT Expires: Fri, 27 Sep 2024 04:05:56 GMT Age: 3 Content-Length: 234624
2024-09-27 04:00:58 UTC	15772	IN	Data Raw: 69 66 20 28 74 79 70 65 6f 66 20 67 65 74 43 6f 6f 6b 69 65 20 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 29 20 7b 0a 20 20 20 20 2f 2f 20 65 73 6c 69 6e 74 2d 64 69 73 61 62 6c 65 2d 6e 65 78 74 2d 6c 69 6e 65 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 67 65 74 43 6f 6f 6b 69 65 28 63 6e 61 6d 65 29 20 7b 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 6e 61 6d 65 20 3d 20 63 6e 61 6d 65 20 2b 20 22 3d 22 3b 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 64 65 63 6f 64 65 64 43 6f 6f 6b 69 65 20 3d 20 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 29 3b 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 63 61 20 3d 20 64 65 63 6f 64 65 64 43 6f 6f 6b 69 65 2e 73 70 6c 69 74 28 27 3b 27 29 3b 0a 20 20 20 20 20 20 Data Ascii: if (typeof getCookie == "undefined") { // eslint-disable-next-line function getCookie(cname) { const name = cname + "="; const decodedCookie = decodeURIComponent(document.cookie); const ca = decodedCookie.split(';');
2024-09-27 04:00:58 UTC	16384	IN	Data Raw: 62 65 6c 65 69 64 3c 2f 61 3e 2e 3c 2f 70 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 63 63 5f 73 77 69 74 63 68 5f 62 6c 6f 63 6b 5c 22 3e 3c 6c 61 62 65 6c 20 63 6c 61 73 73 3d 5c 22 63 63 5f 73 77 69 74 63 68 5c 22 3e 3c 69 6e 70 75 74 20 63 6c 61 73 73 3d 5c 22 63 63 5f 69 6e 70 75 74 5c 22 20 74 79 70 65 3d 5c 22 63 68 65 63 6b 62 6f 78 5c 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 63 63 5f 73 6c 69 64 65 72 5c 22 3e 3c 2f 73 70 61 6e 3e 3c 2f 6c 61 62 65 6c 3e 3c 70 3e 43 6f 6f 6b 69 65 73 20 76 6f 6f 72 20 68 65 74 20 64 65 6c 65 6e 20 76 61 6e 20 69 6e 68 6f 75 64 3c 2f 70 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 22 0a 20 20 20 20 7d 0a 20 20 20 20 65 6c 73 65 20 69 66 20 28 6c 61 6e 67 75 61 67 65 20 26 26 20 6c 61 6e 67 75 61 Data Ascii: beleid</a>.</p><div class=\"cc_switch_block\"><label class=\"cc_switch\"><input class=\"cc_input\" type=\"checkbox\"><span class=\"cc_slider\"></span></label><p>Cookies voor het delen van inhoud</p></div></div></div>" } else if (language && langua
2024-09-27 04:00:58 UTC	612	IN	Data Raw: 6c 2c 20 62 6f 64 79 2c 20 64 69 76 2c 20 73 70 61 6e 2c 20 61 70 70 6c 65 74 2c 20 6f 62 6a 65 63 74 2c 20 69 66 72 61 6d 65 2c 20 68 31 2c 20 68 32 2c 20 68 33 2c 20 68 34 2c 20 68 35 2c 20 68 36 2c 20 70 2c 20 62 6c 6f 63 6b 71 75 6f 74 65 2c 20 70 72 65 2c 20 61 2c 20 61 62 62 72 2c 20 61 63 72 6f 6e 79 6d 2c 20 61 64 64 72 65 73 73 2c 20 62 69 67 2c 20 63 69 74 65 2c 20 63 6f 64 65 2c 20 64 65 6c 2c 20 64 66 6e 2c 20 65 6d 2c 20 69 6d 67 2c 20 69 6e 73 2c 20 6b 62 64 2c 20 71 2c 20 73 2c 20 73 61 6d 70 2c 20 73 6d 61 6c 6c 2c 20 73 74 72 69 6b 65 2c 20 73 74 72 6f 6e 67 2c 20 73 75 62 2c 20 73 75 70 2c 20 74 74 2c 20 76 61 72 2c 20 62 2c 20 75 2c 20 69 2c 20 63 65 6e 74 65 72 2c 20 64 6c 2c 20 64 74 2c 20 64 64 2c 20 6f 6c 2c 20 75 6c 2c 20 6c 69 2c Data Ascii: l, body, div, span, applet, object, iframe, h1, h2, h3, h4, h5, h6, p, blockquote, pre, a, abbr, acronym, address, big, cite, code, del, dfn, em, img, ins, kbd, q, s, samp, small, strike, strong, sub, sup, tt, var, b, u, i, center, dl, dt, dd, ol, ul, li,
2024-09-27 04:00:58 UTC	16384	IN	Data Raw: 2d 61 6c 69 67 6e 3a 20 62 61 73 65 6c 69 6e 65 3b 27 2b 0d 0a 27 7d 27 2b 0d 0a 27 61 72 74 69 63 6c 65 2c 20 61 73 69 64 65 2c 20 64 65 74 61 69 6c 73 2c 20 66 69 67 63 61 70 74 69 6f 6e 2c 20 66 69 67 75 72 65 2c 20 66 6f 6f 74 65 72 2c 20 68 65 61 64 65 72 2c 20 68 67 72 6f 75 70 2c 20 6d 65 6e 75 2c 20 6e 61 76 2c 20 73 65 63 74 69 6f 6e 20 7b 27 2b 0d 0a 27 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 27 2b 0d 0a 27 7d 27 2b 0d 0a 27 68 74 6d 6c 20 7b 27 2b 0d 0a 27 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 6e 6f 6e 65 3b 27 2b 0d 0a 27 7d 27 2b 0d 0a 27 6f 6c 2c 20 75 6c 20 7b 27 2b 0d 0a 27 20 20 20 20 6c 69 73 74 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 3b 27 2b 0d 0a 27 7d 27 2b 0d 0a 27 62 Data Ascii: -align: baseline;'+'}'+'article, aside, details, figcaption, figure, footer, header, hgroup, menu, nav, section {'+' display: block;'+'}'+'html {'+' -webkit-text-size-adjust: none;'+'}'+'ol, ul {'+' list-style: none;'+'}'+'b
2024-09-27 04:00:58 UTC	16384	IN	Data Raw: 74 4d 69 34 7a 4d 54 67 67 4d 53 34 77 4d 7a 67 74 4d 69 34 7a 4d 54 63 67 4d 69 34 7a 4d 54 67 74 4d 69 34 7a 4d 54 63 67 4d 69 34 7a 4d 54 67 67 4d 53 34 77 4d 7a 63 67 4d 69 34 7a 4d 54 67 67 4d 69 34 7a 4d 54 64 4e 4f 54 4d 75 4e 7a 49 33 49 44 45 79 4f 43 34 77 4e 6a 56 6a 4c 53 34 7a 4d 54 59 74 4d 53 34 79 4e 43 34 30 4d 7a 51 74 4d 69 34 31 4d 44 49 67 4d 53 34 32 4e 7a 51 74 4d 69 34 34 4d 54 63 67 4d 53 34 79 4e 43 30 75 4d 7a 45 33 49 44 49 75 4e 54 41 7a 4c 6a 51 7a 4d 79 41 79 4c 6a 67 78 4f 43 41 78 4c 6a 59 33 4d 30 30 34 4d 69 34 31 4e 54 49 67 4f 54 67 75 4e 44 51 79 59 79 34 34 4f 44 63 75 4f 54 49 30 4c 6a 67 31 4e 79 41 79 4c 6a 4d 35 4d 53 30 75 4d 44 59 31 49 44 4d 75 4d 6a 63 34 4c 53 34 35 4d 6a 4d 75 4f 44 67 33 4c 54 49 75 4d 7a Data Ascii: tMi4zMTggMS4wMzgtMi4zMTcgMi4zMTgtMi4zMTcgMi4zMTggMS4wMzcgMi4zMTggMi4zMTdNOTMuNzI3IDEyOC4wNjVjLS4zMTYtMS4yNC40MzQtMi41MDIgMS42NzQtMi44MTcgMS4yNC0uMzE3IDIuNTAzLjQzMyAyLjgxOCAxLjY3M004Mi41NTIgOTguNDQyYy44ODcuOTI0Ljg1NyAyLjM5MS0uMDY1IDMuMjc4LS45MjMuODg3LTIuMz
2024-09-27 04:00:58 UTC	16384	IN	Data Raw: 75 63 32 5a 76 63 6d 30 39 49 6e 52 79 59 57 35 7a 62 47 46 30 5a 53 67 74 4e 54 67 34 4c 6a 41 77 4d 44 41 77 4d 43 77 67 4c 54 49 77 4d 43 34 77 4d 44 41 77 4d 44 41 70 49 48 52 79 59 57 35 7a 62 47 46 30 5a 53 67 7a 4d 54 67 75 4d 44 41 77 4d 44 41 77 4c 43 41 78 4e 6a 41 75 4d 44 41 77 4d 44 41 77 4b 53 42 30 63 6d 46 75 63 32 78 68 64 47 55 6f 4d 6a 63 77 4c 6a 41 77 4d 44 41 77 4d 43 77 67 4e 44 41 75 4d 44 41 77 4d 44 41 77 4b 53 42 30 63 6d 46 75 63 32 78 68 64 47 55 6f 4d 6a 59 75 4d 44 41 77 4d 44 41 77 4c 43 41 78 4e 53 34 77 4d 44 41 77 4d 44 41 70 49 69 38 2b 43 69 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 44 78 77 59 58 52 6f 49 47 5a 70 62 47 77 39 49 69 4e 45 4e 30 56 42 51 7a 45 69 49 47 Data Ascii: uc2Zvcm09InRyYW5zbGF0ZSgtNTg4LjAwMDAwMCwgLTIwMC4wMDAwMDApIHRyYW5zbGF0ZSgzMTguMDAwMDAwLCAxNjAuMDAwMDAwKSB0cmFuc2xhdGUoMjcwLjAwMDAwMCwgNDAuMDAwMDAwKSB0cmFuc2xhdGUoMjYuMDAwMDAwLCAxNS4wMDAwMDApIi8+CiAgICAgICAgICAgICAgICAgICAgICAgIDxwYXRoIGZpbGw9IiNEN0VBQzEiIG
2024-09-27 04:00:58 UTC	16384	IN	Data Raw: 35 4d 69 34 34 4f 44 45 33 4c 44 45 77 4d 79 34 31 4d 6a 63 34 4d 7a 51 69 49 47 6c 6b 50 53 4a 47 61 57 78 73 4c 54 4d 7a 49 69 42 6d 61 57 78 73 50 53 49 6a 4f 44 45 31 52 54 55 33 49 6a 34 38 4c 33 42 68 64 47 67 2b 43 69 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 44 78 77 59 58 52 6f 49 47 51 39 49 6b 30 78 4d 44 55 75 4e 7a 63 35 4d 69 77 78 4d 54 55 75 4d 44 51 32 4d 7a 4d 30 49 45 4d 78 4d 44 55 75 4e 7a 63 35 4d 69 77 78 4d 54 59 75 4d 7a 49 32 4d 7a 4d 30 49 44 45 77 4e 43 34 33 4e 44 45 79 4c 44 45 78 4e 79 34 7a 4e 6a 51 7a 4d 7a 51 67 4d 54 41 7a 4c 6a 51 32 4d 54 49 73 4d 54 45 33 4c 6a 4d 32 4e 44 4d 7a 4e 43 42 44 4d 54 41 79 4c 6a 45 34 4d 54 49 73 4d 54 45 33 4c 6a 4d 32 4e 44 4d 7a 4e 43 41 78 4d 44 45 75 4d 54 51 7a 4d 69 77 78 4d 54 Data Ascii: 5Mi44ODE3LDEwMy41Mjc4MzQiIGlkPSJGaWxsLTMzIiBmaWxsPSIjODE1RTU3Ij48L3BhdGg+CiAgICAgICAgICAgIDxwYXRoIGQ9Ik0xMDUuNzc5MiwxMTUuMDQ2MzM0IEMxMDUuNzc5MiwxMTYuMzI2MzM0IDEwNC43NDEyLDExNy4zNjQzMzQgMTAzLjQ2MTIsMTE3LjM2NDMzNCBDMTAyLjE4MTIsMTE3LjM2NDMzNCAxMDEuMTQzMiwxMT
2024-09-27 04:00:58 UTC	16384	IN	Data Raw: 75 4d 6a 41 7a 4f 44 4d 30 4d 79 41 78 4d 6a 67 75 4d 44 55 77 4d 69 77 7a 4d 79 34 7a 4e 54 51 34 4d 7a 51 7a 49 44 45 79 4e 53 34 30 4e 6a 41 79 4c 44 4d 7a 4c 6a 63 77 4d 44 67 7a 4e 44 4d 67 51 7a 45 78 4f 53 34 31 4d 7a 4d 79 4c 44 4d 30 4c 6a 51 35 4f 54 67 7a 4e 44 4d 67 4d 54 45 7a 4c 6a 67 78 4d 54 49 73 4d 7a 59 75 4f 44 49 7a 4f 44 4d 30 4d 79 41 78 4d 44 6b 75 4d 44 45 77 4d 69 77 30 4d 43 34 7a 4f 44 6b 34 4d 7a 51 7a 49 45 4d 78 4d 44 67 75 4e 7a 63 78 4d 69 77 30 4d 43 34 31 4e 54 67 34 4d 7a 51 7a 49 44 45 77 4f 43 34 31 4e 44 45 79 4c 44 51 77 4c 6a 63 7a 4e 6a 67 7a 4e 44 4d 67 4d 54 41 34 4c 6a 4d 78 4d 44 49 73 4e 44 41 75 4f 54 45 7a 4f 44 4d 30 4d 79 42 44 4d 54 41 33 4c 6a 55 31 4e 6a 49 73 4e 44 45 75 4e 44 6b 35 4f 44 4d 30 4d 79 Data Ascii: uMjAzODM0MyAxMjguMDUwMiwzMy4zNTQ4MzQzIDEyNS40NjAyLDMzLjcwMDgzNDMgQzExOS41MzMyLDM0LjQ5OTgzNDMgMTEzLjgxMTIsMzYuODIzODM0MyAxMDkuMDEwMiw0MC4zODk4MzQzIEMxMDguNzcxMiw0MC41NTg4MzQzIDEwOC41NDEyLDQwLjczNjgzNDMgMTA4LjMxMDIsNDAuOTEzODM0MyBDMTA3LjU1NjIsNDEuNDk5ODM0My
2024-09-27 04:00:58 UTC	16384	IN	Data Raw: 73 4e 6a 63 75 4e 7a 49 32 4d 6a 4d 30 4d 79 42 44 4d 54 4d 7a 4c 6a 67 78 4f 54 59 73 4e 6a 63 75 4d 7a 4d 31 4d 6a 4d 30 4d 79 41 78 4d 7a 51 75 4e 44 55 79 4e 69 77 32 4e 79 34 7a 4d 7a 55 79 4d 7a 51 7a 49 44 45 7a 4e 43 34 34 4e 44 4d 32 4c 44 59 33 4c 6a 63 79 4e 6a 49 7a 4e 44 4d 67 51 7a 45 7a 4e 53 34 79 4d 7a 4d 32 4c 44 59 34 4c 6a 45 78 4e 6a 49 7a 4e 44 4d 67 4d 54 4d 31 4c 6a 49 7a 4d 7a 59 73 4e 6a 67 75 4e 7a 51 35 4d 6a 4d 30 4d 79 41 78 4d 7a 51 75 4f 44 51 7a 4e 69 77 32 4f 53 34 78 4e 44 41 79 4d 7a 51 7a 49 45 4d 78 4d 7a 4d 75 4d 54 4d 30 4e 69 77 33 4d 43 34 34 4e 44 67 79 4d 7a 51 7a 49 44 45 7a 4d 69 34 7a 4e 54 4d 32 4c 44 63 79 4c 6a 67 78 4e 7a 49 7a 4e 44 4d 67 4d 54 4d 79 4c 6a 55 79 4d 6a 59 73 4e 7a 51 75 4f 54 6b 77 4d 6a Data Ascii: sNjcuNzI2MjM0MyBDMTMzLjgxOTYsNjcuMzM1MjM0MyAxMzQuNDUyNiw2Ny4zMzUyMzQzIDEzNC44NDM2LDY3LjcyNjIzNDMgQzEzNS4yMzM2LDY4LjExNjIzNDMgMTM1LjIzMzYsNjguNzQ5MjM0MyAxMzQuODQzNiw2OS4xNDAyMzQzIEMxMzMuMTM0Niw3MC44NDgyMzQzIDEzMi4zNTM2LDcyLjgxNzIzNDMgMTMyLjUyMjYsNzQuOTkwMj
2024-09-27 04:00:58 UTC	16384	IN	Data Raw: 67 51 7a 45 77 4f 53 34 34 4e 6a 67 73 4e 54 49 75 4d 6a 6b 79 4f 54 4d 30 4d 79 41 78 4d 44 67 75 4e 43 77 31 4d 69 34 7a 4d 44 4d 35 4d 7a 51 7a 49 44 45 77 4e 79 34 30 4f 44 67 73 4e 54 45 75 4e 44 45 35 4f 54 4d 30 4d 79 42 44 4d 54 41 32 4c 6a 55 33 4e 69 77 31 4d 43 34 31 4d 7a 63 35 4d 7a 51 7a 49 44 45 77 4e 69 34 31 4e 6a 51 73 4e 44 6b 75 4d 44 6b 79 4f 54 4d 30 4d 79 41 78 4d 44 63 75 4e 44 59 7a 4c 44 51 34 4c 6a 45 35 4e 54 6b 7a 4e 44 4d 67 51 7a 45 77 4f 43 34 7a 4e 6a 45 73 4e 44 63 75 4d 6a 6b 33 4f 54 4d 30 4d 79 41 78 4d 44 6b 75 4f 44 49 35 4c 44 51 33 4c 6a 49 34 4e 7a 6b 7a 4e 44 4d 67 4d 54 45 77 4c 6a 63 30 4d 53 77 30 4f 43 34 78 4e 7a 41 35 4d 7a 51 7a 49 45 4d 78 4d 54 45 75 4e 6a 55 7a 4c 44 51 35 4c 6a 41 31 4d 7a 6b 7a 4e 44 Data Ascii: gQzEwOS44NjgsNTIuMjkyOTM0MyAxMDguNCw1Mi4zMDM5MzQzIDEwNy40ODgsNTEuNDE5OTM0MyBDMTA2LjU3Niw1MC41Mzc5MzQzIDEwNi41NjQsNDkuMDkyOTM0MyAxMDcuNDYzLDQ4LjE5NTkzNDMgQzEwOC4zNjEsNDcuMjk3OTM0MyAxMDkuODI5LDQ3LjI4NzkzNDMgMTEwLjc0MSw0OC4xNzA5MzQzIEMxMTEuNjUzLDQ5LjA1MzkzND

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.7	49747	83.217.75.108	443	5312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:01:04 UTC	711	OUT	GET /nl/ HTTP/1.1 Host: reward.bnpparibasfortis.be Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=eagqj4746f62pt7vm5ebioip55; language=en
2024-09-27 04:01:04 UTC	630	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 04:01:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Set-Cookie: PHPSESSID=06fi3fkegau0nvc23gvlied0r4; path=/; domain=reward.bnpparibasfortis.be; secure; HttpOnly Set-Cookie: language=nl; expires=Sat, 27-Sep-2025 04:01:04 GMT; Max-Age=31536000; path=/; domain=reward.bnpparibasfortis.be; secure; httponly Vary: Accept-Encoding X-Frame-Options: DENY X-UA-Compatible: IE=Edge,chrome=1
2024-09-27 04:01:04 UTC	7044	IN	Data Raw: 31 62 37 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 6e 6c 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 21 2d 2d 5b 69 66 20 49 45 5d 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 69 6d 61 67 65 74 6f 6f 6c 62 61 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 20 63 6f Data Ascii: 1b77<!DOCTYPE html><html class="no-js" lang="nl"><head> <meta charset="utf-8"> <meta http-equiv="x-ua-compatible" content="ie=edge"> ...[if IE]><meta http-equiv="imagetoolbar" content="no"><![endif]--> <meta name="format-detection" co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.7	49748	83.217.75.108	443	5312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:01:06 UTC	711	OUT	GET /fr/ HTTP/1.1 Host: reward.bnpparibasfortis.be Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=06fi3fkegau0nvc23gvlied0r4; language=nl
2024-09-27 04:01:06 UTC	630	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 04:01:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Set-Cookie: PHPSESSID=1qbna6up7g0jrku671k7h1gs45; path=/; domain=reward.bnpparibasfortis.be; secure; HttpOnly Set-Cookie: language=fr; expires=Sat, 27-Sep-2025 04:01:06 GMT; Max-Age=31536000; path=/; domain=reward.bnpparibasfortis.be; secure; httponly Vary: Accept-Encoding X-Frame-Options: DENY X-UA-Compatible: IE=Edge,chrome=1
2024-09-27 04:01:06 UTC	7303	IN	Data Raw: 31 63 37 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 66 72 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 21 2d 2d 5b 69 66 20 49 45 5d 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 69 6d 61 67 65 74 6f 6f 6c 62 61 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 20 63 6f Data Ascii: 1c7a<!DOCTYPE html><html class="no-js" lang="fr"><head> <meta charset="utf-8"> <meta http-equiv="x-ua-compatible" content="ie=edge"> ...[if IE]><meta http-equiv="imagetoolbar" content="no"><![endif]--> <meta name="format-detection" co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.7	49750	83.217.75.108	443	5312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:01:09 UTC	715	OUT	GET /en/faq/ HTTP/1.1 Host: reward.bnpparibasfortis.be Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=1qbna6up7g0jrku671k7h1gs45; language=fr
2024-09-27 04:01:10 UTC	630	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 04:01:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Set-Cookie: PHPSESSID=oi10k8fp8l980h8tgsmv5k4pr1; path=/; domain=reward.bnpparibasfortis.be; secure; HttpOnly Set-Cookie: language=en; expires=Sat, 27-Sep-2025 04:01:09 GMT; Max-Age=31536000; path=/; domain=reward.bnpparibasfortis.be; secure; httponly Vary: Accept-Encoding X-Frame-Options: DENY X-UA-Compatible: IE=Edge,chrome=1
2024-09-27 04:01:10 UTC	15754	IN	Data Raw: 31 65 34 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 21 2d 2d 5b 69 66 20 49 45 5d 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 69 6d 61 67 65 74 6f 6f 6c 62 61 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 20 63 6f Data Ascii: 1e47<!DOCTYPE html><html class="no-js" lang="en"><head> <meta charset="utf-8"> <meta http-equiv="x-ua-compatible" content="ie=edge"> ...[if IE]><meta http-equiv="imagetoolbar" content="no"><![endif]--> <meta name="format-detection" co
2024-09-27 04:01:10 UTC	4018	IN	Data Raw: 64 20 6f 6e 20 79 6f 75 72 20 62 61 6e 6b 20 63 61 72 64 20 28 31 30 20 64 69 67 69 74 73 29 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 3e 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 09 3c 68 32 20 63 6c 61 73 73 3d 22 66 61 71 5f 76 72 61 61 67 22 3e 4d 79 20 67 69 66 74 20 69 73 20 64 61 6d 61 67 65 64 2e 20 57 68 61 74 20 6e 6f 77 3f 3c 2f 68 32 3e 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 09 3c 64 69 76 20 63 6c 61 73 73 3d 0d 0a 65 65 31 0d 0a 22 66 61 71 5f 61 6e 74 77 22 3e 3c 73 70 61 6e 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 6f 75 72 20 63 75 73 74 6f 6d 65 72 20 73 65 72 76 69 63 65 20 Data Ascii: d on your bank card (10 digits)</span></div> </div> <div> <h2 class="faq_vraag">My gift is damaged. What now?</h2> <div class=ee1"faq_antw"><span>Please contact our customer service

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.7	49752	83.217.75.108	443	5312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:01:14 UTC	719	OUT	GET /en/log-off/ HTTP/1.1 Host: reward.bnpparibasfortis.be Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=oi10k8fp8l980h8tgsmv5k4pr1; language=en
2024-09-27 04:01:14 UTC	672	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 27 Sep 2024 04:01:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Set-Cookie: PHPSESSID=o7lp5kr5n32dltb6lut6j3mqk6; path=/; domain=reward.bnpparibasfortis.be; secure; HttpOnly Set-Cookie: language=en; expires=Sat, 27-Sep-2025 04:01:14 GMT; Max-Age=31536000; path=/; domain=reward.bnpparibasfortis.be; secure; httponly Location: https://reward.bnpparibasfortis.be/en/ X-Frame-Options: DENY X-UA-Compatible: IE=Edge,chrome=1
2024-09-27 04:01:14 UTC	7168	IN	Data Raw: 38 64 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 21 2d 2d 5b 69 66 20 49 45 5d 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 69 6d 61 67 65 74 6f 6f 6c 62 61 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 20 63 6f 6e Data Ascii: 8d4<!DOCTYPE html><html class="no-js" lang="en"><head> <meta charset="utf-8"> <meta http-equiv="x-ua-compatible" content="ie=edge"> ...[if IE]><meta http-equiv="imagetoolbar" content="no"><![endif]--> <meta name="format-detection" con

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.7	49753	83.217.75.108	443	5312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:01:14 UTC	711	OUT	GET /en/ HTTP/1.1 Host: reward.bnpparibasfortis.be Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: language=en; PHPSESSID=o7lp5kr5n32dltb6lut6j3mqk6
2024-09-27 04:01:14 UTC	630	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 04:01:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Set-Cookie: PHPSESSID=3anr0ifglfs3kdsmfl71p4g390; path=/; domain=reward.bnpparibasfortis.be; secure; HttpOnly Set-Cookie: language=en; expires=Sat, 27-Sep-2025 04:01:14 GMT; Max-Age=31536000; path=/; domain=reward.bnpparibasfortis.be; secure; httponly Vary: Accept-Encoding X-Frame-Options: DENY X-UA-Compatible: IE=Edge,chrome=1
2024-09-27 04:01:14 UTC	7161	IN	Data Raw: 31 62 65 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 21 2d 2d 5b 69 66 20 49 45 5d 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 69 6d 61 67 65 74 6f 6f 6c 62 61 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 20 63 6f Data Ascii: 1bec<!DOCTYPE html><html class="no-js" lang="en"><head> <meta charset="utf-8"> <meta http-equiv="x-ua-compatible" content="ie=edge"> ...[if IE]><meta http-equiv="imagetoolbar" content="no"><![endif]--> <meta name="format-detection" co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.7	49755	83.217.75.108	443	5312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:01:26 UTC	711	OUT	GET /en/ HTTP/1.1 Host: reward.bnpparibasfortis.be Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: language=en; PHPSESSID=3anr0ifglfs3kdsmfl71p4g390
2024-09-27 04:01:26 UTC	630	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 04:01:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Set-Cookie: PHPSESSID=3qtks0f939fk8n10oobvn7mqu6; path=/; domain=reward.bnpparibasfortis.be; secure; HttpOnly Set-Cookie: language=en; expires=Sat, 27-Sep-2025 04:01:26 GMT; Max-Age=31536000; path=/; domain=reward.bnpparibasfortis.be; secure; httponly Vary: Accept-Encoding X-Frame-Options: DENY X-UA-Compatible: IE=Edge,chrome=1
2024-09-27 04:01:26 UTC	7161	IN	Data Raw: 31 62 65 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 21 2d 2d 5b 69 66 20 49 45 5d 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 69 6d 61 67 65 74 6f 6f 6c 62 61 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 20 63 6f Data Ascii: 1bec<!DOCTYPE html><html class="no-js" lang="en"><head> <meta charset="utf-8"> <meta http-equiv="x-ua-compatible" content="ie=edge"> ...[if IE]><meta http-equiv="imagetoolbar" content="no"><![endif]--> <meta name="format-detection" co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.7	49754	83.217.75.108	443	5312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:01:29 UTC	715	OUT	GET /nl/faq/ HTTP/1.1 Host: reward.bnpparibasfortis.be Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: language=en; PHPSESSID=3qtks0f939fk8n10oobvn7mqu6
2024-09-27 04:01:29 UTC	630	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 04:01:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Set-Cookie: PHPSESSID=0gqogan005p6ps7jcpvj776bs4; path=/; domain=reward.bnpparibasfortis.be; secure; HttpOnly Set-Cookie: language=nl; expires=Sat, 27-Sep-2025 04:01:29 GMT; Max-Age=31536000; path=/; domain=reward.bnpparibasfortis.be; secure; httponly Vary: Accept-Encoding X-Frame-Options: DENY X-UA-Compatible: IE=Edge,chrome=1
2024-09-27 04:01:29 UTC	15754	IN	Data Raw: 31 65 34 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 6e 6c 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 21 2d 2d 5b 69 66 20 49 45 5d 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 69 6d 61 67 65 74 6f 6f 6c 62 61 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 20 63 6f Data Ascii: 1e47<!DOCTYPE html><html class="no-js" lang="nl"><head> <meta charset="utf-8"> <meta http-equiv="x-ua-compatible" content="ie=edge"> ...[if IE]><meta http-equiv="imagetoolbar" content="no"><![endif]--> <meta name="format-detection" co
2024-09-27 04:01:29 UTC	5233	IN	Data Raw: 6b 20 6c 61 74 65 6e 20 6c 65 76 65 72 65 6e 20 69 6e 20 68 65 74 20 62 75 69 74 65 6e 6c 61 6e 64 3f 3c 2f 68 32 3e 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 61 71 5f 61 6e 74 77 22 3e 3c 73 70 61 6e 3e 4e 65 65 6e 2c 20 67 65 73 63 68 65 6e 6b 65 6e 20 77 6f 72 64 65 6e 20 65 6e 6b 65 6c 20 69 6e 20 42 65 6c 67 69 26 65 75 6d 6c 3b 20 67 65 6c 65 76 65 72 64 2e 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 0a 09 20 20 20 20 20 20 20 20 20 0d 0a 31 33 39 66 0d 0a 20 20 20 3c 64 69 76 3e 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 09 3c 68 32 20 63 6c 61 73 73 3d 22 66 61 71 5f 76 72 61 61 67 22 3e 49 6b 20 62 65 6e 20 Data Ascii: k laten leveren in het buitenland?</h2> <div class="faq_antw"><span>Neen, geschenken worden enkel in België geleverd.</span></div> </div> 139f <div> <h2 class="faq_vraag">Ik ben

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.7	49756	83.217.75.108	443	5312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:01:32 UTC	719	OUT	GET /nl/log-off/ HTTP/1.1 Host: reward.bnpparibasfortis.be Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=0gqogan005p6ps7jcpvj776bs4; language=nl
2024-09-27 04:01:32 UTC	672	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 27 Sep 2024 04:01:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Set-Cookie: PHPSESSID=4j2ksk0kjes72nl72k8i36o6q2; path=/; domain=reward.bnpparibasfortis.be; secure; HttpOnly Set-Cookie: language=nl; expires=Sat, 27-Sep-2025 04:01:32 GMT; Max-Age=31536000; path=/; domain=reward.bnpparibasfortis.be; secure; httponly Location: https://reward.bnpparibasfortis.be/nl/ X-Frame-Options: DENY X-UA-Compatible: IE=Edge,chrome=1
2024-09-27 04:01:32 UTC	7044	IN	Data Raw: 31 62 37 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 6e 6c 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 21 2d 2d 5b 69 66 20 49 45 5d 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 69 6d 61 67 65 74 6f 6f 6c 62 61 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 20 63 6f Data Ascii: 1b77<!DOCTYPE html><html class="no-js" lang="nl"><head> <meta charset="utf-8"> <meta http-equiv="x-ua-compatible" content="ie=edge"> ...[if IE]><meta http-equiv="imagetoolbar" content="no"><![endif]--> <meta name="format-detection" co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.7	49758	83.217.75.108	443	5312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:01:33 UTC	711	OUT	GET /nl/ HTTP/1.1 Host: reward.bnpparibasfortis.be Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: language=nl; PHPSESSID=4j2ksk0kjes72nl72k8i36o6q2
2024-09-27 04:01:33 UTC	630	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 04:01:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Set-Cookie: PHPSESSID=6thivvfp3dn7hfp7uijia4l1n0; path=/; domain=reward.bnpparibasfortis.be; secure; HttpOnly Set-Cookie: language=nl; expires=Sat, 27-Sep-2025 04:01:33 GMT; Max-Age=31536000; path=/; domain=reward.bnpparibasfortis.be; secure; httponly Vary: Accept-Encoding X-Frame-Options: DENY X-UA-Compatible: IE=Edge,chrome=1
2024-09-27 04:01:33 UTC	7044	IN	Data Raw: 31 62 37 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 6e 6c 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 21 2d 2d 5b 69 66 20 49 45 5d 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 69 6d 61 67 65 74 6f 6f 6c 62 61 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 20 63 6f Data Ascii: 1b77<!DOCTYPE html><html class="no-js" lang="nl"><head> <meta charset="utf-8"> <meta http-equiv="x-ua-compatible" content="ie=edge"> ...[if IE]><meta http-equiv="imagetoolbar" content="no"><![endif]--> <meta name="format-detection" co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.7	49762	83.217.75.108	443	5312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:01:47 UTC	715	OUT	GET /fr/faq/ HTTP/1.1 Host: reward.bnpparibasfortis.be Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: language=nl; PHPSESSID=6thivvfp3dn7hfp7uijia4l1n0
2024-09-27 04:01:47 UTC	630	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 04:01:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Set-Cookie: PHPSESSID=eaf090cevpqr4rbim4i5dr4795; path=/; domain=reward.bnpparibasfortis.be; secure; HttpOnly Set-Cookie: language=fr; expires=Sat, 27-Sep-2025 04:01:47 GMT; Max-Age=31536000; path=/; domain=reward.bnpparibasfortis.be; secure; httponly Vary: Accept-Encoding X-Frame-Options: DENY X-UA-Compatible: IE=Edge,chrome=1
2024-09-27 04:01:47 UTC	15754	IN	Data Raw: 31 65 34 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 66 72 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 21 2d 2d 5b 69 66 20 49 45 5d 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 69 6d 61 67 65 74 6f 6f 6c 62 61 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 20 63 6f Data Ascii: 1e47<!DOCTYPE html><html class="no-js" lang="fr"><head> <meta charset="utf-8"> <meta http-equiv="x-ua-compatible" content="ie=edge"> ...[if IE]><meta http-equiv="imagetoolbar" content="no"><![endif]--> <meta name="format-detection" co
2024-09-27 04:01:47 UTC	7229	IN	Data Raw: 6e 64 69 63 61 74 69 66 20 65 6e 64 26 65 61 63 75 74 65 3b 61 6e 73 20 6c 65 73 20 31 30 20 6a 6f 75 72 73 20 6f 75 76 72 61 62 6c 65 73 3c 62 72 20 2f 3e 2d 20 75 6e 20 63 61 64 65 61 75 20 65 6e 76 6f 79 26 65 61 63 75 74 65 3b 20 70 61 72 20 6c 61 20 70 6f 73 74 65 20 3a 20 64 26 65 61 63 75 74 65 3b 6c 61 69 20 64 65 20 6c 69 76 72 61 69 73 6f 6e 20 69 6e 64 69 63 61 74 69 66 20 65 6e 64 26 65 61 63 75 74 65 3b 61 6e 73 20 6c 65 73 20 31 30 20 6a 6f 75 72 73 20 6f 75 76 72 61 62 6c 65 73 3c 62 72 20 2f 3e 2d 20 75 6e 65 20 64 6f 6e 61 74 69 6f 6e 20 26 61 67 72 61 76 65 3b 0d 0a 31 62 36 62 0d 0a 20 75 6e 65 20 62 6f 6e 6e 65 20 26 6f 65 6c 69 67 3b 75 76 72 65 20 3a 20 42 4e 50 20 50 61 72 69 62 61 73 20 46 6f 72 74 69 73 20 76 65 72 73 65 20 76 6f Data Ascii: ndicatif endéans les 10 jours ouvrables<br />- un cadeau envoyé par la poste : délai de livraison indicatif endéans les 10 jours ouvrables<br />- une donation à1b6b une bonne &oelig;uvre : BNP Paribas Fortis verse vo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.7	49763	83.217.75.108	443	5312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:01:54 UTC	719	OUT	GET /fr/log-off/ HTTP/1.1 Host: reward.bnpparibasfortis.be Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=eaf090cevpqr4rbim4i5dr4795; language=fr
2024-09-27 04:01:54 UTC	672	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 27 Sep 2024 04:01:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Set-Cookie: PHPSESSID=2nqpdmgpkeu3o31v11u7skccj2; path=/; domain=reward.bnpparibasfortis.be; secure; HttpOnly Set-Cookie: language=fr; expires=Sat, 27-Sep-2025 04:01:54 GMT; Max-Age=31536000; path=/; domain=reward.bnpparibasfortis.be; secure; httponly Location: https://reward.bnpparibasfortis.be/fr/ X-Frame-Options: DENY X-UA-Compatible: IE=Edge,chrome=1
2024-09-27 04:01:54 UTC	7303	IN	Data Raw: 31 63 37 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 66 72 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 21 2d 2d 5b 69 66 20 49 45 5d 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 69 6d 61 67 65 74 6f 6f 6c 62 61 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 20 63 6f Data Ascii: 1c7a<!DOCTYPE html><html class="no-js" lang="fr"><head> <meta charset="utf-8"> <meta http-equiv="x-ua-compatible" content="ie=edge"> ...[if IE]><meta http-equiv="imagetoolbar" content="no"><![endif]--> <meta name="format-detection" co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.7	49764	83.217.75.108	443	5312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:01:54 UTC	711	OUT	GET /fr/ HTTP/1.1 Host: reward.bnpparibasfortis.be Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: language=fr; PHPSESSID=2nqpdmgpkeu3o31v11u7skccj2
2024-09-27 04:01:55 UTC	630	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 04:01:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Set-Cookie: PHPSESSID=l3hlk6i63h4tuva06auug4vsg6; path=/; domain=reward.bnpparibasfortis.be; secure; HttpOnly Set-Cookie: language=fr; expires=Sat, 27-Sep-2025 04:01:54 GMT; Max-Age=31536000; path=/; domain=reward.bnpparibasfortis.be; secure; httponly Vary: Accept-Encoding X-Frame-Options: DENY X-UA-Compatible: IE=Edge,chrome=1
2024-09-27 04:01:55 UTC	7303	IN	Data Raw: 31 63 37 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 66 72 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 21 2d 2d 5b 69 66 20 49 45 5d 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 69 6d 61 67 65 74 6f 6f 6c 62 61 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 20 63 6f Data Ascii: 1c7a<!DOCTYPE html><html class="no-js" lang="fr"><head> <meta charset="utf-8"> <meta http-equiv="x-ua-compatible" content="ie=edge"> ...[if IE]><meta http-equiv="imagetoolbar" content="no"><![endif]--> <meta name="format-detection" co

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 3720, Parent PID: 6008

General

Target ID:	0
Start time:	00:00:33
Start date:	27/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 5312, Parent PID: 3720

General

Target ID:	4
Start time:	00:00:37
Start date:	27/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=1980,i,7807176154066329382,13733837652376969656,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 5936, Parent PID: 6008

General

Target ID:	6
Start time:	00:00:42
Start date:	27/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.mywelcomepackreward.be/"
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://www.mywelcomepackreward.be/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Chrome Cache Entry: 90

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

Windows Analysis Report
http://www.mywelcomepackreward.be/