Edit tour

Windows Analysis Report
https://www.firstecomplete.com

Overview

General Information

Sample URL:	https://www.firstecomplete.com
Analysis ID:	1523391
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

HTML body contains low number of good links

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 920 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5436 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2212 --field-trial-handle=2020,i,10643037783213046967,8917316618196899812,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5600 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.firstecomplete.com" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/htmlX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; mode=blockContent-Security-Policy: default-src 'self'; connect-src *; font-src * data:; frame-src *; img-src * data:; media-src *; object-src *; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline';Referrer-Policy: strict-originExpect-CT: max-age=86400X-Content-Type-Options: nosniffPermissions-Policy: camera=(), microphone=()Strict-Transport-Security: max-age=15768000; includeSubDomains; preloadSERVER: Date: Tue, 01 Oct 2024 13:08:04 GMTContent-Length: 1245Strict-Transport-Security: max-age=4294967294

Source: chromecache_74.4.dr, chromecache_82.4.dr, chromecache_80.4.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_74.4.dr, chromecache_82.4.dr, chromecache_80.4.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_74.4.dr, chromecache_82.4.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_76.4.dr, chromecache_67.4.dr	String found in binary or memory: https://jhildenbiddle.github.io/css-vars-ponyfill/#/?id=options
Source: chromecache_76.4.dr, chromecache_67.4.dr	String found in binary or memory: https://stackoverflow.com/questions/46429937/ie11-does-a-polyfill-script-exist-for-css-variables

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.7:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.7:49738 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@17/41@12/7

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2212 --field-trial-handle=2020,i,10643037783213046967,8917316618196899812,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.firstecomplete.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2212 --field-trial-handle=2020,i,10643037783213046967,8917316618196899812,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://getbootstrap.com/)	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
pbs.first-quotes.com	161.199.76.39	true	false	unknown
www.firstecomplete.com	161.199.76.40	true	false	unknown
cdnjs.cloudflare.com	104.17.25.14	true	false	unknown
www.google.com	216.58.212.164	true	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://www.firstecomplete.com/	false	unknown
https://pbs.first-quotes.com/WebResource.axd?d=4Doe9-T2x8bzL-X_T_9dOCpxMQsSu2AA8S6eSXTsiANjo_FH87PF5zy8wAdzn2Fk_NBiGdKnwOa64Nzcikoe5Eqb49Xx-M_vMZ8yREHoXbL2CpSCp8gmBE2hfM95agPiV3JPN6xtwE0yvhTFDZ8zHWquXrSMdJfW0&t=638617536140000000	false	unknown
https://pbs.first-quotes.com/Secured/EcompletePaymentOption/EcompletePaymentLogin.aspx	false	unknown
https://pbs.first-quotes.com/WebResource.axd?d=ylVZOvouK_BkjsCX7QFfPJAJMpaYKcS99qSktRmlKarFwE3Pkv3Y99K6p-FsNZNh1F-RskGsm9kGWkSwi4IuOf01LPxXRyHNxsyLOEv9Hyng1H93GWLaTg2&t=638617536140000000	false	unknown
https://pbs.first-quotes.com/JavaScript/MainView.js?v=1	false	unknown
https://pbs.first-quotes.com/JavaScript/jqueryConfirm.js	false	unknown
https://pbs.first-quotes.com/tempretriever.i1handler?LiteralName=kLiqw5I4FCTaTQ7AvuoflBzCap%2bM4PSrTrpOWRrWjtD6pMGH_agwxSZSxobh0jivo8o%3d&inline=1&ClientFileName=%22logo_primary_thumb.jpg%22&mimeType=image%2fjpeg&SS=311f675f-5024-436a-aed7-33cd36104033	false	unknown
https://pbs.first-quotes.com/WebResource.axd?d=635O8dWR2vwElIyx754oL7z_LOmgDHd4OuEuKB20_Av1-l21ZukpdZhm8e67dSgZ8_S0OApUzE78osQTyUXsmt1Z7gSEIkjlvnXzOj3ihqLjHiSu0UT2jpQ5QZ16Jdhr0&t=638617536140000000	false	unknown
https://cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js	false	unknown
https://cdnjs.cloudflare.com/ajax/libs/bootstrap/5.1.3/js/bootstrap.min.js	false	unknown
https://cdnjs.cloudflare.com/ajax/libs/bootstrap/5.1.3/css/bootstrap.min.css	false	unknown
https://pbs.first-quotes.com/WebResource.axd?d=360wl-vvFvG9u7MHYpZnn88VVBcg-v0fizLjSuxbKS8PLQrfQzo3pawTgvQR_1z-nTNIe9XSjTdz-M8r17k0XKyAYVWSn4SZL7x0w4ghBGU1dnCq-0L9Zn1WrMu_3PMufrARYQnx2CI1&t=638617536140000000	false	unknown
https://pbs.first-quotes.com//sessionpoller.i1handler?SS=311f675f-5024-436a-aed7-33cd36104033&interval=60&time=1727791786794	false	unknown
https://pbs.first-quotes.com/Secured/EcompletePaymentOption/styles/EcompleteStyle.css?v=1	false	unknown
https://pbs.first-quotes.com/favicon.ico	false	unknown
https://pbs.first-quotes.com/tempretriever.i1handler?LiteralName=FVKEq3IPMve6KUPUNwOkao3OhAhMyWAwlMEWZAiiZN8ifpXQ0n0pPMJbFd1qGTfECpM%3d&inline=1&ClientFileName=%22logo_thumb.jpg%22&mimeType=image%2fjpeg&SS=311f675f-5024-436a-aed7-33cd36104033	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_74.4.dr, chromecache_82.4.dr	false		unknown
https://stackoverflow.com/questions/46429937/ie11-does-a-polyfill-script-exist-for-css-variables	chromecache_76.4.dr, chromecache_67.4.dr	false		unknown
https://github.com/twbs/bootstrap/blob/main/LICENSE)	chromecache_74.4.dr, chromecache_82.4.dr, chromecache_80.4.dr	false		unknown
https://getbootstrap.com/)	chromecache_74.4.dr, chromecache_82.4.dr, chromecache_80.4.dr	false	URL Reputation: safe	unknown
https://jhildenbiddle.github.io/css-vars-ponyfill/#/?id=options	chromecache_76.4.dr, chromecache_67.4.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.17.24.14	unknown	United States	13335	CLOUDFLARENETUS	false
216.58.212.164	www.google.com	United States	15169	GOOGLEUS	false
161.199.76.40	www.firstecomplete.com	United States	398097	WINTRUST-FINANCIAL-CORPORATION-EG-ILUS	false
161.199.76.39	pbs.first-quotes.com	United States	398097	WINTRUST-FINANCIAL-CORPORATION-EG-ILUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.7

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1523391
Start date and time:	2024-10-01 15:06:55 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 23s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://www.firstecomplete.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	15
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@17/41@12/7
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 216.58.206.35, 142.250.186.110, 64.233.166.84, 34.104.35.123, 142.250.184.202, 142.250.185.234, 142.250.185.202, 172.217.18.106, 142.250.185.170, 142.250.185.138, 142.250.184.234, 142.250.181.234, 142.250.186.138, 172.217.16.202, 216.58.212.138, 216.58.206.74, 142.250.185.74, 142.250.185.106, 172.217.18.10, 142.250.186.106, 4.175.87.197, 93.184.221.240, 52.165.164.15, 20.242.39.171, 13.85.23.206, 142.250.181.227
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, wu.ec.azureedge.net, clientservices.googleapis.com, ctldl.windowsupdate.com, time.windows.com, wu.azureedge.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, clients.l.google.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://www.firstecomplete.com

Input	Output
URL: https://pbs.first-quotes.com/Secured/EcompletePaymentOption/EcompletePaymentLogin.aspx Model: jbxai	{ "brand":["FIRST INSURANCE FUNDING"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"LOGIN", "text_input_field_labels":["QUOTE NUMBER", "ZIP CODE"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://pbs.first-quotes.com/Secured/EcompletePaymentOption/EcompletePaymentLogin.aspx Model: jbxai	{ "phishing_score":8, "brands":"FIRST INSURANCE FUNDING", "legit_domain":"firstinsurancefunding.com", "classification":"known", "reasons":["The brand 'FIRST INSURANCE FUNDING' is known and has an official website at 'firstinsurancefunding.com'.", "The URL 'pbs.first-quotes.com' does not match the legitimate domain 'firstinsurancefunding.com'.", "The presence of 'first-quotes.com' instead of the legitimate domain is suspicious and could indicate a phishing attempt.", "The use of a subdomain 'pbs' does not align with the known structure of the legitimate domain.", "The URL contains an extra word 'quotes' which is a common tactic in phishing URLs to appear legitimate."], "brand_matches":[true], "url_match":true, "brand_input":"FIRST INSURANCE FUNDING", "input_fields":"QUOTE NUMBER, ZIP CODE"}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 241 x 59, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13356
Entropy (8bit):	7.968211673548844
Encrypted:	false
SSDEEP:	192:JUwEh0d665+gL9z1E5asRCSTgoXsdJvWrhYXAieBEL8F1bJOyzud/wuoorMkrF39:JHZ+sR1EUZShXsdJMhoAi2Md0A5iOOM
MD5:	5886DE170F4AEC9BA4251033D91CCEE3
SHA1:	B682C4E4160EFDF1869C13C20BE37C6CBACEA57D
SHA-256:	4D79DD9B59D5F8929AA9551D3C14EAB1936081732622F30D1AF1B7430E8C63F7
SHA-512:	DD7DBFF6AD11F6288722FF55F1966DB18FC451FC8EA49B4A132FB90801F1F5722F530ED44313D03AED179AF0E5A728A94EA51BC80F2B268B98BD3A2841C0081C
Malicious:	false
Reputation:	low
URL:	https://pbs.first-quotes.com/tempretriever.i1handler?LiteralName=FVKEq3IPMve6KUPUNwOkao3OhAhMyWAwlMEWZAiiZN8ifpXQ0n0pPMJbFd1qGTfECpM%3d&inline=1&ClientFileName=%22logo_thumb.jpg%22&mimeType=image%2fjpeg&SS=311f675f-5024-436a-aed7-33cd36104033
Preview:	.PNG........IHDR.......;.......l.....sRGB.........gAMA......a.....pHYs..........o.d..3.IDATx^.}.X.G....w..d.lb.1jL............. ..;.zo.r....;H9t..HQ0.CvS................y.9.o..f.7...7e.....ddf..o.....n.q....... ... ...$!!......HI.X...A.S.....ZZ.HzF..+($LT.$.u....p@Fvh.s.{.}..~.m.u.&rH^..._y"'{.l...~...... .%%...())u.}g......;..!...?%...=.....Lt.$..Q\\.......S..9....!V.....84.utt....?.p....C..2.....i............%.....x.....1Q$......w..4~..wIGG..-...RQVy...&....4V...B....>....6#@.W......m.6.k....D..j...oj...Nx.\K{....n..?#"zzz.9.O>.x...p;.o. ...g........,..e..P..z.z`.....71.:H_.n\\.Tu....'..8z...c...M. .+..n\|.....Z..')s..e.H.ay..ud....r......z.O77..;. 1........'+.`Y``.}..@..............A...7w....{.p?.' .\ .{...kwm.......2).....Y.ZXX..*D.U~.Er.&qtd.[../.x.nns/.]$..z...>.....i^1?~.W.........GTU..G...w...>x.p8.....Q......8##cQ`@P7>.........&xR...=...xQf.W_.....ru&.EZZ.[jj.J..F#j...:O45/.M...9.....khhX......<....;))El.WW..B..H......... 6....@?

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	37157
Entropy (8bit):	5.26102092012037
Encrypted:	false
SSDEEP:	384:9bS/aFSxMrnH0LtFG78tEI1EgnCRs41tOycpQm1Dcmx1e8MNPMqh46Grc++yCvm5:9CxQULtFqgnCPcychDcQsoXZ4G/bES
MD5:	36445344085FF1A972D030E78F1D8F4F
SHA1:	ED54AFF79A139BE47E6E80344EF78B3B8D1C54BE
SHA-256:	330ED4ED071BD71BB98F3DF10A2A0DE9513FF586D87F6C60D5E3BFF354A00FDC
SHA-512:	5D84D652C802BD1C186CDB6381E3D41A8E353DB3B134BAE5951FD2A0008355059AC17C78977BD05B82273832B60E39DF8681F10649DB2D0BC1E62080306E8517
Malicious:	false
Reputation:	low
URL:	https://pbs.first-quotes.com/WebResource.axd?d=4Doe9-T2x8bzL-X_T_9dOCpxMQsSu2AA8S6eSXTsiANjo_FH87PF5zy8wAdzn2Fk_NBiGdKnwOa64Nzcikoe5Eqb49Xx-M_vMZ8yREHoXbL2CpSCp8gmBE2hfM95agPiV3JPN6xtwE0yvhTFDZ8zHWquXrSMdJfW0&t=638617536140000000
Preview:	..// Initializes format information...// Needs to be called before any other function...function I1WebGlobalization_Init(...// Currency..._currencyDecimalDigits, ..._currencyDecimalSeparator, ..._currencyGroupSeparator,..._currencyGroupSizes,..._currencyNegativePattern,..._currencyPositivePattern,..._currencySymbol,...// Percent..._percentDecimalDigits, ..._percentDecimalSeparator, ..._percentGroupSeparator,..._percentGroupSizes,..._percentNegativePattern,..._percentPositivePattern,..._percentSymbol,...// Number..._numberDecimalDigits, ..._numberDecimalSeparator, ..._numberGroupSeparator,..._numberGroupSizes, ..._numberNegativePattern,...// Date/time..._amDesignator,..._dateSeparator,..._fullDateTimePattern,..._longDatePattern,..._longTimePattern,..._monthDayPattern,..._pmDesignator,..._rfc1123Pattern,..._shortDatePattern,..._shortTimePattern,..._sortableDateTimePattern,..._timeSeparator,..._universalSortableDateTimePattern,..._yearMonthPattern,..._nativeCalendarName,..._abbreviatedDay

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14900), with no line terminators
Category:	dropped
Size (bytes):	14900
Entropy (8bit):	5.512213590670479
Encrypted:	false
SSDEEP:	384:lIblZQVB2+dFbgOM9/QaOJrcAHAiIaeLLQJIfL:lIblZ2JaO+/iIaeLL2U
MD5:	9B2E64B2D2F58DFB68A14E8873409D84
SHA1:	82D079803A82FE713A4AE1FB69BAAAFC0D915276
SHA-256:	38475B9D8B21E9D6D5FE66C6B6F14F7B6603AF287514EDD48CA004FCB936D85E
SHA-512:	C8165F4EE6E19C7650D10AC12BA4FE1E69C807EBAB2E9B0185F71BEB9513305E874F6D3B6C8C1F99F87B473835CA147FACB9F54C5403CC996E6EE2244BD904FE
Malicious:	false
Reputation:	low
Preview:	function I1GetAggregateHeightForElementContents(a){var _da=0;for(var i=0;i<a.childNodes.length;i++){var _db=a.childNodes[i];if(typeof(_db.offsetHeight)=='number'){_da+=_db.offsetHeight;}}return _da;}function I1GetXmlNodeValue(b,c){if(typeof(b.selectSingleNode)!='undefined'){var _dc=b.selectSingleNode(c);if(_dc!=null){return _dc.text;}else{return'';}}else{var _dc=b.evaluate(c,b,null,XPathResult.STRING_TYPE,null);if(_dc!=null){return _dc.stringValue;}else{return'';}}}function I1GetXmlNode(b,c){if(typeof(b.selectSingleNode)!='undefined'){return b.selectSingleNode(c);}else{var _dc=b.evaluate(c,b,null,XPathResult.ORDERED_NODE_ITERATOR_TYPE,null);if(_dc!=null)return _dc.iterateNext();return null;}}function I1AddEventHandler(a,d,f){var _dd=function(e){if(typeof(e)=='undefined'){e=window._cx;}f(e);};if(a.addEventListener){a.addEventListener(d,_dd,false);}else if(a.attachEvent){a.attachEvent('on'+d,_dd);}}function I1ShowModalDialogNotifierScreen(){var obj;modalDialogNotifierScreen=obj=document.

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 402 x 43, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6718
Entropy (8bit):	7.943908784333059
Encrypted:	false
SSDEEP:	192:cG0PYi6WzKkXfSnes26GmsYnSpnSjcmnWt9G9jmqm:tfi6WzKkXcvZGm/xTWt9qaqm
MD5:	FEDF555A3F738BD48BBA7B86C235B12B
SHA1:	DE11673BF5EB896C15CE8A9E355A6036162C9112
SHA-256:	1B9D04602C8889B84D419F9750FE9E9AF6E563E96FEAA8DFD9FF11D3F6CD9535
SHA-512:	6662C4C3159C40C2ABA0752211F1CC00BA7E4FE6173A023BC1A6A9D2C7976E23D9568332D63C0010265603522825AD8D05436D6E39A6930030F6F283233C10A9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......+.....R0......sRGB.........gAMA......a.....pHYs..........o.d....IDATx^.]...U..Id]]5<...I...tUw.....kX..V$.t..Ix."..@T.V.A.vau.W..".gwAP....p..Wx.[y........0......V...[.5s.....N.T....n.{.....b.D.T.....[r.b......=.O...........XZZf.......U.8..i.j>.c...'v.v.b....KK.........==....G.....2+.l=....+>....J.P....].R.^.BW\......2oF.ZC2>a....eV.f...v.N...[....,.Aur.\.3g.C.bzih..e...FXkH.'.!.....4...Z..2.6..'.A..G`..x..jH0r~.\.r..............~...'^C\|k...0~...:yK.w".Yi..~A.`C....i......._...........s...ik.S...(_.....8_.o....Dy...9.)Wv.1X...{..........y.n......'..!...[.iM...........v.....2.7..Y.....p.(..._.........!...2...o.....7z?....P...........H..Z.1D..C...j.:!..)!.....g{$_....N...>..{ta...}.i}Y..-e.."W....4$.....-..3.R..<J.o;.2:hdu.d2..$.X...7...x4>'.KE.}b.4......W..s....g........B...?.i....#9X .....$.a#..{SKC.=u.j.B...:.....S..\.....V...]../..G.!G.].bV....u..)..x:.R.C..O.......&...S.E..9.a..GG.).,...6...A.

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	6786
Entropy (8bit):	4.723600993991351
Encrypted:	false
SSDEEP:	96:P3iSTnZkTJaHplX64QlWSTWIk4jiqey48VBR4z:XbK4H/+Hi/yVVBR4z
MD5:	4AB4B80E67032708F326ED03C64C7060
SHA1:	2657B67332205F80D7C198408D07543AD95701F3
SHA-256:	E572CBB858079300ED7279C79508A6C5AFC7F1914F9E72F3FC35F6D65409FF02
SHA-512:	2447D2DC60785F170AA8BE3E7CF553D842D650EBF77E6B3602DB2128846A28614F27CA32585E0A0D2F54BF0A4012C37BFC4E34EFF68BAD979ECA3942AC2C6B0D
Malicious:	false
Reputation:	low
URL:	https://pbs.first-quotes.com/JavaScript/jqueryConfirm.js
Preview:	(function($){..... $.confirm = function (params) {..... if($('#confirmOverlay').length){.....return false;....}....... var buttonHTML = '';.. $.each(params.buttons, function (key, obj) {.. var name = obj['name'];.... buttonHTML += '<a href="#" class="mr-3 ButtonGeneric '+ obj['class']+'" role="button" aria-pressed="true">' + name + '<span></span></a>';..........if(!obj.action){......obj.action = function(){};.....}.. });.... var titleHTML = '';.. if (params.titleClass).. titleHTML += '<h1 class="' + params.titleClass + '">' + params.title + '</h1>';.. else.. titleHTML += '<h1>' + params.title + '</h1>';.... var messageHTML = '';.. if (params.messageClass).. messageHTML += '<p class="' + params.messageClass + '">' + params.message + '</p>';.. else.. messageHTML += '<p>' + params.message + '</p>';...... var confirmBoxHTML = '';.. if (params.confi

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	37157
Entropy (8bit):	5.26102092012037
Encrypted:	false
SSDEEP:	384:9bS/aFSxMrnH0LtFG78tEI1EgnCRs41tOycpQm1Dcmx1e8MNPMqh46Grc++yCvm5:9CxQULtFqgnCPcychDcQsoXZ4G/bES
MD5:	36445344085FF1A972D030E78F1D8F4F
SHA1:	ED54AFF79A139BE47E6E80344EF78B3B8D1C54BE
SHA-256:	330ED4ED071BD71BB98F3DF10A2A0DE9513FF586D87F6C60D5E3BFF354A00FDC
SHA-512:	5D84D652C802BD1C186CDB6381E3D41A8E353DB3B134BAE5951FD2A0008355059AC17C78977BD05B82273832B60E39DF8681F10649DB2D0BC1E62080306E8517
Malicious:	false
Reputation:	low
Preview:	..// Initializes format information...// Needs to be called before any other function...function I1WebGlobalization_Init(...// Currency..._currencyDecimalDigits, ..._currencyDecimalSeparator, ..._currencyGroupSeparator,..._currencyGroupSizes,..._currencyNegativePattern,..._currencyPositivePattern,..._currencySymbol,...// Percent..._percentDecimalDigits, ..._percentDecimalSeparator, ..._percentGroupSeparator,..._percentGroupSizes,..._percentNegativePattern,..._percentPositivePattern,..._percentSymbol,...// Number..._numberDecimalDigits, ..._numberDecimalSeparator, ..._numberGroupSeparator,..._numberGroupSizes, ..._numberNegativePattern,...// Date/time..._amDesignator,..._dateSeparator,..._fullDateTimePattern,..._longDatePattern,..._longTimePattern,..._monthDayPattern,..._pmDesignator,..._rfc1123Pattern,..._shortDatePattern,..._shortTimePattern,..._sortableDateTimePattern,..._timeSeparator,..._universalSortableDateTimePattern,..._yearMonthPattern,..._nativeCalendarName,..._abbreviatedDay

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1742), with no line terminators
Category:	downloaded
Size (bytes):	1742
Entropy (8bit):	4.851392072244473
Encrypted:	false
SSDEEP:	48:ZSVjrgfFQbjRiB2V8UlAOdK5IAiKCIAUi5:ZS+fFsjRiWDAOTK45
MD5:	11F3B437F58799BBD200197803B37A39
SHA1:	1B8D073942458C73BB8D6D928F1C6679D4AB4811
SHA-256:	62EB21299CB903B3543B0741FB3D92A0E3C455B5DABF51FA7CD196110ED53384
SHA-512:	2541D0D2B1DF77BB0E6F8ED5BFE31E681002FE7A41063DF1CB80F9849DA2F62C4DCAB5FF463755C67A847D09FB4C0C77DE49C7314241E6C65D1391D1181C15BA
Malicious:	false
Reputation:	low
URL:	https://pbs.first-quotes.com/WebResource.axd?d=360wl-vvFvG9u7MHYpZnn88VVBcg-v0fizLjSuxbKS8PLQrfQzo3pawTgvQR_1z-nTNIe9XSjTdz-M8r17k0XKyAYVWSn4SZL7x0w4ghBGU1dnCq-0L9Zn1WrMu_3PMufrARYQnx2CI1&t=638617536140000000
Preview:	function ActivateUnloadBlocker(e){if(unloadBlocker.parentNode!=null&&disableUnloadBlockerForNextUnload==false){unloadBlocker.style.display="block";unloadBlocker.focus();}disableUnloadBlockerForNextUnload=false;}document.body.style.cursor='auto';function SetupUnloadBlocker(){unloadBlocker=document.createElement("div");unloadBlocker.setAttribute('style','-moz-outline-style:none;');unloadBlocker.style.display='none';unloadBlocker.style.backgroundColor='white';unloadBlocker.style.filter='alpha(opacity=0)';unloadBlocker.style.opacity='0';unloadBlocker.style.textAlign='right';unloadBlocker.style.padding='10px';unloadBlocker.style.cursor='wait';unloadBlocker.style.zIndex='30000';unloadBlocker.style.position='absolute';unloadBlocker.style.left='0px';unloadBlocker.style.top='0px';unloadBlocker.style.borderWidth='0px';unloadBlocker.style.padding='0px';unloadBlocker.style.width='100%';unloadBlocker.style.height='100%';unloadBlocker.tabIndex=-1;var a=function(e){e.cancelBubble=true;e.returnValue=f

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (651), with CRLF line terminators
Category:	downloaded
Size (bytes):	92566
Entropy (8bit):	4.646755860469122
Encrypted:	false
SSDEEP:	1536:d1LdmEuzkusMJERG1cMuggmXrxKL3yfffP8iM:Fmjz6RG1buhq8v
MD5:	BE1F0F2E7F5CC055ECD723BD595FA613
SHA1:	CB48950C38BE928F9D230E87712314F34179BEBB
SHA-256:	2785BD16DFA66C50A1F43B45D3156096AED64E3C49D23B7251E890AEF21E68F0
SHA-512:	DF3D33B12141D474FC5266AE4B20F7D1539BD8A1FE6F93E84FA01AB63C60B3718154D267EDC28A36DE10750981C8C9C63F03625B407A48CB468842BFCCDB6377
Malicious:	false
Reputation:	low
URL:	https://pbs.first-quotes.com/JavaScript/MainView.js?v=1
Preview:	.//PBS - 11081 - gabe..//setup a shared variable..window.lookUpDlg = "";....// Instead of doing this: var el = document.getElementById('myobj'); ..// use this:..// var el = $('myobj');..//function $() {..// var elements = new Array();..// for (var i = 0; i < arguments.length; i++) {..// var element = arguments[i];..// if (typeof element == 'string')..// element = document.getElementById(element);..// if (arguments.length == 1)..// return element;..// elements.push(element);..// }..// return elements;..//}....if (navigator.userAgent.toLowerCase().indexOf('firefox') > -1) { window.event = {}; } //do not remove, this takes care of FF restrictions...var frenchAbbreviatedMonth = ['Jan', 'F.v', 'Mar', 'Avr', 'Mai', 'Jun', 'Jui', 'Ao.', 'Sep', 'Oct', 'Nov', 'D.c'];..var frenchMonth = ['Janvier', 'F.vrier', 'Mars', 'Avril', 'Mai', 'Juin', 'Juillet', 'Ao.t', 'Septembre', 'Octobre', 'Novembre', 'D.cembre'];....var cookieUti

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (547), with no line terminators
Category:	dropped
Size (bytes):	547
Entropy (8bit):	5.302580023886096
Encrypted:	false
SSDEEP:	12:AsneN+NqorNK6nNzaylzVeq4ef1DG5DRW9GyOo6z1gqqjG38R+DRR/vW7GeS:sN+NnNhn95V5pdIRW9p0AG38RGRRX
MD5:	2AC36208A83B35EF7B12FB924056866C
SHA1:	2AD7E09A02DF8EEE9690B24EF182C8CAE11DCBBA
SHA-256:	D030C9E9E602A07B4142E8F63A6F3164ADAAC9E2AF593B8FA812C0E8E803B4C0
SHA-512:	74EC97EA4FCCA22CFD5C5EA99BDE2A84433A55DCFCDC2A0319CD1CF156B1A114C3CDD6176FF9306ECA6ABB608824DF7EE0D6EDB198332D913F2ED73EB86F87FE
Malicious:	false
Reputation:	low
Preview:	function I1MemorizeFocusedElement(a){if(I1FocusedElementOverriden==true)return;var c=/^submit\|button\|image\|reset$/i;var d=document.activeElement?document.activeElement:a.target;if(d!=null&&d.b!=null&&d.b.replace(/(^\s+\|\s+$)/,'')!=''&&d.tabIndex>-1){var e=document.getElementsByName('570480E4-F4AB-4ddc-86B8-6B2820030801');if(e==null\|\|e.length<1)return;var f=e[0];if(d.type!=null&&c.test(d.type))return;f.value=d.b;}}function I1RefocusElement(b){var d=document.getElementById(b);if(d&&!d.disabled&&d.focus&&!d.readOnly){try{d.focus();}catch(x){}}}

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	3.9946803684089094
Encrypted:	false
SSDEEP:	3:omkow3yY:aow3yY
MD5:	55397855AB03C86441E65BBC624CDEC7
SHA1:	71738790EF2F2802F65A192A583D5429CD171968
SHA-256:	D5E0B432FEEE1C78748A8C83DF563EB2555368DE1BCAB1957E22EC8A1156AE4F
SHA-512:	6BEFFA2F789CB0A009759864C4CDF41DBE106C13AA5179BE8DC35FC245ABF07D87D2CEAC9E457FC58F402766E8DA67372A3D41C51039076B2FE1A515EE81C9CA
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSFwnnN3OnwsmuZxIFDQbgNvUSBQ0b1unh?alt=proto
Preview:	ChIKBw0G4Db1GgAKBw0b1unhGgA=

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1742), with no line terminators
Category:	dropped
Size (bytes):	1742
Entropy (8bit):	4.851392072244473
Encrypted:	false
SSDEEP:	48:ZSVjrgfFQbjRiB2V8UlAOdK5IAiKCIAUi5:ZS+fFsjRiWDAOTK45
MD5:	11F3B437F58799BBD200197803B37A39
SHA1:	1B8D073942458C73BB8D6D928F1C6679D4AB4811
SHA-256:	62EB21299CB903B3543B0741FB3D92A0E3C455B5DABF51FA7CD196110ED53384
SHA-512:	2541D0D2B1DF77BB0E6F8ED5BFE31E681002FE7A41063DF1CB80F9849DA2F62C4DCAB5FF463755C67A847D09FB4C0C77DE49C7314241E6C65D1391D1181C15BA
Malicious:	false
Reputation:	low
Preview:	function ActivateUnloadBlocker(e){if(unloadBlocker.parentNode!=null&&disableUnloadBlockerForNextUnload==false){unloadBlocker.style.display="block";unloadBlocker.focus();}disableUnloadBlockerForNextUnload=false;}document.body.style.cursor='auto';function SetupUnloadBlocker(){unloadBlocker=document.createElement("div");unloadBlocker.setAttribute('style','-moz-outline-style:none;');unloadBlocker.style.display='none';unloadBlocker.style.backgroundColor='white';unloadBlocker.style.filter='alpha(opacity=0)';unloadBlocker.style.opacity='0';unloadBlocker.style.textAlign='right';unloadBlocker.style.padding='10px';unloadBlocker.style.cursor='wait';unloadBlocker.style.zIndex='30000';unloadBlocker.style.position='absolute';unloadBlocker.style.left='0px';unloadBlocker.style.top='0px';unloadBlocker.style.borderWidth='0px';unloadBlocker.style.padding='0px';unloadBlocker.style.width='100%';unloadBlocker.style.height='100%';unloadBlocker.tabIndex=-1;var a=function(e){e.cancelBubble=true;e.returnValue=f

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 241 x 59, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13356
Entropy (8bit):	7.968211673548844
Encrypted:	false
SSDEEP:	192:JUwEh0d665+gL9z1E5asRCSTgoXsdJvWrhYXAieBEL8F1bJOyzud/wuoorMkrF39:JHZ+sR1EUZShXsdJMhoAi2Md0A5iOOM
MD5:	5886DE170F4AEC9BA4251033D91CCEE3
SHA1:	B682C4E4160EFDF1869C13C20BE37C6CBACEA57D
SHA-256:	4D79DD9B59D5F8929AA9551D3C14EAB1936081732622F30D1AF1B7430E8C63F7
SHA-512:	DD7DBFF6AD11F6288722FF55F1966DB18FC451FC8EA49B4A132FB90801F1F5722F530ED44313D03AED179AF0E5A728A94EA51BC80F2B268B98BD3A2841C0081C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......;.......l.....sRGB.........gAMA......a.....pHYs..........o.d..3.IDATx^.}.X.G....w..d.lb.1jL............. ..;.zo.r....;H9t..HQ0.CvS................y.9.o..f.7...7e.....ddf..o.....n.q....... ... ...$!!......HI.X...A.S.....ZZ.HzF..+($LT.$.u....p@Fvh.s.{.}..~.m.u.&rH^..._y"'{.l...~...... .%%...())u.}g......;..!...?%...=.....Lt.$..Q\\.......S..9....!V.....84.utt....?.p....C..2.....i............%.....x.....1Q$......w..4~..wIGG..-...RQVy...&....4V...B....>....6#@.W......m.6.k....D..j...oj...Nx.\K{....n..?#"zzz.9.O>.x...p;.o. ...g........,..e..P..z.z`.....71.:H_.n\\.Tu....'..8z...c...M. .+..n\|.....Z..')s..e.H.ay..ud....r......z.O77..;. 1........'+.`Y``.}..@..............A...7w....{.p?.' .\ .{...kwm.......2).....Y.ZXX..*D.U~.Er.&qtd.[../.x.nns/.]$..z...>.....i^1?~.W.........GTU..G...w...>x.p8.....Q......8##cQ`@P7>.........&xR...=...xQf.W_.....ru&.EZZ.[jj.J..F#j...:O45/.M...9.....khhX......<....;))El.WW..B..H......... 6....@?

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 402 x 43, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6718
Entropy (8bit):	7.943908784333059
Encrypted:	false
SSDEEP:	192:cG0PYi6WzKkXfSnes26GmsYnSpnSjcmnWt9G9jmqm:tfi6WzKkXcvZGm/xTWt9qaqm
MD5:	FEDF555A3F738BD48BBA7B86C235B12B
SHA1:	DE11673BF5EB896C15CE8A9E355A6036162C9112
SHA-256:	1B9D04602C8889B84D419F9750FE9E9AF6E563E96FEAA8DFD9FF11D3F6CD9535
SHA-512:	6662C4C3159C40C2ABA0752211F1CC00BA7E4FE6173A023BC1A6A9D2C7976E23D9568332D63C0010265603522825AD8D05436D6E39A6930030F6F283233C10A9
Malicious:	false
Reputation:	low
URL:	https://pbs.first-quotes.com/tempretriever.i1handler?LiteralName=kLiqw5I4FCTaTQ7AvuoflBzCap%2bM4PSrTrpOWRrWjtD6pMGH_agwxSZSxobh0jivo8o%3d&inline=1&ClientFileName=%22logo_primary_thumb.jpg%22&mimeType=image%2fjpeg&SS=311f675f-5024-436a-aed7-33cd36104033
Preview:	.PNG........IHDR.......+.....R0......sRGB.........gAMA......a.....pHYs..........o.d....IDATx^.]...U..Id]]5<...I...tUw.....kX..V$.t..Ix."..@T.V.A.vau.W..".gwAP....p..Wx.[y........0......V...[.5s.....N.T....n.{.....b.D.T.....[r.b......=.O...........XZZf.......U.8..i.j>.c...'v.v.b....KK.........==....G.....2+.l=....+>....J.P....].R.^.BW\......2oF.ZC2>a....eV.f...v.N...[....,.Aur.\.3g.C.bzih..e...FXkH.'.!.....4...Z..2.6..'.A..G`..x..jH0r~.\.r..............~...'^C\|k...0~...:yK.w".Yi..~A.`C....i......._...........s...ik.S...(_.....8_.o....Dy...9.)Wv.1X...{..........y.n......'..!...[.iM...........v.....2.7..Y.....p.(..._.........!...2...o.....7z?....P...........H..Z.1D..C...j.:!..)!.....g{$_....N...>..{ta...}.i}Y..-e.."W....4$.....-..3.R..<J.o;.2:hdu.d2..$.X...7...x4>'.KE.}b.4......W..s....g........B...?.i....#9X .....$.a#..{SKC.=u.j.B...:.....S..\.....V...]../..G.!G.].bV....u..)..x:.R.C..O.......&...S.E..9.a..GG.).,...6...A.

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	772
Entropy (8bit):	4.788780335914161
Encrypted:	false
SSDEEP:	24:bNctAJlckapVwFIitYP/7oJlcKyaD83bG4HK:FlckapUXiP/MJLcLG4HK
MD5:	40C594370BCD801177837B52A4565536
SHA1:	96246FE69FA2CB72A55EEF85895DF8C623707DCD
SHA-256:	310CA60823C12918FA5F16023D125295225B3031F7B0670C7B11C37B90FB7AFF
SHA-512:	12ED9B27B5BF21C478641C867E3045C19569CB810DB7300382D2336A12DA892B683CBE62F24AEB2F86B782661C415AEACBA6B2698A2F03448280D77BD7C0D704
Malicious:	false
Reputation:	low
Preview:	var I1FocusedElementOverriden = false; // If true, the hidden field has been manually set...// This script is used by JsHelper.EnableInactivityTimeout()....var I1TimeoutId = null;... //.Stores the return value of window.setTimeout()..var I1TimeoutSubinterval = 1;. //.Timeout intervals that are too long .......... //.are divided into minute-segments of this size ..var I1TimeoutRemaining = 0;.. //.If the timeout interval is divided.......... //.into multiple segments, this is the.......... //.total time remaining in minutes...var I1TimeoutFunction = null;. //.The code that gets executed upon timeout.....var unloadBlocker = null;..var disableUnloadBlockerForNextUnload = false;..var modalDialogNotifierScreen = null;....var I1WebGlobalization_FormatInfo;....

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (58940)
Category:	dropped
Size (bytes):	59219
Entropy (8bit):	5.157361916965591
Encrypted:	false
SSDEEP:	768:pZTlSOLQenVa+Shd413pjWxkRfFdAZTVUzRWQHWxBVm7MT09XAPtThvBEwU8TtL4:p5fkVf5Lw9eEZeqlr
MD5:	259E416EF6833BE43801B8B68A93B008
SHA1:	19080C3B817985336AAB5E1CE6925C99803F2EFD
SHA-256:	70C3D690BDC5CE3B9A1527C46044989A3176E610882FA99F4523E75BC395BCCE
SHA-512:	3AF0603FD03624182245A77F98CDFA9A4CD749768913D04420436754499E65D213BF04F4F719F12ED4F8B709026BC9BF96831B3C7B2F3E5D13F25446541C2395
Malicious:	false
Reputation:	low
Preview:	/!. Bootstrap v5.1.3 (https://getbootstrap.com/). * Copyright 2011-2021 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e(require("@popperjs/core")):"function"==typeof define&&define.amd?define(["@popperjs/core"],e):(t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap=e(t.Popper)}(this,(function(t){"use strict";function e(t){if(t&&t.__esModule)return t;const e=Object.create(null);if(t)for(const i in t)if("default"!==i){const s=Object.getOwnPropertyDescriptor(t,i);Object.defineProperty(e,i,s.get?s:{enumerable:!0,get:()=>t[i]})}return e.default=t,Object.freeze(e)}const i=e(t),s="transitionend",n=t=>{let e=t.getAttribute("data-bs-target");if(!e\|\|"#"===e){let i=t.getAttribute("href");if(!i\|\|!i.includes("#")&&!i.startsWith("."))return null;i.includes("#")&&!i.startsWith("#")&&(i=`#${

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	6786
Entropy (8bit):	4.723600993991351
Encrypted:	false
SSDEEP:	96:P3iSTnZkTJaHplX64QlWSTWIk4jiqey48VBR4z:XbK4H/+Hi/yVVBR4z
MD5:	4AB4B80E67032708F326ED03C64C7060
SHA1:	2657B67332205F80D7C198408D07543AD95701F3
SHA-256:	E572CBB858079300ED7279C79508A6C5AFC7F1914F9E72F3FC35F6D65409FF02
SHA-512:	2447D2DC60785F170AA8BE3E7CF553D842D650EBF77E6B3602DB2128846A28614F27CA32585E0A0D2F54BF0A4012C37BFC4E34EFF68BAD979ECA3942AC2C6B0D
Malicious:	false
Reputation:	low
Preview:	(function($){..... $.confirm = function (params) {..... if($('#confirmOverlay').length){.....return false;....}....... var buttonHTML = '';.. $.each(params.buttons, function (key, obj) {.. var name = obj['name'];.... buttonHTML += '<a href="#" class="mr-3 ButtonGeneric '+ obj['class']+'" role="button" aria-pressed="true">' + name + '<span></span></a>';..........if(!obj.action){......obj.action = function(){};.....}.. });.... var titleHTML = '';.. if (params.titleClass).. titleHTML += '<h1 class="' + params.titleClass + '">' + params.title + '</h1>';.. else.. titleHTML += '<h1>' + params.title + '</h1>';.... var messageHTML = '';.. if (params.messageClass).. messageHTML += '<p class="' + params.messageClass + '">' + params.message + '</p>';.. else.. messageHTML += '<p>' + params.message + '</p>';...... var confirmBoxHTML = '';.. if (params.confi

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (651), with CRLF line terminators
Category:	dropped
Size (bytes):	92566
Entropy (8bit):	4.646755860469122
Encrypted:	false
SSDEEP:	1536:d1LdmEuzkusMJERG1cMuggmXrxKL3yfffP8iM:Fmjz6RG1buhq8v
MD5:	BE1F0F2E7F5CC055ECD723BD595FA613
SHA1:	CB48950C38BE928F9D230E87712314F34179BEBB
SHA-256:	2785BD16DFA66C50A1F43B45D3156096AED64E3C49D23B7251E890AEF21E68F0
SHA-512:	DF3D33B12141D474FC5266AE4B20F7D1539BD8A1FE6F93E84FA01AB63C60B3718154D267EDC28A36DE10750981C8C9C63F03625B407A48CB468842BFCCDB6377
Malicious:	false
Reputation:	low
Preview:	.//PBS - 11081 - gabe..//setup a shared variable..window.lookUpDlg = "";....// Instead of doing this: var el = document.getElementById('myobj'); ..// use this:..// var el = $('myobj');..//function $() {..// var elements = new Array();..// for (var i = 0; i < arguments.length; i++) {..// var element = arguments[i];..// if (typeof element == 'string')..// element = document.getElementById(element);..// if (arguments.length == 1)..// return element;..// elements.push(element);..// }..// return elements;..//}....if (navigator.userAgent.toLowerCase().indexOf('firefox') > -1) { window.event = {}; } //do not remove, this takes care of FF restrictions...var frenchAbbreviatedMonth = ['Jan', 'F.v', 'Mar', 'Avr', 'Mai', 'Jun', 'Jui', 'Ao.', 'Sep', 'Oct', 'Nov', 'D.c'];..var frenchMonth = ['Janvier', 'F.vrier', 'Mars', 'Avril', 'Mai', 'Juin', 'Juillet', 'Ao.t', 'Septembre', 'Octobre', 'Novembre', 'D.cembre'];....var cookieUti

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14900), with no line terminators
Category:	downloaded
Size (bytes):	14900
Entropy (8bit):	5.512213590670479
Encrypted:	false
SSDEEP:	384:lIblZQVB2+dFbgOM9/QaOJrcAHAiIaeLLQJIfL:lIblZ2JaO+/iIaeLL2U
MD5:	9B2E64B2D2F58DFB68A14E8873409D84
SHA1:	82D079803A82FE713A4AE1FB69BAAAFC0D915276
SHA-256:	38475B9D8B21E9D6D5FE66C6B6F14F7B6603AF287514EDD48CA004FCB936D85E
SHA-512:	C8165F4EE6E19C7650D10AC12BA4FE1E69C807EBAB2E9B0185F71BEB9513305E874F6D3B6C8C1F99F87B473835CA147FACB9F54C5403CC996E6EE2244BD904FE
Malicious:	false
Reputation:	low
URL:	https://pbs.first-quotes.com/WebResource.axd?d=635O8dWR2vwElIyx754oL7z_LOmgDHd4OuEuKB20_Av1-l21ZukpdZhm8e67dSgZ8_S0OApUzE78osQTyUXsmt1Z7gSEIkjlvnXzOj3ihqLjHiSu0UT2jpQ5QZ16Jdhr0&t=638617536140000000
Preview:	function I1GetAggregateHeightForElementContents(a){var _da=0;for(var i=0;i<a.childNodes.length;i++){var _db=a.childNodes[i];if(typeof(_db.offsetHeight)=='number'){_da+=_db.offsetHeight;}}return _da;}function I1GetXmlNodeValue(b,c){if(typeof(b.selectSingleNode)!='undefined'){var _dc=b.selectSingleNode(c);if(_dc!=null){return _dc.text;}else{return'';}}else{var _dc=b.evaluate(c,b,null,XPathResult.STRING_TYPE,null);if(_dc!=null){return _dc.stringValue;}else{return'';}}}function I1GetXmlNode(b,c){if(typeof(b.selectSingleNode)!='undefined'){return b.selectSingleNode(c);}else{var _dc=b.evaluate(c,b,null,XPathResult.ORDERED_NODE_ITERATOR_TYPE,null);if(_dc!=null)return _dc.iterateNext();return null;}}function I1AddEventHandler(a,d,f){var _dd=function(e){if(typeof(e)=='undefined'){e=window._cx;}f(e);};if(a.addEventListener){a.addEventListener(d,_dd,false);}else if(a.attachEvent){a.attachEvent('on'+d,_dd);}}function I1ShowModalDialogNotifierScreen(){var obj;modalDialogNotifierScreen=obj=document.

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1245
Entropy (8bit):	5.462849750105637
Encrypted:	false
SSDEEP:	24:hM0mIAvy4Wvsqs1Ra7JZRGNeHX+AYcvP2wk1RjdEF3qpMk5:lmIAq1UqsziJZ+eHX+AdP2TvpMk5
MD5:	5343C1A8B203C162A3BF3870D9F50FD4
SHA1:	04B5B886C20D88B57EEA6D8FF882624A4AC1E51D
SHA-256:	DC1D54DAB6EC8C00F70137927504E4F222C8395F10760B6BEECFCFA94E08249F
SHA-512:	E0F50ACB6061744E825A4051765CEBF23E8C489B55B190739409D8A79BB08DAC8F919247A4E5F65A015EA9C57D326BBEF7EA045163915129E01F316C4958D949
Malicious:	false
Reputation:	low
URL:	https://pbs.first-quotes.com/favicon.ico
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns="http://www.w3.org/1999/xhtml">..<head>..<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>..<title>404 - File or directory not found.</title>..<style type="text/css">.. ..body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}..fieldset{padding:0 15px 10px 15px;} ..h1{font-size:2.4em;margin:0;color:#FFF;}..h2{font-size:1.7em;margin:0;color:#CC0000;} ..h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} ..#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;..background-color:#555555;}..#content{margin:0 0 0 2%;position:relative;}...content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}..-->..</style>..</head>..<body>..<div id="header"><h1>Server Error</h1></div>..<div id="content">.. <div class="co

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65306)
Category:	downloaded
Size (bytes):	163873
Entropy (8bit):	5.058104233525069
Encrypted:	false
SSDEEP:	1536:4t04T8if0W8DsEBpy0cuJBf2rIWE5e0VUpz600I4fM:4t04/0VUpz600I4fM
MD5:	94994C66FEC8C3468B269DC0CC242151
SHA1:	EC16BD19BF4AE9BC2E2336AC409A503BBBDAACAD
SHA-256:	62F74B1CF824A89F03554C638E719594C309B4D8A627A758928C0516FA7890AB
SHA-512:	190194D1F30C8B6DFCB80F9AFDB75625FA5418A52405D81F15D8019BBD92510E817B25A3A18FEDA27D2D1231FE3921FD88FE037E1FBB1CCD08F5FE5E4742FFE3
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/bootstrap/5.1.3/css/bootstrap.min.css
Preview:	@charset "UTF-8";/!. Bootstrap v5.1.3 (https://getbootstrap.com/). * Copyright 2011-2021 The Bootstrap Authors. * Copyright 2011-2021 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */:root{--bs-blue:#0d6efd;--bs-indigo:#6610f2;--bs-purple:#6f42c1;--bs-pink:#d63384;--bs-red:#dc3545;--bs-orange:#fd7e14;--bs-yellow:#ffc107;--bs-green:#198754;--bs-teal:#20c997;--bs-cyan:#0dcaf0;--bs-white:#fff;--bs-gray:#6c757d;--bs-gray-dark:#343a40;--bs-gray-100:#f8f9fa;--bs-gray-200:#e9ecef;--bs-gray-300:#dee2e6;--bs-gray-400:#ced4da;--bs-gray-500:#adb5bd;--bs-gray-600:#6c757d;--bs-gray-700:#495057;--bs-gray-800:#343a40;--bs-gray-900:#212529;--bs-primary:#0d6efd;--bs-secondary:#6c757d;--bs-success:#198754;--bs-info:#0dcaf0;--bs-warning:#ffc107;--bs-danger:#dc3545;--bs-light:#f8f9fa;--bs-dark:#212529;--bs-primary-rgb:13,110,253;--bs-secondary-rgb:108,117,125;--bs-success-rgb:25,135,84;--bs-info-rgb:13,202,240;--bs-warning-rgb:255,193,7;--bs-danger-rgb:220,53

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (547), with no line terminators
Category:	downloaded
Size (bytes):	547
Entropy (8bit):	5.302580023886096
Encrypted:	false
SSDEEP:	12:AsneN+NqorNK6nNzaylzVeq4ef1DG5DRW9GyOo6z1gqqjG38R+DRR/vW7GeS:sN+NnNhn95V5pdIRW9p0AG38RGRRX
MD5:	2AC36208A83B35EF7B12FB924056866C
SHA1:	2AD7E09A02DF8EEE9690B24EF182C8CAE11DCBBA
SHA-256:	D030C9E9E602A07B4142E8F63A6F3164ADAAC9E2AF593B8FA812C0E8E803B4C0
SHA-512:	74EC97EA4FCCA22CFD5C5EA99BDE2A84433A55DCFCDC2A0319CD1CF156B1A114C3CDD6176FF9306ECA6ABB608824DF7EE0D6EDB198332D913F2ED73EB86F87FE
Malicious:	false
Reputation:	low
URL:	https://pbs.first-quotes.com/WebResource.axd?d=yaUIRZP2BxuchGMRpHK-PW27W1wPkpaEWf4v2UdnfBq08EBqGeF9zhziqBFObI894wL7VIAZ2hqkK5ovbH_WxzOKEtH1Y_w_3P3aEKCjubexRXpGhOCoB_uM-bLQ6irt0&t=638617536140000000
Preview:	function I1MemorizeFocusedElement(a){if(I1FocusedElementOverriden==true)return;var c=/^submit\|button\|image\|reset$/i;var d=document.activeElement?document.activeElement:a.target;if(d!=null&&d.b!=null&&d.b.replace(/(^\s+\|\s+$)/,'')!=''&&d.tabIndex>-1){var e=document.getElementsByName('570480E4-F4AB-4ddc-86B8-6B2820030801');if(e==null\|\|e.length<1)return;var f=e[0];if(d.type!=null&&c.test(d.type))return;f.value=d.b;}}function I1RefocusElement(b){var d=document.getElementById(b);if(d&&!d.disabled&&d.focus&&!d.readOnly){try{d.focus();}catch(x){}}}

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (58940)
Category:	downloaded
Size (bytes):	59219
Entropy (8bit):	5.157361916965591
Encrypted:	false
SSDEEP:	768:pZTlSOLQenVa+Shd413pjWxkRfFdAZTVUzRWQHWxBVm7MT09XAPtThvBEwU8TtL4:p5fkVf5Lw9eEZeqlr
MD5:	259E416EF6833BE43801B8B68A93B008
SHA1:	19080C3B817985336AAB5E1CE6925C99803F2EFD
SHA-256:	70C3D690BDC5CE3B9A1527C46044989A3176E610882FA99F4523E75BC395BCCE
SHA-512:	3AF0603FD03624182245A77F98CDFA9A4CD749768913D04420436754499E65D213BF04F4F719F12ED4F8B709026BC9BF96831B3C7B2F3E5D13F25446541C2395
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/bootstrap/5.1.3/js/bootstrap.min.js
Preview:	/!. Bootstrap v5.1.3 (https://getbootstrap.com/). * Copyright 2011-2021 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e(require("@popperjs/core")):"function"==typeof define&&define.amd?define(["@popperjs/core"],e):(t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap=e(t.Popper)}(this,(function(t){"use strict";function e(t){if(t&&t.__esModule)return t;const e=Object.create(null);if(t)for(const i in t)if("default"!==i){const s=Object.getOwnPropertyDescriptor(t,i);Object.defineProperty(e,i,s.get?s:{enumerable:!0,get:()=>t[i]})}return e.default=t,Object.freeze(e)}const i=e(t),s="transitionend",n=t=>{let e=t.getAttribute("data-bs-target");if(!e\|\|"#"===e){let i=t.getAttribute("href");if(!i\|\|!i.includes("#")&&!i.startsWith("."))return null;i.includes("#")&&!i.startsWith("#")&&(i=`#${

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	35096
Entropy (8bit):	4.931440347558008
Encrypted:	false
SSDEEP:	384:8y6Y1fvF+m74vuTArBqUBv3+/1/TFq2cL+ftO3rWv3rrTdVn:pkt2TArBqGvKlTk2u8t+r+B9
MD5:	449D0D32B6B2A5440966084760EBBABE
SHA1:	C9E34DAB33203CAE932DC2055F1E8DF288008A24
SHA-256:	BE2F158DE44EC4965A08B12FBA2892529D994FBC7F7089FB79318A5A0CF5FB93
SHA-512:	14B03A3E0666023EA77DE7065783104E0D541571C147C5544B6DBF2DAA071A70D3CB46A31B5795B29E2D2899DE8D403B78EB34302C3677ADBB41C8148F082048
Malicious:	false
Reputation:	low
URL:	https://pbs.first-quotes.com/Secured/EcompletePaymentOption/styles/EcompleteStyle.css?v=1
Preview:	.* { -webkit-box-sizing: border-box; -moz-box-sizing: border-box; box-sizing: border-box;}..body { color: black;}....header { height: 80px; background: white; margin: 20px;}..header > div{float: left; min-height: 100%; position: relative; width:50%}..header > div:last-child, header > div:first-child {width:25%}..header img{border-width: 0px;margin: 0;margin-right: -50%;position: absolute;top: 50%;left: 50%;transform: translate(-50%,-50%);}.....container { width: 100%; font-size: 13pt; font-weight: normal; font-family: Verdana, Geneva, Tahoma, sans-serif;.. background: #182857; padding-left: 0; padding-right: 0; position: absolute; overflow:auto;}...container div{overflow:auto;}...container::-webkit-scrollbar-thumb {background-image: linear-gradient(#fef800,#fbd100);}.....pLightBox .modal-dialog {overflow:auto;}...inputfield { height: 32px;}...btn { height: 40px; font-size: 18pt; text-transform: uppercase; padding:0; bor

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	772
Entropy (8bit):	4.788780335914161
Encrypted:	false
SSDEEP:	24:bNctAJlckapVwFIitYP/7oJlcKyaD83bG4HK:FlckapUXiP/MJLcLG4HK
MD5:	40C594370BCD801177837B52A4565536
SHA1:	96246FE69FA2CB72A55EEF85895DF8C623707DCD
SHA-256:	310CA60823C12918FA5F16023D125295225B3031F7B0670C7B11C37B90FB7AFF
SHA-512:	12ED9B27B5BF21C478641C867E3045C19569CB810DB7300382D2336A12DA892B683CBE62F24AEB2F86B782661C415AEACBA6B2698A2F03448280D77BD7C0D704
Malicious:	false
Reputation:	low
URL:	https://pbs.first-quotes.com/WebResource.axd?d=ylVZOvouK_BkjsCX7QFfPJAJMpaYKcS99qSktRmlKarFwE3Pkv3Y99K6p-FsNZNh1F-RskGsm9kGWkSwi4IuOf01LPxXRyHNxsyLOEv9Hyng1H93GWLaTg2&t=638617536140000000
Preview:	var I1FocusedElementOverriden = false; // If true, the hidden field has been manually set...// This script is used by JsHelper.EnableInactivityTimeout()....var I1TimeoutId = null;... //.Stores the return value of window.setTimeout()..var I1TimeoutSubinterval = 1;. //.Timeout intervals that are too long .......... //.are divided into minute-segments of this size ..var I1TimeoutRemaining = 0;.. //.If the timeout interval is divided.......... //.into multiple segments, this is the.......... //.total time remaining in minutes...var I1TimeoutFunction = null;. //.The code that gets executed upon timeout.....var unloadBlocker = null;..var disableUnloadBlockerForNextUnload = false;..var modalDialogNotifierScreen = null;....var I1WebGlobalization_FormatInfo;....

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 1, 2024 15:07:44.929282904 CEST	49671	443	192.168.2.7	204.79.197.203
Oct 1, 2024 15:07:47.335491896 CEST	49671	443	192.168.2.7	204.79.197.203
Oct 1, 2024 15:07:49.007514000 CEST	49674	443	192.168.2.7	104.98.116.138
Oct 1, 2024 15:07:49.007515907 CEST	49675	443	192.168.2.7	104.98.116.138
Oct 1, 2024 15:07:49.179266930 CEST	49672	443	192.168.2.7	104.98.116.138
Oct 1, 2024 15:07:52.073357105 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 1, 2024 15:07:52.210550070 CEST	49671	443	192.168.2.7	204.79.197.203
Oct 1, 2024 15:07:52.460521936 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 1, 2024 15:07:53.210539103 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 1, 2024 15:07:54.726175070 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 1, 2024 15:07:57.726125002 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 1, 2024 15:07:58.725979090 CEST	49674	443	192.168.2.7	104.98.116.138
Oct 1, 2024 15:07:58.726778030 CEST	49675	443	192.168.2.7	104.98.116.138
Oct 1, 2024 15:07:58.913487911 CEST	49672	443	192.168.2.7	104.98.116.138
Oct 1, 2024 15:07:59.238451004 CEST	49707	443	192.168.2.7	216.58.212.164
Oct 1, 2024 15:07:59.238492012 CEST	443	49707	216.58.212.164	192.168.2.7
Oct 1, 2024 15:07:59.238559961 CEST	49707	443	192.168.2.7	216.58.212.164
Oct 1, 2024 15:07:59.238759041 CEST	49707	443	192.168.2.7	216.58.212.164
Oct 1, 2024 15:07:59.238774061 CEST	443	49707	216.58.212.164	192.168.2.7
Oct 1, 2024 15:07:59.711632013 CEST	49708	443	192.168.2.7	161.199.76.40
Oct 1, 2024 15:07:59.711673021 CEST	443	49708	161.199.76.40	192.168.2.7
Oct 1, 2024 15:07:59.711740971 CEST	49708	443	192.168.2.7	161.199.76.40
Oct 1, 2024 15:07:59.712290049 CEST	49709	443	192.168.2.7	161.199.76.40
Oct 1, 2024 15:07:59.712327003 CEST	443	49709	161.199.76.40	192.168.2.7
Oct 1, 2024 15:07:59.712374926 CEST	49709	443	192.168.2.7	161.199.76.40
Oct 1, 2024 15:07:59.715898991 CEST	49709	443	192.168.2.7	161.199.76.40
Oct 1, 2024 15:07:59.715919018 CEST	443	49709	161.199.76.40	192.168.2.7
Oct 1, 2024 15:07:59.716249943 CEST	49708	443	192.168.2.7	161.199.76.40
Oct 1, 2024 15:07:59.716264963 CEST	443	49708	161.199.76.40	192.168.2.7
Oct 1, 2024 15:07:59.907815933 CEST	443	49707	216.58.212.164	192.168.2.7
Oct 1, 2024 15:07:59.908873081 CEST	49707	443	192.168.2.7	216.58.212.164
Oct 1, 2024 15:07:59.908898115 CEST	443	49707	216.58.212.164	192.168.2.7
Oct 1, 2024 15:07:59.910003901 CEST	443	49707	216.58.212.164	192.168.2.7
Oct 1, 2024 15:07:59.910053968 CEST	49707	443	192.168.2.7	216.58.212.164
Oct 1, 2024 15:07:59.911642075 CEST	49707	443	192.168.2.7	216.58.212.164
Oct 1, 2024 15:07:59.911715984 CEST	443	49707	216.58.212.164	192.168.2.7
Oct 1, 2024 15:08:00.018682957 CEST	49707	443	192.168.2.7	216.58.212.164
Oct 1, 2024 15:08:00.018698931 CEST	443	49707	216.58.212.164	192.168.2.7
Oct 1, 2024 15:08:00.184190989 CEST	49707	443	192.168.2.7	216.58.212.164
Oct 1, 2024 15:08:00.462068081 CEST	443	49708	161.199.76.40	192.168.2.7
Oct 1, 2024 15:08:00.462393999 CEST	49708	443	192.168.2.7	161.199.76.40
Oct 1, 2024 15:08:00.462419033 CEST	443	49708	161.199.76.40	192.168.2.7
Oct 1, 2024 15:08:00.463480949 CEST	443	49708	161.199.76.40	192.168.2.7
Oct 1, 2024 15:08:00.463562012 CEST	49708	443	192.168.2.7	161.199.76.40
Oct 1, 2024 15:08:00.464735031 CEST	49708	443	192.168.2.7	161.199.76.40
Oct 1, 2024 15:08:00.464814901 CEST	443	49708	161.199.76.40	192.168.2.7
Oct 1, 2024 15:08:00.465341091 CEST	49708	443	192.168.2.7	161.199.76.40
Oct 1, 2024 15:08:00.465348959 CEST	443	49708	161.199.76.40	192.168.2.7
Oct 1, 2024 15:08:00.525490999 CEST	49708	443	192.168.2.7	161.199.76.40
Oct 1, 2024 15:08:00.536973953 CEST	443	49709	161.199.76.40	192.168.2.7
Oct 1, 2024 15:08:00.537247896 CEST	49709	443	192.168.2.7	161.199.76.40
Oct 1, 2024 15:08:00.537267923 CEST	443	49709	161.199.76.40	192.168.2.7
Oct 1, 2024 15:08:00.538383007 CEST	443	49709	161.199.76.40	192.168.2.7
Oct 1, 2024 15:08:00.538467884 CEST	49709	443	192.168.2.7	161.199.76.40
Oct 1, 2024 15:08:00.539043903 CEST	49709	443	192.168.2.7	161.199.76.40
Oct 1, 2024 15:08:00.539113045 CEST	443	49709	161.199.76.40	192.168.2.7
Oct 1, 2024 15:08:00.628370047 CEST	443	49708	161.199.76.40	192.168.2.7
Oct 1, 2024 15:08:00.628732920 CEST	443	49708	161.199.76.40	192.168.2.7
Oct 1, 2024 15:08:00.628787994 CEST	49708	443	192.168.2.7	161.199.76.40
Oct 1, 2024 15:08:00.628887892 CEST	49708	443	192.168.2.7	161.199.76.40
Oct 1, 2024 15:08:00.628909111 CEST	443	49708	161.199.76.40	192.168.2.7
Oct 1, 2024 15:08:00.628918886 CEST	49708	443	192.168.2.7	161.199.76.40
Oct 1, 2024 15:08:00.628957987 CEST	49708	443	192.168.2.7	161.199.76.40
Oct 1, 2024 15:08:00.724625111 CEST	49709	443	192.168.2.7	161.199.76.40
Oct 1, 2024 15:08:00.724647999 CEST	443	49709	161.199.76.40	192.168.2.7
Oct 1, 2024 15:08:00.915963888 CEST	49709	443	192.168.2.7	161.199.76.40
Oct 1, 2024 15:08:00.981292963 CEST	49712	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:00.981347084 CEST	443	49712	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:00.981475115 CEST	49712	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:00.981780052 CEST	49712	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:00.981796026 CEST	443	49712	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:01.224728107 CEST	443	49701	104.98.116.138	192.168.2.7
Oct 1, 2024 15:08:01.224831104 CEST	49701	443	192.168.2.7	104.98.116.138
Oct 1, 2024 15:08:01.696372032 CEST	443	49712	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:01.696907043 CEST	49712	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:01.696917057 CEST	443	49712	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:01.697978973 CEST	443	49712	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:01.698031902 CEST	49712	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:01.702222109 CEST	49712	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:01.702315092 CEST	443	49712	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:01.702572107 CEST	49712	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:01.702579021 CEST	443	49712	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:01.742592096 CEST	49712	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:01.819591999 CEST	49671	443	192.168.2.7	204.79.197.203
Oct 1, 2024 15:08:01.864514112 CEST	443	49712	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:01.864540100 CEST	443	49712	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:01.864581108 CEST	443	49712	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:01.864609957 CEST	49712	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:01.864633083 CEST	443	49712	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:01.864859104 CEST	49712	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:01.865875959 CEST	443	49712	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:01.865885019 CEST	443	49712	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:01.865951061 CEST	49712	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:01.891474009 CEST	443	49712	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:01.891529083 CEST	49712	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:01.891539097 CEST	443	49712	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:01.891551018 CEST	443	49712	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:01.891587973 CEST	49712	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:01.925265074 CEST	49712	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:01.925290108 CEST	443	49712	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:01.984477997 CEST	49713	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:01.984517097 CEST	443	49713	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:01.984570026 CEST	49713	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:01.985338926 CEST	49713	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:01.985353947 CEST	443	49713	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:01.986383915 CEST	49714	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:01.986392975 CEST	443	49714	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:01.986450911 CEST	49714	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:01.987117052 CEST	49714	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:01.987128019 CEST	443	49714	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:01.988042116 CEST	49715	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:01.988078117 CEST	443	49715	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:01.988214016 CEST	49715	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:01.988488913 CEST	49715	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:01.988502979 CEST	443	49715	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:01.989056110 CEST	49716	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:01.989084959 CEST	443	49716	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:01.989139080 CEST	49716	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:01.989240885 CEST	49717	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:01.989278078 CEST	443	49717	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:01.989326000 CEST	49717	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:01.989861965 CEST	49718	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:01.989870071 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:01.989928007 CEST	49718	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:01.990396976 CEST	49718	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:01.990412951 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:01.990864038 CEST	49717	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:01.990875959 CEST	443	49717	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:01.991202116 CEST	49716	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:01.991225004 CEST	443	49716	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:01.992631912 CEST	49719	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:01.992655993 CEST	443	49719	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:01.992717981 CEST	49719	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:01.993370056 CEST	49719	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:01.993382931 CEST	443	49719	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:01.994529009 CEST	49720	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:01.994565010 CEST	443	49720	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:01.994631052 CEST	49720	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:01.994895935 CEST	49720	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:01.994915962 CEST	443	49720	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:01.996062040 CEST	49721	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:01.996088982 CEST	443	49721	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:01.996136904 CEST	49721	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:01.996675968 CEST	49721	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:01.996690035 CEST	443	49721	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.663520098 CEST	443	49721	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.663552046 CEST	443	49714	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.663558006 CEST	443	49715	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.663634062 CEST	443	49719	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.663692951 CEST	443	49720	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.663989067 CEST	49721	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.664009094 CEST	443	49721	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.664129019 CEST	49714	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.664140940 CEST	443	49714	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.664372921 CEST	49715	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.664407015 CEST	443	49715	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.664616108 CEST	443	49713	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.664628029 CEST	49719	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.664644957 CEST	443	49719	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.664822102 CEST	49720	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.664848089 CEST	443	49720	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.665108919 CEST	49713	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.665117979 CEST	443	49713	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.665186882 CEST	443	49721	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.665240049 CEST	49721	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.665277958 CEST	443	49714	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.665587902 CEST	443	49715	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.665668964 CEST	49715	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.665811062 CEST	443	49713	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.665898085 CEST	443	49719	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.665947914 CEST	49719	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.665961027 CEST	49721	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.666064024 CEST	443	49721	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.666078091 CEST	443	49720	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.666132927 CEST	49720	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.666389942 CEST	49714	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.666675091 CEST	49715	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.666707039 CEST	443	49714	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.666742086 CEST	443	49715	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.667021036 CEST	49713	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.667104959 CEST	443	49713	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.667274952 CEST	49719	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.667340994 CEST	443	49719	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.667880058 CEST	49720	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.667943001 CEST	443	49720	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.668137074 CEST	49721	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.668149948 CEST	443	49721	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.668201923 CEST	49714	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.668250084 CEST	49715	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.668260098 CEST	443	49715	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.668318987 CEST	49713	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.668368101 CEST	49719	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.668375969 CEST	443	49719	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.668415070 CEST	49720	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.668421030 CEST	443	49720	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.671283960 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:02.671467066 CEST	49718	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:02.671492100 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:02.672491074 CEST	443	49717	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:02.672513962 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:02.672578096 CEST	49718	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:02.672652960 CEST	49717	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:02.672668934 CEST	443	49717	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:02.672898054 CEST	443	49716	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:02.673139095 CEST	49716	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:02.673157930 CEST	443	49716	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:02.673904896 CEST	443	49717	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:02.673962116 CEST	49717	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:02.674443007 CEST	443	49716	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:02.674504042 CEST	49716	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:02.710405111 CEST	49719	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.711405039 CEST	443	49714	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.715409040 CEST	443	49713	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.725601912 CEST	49721	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.725613117 CEST	49720	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.725615978 CEST	49715	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.808770895 CEST	443	49720	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.808840990 CEST	443	49720	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.808892965 CEST	49720	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.809869051 CEST	443	49721	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.809895992 CEST	443	49721	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.809904099 CEST	443	49721	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.809940100 CEST	49721	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.809963942 CEST	443	49721	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.810002089 CEST	49721	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.810472012 CEST	49720	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.810487032 CEST	443	49720	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.810971975 CEST	49722	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.811005116 CEST	443	49722	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.811069965 CEST	49722	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.811171055 CEST	443	49714	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.811193943 CEST	443	49714	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.811239958 CEST	49714	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.811250925 CEST	443	49714	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.811295986 CEST	49714	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.811980009 CEST	49722	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.811997890 CEST	443	49722	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.813271999 CEST	443	49715	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.813294888 CEST	443	49715	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.813302994 CEST	443	49715	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.813358068 CEST	443	49715	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.813376904 CEST	49715	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.813376904 CEST	49715	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.813407898 CEST	49715	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.815151930 CEST	443	49713	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.815248013 CEST	443	49713	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.815289974 CEST	49713	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.815918922 CEST	443	49719	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.815929890 CEST	49715	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.815956116 CEST	443	49715	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.815973997 CEST	443	49719	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.815999031 CEST	443	49719	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.816036940 CEST	49719	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.816051006 CEST	443	49719	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.816092968 CEST	49719	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.816195965 CEST	49723	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.816221952 CEST	443	49723	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.816277027 CEST	49723	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.817092896 CEST	49723	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.817106009 CEST	443	49723	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.817658901 CEST	49713	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.817672014 CEST	443	49713	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.819466114 CEST	49724	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.819508076 CEST	443	49724	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.819565058 CEST	49724	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.819875002 CEST	49724	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.819890022 CEST	443	49724	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.830986023 CEST	49725	443	192.168.2.7	184.28.90.27
Oct 1, 2024 15:08:02.831002951 CEST	443	49725	184.28.90.27	192.168.2.7
Oct 1, 2024 15:08:02.831068039 CEST	49725	443	192.168.2.7	184.28.90.27
Oct 1, 2024 15:08:02.832643032 CEST	49725	443	192.168.2.7	184.28.90.27
Oct 1, 2024 15:08:02.832657099 CEST	443	49725	184.28.90.27	192.168.2.7
Oct 1, 2024 15:08:02.896044016 CEST	49718	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:02.896291018 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:02.896481037 CEST	443	49721	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.896491051 CEST	443	49721	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.896558046 CEST	49721	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.897598028 CEST	443	49721	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.897675037 CEST	49721	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.898432970 CEST	443	49721	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.898469925 CEST	443	49721	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.898498058 CEST	49721	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.898509979 CEST	443	49721	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.898516893 CEST	443	49714	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.898531914 CEST	443	49714	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.898535013 CEST	443	49721	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.898535967 CEST	49721	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.898572922 CEST	49714	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.898616076 CEST	49721	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.898677111 CEST	49714	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.899302959 CEST	443	49714	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.899394989 CEST	49714	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.899734974 CEST	49717	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:02.899856091 CEST	443	49717	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:02.900203943 CEST	49716	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:02.900393963 CEST	443	49716	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:02.900644064 CEST	49718	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:02.900672913 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:02.900779009 CEST	443	49714	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.900841951 CEST	49714	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.902956963 CEST	49717	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:02.902972937 CEST	443	49717	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:02.903234959 CEST	49716	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:02.903255939 CEST	443	49716	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:02.903274059 CEST	443	49714	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.903346062 CEST	49714	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.908287048 CEST	443	49719	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.908298016 CEST	443	49719	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.908350945 CEST	49719	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.908364058 CEST	443	49719	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.908377886 CEST	443	49719	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.908427954 CEST	49719	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.911961079 CEST	49721	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.911986113 CEST	443	49721	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.916644096 CEST	49719	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.916654110 CEST	443	49719	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.926613092 CEST	49726	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.926645041 CEST	443	49726	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.926702976 CEST	49726	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.927117109 CEST	49726	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.927139044 CEST	443	49726	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.948890924 CEST	49717	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:02.948890924 CEST	49716	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:02.986654043 CEST	443	49714	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.986982107 CEST	49714	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.987023115 CEST	443	49714	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.987066031 CEST	443	49714	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.987092972 CEST	49714	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.987102032 CEST	443	49714	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.987121105 CEST	49714	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.987154007 CEST	49714	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.987967014 CEST	443	49714	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.988133907 CEST	443	49714	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.988162994 CEST	49714	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.988169909 CEST	443	49714	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.988219976 CEST	49714	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.988219976 CEST	49714	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.988882065 CEST	443	49714	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.988957882 CEST	443	49714	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.988986969 CEST	49714	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.988991022 CEST	443	49714	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.989017010 CEST	49714	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.989039898 CEST	443	49714	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:02.991760969 CEST	49714	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.992327929 CEST	49714	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:02.992353916 CEST	443	49714	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.008394957 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.008426905 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.008472919 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.008498907 CEST	49718	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.008501053 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.008513927 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.008567095 CEST	49718	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.008567095 CEST	49718	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.008882999 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.009366989 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.009439945 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.009521961 CEST	49718	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.009531975 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.009814024 CEST	49718	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.010958910 CEST	443	49717	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.010997057 CEST	443	49717	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.011023998 CEST	443	49717	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.011045933 CEST	49717	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.011049986 CEST	443	49717	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.011063099 CEST	443	49717	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.011099100 CEST	443	49717	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.011121035 CEST	49717	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.011131048 CEST	443	49717	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.011228085 CEST	49717	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.011512041 CEST	443	49717	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.011591911 CEST	49717	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.011712074 CEST	443	49717	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.013070107 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.013125896 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.013248920 CEST	49718	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.013257027 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.015736103 CEST	443	49717	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.015759945 CEST	443	49717	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.016067982 CEST	49717	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.016077042 CEST	443	49717	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.016248941 CEST	49717	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.024260044 CEST	443	49716	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.024317980 CEST	443	49716	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.024353981 CEST	443	49716	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.024403095 CEST	443	49716	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.024455070 CEST	443	49716	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.024463892 CEST	49716	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.024485111 CEST	443	49716	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.024668932 CEST	49716	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.024686098 CEST	443	49716	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.024743080 CEST	443	49716	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.025284052 CEST	443	49716	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.025319099 CEST	443	49716	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.025343895 CEST	49716	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.025357008 CEST	443	49716	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.025398970 CEST	49716	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.028825998 CEST	443	49716	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.031714916 CEST	49716	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.031728029 CEST	443	49716	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.087595940 CEST	49716	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.096899033 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.096946001 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.096976042 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.097032070 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.097054958 CEST	49718	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.097065926 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.097095013 CEST	49718	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.097104073 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.097125053 CEST	49718	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.097132921 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.097166061 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.097196102 CEST	49718	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.097199917 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.097209930 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.097230911 CEST	49718	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.097271919 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.097357035 CEST	49718	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.097376108 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.098162889 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.098191023 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.098218918 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.098244905 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.098273039 CEST	49718	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.098280907 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.098298073 CEST	49718	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.098428965 CEST	49718	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.098433971 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.099081039 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.099109888 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.099142075 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.099164009 CEST	49718	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.099172115 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.099195957 CEST	49718	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.099210024 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.099571943 CEST	49718	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.099581003 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.100475073 CEST	443	49717	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.100541115 CEST	443	49717	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.100567102 CEST	443	49717	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.100593090 CEST	443	49717	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.100625992 CEST	443	49717	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.100649118 CEST	49717	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.100656986 CEST	443	49717	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.100687981 CEST	443	49717	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.100709915 CEST	49717	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.100714922 CEST	443	49717	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.100727081 CEST	443	49717	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.100764036 CEST	443	49717	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.100789070 CEST	49717	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.100789070 CEST	443	49717	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.100800991 CEST	443	49717	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.100811005 CEST	49717	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.100872993 CEST	443	49717	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.100898027 CEST	49717	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.100905895 CEST	443	49717	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.101486921 CEST	443	49717	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.101512909 CEST	443	49717	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.101532936 CEST	443	49717	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.101536036 CEST	49717	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.101543903 CEST	443	49717	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.101557016 CEST	49717	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.101574898 CEST	443	49717	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.101597071 CEST	443	49717	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.101598978 CEST	49717	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.101607084 CEST	443	49717	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.101661921 CEST	49717	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.112701893 CEST	443	49716	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.113053083 CEST	443	49716	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.113142014 CEST	443	49716	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.113238096 CEST	49716	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.113262892 CEST	443	49716	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.113372087 CEST	49716	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.113385916 CEST	443	49716	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.113495111 CEST	443	49716	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.113764048 CEST	443	49716	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.113915920 CEST	443	49716	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.113955021 CEST	49716	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.113977909 CEST	443	49716	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.114042997 CEST	49716	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.114056110 CEST	443	49716	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.114321947 CEST	49716	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.114335060 CEST	443	49716	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.114536047 CEST	443	49716	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.114659071 CEST	443	49716	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.114696026 CEST	49716	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.114717960 CEST	443	49716	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.114804029 CEST	443	49716	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.114821911 CEST	49716	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.114836931 CEST	443	49716	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.115545034 CEST	443	49716	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.115633965 CEST	443	49716	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.115674019 CEST	49716	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.115689993 CEST	443	49716	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.115727901 CEST	49716	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.116127968 CEST	443	49716	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.116281986 CEST	443	49716	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.116301060 CEST	49716	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.116314888 CEST	443	49716	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.116483927 CEST	443	49716	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.119896889 CEST	49716	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.119913101 CEST	443	49716	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.123789072 CEST	49716	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.144309044 CEST	443	49717	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.144390106 CEST	49717	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.144398928 CEST	443	49717	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.185185909 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.185211897 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.185240030 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.185318947 CEST	49718	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.185318947 CEST	49718	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.185343027 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.185386896 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.185395002 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.185569048 CEST	49718	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.185578108 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.185940027 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.185966015 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.185971975 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.186027050 CEST	49718	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.186027050 CEST	49718	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.186038017 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.186584949 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.186683893 CEST	49718	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.186692953 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.186789036 CEST	49718	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.186960936 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.187020063 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.187047958 CEST	49718	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.187052011 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.187062979 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.187077045 CEST	49718	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.187127113 CEST	49718	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.187253952 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.187515020 CEST	49718	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.188007116 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.188044071 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.188066959 CEST	49718	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.188074112 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.188092947 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.188098907 CEST	49718	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.188116074 CEST	49718	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.188122034 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.188146114 CEST	49718	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.188225031 CEST	443	49717	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.188317060 CEST	443	49717	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.188347101 CEST	49717	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.188355923 CEST	443	49717	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.188388109 CEST	443	49717	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.188430071 CEST	443	49717	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.188536882 CEST	49717	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.188544989 CEST	443	49717	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.188740969 CEST	443	49717	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.188752890 CEST	443	49717	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.188791990 CEST	443	49717	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.188802004 CEST	443	49717	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.188817978 CEST	49717	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.188827038 CEST	443	49717	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.188855886 CEST	49717	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.188947916 CEST	49717	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.188952923 CEST	443	49717	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.189032078 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.189059973 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.189359903 CEST	49718	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.189368010 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.189573050 CEST	443	49717	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.189635038 CEST	443	49717	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.189846039 CEST	49717	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.189852953 CEST	443	49717	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.190466881 CEST	443	49717	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.190515995 CEST	443	49717	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.190543890 CEST	49717	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.190551043 CEST	443	49717	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.190570116 CEST	443	49717	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.190576077 CEST	49717	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.190681934 CEST	49717	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.190695047 CEST	443	49717	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.190793037 CEST	49717	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.191365004 CEST	443	49717	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.191495895 CEST	443	49717	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.191518068 CEST	49717	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.191596031 CEST	49717	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.196208954 CEST	49717	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.196228027 CEST	443	49717	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.198139906 CEST	49728	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.198148012 CEST	49727	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.198187113 CEST	443	49728	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.198224068 CEST	443	49727	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.198303938 CEST	49728	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.198309898 CEST	49727	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.198642969 CEST	49729	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.198678017 CEST	443	49729	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.198760033 CEST	49729	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.199249029 CEST	49730	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.199249983 CEST	49731	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.199259043 CEST	443	49730	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.199259043 CEST	443	49731	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.199632883 CEST	49730	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.199634075 CEST	49731	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.200233936 CEST	49729	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.200237036 CEST	49727	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.200252056 CEST	443	49729	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.200270891 CEST	443	49727	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.200731039 CEST	49728	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.200742960 CEST	443	49728	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.201174974 CEST	49730	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.201184034 CEST	443	49716	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.201208115 CEST	443	49730	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.201477051 CEST	443	49716	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.201601028 CEST	443	49716	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.201632977 CEST	49731	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.201642036 CEST	443	49731	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.201679945 CEST	49716	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.201703072 CEST	443	49716	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.201878071 CEST	443	49716	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.201999903 CEST	49716	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.202014923 CEST	443	49716	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.202127934 CEST	49716	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.202140093 CEST	443	49716	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.202217102 CEST	443	49716	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.206197023 CEST	49716	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.214930058 CEST	49716	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.214956045 CEST	443	49716	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.223278999 CEST	49733	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:03.223294973 CEST	49732	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:03.223323107 CEST	443	49732	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.223344088 CEST	443	49733	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.227654934 CEST	49733	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:03.227668047 CEST	49732	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:03.228241920 CEST	49733	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:03.228244066 CEST	49732	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:03.228256941 CEST	443	49732	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.228260040 CEST	443	49733	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.273750067 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.273797989 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.273904085 CEST	49718	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.273904085 CEST	49718	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.273926020 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.273946047 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.274075985 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.274085999 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.274106026 CEST	49718	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.274115086 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.274139881 CEST	49718	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.274369001 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.274394035 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.274424076 CEST	49718	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.274430990 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.274455070 CEST	49718	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.274873972 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.274904966 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.274929047 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.274955034 CEST	49718	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.274961948 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.274975061 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.274988890 CEST	49718	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.275007963 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.275037050 CEST	49718	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.275046110 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.275069952 CEST	49718	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.275351048 CEST	49718	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.275639057 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.275676012 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.275697947 CEST	49718	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.275706053 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.275717974 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.275726080 CEST	49718	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.275743008 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.275765896 CEST	49718	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.275773048 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.275875092 CEST	49718	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.275880098 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.275983095 CEST	49718	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.278105021 CEST	49718	443	192.168.2.7	104.17.25.14
Oct 1, 2024 15:08:03.278121948 CEST	443	49718	104.17.25.14	192.168.2.7
Oct 1, 2024 15:08:03.350445032 CEST	443	49723	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.357732058 CEST	49723	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.357760906 CEST	443	49723	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.359105110 CEST	443	49723	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.383193970 CEST	49723	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.383519888 CEST	49723	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.383558989 CEST	443	49723	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.427711964 CEST	443	49726	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.429582119 CEST	49723	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.429603100 CEST	443	49723	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.433661938 CEST	49726	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.433681011 CEST	443	49726	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.434798002 CEST	443	49726	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.434992075 CEST	49726	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.440469980 CEST	49726	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.440546989 CEST	443	49726	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.451337099 CEST	443	49724	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.475598097 CEST	49726	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.475610971 CEST	443	49726	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.480444908 CEST	443	49722	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.480942011 CEST	443	49725	184.28.90.27	192.168.2.7
Oct 1, 2024 15:08:03.481056929 CEST	49725	443	192.168.2.7	184.28.90.27
Oct 1, 2024 15:08:03.494118929 CEST	49724	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.499365091 CEST	49724	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.499366999 CEST	49722	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.499391079 CEST	443	49722	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.499397993 CEST	443	49724	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.499830961 CEST	443	49722	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.500612974 CEST	443	49724	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.500727892 CEST	49724	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.501391888 CEST	49724	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.501492977 CEST	443	49724	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.501971960 CEST	49724	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.502779961 CEST	49722	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.502856970 CEST	443	49722	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.503092051 CEST	49722	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.509912968 CEST	443	49723	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.509972095 CEST	443	49723	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.510052919 CEST	49723	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.510085106 CEST	443	49723	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.510169029 CEST	443	49723	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.510354042 CEST	49723	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.519795895 CEST	49725	443	192.168.2.7	184.28.90.27
Oct 1, 2024 15:08:03.519826889 CEST	443	49725	184.28.90.27	192.168.2.7
Oct 1, 2024 15:08:03.520123959 CEST	443	49725	184.28.90.27	192.168.2.7
Oct 1, 2024 15:08:03.524744034 CEST	49726	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.533246994 CEST	49723	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.533289909 CEST	443	49723	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.547391891 CEST	443	49724	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.547409058 CEST	443	49722	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.555167913 CEST	49724	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.555206060 CEST	443	49724	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.597598076 CEST	443	49726	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.597620964 CEST	443	49726	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.597630024 CEST	443	49726	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.597733974 CEST	49726	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.597749949 CEST	443	49726	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.601316929 CEST	49724	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.601583004 CEST	49726	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.620995045 CEST	49725	443	192.168.2.7	184.28.90.27
Oct 1, 2024 15:08:03.652924061 CEST	443	49724	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.652955055 CEST	443	49724	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.652973890 CEST	443	49724	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.653053999 CEST	49724	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.653074980 CEST	443	49724	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.653276920 CEST	49724	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.660403013 CEST	443	49722	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.660429955 CEST	443	49722	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.660546064 CEST	49722	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.660552979 CEST	443	49722	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.661647081 CEST	49722	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.667396069 CEST	443	49725	184.28.90.27	192.168.2.7
Oct 1, 2024 15:08:03.680237055 CEST	443	49724	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.680255890 CEST	443	49724	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.680283070 CEST	443	49724	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.680350065 CEST	49724	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.680368900 CEST	443	49724	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.680748940 CEST	49724	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.683978081 CEST	443	49726	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.683986902 CEST	443	49726	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.684027910 CEST	443	49726	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.684118986 CEST	49726	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.684186935 CEST	49726	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.684317112 CEST	443	49726	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.684324026 CEST	443	49726	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.684504986 CEST	49726	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.685996056 CEST	443	49726	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.686005116 CEST	443	49726	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.686194897 CEST	49726	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.691955090 CEST	443	49732	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.694464922 CEST	49732	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:03.694489002 CEST	443	49732	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.695535898 CEST	443	49732	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.695616007 CEST	49732	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:03.696050882 CEST	49732	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:03.696120024 CEST	443	49732	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.696310997 CEST	443	49733	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.696356058 CEST	49732	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:03.696363926 CEST	443	49732	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.696541071 CEST	49733	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:03.696569920 CEST	443	49733	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.697623968 CEST	443	49733	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.697797060 CEST	49733	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:03.698133945 CEST	49733	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:03.698194981 CEST	443	49733	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.698343992 CEST	49733	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:03.713784933 CEST	443	49726	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.713857889 CEST	443	49726	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.713886976 CEST	49726	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.713947058 CEST	49726	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.714442968 CEST	443	49727	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.723547935 CEST	443	49728	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.723593950 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 1, 2024 15:08:03.739635944 CEST	49732	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:03.743434906 CEST	443	49733	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.752384901 CEST	49733	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:03.752397060 CEST	443	49733	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.800508976 CEST	49733	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:03.805171967 CEST	443	49725	184.28.90.27	192.168.2.7
Oct 1, 2024 15:08:03.805520058 CEST	443	49725	184.28.90.27	192.168.2.7
Oct 1, 2024 15:08:03.805682898 CEST	49725	443	192.168.2.7	184.28.90.27
Oct 1, 2024 15:08:03.817162991 CEST	443	49733	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.817322016 CEST	443	49733	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.817414999 CEST	443	49733	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.817476988 CEST	49733	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:03.817492008 CEST	443	49733	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.817593098 CEST	443	49733	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.817626953 CEST	49733	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:03.817635059 CEST	443	49733	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.817758083 CEST	443	49733	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.817841053 CEST	443	49733	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.817878962 CEST	49733	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:03.817888021 CEST	443	49733	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.817989111 CEST	49733	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:03.818008900 CEST	443	49733	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.818099976 CEST	443	49733	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.818136930 CEST	49733	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:03.818142891 CEST	443	49733	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.818317890 CEST	49733	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:03.821780920 CEST	443	49733	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.833600044 CEST	443	49732	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.833640099 CEST	443	49732	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.833662987 CEST	443	49732	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.833683968 CEST	443	49732	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.833709955 CEST	443	49732	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.833738089 CEST	49732	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:03.833741903 CEST	443	49732	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.833751917 CEST	443	49732	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.833781004 CEST	49732	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:03.833873034 CEST	49732	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:03.833884954 CEST	443	49732	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.833916903 CEST	443	49732	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.833940029 CEST	443	49732	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.833965063 CEST	49732	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:03.833971977 CEST	443	49732	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.834009886 CEST	49732	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:03.834847927 CEST	443	49729	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.838289976 CEST	443	49732	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.838502884 CEST	49732	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:03.838510036 CEST	443	49732	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.840312004 CEST	443	49731	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.858294010 CEST	49731	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.858329058 CEST	443	49731	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.858530998 CEST	443	49730	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.858573914 CEST	49729	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.858603001 CEST	443	49729	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.858895063 CEST	49728	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.858923912 CEST	443	49728	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.859102011 CEST	49727	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.859123945 CEST	443	49727	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.859471083 CEST	443	49731	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.859628916 CEST	49731	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.859675884 CEST	443	49729	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.859819889 CEST	49729	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.859976053 CEST	49730	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.859991074 CEST	443	49730	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.860217094 CEST	443	49727	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.860230923 CEST	443	49727	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.860369921 CEST	49727	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.860369921 CEST	49731	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.860440969 CEST	443	49731	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.860490084 CEST	443	49728	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.860502958 CEST	443	49728	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.860780954 CEST	49728	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.861000061 CEST	443	49730	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.861077070 CEST	49730	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.861077070 CEST	49729	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.861155987 CEST	443	49729	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.861546040 CEST	49727	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.861605883 CEST	443	49727	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.861999989 CEST	49728	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.862076044 CEST	443	49728	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.864351988 CEST	49730	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.864506006 CEST	443	49730	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.865041971 CEST	49731	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.865046978 CEST	49729	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.865067005 CEST	443	49731	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.865072012 CEST	443	49729	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.865374088 CEST	49727	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.865381956 CEST	443	49727	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.865483046 CEST	49730	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.865488052 CEST	49728	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.865495920 CEST	443	49730	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.865504026 CEST	443	49728	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.873662949 CEST	49733	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:03.889663935 CEST	49732	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:03.905154943 CEST	443	49733	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.905215025 CEST	443	49733	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.905246973 CEST	443	49733	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.905283928 CEST	49733	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:03.905298948 CEST	443	49733	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.905683994 CEST	49733	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:03.905817986 CEST	443	49733	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.905874968 CEST	443	49733	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.905905008 CEST	443	49733	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.905939102 CEST	443	49733	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.905975103 CEST	443	49733	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.905989885 CEST	49733	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:03.905997992 CEST	443	49733	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.906018972 CEST	49733	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:03.906742096 CEST	443	49733	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.906774998 CEST	443	49733	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.906804085 CEST	49733	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:03.906810999 CEST	443	49733	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.906847000 CEST	443	49733	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.906877041 CEST	49733	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:03.906883955 CEST	443	49733	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.907680035 CEST	443	49733	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.907711029 CEST	49733	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:03.907715082 CEST	443	49733	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.907727003 CEST	443	49733	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.907752991 CEST	49733	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:03.907860994 CEST	443	49733	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.907886028 CEST	49733	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:03.907892942 CEST	443	49733	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.909796000 CEST	49733	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:03.918661118 CEST	49730	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.918661118 CEST	49729	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.918668032 CEST	49731	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.918668032 CEST	49728	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.918677092 CEST	49727	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.921787977 CEST	443	49732	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.921883106 CEST	443	49732	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.921911001 CEST	443	49732	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.921936989 CEST	443	49732	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.921982050 CEST	49732	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:03.921996117 CEST	443	49732	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.922049999 CEST	49732	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:03.922605991 CEST	443	49732	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.922636986 CEST	443	49732	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.922665119 CEST	443	49732	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.922692060 CEST	443	49732	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.922715902 CEST	443	49732	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.922734022 CEST	49732	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:03.922741890 CEST	443	49732	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.923477888 CEST	443	49732	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.923507929 CEST	443	49732	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.923536062 CEST	49732	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:03.923542976 CEST	443	49732	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.924010038 CEST	443	49732	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.924038887 CEST	443	49732	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.924065113 CEST	49732	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:03.924068928 CEST	443	49732	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.924077034 CEST	443	49732	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.924103975 CEST	49732	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:03.924119949 CEST	443	49732	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.924143076 CEST	443	49732	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.924156904 CEST	49732	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:03.924163103 CEST	443	49732	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.924199104 CEST	49732	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:03.924870014 CEST	443	49732	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.924920082 CEST	443	49732	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.924972057 CEST	49732	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:03.924977064 CEST	443	49732	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.925935030 CEST	49732	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:03.943123102 CEST	49725	443	192.168.2.7	184.28.90.27
Oct 1, 2024 15:08:03.943123102 CEST	49725	443	192.168.2.7	184.28.90.27
Oct 1, 2024 15:08:03.943145037 CEST	443	49725	184.28.90.27	192.168.2.7
Oct 1, 2024 15:08:03.943154097 CEST	443	49725	184.28.90.27	192.168.2.7
Oct 1, 2024 15:08:03.947731018 CEST	443	49733	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.948498011 CEST	49726	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.948528051 CEST	443	49726	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.985969067 CEST	443	49729	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.985989094 CEST	443	49729	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.985996962 CEST	443	49729	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.986058950 CEST	443	49729	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.986068010 CEST	49729	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.986113071 CEST	49729	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.986538887 CEST	443	49727	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.986618042 CEST	443	49727	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.986673117 CEST	49727	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.988075972 CEST	443	49731	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.988137007 CEST	443	49731	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.988182068 CEST	49731	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.990883112 CEST	443	49728	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.990906954 CEST	443	49728	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.990914106 CEST	443	49728	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.990973949 CEST	49728	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.990987062 CEST	443	49728	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:03.991031885 CEST	49728	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:03.993773937 CEST	443	49733	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.993823051 CEST	443	49733	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.993855953 CEST	443	49733	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.993892908 CEST	443	49733	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.993916035 CEST	49733	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:03.993927956 CEST	443	49733	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.993938923 CEST	443	49733	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.993946075 CEST	49733	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:03.993973970 CEST	49733	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:03.994066000 CEST	443	49733	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.994102001 CEST	443	49733	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.994102955 CEST	49733	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:03.994112015 CEST	443	49733	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.994165897 CEST	49733	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:03.994443893 CEST	443	49733	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.994560003 CEST	443	49733	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:03.994612932 CEST	49733	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:04.009990931 CEST	443	49730	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:04.010023117 CEST	443	49730	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:04.010035992 CEST	443	49730	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:04.010080099 CEST	49730	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:04.010097027 CEST	443	49730	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:04.010133982 CEST	49730	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:04.010160923 CEST	443	49732	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:04.010389090 CEST	443	49732	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:04.010426998 CEST	443	49732	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:04.010445118 CEST	49732	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:04.010454893 CEST	443	49732	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:04.010483027 CEST	49732	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:04.010488033 CEST	443	49732	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:04.010497093 CEST	443	49732	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:04.010576010 CEST	49732	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:04.010581970 CEST	443	49732	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:04.010628939 CEST	49732	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:04.011193037 CEST	443	49732	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:04.011244059 CEST	49732	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:04.011250019 CEST	443	49732	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:04.011306047 CEST	49732	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:04.011615038 CEST	443	49732	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:04.011677027 CEST	49732	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:04.011682987 CEST	443	49732	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:04.011749029 CEST	49732	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:04.012447119 CEST	443	49732	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:04.012484074 CEST	443	49732	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:04.012514114 CEST	443	49732	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:04.012530088 CEST	49732	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:04.012530088 CEST	49732	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:04.012537003 CEST	443	49732	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:04.012562990 CEST	49732	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:04.013209105 CEST	443	49732	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:04.013264894 CEST	49732	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:04.013269901 CEST	443	49732	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:04.013299942 CEST	443	49732	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:04.013312101 CEST	49732	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:04.013350964 CEST	49732	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:04.081816912 CEST	443	49728	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:04.081826925 CEST	443	49728	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:04.081860065 CEST	443	49728	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:04.081906080 CEST	443	49728	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:04.081912994 CEST	49728	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:04.081958055 CEST	49728	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:04.081974983 CEST	49728	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:04.100464106 CEST	443	49730	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:04.100477934 CEST	443	49730	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:04.100542068 CEST	49730	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:04.100653887 CEST	443	49730	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:04.100728989 CEST	49730	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:04.101562977 CEST	443	49730	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:04.101625919 CEST	49730	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:04.118305922 CEST	443	49730	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:04.118393898 CEST	49730	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:04.191152096 CEST	443	49730	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:04.191226959 CEST	49730	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:04.192257881 CEST	443	49730	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:04.192321062 CEST	49730	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:04.192975044 CEST	443	49730	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:04.193030119 CEST	443	49730	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:04.193036079 CEST	49730	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:04.193046093 CEST	443	49730	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:04.193092108 CEST	49730	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:04.199775934 CEST	443	49730	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:04.199846983 CEST	49730	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:04.200006962 CEST	443	49730	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:04.200069904 CEST	49730	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:04.226537943 CEST	443	49730	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:04.226609945 CEST	49730	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:04.226622105 CEST	443	49730	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:04.226669073 CEST	49730	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:04.234729052 CEST	49730	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:04.259241104 CEST	49722	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:04.259277105 CEST	443	49722	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:04.259649992 CEST	49724	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:04.259685040 CEST	443	49724	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:04.259932995 CEST	49732	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:04.261107922 CEST	49731	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:04.261126995 CEST	443	49731	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:04.261424065 CEST	49727	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:04.261432886 CEST	443	49727	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:04.262202978 CEST	49733	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:04.262239933 CEST	443	49733	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:04.262733936 CEST	49728	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:04.262742043 CEST	443	49728	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:04.263221025 CEST	49729	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:04.263240099 CEST	443	49729	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:04.264045000 CEST	49732	443	192.168.2.7	104.17.24.14
Oct 1, 2024 15:08:04.264061928 CEST	443	49732	104.17.24.14	192.168.2.7
Oct 1, 2024 15:08:04.264409065 CEST	49730	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:04.264420033 CEST	443	49730	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:04.308759928 CEST	49738	443	192.168.2.7	184.28.90.27
Oct 1, 2024 15:08:04.308784962 CEST	443	49738	184.28.90.27	192.168.2.7
Oct 1, 2024 15:08:04.308856010 CEST	49738	443	192.168.2.7	184.28.90.27
Oct 1, 2024 15:08:04.309113026 CEST	49738	443	192.168.2.7	184.28.90.27
Oct 1, 2024 15:08:04.309124947 CEST	443	49738	184.28.90.27	192.168.2.7
Oct 1, 2024 15:08:04.935410976 CEST	49740	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:04.935466051 CEST	443	49740	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:04.935529947 CEST	49740	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:04.935941935 CEST	49741	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:04.935983896 CEST	443	49741	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:04.936042070 CEST	49741	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:04.943240881 CEST	49740	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:04.943267107 CEST	443	49740	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:04.944096088 CEST	49741	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:04.944125891 CEST	443	49741	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:05.009219885 CEST	443	49738	184.28.90.27	192.168.2.7
Oct 1, 2024 15:08:05.009320974 CEST	49738	443	192.168.2.7	184.28.90.27
Oct 1, 2024 15:08:05.013030052 CEST	49743	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:05.013075113 CEST	443	49743	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:05.013145924 CEST	49743	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:05.013376951 CEST	49743	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:05.013391018 CEST	443	49743	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:05.018560886 CEST	49738	443	192.168.2.7	184.28.90.27
Oct 1, 2024 15:08:05.018600941 CEST	443	49738	184.28.90.27	192.168.2.7
Oct 1, 2024 15:08:05.018881083 CEST	443	49738	184.28.90.27	192.168.2.7
Oct 1, 2024 15:08:05.022064924 CEST	49738	443	192.168.2.7	184.28.90.27
Oct 1, 2024 15:08:05.067397118 CEST	443	49738	184.28.90.27	192.168.2.7
Oct 1, 2024 15:08:05.128249884 CEST	49744	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:05.128298998 CEST	443	49744	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:05.128357887 CEST	49744	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:05.128889084 CEST	49744	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:05.128905058 CEST	443	49744	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:05.132886887 CEST	49745	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:05.132939100 CEST	443	49745	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:05.132991076 CEST	49745	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:05.133569002 CEST	49745	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:05.133580923 CEST	443	49745	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:05.288516998 CEST	443	49738	184.28.90.27	192.168.2.7
Oct 1, 2024 15:08:05.288605928 CEST	443	49738	184.28.90.27	192.168.2.7
Oct 1, 2024 15:08:05.288706064 CEST	49738	443	192.168.2.7	184.28.90.27
Oct 1, 2024 15:08:05.306329966 CEST	49738	443	192.168.2.7	184.28.90.27
Oct 1, 2024 15:08:05.306329966 CEST	49738	443	192.168.2.7	184.28.90.27
Oct 1, 2024 15:08:05.306390047 CEST	443	49738	184.28.90.27	192.168.2.7
Oct 1, 2024 15:08:05.306406975 CEST	443	49738	184.28.90.27	192.168.2.7
Oct 1, 2024 15:08:05.445513010 CEST	443	49740	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:05.448079109 CEST	49740	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:05.448100090 CEST	443	49740	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:05.448520899 CEST	443	49740	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:05.449085951 CEST	49740	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:05.449152946 CEST	443	49740	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:05.449676991 CEST	49740	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:05.491406918 CEST	443	49740	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:05.495110989 CEST	443	49741	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:05.541158915 CEST	443	49743	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:05.541991949 CEST	49741	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:05.542007923 CEST	443	49741	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:05.542422056 CEST	49743	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:05.542433977 CEST	443	49743	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:05.542531013 CEST	443	49741	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:05.542825937 CEST	443	49743	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:05.543595076 CEST	49741	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:05.543669939 CEST	443	49741	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:05.544121027 CEST	49743	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:05.544187069 CEST	443	49743	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:05.544668913 CEST	49741	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:05.544724941 CEST	49743	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:05.591401100 CEST	443	49743	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:05.591418982 CEST	443	49741	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:05.593921900 CEST	443	49740	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:05.593943119 CEST	443	49740	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:05.593993902 CEST	49740	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:05.594010115 CEST	443	49740	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:05.594023943 CEST	443	49740	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:05.594063044 CEST	49740	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:05.644340992 CEST	443	49745	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:05.671855927 CEST	49745	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:05.671905041 CEST	443	49745	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:05.672185898 CEST	443	49741	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:05.672262907 CEST	443	49741	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:05.672318935 CEST	49741	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:05.673199892 CEST	443	49745	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:05.673301935 CEST	49745	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:05.674218893 CEST	49745	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:05.674400091 CEST	443	49745	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:05.674428940 CEST	49745	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:05.687778950 CEST	443	49743	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:05.687810898 CEST	443	49743	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:05.687863111 CEST	49743	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:05.687877893 CEST	443	49743	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:05.688009977 CEST	49743	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:05.713593006 CEST	49740	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:05.713614941 CEST	443	49740	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:05.719399929 CEST	443	49745	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:05.720091105 CEST	49741	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:05.720107079 CEST	443	49741	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:05.772581100 CEST	443	49744	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:05.773708105 CEST	49744	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:05.773730040 CEST	443	49744	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:05.774610996 CEST	443	49743	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:05.774624109 CEST	443	49743	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:05.774682045 CEST	49743	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:05.774897099 CEST	443	49744	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:05.774959087 CEST	49744	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:05.775548935 CEST	443	49743	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:05.775615931 CEST	49743	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:05.775615931 CEST	49744	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:05.775681019 CEST	443	49744	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:05.776330948 CEST	49744	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:05.776340008 CEST	443	49744	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:05.776750088 CEST	443	49743	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:05.776809931 CEST	49743	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:05.794497013 CEST	443	49743	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:05.794588089 CEST	443	49743	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:05.794594049 CEST	49743	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:05.794646978 CEST	49743	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:05.813726902 CEST	49743	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:05.813755035 CEST	443	49743	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:05.815715075 CEST	49745	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:05.815731049 CEST	443	49745	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:05.818331003 CEST	443	49745	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:05.818346024 CEST	443	49745	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:05.818362951 CEST	443	49745	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:05.818420887 CEST	49745	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:05.818427086 CEST	443	49745	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:05.818459034 CEST	49745	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:05.818495035 CEST	443	49745	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:05.818897009 CEST	49745	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:05.821907997 CEST	49745	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:05.821919918 CEST	443	49745	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:05.922779083 CEST	443	49744	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:05.922841072 CEST	49744	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:05.922867060 CEST	443	49744	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:05.949671030 CEST	443	49744	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:05.949681997 CEST	443	49744	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:05.949731112 CEST	49744	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:05.949753046 CEST	443	49744	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:05.949770927 CEST	443	49744	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:05.949805975 CEST	49744	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:05.950002909 CEST	49744	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:08:05.950020075 CEST	443	49744	161.199.76.39	192.168.2.7
Oct 1, 2024 15:08:09.803932905 CEST	443	49707	216.58.212.164	192.168.2.7
Oct 1, 2024 15:08:09.804006100 CEST	443	49707	216.58.212.164	192.168.2.7
Oct 1, 2024 15:08:09.804064989 CEST	49707	443	192.168.2.7	216.58.212.164
Oct 1, 2024 15:08:10.257246017 CEST	49707	443	192.168.2.7	216.58.212.164
Oct 1, 2024 15:08:10.257272959 CEST	443	49707	216.58.212.164	192.168.2.7
Oct 1, 2024 15:08:15.637305021 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 1, 2024 15:08:45.725986958 CEST	49709	443	192.168.2.7	161.199.76.40
Oct 1, 2024 15:08:45.726002932 CEST	443	49709	161.199.76.40	192.168.2.7
Oct 1, 2024 15:08:59.225511074 CEST	49752	443	192.168.2.7	216.58.212.164
Oct 1, 2024 15:08:59.225569963 CEST	443	49752	216.58.212.164	192.168.2.7
Oct 1, 2024 15:08:59.225682020 CEST	49752	443	192.168.2.7	216.58.212.164
Oct 1, 2024 15:08:59.226030111 CEST	49752	443	192.168.2.7	216.58.212.164
Oct 1, 2024 15:08:59.226043940 CEST	443	49752	216.58.212.164	192.168.2.7
Oct 1, 2024 15:08:59.867372990 CEST	443	49752	216.58.212.164	192.168.2.7
Oct 1, 2024 15:08:59.898755074 CEST	49752	443	192.168.2.7	216.58.212.164
Oct 1, 2024 15:08:59.898782015 CEST	443	49752	216.58.212.164	192.168.2.7
Oct 1, 2024 15:08:59.899346113 CEST	443	49752	216.58.212.164	192.168.2.7
Oct 1, 2024 15:08:59.901921988 CEST	49752	443	192.168.2.7	216.58.212.164
Oct 1, 2024 15:08:59.901998997 CEST	443	49752	216.58.212.164	192.168.2.7
Oct 1, 2024 15:08:59.942857981 CEST	49752	443	192.168.2.7	216.58.212.164
Oct 1, 2024 15:09:02.329680920 CEST	49709	443	192.168.2.7	161.199.76.40
Oct 1, 2024 15:09:02.329812050 CEST	443	49709	161.199.76.40	192.168.2.7
Oct 1, 2024 15:09:02.329875946 CEST	49709	443	192.168.2.7	161.199.76.40
Oct 1, 2024 15:09:04.237837076 CEST	49753	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:09:04.237888098 CEST	443	49753	161.199.76.39	192.168.2.7
Oct 1, 2024 15:09:04.237950087 CEST	49753	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:09:04.238200903 CEST	49753	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:09:04.238219023 CEST	443	49753	161.199.76.39	192.168.2.7
Oct 1, 2024 15:09:04.758995056 CEST	443	49753	161.199.76.39	192.168.2.7
Oct 1, 2024 15:09:04.774580956 CEST	49753	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:09:04.774609089 CEST	443	49753	161.199.76.39	192.168.2.7
Oct 1, 2024 15:09:04.775060892 CEST	443	49753	161.199.76.39	192.168.2.7
Oct 1, 2024 15:09:04.786969900 CEST	49753	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:09:04.787067890 CEST	443	49753	161.199.76.39	192.168.2.7
Oct 1, 2024 15:09:04.792745113 CEST	49753	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:09:04.835402966 CEST	443	49753	161.199.76.39	192.168.2.7
Oct 1, 2024 15:09:04.919060946 CEST	443	49753	161.199.76.39	192.168.2.7
Oct 1, 2024 15:09:04.919159889 CEST	443	49753	161.199.76.39	192.168.2.7
Oct 1, 2024 15:09:04.919209003 CEST	49753	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:09:04.931749105 CEST	49753	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:09:04.931771040 CEST	443	49753	161.199.76.39	192.168.2.7
Oct 1, 2024 15:09:04.931782007 CEST	49753	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:09:04.931819916 CEST	49753	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:09:07.485049009 CEST	49754	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:09:07.485089064 CEST	443	49754	161.199.76.39	192.168.2.7
Oct 1, 2024 15:09:07.485317945 CEST	49754	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:09:07.485940933 CEST	49754	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:09:07.485955954 CEST	443	49754	161.199.76.39	192.168.2.7
Oct 1, 2024 15:09:08.118834019 CEST	443	49754	161.199.76.39	192.168.2.7
Oct 1, 2024 15:09:08.163400888 CEST	49754	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:09:08.172688961 CEST	49754	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:09:08.172710896 CEST	443	49754	161.199.76.39	192.168.2.7
Oct 1, 2024 15:09:08.173289061 CEST	443	49754	161.199.76.39	192.168.2.7
Oct 1, 2024 15:09:08.225888014 CEST	49754	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:09:08.301422119 CEST	49754	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:09:08.301589012 CEST	49754	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:09:08.301603079 CEST	443	49754	161.199.76.39	192.168.2.7
Oct 1, 2024 15:09:08.301628113 CEST	443	49754	161.199.76.39	192.168.2.7
Oct 1, 2024 15:09:08.351089001 CEST	49754	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:09:08.426815987 CEST	443	49754	161.199.76.39	192.168.2.7
Oct 1, 2024 15:09:08.426902056 CEST	443	49754	161.199.76.39	192.168.2.7
Oct 1, 2024 15:09:08.426951885 CEST	49754	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:09:08.438760996 CEST	49754	443	192.168.2.7	161.199.76.39
Oct 1, 2024 15:09:08.438800097 CEST	443	49754	161.199.76.39	192.168.2.7
Oct 1, 2024 15:09:09.779105902 CEST	443	49752	216.58.212.164	192.168.2.7
Oct 1, 2024 15:09:09.779171944 CEST	443	49752	216.58.212.164	192.168.2.7
Oct 1, 2024 15:09:09.782644033 CEST	49752	443	192.168.2.7	216.58.212.164
Oct 1, 2024 15:09:10.265084982 CEST	49752	443	192.168.2.7	216.58.212.164
Oct 1, 2024 15:09:10.265120983 CEST	443	49752	216.58.212.164	192.168.2.7

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 1, 2024 15:07:57.961251020 CEST	53	50817	1.1.1.1	192.168.2.7
Oct 1, 2024 15:07:57.994456053 CEST	53	50187	1.1.1.1	192.168.2.7
Oct 1, 2024 15:07:59.229542017 CEST	49303	53	192.168.2.7	1.1.1.1
Oct 1, 2024 15:07:59.229712009 CEST	63632	53	192.168.2.7	1.1.1.1
Oct 1, 2024 15:07:59.236386061 CEST	53	63632	1.1.1.1	192.168.2.7
Oct 1, 2024 15:07:59.237102985 CEST	53	49303	1.1.1.1	192.168.2.7
Oct 1, 2024 15:07:59.281455040 CEST	53	55551	1.1.1.1	192.168.2.7
Oct 1, 2024 15:07:59.341768980 CEST	55712	53	192.168.2.7	1.1.1.1
Oct 1, 2024 15:07:59.341913939 CEST	49375	53	192.168.2.7	1.1.1.1
Oct 1, 2024 15:07:59.591658115 CEST	123	123	192.168.2.7	13.95.65.251
Oct 1, 2024 15:07:59.709736109 CEST	53	55712	1.1.1.1	192.168.2.7
Oct 1, 2024 15:07:59.709754944 CEST	53	49375	1.1.1.1	192.168.2.7
Oct 1, 2024 15:07:59.893057108 CEST	123	123	13.95.65.251	192.168.2.7
Oct 1, 2024 15:08:00.631742954 CEST	63899	53	192.168.2.7	1.1.1.1
Oct 1, 2024 15:08:00.631933928 CEST	60268	53	192.168.2.7	1.1.1.1
Oct 1, 2024 15:08:00.976752996 CEST	53	60268	1.1.1.1	192.168.2.7
Oct 1, 2024 15:08:00.976813078 CEST	53	63899	1.1.1.1	192.168.2.7
Oct 1, 2024 15:08:01.980993986 CEST	62154	53	192.168.2.7	1.1.1.1
Oct 1, 2024 15:08:01.981580973 CEST	52763	53	192.168.2.7	1.1.1.1
Oct 1, 2024 15:08:01.988075018 CEST	53	62154	1.1.1.1	192.168.2.7
Oct 1, 2024 15:08:01.988507032 CEST	53	52763	1.1.1.1	192.168.2.7
Oct 1, 2024 15:08:02.943272114 CEST	52975	53	192.168.2.7	1.1.1.1
Oct 1, 2024 15:08:02.943511963 CEST	58604	53	192.168.2.7	1.1.1.1
Oct 1, 2024 15:08:03.192519903 CEST	53	58604	1.1.1.1	192.168.2.7
Oct 1, 2024 15:08:03.195204973 CEST	53	52975	1.1.1.1	192.168.2.7
Oct 1, 2024 15:08:03.214224100 CEST	58662	53	192.168.2.7	1.1.1.1
Oct 1, 2024 15:08:03.214921951 CEST	56147	53	192.168.2.7	1.1.1.1
Oct 1, 2024 15:08:03.221159935 CEST	53	58662	1.1.1.1	192.168.2.7
Oct 1, 2024 15:08:03.221540928 CEST	53	56147	1.1.1.1	192.168.2.7
Oct 1, 2024 15:08:04.727669001 CEST	53	57801	1.1.1.1	192.168.2.7
Oct 1, 2024 15:08:16.394942999 CEST	53	51433	1.1.1.1	192.168.2.7
Oct 1, 2024 15:08:35.390101910 CEST	53	53169	1.1.1.1	192.168.2.7
Oct 1, 2024 15:08:51.846386909 CEST	138	138	192.168.2.7	192.168.2.255
Oct 1, 2024 15:08:54.580223083 CEST	53	60341	1.1.1.1	192.168.2.7
Oct 1, 2024 15:08:58.357048988 CEST	53	53480	1.1.1.1	192.168.2.7

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 1, 2024 15:07:59.229542017 CEST	192.168.2.7	1.1.1.1	0x1bbb	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:07:59.229712009 CEST	192.168.2.7	1.1.1.1	0xe199	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 1, 2024 15:07:59.341768980 CEST	192.168.2.7	1.1.1.1	0x4cea	Standard query (0)	www.firstecomplete.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:07:59.341913939 CEST	192.168.2.7	1.1.1.1	0x248d	Standard query (0)	www.firstecomplete.com	65	IN (0x0001)	false
Oct 1, 2024 15:08:00.631742954 CEST	192.168.2.7	1.1.1.1	0x176b	Standard query (0)	pbs.first-quotes.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:00.631933928 CEST	192.168.2.7	1.1.1.1	0x726f	Standard query (0)	pbs.first-quotes.com	65	IN (0x0001)	false
Oct 1, 2024 15:08:01.980993986 CEST	192.168.2.7	1.1.1.1	0xacec	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:01.981580973 CEST	192.168.2.7	1.1.1.1	0xfc8b	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Oct 1, 2024 15:08:02.943272114 CEST	192.168.2.7	1.1.1.1	0x8f4d	Standard query (0)	pbs.first-quotes.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:02.943511963 CEST	192.168.2.7	1.1.1.1	0x6ee9	Standard query (0)	pbs.first-quotes.com	65	IN (0x0001)	false
Oct 1, 2024 15:08:03.214224100 CEST	192.168.2.7	1.1.1.1	0x6b26	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:03.214921951 CEST	192.168.2.7	1.1.1.1	0x67f2	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Oct 1, 2024 15:07:59.236386061 CEST	1.1.1.1	192.168.2.7	0xe199	No error (0)	www.google.com		65	IN (0x0001)	false
Oct 1, 2024 15:07:59.237102985 CEST	1.1.1.1	192.168.2.7	0x1bbb	No error (0)	www.google.com	216.58.212.164	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:07:59.709736109 CEST	1.1.1.1	192.168.2.7	0x4cea	No error (0)	www.firstecomplete.com	161.199.76.40	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:00.976813078 CEST	1.1.1.1	192.168.2.7	0x176b	No error (0)	pbs.first-quotes.com	161.199.76.39	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:01.988075018 CEST	1.1.1.1	192.168.2.7	0xacec	No error (0)	cdnjs.cloudflare.com	104.17.25.14	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:01.988075018 CEST	1.1.1.1	192.168.2.7	0xacec	No error (0)	cdnjs.cloudflare.com	104.17.24.14	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:01.988507032 CEST	1.1.1.1	192.168.2.7	0xfc8b	No error (0)	cdnjs.cloudflare.com		65	IN (0x0001)	false
Oct 1, 2024 15:08:03.195204973 CEST	1.1.1.1	192.168.2.7	0x8f4d	No error (0)	pbs.first-quotes.com	161.199.76.39	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:03.221159935 CEST	1.1.1.1	192.168.2.7	0x6b26	No error (0)	cdnjs.cloudflare.com	104.17.24.14	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:03.221159935 CEST	1.1.1.1	192.168.2.7	0x6b26	No error (0)	cdnjs.cloudflare.com	104.17.25.14	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:03.221540928 CEST	1.1.1.1	192.168.2.7	0x67f2	No error (0)	cdnjs.cloudflare.com		65	IN (0x0001)	false
Oct 1, 2024 15:08:50.469672918 CEST	1.1.1.1	192.168.2.7	0xd5f3	No error (0)	bg.microsoft.map.fastly.net	199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:50.469672918 CEST	1.1.1.1	192.168.2.7	0xd5f3	No error (0)	bg.microsoft.map.fastly.net	199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:09:08.072335005 CEST	1.1.1.1	192.168.2.7	0x4cd8	No error (0)	bg.microsoft.map.fastly.net	199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:09:08.072335005 CEST	1.1.1.1	192.168.2.7	0x4cd8	No error (0)	bg.microsoft.map.fastly.net	199.232.210.172	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

www.firstecomplete.com

pbs.first-quotes.com

https:

cdnjs.cloudflare.com

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49708	161.199.76.40	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:00 UTC	665	OUT	GET / HTTP/1.1 Host: www.firstecomplete.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 13:08:00 UTC	323	IN	HTTP/1.1 302 Redirect Content-Type: text/html; charset=UTF-8 Location: https://pbs.first-quotes.com/Secured/EcompletePaymentOption/EcompletePaymentLogin.aspx Strict-Transport-Security: max-age=15768000; includeSubDomains; preload SERVER: Date: Tue, 01 Oct 2024 13:07:59 GMT Connection: close Content-Length: 209
2024-10-01 13:08:00 UTC	209	IN	Data Raw: 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 4d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 31 3e 4f 62 6a 65 63 74 20 4d 6f 76 65 64 3c 2f 68 31 3e 54 68 69 73 20 64 6f 63 75 6d 65 6e 74 20 6d 61 79 20 62 65 20 66 6f 75 6e 64 20 3c 61 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 70 62 73 2e 66 69 72 73 74 2d 71 75 6f 74 65 73 2e 63 6f 6d 2f 53 65 63 75 72 65 64 2f 45 63 6f 6d 70 6c 65 74 65 50 61 79 6d 65 6e 74 4f 70 74 69 6f 6e 2f 45 63 6f 6d 70 6c 65 74 65 50 61 79 6d 65 6e 74 4c 6f 67 69 6e 2e 61 73 70 78 22 3e 68 65 72 65 3c 2f 61 3e 3c 2f 62 6f 64 79 3e Data Ascii: <head><title>Document Moved</title></head><body><h1>Object Moved</h1>This document may be found <a HREF="https://pbs.first-quotes.com/Secured/EcompletePaymentOption/EcompletePaymentLogin.aspx">here</a></body>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.7	49712	161.199.76.39	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:01 UTC	720	OUT	GET /Secured/EcompletePaymentOption/EcompletePaymentLogin.aspx HTTP/1.1 Host: pbs.first-quotes.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 13:08:01 UTC	1222	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: -1 Set-Cookie: ADRUM_BTa=R:0\|g:f79059ed-1889-46c1-af20-a8fb732c2dcb\|n:wintrust_15dcf551-a2c3-4a26-88f2-fdaa934ee7ae; expires=Tue, 01-Oct-2024 13:08:30 GMT; path=/; secure; HttpOnly; SameSite=None Set-Cookie: SameSite=None; expires=Tue, 01-Oct-2024 13:08:30 GMT; path=/; secure; HttpOnly; SameSite=None Set-Cookie: ADRUM_BT1=R:0\|i:2648624; expires=Tue, 01-Oct-2024 13:08:30 GMT; path=/; secure; HttpOnly; SameSite=None Set-Cookie: backIndex=0; path=/; secure; SameSite=None X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Content-Security-Policy: default-src 'self'; connect-src ; font-src ; frame-src * blob:; img-src * data: blob:; media-src ; object-src ; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; Referrer-Policy: strict-origin Expect-CT: max-age=86400 X-Content-Type-Options: nosniff Permissions-Policy: camera=(), microphone=() Strict-Transport-Security: max-age=15768000; includeSubDomains; preload SERVER: Date: Tue, 01 Oct 2024 13:08:00 GMT Connection: close Content-Length: 16670 Strict-Transport-Security: max-age=4294967294
2024-10-01 13:08:01 UTC	6729	IN	Data Raw: 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 20 20 20 20 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 0d 0a 09 45 2d 43 6f 6d 70 6c 65 74 65 20 50 61 79 6d 65 6e 74 20 4f 70 74 69 6f 6e 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 Data Ascii: <!DOCTYPE html><html lang="en"> <head><title>E-Complete Payment Option</title><meta charset="utf-8" /><meta name="viewport" content="width=device-width, initial-scale=1" /><link rel='stylesheet' href='https://cdnjs.cloudflare.com/ajax/li
2024-10-01 13:08:01 UTC	7951	IN	Data Raw: 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 20 29 20 29 0a 09 7b 0a 09 09 2f 2f 49 45 20 36 2b 20 69 6e 20 27 73 74 61 6e 64 61 72 64 73 20 63 6f 6d 70 6c 69 61 6e 74 20 6d 6f 64 65 27 0a 09 09 77 69 6e 64 6f 77 57 69 64 74 68 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 57 69 64 74 68 3b 0a 09 09 77 69 6e 64 6f 77 48 65 69 67 68 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 3b 0a 09 7d 0a 09 65 6c 73 65 20 69 66 20 28 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 20 26 26 20 28 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 6c 69 65 6e 74 57 69 64 74 68 20 7c 7c 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 6c Data Ascii: lement.clientHeight ) ){//IE 6+ in 'standards compliant mode'windowWidth = document.documentElement.clientWidth;windowHeight = document.documentElement.clientHeight;}else if ( document.body && ( document.body.clientWidth \|\| document.body.cl
2024-10-01 13:08:01 UTC	1990	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 70 4c 69 67 68 74 42 6f 78 22 20 63 6c 61 73 73 3d 22 70 4c 69 67 68 74 42 6f 78 22 3e 0d 0a 0d 0a 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: </div> </div> </div> </div> </div> <div id="pLightBox" class="pLightBox"></div> <script>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.7	49721	161.199.76.39	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:02 UTC	762	OUT	GET /Secured/EcompletePaymentOption/styles/EcompleteStyle.css?v=1 HTTP/1.1 Host: pbs.first-quotes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://pbs.first-quotes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ADRUM_BTa=R:0\|g:f79059ed-1889-46c1-af20-a8fb732c2dcb\|n:wintrust_15dcf551-a2c3-4a26-88f2-fdaa934ee7ae; SameSite=None; ADRUM_BT1=R:0\|i:2648624; backIndex=0
2024-10-01 13:08:02 UTC	740	IN	HTTP/1.1 200 OK Content-Type: text/css Last-Modified: Thu, 12 Sep 2024 21:01:02 GMT Accept-Ranges: bytes ETag: "0fbf0df565db1:0" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Content-Security-Policy: default-src 'self'; connect-src ; font-src ; frame-src * blob:; img-src * data: blob:; media-src ; object-src ; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; Referrer-Policy: strict-origin Expect-CT: max-age=86400 X-Content-Type-Options: nosniff Permissions-Policy: camera=(), microphone=() Strict-Transport-Security: max-age=15768000; includeSubDomains; preload SERVER: Date: Tue, 01 Oct 2024 13:08:01 GMT Content-Length: 35096 Strict-Transport-Security: max-age=4294967294
2024-10-01 13:08:02 UTC	7211	IN	Data Raw: ef bb bf 2a 20 7b 20 20 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 20 20 20 20 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 7d 0d 0a 62 6f 64 79 20 7b 20 20 20 20 63 6f 6c 6f 72 3a 20 62 6c 61 63 6b 3b 7d 0d 0a 0d 0a 68 65 61 64 65 72 20 7b 20 20 20 20 68 65 69 67 68 74 3a 20 38 30 70 78 3b 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 77 68 69 74 65 3b 20 20 20 20 6d 61 72 67 69 6e 3a 20 32 30 70 78 3b 7d 0d 0a 68 65 61 64 65 72 20 3e 20 64 69 76 7b 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 20 20 20 20 6d 69 6e 2d 68 65 69 67 68 74 3a 20 31 30 30 25 3b 20 20 20 20 70 6f 73 69 74 69 6f 6e Data Ascii: * { -webkit-box-sizing: border-box; -moz-box-sizing: border-box; box-sizing: border-box;}body { color: black;}header { height: 80px; background: white; margin: 20px;}header > div{float: left; min-height: 100%; position
2024-10-01 13:08:02 UTC	7951	IN	Data Raw: 6f 77 6e 70 61 79 6d 65 6e 74 2d 6d 65 74 68 6f 64 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 64 69 76 44 6f 77 6e 50 61 79 6d 65 6e 74 49 6e 66 6f 20 7b 77 69 64 74 68 3a 31 30 30 25 3b 20 70 61 64 64 69 6e 67 3a 20 30 20 31 30 25 20 32 30 70 78 20 32 30 25 3b 7d 0d 0a 2e 64 6f 77 6e 70 61 79 6d 65 6e 74 2d 6d 65 74 68 6f 64 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 64 69 76 44 6f 77 6e 70 61 79 6d 65 6e 74 44 65 74 61 69 6c 73 43 6f 6e 74 61 69 6e 65 72 20 7b 20 20 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 32 30 25 3b 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 35 30 70 78 3b 7d 0d 0a 2e 64 6f 77 6e 70 61 79 6d 65 6e 74 2d 6d 65 74 68 6f 64 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 6c 61 62 65 6c 2d 6c 65 66 74 20 7b 20 20 20 77 69 64 74 68 3a 20 34 32 Data Ascii: ownpayment-method-container .divDownPaymentInfo {width:100%; padding: 0 10% 20px 20%;}.downpayment-method-container .divDownpaymentDetailsContainer { padding-left: 20%; margin-bottom: 50px;}.downpayment-method-container .label-left { width: 42
2024-10-01 13:08:02 UTC	7951	IN	Data Raw: 31 30 30 25 3b 7d 0d 0a 20 20 20 20 2e 70 61 79 6d 65 6e 74 2d 64 65 74 61 69 6c 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 64 69 76 42 61 6e 6b 49 6d 61 67 65 20 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 7d 0d 0a 7d 0d 0a 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 36 32 35 70 78 29 20 7b 0d 0a 20 20 20 20 2e 64 6f 77 6e 70 61 79 6d 65 6e 74 2d 6d 65 74 68 6f 64 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 64 69 76 44 6f 77 6e 70 61 79 6d 65 6e 74 44 65 74 61 69 6c 73 43 6f 6e 74 61 69 6e 65 72 20 2e 76 61 6c 75 65 2d 6c 65 66 74 2c 20 20 2e 64 6f 77 6e 70 61 79 6d 65 6e 74 2d 6d 65 74 68 6f 64 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 64 69 76 44 6f 77 6e 70 61 79 6d 65 6e 74 44 65 74 61 69 6c 73 43 6f 6e 74 61 69 6e 65 Data Ascii: 100%;} .payment-detail-container .divBankImage {float:left;}}@media only screen and (max-width: 625px) { .downpayment-method-container .divDownpaymentDetailsContainer .value-left, .downpayment-method-container .divDownpaymentDetailsContaine
2024-10-01 13:08:02 UTC	7951	IN	Data Raw: 20 20 20 20 20 20 20 2e 74 77 6f 2d 73 74 65 70 2d 61 75 74 68 2d 63 6f 6e 74 72 6f 6c 73 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 33 30 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 2f 2a 20 2e 62 6f 74 74 6f 6d 2d 73 65 63 74 69 6f 6e 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 37 30 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 7d 2a 2f 0d 0a 20 20 20 20 20 20 20 20 2e 70 61 79 6d 65 6e 74 2d 70 6c 61 6e 2d 6f 70 74 69 6f 6e 73 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 72 69 67 68 74 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 2e 70 61 79 6d 65 6e 74 2d 6d 65 74 68 6f 64 2d 63 68 6f Data Ascii: .two-step-auth-controls { width: 300px; } /* .bottom-section { height: 700px; }*/ .payment-plan-options { text-align: right; } .payment-method-cho
2024-10-01 13:08:02 UTC	4032	IN	Data Raw: 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 35 70 78 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 35 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 73 75 63 63 65 73 73 2d 70 61 67 65 20 7b 0d 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 7d 0d 0a 0d 0a 2e 73 75 63 63 65 73 73 2d 69 63 6f 6e 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 34 30 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 73 75 63 63 65 73 73 2d 6d 65 73 73 61 67 65 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 34 30 70 78 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 34 30 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 73 75 63 63 65 73 73 2d 74 68 61 6e 6b 2d 79 6f 75 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a Data Ascii: padding-left: 5px; padding-right: 5px;}.success-page { text-align: center;}.success-icon { margin-top: 40px;}.success-message { margin-top: 40px; margin-bottom: 40px;}.success-thank-you { font-siz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.7	49714	161.199.76.39	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:02 UTC	714	OUT	GET /JavaScript/MainView.js?v=1 HTTP/1.1 Host: pbs.first-quotes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pbs.first-quotes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ADRUM_BTa=R:0\|g:f79059ed-1889-46c1-af20-a8fb732c2dcb\|n:wintrust_15dcf551-a2c3-4a26-88f2-fdaa934ee7ae; SameSite=None; ADRUM_BT1=R:0\|i:2648624; backIndex=0
2024-10-01 13:08:02 UTC	748	IN	HTTP/1.1 200 OK Content-Type: application/javascript Last-Modified: Thu, 12 Sep 2024 20:59:44 GMT Accept-Ranges: bytes ETag: "02073b1565db1:0" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Content-Security-Policy: default-src 'self'; connect-src ; font-src data:; frame-src ; img-src data:; media-src ; object-src ; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; Referrer-Policy: strict-origin Expect-CT: max-age=86400 X-Content-Type-Options: nosniff Permissions-Policy: camera=(), microphone=() Strict-Transport-Security: max-age=15768000; includeSubDomains; preload SERVER: Date: Tue, 01 Oct 2024 13:08:01 GMT Content-Length: 92566 Strict-Transport-Security: max-age=4294967294
2024-10-01 13:08:02 UTC	7203	IN	Data Raw: ef bb bf 2f 2f 50 42 53 20 2d 20 31 31 30 38 31 20 2d 20 67 61 62 65 0d 0a 2f 2f 73 65 74 75 70 20 61 20 73 68 61 72 65 64 20 76 61 72 69 61 62 6c 65 0d 0a 77 69 6e 64 6f 77 2e 6c 6f 6f 6b 55 70 44 6c 67 20 3d 20 22 22 3b 0d 0a 0d 0a 2f 2f 20 49 6e 73 74 65 61 64 20 6f 66 20 64 6f 69 6e 67 20 74 68 69 73 3a 20 76 61 72 20 65 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 6d 79 6f 62 6a 27 29 3b 20 0d 0a 2f 2f 20 75 73 65 20 74 68 69 73 3a 0d 0a 2f 2f 20 76 61 72 20 65 6c 20 3d 20 24 28 27 6d 79 6f 62 6a 27 29 3b 0d 0a 2f 2f 66 75 6e 63 74 69 6f 6e 20 24 28 29 20 7b 0d 0a 2f 2f 20 20 20 20 76 61 72 20 65 6c 65 6d 65 6e 74 73 20 3d 20 6e 65 77 20 41 72 72 61 79 28 29 3b 0d 0a 2f 2f 20 20 20 20 66 6f 72 20 28 76 61 72 Data Ascii: //PBS - 11081 - gabe//setup a shared variablewindow.lookUpDlg = "";// Instead of doing this: var el = document.getElementById('myobj'); // use this:// var el = $('myobj');//function $() {// var elements = new Array();// for (var
2024-10-01 13:08:02 UTC	7951	IN	Data Raw: 65 78 74 27 29 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 50 62 73 2e 73 77 69 74 63 68 54 6f 6f 6c 74 69 70 28 24 28 27 2e 63 6b 2d 65 64 69 74 6f 72 27 29 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 63 61 74 63 68 28 65 72 72 6f 72 20 3d 3e 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 65 72 72 6f 72 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 20 20 20 20 24 28 73 65 6c 65 63 74 6f 72 29 2e 73 68 6f 77 28 29 3b 0d 0a 20 20 20 20 7d 0d 0a 7d 3b 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 24 61 6c 65 72 74 28 74 65 78 74 2c 20 74 69 74 6c 65 Data Ascii: ext')); }); Pbs.switchTooltip($('.ck-editor')); }) .catch(error => { console.error(error); }); $(selector).show(); }};function $alert(text, title
2024-10-01 13:08:02 UTC	7951	IN	Data Raw: 68 74 20 3e 20 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 69 67 68 74 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 72 65 73 69 7a 65 42 79 28 30 2c 20 74 6f 70 20 2b 20 68 65 69 67 68 74 20 2d 20 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 69 67 68 74 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 23 27 20 2b 20 70 6f 70 75 70 49 64 29 2e 63 73 73 28 27 68 65 69 67 68 74 27 2c 20 27 61 75 74 6f 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 7d 2c 0d 0a 20 20 20 20 77 69 6e 64 6f 77 59 3a 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 68 65 69 67 68 74 20 3d 20 50 62 73 2e 69 6e 6e 65 72 48 65 69 67 68 74 Data Ascii: ht > window.innerHeight) window.resizeBy(0, top + height - window.innerHeight); } $('#' + popupId).css('height', 'auto'); }); }, windowY: function () { var height = Pbs.innerHeight
2024-10-01 13:08:02 UTC	7951	IN	Data Raw: 30 29 20 68 65 69 67 68 74 42 79 20 3d 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 72 65 73 69 7a 65 42 79 28 77 69 64 74 68 42 79 2c 20 68 65 69 67 68 74 42 79 29 3b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 0d 0a 20 20 20 20 20 20 20 20 2f 2f 69 66 20 28 77 69 64 74 68 29 20 7b 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 2f 2f 20 20 20 20 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 20 3d 20 77 69 64 74 68 54 6f 3b 0d 0a 20 20 20 20 20 20 20 20 2f 2f 20 20 20 20 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 69 67 68 74 20 3d 20 68 65 69 67 68 74 54 6f 3b 0d 0a 20 20 20 20 20 20 20 20 2f 2f 20 20 20 20 72 65 74 75 72 6e 3b 0d 0a 20 20 20 20 20 20 20 20 2f 2f 7d 0d 0a 20 20 Data Ascii: 0) heightBy = 0; } window.resizeBy(widthBy, heightBy); return; //if (width) { // window.innerWidth = widthTo; // window.innerHeight = heightTo; // return; //}
2024-10-01 13:08:02 UTC	7951	IN	Data Raw: 74 74 6f 6e 33 43 6c 61 73 73 20 7c 7c 20 27 62 74 6e 2d 73 65 63 6f 6e 64 61 72 79 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 27 61 63 74 69 6f 6e 27 3a 20 61 63 74 69 6f 6e 33 20 7c 7c 20 27 27 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 20 20 20 20 24 28 27 23 63 6f 6e 66 69 72 6d 42 6f 78 27 29 2e 64 72 61 67 67 61 62 6c 65 28 7b 20 63 75 72 73 6f 72 3a 20 22 6d 6f 76 65 22 2c 20 63 6f 6e 74 61 69 6e 6d 65 6e 74 3a 20 22 70 61 72 65 6e 74 22 20 7d 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 72 65 73 69 7a 61 62 6c 65 28 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 69 6e 77 69 64 74 68 3a 20 Data Ascii: tton3Class \|\| 'btn-secondary', 'action': action3 \|\| '' } } }); $('#confirmBox').draggable({ cursor: "move", containment: "parent" }) .resizable({ minwidth:
2024-10-01 13:08:02 UTC	7951	IN	Data Raw: 62 61 63 6b 64 72 6f 70 73 20 69 66 20 65 78 63 65 65 64 65 64 2e 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 62 61 63 6b 64 72 6f 70 73 41 6d 6f 75 6e 74 20 3d 20 24 28 27 64 69 76 2e 6d 6f 64 61 6c 2d 62 61 63 6b 64 72 6f 70 27 29 2e 6c 65 6e 67 74 68 3b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 62 61 63 6b 64 72 6f 70 73 41 6d 6f 75 6e 74 20 3e 20 30 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6d 6f 64 61 6c 41 6d 74 20 3d 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 50 62 73 2e 4c 42 2e 24 64 69 76 4d 6f 64 61 6c 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 6f 64 61 6c 41 6d 74 20 3d 20 31 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 6f 64 61 6c 41 6d 74 20 2b 3d 20 50 62 73 2e 4c Data Ascii: backdrops if exceeded. var backdropsAmount = $('div.modal-backdrop').length; if (backdropsAmount > 0) { var modalAmt = 0; if (Pbs.LB.$divModal) { modalAmt = 1; modalAmt += Pbs.L
2024-10-01 13:08:02 UTC	7951	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 6d 6f 64 61 6c 2e 66 69 6e 64 28 22 5b 6f 6e 63 68 61 6e 67 65 5d 22 20 2b 20 64 6f 4e 6f 74 43 68 61 6e 67 65 50 6f 73 74 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6f 6e 63 68 61 6e 67 65 20 3d 20 24 28 74 68 69 73 29 2e 61 74 74 72 28 22 6f 6e 63 68 61 6e 67 65 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 6f 6e 63 68 61 6e 67 65 29 20 24 28 74 68 69 73 29 2e 61 74 74 72 28 22 6f 6e 63 68 61 6e 67 65 22 2c 20 6f 6e 63 68 61 6e 67 65 2e 72 65 70 6c 61 63 65 28 27 5f 5f 64 6f 50 6f 73 74 42 61 63 6b 27 2c 20 70 62 73 4c 42 70 6f 73 74 42 61 63 6b 29 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0d Data Ascii: modal.find("[onchange]" + doNotChangePost).each(function () { var onchange = $(this).attr("onchange"); if (onchange) $(this).attr("onchange", onchange.replace('__doPostBack', pbsLBpostBack)); });
2024-10-01 13:08:02 UTC	7951	IN	Data Raw: 61 64 65 72 28 22 50 42 53 2d 4c 42 22 2c 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 29 3b 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 75 72 6c 3a 20 50 62 73 2e 4c 42 2e 75 72 6c 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 3a 20 64 61 74 61 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 75 63 63 65 73 73 3a 20 66 75 6e 63 74 69 6f 6e 20 28 68 74 6d 2c 20 73 74 61 74 75 73 2c 20 78 68 72 29 20 7b 20 50 62 73 2e 4c 42 2e 61 66 74 65 72 53 75 63 63 65 73 73 50 6f 73 74 42 61 63 6b 28 68 74 6d 2c 20 73 74 61 74 75 73 2c 20 78 68 72 29 3b 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: ader("PBS-LB", window.location.pathname);}, url: Pbs.LB.url, data: data, success: function (htm, status, xhr) { Pbs.LB.afterSuccessPostBack(htm, status, xhr); } });
2024-10-01 13:08:02 UTC	7951	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 63 6c 6f 73 65 42 75 74 74 6f 6e 20 3d 20 6d 6f 64 61 6c 2e 66 69 6e 64 28 27 62 75 74 74 6f 6e 2e 63 6c 6f 73 65 2c 62 75 74 74 6f 6e 2e 41 63 74 41 73 43 6c 6f 73 65 2c 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 63 6c 6f 73 65 6d 6f 64 61 6c 2c 3a 62 75 74 74 6f 6e 5b 76 61 6c 75 65 3d 22 43 6c 6f 73 65 22 5d 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 6f 73 65 42 75 74 74 6f 6e 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 20 28 69 2c 20 63 75 72 42 74 6e 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 62 74 6e 20 3d 20 24 28 63 75 72 42 74 6e 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 Data Ascii: var closeButton = modal.find('button.close,button.ActAsClose,[type="button"].closemodal,:button[value="Close"]'); closeButton.each(function (i, curBtn) { var btn = $(curBtn); var
2024-10-01 13:08:02 UTC	7951	IN	Data Raw: 20 69 66 20 28 24 28 74 68 69 73 29 2e 61 74 74 72 28 27 74 61 62 69 6e 64 65 78 27 29 20 21 3d 20 27 2d 31 27 29 20 24 28 74 68 69 73 29 2e 61 74 74 72 28 27 74 61 62 69 6e 64 65 78 27 2c 20 27 30 27 29 3b 20 7d 29 3b 2f 2f 69 6e 64 65 78 20 2b 20 31 0d 0a 20 20 20 20 20 20 20 20 63 6f 6e 74 61 69 6e 65 72 2e 66 69 6e 64 28 27 64 69 76 2e 49 31 44 72 6f 70 44 6f 77 6e 44 69 73 61 62 6c 65 64 20 73 70 61 6e 2e 49 31 44 72 6f 70 44 6f 77 6e 4c 69 73 74 4c 61 62 65 6c 27 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 69 66 20 28 24 28 74 68 69 73 29 2e 74 65 78 74 28 29 20 3d 3d 20 27 5b 53 65 6c 65 63 74 20 61 6e 20 49 74 65 6d 5d 27 29 20 24 28 74 68 69 73 29 2e 74 65 78 74 28 27 27 29 3b 20 7d 29 3b 0d 0a 20 20 20 20 20 20 20 20 50 62 73 Data Ascii: if ($(this).attr('tabindex') != '-1') $(this).attr('tabindex', '0'); });//index + 1 container.find('div.I1DropDownDisabled span.I1DropDownListLabel').each(function () { if ($(this).text() == '[Select an Item]') $(this).text(''); }); Pbs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.7	49715	161.199.76.39	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:02 UTC	715	OUT	GET /JavaScript/jqueryConfirm.js HTTP/1.1 Host: pbs.first-quotes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pbs.first-quotes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ADRUM_BTa=R:0\|g:f79059ed-1889-46c1-af20-a8fb732c2dcb\|n:wintrust_15dcf551-a2c3-4a26-88f2-fdaa934ee7ae; SameSite=None; ADRUM_BT1=R:0\|i:2648624; backIndex=0
2024-10-01 13:08:02 UTC	747	IN	HTTP/1.1 200 OK Content-Type: application/javascript Last-Modified: Thu, 12 Sep 2024 21:00:56 GMT Accept-Ranges: bytes ETag: "0745ddc565db1:0" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Content-Security-Policy: default-src 'self'; connect-src ; font-src data:; frame-src ; img-src data:; media-src ; object-src ; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; Referrer-Policy: strict-origin Expect-CT: max-age=86400 X-Content-Type-Options: nosniff Permissions-Policy: camera=(), microphone=() Strict-Transport-Security: max-age=15768000; includeSubDomains; preload SERVER: Date: Tue, 01 Oct 2024 13:08:01 GMT Content-Length: 6786 Strict-Transport-Security: max-age=4294967294
2024-10-01 13:08:02 UTC	6786	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 0d 0a 09 0d 0a 20 20 20 20 24 2e 63 6f 6e 66 69 72 6d 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 70 61 72 61 6d 73 29 20 7b 0d 0a 0d 0a 09 20 20 20 20 69 66 28 24 28 27 23 63 6f 6e 66 69 72 6d 4f 76 65 72 6c 61 79 27 29 2e 6c 65 6e 67 74 68 29 7b 0d 0a 09 09 09 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0d 0a 09 09 7d 0d 0a 09 09 0d 0a 09 20 20 20 76 61 72 20 62 75 74 74 6f 6e 48 54 4d 4c 20 3d 20 27 27 3b 0d 0a 20 20 20 20 20 20 20 20 24 2e 65 61 63 68 28 70 61 72 61 6d 73 2e 62 75 74 74 6f 6e 73 2c 20 66 75 6e 63 74 69 6f 6e 20 28 6b 65 79 2c 20 6f 62 6a 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6e 61 6d 65 20 3d 20 6f 62 6a 5b 27 6e 61 6d 65 27 5d 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 Data Ascii: (function($){ $.confirm = function (params) { if($('#confirmOverlay').length){return false;} var buttonHTML = ''; $.each(params.buttons, function (key, obj) { var name = obj['name']; b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.7	49713	161.199.76.39	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:02 UTC	856	OUT	GET /WebResource.axd?d=yaUIRZP2BxuchGMRpHK-PW27W1wPkpaEWf4v2UdnfBq08EBqGeF9zhziqBFObI894wL7VIAZ2hqkK5ovbH_WxzOKEtH1Y_w_3P3aEKCjubexRXpGhOCoB_uM-bLQ6irt0&t=638617536140000000 HTTP/1.1 Host: pbs.first-quotes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pbs.first-quotes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ADRUM_BTa=R:0\|g:f79059ed-1889-46c1-af20-a8fb732c2dcb\|n:wintrust_15dcf551-a2c3-4a26-88f2-fdaa934ee7ae; SameSite=None; ADRUM_BT1=R:0\|i:2648624; backIndex=0
2024-10-01 13:08:02 UTC	764	IN	HTTP/1.1 200 OK Cache-Control: public Content-Type: application/x-javascript Expires: Wed, 01 Oct 2025 08:01:31 GMT Last-Modified: Thu, 12 Sep 2024 21:00:14 GMT X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Content-Security-Policy: default-src 'self'; connect-src ; font-src data:; frame-src ; img-src data:; media-src ; object-src ; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; Referrer-Policy: strict-origin Expect-CT: max-age=86400 X-Content-Type-Options: nosniff Permissions-Policy: camera=(), microphone=() Strict-Transport-Security: max-age=15768000; includeSubDomains; preload SERVER: Date: Tue, 01 Oct 2024 13:08:01 GMT Content-Length: 547 Strict-Transport-Security: max-age=4294967294
2024-10-01 13:08:02 UTC	547	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 49 31 4d 65 6d 6f 72 69 7a 65 46 6f 63 75 73 65 64 45 6c 65 6d 65 6e 74 28 61 29 7b 69 66 28 49 31 46 6f 63 75 73 65 64 45 6c 65 6d 65 6e 74 4f 76 65 72 72 69 64 65 6e 3d 3d 74 72 75 65 29 72 65 74 75 72 6e 3b 76 61 72 20 63 3d 2f 5e 73 75 62 6d 69 74 7c 62 75 74 74 6f 6e 7c 69 6d 61 67 65 7c 72 65 73 65 74 24 2f 69 3b 76 61 72 20 64 3d 64 6f 63 75 6d 65 6e 74 2e 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3f 64 6f 63 75 6d 65 6e 74 2e 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3a 61 2e 74 61 72 67 65 74 3b 69 66 28 64 21 3d 6e 75 6c 6c 26 26 64 2e 62 21 3d 6e 75 6c 6c 26 26 64 2e 62 2e 72 65 70 6c 61 63 65 28 2f 28 5e 5c 73 2b 7c 5c 73 2b 24 29 2f 2c 27 27 29 21 3d 27 27 26 26 64 2e 74 61 62 49 6e 64 65 78 3e 2d 31 29 7b 76 61 72 20 65 Data Ascii: function I1MemorizeFocusedElement(a){if(I1FocusedElementOverriden==true)return;var c=/^submit\|button\|image\|reset$/i;var d=document.activeElement?document.activeElement:a.target;if(d!=null&&d.b!=null&&d.b.replace(/(^\s+\|\s+$)/,'')!=''&&d.tabIndex>-1){var e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.7	49719	161.199.76.39	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:02 UTC	856	OUT	GET /WebResource.axd?d=635O8dWR2vwElIyx754oL7z_LOmgDHd4OuEuKB20_Av1-l21ZukpdZhm8e67dSgZ8_S0OApUzE78osQTyUXsmt1Z7gSEIkjlvnXzOj3ihqLjHiSu0UT2jpQ5QZ16Jdhr0&t=638617536140000000 HTTP/1.1 Host: pbs.first-quotes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pbs.first-quotes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ADRUM_BTa=R:0\|g:f79059ed-1889-46c1-af20-a8fb732c2dcb\|n:wintrust_15dcf551-a2c3-4a26-88f2-fdaa934ee7ae; SameSite=None; ADRUM_BT1=R:0\|i:2648624; backIndex=0
2024-10-01 13:08:02 UTC	766	IN	HTTP/1.1 200 OK Cache-Control: public Content-Type: application/x-javascript Expires: Wed, 01 Oct 2025 08:01:31 GMT Last-Modified: Thu, 12 Sep 2024 21:00:14 GMT X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Content-Security-Policy: default-src 'self'; connect-src ; font-src data:; frame-src ; img-src data:; media-src ; object-src ; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; Referrer-Policy: strict-origin Expect-CT: max-age=86400 X-Content-Type-Options: nosniff Permissions-Policy: camera=(), microphone=() Strict-Transport-Security: max-age=15768000; includeSubDomains; preload SERVER: Date: Tue, 01 Oct 2024 13:08:01 GMT Content-Length: 14900 Strict-Transport-Security: max-age=4294967294
2024-10-01 13:08:02 UTC	7185	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 49 31 47 65 74 41 67 67 72 65 67 61 74 65 48 65 69 67 68 74 46 6f 72 45 6c 65 6d 65 6e 74 43 6f 6e 74 65 6e 74 73 28 61 29 7b 76 61 72 20 5f 64 61 3d 30 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 61 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 5f 64 62 3d 61 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 69 5d 3b 69 66 28 74 79 70 65 6f 66 28 5f 64 62 2e 6f 66 66 73 65 74 48 65 69 67 68 74 29 3d 3d 27 6e 75 6d 62 65 72 27 29 7b 5f 64 61 2b 3d 5f 64 62 2e 6f 66 66 73 65 74 48 65 69 67 68 74 3b 7d 7d 72 65 74 75 72 6e 20 5f 64 61 3b 7d 66 75 6e 63 74 69 6f 6e 20 49 31 47 65 74 58 6d 6c 4e 6f 64 65 56 61 6c 75 65 28 62 2c 63 29 7b 69 66 28 74 79 70 65 6f 66 28 62 2e 73 65 6c 65 63 74 53 69 6e 67 6c 65 Data Ascii: function I1GetAggregateHeightForElementContents(a){var _da=0;for(var i=0;i<a.childNodes.length;i++){var _db=a.childNodes[i];if(typeof(_db.offsetHeight)=='number'){_da+=_db.offsetHeight;}}return _da;}function I1GetXmlNodeValue(b,c){if(typeof(b.selectSingle
2024-10-01 13:08:02 UTC	7715	IN	Data Raw: 62 75 74 65 28 61 2c 7a 29 7b 69 66 28 49 31 49 73 49 45 28 29 3d 3d 74 72 75 65 29 7b 72 65 74 75 72 6e 20 61 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 7a 2e 72 65 70 6c 61 63 65 28 2f 2d 2f 67 2c 27 27 29 2c 30 29 3b 7d 65 6c 73 65 20 69 66 28 49 31 49 73 4d 6f 7a 69 6c 6c 61 28 29 3d 3d 74 72 75 65 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 61 2c 6e 75 6c 6c 29 2e 67 65 74 50 72 6f 70 65 72 74 79 56 61 6c 75 65 28 7a 29 3b 7d 65 6c 73 65 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 31 46 6f 72 6d 61 74 28 5f 61 2c 5f 62 2c 5f 63 2c 5f 64 2c 5f 65 2c 5f 66 2c 5f 67 2c 5f 68 2c 5f 69 2c 5f Data Ascii: bute(a,z){if(I1IsIE()==true){return a.currentStyle.getAttribute(z.replace(/-/g,''),0);}else if(I1IsMozilla()==true){return document.defaultView.getComputedStyle(a,null).getPropertyValue(z);}else{return null;}}function I1Format(_a,_b,_c,_d,_e,_f,_g,_h,_i,_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.7	49720	161.199.76.39	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:02 UTC	846	OUT	GET /WebResource.axd?d=ylVZOvouK_BkjsCX7QFfPJAJMpaYKcS99qSktRmlKarFwE3Pkv3Y99K6p-FsNZNh1F-RskGsm9kGWkSwi4IuOf01LPxXRyHNxsyLOEv9Hyng1H93GWLaTg2&t=638617536140000000 HTTP/1.1 Host: pbs.first-quotes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pbs.first-quotes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ADRUM_BTa=R:0\|g:f79059ed-1889-46c1-af20-a8fb732c2dcb\|n:wintrust_15dcf551-a2c3-4a26-88f2-fdaa934ee7ae; SameSite=None; ADRUM_BT1=R:0\|i:2648624; backIndex=0
2024-10-01 13:08:02 UTC	764	IN	HTTP/1.1 200 OK Cache-Control: public Content-Type: application/x-javascript Expires: Wed, 01 Oct 2025 08:01:31 GMT Last-Modified: Thu, 12 Sep 2024 21:00:14 GMT X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Content-Security-Policy: default-src 'self'; connect-src ; font-src data:; frame-src ; img-src data:; media-src ; object-src ; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; Referrer-Policy: strict-origin Expect-CT: max-age=86400 X-Content-Type-Options: nosniff Permissions-Policy: camera=(), microphone=() Strict-Transport-Security: max-age=15768000; includeSubDomains; preload SERVER: Date: Tue, 01 Oct 2024 13:08:01 GMT Content-Length: 772 Strict-Transport-Security: max-age=4294967294
2024-10-01 13:08:02 UTC	772	IN	Data Raw: 76 61 72 20 49 31 46 6f 63 75 73 65 64 45 6c 65 6d 65 6e 74 4f 76 65 72 72 69 64 65 6e 20 3d 20 66 61 6c 73 65 3b 20 2f 2f 20 49 66 20 74 72 75 65 2c 20 74 68 65 20 68 69 64 64 65 6e 20 66 69 65 6c 64 20 68 61 73 20 62 65 65 6e 20 6d 61 6e 75 61 6c 6c 79 20 73 65 74 2e 0d 0a 2f 2f 20 54 68 69 73 20 73 63 72 69 70 74 20 69 73 20 75 73 65 64 20 62 79 20 4a 73 48 65 6c 70 65 72 2e 45 6e 61 62 6c 65 49 6e 61 63 74 69 76 69 74 79 54 69 6d 65 6f 75 74 28 29 0d 0a 0d 0a 76 61 72 20 49 31 54 69 6d 65 6f 75 74 49 64 20 3d 20 6e 75 6c 6c 3b 09 09 09 20 20 2f 2f 09 53 74 6f 72 65 73 20 74 68 65 20 72 65 74 75 72 6e 20 76 61 6c 75 65 20 6f 66 20 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 29 0d 0a 76 61 72 20 49 31 54 69 6d 65 6f 75 74 53 75 62 69 6e 74 65 Data Ascii: var I1FocusedElementOverriden = false; // If true, the hidden field has been manually set.// This script is used by JsHelper.EnableInactivityTimeout()var I1TimeoutId = null; //Stores the return value of window.setTimeout()var I1TimeoutSubinte

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.7	49718	104.17.25.14	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:02 UTC	580	OUT	GET /ajax/libs/bootstrap/5.1.3/css/bootstrap.min.css HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://pbs.first-quotes.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 13:08:03 UTC	909	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 13:08:02 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"6161dfe3-5ccc" Last-Modified: Sat, 09 Oct 2021 18:30:59 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 70954 Expires: Sun, 21 Sep 2025 13:08:02 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VsCQ8DmxGthJy7In2wcYIjRCXRFUqNdVulkeIgSPnoet97zD7QOinYFADEPYbTWyXUVQQ%2Fkw5zOgEKGvlRpQwXZxRSz9S0DepDFOH0zwoQRJkJPeJb2ulHst3HDcKOMCbnObS6WC"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8cbcadde7dac4251-EWR
2024-10-01 13:08:03 UTC	460	IN	Data Raw: 33 39 38 36 0d 0a 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 35 2e 31 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 31 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 31 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 73 2d 62 6c 75 65 3a 23 30 64 Data Ascii: 3986@charset "UTF-8";/! Bootstrap v5.1.3 (https://getbootstrap.com/) * Copyright 2011-2021 The Bootstrap Authors * Copyright 2011-2021 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */:root{--bs-blue:#0d
2024-10-01 13:08:03 UTC	1369	IN	Data Raw: 35 37 64 3b 2d 2d 62 73 2d 67 72 61 79 2d 64 61 72 6b 3a 23 33 34 33 61 34 30 3b 2d 2d 62 73 2d 67 72 61 79 2d 31 30 30 3a 23 66 38 66 39 66 61 3b 2d 2d 62 73 2d 67 72 61 79 2d 32 30 30 3a 23 65 39 65 63 65 66 3b 2d 2d 62 73 2d 67 72 61 79 2d 33 30 30 3a 23 64 65 65 32 65 36 3b 2d 2d 62 73 2d 67 72 61 79 2d 34 30 30 3a 23 63 65 64 34 64 61 3b 2d 2d 62 73 2d 67 72 61 79 2d 35 30 30 3a 23 61 64 62 35 62 64 3b 2d 2d 62 73 2d 67 72 61 79 2d 36 30 30 3a 23 36 63 37 35 37 64 3b 2d 2d 62 73 2d 67 72 61 79 2d 37 30 30 3a 23 34 39 35 30 35 37 3b 2d 2d 62 73 2d 67 72 61 79 2d 38 30 30 3a 23 33 34 33 61 34 30 3b 2d 2d 62 73 2d 67 72 61 79 2d 39 30 30 3a 23 32 31 32 35 32 39 3b 2d 2d 62 73 2d 70 72 69 6d 61 72 79 3a 23 30 64 36 65 66 64 3b 2d 2d 62 73 2d 73 65 63 6f Data Ascii: 57d;--bs-gray-dark:#343a40;--bs-gray-100:#f8f9fa;--bs-gray-200:#e9ecef;--bs-gray-300:#dee2e6;--bs-gray-400:#ced4da;--bs-gray-500:#adb5bd;--bs-gray-600:#6c757d;--bs-gray-700:#495057;--bs-gray-800:#343a40;--bs-gray-900:#212529;--bs-primary:#0d6efd;--bs-seco
2024-10-01 13:08:03 UTC	1369	IN	Data Raw: 72 3a 73 6d 6f 6f 74 68 7d 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 64 79 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 29 3b 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 64 79 2d 66 6f 6e 74 2d 73 69 7a 65 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 64 79 2d 66 6f 6e 74 2d 77 65 69 67 68 74 29 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 64 79 2d 6c 69 6e 65 2d 68 65 69 67 68 74 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 64 79 2d 63 6f 6c 6f 72 29 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 64 79 2d 74 65 78 74 2d 61 6c 69 67 6e 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f Data Ascii: r:smooth}}body{margin:0;font-family:var(--bs-body-font-family);font-size:var(--bs-body-font-size);font-weight:var(--bs-body-font-weight);line-height:var(--bs-body-line-height);color:var(--bs-body-color);text-align:var(--bs-body-text-align);background-colo
2024-10-01 13:08:03 UTC	1369	IN	Data Raw: 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 64 64 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 62 6c 6f 63 6b 71 75 6f 74 65 7b 6d 61 72 67 69 6e 3a 30 20 30 20 31 72 65 6d 7d 62 2c 73 74 72 6f 6e 67 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 65 72 7d 2e 73 6d 61 6c 6c 2c 73 6d 61 6c 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 37 35 65 6d 7d 2e 6d 61 72 6b 2c 6d 61 72 6b 7b 70 61 64 64 69 6e 67 3a 2e 32 65 6d 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 63 66 38 65 33 7d 73 75 62 2c 73 75 70 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 35 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e Data Ascii: nt-weight:700}dd{margin-bottom:.5rem;margin-left:0}blockquote{margin:0 0 1rem}b,strong{font-weight:bolder}.small,small{font-size:.875em}.mark,mark{padding:.2em;background-color:#fcf8e3}sub,sup{position:relative;font-size:.75em;line-height:0;vertical-align
2024-10-01 13:08:03 UTC	1369	IN	Data Raw: 65 78 74 61 72 65 61 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 62 75 74 74 6f 6e 2c 73 65 6c 65 63 74 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 5b 72 6f 6c 65 3d 62 75 74 74 6f 6e 5d 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 73 65 6c 65 63 74 7b 77 6f 72 64 2d 77 72 61 70 3a 6e 6f 72 6d 61 6c 7d 73 65 6c 65 63 74 3a 64 69 73 61 62 6c 65 64 7b 6f 70 61 63 69 74 79 3a 31 7d 5b 6c 69 73 74 5d 3a 3a 2d 77 65 62 6b 69 74 2d 63 61 6c 65 6e 64 61 72 2d 70 69 63 6b 65 72 2d 69 6e 64 69 63 61 74 6f 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 5b 74 79 70 65 3d 62 75 74 74 6f 6e Data Ascii: extarea{margin:0;font-family:inherit;font-size:inherit;line-height:inherit}button,select{text-transform:none}[role=button]{cursor:pointer}select{word-wrap:normal}select:disabled{opacity:1}[list]::-webkit-calendar-picker-indicator{display:none}[type=button
2024-10-01 13:08:03 UTC	1369	IN	Data Raw: 62 6f 72 64 65 72 3a 30 7d 73 75 6d 6d 61 72 79 7b 64 69 73 70 6c 61 79 3a 6c 69 73 74 2d 69 74 65 6d 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 70 72 6f 67 72 65 73 73 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 7d 5b 68 69 64 64 65 6e 5d 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6c 65 61 64 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 7d 2e 64 69 73 70 6c 61 79 2d 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 63 61 6c 63 28 31 2e 36 32 35 72 65 6d 20 2b 20 34 2e 35 76 77 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 32 30 30 70 78 Data Ascii: border:0}summary{display:list-item;cursor:pointer}progress{vertical-align:baseline}[hidden]{display:none!important}.lead{font-size:1.25rem;font-weight:300}.display-1{font-size:calc(1.625rem + 4.5vw);font-weight:300;line-height:1.2}@media (min-width:1200px
2024-10-01 13:08:03 UTC	1369	IN	Data Raw: 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 e2 80 94 c2 a0 22 7d 2e 69 6d 67 2d 66 6c 75 69 64 7b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 61 75 74 6f 7d 2e 69 6d 67 2d 74 68 75 6d 62 6e 61 69 6c 7b 70 61 64 64 69 6e 67 3a 2e 32 35 72 65 6d 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 65 65 32 65 36 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 32 35 72 65 6d 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 61 75 74 6f 7d 2e 66 69 67 75 72 65 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 2e 66 69 67 75 72 65 2d 69 6d 67 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 Data Ascii: fore{content:""}.img-fluid{max-width:100%;height:auto}.img-thumbnail{padding:.25rem;background-color:#fff;border:1px solid #dee2e6;border-radius:.25rem;max-width:100%;height:auto}.figure{display:inline-block}.figure-img{margin-bottom:.5rem;line-heigh
2024-10-01 13:08:03 UTC	1369	IN	Data Raw: 79 29 7d 2e 63 6f 6c 7b 66 6c 65 78 3a 31 20 30 20 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 61 75 74 6f 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 61 75 74 6f 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 31 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 32 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 35 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 33 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 33 33 2e 33 33 33 33 33 33 33 33 33 33 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 34 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 32 35 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 35 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 Data Ascii: y)}.col{flex:1 0 0%}.row-cols-auto>{flex:0 0 auto;width:auto}.row-cols-1>{flex:0 0 auto;width:100%}.row-cols-2>{flex:0 0 auto;width:50%}.row-cols-3>{flex:0 0 auto;width:33.3333333333%}.row-cols-4>{flex:0 0 auto;width:25%}.row-cols-5>{flex:0 0 auto;w
2024-10-01 13:08:03 UTC	1369	IN	Data Raw: 67 2d 33 2c 2e 67 79 2d 33 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 79 3a 31 72 65 6d 7d 2e 67 2d 34 2c 2e 67 78 2d 34 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 78 3a 31 2e 35 72 65 6d 7d 2e 67 2d 34 2c 2e 67 79 2d 34 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 79 3a 31 2e 35 72 65 6d 7d 2e 67 2d 35 2c 2e 67 78 2d 35 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 78 3a 33 72 65 6d 7d 2e 67 2d 35 2c 2e 67 79 2d 35 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 79 3a 33 72 65 6d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 35 37 36 70 78 29 7b 2e 63 6f 6c 2d 73 6d 7b 66 6c 65 78 3a 31 20 30 20 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 61 75 74 6f 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 61 75 74 6f 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 73 6d Data Ascii: g-3,.gy-3{--bs-gutter-y:1rem}.g-4,.gx-4{--bs-gutter-x:1.5rem}.g-4,.gy-4{--bs-gutter-y:1.5rem}.g-5,.gx-5{--bs-gutter-x:3rem}.g-5,.gy-5{--bs-gutter-y:3rem}@media (min-width:576px){.col-sm{flex:1 0 0%}.row-cols-sm-auto>*{flex:0 0 auto;width:auto}.row-cols-sm
2024-10-01 13:08:03 UTC	1369	IN	Data Raw: 3a 37 35 25 7d 2e 6f 66 66 73 65 74 2d 73 6d 2d 31 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 33 2e 33 33 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 73 6d 2d 31 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 39 31 2e 36 36 36 36 36 36 36 37 25 7d 2e 67 2d 73 6d 2d 30 2c 2e 67 78 2d 73 6d 2d 30 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 78 3a 30 7d 2e 67 2d 73 6d 2d 30 2c 2e 67 79 2d 73 6d 2d 30 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 79 3a 30 7d 2e 67 2d 73 6d 2d 31 2c 2e 67 78 2d 73 6d 2d 31 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 78 3a 30 2e 32 35 72 65 6d 7d 2e 67 2d 73 6d 2d 31 2c 2e 67 79 2d 73 6d 2d 31 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 79 3a 30 2e 32 35 72 65 6d 7d 2e 67 2d 73 6d 2d 32 2c 2e 67 78 2d 73 6d 2d 32 7b 2d 2d 62 73 2d 67 75 74 74 65 72 Data Ascii: :75%}.offset-sm-10{margin-left:83.33333333%}.offset-sm-11{margin-left:91.66666667%}.g-sm-0,.gx-sm-0{--bs-gutter-x:0}.g-sm-0,.gy-sm-0{--bs-gutter-y:0}.g-sm-1,.gx-sm-1{--bs-gutter-x:0.25rem}.g-sm-1,.gy-sm-1{--bs-gutter-y:0.25rem}.g-sm-2,.gx-sm-2{--bs-gutter

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.7	49717	104.17.25.14	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:02 UTC	595	OUT	GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://pbs.first-quotes.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://pbs.first-quotes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 13:08:03 UTC	936	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 13:08:02 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"603e8adc-15d9d" Last-Modified: Tue, 02 Mar 2021 18:58:36 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 1024974 Expires: Sun, 21 Sep 2025 13:08:02 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PuqzEcYNNneqhkCCWgA2Fg2cZJEjWX%2ByVaXAHi0FwmeUL1I3g2a9MjalpSKaBIyTHDYsbFWFiPIw0NPFk9lDY%2Fh%2B%2B%2FwkeYYETL7gUpcOBXM1JVnVMDJj%2FJ37Mrp3ZdJ69PcowDGG"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8cbcadde78070c94-EWR
2024-10-01 13:08:03 UTC	433	IN	Data Raw: 37 62 66 36 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f Data Ascii: 7bf6/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Erro
2024-10-01 13:08:03 UTC	1369	IN	Data Raw: 66 6c 61 74 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 66 6c 61 74 2e 63 61 6c 6c 28 65 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 63 6f 6e 63 61 74 2e 61 70 70 6c 79 28 5b 5d 2c 65 29 7d 2c 75 3d 74 2e 70 75 73 68 2c 69 3d 74 2e 69 6e 64 65 78 4f 66 2c 6e 3d 7b 7d 2c 6f 3d 6e 2e 74 6f 53 74 72 69 6e 67 2c 76 3d 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 61 3d 76 2e 74 6f 53 74 72 69 6e 67 2c 6c 3d 61 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 29 2c 79 3d 7b 7d 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 65 2e 6e 6f 64 65 54 79 70 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 Data Ascii: flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"
2024-10-01 13:08:03 UTC	1369	IN	Data Raw: 68 69 73 2e 65 71 28 2d 31 29 7d 2c 65 76 65 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 74 2b 31 29 25 32 7d 29 29 7d 2c 6f 64 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 25 32 7d 29 29 7d 2c 65 71 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 6c 65 6e 67 74 68 2c 6e 3d 2b 65 2b 28 65 3c 30 3f 74 3a 30 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 30 3c 3d 6e 26 26 6e 3c 74 3f 5b 74 68 Data Ascii: his.eq(-1)},even:function(){return this.pushStack(S.grep(this,function(e,t){return(t+1)%2}))},odd:function(){return this.pushStack(S.grep(this,function(e,t){return t%2}))},eq:function(e){var t=this.length,n=+e+(e<0?t:0);return this.pushStack(0<=n&&n<t?[th
2024-10-01 13:08:03 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 65 7d 2c 6d 61 6b 65 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 28 70 28 4f 62 6a 65 63 74 28 65 29 29 3f 53 2e 6d 65 72 67 65 28 6e 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 5b 65 5d 3a 65 29 3a 75 2e 63 61 6c 6c 28 6e 2c 65 29 29 2c 6e 7d 2c 69 6e 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 3f 2d 31 3a 69 2e 63 61 6c 6c 28 74 2c 65 2c 6e 29 7d 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 2b 74 2e 6c 65 6e 67 74 68 2c 72 3d 30 2c 69 3d 65 2e 6c 65 6e 67 74 68 3b 72 3c 6e 3b 72 2b 2b 29 65 5b 69 2b 2b 5d 3d Data Ascii: return e},makeArray:function(e,t){var n=t\|\|[];return null!=e&&(p(Object(e))?S.merge(n,"string"==typeof e?[e]:e):u.call(n,e)),n},inArray:function(e,t,n){return null==t?-1:i.call(t,e,n)},merge:function(e,t){for(var n=+t.length,r=0,i=e.length;r<n;r++)e[i++]=
2024-10-01 13:08:03 UTC	1369	IN	Data Raw: 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 7c 28 22 2b 49 2b 22 29 29 7c 29 22 2b 4d 2b 22 2a 5c 5c 5d 22 2c 46 3d 22 3a 28 22 2b 49 2b 22 29 28 3f 3a 5c 5c 28 28 28 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 29 7c 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 28 29 5b 5c 5c 5d 5d 7c 22 2b 57 2b 22 29 2a 29 7c 2e 2a 29 5c 5c 29 7c 29 22 2c 42 3d 6e 65 77 20 52 65 67 45 78 70 28 4d 2b 22 2b 22 2c 22 67 22 29 2c 24 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2b 7c 28 28 3f 3a 5e 7c 5b 5e 5c 5c 5c 5c 5d 29 28 3f 3a 5c 5c 5c 5c 2e 29 2a 29 22 2b 4d 2b 22 2b 24 22 2c 22 Data Ascii: ^\\\\']))'\|\"((?:\\\\.\|[^\\\\\"]))\"\|("+I+"))\|)"+M+"\\]",F=":("+I+")(?:\$(('((?:\\\\.\|[^\\\\']))'\|\"((?:\\\\.\|[^\\\\\"]))\")\|((?:\\\\.\|[^\\\\()[\\]]\|"+W+"))\|.)\$\|)",B=new RegExp(M+"+","g"),$=new RegExp("^"+M+"+\|((?:^\|[^\\\\])(?:\\\\.))"+M+"+$","
2024-10-01 13:08:03 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 28 29 7b 54 28 29 7d 2c 61 65 3d 62 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 65 2e 64 69 73 61 62 6c 65 64 26 26 22 66 69 65 6c 64 73 65 74 22 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 7b 64 69 72 3a 22 70 61 72 65 6e 74 4e 6f 64 65 22 2c 6e 65 78 74 3a 22 6c 65 67 65 6e 64 22 7d 29 3b 74 72 79 7b 48 2e 61 70 70 6c 79 28 74 3d 4f 2e 63 61 6c 6c 28 70 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 70 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 74 5b 70 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 5d 2e 6e 6f 64 65 54 79 70 65 7d 63 61 74 63 68 28 65 29 7b 48 3d 7b 61 70 70 6c 79 3a 74 2e 6c 65 6e 67 74 68 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 4c 2e 61 70 70 6c Data Ascii: ction(){T()},ae=be(function(e){return!0===e.disabled&&"fieldset"===e.nodeName.toLowerCase()},{dir:"parentNode",next:"legend"});try{H.apply(t=O.call(p.childNodes),p.childNodes),t[p.childNodes.length].nodeType}catch(e){H={apply:t.length?function(e,t){L.appl
2024-10-01 13:08:03 UTC	1369	IN	Data Raw: 74 2c 6e 29 7b 72 65 74 75 72 6e 20 72 2e 70 75 73 68 28 74 2b 22 20 22 29 3e 62 2e 63 61 63 68 65 4c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 65 5b 72 2e 73 68 69 66 74 28 29 5d 2c 65 5b 74 2b 22 20 22 5d 3d 6e 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 65 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 53 5d 3d 21 30 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 76 61 72 20 74 3d 43 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 66 69 65 6c 64 73 65 74 22 29 3b 74 72 79 7b 72 65 74 75 72 6e 21 21 65 28 74 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 66 69 6e 61 6c 6c 79 7b 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 2c 74 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e Data Ascii: t,n){return r.push(t+" ")>b.cacheLength&&delete e[r.shift()],e[t+" "]=n}}function le(e){return e[S]=!0,e}function ce(e){var t=C.createElement("fieldset");try{return!!e(t)}catch(e){return!1}finally{t.parentNode&&t.parentNode.removeChild(t),t=null}}function
2024-10-01 13:08:03 UTC	1369	IN	Data Raw: 7c 65 3a 70 3b 72 65 74 75 72 6e 20 72 21 3d 43 26 26 39 3d 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 26 26 72 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 28 61 3d 28 43 3d 72 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 45 3d 21 69 28 43 29 2c 70 21 3d 43 26 26 28 6e 3d 43 2e 64 65 66 61 75 6c 74 56 69 65 77 29 26 26 6e 2e 74 6f 70 21 3d 3d 6e 26 26 28 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 75 6e 6c 6f 61 64 22 2c 6f 65 2c 21 31 29 3a 6e 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 6e 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 75 6e 6c 6f 61 64 22 2c 6f 65 29 29 2c 64 2e 73 63 6f 70 65 3d 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 61 2e 61 Data Ascii: \|e:p;return r!=C&&9===r.nodeType&&r.documentElement&&(a=(C=r).documentElement,E=!i(C),p!=C&&(n=C.defaultView)&&n.top!==n&&(n.addEventListener?n.addEventListener("unload",oe,!1):n.attachEvent&&n.attachEvent("onunload",oe)),d.scope=ce(function(e){return a.a
2024-10-01 13:08:03 UTC	1369	IN	Data Raw: 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 29 26 26 6e 2e 76 61 6c 75 65 3d 3d 3d 65 29 72 65 74 75 72 6e 5b 6f 5d 7d 72 65 74 75 72 6e 5b 5d 7d 7d 29 2c 62 2e 66 69 6e 64 2e 54 41 47 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 65 29 3a 64 2e 71 73 61 3f 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3a 76 6f 69 64 20 30 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 5b 5d 2c 69 3d 30 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 Data Ascii: ributeNode("id"))&&n.value===e)return[o]}return[]}}),b.find.TAG=d.getElementsByTagName?function(e,t){return"undefined"!=typeof t.getElementsByTagName?t.getElementsByTagName(e):d.qsa?t.querySelectorAll(e):void 0}:function(e,t){var n,r=[],i=0,o=t.getElement
2024-10-01 13:08:03 UTC	1369	IN	Data Raw: 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 76 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 4d 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 32 21 3d 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 65 6e 61 62 6c 65 64 22 29 2e 6c 65 6e 67 74 68 26 26 76 2e 70 75 73 68 28 22 3a 65 6e 61 62 6c 65 64 22 2c 22 3a 64 69 73 61 62 6c 65 64 22 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 64 69 73 61 62 6c 65 64 3d 21 30 2c 32 21 3d 3d 65 2e 71 75 65 72 79 53 65 6c 65 Data Ascii: tribute("type","hidden"),e.appendChild(t).setAttribute("name","D"),e.querySelectorAll("[name=d]").length&&v.push("name"+M+"[^$\|!~]?="),2!==e.querySelectorAll(":enabled").length&&v.push(":enabled",":disabled"),a.appendChild(e).disabled=!0,2!==e.querySele

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.7	49716	104.17.25.14	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:02 UTC	564	OUT	GET /ajax/libs/bootstrap/5.1.3/js/bootstrap.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://pbs.first-quotes.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 13:08:03 UTC	923	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 13:08:02 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"6161dfe3-3fa3" Last-Modified: Sat, 09 Oct 2021 18:30:59 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 18051 Expires: Sun, 21 Sep 2025 13:08:02 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uVXdwsqqpTMdFH5IEjqIZ2NROlfQPFl4ebrDVwuQPxmoiqiEjTQa2FM2T7W5FF5FJ3CfI%2BV0wPTUfZqbkKkODli624vXoXRCLPPVzYOdBAsOR3fPzm335OJ6QdZUCaZO5jnChlDh"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8cbcadde7eba0f87-EWR
2024-10-01 13:08:03 UTC	446	IN	Data Raw: 37 63 30 34 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 35 2e 31 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 31 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c Data Ascii: 7c04/! Bootstrap v5.1.3 (https://getbootstrap.com/) * Copyright 2011-2021 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */!function(t,
2024-10-01 13:08:03 UTC	1369	IN	Data Raw: 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 7c 7c 73 65 6c 66 29 2e 62 6f 6f 74 73 74 72 61 70 3d 65 28 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 69 66 28 74 26 26 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 29 72 65 74 75 72 6e 20 74 3b 63 6f 6e 73 74 20 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 3b 69 66 28 74 29 66 6f 72 28 63 6f 6e 73 74 20 69 20 69 6e 20 74 29 69 66 28 22 64 65 66 61 75 6c 74 22 21 3d 3d 69 29 7b 63 6f 6e 73 74 20 73 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 74 2c 69 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f Data Ascii: lobalThis?globalThis:t\|\|self).bootstrap=e(t.Popper)}(this,(function(t){"use strict";function e(t){if(t&&t.__esModule)return t;const e=Object.create(null);if(t)for(const i in t)if("default"!==i){const s=Object.getOwnPropertyDescriptor(t,i);Object.definePro
2024-10-01 13:08:03 UTC	1369	IN	Data Raw: 70 65 21 3d 3d 4e 6f 64 65 2e 45 4c 45 4d 45 4e 54 5f 4e 4f 44 45 7c 7c 21 21 74 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 28 76 6f 69 64 20 30 21 3d 3d 74 2e 64 69 73 61 62 6c 65 64 3f 74 2e 64 69 73 61 62 6c 65 64 3a 74 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 26 26 22 66 61 6c 73 65 22 21 3d 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 29 2c 67 3d 74 3d 3e 7b 69 66 28 21 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 61 74 74 61 63 68 53 68 61 64 6f 77 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 52 6f 6f 74 4e 6f 64 65 29 7b Data Ascii: pe!==Node.ELEMENT_NODE\|\|!!t.classList.contains("disabled")\|\|(void 0!==t.disabled?t.disabled:t.hasAttribute("disabled")&&"false"!==t.getAttribute("disabled")),g=t=>{if(!document.documentElement.attachShadow)return null;if("function"==typeof t.getRootNode){
2024-10-01 13:08:03 UTC	1369	IN	Data Raw: 72 6e 20 74 5b 21 69 26 26 73 3f 74 2e 6c 65 6e 67 74 68 2d 31 3a 30 5d 3b 63 6f 6e 73 74 20 6f 3d 74 2e 6c 65 6e 67 74 68 3b 72 65 74 75 72 6e 20 6e 2b 3d 69 3f 31 3a 2d 31 2c 73 26 26 28 6e 3d 28 6e 2b 6f 29 25 6f 29 2c 74 5b 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 6e 2c 6f 2d 31 29 29 5d 7d 2c 41 3d 2f 5b 5e 2e 5d 2a 28 3f 3d 5c 2e 2e 2a 29 5c 2e 7c 2e 2a 2f 2c 54 3d 2f 5c 2e 2e 2a 2f 2c 43 3d 2f 3a 3a 5c 64 2b 24 2f 2c 6b 3d 7b 7d 3b 6c 65 74 20 4c 3d 31 3b 63 6f 6e 73 74 20 53 3d 7b 6d 6f 75 73 65 65 6e 74 65 72 3a 22 6d 6f 75 73 65 6f 76 65 72 22 2c 6d 6f 75 73 65 6c 65 61 76 65 3a 22 6d 6f 75 73 65 6f 75 74 22 7d 2c 4f 3d 2f 5e 28 6d 6f 75 73 65 65 6e 74 65 72 7c 6d 6f 75 73 65 6c 65 61 76 65 29 2f 69 2c 4e 3d 6e 65 77 20 53 65 Data Ascii: rn t[!i&&s?t.length-1:0];const o=t.length;return n+=i?1:-1,s&&(n=(n+o)%o),t[Math.max(0,Math.min(n,o-1))]},A=/[^.](?=\..)\.\|./,T=/\../,C=/::\d+$/,k={};let L=1;const S={mouseenter:"mouseover",mouseleave:"mouseout"},O=/^(mouseenter\|mouseleave)/i,N=new Se
2024-10-01 13:08:03 UTC	1369	IN	Data Raw: 63 6f 6e 74 61 69 6e 73 28 65 2e 72 65 6c 61 74 65 64 54 61 72 67 65 74 29 29 72 65 74 75 72 6e 20 74 2e 63 61 6c 6c 28 74 68 69 73 2c 65 29 7d 3b 73 3f 73 3d 74 28 73 29 3a 69 3d 74 28 69 29 7d 63 6f 6e 73 74 5b 6f 2c 72 2c 61 5d 3d 78 28 65 2c 69 2c 73 29 2c 6c 3d 49 28 74 29 2c 63 3d 6c 5b 61 5d 7c 7c 28 6c 5b 61 5d 3d 7b 7d 29 2c 68 3d 50 28 63 2c 72 2c 6f 3f 69 3a 6e 75 6c 6c 29 3b 69 66 28 68 29 72 65 74 75 72 6e 20 76 6f 69 64 28 68 2e 6f 6e 65 4f 66 66 3d 68 2e 6f 6e 65 4f 66 66 26 26 6e 29 3b 63 6f 6e 73 74 20 64 3d 44 28 72 2c 65 2e 72 65 70 6c 61 63 65 28 41 2c 22 22 29 29 2c 75 3d 6f 3f 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 73 28 6e 29 7b 63 6f 6e 73 74 20 6f 3d 74 2e 71 75 65 72 79 53 Data Ascii: contains(e.relatedTarget))return t.call(this,e)};s?s=t(s):i=t(i)}const[o,r,a]=x(e,i,s),l=I(t),c=l[a]\|\|(l[a]={}),h=P(c,r,o?i:null);if(h)return void(h.oneOff=h.oneOff&&n);const d=D(r,e.replace(A,"")),u=o?function(t,e,i){return function s(n){const o=t.queryS
2024-10-01 13:08:03 UTC	1369	IN	Data Raw: 67 69 6e 61 6c 48 61 6e 64 6c 65 72 2c 65 2e 64 65 6c 65 67 61 74 69 6f 6e 53 65 6c 65 63 74 6f 72 29 7d 7d 29 29 7d 2c 74 72 69 67 67 65 72 28 74 2c 65 2c 69 29 7b 69 66 28 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 7c 7c 21 74 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 63 6f 6e 73 74 20 73 3d 70 28 29 2c 6e 3d 48 28 65 29 2c 6f 3d 65 21 3d 3d 6e 2c 72 3d 4e 2e 68 61 73 28 6e 29 3b 6c 65 74 20 61 2c 6c 3d 21 30 2c 63 3d 21 30 2c 68 3d 21 31 2c 64 3d 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 6f 26 26 73 26 26 28 61 3d 73 2e 45 76 65 6e 74 28 65 2c 69 29 2c 73 28 74 29 2e 74 72 69 67 67 65 72 28 61 29 2c 6c 3d 21 61 2e 69 73 50 72 6f 70 61 67 61 74 69 6f 6e 53 74 6f 70 70 65 64 28 29 2c 63 3d 21 61 2e 69 73 49 6d 6d 65 64 69 61 74 65 50 72 6f 70 61 67 61 Data Ascii: ginalHandler,e.delegationSelector)}}))},trigger(t,e,i){if("string"!=typeof e\|\|!t)return null;const s=p(),n=H(e),o=e!==n,r=N.has(n);let a,l=!0,c=!0,h=!1,d=null;return o&&s&&(a=s.Event(e,i),s(t).trigger(a),l=!a.isPropagationStopped(),c=!a.isImmediatePropaga
2024-10-01 13:08:03 UTC	1369	IN	Data Raw: 68 69 73 28 74 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 3a 6e 75 6c 6c 29 7d 73 74 61 74 69 63 20 67 65 74 20 56 45 52 53 49 4f 4e 28 29 7b 72 65 74 75 72 6e 22 35 2e 31 2e 33 22 7d 73 74 61 74 69 63 20 67 65 74 20 4e 41 4d 45 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 27 59 6f 75 20 68 61 76 65 20 74 6f 20 69 6d 70 6c 65 6d 65 6e 74 20 74 68 65 20 73 74 61 74 69 63 20 6d 65 74 68 6f 64 20 22 4e 41 4d 45 22 2c 20 66 6f 72 20 65 61 63 68 20 63 6f 6d 70 6f 6e 65 6e 74 21 27 29 7d 73 74 61 74 69 63 20 67 65 74 20 44 41 54 41 5f 4b 45 59 28 29 7b 72 65 74 75 72 6e 60 62 73 2e 24 7b 74 68 69 73 2e 4e 41 4d 45 7d 60 7d 73 74 61 74 69 63 20 67 65 74 20 45 56 45 4e 54 5f 4b 45 59 28 29 7b 72 65 74 75 72 6e 60 2e 24 7b 74 68 69 Data Ascii: his(t,"object"==typeof e?e:null)}static get VERSION(){return"5.1.3"}static get NAME(){throw new Error('You have to implement the static method "NAME", for each component!')}static get DATA_KEY(){return`bs.${this.NAME}`}static get EVENT_KEY(){return`.${thi
2024-10-01 13:08:03 UTC	1369	IN	Data Raw: 66 61 63 65 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 65 3d 55 2e 67 65 74 4f 72 43 72 65 61 74 65 49 6e 73 74 61 6e 63 65 28 74 68 69 73 29 3b 22 74 6f 67 67 6c 65 22 3d 3d 3d 74 26 26 65 5b 74 5d 28 29 7d 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 74 29 7b 72 65 74 75 72 6e 22 74 72 75 65 22 3d 3d 3d 74 7c 7c 22 66 61 6c 73 65 22 21 3d 3d 74 26 26 28 74 3d 3d 3d 4e 75 6d 62 65 72 28 74 29 2e 74 6f 53 74 72 69 6e 67 28 29 3f 4e 75 6d 62 65 72 28 74 29 3a 22 22 3d 3d 3d 74 7c 7c 22 6e 75 6c 6c 22 3d 3d 3d 74 3f 6e 75 6c 6c 3a 74 29 7d 66 75 6e 63 74 69 6f 6e 20 56 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 72 65 70 6c 61 63 65 28 2f 5b 41 2d 5a 5d 2f 67 2c 28 74 3d 3e 60 2d 24 7b 74 Data Ascii: face(t){return this.each((function(){const e=U.getOrCreateInstance(this);"toggle"===t&&e[t]()}))}}function K(t){return"true"===t\|\|"false"!==t&&(t===Number(t).toString()?Number(t):""===t\|\|"null"===t?null:t)}function V(t){return t.replace(/[A-Z]/g,(t=>`-${t
2024-10-01 13:08:03 UTC	1369	IN	Data Raw: 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 69 7d 2c 70 72 65 76 28 74 2c 65 29 7b 6c 65 74 20 69 3d 74 2e 70 72 65 76 69 6f 75 73 45 6c 65 6d 65 6e 74 53 69 62 6c 69 6e 67 3b 66 6f 72 28 3b 69 3b 29 7b 69 66 28 69 2e 6d 61 74 63 68 65 73 28 65 29 29 72 65 74 75 72 6e 5b 69 5d 3b 69 3d 69 2e 70 72 65 76 69 6f 75 73 45 6c 65 6d 65 6e 74 53 69 62 6c 69 6e 67 7d 72 65 74 75 72 6e 5b 5d 7d 2c 6e 65 78 74 28 74 2c 65 29 7b 6c 65 74 20 69 3d 74 2e 6e 65 78 74 45 6c 65 6d 65 6e 74 53 69 62 6c 69 6e 67 3b 66 6f 72 28 3b 69 3b 29 7b 69 66 28 69 2e 6d 61 74 63 68 65 73 28 65 29 29 72 65 74 75 72 6e 5b 69 5d 3b 69 3d 69 2e 6e 65 78 74 45 6c 65 6d 65 6e 74 53 69 62 6c 69 6e 67 7d 72 65 74 75 72 6e 5b 5d 7d 2c 66 6f 63 75 73 61 62 6c 65 43 68 69 6c 64 72 65 6e 28 Data Ascii: rentNode;return i},prev(t,e){let i=t.previousElementSibling;for(;i;){if(i.matches(e))return[i];i=i.previousElementSibling}return[]},next(t,e){let i=t.nextElementSibling;for(;i;){if(i.matches(e))return[i];i=i.nextElementSibling}return[]},focusableChildren(
2024-10-01 13:08:03 UTC	1369	IN	Data Raw: 62 6c 65 28 29 7b 21 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 26 26 64 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 26 26 74 68 69 73 2e 6e 65 78 74 28 29 7d 70 72 65 76 28 29 7b 74 68 69 73 2e 5f 73 6c 69 64 65 28 74 74 29 7d 70 61 75 73 65 28 74 29 7b 74 7c 7c 28 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 3d 21 30 29 2c 59 2e 66 69 6e 64 4f 6e 65 28 22 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6e 65 78 74 2c 20 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 70 72 65 76 22 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 26 26 28 61 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2c 74 68 69 73 2e 63 79 63 6c 65 28 21 30 29 29 2c 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 29 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 Data Ascii: ble(){!document.hidden&&d(this._element)&&this.next()}prev(){this._slide(tt)}pause(t){t\|\|(this._isPaused=!0),Y.findOne(".carousel-item-next, .carousel-item-prev",this._element)&&(a(this._element),this.cycle(!0)),clearInterval(this._interval),this._interva

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.7	49723	161.199.76.39	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:03 UTC	867	OUT	GET /WebResource.axd?d=360wl-vvFvG9u7MHYpZnn88VVBcg-v0fizLjSuxbKS8PLQrfQzo3pawTgvQR_1z-nTNIe9XSjTdz-M8r17k0XKyAYVWSn4SZL7x0w4ghBGU1dnCq-0L9Zn1WrMu_3PMufrARYQnx2CI1&t=638617536140000000 HTTP/1.1 Host: pbs.first-quotes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pbs.first-quotes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ADRUM_BTa=R:0\|g:f79059ed-1889-46c1-af20-a8fb732c2dcb\|n:wintrust_15dcf551-a2c3-4a26-88f2-fdaa934ee7ae; SameSite=None; ADRUM_BT1=R:0\|i:2648624; backIndex=0
2024-10-01 13:08:03 UTC	765	IN	HTTP/1.1 200 OK Cache-Control: public Content-Type: application/x-javascript Expires: Wed, 01 Oct 2025 08:01:31 GMT Last-Modified: Thu, 12 Sep 2024 21:00:14 GMT X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Content-Security-Policy: default-src 'self'; connect-src ; font-src data:; frame-src ; img-src data:; media-src ; object-src ; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; Referrer-Policy: strict-origin Expect-CT: max-age=86400 X-Content-Type-Options: nosniff Permissions-Policy: camera=(), microphone=() Strict-Transport-Security: max-age=15768000; includeSubDomains; preload SERVER: Date: Tue, 01 Oct 2024 13:08:02 GMT Content-Length: 1742 Strict-Transport-Security: max-age=4294967294
2024-10-01 13:08:03 UTC	1742	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 41 63 74 69 76 61 74 65 55 6e 6c 6f 61 64 42 6c 6f 63 6b 65 72 28 65 29 7b 69 66 28 75 6e 6c 6f 61 64 42 6c 6f 63 6b 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 21 3d 6e 75 6c 6c 26 26 64 69 73 61 62 6c 65 55 6e 6c 6f 61 64 42 6c 6f 63 6b 65 72 46 6f 72 4e 65 78 74 55 6e 6c 6f 61 64 3d 3d 66 61 6c 73 65 29 7b 75 6e 6c 6f 61 64 42 6c 6f 63 6b 65 72 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 62 6c 6f 63 6b 22 3b 75 6e 6c 6f 61 64 42 6c 6f 63 6b 65 72 2e 66 6f 63 75 73 28 29 3b 7d 64 69 73 61 62 6c 65 55 6e 6c 6f 61 64 42 6c 6f 63 6b 65 72 46 6f 72 4e 65 78 74 55 6e 6c 6f 61 64 3d 66 61 6c 73 65 3b 7d 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 73 74 79 6c 65 2e 63 75 72 73 6f 72 3d 27 61 75 74 6f 27 3b 66 75 6e 63 74 69 6f 6e 20 53 Data Ascii: function ActivateUnloadBlocker(e){if(unloadBlocker.parentNode!=null&&disableUnloadBlockerForNextUnload==false){unloadBlocker.style.display="block";unloadBlocker.focus();}disableUnloadBlockerForNextUnload=false;}document.body.style.cursor='auto';function S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.7	49726	161.199.76.39	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:03 UTC	888	OUT	GET /WebResource.axd?d=4Doe9-T2x8bzL-X_T_9dOCpxMQsSu2AA8S6eSXTsiANjo_FH87PF5zy8wAdzn2Fk_NBiGdKnwOa64Nzcikoe5Eqb49Xx-M_vMZ8yREHoXbL2CpSCp8gmBE2hfM95agPiV3JPN6xtwE0yvhTFDZ8zHWquXrSMdJfW0&t=638617536140000000 HTTP/1.1 Host: pbs.first-quotes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pbs.first-quotes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ADRUM_BTa=R:0\|g:f79059ed-1889-46c1-af20-a8fb732c2dcb\|n:wintrust_15dcf551-a2c3-4a26-88f2-fdaa934ee7ae; SameSite=None; ADRUM_BT1=R:0\|i:2648624; backIndex=0
2024-10-01 13:08:03 UTC	766	IN	HTTP/1.1 200 OK Cache-Control: public Content-Type: application/x-javascript Expires: Wed, 01 Oct 2025 08:01:31 GMT Last-Modified: Thu, 12 Sep 2024 21:00:14 GMT X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Content-Security-Policy: default-src 'self'; connect-src ; font-src data:; frame-src ; img-src data:; media-src ; object-src ; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; Referrer-Policy: strict-origin Expect-CT: max-age=86400 X-Content-Type-Options: nosniff Permissions-Policy: camera=(), microphone=() Strict-Transport-Security: max-age=15768000; includeSubDomains; preload SERVER: Date: Tue, 01 Oct 2024 13:08:02 GMT Content-Length: 37157 Strict-Transport-Security: max-age=4294967294
2024-10-01 13:08:03 UTC	7185	IN	Data Raw: 0d 0a 2f 2f 20 49 6e 69 74 69 61 6c 69 7a 65 73 20 66 6f 72 6d 61 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 0d 0a 2f 2f 20 4e 65 65 64 73 20 74 6f 20 62 65 20 63 61 6c 6c 65 64 20 62 65 66 6f 72 65 20 61 6e 79 20 6f 74 68 65 72 20 66 75 6e 63 74 69 6f 6e 2e 0d 0a 66 75 6e 63 74 69 6f 6e 20 49 31 57 65 62 47 6c 6f 62 61 6c 69 7a 61 74 69 6f 6e 5f 49 6e 69 74 28 0d 0a 09 2f 2f 20 43 75 72 72 65 6e 63 79 0d 0a 09 5f 63 75 72 72 65 6e 63 79 44 65 63 69 6d 61 6c 44 69 67 69 74 73 2c 20 0d 0a 09 5f 63 75 72 72 65 6e 63 79 44 65 63 69 6d 61 6c 53 65 70 61 72 61 74 6f 72 2c 20 0d 0a 09 5f 63 75 72 72 65 6e 63 79 47 72 6f 75 70 53 65 70 61 72 61 74 6f 72 2c 0d 0a 09 5f 63 75 72 72 65 6e 63 79 47 72 6f 75 70 53 69 7a 65 73 2c 0d 0a 09 5f 63 75 72 72 65 6e 63 79 4e Data Ascii: // Initializes format information.// Needs to be called before any other function.function I1WebGlobalization_Init(// Currency_currencyDecimalDigits, _currencyDecimalSeparator, _currencyGroupSeparator,_currencyGroupSizes,_currencyN
2024-10-01 13:08:03 UTC	7951	IN	Data Raw: 4e 75 6d 20 3d 20 4d 61 74 68 2e 61 62 73 28 6e 75 6d 29 3b 0d 0a 09 0d 0a 09 76 61 72 20 64 65 63 69 6d 61 6c 4c 65 66 74 20 3d 20 4d 61 74 68 2e 66 6c 6f 6f 72 28 61 62 73 4e 75 6d 29 3b 0d 0a 09 76 61 72 20 64 65 63 69 6d 61 6c 52 69 67 68 74 3b 0d 0a 0d 0a 09 69 66 20 28 70 72 65 76 65 6e 74 52 6f 75 6e 64 69 6e 67 20 3d 3d 20 74 72 75 65 20 7c 7c 20 28 66 6f 72 6d 61 74 43 68 61 72 20 3d 3d 20 27 67 27 20 26 26 20 65 78 70 6c 69 63 69 74 44 65 63 69 6d 61 6c 44 69 67 69 74 73 20 3d 3d 20 66 61 6c 73 65 29 29 0d 0a 09 7b 0d 0a 09 09 2f 2f 20 46 6f 72 20 67 65 6e 65 72 61 6c 20 66 6f 72 6d 61 74 2c 20 75 6e 6c 65 73 73 20 74 68 65 20 64 65 63 69 6d 61 6c 20 64 69 67 69 74 73 20 61 72 65 20 65 78 70 6c 69 63 69 74 6c 79 0d 0a 09 09 2f 2f 20 73 70 65 63 Data Ascii: Num = Math.abs(num);var decimalLeft = Math.floor(absNum);var decimalRight;if (preventRounding == true \|\| (formatChar == 'g' && explicitDecimalDigits == false)){// For general format, unless the decimal digits are explicitly// spec
2024-10-01 13:08:03 UTC	7951	IN	Data Raw: 6f 2e 73 68 6f 72 74 44 61 74 65 50 61 74 74 65 72 6e 20 2b 20 27 20 27 20 2b 20 49 31 57 65 62 47 6c 6f 62 61 6c 69 7a 61 74 69 6f 6e 5f 46 6f 72 6d 61 74 49 6e 66 6f 2e 73 68 6f 72 74 54 69 6d 65 50 61 74 74 65 72 6e 3b 0d 0a 09 09 09 62 72 65 61 6b 3b 0d 0a 09 09 63 61 73 65 20 27 47 27 3a 0d 0a 09 09 09 61 63 74 75 61 6c 46 6f 72 6d 61 74 20 3d 20 49 31 57 65 62 47 6c 6f 62 61 6c 69 7a 61 74 69 6f 6e 5f 46 6f 72 6d 61 74 49 6e 66 6f 2e 73 68 6f 72 74 44 61 74 65 50 61 74 74 65 72 6e 20 2b 20 27 20 27 20 2b 20 49 31 57 65 62 47 6c 6f 62 61 6c 69 7a 61 74 69 6f 6e 5f 46 6f 72 6d 61 74 49 6e 66 6f 2e 6c 6f 6e 67 54 69 6d 65 50 61 74 74 65 72 6e 3b 0d 0a 09 09 09 62 72 65 61 6b 3b 0d 0a 09 09 63 61 73 65 20 27 6d 27 3a 0d 0a 09 09 09 61 63 74 75 61 6c 46 Data Ascii: o.shortDatePattern + ' ' + I1WebGlobalization_FormatInfo.shortTimePattern;break;case 'G':actualFormat = I1WebGlobalization_FormatInfo.shortDatePattern + ' ' + I1WebGlobalization_FormatInfo.longTimePattern;break;case 'm':actualF
2024-10-01 13:08:03 UTC	7951	IN	Data Raw: 2f 20 41 4d 2f 50 4d 0d 0a 09 6f 75 74 70 75 74 20 3d 20 49 31 57 65 62 47 6c 6f 62 61 6c 69 7a 61 74 69 6f 6e 5f 52 65 70 6c 61 63 65 49 6e 44 61 74 65 54 69 6d 65 46 6f 72 6d 61 74 28 6f 75 74 70 75 74 2c 20 2f 5c 62 25 3f 74 5c 62 2f 67 2c 20 61 6d 70 6d 2e 73 75 62 73 74 72 28 30 2c 20 31 29 29 5b 30 5d 3b 09 0d 0a 09 6f 75 74 70 75 74 20 3d 20 49 31 57 65 62 47 6c 6f 62 61 6c 69 7a 61 74 69 6f 6e 5f 52 65 70 6c 61 63 65 49 6e 44 61 74 65 54 69 6d 65 46 6f 72 6d 61 74 28 6f 75 74 70 75 74 2c 20 2f 5c 62 74 74 5c 62 2f 67 2c 20 61 6d 70 6d 29 5b 30 5d 3b 0d 0a 09 0d 0a 09 2f 2f 20 7a 7a 20 61 6e 64 20 7a 7a 7a 7a 20 69 67 6e 6f 72 65 64 2e 0d 0a 09 0d 0a 09 2f 2f 20 53 74 72 69 70 20 6f 75 74 20 74 68 65 20 71 75 6f 74 65 73 20 77 68 69 63 68 20 65 6e Data Ascii: / AM/PMoutput = I1WebGlobalization_ReplaceInDateTimeFormat(output, /\b%?t\b/g, ampm.substr(0, 1))[0];output = I1WebGlobalization_ReplaceInDateTimeFormat(output, /\btt\b/g, ampm)[0];// zz and zzzz ignored.// Strip out the quotes which en
2024-10-01 13:08:03 UTC	6119	IN	Data Raw: 62 47 6c 6f 62 61 6c 69 7a 61 74 69 6f 6e 5f 46 6f 72 6d 61 74 49 6e 66 6f 2e 73 68 6f 72 74 65 73 74 44 61 79 49 6e 76 61 72 69 61 6e 74 4e 61 6d 65 73 29 3b 0d 0a 09 09 09 7d 0d 0a 09 09 09 65 6c 73 65 20 69 66 20 28 2f 5e 25 3f 4d 7b 31 2c 32 7d 24 2f 2e 74 65 73 74 28 6d 61 74 63 68 29 20 3d 3d 20 74 72 75 65 29 0d 0a 09 09 09 7b 0d 0a 09 09 09 09 76 61 6c 75 65 54 79 70 65 20 3d 20 27 6d 6f 6e 74 68 27 3b 0d 0a 09 09 09 09 72 78 43 6f 6d 70 6f 6e 65 6e 74 20 3d 20 27 28 5c 5c 64 7b 31 2c 32 7d 29 27 3b 0d 0a 09 09 09 7d 0d 0a 09 09 09 65 6c 73 65 20 69 66 20 28 2f 5e 4d 4d 4d 4d 3f 24 2f 2e 74 65 73 74 28 6d 61 74 63 68 29 20 3d 3d 20 74 72 75 65 29 0d 0a 09 09 09 7b 0d 0a 09 09 09 09 76 61 6c 75 65 54 79 70 65 20 3d 20 27 6d 6f 6e 74 68 4e 61 6d 65 Data Ascii: bGlobalization_FormatInfo.shortestDayInvariantNames);}else if (/^%?M{1,2}$/.test(match) == true){valueType = 'month';rxComponent = '(\\d{1,2})';}else if (/^MMMM?$/.test(match) == true){valueType = 'monthName

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.7	49724	161.199.76.39	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:03 UTC	961	OUT	GET /tempretriever.i1handler?LiteralName=FVKEq3IPMve6KUPUNwOkao3OhAhMyWAwlMEWZAiiZN8ifpXQ0n0pPMJbFd1qGTfECpM%3d&inline=1&ClientFileName=%22logo_thumb.jpg%22&mimeType=image%2fjpeg&SS=311f675f-5024-436a-aed7-33cd36104033 HTTP/1.1 Host: pbs.first-quotes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pbs.first-quotes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ADRUM_BTa=R:0\|g:f79059ed-1889-46c1-af20-a8fb732c2dcb\|n:wintrust_15dcf551-a2c3-4a26-88f2-fdaa934ee7ae; SameSite=None; ADRUM_BT1=R:0\|i:2648624; backIndex=0
2024-10-01 13:08:03 UTC	1238	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: image/jpeg Set-Cookie: ASP.NET_SessionID=c2zlbe3nobgv0bcbu0kqooh5; path=/; secure; HttpOnly; SameSite=None content-disposition: inline;filename="logo_thumb.jpg" Set-Cookie: ADRUM_BTa=R:29\|g:e235bdc3-ecb1-452d-a3b9-ea5a457addeb\|n:wintrust_15dcf551-a2c3-4a26-88f2-fdaa934ee7ae; expires=Tue, 01-Oct-2024 13:08:32 GMT; path=/; secure; HttpOnly; SameSite=None Set-Cookie: ADRUM_BT1=R:0\|i:2648624; expires=Thu, 01-Jan-1970 06:00:00 GMT; path=/; secure; HttpOnly; SameSite=None Set-Cookie: SameSite=None; expires=Tue, 01-Oct-2024 13:08:32 GMT; path=/; secure; HttpOnly; SameSite=None X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Content-Security-Policy: default-src 'self'; connect-src ; font-src data:; frame-src ; img-src data:; media-src ; object-src ; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; Referrer-Policy: strict-origin Expect-CT: max-age=86400 X-Content-Type-Options: nosniff Permissions-Policy: camera=(), microphone=() Strict-Transport-Security: max-age=15768000; includeSubDomains; preload SERVER: Date: Tue, 01 Oct 2024 13:08:02 GMT Content-Length: 13356 Strict-Transport-Security: max-age=4294967294
2024-10-01 13:08:03 UTC	6713	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f1 00 00 00 3b 08 06 00 00 00 aa b8 6c db 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 33 c1 49 44 41 54 78 5e ed 7d 07 58 95 47 ba bf d9 bd bb 77 ef bd 9b 9b 64 93 6c 62 8a 31 6a 4c d4 d8 b1 f7 2e a0 14 bb a2 82 88 82 a0 a0 20 02 d2 3b 1c 7a 6f 87 72 0e bd f7 de 3b 48 39 74 a4 a9 48 51 30 1a 43 76 53 d6 98 f9 bf ef f8 9d b3 1c ce a1 98 b2 9b fb fc cf ef 79 e6 39 e7 9b 99 6f be f9 66 e6 37 ef fb ce 37 65 16 a2 bc a2 8a 64 64 66 93 db b7 6f 93 a1 a1 a1 17 6e 90 71 e3 fe 0f 0e 0e c2 ef 20 19 1c 18 20 e5 15 95 24 21 21 e1 13 9a c0 ff e7 48 49 c9 58 97 9a 96 41 92 53 d2 c8 f0 f0 b0 a0 dc 5a 5a Data Ascii: PNGIHDR;lsRGBgAMAapHYsod3IDATx^}XGwdlb1jL. ;zor;H9tHQ0CvSy9of77eddfonq $!!HIXASZZ
2024-10-01 13:08:03 UTC	6643	IN	Data Raw: 7f e6 f4 99 bf a3 6d bf 6e cd 5a 72 e3 86 01 48 e6 60 c2 09 0b a3 65 af a4 74 9a 76 88 d8 fe dd dc dc 07 f1 be a7 4f 9f ae 05 53 f0 8b e3 50 9e c8 2b cc 1b e6 1f db f1 d2 c5 9f 13 19 28 83 fd fb a4 a9 03 f2 92 79 d0 99 2d 5a f0 09 39 a7 a2 3a 42 1f 3c 1d 62 62 63 59 95 95 95 ac da ea 6a ea 40 55 a5 ae bc bc 9c c5 e5 46 b0 1a 1a 9b a6 9c a8 de 3f 34 b4 27 31 3e 51 e8 5e fe fd a9 a9 e9 f4 de 8e 8e 8e 0d f0 f2 42 e1 e8 4a 4a 4a 58 b5 75 75 93 a6 5f 55 53 63 0d 8d 87 75 e9 d2 15 96 03 fc 7e f1 c5 17 eb 3b 3b 3b e5 30 5f 50 71 ac ed db 77 b2 b6 6e dd ce 52 39 77 9e 15 1b 1b cf aa ad ad 15 5e d5 31 01 70 ef c6 e4 e4 54 56 b5 98 f7 45 ff fa c6 26 47 26 ea 8c e1 ee 1e 30 27 22 22 8a 96 e1 f8 77 ab ad ae 65 95 95 94 b1 62 62 62 05 ef 07 6a a2 56 75 f9 8b 78 fc 67 Data Ascii: mnZrH`etvOSP+(y-Z9:B<bbcYj@UF?4'1>Q^BJJJXuu_UScu~;;;0_PqwnR9w^1pTVE&G&0'""webbbjVuxg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.7	49722	161.199.76.39	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:03 UTC	971	OUT	GET /tempretriever.i1handler?LiteralName=kLiqw5I4FCTaTQ7AvuoflBzCap%2bM4PSrTrpOWRrWjtD6pMGH_agwxSZSxobh0jivo8o%3d&inline=1&ClientFileName=%22logo_primary_thumb.jpg%22&mimeType=image%2fjpeg&SS=311f675f-5024-436a-aed7-33cd36104033 HTTP/1.1 Host: pbs.first-quotes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pbs.first-quotes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ADRUM_BTa=R:0\|g:f79059ed-1889-46c1-af20-a8fb732c2dcb\|n:wintrust_15dcf551-a2c3-4a26-88f2-fdaa934ee7ae; SameSite=None; ADRUM_BT1=R:0\|i:2648624; backIndex=0
2024-10-01 13:08:03 UTC	1245	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: image/jpeg Set-Cookie: ASP.NET_SessionID=h5vhd5bluxictjauiu32xgvg; path=/; secure; HttpOnly; SameSite=None content-disposition: inline;filename="logo_primary_thumb.jpg" Set-Cookie: ADRUM_BTa=R:29\|g:3cbebfb6-5df1-4f62-bf0c-6746dc2c2541\|n:wintrust_15dcf551-a2c3-4a26-88f2-fdaa934ee7ae; expires=Tue, 01-Oct-2024 13:08:32 GMT; path=/; secure; HttpOnly; SameSite=None Set-Cookie: ADRUM_BT1=R:0\|i:2648624; expires=Thu, 01-Jan-1970 06:00:00 GMT; path=/; secure; HttpOnly; SameSite=None Set-Cookie: SameSite=None; expires=Tue, 01-Oct-2024 13:08:32 GMT; path=/; secure; HttpOnly; SameSite=None X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Content-Security-Policy: default-src 'self'; connect-src ; font-src data:; frame-src ; img-src data:; media-src ; object-src ; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; Referrer-Policy: strict-origin Expect-CT: max-age=86400 X-Content-Type-Options: nosniff Permissions-Policy: camera=(), microphone=() Strict-Transport-Security: max-age=15768000; includeSubDomains; preload SERVER: Date: Tue, 01 Oct 2024 13:08:02 GMT Content-Length: 6718 Strict-Transport-Security: max-age=4294967294
2024-10-01 13:08:03 UTC	6706	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 92 00 00 00 2b 08 06 00 00 00 52 30 0e f3 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 19 d3 49 44 41 54 78 5e ed 5d 0b 94 1c 55 99 9e 49 64 5d 5d 35 3c 92 ae ee 49 c8 00 ce 74 55 77 08 8f 8d 82 88 6b 58 84 05 56 24 92 74 df ea 49 78 08 22 b2 10 40 54 04 56 97 41 05 76 61 75 05 57 97 15 22 bb 67 77 41 50 11 b2 c4 f0 70 d1 a3 86 57 78 c9 5b 79 05 92 10 1e e1 19 09 cf 30 ee f7 df fe bb fa 56 f5 ad ae 5b dd 35 73 86 c9 fd ce f9 4e cf 54 fd f7 bf b7 6e dd 7b ff fb fc ab c7 62 f3 44 de ad 54 f2 ae b8 c5 d2 d2 d2 b2 5b 72 b3 62 b1 b9 c1 f1 aa c7 e5 3d ff 4f 96 96 96 96 dd 92 9b 15 8b cd 0d d6 90 Data Ascii: PNGIHDR+R0sRGBgAMAapHYsodIDATx^]UId]]5<ItUwkXV$tIx"@TVAvauW"gwAPpWx[y0V[5sNTn{bDT[rb=O
2024-10-01 13:08:03 UTC	12	IN	Data Raw: 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.7	49725	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:03 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-01 13:08:03 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=185867 Date: Tue, 01 Oct 2024 13:08:03 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.7	49732	104.17.24.14	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:03 UTC	380	OUT	GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 13:08:03 UTC	936	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 13:08:03 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"603e8adc-15d9d" Last-Modified: Tue, 02 Mar 2021 18:58:36 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 1024975 Expires: Sun, 21 Sep 2025 13:08:03 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1UXjElhxF6ZEF%2FRacQlfwhJ%2BFquXqxqUR7RoMFTfe8rejGnFTcdJXOMP%2Bxj2OTNF4YArcYw%2F2Rb%2BtMbSvbn2gYOGQ8Wo8k93sKKiFeeDKprehyAsuPeE%2FKhcJKL0N2SkilBehVzD"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8cbcade398e41a1f-EWR
2024-10-01 13:08:03 UTC	433	IN	Data Raw: 37 62 66 36 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f Data Ascii: 7bf6/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Erro
2024-10-01 13:08:03 UTC	1369	IN	Data Raw: 66 6c 61 74 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 66 6c 61 74 2e 63 61 6c 6c 28 65 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 63 6f 6e 63 61 74 2e 61 70 70 6c 79 28 5b 5d 2c 65 29 7d 2c 75 3d 74 2e 70 75 73 68 2c 69 3d 74 2e 69 6e 64 65 78 4f 66 2c 6e 3d 7b 7d 2c 6f 3d 6e 2e 74 6f 53 74 72 69 6e 67 2c 76 3d 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 61 3d 76 2e 74 6f 53 74 72 69 6e 67 2c 6c 3d 61 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 29 2c 79 3d 7b 7d 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 65 2e 6e 6f 64 65 54 79 70 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 Data Ascii: flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"
2024-10-01 13:08:03 UTC	1369	IN	Data Raw: 68 69 73 2e 65 71 28 2d 31 29 7d 2c 65 76 65 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 74 2b 31 29 25 32 7d 29 29 7d 2c 6f 64 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 25 32 7d 29 29 7d 2c 65 71 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 6c 65 6e 67 74 68 2c 6e 3d 2b 65 2b 28 65 3c 30 3f 74 3a 30 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 30 3c 3d 6e 26 26 6e 3c 74 3f 5b 74 68 Data Ascii: his.eq(-1)},even:function(){return this.pushStack(S.grep(this,function(e,t){return(t+1)%2}))},odd:function(){return this.pushStack(S.grep(this,function(e,t){return t%2}))},eq:function(e){var t=this.length,n=+e+(e<0?t:0);return this.pushStack(0<=n&&n<t?[th
2024-10-01 13:08:03 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 65 7d 2c 6d 61 6b 65 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 28 70 28 4f 62 6a 65 63 74 28 65 29 29 3f 53 2e 6d 65 72 67 65 28 6e 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 5b 65 5d 3a 65 29 3a 75 2e 63 61 6c 6c 28 6e 2c 65 29 29 2c 6e 7d 2c 69 6e 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 3f 2d 31 3a 69 2e 63 61 6c 6c 28 74 2c 65 2c 6e 29 7d 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 2b 74 2e 6c 65 6e 67 74 68 2c 72 3d 30 2c 69 3d 65 2e 6c 65 6e 67 74 68 3b 72 3c 6e 3b 72 2b 2b 29 65 5b 69 2b 2b 5d 3d Data Ascii: return e},makeArray:function(e,t){var n=t\|\|[];return null!=e&&(p(Object(e))?S.merge(n,"string"==typeof e?[e]:e):u.call(n,e)),n},inArray:function(e,t,n){return null==t?-1:i.call(t,e,n)},merge:function(e,t){for(var n=+t.length,r=0,i=e.length;r<n;r++)e[i++]=
2024-10-01 13:08:03 UTC	1369	IN	Data Raw: 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 7c 28 22 2b 49 2b 22 29 29 7c 29 22 2b 4d 2b 22 2a 5c 5c 5d 22 2c 46 3d 22 3a 28 22 2b 49 2b 22 29 28 3f 3a 5c 5c 28 28 28 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 29 7c 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 28 29 5b 5c 5c 5d 5d 7c 22 2b 57 2b 22 29 2a 29 7c 2e 2a 29 5c 5c 29 7c 29 22 2c 42 3d 6e 65 77 20 52 65 67 45 78 70 28 4d 2b 22 2b 22 2c 22 67 22 29 2c 24 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2b 7c 28 28 3f 3a 5e 7c 5b 5e 5c 5c 5c 5c 5d 29 28 3f 3a 5c 5c 5c 5c 2e 29 2a 29 22 2b 4d 2b 22 2b 24 22 2c 22 Data Ascii: ^\\\\']))'\|\"((?:\\\\.\|[^\\\\\"]))\"\|("+I+"))\|)"+M+"\\]",F=":("+I+")(?:\$(('((?:\\\\.\|[^\\\\']))'\|\"((?:\\\\.\|[^\\\\\"]))\")\|((?:\\\\.\|[^\\\\()[\\]]\|"+W+"))\|.)\$\|)",B=new RegExp(M+"+","g"),$=new RegExp("^"+M+"+\|((?:^\|[^\\\\])(?:\\\\.))"+M+"+$","
2024-10-01 13:08:03 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 28 29 7b 54 28 29 7d 2c 61 65 3d 62 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 65 2e 64 69 73 61 62 6c 65 64 26 26 22 66 69 65 6c 64 73 65 74 22 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 7b 64 69 72 3a 22 70 61 72 65 6e 74 4e 6f 64 65 22 2c 6e 65 78 74 3a 22 6c 65 67 65 6e 64 22 7d 29 3b 74 72 79 7b 48 2e 61 70 70 6c 79 28 74 3d 4f 2e 63 61 6c 6c 28 70 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 70 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 74 5b 70 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 5d 2e 6e 6f 64 65 54 79 70 65 7d 63 61 74 63 68 28 65 29 7b 48 3d 7b 61 70 70 6c 79 3a 74 2e 6c 65 6e 67 74 68 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 4c 2e 61 70 70 6c Data Ascii: ction(){T()},ae=be(function(e){return!0===e.disabled&&"fieldset"===e.nodeName.toLowerCase()},{dir:"parentNode",next:"legend"});try{H.apply(t=O.call(p.childNodes),p.childNodes),t[p.childNodes.length].nodeType}catch(e){H={apply:t.length?function(e,t){L.appl
2024-10-01 13:08:03 UTC	1369	IN	Data Raw: 74 2c 6e 29 7b 72 65 74 75 72 6e 20 72 2e 70 75 73 68 28 74 2b 22 20 22 29 3e 62 2e 63 61 63 68 65 4c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 65 5b 72 2e 73 68 69 66 74 28 29 5d 2c 65 5b 74 2b 22 20 22 5d 3d 6e 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 65 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 53 5d 3d 21 30 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 76 61 72 20 74 3d 43 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 66 69 65 6c 64 73 65 74 22 29 3b 74 72 79 7b 72 65 74 75 72 6e 21 21 65 28 74 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 66 69 6e 61 6c 6c 79 7b 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 2c 74 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e Data Ascii: t,n){return r.push(t+" ")>b.cacheLength&&delete e[r.shift()],e[t+" "]=n}}function le(e){return e[S]=!0,e}function ce(e){var t=C.createElement("fieldset");try{return!!e(t)}catch(e){return!1}finally{t.parentNode&&t.parentNode.removeChild(t),t=null}}function
2024-10-01 13:08:03 UTC	1369	IN	Data Raw: 7c 65 3a 70 3b 72 65 74 75 72 6e 20 72 21 3d 43 26 26 39 3d 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 26 26 72 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 28 61 3d 28 43 3d 72 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 45 3d 21 69 28 43 29 2c 70 21 3d 43 26 26 28 6e 3d 43 2e 64 65 66 61 75 6c 74 56 69 65 77 29 26 26 6e 2e 74 6f 70 21 3d 3d 6e 26 26 28 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 75 6e 6c 6f 61 64 22 2c 6f 65 2c 21 31 29 3a 6e 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 6e 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 75 6e 6c 6f 61 64 22 2c 6f 65 29 29 2c 64 2e 73 63 6f 70 65 3d 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 61 2e 61 Data Ascii: \|e:p;return r!=C&&9===r.nodeType&&r.documentElement&&(a=(C=r).documentElement,E=!i(C),p!=C&&(n=C.defaultView)&&n.top!==n&&(n.addEventListener?n.addEventListener("unload",oe,!1):n.attachEvent&&n.attachEvent("onunload",oe)),d.scope=ce(function(e){return a.a
2024-10-01 13:08:03 UTC	1369	IN	Data Raw: 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 29 26 26 6e 2e 76 61 6c 75 65 3d 3d 3d 65 29 72 65 74 75 72 6e 5b 6f 5d 7d 72 65 74 75 72 6e 5b 5d 7d 7d 29 2c 62 2e 66 69 6e 64 2e 54 41 47 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 65 29 3a 64 2e 71 73 61 3f 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3a 76 6f 69 64 20 30 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 5b 5d 2c 69 3d 30 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 Data Ascii: ributeNode("id"))&&n.value===e)return[o]}return[]}}),b.find.TAG=d.getElementsByTagName?function(e,t){return"undefined"!=typeof t.getElementsByTagName?t.getElementsByTagName(e):d.qsa?t.querySelectorAll(e):void 0}:function(e,t){var n,r=[],i=0,o=t.getElement
2024-10-01 13:08:03 UTC	1369	IN	Data Raw: 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 76 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 4d 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 32 21 3d 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 65 6e 61 62 6c 65 64 22 29 2e 6c 65 6e 67 74 68 26 26 76 2e 70 75 73 68 28 22 3a 65 6e 61 62 6c 65 64 22 2c 22 3a 64 69 73 61 62 6c 65 64 22 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 64 69 73 61 62 6c 65 64 3d 21 30 2c 32 21 3d 3d 65 2e 71 75 65 72 79 53 65 6c 65 Data Ascii: tribute("type","hidden"),e.appendChild(t).setAttribute("name","D"),e.querySelectorAll("[name=d]").length&&v.push("name"+M+"[^$\|!~]?="),2!==e.querySelectorAll(":enabled").length&&v.push(":enabled",":disabled"),a.appendChild(e).disabled=!0,2!==e.querySele

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.7	49733	104.17.24.14	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:03 UTC	389	OUT	GET /ajax/libs/bootstrap/5.1.3/js/bootstrap.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 13:08:03 UTC	929	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 13:08:03 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"6161dfe3-3fa3" Last-Modified: Sat, 09 Oct 2021 18:30:59 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 18052 Expires: Sun, 21 Sep 2025 13:08:03 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vFo9Nt69OjivH44h4ttmkxr1hVZdaVTWlI3X8tWTlPmi%2BsSzi0oZGBJEpZLmczKGOZ%2BTH5RL29gi7m6BjQiVhlLougbUSgXh4Jt10g8%2FcBIz3LOjF36oKh%2Bz9QLoSv9Tv9GPFhnk"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8cbcade388547291-EWR
2024-10-01 13:08:03 UTC	440	IN	Data Raw: 33 39 37 61 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 35 2e 31 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 31 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c Data Ascii: 397a/! Bootstrap v5.1.3 (https://getbootstrap.com/) * Copyright 2011-2021 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */!function(t,
2024-10-01 13:08:03 UTC	1369	IN	Data Raw: 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 7c 7c 73 65 6c 66 29 2e 62 6f 6f 74 73 74 72 61 70 3d 65 28 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 69 66 28 74 26 26 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 29 72 65 74 75 72 6e 20 74 3b 63 6f 6e 73 74 20 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 3b 69 66 28 74 29 66 6f 72 28 63 6f 6e 73 74 20 69 20 69 6e 20 74 29 69 66 28 22 64 65 66 61 75 6c 74 22 21 3d 3d 69 29 7b 63 6f 6e 73 74 20 73 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 74 2c 69 29 3b 4f 62 6a 65 63 74 2e 64 65 66 Data Ascii: peof globalThis?globalThis:t\|\|self).bootstrap=e(t.Popper)}(this,(function(t){"use strict";function e(t){if(t&&t.__esModule)return t;const e=Object.create(null);if(t)for(const i in t)if("default"!==i){const s=Object.getOwnPropertyDescriptor(t,i);Object.def
2024-10-01 13:08:03 UTC	1369	IN	Data Raw: 6e 6f 64 65 54 79 70 65 21 3d 3d 4e 6f 64 65 2e 45 4c 45 4d 45 4e 54 5f 4e 4f 44 45 7c 7c 21 21 74 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 28 76 6f 69 64 20 30 21 3d 3d 74 2e 64 69 73 61 62 6c 65 64 3f 74 2e 64 69 73 61 62 6c 65 64 3a 74 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 26 26 22 66 61 6c 73 65 22 21 3d 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 29 2c 67 3d 74 3d 3e 7b 69 66 28 21 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 61 74 74 61 63 68 53 68 61 64 6f 77 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 52 6f 6f 74 Data Ascii: nodeType!==Node.ELEMENT_NODE\|\|!!t.classList.contains("disabled")\|\|(void 0!==t.disabled?t.disabled:t.hasAttribute("disabled")&&"false"!==t.getAttribute("disabled")),g=t=>{if(!document.documentElement.attachShadow)return null;if("function"==typeof t.getRoot
2024-10-01 13:08:03 UTC	1369	IN	Data Raw: 6e 29 72 65 74 75 72 6e 20 74 5b 21 69 26 26 73 3f 74 2e 6c 65 6e 67 74 68 2d 31 3a 30 5d 3b 63 6f 6e 73 74 20 6f 3d 74 2e 6c 65 6e 67 74 68 3b 72 65 74 75 72 6e 20 6e 2b 3d 69 3f 31 3a 2d 31 2c 73 26 26 28 6e 3d 28 6e 2b 6f 29 25 6f 29 2c 74 5b 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 6e 2c 6f 2d 31 29 29 5d 7d 2c 41 3d 2f 5b 5e 2e 5d 2a 28 3f 3d 5c 2e 2e 2a 29 5c 2e 7c 2e 2a 2f 2c 54 3d 2f 5c 2e 2e 2a 2f 2c 43 3d 2f 3a 3a 5c 64 2b 24 2f 2c 6b 3d 7b 7d 3b 6c 65 74 20 4c 3d 31 3b 63 6f 6e 73 74 20 53 3d 7b 6d 6f 75 73 65 65 6e 74 65 72 3a 22 6d 6f 75 73 65 6f 76 65 72 22 2c 6d 6f 75 73 65 6c 65 61 76 65 3a 22 6d 6f 75 73 65 6f 75 74 22 7d 2c 4f 3d 2f 5e 28 6d 6f 75 73 65 65 6e 74 65 72 7c 6d 6f 75 73 65 6c 65 61 76 65 29 2f 69 2c 4e 3d Data Ascii: n)return t[!i&&s?t.length-1:0];const o=t.length;return n+=i?1:-1,s&&(n=(n+o)%o),t[Math.max(0,Math.min(n,o-1))]},A=/[^.](?=\..)\.\|./,T=/\../,C=/::\d+$/,k={};let L=1;const S={mouseenter:"mouseover",mouseleave:"mouseout"},O=/^(mouseenter\|mouseleave)/i,N=
2024-10-01 13:08:03 UTC	1369	IN	Data Raw: 61 72 67 65 74 2e 63 6f 6e 74 61 69 6e 73 28 65 2e 72 65 6c 61 74 65 64 54 61 72 67 65 74 29 29 72 65 74 75 72 6e 20 74 2e 63 61 6c 6c 28 74 68 69 73 2c 65 29 7d 3b 73 3f 73 3d 74 28 73 29 3a 69 3d 74 28 69 29 7d 63 6f 6e 73 74 5b 6f 2c 72 2c 61 5d 3d 78 28 65 2c 69 2c 73 29 2c 6c 3d 49 28 74 29 2c 63 3d 6c 5b 61 5d 7c 7c 28 6c 5b 61 5d 3d 7b 7d 29 2c 68 3d 50 28 63 2c 72 2c 6f 3f 69 3a 6e 75 6c 6c 29 3b 69 66 28 68 29 72 65 74 75 72 6e 20 76 6f 69 64 28 68 2e 6f 6e 65 4f 66 66 3d 68 2e 6f 6e 65 4f 66 66 26 26 6e 29 3b 63 6f 6e 73 74 20 64 3d 44 28 72 2c 65 2e 72 65 70 6c 61 63 65 28 41 2c 22 22 29 29 2c 75 3d 6f 3f 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 73 28 6e 29 7b 63 6f 6e 73 74 20 6f 3d 74 2e Data Ascii: arget.contains(e.relatedTarget))return t.call(this,e)};s?s=t(s):i=t(i)}const[o,r,a]=x(e,i,s),l=I(t),c=l[a]\|\|(l[a]={}),h=P(c,r,o?i:null);if(h)return void(h.oneOff=h.oneOff&&n);const d=D(r,e.replace(A,"")),u=o?function(t,e,i){return function s(n){const o=t.
2024-10-01 13:08:03 UTC	1369	IN	Data Raw: 2c 65 2e 6f 72 69 67 69 6e 61 6c 48 61 6e 64 6c 65 72 2c 65 2e 64 65 6c 65 67 61 74 69 6f 6e 53 65 6c 65 63 74 6f 72 29 7d 7d 29 29 7d 2c 74 72 69 67 67 65 72 28 74 2c 65 2c 69 29 7b 69 66 28 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 7c 7c 21 74 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 63 6f 6e 73 74 20 73 3d 70 28 29 2c 6e 3d 48 28 65 29 2c 6f 3d 65 21 3d 3d 6e 2c 72 3d 4e 2e 68 61 73 28 6e 29 3b 6c 65 74 20 61 2c 6c 3d 21 30 2c 63 3d 21 30 2c 68 3d 21 31 2c 64 3d 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 6f 26 26 73 26 26 28 61 3d 73 2e 45 76 65 6e 74 28 65 2c 69 29 2c 73 28 74 29 2e 74 72 69 67 67 65 72 28 61 29 2c 6c 3d 21 61 2e 69 73 50 72 6f 70 61 67 61 74 69 6f 6e 53 74 6f 70 70 65 64 28 29 2c 63 3d 21 61 2e 69 73 49 6d 6d 65 64 69 61 74 65 50 Data Ascii: ,e.originalHandler,e.delegationSelector)}}))},trigger(t,e,i){if("string"!=typeof e\|\|!t)return null;const s=p(),n=H(e),o=e!==n,r=N.has(n);let a,l=!0,c=!0,h=!1,d=null;return o&&s&&(a=s.Event(e,i),s(t).trigger(a),l=!a.isPropagationStopped(),c=!a.isImmediateP
2024-10-01 13:08:03 UTC	1369	IN	Data Raw: 7c 6e 65 77 20 74 68 69 73 28 74 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 3a 6e 75 6c 6c 29 7d 73 74 61 74 69 63 20 67 65 74 20 56 45 52 53 49 4f 4e 28 29 7b 72 65 74 75 72 6e 22 35 2e 31 2e 33 22 7d 73 74 61 74 69 63 20 67 65 74 20 4e 41 4d 45 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 27 59 6f 75 20 68 61 76 65 20 74 6f 20 69 6d 70 6c 65 6d 65 6e 74 20 74 68 65 20 73 74 61 74 69 63 20 6d 65 74 68 6f 64 20 22 4e 41 4d 45 22 2c 20 66 6f 72 20 65 61 63 68 20 63 6f 6d 70 6f 6e 65 6e 74 21 27 29 7d 73 74 61 74 69 63 20 67 65 74 20 44 41 54 41 5f 4b 45 59 28 29 7b 72 65 74 75 72 6e 60 62 73 2e 24 7b 74 68 69 73 2e 4e 41 4d 45 7d 60 7d 73 74 61 74 69 63 20 67 65 74 20 45 56 45 4e 54 5f 4b 45 59 28 29 7b 72 65 74 75 72 6e 60 Data Ascii: \|new this(t,"object"==typeof e?e:null)}static get VERSION(){return"5.1.3"}static get NAME(){throw new Error('You have to implement the static method "NAME", for each component!')}static get DATA_KEY(){return`bs.${this.NAME}`}static get EVENT_KEY(){return`
2024-10-01 13:08:03 UTC	1369	IN	Data Raw: 79 49 6e 74 65 72 66 61 63 65 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 65 3d 55 2e 67 65 74 4f 72 43 72 65 61 74 65 49 6e 73 74 61 6e 63 65 28 74 68 69 73 29 3b 22 74 6f 67 67 6c 65 22 3d 3d 3d 74 26 26 65 5b 74 5d 28 29 7d 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 74 29 7b 72 65 74 75 72 6e 22 74 72 75 65 22 3d 3d 3d 74 7c 7c 22 66 61 6c 73 65 22 21 3d 3d 74 26 26 28 74 3d 3d 3d 4e 75 6d 62 65 72 28 74 29 2e 74 6f 53 74 72 69 6e 67 28 29 3f 4e 75 6d 62 65 72 28 74 29 3a 22 22 3d 3d 3d 74 7c 7c 22 6e 75 6c 6c 22 3d 3d 3d 74 3f 6e 75 6c 6c 3a 74 29 7d 66 75 6e 63 74 69 6f 6e 20 56 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 72 65 70 6c 61 63 65 28 2f 5b 41 2d 5a 5d 2f 67 2c 28 74 3d Data Ascii: yInterface(t){return this.each((function(){const e=U.getOrCreateInstance(this);"toggle"===t&&e[t]()}))}}function K(t){return"true"===t\|\|"false"!==t&&(t===Number(t).toString()?Number(t):""===t\|\|"null"===t?null:t)}function V(t){return t.replace(/[A-Z]/g,(t=
2024-10-01 13:08:03 UTC	1369	IN	Data Raw: 73 3d 73 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 69 7d 2c 70 72 65 76 28 74 2c 65 29 7b 6c 65 74 20 69 3d 74 2e 70 72 65 76 69 6f 75 73 45 6c 65 6d 65 6e 74 53 69 62 6c 69 6e 67 3b 66 6f 72 28 3b 69 3b 29 7b 69 66 28 69 2e 6d 61 74 63 68 65 73 28 65 29 29 72 65 74 75 72 6e 5b 69 5d 3b 69 3d 69 2e 70 72 65 76 69 6f 75 73 45 6c 65 6d 65 6e 74 53 69 62 6c 69 6e 67 7d 72 65 74 75 72 6e 5b 5d 7d 2c 6e 65 78 74 28 74 2c 65 29 7b 6c 65 74 20 69 3d 74 2e 6e 65 78 74 45 6c 65 6d 65 6e 74 53 69 62 6c 69 6e 67 3b 66 6f 72 28 3b 69 3b 29 7b 69 66 28 69 2e 6d 61 74 63 68 65 73 28 65 29 29 72 65 74 75 72 6e 5b 69 5d 3b 69 3d 69 2e 6e 65 78 74 45 6c 65 6d 65 6e 74 53 69 62 6c 69 6e 67 7d 72 65 74 75 72 6e 5b 5d 7d 2c 66 6f 63 75 73 61 62 6c 65 43 68 69 Data Ascii: s=s.parentNode;return i},prev(t,e){let i=t.previousElementSibling;for(;i;){if(i.matches(e))return[i];i=i.previousElementSibling}return[]},next(t,e){let i=t.nextElementSibling;for(;i;){if(i.matches(e))return[i];i=i.nextElementSibling}return[]},focusableChi
2024-10-01 13:08:03 UTC	1369	IN	Data Raw: 65 6e 56 69 73 69 62 6c 65 28 29 7b 21 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 26 26 64 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 26 26 74 68 69 73 2e 6e 65 78 74 28 29 7d 70 72 65 76 28 29 7b 74 68 69 73 2e 5f 73 6c 69 64 65 28 74 74 29 7d 70 61 75 73 65 28 74 29 7b 74 7c 7c 28 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 3d 21 30 29 2c 59 2e 66 69 6e 64 4f 6e 65 28 22 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6e 65 78 74 2c 20 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 70 72 65 76 22 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 26 26 28 61 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2c 74 68 69 73 2e 63 79 63 6c 65 28 21 30 29 29 2c 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 29 2c 74 68 69 73 2e 5f 69 Data Ascii: enVisible(){!document.hidden&&d(this._element)&&this.next()}prev(){this._slide(tt)}pause(t){t\|\|(this._isPaused=!0),Y.findOne(".carousel-item-next, .carousel-item-prev",this._element)&&(a(this._element),this.cycle(!0)),clearInterval(this._interval),this._i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.7	49731	161.199.76.39	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:03 UTC	665	OUT	GET /WebResource.axd?d=ylVZOvouK_BkjsCX7QFfPJAJMpaYKcS99qSktRmlKarFwE3Pkv3Y99K6p-FsNZNh1F-RskGsm9kGWkSwi4IuOf01LPxXRyHNxsyLOEv9Hyng1H93GWLaTg2&t=638617536140000000 HTTP/1.1 Host: pbs.first-quotes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ADRUM_BTa=R:0\|g:f79059ed-1889-46c1-af20-a8fb732c2dcb\|n:wintrust_15dcf551-a2c3-4a26-88f2-fdaa934ee7ae; SameSite=None; ADRUM_BT1=R:0\|i:2648624; backIndex=0
2024-10-01 13:08:03 UTC	764	IN	HTTP/1.1 200 OK Cache-Control: public Content-Type: application/x-javascript Expires: Wed, 01 Oct 2025 08:01:31 GMT Last-Modified: Thu, 12 Sep 2024 21:00:14 GMT X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Content-Security-Policy: default-src 'self'; connect-src ; font-src data:; frame-src ; img-src data:; media-src ; object-src ; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; Referrer-Policy: strict-origin Expect-CT: max-age=86400 X-Content-Type-Options: nosniff Permissions-Policy: camera=(), microphone=() Strict-Transport-Security: max-age=15768000; includeSubDomains; preload SERVER: Date: Tue, 01 Oct 2024 13:08:02 GMT Content-Length: 772 Strict-Transport-Security: max-age=4294967294
2024-10-01 13:08:03 UTC	772	IN	Data Raw: 76 61 72 20 49 31 46 6f 63 75 73 65 64 45 6c 65 6d 65 6e 74 4f 76 65 72 72 69 64 65 6e 20 3d 20 66 61 6c 73 65 3b 20 2f 2f 20 49 66 20 74 72 75 65 2c 20 74 68 65 20 68 69 64 64 65 6e 20 66 69 65 6c 64 20 68 61 73 20 62 65 65 6e 20 6d 61 6e 75 61 6c 6c 79 20 73 65 74 2e 0d 0a 2f 2f 20 54 68 69 73 20 73 63 72 69 70 74 20 69 73 20 75 73 65 64 20 62 79 20 4a 73 48 65 6c 70 65 72 2e 45 6e 61 62 6c 65 49 6e 61 63 74 69 76 69 74 79 54 69 6d 65 6f 75 74 28 29 0d 0a 0d 0a 76 61 72 20 49 31 54 69 6d 65 6f 75 74 49 64 20 3d 20 6e 75 6c 6c 3b 09 09 09 20 20 2f 2f 09 53 74 6f 72 65 73 20 74 68 65 20 72 65 74 75 72 6e 20 76 61 6c 75 65 20 6f 66 20 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 29 0d 0a 76 61 72 20 49 31 54 69 6d 65 6f 75 74 53 75 62 69 6e 74 65 Data Ascii: var I1FocusedElementOverriden = false; // If true, the hidden field has been manually set.// This script is used by JsHelper.EnableInactivityTimeout()var I1TimeoutId = null; //Stores the return value of window.setTimeout()var I1TimeoutSubinte

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.7	49729	161.199.76.39	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:03 UTC	534	OUT	GET /JavaScript/jqueryConfirm.js HTTP/1.1 Host: pbs.first-quotes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ADRUM_BTa=R:0\|g:f79059ed-1889-46c1-af20-a8fb732c2dcb\|n:wintrust_15dcf551-a2c3-4a26-88f2-fdaa934ee7ae; SameSite=None; ADRUM_BT1=R:0\|i:2648624; backIndex=0
2024-10-01 13:08:03 UTC	747	IN	HTTP/1.1 200 OK Content-Type: application/javascript Last-Modified: Thu, 12 Sep 2024 21:00:56 GMT Accept-Ranges: bytes ETag: "0745ddc565db1:0" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Content-Security-Policy: default-src 'self'; connect-src ; font-src data:; frame-src ; img-src data:; media-src ; object-src ; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; Referrer-Policy: strict-origin Expect-CT: max-age=86400 X-Content-Type-Options: nosniff Permissions-Policy: camera=(), microphone=() Strict-Transport-Security: max-age=15768000; includeSubDomains; preload SERVER: Date: Tue, 01 Oct 2024 13:08:02 GMT Content-Length: 6786 Strict-Transport-Security: max-age=4294967294
2024-10-01 13:08:03 UTC	6786	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 0d 0a 09 0d 0a 20 20 20 20 24 2e 63 6f 6e 66 69 72 6d 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 70 61 72 61 6d 73 29 20 7b 0d 0a 0d 0a 09 20 20 20 20 69 66 28 24 28 27 23 63 6f 6e 66 69 72 6d 4f 76 65 72 6c 61 79 27 29 2e 6c 65 6e 67 74 68 29 7b 0d 0a 09 09 09 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0d 0a 09 09 7d 0d 0a 09 09 0d 0a 09 20 20 20 76 61 72 20 62 75 74 74 6f 6e 48 54 4d 4c 20 3d 20 27 27 3b 0d 0a 20 20 20 20 20 20 20 20 24 2e 65 61 63 68 28 70 61 72 61 6d 73 2e 62 75 74 74 6f 6e 73 2c 20 66 75 6e 63 74 69 6f 6e 20 28 6b 65 79 2c 20 6f 62 6a 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6e 61 6d 65 20 3d 20 6f 62 6a 5b 27 6e 61 6d 65 27 5d 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 Data Ascii: (function($){ $.confirm = function (params) { if($('#confirmOverlay').length){return false;} var buttonHTML = ''; $.each(params.buttons, function (key, obj) { var name = obj['name']; b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.7	49727	161.199.76.39	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:03 UTC	675	OUT	GET /WebResource.axd?d=yaUIRZP2BxuchGMRpHK-PW27W1wPkpaEWf4v2UdnfBq08EBqGeF9zhziqBFObI894wL7VIAZ2hqkK5ovbH_WxzOKEtH1Y_w_3P3aEKCjubexRXpGhOCoB_uM-bLQ6irt0&t=638617536140000000 HTTP/1.1 Host: pbs.first-quotes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ADRUM_BTa=R:0\|g:f79059ed-1889-46c1-af20-a8fb732c2dcb\|n:wintrust_15dcf551-a2c3-4a26-88f2-fdaa934ee7ae; SameSite=None; ADRUM_BT1=R:0\|i:2648624; backIndex=0
2024-10-01 13:08:03 UTC	764	IN	HTTP/1.1 200 OK Cache-Control: public Content-Type: application/x-javascript Expires: Wed, 01 Oct 2025 08:01:31 GMT Last-Modified: Thu, 12 Sep 2024 21:00:14 GMT X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Content-Security-Policy: default-src 'self'; connect-src ; font-src data:; frame-src ; img-src data:; media-src ; object-src ; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; Referrer-Policy: strict-origin Expect-CT: max-age=86400 X-Content-Type-Options: nosniff Permissions-Policy: camera=(), microphone=() Strict-Transport-Security: max-age=15768000; includeSubDomains; preload SERVER: Date: Tue, 01 Oct 2024 13:08:02 GMT Content-Length: 547 Strict-Transport-Security: max-age=4294967294
2024-10-01 13:08:03 UTC	547	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 49 31 4d 65 6d 6f 72 69 7a 65 46 6f 63 75 73 65 64 45 6c 65 6d 65 6e 74 28 61 29 7b 69 66 28 49 31 46 6f 63 75 73 65 64 45 6c 65 6d 65 6e 74 4f 76 65 72 72 69 64 65 6e 3d 3d 74 72 75 65 29 72 65 74 75 72 6e 3b 76 61 72 20 63 3d 2f 5e 73 75 62 6d 69 74 7c 62 75 74 74 6f 6e 7c 69 6d 61 67 65 7c 72 65 73 65 74 24 2f 69 3b 76 61 72 20 64 3d 64 6f 63 75 6d 65 6e 74 2e 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3f 64 6f 63 75 6d 65 6e 74 2e 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3a 61 2e 74 61 72 67 65 74 3b 69 66 28 64 21 3d 6e 75 6c 6c 26 26 64 2e 62 21 3d 6e 75 6c 6c 26 26 64 2e 62 2e 72 65 70 6c 61 63 65 28 2f 28 5e 5c 73 2b 7c 5c 73 2b 24 29 2f 2c 27 27 29 21 3d 27 27 26 26 64 2e 74 61 62 49 6e 64 65 78 3e 2d 31 29 7b 76 61 72 20 65 Data Ascii: function I1MemorizeFocusedElement(a){if(I1FocusedElementOverriden==true)return;var c=/^submit\|button\|image\|reset$/i;var d=document.activeElement?document.activeElement:a.target;if(d!=null&&d.b!=null&&d.b.replace(/(^\s+\|\s+$)/,'')!=''&&d.tabIndex>-1){var e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.7	49728	161.199.76.39	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:03 UTC	675	OUT	GET /WebResource.axd?d=635O8dWR2vwElIyx754oL7z_LOmgDHd4OuEuKB20_Av1-l21ZukpdZhm8e67dSgZ8_S0OApUzE78osQTyUXsmt1Z7gSEIkjlvnXzOj3ihqLjHiSu0UT2jpQ5QZ16Jdhr0&t=638617536140000000 HTTP/1.1 Host: pbs.first-quotes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ADRUM_BTa=R:0\|g:f79059ed-1889-46c1-af20-a8fb732c2dcb\|n:wintrust_15dcf551-a2c3-4a26-88f2-fdaa934ee7ae; SameSite=None; ADRUM_BT1=R:0\|i:2648624; backIndex=0
2024-10-01 13:08:03 UTC	766	IN	HTTP/1.1 200 OK Cache-Control: public Content-Type: application/x-javascript Expires: Wed, 01 Oct 2025 08:01:31 GMT Last-Modified: Thu, 12 Sep 2024 21:00:14 GMT X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Content-Security-Policy: default-src 'self'; connect-src ; font-src data:; frame-src ; img-src data:; media-src ; object-src ; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; Referrer-Policy: strict-origin Expect-CT: max-age=86400 X-Content-Type-Options: nosniff Permissions-Policy: camera=(), microphone=() Strict-Transport-Security: max-age=15768000; includeSubDomains; preload SERVER: Date: Tue, 01 Oct 2024 13:08:02 GMT Content-Length: 14900 Strict-Transport-Security: max-age=4294967294
2024-10-01 13:08:03 UTC	7185	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 49 31 47 65 74 41 67 67 72 65 67 61 74 65 48 65 69 67 68 74 46 6f 72 45 6c 65 6d 65 6e 74 43 6f 6e 74 65 6e 74 73 28 61 29 7b 76 61 72 20 5f 64 61 3d 30 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 61 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 5f 64 62 3d 61 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 69 5d 3b 69 66 28 74 79 70 65 6f 66 28 5f 64 62 2e 6f 66 66 73 65 74 48 65 69 67 68 74 29 3d 3d 27 6e 75 6d 62 65 72 27 29 7b 5f 64 61 2b 3d 5f 64 62 2e 6f 66 66 73 65 74 48 65 69 67 68 74 3b 7d 7d 72 65 74 75 72 6e 20 5f 64 61 3b 7d 66 75 6e 63 74 69 6f 6e 20 49 31 47 65 74 58 6d 6c 4e 6f 64 65 56 61 6c 75 65 28 62 2c 63 29 7b 69 66 28 74 79 70 65 6f 66 28 62 2e 73 65 6c 65 63 74 53 69 6e 67 6c 65 Data Ascii: function I1GetAggregateHeightForElementContents(a){var _da=0;for(var i=0;i<a.childNodes.length;i++){var _db=a.childNodes[i];if(typeof(_db.offsetHeight)=='number'){_da+=_db.offsetHeight;}}return _da;}function I1GetXmlNodeValue(b,c){if(typeof(b.selectSingle
2024-10-01 13:08:04 UTC	7715	IN	Data Raw: 62 75 74 65 28 61 2c 7a 29 7b 69 66 28 49 31 49 73 49 45 28 29 3d 3d 74 72 75 65 29 7b 72 65 74 75 72 6e 20 61 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 7a 2e 72 65 70 6c 61 63 65 28 2f 2d 2f 67 2c 27 27 29 2c 30 29 3b 7d 65 6c 73 65 20 69 66 28 49 31 49 73 4d 6f 7a 69 6c 6c 61 28 29 3d 3d 74 72 75 65 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 61 2c 6e 75 6c 6c 29 2e 67 65 74 50 72 6f 70 65 72 74 79 56 61 6c 75 65 28 7a 29 3b 7d 65 6c 73 65 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 31 46 6f 72 6d 61 74 28 5f 61 2c 5f 62 2c 5f 63 2c 5f 64 2c 5f 65 2c 5f 66 2c 5f 67 2c 5f 68 2c 5f 69 2c 5f Data Ascii: bute(a,z){if(I1IsIE()==true){return a.currentStyle.getAttribute(z.replace(/-/g,''),0);}else if(I1IsMozilla()==true){return document.defaultView.getComputedStyle(a,null).getPropertyValue(z);}else{return null;}}function I1Format(_a,_b,_c,_d,_e,_f,_g,_h,_i,_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.7	49730	161.199.76.39	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:03 UTC	533	OUT	GET /JavaScript/MainView.js?v=1 HTTP/1.1 Host: pbs.first-quotes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ADRUM_BTa=R:0\|g:f79059ed-1889-46c1-af20-a8fb732c2dcb\|n:wintrust_15dcf551-a2c3-4a26-88f2-fdaa934ee7ae; SameSite=None; ADRUM_BT1=R:0\|i:2648624; backIndex=0
2024-10-01 13:08:04 UTC	748	IN	HTTP/1.1 200 OK Content-Type: application/javascript Last-Modified: Thu, 12 Sep 2024 20:59:44 GMT Accept-Ranges: bytes ETag: "02073b1565db1:0" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Content-Security-Policy: default-src 'self'; connect-src ; font-src data:; frame-src ; img-src data:; media-src ; object-src ; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; Referrer-Policy: strict-origin Expect-CT: max-age=86400 X-Content-Type-Options: nosniff Permissions-Policy: camera=(), microphone=() Strict-Transport-Security: max-age=15768000; includeSubDomains; preload SERVER: Date: Tue, 01 Oct 2024 13:08:02 GMT Content-Length: 92566 Strict-Transport-Security: max-age=4294967294
2024-10-01 13:08:04 UTC	7203	IN	Data Raw: ef bb bf 2f 2f 50 42 53 20 2d 20 31 31 30 38 31 20 2d 20 67 61 62 65 0d 0a 2f 2f 73 65 74 75 70 20 61 20 73 68 61 72 65 64 20 76 61 72 69 61 62 6c 65 0d 0a 77 69 6e 64 6f 77 2e 6c 6f 6f 6b 55 70 44 6c 67 20 3d 20 22 22 3b 0d 0a 0d 0a 2f 2f 20 49 6e 73 74 65 61 64 20 6f 66 20 64 6f 69 6e 67 20 74 68 69 73 3a 20 76 61 72 20 65 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 6d 79 6f 62 6a 27 29 3b 20 0d 0a 2f 2f 20 75 73 65 20 74 68 69 73 3a 0d 0a 2f 2f 20 76 61 72 20 65 6c 20 3d 20 24 28 27 6d 79 6f 62 6a 27 29 3b 0d 0a 2f 2f 66 75 6e 63 74 69 6f 6e 20 24 28 29 20 7b 0d 0a 2f 2f 20 20 20 20 76 61 72 20 65 6c 65 6d 65 6e 74 73 20 3d 20 6e 65 77 20 41 72 72 61 79 28 29 3b 0d 0a 2f 2f 20 20 20 20 66 6f 72 20 28 76 61 72 Data Ascii: //PBS - 11081 - gabe//setup a shared variablewindow.lookUpDlg = "";// Instead of doing this: var el = document.getElementById('myobj'); // use this:// var el = $('myobj');//function $() {// var elements = new Array();// for (var
2024-10-01 13:08:04 UTC	7951	IN	Data Raw: 65 78 74 27 29 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 50 62 73 2e 73 77 69 74 63 68 54 6f 6f 6c 74 69 70 28 24 28 27 2e 63 6b 2d 65 64 69 74 6f 72 27 29 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 63 61 74 63 68 28 65 72 72 6f 72 20 3d 3e 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 65 72 72 6f 72 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 20 20 20 20 24 28 73 65 6c 65 63 74 6f 72 29 2e 73 68 6f 77 28 29 3b 0d 0a 20 20 20 20 7d 0d 0a 7d 3b 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 24 61 6c 65 72 74 28 74 65 78 74 2c 20 74 69 74 6c 65 Data Ascii: ext')); }); Pbs.switchTooltip($('.ck-editor')); }) .catch(error => { console.error(error); }); $(selector).show(); }};function $alert(text, title
2024-10-01 13:08:04 UTC	7951	IN	Data Raw: 68 74 20 3e 20 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 69 67 68 74 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 72 65 73 69 7a 65 42 79 28 30 2c 20 74 6f 70 20 2b 20 68 65 69 67 68 74 20 2d 20 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 69 67 68 74 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 23 27 20 2b 20 70 6f 70 75 70 49 64 29 2e 63 73 73 28 27 68 65 69 67 68 74 27 2c 20 27 61 75 74 6f 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 7d 2c 0d 0a 20 20 20 20 77 69 6e 64 6f 77 59 3a 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 68 65 69 67 68 74 20 3d 20 50 62 73 2e 69 6e 6e 65 72 48 65 69 67 68 74 Data Ascii: ht > window.innerHeight) window.resizeBy(0, top + height - window.innerHeight); } $('#' + popupId).css('height', 'auto'); }); }, windowY: function () { var height = Pbs.innerHeight
2024-10-01 13:08:04 UTC	7951	IN	Data Raw: 30 29 20 68 65 69 67 68 74 42 79 20 3d 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 72 65 73 69 7a 65 42 79 28 77 69 64 74 68 42 79 2c 20 68 65 69 67 68 74 42 79 29 3b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 0d 0a 20 20 20 20 20 20 20 20 2f 2f 69 66 20 28 77 69 64 74 68 29 20 7b 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 2f 2f 20 20 20 20 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 20 3d 20 77 69 64 74 68 54 6f 3b 0d 0a 20 20 20 20 20 20 20 20 2f 2f 20 20 20 20 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 69 67 68 74 20 3d 20 68 65 69 67 68 74 54 6f 3b 0d 0a 20 20 20 20 20 20 20 20 2f 2f 20 20 20 20 72 65 74 75 72 6e 3b 0d 0a 20 20 20 20 20 20 20 20 2f 2f 7d 0d 0a 20 20 Data Ascii: 0) heightBy = 0; } window.resizeBy(widthBy, heightBy); return; //if (width) { // window.innerWidth = widthTo; // window.innerHeight = heightTo; // return; //}
2024-10-01 13:08:04 UTC	7951	IN	Data Raw: 74 74 6f 6e 33 43 6c 61 73 73 20 7c 7c 20 27 62 74 6e 2d 73 65 63 6f 6e 64 61 72 79 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 27 61 63 74 69 6f 6e 27 3a 20 61 63 74 69 6f 6e 33 20 7c 7c 20 27 27 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 20 20 20 20 24 28 27 23 63 6f 6e 66 69 72 6d 42 6f 78 27 29 2e 64 72 61 67 67 61 62 6c 65 28 7b 20 63 75 72 73 6f 72 3a 20 22 6d 6f 76 65 22 2c 20 63 6f 6e 74 61 69 6e 6d 65 6e 74 3a 20 22 70 61 72 65 6e 74 22 20 7d 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 72 65 73 69 7a 61 62 6c 65 28 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 69 6e 77 69 64 74 68 3a 20 Data Ascii: tton3Class \|\| 'btn-secondary', 'action': action3 \|\| '' } } }); $('#confirmBox').draggable({ cursor: "move", containment: "parent" }) .resizable({ minwidth:
2024-10-01 13:08:04 UTC	7951	IN	Data Raw: 62 61 63 6b 64 72 6f 70 73 20 69 66 20 65 78 63 65 65 64 65 64 2e 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 62 61 63 6b 64 72 6f 70 73 41 6d 6f 75 6e 74 20 3d 20 24 28 27 64 69 76 2e 6d 6f 64 61 6c 2d 62 61 63 6b 64 72 6f 70 27 29 2e 6c 65 6e 67 74 68 3b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 62 61 63 6b 64 72 6f 70 73 41 6d 6f 75 6e 74 20 3e 20 30 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6d 6f 64 61 6c 41 6d 74 20 3d 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 50 62 73 2e 4c 42 2e 24 64 69 76 4d 6f 64 61 6c 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 6f 64 61 6c 41 6d 74 20 3d 20 31 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 6f 64 61 6c 41 6d 74 20 2b 3d 20 50 62 73 2e 4c Data Ascii: backdrops if exceeded. var backdropsAmount = $('div.modal-backdrop').length; if (backdropsAmount > 0) { var modalAmt = 0; if (Pbs.LB.$divModal) { modalAmt = 1; modalAmt += Pbs.L
2024-10-01 13:08:04 UTC	7951	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 6d 6f 64 61 6c 2e 66 69 6e 64 28 22 5b 6f 6e 63 68 61 6e 67 65 5d 22 20 2b 20 64 6f 4e 6f 74 43 68 61 6e 67 65 50 6f 73 74 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6f 6e 63 68 61 6e 67 65 20 3d 20 24 28 74 68 69 73 29 2e 61 74 74 72 28 22 6f 6e 63 68 61 6e 67 65 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 6f 6e 63 68 61 6e 67 65 29 20 24 28 74 68 69 73 29 2e 61 74 74 72 28 22 6f 6e 63 68 61 6e 67 65 22 2c 20 6f 6e 63 68 61 6e 67 65 2e 72 65 70 6c 61 63 65 28 27 5f 5f 64 6f 50 6f 73 74 42 61 63 6b 27 2c 20 70 62 73 4c 42 70 6f 73 74 42 61 63 6b 29 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0d Data Ascii: modal.find("[onchange]" + doNotChangePost).each(function () { var onchange = $(this).attr("onchange"); if (onchange) $(this).attr("onchange", onchange.replace('__doPostBack', pbsLBpostBack)); });
2024-10-01 13:08:04 UTC	7951	IN	Data Raw: 61 64 65 72 28 22 50 42 53 2d 4c 42 22 2c 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 29 3b 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 75 72 6c 3a 20 50 62 73 2e 4c 42 2e 75 72 6c 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 3a 20 64 61 74 61 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 75 63 63 65 73 73 3a 20 66 75 6e 63 74 69 6f 6e 20 28 68 74 6d 2c 20 73 74 61 74 75 73 2c 20 78 68 72 29 20 7b 20 50 62 73 2e 4c 42 2e 61 66 74 65 72 53 75 63 63 65 73 73 50 6f 73 74 42 61 63 6b 28 68 74 6d 2c 20 73 74 61 74 75 73 2c 20 78 68 72 29 3b 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: ader("PBS-LB", window.location.pathname);}, url: Pbs.LB.url, data: data, success: function (htm, status, xhr) { Pbs.LB.afterSuccessPostBack(htm, status, xhr); } });
2024-10-01 13:08:04 UTC	7951	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 63 6c 6f 73 65 42 75 74 74 6f 6e 20 3d 20 6d 6f 64 61 6c 2e 66 69 6e 64 28 27 62 75 74 74 6f 6e 2e 63 6c 6f 73 65 2c 62 75 74 74 6f 6e 2e 41 63 74 41 73 43 6c 6f 73 65 2c 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 63 6c 6f 73 65 6d 6f 64 61 6c 2c 3a 62 75 74 74 6f 6e 5b 76 61 6c 75 65 3d 22 43 6c 6f 73 65 22 5d 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 6f 73 65 42 75 74 74 6f 6e 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 20 28 69 2c 20 63 75 72 42 74 6e 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 62 74 6e 20 3d 20 24 28 63 75 72 42 74 6e 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 Data Ascii: var closeButton = modal.find('button.close,button.ActAsClose,[type="button"].closemodal,:button[value="Close"]'); closeButton.each(function (i, curBtn) { var btn = $(curBtn); var
2024-10-01 13:08:04 UTC	7951	IN	Data Raw: 20 69 66 20 28 24 28 74 68 69 73 29 2e 61 74 74 72 28 27 74 61 62 69 6e 64 65 78 27 29 20 21 3d 20 27 2d 31 27 29 20 24 28 74 68 69 73 29 2e 61 74 74 72 28 27 74 61 62 69 6e 64 65 78 27 2c 20 27 30 27 29 3b 20 7d 29 3b 2f 2f 69 6e 64 65 78 20 2b 20 31 0d 0a 20 20 20 20 20 20 20 20 63 6f 6e 74 61 69 6e 65 72 2e 66 69 6e 64 28 27 64 69 76 2e 49 31 44 72 6f 70 44 6f 77 6e 44 69 73 61 62 6c 65 64 20 73 70 61 6e 2e 49 31 44 72 6f 70 44 6f 77 6e 4c 69 73 74 4c 61 62 65 6c 27 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 69 66 20 28 24 28 74 68 69 73 29 2e 74 65 78 74 28 29 20 3d 3d 20 27 5b 53 65 6c 65 63 74 20 61 6e 20 49 74 65 6d 5d 27 29 20 24 28 74 68 69 73 29 2e 74 65 78 74 28 27 27 29 3b 20 7d 29 3b 0d 0a 20 20 20 20 20 20 20 20 50 62 73 Data Ascii: if ($(this).attr('tabindex') != '-1') $(this).attr('tabindex', '0'); });//index + 1 container.find('div.I1DropDownDisabled span.I1DropDownListLabel').each(function () { if ($(this).text() == '[Select an Item]') $(this).text(''); }); Pbs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.7	49738	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:05 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-01 13:08:05 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=185809 Date: Tue, 01 Oct 2024 13:08:05 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-01 13:08:05 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.7	49740	161.199.76.39	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:05 UTC	706	OUT	GET /WebResource.axd?d=360wl-vvFvG9u7MHYpZnn88VVBcg-v0fizLjSuxbKS8PLQrfQzo3pawTgvQR_1z-nTNIe9XSjTdz-M8r17k0XKyAYVWSn4SZL7x0w4ghBGU1dnCq-0L9Zn1WrMu_3PMufrARYQnx2CI1&t=638617536140000000 HTTP/1.1 Host: pbs.first-quotes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SameSite=None; backIndex=1; ASP.NET_SessionID=c2zlbe3nobgv0bcbu0kqooh5; ADRUM_BTa=R:29\|g:e235bdc3-ecb1-452d-a3b9-ea5a457addeb\|n:wintrust_15dcf551-a2c3-4a26-88f2-fdaa934ee7ae
2024-10-01 13:08:05 UTC	765	IN	HTTP/1.1 200 OK Cache-Control: public Content-Type: application/x-javascript Expires: Wed, 01 Oct 2025 08:01:31 GMT Last-Modified: Thu, 12 Sep 2024 21:00:14 GMT X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Content-Security-Policy: default-src 'self'; connect-src ; font-src data:; frame-src ; img-src data:; media-src ; object-src ; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; Referrer-Policy: strict-origin Expect-CT: max-age=86400 X-Content-Type-Options: nosniff Permissions-Policy: camera=(), microphone=() Strict-Transport-Security: max-age=15768000; includeSubDomains; preload SERVER: Date: Tue, 01 Oct 2024 13:08:04 GMT Content-Length: 1742 Strict-Transport-Security: max-age=4294967294
2024-10-01 13:08:05 UTC	1742	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 41 63 74 69 76 61 74 65 55 6e 6c 6f 61 64 42 6c 6f 63 6b 65 72 28 65 29 7b 69 66 28 75 6e 6c 6f 61 64 42 6c 6f 63 6b 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 21 3d 6e 75 6c 6c 26 26 64 69 73 61 62 6c 65 55 6e 6c 6f 61 64 42 6c 6f 63 6b 65 72 46 6f 72 4e 65 78 74 55 6e 6c 6f 61 64 3d 3d 66 61 6c 73 65 29 7b 75 6e 6c 6f 61 64 42 6c 6f 63 6b 65 72 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 62 6c 6f 63 6b 22 3b 75 6e 6c 6f 61 64 42 6c 6f 63 6b 65 72 2e 66 6f 63 75 73 28 29 3b 7d 64 69 73 61 62 6c 65 55 6e 6c 6f 61 64 42 6c 6f 63 6b 65 72 46 6f 72 4e 65 78 74 55 6e 6c 6f 61 64 3d 66 61 6c 73 65 3b 7d 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 73 74 79 6c 65 2e 63 75 72 73 6f 72 3d 27 61 75 74 6f 27 3b 66 75 6e 63 74 69 6f 6e 20 53 Data Ascii: function ActivateUnloadBlocker(e){if(unloadBlocker.parentNode!=null&&disableUnloadBlockerForNextUnload==false){unloadBlocker.style.display="block";unloadBlocker.focus();}disableUnloadBlockerForNextUnload=false;}document.body.style.cursor='auto';function S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.7	49741	161.199.76.39	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:05 UTC	779	OUT	GET /favicon.ico HTTP/1.1 Host: pbs.first-quotes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pbs.first-quotes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SameSite=None; backIndex=1; ASP.NET_SessionID=c2zlbe3nobgv0bcbu0kqooh5; ADRUM_BTa=R:29\|g:e235bdc3-ecb1-452d-a3b9-ea5a457addeb\|n:wintrust_15dcf551-a2c3-4a26-88f2-fdaa934ee7ae
2024-10-01 13:08:05 UTC	648	IN	HTTP/1.1 404 Not Found Content-Type: text/html X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Content-Security-Policy: default-src 'self'; connect-src ; font-src data:; frame-src ; img-src data:; media-src ; object-src ; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; Referrer-Policy: strict-origin Expect-CT: max-age=86400 X-Content-Type-Options: nosniff Permissions-Policy: camera=(), microphone=() Strict-Transport-Security: max-age=15768000; includeSubDomains; preload SERVER: Date: Tue, 01 Oct 2024 13:08:04 GMT Content-Length: 1245 Strict-Transport-Security: max-age=4294967294
2024-10-01 13:08:05 UTC	1245	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 46 69 6c Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>404 - Fil

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.7	49743	161.199.76.39	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:05 UTC	727	OUT	GET /WebResource.axd?d=4Doe9-T2x8bzL-X_T_9dOCpxMQsSu2AA8S6eSXTsiANjo_FH87PF5zy8wAdzn2Fk_NBiGdKnwOa64Nzcikoe5Eqb49Xx-M_vMZ8yREHoXbL2CpSCp8gmBE2hfM95agPiV3JPN6xtwE0yvhTFDZ8zHWquXrSMdJfW0&t=638617536140000000 HTTP/1.1 Host: pbs.first-quotes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SameSite=None; backIndex=1; ASP.NET_SessionID=c2zlbe3nobgv0bcbu0kqooh5; ADRUM_BTa=R:29\|g:e235bdc3-ecb1-452d-a3b9-ea5a457addeb\|n:wintrust_15dcf551-a2c3-4a26-88f2-fdaa934ee7ae
2024-10-01 13:08:05 UTC	766	IN	HTTP/1.1 200 OK Cache-Control: public Content-Type: application/x-javascript Expires: Wed, 01 Oct 2025 08:01:31 GMT Last-Modified: Thu, 12 Sep 2024 21:00:14 GMT X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Content-Security-Policy: default-src 'self'; connect-src ; font-src data:; frame-src ; img-src data:; media-src ; object-src ; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; Referrer-Policy: strict-origin Expect-CT: max-age=86400 X-Content-Type-Options: nosniff Permissions-Policy: camera=(), microphone=() Strict-Transport-Security: max-age=15768000; includeSubDomains; preload SERVER: Date: Tue, 01 Oct 2024 13:08:04 GMT Content-Length: 37157 Strict-Transport-Security: max-age=4294967294
2024-10-01 13:08:05 UTC	7185	IN	Data Raw: 0d 0a 2f 2f 20 49 6e 69 74 69 61 6c 69 7a 65 73 20 66 6f 72 6d 61 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 0d 0a 2f 2f 20 4e 65 65 64 73 20 74 6f 20 62 65 20 63 61 6c 6c 65 64 20 62 65 66 6f 72 65 20 61 6e 79 20 6f 74 68 65 72 20 66 75 6e 63 74 69 6f 6e 2e 0d 0a 66 75 6e 63 74 69 6f 6e 20 49 31 57 65 62 47 6c 6f 62 61 6c 69 7a 61 74 69 6f 6e 5f 49 6e 69 74 28 0d 0a 09 2f 2f 20 43 75 72 72 65 6e 63 79 0d 0a 09 5f 63 75 72 72 65 6e 63 79 44 65 63 69 6d 61 6c 44 69 67 69 74 73 2c 20 0d 0a 09 5f 63 75 72 72 65 6e 63 79 44 65 63 69 6d 61 6c 53 65 70 61 72 61 74 6f 72 2c 20 0d 0a 09 5f 63 75 72 72 65 6e 63 79 47 72 6f 75 70 53 65 70 61 72 61 74 6f 72 2c 0d 0a 09 5f 63 75 72 72 65 6e 63 79 47 72 6f 75 70 53 69 7a 65 73 2c 0d 0a 09 5f 63 75 72 72 65 6e 63 79 4e Data Ascii: // Initializes format information.// Needs to be called before any other function.function I1WebGlobalization_Init(// Currency_currencyDecimalDigits, _currencyDecimalSeparator, _currencyGroupSeparator,_currencyGroupSizes,_currencyN
2024-10-01 13:08:05 UTC	7951	IN	Data Raw: 4e 75 6d 20 3d 20 4d 61 74 68 2e 61 62 73 28 6e 75 6d 29 3b 0d 0a 09 0d 0a 09 76 61 72 20 64 65 63 69 6d 61 6c 4c 65 66 74 20 3d 20 4d 61 74 68 2e 66 6c 6f 6f 72 28 61 62 73 4e 75 6d 29 3b 0d 0a 09 76 61 72 20 64 65 63 69 6d 61 6c 52 69 67 68 74 3b 0d 0a 0d 0a 09 69 66 20 28 70 72 65 76 65 6e 74 52 6f 75 6e 64 69 6e 67 20 3d 3d 20 74 72 75 65 20 7c 7c 20 28 66 6f 72 6d 61 74 43 68 61 72 20 3d 3d 20 27 67 27 20 26 26 20 65 78 70 6c 69 63 69 74 44 65 63 69 6d 61 6c 44 69 67 69 74 73 20 3d 3d 20 66 61 6c 73 65 29 29 0d 0a 09 7b 0d 0a 09 09 2f 2f 20 46 6f 72 20 67 65 6e 65 72 61 6c 20 66 6f 72 6d 61 74 2c 20 75 6e 6c 65 73 73 20 74 68 65 20 64 65 63 69 6d 61 6c 20 64 69 67 69 74 73 20 61 72 65 20 65 78 70 6c 69 63 69 74 6c 79 0d 0a 09 09 2f 2f 20 73 70 65 63 Data Ascii: Num = Math.abs(num);var decimalLeft = Math.floor(absNum);var decimalRight;if (preventRounding == true \|\| (formatChar == 'g' && explicitDecimalDigits == false)){// For general format, unless the decimal digits are explicitly// spec
2024-10-01 13:08:05 UTC	7951	IN	Data Raw: 6f 2e 73 68 6f 72 74 44 61 74 65 50 61 74 74 65 72 6e 20 2b 20 27 20 27 20 2b 20 49 31 57 65 62 47 6c 6f 62 61 6c 69 7a 61 74 69 6f 6e 5f 46 6f 72 6d 61 74 49 6e 66 6f 2e 73 68 6f 72 74 54 69 6d 65 50 61 74 74 65 72 6e 3b 0d 0a 09 09 09 62 72 65 61 6b 3b 0d 0a 09 09 63 61 73 65 20 27 47 27 3a 0d 0a 09 09 09 61 63 74 75 61 6c 46 6f 72 6d 61 74 20 3d 20 49 31 57 65 62 47 6c 6f 62 61 6c 69 7a 61 74 69 6f 6e 5f 46 6f 72 6d 61 74 49 6e 66 6f 2e 73 68 6f 72 74 44 61 74 65 50 61 74 74 65 72 6e 20 2b 20 27 20 27 20 2b 20 49 31 57 65 62 47 6c 6f 62 61 6c 69 7a 61 74 69 6f 6e 5f 46 6f 72 6d 61 74 49 6e 66 6f 2e 6c 6f 6e 67 54 69 6d 65 50 61 74 74 65 72 6e 3b 0d 0a 09 09 09 62 72 65 61 6b 3b 0d 0a 09 09 63 61 73 65 20 27 6d 27 3a 0d 0a 09 09 09 61 63 74 75 61 6c 46 Data Ascii: o.shortDatePattern + ' ' + I1WebGlobalization_FormatInfo.shortTimePattern;break;case 'G':actualFormat = I1WebGlobalization_FormatInfo.shortDatePattern + ' ' + I1WebGlobalization_FormatInfo.longTimePattern;break;case 'm':actualF
2024-10-01 13:08:05 UTC	7951	IN	Data Raw: 2f 20 41 4d 2f 50 4d 0d 0a 09 6f 75 74 70 75 74 20 3d 20 49 31 57 65 62 47 6c 6f 62 61 6c 69 7a 61 74 69 6f 6e 5f 52 65 70 6c 61 63 65 49 6e 44 61 74 65 54 69 6d 65 46 6f 72 6d 61 74 28 6f 75 74 70 75 74 2c 20 2f 5c 62 25 3f 74 5c 62 2f 67 2c 20 61 6d 70 6d 2e 73 75 62 73 74 72 28 30 2c 20 31 29 29 5b 30 5d 3b 09 0d 0a 09 6f 75 74 70 75 74 20 3d 20 49 31 57 65 62 47 6c 6f 62 61 6c 69 7a 61 74 69 6f 6e 5f 52 65 70 6c 61 63 65 49 6e 44 61 74 65 54 69 6d 65 46 6f 72 6d 61 74 28 6f 75 74 70 75 74 2c 20 2f 5c 62 74 74 5c 62 2f 67 2c 20 61 6d 70 6d 29 5b 30 5d 3b 0d 0a 09 0d 0a 09 2f 2f 20 7a 7a 20 61 6e 64 20 7a 7a 7a 7a 20 69 67 6e 6f 72 65 64 2e 0d 0a 09 0d 0a 09 2f 2f 20 53 74 72 69 70 20 6f 75 74 20 74 68 65 20 71 75 6f 74 65 73 20 77 68 69 63 68 20 65 6e Data Ascii: / AM/PMoutput = I1WebGlobalization_ReplaceInDateTimeFormat(output, /\b%?t\b/g, ampm.substr(0, 1))[0];output = I1WebGlobalization_ReplaceInDateTimeFormat(output, /\btt\b/g, ampm)[0];// zz and zzzz ignored.// Strip out the quotes which en
2024-10-01 13:08:05 UTC	6119	IN	Data Raw: 62 47 6c 6f 62 61 6c 69 7a 61 74 69 6f 6e 5f 46 6f 72 6d 61 74 49 6e 66 6f 2e 73 68 6f 72 74 65 73 74 44 61 79 49 6e 76 61 72 69 61 6e 74 4e 61 6d 65 73 29 3b 0d 0a 09 09 09 7d 0d 0a 09 09 09 65 6c 73 65 20 69 66 20 28 2f 5e 25 3f 4d 7b 31 2c 32 7d 24 2f 2e 74 65 73 74 28 6d 61 74 63 68 29 20 3d 3d 20 74 72 75 65 29 0d 0a 09 09 09 7b 0d 0a 09 09 09 09 76 61 6c 75 65 54 79 70 65 20 3d 20 27 6d 6f 6e 74 68 27 3b 0d 0a 09 09 09 09 72 78 43 6f 6d 70 6f 6e 65 6e 74 20 3d 20 27 28 5c 5c 64 7b 31 2c 32 7d 29 27 3b 0d 0a 09 09 09 7d 0d 0a 09 09 09 65 6c 73 65 20 69 66 20 28 2f 5e 4d 4d 4d 4d 3f 24 2f 2e 74 65 73 74 28 6d 61 74 63 68 29 20 3d 3d 20 74 72 75 65 29 0d 0a 09 09 09 7b 0d 0a 09 09 09 09 76 61 6c 75 65 54 79 70 65 20 3d 20 27 6d 6f 6e 74 68 4e 61 6d 65 Data Ascii: bGlobalization_FormatInfo.shortestDayInvariantNames);}else if (/^%?M{1,2}$/.test(match) == true){valueType = 'month';rxComponent = '(\\d{1,2})';}else if (/^MMMM?$/.test(match) == true){valueType = 'monthName

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.7	49745	161.199.76.39	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:05 UTC	750	OUT	GET /tempretriever.i1handler?LiteralName=kLiqw5I4FCTaTQ7AvuoflBzCap%2bM4PSrTrpOWRrWjtD6pMGH_agwxSZSxobh0jivo8o%3d&inline=1&ClientFileName=%22logo_primary_thumb.jpg%22&mimeType=image%2fjpeg&SS=311f675f-5024-436a-aed7-33cd36104033 HTTP/1.1 Host: pbs.first-quotes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SameSite=None; backIndex=1; ASP.NET_SessionID=c2zlbe3nobgv0bcbu0kqooh5; ADRUM_BTa=R:29\|g:e235bdc3-ecb1-452d-a3b9-ea5a457addeb\|n:wintrust_15dcf551-a2c3-4a26-88f2-fdaa934ee7ae
2024-10-01 13:08:05 UTC	1030	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: image/jpeg content-disposition: inline;filename="logo_primary_thumb.jpg" Set-Cookie: ADRUM_BTa=R:0\|g:b04faa8e-b000-4058-8864-ae53b3503405\|n:wintrust_15dcf551-a2c3-4a26-88f2-fdaa934ee7ae; expires=Tue, 01-Oct-2024 13:08:34 GMT; path=/; secure; HttpOnly; SameSite=None Set-Cookie: SameSite=None; expires=Tue, 01-Oct-2024 13:08:34 GMT; path=/; secure; HttpOnly; SameSite=None X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Content-Security-Policy: default-src 'self'; connect-src ; font-src data:; frame-src ; img-src data:; media-src ; object-src ; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; Referrer-Policy: strict-origin Expect-CT: max-age=86400 X-Content-Type-Options: nosniff Permissions-Policy: camera=(), microphone=() Strict-Transport-Security: max-age=15768000; includeSubDomains; preload SERVER: Date: Tue, 01 Oct 2024 13:08:04 GMT Content-Length: 6718 Strict-Transport-Security: max-age=4294967294
2024-10-01 13:08:05 UTC	6718	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 92 00 00 00 2b 08 06 00 00 00 52 30 0e f3 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 19 d3 49 44 41 54 78 5e ed 5d 0b 94 1c 55 99 9e 49 64 5d 5d 35 3c 92 ae ee 49 c8 00 ce 74 55 77 08 8f 8d 82 88 6b 58 84 05 56 24 92 74 df ea 49 78 08 22 b2 10 40 54 04 56 97 41 05 76 61 75 05 57 97 15 22 bb 67 77 41 50 11 b2 c4 f0 70 d1 a3 86 57 78 c9 5b 79 05 92 10 1e e1 19 09 cf 30 ee f7 df fe bb fa 56 f5 ad ae 5b dd 35 73 86 c9 fd ce f9 4e cf 54 fd f7 bf b7 6e dd 7b ff fb fc ab c7 62 f3 44 de ad 54 f2 ae b8 c5 d2 d2 d2 b2 5b 72 b3 62 b1 b9 c1 f1 aa c7 e5 3d ff 4f 96 96 96 96 dd 92 9b 15 8b cd 0d d6 90 Data Ascii: PNGIHDR+R0sRGBgAMAapHYsodIDATx^]UId]]5<ItUwkXV$tIx"@TVAvauW"gwAPpWx[y0V[5sNTn{bDT[rb=O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.7	49744	161.199.76.39	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:05 UTC	740	OUT	GET /tempretriever.i1handler?LiteralName=FVKEq3IPMve6KUPUNwOkao3OhAhMyWAwlMEWZAiiZN8ifpXQ0n0pPMJbFd1qGTfECpM%3d&inline=1&ClientFileName=%22logo_thumb.jpg%22&mimeType=image%2fjpeg&SS=311f675f-5024-436a-aed7-33cd36104033 HTTP/1.1 Host: pbs.first-quotes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SameSite=None; backIndex=1; ASP.NET_SessionID=c2zlbe3nobgv0bcbu0kqooh5; ADRUM_BTa=R:29\|g:e235bdc3-ecb1-452d-a3b9-ea5a457addeb\|n:wintrust_15dcf551-a2c3-4a26-88f2-fdaa934ee7ae
2024-10-01 13:08:05 UTC	1023	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: image/jpeg content-disposition: inline;filename="logo_thumb.jpg" Set-Cookie: ADRUM_BTa=R:0\|g:3653538e-ba78-4779-b845-7d5b54184782\|n:wintrust_15dcf551-a2c3-4a26-88f2-fdaa934ee7ae; expires=Tue, 01-Oct-2024 13:08:34 GMT; path=/; secure; HttpOnly; SameSite=None Set-Cookie: SameSite=None; expires=Tue, 01-Oct-2024 13:08:34 GMT; path=/; secure; HttpOnly; SameSite=None X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Content-Security-Policy: default-src 'self'; connect-src ; font-src data:; frame-src ; img-src data:; media-src ; object-src ; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; Referrer-Policy: strict-origin Expect-CT: max-age=86400 X-Content-Type-Options: nosniff Permissions-Policy: camera=(), microphone=() Strict-Transport-Security: max-age=15768000; includeSubDomains; preload SERVER: Date: Tue, 01 Oct 2024 13:08:04 GMT Content-Length: 13356 Strict-Transport-Security: max-age=4294967294
2024-10-01 13:08:05 UTC	6928	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f1 00 00 00 3b 08 06 00 00 00 aa b8 6c db 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 33 c1 49 44 41 54 78 5e ed 7d 07 58 95 47 ba bf d9 bd bb 77 ef bd 9b 9b 64 93 6c 62 8a 31 6a 4c d4 d8 b1 f7 2e a0 14 bb a2 82 88 82 a0 a0 20 02 d2 3b 1c 7a 6f 87 72 0e bd f7 de 3b 48 39 74 a4 a9 48 51 30 1a 43 76 53 d6 98 f9 bf ef f8 9d b3 1c ce a1 98 b2 9b fb fc cf ef 79 e6 39 e7 9b 99 6f be f9 66 e6 37 ef fb ce 37 65 16 a2 bc a2 8a 64 64 66 93 db b7 6f 93 a1 a1 a1 17 6e 90 71 e3 fe 0f 0e 0e c2 ef 20 19 1c 18 20 e5 15 95 24 21 21 e1 13 9a c0 ff e7 48 49 c9 58 97 9a 96 41 92 53 d2 c8 f0 f0 b0 a0 dc 5a 5a Data Ascii: PNGIHDR;lsRGBgAMAapHYsod3IDATx^}XGwdlb1jL. ;zor;H9tHQ0CvSy9of77eddfonq $!!HIXASZZ
2024-10-01 13:08:05 UTC	6428	IN	Data Raw: 26 47 26 ea 8c e1 ee 1e 30 27 22 22 8a 96 e1 f8 77 ab ad ae 65 95 95 94 b1 62 62 62 05 ef 07 6a a2 56 75 f9 8b 78 fc 67 83 74 62 35 36 4d 5d c6 7c 5c d3 d3 b7 a9 aa aa 53 63 2e 05 b8 7f 7f d0 24 26 26 86 a5 ae 7e 89 b5 73 e7 6e ea 54 54 ce b1 30 5f 60 87 5d 66 a2 4d 89 f6 f6 f6 75 a9 a9 a9 ac eb 37 0c 59 7b f7 ee 67 81 66 c6 92 97 57 64 39 bb ba b3 c0 7e 65 4d 25 1d 8b 8a 8a 58 65 65 65 82 f7 e2 bb 88 88 68 83 fb 4f 9f fe 85 89 26 c0 e0 e0 e0 9b 20 81 58 0e 0e ce 2c 75 a8 47 43 43 63 5a 0e b4 ec 2a 5f 94 c9 e8 e8 63 11 f3 a0 81 c7 3b 1d 15 15 83 f5 2c 28 3f fc 4d 4e 4e 86 fa 8f fd af 78 68 03 34 0d c6 61 1b 4c 66 da e0 74 c0 95 43 01 41 c1 ac fe fe fe 79 8c d7 a4 18 18 18 38 83 e9 83 f9 c4 82 8e 0e da e1 76 da 16 0f 1e 54 64 e9 ea de a0 6d 09 6c 62 16 ff Data Ascii: &G&0'""webbbjVuxgtb56M]\|\Sc.$&&~snTT0_`]fMu7Y{gfWd9~eM%XeeehO& X,uGCCcZ*_c;,(?MNNxh4aLftCAy8vTdmlb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.7	49753	161.199.76.39	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:09:04 UTC	681	OUT	GET //sessionpoller.i1handler?SS=311f675f-5024-436a-aed7-33cd36104033&interval=60&time=1727791786794 HTTP/1.1 Host: pbs.first-quotes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pbs.first-quotes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: backIndex=1; ASP.NET_SessionID=c2zlbe3nobgv0bcbu0kqooh5
2024-10-01 13:09:04 UTC	939	IN	HTTP/1.1 200 OK Cache-Control: private Set-Cookie: ADRUM_BTa=R:29\|g:019fdae8-d04f-4417-87f0-67929cc40a0e\|n:wintrust_15dcf551-a2c3-4a26-88f2-fdaa934ee7ae; expires=Tue, 01-Oct-2024 13:09:33 GMT; path=/; secure; HttpOnly; SameSite=None Set-Cookie: SameSite=None; expires=Tue, 01-Oct-2024 13:09:33 GMT; path=/; secure; HttpOnly; SameSite=None X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Content-Security-Policy: default-src 'self'; connect-src ; font-src data:; frame-src ; img-src data:; media-src ; object-src ; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; Referrer-Policy: strict-origin Expect-CT: max-age=86400 X-Content-Type-Options: nosniff Permissions-Policy: camera=(), microphone=() Strict-Transport-Security: max-age=15768000; includeSubDomains; preload SERVER: Date: Tue, 01 Oct 2024 13:09:03 GMT Content-Length: 0 Strict-Transport-Security: max-age=4294967294

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.7	49754	161.199.76.39	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:09:08 UTC	622	OUT	GET //sessionpoller.i1handler?SS=311f675f-5024-436a-aed7-33cd36104033&interval=60&time=1727791786794 HTTP/1.1 Host: pbs.first-quotes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: backIndex=1; ASP.NET_SessionID=c2zlbe3nobgv0bcbu0kqooh5; ADRUM_BTa=R:29\|g:019fdae8-d04f-4417-87f0-67929cc40a0e\|n:wintrust_15dcf551-a2c3-4a26-88f2-fdaa934ee7ae; SameSite=None
2024-10-01 13:09:08 UTC	938	IN	HTTP/1.1 200 OK Cache-Control: private Set-Cookie: ADRUM_BTa=R:0\|g:4c2ac59a-6d64-44b4-98bb-a034c9615af1\|n:wintrust_15dcf551-a2c3-4a26-88f2-fdaa934ee7ae; expires=Tue, 01-Oct-2024 13:09:37 GMT; path=/; secure; HttpOnly; SameSite=None Set-Cookie: SameSite=None; expires=Tue, 01-Oct-2024 13:09:37 GMT; path=/; secure; HttpOnly; SameSite=None X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Content-Security-Policy: default-src 'self'; connect-src ; font-src data:; frame-src ; img-src data:; media-src ; object-src ; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; Referrer-Policy: strict-origin Expect-CT: max-age=86400 X-Content-Type-Options: nosniff Permissions-Policy: camera=(), microphone=() Strict-Transport-Security: max-age=15768000; includeSubDomains; preload SERVER: Date: Tue, 01 Oct 2024 13:09:07 GMT Content-Length: 0 Strict-Transport-Security: max-age=4294967294

Target ID:	0
Start time:	09:07:48
Start date:	01/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	4
Start time:	09:07:53
Start date:	01/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2212 --field-trial-handle=2020,i,10643037783213046967,8917316618196899812,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	9
Start time:	09:07:58
Start date:	01/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.firstecomplete.com"
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.firstecomplete.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Secured/EcompletePaymentOption/EcompletePaymentLogin.aspx HTTP/1.1Host: pbs.first-quotes.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Secured/EcompletePaymentOption/styles/EcompleteStyle.css?v=1 HTTP/1.1Host: pbs.first-quotes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pbs.first-quotes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ADRUM_BTa=R:0\|g:f79059ed-1889-46c1-af20-a8fb732c2dcb\|n:wintrust_15dcf551-a2c3-4a26-88f2-fdaa934ee7ae; SameSite=None; ADRUM_BT1=R:0\|i:2648624; backIndex=0
Source: global traffic	HTTP traffic detected: GET /JavaScript/MainView.js?v=1 HTTP/1.1Host: pbs.first-quotes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pbs.first-quotes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ADRUM_BTa=R:0\|g:f79059ed-1889-46c1-af20-a8fb732c2dcb\|n:wintrust_15dcf551-a2c3-4a26-88f2-fdaa934ee7ae; SameSite=None; ADRUM_BT1=R:0\|i:2648624; backIndex=0
Source: global traffic	HTTP traffic detected: GET /JavaScript/jqueryConfirm.js HTTP/1.1Host: pbs.first-quotes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pbs.first-quotes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ADRUM_BTa=R:0\|g:f79059ed-1889-46c1-af20-a8fb732c2dcb\|n:wintrust_15dcf551-a2c3-4a26-88f2-fdaa934ee7ae; SameSite=None; ADRUM_BT1=R:0\|i:2648624; backIndex=0
Source: global traffic	HTTP traffic detected: GET /WebResource.axd?d=yaUIRZP2BxuchGMRpHK-PW27W1wPkpaEWf4v2UdnfBq08EBqGeF9zhziqBFObI894wL7VIAZ2hqkK5ovbH_WxzOKEtH1Y_w_3P3aEKCjubexRXpGhOCoB_uM-bLQ6irt0&t=638617536140000000 HTTP/1.1Host: pbs.first-quotes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pbs.first-quotes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ADRUM_BTa=R:0\|g:f79059ed-1889-46c1-af20-a8fb732c2dcb\|n:wintrust_15dcf551-a2c3-4a26-88f2-fdaa934ee7ae; SameSite=None; ADRUM_BT1=R:0\|i:2648624; backIndex=0
Source: global traffic	HTTP traffic detected: GET /WebResource.axd?d=635O8dWR2vwElIyx754oL7z_LOmgDHd4OuEuKB20_Av1-l21ZukpdZhm8e67dSgZ8_S0OApUzE78osQTyUXsmt1Z7gSEIkjlvnXzOj3ihqLjHiSu0UT2jpQ5QZ16Jdhr0&t=638617536140000000 HTTP/1.1Host: pbs.first-quotes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pbs.first-quotes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ADRUM_BTa=R:0\|g:f79059ed-1889-46c1-af20-a8fb732c2dcb\|n:wintrust_15dcf551-a2c3-4a26-88f2-fdaa934ee7ae; SameSite=None; ADRUM_BT1=R:0\|i:2648624; backIndex=0
Source: global traffic	HTTP traffic detected: GET /WebResource.axd?d=ylVZOvouK_BkjsCX7QFfPJAJMpaYKcS99qSktRmlKarFwE3Pkv3Y99K6p-FsNZNh1F-RskGsm9kGWkSwi4IuOf01LPxXRyHNxsyLOEv9Hyng1H93GWLaTg2&t=638617536140000000 HTTP/1.1Host: pbs.first-quotes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pbs.first-quotes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ADRUM_BTa=R:0\|g:f79059ed-1889-46c1-af20-a8fb732c2dcb\|n:wintrust_15dcf551-a2c3-4a26-88f2-fdaa934ee7ae; SameSite=None; ADRUM_BT1=R:0\|i:2648624; backIndex=0
Source: global traffic	HTTP traffic detected: GET /ajax/libs/bootstrap/5.1.3/css/bootstrap.min.css HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://pbs.first-quotes.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://pbs.first-quotes.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://pbs.first-quotes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/bootstrap/5.1.3/js/bootstrap.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://pbs.first-quotes.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /WebResource.axd?d=360wl-vvFvG9u7MHYpZnn88VVBcg-v0fizLjSuxbKS8PLQrfQzo3pawTgvQR_1z-nTNIe9XSjTdz-M8r17k0XKyAYVWSn4SZL7x0w4ghBGU1dnCq-0L9Zn1WrMu_3PMufrARYQnx2CI1&t=638617536140000000 HTTP/1.1Host: pbs.first-quotes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pbs.first-quotes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ADRUM_BTa=R:0\|g:f79059ed-1889-46c1-af20-a8fb732c2dcb\|n:wintrust_15dcf551-a2c3-4a26-88f2-fdaa934ee7ae; SameSite=None; ADRUM_BT1=R:0\|i:2648624; backIndex=0
Source: global traffic	HTTP traffic detected: GET /WebResource.axd?d=4Doe9-T2x8bzL-X_T_9dOCpxMQsSu2AA8S6eSXTsiANjo_FH87PF5zy8wAdzn2Fk_NBiGdKnwOa64Nzcikoe5Eqb49Xx-M_vMZ8yREHoXbL2CpSCp8gmBE2hfM95agPiV3JPN6xtwE0yvhTFDZ8zHWquXrSMdJfW0&t=638617536140000000 HTTP/1.1Host: pbs.first-quotes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pbs.first-quotes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ADRUM_BTa=R:0\|g:f79059ed-1889-46c1-af20-a8fb732c2dcb\|n:wintrust_15dcf551-a2c3-4a26-88f2-fdaa934ee7ae; SameSite=None; ADRUM_BT1=R:0\|i:2648624; backIndex=0
Source: global traffic	HTTP traffic detected: GET /tempretriever.i1handler?LiteralName=FVKEq3IPMve6KUPUNwOkao3OhAhMyWAwlMEWZAiiZN8ifpXQ0n0pPMJbFd1qGTfECpM%3d&inline=1&ClientFileName=%22logo_thumb.jpg%22&mimeType=image%2fjpeg&SS=311f675f-5024-436a-aed7-33cd36104033 HTTP/1.1Host: pbs.first-quotes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pbs.first-quotes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ADRUM_BTa=R:0\|g:f79059ed-1889-46c1-af20-a8fb732c2dcb\|n:wintrust_15dcf551-a2c3-4a26-88f2-fdaa934ee7ae; SameSite=None; ADRUM_BT1=R:0\|i:2648624; backIndex=0
Source: global traffic	HTTP traffic detected: GET /tempretriever.i1handler?LiteralName=kLiqw5I4FCTaTQ7AvuoflBzCap%2bM4PSrTrpOWRrWjtD6pMGH_agwxSZSxobh0jivo8o%3d&inline=1&ClientFileName=%22logo_primary_thumb.jpg%22&mimeType=image%2fjpeg&SS=311f675f-5024-436a-aed7-33cd36104033 HTTP/1.1Host: pbs.first-quotes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pbs.first-quotes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ADRUM_BTa=R:0\|g:f79059ed-1889-46c1-af20-a8fb732c2dcb\|n:wintrust_15dcf551-a2c3-4a26-88f2-fdaa934ee7ae; SameSite=None; ADRUM_BT1=R:0\|i:2648624; backIndex=0
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/bootstrap/5.1.3/js/bootstrap.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /WebResource.axd?d=ylVZOvouK_BkjsCX7QFfPJAJMpaYKcS99qSktRmlKarFwE3Pkv3Y99K6p-FsNZNh1F-RskGsm9kGWkSwi4IuOf01LPxXRyHNxsyLOEv9Hyng1H93GWLaTg2&t=638617536140000000 HTTP/1.1Host: pbs.first-quotes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ADRUM_BTa=R:0\|g:f79059ed-1889-46c1-af20-a8fb732c2dcb\|n:wintrust_15dcf551-a2c3-4a26-88f2-fdaa934ee7ae; SameSite=None; ADRUM_BT1=R:0\|i:2648624; backIndex=0
Source: global traffic	HTTP traffic detected: GET /JavaScript/jqueryConfirm.js HTTP/1.1Host: pbs.first-quotes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ADRUM_BTa=R:0\|g:f79059ed-1889-46c1-af20-a8fb732c2dcb\|n:wintrust_15dcf551-a2c3-4a26-88f2-fdaa934ee7ae; SameSite=None; ADRUM_BT1=R:0\|i:2648624; backIndex=0
Source: global traffic	HTTP traffic detected: GET /WebResource.axd?d=yaUIRZP2BxuchGMRpHK-PW27W1wPkpaEWf4v2UdnfBq08EBqGeF9zhziqBFObI894wL7VIAZ2hqkK5ovbH_WxzOKEtH1Y_w_3P3aEKCjubexRXpGhOCoB_uM-bLQ6irt0&t=638617536140000000 HTTP/1.1Host: pbs.first-quotes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ADRUM_BTa=R:0\|g:f79059ed-1889-46c1-af20-a8fb732c2dcb\|n:wintrust_15dcf551-a2c3-4a26-88f2-fdaa934ee7ae; SameSite=None; ADRUM_BT1=R:0\|i:2648624; backIndex=0
Source: global traffic	HTTP traffic detected: GET /WebResource.axd?d=635O8dWR2vwElIyx754oL7z_LOmgDHd4OuEuKB20_Av1-l21ZukpdZhm8e67dSgZ8_S0OApUzE78osQTyUXsmt1Z7gSEIkjlvnXzOj3ihqLjHiSu0UT2jpQ5QZ16Jdhr0&t=638617536140000000 HTTP/1.1Host: pbs.first-quotes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ADRUM_BTa=R:0\|g:f79059ed-1889-46c1-af20-a8fb732c2dcb\|n:wintrust_15dcf551-a2c3-4a26-88f2-fdaa934ee7ae; SameSite=None; ADRUM_BT1=R:0\|i:2648624; backIndex=0
Source: global traffic	HTTP traffic detected: GET /JavaScript/MainView.js?v=1 HTTP/1.1Host: pbs.first-quotes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ADRUM_BTa=R:0\|g:f79059ed-1889-46c1-af20-a8fb732c2dcb\|n:wintrust_15dcf551-a2c3-4a26-88f2-fdaa934ee7ae; SameSite=None; ADRUM_BT1=R:0\|i:2648624; backIndex=0
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /WebResource.axd?d=360wl-vvFvG9u7MHYpZnn88VVBcg-v0fizLjSuxbKS8PLQrfQzo3pawTgvQR_1z-nTNIe9XSjTdz-M8r17k0XKyAYVWSn4SZL7x0w4ghBGU1dnCq-0L9Zn1WrMu_3PMufrARYQnx2CI1&t=638617536140000000 HTTP/1.1Host: pbs.first-quotes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SameSite=None; backIndex=1; ASP.NET_SessionID=c2zlbe3nobgv0bcbu0kqooh5; ADRUM_BTa=R:29\|g:e235bdc3-ecb1-452d-a3b9-ea5a457addeb\|n:wintrust_15dcf551-a2c3-4a26-88f2-fdaa934ee7ae
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: pbs.first-quotes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pbs.first-quotes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SameSite=None; backIndex=1; ASP.NET_SessionID=c2zlbe3nobgv0bcbu0kqooh5; ADRUM_BTa=R:29\|g:e235bdc3-ecb1-452d-a3b9-ea5a457addeb\|n:wintrust_15dcf551-a2c3-4a26-88f2-fdaa934ee7ae
Source: global traffic	HTTP traffic detected: GET /WebResource.axd?d=4Doe9-T2x8bzL-X_T_9dOCpxMQsSu2AA8S6eSXTsiANjo_FH87PF5zy8wAdzn2Fk_NBiGdKnwOa64Nzcikoe5Eqb49Xx-M_vMZ8yREHoXbL2CpSCp8gmBE2hfM95agPiV3JPN6xtwE0yvhTFDZ8zHWquXrSMdJfW0&t=638617536140000000 HTTP/1.1Host: pbs.first-quotes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SameSite=None; backIndex=1; ASP.NET_SessionID=c2zlbe3nobgv0bcbu0kqooh5; ADRUM_BTa=R:29\|g:e235bdc3-ecb1-452d-a3b9-ea5a457addeb\|n:wintrust_15dcf551-a2c3-4a26-88f2-fdaa934ee7ae
Source: global traffic	HTTP traffic detected: GET /tempretriever.i1handler?LiteralName=kLiqw5I4FCTaTQ7AvuoflBzCap%2bM4PSrTrpOWRrWjtD6pMGH_agwxSZSxobh0jivo8o%3d&inline=1&ClientFileName=%22logo_primary_thumb.jpg%22&mimeType=image%2fjpeg&SS=311f675f-5024-436a-aed7-33cd36104033 HTTP/1.1Host: pbs.first-quotes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SameSite=None; backIndex=1; ASP.NET_SessionID=c2zlbe3nobgv0bcbu0kqooh5; ADRUM_BTa=R:29\|g:e235bdc3-ecb1-452d-a3b9-ea5a457addeb\|n:wintrust_15dcf551-a2c3-4a26-88f2-fdaa934ee7ae
Source: global traffic	HTTP traffic detected: GET /tempretriever.i1handler?LiteralName=FVKEq3IPMve6KUPUNwOkao3OhAhMyWAwlMEWZAiiZN8ifpXQ0n0pPMJbFd1qGTfECpM%3d&inline=1&ClientFileName=%22logo_thumb.jpg%22&mimeType=image%2fjpeg&SS=311f675f-5024-436a-aed7-33cd36104033 HTTP/1.1Host: pbs.first-quotes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SameSite=None; backIndex=1; ASP.NET_SessionID=c2zlbe3nobgv0bcbu0kqooh5; ADRUM_BTa=R:29\|g:e235bdc3-ecb1-452d-a3b9-ea5a457addeb\|n:wintrust_15dcf551-a2c3-4a26-88f2-fdaa934ee7ae
Source: global traffic	HTTP traffic detected: GET //sessionpoller.i1handler?SS=311f675f-5024-436a-aed7-33cd36104033&interval=60&time=1727791786794 HTTP/1.1Host: pbs.first-quotes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://pbs.first-quotes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: backIndex=1; ASP.NET_SessionID=c2zlbe3nobgv0bcbu0kqooh5
Source: global traffic	HTTP traffic detected: GET //sessionpoller.i1handler?SS=311f675f-5024-436a-aed7-33cd36104033&interval=60&time=1727791786794 HTTP/1.1Host: pbs.first-quotes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: backIndex=1; ASP.NET_SessionID=c2zlbe3nobgv0bcbu0kqooh5; ADRUM_BTa=R:29\|g:019fdae8-d04f-4417-87f0-67929cc40a0e\|n:wintrust_15dcf551-a2c3-4a26-88f2-fdaa934ee7ae; SameSite=None

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.firstecomplete.com
Source: global traffic	DNS traffic detected: DNS query: pbs.first-quotes.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 13.95.65.251
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://www.firstecomplete.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Static File Info

Network Behavior

Windows Analysis Report
https://www.firstecomplete.com