Source: unknown |
HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.17:49713 version: TLS 1.2 |
Source: unknown |
HTTPS traffic detected: 20.190.159.71:443 -> 192.168.2.17:49718 version: TLS 1.2 |
Source: unknown |
HTTPS traffic detected: 13.107.5.88:443 -> 192.168.2.17:49719 version: TLS 1.2 |
Source: unknown |
HTTPS traffic detected: 2.23.209.140:443 -> 192.168.2.17:49723 version: TLS 1.2 |
Source: unknown |
HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.17:49724 version: TLS 1.2 |
Source: C:\Program Files\Google\Chrome\Application\chrome.exe |
HTTP traffic: Redirect from: us-west-2.protection.sophos.com to https://cmp.cws.xfinity.com/utility/tracking/tracking/clickedurl?targetid=fe3dd171-a075-4c3c-aa95-79a5dfa82ca8_mip_132&serverid=c3po&templateid=7029e307-9304-45d9-bcd1-4fe698e7e445&targeturl=https://business.comcast.com/account/bill?cid=emc-tr-billready-viewstatement |
Source: global traffic |
HTTP traffic detected: GET /ab HTTP/1.1Host: evoke-windowsservices-tas.msedge.netCache-Control: no-store, no-cacheX-PHOTOS-CALLERID: 9NMPJ99VJBWVX-EVOKE-RING: X-WINNEXT-RING: PublicX-WINNEXT-TELEMETRYLEVEL: BasicX-WINNEXT-OSVERSION: 10.0.19045.0X-WINNEXT-APPVERSION: 1.23082.131.0X-WINNEXT-PLATFORM: DesktopX-WINNEXT-CANTAILOR: FalseX-MSEDGE-CLIENTID: {c1afbad7-f7da-40f2-92f9-8846a91d69bd}X-WINNEXT-PUBDEVICEID: dbfen2nYS7HW6ON4OdOknKxxv2CCI5LJBTojzDztjwI=If-None-Match: 2056388360_-1434155563Accept-Encoding: gzip, deflate, br |
Source: unknown |
TCP traffic detected without corresponding DNS query: 20.189.173.13 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 204.79.197.203 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 192.229.211.108 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 192.229.211.108 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 204.79.197.200 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 204.79.197.200 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 204.79.197.200 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 20.189.173.13 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 192.229.211.108 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 192.229.211.108 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 192.229.211.108 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 204.79.197.203 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 192.229.211.108 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 20.189.173.13 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 52.149.20.212 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 52.149.20.212 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 52.149.20.212 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 52.149.20.212 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 52.149.20.212 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 52.149.20.212 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 52.149.20.212 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 52.149.20.212 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 52.149.20.212 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 52.149.20.212 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 52.149.20.212 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 52.149.20.212 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 52.149.20.212 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 52.149.20.212 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 192.229.211.108 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 20.190.159.71 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 20.190.159.71 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 20.190.159.71 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 13.107.5.88 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 13.107.5.88 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 13.107.5.88 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 204.79.197.200 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 204.79.197.200 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 204.79.197.200 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 204.79.197.200 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 204.79.197.200 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 204.79.197.200 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 204.79.197.200 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 204.79.197.200 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 204.79.197.200 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 20.190.159.71 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 13.107.5.88 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 13.107.5.88 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 20.190.159.71 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 20.190.159.71 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 20.190.159.71 |
Source: global traffic |
HTTP traffic detected: GET /?d=xfinity.com&u=aHR0cHM6Ly9jbXAuY3dzLnhmaW5pdHkuY29tL3V0aWxpdHkvdHJhY2tpbmcvdHJhY2tpbmcvQ2xpY2tlZFVybD90YXJnZXRJZD1mZTNkZDE3MS1hMDc1LTRjM2MtYWE5NS03OWE1ZGZhODJjYThfbWlwXzEzMiZzZXJ2ZXJJZD1jM3BvJnRlbXBsYXRlSWQ9NzAyOWUzMDctOTMwNC00NWQ5LWJjZDEtNGZlNjk4ZTdlNDQ1JnRhcmdldFVybD1odHRwczovL2J1c2luZXNzLmNvbWNhc3QuY29tL2FjY291bnQvYmlsbD9DSUQ9RU1DLVRSLUJpbGxSZWFkeS1WaWV3U3RhdGVtZW50&i=NTljNTk1ZmQ4Zjg2MGMxNzM4NDBhZGNi&t=NmV1QzV1bkZJbUtHbkJnVjFOenp2L2NyenBsK0NuV3BCbnBNa0hVMGpTYz0=&h=41698bb3f89e4e30953996822e5fff5b&s=AVNPUEhUT0NFTkNSWVBUSVYvIpZHvF0h0chKAgPasAV-CzwOwWHUeJDSnsmZZPBRZ5hzqPY8-K6m2owVEfzReGk HTTP/1.1Host: us-west-2.protection.sophos.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
Source: global traffic |
HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=WvuyYXoTGyMBNab&MD=YX53k9Rp HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com |
Source: global traffic |
HTTP traffic detected: GET /ab HTTP/1.1Host: evoke-windowsservices-tas.msedge.netCache-Control: no-store, no-cacheX-PHOTOS-CALLERID: 9NMPJ99VJBWVX-EVOKE-RING: X-WINNEXT-RING: PublicX-WINNEXT-TELEMETRYLEVEL: BasicX-WINNEXT-OSVERSION: 10.0.19045.0X-WINNEXT-APPVERSION: 1.23082.131.0X-WINNEXT-PLATFORM: DesktopX-WINNEXT-CANTAILOR: FalseX-MSEDGE-CLIENTID: {c1afbad7-f7da-40f2-92f9-8846a91d69bd}X-WINNEXT-PUBDEVICEID: dbfen2nYS7HW6ON4OdOknKxxv2CCI5LJBTojzDztjwI=If-None-Match: 2056388360_-1434155563Accept-Encoding: gzip, deflate, br |
Source: global traffic |
HTTP traffic detected: GET /client/config?cc=CH&setlang=en-CH HTTP/1.1X-Search-CortanaAvailableCapabilities: NoneX-Search-SafeSearch: ModerateAccept-Encoding: gzip, deflateX-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A}X-UserAgeClass: UnknownX-BM-Market: CHX-BM-DateFormat: dd/MM/yyyyX-Device-OSSKU: 48X-BM-DTZ: -240X-DeviceID: 01000A41090080B6X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66EX-Search-TimeZone: Bias=300; DaylightBias=-60; TimeZoneKeyName=Eastern Standard TimeX-BM-Theme: 000000;0078d7X-Search-RPSToken: t%3DEwDoAkR8BAAUcvamItSE/vUHpyZRp3BeyOJPQDsAAV4gGf8%2Ba/MbouK%2B12RtkYtaSRhUIXArQcxr3N7KeRh5%2BqwLs%2BtD5zCxZjIAXsqkwvrNk1MeLsxO7ABiVDsx4z99yHdB4KGA9hzICNzgZiEAjJ6kKhTGtQ7mOc%2B3kWZpY5dz/1tkBNPaZMEGYlwcC2ZOG/R21n59xCebzhisneiG7bAy4p5UtoiHkYwByQl1Qugx9bHIAcJuv4P7a4zMyTVJsABfPJJkT/4hHiO4SyawVvzIh4MpFdfti7nnJzg5BChQJtOdoLyJ2djRCP5JUur9t5LzX8jDyatb0CXghePYRa/coi1ybSwYv04ftXRA5SXfM/vGksUFOeMXcG7L17MQZgAAELI3iXRrzbKQgVvfDwZCA26wAUNQO1vAFIECeUG6cn4Sy8BgmHvRrjsOaJoBm%2B/BsuPR0uTTic2lJsm8FxZv7U3L34VrwWrMQQsMoYR2KgBcSBaNRmqUVgYwZOEuomiRF%2B2%2B1p2bz8TCx7QJ/pBRv/gzY4OX1FWtoGqXkBoBIxmdXH8qVRyAzyC2ov5YieykpyxlPDjP91HoE9cI2BrmygMXl%2BVQlN/KkLOq%2B9a/njgCrepoh%2B8QATneFuLQLvwYx4L4%2BBF0Pj2jOU4IwllS6Me2S6xuw0jb81EeaaE%2BazVQGHGzDA8sYbydNB7JdDi7679iWKcebiUrd8A3xacvlNGHxNSyfNcR5N109El//yamJY2uK2DNqaoa1ij2N956WCxseSAL2haGHO1wicz1xRutQ5CzxoNjC5mGK76glNa7eibAjaPDNKrGxFlSl0qCW5cC2pyq5YkgfCpN7aw8YirLKjdjvG0jpsdJPKttKEZ6Ke1I0dLED3CPGvFauQ1p%2Bwr4g6Jm/NQpVrfnCwUFr9PlycRLWydmOHVjJW%2Bk6%2BSoNP4OVVl2vf5OITnvyw%2BpXUIMT6aozc93Pu9K40vSSJ8S%2BtoB%26p%3DX-Agent-DeviceId: 01000A41090080B6X-BM-CBT: 1729605999User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045X-Device-isOptin: falseAccept-language: en-GB, en, en-USX-Device-Touch: falseX-Device-ClientSession: FB539E87920841C5B64858054E002551X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIHost: www.bing.comConnection: Keep-AliveCookie: SRCHUID=V=2&GUID=C4EAB6C130004333A34B5668AE4E4D10&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=S |