Edit tour

Windows Analysis Report
https://secure.login.gov/sign_up/email/confirm?_request_id=3c0afc61-ca10-4f0c-9685-deebefbd5009&confirmation_token=CpW2XvapjXvtiszQfDxe&c=E,1,czKC5vkp_9sR2jC4fsD8lsKfESoIyAIMQRGqkY2Bbcx7yPVzXeHCLLRKd9edzUpkrkCL5N3DxQ5GKyw6w6jtCBdegjvNRkaLnm9khZ_CZsjb1RkOyAgTkuF3&typo=1

Overview

General Information

Sample URL:	https://secure.login.gov/sign_up/email/confirm?_request_id=3c0afc61-ca10-4f0c-9685-deebefbd5009&confirmation_token=CpW2XvapjXvtiszQfDxe&c=E,1,czKC5vkp_9sR2jC4fsD8lsKfESoIyAIMQRGqkY2Bbcx7yPVzXeHCLLRKd9
Analysis ID:	1562556
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

HTML title does not match URL

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5400 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 6592 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2176 --field-trial-handle=1568,i,9142163365608271667,12353336580807457794,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 2552 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://secure.login.gov/sign_up/email/confirm?_request_id=3c0afc61-ca10-4f0c-9685-deebefbd5009&confirmation_token=CpW2XvapjXvtiszQfDxe&c=E,1,czKC5vkp_9sR2jC4fsD8lsKfESoIyAIMQRGqkY2Bbcx7yPVzXeHCLLRKd9edzUpkrkCL5N3DxQ5GKyw6w6jtCBdegjvNRkaLnm9khZ_CZsjb1RkOyAgTkuF3&typo=1" MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxe	HTTP Parser: Title: Choose a password \| Login.gov does not match URL
Source: https://secure.login.gov/sign_up/cancel	HTTP Parser: Title: Are you sure you want to cancel? \| Login.gov does not match URL

Source: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxe

HTTP Parser: <input type="password" .../> found

Source: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxe	HTTP Parser: No <meta name="author".. found
Source: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxe	HTTP Parser: No <meta name="author".. found
Source: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxe	HTTP Parser: No <meta name="author".. found
Source: https://secure.login.gov/sign_up/cancel	HTTP Parser: No <meta name="author".. found

Source: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxe	HTTP Parser: No <meta name="copyright".. found
Source: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxe	HTTP Parser: No <meta name="copyright".. found
Source: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxe	HTTP Parser: No <meta name="copyright".. found
Source: https://secure.login.gov/sign_up/cancel	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 2.20.204.113:443 -> 192.168.2.11:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.20.204.113:443 -> 192.168.2.11:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.11:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.11:49786 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.3
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63

Source: global traffic	HTTP traffic detected: GET /sign_up/email/confirm?_request_id=3c0afc61-ca10-4f0c-9685-deebefbd5009&confirmation_token=CpW2XvapjXvtiszQfDxe&c=E,1,czKC5vkp_9sR2jC4fsD8lsKfESoIyAIMQRGqkY2Bbcx7yPVzXeHCLLRKd9edzUpkrkCL5N3DxQ5GKyw6w6jtCBdegjvNRkaLnm9khZ_CZsjb1RkOyAgTkuF3&typo=1 HTTP/1.1Host: secure.login.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxe HTTP/1.1Host: secure.login.govConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1
Source: global traffic	HTTP traffic detected: GET /assets/application-1d4fbf32.css HTTP/1.1Host: secure.login.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
Source: global traffic	HTTP traffic detected: GET /assets/password_confirmation_component-7db5a738.css HTTP/1.1Host: secure.login.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
Source: global traffic	HTTP traffic detected: GET /assets/password_strength_component-bbafaadb.css HTTP/1.1Host: secure.login.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
Source: global traffic	HTTP traffic detected: GET /assets/icon_component-2d022cd4.css HTTP/1.1Host: secure.login.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
Source: global traffic	HTTP traffic detected: GET /assets/utilities-b943a2ae.css HTTP/1.1Host: secure.login.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
Source: global traffic	HTTP traffic detected: GET /assets/init-6ad4cfee.js HTTP/1.1Host: secure.login.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /assets/public-sans/PublicSans-Bold-c73ef2d4.woff2 HTTP/1.1Host: secure.login.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://secure.login.govsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
Source: global traffic	HTTP traffic detected: GET /assets/public-sans/PublicSans-Regular-5f371c89.woff2 HTTP/1.1Host: secure.login.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://secure.login.govsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
Source: global traffic	HTTP traffic detected: GET /assets/init-6ad4cfee.js HTTP/1.1Host: secure.login.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
Source: global traffic	HTTP traffic detected: GET /packs/password_confirmation_component-1a3edc7d.digested-4a05fc12.en.js HTTP/1.1Host: secure.login.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
Source: global traffic	HTTP traffic detected: GET /packs/password_confirmation_component-1a3edc7d.digested.js HTTP/1.1Host: secure.login.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
Source: global traffic	HTTP traffic detected: GET /assets/sp-logos/treasury_caia_logo-8faaee80.png HTTP/1.1Host: secure.login.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
Source: global traffic	HTTP traffic detected: GET /assets/plus-64f58c0a.svg HTTP/1.1Host: secure.login.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure.login.gov/assets/application-1d4fbf32.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
Source: global traffic	HTTP traffic detected: GET /assets/logo-a6f6c558.svg HTTP/1.1Host: secure.login.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
Source: global traffic	HTTP traffic detected: GET /assets/usa-icons/check_circle-9998d611.svg HTTP/1.1Host: secure.login.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://secure.login.govsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: imageReferer: https://secure.login.gov/assets/application-1d4fbf32.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
Source: global traffic	HTTP traffic detected: GET /packs/password_confirmation_component-1a3edc7d.digested-4a05fc12.en.js HTTP/1.1Host: secure.login.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
Source: global traffic	HTTP traffic detected: GET /assets/usa-icons/expand_more-d32ec934.svg HTTP/1.1Host: secure.login.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://secure.login.govsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: imageReferer: https://secure.login.gov/assets/application-1d4fbf32.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
Source: global traffic	HTTP traffic detected: GET /packs/password_confirmation_component-1a3edc7d.digested.js HTTP/1.1Host: secure.login.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
Source: global traffic	HTTP traffic detected: GET /assets/us_flag-9715e180.svg HTTP/1.1Host: secure.login.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
Source: global traffic	HTTP traffic detected: GET /packs/validated_field_component-2b54ffd6.digested.js HTTP/1.1Host: secure.login.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
Source: global traffic	HTTP traffic detected: GET /assets/sp-logos/treasury_caia_logo-8faaee80.png HTTP/1.1Host: secure.login.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
Source: global traffic	HTTP traffic detected: GET /assets/plus-64f58c0a.svg HTTP/1.1Host: secure.login.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
Source: global traffic	HTTP traffic detected: GET /assets/logo-a6f6c558.svg HTTP/1.1Host: secure.login.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
Source: global traffic	HTTP traffic detected: GET /assets/usa-icons/check_circle-9998d611.svg HTTP/1.1Host: secure.login.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
Source: global traffic	HTTP traffic detected: GET /assets/us_flag-9715e180.svg HTTP/1.1Host: secure.login.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
Source: global traffic	HTTP traffic detected: GET /packs/password_strength_component-5dc65abd.digested.js HTTP/1.1Host: secure.login.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
Source: global traffic	HTTP traffic detected: GET /packs/password_strength_component-5dc65abd.digested-d55a7dd4.en.js HTTP/1.1Host: secure.login.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
Source: global traffic	HTTP traffic detected: GET /packs/submit_button_component-f328105c.digested.js HTTP/1.1Host: secure.login.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
Source: global traffic	HTTP traffic detected: GET /packs/session-expire-session-33c940e8.digested.js HTTP/1.1Host: secure.login.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
Source: global traffic	HTTP traffic detected: GET /packs/application-3688b8ee.digested.js HTTP/1.1Host: secure.login.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
Source: global traffic	HTTP traffic detected: GET /packs/validated_field_component-2b54ffd6.digested.js HTTP/1.1Host: secure.login.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
Source: global traffic	HTTP traffic detected: GET /assets/usa-icons/expand_more-d32ec934.svg HTTP/1.1Host: secure.login.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
Source: global traffic	HTTP traffic detected: GET /assets/icon-dot-gov-c85c77ab.svg HTTP/1.1Host: secure.login.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=YELw5Cd6B75V8mM&MD=YkgmYcKl HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /assets/icon-https-4fe6ff7d.svg HTTP/1.1Host: secure.login.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
Source: global traffic	HTTP traffic detected: GET /packs/submit_button_component-f328105c.digested.js HTTP/1.1Host: secure.login.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
Source: global traffic	HTTP traffic detected: GET /packs/session-expire-session-33c940e8.digested.js HTTP/1.1Host: secure.login.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
Source: global traffic	HTTP traffic detected: GET /assets/lock-c7ffa794.svg HTTP/1.1Host: secure.login.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
Source: global traffic	HTTP traffic detected: GET /assets/sp-logos/square-gsa-2e9100eb.svg HTTP/1.1Host: secure.login.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
Source: global traffic	HTTP traffic detected: GET /packs/application-3688b8ee.digested.js HTTP/1.1Host: secure.login.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
Source: global traffic	HTTP traffic detected: GET /assets/icon-dot-gov-c85c77ab.svg HTTP/1.1Host: secure.login.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
Source: global traffic	HTTP traffic detected: GET /packs/track-errors-e9df8e72.digested.js HTTP/1.1Host: secure.login.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
Source: global traffic	HTTP traffic detected: GET /assets/usa-icons/launch-d24c854a.svg HTTP/1.1Host: secure.login.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://secure.login.govsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: imageReferer: https://secure.login.gov/assets/application-1d4fbf32.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
Source: global traffic	HTTP traffic detected: GET /packs/password_strength_component-5dc65abd.digested-d55a7dd4.en.js HTTP/1.1Host: secure.login.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
Source: global traffic	HTTP traffic detected: GET /assets/usa-icons/language-933750f3.svg HTTP/1.1Host: secure.login.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://secure.login.govsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: imageReferer: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
Source: global traffic	HTTP traffic detected: GET /packs/password_strength_component-5dc65abd.digested.js HTTP/1.1Host: secure.login.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
Source: global traffic	HTTP traffic detected: GET /assets/sp-logos/square-gsa-2e9100eb.svg HTTP/1.1Host: secure.login.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
Source: global traffic	HTTP traffic detected: GET /assets/print-dbe18894.css HTTP/1.1Host: secure.login.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
Source: global traffic	HTTP traffic detected: GET /packs/track-errors-e9df8e72.digested.js HTTP/1.1Host: secure.login.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
Source: global traffic	HTTP traffic detected: GET /assets/usa-icons/launch-d24c854a.svg HTTP/1.1Host: secure.login.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
Source: global traffic	HTTP traffic detected: GET /assets/icon-https-4fe6ff7d.svg HTTP/1.1Host: secure.login.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
Source: global traffic	HTTP traffic detected: GET /assets/lock-c7ffa794.svg HTTP/1.1Host: secure.login.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
Source: global traffic	HTTP traffic detected: GET /sign_up/cancel HTTP/1.1Host: secure.login.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
Source: global traffic	HTTP traffic detected: GET /assets/usa-icons/language-933750f3.svg HTTP/1.1Host: secure.login.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
Source: global traffic	HTTP traffic detected: GET /assets/status/warning-88ffeb95.svg HTTP/1.1Host: secure.login.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure.login.gov/sign_up/cancelAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
Source: global traffic	HTTP traffic detected: GET /assets/status/warning-88ffeb95.svg HTTP/1.1Host: secure.login.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
Source: global traffic	HTTP traffic detected: GET /assets/favicons/favicon-16-b68bb09d.png HTTP/1.1Host: secure.login.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure.login.gov/sign_up/cancelAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
Source: global traffic	HTTP traffic detected: GET /assets/favicons/favicon-16-b68bb09d.png HTTP/1.1Host: secure.login.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
Source: global traffic	HTTP traffic detected: GET /sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxe HTTP/1.1Host: secure.login.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://secure.login.gov/sign_up/cancelAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
Source: global traffic	HTTP traffic detected: GET /assets/public-sans/PublicSans-Italic-467fd4ae.woff2 HTTP/1.1Host: secure.login.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://secure.login.govsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://secure.login.gov/assets/application-1d4fbf32.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
Source: global traffic	HTTP traffic detected: GET /assets/usa-icons/error-9489e5f3.svg HTTP/1.1Host: secure.login.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://secure.login.govsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: imageReferer: https://secure.login.gov/assets/application-1d4fbf32.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
Source: global traffic	HTTP traffic detected: GET /assets/usa-icons/error-9489e5f3.svg HTTP/1.1Host: secure.login.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=YELw5Cd6B75V8mM&MD=YkgmYcKl HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com

Source: global traffic	DNS traffic detected: DNS query: secure.login.gov
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: chromecache_124.2.dr, chromecache_77.2.dr

String found in binary or memory: http://www.bohemiancoding.com/sketch

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 2.20.204.113:443 -> 192.168.2.11:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.20.204.113:443 -> 192.168.2.11:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.11:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.11:49786 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@16/101@6/4

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2176 --field-trial-handle=1568,i,9142163365608271667,12353336580807457794,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://secure.login.gov/sign_up/email/confirm?_request_id=3c0afc61-ca10-4f0c-9685-deebefbd5009&confirmation_token=CpW2XvapjXvtiszQfDxe&c=E,1,czKC5vkp_9sR2jC4fsD8lsKfESoIyAIMQRGqkY2Bbcx7yPVzXeHCLLRKd9edzUpkrkCL5N3DxQ5GKyw6w6jtCBdegjvNRkaLnm9khZ_CZsjb1RkOyAgTkuF3&typo=1"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2176 --field-trial-handle=1568,i,9142163365608271667,12353336580807457794,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://secure.login.gov/sign_up/email/confirm?_request_id=3c0afc61-ca10-4f0c-9685-deebefbd5009&confirmation_token=CpW2XvapjXvtiszQfDxe&c=E,1,czKC5vkp_9sR2jC4fsD8lsKfESoIyAIMQRGqkY2Bbcx7yPVzXeHCLLRKd9edzUpkrkCL5N3DxQ5GKyw6w6jtCBdegjvNRkaLnm9khZ_CZsjb1RkOyAgTkuF3&typo=1	0%	Avira URL Cloud	safe

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
d3koqshax83fsx.cloudfront.net	13.33.187.6	true	false	unknown
www.google.com	142.250.181.68	true	false	high
secure.login.gov	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://secure.login.gov/packs/submit_button_component-f328105c.digested.js	false	high
https://secure.login.gov/assets/lock-c7ffa794.svg	false	high
https://secure.login.gov/assets/password_strength_component-bbafaadb.css	false	high
https://secure.login.gov/assets/application-1d4fbf32.css	false	high
https://secure.login.gov/packs/password_strength_component-5dc65abd.digested-d55a7dd4.en.js	false	high
https://secure.login.gov/sign_up/cancel	false	high
https://secure.login.gov/assets/sp-logos/treasury_caia_logo-8faaee80.png	false	high
https://secure.login.gov/packs/application-3688b8ee.digested.js	false	high
https://secure.login.gov/packs/password_strength_component-5dc65abd.digested.js	false	high
https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxe	false	high
https://secure.login.gov/assets/print-dbe18894.css	false	high
https://secure.login.gov/packs/password_confirmation_component-1a3edc7d.digested.js	false	high
https://secure.login.gov/sign_up/email/confirm?_request_id=3c0afc61-ca10-4f0c-9685-deebefbd5009&confirmation_token=CpW2XvapjXvtiszQfDxe&c=E,1,czKC5vkp_9sR2jC4fsD8lsKfESoIyAIMQRGqkY2Bbcx7yPVzXeHCLLRKd9edzUpkrkCL5N3DxQ5GKyw6w6jtCBdegjvNRkaLnm9khZ_CZsjb1RkOyAgTkuF3&typo=1	false	high
https://secure.login.gov/assets/public-sans/PublicSans-Italic-467fd4ae.woff2	false	high
https://secure.login.gov/assets/icon-https-4fe6ff7d.svg	false	high
https://secure.login.gov/assets/utilities-b943a2ae.css	false	high
https://secure.login.gov/assets/icon_component-2d022cd4.css	false	high
https://secure.login.gov/assets/usa-icons/language-933750f3.svg	false	high
https://secure.login.gov/assets/usa-icons/launch-d24c854a.svg	false	high
https://secure.login.gov/assets/public-sans/PublicSans-Bold-c73ef2d4.woff2	false	high
https://secure.login.gov/assets/status/warning-88ffeb95.svg	false	high
https://secure.login.gov/packs/track-errors-e9df8e72.digested.js	false	high
https://secure.login.gov/assets/usa-icons/check_circle-9998d611.svg	false	high
https://secure.login.gov/packs/validated_field_component-2b54ffd6.digested.js	false	high
https://secure.login.gov/assets/sp-logos/square-gsa-2e9100eb.svg	false	high
https://secure.login.gov/assets/favicons/favicon-16-b68bb09d.png	false	high
https://secure.login.gov/assets/logo-a6f6c558.svg	false	high
https://secure.login.gov/assets/password_confirmation_component-7db5a738.css	false	high
https://secure.login.gov/assets/init-6ad4cfee.js	false	high
https://secure.login.gov/packs/password_confirmation_component-1a3edc7d.digested-4a05fc12.en.js	false	high
https://secure.login.gov/assets/icon-dot-gov-c85c77ab.svg	false	high
https://secure.login.gov/assets/usa-icons/error-9489e5f3.svg	false	high
https://secure.login.gov/assets/plus-64f58c0a.svg	false	high
https://secure.login.gov/assets/public-sans/PublicSans-Regular-5f371c89.woff2	false	high
https://secure.login.gov/assets/us_flag-9715e180.svg	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://www.bohemiancoding.com/sketch	chromecache_124.2.dr, chromecache_77.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.181.68	www.google.com	United States	15169	GOOGLEUS	false
13.33.187.6	d3koqshax83fsx.cloudfront.net	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.11

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1562556
Start date and time:	2024-11-25 17:55:53 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 34s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://secure.login.gov/sign_up/email/confirm?_request_id=3c0afc61-ca10-4f0c-9685-deebefbd5009&confirmation_token=CpW2XvapjXvtiszQfDxe&c=E,1,czKC5vkp_9sR2jC4fsD8lsKfESoIyAIMQRGqkY2Bbcx7yPVzXeHCLLRKd9edzUpkrkCL5N3DxQ5GKyw6w6jtCBdegjvNRkaLnm9khZ_CZsjb1RkOyAgTkuF3&typo=1
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@16/101@6/4
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.19.227, 74.125.205.84, 172.217.19.238, 34.104.35.123, 93.184.221.240, 142.250.181.106, 172.217.19.170, 142.250.181.10, 142.250.181.74, 172.217.17.42, 142.250.181.138, 172.217.19.234, 172.217.21.42, 172.217.17.74, 172.217.19.202, 142.250.181.42, 172.217.17.35
Excluded domains from analysis (whitelisted): fs.microsoft.com, clients2.google.com, accounts.google.com, edgedl.me.gvt1.com, content-autofill.googleapis.com, slscr.update.microsoft.com, update.googleapis.com, ctldl.windowsupdate.com, clientservices.googleapis.com, clients.l.google.com, fe3cr.delivery.mp.microsoft.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://secure.login.gov/sign_up/email/confirm?_request_id=3c0afc61-ca10-4f0c-9685-deebefbd5009&confirmation_token=CpW2XvapjXvtiszQfDxe&c=E,1,czKC5vkp_9sR2jC4fsD8lsKfESoIyAIMQRGqkY2Bbcx7yPVzXeHCLLRKd9edzUpkrkCL5N3DxQ5GKyw6w6jtCBdegjvNRkaLnm9khZ_CZsjb1RkOyAgTkuF3&typo=1

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Input	Output
URL: https://secure.login.gov Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://secure.login.gov
URL: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxe Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "You have confirmed your email address", "prominent_button_name": "Continue", "text_input_field_labels": [ "Password", "Confirm password" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxe Model: Joe Sandbox AI	{ "brands": [ "LOGIN.GOV", "TREASURY" ] }
	{ "brands": [ "LOGIN.GOV", "TREASURY" ] }
URL: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxe Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "You have confirmed your email address", "prominent_button_name": "Continue", "text_input_field_labels": [ "Password", "Confirm password" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxe Model: Joe Sandbox AI	{ "brands": [ "LOGIN.GOV", "TREASURY" ] }
	{ "brands": [ "LOGIN.GOV", "TREASURY" ] }
URL: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxe Model: Joe Sandbox AI	```json{ "legit_domain": "login.gov", "classification": "known", "reasons": [ "The URL 'secure.login.gov' is a subdomain of 'login.gov', which is a legitimate domain associated with the U.S. government for secure login services.", "The brand 'LOGIN.GOV' is directly associated with the domain 'login.gov'.", "The use of a subdomain 'secure' is common for login pages to indicate a secure connection.", "There are no suspicious elements in the URL such as misspellings or unusual domain extensions." ], "riskscore": 1}
URL: secure.login.gov Brands: LOGIN.GOV Input Fields: Password, Confirm password
URL: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxe Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "You have confirmed your email address", "prominent_button_name": "Continue", "text_input_field_labels": [ "Password", "Confirm password" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxe Model: Joe Sandbox AI	{ "brands": [ "LOGIN.GOV", "TREASURY" ] }
	{ "brands": [ "LOGIN.GOV", "TREASURY" ] }
URL: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxe Model: Joe Sandbox AI	```json{ "legit_domain": "login.gov", "classification": "known", "reasons": [ "The URL 'secure.login.gov' is a subdomain of 'login.gov', which is a legitimate and well-known domain used by the U.S. government for secure login services.", "The brand 'LOGIN.GOV' matches the domain name 'login.gov' exactly, indicating a legitimate association.", "The use of a subdomain 'secure' is common for security-focused services and does not indicate phishing.", "There are no suspicious elements in the URL such as misspellings, extra characters, or unusual domain extensions." ], "riskscore": 1}
URL: secure.login.gov Brands: LOGIN.GOV Input Fields: Password, Confirm password
URL: https://secure.login.gov/sign_up/cancel Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Are you sure you want to cancel?", "prominent_button_name": "Yes, cancel", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxe Model: Joe Sandbox AI	```json{ "legit_domain": "login.gov", "classification": "known", "reasons": [ "The URL 'secure.login.gov' is a subdomain of 'login.gov', which is a legitimate domain associated with the U.S. government for secure login services.", "The brand 'LOGIN.GOV' matches the domain name 'login.gov' exactly, indicating a legitimate association.", "The use of a subdomain 'secure' is common for login pages to indicate a secure connection.", "No suspicious elements such as misspellings or unusual domain extensions are present in the URL." ], "riskscore": 1}
URL: secure.login.gov Brands: LOGIN.GOV Input Fields: Password, Confirm password
URL: https://secure.login.gov/sign_up/cancel Model: Joe Sandbox AI	{ "brands": [ "LOGIN.GOV", "TREASURY" ] }
	{ "brands": [ "LOGIN.GOV", "TREASURY" ] }

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Nov 25 15:57:07 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	3.9868031967505484
Encrypted:	false
SSDEEP:	48:8Fq5dq5TULJNTHbidAKZdA1nehwiZUklqehjy+3:8Fq8oHky
MD5:	A3CB431B0E836242EA18D66B93B1CCA3
SHA1:	557B93128FEB5742BDD038E3F631CDD42A9587B1
SHA-256:	6DC3C5BFE1B56C5E52AF8600AA401E7D23FF8DEC2F8DE886E67F4C4BA528BB23
SHA-512:	0D10D2D2299124F16B307F3545357D3D8A476A3DCFCFB22FBBBB1BF95978A869B77525DCF8BA9AA8119FB95AE4C0E1F395B0E7CA80A26F53DF348606DE788BDE
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....._..[?......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EWXX..PROGRA~1..t......O.IyY".....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VyY".....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.V..Chrome..>......CW.VyY".....M.....................g.u.C.h.r.o.m.e.....`.1.....EW.V..APPLIC~1..H......CW.VyY"...........................g.u.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VyY$.............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............S......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Nov 25 15:57:07 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	4.004848002543355
Encrypted:	false
SSDEEP:	48:845dq5TULJNTHbidAKZdA1geh/iZUkAQkqehUy+2:848oj9Qty
MD5:	CAD4C6B354DD3289487D974D0E590922
SHA1:	E4629CB6E6BF8930AF1E5EDF9492447023DEBA51
SHA-256:	4444EC37A19900B9A4217B19CCD9E6D1D13E7D76DBDA740EEAB7DA02267D2506
SHA-512:	FAAA21E7F62DD5131C669169BE7BF14CEA15174543F1E5B98DE36DB1F578B6DC05CA303F985B5C00682B2BB3701F0E5107B3E7CD77F6D3FC26E51B472F9142D6
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......[?......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EWXX..PROGRA~1..t......O.IyY".....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VyY".....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.V..Chrome..>......CW.VyY".....M.....................g.u.C.h.r.o.m.e.....`.1.....EW.V..APPLIC~1..H......CW.VyY"...........................g.u.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VyY$.............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............S......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 5 09:52:18 2023, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2691
Entropy (8bit):	4.010080307230713
Encrypted:	false
SSDEEP:	48:875dq5TULJNCHbidAKZdA148eh7sFiZUkmgqeh7sey+BX:878oinYy
MD5:	E30DBF24B054793A969D62BBCCAF0CD6
SHA1:	4A4B9A64CA035C5445A1BC821692EAD36D784483
SHA-256:	F0F6C8C46C579BA8E5CD2015558ABE83F4AC044051C17B58475F877A47811AB7
SHA-512:	B8FB911D69DF08A987ABCDCF9E45D6E8FD28D259AB9836E3341D6626964C9F655FA1E06A129026AC4BC5F341977791576B441E28F9C44D53E7F54BADB34017E9
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....s4..z.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EWXX..PROGRA~1..t......O.IyY".....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VyY".....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.V..Chrome..>......CW.VyY".....M.....................g.u.C.h.r.o.m.e.....`.1.....EW.V..APPLIC~1..H......CW.VyY"...........................g.u.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VEW.V............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............S......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Nov 25 15:57:07 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9990497476759597
Encrypted:	false
SSDEEP:	48:8N5dq5TULJNTHbidAKZdA1lehDiZUkwqehgy+R:8N8o+Gy
MD5:	9C10AE8385C3F0D3A035DD03AE8D205E
SHA1:	925975DBCB3CBD875E6D8C2468EA271E10208165
SHA-256:	1DA064EA745022CA8D41D17C774E64D96271A108ACBBEF00FC95CFCE7B858732
SHA-512:	53AF1401F3FF817E18DD910937B5A7AB7E748CB0FC2960ACD7B95D296892DF66FD7B0C99EFF6402525E56B0FD818AC10C60DEBE3F1078D5BD10EE381A921B977
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....\..[?......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EWXX..PROGRA~1..t......O.IyY".....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VyY".....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.V..Chrome..>......CW.VyY".....M.....................g.u.C.h.r.o.m.e.....`.1.....EW.V..APPLIC~1..H......CW.VyY"...........................g.u.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VyY$.............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............S......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Nov 25 15:57:07 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9897623050091204
Encrypted:	false
SSDEEP:	48:8H5dq5TULJNTHbidAKZdA17ehBiZUk1W1qehyy+C:8H8oe9Sy
MD5:	448FC432131A5C6EEE95A5D0DB0FCF11
SHA1:	D0D49AED14AFC1679603B7B2E1DBA0DCD3011E84
SHA-256:	42899E3C6443B8E62D41B45B53ABFB76258FFCA777EAE5D964D0CC30C9CF001B
SHA-512:	14F4ED45EA2CBDA3F180C277C9B5B8C181BE9E0DB67DA23E3332D7C0C2C436737D95D43C5F3B012A37F5E39F7CCE0AF6018702DF415F92F38F86B83196CBD427
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....k...[?......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EWXX..PROGRA~1..t......O.IyY".....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VyY".....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.V..Chrome..>......CW.VyY".....M.....................g.u.C.h.r.o.m.e.....`.1.....EW.V..APPLIC~1..H......CW.VyY"...........................g.u.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VyY$.............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............S......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Nov 25 15:57:07 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	4.001832355011833
Encrypted:	false
SSDEEP:	48:805dq5TULJNTHbidAKZdA1duTiehOuTbbiZUk5OjqehOuTbYy+yT+:808o+TLTbxWOvTbYy7T
MD5:	EAFD0560B87B173124A47D6A384490E1
SHA1:	F4A9843EA4E9FC15E9D1B8620BA3C70BF8929E50
SHA-256:	2DC321C695B0A262DAE8F5645DF6D21ADB8C76E014A62893398100136834CFE4
SHA-512:	486A205C96B83A7A2449A3D5FF5CEBB3A81AB8EC91D680FD9175220A45513C8C12DFF4DBEB4B694D2329A7978FF17D659FEA79F7FD19C109D74D977C219B72A9
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......[?......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EWXX..PROGRA~1..t......O.IyY".....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VyY".....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.V..Chrome..>......CW.VyY".....M.....................g.u.C.h.r.o.m.e.....`.1.....EW.V..APPLIC~1..H......CW.VyY"...........................g.u.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VyY$.............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............S......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 173 x 40, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	7273
Entropy (8bit):	7.952162684288075
Encrypted:	false
SSDEEP:	192:nh3Ba4Z8u5WrPbxZd8eH6tlZfDKs7c/vB:zatu5WjbxZCeH+IEc/p
MD5:	EDE8EE9B2A11808E868E9B0FC775D010
SHA1:	8FD2691BEBCA1267E56B5C5C1872EE7B0E1E18A8
SHA-256:	FB856801CEE02598F90CD54EC8B6DAC0B66712FA46323C1305AE23BBE9ADD970
SHA-512:	414E5CD8E733174A79EEEDFA931BE4E38342691FD2BC73D976789C86AACC707831056190F4E156DED9FC27CD8CD5EBBC98EE2C4464E3A8D2338B27F2A7069D9B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......(.......z(...0IDATx..{..Uy...={.$......(r...XT..9.L.. 6..m..VkO.V..[.G[..L.@Q....r9\.".j...XL.%!.L.3.......c.I&..$.s..O...'{.w.....=.z#^..:..(B.h..D.!.....RI..P..1..lV.N+.z..^N.c..^...j...D0....L..a@...Q]0..@.(....!.....^k.9......?..@..m.. D.....B..U....;....`.[z8@...H.dWA.,W......z...m...=..=.c..B../..1...cA' ...z$E.b.f.......3...Y.l......Z....l....a..bG....'o.u...~C.F.....X1>.8Fb=.i ..l.x....8...k&G...d .../..{.............O..+.]....o..1.....Y~..V`.p.(......K<n.&.i8...@.....%...=...Q8...l....m.........1;w..c/.-'mW..b....C...........x..s..#.6.h......G../xV.....E.qp?.LC.x...j....a..-....2.'..Jz.G..J.......k...g.X..A.xX.uB.....Ez.C.-.O...z.y.:.a?....s..#\|,.4..8.(....u6W.?...(..$'l*{k.....g<A..I.c5hS.Y..0.@1k....b.9..H(....d.:.X....U.O.Cl..8..1p3.?.d.n....A_.......4.g...o...>ZA..6...Z.U.)J.5L.um2l...M...$..@.-.p.A..M5.y .iDG..P.M..+..#.Na.......\].`.2..,....(......y-s...E...K..Dj..z..z..a\.j...}k..\...r.w..)........}C

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2205)
Category:	downloaded
Size (bytes):	2277
Entropy (8bit):	4.915627181104389
Encrypted:	false
SSDEEP:	48:io6lFxrxcyN9w1+CIP9YxKLjCwjerbwW2xCwluDN/gHF1p6q9y:FWIIP90+perb4NutG1wq9y
MD5:	18FC30A57CC793AB2FCDCF655F7A0867
SHA1:	09B053A2CB08806216DE5911ED79C91D87304A8F
SHA-256:	46B4C25C56E65BE478B95BABFE809B29531CDE9FD585515643E1FFCDAB5E11EF
SHA-512:	5C8CCE41A528FFA8A672D2B72B59D2E119EEC5CD9A44E0BED4096F8F3B36FA4F5D32488447F2F0CE5BA5815903749743E67CE014D4E9F5E047AF5FE54BEBB660
Malicious:	false
Reputation:	low
URL:	https://secure.login.gov/packs/validated_field_component-2b54ffd6.digested.js
Preview:	(()=>{"use strict";class e extends HTMLElement{connectedCallback(){this.input=this.querySelector(".validated-field__input"),this.inputWrapper=this.querySelector(".validated-field__input-wrapper"),this.errorMessage=this.ownerDocument.getElementById(this.errorId),this.input?.addEventListener("input",(()=>this.setErrorMessage())),this.input?.addEventListener("input",(()=>this.setInputIsValid(!0))),this.input?.addEventListener("invalid",(e=>this.toggleErrorMessage(e)))}get errorStrings(){try{return JSON.parse(this.querySelector(".validated-field__error-strings")?.textContent\|\|"")}catch{return{}}}get errorId(){return this.getAttribute("error-id")}get descriptorIdRefs(){return this.input?.getAttribute("aria-describedby")?.split(" ").filter(Boolean)\|\|[]}get isValid(){return"true"!==this.input?.getAttribute("aria-invalid")}toggleErrorMessage(e){e.preventDefault();const t=this.getNormalizedValidationMessage(this.input),r=!t;this.setErrorMessage(t),this.focusOnError(r),this.setInputIsValid(r)}se

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (720)
Category:	dropped
Size (bytes):	779
Entropy (8bit):	5.117217483504285
Encrypted:	false
SSDEEP:	24:9dFsjJnQY4eINpyZ61VJwkQHCxN9wLruz7:jFsj9QeINpyZ63vUCxN9wLruz7
MD5:	0D2E1AF6448377D986D2E60402B8BAE3
SHA1:	BB06BE7AD24027CD57F60F225D2E6AF2A0F8C43A
SHA-256:	CF4FBA8C674C5E68F2607FB36E2B678A9CD13B009993DF62C473114D6FBA3958
SHA-512:	4240277367EEE8FD4019672FB6649697A4875342F08725B4C11519F2C1E95174D5B6A48AB25A23BEC63FEA895220E88FB207A25B83B9A9A420147209A32AECDF
Malicious:	false
Reputation:	low
Preview:	(()=>{"use strict";let e;const n=(n,t)=>{let{name:o,message:r,stack:a}=n,{filename:i,errorId:c}=t;return function(n,t){const o=function(n){if(void 0===e)try{e=JSON.parse(document.querySelector("[data-config]")?.textContent\|\|"")}catch{e={}}return e[n]}("analyticsEndpoint");if(o&&navigator.sendBeacon){const e=JSON.stringify({event:"Frontend Error",payload:t}),n=new Blob([e],{type:"application/json"});navigator.sendBeacon(o,n)}}(0,{name:o,message:r,stack:a,filename:i,error_id:c})},{_e:t}=window,o=e=>function(e){try{const{host:n,pathname:t}=new URL(e.filename);return n===window.location.host&&t.endsWith(".js")}catch{return!1}}(e)&&n(e.error,{filename:e.filename});t.forEach(o),window.addEventListener("error",o)})();.//# sourceMappingURL=track-errors-e9df8e72.digested.js.map

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (563)
Category:	dropped
Size (bytes):	633
Entropy (8bit):	4.94817184219894
Encrypted:	false
SSDEEP:	12:9heG9xcC3tLE/FyDdgdtKiJ01XCDkjC/4ZXIq/ylWRVJNylWYLmL4TfqHg:9heoHtSmgdtKiWWs8WTIWfA7
MD5:	48D2E96EFEFDCB7ABC06DFD71D91489B
SHA1:	BB25EABA01EB1713AD4C3E5146CEACD113037E39
SHA-256:	36F251AF265B265EDC0985C1FF6EE4352D1C85D603261C45A4B380872A57DC08
SHA-512:	0C444FB79AFDBE3C9458AA6CB536F6B104C2A55E0D25A4EB6DF8B72FE550CFB934CD9DEBA16C5FB5AE3060C9BD70E4C38B07A126E58B7E1DCF29916B1C664F78
Malicious:	false
Reputation:	low
Preview:	(()=>{"use strict";class t extends HTMLElement{connectedCallback(){this.button.addEventListener("click",this.#t),this.form?.addEventListener("submit",this.#e)}get form(){return this.closest("form")}get button(){return this.querySelector("button")}get isSubmitting(){return"true"===this.button.getAttribute("aria-disabled")}#e=()=>{this.button.classList.add("usa-button--active"),this.button.setAttribute("aria-disabled","true")};#t=t=>{this.isSubmitting&&t.preventDefault()}}customElements.get("lg-submit-button")\|\|customElements.define("lg-submit-button",t)})();.//# sourceMappingURL=submit_button_component-f328105c.digested.js.map

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1702
Entropy (8bit):	4.268282806148018
Encrypted:	false
SSDEEP:	48:CvJa0uMvGX6sH+HN5qxhJ+mn0FMv7PD/m/f/nY:eJaJnXf4NcxKCMSPDkXnY
MD5:	14B5A2062E13483D6E1693FB1E0BAE5D
SHA1:	7486F510AED213369D4AA593396B925174A8F71E
SHA-256:	5D5A38D1B51AD9122641149CBB4AE15406807297F3E188FC92DF01A7F950E6E8
SHA-512:	25574A69436E12B8A90881A6D89B6BEF4D47547C7698B0C3C3C1F1CC0EBC0F3D4554CB5423F1D9CDDB35B73DB6D3E56133923B501DAFE06FB98EBD6B51AAB50E
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 292.1 39.47"><path fill="#fff" d="M7.44 6.89h17.2v22.06H7.44z"/><path fill="#112e51" d="M53.45 5.28h-6.16v27.31h17.87v-5.38H53.45zm30.76-.19c-8.35 0-14.67 5.89-14.67 13.85s6.32 13.93 14.67 13.93 14.67-6 14.67-13.93S92.56 5.09 84.21 5.09m.08 22.39a8.49 8.49 0 0 1-8.43-8.54 8.4 8.4 0 0 1 8.43-8.47 8.29 8.29 0 0 1 8.27 8.47 8.36 8.36 0 0 1-8.27 8.54m35.36-17.05a11.43 11.43 0 0 1 7.49 3l3.47-4.41a17.2 17.2 0 0 0-11-4c-8.51 0-14.9 6-14.9 13.85s6.29 13.99 14.58 13.99a20.2 20.2 0 0 0 11.08-3.55V17.57h-10.11v4.82H125V26a12.4 12.4 0 0 1-5.34 1.48 8.52 8.52 0 1 1 0-17zm19.61-5.15h6.17v27.31h-6.17zm34.53 17.56L160.52 5.28h-5.61v27.31h5.89V15.07l13.22 17.52h5.62V5.28h-5.85zm17.47 2.85a3.39 3.39 0 0 0-3.47 3.56 3.47 3.47 0 1 0 6.94 0 3.36 3.36 0 0 0-3.47-3.56m23.15-15.26a11.43 11.43 0 0 1 7.49 3l3.47-4.41a17.2 17.2 0 0 0-11-4c-8.51 0-14.9 6-14.9 13.85s6.28 13.93 14.55 13.93a20.2 20.2 0 0 0 11.08-3.55V17.57H215v4.82h4.77V26a12.4 12.4 0 0 1-5.34 1.

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15544, version 2.66
Category:	downloaded
Size (bytes):	15544
Entropy (8bit):	7.987580374221659
Encrypted:	false
SSDEEP:	384:jjDfaXt1946WqmqICrdOLCM+CaUtloWP0H3O/RYa:zfah2i41MH3O+a
MD5:	5609FF1F13977E0E2D8AD823CBA9C2F9
SHA1:	AB0FFF00C0FF578BFC762C167A4EA308FFEE8092
SHA-256:	44A2775126BF12079B0E588C86E2843F11E357185F0BE99A3CC646F40397F623
SHA-512:	DC99BC7E113121CD1DE3749AE5E93335F4F8EE0AAEE9CA9CB5B8E4B4F54A5DC44C2F55C3C659169856F536B98B64C892070EE8ABE64BD68E09771926123811E8
Malicious:	false
Reputation:	low
URL:	https://secure.login.gov/assets/public-sans/PublicSans-Italic-467fd4ae.woff2
Preview:	wOF2......<........h..<W...B.........................:..F.`..0.`........,..g.6.$.. ..... ..j. ..=.ay%.....(...(j.h..QHJE]......"..V.....t`....F.]...TQc.0.ZT...`_-...O.9...E.L.8M..kA....mr..x...3.....'L:.....M..H,..`t....qA....i....Z.O.............?...C.?.....}.*.$'.!$..If...sD...!..$...z....u#.......I....5.....T...Q!.&.o#b5~.....,.g$;.^.^.#.......r......\|y.).N.{+...N{_.I.e....].......x..wp...7.4.J..X....<.{....D.x...Jp..a...._.X..M..=Fq.k....#...........H..L.... ...4A...vQ....L!..a.......~?......t%VHF.....\...2U...7.v.............af.u+....v.-.B.JVHV:..pW.t......../$ .)nJn.7.........7.a....^....I.$>......Z..@.r\.).8t..oz..K..=W-......aA..0..e.P.@..ND..@.-.9.!E.UJ..e^.>..uW_.....>....g.w.\|i".$.....5.Y....g6f..U....!.......5....!!!""".....kVFajc46.....-..Q..i...6..O..O...`U.Z .A...C..!E..-H.....2c..s...A.<!o.P..(J..#.J..8l...!K.".$B4..:_..2C...O. }.w.!.........%.........f.Ld.....t;/.......m.N.V.....i.H...@.!...o;.!.e%.<......O.8...M..Sf.Y.b.-O....

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1742)
Category:	downloaded
Size (bytes):	1820
Entropy (8bit):	5.093133943549642
Encrypted:	false
SSDEEP:	24:9i+K2QLFEcX9rXVL1RFNQ68Jjjj2Qn3MekMSc8cVttDFr6TKLDceRbCaWTTWLW0U:I+GtX9rXVL1RFNQ62jaMSrGA4sFx
MD5:	AC06899B969300951D7653E932971E7A
SHA1:	D9AAE58C1C5546F38F3A14304F65D5B1AE3F0953
SHA-256:	BB388EFBB6DE42F0540AE60DDD7909FD146A05ADF13F0C23512AE3E5157550DA
SHA-512:	607BDCD802D039E3498A53CB166D1AAC4D40FF115329A7529012569D9F8A2EE516B54EECE9BE82F826D5494621BF1249C21FD4E608359A140305F8FE3D6AB8D5
Malicious:	false
Reputation:	low
URL:	https://secure.login.gov/packs/password_confirmation_component-1a3edc7d.digested.js
Preview:	(()=>{"use strict";const t=t=>"object"==typeof t&&"one"in t,e=new class{constructor(){let{strings:t}=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{};this.strings=Object.assign(Object.create(null),t),this.t=this.t.bind(this)}t(e){let n=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{};const i=!Array.isArray(e),s=(i?[e]:e).map((t=>((t,e)=>Object.hasOwn(t,e)?t[e]:e)(this.strings,t))),o=s.map((e=>t(e)?function(e,n){if(t(e)){if("number"!=typeof n)throw new TypeError("Expected count for PluralizedEntry");return e[(t=>1===t?"one":"other")(n)]}return e}(e,n?.count):e)).map((t=>(t=>"string"==typeof t)(t)?((t,e)=>t.replace(/%{(\w+)}/g,((t,n)=>Object.hasOwn(e,n)?e[n]:t)))(t,n):t));return i?o[0]:o.flat()}}({strings:globalThis._locale_data}),{t:n}=e;class i extends HTMLElement{connectedCallback(){this.toggle.addEventListener("change",(()=>this.setInputType())),this.input.addEventListener("input",(()=>this.validatePassword())),this.inputConfirmation.addEventListener("input",(()=>th

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	197
Entropy (8bit):	4.7544263093835175
Encrypted:	false
SSDEEP:	6:tI9mc4slzXdhC/O4TK4G2aCM0xtjJiIXqtOqb8:t4BdU/PTKd2aCJNJuwg8
MD5:	FCCB5B63C531135AED8DE27B53524DA2
SHA1:	2728DF6E252417B7DEF1B3FEFBE82BE52D35B685
SHA-256:	4AB47484995AB72BD8B7175BD36273D3E8787CF3E1E28A4F695FEE07E8D0884D
SHA-512:	1343A22DEB2C25021302CB0B7F3BFCAD262FAD687C9C4A546A686463571829E4E1D3EEDD05C3BF5FEFE480EAE2E3327B5DC72AEC559340AD981B32846BCAA47D
Malicious:	false
Reputation:	low
URL:	https://secure.login.gov/assets/usa-icons/error-9489e5f3.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24"><path d="M12 2C6.48 2 2 6.48 2 12s4.48 10 10 10 10-4.48 10-10S17.52 2 12 2zm1 15h-2v-2h2v2zm0-4h-2V7h2v6z"/></svg>

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (563)
Category:	downloaded
Size (bytes):	633
Entropy (8bit):	4.94817184219894
Encrypted:	false
SSDEEP:	12:9heG9xcC3tLE/FyDdgdtKiJ01XCDkjC/4ZXIq/ylWRVJNylWYLmL4TfqHg:9heoHtSmgdtKiWWs8WTIWfA7
MD5:	48D2E96EFEFDCB7ABC06DFD71D91489B
SHA1:	BB25EABA01EB1713AD4C3E5146CEACD113037E39
SHA-256:	36F251AF265B265EDC0985C1FF6EE4352D1C85D603261C45A4B380872A57DC08
SHA-512:	0C444FB79AFDBE3C9458AA6CB536F6B104C2A55E0D25A4EB6DF8B72FE550CFB934CD9DEBA16C5FB5AE3060C9BD70E4C38B07A126E58B7E1DCF29916B1C664F78
Malicious:	false
Reputation:	low
URL:	https://secure.login.gov/packs/submit_button_component-f328105c.digested.js
Preview:	(()=>{"use strict";class t extends HTMLElement{connectedCallback(){this.button.addEventListener("click",this.#t),this.form?.addEventListener("submit",this.#e)}get form(){return this.closest("form")}get button(){return this.querySelector("button")}get isSubmitting(){return"true"===this.button.getAttribute("aria-disabled")}#e=()=>{this.button.classList.add("usa-button--active"),this.button.setAttribute("aria-disabled","true")};#t=t=>{this.isSubmitting&&t.preventDefault()}}customElements.get("lg-submit-button")\|\|customElements.define("lg-submit-button",t)})();.//# sourceMappingURL=submit_button_component-f328105c.digested.js.map

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1742)
Category:	dropped
Size (bytes):	1820
Entropy (8bit):	5.093133943549642
Encrypted:	false
SSDEEP:	24:9i+K2QLFEcX9rXVL1RFNQ68Jjjj2Qn3MekMSc8cVttDFr6TKLDceRbCaWTTWLW0U:I+GtX9rXVL1RFNQ62jaMSrGA4sFx
MD5:	AC06899B969300951D7653E932971E7A
SHA1:	D9AAE58C1C5546F38F3A14304F65D5B1AE3F0953
SHA-256:	BB388EFBB6DE42F0540AE60DDD7909FD146A05ADF13F0C23512AE3E5157550DA
SHA-512:	607BDCD802D039E3498A53CB166D1AAC4D40FF115329A7529012569D9F8A2EE516B54EECE9BE82F826D5494621BF1249C21FD4E608359A140305F8FE3D6AB8D5
Malicious:	false
Reputation:	low
Preview:	(()=>{"use strict";const t=t=>"object"==typeof t&&"one"in t,e=new class{constructor(){let{strings:t}=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{};this.strings=Object.assign(Object.create(null),t),this.t=this.t.bind(this)}t(e){let n=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{};const i=!Array.isArray(e),s=(i?[e]:e).map((t=>((t,e)=>Object.hasOwn(t,e)?t[e]:e)(this.strings,t))),o=s.map((e=>t(e)?function(e,n){if(t(e)){if("number"!=typeof n)throw new TypeError("Expected count for PluralizedEntry");return e[(t=>1===t?"one":"other")(n)]}return e}(e,n?.count):e)).map((t=>(t=>"string"==typeof t)(t)?((t,e)=>t.replace(/%{(\w+)}/g,((t,n)=>Object.hasOwn(e,n)?e[n]:t)))(t,n):t));return i?o[0]:o.flat()}}({strings:globalThis._locale_data}),{t:n}=e;class i extends HTMLElement{connectedCallback(){this.toggle.addEventListener("change",(()=>this.setInputType())),this.input.addEventListener("input",(()=>this.validatePassword())),this.inputConfirmation.addEventListener("input",(()=>th

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	395
Entropy (8bit):	5.040904290125393
Encrypted:	false
SSDEEP:	12:TMHdiKfGEWugfQ+aAMUd/JQnwzEWsp/LwUZw50XY:2diKuPf6AMU/tsp/EUWGI
MD5:	93EC37CD1260435CEDD4D33E2478620D
SHA1:	7BAE91D25803BC76BE337AA978A5DF0C5C35D6EA
SHA-256:	77AB350CC1502C0830B7D7ED35B55F0296B87077AF07A44D2B5AB0E9C8FEA0F4
SHA-512:	F874ACF10218E95D42064F3A0EC3538A66F1BF162891F7C6F02E5A189290F73B97998BAE78CD0F22CA2183CBC793938993291AFD79EA05E6810191EB9C631D04
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="52" height="64" viewBox="0 0 52 64"><title>lock</title><path fill="#1B1B1B" fill-rule="evenodd" d="M26 0c10.493 0 19 8.507 19 19v9h3a4 4 0 0 1 4 4v28a4 4 0 0 1-4 4H4a4 4 0 0 1-4-4V32a4 4 0 0 1 4-4h3v-9C7 8.507 15.507 0 26 0zm0 8c-5.979 0-10.843 4.77-10.996 10.712L15 19v9h22v-9c0-6.075-4.925-11-11-11z"/></svg>

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	301
Entropy (8bit):	4.946214249836953
Encrypted:	false
SSDEEP:	6:90yQpbDRd7H4oQkzLTKE4UqozLTKEyULB7Q2vKRzvL7YmY11M07BRdJBnmBFEV:90D5DRRvQYLlL8U17nv6vAT9lmg
MD5:	1549C8FDD965F5DAB19DDAEFA5DCDC9D
SHA1:	EEF2BAA738933C66DCEB3A2C6C5A94392A07F602
SHA-256:	F3BF3DF73257DAD0C4D958C9C2AD68BB0A2F29B316296991C2B5EDA914B16E45
SHA-512:	C4F765AA8742782BEBA7FC606CB007DCA0B42265B78A4DC962E3CBB37A70E251F4D2EF14C674B0F7FF3EACDB7C907DC3A373161F333EDFE0FD1CDAC854C4D372
Malicious:	false
Reputation:	low
URL:	https://secure.login.gov/packs/session-expire-session-33c940e8.digested.js
Preview:	(()=>{const e=document.getElementById("js-expire-session");if(e&&e.dataset.sessionTimeoutIn){const t=1e3*parseInt(e.dataset.sessionTimeoutIn,10),s=e.dataset.timeoutRefreshPath\|\|"";setTimeout((()=>{document.location.href=s}),t)}})();.//# sourceMappingURL=session-expire-session-33c940e8.digested.js.map

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	821379
Entropy (8bit):	4.5990447210214365
Encrypted:	false
SSDEEP:	12288:kimqQPgH8T4J2+pTuyfPEWEmUVlHybZeb391Kl4Af7ei:KqQPlT4JVREDSbs9aR
MD5:	41A04029BB2EB5672DCA010036770D39
SHA1:	2CCAE444CEA64B3375C482074908DE2D465FBA7C
SHA-256:	49F5F6D13D09AF434B3DE791AE5C685C0893F750FC370B19233622F46D0A0037
SHA-512:	CB3C22079DCD5D72604447F9F7DB6F4AE18644A10D09FA9C27BC220790FD98608393BB4806BF408B955EF835F17707192CAE207C22F118DC316BE7D6021F3BBC
Malicious:	false
Reputation:	low
URL:	https://secure.login.gov/packs/password_strength_component-5dc65abd.digested.js
Preview:	(()=>{var e={2442:e=>{var a;a={qwerty:{"!":["`~",null,null,"2@","qQ",null],'"':[";:","[{","]}",null,null,"/?"],"#":["2@",null,null,"4$","eE","wW"],$:["3#",null,null,"5%","rR","eE"],"%":["4$",null,null,"6^","tT","rR"],"&":["6^",null,null,"8","uU","yY"],"'":[";:","[{","]}",null,null,"/?"],"(":["8",null,null,"0)","oO","iI"],")":["9(",null,null,"-_","pP","oO"],"":["7&",null,null,"9(","iI","uU"],"+":["-_",null,null,null,"]}","[{"],",":["mM","kK","lL",".>",null,null],"-":["0)",null,null,"=+","[{","pP"],".":[",<","lL",";:","/?",null,null],"/":[".>",";:","'\"",null,null,null],0:["9(",null,null,"-_","pP","oO"],1:["`~",null,null,"2@","qQ",null],2:["1!",null,null,"3#","wW","qQ"],3:["2@",null,null,"4$","eE","wW"],4:["3#",null,null,"5%","rR","eE"],5:["4$",null,null,"6^","tT","rR"],6:["5%",null,null,"7&","yY","tT"],7:["6^",null,null,"8","uU","yY"],8:["7&",null,null,"9(","iI","uU"],9:["8*",null,null,"0)","oO","iI"],":":["lL","pP","[{","'\"","/?",".>"],";":["lL","pP","[{","'\"","/?",".>"],"<":["mM

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 14904, version 2.66
Category:	downloaded
Size (bytes):	14904
Entropy (8bit):	7.985682849242847
Encrypted:	false
SSDEEP:	384:0XLIXHoQZX1/EZ6g6pf21lZog63UtiWxzRyELAUtD:HoQDEZ56pfw/aUtiTE0UtD
MD5:	44ACFE05FA80BC6C5258D1BA0AF8046F
SHA1:	A850C285D12442DAD8805034BE6C882695B6F6DF
SHA-256:	7CD84C15F4871650D74F59A00D69B431A8BF7A9FCA31CB51D7127301451F157E
SHA-512:	FCB225354AA20E75B264DCBD6E1DFD1C156225F2C4DB4DB503B51485D72F80A276C74F5A3998B0EE6D92CE84229600D747CE1507B3B22D702C79CE1F9A8F1867
Malicious:	false
Reputation:	low
URL:	https://secure.login.gov/assets/public-sans/PublicSans-Regular-5f371c89.woff2
Preview:	wOF2......:8.......P..9....B............................F.`..0.`........ ....6.$.. ..... ..r. ..=..y%..K........@.q.........9.h.7H...U@..=.K..O...Wn..V...+.....q.......~..G..H$...b.o...+..........H....[.[N!..E.I..?.a...e.......Z..g\..-\|.z}x~....P.zVa.V...!8.l........B.........."........;;.~X.D..D.."...PX........~...Y9.WV...(.Q.,..AQ..D1......5sn..t...7.K....@e3........).Iz...t........k`i......M.'-....v.u.u..U.]....>..fB...R`...~..:@..A?(..].....k.a.......,...K."%..T...vj]..T...l./7 $..3..M..../...d.@0(.r.R8PR%...!.s,.RS.)T.).\.nm..2.%PD.Is.Y.......u....5c+...d.b.8.'. /..5......:......U...S.}.?}[..,;.l...l.=D..r....~x.}...${.I!.....=$J....d..J....c..`..r.E....v%QSm..[..fRg..i..<. .\|.....R.:.e..D$H.AD...~..d8[....E.U...{D..@...{s.rZ*..'5.."...j.......6.F...u..}.....+V.k..o...A.."D.(D..f".."..\p......AI..`.....C....F.:3#..O>,.@.........$P.b;..K.....\|.....h.....+^..\..3#t......7.."m.<JH.{...QD`..\|.S.+.....X.b.3.n..y.$.!R.hq..0S.t9...6.<.-..".-..

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	720
Entropy (8bit):	4.7252395316953155
Encrypted:	false
SSDEEP:	12:TMHdidlffGCeU/fFKZRMq2R2uK92rdIZgVTz8jxJz/jQ4mZWJ72H19wl0wB7:2didduxU/fFKjM9RFPrdYgVP8jb7jQ9w
MD5:	73ABD86624CA4C09A380E14D5F60E258
SHA1:	72DE7AA9EB600F4EB92FA3EC5DFABFD28FEFCEE0
SHA-256:	912DAFF95CE9CABAE7D0195D39AA98D49C4BEC3B975D404AC266534C069CEE20
SHA-512:	154EAC6B8FDC42C87E14D1CF0C0EA209941EE8ECAB23B5DACDF776D38B1D8A40B208786A8E788954A21C1B80600023F0BF29DF6FFD92C90951B64CE499407D85
Malicious:	false
Reputation:	low
URL:	https://secure.login.gov/assets/icon-https-4fe6ff7d.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="64" height="64" viewBox="0 0 64 64"><title>icon-https</title><path fill="#719F2A" fill-rule="evenodd" d="M32 0c17.673 0 32 14.327 32 32 0 17.673-14.327 32-32 32C14.327 64 0 49.673 0 32 0 14.327 14.327 0 32 0zm0 1.208C14.994 1.208 1.208 14.994 1.208 32S14.994 62.792 32 62.792 62.792 49.006 62.792 32 49.006 1.208 32 1.208zm0 18.886a7.245 7.245 0 0 1 7.245 7.245v3.103h.52c.86 0 1.557.698 1.557 1.558v9.322c0 .86-.697 1.558-1.557 1.558h-15.53c-.86 0-1.557-.697-1.557-1.558V32c0-.86.697-1.558 1.557-1.558h.52V27.34A7.245 7.245 0 0 1 32 20.094zm0 3.103a4.142 4.142 0 0 0-4.142 4.142v3.103h8.284V27.34A4.142 4.142 0 0 0 32 23.197z"/></svg>

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	145
Entropy (8bit):	4.895502720266689
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5zMcBH8+hHiATcvXjXRHoNcHjVYuIfepp5bZi:tI9mc4slzXdhC/O4jVJCepvY
MD5:	868144EC91698AB27EC3BDF5F107EF93
SHA1:	A1721A031BE056A34C064D1EC4E1846FA5BB7B80
SHA-256:	BC1D8378C2D4DABF3610D8A07FDDFE50991D9662C991188B6ED0F7E13AAEEA0B
SHA-512:	A9FB07416072C9C29B19F6B44722908C6BC4C472F72A30715F20D25AD09882E72675022C32574A7AC8F47863A18A16A2BECB49365678E534B03D958A2301478B
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24"><path d="M16.59 8.59 12 13.17 7.41 8.59 6 10l6 6 6-6z"/></svg>

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	171
Entropy (8bit):	4.602509191717927
Encrypted:	false
SSDEEP:	3:jTqNeiGCLR1SIALRDRLbPX29jZPEtEs3We1RACHPlBSpR1SIALRDRLbPXlt4WEIi:ULz7ALxRPP6ayEzRJlBSpz7ALxRPP1tM
MD5:	BEC44148E73E737B93FD70E225FF1F87
SHA1:	F849F34D6F0D77B7041BBEF1F2974FEAEF7ECCE5
SHA-256:	78C5D5DA78D1271810AC56EE963453FD44D678F1AB865F376C71C30DDFA314FC
SHA-512:	D75EAA327F94B3DEFE523A8797923645BA5A73A092277DF38DE358B8CFC9054550E9FDDC0C266C183BFB99AFE6DAAD4A70CA30D0FE6888BDFD3EC0F49C54F0BF
Malicious:	false
Reputation:	low
URL:	https://secure.login.gov/assets/init-6ad4cfee.js
Preview:	"use strict";(()=>{document.documentElement.classList.add("usa-js-loading");addEventListener("load",()=>document.documentElement.classList.remove("usa-js-loading"));})();.

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1702
Entropy (8bit):	4.268282806148018
Encrypted:	false
SSDEEP:	48:CvJa0uMvGX6sH+HN5qxhJ+mn0FMv7PD/m/f/nY:eJaJnXf4NcxKCMSPDkXnY
MD5:	14B5A2062E13483D6E1693FB1E0BAE5D
SHA1:	7486F510AED213369D4AA593396B925174A8F71E
SHA-256:	5D5A38D1B51AD9122641149CBB4AE15406807297F3E188FC92DF01A7F950E6E8
SHA-512:	25574A69436E12B8A90881A6D89B6BEF4D47547C7698B0C3C3C1F1CC0EBC0F3D4554CB5423F1D9CDDB35B73DB6D3E56133923B501DAFE06FB98EBD6B51AAB50E
Malicious:	false
Reputation:	low
URL:	https://secure.login.gov/assets/logo-a6f6c558.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 292.1 39.47"><path fill="#fff" d="M7.44 6.89h17.2v22.06H7.44z"/><path fill="#112e51" d="M53.45 5.28h-6.16v27.31h17.87v-5.38H53.45zm30.76-.19c-8.35 0-14.67 5.89-14.67 13.85s6.32 13.93 14.67 13.93 14.67-6 14.67-13.93S92.56 5.09 84.21 5.09m.08 22.39a8.49 8.49 0 0 1-8.43-8.54 8.4 8.4 0 0 1 8.43-8.47 8.29 8.29 0 0 1 8.27 8.47 8.36 8.36 0 0 1-8.27 8.54m35.36-17.05a11.43 11.43 0 0 1 7.49 3l3.47-4.41a17.2 17.2 0 0 0-11-4c-8.51 0-14.9 6-14.9 13.85s6.29 13.99 14.58 13.99a20.2 20.2 0 0 0 11.08-3.55V17.57h-10.11v4.82H125V26a12.4 12.4 0 0 1-5.34 1.48 8.52 8.52 0 1 1 0-17zm19.61-5.15h6.17v27.31h-6.17zm34.53 17.56L160.52 5.28h-5.61v27.31h5.89V15.07l13.22 17.52h5.62V5.28h-5.85zm17.47 2.85a3.39 3.39 0 0 0-3.47 3.56 3.47 3.47 0 1 0 6.94 0 3.36 3.36 0 0 0-3.47-3.56m23.15-15.26a11.43 11.43 0 0 1 7.49 3l3.47-4.41a17.2 17.2 0 0 0-11-4c-8.51 0-14.9 6-14.9 13.85s6.28 13.93 14.55 13.93a20.2 20.2 0 0 0 11.08-3.55V17.57H215v4.82h4.77V26a12.4 12.4 0 0 1-5.34 1.

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	145
Entropy (8bit):	4.895502720266689
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5zMcBH8+hHiATcvXjXRHoNcHjVYuIfepp5bZi:tI9mc4slzXdhC/O4jVJCepvY
MD5:	868144EC91698AB27EC3BDF5F107EF93
SHA1:	A1721A031BE056A34C064D1EC4E1846FA5BB7B80
SHA-256:	BC1D8378C2D4DABF3610D8A07FDDFE50991D9662C991188B6ED0F7E13AAEEA0B
SHA-512:	A9FB07416072C9C29B19F6B44722908C6BC4C472F72A30715F20D25AD09882E72675022C32574A7AC8F47863A18A16A2BECB49365678E534B03D958A2301478B
Malicious:	false
Reputation:	low
URL:	https://secure.login.gov/assets/usa-icons/expand_more-d32ec934.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24"><path d="M16.59 8.59 12 13.17 7.41 8.59 6 10l6 6 6-6z"/></svg>

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	380
Entropy (8bit):	4.740593695899284
Encrypted:	false
SSDEEP:	6:tI9mc4sl3ER9uuHWXhWWdddEGDlob/uuHfHmfVNmWC2VNm2F34KVmfVNm2Fn:t41Ef3etS/3O9NmW9Nm2F3W9Nm2Fn
MD5:	09DD628B9738936E1930CC3C8E4EAE53
SHA1:	55654B5214CBE2B7D524AE602CB2AC1927D2B042
SHA-256:	D8FD178C0803BBC848C5C49DC14FE3F3DACAC7B87B27B6773D86ACD018A6FA3D
SHA-512:	41AA7244C5A0A203CB21D05840914BB2F3E390EFFCC364BDF023494C3625FA358D043F94C00EA528B91F1E9A49A02B1681D8187875195E48B043F9353AE312EB
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 64 44"><path fill="#fff" d="M0 0h64v44H0z"/><path fill="#da3e1f" d="M0 0h64v4H0zm0 40h64v4H0zm0-8h64v4H0zm0-8h64v4H0zm0-8h64v4H0zm0-8h64v4H0z"/><path fill="#1e33b1" d="M0 0h32v28H0z"/><path fill="#fff" d="M8 12h4v4H8zm16 0h4v4h-4zm-8 0h4v4h-4zm4-8h4v4h-4zm-8 0h4v4h-4zM4 20h4v4H4zm16 0h4v4h-4zm-8 0h4v4h-4zM4 4h4v4H4z"/></svg>.

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	82027
Entropy (8bit):	4.845044690361055
Encrypted:	false
SSDEEP:	384:cA/kkhPWQll1pHG+WnCmJSt5tQHYWy+rQ57dOuGrov6tVRVobOdYPd5+OLqSe22L:T1dQHYWy+rUqjVob6eweOYBi4khD9mti
MD5:	2D02E27515ECA50EF580B216B439B7C4
SHA1:	5D5421AA12ADFA60D01C066BD9DB3F09E40EE0E8
SHA-256:	7AF0D5B83E14C57F8FD789720630F0C477BCF47CEB9E40E11E6A3FA3F0B3988C
SHA-512:	2EF033830C8C0A26107E4DE2A7B1CAE061DB0FC311D58320146EB9BE3548474732A46E0690763303C9E7B8DE6FA4F824ECFC820F2A9A534346D4EE4A5C36C337
Malicious:	false
Reputation:	low
URL:	https://secure.login.gov/assets/utilities-b943a2ae.css
Preview:	[class=font-mono-]{font-family:Roboto Mono Web,Bitstream Vera Sans Mono,Consolas,Courier,monospace}[class=font-sans-],[class=font-ui-],[class=font-heading-],[class=font-body-]{font-family:Public Sans Web,-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,Helvetica,Arial,sans-serif,Apple Color Emoji,Segoe UI Emoji,Segoe UI Symbol}[class=font-code-]{font-family:Roboto Mono Web,Bitstream Vera Sans Mono,Consolas,Courier,monospace}[class=font-alt-]{font-family:Public Sans Web,-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,Helvetica,Arial,sans-serif,Apple Color Emoji,Segoe UI Emoji,Segoe UI Symbol}.add-aspect-9x16{box-sizing:border-box;height:0;padding-bottom:177.778%;position:relative;overflow:hidden}@supports (aspect-ratio:1){.add-aspect-9x16{height:inherit;padding:inherit;aspect-ratio:.5625;max-width:100%}.add-aspect-9x16>{width:100%;height:100%;position:absolute;top:0;left:0}img.add-aspect-9x16,.add-aspect-9x16>img{object-fit:cover}}.add-aspect-16x9{box-sizing:border-box;height:0

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	197
Entropy (8bit):	4.7544263093835175
Encrypted:	false
SSDEEP:	6:tI9mc4slzXdhC/O4TK4G2aCM0xtjJiIXqtOqb8:t4BdU/PTKd2aCJNJuwg8
MD5:	FCCB5B63C531135AED8DE27B53524DA2
SHA1:	2728DF6E252417B7DEF1B3FEFBE82BE52D35B685
SHA-256:	4AB47484995AB72BD8B7175BD36273D3E8787CF3E1E28A4F695FEE07E8D0884D
SHA-512:	1343A22DEB2C25021302CB0B7F3BFCAD262FAD687C9C4A546A686463571829E4E1D3EEDD05C3BF5FEFE480EAE2E3327B5DC72AEC559340AD981B32846BCAA47D
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24"><path d="M12 2C6.48 2 2 6.48 2 12s4.48 10 10 10 10-4.48 10-10S17.52 2 12 2zm1 15h-2v-2h2v2zm0-4h-2V7h2v6z"/></svg>

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (720)
Category:	downloaded
Size (bytes):	779
Entropy (8bit):	5.117217483504285
Encrypted:	false
SSDEEP:	24:9dFsjJnQY4eINpyZ61VJwkQHCxN9wLruz7:jFsj9QeINpyZ63vUCxN9wLruz7
MD5:	0D2E1AF6448377D986D2E60402B8BAE3
SHA1:	BB06BE7AD24027CD57F60F225D2E6AF2A0F8C43A
SHA-256:	CF4FBA8C674C5E68F2607FB36E2B678A9CD13B009993DF62C473114D6FBA3958
SHA-512:	4240277367EEE8FD4019672FB6649697A4875342F08725B4C11519F2C1E95174D5B6A48AB25A23BEC63FEA895220E88FB207A25B83B9A9A420147209A32AECDF
Malicious:	false
Reputation:	low
URL:	https://secure.login.gov/packs/track-errors-e9df8e72.digested.js
Preview:	(()=>{"use strict";let e;const n=(n,t)=>{let{name:o,message:r,stack:a}=n,{filename:i,errorId:c}=t;return function(n,t){const o=function(n){if(void 0===e)try{e=JSON.parse(document.querySelector("[data-config]")?.textContent\|\|"")}catch{e={}}return e[n]}("analyticsEndpoint");if(o&&navigator.sendBeacon){const e=JSON.stringify({event:"Frontend Error",payload:t}),n=new Blob([e],{type:"application/json"});navigator.sendBeacon(o,n)}}(0,{name:o,message:r,stack:a,filename:i,error_id:c})},{_e:t}=window,o=e=>function(e){try{const{host:n,pathname:t}=new URL(e.filename);return n===window.location.host&&t.endsWith(".js")}catch{return!1}}(e)&&n(e.error,{filename:e.filename});t.forEach(o),window.addEventListener("error",o)})();.//# sourceMappingURL=track-errors-e9df8e72.digested.js.map

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	227
Entropy (8bit):	4.856243151285891
Encrypted:	false
SSDEEP:	6:tI9mc4slzXdhC/O4Ht/Wgnoc6XTpffEEkl3ZGUKz:t4BdU/PN/Joc6Dxc9JKz
MD5:	C798AB7EB73F024DE947B7727247B3C0
SHA1:	DCBF843A4E2003A3E1FD104CC62A3563544AEC62
SHA-256:	EB2AB39390E600818A54D3FBC2184213B651FCC5605F3366D1FD1191C4397121
SHA-512:	F4A900CE9BE9F9B67A024D4D299C7CDC3F967525D129EBC694DB9A7D9AD5179D7BCAC6B068B13B09DFC0734C63C38B9C348DE7B438A0948BBFE8CEBA9B97BFE4
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24"><path d="M19 19H5V5h7V3H5a2 2 0 0 0-2 2v14a2 2 0 0 0 2 2h14c1.1 0 2-.9 2-2v-7h-2v7zM14 3v2h3.59l-9.83 9.83 1.41 1.41L19 6.41V10h2V3h-7z"/></svg>

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2244
Entropy (8bit):	4.878198288681078
Encrypted:	false
SSDEEP:	48:c/kzklRTaqotczsISJ3rqJkWqmfa2TamXYTaArBliDsX6gSZu2TayA:4IkHqtjJOmlmjFYbHiIX6trA
MD5:	D1531F987CBD63B4365BCDF8960BF62A
SHA1:	B7FD9E8CA741389E72BA78B098701E704AA8555B
SHA-256:	67778024563469ABCA3B0FF14BD70A1984A6F1971EDC0BC7AF76F17446999A5A
SHA-512:	D87A3F3117CA227E3E82BF8FF752C08F37BE37F68D6E90744D0E577FCAD1008C08106E4BA8B01328EC728C49187783A088B0CBC924CA38D071AF5EACED16B89E
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<svg width="180px" height="180px" viewBox="0 0 180 180" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 39.1 (31720) - http://www.bohemiancoding.com/sketch -->. <title>square-gsa</title>. <desc>Created with Sketch.</desc>. <defs></defs>. <g id="Page-1" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="square-gsa">. <g id="Star_Mark">. <polygon id="Shape" fill="#FFFFFF" points="0 0 0 180 180 180 180 0"></polygon>. <path d="M91.52,124.76 C95.1,126.57 98.79,128.84 98.79,133.46 C98.79,139.46 93.61,141.86 88.44,141.94 C84.44,142 79.74,140.37 76.09,138.87 L75.09,147.97 C79.0626197,149.412725 83.2216323,150.278204 87.44,150.54 C98.9,150.91 108.83,145.63 108.83,132.98 C108.83,121.39 100.23,117.98 91.83,113.76 C88.73,112.21 84.56,110.11 84.56,106.05 C84.56,100.85 89.19,99.27 93.69,99.27 C9

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	896
Entropy (8bit):	4.263489687754576
Encrypted:	false
SSDEEP:	24:t4TU/enunk1rDmONgOM7fa4jgHOVQRDQ6+8LcHztu:D/7k97gOGzSE6sTY
MD5:	73F80805DA54FB31A09468B25E3E5DD9
SHA1:	187C709C5C9DFE9CF48215D3325D17707B5E5143
SHA-256:	75447D6B2A86BFF1AC0AF83745BCF868901AA6232D3FE89296FA5E39F082570A
SHA-512:	2CCA7B7EAA13645BF18BEED6DB3C3C159062FBAD7A252CA6DD0CC0DA2C0C3D6DE54EFC426158AC2901F80A29B7B9A37880445C317981B7FD225ABCC285EDE4AB
Malicious:	false
Reputation:	low
URL:	https://secure.login.gov/assets/usa-icons/language-933750f3.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24"><path d="M11.99 2C6.47 2 2 6.48 2 12s4.47 10 9.99 10C17.52 22 22 17.52 22 12S17.52 2 11.99 2zm6.93 6h-2.95a15.65 15.65 0 0 0-1.38-3.56A8.03 8.03 0 0 1 18.92 8zM12 4.04c.83 1.2 1.48 2.53 1.91 3.96h-3.82c.43-1.43 1.08-2.76 1.91-3.96zM4.26 14C4.1 13.36 4 12.69 4 12s.1-1.36.26-2h3.38c-.08.66-.14 1.32-.14 2 0 .68.06 1.34.14 2H4.26zm.82 2h2.95c.32 1.25.78 2.45 1.38 3.56A7.987 7.987 0 0 1 5.08 16zm2.95-8H5.08a7.987 7.987 0 0 1 4.33-3.56A15.65 15.65 0 0 0 8.03 8zM12 19.96c-.83-1.2-1.48-2.53-1.91-3.96h3.82c-.43 1.43-1.08 2.76-1.91 3.96zM14.34 14H9.66c-.09-.66-.16-1.32-.16-2 0-.68.07-1.35.16-2h4.68c.09.65.16 1.32.16 2 0 .68-.07 1.34-.16 2zm.25 5.56c.6-1.11 1.06-2.31 1.38-3.56h2.95a8.03 8.03 0 0 1-4.33 3.56zM16.36 14c.08-.66.14-1.32.14-2 0-.68-.06-1.34-.14-2h3.38c.16.64.26 1.31.26 2s-.1 1.36-.26 2h-3.38z"/></svg>

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	633
Entropy (8bit):	4.7001009676040635
Encrypted:	false
SSDEEP:	12:TMHdidlffGCkfsjMtwZv6WZz7xrzpVUp0Vbttfuui0VXb4ezUU8O:2diddubfQMtlWtdJVUSVeui0VroO
MD5:	EA3237DD9E7F4F959299BC2CF6B61356
SHA1:	F4A6791B73B602F770F316728DBA3A9E53EF0A51
SHA-256:	D0228750C35AA8389308C85C3CD6A2175B5FDB950C4F048D731E05D3075CDA15
SHA-512:	0EEA333D5A689279F8CF6F0DA557F2208F7AAC3B7F46CDF7363654ACA30437835D59CFF1B25CFE7000C7EFE562AEC63AAD815D0E2979E3BCECB263C2E19AA560
Malicious:	false
Reputation:	low
URL:	https://secure.login.gov/assets/icon-dot-gov-c85c77ab.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="64" height="64" viewBox="0 0 64 64"><title>icon-dot-gov</title><path fill="#2378C3" fill-rule="evenodd" d="m32 0c17.7 0 32 14.3 32 32s-14.3 32-32 32-32-14.3-32-32 14.3-32 32-32zm0 1.2c-17 0-30.8 13.8-30.8 30.8s13.8 30.8 30.8 30.8 30.8-13.8 30.8-30.8-13.8-30.8-30.8-30.8zm11.4 38.9c.5 0 .9.4.9.8v1.6h-24.6v-1.6c0-.5.4-.8.9-.8zm-17.1-12.3v9.8h1.6v-9.8h3.3v9.8h1.6v-9.8h3.3v9.8h1.6v-9.8h3.3v9.8h.8c.5 0 .9.4.9.8v.8h-21.4v-.8c0-.5.4-.8.9-.8h.8v-9.8zm5.7-8.2 12.3 4.9v1.6h-1.6c0 .5-.4.8-.9.8h-19.6c-.5 0-.9-.4-.9-.8h-1.6v-1.6s12.3-4.9 12.3-4.9z"/></svg>

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	108
Entropy (8bit):	5.189381368302678
Encrypted:	false
SSDEEP:	3:mMiSNDrGKHT0emjftPTTWKatzpih8sYn:DLBiU0jLTNatzp48sYn
MD5:	A5194A2D006DC8FA2F8E6FCBFAFA7179
SHA1:	F691E297B449851EC156C19D404ADCAC891E997C
SHA-256:	4A8F4A6AD617B230CBBE1668406EC89E13BAF85F47F4C39E32A512AF0C9684E5
SHA-512:	53FCAC547837D393EE9228D67EA1996C0206AF54373C04A97D9841573E5106C6A1807A5FD76E6A35E508E3CC5B63834EF21BCAD0FD47210C7EFF9038953D77C0
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xNDkSHgkt--Q8cxvC8BIFDeeNQA4SBQ2__yEuEgUNg4VxnA==?alt=proto
Preview:	Ck0KDQ3njUAOGgQIVhgCIAEKLw2//yEuGgQITBgCKiIIClIeChQhQCQjKi5fJj8tJS8rXiksKD06JxABGP////8PCgsNg4VxnBoECF8YAg==

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (3694), with no line terminators
Category:	downloaded
Size (bytes):	3720
Entropy (8bit):	4.77165083222539
Encrypted:	false
SSDEEP:	48:UXMe7+ZiJ+usw8bGwYl3xcjmRWPcXeByvv357E9i2ibLgpCAPT4zKzBw9yjCB5Md:U8cYXu7a26yvvMkeh4iS9yWB5JU
MD5:	43C0FE0971E917007252BAC56C7BE940
SHA1:	C921B8D8F8DCD3549958E84453168D5165993A52
SHA-256:	DC4EE9CC2D5ADD1E23CD1D29BF77B283D1581A153756C5BF0677BA91D455E909
SHA-512:	05CC69FE07C272D90728C03A60E9A7012C0AD7AFB67503A464E0F60D7DB2AE4BF537B37E3011F01BF85873FAC676C520F7D7B4FA7C4525A7BE20FC118F5895DC
Malicious:	false
Reputation:	low
URL:	https://secure.login.gov/packs/password_strength_component-5dc65abd.digested-d55a7dd4.en.js
Preview:	_locale_data=Object.assign({"zxcvbn.feedback.a_word_by_itself_is_easy_to_guess":"A word by itself is easy to guess","zxcvbn.feedback.add_another_word_or_two_uncommon_words_are_better":"Add another word or two. Uncommon words are better","zxcvbn.feedback.all_uppercase_is_almost_as_easy_to_guess_as_all_lowercase":"All-uppercase is almost as easy to guess as all-lowercase","zxcvbn.feedback.avoid_dates_and_years_that_are_associated_with_you":"Avoid dates and years that are associated with you","zxcvbn.feedback.avoid_recent_years":"Avoid recent years","zxcvbn.feedback.avoid_repeated_words_and_characters":"Avoid repeated words and characters","zxcvbn.feedback.avoid_sequences":"Avoid sequences","zxcvbn.feedback.avoid_years_that_are_associated_with_you":"Avoid years that are associated with you","zxcvbn.feedback.capitalization_doesnt_help_very_much":"Capitalization doesn.t help very much","zxcvbn.feedback.common_names_and_surnames_are_easy_to_guess":"Common names and surnames are easy to gue

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	217
Entropy (8bit):	4.787942748764524
Encrypted:	false
SSDEEP:	6:tI9mc4slzXdhC/O4TK4G2aCM0xtFi9RFmri:t4BdU/PTKd2aCJG9X
MD5:	BD609ED003C5C20DA050D95AE96F9986
SHA1:	C3EF80F67EE23AB790100B78D808DBF2B1C05D22
SHA-256:	2222CA5B7C5D200F98016BDE2F582EFFA9E90D9D35BB9492DB1EE1CE4895C24E
SHA-512:	6B9A53BED85955C4D96FF1B834A0A634D3A79BEF336F8C050D4A78E685867A4ECFFAF8B26BEFEEAEC6DA2F05299383291A6553FA0B5A3B5FD46ECC4B445FA585
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24"><path d="M12 2C6.48 2 2 6.48 2 12s4.48 10 10 10 10-4.48 10-10S17.52 2 12 2zm-2 15-5-5 1.41-1.41L10 14.17l7.59-7.59L19 8l-9 9z"/></svg>

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	733
Entropy (8bit):	4.359876122577051
Encrypted:	false
SSDEEP:	12:t4AT5VaKJtkGg07u+/5jQ62FYYLFJZ4LtwTMKA5PiGT/xpDfi2:t4AT5VaKJmy1/VO93qSd/GT7fi2
MD5:	E9F69DF9DEDCCE24D657006B689A18AE
SHA1:	A46248204408661271CA9A3AA38EBF3CECA6DE6B
SHA-256:	21A95B710A2E9F2051F890C26FE188F751FAB4D5C0C8E7F1A30F744083F271C7
SHA-512:	9156369B4F47A269F8E7EDDC91FCF27F7867177806B9E784157618611F74270A2D1D44358720E04949D135FB590C172EACC39A1A17BAF855E6C726AF21E6780E
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="401.994" height="401.994" viewBox="0 0 401.994 401.994"><path fill="#0071bb" d="M394 154.175c-5.33-5.33-11.806-7.994-19.417-7.994H255.81V27.41q0-11.417-7.993-19.414C242.487 2.666 236.02 0 228.397 0h-54.81q-11.42-.001-19.415 7.993-7.995 7.996-7.994 19.414v118.775H27.408q-11.419 0-19.415 7.994C-.003 162.17 0 165.973 0 173.59v54.818q-.002 11.426 7.992 19.41c5.33 5.333 11.803 7.995 19.414 7.995h118.77V374.59c0 7.61 2.665 14.09 7.995 19.417 5.33 5.325 11.806 7.987 19.418 7.987H228.4c7.618 0 14.087-2.662 19.418-7.987 5.332-5.33 7.994-11.806 7.994-19.417V255.813h118.77c7.618 0 14.09-2.662 19.417-7.994 5.325-5.33 7.99-11.797 7.99-19.415v-54.82c0-7.615-2.66-14.086-7.993-19.413z"/></svg>

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4397)
Category:	dropped
Size (bytes):	4455
Entropy (8bit):	5.251140370650572
Encrypted:	false
SSDEEP:	96:/8tArbB4OvAZwcmhwN7hdaR/VK3yxIGs0VpZUfud64Fk/f4EDxcbQ+/LsmlGT:QOvAZ7m87G5QsF3U2rq/AWz+zyT
MD5:	CE454B849EBC7BD6F82B46992211D9FE
SHA1:	0551A029108541C6947696043A533FE13A64D6DF
SHA-256:	15D278AF6E95AF9375B60847BFA94D84125B92B344ECCA4B724B0A720ECD8875
SHA-512:	34684461385F62C1C3E1C71FB1F29F3BE502CC4D58A0173B88D339FE93072DDF5931000F40E7E3C4F18312AA1B147C7D70364CCD90821845D86CF91AFB5747D0
Malicious:	false
Reputation:	low
Preview:	(()=>{var t={1032:(t,e,r)=>{const n=r(2960),o=r(9862),i=r(6476),s=r(6849),{CLICK:c}=r(3995),{prefix:u}=r(1644),a=`.${u}-accordion, .${u}-accordion--bordered`,f=`.${u}-accordion__button[aria-controls]:not(.${u}-banner__button)`,l="aria-expanded",d=t=>n(f,t).filter((e=>e.closest(a)===t)),p=(t,e)=>{const r=t.closest(a);let n=e;if(!r)throw new Error(`${f} is missing outer ${a}`);n=i(t,e);const o=r.hasAttribute("data-allow-multiple");n&&!o&&d(r).forEach((e=>{e!==t&&i(e,!1)}))},h=o({[c]:{[f](){p(this),"true"===this.getAttribute(l)&&(s(this)\|\|this.scrollIntoView())}}},{init(t){n(f,t).forEach((t=>{const e="true"===t.getAttribute(l);p(t,e)}))},ACCORDION:a,BUTTON:f,show:t=>p(t,!0),hide:t=>p(t,!1),toggle:p,getButtons:d});t.exports=h},3994:(t,e,r)=>{const n=r(9862),o=r(2960),{CLICK:i}=r(3995),{prefix:s}=r(1644),c=r(6476),u=`.${s}-banner__header`,a=`${s}-banner__header--expanded`,f=`${u} [aria-controls]`;t.exports=n({[i]:{[f]:function(t){t.preventDefault();const e=t.target.closest(f);c(e),this.clos

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	227
Entropy (8bit):	4.856243151285891
Encrypted:	false
SSDEEP:	6:tI9mc4slzXdhC/O4Ht/Wgnoc6XTpffEEkl3ZGUKz:t4BdU/PN/Joc6Dxc9JKz
MD5:	C798AB7EB73F024DE947B7727247B3C0
SHA1:	DCBF843A4E2003A3E1FD104CC62A3563544AEC62
SHA-256:	EB2AB39390E600818A54D3FBC2184213B651FCC5605F3366D1FD1191C4397121
SHA-512:	F4A900CE9BE9F9B67A024D4D299C7CDC3F967525D129EBC694DB9A7D9AD5179D7BCAC6B068B13B09DFC0734C63C38B9C348DE7B438A0948BBFE8CEBA9B97BFE4
Malicious:	false
Reputation:	low
URL:	https://secure.login.gov/assets/usa-icons/launch-d24c854a.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24"><path d="M19 19H5V5h7V3H5a2 2 0 0 0-2 2v14a2 2 0 0 0 2 2h14c1.1 0 2-.9 2-2v-7h-2v7zM14 3v2h3.59l-9.83 9.83 1.41 1.41L19 6.41V10h2V3h-7z"/></svg>

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with no line terminators
Category:	downloaded
Size (bytes):	130
Entropy (8bit):	4.6808938138138405
Encrypted:	false
SSDEEP:	3:pGkEinPUDLNeHGTvKZSBtQDMXnLrC86fH8LYXBJzlAyE5ecEif:pGNIPUDLMHEHWMHn6vXXlUGG
MD5:	C91E2922E143CB345E0B86922F4AC20A
SHA1:	2C96B877B92A38A8FAA5E0C4C25408A2C1819FB2
SHA-256:	20868D5171E10624BBB14F187D4610B33C314560826B6A8B37EAEDDD155E97C4
SHA-512:	22D283ADD3AA97FD43AB35AABB2BFFC33B42F25A5B4A14D1B857D10F87D4AC047202043490B198BF4959663CB33BB7174FB72DCAF8345DE7F36A602165C12671
Malicious:	false
Reputation:	low
URL:	https://secure.login.gov/packs/password_confirmation_component-1a3edc7d.digested-4a05fc12.en.js
Preview:	_locale_data=Object.assign({"components.password_confirmation.errors.mismatch":"Your passwords don.t match"},this._locale_data);

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 173 x 40, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	7273
Entropy (8bit):	7.952162684288075
Encrypted:	false
SSDEEP:	192:nh3Ba4Z8u5WrPbxZd8eH6tlZfDKs7c/vB:zatu5WjbxZCeH+IEc/p
MD5:	EDE8EE9B2A11808E868E9B0FC775D010
SHA1:	8FD2691BEBCA1267E56B5C5C1872EE7B0E1E18A8
SHA-256:	FB856801CEE02598F90CD54EC8B6DAC0B66712FA46323C1305AE23BBE9ADD970
SHA-512:	414E5CD8E733174A79EEEDFA931BE4E38342691FD2BC73D976789C86AACC707831056190F4E156DED9FC27CD8CD5EBBC98EE2C4464E3A8D2338B27F2A7069D9B
Malicious:	false
Reputation:	low
URL:	https://secure.login.gov/assets/sp-logos/treasury_caia_logo-8faaee80.png
Preview:	.PNG........IHDR.......(.......z(...0IDATx..{..Uy...={.$......(r...XT..9.L.. 6..m..VkO.V..[.G[..L.@Q....r9\.".j...XL.%!.L.3.......c.I&..$.s..O...'{.w.....=.z#^..:..(B.h..D.!.....RI..P..1..lV.N+.z..^N.c..^...j...D0....L..a@...Q]0..@.(....!.....^k.9......?..@..m.. D.....B..U....;....`.[z8@...H.dWA.,W......z...m...=..=.c..B../..1...cA' ...z$E.b.f.......3...Y.l......Z....l....a..bG....'o.u...~C.F.....X1>.8Fb=.i ..l.x....8...k&G...d .../..{.............O..+.]....o..1.....Y~..V`.p.(......K<n.&.i8...@.....%...=...Q8...l....m.........1;w..c/.-'mW..b....C...........x..s..#.6.h......G../xV.....E.qp?.LC.x...j....a..-....2.'..Jz.G..J.......k...g.X..A.xX.uB.....Ez.C.-.O...z.y.:.a?....s..#\|,.4..8.(....u6W.?...(..$'l*{k.....g<A..I.c5hS.Y..0.@1k....b.9..H(....d.:.X....U.O.Cl..8..1p3.?.d.n....A_.......4.g...o...>ZA..6...Z.U.)J.5L.um2l...M...$..@.-.p.A..M5.y .iDG..P.M..+..#.Na.......\].`.2..,....(......y-s...E...K..Dj..z..z..a\.j...}k..\...r.w..)........}C

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.422789719813002
Encrypted:	false
SSDEEP:	3:+DAD23JVRI3ykSjOoZI3ykDt:ec27AytyRyu
MD5:	4F46F5025E3BF11AFB6A45CFD50D9041
SHA1:	2409EBC71B7A005F2D32FE192F9CB65A47B46800
SHA-256:	637353EC9E6BE5CC2EED7DFC30FD7B177D151A0F247F8801355D91677CF3B5C6
SHA-512:	F7ADA320170F93E21C93BD86C369C15011D8EB8AD780A163E28B29A4F40536AB3A0DD1C07149F8165B6EB8F5F5473B0C450D433E20626C1ACBDD4384D36F63C6
Malicious:	false
Reputation:	low
URL:	https://secure.login.gov/assets/print-dbe18894.css
Preview:	nav,footer,.usa-button,.usa-radio__input--bordered,.usa-checkbox__input--bordered{display:none}

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	821379
Entropy (8bit):	4.5990447210214365
Encrypted:	false
SSDEEP:	12288:kimqQPgH8T4J2+pTuyfPEWEmUVlHybZeb391Kl4Af7ei:KqQPlT4JVREDSbs9aR
MD5:	41A04029BB2EB5672DCA010036770D39
SHA1:	2CCAE444CEA64B3375C482074908DE2D465FBA7C
SHA-256:	49F5F6D13D09AF434B3DE791AE5C685C0893F750FC370B19233622F46D0A0037
SHA-512:	CB3C22079DCD5D72604447F9F7DB6F4AE18644A10D09FA9C27BC220790FD98608393BB4806BF408B955EF835F17707192CAE207C22F118DC316BE7D6021F3BBC
Malicious:	false
Reputation:	low
Preview:	(()=>{var e={2442:e=>{var a;a={qwerty:{"!":["`~",null,null,"2@","qQ",null],'"':[";:","[{","]}",null,null,"/?"],"#":["2@",null,null,"4$","eE","wW"],$:["3#",null,null,"5%","rR","eE"],"%":["4$",null,null,"6^","tT","rR"],"&":["6^",null,null,"8","uU","yY"],"'":[";:","[{","]}",null,null,"/?"],"(":["8",null,null,"0)","oO","iI"],")":["9(",null,null,"-_","pP","oO"],"":["7&",null,null,"9(","iI","uU"],"+":["-_",null,null,null,"]}","[{"],",":["mM","kK","lL",".>",null,null],"-":["0)",null,null,"=+","[{","pP"],".":[",<","lL",";:","/?",null,null],"/":[".>",";:","'\"",null,null,null],0:["9(",null,null,"-_","pP","oO"],1:["`~",null,null,"2@","qQ",null],2:["1!",null,null,"3#","wW","qQ"],3:["2@",null,null,"4$","eE","wW"],4:["3#",null,null,"5%","rR","eE"],5:["4$",null,null,"6^","tT","rR"],6:["5%",null,null,"7&","yY","tT"],7:["6^",null,null,"8","uU","yY"],8:["7&",null,null,"9(","iI","uU"],9:["8*",null,null,"0)","oO","iI"],":":["lL","pP","[{","'\"","/?",".>"],";":["lL","pP","[{","'\"","/?",".>"],"<":["mM

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2244
Entropy (8bit):	4.878198288681078
Encrypted:	false
SSDEEP:	48:c/kzklRTaqotczsISJ3rqJkWqmfa2TamXYTaArBliDsX6gSZu2TayA:4IkHqtjJOmlmjFYbHiIX6trA
MD5:	D1531F987CBD63B4365BCDF8960BF62A
SHA1:	B7FD9E8CA741389E72BA78B098701E704AA8555B
SHA-256:	67778024563469ABCA3B0FF14BD70A1984A6F1971EDC0BC7AF76F17446999A5A
SHA-512:	D87A3F3117CA227E3E82BF8FF752C08F37BE37F68D6E90744D0E577FCAD1008C08106E4BA8B01328EC728C49187783A088B0CBC924CA38D071AF5EACED16B89E
Malicious:	false
Reputation:	low
URL:	https://secure.login.gov/assets/sp-logos/square-gsa-2e9100eb.svg
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<svg width="180px" height="180px" viewBox="0 0 180 180" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 39.1 (31720) - http://www.bohemiancoding.com/sketch -->. <title>square-gsa</title>. <desc>Created with Sketch.</desc>. <defs></defs>. <g id="Page-1" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="square-gsa">. <g id="Star_Mark">. <polygon id="Shape" fill="#FFFFFF" points="0 0 0 180 180 180 180 0"></polygon>. <path d="M91.52,124.76 C95.1,126.57 98.79,128.84 98.79,133.46 C98.79,139.46 93.61,141.86 88.44,141.94 C84.44,142 79.74,140.37 76.09,138.87 L75.09,147.97 C79.0626197,149.412725 83.2216323,150.278204 87.44,150.54 C98.9,150.91 108.83,145.63 108.83,132.98 C108.83,121.39 100.23,117.98 91.83,113.76 C88.73,112.21 84.56,110.11 84.56,106.05 C84.56,100.85 89.19,99.27 93.69,99.27 C9

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1588
Entropy (8bit):	5.059865998963686
Encrypted:	false
SSDEEP:	24:t44RJA68G4mo79MY5hUR5zuvoeweBqGJM7GBntFqxFbBPKDQErHxBZXBx2V2eFTr:v8b9Z7oJKqGu+qXbcQmHXZR4VQ0
MD5:	958C8A5BD4905ED57BC86111C578D3B7
SHA1:	6C3C6AD6886C76948593354A75F5AB56B1F58A21
SHA-256:	717B7BF68AE01AC8DF2D52A13BA1CC9E3C85299A3E91975782FF248776B409BB
SHA-512:	EFE6BA67E5485A73FCFCFA44AE8DF1B498F8ABF9B384C5E028878679547A5E215DDCFA97558E232ED6B45FDBAA27AD75D486665B2EDA13D0F06F310EEEFD4EB7
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="100" height="100" fill="none" viewBox="0 0 100 100"><g filter="url(#a)"><path fill="#fff" d="M50 94c24.3 0 44-19.7 44-44S74.3 6 50 6 6 25.7 6 50s19.7 44 44 44"/></g><path fill="#F5D600" d="M50 89.6c21.87 0 39.6-17.73 39.6-39.6S71.87 10.399 50 10.399c-21.872 0-39.602 17.73-39.602 39.6 0 21.872 17.73 39.602 39.601 39.602Z"/><path fill="#fff" d="M50 85.64c19.683 0 35.64-15.956 35.64-35.64S69.683 14.36 50 14.36c-19.685 0-35.642 15.956-35.642 35.64S30.315 85.64 50 85.64"/><path fill="#F5D600" d="M33.715 64.672a4.71 4.71 0 0 1-4.133-2.393 4.72 4.72 0 0 1 .019-4.776l16.288-27.857a4.72 4.72 0 0 1 4.112-2.358c1.71 0 3.25.88 4.115 2.358L70.404 57.5a4.72 4.72 0 0 1 .022 4.776 4.71 4.71 0 0 1-4.133 2.393H33.715z"/><path fill="#CAB000" d="M50.001 27.29a4.72 4.72 0 0 1 4.108 2.36L70.4 57.505a4.72 4.72 0 0 1 .018 4.776 4.71 4.71 0 0 1-4.134 2.393H50.001z"/><path fill="#1B1B1B" d="M50 58.393a2.071 2.071 0 1 0 0-4.142 2.071 2.071 0 0 0 0 4.142m-2.07-18.641

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	39
Entropy (8bit):	4.2849009365890725
Encrypted:	false
SSDEEP:	3:JZWSMBOLDCa4Sn:TWJU39n
MD5:	8A0A84EFDD80EE47B76E7C5F207E9A20
SHA1:	3373E2750EE91020977B0F3D631C403804F29449
SHA-256:	714382FFA8558CFBCE8BC6583C8631F2C93F53821403C34483C1C8043DB8691F
SHA-512:	57548B85D909EAF576A825EBB2D39DB0E2CCB3A06E9EB8ED898A16876082290F0AA1A77D2F2E1999F3A75B64B3F17A98120BD6996750E817D1F152C675DEC1C5
Malicious:	false
Reputation:	low
URL:	https://secure.login.gov/assets/password_confirmation_component-7db5a738.css
Preview:	lg-password-confirmation{display:block}

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	633
Entropy (8bit):	4.7001009676040635
Encrypted:	false
SSDEEP:	12:TMHdidlffGCkfsjMtwZv6WZz7xrzpVUp0Vbttfuui0VXb4ezUU8O:2diddubfQMtlWtdJVUSVeui0VroO
MD5:	EA3237DD9E7F4F959299BC2CF6B61356
SHA1:	F4A6791B73B602F770F316728DBA3A9E53EF0A51
SHA-256:	D0228750C35AA8389308C85C3CD6A2175B5FDB950C4F048D731E05D3075CDA15
SHA-512:	0EEA333D5A689279F8CF6F0DA557F2208F7AAC3B7F46CDF7363654ACA30437835D59CFF1B25CFE7000C7EFE562AEC63AAD815D0E2979E3BCECB263C2E19AA560
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="64" height="64" viewBox="0 0 64 64"><title>icon-dot-gov</title><path fill="#2378C3" fill-rule="evenodd" d="m32 0c17.7 0 32 14.3 32 32s-14.3 32-32 32-32-14.3-32-32 14.3-32 32-32zm0 1.2c-17 0-30.8 13.8-30.8 30.8s13.8 30.8 30.8 30.8 30.8-13.8 30.8-30.8-13.8-30.8-30.8-30.8zm11.4 38.9c.5 0 .9.4.9.8v1.6h-24.6v-1.6c0-.5.4-.8.9-.8zm-17.1-12.3v9.8h1.6v-9.8h3.3v9.8h1.6v-9.8h3.3v9.8h1.6v-9.8h3.3v9.8h.8c.5 0 .9.4.9.8v.8h-21.4v-.8c0-.5.4-.8.9-.8h.8v-9.8zm5.7-8.2 12.3 4.9v1.6h-1.6c0 .5-.4.8-.9.8h-19.6c-.5 0-.9-.4-.9-.8h-1.6v-1.6s12.3-4.9 12.3-4.9z"/></svg>

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	102740
Entropy (8bit):	5.094695619764219
Encrypted:	false
SSDEEP:	768:5A8GS7d5p9pLkU6hgXNDzDpvwTgNmldR4vW5Z:G8GS7d5p9pQUbDzDpO4+5Z
MD5:	2E1A31928230114BAA62FE3C6A6AED6A
SHA1:	9DE83F35C63B6C8730124DC71EC93B0F29368FDA
SHA-256:	0FF01719BBB3C2A478876D367151A8C8170CCA4C24F6BA14937CB31708C4F8FC
SHA-512:	BCC5193AA62CA7D1A83BDC6CC3ACAEBA382D49ABB66950A9AF7A68AD0B89B7EADBAEBF414A6F87645A3983629CB34DB51EFAA27C417B97D9D337B47C444683DC
Malicious:	false
Reputation:	low
URL:	https://secure.login.gov/assets/application-1d4fbf32.css
Preview:	.usa-select,.usa-radio__label,.usa-hint,.usa-checkbox__label,.usa-fieldset,.usa-input{font-family:Public Sans Web,-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,Helvetica,Arial,sans-serif,Apple Color Emoji,Segoe UI Emoji,Segoe UI Symbol;font-size:1rem;line-height:1.4}.usa-select,.usa-input{-webkit-appearance:none;appearance:none;color:#454545;border:1px solid #5c5c5c;border-radius:0;width:100%;max-width:30rem;height:2.5rem;margin-top:.25rem;padding:.5rem;display:block}@font-face{font-family:Roboto Mono Web;font-style:normal;font-weight:400;font-display:fallback;src:url("/assets/roboto-mono/roboto-mono-v5-latin-regular-eecd52a4.woff2")format("woff2")}@font-face{font-family:Roboto Mono Web;font-style:normal;font-weight:700;font-display:fallback;src:url("/assets/roboto-mono/roboto-mono-v5-latin-700-14cec979.woff2")format("woff2")}@font-face{font-family:Roboto Mono Web;font-style:italic;font-weight:400;font-display:fallback;src:url("/assets/roboto-mono/roboto-mono-v5-latin-italic-0699878

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (3694), with no line terminators
Category:	dropped
Size (bytes):	3720
Entropy (8bit):	4.77165083222539
Encrypted:	false
SSDEEP:	48:UXMe7+ZiJ+usw8bGwYl3xcjmRWPcXeByvv357E9i2ibLgpCAPT4zKzBw9yjCB5Md:U8cYXu7a26yvvMkeh4iS9yWB5JU
MD5:	43C0FE0971E917007252BAC56C7BE940
SHA1:	C921B8D8F8DCD3549958E84453168D5165993A52
SHA-256:	DC4EE9CC2D5ADD1E23CD1D29BF77B283D1581A153756C5BF0677BA91D455E909
SHA-512:	05CC69FE07C272D90728C03A60E9A7012C0AD7AFB67503A464E0F60D7DB2AE4BF537B37E3011F01BF85873FAC676C520F7D7B4FA7C4525A7BE20FC118F5895DC
Malicious:	false
Reputation:	low
Preview:	_locale_data=Object.assign({"zxcvbn.feedback.a_word_by_itself_is_easy_to_guess":"A word by itself is easy to guess","zxcvbn.feedback.add_another_word_or_two_uncommon_words_are_better":"Add another word or two. Uncommon words are better","zxcvbn.feedback.all_uppercase_is_almost_as_easy_to_guess_as_all_lowercase":"All-uppercase is almost as easy to guess as all-lowercase","zxcvbn.feedback.avoid_dates_and_years_that_are_associated_with_you":"Avoid dates and years that are associated with you","zxcvbn.feedback.avoid_recent_years":"Avoid recent years","zxcvbn.feedback.avoid_repeated_words_and_characters":"Avoid repeated words and characters","zxcvbn.feedback.avoid_sequences":"Avoid sequences","zxcvbn.feedback.avoid_years_that_are_associated_with_you":"Avoid years that are associated with you","zxcvbn.feedback.capitalization_doesnt_help_very_much":"Capitalization doesn.t help very much","zxcvbn.feedback.common_names_and_surnames_are_easy_to_guess":"Common names and surnames are easy to gue

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	896
Entropy (8bit):	4.263489687754576
Encrypted:	false
SSDEEP:	24:t4TU/enunk1rDmONgOM7fa4jgHOVQRDQ6+8LcHztu:D/7k97gOGzSE6sTY
MD5:	73F80805DA54FB31A09468B25E3E5DD9
SHA1:	187C709C5C9DFE9CF48215D3325D17707B5E5143
SHA-256:	75447D6B2A86BFF1AC0AF83745BCF868901AA6232D3FE89296FA5E39F082570A
SHA-512:	2CCA7B7EAA13645BF18BEED6DB3C3C159062FBAD7A252CA6DD0CC0DA2C0C3D6DE54EFC426158AC2901F80A29B7B9A37880445C317981B7FD225ABCC285EDE4AB
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24"><path d="M11.99 2C6.47 2 2 6.48 2 12s4.47 10 9.99 10C17.52 22 22 17.52 22 12S17.52 2 11.99 2zm6.93 6h-2.95a15.65 15.65 0 0 0-1.38-3.56A8.03 8.03 0 0 1 18.92 8zM12 4.04c.83 1.2 1.48 2.53 1.91 3.96h-3.82c.43-1.43 1.08-2.76 1.91-3.96zM4.26 14C4.1 13.36 4 12.69 4 12s.1-1.36.26-2h3.38c-.08.66-.14 1.32-.14 2 0 .68.06 1.34.14 2H4.26zm.82 2h2.95c.32 1.25.78 2.45 1.38 3.56A7.987 7.987 0 0 1 5.08 16zm2.95-8H5.08a7.987 7.987 0 0 1 4.33-3.56A15.65 15.65 0 0 0 8.03 8zM12 19.96c-.83-1.2-1.48-2.53-1.91-3.96h3.82c-.43 1.43-1.08 2.76-1.91 3.96zM14.34 14H9.66c-.09-.66-.16-1.32-.16-2 0-.68.07-1.35.16-2h4.68c.09.65.16 1.32.16 2 0 .68-.07 1.34-.16 2zm.25 5.56c.6-1.11 1.06-2.31 1.38-3.56h2.95a8.03 8.03 0 0 1-4.33 3.56zM16.36 14c.08-.66.14-1.32.14-2 0-.68-.06-1.34-.14-2h3.38c.16.64.26 1.31.26 2s-.1 1.36-.26 2h-3.38z"/></svg>

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (760), with no line terminators
Category:	downloaded
Size (bytes):	760
Entropy (8bit):	4.913292050645289
Encrypted:	false
SSDEEP:	12:Ap8Ah9qpVcK+jboJpVapVqRJqoSpVEeJqhSpVHWuIoJqrmSpVYJqAWSpV+kaxAZW:mmJ+IDiCCqefBNoC3F4xOW
MD5:	32C8660352DE8CE382EF97F9423BF359
SHA1:	C6E13BDDAD350946AA5155A689158ADBE84A6E2D
SHA-256:	469293892716002403788BEC1999C85EE479411DEC749A1633FCBE7856B5E508
SHA-512:	8B23C43222EC31104871D347C52D8BF29ECEBD675F7BD07843144A00BFF63B334D6A181BE91611132C30AD170751472662EFFE057DB0284A34DB05EAE0D5E91D
Malicious:	false
Reputation:	low
URL:	https://secure.login.gov/assets/password_strength_component-bbafaadb.css
Preview:	.password-strength__meter{margin-top:.5rem;margin-bottom:.25rem;display:flex}.password-strength__meter-bar{background-color:#dedede;border-radius:2px;flex-basis:25%;height:.5rem}.password-strength__meter-bar+.password-strength__meter-bar{margin-left:.5rem}lg-password-strength[score="1"] .password-strength__meter-bar:nth-child(-n+1){background-color:#e21c3d}lg-password-strength[score="2"] .password-strength__meter-bar:nth-child(-n+2){background-color:#f5d600}lg-password-strength[score="3"] .password-strength__meter-bar:nth-child(-n+3){background-color:#a6d5af}lg-password-strength[score="4"] .password-strength__meter-bar:nth-child(-n+4){background-color:#18852e}.password-strength__strength{font-weight:700}.password-strength__feedback{font-style:italic}

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	733
Entropy (8bit):	4.359876122577051
Encrypted:	false
SSDEEP:	12:t4AT5VaKJtkGg07u+/5jQ62FYYLFJZ4LtwTMKA5PiGT/xpDfi2:t4AT5VaKJmy1/VO93qSd/GT7fi2
MD5:	E9F69DF9DEDCCE24D657006B689A18AE
SHA1:	A46248204408661271CA9A3AA38EBF3CECA6DE6B
SHA-256:	21A95B710A2E9F2051F890C26FE188F751FAB4D5C0C8E7F1A30F744083F271C7
SHA-512:	9156369B4F47A269F8E7EDDC91FCF27F7867177806B9E784157618611F74270A2D1D44358720E04949D135FB590C172EACC39A1A17BAF855E6C726AF21E6780E
Malicious:	false
Reputation:	low
URL:	https://secure.login.gov/assets/plus-64f58c0a.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="401.994" height="401.994" viewBox="0 0 401.994 401.994"><path fill="#0071bb" d="M394 154.175c-5.33-5.33-11.806-7.994-19.417-7.994H255.81V27.41q0-11.417-7.993-19.414C242.487 2.666 236.02 0 228.397 0h-54.81q-11.42-.001-19.415 7.993-7.995 7.996-7.994 19.414v118.775H27.408q-11.419 0-19.415 7.994C-.003 162.17 0 165.973 0 173.59v54.818q-.002 11.426 7.992 19.41c5.33 5.333 11.803 7.995 19.414 7.995h118.77V374.59c0 7.61 2.665 14.09 7.995 19.417 5.33 5.325 11.806 7.987 19.418 7.987H228.4c7.618 0 14.087-2.662 19.418-7.987 5.332-5.33 7.994-11.806 7.994-19.417V255.813h118.77c7.618 0 14.09-2.662 19.417-7.994 5.325-5.33 7.99-11.797 7.99-19.415v-54.82c0-7.615-2.66-14.086-7.993-19.413z"/></svg>

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	380
Entropy (8bit):	4.740593695899284
Encrypted:	false
SSDEEP:	6:tI9mc4sl3ER9uuHWXhWWdddEGDlob/uuHfHmfVNmWC2VNm2F34KVmfVNm2Fn:t41Ef3etS/3O9NmW9Nm2F3W9Nm2Fn
MD5:	09DD628B9738936E1930CC3C8E4EAE53
SHA1:	55654B5214CBE2B7D524AE602CB2AC1927D2B042
SHA-256:	D8FD178C0803BBC848C5C49DC14FE3F3DACAC7B87B27B6773D86ACD018A6FA3D
SHA-512:	41AA7244C5A0A203CB21D05840914BB2F3E390EFFCC364BDF023494C3625FA358D043F94C00EA528B91F1E9A49A02B1681D8187875195E48B043F9353AE312EB
Malicious:	false
Reputation:	low
URL:	https://secure.login.gov/assets/us_flag-9715e180.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 64 44"><path fill="#fff" d="M0 0h64v44H0z"/><path fill="#da3e1f" d="M0 0h64v4H0zm0 40h64v4H0zm0-8h64v4H0zm0-8h64v4H0zm0-8h64v4H0zm0-8h64v4H0z"/><path fill="#1e33b1" d="M0 0h32v28H0z"/><path fill="#fff" d="M8 12h4v4H8zm16 0h4v4h-4zm-8 0h4v4h-4zm4-8h4v4h-4zm-8 0h4v4h-4zM4 20h4v4H4zm16 0h4v4h-4zm-8 0h4v4h-4zM4 4h4v4H4z"/></svg>.

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 14864, version 2.66
Category:	downloaded
Size (bytes):	14864
Entropy (8bit):	7.987511476273846
Encrypted:	false
SSDEEP:	384:eKFPIbSi8N+a+rqRmFDjhCYGKnAslqk/tG336iuQKT66:3+eDwqyfhCYGxsBVcwQKL
MD5:	E7F5ECF19D97F1ED17817904CF5C233E
SHA1:	5F543D92D7FB38E31418A0EF226C95D64C4A939C
SHA-256:	1BD41E42A636743075951B225289DCB5EB512133333C1DA87DED5CD527AB260F
SHA-512:	878C23B47170FA271C3675B4F9BE9AAA57AEC2C9BE3DFDE345904933A88FB3DAE9B3D0F91A3C117D6B0DDB26F573E37EF4E9B365339E09F4277C30967D9556E7
Malicious:	false
Reputation:	low
URL:	https://secure.login.gov/assets/public-sans/PublicSans-Bold-c73ef2d4.woff2
Preview:	wOF2......:........x..9....B............................F.`..0.`........`..b.6.$.. ..... ..Z. ..=..x5l.F..<p....A#............1...V?..H..l.-.i.ga......Y....-f...L.....?".....`.~..7....Q...Er.0..X..f....'].L..vd.y...m}...d..J.w.....=r...[..9...?..........Nv..:!.o....."X.0&V...6.``4..&bba....c...p..E.....,....m!5...3.\|..t.]...O'`..L..CW9]cO.....?...Y .....].uY..s&I...Nz.U.."?.WC..2;....L.N.n...P...2...OD.S.~.@`.no....n.\|..b...B...k{qA\.$.h..9r.H..av.....O..[......m..\zoA.y..MX4!XS.lH.I..P.`S.)R..D........._T....)....W}.._.........x.=..+.Q.....o...[..8C.k8..u...H..9v}t..I..v...\cd`.43..1...a.Z.N5..u.Q.-h.p..f.$...].^...^.].F....".Wn..".d}7..{.]..i.. !...=.c..(/'..km.vZ~m}.........f.}e1..=.....7$.X... ......"."E.D.~.E. ..@.`A.3.1g..c.b...............0b.@`.<A..H(..m.F.0..qg.'.9.8F<...XX.:..x ..)...":>...z.I,...&Q.^o..+..I.-.......).az.!.o.1.......;3Vs.......(R.A......3`..5.........'.[.2.*T.R.(...:pu...c......d.d.....kt.....4......l)m..5\|.x..".@

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	171
Entropy (8bit):	4.602509191717927
Encrypted:	false
SSDEEP:	3:jTqNeiGCLR1SIALRDRLbPX29jZPEtEs3We1RACHPlBSpR1SIALRDRLbPXlt4WEIi:ULz7ALxRPP6ayEzRJlBSpz7ALxRPP1tM
MD5:	BEC44148E73E737B93FD70E225FF1F87
SHA1:	F849F34D6F0D77B7041BBEF1F2974FEAEF7ECCE5
SHA-256:	78C5D5DA78D1271810AC56EE963453FD44D678F1AB865F376C71C30DDFA314FC
SHA-512:	D75EAA327F94B3DEFE523A8797923645BA5A73A092277DF38DE358B8CFC9054550E9FDDC0C266C183BFB99AFE6DAAD4A70CA30D0FE6888BDFD3EC0F49C54F0BF
Malicious:	false
Reputation:	low
Preview:	"use strict";(()=>{document.documentElement.classList.add("usa-js-loading");addEventListener("load",()=>document.documentElement.classList.remove("usa-js-loading"));})();.

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	301
Entropy (8bit):	4.946214249836953
Encrypted:	false
SSDEEP:	6:90yQpbDRd7H4oQkzLTKE4UqozLTKEyULB7Q2vKRzvL7YmY11M07BRdJBnmBFEV:90D5DRRvQYLlL8U17nv6vAT9lmg
MD5:	1549C8FDD965F5DAB19DDAEFA5DCDC9D
SHA1:	EEF2BAA738933C66DCEB3A2C6C5A94392A07F602
SHA-256:	F3BF3DF73257DAD0C4D958C9C2AD68BB0A2F29B316296991C2B5EDA914B16E45
SHA-512:	C4F765AA8742782BEBA7FC606CB007DCA0B42265B78A4DC962E3CBB37A70E251F4D2EF14C674B0F7FF3EACDB7C907DC3A373161F333EDFE0FD1CDAC854C4D372
Malicious:	false
Reputation:	low
Preview:	(()=>{const e=document.getElementById("js-expire-session");if(e&&e.dataset.sessionTimeoutIn){const t=1e3*parseInt(e.dataset.sessionTimeoutIn,10),s=e.dataset.timeoutRefreshPath\|\|"";setTimeout((()=>{document.location.href=s}),t)}})();.//# sourceMappingURL=session-expire-session-33c940e8.digested.js.map

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	217
Entropy (8bit):	4.787942748764524
Encrypted:	false
SSDEEP:	6:tI9mc4slzXdhC/O4TK4G2aCM0xtFi9RFmri:t4BdU/PTKd2aCJG9X
MD5:	BD609ED003C5C20DA050D95AE96F9986
SHA1:	C3EF80F67EE23AB790100B78D808DBF2B1C05D22
SHA-256:	2222CA5B7C5D200F98016BDE2F582EFFA9E90D9D35BB9492DB1EE1CE4895C24E
SHA-512:	6B9A53BED85955C4D96FF1B834A0A634D3A79BEF336F8C050D4A78E685867A4ECFFAF8B26BEFEEAEC6DA2F05299383291A6553FA0B5A3B5FD46ECC4B445FA585
Malicious:	false
Reputation:	low
URL:	https://secure.login.gov/assets/usa-icons/check_circle-9998d611.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24"><path d="M12 2C6.48 2 2 6.48 2 12s4.48 10 10 10 10-4.48 10-10S17.52 2 12 2zm-2 15-5-5 1.41-1.41L10 14.17l7.59-7.59L19 8l-9 9z"/></svg>

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	720
Entropy (8bit):	4.7252395316953155
Encrypted:	false
SSDEEP:	12:TMHdidlffGCeU/fFKZRMq2R2uK92rdIZgVTz8jxJz/jQ4mZWJ72H19wl0wB7:2didduxU/fFKjM9RFPrdYgVP8jb7jQ9w
MD5:	73ABD86624CA4C09A380E14D5F60E258
SHA1:	72DE7AA9EB600F4EB92FA3EC5DFABFD28FEFCEE0
SHA-256:	912DAFF95CE9CABAE7D0195D39AA98D49C4BEC3B975D404AC266534C069CEE20
SHA-512:	154EAC6B8FDC42C87E14D1CF0C0EA209941EE8ECAB23B5DACDF776D38B1D8A40B208786A8E788954A21C1B80600023F0BF29DF6FFD92C90951B64CE499407D85
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="64" height="64" viewBox="0 0 64 64"><title>icon-https</title><path fill="#719F2A" fill-rule="evenodd" d="M32 0c17.673 0 32 14.327 32 32 0 17.673-14.327 32-32 32C14.327 64 0 49.673 0 32 0 14.327 14.327 0 32 0zm0 1.208C14.994 1.208 1.208 14.994 1.208 32S14.994 62.792 32 62.792 62.792 49.006 62.792 32 49.006 1.208 32 1.208zm0 18.886a7.245 7.245 0 0 1 7.245 7.245v3.103h.52c.86 0 1.557.698 1.557 1.558v9.322c0 .86-.697 1.558-1.557 1.558h-15.53c-.86 0-1.557-.697-1.557-1.558V32c0-.86.697-1.558 1.557-1.558h.52V27.34A7.245 7.245 0 0 1 32 20.094zm0 3.103a4.142 4.142 0 0 0-4.142 4.142v3.103h8.284V27.34A4.142 4.142 0 0 0 32 23.197z"/></svg>

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	413
Entropy (8bit):	7.413269354138186
Encrypted:	false
SSDEEP:	12:6v/7muSWwv1v8IJIsl5fSUazUCslD2cq2r7iu:Ulwv1EIJBKbUvTr7iu
MD5:	5EF06A060AE8E6978898FFFF12DDE838
SHA1:	F4B40FCE82E8F9C4ACD819734EF17BB5A245404A
SHA-256:	4CCC8831B019A33563EB65464837A5C1E3BA845EC97A65BEB0FB2C595EC3FBA7
SHA-512:	B1EFDE89B8FBB4F15DB0807BF3D047D371307EEF9BD5A08B82497B9EC5F26C7013BA785C1B3A7B3B9CE5A5B09C2B47408BBE31E4216F15EAE46140347623BA1F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................a...dIDATx......a........m+.m[q..jF.[k.mop..gq./y..^....:.k$M2...'..&.....L..8;..._J..>.b{..........,p.......8...3....f.NTH..&."@..\w..q.Qt..C..?....b.........LW..-.f..-.....Z..Z-..?.10k..v.......v..9..i.o...#...U.....Oh..........y.}....^.1E...F....!KVX.{h...H.d~..]....a..{...4...<........4...*2..S.U....X'.....b..r..s...S.<o).C..zy..a)..1.S..=.Qr;&l.....IEND.B`.

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4397)
Category:	downloaded
Size (bytes):	4455
Entropy (8bit):	5.251140370650572
Encrypted:	false
SSDEEP:	96:/8tArbB4OvAZwcmhwN7hdaR/VK3yxIGs0VpZUfud64Fk/f4EDxcbQ+/LsmlGT:QOvAZ7m87G5QsF3U2rq/AWz+zyT
MD5:	CE454B849EBC7BD6F82B46992211D9FE
SHA1:	0551A029108541C6947696043A533FE13A64D6DF
SHA-256:	15D278AF6E95AF9375B60847BFA94D84125B92B344ECCA4B724B0A720ECD8875
SHA-512:	34684461385F62C1C3E1C71FB1F29F3BE502CC4D58A0173B88D339FE93072DDF5931000F40E7E3C4F18312AA1B147C7D70364CCD90821845D86CF91AFB5747D0
Malicious:	false
Reputation:	low
URL:	https://secure.login.gov/packs/application-3688b8ee.digested.js
Preview:	(()=>{var t={1032:(t,e,r)=>{const n=r(2960),o=r(9862),i=r(6476),s=r(6849),{CLICK:c}=r(3995),{prefix:u}=r(1644),a=`.${u}-accordion, .${u}-accordion--bordered`,f=`.${u}-accordion__button[aria-controls]:not(.${u}-banner__button)`,l="aria-expanded",d=t=>n(f,t).filter((e=>e.closest(a)===t)),p=(t,e)=>{const r=t.closest(a);let n=e;if(!r)throw new Error(`${f} is missing outer ${a}`);n=i(t,e);const o=r.hasAttribute("data-allow-multiple");n&&!o&&d(r).forEach((e=>{e!==t&&i(e,!1)}))},h=o({[c]:{[f](){p(this),"true"===this.getAttribute(l)&&(s(this)\|\|this.scrollIntoView())}}},{init(t){n(f,t).forEach((t=>{const e="true"===t.getAttribute(l);p(t,e)}))},ACCORDION:a,BUTTON:f,show:t=>p(t,!0),hide:t=>p(t,!1),toggle:p,getButtons:d});t.exports=h},3994:(t,e,r)=>{const n=r(9862),o=r(2960),{CLICK:i}=r(3995),{prefix:s}=r(1644),c=r(6476),u=`.${s}-banner__header`,a=`${s}-banner__header--expanded`,f=`${u} [aria-controls]`;t.exports=n({[i]:{[f]:function(t){t.preventDefault();const e=t.target.closest(f);c(e),this.clos

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	413
Entropy (8bit):	7.413269354138186
Encrypted:	false
SSDEEP:	12:6v/7muSWwv1v8IJIsl5fSUazUCslD2cq2r7iu:Ulwv1EIJBKbUvTr7iu
MD5:	5EF06A060AE8E6978898FFFF12DDE838
SHA1:	F4B40FCE82E8F9C4ACD819734EF17BB5A245404A
SHA-256:	4CCC8831B019A33563EB65464837A5C1E3BA845EC97A65BEB0FB2C595EC3FBA7
SHA-512:	B1EFDE89B8FBB4F15DB0807BF3D047D371307EEF9BD5A08B82497B9EC5F26C7013BA785C1B3A7B3B9CE5A5B09C2B47408BBE31E4216F15EAE46140347623BA1F
Malicious:	false
Reputation:	low
URL:	https://secure.login.gov/assets/favicons/favicon-16-b68bb09d.png
Preview:	.PNG........IHDR................a...dIDATx......a........m+.m[q..jF.[k.mop..gq./y..^....:.k$M2...'..&.....L..8;..._J..>.b{..........,p.......8...3....f.NTH..&."@..\w..q.Qt..C..?....b.........LW..-.f..-.....Z..Z-..?.10k..v.......v..9..i.o...#...U.....Oh..........y.}....^.1E...F....!KVX.{h...H.d~..]....a..{...4...<........4...*2..S.U....X'.....b..r..s...S.<o).C..zy..a)..1.S..=.Qr;&l.....IEND.B`.

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1588
Entropy (8bit):	5.059865998963686
Encrypted:	false
SSDEEP:	24:t44RJA68G4mo79MY5hUR5zuvoeweBqGJM7GBntFqxFbBPKDQErHxBZXBx2V2eFTr:v8b9Z7oJKqGu+qXbcQmHXZR4VQ0
MD5:	958C8A5BD4905ED57BC86111C578D3B7
SHA1:	6C3C6AD6886C76948593354A75F5AB56B1F58A21
SHA-256:	717B7BF68AE01AC8DF2D52A13BA1CC9E3C85299A3E91975782FF248776B409BB
SHA-512:	EFE6BA67E5485A73FCFCFA44AE8DF1B498F8ABF9B384C5E028878679547A5E215DDCFA97558E232ED6B45FDBAA27AD75D486665B2EDA13D0F06F310EEEFD4EB7
Malicious:	false
Reputation:	low
URL:	https://secure.login.gov/assets/status/warning-88ffeb95.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="100" height="100" fill="none" viewBox="0 0 100 100"><g filter="url(#a)"><path fill="#fff" d="M50 94c24.3 0 44-19.7 44-44S74.3 6 50 6 6 25.7 6 50s19.7 44 44 44"/></g><path fill="#F5D600" d="M50 89.6c21.87 0 39.6-17.73 39.6-39.6S71.87 10.399 50 10.399c-21.872 0-39.602 17.73-39.602 39.6 0 21.872 17.73 39.602 39.601 39.602Z"/><path fill="#fff" d="M50 85.64c19.683 0 35.64-15.956 35.64-35.64S69.683 14.36 50 14.36c-19.685 0-35.642 15.956-35.642 35.64S30.315 85.64 50 85.64"/><path fill="#F5D600" d="M33.715 64.672a4.71 4.71 0 0 1-4.133-2.393 4.72 4.72 0 0 1 .019-4.776l16.288-27.857a4.72 4.72 0 0 1 4.112-2.358c1.71 0 3.25.88 4.115 2.358L70.404 57.5a4.72 4.72 0 0 1 .022 4.776 4.71 4.71 0 0 1-4.133 2.393H33.715z"/><path fill="#CAB000" d="M50.001 27.29a4.72 4.72 0 0 1 4.108 2.36L70.4 57.505a4.72 4.72 0 0 1 .018 4.776 4.71 4.71 0 0 1-4.134 2.393H50.001z"/><path fill="#1B1B1B" d="M50 58.393a2.071 2.071 0 1 0 0-4.142 2.071 2.071 0 0 0 0 4.142m-2.07-18.641

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (465), with no line terminators
Category:	downloaded
Size (bytes):	465
Entropy (8bit):	4.796044829370541
Encrypted:	false
SSDEEP:	6:BDISmW5RYTqEmU6yRRLjJ8ALCJL97LQttMmWLFw7NFPXb0DPLCwXRGM3BMj:BDI85RAmaRqLF9KtMtw7XPUPJAcm
MD5:	916B9A6C023F1509B5D59A50D6198420
SHA1:	3EF7E3F936FE51E5CCEF77E455A3C98CFBB9E402
SHA-256:	00AE7E0949A356A73FD3A39A10C96BB6C0069F6AA8909ECF0D4C8CBB1DC66F3C
SHA-512:	8F69B7A86642C2A07FFFB5E154802708A31621A72E7220C5D1DBA4088D91ED2ECE62C0F6A877E8E0B42E936E250B940D7BC24E881F9F05C8C5EE9A4D84B16FD5
Malicious:	false
Reputation:	low
URL:	https://secure.login.gov/assets/icon_component-2d022cd4.css
Preview:	.usa-icon{fill:currentColor;width:1em;height:1em;display:inline-block;position:relative}.usa-icon--size-3{width:1.5rem;height:1.5rem}.usa-icon--size-4{width:2rem;height:2rem}.usa-icon--size-5{width:2.5rem;height:2.5rem}.usa-icon--size-6{width:3rem;height:3rem}.usa-icon--size-7{width:3.5rem;height:3.5rem}.usa-icon--size-8{width:4rem;height:4rem}.usa-icon--size-9{width:4.5rem;height:4.5rem}.icon{background-color:currentColor;-webkit-mask-size:100%;mask-size:100%}

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2205)
Category:	dropped
Size (bytes):	2277
Entropy (8bit):	4.915627181104389
Encrypted:	false
SSDEEP:	48:io6lFxrxcyN9w1+CIP9YxKLjCwjerbwW2xCwluDN/gHF1p6q9y:FWIIP90+perb4NutG1wq9y
MD5:	18FC30A57CC793AB2FCDCF655F7A0867
SHA1:	09B053A2CB08806216DE5911ED79C91D87304A8F
SHA-256:	46B4C25C56E65BE478B95BABFE809B29531CDE9FD585515643E1FFCDAB5E11EF
SHA-512:	5C8CCE41A528FFA8A672D2B72B59D2E119EEC5CD9A44E0BED4096F8F3B36FA4F5D32488447F2F0CE5BA5815903749743E67CE014D4E9F5E047AF5FE54BEBB660
Malicious:	false
Reputation:	low
Preview:	(()=>{"use strict";class e extends HTMLElement{connectedCallback(){this.input=this.querySelector(".validated-field__input"),this.inputWrapper=this.querySelector(".validated-field__input-wrapper"),this.errorMessage=this.ownerDocument.getElementById(this.errorId),this.input?.addEventListener("input",(()=>this.setErrorMessage())),this.input?.addEventListener("input",(()=>this.setInputIsValid(!0))),this.input?.addEventListener("invalid",(e=>this.toggleErrorMessage(e)))}get errorStrings(){try{return JSON.parse(this.querySelector(".validated-field__error-strings")?.textContent\|\|"")}catch{return{}}}get errorId(){return this.getAttribute("error-id")}get descriptorIdRefs(){return this.input?.getAttribute("aria-describedby")?.split(" ").filter(Boolean)\|\|[]}get isValid(){return"true"!==this.input?.getAttribute("aria-invalid")}toggleErrorMessage(e){e.preventDefault();const t=this.getNormalizedValidationMessage(this.input),r=!t;this.setErrorMessage(t),this.focusOnError(r),this.setInputIsValid(r)}se

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	395
Entropy (8bit):	5.040904290125393
Encrypted:	false
SSDEEP:	12:TMHdiKfGEWugfQ+aAMUd/JQnwzEWsp/LwUZw50XY:2diKuPf6AMU/tsp/EUWGI
MD5:	93EC37CD1260435CEDD4D33E2478620D
SHA1:	7BAE91D25803BC76BE337AA978A5DF0C5C35D6EA
SHA-256:	77AB350CC1502C0830B7D7ED35B55F0296B87077AF07A44D2B5AB0E9C8FEA0F4
SHA-512:	F874ACF10218E95D42064F3A0EC3538A66F1BF162891F7C6F02E5A189290F73B97998BAE78CD0F22CA2183CBC793938993291AFD79EA05E6810191EB9C631D04
Malicious:	false
Reputation:	low
URL:	https://secure.login.gov/assets/lock-c7ffa794.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="52" height="64" viewBox="0 0 52 64"><title>lock</title><path fill="#1B1B1B" fill-rule="evenodd" d="M26 0c10.493 0 19 8.507 19 19v9h3a4 4 0 0 1 4 4v28a4 4 0 0 1-4 4H4a4 4 0 0 1-4-4V32a4 4 0 0 1 4-4h3v-9C7 8.507 15.507 0 26 0zm0 8c-5.979 0-10.843 4.77-10.996 10.712L15 19v9h22v-9c0-6.075-4.925-11-11-11z"/></svg>

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with no line terminators
Category:	dropped
Size (bytes):	130
Entropy (8bit):	4.6808938138138405
Encrypted:	false
SSDEEP:	3:pGkEinPUDLNeHGTvKZSBtQDMXnLrC86fH8LYXBJzlAyE5ecEif:pGNIPUDLMHEHWMHn6vXXlUGG
MD5:	C91E2922E143CB345E0B86922F4AC20A
SHA1:	2C96B877B92A38A8FAA5E0C4C25408A2C1819FB2
SHA-256:	20868D5171E10624BBB14F187D4610B33C314560826B6A8B37EAEDDD155E97C4
SHA-512:	22D283ADD3AA97FD43AB35AABB2BFFC33B42F25A5B4A14D1B857D10F87D4AC047202043490B198BF4959663CB33BB7174FB72DCAF8345DE7F36A602165C12671
Malicious:	false
Reputation:	low
Preview:	_locale_data=Object.assign({"components.password_confirmation.errors.mismatch":"Your passwords don.t match"},this._locale_data);

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 25, 2024 17:56:56.755381107 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:56.847830057 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:56.851099968 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:56:56.952994108 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:56.953072071 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:56.953104973 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:56:56.953151941 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:56:56.955971003 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:56:56.956671953 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:56.956682920 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:56.956741095 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:56:56.959497929 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:56:56.959640026 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:56:56.959924936 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:56:57.006700993 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:57.095995903 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:57.096009970 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:57.218519926 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:57.221597910 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:56:57.296040058 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:57.296155930 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:57.296154976 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:56:57.296207905 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:56:57.300256968 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:56:57.300996065 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:56:57.301616907 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:57.303772926 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:56:57.346513033 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:57.410229921 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:57.413089991 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:56:57.445529938 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:57.544466972 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:57.602601051 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:57.606479883 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:56:57.715018988 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:57.715044975 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:57.715178967 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:56:57.718343019 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:56:57.718426943 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:56:57.734942913 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:57.750648022 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:57.753926992 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:56:57.845509052 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:57.845638990 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:56:57.848618984 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:56:57.851952076 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:57.946230888 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:58.037555933 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:58.038609028 CET	49676	443	192.168.2.11	20.189.173.3
Nov 25, 2024 17:56:58.040832996 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:56:58.105398893 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:58.105434895 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:58.105644941 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:56:58.108426094 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:56:58.108531952 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:56:58.108912945 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:58.203460932 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:58.229079962 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:58.274755001 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:58.278894901 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:56:58.395456076 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:58.395625114 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:56:58.398627043 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:56:58.421154976 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:58.424206018 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:56:58.437248945 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:58.437360048 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:56:58.437378883 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:58.437433958 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:56:58.440244913 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:56:58.440282106 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:56:58.440663099 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:58.522763968 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:58.558691025 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:58.564300060 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:58.643712997 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:58.646583080 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:56:58.753216028 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:58.753355026 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:56:58.756419897 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:56:58.756942034 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:58.759310961 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:56:58.759834051 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:58.759902000 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:56:58.759907007 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:58.759958029 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:56:58.761986971 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:56:58.762067080 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:56:58.866661072 CET	49674	443	192.168.2.11	173.222.162.42
Nov 25, 2024 17:56:58.885600090 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:58.886440992 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:58.886529922 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:58.886575937 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:58.960479975 CET	49673	443	192.168.2.11	173.222.162.42
Nov 25, 2024 17:56:59.080688953 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:59.083599091 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:59.083683014 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:59.083709002 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:56:59.084335089 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:56:59.086771965 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:56:59.090008974 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:59.090053082 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:59.090070009 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:56:59.090095997 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:56:59.093033075 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:56:59.093379021 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:56:59.094072104 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:56:59.209299088 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:59.272916079 CET	49671	443	192.168.2.11	204.79.197.203
Nov 25, 2024 17:56:59.283700943 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:59.283756971 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:59.403907061 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:59.406903982 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:56:59.490797043 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:59.490931988 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:59.490935087 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:56:59.490982056 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:56:59.494384050 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:56:59.494405985 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:56:59.547184944 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:59.595633030 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:59.595724106 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:56:59.603208065 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:56:59.604867935 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:56:59.652318954 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:59.772476912 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:59.787713051 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:59.791642904 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:56:59.847621918 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:59.847675085 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:59.847676992 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:56:59.847721100 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:56:59.851124048 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:56:59.851224899 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:56:59.966365099 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:59.967830896 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:59.967864037 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:56:59.967920065 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:56:59.967945099 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:56:59.971280098 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:56:59.971391916 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:00.027447939 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:00.096395969 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:00.168848991 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:00.172214985 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:00.226720095 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:00.226747036 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:00.226783991 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:00.226816893 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:00.231739998 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:00.232880116 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:00.294929028 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:00.294958115 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:00.295006037 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:00.295036077 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:00.297827959 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:00.297894001 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:00.312237978 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:00.371824980 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:00.438257933 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:00.507122040 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:00.510200024 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:00.566734076 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:00.566772938 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:00.566814899 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:00.566839933 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:00.569674969 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:00.569766045 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:00.633199930 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:00.633261919 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:00.633339882 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:00.636643887 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:00.636821985 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:00.637847900 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:00.705678940 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:00.758243084 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:00.843585968 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:00.854576111 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:00.901592016 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:00.901618004 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:00.901738882 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:00.953499079 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:00.953517914 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:00.953607082 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:00.977828979 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:01.114877939 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:01.116549969 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:01.118160963 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:01.119817019 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:01.178180933 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:01.181730032 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:01.242418051 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:01.242435932 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:01.316277027 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:01.438458920 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:01.438735008 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:01.438782930 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:01.441649914 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:01.441696882 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:01.441745043 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:01.442280054 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:01.447144985 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:01.448807955 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:01.449620008 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:01.592101097 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:01.592197895 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:01.630533934 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:01.635991096 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:01.796906948 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:01.822396040 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:01.822413921 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:01.822516918 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:01.827784061 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:01.840392113 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:01.840439081 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:01.840511084 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:01.882242918 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:02.014326096 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:02.054120064 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:02.411858082 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:02.466928005 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:02.469424963 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:02.471050024 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:02.478478909 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:02.582237959 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:02.590816975 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:02.590828896 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:02.614846945 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:02.614865065 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:02.733150005 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:02.786385059 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:02.786499023 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:02.786504030 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:02.812148094 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:02.812221050 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:02.812239885 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:02.866564989 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:02.932488918 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:02.933667898 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:02.941782951 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:02.945559025 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:03.047909975 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:03.068773985 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:03.068790913 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:03.068800926 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:03.068810940 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:03.180632114 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:03.264527082 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:03.270482063 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:03.270561934 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:03.270569086 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:03.319720984 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:03.373003006 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:03.413474083 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:03.456408978 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:03.507236004 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:04.560909986 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:04.611080885 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:04.615715981 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:04.668174028 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:04.679351091 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:04.681246996 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:04.731534004 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:04.736278057 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:04.801387072 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:04.801403046 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:04.878864050 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:04.929178953 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:04.929239988 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:05.015084028 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:05.032241106 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:05.032289982 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:05.032339096 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:05.147469997 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:05.226368904 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:05.272764921 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:05.299007893 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:05.300923109 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:05.359668016 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:05.391118050 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:05.430778980 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:05.430804014 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:05.468058109 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:05.468108892 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:05.562212944 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:05.630280972 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:05.634354115 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:05.634402990 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:05.634426117 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:05.744689941 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:05.821865082 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:05.866235018 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:05.882913113 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:05.915453911 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:05.989928007 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:05.995145082 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:05.995578051 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:06.026330948 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:06.045804024 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:06.116815090 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:06.116841078 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:06.116851091 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:06.221965075 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:06.225445032 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:06.308896065 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:06.309022903 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:06.312225103 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:06.312294006 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:06.312356949 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:06.312874079 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:06.314882040 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:06.349395990 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:06.414093971 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:06.414155006 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:06.417104959 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:06.417212963 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:06.438920975 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:06.438944101 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:06.549669981 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:06.549685001 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:06.632638931 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:06.635895014 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:06.636075974 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:06.636121988 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:06.636125088 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:06.636166096 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:06.638293982 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:06.638423920 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:06.745738983 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:06.745784998 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:06.745795012 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:06.745842934 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:06.750313044 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:06.751487017 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:06.767105103 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:06.767172098 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:06.978223085 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:06.978235006 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:06.980770111 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:06.992130995 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:07.015597105 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:07.015646935 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:07.015765905 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:07.121828079 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:07.124187946 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:07.154303074 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:07.197613001 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:07.197741032 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:07.197805882 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:07.200922966 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:07.200957060 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:07.242234945 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:07.251547098 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:07.326538086 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:07.389467001 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:07.392527103 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:07.467459917 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:07.467514038 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:07.467519999 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:07.467561960 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:07.470330954 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:07.470470905 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:07.517009020 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:07.522397995 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:07.522429943 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:07.522444963 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:07.522480965 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:07.525532007 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:07.525599957 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:07.590934992 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:07.657766104 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:07.714243889 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:07.728571892 CET	49676	443	192.168.2.11	20.189.173.3
Nov 25, 2024 17:57:07.752105951 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:07.789326906 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:07.789382935 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:07.789390087 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:07.789426088 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:07.792221069 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:07.792284966 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:07.857971907 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:07.858000040 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:07.858030081 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:07.858067989 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:07.864551067 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:07.865385056 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:07.918292046 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:07.918819904 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:07.985872030 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:07.986443043 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:08.073731899 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:08.076323986 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:08.114442110 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:08.114480972 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:08.114507914 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:08.114543915 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:08.130551100 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:08.132698059 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:08.190119982 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:08.190186977 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:08.190220118 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:08.190282106 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:08.203006029 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:08.229043961 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:08.230716944 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:08.257957935 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:08.260282993 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:08.261446953 CET	49709	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:08.261482000 CET	443	49709	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:08.261619091 CET	49709	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:08.264800072 CET	49710	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:08.264853001 CET	443	49710	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:08.264929056 CET	49710	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:08.265568972 CET	49709	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:08.265584946 CET	443	49709	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:08.265850067 CET	49710	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:08.265868902 CET	443	49710	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:08.352475882 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:08.352952957 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:08.398001909 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:08.402112007 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:08.454898119 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:08.454962969 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:08.455120087 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:08.455173969 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:08.461252928 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:08.461883068 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:08.482100964 CET	49674	443	192.168.2.11	173.222.162.42
Nov 25, 2024 17:57:08.523098946 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:08.550224066 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:08.550277948 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:08.550308943 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:08.550374031 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:08.554733038 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:08.555510044 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:08.560144901 CET	49673	443	192.168.2.11	173.222.162.42
Nov 25, 2024 17:57:08.593564987 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:08.679307938 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:08.748938084 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:08.777416945 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:08.790014029 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:08.790031910 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:08.790069103 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:08.790096045 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:08.792521000 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:08.794728041 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:08.876843929 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:08.876934052 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:08.876976967 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:08.877058983 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:08.879923105 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:08.880067110 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:08.924920082 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:09.004278898 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:09.096698999 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:09.100744963 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:09.120187998 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:09.120285988 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:09.120352983 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:09.124111891 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:09.124180079 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:09.200474977 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:09.200495005 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:09.200531960 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:09.200558901 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:09.203830957 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:09.204441071 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:09.245759964 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:09.286254883 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:09.328558922 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:09.944149971 CET	443	49710	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:09.944482088 CET	49710	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:09.944503069 CET	443	49710	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:09.945561886 CET	443	49710	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:09.945619106 CET	49710	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:09.946656942 CET	49710	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:09.946726084 CET	443	49710	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:09.946852922 CET	49710	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:09.946863890 CET	443	49710	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:09.963445902 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:09.963504076 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:09.963588953 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:09.966821909 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:09.968317032 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:09.968398094 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:09.968465090 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:09.968519926 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:09.972363949 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:09.972474098 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:09.973340034 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:09.973716974 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:09.991501093 CET	443	49709	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:09.991746902 CET	49709	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:09.991771936 CET	443	49709	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:09.992813110 CET	443	49709	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:09.992918015 CET	49709	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:09.993290901 CET	49709	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:09.993349075 CET	443	49709	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:09.998223066 CET	49710	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:10.045125008 CET	49709	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:10.045141935 CET	443	49709	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:10.093609095 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:10.093684912 CET	49709	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:10.095110893 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:10.095135927 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:10.095160007 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:10.095172882 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:10.207422972 CET	49713	443	192.168.2.11	142.250.181.68
Nov 25, 2024 17:57:10.207448959 CET	443	49713	142.250.181.68	192.168.2.11
Nov 25, 2024 17:57:10.207561016 CET	49713	443	192.168.2.11	142.250.181.68
Nov 25, 2024 17:57:10.207789898 CET	49713	443	192.168.2.11	142.250.181.68
Nov 25, 2024 17:57:10.207802057 CET	443	49713	142.250.181.68	192.168.2.11
Nov 25, 2024 17:57:10.288296938 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:10.291296959 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:10.291357994 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:10.291424036 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:10.291575909 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:10.294936895 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:10.298866034 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:10.298894882 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:10.298949957 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:10.307056904 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:10.309287071 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:10.318084955 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:10.415880919 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:10.419540882 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:10.440887928 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:10.440931082 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:10.446739912 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:10.611021996 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:10.615092993 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:10.632761955 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:10.632827044 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:10.636290073 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:10.638879061 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:10.642304897 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:10.642862082 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:10.642921925 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:10.642962933 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:10.643182039 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:10.646214008 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:10.647564888 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:10.748353004 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:10.757791996 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:10.765295982 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:10.766515970 CET	49714	443	192.168.2.11	2.20.204.113
Nov 25, 2024 17:57:10.766560078 CET	443	49714	2.20.204.113	192.168.2.11
Nov 25, 2024 17:57:10.766665936 CET	49714	443	192.168.2.11	2.20.204.113
Nov 25, 2024 17:57:10.768573999 CET	49714	443	192.168.2.11	2.20.204.113
Nov 25, 2024 17:57:10.768589020 CET	443	49714	2.20.204.113	192.168.2.11
Nov 25, 2024 17:57:10.784393072 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:10.933708906 CET	443	49710	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:10.933769941 CET	49710	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:10.934042931 CET	443	49710	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:10.934107065 CET	443	49710	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:10.934159994 CET	49710	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:10.935707092 CET	49710	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:10.935724020 CET	443	49710	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:10.935774088 CET	49710	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:10.935797930 CET	49710	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:10.936306000 CET	49709	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:10.942941904 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:10.946718931 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:10.957782984 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:10.961021900 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:10.969609022 CET	443	49702	173.222.162.42	192.168.2.11
Nov 25, 2024 17:57:10.969724894 CET	49702	443	192.168.2.11	173.222.162.42
Nov 25, 2024 17:57:10.976413012 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:10.976492882 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:10.979096889 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:10.979341984 CET	443	49709	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:10.980045080 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:10.980096102 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:10.980134010 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:10.980185032 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:10.982218027 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:10.982330084 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:11.075525045 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:11.085021019 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:11.108223915 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:11.108237982 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:11.271091938 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:11.278558969 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:11.300570965 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:11.308370113 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:11.308428049 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:11.308521032 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:11.308804989 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:11.318989992 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:11.320308924 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:11.400265932 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:11.437891006 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:11.440615892 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:11.444488049 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:11.505683899 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:11.514312029 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:11.629693985 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:11.632904053 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:11.635658979 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:11.636296988 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:11.636365891 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:11.636424065 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:11.636622906 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:11.641478062 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:11.643409967 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:11.738137007 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:11.738205910 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:11.740822077 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:11.761908054 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:11.810201883 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:11.861284971 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:11.945251942 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:11.948370934 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:11.954514027 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:11.954612970 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:11.957488060 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:11.959094048 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:11.959115982 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:11.959153891 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:11.959172010 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:11.961926937 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:11.961999893 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:11.972497940 CET	443	49713	142.250.181.68	192.168.2.11
Nov 25, 2024 17:57:11.972794056 CET	49713	443	192.168.2.11	142.250.181.68
Nov 25, 2024 17:57:11.972806931 CET	443	49713	142.250.181.68	192.168.2.11
Nov 25, 2024 17:57:11.974039078 CET	443	49713	142.250.181.68	192.168.2.11
Nov 25, 2024 17:57:11.974107027 CET	49713	443	192.168.2.11	142.250.181.68
Nov 25, 2024 17:57:11.975089073 CET	49713	443	192.168.2.11	142.250.181.68
Nov 25, 2024 17:57:11.975163937 CET	443	49713	142.250.181.68	192.168.2.11
Nov 25, 2024 17:57:11.990382910 CET	443	49709	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:11.990416050 CET	443	49709	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:11.990423918 CET	443	49709	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:11.990438938 CET	49709	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:11.990464926 CET	443	49709	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:11.990504980 CET	49709	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:12.015369892 CET	49715	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:12.015400887 CET	443	49715	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:12.015469074 CET	49715	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:12.016143084 CET	443	49709	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:12.016151905 CET	443	49709	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:12.016170025 CET	443	49709	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:12.016176939 CET	443	49709	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:12.016192913 CET	49709	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:12.016215086 CET	443	49709	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:12.016243935 CET	443	49709	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:12.016252041 CET	49709	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:12.016285896 CET	49709	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:12.016309977 CET	49715	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:12.016329050 CET	443	49715	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:12.016354084 CET	49709	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:12.016705036 CET	49709	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:12.016720057 CET	443	49709	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:12.018192053 CET	49716	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:12.018218994 CET	443	49716	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:12.018376112 CET	49716	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:12.018599987 CET	49716	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:12.018623114 CET	443	49716	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:12.019072056 CET	49717	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:12.019100904 CET	443	49717	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:12.019156933 CET	49717	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:12.019361019 CET	49717	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:12.019380093 CET	443	49717	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:12.019810915 CET	49718	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:12.019821882 CET	443	49718	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:12.020252943 CET	49719	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:12.020262957 CET	443	49719	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:12.020313025 CET	49718	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:12.020327091 CET	49719	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:12.020512104 CET	49718	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:12.020522118 CET	443	49718	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:12.020610094 CET	49719	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:12.020623922 CET	443	49719	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:12.021384001 CET	49720	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:12.021414042 CET	443	49720	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:12.021680117 CET	49720	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:12.022247076 CET	49720	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:12.022264004 CET	443	49720	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:12.022281885 CET	49713	443	192.168.2.11	142.250.181.68
Nov 25, 2024 17:57:12.022300959 CET	443	49713	142.250.181.68	192.168.2.11
Nov 25, 2024 17:57:12.068773031 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:12.070102930 CET	49713	443	192.168.2.11	142.250.181.68
Nov 25, 2024 17:57:12.079603910 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:12.082341909 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:12.082546949 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:12.145860910 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:12.151323080 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:12.240888119 CET	443	49714	2.20.204.113	192.168.2.11
Nov 25, 2024 17:57:12.240967989 CET	49714	443	192.168.2.11	2.20.204.113
Nov 25, 2024 17:57:12.243535995 CET	49714	443	192.168.2.11	2.20.204.113
Nov 25, 2024 17:57:12.243546009 CET	443	49714	2.20.204.113	192.168.2.11
Nov 25, 2024 17:57:12.243844986 CET	443	49714	2.20.204.113	192.168.2.11
Nov 25, 2024 17:57:12.272003889 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:12.274960041 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:12.277338028 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:12.277353048 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:12.277410030 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:12.281831026 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:12.283894062 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:12.284012079 CET	49714	443	192.168.2.11	2.20.204.113
Nov 25, 2024 17:57:12.290237904 CET	49714	443	192.168.2.11	2.20.204.113
Nov 25, 2024 17:57:12.293812037 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:12.331368923 CET	443	49714	2.20.204.113	192.168.2.11
Nov 25, 2024 17:57:12.382621050 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:12.385627031 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:12.407780886 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:12.420969009 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:12.513164997 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:12.599814892 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:12.602713108 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:12.612910986 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:12.615674019 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:12.618376970 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:12.618427992 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:12.618454933 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:12.618501902 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:12.621001959 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:12.621202946 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:12.723077059 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:12.749407053 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:12.749429941 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:12.786462069 CET	443	49714	2.20.204.113	192.168.2.11
Nov 25, 2024 17:57:12.786536932 CET	443	49714	2.20.204.113	192.168.2.11
Nov 25, 2024 17:57:12.786607981 CET	49714	443	192.168.2.11	2.20.204.113
Nov 25, 2024 17:57:12.786711931 CET	49714	443	192.168.2.11	2.20.204.113
Nov 25, 2024 17:57:12.786729097 CET	443	49714	2.20.204.113	192.168.2.11
Nov 25, 2024 17:57:12.786746979 CET	49714	443	192.168.2.11	2.20.204.113
Nov 25, 2024 17:57:12.786753893 CET	443	49714	2.20.204.113	192.168.2.11
Nov 25, 2024 17:57:12.804795027 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:12.807871103 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:12.821629047 CET	49722	443	192.168.2.11	2.20.204.113
Nov 25, 2024 17:57:12.821656942 CET	443	49722	2.20.204.113	192.168.2.11
Nov 25, 2024 17:57:12.821736097 CET	49722	443	192.168.2.11	2.20.204.113
Nov 25, 2024 17:57:12.822050095 CET	49722	443	192.168.2.11	2.20.204.113
Nov 25, 2024 17:57:12.822062969 CET	443	49722	2.20.204.113	192.168.2.11
Nov 25, 2024 17:57:12.934007883 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:12.942612886 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:12.945525885 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:12.947570086 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:12.947583914 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:12.947618961 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:12.947633982 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:12.950058937 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:12.950182915 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:13.038976908 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:13.039032936 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:13.042140961 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:13.079133987 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:13.134541988 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:13.137687922 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:13.206264019 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:13.277589083 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:13.277642965 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:13.277654886 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:13.277703047 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:13.281018972 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:13.281147957 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:13.357952118 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:13.358011961 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:13.361871958 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:13.419711113 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:13.421242952 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:13.469537020 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:13.473263979 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:13.496870995 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:13.595866919 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:13.634007931 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:13.634027004 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:13.634083986 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:13.635041952 CET	443	49718	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:13.635890961 CET	49718	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:13.635900021 CET	443	49718	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:13.636982918 CET	443	49718	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:13.637039900 CET	49718	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:13.637387037 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:13.637505054 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:13.637953997 CET	49718	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:13.638052940 CET	443	49718	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:13.638253927 CET	49718	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:13.638269901 CET	443	49718	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:13.661654949 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:13.663638115 CET	443	49719	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:13.664238930 CET	49719	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:13.664263010 CET	443	49719	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:13.664742947 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:13.665400982 CET	443	49719	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:13.665510893 CET	49719	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:13.665608883 CET	443	49715	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:13.665879965 CET	49719	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:13.665952921 CET	443	49719	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:13.666142941 CET	49715	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:13.666156054 CET	443	49715	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:13.666341066 CET	49719	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:13.666353941 CET	443	49719	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:13.666512012 CET	443	49715	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:13.667098045 CET	49715	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:13.667164087 CET	443	49715	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:13.667180061 CET	49715	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:13.673511028 CET	443	49716	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:13.673867941 CET	49716	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:13.673887014 CET	443	49716	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:13.674273968 CET	443	49716	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:13.674859047 CET	49716	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:13.674928904 CET	443	49716	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:13.675297976 CET	49716	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:13.689548969 CET	49718	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:13.697590113 CET	443	49720	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:13.697834015 CET	49720	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:13.697845936 CET	443	49720	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:13.698930979 CET	443	49720	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:13.698991060 CET	49720	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:13.699431896 CET	49720	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:13.699595928 CET	49720	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:13.699601889 CET	443	49720	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:13.699630976 CET	443	49720	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:13.707329035 CET	443	49715	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:13.715323925 CET	443	49716	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:13.720155954 CET	49719	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:13.720160007 CET	49715	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:13.751277924 CET	49720	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:13.751286983 CET	443	49720	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:13.752229929 CET	443	49717	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:13.752582073 CET	49717	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:13.752599001 CET	443	49717	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:13.753737926 CET	443	49717	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:13.753838062 CET	49717	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:13.754503965 CET	49717	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:13.754580021 CET	443	49717	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:13.754679918 CET	49717	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:13.771301985 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:13.793545961 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:13.793668985 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:13.796575069 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:13.797373056 CET	49720	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:13.797709942 CET	49717	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:13.797724962 CET	443	49717	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:13.833261013 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:13.839943886 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:13.844063044 CET	49717	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:13.967106104 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:13.970892906 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:13.970972061 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:13.971041918 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:13.996108055 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:13.997339964 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:14.070894003 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:14.115103006 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:14.120349884 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:14.129286051 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:14.159198046 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:14.161757946 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:14.162656069 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:14.165750980 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:14.172096014 CET	443	49718	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.194112062 CET	443	49718	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.194123030 CET	443	49718	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.194160938 CET	443	49718	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.194195032 CET	443	49718	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.194250107 CET	49718	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:14.194264889 CET	443	49718	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.194277048 CET	49718	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:14.197756052 CET	49718	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:14.227830887 CET	443	49716	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.227919102 CET	443	49716	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.229830980 CET	49716	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:14.241120100 CET	443	49720	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.286624908 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:14.289367914 CET	49720	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:14.296753883 CET	443	49720	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.296766996 CET	443	49720	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.296801090 CET	443	49720	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.296817064 CET	443	49720	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.296830893 CET	443	49720	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.296875954 CET	49720	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:14.296881914 CET	443	49720	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.296955109 CET	49720	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:14.315610886 CET	443	49717	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.315690994 CET	443	49717	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.315781116 CET	49717	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:14.319099903 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:14.319828033 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:14.322433949 CET	49716	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:14.322453976 CET	443	49716	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.322948933 CET	49723	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:14.322984934 CET	443	49723	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.323282957 CET	49723	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:14.323548079 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:14.323565960 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:14.323617935 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:14.323945999 CET	49723	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:14.323959112 CET	443	49723	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.324712038 CET	49717	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:14.324733973 CET	443	49717	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.324968100 CET	49724	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:14.324996948 CET	443	49724	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.325109005 CET	49724	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:14.326927900 CET	49724	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:14.326941013 CET	443	49724	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.328938007 CET	443	49722	2.20.204.113	192.168.2.11
Nov 25, 2024 17:57:14.329183102 CET	49722	443	192.168.2.11	2.20.204.113
Nov 25, 2024 17:57:14.329821110 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:14.330926895 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:14.331048012 CET	49722	443	192.168.2.11	2.20.204.113
Nov 25, 2024 17:57:14.331063986 CET	443	49722	2.20.204.113	192.168.2.11
Nov 25, 2024 17:57:14.331310034 CET	443	49722	2.20.204.113	192.168.2.11
Nov 25, 2024 17:57:14.335124016 CET	49722	443	192.168.2.11	2.20.204.113
Nov 25, 2024 17:57:14.373344898 CET	443	49718	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.373357058 CET	443	49718	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.373394966 CET	443	49718	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.373433113 CET	443	49718	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.373436928 CET	49718	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:14.373457909 CET	443	49718	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.373508930 CET	49718	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:14.373508930 CET	49718	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:14.379321098 CET	443	49722	2.20.204.113	192.168.2.11
Nov 25, 2024 17:57:14.425229073 CET	443	49718	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.425247908 CET	443	49718	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.425338030 CET	49718	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:14.425349951 CET	443	49718	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.425462961 CET	49718	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:14.445749044 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:14.454467058 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:14.480871916 CET	443	49720	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.480882883 CET	443	49720	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.480931044 CET	443	49720	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.480952978 CET	443	49720	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.480964899 CET	49720	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:14.480982065 CET	443	49720	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.481030941 CET	49720	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:14.482202053 CET	49725	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:14.482258081 CET	443	49725	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.482322931 CET	49725	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:14.482589960 CET	49725	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:14.482605934 CET	443	49725	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.514921904 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:14.517965078 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:14.527153969 CET	443	49720	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.527164936 CET	443	49720	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.527195930 CET	443	49720	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.527228117 CET	49720	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:14.527240038 CET	443	49720	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.527247906 CET	443	49720	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.527304888 CET	49720	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:14.555989027 CET	443	49718	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.556027889 CET	443	49718	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.556205034 CET	49718	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:14.556205034 CET	49718	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:14.556220055 CET	443	49718	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.556518078 CET	49718	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:14.579715014 CET	443	49718	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.579744101 CET	443	49718	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.579821110 CET	49718	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:14.579832077 CET	443	49718	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.579855919 CET	49718	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:14.579869986 CET	49718	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:14.607831955 CET	443	49718	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.607857943 CET	443	49718	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.607959986 CET	49718	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:14.607959986 CET	49718	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:14.607970953 CET	443	49718	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.608031034 CET	49718	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:14.624643087 CET	443	49718	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.624691010 CET	443	49718	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.624763966 CET	49718	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:14.624764919 CET	443	49718	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.624763966 CET	49718	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:14.624834061 CET	49718	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:14.625509024 CET	49718	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:14.625526905 CET	443	49718	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.625945091 CET	49726	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:14.625986099 CET	443	49726	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.626045942 CET	49726	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:14.627027988 CET	49726	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:14.627041101 CET	443	49726	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.669030905 CET	443	49720	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.669043064 CET	443	49720	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.669090033 CET	443	49720	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.669125080 CET	49720	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:14.669140100 CET	443	49720	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.669171095 CET	49720	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:14.669187069 CET	49720	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:14.681242943 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:14.681344986 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:14.681426048 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:14.684921980 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:14.685332060 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:14.686683893 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:14.689589977 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:14.697989941 CET	443	49720	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.698014975 CET	443	49720	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.698081970 CET	49720	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:14.698101044 CET	443	49720	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.698122025 CET	443	49720	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.698141098 CET	49720	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:14.698185921 CET	49720	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:14.698683977 CET	49720	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:14.698698997 CET	443	49720	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.699178934 CET	49727	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:14.699224949 CET	443	49727	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.699278116 CET	49727	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:14.700386047 CET	49727	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:14.700402975 CET	443	49727	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.709801912 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:14.714535952 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:14.804034948 CET	443	49719	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.804358959 CET	443	49719	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.804414034 CET	49719	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:14.804903984 CET	49719	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:14.804919958 CET	443	49719	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.807919025 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:14.836385965 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:14.849972963 CET	443	49715	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.850063086 CET	443	49715	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.850117922 CET	49715	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:14.851478100 CET	49715	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:14.851500988 CET	443	49715	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.873900890 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:14.883296013 CET	443	49722	2.20.204.113	192.168.2.11
Nov 25, 2024 17:57:14.883374929 CET	443	49722	2.20.204.113	192.168.2.11
Nov 25, 2024 17:57:14.883449078 CET	49722	443	192.168.2.11	2.20.204.113
Nov 25, 2024 17:57:14.884588003 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:14.886339903 CET	49722	443	192.168.2.11	2.20.204.113
Nov 25, 2024 17:57:14.886339903 CET	49722	443	192.168.2.11	2.20.204.113
Nov 25, 2024 17:57:14.886363983 CET	443	49722	2.20.204.113	192.168.2.11
Nov 25, 2024 17:57:14.886373043 CET	443	49722	2.20.204.113	192.168.2.11
Nov 25, 2024 17:57:14.923099041 CET	49728	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:14.923135996 CET	443	49728	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.923244953 CET	49728	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:14.923429966 CET	49728	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:14.923438072 CET	443	49728	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.929912090 CET	49729	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:14.929944038 CET	443	49729	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:14.930068970 CET	49729	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:14.931464911 CET	49729	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:14.931478977 CET	443	49729	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:15.006414890 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:15.009169102 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:15.009210110 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:15.009267092 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:15.025667906 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:15.029758930 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:15.031611919 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:15.065849066 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:15.068701982 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:15.153943062 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:15.192058086 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:15.258440018 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:15.261339903 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:15.346134901 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:15.349204063 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:15.351593971 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:15.351643085 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:15.351670027 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:15.351715088 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:15.354302883 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:15.354413986 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:15.446213007 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:15.450048923 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:15.450100899 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:15.453490973 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:15.471630096 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:15.487142086 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:15.576122999 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:15.666908026 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:15.678628922 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:15.702100992 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:15.702156067 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:15.705786943 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:15.719713926 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:15.719785929 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:15.719801903 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:15.719851971 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:15.724292040 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:15.725270033 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:15.801208973 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:15.830193996 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:15.850567102 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:15.850624084 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:15.893805981 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:15.896681070 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:15.976466894 CET	443	49723	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:15.976793051 CET	49723	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:15.976803064 CET	443	49723	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:15.977164984 CET	443	49723	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:15.977516890 CET	49723	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:15.977577925 CET	443	49723	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:15.977689981 CET	49723	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:15.991197109 CET	443	49724	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:15.991720915 CET	49724	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:15.991751909 CET	443	49724	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:15.992187023 CET	443	49724	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:15.992726088 CET	49724	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:15.992810011 CET	443	49724	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:15.992861986 CET	49724	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:16.019371986 CET	443	49723	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:16.022310019 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:16.025204897 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:16.034879923 CET	49724	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:16.034894943 CET	443	49724	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:16.043560982 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:16.043632030 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:16.046807051 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:16.049310923 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:16.049371958 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:16.049390078 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:16.049438953 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:16.052900076 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:16.053792000 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:16.115442038 CET	443	49725	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:16.115859032 CET	49725	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:16.115869045 CET	443	49725	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:16.116911888 CET	443	49725	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:16.116970062 CET	49725	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:16.117408037 CET	49725	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:16.117472887 CET	443	49725	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:16.117554903 CET	49725	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:16.117562056 CET	443	49725	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:16.159252882 CET	49725	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:16.167371035 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:16.174427032 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:16.214123011 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:16.217200994 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:16.300112009 CET	443	49727	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:16.300441027 CET	49727	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:16.300470114 CET	443	49727	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:16.301708937 CET	443	49727	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:16.301779985 CET	49727	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:16.302161932 CET	49727	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:16.302242041 CET	443	49727	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:16.302329063 CET	49727	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:16.302335978 CET	443	49727	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:16.343565941 CET	49727	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:16.343787909 CET	443	49726	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:16.344435930 CET	49726	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:16.344455957 CET	443	49726	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:16.345881939 CET	443	49726	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:16.345953941 CET	49726	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:16.346801996 CET	49726	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:16.346957922 CET	49726	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:16.346965075 CET	443	49726	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:16.346982956 CET	443	49726	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:16.359582901 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:16.365710020 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:16.369762897 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:16.370707035 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:16.370727062 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:16.370893955 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:16.381349087 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:16.383140087 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:16.383878946 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:16.384740114 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:16.402014017 CET	49726	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:16.402034998 CET	443	49726	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:16.452256918 CET	49726	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:16.539891005 CET	443	49729	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:16.540170908 CET	49729	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:16.540189981 CET	443	49729	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:16.541243076 CET	443	49729	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:16.541326046 CET	49729	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:16.541871071 CET	49729	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:16.541934013 CET	443	49729	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:16.542159081 CET	49729	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:16.542166948 CET	443	49729	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:16.551387072 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:16.554384947 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:16.559343100 CET	443	49723	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:16.559370041 CET	443	49723	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:16.559386015 CET	443	49723	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:16.559442043 CET	49723	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:16.559459925 CET	443	49723	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:16.559473038 CET	443	49723	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:16.559513092 CET	49723	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:16.564284086 CET	49723	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:16.564318895 CET	443	49723	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:16.564824104 CET	49730	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:16.564865112 CET	443	49730	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:16.564968109 CET	49730	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:16.566426992 CET	49730	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:16.566443920 CET	443	49730	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:16.584197044 CET	443	49724	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:16.584218025 CET	443	49724	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:16.584228039 CET	443	49724	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:16.584299088 CET	443	49724	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:16.584309101 CET	49724	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:16.584323883 CET	443	49724	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:16.584336042 CET	443	49724	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:16.584355116 CET	49724	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:16.584364891 CET	49724	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:16.584392071 CET	49724	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:16.593576908 CET	443	49728	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:16.594903946 CET	49729	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:16.631500959 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:16.631515980 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:16.645591974 CET	49728	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:16.691642046 CET	443	49725	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:16.691760063 CET	443	49725	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:16.691867113 CET	49725	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:16.723228931 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:16.840187073 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:16.840277910 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:16.840354919 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:16.846435070 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:16.846452951 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:16.846540928 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:16.859353065 CET	49728	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:16.859385014 CET	443	49728	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:16.860615969 CET	443	49728	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:16.860634089 CET	443	49728	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:16.860697031 CET	49728	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:16.867192030 CET	49728	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:16.867296934 CET	443	49728	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:16.867594957 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:16.871643066 CET	49728	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:16.871659040 CET	443	49728	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:16.882489920 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:16.883122921 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:16.884000063 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:16.884304047 CET	49725	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:16.884329081 CET	443	49725	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:16.884577036 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:16.884877920 CET	49724	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:16.884910107 CET	443	49724	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:16.885261059 CET	49731	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:16.885291100 CET	443	49731	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:16.885516882 CET	49731	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:16.886039972 CET	49731	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:16.886056900 CET	443	49731	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:16.915492058 CET	49728	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:17.004236937 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:17.004343033 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:17.014343023 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:17.032103062 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:17.036442995 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:17.198422909 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:17.199668884 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:17.199748993 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:17.199800014 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:17.203105927 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:17.203619003 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:17.207128048 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:17.207248926 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:17.207259893 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:17.207298994 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:17.217962980 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:17.218086958 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:17.218179941 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:17.218193054 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:17.221484900 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:17.221543074 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:17.325366974 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:17.355936050 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:17.355964899 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:17.391333103 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:17.394665003 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:17.520627975 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:17.520688057 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:17.520708084 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:17.520760059 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:17.526004076 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:17.527462006 CET	443	49727	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:17.527540922 CET	443	49727	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:17.527626038 CET	49727	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:17.529624939 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:17.531533003 CET	49727	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:17.531552076 CET	443	49727	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:17.532005072 CET	49732	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:17.532038927 CET	443	49732	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:17.532254934 CET	49732	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:17.533332109 CET	49732	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:17.533349037 CET	443	49732	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:17.538109064 CET	49733	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:17.538153887 CET	443	49733	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:17.538219929 CET	49733	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:17.538400888 CET	49733	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:17.538414001 CET	443	49733	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:17.547744036 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:17.547830105 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:17.547838926 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:17.548110962 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:17.550492048 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:17.552623034 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:17.552684069 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:17.552746058 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:17.552828074 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:17.556432962 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:17.556518078 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:17.657546997 CET	443	49726	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:17.657568932 CET	443	49726	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:17.657644033 CET	49726	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:17.657689095 CET	443	49726	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:17.657787085 CET	443	49726	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:17.657843113 CET	49726	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:17.659776926 CET	49726	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:17.659794092 CET	443	49726	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:17.660124063 CET	49734	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:17.660165071 CET	443	49734	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:17.660406113 CET	49734	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:17.660779953 CET	49734	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:17.660795927 CET	443	49734	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:17.666018009 CET	49735	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:17.666049957 CET	443	49735	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:17.666193962 CET	49735	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:17.666404963 CET	49735	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:17.666415930 CET	443	49735	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:17.681845903 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:17.684623957 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:17.741750002 CET	443	49729	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:17.741771936 CET	443	49729	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:17.741779089 CET	443	49729	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:17.741806984 CET	443	49729	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:17.741842985 CET	49729	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:17.741863012 CET	443	49729	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:17.741877079 CET	49729	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:17.741878033 CET	443	49729	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:17.741914988 CET	49729	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:17.744452000 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:17.744610071 CET	49729	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:17.744621038 CET	443	49729	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:17.745008945 CET	49736	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:17.745043993 CET	443	49736	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:17.745141983 CET	49736	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:17.746191025 CET	49736	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:17.746206045 CET	443	49736	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:17.751898050 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:17.753556967 CET	49737	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:17.753583908 CET	443	49737	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:17.753746986 CET	49737	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:17.753983021 CET	49737	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:17.753993988 CET	443	49737	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:17.913615942 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:17.913640022 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:17.913726091 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:17.916764021 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:17.916846991 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:17.918304920 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:17.918330908 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:17.918385029 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:17.940591097 CET	443	49728	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:17.940803051 CET	443	49728	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:17.940992117 CET	49728	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:17.941678047 CET	49728	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:17.941694975 CET	443	49728	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:17.946752071 CET	49738	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:17.946799040 CET	443	49738	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:17.946974993 CET	49738	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:17.947196007 CET	49738	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:17.947212934 CET	443	49738	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:18.048074961 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:18.105719090 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:18.156591892 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:18.219837904 CET	443	49730	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:18.220113039 CET	49730	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:18.220122099 CET	443	49730	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:18.220496893 CET	443	49730	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:18.220823050 CET	49730	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:18.220887899 CET	443	49730	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:18.220952988 CET	49730	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:18.245668888 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:18.245803118 CET	443	49703	13.107.246.63	192.168.2.11
Nov 25, 2024 17:57:18.245858908 CET	49703	443	192.168.2.11	13.107.246.63
Nov 25, 2024 17:57:18.267339945 CET	443	49730	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:18.491349936 CET	443	49731	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:18.491672039 CET	49731	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:18.491694927 CET	443	49731	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:18.492116928 CET	443	49731	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:18.492459059 CET	49731	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:18.492531061 CET	443	49731	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:18.492767096 CET	49731	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:18.535331964 CET	443	49731	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:18.897972107 CET	443	49730	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:18.898004055 CET	443	49730	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:18.898061037 CET	49730	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:18.898068905 CET	443	49730	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:18.898091078 CET	443	49730	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:18.898133039 CET	49730	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:18.900410891 CET	49730	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:18.900427103 CET	443	49730	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:18.915513992 CET	49739	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:18.915548086 CET	443	49739	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:18.915937901 CET	49739	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:18.915939093 CET	49739	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:18.915997028 CET	443	49739	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:19.103919029 CET	49740	443	192.168.2.11	52.149.20.212
Nov 25, 2024 17:57:19.103970051 CET	443	49740	52.149.20.212	192.168.2.11
Nov 25, 2024 17:57:19.104140997 CET	49740	443	192.168.2.11	52.149.20.212
Nov 25, 2024 17:57:19.105832100 CET	49740	443	192.168.2.11	52.149.20.212
Nov 25, 2024 17:57:19.105850935 CET	443	49740	52.149.20.212	192.168.2.11
Nov 25, 2024 17:57:19.247072935 CET	443	49733	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:19.247452974 CET	49733	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:19.247473001 CET	443	49733	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:19.247843981 CET	443	49733	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:19.255940914 CET	49733	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:19.256074905 CET	443	49733	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:19.256097078 CET	49733	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:19.286688089 CET	443	49732	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:19.299335003 CET	443	49733	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:19.304270029 CET	49733	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:19.327646017 CET	49732	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:19.327658892 CET	443	49732	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:19.328202963 CET	443	49732	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:19.374655008 CET	49732	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:19.380341053 CET	443	49735	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:19.380850077 CET	443	49734	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:19.386373997 CET	49732	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:19.386538029 CET	443	49732	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:19.419857979 CET	49734	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:19.419888973 CET	443	49734	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:19.420047998 CET	49735	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:19.420059919 CET	443	49735	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:19.420229912 CET	49732	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:19.420506954 CET	443	49735	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:19.421032906 CET	443	49734	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:19.421111107 CET	49734	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:19.421263933 CET	49735	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:19.421461105 CET	443	49735	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:19.447854042 CET	49734	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:19.448096037 CET	443	49734	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:19.448445082 CET	49735	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:19.448595047 CET	49734	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:19.448607922 CET	443	49734	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:19.461213112 CET	443	49736	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:19.461736917 CET	49736	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:19.461762905 CET	443	49736	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:19.462887049 CET	443	49736	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:19.462946892 CET	49736	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:19.463332891 CET	443	49732	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:19.463381052 CET	49736	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:19.463447094 CET	443	49736	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:19.463771105 CET	49736	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:19.463778973 CET	443	49736	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:19.466697931 CET	443	49737	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:19.466989040 CET	49737	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:19.467004061 CET	443	49737	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:19.468043089 CET	443	49737	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:19.468144894 CET	49737	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:19.468575954 CET	49737	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:19.468636036 CET	443	49737	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:19.468785048 CET	49737	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:19.468794107 CET	443	49737	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:19.495321989 CET	443	49735	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:19.498677015 CET	49734	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:19.515608072 CET	49737	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:19.515609980 CET	49736	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:19.541184902 CET	443	49738	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:19.541507959 CET	49738	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:19.541523933 CET	443	49738	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:19.542571068 CET	443	49738	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:19.542638063 CET	49738	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:19.543128967 CET	49738	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:19.543191910 CET	443	49738	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:19.543344975 CET	49738	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:19.543353081 CET	443	49738	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:19.592385054 CET	49738	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:19.729952097 CET	443	49731	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:19.730031013 CET	443	49731	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:19.730262041 CET	49731	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:19.743757963 CET	49731	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:19.743778944 CET	443	49731	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:19.751043081 CET	49742	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:19.751077890 CET	443	49742	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:19.751194954 CET	49742	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:19.751425982 CET	49742	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:19.751437902 CET	443	49742	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:19.796194077 CET	443	49733	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:19.796274900 CET	443	49733	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:19.796360016 CET	49733	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:19.820143938 CET	49733	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:19.820173979 CET	443	49733	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:19.932138920 CET	443	49734	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:19.932219028 CET	443	49734	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:19.932332039 CET	49734	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:19.934066057 CET	443	49735	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:19.934089899 CET	443	49735	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:19.934153080 CET	49735	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:19.934158087 CET	443	49735	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:19.934334993 CET	49735	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:19.934696913 CET	49734	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:19.934714079 CET	443	49734	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:19.940110922 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:19.940148115 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:19.940223932 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:19.940660954 CET	49744	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:19.940692902 CET	443	49744	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:19.940762997 CET	49744	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:19.941560030 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:19.941574097 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:19.941736937 CET	49744	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:19.941749096 CET	443	49744	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:19.941868067 CET	49735	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:19.941879988 CET	443	49735	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:19.944176912 CET	49745	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:19.944216967 CET	443	49745	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:19.944371939 CET	49745	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:19.944585085 CET	49745	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:19.944600105 CET	443	49745	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:20.052278996 CET	443	49736	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:20.052298069 CET	443	49736	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:20.052354097 CET	49736	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:20.052372932 CET	443	49736	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:20.053253889 CET	49736	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:20.053302050 CET	443	49736	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:20.053356886 CET	49736	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:20.057228088 CET	49746	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:20.057259083 CET	443	49746	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:20.057336092 CET	49746	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:20.057775021 CET	49747	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:20.057813883 CET	443	49747	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:20.058027983 CET	49747	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:20.058125019 CET	49748	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:20.058149099 CET	443	49748	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:20.058211088 CET	49748	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:20.058547974 CET	49746	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:20.058558941 CET	443	49746	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:20.058875084 CET	49747	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:20.058891058 CET	443	49747	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:20.059175968 CET	49748	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:20.059189081 CET	443	49748	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:20.059501886 CET	49749	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:20.059539080 CET	443	49749	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:20.059597969 CET	49749	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:20.059758902 CET	49749	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:20.059767962 CET	443	49749	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:20.071830988 CET	443	49737	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:20.071851969 CET	443	49737	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:20.071886063 CET	443	49737	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:20.071902037 CET	443	49737	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:20.071930885 CET	443	49737	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:20.071974993 CET	49737	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:20.071989059 CET	49737	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:20.073069096 CET	49737	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:20.073077917 CET	443	49737	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:20.114586115 CET	443	49738	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:20.114706993 CET	443	49738	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:20.114758968 CET	49738	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:20.116539955 CET	49738	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:20.116558075 CET	443	49738	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:20.465599060 CET	443	49732	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:20.465837955 CET	443	49732	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:20.466366053 CET	49732	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:20.486515045 CET	49732	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:20.486548901 CET	443	49732	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:20.492122889 CET	49750	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:20.492170095 CET	443	49750	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:20.493750095 CET	49750	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:20.494106054 CET	49751	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:20.494142056 CET	443	49751	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:20.494218111 CET	49751	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:20.494369030 CET	49750	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:20.494383097 CET	443	49750	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:20.494493961 CET	49751	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:20.494508028 CET	443	49751	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:20.552226067 CET	443	49739	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:20.552634954 CET	49739	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:20.552648067 CET	443	49739	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:20.553710938 CET	443	49739	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:20.553777933 CET	49739	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:20.554354906 CET	49739	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:20.554433107 CET	443	49739	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:20.554605961 CET	49739	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:20.554614067 CET	443	49739	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:20.594309092 CET	49739	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:20.929085016 CET	443	49740	52.149.20.212	192.168.2.11
Nov 25, 2024 17:57:20.929205894 CET	49740	443	192.168.2.11	52.149.20.212
Nov 25, 2024 17:57:20.931981087 CET	49740	443	192.168.2.11	52.149.20.212
Nov 25, 2024 17:57:20.931988955 CET	443	49740	52.149.20.212	192.168.2.11
Nov 25, 2024 17:57:20.932301998 CET	443	49740	52.149.20.212	192.168.2.11
Nov 25, 2024 17:57:20.986826897 CET	49740	443	192.168.2.11	52.149.20.212
Nov 25, 2024 17:57:21.135531902 CET	443	49739	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:21.135556936 CET	443	49739	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:21.135616064 CET	49739	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:21.135622978 CET	443	49739	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:21.135673046 CET	49739	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:21.189301968 CET	49739	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:21.189316988 CET	443	49739	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:21.343156099 CET	443	49742	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:21.345465899 CET	49742	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:21.345479012 CET	443	49742	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:21.345851898 CET	443	49742	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:21.346230984 CET	49742	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:21.346296072 CET	443	49742	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:21.346540928 CET	49742	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:21.391340017 CET	443	49742	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:21.554593086 CET	443	49745	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:21.605321884 CET	49745	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:21.607531071 CET	49745	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:21.607538939 CET	443	49745	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:21.608045101 CET	443	49745	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:21.609924078 CET	49745	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:21.610001087 CET	443	49745	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:21.610255957 CET	49745	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:21.641521931 CET	443	49744	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:21.647670031 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:21.654268980 CET	49744	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:21.654278994 CET	443	49744	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:21.654594898 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:21.654607058 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:21.654798031 CET	443	49744	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:21.655339956 CET	443	49745	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:21.655834913 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:21.655899048 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:21.656517029 CET	49744	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:21.656696081 CET	443	49744	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:21.657200098 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:21.657272100 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:21.657636881 CET	49744	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:21.657638073 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:21.657644987 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:21.668752909 CET	443	49713	142.250.181.68	192.168.2.11
Nov 25, 2024 17:57:21.668818951 CET	443	49713	142.250.181.68	192.168.2.11
Nov 25, 2024 17:57:21.668864965 CET	49713	443	192.168.2.11	142.250.181.68
Nov 25, 2024 17:57:21.677239895 CET	443	49748	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:21.677907944 CET	49748	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:21.677917004 CET	443	49748	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:21.678994894 CET	443	49748	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:21.679101944 CET	49748	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:21.680757046 CET	49748	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:21.680823088 CET	443	49748	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:21.681116104 CET	49748	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:21.681122065 CET	443	49748	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:21.699340105 CET	443	49744	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:21.700661898 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:21.733338118 CET	49748	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:21.733772993 CET	443	49746	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:21.734441996 CET	443	49747	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:21.782650948 CET	49746	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:21.782650948 CET	49747	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:21.789916039 CET	443	49749	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:21.831655979 CET	49749	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:21.835757017 CET	49747	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:21.835772038 CET	443	49747	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:21.835901022 CET	49746	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:21.835907936 CET	443	49746	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:21.836097956 CET	49749	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:21.836108923 CET	443	49749	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:21.837131023 CET	443	49747	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:21.837191105 CET	49747	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:21.837244034 CET	443	49746	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:21.837301970 CET	49746	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:21.838311911 CET	443	49749	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:21.838432074 CET	49749	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:21.993208885 CET	49747	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:21.993463039 CET	443	49747	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:21.993869066 CET	49746	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:21.994008064 CET	443	49746	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:21.994502068 CET	49749	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:21.994576931 CET	443	49749	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:21.995369911 CET	49747	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:21.995390892 CET	443	49747	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:21.995425940 CET	49746	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:21.995441914 CET	443	49746	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:21.995747089 CET	49749	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:21.995764017 CET	443	49749	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:22.038564920 CET	443	49742	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:22.038650036 CET	443	49742	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:22.038714886 CET	49742	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:22.040148020 CET	49747	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:22.040179968 CET	49746	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:22.041750908 CET	49749	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:22.054402113 CET	49742	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:22.054425001 CET	443	49742	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:22.079466105 CET	49713	443	192.168.2.11	142.250.181.68
Nov 25, 2024 17:57:22.079505920 CET	443	49713	142.250.181.68	192.168.2.11
Nov 25, 2024 17:57:22.114043951 CET	443	49751	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:22.114320040 CET	49751	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:22.114331961 CET	443	49751	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:22.115362883 CET	443	49751	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:22.115494013 CET	49751	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:22.115902901 CET	49751	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:22.115962982 CET	443	49751	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:22.116094112 CET	49751	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:22.116101027 CET	443	49751	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:22.121711016 CET	443	49745	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:22.121834040 CET	443	49745	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:22.121881962 CET	49745	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:22.122912884 CET	49745	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:22.122927904 CET	443	49745	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:22.156137943 CET	443	49750	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:22.156924009 CET	49750	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:22.156935930 CET	443	49750	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:22.157615900 CET	49751	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:22.158000946 CET	443	49750	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:22.158112049 CET	49750	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:22.158819914 CET	49750	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:22.158881903 CET	443	49750	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:22.158958912 CET	49750	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:22.158972025 CET	443	49750	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:22.203663111 CET	49750	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:22.418309927 CET	443	49748	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:22.418421030 CET	443	49748	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:22.418517113 CET	49748	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:22.420089960 CET	49748	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:22.420101881 CET	443	49748	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:22.423835993 CET	49754	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:22.423882008 CET	443	49754	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:22.424324036 CET	49754	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:22.424801111 CET	49754	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:22.424833059 CET	443	49754	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:22.425224066 CET	49755	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:22.425268888 CET	443	49755	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:22.425323009 CET	49755	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:22.425620079 CET	49755	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:22.425635099 CET	443	49755	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:22.441590071 CET	443	49747	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:22.441658974 CET	443	49747	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:22.441735029 CET	49747	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:22.442055941 CET	443	49749	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:22.442095995 CET	443	49749	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:22.442143917 CET	49749	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:22.442152977 CET	443	49749	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:22.442183971 CET	443	49749	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:22.442348957 CET	49749	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:22.442873955 CET	49747	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:22.442890882 CET	443	49747	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:22.444892883 CET	49756	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:22.444926977 CET	443	49756	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:22.445209026 CET	49756	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:22.445388079 CET	49749	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:22.445409060 CET	443	49749	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:22.445967913 CET	49756	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:22.445993900 CET	443	49756	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:22.448199987 CET	49757	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:22.448246002 CET	443	49757	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:22.448626041 CET	49757	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:22.448826075 CET	49757	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:22.448853970 CET	443	49757	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:22.450653076 CET	443	49746	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:22.450674057 CET	443	49746	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:22.450683117 CET	443	49746	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:22.450742006 CET	443	49746	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:22.450747013 CET	49746	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:22.450793028 CET	49746	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:22.454030991 CET	49746	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:22.454045057 CET	443	49746	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:22.456599951 CET	49758	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:22.456628084 CET	443	49758	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:22.456706047 CET	49758	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:22.456892014 CET	49758	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:22.456906080 CET	443	49758	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:22.458338022 CET	49759	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:22.458400011 CET	443	49759	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:22.458466053 CET	49759	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:22.458652020 CET	49759	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:22.458677053 CET	443	49759	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:22.649741888 CET	443	49751	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:22.649821997 CET	443	49751	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:22.649933100 CET	49751	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:22.650615931 CET	49751	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:22.650635958 CET	443	49751	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:22.748671055 CET	443	49750	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:22.748769045 CET	443	49750	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:22.749118090 CET	49750	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:22.750088930 CET	49750	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:22.750108004 CET	443	49750	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:22.753561020 CET	49760	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:22.753598928 CET	443	49760	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:22.753741026 CET	49760	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:22.753953934 CET	49760	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:22.753967047 CET	443	49760	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:22.756021976 CET	49761	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:22.756058931 CET	443	49761	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:22.756120920 CET	49761	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:22.756279945 CET	49761	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:22.756284952 CET	443	49761	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:22.823537111 CET	49740	443	192.168.2.11	52.149.20.212
Nov 25, 2024 17:57:22.871334076 CET	443	49740	52.149.20.212	192.168.2.11
Nov 25, 2024 17:57:22.889713049 CET	443	49744	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:22.889743090 CET	443	49744	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:22.889816999 CET	443	49744	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:22.889834881 CET	49744	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:22.889872074 CET	49744	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:22.892307043 CET	49744	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:22.892314911 CET	443	49744	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:22.896491051 CET	49763	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:22.896527052 CET	443	49763	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:22.896676064 CET	49763	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:22.897263050 CET	49763	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:22.897281885 CET	443	49763	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:22.897696972 CET	49764	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:22.897720098 CET	443	49764	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:22.897943020 CET	49764	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:22.898150921 CET	49764	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:22.898159981 CET	443	49764	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:23.144871950 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:23.144900084 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:23.144907951 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:23.144925117 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:23.144952059 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:23.144972086 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:23.144984961 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:23.145015001 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:23.145051956 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:23.233683109 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:23.233743906 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:23.343873024 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:23.343904972 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:23.343955994 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:23.343965054 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:23.344019890 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:23.344065905 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:23.379620075 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:23.379657030 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:23.379707098 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:23.379718065 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:23.379867077 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:23.409020901 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:23.409122944 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:23.409132004 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:23.416254044 CET	443	49740	52.149.20.212	192.168.2.11
Nov 25, 2024 17:57:23.416317940 CET	443	49740	52.149.20.212	192.168.2.11
Nov 25, 2024 17:57:23.416327000 CET	443	49740	52.149.20.212	192.168.2.11
Nov 25, 2024 17:57:23.416340113 CET	443	49740	52.149.20.212	192.168.2.11
Nov 25, 2024 17:57:23.416349888 CET	443	49740	52.149.20.212	192.168.2.11
Nov 25, 2024 17:57:23.416378975 CET	443	49740	52.149.20.212	192.168.2.11
Nov 25, 2024 17:57:23.416415930 CET	49740	443	192.168.2.11	52.149.20.212
Nov 25, 2024 17:57:23.416429996 CET	443	49740	52.149.20.212	192.168.2.11
Nov 25, 2024 17:57:23.416455030 CET	49740	443	192.168.2.11	52.149.20.212
Nov 25, 2024 17:57:23.416501045 CET	49740	443	192.168.2.11	52.149.20.212
Nov 25, 2024 17:57:23.438049078 CET	443	49740	52.149.20.212	192.168.2.11
Nov 25, 2024 17:57:23.438136101 CET	443	49740	52.149.20.212	192.168.2.11
Nov 25, 2024 17:57:23.438157082 CET	49740	443	192.168.2.11	52.149.20.212
Nov 25, 2024 17:57:23.438175917 CET	49740	443	192.168.2.11	52.149.20.212
Nov 25, 2024 17:57:23.451035023 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:23.517338037 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:23.517365932 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:23.517415047 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:23.517427921 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:23.517482996 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:23.517493010 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:23.536961079 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:23.537053108 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:23.537116051 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:23.537126064 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:23.537312031 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:23.570224047 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:23.570250988 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:23.570300102 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:23.570307970 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:23.570349932 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:23.570377111 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:23.574807882 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:23.574906111 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:23.824188948 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:23.824199915 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:23.824379921 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:23.952270031 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:23.952294111 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:23.952359915 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:23.952368975 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:23.952399969 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:23.952440977 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:23.956515074 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:23.956556082 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:23.956588984 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:23.956594944 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:23.956603050 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:23.956629992 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:23.956691980 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:23.957391977 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:23.957410097 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:23.957447052 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:23.957452059 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:23.957488060 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:23.957539082 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:23.958089113 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:23.958125114 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:23.958153963 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:23.958159924 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:23.958287954 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:23.958309889 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:23.958373070 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:23.958379984 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:23.958395004 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:23.958473921 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:23.958478928 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:23.958542109 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:23.959090948 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:23.959108114 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:23.959155083 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:23.959160089 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:23.959192038 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:23.959254026 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.078198910 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.078224897 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.078299046 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.078314066 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.078378916 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.081264019 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.081343889 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.084450960 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.084701061 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.114082098 CET	443	49756	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.114088058 CET	443	49755	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.114358902 CET	49756	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.114392042 CET	443	49756	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.114525080 CET	49755	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.114551067 CET	443	49755	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.114794970 CET	443	49756	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.114888906 CET	443	49758	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.114926100 CET	443	49755	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.115231991 CET	49756	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.115330935 CET	443	49756	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.115550041 CET	49755	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.115631104 CET	443	49755	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.115704060 CET	49758	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.115712881 CET	443	49758	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.115875006 CET	49756	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.115926027 CET	443	49757	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.115956068 CET	49755	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.116173029 CET	49757	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.116184950 CET	443	49757	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.116540909 CET	443	49757	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.116842031 CET	443	49758	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.116904974 CET	49758	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.117019892 CET	49757	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.117086887 CET	443	49757	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.117418051 CET	49758	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.117476940 CET	443	49758	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.117554903 CET	49757	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.117614031 CET	49758	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.117620945 CET	443	49758	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.158548117 CET	443	49754	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.158859015 CET	49754	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.158885002 CET	443	49754	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.159327984 CET	443	49756	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.159336090 CET	443	49755	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.159363985 CET	443	49757	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.159427881 CET	443	49754	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.159919024 CET	49754	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.160028934 CET	443	49754	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.160173893 CET	49754	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.163932085 CET	443	49759	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.164294004 CET	49759	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.164319038 CET	443	49759	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.165354013 CET	443	49759	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.165421963 CET	49759	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.166205883 CET	49759	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.166271925 CET	443	49759	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.166603088 CET	49759	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.166613102 CET	443	49759	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.168793917 CET	49758	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.199477911 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.199525118 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.199563026 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.199588060 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.199601889 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.199621916 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.202006102 CET	49754	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.202019930 CET	443	49754	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.217195034 CET	49759	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.220839977 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.220864058 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.220915079 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.220931053 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.220968008 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.233270884 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.233310938 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.233356953 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.233367920 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.233431101 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.252685070 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.252707958 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.252816916 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.252826929 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.252994061 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.273874044 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.273899078 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.273971081 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.273982048 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.274298906 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.283135891 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.283214092 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.283225060 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.286098003 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.286319017 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.286326885 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.298178911 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.298294067 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.298310041 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.316461086 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.316488981 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.316534996 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.316549063 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.316601038 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.364165068 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.395492077 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.395509005 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.395533085 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.395590067 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.395603895 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.395625114 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.395647049 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.452172995 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.452203035 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.452265978 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.452270985 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.452282906 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.452306986 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.452327967 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.453814983 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.453918934 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.457756996 CET	443	49761	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.457984924 CET	49761	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.458003044 CET	443	49761	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.459068060 CET	443	49761	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.459129095 CET	49761	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.459466934 CET	49761	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.459527969 CET	443	49761	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.459616899 CET	49761	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.465301037 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.465318918 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.465408087 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.465415955 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.465512037 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.476558924 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.476578951 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.476655960 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.476665974 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.476727009 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.488013983 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.488034964 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.488111973 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.488122940 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.488200903 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.496475935 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.496495008 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.496568918 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.496577978 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.496802092 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.502330065 CET	49761	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.502338886 CET	443	49761	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.505883932 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.505906105 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.506000042 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.506000042 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.506021023 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.506062031 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.507292986 CET	443	49760	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.507510900 CET	49760	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.507523060 CET	443	49760	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.508599043 CET	443	49760	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.508661985 CET	49760	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.509035110 CET	49760	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.509094954 CET	443	49760	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.509157896 CET	49760	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.514702082 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.514722109 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.514799118 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.514812946 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.514956951 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.521271944 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.521312952 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.521393061 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.521393061 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.521401882 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.521512032 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.530452013 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.530471087 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.530535936 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.530544996 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.530750990 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.546842098 CET	49761	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.551333904 CET	443	49760	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.556493998 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.556516886 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.556579113 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.556595087 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.556665897 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.562678099 CET	49760	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.562700033 CET	443	49760	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.564315081 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.564333916 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.564443111 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.564454079 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.564551115 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.605302095 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.605328083 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.605370045 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.605392933 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.605441093 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.605441093 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.607923031 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.608069897 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.609261036 CET	49760	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.617086887 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.617105961 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.617238998 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.617238998 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.617249966 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.617320061 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.634973049 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.635179996 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.635193110 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.644515038 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.644534111 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.644575119 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.644587040 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.644648075 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.652548075 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.652569056 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.652681112 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.652689934 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.661612034 CET	443	49763	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.661840916 CET	49763	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.661854029 CET	443	49763	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.662902117 CET	443	49763	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.662969112 CET	49763	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.663281918 CET	49763	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.663353920 CET	443	49763	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.664040089 CET	49763	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.664047956 CET	443	49763	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.664215088 CET	443	49764	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.664413929 CET	49764	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.664424896 CET	443	49764	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.665960073 CET	443	49764	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.666022062 CET	49764	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.666358948 CET	49764	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.666438103 CET	443	49764	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.666467905 CET	49764	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.683029890 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.683084965 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.683130980 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.683151007 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.683197975 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.689656019 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.689682961 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.689752102 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.689763069 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.689826012 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.693800926 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.693842888 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.693912983 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.693912983 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.693933010 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.696609020 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.696650982 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.696685076 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.696696043 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.696789980 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.701730967 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.701750994 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.701838970 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.701848030 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.702105045 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.707334042 CET	443	49764	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.707382917 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.707401991 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.707452059 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.707459927 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.707499981 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.707499981 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.713196993 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.713253021 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.713332891 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.713340044 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.713578939 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.714040041 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.714046001 CET	49763	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.714070082 CET	49764	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.714076042 CET	443	49764	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.714097977 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.719445944 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.719468117 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.719566107 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.719574928 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.725244999 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.725267887 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.725373983 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.725373983 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.725383997 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.728384972 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.728431940 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.728488922 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.728488922 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.728499889 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.733288050 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.733328104 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.733398914 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.733407021 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.738321066 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.738322973 CET	443	49757	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.738337040 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.738394976 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.738403082 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.738426924 CET	443	49757	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.738451958 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.738477945 CET	49757	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.738718033 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.738780975 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.738786936 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.739289045 CET	443	49755	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.739590883 CET	443	49755	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.739655018 CET	49755	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.739912033 CET	49757	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.739928007 CET	443	49757	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.740994930 CET	49755	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.741015911 CET	443	49755	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.743760109 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.743793964 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.743853092 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.743861914 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.743906975 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.748100996 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.748119116 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.748177052 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.748186111 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.748204947 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.748233080 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.748233080 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.748267889 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.749542952 CET	49743	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.749564886 CET	443	49743	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.753696918 CET	49766	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.753726006 CET	443	49766	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.753837109 CET	49766	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.754065037 CET	49766	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.754076958 CET	443	49766	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.760550022 CET	49764	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.762954950 CET	49767	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.763010979 CET	443	49767	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.763091087 CET	49767	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.763461113 CET	49767	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.763478041 CET	443	49767	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.784967899 CET	443	49759	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.788897038 CET	443	49754	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.788918018 CET	443	49754	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.788974047 CET	49754	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.789000988 CET	443	49754	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.789020061 CET	443	49754	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.789073944 CET	49754	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.789938927 CET	49754	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.789951086 CET	443	49754	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.792376995 CET	49768	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.792401075 CET	443	49768	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.792510986 CET	49768	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.792735100 CET	49768	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.792751074 CET	443	49768	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.793894053 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.793910980 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.794049978 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.794090986 CET	443	49759	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.794153929 CET	49759	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.794173956 CET	443	49759	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.794218063 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.794231892 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.794502974 CET	49759	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.794559002 CET	443	49759	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.794734955 CET	443	49759	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:24.794783115 CET	49759	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.794800043 CET	49759	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:24.926431894 CET	49740	443	192.168.2.11	52.149.20.212
Nov 25, 2024 17:57:24.926461935 CET	443	49740	52.149.20.212	192.168.2.11
Nov 25, 2024 17:57:24.926506042 CET	49740	443	192.168.2.11	52.149.20.212
Nov 25, 2024 17:57:24.926512957 CET	443	49740	52.149.20.212	192.168.2.11
Nov 25, 2024 17:57:25.053323030 CET	443	49761	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:25.053412914 CET	443	49761	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:25.053493023 CET	49761	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:25.054622889 CET	49761	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:25.054636955 CET	443	49761	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:25.127082109 CET	443	49760	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:25.127167940 CET	443	49760	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:25.127410889 CET	49760	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:25.127980947 CET	49760	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:25.127995014 CET	443	49760	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:25.134460926 CET	49770	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:25.134514093 CET	443	49770	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:25.134582996 CET	49770	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:25.134799004 CET	49770	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:25.134816885 CET	443	49770	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:25.239907026 CET	443	49763	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:25.240000010 CET	443	49763	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:25.240098953 CET	49763	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:25.240405083 CET	443	49764	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:25.240427017 CET	443	49764	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:25.240503073 CET	49764	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:25.240514994 CET	443	49764	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:25.240569115 CET	49764	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:25.245460033 CET	49763	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:25.245482922 CET	443	49763	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:25.247968912 CET	443	49764	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:25.248047113 CET	443	49764	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:25.248116016 CET	49764	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:25.252393961 CET	49764	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:25.252408028 CET	443	49764	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:25.252418041 CET	49764	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:25.252461910 CET	49764	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:25.264348030 CET	49771	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:25.264415979 CET	443	49771	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:25.264488935 CET	49771	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:25.264765978 CET	49771	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:25.264782906 CET	443	49771	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:25.348969936 CET	443	49756	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:25.349102020 CET	443	49756	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:25.349222898 CET	49756	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:25.350094080 CET	49756	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:25.350110054 CET	443	49756	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:25.354242086 CET	49773	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:25.354300022 CET	443	49773	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:25.354424000 CET	49773	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:25.354676008 CET	49773	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:25.354692936 CET	443	49773	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:25.367815971 CET	443	49758	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:25.368609905 CET	443	49758	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:25.368680000 CET	49758	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:25.369083881 CET	49758	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:25.369096041 CET	443	49758	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:25.372999907 CET	49774	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:25.373028994 CET	443	49774	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:25.373101950 CET	49774	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:25.373327017 CET	49774	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:25.373342991 CET	443	49774	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:26.462970972 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:26.463577986 CET	443	49767	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:26.463594913 CET	443	49768	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:26.473680019 CET	443	49766	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:26.517666101 CET	49766	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:26.517666101 CET	49767	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:26.517674923 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:26.517718077 CET	49768	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:26.622606039 CET	49766	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:26.622620106 CET	443	49766	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:26.623354912 CET	443	49766	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:26.635303974 CET	49766	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:26.635448933 CET	443	49766	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:26.635687113 CET	49768	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:26.635714054 CET	443	49768	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:26.635902882 CET	49767	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:26.635916948 CET	443	49767	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:26.636053085 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:26.636086941 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:26.636311054 CET	443	49768	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:26.636372089 CET	443	49767	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:26.636508942 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:26.637290955 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:26.637378931 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:26.644018888 CET	49767	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:26.644103050 CET	443	49767	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:26.647739887 CET	49768	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:26.647849083 CET	443	49768	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:26.647854090 CET	49766	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:26.648047924 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:26.656398058 CET	49767	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:26.656455994 CET	49768	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:26.691333055 CET	443	49766	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:26.691344023 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:26.699335098 CET	443	49768	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:26.703334093 CET	443	49767	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:26.811944008 CET	443	49770	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:26.812460899 CET	49770	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:26.812503099 CET	443	49770	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:26.813536882 CET	443	49770	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:26.813623905 CET	49770	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:26.814022064 CET	49770	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:26.814090014 CET	443	49770	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:26.814177036 CET	49770	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:26.817060947 CET	49775	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:26.817101955 CET	443	49775	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:26.817162991 CET	49775	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:26.817416906 CET	49775	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:26.817430973 CET	443	49775	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:26.859343052 CET	443	49770	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:26.859456062 CET	49770	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:26.859478951 CET	443	49770	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:26.905811071 CET	49770	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:26.975759029 CET	443	49773	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:26.976036072 CET	49773	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:26.976049900 CET	443	49773	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:26.977127075 CET	443	49773	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:26.977188110 CET	49773	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:26.977580070 CET	49773	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:26.977641106 CET	443	49773	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:26.977722883 CET	49773	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:26.977727890 CET	443	49773	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:26.996052027 CET	443	49771	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:26.996294022 CET	49771	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:26.996329069 CET	443	49771	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:26.997409105 CET	443	49771	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:26.997490883 CET	49771	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:26.997926950 CET	49771	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:26.997997999 CET	443	49771	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:26.998106956 CET	49771	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.030505896 CET	49773	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.043344021 CET	443	49771	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.046497107 CET	49771	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.046523094 CET	443	49771	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.063554049 CET	443	49774	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.063818932 CET	49774	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.063837051 CET	443	49774	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.064940929 CET	443	49774	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.065007925 CET	49774	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.065411091 CET	49774	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.065481901 CET	443	49774	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.065562963 CET	49774	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.065572023 CET	443	49774	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.073761940 CET	443	49767	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.073818922 CET	443	49767	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.073873997 CET	49767	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.073899984 CET	443	49767	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.073915005 CET	443	49767	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.073983908 CET	49767	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.074719906 CET	49767	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.074739933 CET	443	49767	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.077004910 CET	443	49768	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.077078104 CET	443	49768	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.077136993 CET	49768	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.077888012 CET	49768	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.077919006 CET	443	49768	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.080620050 CET	443	49766	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.081185102 CET	443	49766	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.081250906 CET	49766	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.082344055 CET	49766	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.082360029 CET	443	49766	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.094625950 CET	49771	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.095973015 CET	49776	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.096014977 CET	443	49776	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.096087933 CET	49776	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.096506119 CET	49776	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.096523046 CET	443	49776	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.113111019 CET	49774	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.114140987 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.114170074 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.114178896 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.114197969 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.114207029 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.114212036 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.114227057 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.114255905 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.114264965 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.114290953 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.114315033 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.335149050 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.335159063 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.335199118 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.335239887 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.335263014 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.335280895 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.335298061 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.356261015 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.356333971 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.356343985 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.361712933 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.361766100 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.361783028 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.361824036 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.391336918 CET	443	49770	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.391403913 CET	443	49770	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.391669035 CET	49770	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.396034002 CET	49770	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.396075010 CET	443	49770	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.503011942 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.503058910 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.503170967 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.503213882 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.503236055 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.503258944 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.503509045 CET	443	49773	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.503629923 CET	443	49773	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.503686905 CET	49773	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.504661083 CET	49773	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.504683018 CET	443	49773	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.537554026 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.537576914 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.537658930 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.537703991 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.537714005 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.537739992 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.554372072 CET	443	49771	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.554457903 CET	443	49771	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.554511070 CET	49771	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.555691957 CET	49771	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.555725098 CET	443	49771	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.564253092 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.564294100 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.564357996 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.564377069 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.564403057 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.605482101 CET	443	49774	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.605582952 CET	443	49774	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.605679035 CET	49774	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.607023954 CET	49774	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.607034922 CET	443	49774	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.608876944 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.655833006 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.655854940 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.655903101 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.655937910 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.655952930 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.655975103 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.675515890 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.675590038 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.675627947 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.708926916 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.708949089 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.709022045 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.709067106 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.734332085 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.734355927 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.734430075 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.734460115 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.734486103 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.755537987 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.755561113 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.755611897 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.755634069 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.755645990 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.755688906 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.773619890 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.773664951 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.773718119 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.773729086 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.773737907 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.798751116 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.798773050 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.798856974 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.798887014 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.818907976 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.818929911 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.818968058 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.818990946 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.819001913 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.836858988 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.836921930 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.836926937 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.836951971 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.836977005 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.836994886 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.864422083 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.864449024 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.864495039 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.864522934 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.864562035 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.864579916 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.882293940 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.882324934 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.882388115 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.882424116 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.882436037 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.882545948 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.911818027 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.911854982 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.911900043 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.911921024 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.911946058 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.921189070 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.921205044 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.921287060 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.921310902 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.921339035 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.930943966 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.930963993 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.931016922 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.931046963 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.931072950 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.938864946 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.938879967 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.938981056 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.939001083 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.947772026 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.947788954 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.947897911 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.947926998 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.947949886 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.956654072 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.956670046 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.956743956 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.956768036 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.965569973 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.965584993 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.965646982 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.965672970 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.974421024 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.974436045 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.974486113 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:27.974505901 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:27.974545002 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.015902042 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.112209082 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.112236977 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.112287045 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.112307072 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.112337112 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.112345934 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.115192890 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.115233898 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.115259886 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.115271091 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.115328074 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.120628119 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.120651960 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.120716095 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.120728970 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.120775938 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.126102924 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.126125097 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.126197100 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.126214027 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.126267910 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.130814075 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.130836964 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.130880117 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.130892038 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.130928040 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.130948067 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.135952950 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.135977030 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.136045933 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.136059046 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.136121035 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.141544104 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.141565084 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.141621113 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.141634941 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.141678095 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.146759033 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.146775961 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.146851063 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.146863937 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.146922112 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.313585043 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.313611984 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.313674927 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.313699007 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.313726902 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.313751936 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.318851948 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.318870068 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.318934917 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.318952084 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.318998098 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.323694944 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.323717117 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.323781013 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.323796988 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.323841095 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.329235077 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.329252958 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.329314947 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.329334021 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.329385042 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.334501982 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.334520102 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.334583998 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.334600925 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.334656000 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.339484930 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.339509010 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.339566946 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.339582920 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.339607000 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.339624882 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.344950914 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.344971895 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.345063925 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.345077038 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.345124960 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.347408056 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.347472906 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.347492933 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.402201891 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.513621092 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.513648987 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.513700962 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.513724089 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.513747931 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.513781071 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.518696070 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.518716097 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.518748045 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.518810034 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.518817902 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.518865108 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.523175955 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.523192883 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.523242950 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.523256063 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.523304939 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.528747082 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.528800964 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.528853893 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.528867960 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.528892994 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.528914928 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.533528090 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.533543110 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.533612967 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.533632040 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.533680916 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.539015055 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.539035082 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.539097071 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.539113045 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.539134979 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.539155960 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.543051004 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.543086052 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.543127060 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.543137074 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.543171883 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.543188095 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.549760103 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.549782991 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.549827099 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.549841881 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.549877882 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.549907923 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.555028915 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.555051088 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.555097103 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.555109024 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.555147886 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.555166006 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.562932968 CET	443	49775	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.563231945 CET	49775	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.563266039 CET	443	49775	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.563664913 CET	443	49775	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.564157009 CET	49775	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.564316034 CET	443	49775	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.564322948 CET	49775	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.608762980 CET	49775	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.608805895 CET	443	49775	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.691762924 CET	443	49776	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.692384005 CET	49776	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.692406893 CET	443	49776	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.692747116 CET	443	49776	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.693322897 CET	49776	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.693382025 CET	443	49776	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.693592072 CET	49776	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.718283892 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.718308926 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.718353987 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.718370914 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.718410969 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.718430042 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.720618963 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.720698118 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.720710039 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.725960970 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.725979090 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.726018906 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.726032019 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.726056099 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.726753950 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.726803064 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.726811886 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.726823092 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.726876974 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.727050066 CET	49769	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:28.727063894 CET	443	49769	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:28.739337921 CET	443	49776	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:29.225497961 CET	443	49776	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:29.225759983 CET	443	49776	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:29.229760885 CET	49776	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:29.249355078 CET	49776	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:29.249418020 CET	443	49776	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:29.657428980 CET	443	49775	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:29.657463074 CET	443	49775	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:29.657490969 CET	49775	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:29.657500982 CET	443	49775	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:29.657526970 CET	443	49775	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:29.657545090 CET	49775	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:29.657547951 CET	443	49775	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:29.657567978 CET	49775	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:29.657591105 CET	49775	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:29.657603979 CET	443	49775	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:29.657628059 CET	443	49775	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:29.657666922 CET	49775	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:29.658679008 CET	49775	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:29.658694029 CET	443	49775	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:29.680303097 CET	49778	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:29.680381060 CET	443	49778	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:29.680769920 CET	49778	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:29.681094885 CET	49778	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:29.681121111 CET	443	49778	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:31.475403070 CET	443	49778	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:31.475744009 CET	49778	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:31.475775957 CET	443	49778	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:31.476141930 CET	443	49778	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:31.476550102 CET	49778	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:31.476700068 CET	443	49778	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:31.476969004 CET	49778	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:31.523328066 CET	443	49778	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:32.679025888 CET	443	49778	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:32.679066896 CET	443	49778	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:32.679131031 CET	49778	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:32.679158926 CET	443	49778	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:32.679174900 CET	443	49778	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:32.679224968 CET	49778	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:32.681118011 CET	49778	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:32.681138039 CET	443	49778	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:32.686197042 CET	49779	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:32.686265945 CET	443	49779	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:32.686336994 CET	49779	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:32.687062025 CET	49779	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:32.687098980 CET	443	49779	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:32.692526102 CET	49780	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:32.692569971 CET	443	49780	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:32.692645073 CET	49780	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:32.693552971 CET	49780	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:32.693568945 CET	443	49780	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:34.319124937 CET	443	49779	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:34.329909086 CET	49779	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:34.329941988 CET	443	49779	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:34.330456972 CET	443	49779	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:34.332385063 CET	49779	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:34.332494974 CET	443	49779	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:34.333050013 CET	49779	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:34.344363928 CET	443	49780	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:34.348112106 CET	49780	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:34.348140001 CET	443	49780	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:34.348476887 CET	443	49780	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:34.350764036 CET	49780	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:34.350817919 CET	443	49780	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:34.351273060 CET	49780	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:34.379332066 CET	443	49779	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:34.391325951 CET	443	49780	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:34.860625982 CET	443	49779	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:34.860655069 CET	443	49779	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:34.860717058 CET	49779	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:34.860729933 CET	443	49779	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:34.860807896 CET	49779	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:34.861774921 CET	49779	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:34.861797094 CET	443	49779	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:34.884877920 CET	443	49780	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:34.884963036 CET	443	49780	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:34.885023117 CET	49780	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:34.919250011 CET	49780	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:34.919286966 CET	443	49780	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:34.927509069 CET	49781	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:34.927563906 CET	443	49781	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:34.927859068 CET	49781	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:34.928164959 CET	49781	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:34.928174973 CET	443	49781	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:36.519581079 CET	443	49781	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:36.520025015 CET	49781	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:36.520055056 CET	443	49781	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:36.520402908 CET	443	49781	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:36.521101952 CET	49781	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:36.521101952 CET	49781	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:36.521116972 CET	443	49781	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:36.521166086 CET	443	49781	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:36.563755035 CET	49781	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:37.048968077 CET	443	49781	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:37.049089909 CET	443	49781	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:37.049937010 CET	49781	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:37.050404072 CET	49781	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:37.050422907 CET	443	49781	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:42.167058945 CET	49782	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:42.167121887 CET	443	49782	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:42.167200089 CET	49783	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:42.167265892 CET	443	49783	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:42.167294025 CET	49782	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:42.167354107 CET	49783	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:42.167711973 CET	49782	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:42.167727947 CET	443	49782	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:42.167958975 CET	49783	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:42.167975903 CET	443	49783	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:43.747776985 CET	443	49782	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:43.748083115 CET	49782	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:43.748102903 CET	443	49782	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:43.748459101 CET	443	49782	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:43.748779058 CET	49782	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:43.748845100 CET	443	49782	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:43.748930931 CET	49782	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:43.791341066 CET	443	49782	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:43.803623915 CET	443	49783	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:43.803919077 CET	49783	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:43.803992987 CET	443	49783	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:43.804409981 CET	443	49783	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:43.804750919 CET	49783	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:43.804830074 CET	443	49783	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:43.859534979 CET	49783	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:44.899641037 CET	443	49782	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:44.899681091 CET	443	49782	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:44.899696112 CET	443	49782	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:44.899707079 CET	49782	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:44.899724007 CET	443	49782	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:44.899768114 CET	49782	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:44.899790049 CET	49782	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:44.899796009 CET	443	49782	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:44.899835110 CET	443	49782	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:44.899878979 CET	49782	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:44.901062965 CET	49782	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:44.901079893 CET	443	49782	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:45.709573030 CET	49783	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:45.751362085 CET	443	49783	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:46.170291901 CET	443	49783	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:46.170327902 CET	443	49783	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:46.170336008 CET	443	49783	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:46.170377970 CET	443	49783	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:46.170396090 CET	49783	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:46.170402050 CET	443	49783	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:46.170411110 CET	443	49783	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:46.170432091 CET	443	49783	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:46.170449972 CET	443	49783	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:46.170517921 CET	49783	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:46.175769091 CET	49783	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:46.175798893 CET	443	49783	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:53.211806059 CET	49784	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:53.211858034 CET	443	49784	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:53.212018013 CET	49784	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:53.219109058 CET	49784	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:53.219129086 CET	443	49784	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:54.864408970 CET	443	49784	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:54.922709942 CET	49784	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:54.947036982 CET	49784	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:54.947052002 CET	443	49784	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:54.947606087 CET	443	49784	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:54.948791981 CET	49784	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:54.948870897 CET	443	49784	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:54.949515104 CET	49784	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:54.991336107 CET	443	49784	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:56.041395903 CET	443	49784	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:56.041491032 CET	443	49784	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:56.041558027 CET	49784	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:56.043086052 CET	49784	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:56.043102980 CET	443	49784	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:56.048434019 CET	49785	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:56.048461914 CET	443	49785	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:56.048592091 CET	49785	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:56.048763037 CET	49785	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:56.048774958 CET	443	49785	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:57.642335892 CET	443	49785	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:57.646080017 CET	49785	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:57.646095991 CET	443	49785	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:57.646449089 CET	443	49785	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:57.648176908 CET	49785	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:57.648246050 CET	443	49785	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:57.648363113 CET	49785	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:57.695339918 CET	443	49785	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:58.222873926 CET	443	49785	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:58.222981930 CET	443	49785	13.33.187.6	192.168.2.11
Nov 25, 2024 17:57:58.223115921 CET	49785	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:58.223838091 CET	49785	443	192.168.2.11	13.33.187.6
Nov 25, 2024 17:57:58.223850012 CET	443	49785	13.33.187.6	192.168.2.11
Nov 25, 2024 17:58:01.381589890 CET	49786	443	192.168.2.11	52.149.20.212
Nov 25, 2024 17:58:01.381644011 CET	443	49786	52.149.20.212	192.168.2.11
Nov 25, 2024 17:58:01.381735086 CET	49786	443	192.168.2.11	52.149.20.212
Nov 25, 2024 17:58:01.382133007 CET	49786	443	192.168.2.11	52.149.20.212
Nov 25, 2024 17:58:01.382150888 CET	443	49786	52.149.20.212	192.168.2.11
Nov 25, 2024 17:58:03.216610909 CET	443	49786	52.149.20.212	192.168.2.11
Nov 25, 2024 17:58:03.216691971 CET	49786	443	192.168.2.11	52.149.20.212
Nov 25, 2024 17:58:03.220029116 CET	49786	443	192.168.2.11	52.149.20.212
Nov 25, 2024 17:58:03.220047951 CET	443	49786	52.149.20.212	192.168.2.11
Nov 25, 2024 17:58:03.220298052 CET	443	49786	52.149.20.212	192.168.2.11
Nov 25, 2024 17:58:03.227209091 CET	49786	443	192.168.2.11	52.149.20.212
Nov 25, 2024 17:58:03.267334938 CET	443	49786	52.149.20.212	192.168.2.11
Nov 25, 2024 17:58:03.937614918 CET	443	49786	52.149.20.212	192.168.2.11
Nov 25, 2024 17:58:03.937642097 CET	443	49786	52.149.20.212	192.168.2.11
Nov 25, 2024 17:58:03.937661886 CET	443	49786	52.149.20.212	192.168.2.11
Nov 25, 2024 17:58:03.937746048 CET	49786	443	192.168.2.11	52.149.20.212
Nov 25, 2024 17:58:03.937746048 CET	49786	443	192.168.2.11	52.149.20.212
Nov 25, 2024 17:58:03.937788963 CET	443	49786	52.149.20.212	192.168.2.11
Nov 25, 2024 17:58:03.937870979 CET	49786	443	192.168.2.11	52.149.20.212
Nov 25, 2024 17:58:03.978288889 CET	443	49786	52.149.20.212	192.168.2.11
Nov 25, 2024 17:58:03.978323936 CET	443	49786	52.149.20.212	192.168.2.11
Nov 25, 2024 17:58:03.978388071 CET	443	49786	52.149.20.212	192.168.2.11
Nov 25, 2024 17:58:03.978411913 CET	49786	443	192.168.2.11	52.149.20.212
Nov 25, 2024 17:58:03.978449106 CET	49786	443	192.168.2.11	52.149.20.212
Nov 25, 2024 17:58:03.978449106 CET	49786	443	192.168.2.11	52.149.20.212
Nov 25, 2024 17:58:03.978576899 CET	49786	443	192.168.2.11	52.149.20.212
Nov 25, 2024 17:58:03.978576899 CET	49786	443	192.168.2.11	52.149.20.212
Nov 25, 2024 17:58:03.978594065 CET	443	49786	52.149.20.212	192.168.2.11
Nov 25, 2024 17:58:03.978601933 CET	443	49786	52.149.20.212	192.168.2.11
Nov 25, 2024 17:58:10.126563072 CET	49788	443	192.168.2.11	142.250.181.68
Nov 25, 2024 17:58:10.126621962 CET	443	49788	142.250.181.68	192.168.2.11
Nov 25, 2024 17:58:10.126770973 CET	49788	443	192.168.2.11	142.250.181.68
Nov 25, 2024 17:58:10.127161026 CET	49788	443	192.168.2.11	142.250.181.68
Nov 25, 2024 17:58:10.127178907 CET	443	49788	142.250.181.68	192.168.2.11
Nov 25, 2024 17:58:11.892750978 CET	443	49788	142.250.181.68	192.168.2.11
Nov 25, 2024 17:58:11.893301964 CET	49788	443	192.168.2.11	142.250.181.68
Nov 25, 2024 17:58:11.893336058 CET	443	49788	142.250.181.68	192.168.2.11
Nov 25, 2024 17:58:11.893685102 CET	443	49788	142.250.181.68	192.168.2.11
Nov 25, 2024 17:58:11.895010948 CET	49788	443	192.168.2.11	142.250.181.68
Nov 25, 2024 17:58:11.895080090 CET	443	49788	142.250.181.68	192.168.2.11
Nov 25, 2024 17:58:11.936603069 CET	49788	443	192.168.2.11	142.250.181.68
Nov 25, 2024 17:58:21.581928968 CET	443	49788	142.250.181.68	192.168.2.11
Nov 25, 2024 17:58:21.581985950 CET	443	49788	142.250.181.68	192.168.2.11
Nov 25, 2024 17:58:21.582104921 CET	49788	443	192.168.2.11	142.250.181.68
Nov 25, 2024 17:58:22.204166889 CET	49788	443	192.168.2.11	142.250.181.68
Nov 25, 2024 17:58:22.204200983 CET	443	49788	142.250.181.68	192.168.2.11

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 25, 2024 17:57:06.135863066 CET	53	56492	1.1.1.1	192.168.2.11
Nov 25, 2024 17:57:06.136832952 CET	53	51433	1.1.1.1	192.168.2.11
Nov 25, 2024 17:57:07.734114885 CET	60965	53	192.168.2.11	1.1.1.1
Nov 25, 2024 17:57:07.734275103 CET	54331	53	192.168.2.11	1.1.1.1
Nov 25, 2024 17:57:08.259089947 CET	53	54331	1.1.1.1	192.168.2.11
Nov 25, 2024 17:57:08.259563923 CET	53	60965	1.1.1.1	192.168.2.11
Nov 25, 2024 17:57:08.973737955 CET	53	61317	1.1.1.1	192.168.2.11
Nov 25, 2024 17:57:10.062868118 CET	62803	53	192.168.2.11	1.1.1.1
Nov 25, 2024 17:57:10.063275099 CET	57425	53	192.168.2.11	1.1.1.1
Nov 25, 2024 17:57:10.205213070 CET	53	62803	1.1.1.1	192.168.2.11
Nov 25, 2024 17:57:10.205252886 CET	53	57425	1.1.1.1	192.168.2.11
Nov 25, 2024 17:57:14.339382887 CET	51264	53	192.168.2.11	1.1.1.1
Nov 25, 2024 17:57:14.339523077 CET	50246	53	192.168.2.11	1.1.1.1
Nov 25, 2024 17:57:14.481281996 CET	53	50246	1.1.1.1	192.168.2.11
Nov 25, 2024 17:57:14.481435061 CET	53	51264	1.1.1.1	192.168.2.11
Nov 25, 2024 17:57:25.308433056 CET	53	49692	1.1.1.1	192.168.2.11
Nov 25, 2024 17:57:25.913366079 CET	53	52425	1.1.1.1	192.168.2.11
Nov 25, 2024 17:57:44.610928059 CET	53	61509	1.1.1.1	192.168.2.11
Nov 25, 2024 17:57:46.599323034 CET	138	138	192.168.2.11	192.168.2.255
Nov 25, 2024 17:58:05.661731005 CET	53	55732	1.1.1.1	192.168.2.11
Nov 25, 2024 17:58:07.467140913 CET	53	51459	1.1.1.1	192.168.2.11

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 25, 2024 17:57:07.734114885 CET	192.168.2.11	1.1.1.1	0x576c	Standard query (0)	secure.login.gov	A (IP address)	IN (0x0001)	false
Nov 25, 2024 17:57:07.734275103 CET	192.168.2.11	1.1.1.1	0x1e0c	Standard query (0)	secure.login.gov	65	IN (0x0001)	false
Nov 25, 2024 17:57:10.062868118 CET	192.168.2.11	1.1.1.1	0x34e9	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 25, 2024 17:57:10.063275099 CET	192.168.2.11	1.1.1.1	0x3a42	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 25, 2024 17:57:14.339382887 CET	192.168.2.11	1.1.1.1	0x7bb4	Standard query (0)	secure.login.gov	A (IP address)	IN (0x0001)	false
Nov 25, 2024 17:57:14.339523077 CET	192.168.2.11	1.1.1.1	0xb28b	Standard query (0)	secure.login.gov	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 25, 2024 17:57:08.259089947 CET	1.1.1.1	192.168.2.11	0x1e0c	No error (0)	secure.login.gov	d3koqshax83fsx.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 17:57:08.259563923 CET	1.1.1.1	192.168.2.11	0x576c	No error (0)	secure.login.gov	d3koqshax83fsx.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 17:57:08.259563923 CET	1.1.1.1	192.168.2.11	0x576c	No error (0)	d3koqshax83fsx.cloudfront.net		13.33.187.6	A (IP address)	IN (0x0001)	false
Nov 25, 2024 17:57:08.259563923 CET	1.1.1.1	192.168.2.11	0x576c	No error (0)	d3koqshax83fsx.cloudfront.net		13.33.187.119	A (IP address)	IN (0x0001)	false
Nov 25, 2024 17:57:08.259563923 CET	1.1.1.1	192.168.2.11	0x576c	No error (0)	d3koqshax83fsx.cloudfront.net		13.33.187.45	A (IP address)	IN (0x0001)	false
Nov 25, 2024 17:57:08.259563923 CET	1.1.1.1	192.168.2.11	0x576c	No error (0)	d3koqshax83fsx.cloudfront.net		13.33.187.40	A (IP address)	IN (0x0001)	false
Nov 25, 2024 17:57:10.205213070 CET	1.1.1.1	192.168.2.11	0x34e9	No error (0)	www.google.com		142.250.181.68	A (IP address)	IN (0x0001)	false
Nov 25, 2024 17:57:10.205252886 CET	1.1.1.1	192.168.2.11	0x3a42	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 25, 2024 17:57:14.481281996 CET	1.1.1.1	192.168.2.11	0xb28b	No error (0)	secure.login.gov	d3koqshax83fsx.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 17:57:14.481435061 CET	1.1.1.1	192.168.2.11	0x7bb4	No error (0)	secure.login.gov	d3koqshax83fsx.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 17:57:14.481435061 CET	1.1.1.1	192.168.2.11	0x7bb4	No error (0)	d3koqshax83fsx.cloudfront.net		13.33.187.6	A (IP address)	IN (0x0001)	false
Nov 25, 2024 17:57:14.481435061 CET	1.1.1.1	192.168.2.11	0x7bb4	No error (0)	d3koqshax83fsx.cloudfront.net		13.33.187.45	A (IP address)	IN (0x0001)	false
Nov 25, 2024 17:57:14.481435061 CET	1.1.1.1	192.168.2.11	0x7bb4	No error (0)	d3koqshax83fsx.cloudfront.net		13.33.187.40	A (IP address)	IN (0x0001)	false
Nov 25, 2024 17:57:14.481435061 CET	1.1.1.1	192.168.2.11	0x7bb4	No error (0)	d3koqshax83fsx.cloudfront.net		13.33.187.119	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

secure.login.gov

https:

fs.microsoft.com

slscr.update.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.11	49710	13.33.187.6	443	6592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:09 UTC	903	OUT	GET /sign_up/email/confirm?_request_id=3c0afc61-ca10-4f0c-9685-deebefbd5009&confirmation_token=CpW2XvapjXvtiszQfDxe&c=E,1,czKC5vkp_9sR2jC4fsD8lsKfESoIyAIMQRGqkY2Bbcx7yPVzXeHCLLRKd9edzUpkrkCL5N3DxQ5GKyw6w6jtCBdegjvNRkaLnm9khZ_CZsjb1RkOyAgTkuF3&typo=1 HTTP/1.1 Host: secure.login.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 16:57:10 UTC	1810	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Date: Mon, 25 Nov 2024 16:57:10 GMT strict-transport-security: max-age=31556952; includeSubDomains; preload x-frame-options: DENY x-xss-protection: 1; mode=block x-content-type-options: nosniff x-permitted-cross-domain-policies: none referrer-policy: strict-origin-when-cross-origin x-download-options: noopen cache-control: no-store pragma: no-cache location: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxe content-security-policy: default-src 'self'; child-src 'self'; form-action 'self'; block-all-mixed-content; connect-src 'self'; font-src 'self' data: https://secure.login.gov; img-src 'self' data: login.gov https://secure.login.gov https://s3.us-west-2.amazonaws.com; media-src 'self'; object-src 'none'; script-src 'self' https://secure.login.gov 'nonce-4841f9a6f00af2154c2612ef3daecec1'; style-src 'self' https://secure.login.gov 'nonce-4841f9a6f00af2154c2612ef3daecec1'; base-uri 'self' set-cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; path=/; expires=Wed, 25 Nov 2026 16:57:10 GMT; SameSite=Lax; HttpOnly; secure set-cookie: ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; path=/; expires=Mon, 25 Nov 2024 17:12:10 GMT; SameSite=Lax; HttpOnly; secure set-cookie: ahoy_track=true; path=/; SameSite=Lax; HttpOnly; secure set-cookie: _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; path=/; secure; httponly; SameSite=Lax x-request-id: c8a862e8-2652-470c-a188-1333f8ab1a9e x-runtime: 0.009565 X-Cache: Miss from cloudfront Via: 1.1 abf16b943a9b4039b87ccdb094d9303e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: WBqDp6A0yBHVrojhCNG6-ncG2BApPrgMEEMDViaPih6kMFxbGnAJkw==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.11	49709	13.33.187.6	443	6592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:10 UTC	902	OUT	GET /sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxe HTTP/1.1 Host: secure.login.gov Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1
2024-11-25 16:57:11 UTC	2523	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 15128 Connection: close Date: Mon, 25 Nov 2024 16:57:11 GMT strict-transport-security: max-age=31556952; includeSubDomains; preload x-frame-options: DENY x-xss-protection: 1; mode=block x-content-type-options: nosniff x-permitted-cross-domain-policies: none referrer-policy: strict-origin-when-cross-origin x-download-options: noopen cache-control: no-store pragma: no-cache link: </assets/init-6ad4cfee.js>; rel=preload; as=script; integrity=sha256-eMXV2njRJxgQrFbuljRT/UTWePGrhl83bHHDDd+jFPw=,</assets/public-sans/PublicSans-Bold-c73ef2d4.woff2>; rel=preload; as=font; type=font/woff2; crossorigin=anonymous,</assets/public-sans/PublicSans-Regular-5f371c89.woff2>; rel=preload; as=font; type=font/woff2; crossorigin=anonymous,</assets/application-1d4fbf32.css>; rel=preload; as=style,</assets/password_confirmation_component-7db5a738.css>; rel=preload; as=style,</assets/password_strength_component-bbafaadb.css>; rel=preload; as=style,</assets/icon_component-2d022cd4.css>; rel=preload; as=style,</assets/utilities-b943a2ae.css>; rel=preload; as=style,</packs/password_confirmation_component-1a3edc7d.digested-4a05fc12.en.js>; rel=preload; as=script; integrity=sha256-IIaNUXHhBiS7sU8YfUYQszwxRWCCa2qLN+rt3RVel8Q=,</packs/password_confirmation_component-1a3edc7d.digested.js>; rel=preload; as=script; integrity=sha256-uziO+7beQvBUCuYN3XkJ/RRqBa3xPwwjUSrj5RV1UNo= content-security-policy: default-src 'self'; child-src 'self'; form-action 'self'; block-all-mixed-content; connect-src 'self'; font-src 'self' data: https://secure.login.gov; img-src 'self' data: login.gov https://secure.login.gov https://s3.us-west-2.amazonaws.com; media-src 'self'; object-src 'none'; script-src 'self' https://secure.login.gov 'nonce-4841f9a6f00af2154c2612ef3daecec1'; style-src 'self' https://secure.login.gov 'nonce-4841f9a6f00af2154c2612ef3daecec1'; base-uri 'self' set-cookie: ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; path=/; expires=Mon, 25 Nov 2024 17:12:11 GMT; SameSite=Lax; HttpOnly; secure set-cookie: sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov; path=/; expires=Mon, 25 Nov 2024 17:12:11 GMT; SameSite=Lax; HttpOnly; secure x-request-id: 05181c3f-11f8-427a-9102-2001e8350084 x-runtime: 0.028940 X-Cache: Miss from cloudfront Via: 1.1 78668cba389ee6455cf1c23180f33cf8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: k3UIFXbwybJ2eBmBXHE1uQOyKRSNvTzMeUfNqyEPXzgKEeBtTdmGeA==
2024-11-25 16:57:11 UTC	5891	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 4c 6f 67 69 6e 2e 67 6f 76 22 20 2f 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 20 2f 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 6c 65 70 68 Data Ascii: <!DOCTYPE html><html class="no-js" lang="en"><head> <meta charset="utf-8" /> <meta name="description" content="Login.gov" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> <meta name="format-detection" content="teleph
2024-11-25 16:57:12 UTC	9237	IN	Data Raw: 72 77 5a 32 75 49 45 6c 76 41 61 42 66 6e 72 32 42 75 4f 4b 4a 32 77 77 4f 41 59 31 53 47 75 51 54 5a 32 4f 53 79 70 67 43 32 43 71 6e 78 48 41 6c 73 72 41 46 31 45 55 58 6f 58 6d 71 65 36 5f 34 67 58 6f 68 57 71 78 33 6a 70 6d 76 4c 5a 42 53 4d 41 77 22 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3d 22 6f 66 66 22 20 2f 3e 0a 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 74 65 78 74 22 20 6e 61 6d 65 3d 22 75 73 65 72 6e 61 6d 65 22 20 69 64 3d 22 75 73 65 72 6e 61 6d 65 22 20 76 61 6c 75 65 3d 22 6d 6c 6f 6e 67 40 6c 6f 72 64 62 61 6c 74 2e 63 6f 6d 22 20 68 69 64 64 65 6e 3d 22 68 69 64 64 65 6e 22 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3d 22 75 73 65 72 6e 61 6d 65 22 20 2f 3e 0a 20 20 3c 6c 67 2d 70 61 73 73 77 6f 72 64 2d 63 6f 6e 66 69 72 6d 61 74 69 6f Data Ascii: rwZ2uIElvAaBfnr2BuOKJ2wwOAY1SGuQTZ2OSypgC2CqnxHAlsrAF1EUXoXmqe6_4gXohWqx3jpmvLZBSMAw" autocomplete="off" /> <input type="text" name="username" id="username" value="mlong@lordbalt.com" hidden="hidden" autocomplete="username" /> <lg-password-confirmatio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.11	49714	2.20.204.113	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:12 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-25 16:57:12 UTC	478	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Server: Kestrel ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-OSID: 2 X-CID: 2 X-CCC: GB Cache-Control: public, max-age=59743 Date: Mon, 25 Nov 2024 16:57:12 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.11	49718	13.33.187.6	443	6592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:13 UTC	853	OUT	GET /assets/application-1d4fbf32.css HTTP/1.1 Host: secure.login.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
2024-11-25 16:57:14 UTC	613	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 102740 Connection: close Date: Wed, 20 Nov 2024 13:19:53 GMT Last-Modified: Thu, 14 Nov 2024 21:12:29 GMT ETag: "2e1a31928230114baa62fe3c6a6aed6a" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 x-amz-version-id: JMenvWwTonsZizADCDoTwIuICbh.hHEd Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 32c1b1f3aed1f2411468b70713ad6556.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: b_u6d4BCDbQ1osX-W3pQ0E00zKRBlHKNmarEDJ3lubUtcV9BBkXcWw== Age: 445041
2024-11-25 16:57:14 UTC	8949	IN	Data Raw: 2e 75 73 61 2d 73 65 6c 65 63 74 2c 2e 75 73 61 2d 72 61 64 69 6f 5f 5f 6c 61 62 65 6c 2c 2e 75 73 61 2d 68 69 6e 74 2c 2e 75 73 61 2d 63 68 65 63 6b 62 6f 78 5f 5f 6c 61 62 65 6c 2c 2e 75 73 61 2d 66 69 65 6c 64 73 65 74 2c 2e 75 73 61 2d 69 6e 70 75 74 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 50 75 62 6c 69 63 20 53 61 6e 73 20 57 65 62 2c 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 52 6f 62 6f 74 6f 2c 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 2c 41 70 70 6c 65 20 43 6f 6c 6f 72 20 45 6d 6f 6a 69 2c 53 65 67 6f 65 20 55 49 20 45 6d 6f 6a 69 2c 53 65 67 6f 65 20 55 49 20 53 79 6d 62 6f 6c 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 72 65 6d 3b 6c Data Ascii: .usa-select,.usa-radio__label,.usa-hint,.usa-checkbox__label,.usa-fieldset,.usa-input{font-family:Public Sans Web,-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,Helvetica,Arial,sans-serif,Apple Color Emoji,Segoe UI Emoji,Segoe UI Symbol;font-size:1rem;l
2024-11-25 16:57:14 UTC	16384	IN	Data Raw: 6f 6c 6f 72 3a 23 64 65 64 65 64 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 22 2f 61 73 73 65 74 73 2f 75 73 61 2d 69 63 6f 6e 73 2f 72 65 6d 6f 76 65 2d 66 62 65 33 64 34 63 34 2e 73 76 67 22 29 2c 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 23 30 30 30 30 2c 23 30 30 30 30 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 40 6d 65 64 69 61 20 28 66 6f 72 63 65 64 2d 63 6f 6c 6f 72 73 3a 61 63 74 69 76 65 29 7b 2e 75 73 61 2d 61 63 63 6f 72 64 69 6f 6e 5f 5f 62 75 74 74 6f 6e 7b 62 6f 72 64 65 72 3a 32 70 78 20 73 6f 6c 69 64 20 23 30 30 30 30 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 75 73 61 2d 61 63 63 Data Ascii: olor:#dedede;background-image:url("/assets/usa-icons/remove-fbe3d4c4.svg"),linear-gradient(#0000,#0000);background-repeat:no-repeat;text-decoration:none}@media (forced-colors:active){.usa-accordion__button{border:2px solid #0000;position:relative}.usa-acc
2024-11-25 16:57:14 UTC	16384	IN	Data Raw: 69 73 61 62 6c 65 64 3a 61 63 74 69 76 65 2c 2e 75 73 61 2d 62 61 6e 6e 65 72 5f 5f 62 75 74 74 6f 6e 5b 61 72 69 61 2d 64 69 73 61 62 6c 65 64 3d 74 72 75 65 5d 3a 61 63 74 69 76 65 2c 2e 75 73 61 2d 62 61 6e 6e 65 72 5f 5f 62 75 74 74 6f 6e 3a 64 69 73 61 62 6c 65 64 2e 75 73 61 2d 62 75 74 74 6f 6e 2d 2d 61 63 74 69 76 65 2c 2e 75 73 61 2d 62 61 6e 6e 65 72 5f 5f 62 75 74 74 6f 6e 5b 61 72 69 61 2d 64 69 73 61 62 6c 65 64 3d 74 72 75 65 5d 2e 75 73 61 2d 62 75 74 74 6f 6e 2d 2d 61 63 74 69 76 65 2c 2e 75 73 61 2d 62 61 6e 6e 65 72 5f 5f 62 75 74 74 6f 6e 3a 64 69 73 61 62 6c 65 64 3a 66 6f 63 75 73 2c 2e 75 73 61 2d 62 61 6e 6e 65 72 5f 5f 62 75 74 74 6f 6e 5b 61 72 69 61 2d 64 69 73 61 62 6c 65 64 3d 74 72 75 65 5d 3a 66 6f 63 75 73 2c 2e 75 73 61 2d Data Ascii: isabled:active,.usa-banner__button[aria-disabled=true]:active,.usa-banner__button:disabled.usa-button--active,.usa-banner__button[aria-disabled=true].usa-button--active,.usa-banner__button:disabled:focus,.usa-banner__button[aria-disabled=true]:focus,.usa-
2024-11-25 16:57:14 UTC	16384	IN	Data Raw: 75 74 74 6f 6e 2d 2d 73 65 63 6f 6e 64 61 72 79 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 32 31 63 33 64 7d 2e 75 73 61 2d 62 75 74 74 6f 6e 2d 2d 73 65 63 6f 6e 64 61 72 79 3a 68 6f 76 65 72 2c 2e 75 73 61 2d 62 75 74 74 6f 6e 2d 2d 73 65 63 6f 6e 64 61 72 79 2e 75 73 61 2d 62 75 74 74 6f 6e 2d 2d 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 61 62 31 34 32 66 7d 2e 75 73 61 2d 62 75 74 74 6f 6e 2d 2d 73 65 63 6f 6e 64 61 72 79 3a 61 63 74 69 76 65 2c 2e 75 73 61 2d 62 75 74 74 6f 6e 2d 2d 73 65 63 6f 6e 64 61 72 79 2e 75 73 61 2d 62 75 74 74 6f 6e 2d 2d 61 63 74 69 76 65 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f Data Ascii: utton--secondary{color:#fff;background-color:#e21c3d}.usa-button--secondary:hover,.usa-button--secondary.usa-button--hover{color:#fff;background-color:#ab142f}.usa-button--secondary:active,.usa-button--secondary.usa-button--active{color:#fff;background-co
2024-11-25 16:57:14 UTC	16384	IN	Data Raw: 74 3a 2e 32 35 72 65 6d 7d 2e 67 72 69 64 2d 72 6f 77 2e 74 61 62 6c 65 74 5c 3a 67 72 69 64 2d 67 61 70 2d 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 2e 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2d 2e 35 72 65 6d 7d 2e 67 72 69 64 2d 72 6f 77 2e 74 61 62 6c 65 74 5c 3a 67 72 69 64 2d 67 61 70 2d 32 3e 2a 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 2e 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 2e 35 72 65 6d 7d 2e 67 72 69 64 2d 72 6f 77 2e 74 61 62 6c 65 74 5c 3a 67 72 69 64 2d 67 61 70 2d 33 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 2e 37 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2d 2e 37 35 72 65 6d 7d 2e 67 72 69 64 2d 72 6f 77 2e 74 61 62 6c 65 74 5c 3a 67 72 69 64 2d 67 61 70 2d 33 3e 2a 7b 70 61 64 64 69 6e 67 Data Ascii: t:.25rem}.grid-row.tablet\:grid-gap-2{margin-left:-.5rem;margin-right:-.5rem}.grid-row.tablet\:grid-gap-2>{padding-left:.5rem;padding-right:.5rem}.grid-row.tablet\:grid-gap-3{margin-left:-.75rem;margin-right:-.75rem}.grid-row.tablet\:grid-gap-3>{padding
2024-11-25 16:57:14 UTC	16384	IN	Data Raw: 6d 69 6e 61 74 65 3a 64 69 73 61 62 6c 65 64 2b 5b 63 6c 61 73 73 2a 3d 5f 5f 6c 61 62 65 6c 5d 2c 2e 75 73 61 2d 63 68 65 63 6b 62 6f 78 5f 5f 69 6e 70 75 74 3a 69 6e 64 65 74 65 72 6d 69 6e 61 74 65 5b 61 72 69 61 2d 64 69 73 61 62 6c 65 64 3d 74 72 75 65 5d 2b 5b 63 6c 61 73 73 2a 3d 5f 5f 6c 61 62 65 6c 5d 2c 2e 75 73 61 2d 63 68 65 63 6b 62 6f 78 5f 5f 69 6e 70 75 74 5b 64 61 74 61 2d 69 6e 64 65 74 65 72 6d 69 6e 61 74 65 5d 3a 64 69 73 61 62 6c 65 64 2b 5b 63 6c 61 73 73 2a 3d 5f 5f 6c 61 62 65 6c 5d 2c 2e 75 73 61 2d 63 68 65 63 6b 62 6f 78 5f 5f 69 6e 70 75 74 5b 64 61 74 61 2d 69 6e 64 65 74 65 72 6d 69 6e 61 74 65 5d 5b 61 72 69 61 2d 64 69 73 61 62 6c 65 64 3d 74 72 75 65 5d 2b 5b 63 6c 61 73 73 2a 3d 5f 5f 6c 61 62 65 6c 5d 7b 62 6f 72 64 65 Data Ascii: minate:disabled+[class=__label],.usa-checkbox__input:indeterminate[aria-disabled=true]+[class=__label],.usa-checkbox__input[data-indeterminate]:disabled+[class=__label],.usa-checkbox__input[data-indeterminate][aria-disabled=true]+[class=__label]{borde
2024-11-25 16:57:14 UTC	11871	IN	Data Raw: 65 3b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 30 3b 72 69 67 68 74 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 35 30 25 29 7d 7d 2e 61 6c 65 72 74 2d 69 63 6f 6e 7b 77 69 64 74 68 3a 38 38 70 78 3b 68 65 69 67 68 74 3a 38 38 70 78 7d 2e 61 6c 65 72 74 2d 69 63 6f 6e 2d 2d 63 65 6e 74 65 72 65 64 2d 74 6f 70 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 35 30 25 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 2d 35 30 25 2c 2d 35 30 25 29 7d 2e 75 73 61 2d 61 6c 65 72 74 2d 2d 69 6e 66 6f 2d 74 69 6d 65 3a 62 65 66 6f 72 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 22 2f 61 73 73 65 74 73 2f 75 73 61 2d 69 63 6f 6e 73 2f 74 69 6d 65 72 2d 66 31 Data Ascii: e;bottom:0;left:0;right:0;transform:translateY(50%)}}.alert-icon{width:88px;height:88px}.alert-icon--centered-top{position:absolute;top:0;left:50%;transform:translate(-50%,-50%)}.usa-alert--info-time:before{background-image:url("/assets/usa-icons/timer-f1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.11	49719	13.33.187.6	443	6592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:13 UTC	873	OUT	GET /assets/password_confirmation_component-7db5a738.css HTTP/1.1 Host: secure.login.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
2024-11-25 16:57:14 UTC	597	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 39 Connection: close Date: Mon, 25 Nov 2024 16:57:15 GMT Last-Modified: Tue, 03 Oct 2023 16:00:59 GMT ETag: "8a0a84efdd80ee47b76e7c5f207e9a20" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 x-amz-version-id: gAtiMDE5xnzY3vQ3XTNtP7XyJlrF9b8B Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 32803d0ba3af70cddd7db80d2fd00608.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: uCw4CeaMFruYPt-BW3GbDOXWkN32oSGdMLkhad4Oi1q5uovX6O-Acw==
2024-11-25 16:57:14 UTC	39	IN	Data Raw: 6c 67 2d 70 61 73 73 77 6f 72 64 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d Data Ascii: lg-password-confirmation{display:block}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.11	49715	13.33.187.6	443	6592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:13 UTC	869	OUT	GET /assets/password_strength_component-bbafaadb.css HTTP/1.1 Host: secure.login.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
2024-11-25 16:57:14 UTC	598	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 760 Connection: close Date: Mon, 25 Nov 2024 16:57:15 GMT Last-Modified: Thu, 25 Jan 2024 18:22:29 GMT ETag: "32c8660352de8ce382ef97f9423bf359" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 x-amz-version-id: 0aLwDQHI4c3viVlT30q_FNqMtWn5HEEm Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 2ad26f5878b778b17955978bf962dc9a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: _ciz9G9Ug-V5Su9PvBCEo0mpUAVEigJ1z0NQlD9FD0CVImomVy75Zg==
2024-11-25 16:57:14 UTC	760	IN	Data Raw: 2e 70 61 73 73 77 6f 72 64 2d 73 74 72 65 6e 67 74 68 5f 5f 6d 65 74 65 72 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2e 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 32 35 72 65 6d 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 2e 70 61 73 73 77 6f 72 64 2d 73 74 72 65 6e 67 74 68 5f 5f 6d 65 74 65 72 2d 62 61 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 65 64 65 64 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 3b 66 6c 65 78 2d 62 61 73 69 73 3a 32 35 25 3b 68 65 69 67 68 74 3a 2e 35 72 65 6d 7d 2e 70 61 73 73 77 6f 72 64 2d 73 74 72 65 6e 67 74 68 5f 5f 6d 65 74 65 72 2d 62 61 72 2b 2e 70 61 73 73 77 6f 72 64 2d 73 74 72 65 6e 67 74 68 5f 5f 6d 65 74 65 72 2d 62 61 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 35 72 65 6d Data Ascii: .password-strength__meter{margin-top:.5rem;margin-bottom:.25rem;display:flex}.password-strength__meter-bar{background-color:#dedede;border-radius:2px;flex-basis:25%;height:.5rem}.password-strength__meter-bar+.password-strength__meter-bar{margin-left:.5rem

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.11	49716	13.33.187.6	443	6592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:13 UTC	856	OUT	GET /assets/icon_component-2d022cd4.css HTTP/1.1 Host: secure.login.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
2024-11-25 16:57:14 UTC	611	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 465 Connection: close Date: Thu, 14 Nov 2024 02:24:31 GMT Last-Modified: Wed, 27 Mar 2024 17:49:35 GMT ETag: "916b9a6c023f1509b5d59a50d6198420" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 x-amz-version-id: VC5fMRToEQVGH5W4HfeMhXJzkKYvB9nd Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 ccd3e547bd5d86bbfbaca15b4307ce70.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: mYS9MDgKk8IqfSIWB88kLewQ-7PSa53BmhqazA_pouq9xAqANVm54w== Age: 1002763
2024-11-25 16:57:14 UTC	465	IN	Data Raw: 2e 75 73 61 2d 69 63 6f 6e 7b 66 69 6c 6c 3a 63 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 77 69 64 74 68 3a 31 65 6d 3b 68 65 69 67 68 74 3a 31 65 6d 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 75 73 61 2d 69 63 6f 6e 2d 2d 73 69 7a 65 2d 33 7b 77 69 64 74 68 3a 31 2e 35 72 65 6d 3b 68 65 69 67 68 74 3a 31 2e 35 72 65 6d 7d 2e 75 73 61 2d 69 63 6f 6e 2d 2d 73 69 7a 65 2d 34 7b 77 69 64 74 68 3a 32 72 65 6d 3b 68 65 69 67 68 74 3a 32 72 65 6d 7d 2e 75 73 61 2d 69 63 6f 6e 2d 2d 73 69 7a 65 2d 35 7b 77 69 64 74 68 3a 32 2e 35 72 65 6d 3b 68 65 69 67 68 74 3a 32 2e 35 72 65 6d 7d 2e 75 73 61 2d 69 63 6f 6e 2d 2d 73 69 7a 65 2d 36 7b 77 69 64 74 68 3a 33 72 65 6d 3b 68 65 69 67 68 74 3a Data Ascii: .usa-icon{fill:currentColor;width:1em;height:1em;display:inline-block;position:relative}.usa-icon--size-3{width:1.5rem;height:1.5rem}.usa-icon--size-4{width:2rem;height:2rem}.usa-icon--size-5{width:2.5rem;height:2.5rem}.usa-icon--size-6{width:3rem;height:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.11	49720	13.33.187.6	443	6592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:13 UTC	851	OUT	GET /assets/utilities-b943a2ae.css HTTP/1.1 Host: secure.login.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
2024-11-25 16:57:14 UTC	612	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 82027 Connection: close Date: Sat, 23 Nov 2024 17:26:09 GMT Last-Modified: Thu, 18 Jul 2024 17:19:36 GMT ETag: "2d02e27515eca50ef580b216b439b7c4" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 x-amz-version-id: ZQ0Xjd8B41WczekmEDK2wcFv2LcOj0xq Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 6641a812839e5267ee0880e96b41efc4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 8ZmatFt7lHNS-g0IAmWxtynL90H8wCTwPgOex2gpOohtcUMdbgInRw== Age: 171065
2024-11-25 16:57:14 UTC	16384	IN	Data Raw: 5b 63 6c 61 73 73 2a 3d 66 6f 6e 74 2d 6d 6f 6e 6f 2d 5d 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 20 4d 6f 6e 6f 20 57 65 62 2c 42 69 74 73 74 72 65 61 6d 20 56 65 72 61 20 53 61 6e 73 20 4d 6f 6e 6f 2c 43 6f 6e 73 6f 6c 61 73 2c 43 6f 75 72 69 65 72 2c 6d 6f 6e 6f 73 70 61 63 65 7d 5b 63 6c 61 73 73 2a 3d 66 6f 6e 74 2d 73 61 6e 73 2d 5d 2c 5b 63 6c 61 73 73 2a 3d 66 6f 6e 74 2d 75 69 2d 5d 2c 5b 63 6c 61 73 73 2a 3d 66 6f 6e 74 2d 68 65 61 64 69 6e 67 2d 5d 2c 5b 63 6c 61 73 73 2a 3d 66 6f 6e 74 2d 62 6f 64 79 2d 5d 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 50 75 62 6c 69 63 20 53 61 6e 73 20 57 65 62 2c 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 52 6f 62 6f Data Ascii: [class=font-mono-]{font-family:Roboto Mono Web,Bitstream Vera Sans Mono,Consolas,Courier,monospace}[class=font-sans-],[class=font-ui-],[class=font-heading-],[class*=font-body-]{font-family:Public Sans Web,-apple-system,BlinkMacSystemFont,Segoe UI,Robo
2024-11-25 16:57:14 UTC	16384	IN	Data Raw: 72 2d 73 75 63 63 65 73 73 2d 64 61 72 6b 65 72 2c 2e 68 6f 76 65 72 5c 3a 62 6f 72 64 65 72 2d 73 75 63 63 65 73 73 2d 64 61 72 6b 65 72 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 30 39 34 33 31 36 7d 2e 62 6f 72 64 65 72 2d 69 6e 66 6f 2d 6c 69 67 68 74 65 72 2c 2e 68 6f 76 65 72 5c 3a 62 6f 72 64 65 72 2d 69 6e 66 6f 2d 6c 69 67 68 74 65 72 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 65 63 66 63 66 66 7d 2e 62 6f 72 64 65 72 2d 69 6e 66 6f 2d 6c 69 67 68 74 2c 2e 68 6f 76 65 72 5c 3a 62 6f 72 64 65 72 2d 69 6e 66 6f 2d 6c 69 67 68 74 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 62 37 64 64 65 39 7d 2e 62 6f 72 64 65 72 2d 69 6e 66 6f 2c 2e 68 6f 76 65 72 5c 3a 62 6f 72 64 65 72 2d 69 6e 66 6f 3a Data Ascii: r-success-darker,.hover\:border-success-darker:hover{border-color:#094316}.border-info-lighter,.hover\:border-info-lighter:hover{border-color:#ecfcff}.border-info-light,.hover\:border-info-light:hover{border-color:#b7dde9}.border-info,.hover\:border-info:
2024-11-25 16:57:14 UTC	16384	IN	Data Raw: 2d 34 2e 35 72 65 6d 7d 2e 6d 61 72 67 69 6e 2d 79 2d 6e 65 67 2d 31 30 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2d 35 72 65 6d 7d 2e 6d 61 72 67 69 6e 2d 74 6f 70 2d 6e 65 67 2d 31 30 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 35 72 65 6d 7d 2e 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 2d 6e 65 67 2d 31 30 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2d 35 72 65 6d 7d 2e 6d 61 72 67 69 6e 2d 79 2d 6e 65 67 2d 31 35 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 37 2e 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2d 37 2e 35 72 65 6d 7d 2e 6d 61 72 67 69 6e 2d 74 6f 70 2d 6e 65 67 2d 31 35 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 37 2e 35 72 65 6d 7d 2e 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 2d 6e 65 67 2d Data Ascii: -4.5rem}.margin-y-neg-10{margin-top:-5rem;margin-bottom:-5rem}.margin-top-neg-10{margin-top:-5rem}.margin-bottom-neg-10{margin-bottom:-5rem}.margin-y-neg-15{margin-top:-7.5rem;margin-bottom:-7.5rem}.margin-top-neg-15{margin-top:-7.5rem}.margin-bottom-neg-
2024-11-25 16:57:14 UTC	16384	IN	Data Raw: 64 7d 2e 74 61 62 6c 65 74 5c 3a 62 6f 72 64 65 72 2d 6c 65 66 74 2d 31 30 35 2c 2e 74 61 62 6c 65 74 5c 3a 68 6f 76 65 72 5c 3a 62 6f 72 64 65 72 2d 6c 65 66 74 2d 31 30 35 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 2e 37 35 72 65 6d 20 73 6f 6c 69 64 7d 2e 74 61 62 6c 65 74 5c 3a 62 6f 72 64 65 72 2d 32 2c 2e 74 61 62 6c 65 74 5c 3a 68 6f 76 65 72 5c 3a 62 6f 72 64 65 72 2d 32 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 3a 31 72 65 6d 20 73 6f 6c 69 64 7d 2e 74 61 62 6c 65 74 5c 3a 62 6f 72 64 65 72 2d 79 2d 32 2c 2e 74 61 62 6c 65 74 5c 3a 68 6f 76 65 72 5c 3a 62 6f 72 64 65 72 2d 79 2d 32 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 72 65 6d 20 73 6f 6c 69 64 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 20 73 6f 6c 69 Data Ascii: d}.tablet\:border-left-105,.tablet\:hover\:border-left-105:hover{border-left:.75rem solid}.tablet\:border-2,.tablet\:hover\:border-2:hover{border:1rem solid}.tablet\:border-y-2,.tablet\:hover\:border-y-2:hover{border-top:1rem solid;border-bottom:1rem soli
2024-11-25 16:57:14 UTC	16384	IN	Data Raw: 5c 3a 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 2d 6e 65 67 2d 36 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2d 33 72 65 6d 7d 2e 74 61 62 6c 65 74 5c 3a 6d 61 72 67 69 6e 2d 79 2d 6e 65 67 2d 37 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 33 2e 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2d 33 2e 35 72 65 6d 7d 2e 74 61 62 6c 65 74 5c 3a 6d 61 72 67 69 6e 2d 74 6f 70 2d 6e 65 67 2d 37 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 33 2e 35 72 65 6d 7d 2e 74 61 62 6c 65 74 5c 3a 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 2d 6e 65 67 2d 37 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2d 33 2e 35 72 65 6d 7d 2e 74 61 62 6c 65 74 5c 3a 6d 61 72 67 69 6e 2d 79 2d 6e 65 67 2d 38 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 34 72 65 6d 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 Data Ascii: \:margin-bottom-neg-6{margin-bottom:-3rem}.tablet\:margin-y-neg-7{margin-top:-3.5rem;margin-bottom:-3.5rem}.tablet\:margin-top-neg-7{margin-top:-3.5rem}.tablet\:margin-bottom-neg-7{margin-bottom:-3.5rem}.tablet\:margin-y-neg-8{margin-top:-4rem;margin-bott
2024-11-25 16:57:14 UTC	107	IN	Data Raw: 72 65 6d 7d 7d 68 74 6d 6c 2e 6e 6f 2d 6a 73 20 2e 6a 73 2c 68 74 6d 6c 2e 6a 73 20 2e 6e 6f 2d 6a 73 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 73 63 61 6c 65 2d 64 6f 77 6e 7b 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 37 29 7d Data Ascii: rem}}html.no-js .js,html.js .no-js{display:none}.scale-down{backface-visibility:hidden;transform:scale(.7)}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.11	49717	13.33.187.6	443	6592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:13 UTC	831	OUT	GET /assets/init-6ad4cfee.js HTTP/1.1 Host: secure.login.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
2024-11-25 16:57:14 UTC	626	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 171 Connection: close Date: Sat, 04 May 2024 22:23:28 GMT Last-Modified: Wed, 27 Mar 2024 17:49:36 GMT ETag: "bec44148e73e737b93fd70e225ff1f87" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 x-amz-version-id: IbBNigRQu9v8jtjN4vrpHhnrqyqMq0So Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 d9636724d333576f23b5fcfb40d7830c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: O6yo20F_H3CSEpaOe8efRTbbwO-Vi8Idw6-DH7_N_izOKy32gpXV9Q== Age: 17692427
2024-11-25 16:57:14 UTC	171	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 28 29 3d 3e 7b 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 75 73 61 2d 6a 73 2d 6c 6f 61 64 69 6e 67 22 29 3b 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 28 29 3d 3e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 75 73 61 2d 6a 73 2d 6c 6f 61 64 69 6e 67 22 29 29 3b 7d 29 28 29 3b 0a Data Ascii: "use strict";(()=>{document.documentElement.classList.add("usa-js-loading");addEventListener("load",()=>document.documentElement.classList.remove("usa-js-loading"));})();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.11	49722	2.20.204.113	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:14 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-25 16:57:14 UTC	534	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=59770 Date: Mon, 25 Nov 2024 16:57:14 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-25 16:57:14 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.11	49723	13.33.187.6	443	6592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:15 UTC	886	OUT	GET /assets/public-sans/PublicSans-Bold-c73ef2d4.woff2 HTTP/1.1 Host: secure.login.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://secure.login.gov sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
2024-11-25 16:57:16 UTC	809	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 14864 Connection: close Date: Sat, 26 Oct 2024 15:11:14 GMT Access-Control-Allow-Origin: https://secure.login.gov Access-Control-Allow-Methods: GET Access-Control-Expose-Headers: ETag Access-Control-Max-Age: 0 Access-Control-Allow-Credentials: true Last-Modified: Thu, 15 Aug 2024 16:02:43 GMT ETag: "e7f5ecf19d97f1ed17817904cf5c233e" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 x-amz-version-id: JZ.wMZnU3SZ.z_OWXQlYAvtiDxKNewVR Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 abf16b943a9b4039b87ccdb094d9303e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: VpsjPqGKTgd2kJ07tRgZIfgUv15DBdp8McMB31AKEl1COzmW2X8DDA== Age: 2598362
2024-11-25 16:57:16 UTC	14864	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 3a 10 00 11 00 00 00 00 84 78 00 00 39 ad 00 02 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 81 10 1b ae 2e 1c 8a 46 06 60 00 83 30 08 60 09 9c 0c 11 08 0a 81 9b 60 81 89 62 01 36 02 24 03 86 20 0b 83 18 00 04 20 05 83 5a 07 20 0c 81 3d 1b ba 78 35 6c 9b 46 cd e0 3c 70 fa 0d bc f4 41 23 03 c1 c6 01 a8 81 ce 1a fc ff df 93 83 31 06 d8 80 f6 56 3f ac 92 48 a3 9e 6c a4 2d 96 69 16 67 61 af a2 a8 13 bc f1 59 b5 c8 be c8 a6 8d 2d 66 96 ba 87 2a 4c 16 1e 88 be 1f 3f 22 88 85 f1 c6 97 8b 60 f3 8d 96 7e b8 c6 ac 37 05 9f a8 e0 51 1e f9 fa 45 72 9e 30 ef 15 58 94 cc 66 9b 8a a2 8b 27 5d c7 4c fe 8f 76 64 a9 79 f4 ff d8 6d 7d 92 11 1f 64 9b 1e 4a 84 77 ab e6 8c da 96 81 a5 3d 72 c3 b4 08 8c 5b f8 a8 39 f5 f2 f0 Data Ascii: wOF2:x9B.F`0``b6$ Z =x5lF<pA#1V?Hl-igaY-f*L?"`~7QEr0Xf']Lvdym}dJw=r[9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.11	49724	13.33.187.6	443	6592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:15 UTC	889	OUT	GET /assets/public-sans/PublicSans-Regular-5f371c89.woff2 HTTP/1.1 Host: secure.login.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://secure.login.gov sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
2024-11-25 16:57:16 UTC	615	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 14904 Connection: close Date: Sun, 03 Nov 2024 22:48:10 GMT Last-Modified: Thu, 15 Aug 2024 16:02:43 GMT ETag: "44acfe05fa80bc6c5258d1ba0af8046f" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 x-amz-version-id: 1oRDr8Oykcs5pnoyOcE4w5fhD0OxXdad Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 c15415cccc7260d4bd35b1ca2c497c96.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: pCBv1Y4ONFLKSxEcTPY1BRVTltKpz1NtD7nZ_h8UM4sG-l0697Uniw== Age: 1879747
2024-11-25 16:57:16 UTC	14904	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 3a 38 00 11 00 00 00 00 84 50 00 00 39 d7 00 02 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 81 10 1b ae 2e 1c 8a 46 06 60 00 83 30 08 60 09 9c 0c 11 08 0a 81 9b 20 81 8a 1e 01 36 02 24 03 86 20 0b 83 18 00 04 20 05 83 72 07 20 0c 81 3d 1b 0e 79 25 ec d8 4b 02 1b 07 c6 0c dc 97 c5 c8 40 b0 71 d8 08 fc bf 9b fc ff e7 03 39 c6 68 90 37 48 ad de cf b1 55 40 97 cc 3d 97 4b fb 8e 4f e9 9d f3 a6 85 bf 57 6e 9a da 56 a3 12 c8 2b fb e9 11 19 9d 71 a9 13 02 09 d1 11 f2 7e 96 88 47 88 c4 81 48 24 1e 95 bc 62 87 6f cc 19 e1 2b 9d d5 e8 ff 80 85 b9 f6 17 ec 48 f4 a0 f7 00 5b ed ac 5b 4e 21 99 a4 45 01 49 13 1d 3f d4 61 1f fe 89 65 a1 92 fd da 99 b3 e3 aa a5 ef 5a e9 cd 67 5c 04 c6 2d 7c d4 9c 7a 7d 78 7e 9b 7f ee Data Ascii: wOF2:8P9B.F`0` 6$ r =y%K@q9h7HU@=KOWnV+q~GH$bo+H[[N!EI?aeZg\-\|z}x~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.11	49725	13.33.187.6	443	6592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:16 UTC	592	OUT	GET /assets/init-6ad4cfee.js HTTP/1.1 Host: secure.login.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
2024-11-25 16:57:16 UTC	626	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 171 Connection: close Date: Sat, 04 May 2024 22:23:28 GMT Last-Modified: Wed, 27 Mar 2024 17:49:36 GMT ETag: "bec44148e73e737b93fd70e225ff1f87" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 x-amz-version-id: IbBNigRQu9v8jtjN4vrpHhnrqyqMq0So Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 d6dae4153314f4d7a17919a7dd5a237c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: N8G7yZ_dcLmOC-U6JiVNicYfg7dYL7T3xOx988vrkseF_Cm-GJyANQ== Age: 17692429
2024-11-25 16:57:16 UTC	171	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 28 29 3d 3e 7b 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 75 73 61 2d 6a 73 2d 6c 6f 61 64 69 6e 67 22 29 3b 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 28 29 3d 3e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 75 73 61 2d 6a 73 2d 6c 6f 61 64 69 6e 67 22 29 29 3b 7d 29 28 29 3b 0a Data Ascii: "use strict";(()=>{document.documentElement.classList.add("usa-js-loading");addEventListener("load",()=>document.documentElement.classList.remove("usa-js-loading"));})();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.11	49727	13.33.187.6	443	6592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:16 UTC	878	OUT	GET /packs/password_confirmation_component-1a3edc7d.digested-4a05fc12.en.js HTTP/1.1 Host: secure.login.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
2024-11-25 16:57:17 UTC	612	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 130 Connection: close Date: Mon, 25 Nov 2024 16:57:18 GMT Last-Modified: Thu, 29 Aug 2024 19:27:22 GMT ETag: "c91e2922e143cb345e0b86922f4ac20a" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 x-amz-version-id: JWjWYI3jIIq0eIztgnOzdaGiGvONPuQ4 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 840e16b680c94fee8c48b15e01dda782.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: eYdP_KaAxrQ6Yt0yJWaQLUrS2KVYr1oHyp7elTMbWyH-ojubjXXnxQ==
2024-11-25 16:57:17 UTC	130	IN	Data Raw: 5f 6c 6f 63 61 6c 65 5f 64 61 74 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 22 63 6f 6d 70 6f 6e 65 6e 74 73 2e 70 61 73 73 77 6f 72 64 5f 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 2e 65 72 72 6f 72 73 2e 6d 69 73 6d 61 74 63 68 22 3a 22 59 6f 75 72 20 70 61 73 73 77 6f 72 64 73 20 64 6f 6e e2 80 99 74 20 6d 61 74 63 68 22 7d 2c 74 68 69 73 2e 5f 6c 6f 63 61 6c 65 5f 64 61 74 61 29 3b Data Ascii: _locale_data=Object.assign({"components.password_confirmation.errors.mismatch":"Your passwords dont match"},this._locale_data);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.11	49726	13.33.187.6	443	6592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:16 UTC	866	OUT	GET /packs/password_confirmation_component-1a3edc7d.digested.js HTTP/1.1 Host: secure.login.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
2024-11-25 16:57:17 UTC	613	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 1820 Connection: close Date: Mon, 25 Nov 2024 16:57:18 GMT Last-Modified: Thu, 29 Aug 2024 19:27:22 GMT ETag: "ac06899b969300951d7653e932971e7a" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 x-amz-version-id: m..PKX4QrfbsP_kL7OmH4v7S_TWhFRaz Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 46b6cb3d5daab7defe28d3658c3a54fe.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: yhxtD1H1QLzD5v3WfvYckdwvGmQSsrisPyao89C2YXBjzFr3rv3Ijw==
2024-11-25 16:57:17 UTC	1820	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 74 3d 74 3d 3e 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 22 6f 6e 65 22 69 6e 20 74 2c 65 3d 6e 65 77 20 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 6c 65 74 7b 73 74 72 69 6e 67 73 3a 74 7d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 3b 74 68 69 73 2e 73 74 72 69 6e 67 73 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 2c 74 29 2c 74 68 69 73 2e 74 3d 74 68 69 73 2e 74 2e 62 69 6e 64 28 74 68 69 73 29 7d 74 28 65 29 7b 6c 65 74 20 6e 3d 61 72 67 75 6d 65 6e 74 73 2e Data Ascii: (()=>{"use strict";const t=t=>"object"==typeof t&&"one"in t,e=new class{constructor(){let{strings:t}=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{};this.strings=Object.assign(Object.create(null),t),this.t=this.t.bind(this)}t(e){let n=arguments.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.11	49729	13.33.187.6	443	6592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:16 UTC	915	OUT	GET /assets/sp-logos/treasury_caia_logo-8faaee80.png HTTP/1.1 Host: secure.login.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
2024-11-25 16:57:17 UTC	600	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 7273 Connection: close Date: Mon, 25 Nov 2024 16:57:18 GMT Last-Modified: Tue, 03 Oct 2023 16:01:02 GMT ETag: "ede8ee9b2a11808e868e9b0fc775d010" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 x-amz-version-id: qzrGIv1Xv7RqVxvMOG2MimHjLCoA4d03 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 46b6cb3d5daab7defe28d3658c3a54fe.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: Zb0mUvFeGNEarF1Ksee92q2Jige5M4Gqn0dyIzmCXKOhSSuclg5DWA==
2024-11-25 16:57:17 UTC	7273	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 ad 00 00 00 28 08 06 00 00 00 8c d2 7a 28 00 00 1c 30 49 44 41 54 78 da ed 9d 7b 9c 9d 55 79 ef bf bf f5 ee 3d 7b ef b9 24 90 1b 90 0b 97 00 2a 28 72 11 05 0f 58 54 d0 2a 05 39 95 4c 82 a1 20 36 09 ad 6d f5 b4 56 6b 4f d5 56 f0 d4 5b b5 47 5b bc 94 4c 12 40 51 c8 04 b5 d8 72 39 5c a4 22 0a 6a b8 04 08 58 4c b8 25 21 f7 4c 2e 33 b3 f7 ec fd ae df f9 63 ed 49 26 93 c9 24 d8 73 ea c7 4f e7 97 cf e4 b3 27 7b ad 77 dd 9e f5 ac e7 f9 3d cf 7a 23 5e 06 da 3a 17 02 28 42 1b 68 92 d1 44 f0 21 82 16 a4 08 ce 52 49 e5 b6 03 50 17 ea 31 de 0a 6c 56 d0 4e 2b b8 7a d3 fb 5e 4e b3 63 18 c3 5e d0 c1 14 6a 9d b5 18 44 30 9e 00 9e 0e 4c 00 82 61 40 d2 0e ec 9a 51 5d 30 00 8e 40 19 28 08 b5 18 c6 21 97 0d 16 da 06 5e Data Ascii: PNGIHDR(z(0IDATx{Uy={$(rXT9L 6mVkOV[G[L@Qr9\"jXL%!L.3cI&$sO'{w=z#^:(BhD!RIP1lVN+z^Nc^jD0La@Q]0@(!^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.11	49728	13.33.187.6	443	6592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:16 UTC	861	OUT	GET /assets/plus-64f58c0a.svg HTTP/1.1 Host: secure.login.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secure.login.gov/assets/application-1d4fbf32.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
2024-11-25 16:57:17 UTC	603	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 733 Connection: close Date: Mon, 25 Nov 2024 16:57:18 GMT Last-Modified: Tue, 12 Mar 2024 16:50:29 GMT ETag: "e9f69df9dedcce24d657006b689a18ae" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 x-amz-version-id: fPD8f43sBe53Rtz21a6A1pwdIdl.__ui Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 abf16b943a9b4039b87ccdb094d9303e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: gPGxk91y6vVGCIwMaSy4Cpi6QTjMADX666W2zG6sfqg-bNoZxnuvPA==
2024-11-25 16:57:17 UTC	733	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 30 31 2e 39 39 34 22 20 68 65 69 67 68 74 3d 22 34 30 31 2e 39 39 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 30 31 2e 39 39 34 20 34 30 31 2e 39 39 34 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 30 30 37 31 62 62 22 20 64 3d 22 4d 33 39 34 20 31 35 34 2e 31 37 35 63 2d 35 2e 33 33 2d 35 2e 33 33 2d 31 31 2e 38 30 36 2d 37 2e 39 39 34 2d 31 39 2e 34 31 37 2d 37 2e 39 39 34 48 32 35 35 2e 38 31 56 32 37 2e 34 31 71 30 2d 31 31 2e 34 31 37 2d 37 2e 39 39 33 2d 31 39 2e 34 31 34 43 32 34 32 2e 34 38 37 20 32 2e 36 36 36 20 32 33 36 2e 30 32 20 30 20 32 32 38 2e 33 39 37 20 30 68 2d 35 34 2e 38 31 71 2d 31 31 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="401.994" height="401.994" viewBox="0 0 401.994 401.994"><path fill="#0071bb" d="M394 154.175c-5.33-5.33-11.806-7.994-19.417-7.994H255.81V27.41q0-11.417-7.993-19.414C242.487 2.666 236.02 0 228.397 0h-54.81q-11

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.11	49730	13.33.187.6	443	6592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:18 UTC	892	OUT	GET /assets/logo-a6f6c558.svg HTTP/1.1 Host: secure.login.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
2024-11-25 16:57:18 UTC	616	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1702 Connection: close Date: Wed, 20 Nov 2024 13:19:47 GMT Last-Modified: Tue, 13 Feb 2024 19:31:19 GMT ETag: "14b5a2062e13483d6e1693fb1e0bae5d" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 x-amz-version-id: oVXYttpPDoe9_7qTUpZWk33CErna5ydb Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 4770dda4e92393e930d8a34dcbb04db2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: puMteqGCsvSpohM3JD3Ie6O5fcjHsyTtyJ8soVWbGSZ8nvp1RX9SqA== Age: 445052
2024-11-25 16:57:18 UTC	1702	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 39 32 2e 31 20 33 39 2e 34 37 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 66 66 66 22 20 64 3d 22 4d 37 2e 34 34 20 36 2e 38 39 68 31 37 2e 32 76 32 32 2e 30 36 48 37 2e 34 34 7a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 31 31 32 65 35 31 22 20 64 3d 22 4d 35 33 2e 34 35 20 35 2e 32 38 68 2d 36 2e 31 36 76 32 37 2e 33 31 68 31 37 2e 38 37 76 2d 35 2e 33 38 48 35 33 2e 34 35 7a 6d 33 30 2e 37 36 2d 2e 31 39 63 2d 38 2e 33 35 20 30 2d 31 34 2e 36 37 20 35 2e 38 39 2d 31 34 2e 36 37 20 31 33 2e 38 35 73 36 2e 33 32 20 31 33 2e 39 33 20 31 34 2e 36 37 20 31 33 2e 39 33 20 31 34 2e 36 37 2d 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 292.1 39.47"><path fill="#fff" d="M7.44 6.89h17.2v22.06H7.44z"/><path fill="#112e51" d="M53.45 5.28h-6.16v27.31h17.87v-5.38H53.45zm30.76-.19c-8.35 0-14.67 5.89-14.67 13.85s6.32 13.93 14.67 13.93 14.67-6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.11	49731	13.33.187.6	443	6592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:18 UTC	910	OUT	GET /assets/usa-icons/check_circle-9998d611.svg HTTP/1.1 Host: secure.login.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://secure.login.gov sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: image Referer: https://secure.login.gov/assets/application-1d4fbf32.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
2024-11-25 16:57:19 UTC	797	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 217 Connection: close Date: Mon, 25 Nov 2024 16:57:20 GMT Access-Control-Allow-Origin: https://secure.login.gov Access-Control-Allow-Methods: GET Access-Control-Expose-Headers: ETag Access-Control-Max-Age: 0 Access-Control-Allow-Credentials: true Last-Modified: Tue, 03 Oct 2023 16:01:03 GMT ETag: "bd609ed003c5c20da050d95ae96f9986" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 x-amz-version-id: Goh1mU6Tunah7_3Icz4CtRauXDyd2L_E Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 dbddc07d9edf6f99394912c390c6ef32.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: ZdoM1TH-F65xtYsAU2Q5qADH2J-ztnPYN8CPu-rb7Pcp1Fxkxa70pg==
2024-11-25 16:57:19 UTC	217	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 32 20 32 43 36 2e 34 38 20 32 20 32 20 36 2e 34 38 20 32 20 31 32 73 34 2e 34 38 20 31 30 20 31 30 20 31 30 20 31 30 2d 34 2e 34 38 20 31 30 2d 31 30 53 31 37 2e 35 32 20 32 20 31 32 20 32 7a 6d 2d 32 20 31 35 2d 35 2d 35 20 31 2e 34 31 2d 31 2e 34 31 4c 31 30 20 31 34 2e 31 37 6c 37 2e 35 39 2d 37 2e 35 39 4c 31 39 20 38 6c 2d 39 20 39 7a 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24"><path d="M12 2C6.48 2 2 6.48 2 12s4.48 10 10 10 10-4.48 10-10S17.52 2 12 2zm-2 15-5-5 1.41-1.41L10 14.17l7.59-7.59L19 8l-9 9z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.11	49733	13.33.187.6	443	6592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:19 UTC	639	OUT	GET /packs/password_confirmation_component-1a3edc7d.digested-4a05fc12.en.js HTTP/1.1 Host: secure.login.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
2024-11-25 16:57:19 UTC	619	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 130 Connection: close Date: Mon, 25 Nov 2024 16:57:18 GMT Last-Modified: Thu, 29 Aug 2024 19:27:22 GMT ETag: "c91e2922e143cb345e0b86922f4ac20a" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 x-amz-version-id: JWjWYI3jIIq0eIztgnOzdaGiGvONPuQ4 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 6641a812839e5267ee0880e96b41efc4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: BYKzqsZRESuiqT4Qwp1QoRHKAbJuidD-jJ6Z9kQEVdj3BB3V7UFzjg== Age: 2
2024-11-25 16:57:19 UTC	130	IN	Data Raw: 5f 6c 6f 63 61 6c 65 5f 64 61 74 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 22 63 6f 6d 70 6f 6e 65 6e 74 73 2e 70 61 73 73 77 6f 72 64 5f 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 2e 65 72 72 6f 72 73 2e 6d 69 73 6d 61 74 63 68 22 3a 22 59 6f 75 72 20 70 61 73 73 77 6f 72 64 73 20 64 6f 6e e2 80 99 74 20 6d 61 74 63 68 22 7d 2c 74 68 69 73 2e 5f 6c 6f 63 61 6c 65 5f 64 61 74 61 29 3b Data Ascii: _locale_data=Object.assign({"components.password_confirmation.errors.mismatch":"Your passwords dont match"},this._locale_data);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.11	49732	13.33.187.6	443	6592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:19 UTC	909	OUT	GET /assets/usa-icons/expand_more-d32ec934.svg HTTP/1.1 Host: secure.login.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://secure.login.gov sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: image Referer: https://secure.login.gov/assets/application-1d4fbf32.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
2024-11-25 16:57:20 UTC	797	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 145 Connection: close Date: Mon, 25 Nov 2024 16:57:21 GMT Access-Control-Allow-Origin: https://secure.login.gov Access-Control-Allow-Methods: GET Access-Control-Expose-Headers: ETag Access-Control-Max-Age: 0 Access-Control-Allow-Credentials: true Last-Modified: Tue, 03 Oct 2023 16:01:03 GMT ETag: "868144ec91698ab27ec3bdf5f107ef93" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 x-amz-version-id: dgpO5ZKxqgEH_zUSOBCjPEVq4Ge8sqKn Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 51b32b366d2fc0baf4c02123f643c37c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: a4OLmm9d40EnLHuYCvOMNYmH1-eaJGdrAnEXtphGQjNekWk6NGNjeA==
2024-11-25 16:57:20 UTC	145	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 36 2e 35 39 20 38 2e 35 39 20 31 32 20 31 33 2e 31 37 20 37 2e 34 31 20 38 2e 35 39 20 36 20 31 30 6c 36 20 36 20 36 2d 36 7a 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24"><path d="M16.59 8.59 12 13.17 7.41 8.59 6 10l6 6 6-6z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.11	49735	13.33.187.6	443	6592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:19 UTC	627	OUT	GET /packs/password_confirmation_component-1a3edc7d.digested.js HTTP/1.1 Host: secure.login.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
2024-11-25 16:57:19 UTC	620	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 1820 Connection: close Date: Mon, 25 Nov 2024 16:57:18 GMT Last-Modified: Thu, 29 Aug 2024 19:27:22 GMT ETag: "ac06899b969300951d7653e932971e7a" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 x-amz-version-id: m..PKX4QrfbsP_kL7OmH4v7S_TWhFRaz Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 ccd3e547bd5d86bbfbaca15b4307ce70.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 8TqDHj3BZyR-Z_Fd5vbJXfBSJgPQW32d1ZUW4zZNipvnU9WTMSlCvA== Age: 2
2024-11-25 16:57:19 UTC	1820	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 74 3d 74 3d 3e 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 22 6f 6e 65 22 69 6e 20 74 2c 65 3d 6e 65 77 20 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 6c 65 74 7b 73 74 72 69 6e 67 73 3a 74 7d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 3b 74 68 69 73 2e 73 74 72 69 6e 67 73 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 2c 74 29 2c 74 68 69 73 2e 74 3d 74 68 69 73 2e 74 2e 62 69 6e 64 28 74 68 69 73 29 7d 74 28 65 29 7b 6c 65 74 20 6e 3d 61 72 67 75 6d 65 6e 74 73 2e Data Ascii: (()=>{"use strict";const t=t=>"object"==typeof t&&"one"in t,e=new class{constructor(){let{strings:t}=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{};this.strings=Object.assign(Object.create(null),t),this.t=this.t.bind(this)}t(e){let n=arguments.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.11	49734	13.33.187.6	443	6592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:19 UTC	895	OUT	GET /assets/us_flag-9715e180.svg HTTP/1.1 Host: secure.login.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
2024-11-25 16:57:19 UTC	617	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 380 Connection: close Date: Mon, 12 Feb 2024 06:10:13 GMT Last-Modified: Thu, 01 Feb 2024 19:35:41 GMT ETag: "09dd628b9738936e1930cc3c8e4eae53" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 x-amz-version-id: uP6fn8Iy8UA9llesUVEPeCRhBssIgmPO Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 4770dda4e92393e930d8a34dcbb04db2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: PNdQ5S3MS4pMWii-X9PcmuO1ceH3tER0xMvh-_2Lc8qFclX-zAlTQA== Age: 24835627
2024-11-25 16:57:19 UTC	380	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 34 20 34 34 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 66 66 66 22 20 64 3d 22 4d 30 20 30 68 36 34 76 34 34 48 30 7a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 64 61 33 65 31 66 22 20 64 3d 22 4d 30 20 30 68 36 34 76 34 48 30 7a 6d 30 20 34 30 68 36 34 76 34 48 30 7a 6d 30 2d 38 68 36 34 76 34 48 30 7a 6d 30 2d 38 68 36 34 76 34 48 30 7a 6d 30 2d 38 68 36 34 76 34 48 30 7a 6d 30 2d 38 68 36 34 76 34 48 30 7a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 31 65 33 33 62 31 22 20 64 3d 22 4d 30 20 30 68 33 32 76 32 38 48 30 7a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 66 66 66 22 20 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 64 44"><path fill="#fff" d="M0 0h64v44H0z"/><path fill="#da3e1f" d="M0 0h64v4H0zm0 40h64v4H0zm0-8h64v4H0zm0-8h64v4H0zm0-8h64v4H0zm0-8h64v4H0z"/><path fill="#1e33b1" d="M0 0h32v28H0z"/><path fill="#fff"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.11	49736	13.33.187.6	443	6592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:19 UTC	860	OUT	GET /packs/validated_field_component-2b54ffd6.digested.js HTTP/1.1 Host: secure.login.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
2024-11-25 16:57:20 UTC	625	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 2277 Connection: close Date: Tue, 19 Nov 2024 17:28:09 GMT Last-Modified: Tue, 10 Sep 2024 19:36:00 GMT ETag: "18fc30a57cc793ab2fcdcf655f7a0867" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 x-amz-version-id: 8hVCot_qqcyyiYXPNIRhYV6AHKDOB_ze Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 3e79abe3bfc4a431738eb9199cb216f6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 7ZfDELQTWblZ30szAXQZHztNOWlKcDbe0lXb8ApfVHKNmh9XhrsKDQ== Age: 516550
2024-11-25 16:57:20 UTC	2277	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6c 61 73 73 20 65 20 65 78 74 65 6e 64 73 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 7b 63 6f 6e 6e 65 63 74 65 64 43 61 6c 6c 62 61 63 6b 28 29 7b 74 68 69 73 2e 69 6e 70 75 74 3d 74 68 69 73 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 76 61 6c 69 64 61 74 65 64 2d 66 69 65 6c 64 5f 5f 69 6e 70 75 74 22 29 2c 74 68 69 73 2e 69 6e 70 75 74 57 72 61 70 70 65 72 3d 74 68 69 73 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 76 61 6c 69 64 61 74 65 64 2d 66 69 65 6c 64 5f 5f 69 6e 70 75 74 2d 77 72 61 70 70 65 72 22 29 2c 74 68 69 73 2e 65 72 72 6f 72 4d 65 73 73 61 67 65 3d 74 68 69 73 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 74 68 69 73 2e 65 72 Data Ascii: (()=>{"use strict";class e extends HTMLElement{connectedCallback(){this.input=this.querySelector(".validated-field__input"),this.inputWrapper=this.querySelector(".validated-field__input-wrapper"),this.errorMessage=this.ownerDocument.getElementById(this.er

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.11	49737	13.33.187.6	443	6592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:19 UTC	616	OUT	GET /assets/sp-logos/treasury_caia_logo-8faaee80.png HTTP/1.1 Host: secure.login.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
2024-11-25 16:57:20 UTC	607	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 7273 Connection: close Date: Mon, 25 Nov 2024 16:57:18 GMT Last-Modified: Tue, 03 Oct 2023 16:01:02 GMT ETag: "ede8ee9b2a11808e868e9b0fc775d010" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 x-amz-version-id: qzrGIv1Xv7RqVxvMOG2MimHjLCoA4d03 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 3e79abe3bfc4a431738eb9199cb216f6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: wclHbqqjIEANIKT4FPRTqiIhVuIPx7mX1uE5Kxk6Eeijw8rJOIehxw== Age: 2
2024-11-25 16:57:20 UTC	7273	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 ad 00 00 00 28 08 06 00 00 00 8c d2 7a 28 00 00 1c 30 49 44 41 54 78 da ed 9d 7b 9c 9d 55 79 ef bf bf f5 ee 3d 7b ef b9 24 90 1b 90 0b 97 00 2a 28 72 11 05 0f 58 54 d0 2a 05 39 95 4c 82 a1 20 36 09 ad 6d f5 b4 56 6b 4f d5 56 f0 d4 5b b5 47 5b bc 94 4c 12 40 51 c8 04 b5 d8 72 39 5c a4 22 0a 6a b8 04 08 58 4c b8 25 21 f7 4c 2e 33 b3 f7 ec fd ae df f9 63 ed 49 26 93 c9 24 d8 73 ea c7 4f e7 97 cf e4 b3 27 7b ad 77 dd 9e f5 ac e7 f9 3d cf 7a 23 5e 06 da 3a 17 02 28 42 1b 68 92 d1 44 f0 21 82 16 a4 08 ce 52 49 e5 b6 03 50 17 ea 31 de 0a 6c 56 d0 4e 2b b8 7a d3 fb 5e 4e b3 63 18 c3 5e d0 c1 14 6a 9d b5 18 44 30 9e 00 9e 0e 4c 00 82 61 40 d2 0e ec 9a 51 5d 30 00 8e 40 19 28 08 b5 18 c6 21 97 0d 16 da 06 5e Data Ascii: PNGIHDR(z(0IDATx{Uy={$(rXT9L 6mVkOV[G[L@Qr9\"jXL%!L.3cI&$sO'{w=z#^:(BhD!RIP1lVN+z^Nc^jD0La@Q]0@(!^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.11	49738	13.33.187.6	443	6592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:19 UTC	593	OUT	GET /assets/plus-64f58c0a.svg HTTP/1.1 Host: secure.login.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
2024-11-25 16:57:20 UTC	610	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 733 Connection: close Date: Mon, 25 Nov 2024 16:57:18 GMT Last-Modified: Tue, 12 Mar 2024 16:50:29 GMT ETag: "e9f69df9dedcce24d657006b689a18ae" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 x-amz-version-id: fPD8f43sBe53Rtz21a6A1pwdIdl.__ui Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 2ad26f5878b778b17955978bf962dc9a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 96t4-6T8-_y04Mtc7cAHkZhRldeFpwzbZZjJ2UxM0WzrN2NAIoOJdg== Age: 2
2024-11-25 16:57:20 UTC	733	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 30 31 2e 39 39 34 22 20 68 65 69 67 68 74 3d 22 34 30 31 2e 39 39 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 30 31 2e 39 39 34 20 34 30 31 2e 39 39 34 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 30 30 37 31 62 62 22 20 64 3d 22 4d 33 39 34 20 31 35 34 2e 31 37 35 63 2d 35 2e 33 33 2d 35 2e 33 33 2d 31 31 2e 38 30 36 2d 37 2e 39 39 34 2d 31 39 2e 34 31 37 2d 37 2e 39 39 34 48 32 35 35 2e 38 31 56 32 37 2e 34 31 71 30 2d 31 31 2e 34 31 37 2d 37 2e 39 39 33 2d 31 39 2e 34 31 34 43 32 34 32 2e 34 38 37 20 32 2e 36 36 36 20 32 33 36 2e 30 32 20 30 20 32 32 38 2e 33 39 37 20 30 68 2d 35 34 2e 38 31 71 2d 31 31 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="401.994" height="401.994" viewBox="0 0 401.994 401.994"><path fill="#0071bb" d="M394 154.175c-5.33-5.33-11.806-7.994-19.417-7.994H255.81V27.41q0-11.417-7.993-19.414C242.487 2.666 236.02 0 228.397 0h-54.81q-11

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.11	49739	13.33.187.6	443	6592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:20 UTC	593	OUT	GET /assets/logo-a6f6c558.svg HTTP/1.1 Host: secure.login.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
2024-11-25 16:57:21 UTC	616	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1702 Connection: close Date: Wed, 20 Nov 2024 13:19:47 GMT Last-Modified: Tue, 13 Feb 2024 19:31:19 GMT ETag: "14b5a2062e13483d6e1693fb1e0bae5d" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 x-amz-version-id: oVXYttpPDoe9_7qTUpZWk33CErna5ydb Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 c15415cccc7260d4bd35b1ca2c497c96.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: u4NpPouRbT8xCVo6pp6zA042wxtJNVBR9ycInd64O5NJmAPqXMAuJw== Age: 445054
2024-11-25 16:57:21 UTC	1702	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 39 32 2e 31 20 33 39 2e 34 37 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 66 66 66 22 20 64 3d 22 4d 37 2e 34 34 20 36 2e 38 39 68 31 37 2e 32 76 32 32 2e 30 36 48 37 2e 34 34 7a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 31 31 32 65 35 31 22 20 64 3d 22 4d 35 33 2e 34 35 20 35 2e 32 38 68 2d 36 2e 31 36 76 32 37 2e 33 31 68 31 37 2e 38 37 76 2d 35 2e 33 38 48 35 33 2e 34 35 7a 6d 33 30 2e 37 36 2d 2e 31 39 63 2d 38 2e 33 35 20 30 2d 31 34 2e 36 37 20 35 2e 38 39 2d 31 34 2e 36 37 20 31 33 2e 38 35 73 36 2e 33 32 20 31 33 2e 39 33 20 31 34 2e 36 37 20 31 33 2e 39 33 20 31 34 2e 36 37 2d 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 292.1 39.47"><path fill="#fff" d="M7.44 6.89h17.2v22.06H7.44z"/><path fill="#112e51" d="M53.45 5.28h-6.16v27.31h17.87v-5.38H53.45zm30.76-.19c-8.35 0-14.67 5.89-14.67 13.85s6.32 13.93 14.67 13.93 14.67-6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.11	49742	13.33.187.6	443	6592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:21 UTC	611	OUT	GET /assets/usa-icons/check_circle-9998d611.svg HTTP/1.1 Host: secure.login.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
2024-11-25 16:57:22 UTC	804	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 217 Connection: close Date: Mon, 25 Nov 2024 16:57:20 GMT Access-Control-Allow-Origin: https://secure.login.gov Access-Control-Allow-Methods: GET Access-Control-Expose-Headers: ETag Access-Control-Max-Age: 0 Access-Control-Allow-Credentials: true Last-Modified: Tue, 03 Oct 2023 16:01:03 GMT ETag: "bd609ed003c5c20da050d95ae96f9986" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 x-amz-version-id: Goh1mU6Tunah7_3Icz4CtRauXDyd2L_E Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 840e16b680c94fee8c48b15e01dda782.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: JHcNgmJZKlB1T4TzhjCSve9Yq1_MBLqi9mopTvtDBpgtwTxcapm8Uw== Age: 2
2024-11-25 16:57:22 UTC	217	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 32 20 32 43 36 2e 34 38 20 32 20 32 20 36 2e 34 38 20 32 20 31 32 73 34 2e 34 38 20 31 30 20 31 30 20 31 30 20 31 30 2d 34 2e 34 38 20 31 30 2d 31 30 53 31 37 2e 35 32 20 32 20 31 32 20 32 7a 6d 2d 32 20 31 35 2d 35 2d 35 20 31 2e 34 31 2d 31 2e 34 31 4c 31 30 20 31 34 2e 31 37 6c 37 2e 35 39 2d 37 2e 35 39 4c 31 39 20 38 6c 2d 39 20 39 7a 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24"><path d="M12 2C6.48 2 2 6.48 2 12s4.48 10 10 10 10-4.48 10-10S17.52 2 12 2zm-2 15-5-5 1.41-1.41L10 14.17l7.59-7.59L19 8l-9 9z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.11	49745	13.33.187.6	443	6592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:21 UTC	596	OUT	GET /assets/us_flag-9715e180.svg HTTP/1.1 Host: secure.login.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
2024-11-25 16:57:22 UTC	617	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 380 Connection: close Date: Mon, 12 Feb 2024 06:10:13 GMT Last-Modified: Thu, 01 Feb 2024 19:35:41 GMT ETag: "09dd628b9738936e1930cc3c8e4eae53" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 x-amz-version-id: uP6fn8Iy8UA9llesUVEPeCRhBssIgmPO Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 7a0989f96d7fa4864ba49c5b0d586bb2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: hJjv_QLyvUSd186Onal4L98b76gzpfTSKOqnEn4r0ZRVuq2anggCRg== Age: 24835629
2024-11-25 16:57:22 UTC	380	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 34 20 34 34 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 66 66 66 22 20 64 3d 22 4d 30 20 30 68 36 34 76 34 34 48 30 7a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 64 61 33 65 31 66 22 20 64 3d 22 4d 30 20 30 68 36 34 76 34 48 30 7a 6d 30 20 34 30 68 36 34 76 34 48 30 7a 6d 30 2d 38 68 36 34 76 34 48 30 7a 6d 30 2d 38 68 36 34 76 34 48 30 7a 6d 30 2d 38 68 36 34 76 34 48 30 7a 6d 30 2d 38 68 36 34 76 34 48 30 7a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 31 65 33 33 62 31 22 20 64 3d 22 4d 30 20 30 68 33 32 76 32 38 48 30 7a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 66 66 66 22 20 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 64 44"><path fill="#fff" d="M0 0h64v44H0z"/><path fill="#da3e1f" d="M0 0h64v4H0zm0 40h64v4H0zm0-8h64v4H0zm0-8h64v4H0zm0-8h64v4H0zm0-8h64v4H0z"/><path fill="#1e33b1" d="M0 0h32v28H0z"/><path fill="#fff"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.11	49743	13.33.187.6	443	6592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:21 UTC	862	OUT	GET /packs/password_strength_component-5dc65abd.digested.js HTTP/1.1 Host: secure.login.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
2024-11-25 16:57:23 UTC	615	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 821379 Connection: close Date: Mon, 25 Nov 2024 16:57:23 GMT Last-Modified: Thu, 29 Aug 2024 19:27:22 GMT ETag: "41a04029bb2eb5672dca010036770d39" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 x-amz-version-id: .YIhQFHutTaC17ZNGc.gzIvE8qmhD7hL Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 d818b372f81cbe23bb149df5877c444a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: Yl5l8PopfKEeABypBHDnaUBEfYZRPMRD6_dQPP9JCkEyS6JofJK3jg==
2024-11-25 16:57:23 UTC	15345	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 65 3d 7b 32 34 34 32 3a 65 3d 3e 7b 76 61 72 20 61 3b 61 3d 7b 71 77 65 72 74 79 3a 7b 22 21 22 3a 5b 22 60 7e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 32 40 22 2c 22 71 51 22 2c 6e 75 6c 6c 5d 2c 27 22 27 3a 5b 22 3b 3a 22 2c 22 5b 7b 22 2c 22 5d 7d 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 2f 3f 22 5d 2c 22 23 22 3a 5b 22 32 40 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 34 24 22 2c 22 65 45 22 2c 22 77 57 22 5d 2c 24 3a 5b 22 33 23 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 35 25 22 2c 22 72 52 22 2c 22 65 45 22 5d 2c 22 25 22 3a 5b 22 34 24 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 36 5e 22 2c 22 74 54 22 2c 22 72 52 22 5d 2c 22 26 22 3a 5b 22 36 5e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 38 2a 22 2c 22 75 55 22 2c 22 79 59 22 5d 2c 22 27 Data Ascii: (()=>{var e={2442:e=>{var a;a={qwerty:{"!":["`~",null,null,"2@","qQ",null],'"':[";:","[{","]}",null,null,"/?"],"#":["2@",null,null,"4$","eE","wW"],$:["3#",null,null,"5%","rR","eE"],"%":["4$",null,null,"6^","tT","rR"],"&":["6^",null,null,"8*","uU","yY"],"'
2024-11-25 16:57:23 UTC	1556	IN	Data Raw: 6f 76 65 72 62 6f 79 2c 76 69 63 74 6f 72 79 2c 76 66 72 63 62 76 2c 62 61 6d 62 61 6d 2c 73 65 72 65 67 61 2c 31 32 33 36 35 34 37 38 39 2c 74 75 72 6b 65 79 2c 74 77 65 65 74 79 2c 67 61 6c 69 6e 61 2c 68 69 70 68 6f 70 2c 72 6f 6f 73 74 65 72 2c 63 68 61 6e 67 65 6d 65 2c 62 65 72 6c 69 6e 2c 74 61 75 72 75 73 2c 73 75 63 6b 6d 65 2c 70 6f 6c 69 6e 61 2c 65 6c 65 63 74 72 69 63 2c 61 76 61 74 61 72 2c 31 33 34 36 37 39 2c 6d 61 6b 73 69 6d 2c 72 61 70 74 6f 72 2c 61 6c 70 68 61 31 2c 68 65 6e 64 72 69 78 2c 6e 65 77 70 6f 72 74 2c 62 69 67 63 6f 63 6b 2c 62 72 61 7a 69 6c 2c 73 70 72 69 6e 67 2c 61 31 62 32 63 33 2c 6d 61 64 6d 61 78 2c 61 6c 70 68 61 2c 62 72 69 74 6e 65 79 2c 73 75 62 6c 69 6d 65 2c 64 61 72 6b 73 69 64 65 2c 62 69 67 6d 61 6e 2c 77 Data Ascii: overboy,victory,vfrcbv,bambam,serega,123654789,turkey,tweety,galina,hiphop,rooster,changeme,berlin,taurus,suckme,polina,electric,avatar,134679,maksim,raptor,alpha1,hendrix,newport,bigcock,brazil,spring,a1b2c3,madmax,alpha,britney,sublime,darkside,bigman,w
2024-11-25 16:57:23 UTC	16384	IN	Data Raw: 72 65 61 6b 79 2c 6d 61 6c 69 62 75 2c 31 32 33 71 77 65 61 73 64 7a 78 63 2c 61 73 73 61 73 73 69 6e 2c 32 34 36 38 31 30 2c 61 74 6c 61 6e 74 69 73 2c 69 6e 74 65 67 72 61 2c 70 75 73 73 69 65 73 2c 69 6c 6f 76 65 75 2c 6c 6f 6e 65 77 6f 6c 66 2c 64 72 61 67 6f 6e 73 2c 6d 6f 6e 6b 65 79 31 2c 75 6e 69 63 6f 72 6e 2c 73 6f 66 74 77 61 72 65 2c 62 6f 62 63 61 74 2c 73 74 65 61 6c 74 68 2c 70 65 65 77 65 65 2c 6f 70 65 6e 75 70 2c 37 35 33 39 35 31 2c 73 72 69 6e 69 76 61 73 2c 7a 61 71 77 73 78 2c 76 61 6c 65 6e 74 69 6e 61 2c 73 68 6f 74 67 75 6e 2c 74 72 69 67 67 65 72 2c 76 65 72 6f 6e 69 6b 61 2c 62 72 75 69 6e 73 2c 63 6f 79 6f 74 65 2c 62 61 62 79 64 6f 6c 6c 2c 6a 6f 6b 65 72 2c 64 6f 6c 6c 61 72 2c 6c 65 73 74 61 74 2c 72 6f 63 6b 79 31 2c 68 6f Data Ascii: reaky,malibu,123qweasdzxc,assassin,246810,atlantis,integra,pussies,iloveu,lonewolf,dragons,monkey1,unicorn,software,bobcat,stealth,peewee,openup,753951,srinivas,zaqwsx,valentina,shotgun,trigger,veronika,bruins,coyote,babydoll,joker,dollar,lestat,rocky1,ho
2024-11-25 16:57:23 UTC	9594	IN	Data Raw: 6f 6f 6b 77 6f 72 6d 2c 67 72 65 67 6f 72 2c 69 6e 74 65 6c 2c 74 61 6c 69 73 6d 61 6e 2c 62 6c 61 63 6b 6a 61 63 6b 2c 62 61 62 79 66 61 63 65 2c 68 61 77 61 69 69 61 6e 2c 64 6f 67 66 6f 6f 64 2c 7a 68 6f 6e 67 2c 30 31 30 31 31 39 37 35 2c 73 61 6e 63 68 6f 2c 6c 75 64 6d 69 6c 61 2c 6d 65 64 75 73 61 2c 6d 6f 72 74 69 6d 65 72 2c 31 32 33 34 35 36 36 35 34 33 32 31 2c 72 6f 61 64 72 75 6e 6e 2c 6a 75 73 74 34 6d 65 2c 73 74 61 6c 69 6e 2c 30 31 30 31 31 39 39 33 2c 68 61 6e 64 79 6d 61 6e 2c 61 6c 70 68 61 62 65 74 2c 70 69 7a 7a 61 73 2c 63 61 6c 67 61 72 79 2c 63 6c 6f 75 64 73 2c 70 61 73 73 77 6f 72 64 32 2c 63 67 66 68 6e 66 72 2c 66 2a 2a 6b 2c 63 75 62 73 77 69 6e 2c 67 6f 6e 67 2c 6c 65 78 75 73 2c 6d 61 78 31 32 33 2c 78 78 78 31 32 33 2c 64 Data Ascii: ookworm,gregor,intel,talisman,blackjack,babyface,hawaiian,dogfood,zhong,01011975,sancho,ludmila,medusa,mortimer,123456654321,roadrunn,just4me,stalin,01011993,handyman,alphabet,pizzas,calgary,clouds,password2,cgfhnfr,f**k,cubswin,gong,lexus,max123,xxx123,d
2024-11-25 16:57:23 UTC	8838	IN	Data Raw: 73 2c 63 61 74 77 6f 6d 61 6e 2c 6a 6f 68 6e 6e 79 31 2c 71 77 65 72 74 79 37 2c 62 65 61 72 63 61 74 73 2c 75 73 65 72 6e 61 6d 65 2c 30 31 30 31 31 39 37 38 2c 77 61 6e 64 65 72 65 72 2c 6f 68 73 68 69 74 2c 30 32 31 30 31 39 38 36 2c 73 69 67 6d 61 2c 73 74 65 70 68 65 6e 31 2c 70 61 72 61 64 69 67 6d 2c 30 32 30 31 31 39 38 39 2c 66 6c 61 6e 6b 65 72 2c 73 61 6e 69 74 79 2c 6a 73 62 61 63 68 2c 73 70 6f 74 74 79 2c 62 6f 6c 6f 67 6e 61 2c 66 61 6e 74 61 73 69 61 2c 63 68 65 76 79 73 2c 62 6f 72 61 62 6f 72 61 2c 63 6f 63 6b 65 72 2c 37 34 31 30 38 35 32 30 2c 31 32 33 65 77 71 2c 31 32 30 32 31 39 38 38 2c 30 31 30 36 31 39 39 30 2c 67 74 6e 68 6a 64 62 78 2c 30 32 30 37 31 39 38 31 2c 30 31 30 31 31 39 36 30 2c 73 75 6e 64 65 76 69 6c 2c 33 30 30 30 Data Ascii: s,catwoman,johnny1,qwerty7,bearcats,username,01011978,wanderer,ohshit,02101986,sigma,stephen1,paradigm,02011989,flanker,sanity,jsbach,spotty,bologna,fantasia,chevys,borabora,cocker,74108520,123ewq,12021988,01061990,gtnhjdbx,02071981,01011960,sundevil,3000
2024-11-25 16:57:23 UTC	16384	IN	Data Raw: 73 70 2c 6f 70 65 6e 6e 6f 77 2c 64 6f 6b 74 6f 72 2c 61 6c 65 78 31 32 2c 30 32 31 30 31 39 37 37 2c 70 6f 72 6e 6b 69 6e 67 2c 66 6c 61 6d 65 6e 67 6f 2c 30 32 30 39 31 39 37 35 2c 73 6e 6f 77 62 69 72 64 2c 6c 6f 6e 65 73 6f 6d 65 2c 72 6f 62 69 6e 31 2c 31 31 31 31 31 61 2c 77 65 65 64 34 32 30 2c 62 61 72 61 63 75 64 61 2c 62 6c 65 61 63 68 2c 31 32 33 34 35 61 62 63 2c 6e 6f 6b 69 61 31 2c 6d 65 74 61 6c 6c 2c 73 69 6e 67 61 70 6f 72 2c 6d 61 72 69 6e 65 72 2c 68 65 72 65 77 65 67 6f 2c 64 69 6e 67 6f 2c 74 79 63 6f 6f 6e 2c 63 75 62 73 2c 62 6c 75 6e 74 73 2c 70 72 6f 76 69 65 77 2c 31 32 33 34 35 36 37 38 39 64 2c 6b 61 6d 61 73 75 74 72 61 2c 6c 61 67 6e 61 66 2c 76 69 70 65 72 67 74 73 2c 6e 61 76 79 73 65 61 6c 2c 73 74 61 72 77 61 72 2c 6d 61 Data Ascii: sp,opennow,doktor,alex12,02101977,pornking,flamengo,02091975,snowbird,lonesome,robin1,11111a,weed420,baracuda,bleach,12345abc,nokia1,metall,singapor,mariner,herewego,dingo,tycoon,cubs,blunts,proview,123456789d,kamasutra,lagnaf,vipergts,navyseal,starwar,ma
2024-11-25 16:57:23 UTC	9973	IN	Data Raw: 74 61 73 63 68 61 2c 73 75 6e 6b 69 73 74 2c 6b 65 6e 6e 77 6f 72 74 2c 65 6d 69 6e 65 2c 67 72 69 6e 64 65 72 2c 6d 31 32 33 34 35 2c 71 31 71 32 71 33 71 34 2c 63 68 65 65 62 61 2c 6d 6f 6e 65 79 32 2c 71 61 7a 77 73 78 65 64 63 31 2c 64 69 61 6d 61 6e 74 65 2c 70 72 6f 73 74 6f 2c 70 64 69 64 64 79 2c 73 74 69 6e 6b 79 31 2c 67 61 62 62 79 31 2c 6c 75 63 6b 79 73 2c 66 72 61 6e 63 69 2c 70 6f 72 6e 6f 67 72 61 70 68 69 63 2c 6d 6f 6f 63 68 69 65 2c 67 66 68 6a 64 6a 70 2c 73 61 6d 64 6f 67 2c 65 6d 70 69 72 65 31 2c 63 6f 6d 69 63 62 6f 6f 6b 64 62 2c 65 6d 69 6c 69 2c 6d 6f 74 64 65 70 61 73 73 65 2c 69 70 68 6f 6e 65 2c 62 72 61 76 65 68 65 61 72 74 2c 72 65 65 73 65 73 2c 6e 65 62 75 6c 61 2c 73 61 6e 6a 6f 73 65 2c 62 75 62 62 61 32 2c 6b 69 63 6b Data Ascii: tascha,sunkist,kennwort,emine,grinder,m12345,q1q2q3q4,cheeba,money2,qazwsxedc1,diamante,prosto,pdiddy,stinky1,gabby1,luckys,franci,pornographic,moochie,gfhjdjp,samdog,empire1,comicbookdb,emili,motdepasse,iphone,braveheart,reeses,nebula,sanjose,bubba2,kick
2024-11-25 16:57:23 UTC	16384	IN	Data Raw: 77 6d 69 78 2c 62 61 64 67 75 79 2c 66 61 63 65 66 75 63 6b 2c 73 70 69 63 65 31 2c 62 6c 6f 6e 64 79 2c 6d 61 6a 6f 72 31 2c 32 35 30 30 30 2c 61 6e 6e 61 31 32 33 2c 36 35 34 33 32 31 61 2c 73 6f 62 65 72 31 2c 64 65 61 74 68 72 6f 77 2c 70 61 74 74 65 72 73 6f 2c 63 68 69 6e 61 31 2c 6e 61 72 75 74 6f 31 2c 68 61 77 6b 65 79 65 31 2c 77 61 6c 64 6f 31 2c 62 75 74 63 68 79 2c 63 72 61 79 6f 6e 2c 35 74 67 62 36 79 68 6e 2c 6b 6c 6f 70 69 6b 2c 63 72 6f 63 6f 64 69 6c 2c 6d 6f 74 68 72 61 2c 69 6d 68 6f 72 6e 79 2c 70 6f 6f 6b 69 65 31 2c 73 70 6c 61 74 74 65 72 2c 73 6c 69 70 70 79 2c 6c 69 7a 61 72 64 31 2c 72 6f 75 74 65 72 2c 62 75 72 61 74 69 6e 6f 2c 79 61 68 77 65 68 2c 31 32 33 36 39 38 2c 64 72 61 67 6f 6e 31 31 2c 31 32 33 71 77 65 34 35 36 2c Data Ascii: wmix,badguy,facefuck,spice1,blondy,major1,25000,anna123,654321a,sober1,deathrow,patterso,china1,naruto1,hawkeye1,waldo1,butchy,crayon,5tgb6yhn,klopik,crocodil,mothra,imhorny,pookie1,splatter,slippy,lizard1,router,buratino,yahweh,123698,dragon11,123qwe456,
2024-11-25 16:57:23 UTC	1514	IN	Data Raw: 65 2c 68 65 6c 6c 6f 32 75 2c 65 6c 6f 68 69 6d 2c 74 72 69 67 67 65 72 31 2c 63 73 74 72 69 6b 65 2c 70 65 70 73 69 63 6f 6c 61 2c 6d 69 72 6f 73 6c 61 76 2c 39 36 33 38 35 32 37 34 2c 66 69 73 74 66 75 63 6b 2c 63 68 65 76 61 6c 2c 6d 61 67 79 61 72 2c 73 76 65 74 6c 61 6e 6b 61 2c 6c 62 66 79 6a 78 72 66 2c 6d 61 6d 65 64 6f 76 2c 31 32 33 31 32 33 31 32 33 71 2c 72 6f 6e 61 6c 64 6f 31 2c 73 63 6f 74 74 79 31 2c 31 6e 69 63 6f 6c 65 2c 70 69 74 74 62 75 6c 6c 2c 66 72 65 64 64 2c 62 62 62 62 62 31 2c 64 61 67 77 6f 6f 64 2c 67 66 68 6b 66 76 74 79 6e 2c 67 68 62 6c 65 68 72 62 2c 6c 6f 67 61 6e 35 2c 31 6a 6f 72 64 61 6e 2c 73 65 78 62 6f 6d 62 2c 6f 6d 65 67 61 32 2c 6d 6f 6e 74 61 75 6b 2c 32 35 38 37 34 31 2c 64 74 79 74 68 66 2c 67 69 62 62 6f 6e Data Ascii: e,hello2u,elohim,trigger1,cstrike,pepsicola,miroslav,96385274,fistfuck,cheval,magyar,svetlanka,lbfyjxrf,mamedov,123123123q,ronaldo1,scotty1,1nicole,pittbull,fredd,bbbbb1,dagwood,gfhkfvtyn,ghblehrb,logan5,1jordan,sexbomb,omega2,montauk,258741,dtythf,gibbon
2024-11-25 16:57:23 UTC	7969	IN	Data Raw: 69 70 36 61 2c 6e 65 70 74 75 6e 2c 6b 61 72 64 6f 6e 2c 73 70 6f 6f 6b 79 31 2c 62 65 61 75 74 2c 35 35 35 35 35 35 61 2c 74 6f 6f 73 77 65 65 74 2c 74 69 65 64 75 70 2c 31 31 31 32 31 33 31 34 2c 73 74 61 72 74 61 63 2c 6c 6f 76 65 72 36 39 2c 72 65 64 69 73 6b 61 2c 70 69 72 61 74 61 2c 76 66 68 72 62 70 2c 31 32 33 34 71 77 65 72 74 79 2c 65 6e 65 72 67 69 7a 65 2c 68 61 6e 73 6f 6c 6f 31 2c 70 6c 61 79 62 6f 2c 6c 61 72 72 79 31 32 33 2c 6f 65 6d 64 6c 67 2c 63 6e 6a 76 66 6e 6a 6b 6a 75 2c 61 31 32 33 31 32 33 2c 61 6c 65 78 61 6e 2c 67 6f 68 61 77 6b 73 2c 61 6e 74 6f 6e 69 75 73 2c 66 63 62 61 79 65 72 6e 2c 6d 61 6d 62 6f 2c 79 75 6d 6d 79 31 2c 6b 72 65 6d 6c 69 6e 2c 65 6c 6c 65 6e 31 2c 74 72 65 6d 65 72 65 2c 76 66 69 65 6b 7a 2c 62 65 6c 6c Data Ascii: ip6a,neptun,kardon,spooky1,beaut,555555a,toosweet,tiedup,11121314,startac,lover69,rediska,pirata,vfhrbp,1234qwerty,energize,hansolo1,playbo,larry123,oemdlg,cnjvfnjkju,a123123,alexan,gohawks,antonius,fcbayern,mambo,yummy1,kremlin,ellen1,tremere,vfiekz,bell

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.11	49744	13.33.187.6	443	6592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:21 UTC	874	OUT	GET /packs/password_strength_component-5dc65abd.digested-d55a7dd4.en.js HTTP/1.1 Host: secure.login.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
2024-11-25 16:57:22 UTC	613	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 3720 Connection: close Date: Mon, 25 Nov 2024 16:57:23 GMT Last-Modified: Thu, 29 Aug 2024 19:27:22 GMT ETag: "43c0fe0971e917007252bac56c7be940" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 x-amz-version-id: o33TZ5qXAAqZ3fXBZpZa73ovphLjdFqA Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 60dc145c687858f10bb3fe6251ad4ffe.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: g_c2CoHoPBjuesMf3LU4RGrR56Y6eCbWXrsRhmEzLdvsYDi_5Cv5hA==
2024-11-25 16:57:22 UTC	3720	IN	Data Raw: 5f 6c 6f 63 61 6c 65 5f 64 61 74 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 22 7a 78 63 76 62 6e 2e 66 65 65 64 62 61 63 6b 2e 61 5f 77 6f 72 64 5f 62 79 5f 69 74 73 65 6c 66 5f 69 73 5f 65 61 73 79 5f 74 6f 5f 67 75 65 73 73 22 3a 22 41 20 77 6f 72 64 20 62 79 20 69 74 73 65 6c 66 20 69 73 20 65 61 73 79 20 74 6f 20 67 75 65 73 73 22 2c 22 7a 78 63 76 62 6e 2e 66 65 65 64 62 61 63 6b 2e 61 64 64 5f 61 6e 6f 74 68 65 72 5f 77 6f 72 64 5f 6f 72 5f 74 77 6f 5f 75 6e 63 6f 6d 6d 6f 6e 5f 77 6f 72 64 73 5f 61 72 65 5f 62 65 74 74 65 72 22 3a 22 41 64 64 20 61 6e 6f 74 68 65 72 20 77 6f 72 64 20 6f 72 20 74 77 6f 2e 20 55 6e 63 6f 6d 6d 6f 6e 20 77 6f 72 64 73 20 61 72 65 20 62 65 74 74 65 72 22 2c 22 7a 78 63 76 62 6e 2e 66 65 65 64 62 61 63 6b 2e 61 Data Ascii: _locale_data=Object.assign({"zxcvbn.feedback.a_word_by_itself_is_easy_to_guess":"A word by itself is easy to guess","zxcvbn.feedback.add_another_word_or_two_uncommon_words_are_better":"Add another word or two. Uncommon words are better","zxcvbn.feedback.a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.11	49748	13.33.187.6	443	6592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:21 UTC	858	OUT	GET /packs/submit_button_component-f328105c.digested.js HTTP/1.1 Host: secure.login.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
2024-11-25 16:57:22 UTC	624	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 633 Connection: close Date: Thu, 14 Nov 2024 21:25:12 GMT Last-Modified: Thu, 14 Nov 2024 21:12:33 GMT ETag: "48d2e96efefdcb7abc06dfd71d91489b" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 x-amz-version-id: CY4XqRAyUeVziZnsY4v_alwsXVk.YFGJ Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 ccd3e547bd5d86bbfbaca15b4307ce70.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: pFgyDKwxFJrPMxrwHJpiyIohGpipos_ncYkDV-KOHIpuyprG4q2Afw== Age: 934331
2024-11-25 16:57:22 UTC	633	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6c 61 73 73 20 74 20 65 78 74 65 6e 64 73 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 7b 63 6f 6e 6e 65 63 74 65 64 43 61 6c 6c 62 61 63 6b 28 29 7b 74 68 69 73 2e 62 75 74 74 6f 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 6c 69 63 6b 22 2c 74 68 69 73 2e 23 74 29 2c 74 68 69 73 2e 66 6f 72 6d 3f 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 73 75 62 6d 69 74 22 2c 74 68 69 73 2e 23 65 29 7d 67 65 74 20 66 6f 72 6d 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6c 6f 73 65 73 74 28 22 66 6f 72 6d 22 29 7d 67 65 74 20 62 75 74 74 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 62 75 74 74 6f 6e 22 29 7d 67 65 74 20 69 73 53 75 Data Ascii: (()=>{"use strict";class t extends HTMLElement{connectedCallback(){this.button.addEventListener("click",this.#t),this.form?.addEventListener("submit",this.#e)}get form(){return this.closest("form")}get button(){return this.querySelector("button")}get isSu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.11	49747	13.33.187.6	443	6592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:21 UTC	857	OUT	GET /packs/session-expire-session-33c940e8.digested.js HTTP/1.1 Host: secure.login.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
2024-11-25 16:57:22 UTC	624	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 301 Connection: close Date: Tue, 19 Nov 2024 03:57:53 GMT Last-Modified: Thu, 22 Aug 2024 21:07:56 GMT ETag: "1549c8fdd965f5dab19ddaefa5dcdc9d" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 x-amz-version-id: QHXwglSzvrXl6FHxHlJF3WMjWolIAiGd Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 ccd3e547bd5d86bbfbaca15b4307ce70.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: SDvolrnqmwALPi4a2zImdG_XILz1uOsPwcd19-u8wfeonGjiDBxNaA== Age: 565170
2024-11-25 16:57:22 UTC	301	IN	Data Raw: 28 28 29 3d 3e 7b 63 6f 6e 73 74 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6a 73 2d 65 78 70 69 72 65 2d 73 65 73 73 69 6f 6e 22 29 3b 69 66 28 65 26 26 65 2e 64 61 74 61 73 65 74 2e 73 65 73 73 69 6f 6e 54 69 6d 65 6f 75 74 49 6e 29 7b 63 6f 6e 73 74 20 74 3d 31 65 33 2a 70 61 72 73 65 49 6e 74 28 65 2e 64 61 74 61 73 65 74 2e 73 65 73 73 69 6f 6e 54 69 6d 65 6f 75 74 49 6e 2c 31 30 29 2c 73 3d 65 2e 64 61 74 61 73 65 74 2e 74 69 6d 65 6f 75 74 52 65 66 72 65 73 68 50 61 74 68 7c 7c 22 22 3b 73 65 74 54 69 6d 65 6f 75 74 28 28 28 29 3d 3e 7b 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3d 73 7d 29 2c 74 29 7d 7d 29 28 29 3b 0a 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 73 Data Ascii: (()=>{const e=document.getElementById("js-expire-session");if(e&&e.dataset.sessionTimeoutIn){const t=1e3*parseInt(e.dataset.sessionTimeoutIn,10),s=e.dataset.timeoutRefreshPath\|\|"";setTimeout((()=>{document.location.href=s}),t)}})();//# sourceMappingURL=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.11	49746	13.33.187.6	443	6592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:21 UTC	846	OUT	GET /packs/application-3688b8ee.digested.js HTTP/1.1 Host: secure.login.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
2024-11-25 16:57:22 UTC	625	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 4455 Connection: close Date: Tue, 19 Nov 2024 17:28:16 GMT Last-Modified: Wed, 03 Jul 2024 16:50:30 GMT ETag: "ce454b849ebc7bd6f82b46992211d9fe" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 x-amz-version-id: 6Qt5R_mDQiiOM_NVfj27n7EERmrQbFuT Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 9bd2938ceb90e1a35f549d1165e84676.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: n2GjLpQ0R9XzJiR8mnBDMVZZZfywm5X6b4F6dOgo4uS8lVfxrfk6Kw== Age: 516547
2024-11-25 16:57:22 UTC	4455	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 74 3d 7b 31 30 33 32 3a 28 74 2c 65 2c 72 29 3d 3e 7b 63 6f 6e 73 74 20 6e 3d 72 28 32 39 36 30 29 2c 6f 3d 72 28 39 38 36 32 29 2c 69 3d 72 28 36 34 37 36 29 2c 73 3d 72 28 36 38 34 39 29 2c 7b 43 4c 49 43 4b 3a 63 7d 3d 72 28 33 39 39 35 29 2c 7b 70 72 65 66 69 78 3a 75 7d 3d 72 28 31 36 34 34 29 2c 61 3d 60 2e 24 7b 75 7d 2d 61 63 63 6f 72 64 69 6f 6e 2c 20 2e 24 7b 75 7d 2d 61 63 63 6f 72 64 69 6f 6e 2d 2d 62 6f 72 64 65 72 65 64 60 2c 66 3d 60 2e 24 7b 75 7d 2d 61 63 63 6f 72 64 69 6f 6e 5f 5f 62 75 74 74 6f 6e 5b 61 72 69 61 2d 63 6f 6e 74 72 6f 6c 73 5d 3a 6e 6f 74 28 2e 24 7b 75 7d 2d 62 61 6e 6e 65 72 5f 5f 62 75 74 74 6f 6e 29 60 2c 6c 3d 22 61 72 69 61 2d 65 78 70 61 6e 64 65 64 22 2c 64 3d 74 3d 3e 6e 28 66 2c 74 Data Ascii: (()=>{var t={1032:(t,e,r)=>{const n=r(2960),o=r(9862),i=r(6476),s=r(6849),{CLICK:c}=r(3995),{prefix:u}=r(1644),a=`.${u}-accordion, .${u}-accordion--bordered`,f=`.${u}-accordion__button[aria-controls]:not(.${u}-banner__button)`,l="aria-expanded",d=t=>n(f,t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.11	49749	13.33.187.6	443	6592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:21 UTC	621	OUT	GET /packs/validated_field_component-2b54ffd6.digested.js HTTP/1.1 Host: secure.login.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
2024-11-25 16:57:22 UTC	625	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 2277 Connection: close Date: Tue, 19 Nov 2024 17:28:09 GMT Last-Modified: Tue, 10 Sep 2024 19:36:00 GMT ETag: "18fc30a57cc793ab2fcdcf655f7a0867" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 x-amz-version-id: 8hVCot_qqcyyiYXPNIRhYV6AHKDOB_ze Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 de142d0ad142b3c0e86791d0b145349a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: CZE306fwRWNqFZhWqHuKmk-oseh22Y7T9U4ASbMWAJFR486RK814gQ== Age: 516553
2024-11-25 16:57:22 UTC	2277	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6c 61 73 73 20 65 20 65 78 74 65 6e 64 73 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 7b 63 6f 6e 6e 65 63 74 65 64 43 61 6c 6c 62 61 63 6b 28 29 7b 74 68 69 73 2e 69 6e 70 75 74 3d 74 68 69 73 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 76 61 6c 69 64 61 74 65 64 2d 66 69 65 6c 64 5f 5f 69 6e 70 75 74 22 29 2c 74 68 69 73 2e 69 6e 70 75 74 57 72 61 70 70 65 72 3d 74 68 69 73 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 76 61 6c 69 64 61 74 65 64 2d 66 69 65 6c 64 5f 5f 69 6e 70 75 74 2d 77 72 61 70 70 65 72 22 29 2c 74 68 69 73 2e 65 72 72 6f 72 4d 65 73 73 61 67 65 3d 74 68 69 73 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 74 68 69 73 2e 65 72 Data Ascii: (()=>{"use strict";class e extends HTMLElement{connectedCallback(){this.input=this.querySelector(".validated-field__input"),this.inputWrapper=this.querySelector(".validated-field__input-wrapper"),this.errorMessage=this.ownerDocument.getElementById(this.er

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.11	49751	13.33.187.6	443	6592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:22 UTC	610	OUT	GET /assets/usa-icons/expand_more-d32ec934.svg HTTP/1.1 Host: secure.login.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
2024-11-25 16:57:22 UTC	804	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 145 Connection: close Date: Mon, 25 Nov 2024 16:57:21 GMT Access-Control-Allow-Origin: https://secure.login.gov Access-Control-Allow-Methods: GET Access-Control-Expose-Headers: ETag Access-Control-Max-Age: 0 Access-Control-Allow-Credentials: true Last-Modified: Tue, 03 Oct 2023 16:01:03 GMT ETag: "868144ec91698ab27ec3bdf5f107ef93" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 x-amz-version-id: dgpO5ZKxqgEH_zUSOBCjPEVq4Ge8sqKn Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 ad82d8a80f2c6497aad660c7722475c0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: TOiWcVoJNBSGI99FPI4qnymKq66EL8zXJo8msP2Rzt4_IWX7yZq6Dw== Age: 2
2024-11-25 16:57:22 UTC	145	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 36 2e 35 39 20 38 2e 35 39 20 31 32 20 31 33 2e 31 37 20 37 2e 34 31 20 38 2e 35 39 20 36 20 31 30 6c 36 20 36 20 36 2d 36 7a 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24"><path d="M16.59 8.59 12 13.17 7.41 8.59 6 10l6 6 6-6z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.11	49750	13.33.187.6	443	6592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:22 UTC	900	OUT	GET /assets/icon-dot-gov-c85c77ab.svg HTTP/1.1 Host: secure.login.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
2024-11-25 16:57:22 UTC	615	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 633 Connection: close Date: Wed, 20 Nov 2024 13:19:42 GMT Last-Modified: Wed, 27 Mar 2024 17:49:35 GMT ETag: "ea3237dd9e7f4f959299bc2cf6b61356" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 x-amz-version-id: _R.c1SRl5JGmkSuWLYpWd8ZsBqoPuwHf Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 51b32b366d2fc0baf4c02123f643c37c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: C1cX14vKEGuaLzjVmBk4UMM1-nRqU7Ypb-MV7ydd7kydVktw60mD1A== Age: 445061
2024-11-25 16:57:22 UTC	633	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 36 34 22 20 68 65 69 67 68 74 3d 22 36 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 34 20 36 34 22 3e 3c 74 69 74 6c 65 3e 69 63 6f 6e 2d 64 6f 74 2d 67 6f 76 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 32 33 37 38 43 33 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 6d 33 32 20 30 63 31 37 2e 37 20 30 20 33 32 20 31 34 2e 33 20 33 32 20 33 32 73 2d 31 34 2e 33 20 33 32 2d 33 32 20 33 32 2d 33 32 2d 31 34 2e 33 2d 33 32 2d 33 32 20 31 34 2e 33 2d 33 32 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="64" height="64" viewBox="0 0 64 64"><title>icon-dot-gov</title><path fill="#2378C3" fill-rule="evenodd" d="m32 0c17.7 0 32 14.3 32 32s-14.3 32-32 32-32-14.3-32-32 14.3-32

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.11	49740	52.149.20.212	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:22 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=YELw5Cd6B75V8mM&MD=YkgmYcKl HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-25 16:57:23 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 26a32597-7188-4bb1-9dc2-4442bfa44dd0 MS-RequestId: fb0f2563-9d94-4bde-8f0f-236813b11816 MS-CV: ANmLyFMxl0Oc7eWr.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 25 Nov 2024 16:57:22 GMT Connection: close Content-Length: 24490
2024-11-25 16:57:23 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-25 16:57:23 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.11	49756	13.33.187.6	443	6592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:24 UTC	898	OUT	GET /assets/icon-https-4fe6ff7d.svg HTTP/1.1 Host: secure.login.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
2024-11-25 16:57:25 UTC	603	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 720 Connection: close Date: Mon, 25 Nov 2024 16:57:26 GMT Last-Modified: Wed, 27 Mar 2024 17:49:35 GMT ETag: "73abd86624ca4c09a380e14d5f60e258" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 x-amz-version-id: lWfxoB8DImIzNTHWAG4aSX1FeB_KjCDj Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 d6dae4153314f4d7a17919a7dd5a237c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: ZSiK111YXUIllLNs-4YB3k0nNdKLxRbkQrqrkGhDR8FaiJjLaXr_Iw==
2024-11-25 16:57:25 UTC	720	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 36 34 22 20 68 65 69 67 68 74 3d 22 36 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 34 20 36 34 22 3e 3c 74 69 74 6c 65 3e 69 63 6f 6e 2d 68 74 74 70 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 37 31 39 46 32 41 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 33 32 20 30 63 31 37 2e 36 37 33 20 30 20 33 32 20 31 34 2e 33 32 37 20 33 32 20 33 32 20 30 20 31 37 2e 36 37 33 2d 31 34 2e 33 32 37 20 33 32 2d 33 32 20 33 32 43 31 34 2e 33 32 37 20 36 34 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="64" height="64" viewBox="0 0 64 64"><title>icon-https</title><path fill="#719F2A" fill-rule="evenodd" d="M32 0c17.673 0 32 14.327 32 32 0 17.673-14.327 32-32 32C14.327 64

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.11	49755	13.33.187.6	443	6592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:24 UTC	619	OUT	GET /packs/submit_button_component-f328105c.digested.js HTTP/1.1 Host: secure.login.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
2024-11-25 16:57:24 UTC	624	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 633 Connection: close Date: Thu, 14 Nov 2024 21:25:12 GMT Last-Modified: Thu, 14 Nov 2024 21:12:33 GMT ETag: "48d2e96efefdcb7abc06dfd71d91489b" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 x-amz-version-id: CY4XqRAyUeVziZnsY4v_alwsXVk.YFGJ Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 2e8126aebd83e92e3cf50c4f9c832912.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: J3LJod0om8oYMN6FCBLXoTVr8iToKhRhmDAwYaa-o41ze3mU4TUAIA== Age: 934333
2024-11-25 16:57:24 UTC	633	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6c 61 73 73 20 74 20 65 78 74 65 6e 64 73 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 7b 63 6f 6e 6e 65 63 74 65 64 43 61 6c 6c 62 61 63 6b 28 29 7b 74 68 69 73 2e 62 75 74 74 6f 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 6c 69 63 6b 22 2c 74 68 69 73 2e 23 74 29 2c 74 68 69 73 2e 66 6f 72 6d 3f 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 73 75 62 6d 69 74 22 2c 74 68 69 73 2e 23 65 29 7d 67 65 74 20 66 6f 72 6d 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6c 6f 73 65 73 74 28 22 66 6f 72 6d 22 29 7d 67 65 74 20 62 75 74 74 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 62 75 74 74 6f 6e 22 29 7d 67 65 74 20 69 73 53 75 Data Ascii: (()=>{"use strict";class t extends HTMLElement{connectedCallback(){this.button.addEventListener("click",this.#t),this.form?.addEventListener("submit",this.#e)}get form(){return this.closest("form")}get button(){return this.querySelector("button")}get isSu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.11	49757	13.33.187.6	443	6592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:24 UTC	618	OUT	GET /packs/session-expire-session-33c940e8.digested.js HTTP/1.1 Host: secure.login.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
2024-11-25 16:57:24 UTC	624	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 301 Connection: close Date: Tue, 19 Nov 2024 03:57:53 GMT Last-Modified: Thu, 22 Aug 2024 21:07:56 GMT ETag: "1549c8fdd965f5dab19ddaefa5dcdc9d" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 x-amz-version-id: QHXwglSzvrXl6FHxHlJF3WMjWolIAiGd Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 c15415cccc7260d4bd35b1ca2c497c96.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: _AlmbP5h-ruj35II98O1aeAH5hgcc5EN6-MJR5yigrFnBsUahE_pTA== Age: 565172
2024-11-25 16:57:24 UTC	301	IN	Data Raw: 28 28 29 3d 3e 7b 63 6f 6e 73 74 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6a 73 2d 65 78 70 69 72 65 2d 73 65 73 73 69 6f 6e 22 29 3b 69 66 28 65 26 26 65 2e 64 61 74 61 73 65 74 2e 73 65 73 73 69 6f 6e 54 69 6d 65 6f 75 74 49 6e 29 7b 63 6f 6e 73 74 20 74 3d 31 65 33 2a 70 61 72 73 65 49 6e 74 28 65 2e 64 61 74 61 73 65 74 2e 73 65 73 73 69 6f 6e 54 69 6d 65 6f 75 74 49 6e 2c 31 30 29 2c 73 3d 65 2e 64 61 74 61 73 65 74 2e 74 69 6d 65 6f 75 74 52 65 66 72 65 73 68 50 61 74 68 7c 7c 22 22 3b 73 65 74 54 69 6d 65 6f 75 74 28 28 28 29 3d 3e 7b 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3d 73 7d 29 2c 74 29 7d 7d 29 28 29 3b 0a 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 73 Data Ascii: (()=>{const e=document.getElementById("js-expire-session");if(e&&e.dataset.sessionTimeoutIn){const t=1e3*parseInt(e.dataset.sessionTimeoutIn,10),s=e.dataset.timeoutRefreshPath\|\|"";setTimeout((()=>{document.location.href=s}),t)}})();//# sourceMappingURL=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.11	49758	13.33.187.6	443	6592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:24 UTC	892	OUT	GET /assets/lock-c7ffa794.svg HTTP/1.1 Host: secure.login.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
2024-11-25 16:57:25 UTC	603	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 395 Connection: close Date: Mon, 25 Nov 2024 16:57:26 GMT Last-Modified: Wed, 27 Mar 2024 17:49:36 GMT ETag: "93ec37cd1260435cedd4d33e2478620d" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 x-amz-version-id: 8kNRnYl6v2WW0fXhJ8eccjqRbyCbmk5b Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 f8e909d80b83cb9eeaf200975944eb56.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 8jK-U_DQbyrkbCSa57eZWrTZKi_CDDG2WfrzEbCEwx_7Rwr5trq-JQ==
2024-11-25 16:57:25 UTC	395	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 35 32 22 20 68 65 69 67 68 74 3d 22 36 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 32 20 36 34 22 3e 3c 74 69 74 6c 65 3e 6c 6f 63 6b 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 31 42 31 42 31 42 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 32 36 20 30 63 31 30 2e 34 39 33 20 30 20 31 39 20 38 2e 35 30 37 20 31 39 20 31 39 76 39 68 33 61 34 20 34 20 30 20 30 20 31 20 34 20 34 76 32 38 61 34 20 34 20 30 20 30 20 31 2d 34 20 34 48 34 61 34 20 34 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="52" height="64" viewBox="0 0 52 64"><title>lock</title><path fill="#1B1B1B" fill-rule="evenodd" d="M26 0c10.493 0 19 8.507 19 19v9h3a4 4 0 0 1 4 4v28a4 4 0 0 1-4 4H4a4 4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.11	49754	13.33.187.6	443	6592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:24 UTC	907	OUT	GET /assets/sp-logos/square-gsa-2e9100eb.svg HTTP/1.1 Host: secure.login.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
2024-11-25 16:57:24 UTC	616	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 2244 Connection: close Date: Wed, 20 Nov 2024 13:19:49 GMT Last-Modified: Tue, 03 Oct 2023 16:01:02 GMT ETag: "d1531f987cbd63b4365bcdf8960bf62a" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 x-amz-version-id: 6almWilcbyZLNRgNYXVHU8bnXsct6Ib. Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 32803d0ba3af70cddd7db80d2fd00608.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: RcxGEtPnTc5ysZ2tBA5_wP8BetUdIpgnMocdUNyNR4k2-K_Jug1Lpg== Age: 445056
2024-11-25 16:57:24 UTC	2244	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 38 30 70 78 22 20 68 65 69 67 68 74 3d 22 31 38 30 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 38 30 20 31 38 30 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 53 6b 65 74 63 68 20 33 39 2e 31 20 28 33 31 37 32 30 29 20 2d 20 68 74 74 70 3a 2f 2f 77 77 Data Ascii: <?xml version="1.0" encoding="UTF-8" standalone="no"?><svg width="180px" height="180px" viewBox="0 0 180 180" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: Sketch 39.1 (31720) - http://ww

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.11	49759	13.33.187.6	443	6592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:24 UTC	607	OUT	GET /packs/application-3688b8ee.digested.js HTTP/1.1 Host: secure.login.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
2024-11-25 16:57:24 UTC	625	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 4455 Connection: close Date: Tue, 19 Nov 2024 17:28:16 GMT Last-Modified: Wed, 03 Jul 2024 16:50:30 GMT ETag: "ce454b849ebc7bd6f82b46992211d9fe" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 x-amz-version-id: 6Qt5R_mDQiiOM_NVfj27n7EERmrQbFuT Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 c15415cccc7260d4bd35b1ca2c497c96.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: PKt--jmmMJY-49-c_2gUL4cgaTBYlMlys3EEd2ncsMKKhmHlbQBdEA== Age: 516549
2024-11-25 16:57:24 UTC	4455	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 74 3d 7b 31 30 33 32 3a 28 74 2c 65 2c 72 29 3d 3e 7b 63 6f 6e 73 74 20 6e 3d 72 28 32 39 36 30 29 2c 6f 3d 72 28 39 38 36 32 29 2c 69 3d 72 28 36 34 37 36 29 2c 73 3d 72 28 36 38 34 39 29 2c 7b 43 4c 49 43 4b 3a 63 7d 3d 72 28 33 39 39 35 29 2c 7b 70 72 65 66 69 78 3a 75 7d 3d 72 28 31 36 34 34 29 2c 61 3d 60 2e 24 7b 75 7d 2d 61 63 63 6f 72 64 69 6f 6e 2c 20 2e 24 7b 75 7d 2d 61 63 63 6f 72 64 69 6f 6e 2d 2d 62 6f 72 64 65 72 65 64 60 2c 66 3d 60 2e 24 7b 75 7d 2d 61 63 63 6f 72 64 69 6f 6e 5f 5f 62 75 74 74 6f 6e 5b 61 72 69 61 2d 63 6f 6e 74 72 6f 6c 73 5d 3a 6e 6f 74 28 2e 24 7b 75 7d 2d 62 61 6e 6e 65 72 5f 5f 62 75 74 74 6f 6e 29 60 2c 6c 3d 22 61 72 69 61 2d 65 78 70 61 6e 64 65 64 22 2c 64 3d 74 3d 3e 6e 28 66 2c 74 Data Ascii: (()=>{var t={1032:(t,e,r)=>{const n=r(2960),o=r(9862),i=r(6476),s=r(6849),{CLICK:c}=r(3995),{prefix:u}=r(1644),a=`.${u}-accordion, .${u}-accordion--bordered`,f=`.${u}-accordion__button[aria-controls]:not(.${u}-banner__button)`,l="aria-expanded",d=t=>n(f,t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.11	49761	13.33.187.6	443	6592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:24 UTC	601	OUT	GET /assets/icon-dot-gov-c85c77ab.svg HTTP/1.1 Host: secure.login.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
2024-11-25 16:57:25 UTC	615	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 633 Connection: close Date: Wed, 20 Nov 2024 13:19:42 GMT Last-Modified: Wed, 27 Mar 2024 17:49:35 GMT ETag: "ea3237dd9e7f4f959299bc2cf6b61356" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 x-amz-version-id: _R.c1SRl5JGmkSuWLYpWd8ZsBqoPuwHf Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 7a0989f96d7fa4864ba49c5b0d586bb2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: Lm3cmYpt20bWh-xktqclSpeVH6eQ5bCYB9zqMnMJwn6Aeco8kUAOpA== Age: 445063
2024-11-25 16:57:25 UTC	633	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 36 34 22 20 68 65 69 67 68 74 3d 22 36 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 34 20 36 34 22 3e 3c 74 69 74 6c 65 3e 69 63 6f 6e 2d 64 6f 74 2d 67 6f 76 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 32 33 37 38 43 33 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 6d 33 32 20 30 63 31 37 2e 37 20 30 20 33 32 20 31 34 2e 33 20 33 32 20 33 32 73 2d 31 34 2e 33 20 33 32 2d 33 32 20 33 32 2d 33 32 2d 31 34 2e 33 2d 33 32 2d 33 32 20 31 34 2e 33 2d 33 32 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="64" height="64" viewBox="0 0 64 64"><title>icon-dot-gov</title><path fill="#2378C3" fill-rule="evenodd" d="m32 0c17.7 0 32 14.3 32 32s-14.3 32-32 32-32-14.3-32-32 14.3-32

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.11	49760	13.33.187.6	443	6592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:24 UTC	847	OUT	GET /packs/track-errors-e9df8e72.digested.js HTTP/1.1 Host: secure.login.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
2024-11-25 16:57:25 UTC	624	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 779 Connection: close Date: Fri, 15 Nov 2024 12:07:24 GMT Last-Modified: Thu, 14 Nov 2024 21:12:33 GMT ETag: "0d2e1af6448377d986d2e60402b8bae3" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 x-amz-version-id: RcObZy1sPv8r_clklqxOZBnRplUaVPLL Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 c15415cccc7260d4bd35b1ca2c497c96.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: kzuZOiFZS4UZB5b_0hq4ybhdtv0Pbp7Z8NYqxatoDuem4SsGWyypZw== Age: 881401
2024-11-25 16:57:25 UTC	779	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6c 65 74 20 65 3b 63 6f 6e 73 74 20 6e 3d 28 6e 2c 74 29 3d 3e 7b 6c 65 74 7b 6e 61 6d 65 3a 6f 2c 6d 65 73 73 61 67 65 3a 72 2c 73 74 61 63 6b 3a 61 7d 3d 6e 2c 7b 66 69 6c 65 6e 61 6d 65 3a 69 2c 65 72 72 6f 72 49 64 3a 63 7d 3d 74 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 63 6f 6e 73 74 20 6f 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 65 29 74 72 79 7b 65 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 5b 64 61 74 61 2d 63 6f 6e 66 69 67 5d 22 29 3f 2e 74 65 78 74 43 6f 6e 74 65 6e 74 7c 7c 22 22 29 7d 63 61 74 63 68 7b 65 3d 7b 7d 7d 72 65 74 75 72 6e 20 65 5b 6e 5d 7d 28 22 61 6e Data Ascii: (()=>{"use strict";let e;const n=(n,t)=>{let{name:o,message:r,stack:a}=n,{filename:i,errorId:c}=t;return function(n,t){const o=function(n){if(void 0===e)try{e=JSON.parse(document.querySelector("[data-config]")?.textContent\|\|"")}catch{e={}}return e[n]}("an

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.11	49763	13.33.187.6	443	6592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:24 UTC	904	OUT	GET /assets/usa-icons/launch-d24c854a.svg HTTP/1.1 Host: secure.login.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://secure.login.gov sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: image Referer: https://secure.login.gov/assets/application-1d4fbf32.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
2024-11-25 16:57:25 UTC	810	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 227 Connection: close Date: Fri, 01 Nov 2024 17:10:19 GMT Access-Control-Allow-Origin: https://secure.login.gov Access-Control-Allow-Methods: GET Access-Control-Expose-Headers: ETag Access-Control-Max-Age: 0 Access-Control-Allow-Credentials: true Last-Modified: Tue, 03 Oct 2023 16:01:03 GMT ETag: "c798ab7eb73f024de947b7727247b3c0" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 x-amz-version-id: 2P8tuxLaV7O2B57XNTgCgOwJJw5JVHwu Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 6b284415724869adc9db63c19e48e420.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: IJiGk1Kx9k1LHiln0ppNum-jjQEDAq4suLhwCwzIXx9vOC2fmAqxRg== Age: 2072827
2024-11-25 16:57:25 UTC	227	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 39 20 31 39 48 35 56 35 68 37 56 33 48 35 61 32 20 32 20 30 20 30 20 30 2d 32 20 32 76 31 34 61 32 20 32 20 30 20 30 20 30 20 32 20 32 68 31 34 63 31 2e 31 20 30 20 32 2d 2e 39 20 32 2d 32 76 2d 37 68 2d 32 76 37 7a 4d 31 34 20 33 76 32 68 33 2e 35 39 6c 2d 39 2e 38 33 20 39 2e 38 33 20 31 2e 34 31 20 31 2e 34 31 4c 31 39 20 36 2e 34 31 56 31 30 68 32 56 33 68 2d 37 7a 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24"><path d="M19 19H5V5h7V3H5a2 2 0 0 0-2 2v14a2 2 0 0 0 2 2h14c1.1 0 2-.9 2-2v-7h-2v7zM14 3v2h3.59l-9.83 9.83 1.41 1.41L19 6.41V10h2V3h-7z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.11	49764	13.33.187.6	443	6592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:24 UTC	635	OUT	GET /packs/password_strength_component-5dc65abd.digested-d55a7dd4.en.js HTTP/1.1 Host: secure.login.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
2024-11-25 16:57:25 UTC	620	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 3720 Connection: close Date: Mon, 25 Nov 2024 16:57:23 GMT Last-Modified: Thu, 29 Aug 2024 19:27:22 GMT ETag: "43c0fe0971e917007252bac56c7be940" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 x-amz-version-id: o33TZ5qXAAqZ3fXBZpZa73ovphLjdFqA Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 abf16b943a9b4039b87ccdb094d9303e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: vYEVb0ZZPHZPRK9lzqgFOZFcaNuhrpgoTx6isHxl5hb_F8o-CyfOHw== Age: 3
2024-11-25 16:57:25 UTC	3720	IN	Data Raw: 5f 6c 6f 63 61 6c 65 5f 64 61 74 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 22 7a 78 63 76 62 6e 2e 66 65 65 64 62 61 63 6b 2e 61 5f 77 6f 72 64 5f 62 79 5f 69 74 73 65 6c 66 5f 69 73 5f 65 61 73 79 5f 74 6f 5f 67 75 65 73 73 22 3a 22 41 20 77 6f 72 64 20 62 79 20 69 74 73 65 6c 66 20 69 73 20 65 61 73 79 20 74 6f 20 67 75 65 73 73 22 2c 22 7a 78 63 76 62 6e 2e 66 65 65 64 62 61 63 6b 2e 61 64 64 5f 61 6e 6f 74 68 65 72 5f 77 6f 72 64 5f 6f 72 5f 74 77 6f 5f 75 6e 63 6f 6d 6d 6f 6e 5f 77 6f 72 64 73 5f 61 72 65 5f 62 65 74 74 65 72 22 3a 22 41 64 64 20 61 6e 6f 74 68 65 72 20 77 6f 72 64 20 6f 72 20 74 77 6f 2e 20 55 6e 63 6f 6d 6d 6f 6e 20 77 6f 72 64 73 20 61 72 65 20 62 65 74 74 65 72 22 2c 22 7a 78 63 76 62 6e 2e 66 65 65 64 62 61 63 6b 2e 61 Data Ascii: _locale_data=Object.assign({"zxcvbn.feedback.a_word_by_itself_is_easy_to_guess":"A word by itself is easy to guess","zxcvbn.feedback.add_another_word_or_two_uncommon_words_are_better":"Add another word or two. Uncommon words are better","zxcvbn.feedback.a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.11	49766	13.33.187.6	443	6592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:26 UTC	937	OUT	GET /assets/usa-icons/language-933750f3.svg HTTP/1.1 Host: secure.login.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://secure.login.gov sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: image Referer: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
2024-11-25 16:57:27 UTC	615	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 896 Connection: close Date: Wed, 20 Nov 2024 16:55:00 GMT Last-Modified: Tue, 03 Oct 2023 16:01:03 GMT ETag: "73f80805da54fb31a09468b25e3e5dd9" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 x-amz-version-id: LdNfhSZsUi.nzwhJbYdXGQaFSRs80deq Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 9b70adf7c49e859435e96eb0fc35c216.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 7GaPtqNHG6y6rPToJUvOfc5WlfpFMlqRKf40V_-as7rb3EaTyxomoA== Age: 432147
2024-11-25 16:57:27 UTC	896	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 31 2e 39 39 20 32 43 36 2e 34 37 20 32 20 32 20 36 2e 34 38 20 32 20 31 32 73 34 2e 34 37 20 31 30 20 39 2e 39 39 20 31 30 43 31 37 2e 35 32 20 32 32 20 32 32 20 31 37 2e 35 32 20 32 32 20 31 32 53 31 37 2e 35 32 20 32 20 31 31 2e 39 39 20 32 7a 6d 36 2e 39 33 20 36 68 2d 32 2e 39 35 61 31 35 2e 36 35 20 31 35 2e 36 35 20 30 20 30 20 30 2d 31 2e 33 38 2d 33 2e 35 36 41 38 2e 30 33 20 38 2e 30 33 20 30 20 30 20 31 20 31 38 2e 39 32 20 38 7a 4d 31 32 20 34 2e 30 34 63 2e 38 33 20 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24"><path d="M11.99 2C6.47 2 2 6.48 2 12s4.47 10 9.99 10C17.52 22 22 17.52 22 12S17.52 2 11.99 2zm6.93 6h-2.95a15.65 15.65 0 0 0-1.38-3.56A8.03 8.03 0 0 1 18.92 8zM12 4.04c.83

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.11	49769	13.33.187.6	443	6592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:26 UTC	623	OUT	GET /packs/password_strength_component-5dc65abd.digested.js HTTP/1.1 Host: secure.login.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
2024-11-25 16:57:27 UTC	622	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 821379 Connection: close Date: Mon, 25 Nov 2024 16:57:23 GMT Last-Modified: Thu, 29 Aug 2024 19:27:22 GMT ETag: "41a04029bb2eb5672dca010036770d39" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 x-amz-version-id: .YIhQFHutTaC17ZNGc.gzIvE8qmhD7hL Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 c8faaa7d637dd73af72e1355a476ffc2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: vBvWM7n6LA3GItib5XpWCv9a-NzcL1uTMyAv62pbDYJP7Po0ElNPrA== Age: 4
2024-11-25 16:57:27 UTC	15762	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 65 3d 7b 32 34 34 32 3a 65 3d 3e 7b 76 61 72 20 61 3b 61 3d 7b 71 77 65 72 74 79 3a 7b 22 21 22 3a 5b 22 60 7e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 32 40 22 2c 22 71 51 22 2c 6e 75 6c 6c 5d 2c 27 22 27 3a 5b 22 3b 3a 22 2c 22 5b 7b 22 2c 22 5d 7d 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 2f 3f 22 5d 2c 22 23 22 3a 5b 22 32 40 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 34 24 22 2c 22 65 45 22 2c 22 77 57 22 5d 2c 24 3a 5b 22 33 23 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 35 25 22 2c 22 72 52 22 2c 22 65 45 22 5d 2c 22 25 22 3a 5b 22 34 24 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 36 5e 22 2c 22 74 54 22 2c 22 72 52 22 5d 2c 22 26 22 3a 5b 22 36 5e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 38 2a 22 2c 22 75 55 22 2c 22 79 59 22 5d 2c 22 27 Data Ascii: (()=>{var e={2442:e=>{var a;a={qwerty:{"!":["`~",null,null,"2@","qQ",null],'"':[";:","[{","]}",null,null,"/?"],"#":["2@",null,null,"4$","eE","wW"],$:["3#",null,null,"5%","rR","eE"],"%":["4$",null,null,"6^","tT","rR"],"&":["6^",null,null,"8*","uU","yY"],"'
2024-11-25 16:57:27 UTC	16384	IN	Data Raw: 69 6c 73 2c 68 6f 72 73 65 2c 61 6c 61 62 61 6d 61 2c 31 34 37 38 35 32 33 36 39 2c 63 61 65 73 61 72 2c 31 32 33 31 32 2c 62 75 64 64 79 31 2c 62 6f 6e 64 61 67 65 2c 70 75 73 73 79 63 61 74 2c 70 69 63 6b 6c 65 2c 73 68 61 67 67 79 2c 63 61 74 63 68 32 32 2c 6c 65 61 74 68 65 72 2c 63 68 72 6f 6e 69 63 2c 61 31 62 32 63 33 64 34 2c 61 64 6d 69 6e 2c 71 71 71 31 31 31 2c 71 61 7a 31 32 33 2c 61 69 72 70 6c 61 6e 65 2c 6b 6f 64 69 61 6b 2c 66 72 65 65 70 61 73 73 2c 62 69 6c 6c 79 62 6f 62 2c 73 75 6e 73 65 74 2c 6b 61 74 61 6e 61 2c 70 68 70 62 62 2c 63 68 6f 63 6f 6c 61 74 2c 73 6e 6f 77 6d 61 6e 2c 61 6e 67 65 6c 31 2c 73 74 69 6e 67 72 61 79 2c 66 69 72 65 62 69 72 64 2c 77 6f 6c 76 65 73 2c 7a 65 70 70 65 6c 69 6e 2c 64 65 74 72 6f 69 74 2c 70 6f 6e Data Ascii: ils,horse,alabama,147852369,caesar,12312,buddy1,bondage,pussycat,pickle,shaggy,catch22,leather,chronic,a1b2c3d4,admin,qqq111,qaz123,airplane,kodiak,freepass,billybob,sunset,katana,phpbb,chocolat,snowman,angel1,stingray,firebird,wolves,zeppelin,detroit,pon
2024-11-25 16:57:27 UTC	9428	IN	Data Raw: 61 69 6e 6d 61 6e 2c 67 72 6f 6f 76 65 2c 74 69 62 65 72 69 75 73 2c 70 75 72 64 75 65 2c 6e 6f 6b 69 61 36 33 30 30 2c 68 61 79 61 62 75 73 61 2c 73 68 6f 75 2c 6a 61 67 67 65 72 2c 64 69 76 65 72 2c 7a 69 67 7a 61 67 2c 70 6f 6f 63 68 69 65 2c 75 73 61 72 6d 79 2c 70 68 69 73 68 2c 72 65 64 77 6f 6f 64 2c 72 65 64 77 69 6e 67 2c 31 32 33 34 35 36 37 39 2c 73 61 6c 61 6d 61 6e 64 65 72 2c 73 69 6c 76 65 72 31 2c 61 62 63 64 31 32 33 2c 73 70 75 74 6e 69 6b 2c 62 6f 6f 62 69 65 2c 72 69 70 70 6c 65 2c 65 74 65 72 6e 61 6c 2c 31 32 71 77 33 34 65 72 2c 74 68 65 67 72 65 61 74 2c 61 6c 6c 73 74 61 72 2c 73 6c 69 6e 6b 79 2c 67 65 73 70 65 72 72 74 2c 6d 69 73 68 6b 61 2c 77 68 69 73 6b 65 72 73 2c 70 69 6e 68 65 61 64 2c 6f 76 65 72 6b 69 6c 6c 2c 73 77 65 Data Ascii: ainman,groove,tiberius,purdue,nokia6300,hayabusa,shou,jagger,diver,zigzag,poochie,usarmy,phish,redwood,redwing,12345679,salamander,silver1,abcd123,sputnik,boobie,ripple,eternal,12qw34er,thegreat,allstar,slinky,gesperrt,mishka,whiskers,pinhead,overkill,swe
2024-11-25 16:57:27 UTC	3171	IN	Data Raw: 2c 73 65 76 65 72 69 6e 2c 62 6f 6f 73 74 65 72 2c 6e 6f 72 77 69 63 68 2c 77 68 69 74 65 6f 75 74 2c 63 74 72 68 74 6e 2c 31 32 33 34 35 36 6d 2c 30 32 30 36 31 39 38 34 2c 68 65 77 6c 65 74 74 2c 73 68 6f 63 6b 65 72 2c 66 75 63 6b 69 6e 73 69 64 65 2c 30 32 30 33 31 39 38 31 2c 63 68 61 73 65 31 2c 77 68 69 74 65 31 2c 76 65 72 73 61 63 65 2c 31 32 33 34 35 36 37 38 39 73 2c 62 61 73 65 62 61 6c 2c 69 6c 6f 76 65 79 6f 75 32 2c 62 6c 75 65 62 65 6c 6c 2c 30 38 30 33 31 39 38 36 2c 61 6e 74 68 6f 6e 2c 73 74 75 62 62 79 2c 66 6f 72 65 76 65 2c 75 6e 64 65 72 74 61 6b 2c 77 65 72 64 65 72 2c 73 61 69 79 61 6e 2c 6d 61 6d 61 31 32 33 2c 6d 65 64 69 63 2c 63 68 69 70 6d 75 6e 6b 2c 6d 69 6b 65 31 32 33 2c 6d 61 7a 64 61 72 78 37 2c 71 77 65 31 32 33 71 77 Data Ascii: ,severin,booster,norwich,whiteout,ctrhtn,123456m,02061984,hewlett,shocker,fuckinside,02031981,chase1,white1,versace,123456789s,basebal,iloveyou2,bluebell,08031986,anthon,stubby,foreve,undertak,werder,saiyan,mama123,medic,chipmunk,mike123,mazdarx7,qwe123qw
2024-11-25 16:57:27 UTC	16384	IN	Data Raw: 31 31 39 38 36 2c 67 6c 61 64 69 61 74 6f 2c 6b 61 72 61 63 68 69 2c 67 61 6d 62 6c 65 72 2c 67 6f 72 64 6f 2c 30 31 30 31 31 39 39 35 2c 62 69 61 74 63 68 2c 6d 61 74 74 68 65 2c 32 35 38 30 30 38 35 32 2c 70 61 70 69 74 6f 2c 65 78 63 69 74 65 2c 62 75 66 66 61 6c 6f 31 2c 62 6f 62 64 6f 6c 65 2c 63 68 65 73 68 69 72 65 2c 70 6c 61 79 65 72 31 2c 32 38 30 32 31 39 39 32 2c 74 68 65 77 68 6f 2c 31 30 31 30 31 39 38 36 2c 70 69 6e 6b 79 31 2c 6d 65 6e 74 6f 72 2c 74 6f 6d 61 68 61 77 6b 2c 62 72 6f 77 6e 31 2c 30 33 30 34 31 39 38 36 2c 62 69 73 6d 69 6c 6c 61 68 2c 62 69 67 70 6f 70 70 61 2c 69 6a 72 6a 6b 66 6c 2c 30 31 31 32 31 39 38 38 2c 72 75 6e 61 77 61 79 2c 30 38 31 32 31 39 38 36 2c 73 6b 69 62 75 6d 2c 73 74 75 64 6d 61 6e 2c 68 65 6c 70 65 72 Data Ascii: 11986,gladiato,karachi,gambler,gordo,01011995,biatch,matthe,25800852,papito,excite,buffalo1,bobdole,cheshire,player1,28021992,thewho,10101986,pinky1,mentor,tomahawk,brown1,03041986,bismillah,bigpoppa,ijrjkfl,01121988,runaway,08121986,skibum,studman,helper
2024-11-25 16:57:27 UTC	16384	IN	Data Raw: 6b 66 2c 62 6c 75 65 73 74 61 72 2c 6d 6f 6f 6e 6d 61 6e 2c 6e 74 6b 74 64 62 70 6a 68 2c 70 61 70 65 72 69 6e 6f 2c 62 69 6b 65 72 73 2c 64 61 66 66 79 2c 62 65 6e 6a 69 2c 71 75 61 6b 65 2c 64 72 61 67 6f 6e 66 6c 79 2c 73 75 63 6b 63 6f 63 6b 2c 64 61 6e 69 6c 6b 61 2c 6c 61 70 6f 63 68 6b 61 2c 62 65 6c 69 6e 65 61 2c 63 61 6c 79 70 73 6f 2c 61 73 73 68 6f 6c 2c 63 61 6d 65 72 6f 31 2c 61 62 72 61 78 61 73 2c 6d 69 6b 65 31 32 33 34 2c 77 6f 6d 61 6d 2c 71 31 71 32 71 33 71 34 71 35 2c 79 6f 75 6b 6e 6f 77 2c 6d 61 78 70 6f 77 65 72 2c 70 69 63 27 73 2c 61 75 64 69 38 30 2c 73 6f 6e 6f 72 61 2c 72 61 79 6d 6f 6e 64 31 2c 74 69 63 6b 6c 65 72 2c 74 61 64 70 6f 6c 65 2c 62 65 6c 61 69 72 2c 63 72 61 7a 79 6d 61 6e 2c 66 69 6e 61 6c 66 61 6e 74 61 73 79 Data Ascii: kf,bluestar,moonman,ntktdbpjh,paperino,bikers,daffy,benji,quake,dragonfly,suckcock,danilka,lapochka,belinea,calypso,asshol,camero1,abraxas,mike1234,womam,q1q2q3q4q5,youknow,maxpower,pic's,audi80,sonora,raymond1,tickler,tadpole,belair,crazyman,finalfantasy
2024-11-25 16:57:27 UTC	12004	IN	Data Raw: 36 69 62 39 2c 7a 7a 38 38 30 37 7a 70 6c 2c 62 72 69 65 66 73 2c 68 61 77 6b 65 72 2c 32 32 34 34 38 38 2c 66 69 72 73 74 31 2c 62 6f 6e 7a 6f 2c 62 72 65 6e 74 31 2c 65 72 61 73 75 72 65 2c 36 39 32 31 33 31 32 34 2c 73 69 64 65 77 69 6e 64 2c 73 6f 63 63 65 72 31 33 2c 36 32 32 35 32 31 2c 6d 65 6e 74 6f 73 2c 6b 6f 6c 69 62 72 69 2c 6f 6e 65 70 69 65 63 65 2c 75 6e 69 74 65 64 31 2c 70 6f 6e 79 62 6f 79 2c 6b 65 6b 73 61 31 32 2c 77 61 79 65 72 2c 6d 79 70 75 73 73 79 2c 61 6e 64 72 65 6a 2c 6d 69 73 63 68 61 2c 6d 69 6c 6c 65 2c 62 72 75 6e 6f 31 32 33 2c 67 61 72 74 65 72 2c 62 69 67 70 75 6e 2c 74 61 6c 67 61 74 2c 66 61 6d 69 6c 69 61 2c 6a 61 7a 7a 79 31 2c 6d 75 73 74 61 6e 67 38 2c 6e 65 77 6a 6f 62 2c 37 34 37 34 30 30 2c 62 6f 62 62 65 72 2c Data Ascii: 6ib9,zz8807zpl,briefs,hawker,224488,first1,bonzo,brent1,erasure,69213124,sidewind,soccer13,622521,mentos,kolibri,onepiece,united1,ponyboy,keksa12,wayer,mypussy,andrej,mischa,mille,bruno123,garter,bigpun,talgat,familia,jazzy1,mustang8,newjob,747400,bobber,
2024-11-25 16:57:27 UTC	16384	IN	Data Raw: 6f 73 73 74 6f 6e 65 2c 63 72 61 7a 79 38 2c 79 61 63 6b 77 69 6e 2c 6d 6f 62 69 6c 2c 64 61 6e 69 65 6c 69 74 2c 6d 6f 75 6e 74 61 31 6e 2c 70 6c 61 79 65 72 36 39 2c 62 6c 75 65 67 69 6c 6c 2c 6d 65 77 74 77 6f 2c 72 65 76 65 72 62 2c 63 6e 74 68 64 66 2c 70 61 62 6c 69 74 6f 2c 61 31 32 33 33 32 31 2c 65 6c 65 6e 61 31 2c 77 61 72 63 72 61 66 74 31 2c 6f 72 6c 61 6e 64 2c 69 6c 6f 76 65 6d 79 73 65 6c 66 2c 72 66 6e 74 79 6a 72 2c 6a 6f 79 72 69 64 65 2c 73 63 68 6f 6f 2c 64 74 68 6a 78 72 66 2c 74 68 65 74 61 63 68 69 2c 67 6f 6f 64 74 69 6d 65 73 2c 62 6c 61 63 6b 73 75 6e 2c 68 75 6d 70 74 79 2c 63 68 65 77 62 61 63 63 61 2c 67 75 79 75 74 65 2c 31 32 33 78 79 7a 2c 6c 65 78 69 63 6f 6e 2c 62 6c 75 65 34 35 2c 71 77 65 37 38 39 2c 67 61 6c 61 74 61 Data Ascii: osstone,crazy8,yackwin,mobil,danielit,mounta1n,player69,bluegill,mewtwo,reverb,cnthdf,pablito,a123321,elena1,warcraft1,orland,ilovemyself,rfntyjr,joyride,schoo,dthjxrf,thetachi,goodtimes,blacksun,humpty,chewbacca,guyute,123xyz,lexicon,blue45,qwe789,galata
2024-11-25 16:57:27 UTC	9200	IN	Data Raw: 6e 69 6d 2c 77 65 6c 6c 63 6f 6d 65 2c 76 65 72 69 7a 6f 6e 31 2c 73 61 79 61 6e 67 6b 75 2c 63 65 6e 73 6f 72 2c 74 69 6d 65 70 6f 72 74 2c 64 75 6d 6d 69 65 73 2c 61 64 75 6c 74 31 2c 6e 62 6e 66 79 62 72 2c 64 6f 6e 67 65 72 2c 74 68 61 6c 65 73 2c 69 61 6d 67 61 79 2c 73 65 78 79 31 32 33 34 2c 64 65 61 64 6c 69 66 74 2c 70 69 64 61 72 61 73 2c 64 6f 72 6f 67 61 2c 31 32 33 71 77 65 33 32 31 2c 70 6f 72 74 75 67 61 2c 61 73 64 66 67 68 31 32 2c 68 61 70 70 79 73 2c 63 61 64 72 31 34 6e 75 2c 70 69 33 31 34 31 2c 6d 61 6b 73 69 6b 2c 64 72 69 62 62 6c 65 2c 63 6f 72 74 6c 61 6e 64 2c 64 61 72 6b 65 6e 2c 73 74 65 70 61 6e 6f 76 61 2c 62 6f 6d 6d 65 6c 2c 74 72 6f 70 69 63 2c 73 6f 63 68 69 32 30 31 34 2c 62 6c 75 65 67 72 61 73 2c 73 68 61 68 69 64 2c Data Ascii: nim,wellcome,verizon1,sayangku,censor,timeport,dummies,adult1,nbnfybr,donger,thales,iamgay,sexy1234,deadlift,pidaras,doroga,123qwe321,portuga,asdfgh12,happys,cadr14nu,pi3141,maksik,dribble,cortland,darken,stepanova,bommel,tropic,sochi2014,bluegras,shahid,
2024-11-25 16:57:27 UTC	16384	IN	Data Raw: 6b 69 6e 67 73 78 2c 64 65 73 61 64 65 2c 73 6e 30 30 70 79 2c 6c 6f 76 65 62 6f 61 74 2c 72 6f 74 74 69 65 2c 65 76 67 65 73 68 61 2c 34 6d 6f 6e 65 79 2c 64 6f 6c 69 74 74 6c 65 2c 61 64 67 6a 6d 70 74 2c 62 75 7a 7a 65 72 73 2c 62 72 65 74 74 31 2c 6d 61 6b 69 74 61 2c 31 32 33 31 32 33 71 77 65 71 77 65 2c 72 75 73 61 6c 6b 61 2c 73 6c 75 74 73 31 2c 31 32 33 34 35 36 65 2c 6a 61 6d 65 73 6f 6e 31 2c 62 69 67 62 61 62 79 2c 31 7a 32 7a 33 7a 2c 63 6b 6a 79 62 72 2c 6c 6f 76 65 34 75 2c 66 75 63 6b 65 72 36 39 2c 65 72 68 66 62 79 66 2c 6a 65 61 6e 6c 75 63 2c 66 61 72 68 61 64 2c 66 69 73 68 66 6f 6f 64 2c 6d 65 72 6b 69 6e 2c 67 69 61 6e 74 31 2c 67 6f 6c 66 36 39 2c 72 66 6e 66 63 6e 68 6a 61 66 2c 63 61 6d 65 72 61 31 2c 73 74 72 6f 6d 62 2c 73 6d Data Ascii: kingsx,desade,sn00py,loveboat,rottie,evgesha,4money,dolittle,adgjmpt,buzzers,brett1,makita,123123qweqwe,rusalka,sluts1,123456e,jameson1,bigbaby,1z2z3z,ckjybr,love4u,fucker69,erhfbyf,jeanluc,farhad,fishfood,merkin,giant1,golf69,rfnfcnhjaf,camera1,stromb,sm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.11	49767	13.33.187.6	443	6592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:26 UTC	608	OUT	GET /assets/sp-logos/square-gsa-2e9100eb.svg HTTP/1.1 Host: secure.login.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
2024-11-25 16:57:27 UTC	616	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 2244 Connection: close Date: Wed, 20 Nov 2024 13:19:49 GMT Last-Modified: Tue, 03 Oct 2023 16:01:02 GMT ETag: "d1531f987cbd63b4365bcdf8960bf62a" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 x-amz-version-id: 6almWilcbyZLNRgNYXVHU8bnXsct6Ib. Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 de048058a16d8205bfbc06a8f2eefb34.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: C3kJdiuTNlZkhbxJeEb4aCOau1WrHl3R9G31gM7Mpg_ARbOewM4DzA== Age: 445058
2024-11-25 16:57:27 UTC	2244	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 38 30 70 78 22 20 68 65 69 67 68 74 3d 22 31 38 30 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 38 30 20 31 38 30 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 53 6b 65 74 63 68 20 33 39 2e 31 20 28 33 31 37 32 30 29 20 2d 20 68 74 74 70 3a 2f 2f 77 77 Data Ascii: <?xml version="1.0" encoding="UTF-8" standalone="no"?><svg width="180px" height="180px" viewBox="0 0 180 180" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: Sketch 39.1 (31720) - http://ww

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.11	49768	13.33.187.6	443	6592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:26 UTC	847	OUT	GET /assets/print-dbe18894.css HTTP/1.1 Host: secure.login.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
2024-11-25 16:57:27 UTC	609	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 95 Connection: close Date: Sat, 23 Nov 2024 17:26:10 GMT Last-Modified: Tue, 16 Apr 2024 18:19:11 GMT ETag: "4f46f5025e3bf11afb6a45cfd50d9041" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 x-amz-version-id: 711z4i3iyt41BM9DKXvxCGyhRS0VNS3h Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 eb8dd67e239abea324e36244f60eec4c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: leitgB1GxOFWHXW_IkFhN8Qq6IEpKZuACozeQGIKr2kJfdzsrOH5lQ== Age: 171077
2024-11-25 16:57:27 UTC	95	IN	Data Raw: 6e 61 76 2c 66 6f 6f 74 65 72 2c 2e 75 73 61 2d 62 75 74 74 6f 6e 2c 2e 75 73 61 2d 72 61 64 69 6f 5f 5f 69 6e 70 75 74 2d 2d 62 6f 72 64 65 72 65 64 2c 2e 75 73 61 2d 63 68 65 63 6b 62 6f 78 5f 5f 69 6e 70 75 74 2d 2d 62 6f 72 64 65 72 65 64 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d Data Ascii: nav,footer,.usa-button,.usa-radio__input--bordered,.usa-checkbox__input--bordered{display:none}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.11	49770	13.33.187.6	443	6592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:26 UTC	608	OUT	GET /packs/track-errors-e9df8e72.digested.js HTTP/1.1 Host: secure.login.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
2024-11-25 16:57:27 UTC	624	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 779 Connection: close Date: Fri, 15 Nov 2024 12:07:24 GMT Last-Modified: Thu, 14 Nov 2024 21:12:33 GMT ETag: "0d2e1af6448377d986d2e60402b8bae3" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 x-amz-version-id: RcObZy1sPv8r_clklqxOZBnRplUaVPLL Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 32803d0ba3af70cddd7db80d2fd00608.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: roZxJZX1UIXppzfH1MrybtyYCfYs8iwJr55T5THdnwZ8XeQANVdywg== Age: 881404
2024-11-25 16:57:27 UTC	779	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6c 65 74 20 65 3b 63 6f 6e 73 74 20 6e 3d 28 6e 2c 74 29 3d 3e 7b 6c 65 74 7b 6e 61 6d 65 3a 6f 2c 6d 65 73 73 61 67 65 3a 72 2c 73 74 61 63 6b 3a 61 7d 3d 6e 2c 7b 66 69 6c 65 6e 61 6d 65 3a 69 2c 65 72 72 6f 72 49 64 3a 63 7d 3d 74 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 63 6f 6e 73 74 20 6f 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 65 29 74 72 79 7b 65 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 5b 64 61 74 61 2d 63 6f 6e 66 69 67 5d 22 29 3f 2e 74 65 78 74 43 6f 6e 74 65 6e 74 7c 7c 22 22 29 7d 63 61 74 63 68 7b 65 3d 7b 7d 7d 72 65 74 75 72 6e 20 65 5b 6e 5d 7d 28 22 61 6e Data Ascii: (()=>{"use strict";let e;const n=(n,t)=>{let{name:o,message:r,stack:a}=n,{filename:i,errorId:c}=t;return function(n,t){const o=function(n){if(void 0===e)try{e=JSON.parse(document.querySelector("[data-config]")?.textContent\|\|"")}catch{e={}}return e[n]}("an

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.11	49773	13.33.187.6	443	6592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:26 UTC	605	OUT	GET /assets/usa-icons/launch-d24c854a.svg HTTP/1.1 Host: secure.login.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
2024-11-25 16:57:27 UTC	810	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 227 Connection: close Date: Fri, 01 Nov 2024 17:10:19 GMT Access-Control-Allow-Origin: https://secure.login.gov Access-Control-Allow-Methods: GET Access-Control-Expose-Headers: ETag Access-Control-Max-Age: 0 Access-Control-Allow-Credentials: true Last-Modified: Tue, 03 Oct 2023 16:01:03 GMT ETag: "c798ab7eb73f024de947b7727247b3c0" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 x-amz-version-id: 2P8tuxLaV7O2B57XNTgCgOwJJw5JVHwu Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 32803d0ba3af70cddd7db80d2fd00608.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: ZEultUzSl0YsyMYuQWF9LiYdo5xciB-pVSZ5zRKOVMwknc60Vf_wqA== Age: 2072829
2024-11-25 16:57:27 UTC	227	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 39 20 31 39 48 35 56 35 68 37 56 33 48 35 61 32 20 32 20 30 20 30 20 30 2d 32 20 32 76 31 34 61 32 20 32 20 30 20 30 20 30 20 32 20 32 68 31 34 63 31 2e 31 20 30 20 32 2d 2e 39 20 32 2d 32 76 2d 37 68 2d 32 76 37 7a 4d 31 34 20 33 76 32 68 33 2e 35 39 6c 2d 39 2e 38 33 20 39 2e 38 33 20 31 2e 34 31 20 31 2e 34 31 4c 31 39 20 36 2e 34 31 56 31 30 68 32 56 33 68 2d 37 7a 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24"><path d="M19 19H5V5h7V3H5a2 2 0 0 0-2 2v14a2 2 0 0 0 2 2h14c1.1 0 2-.9 2-2v-7h-2v7zM14 3v2h3.59l-9.83 9.83 1.41 1.41L19 6.41V10h2V3h-7z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.11	49771	13.33.187.6	443	6592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:26 UTC	599	OUT	GET /assets/icon-https-4fe6ff7d.svg HTTP/1.1 Host: secure.login.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
2024-11-25 16:57:27 UTC	610	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 720 Connection: close Date: Mon, 25 Nov 2024 16:57:26 GMT Last-Modified: Wed, 27 Mar 2024 17:49:35 GMT ETag: "73abd86624ca4c09a380e14d5f60e258" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 x-amz-version-id: lWfxoB8DImIzNTHWAG4aSX1FeB_KjCDj Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 af1c2193a818b5824fd85ddd651620a8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: pT7AZFLrCNxpcS8QNgH9js2MLyqN-O8Ft5ZrQq-aaQgrTno-90pk5Q== Age: 2
2024-11-25 16:57:27 UTC	720	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 36 34 22 20 68 65 69 67 68 74 3d 22 36 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 34 20 36 34 22 3e 3c 74 69 74 6c 65 3e 69 63 6f 6e 2d 68 74 74 70 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 37 31 39 46 32 41 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 33 32 20 30 63 31 37 2e 36 37 33 20 30 20 33 32 20 31 34 2e 33 32 37 20 33 32 20 33 32 20 30 20 31 37 2e 36 37 33 2d 31 34 2e 33 32 37 20 33 32 2d 33 32 20 33 32 43 31 34 2e 33 32 37 20 36 34 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="64" height="64" viewBox="0 0 64 64"><title>icon-https</title><path fill="#719F2A" fill-rule="evenodd" d="M32 0c17.673 0 32 14.327 32 32 0 17.673-14.327 32-32 32C14.327 64

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.11	49774	13.33.187.6	443	6592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:27 UTC	593	OUT	GET /assets/lock-c7ffa794.svg HTTP/1.1 Host: secure.login.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
2024-11-25 16:57:27 UTC	610	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 395 Connection: close Date: Mon, 25 Nov 2024 16:57:26 GMT Last-Modified: Wed, 27 Mar 2024 17:49:36 GMT ETag: "93ec37cd1260435cedd4d33e2478620d" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 x-amz-version-id: 8kNRnYl6v2WW0fXhJ8eccjqRbyCbmk5b Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 4770dda4e92393e930d8a34dcbb04db2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: s2rJFZFREWuJGaYPoFJkAJL_9T1MShQzCYBk6B5JmntxLXizmRuCEQ== Age: 2
2024-11-25 16:57:27 UTC	395	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 35 32 22 20 68 65 69 67 68 74 3d 22 36 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 32 20 36 34 22 3e 3c 74 69 74 6c 65 3e 6c 6f 63 6b 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 31 42 31 42 31 42 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 32 36 20 30 63 31 30 2e 34 39 33 20 30 20 31 39 20 38 2e 35 30 37 20 31 39 20 31 39 76 39 68 33 61 34 20 34 20 30 20 30 20 31 20 34 20 34 76 32 38 61 34 20 34 20 30 20 30 20 31 2d 34 20 34 48 34 61 34 20 34 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="52" height="64" viewBox="0 0 52 64"><title>lock</title><path fill="#1B1B1B" fill-rule="evenodd" d="M26 0c10.493 0 19 8.507 19 19v9h3a4 4 0 0 1 4 4v28a4 4 0 0 1-4 4H4a4 4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.11	49775	13.33.187.6	443	6592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:28 UTC	1007	OUT	GET /sign_up/cancel HTTP/1.1 Host: secure.login.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://secure.login.gov/sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
2024-11-25 16:57:29 UTC	2190	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 10562 Connection: close Date: Mon, 25 Nov 2024 16:57:29 GMT strict-transport-security: max-age=31556952; includeSubDomains; preload x-frame-options: DENY x-xss-protection: 1; mode=block x-content-type-options: nosniff x-permitted-cross-domain-policies: none referrer-policy: strict-origin-when-cross-origin x-download-options: noopen cache-control: no-store pragma: no-cache link: </assets/init-6ad4cfee.js>; rel=preload; as=script; integrity=sha256-eMXV2njRJxgQrFbuljRT/UTWePGrhl83bHHDDd+jFPw=,</assets/public-sans/PublicSans-Bold-c73ef2d4.woff2>; rel=preload; as=font; type=font/woff2; crossorigin=anonymous,</assets/public-sans/PublicSans-Regular-5f371c89.woff2>; rel=preload; as=font; type=font/woff2; crossorigin=anonymous,</assets/application-1d4fbf32.css>; rel=preload; as=style,</assets/icon_component-2d022cd4.css>; rel=preload; as=style,</assets/utilities-b943a2ae.css>; rel=preload; as=style,</packs/application-3688b8ee.digested.js>; rel=preload; as=script; integrity=sha256-FdJ4r26Vr5N1tghHv6lNhBJbkrNE7MpLcksKcg7NiHU= content-security-policy: default-src 'self'; child-src 'self'; form-action 'self'; block-all-mixed-content; connect-src 'self'; font-src 'self' data: https://secure.login.gov; img-src 'self' data: login.gov https://secure.login.gov https://s3.us-west-2.amazonaws.com; media-src 'self'; object-src 'none'; script-src 'self' https://secure.login.gov 'nonce-4841f9a6f00af2154c2612ef3daecec1'; style-src 'self' https://secure.login.gov 'nonce-4841f9a6f00af2154c2612ef3daecec1'; base-uri 'self' set-cookie: ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; path=/; expires=Mon, 25 Nov 2024 17:12:29 GMT; SameSite=Lax; HttpOnly; secure set-cookie: sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov; path=/; expires=Mon, 25 Nov 2024 17:12:29 GMT; SameSite=Lax; HttpOnly; secure x-request-id: dbbb0851-adda-4210-98b4-7893863a98eb x-runtime: 0.033439 X-Cache: Miss from cloudfront Via: 1.1 32803d0ba3af70cddd7db80d2fd00608.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: RpjiKW9rsINY-0IuTZDQi31Xb-6CGWIRh4fKZtRsFwjZ1Jl82WaAUA==
2024-11-25 16:57:29 UTC	9422	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 4c 6f 67 69 6e 2e 67 6f 76 22 20 2f 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 20 2f 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 6c 65 70 68 Data Ascii: <!DOCTYPE html><html class="no-js" lang="en"><head> <meta charset="utf-8" /> <meta name="description" content="Login.gov" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> <meta name="format-detection" content="teleph
2024-11-25 16:57:29 UTC	1140	IN	Data Raw: 73 3a 2f 2f 77 77 77 2e 67 73 61 2e 67 6f 76 22 3e 0a 20 20 20 20 20 20 3c 70 69 63 74 75 72 65 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 20 63 6c 61 73 73 3d 22 6d 61 72 67 69 6e 2d 72 69 67 68 74 2d 30 35 22 3e 0a 20 20 20 20 20 20 20 20 3c 73 6f 75 72 63 65 20 6d 65 64 69 61 3d 22 28 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 32 33 70 78 29 22 20 73 72 63 73 65 74 3d 22 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 2e 6c 6f 67 69 6e 2e 67 6f 76 2f 61 73 73 65 74 73 2f 73 70 2d 6c 6f 67 6f 73 2f 73 71 75 61 72 65 2d 67 73 61 2d 64 61 72 6b 2d 30 39 34 39 37 61 61 37 2e 73 76 67 22 3e 0a 20 20 20 20 20 20 20 20 3c 69 6d 67 20 61 6c 74 3d 22 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 65 Data Ascii: s://www.gsa.gov"> <picture aria-hidden="true" class="margin-right-05"> <source media="(max-width: 1023px)" srcset="https://secure.login.gov/assets/sp-logos/square-gsa-dark-09497aa7.svg"> <img alt="" aria-hidden="true" src="https://se

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.11	49776	13.33.187.6	443	6592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:28 UTC	607	OUT	GET /assets/usa-icons/language-933750f3.svg HTTP/1.1 Host: secure.login.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
2024-11-25 16:57:29 UTC	615	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 896 Connection: close Date: Wed, 20 Nov 2024 16:55:00 GMT Last-Modified: Tue, 03 Oct 2023 16:01:03 GMT ETag: "73f80805da54fb31a09468b25e3e5dd9" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 x-amz-version-id: LdNfhSZsUi.nzwhJbYdXGQaFSRs80deq Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 c15415cccc7260d4bd35b1ca2c497c96.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 977z2906ati2uJlg0IgKyvaRLZu-wxcxdJqwf0ez4M1OhTRUtkvoMA== Age: 432150
2024-11-25 16:57:29 UTC	896	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 31 2e 39 39 20 32 43 36 2e 34 37 20 32 20 32 20 36 2e 34 38 20 32 20 31 32 73 34 2e 34 37 20 31 30 20 39 2e 39 39 20 31 30 43 31 37 2e 35 32 20 32 32 20 32 32 20 31 37 2e 35 32 20 32 32 20 31 32 53 31 37 2e 35 32 20 32 20 31 31 2e 39 39 20 32 7a 6d 36 2e 39 33 20 36 68 2d 32 2e 39 35 61 31 35 2e 36 35 20 31 35 2e 36 35 20 30 20 30 20 30 2d 31 2e 33 38 2d 33 2e 35 36 41 38 2e 30 33 20 38 2e 30 33 20 30 20 30 20 31 20 31 38 2e 39 32 20 38 7a 4d 31 32 20 34 2e 30 34 63 2e 38 33 20 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24"><path d="M11.99 2C6.47 2 2 6.48 2 12s4.47 10 9.99 10C17.52 22 22 17.52 22 12S17.52 2 11.99 2zm6.93 6h-2.95a15.65 15.65 0 0 0-1.38-3.56A8.03 8.03 0 0 1 18.92 8zM12 4.04c.83

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.11	49778	13.33.187.6	443	6592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:31 UTC	854	OUT	GET /assets/status/warning-88ffeb95.svg HTTP/1.1 Host: secure.login.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secure.login.gov/sign_up/cancel Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
2024-11-25 16:57:32 UTC	604	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1588 Connection: close Date: Mon, 25 Nov 2024 16:57:33 GMT Last-Modified: Tue, 13 Feb 2024 19:31:20 GMT ETag: "958c8a5bd4905ed57bc86111c578d3b7" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 x-amz-version-id: SgJ882zxQEZvLnEs70zJen6JMyhxTZlE Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 e1af02661708034e962bd39b357a50aa.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: bS_ligbxu6iNBhFcKiYpbmwc_d734YcClWbXPerd9RObpgcZWkzNww==
2024-11-25 16:57:32 UTC	1588	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 30 22 20 68 65 69 67 68 74 3d 22 31 30 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 30 20 31 30 30 22 3e 3c 67 20 66 69 6c 74 65 72 3d 22 75 72 6c 28 23 61 29 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 66 66 66 22 20 64 3d 22 4d 35 30 20 39 34 63 32 34 2e 33 20 30 20 34 34 2d 31 39 2e 37 20 34 34 2d 34 34 53 37 34 2e 33 20 36 20 35 30 20 36 20 36 20 32 35 2e 37 20 36 20 35 30 73 31 39 2e 37 20 34 34 20 34 34 20 34 34 22 2f 3e 3c 2f 67 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 46 35 44 36 30 30 22 20 64 3d 22 4d 35 30 20 38 39 2e 36 63 32 31 2e 38 37 20 30 20 33 39 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="100" height="100" fill="none" viewBox="0 0 100 100"><g filter="url(#a)"><path fill="#fff" d="M50 94c24.3 0 44-19.7 44-44S74.3 6 50 6 6 25.7 6 50s19.7 44 44 44"/></g><path fill="#F5D600" d="M50 89.6c21.87 0 39

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.11	49779	13.33.187.6	443	6592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:34 UTC	603	OUT	GET /assets/status/warning-88ffeb95.svg HTTP/1.1 Host: secure.login.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
2024-11-25 16:57:34 UTC	611	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1588 Connection: close Date: Mon, 25 Nov 2024 16:57:33 GMT Last-Modified: Tue, 13 Feb 2024 19:31:20 GMT ETag: "958c8a5bd4905ed57bc86111c578d3b7" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 x-amz-version-id: SgJ882zxQEZvLnEs70zJen6JMyhxTZlE Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 e1af02661708034e962bd39b357a50aa.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: fjR7w8SSk5mRbayqEy_qWckqA5fVEG0qL052yp4MR327TLyxWQy2ZA== Age: 2
2024-11-25 16:57:34 UTC	1588	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 30 22 20 68 65 69 67 68 74 3d 22 31 30 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 30 20 31 30 30 22 3e 3c 67 20 66 69 6c 74 65 72 3d 22 75 72 6c 28 23 61 29 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 66 66 66 22 20 64 3d 22 4d 35 30 20 39 34 63 32 34 2e 33 20 30 20 34 34 2d 31 39 2e 37 20 34 34 2d 34 34 53 37 34 2e 33 20 36 20 35 30 20 36 20 36 20 32 35 2e 37 20 36 20 35 30 73 31 39 2e 37 20 34 34 20 34 34 20 34 34 22 2f 3e 3c 2f 67 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 46 35 44 36 30 30 22 20 64 3d 22 4d 35 30 20 38 39 2e 36 63 32 31 2e 38 37 20 30 20 33 39 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="100" height="100" fill="none" viewBox="0 0 100 100"><g filter="url(#a)"><path fill="#fff" d="M50 94c24.3 0 44-19.7 44-44S74.3 6 50 6 6 25.7 6 50s19.7 44 44 44"/></g><path fill="#F5D600" d="M50 89.6c21.87 0 39

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.11	49780	13.33.187.6	443	6592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:34 UTC	859	OUT	GET /assets/favicons/favicon-16-b68bb09d.png HTTP/1.1 Host: secure.login.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secure.login.gov/sign_up/cancel Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
2024-11-25 16:57:34 UTC	612	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 413 Connection: close Date: Sun, 06 Oct 2024 06:28:22 GMT Last-Modified: Tue, 03 Oct 2023 16:00:46 GMT ETag: "5ef06a060ae8e6978898ffff12dde838" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 x-amz-version-id: 08LMj6kj1_6aqA0EtKqdO694wde27FJr Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 a6ec089aa02839578670b49d128782c2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: YibTw82qmtkaIe0YulcZgRaQH7_fwHKT15wwxxAbbISVUlGer8hjFw== Age: 4357753
2024-11-25 16:57:34 UTC	413	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 01 64 49 44 41 54 78 01 94 d2 03 8c 1d 61 18 85 e1 da 8a ca f9 a7 b6 6d 2b ae 6d 5b 71 1a d4 8c 6a 46 1b 5b 6b db b6 6d 6f 70 8d b3 67 71 ed 2f 79 e2 f3 5e cc 0c b1 be 3a b1 6b 24 4d 32 a9 10 db 27 87 c9 8b 26 07 ca f3 a7 0c 9a 4c a3 86 38 3b 0e a6 d1 5f 4a a2 c4 3e 95 62 7b 12 03 c9 1c 99 a4 d0 7f 9a ee 2c 70 86 f4 04 13 06 c0 00 38 b0 a6 a7 33 ce 02 d7 09 66 d2 4e 54 48 db 10 26 16 22 40 cc b3 8f 5c 77 1f e0 b8 71 dd 51 74 7f f7 43 d5 cf 3f 88 d8 b0 05 81 62 9e 0f 81 99 db d1 fd f2 1b 4c 57 f4 ea 2d 02 66 cd f1 2d d0 f1 e8 0d 8c 5a 1d 0c 5a 2d b2 1f 3f f3 31 30 6b 07 9a 76 9e 87 be b5 03 ea f6 76 c4 ec 39 80 00 69 ae 6f df a0 f5 e4 23 18 95 2a e8 55 Data Ascii: PNGIHDRadIDATxam+m[qjF[kmopgq/y^:k$M2'&L8;_J>b{,p83fNTH&"@\wqQtC?bLW-f-ZZ-?10kvv9io#*U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.11	49781	13.33.187.6	443	6592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:36 UTC	608	OUT	GET /assets/favicons/favicon-16-b68bb09d.png HTTP/1.1 Host: secure.login.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
2024-11-25 16:57:37 UTC	612	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 413 Connection: close Date: Sun, 06 Oct 2024 06:28:22 GMT Last-Modified: Tue, 03 Oct 2023 16:00:46 GMT ETag: "5ef06a060ae8e6978898ffff12dde838" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 x-amz-version-id: 08LMj6kj1_6aqA0EtKqdO694wde27FJr Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 9bd2938ceb90e1a35f549d1165e84676.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: ty7q4vOrvDxjqYUVEpwAhkrXAYjh5ajl5AYjaCuJ4y-PuKkK0Mq2Eg== Age: 4357755
2024-11-25 16:57:37 UTC	413	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 01 64 49 44 41 54 78 01 94 d2 03 8c 1d 61 18 85 e1 da 8a ca f9 a7 b6 6d 2b ae 6d 5b 71 1a d4 8c 6a 46 1b 5b 6b db b6 6d 6f 70 8d b3 67 71 ed 2f 79 e2 f3 5e cc 0c b1 be 3a b1 6b 24 4d 32 a9 10 db 27 87 c9 8b 26 07 ca f3 a7 0c 9a 4c a3 86 38 3b 0e a6 d1 5f 4a a2 c4 3e 95 62 7b 12 03 c9 1c 99 a4 d0 7f 9a ee 2c 70 86 f4 04 13 06 c0 00 38 b0 a6 a7 33 ce 02 d7 09 66 d2 4e 54 48 db 10 26 16 22 40 cc b3 8f 5c 77 1f e0 b8 71 dd 51 74 7f f7 43 d5 cf 3f 88 d8 b0 05 81 62 9e 0f 81 99 db d1 fd f2 1b 4c 57 f4 ea 2d 02 66 cd f1 2d d0 f1 e8 0d 8c 5a 1d 0c 5a 2d b2 1f 3f f3 31 30 6b 07 9a 76 9e 87 be b5 03 ea f6 76 c4 ec 39 80 00 69 ae 6f df a0 f5 e4 23 18 95 2a e8 55 Data Ascii: PNGIHDRadIDATxam+m[qjF[kmopgq/y^:k$M2'&L8;_J>b{,p83fNTH&"@\wqQtC?bLW-f-ZZ-?10kvv9io#*U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.11	49782	13.33.187.6	443	6592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:43 UTC	1007	OUT	GET /sign_up/enter_password?confirmation_token=CpW2XvapjXvtiszQfDxe HTTP/1.1 Host: secure.login.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://secure.login.gov/sign_up/cancel Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
2024-11-25 16:57:44 UTC	2523	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 15128 Connection: close Date: Mon, 25 Nov 2024 16:57:44 GMT strict-transport-security: max-age=31556952; includeSubDomains; preload x-frame-options: DENY x-xss-protection: 1; mode=block x-content-type-options: nosniff x-permitted-cross-domain-policies: none referrer-policy: strict-origin-when-cross-origin x-download-options: noopen cache-control: no-store pragma: no-cache link: </assets/init-6ad4cfee.js>; rel=preload; as=script; integrity=sha256-eMXV2njRJxgQrFbuljRT/UTWePGrhl83bHHDDd+jFPw=,</assets/public-sans/PublicSans-Bold-c73ef2d4.woff2>; rel=preload; as=font; type=font/woff2; crossorigin=anonymous,</assets/public-sans/PublicSans-Regular-5f371c89.woff2>; rel=preload; as=font; type=font/woff2; crossorigin=anonymous,</assets/application-1d4fbf32.css>; rel=preload; as=style,</assets/password_confirmation_component-7db5a738.css>; rel=preload; as=style,</assets/password_strength_component-bbafaadb.css>; rel=preload; as=style,</assets/icon_component-2d022cd4.css>; rel=preload; as=style,</assets/utilities-b943a2ae.css>; rel=preload; as=style,</packs/password_confirmation_component-1a3edc7d.digested-4a05fc12.en.js>; rel=preload; as=script; integrity=sha256-IIaNUXHhBiS7sU8YfUYQszwxRWCCa2qLN+rt3RVel8Q=,</packs/password_confirmation_component-1a3edc7d.digested.js>; rel=preload; as=script; integrity=sha256-uziO+7beQvBUCuYN3XkJ/RRqBa3xPwwjUSrj5RV1UNo= content-security-policy: default-src 'self'; child-src 'self'; form-action 'self'; block-all-mixed-content; connect-src 'self'; font-src 'self' data: https://secure.login.gov; img-src 'self' data: login.gov https://secure.login.gov https://s3.us-west-2.amazonaws.com; media-src 'self'; object-src 'none'; script-src 'self' https://secure.login.gov 'nonce-4841f9a6f00af2154c2612ef3daecec1'; style-src 'self' https://secure.login.gov 'nonce-4841f9a6f00af2154c2612ef3daecec1'; base-uri 'self' set-cookie: ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; path=/; expires=Mon, 25 Nov 2024 17:12:44 GMT; SameSite=Lax; HttpOnly; secure set-cookie: sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov; path=/; expires=Mon, 25 Nov 2024 17:12:44 GMT; SameSite=Lax; HttpOnly; secure x-request-id: 09f7a732-15e0-4046-b505-40f57c62189e x-runtime: 0.017181 X-Cache: Miss from cloudfront Via: 1.1 46b6cb3d5daab7defe28d3658c3a54fe.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: G2QseOgs0AdIa6FCkCx4JlWbGppzJKOGX47194KSaWwImM3Wn5vuxQ==
2024-11-25 16:57:44 UTC	13861	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 4c 6f 67 69 6e 2e 67 6f 76 22 20 2f 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 20 2f 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 6c 65 70 68 Data Ascii: <!DOCTYPE html><html class="no-js" lang="en"><head> <meta charset="utf-8" /> <meta name="description" content="Login.gov" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> <meta name="format-detection" content="teleph
2024-11-25 16:57:44 UTC	198	IN	Data Raw: 5f 63 6f 6d 70 6f 6e 65 6e 74 2d 31 61 33 65 64 63 37 64 2e 64 69 67 65 73 74 65 64 2d 34 61 30 35 66 63 31 32 2e 65 6e 2e 6a 73 22 20 69 6e 74 65 67 72 69 74 79 3d 22 73 68 61 32 35 36 2d 49 49 61 4e 55 58 48 68 42 69 53 37 73 55 38 59 66 55 59 51 73 7a 77 78 52 57 43 43 61 32 71 4c 4e 2b 72 74 33 52 56 65 6c 38 51 3d 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 70 61 63 6b 73 2f 70 61 73 73 77 6f 72 64 5f 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 5f 63 6f 6d 70 6f 6e 65 6e 74 2d 31 61 33 65 64 63 37 64 2e 64 69 67 65 73 74 65 64 2e 6a 73 22 20 69 6e 74 65 67 72 Data Ascii: _component-1a3edc7d.digested-4a05fc12.en.js" integrity="sha256-IIaNUXHhBiS7sU8YfUYQszwxRWCCa2qLN+rt3RVel8Q="></script><script src="/packs/password_confirmation_component-1a3edc7d.digested.js" integr
2024-11-25 16:57:44 UTC	1069	IN	Data Raw: 69 74 79 3d 22 73 68 61 32 35 36 2d 75 7a 69 4f 2b 37 62 65 51 76 42 55 43 75 59 4e 33 58 6b 4a 2f 52 52 71 42 61 33 78 50 77 77 6a 55 53 72 6a 35 52 56 31 55 4e 6f 3d 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 70 61 63 6b 73 2f 76 61 6c 69 64 61 74 65 64 5f 66 69 65 6c 64 5f 63 6f 6d 70 6f 6e 65 6e 74 2d 32 62 35 34 66 66 64 36 2e 64 69 67 65 73 74 65 64 2e 6a 73 22 20 69 6e 74 65 67 72 69 74 79 3d 22 73 68 61 32 35 36 2d 52 72 54 43 58 46 62 6d 57 2b 52 34 75 56 75 72 2f 6f 43 62 4b 56 4d 63 33 70 2f 56 68 56 46 57 51 2b 48 2f 7a 61 74 65 45 65 38 3d 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 70 61 63 6b 73 2f 70 61 73 73 77 6f 72 64 5f 73 74 72 65 6e 67 74 68 5f 63 6f 6d 70 6f 6e 65 6e 74 Data Ascii: ity="sha256-uziO+7beQvBUCuYN3XkJ/RRqBa3xPwwjUSrj5RV1UNo="></script><script src="/packs/validated_field_component-2b54ffd6.digested.js" integrity="sha256-RrTCXFbmW+R4uVur/oCbKVMc3p/VhVFWQ+H/zateEe8="></script><script src="/packs/password_strength_component

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.11	49783	13.33.187.6	443	6592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:45 UTC	857	OUT	GET /assets/public-sans/PublicSans-Italic-467fd4ae.woff2 HTTP/1.1 Host: secure.login.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://secure.login.gov sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://secure.login.gov/assets/application-1d4fbf32.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
2024-11-25 16:57:46 UTC	615	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 15544 Connection: close Date: Tue, 20 Aug 2024 18:53:14 GMT Last-Modified: Thu, 15 Aug 2024 16:02:43 GMT ETag: "5609ff1f13977e0e2d8ad823cba9c2f9" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 x-amz-version-id: XTcQJn3R2xZqwLY4ObM7khzbk34kUBAC Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 6ee264f4aa2ef518b13a5a8305e8080e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: Fqj0h6ZPVuBO3BRm_d51iEC_0e4mHQb6AcyqQri3ESS9QOMgLrWC3Q== Age: 8373872
2024-11-25 16:57:46 UTC	15544	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 3c b8 00 11 00 00 00 00 84 68 00 00 3c 57 00 02 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 81 16 1b ae 3a 1c 8a 46 06 60 00 83 30 08 60 09 9c 0c 11 08 0a 81 9b 2c 81 8a 67 01 36 02 24 03 86 20 0b 83 18 00 04 20 05 83 6a 07 20 0c 81 3d 1b 61 79 25 ca cd 9e 00 e7 01 28 90 da bd 8c 28 6a c3 68 15 97 51 48 4a 45 5d 8b ff ff 9e dc 18 22 d8 8f e8 56 ad ef 10 a7 ec 74 60 a3 ba af ec 46 bb 5d 10 ee f2 54 51 63 c1 30 ee 5a 54 19 ad fd 60 5f 2d 9c d6 0d 4f aa 39 d9 8e 0c d1 45 b9 4c be 38 4d b9 05 6b 41 a4 fe d1 c6 8b 6d 72 f0 ca 78 b9 da d1 33 93 1f ac b1 c3 27 4c 3a a3 fa be 8d ce 97 4d a5 a0 48 2c 96 e8 a0 60 74 a4 a0 c6 ff 71 41 91 a0 c1 09 69 05 a2 fc cc b3 5a c1 4f a3 a5 f1 d2 c0 11 bd 81 8a cf c0 b6 91 Data Ascii: wOF2<h<WB:F`0`,g6$ j =ay%((jhQHJE]"Vt`F]TQc0ZT`_-O9EL8MkAmrx3'L:MH,`tqAiZO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.11	49784	13.33.187.6	443	6592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:54 UTC	903	OUT	GET /assets/usa-icons/error-9489e5f3.svg HTTP/1.1 Host: secure.login.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://secure.login.gov sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: image Referer: https://secure.login.gov/assets/application-1d4fbf32.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
2024-11-25 16:57:56 UTC	797	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 197 Connection: close Date: Mon, 25 Nov 2024 16:57:56 GMT Access-Control-Allow-Origin: https://secure.login.gov Access-Control-Allow-Methods: GET Access-Control-Expose-Headers: ETag Access-Control-Max-Age: 0 Access-Control-Allow-Credentials: true Last-Modified: Tue, 03 Oct 2023 16:01:03 GMT ETag: "fccb5b63c531135aed8de27b53524da2" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 x-amz-version-id: 2PVDrKjuIjnrpBT6Xvqn7b5rLjDMAqGj Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 9bd2938ceb90e1a35f549d1165e84676.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: Fe_oI8ZI8uqv2fO2S-Sphw1yakQmauEWak3zreCo55XLvVzMRKDUMg==
2024-11-25 16:57:56 UTC	197	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 32 20 32 43 36 2e 34 38 20 32 20 32 20 36 2e 34 38 20 32 20 31 32 73 34 2e 34 38 20 31 30 20 31 30 20 31 30 20 31 30 2d 34 2e 34 38 20 31 30 2d 31 30 53 31 37 2e 35 32 20 32 20 31 32 20 32 7a 6d 31 20 31 35 68 2d 32 76 2d 32 68 32 76 32 7a 6d 30 2d 34 68 2d 32 56 37 68 32 76 36 7a 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24"><path d="M12 2C6.48 2 2 6.48 2 12s4.48 10 10 10 10-4.48 10-10S17.52 2 12 2zm1 15h-2v-2h2v2zm0-4h-2V7h2v6z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.11	49785	13.33.187.6	443	6592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:57 UTC	604	OUT	GET /assets/usa-icons/error-9489e5f3.svg HTTP/1.1 Host: secure.login.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=3a3981e0-590d-47ca-adc6-6c4131ffca3f; ahoy_visit=23ad5209-3024-416a-b48a-5b4852232ef5; ahoy_track=true; _identity_idp_session=4841f9a6f00af2154c2612ef3daecec1; sp_issuer=https%3A%2F%2Fcaia-oidc.treasury.gov
2024-11-25 16:57:58 UTC	804	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 197 Connection: close Date: Mon, 25 Nov 2024 16:57:56 GMT Access-Control-Allow-Origin: https://secure.login.gov Access-Control-Allow-Methods: GET Access-Control-Expose-Headers: ETag Access-Control-Max-Age: 0 Access-Control-Allow-Credentials: true Last-Modified: Tue, 03 Oct 2023 16:01:03 GMT ETag: "fccb5b63c531135aed8de27b53524da2" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 x-amz-version-id: 2PVDrKjuIjnrpBT6Xvqn7b5rLjDMAqGj Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 6641a812839e5267ee0880e96b41efc4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: NVpFXkqNFHsZMD8Q43IlXSr2fthc5Lzssy0_4yNfV2p8GFdC95D0lQ== Age: 3
2024-11-25 16:57:58 UTC	197	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 32 20 32 43 36 2e 34 38 20 32 20 32 20 36 2e 34 38 20 32 20 31 32 73 34 2e 34 38 20 31 30 20 31 30 20 31 30 20 31 30 2d 34 2e 34 38 20 31 30 2d 31 30 53 31 37 2e 35 32 20 32 20 31 32 20 32 7a 6d 31 20 31 35 68 2d 32 76 2d 32 68 32 76 32 7a 6d 30 2d 34 68 2d 32 56 37 68 32 76 36 7a 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24"><path d="M12 2C6.48 2 2 6.48 2 12s4.48 10 10 10 10-4.48 10-10S17.52 2 12 2zm1 15h-2v-2h2v2zm0-4h-2V7h2v6z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.11	49786	52.149.20.212	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:58:03 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=YELw5Cd6B75V8mM&MD=YkgmYcKl HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-25 16:58:03 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 09f6d485-7c49-40d4-80a0-21331d288eb0 MS-RequestId: 35b9d8fd-ab05-4295-887a-fd49f2f815d1 MS-CV: jyqAyfzARUuUsjnB.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 25 Nov 2024 16:58:03 GMT Connection: close Content-Length: 30005
2024-11-25 16:58:03 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-11-25 16:58:03 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 5400, Parent PID: 7012

General

Target ID:	0
Start time:	11:57:01
Start date:	25/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff6a3150000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6592, Parent PID: 5400

General

Target ID:	2
Start time:	11:57:04
Start date:	25/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2176 --field-trial-handle=1568,i,9142163365608271667,12353336580807457794,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6a3150000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 2552, Parent PID: 7012

General

Target ID:	3
Start time:	11:57:07
Start date:	25/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://secure.login.gov/sign_up/email/confirm?_request_id=3c0afc61-ca10-4f0c-9685-deebefbd5009&confirmation_token=CpW2XvapjXvtiszQfDxe&c=E,1,czKC5vkp_9sR2jC4fsD8lsKfESoIyAIMQRGqkY2Bbcx7yPVzXeHCLLRKd9edzUpkrkCL5N3DxQ5GKyw6w6jtCBdegjvNRkaLnm9khZ_CZsjb1RkOyAgTkuF3&typo=1"
Imagebase:	0x7ff6a3150000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://secure.login.gov/sign_up/email/confirm?_request_id=3c0afc61-ca10-4f0c-9685-deebefbd5009&confirmation_token=CpW2XvapjXvtiszQfDxe&c=E,1,czKC5vkp_9sR2jC4fsD8lsKfESoIyAIMQRGqkY2Bbcx7yPVzXeHCLLRKd9edzUpkrkCL5N3DxQ5GKyw6w6jtCBdegjvNRkaLnm9khZ_CZsjb1RkOyAgTkuF3&typo=1

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Windows Analysis Report
https://secure.login.gov/sign_up/email/confirm?_request_id=3c0afc61-ca10-4f0c-9685-deebefbd5009&confirmation_token=CpW2XvapjXvtiszQfDxe&c=E,1,czKC5vkp_9sR2jC4fsD8lsKfESoIyAIMQRGqkY2Bbcx7yPVzXeHCLLRKd9edzUpkrkCL5N3DxQ5GKyw6w6jtCBdegjvNRkaLnm9khZ_CZsjb1RkOyAgTkuF3&typo=1