No. Time Source Destination Protocol Length Info 1 14:09:09.426853 0.1.0.195 192.147.130.166 TCP 54 18624 → 443 [SYN] Seq=0 Win=65535 Len=0 Frame 1: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: 00:00:00_00:00:00 (00:00:00:00:00:00), Dst: 00:00:00_00:00:00 (00:00:00:00:00:00) Internet Protocol Version 4, Src: 0.1.0.195, Dst: 192.147.130.166 Transmission Control Protocol, Src Port: 18624, Dst Port: 443, Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 2 14:09:09.426853 192.147.130.166 0.1.0.195 TCP 54 443 → 18624 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 Frame 2: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: 00:00:00_00:00:00 (00:00:00:00:00:00), Dst: 00:00:00_00:00:00 (00:00:00:00:00:00) Internet Protocol Version 4, Src: 192.147.130.166, Dst: 0.1.0.195 Transmission Control Protocol, Src Port: 443, Dst Port: 18624, Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 3 14:09:09.426853 0.1.0.195 192.147.130.166 TCP 54 18624 → 443 [ACK] Seq=1 Ack=1 Win=65535 Len=0 Frame 3: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: 00:00:00_00:00:00 (00:00:00:00:00:00), Dst: 00:00:00_00:00:00 (00:00:00:00:00:00) Internet Protocol Version 4, Src: 0.1.0.195, Dst: 192.147.130.166 Transmission Control Protocol, Src Port: 18624, Dst Port: 443, Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 4 14:09:09.427413 0.1.0.195 192.147.130.166 TLSv1.2 571 Client Hello Frame 4: 571 bytes on wire (4568 bits), 571 bytes captured (4568 bits) Ethernet II, Src: 00:00:00_00:00:00 (00:00:00:00:00:00), Dst: 00:00:00_00:00:00 (00:00:00:00:00:00) Internet Protocol Version 4, Src: 0.1.0.195, Dst: 192.147.130.166 Transmission Control Protocol, Src Port: 18624, Dst Port: 443, Seq: 1, Ack: 1, Len: 517 Transport Layer Security TLSv1.2 Record Layer: Handshake Protocol: Client Hello Content Type: Handshake (22) Version: TLS 1.0 (0x0301) Length: 512 Handshake Protocol: Client Hello Handshake Type: Client Hello (1) Length: 508 Version: TLS 1.2 (0x0303) Random: b51cd4c9de898f26df1a42819ee1aeab176fe80ac5625928c3300152e94bc786 Session ID Length: 32 Session ID: 95960194d92af82063c3c5e6418ecd08f33eb159244befbf7a3bea9c8439b38f Cipher Suites Length: 52 Cipher Suites (26 suites) Compression Methods Length: 1 Compression Methods (1 method) Extensions Length: 383 Extension: renegotiation_info (len=1) Extension: server_name (len=21) Extension: extended_master_secret (len=0) Extension: signature_algorithms (len=24) Extension: status_request (len=5) Extension: signed_certificate_timestamp (len=0) Extension: application_layer_protocol_negotiation (len=11) Extension: ec_point_formats (len=2) Extension: key_share (len=38) Extension: psk_key_exchange_modes (len=2) Extension: supported_versions (len=9) Extension: supported_groups (len=10) Extension: padding (len=208) [JA3 Fullstring: 771,4865-4866-4867-49196-49195-49188-49187-49162-49161-52393-49200-49199-49192-49191-49172-49171-52392-157-156-61-60-53-47-49160-49170-10,65281-0-23-13-5-18-16-11-51-45-43-10-21,29-23-24-25,0] [JA3: 6fa3244afc6bb6f9fad207b6b52af26b] No. Time Source Destination Protocol Length Info 5 14:09:09.427413 192.147.130.166 0.1.0.195 TCP 54 443 → 18624 [ACK] Seq=1 Ack=518 Win=65535 Len=0 Frame 5: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: 00:00:00_00:00:00 (00:00:00:00:00:00), Dst: 00:00:00_00:00:00 (00:00:00:00:00:00) Internet Protocol Version 4, Src: 192.147.130.166, Dst: 0.1.0.195 Transmission Control Protocol, Src Port: 443, Dst Port: 18624, Seq: 1, Ack: 518, Len: 0 No. Time Source Destination Protocol Length Info 6 14:09:09.619605 192.147.130.166 0.1.0.195 TCP 1282 443 → 18624 [ACK] Seq=1 Ack=518 Win=65535 Len=1228 [TCP segment of a reassembled PDU] Frame 6: 1282 bytes on wire (10256 bits), 1282 bytes captured (10256 bits) Ethernet II, Src: 00:00:00_00:00:00 (00:00:00:00:00:00), Dst: 00:00:00_00:00:00 (00:00:00:00:00:00) Internet Protocol Version 4, Src: 192.147.130.166, Dst: 0.1.0.195 Transmission Control Protocol, Src Port: 443, Dst Port: 18624, Seq: 1, Ack: 518, Len: 1228 No. Time Source Destination Protocol Length Info 7 14:09:09.619605 0.1.0.195 192.147.130.166 TCP 54 18624 → 443 [ACK] Seq=518 Ack=1229 Win=65535 Len=0 Frame 7: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: 00:00:00_00:00:00 (00:00:00:00:00:00), Dst: 00:00:00_00:00:00 (00:00:00:00:00:00) Internet Protocol Version 4, Src: 0.1.0.195, Dst: 192.147.130.166 Transmission Control Protocol, Src Port: 18624, Dst Port: 443, Seq: 518, Ack: 1229, Len: 0 No. Time Source Destination Protocol Length Info 8 14:09:09.619673 192.147.130.166 0.1.0.195 TCP 1282 443 → 18624 [ACK] Seq=1229 Ack=518 Win=65535 Len=1228 [TCP segment of a reassembled PDU] Frame 8: 1282 bytes on wire (10256 bits), 1282 bytes captured (10256 bits) Ethernet II, Src: 00:00:00_00:00:00 (00:00:00:00:00:00), Dst: 00:00:00_00:00:00 (00:00:00:00:00:00) Internet Protocol Version 4, Src: 192.147.130.166, Dst: 0.1.0.195 Transmission Control Protocol, Src Port: 443, Dst Port: 18624, Seq: 1229, Ack: 518, Len: 1228 No. Time Source Destination Protocol Length Info 9 14:09:09.619673 0.1.0.195 192.147.130.166 TCP 54 18624 → 443 [ACK] Seq=518 Ack=2457 Win=65535 Len=0 Frame 9: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: 00:00:00_00:00:00 (00:00:00:00:00:00), Dst: 00:00:00_00:00:00 (00:00:00:00:00:00) Internet Protocol Version 4, Src: 0.1.0.195, Dst: 192.147.130.166 Transmission Control Protocol, Src Port: 18624, Dst Port: 443, Seq: 518, Ack: 2457, Len: 0 No. Time Source Destination Protocol Length Info 10 14:09:09.621115 192.147.130.166 0.1.0.195 TCP 1282 443 → 18624 [ACK] Seq=2457 Ack=518 Win=65535 Len=1228 [TCP segment of a reassembled PDU] Frame 10: 1282 bytes on wire (10256 bits), 1282 bytes captured (10256 bits) Ethernet II, Src: 00:00:00_00:00:00 (00:00:00:00:00:00), Dst: 00:00:00_00:00:00 (00:00:00:00:00:00) Internet Protocol Version 4, Src: 192.147.130.166, Dst: 0.1.0.195 Transmission Control Protocol, Src Port: 443, Dst Port: 18624, Seq: 2457, Ack: 518, Len: 1228 No. Time Source Destination Protocol Length Info 11 14:09:09.621115 0.1.0.195 192.147.130.166 TCP 54 18624 → 443 [ACK] Seq=518 Ack=3685 Win=65535 Len=0 Frame 11: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: 00:00:00_00:00:00 (00:00:00:00:00:00), Dst: 00:00:00_00:00:00 (00:00:00:00:00:00) Internet Protocol Version 4, Src: 0.1.0.195, Dst: 192.147.130.166 Transmission Control Protocol, Src Port: 18624, Dst Port: 443, Seq: 518, Ack: 3685, Len: 0 No. Time Source Destination Protocol Length Info 12 14:09:09.621185 192.147.130.166 0.1.0.195 TCP 1282 443 → 18624 [ACK] Seq=3685 Ack=518 Win=65535 Len=1228 [TCP segment of a reassembled PDU] Frame 12: 1282 bytes on wire (10256 bits), 1282 bytes captured (10256 bits) Ethernet II, Src: 00:00:00_00:00:00 (00:00:00:00:00:00), Dst: 00:00:00_00:00:00 (00:00:00:00:00:00) Internet Protocol Version 4, Src: 192.147.130.166, Dst: 0.1.0.195 Transmission Control Protocol, Src Port: 443, Dst Port: 18624, Seq: 3685, Ack: 518, Len: 1228 No. Time Source Destination Protocol Length Info 13 14:09:09.621185 0.1.0.195 192.147.130.166 TCP 54 18624 → 443 [ACK] Seq=518 Ack=4913 Win=65535 Len=0 Frame 13: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: 00:00:00_00:00:00 (00:00:00:00:00:00), Dst: 00:00:00_00:00:00 (00:00:00:00:00:00) Internet Protocol Version 4, Src: 0.1.0.195, Dst: 192.147.130.166 Transmission Control Protocol, Src Port: 18624, Dst Port: 443, Seq: 518, Ack: 4913, Len: 0 No. Time Source Destination Protocol Length Info 14 14:09:09.621213 192.147.130.166 0.1.0.195 TLSv1.2 236 Server Hello, Certificate, Server Key Exchange, Server Hello Done Frame 14: 236 bytes on wire (1888 bits), 236 bytes captured (1888 bits) Ethernet II, Src: 00:00:00_00:00:00 (00:00:00:00:00:00), Dst: 00:00:00_00:00:00 (00:00:00:00:00:00) Internet Protocol Version 4, Src: 192.147.130.166, Dst: 0.1.0.195 Transmission Control Protocol, Src Port: 443, Dst Port: 18624, Seq: 4913, Ack: 518, Len: 182 [5 Reassembled TCP Segments (5094 bytes): #6(1228), #8(1228), #10(1228), #12(1228), #14(182)] Transport Layer Security TLSv1.2 Record Layer: Handshake Protocol: Multiple Handshake Messages Content Type: Handshake (22) Version: TLS 1.2 (0x0303) Length: 5089 Handshake Protocol: Server Hello Handshake Type: Server Hello (2) Length: 77 Version: TLS 1.2 (0x0303) Random: 6361c335aa6fa086a42bc5d3cd0b49e828644a44d077a206ea74f5d81505a91f Session ID Length: 32 Session ID: 6361c3352a91ef322df3e4331b8a1aa93638c8fa322ef11653a768025c1ba036 Cipher Suite: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (0xc02f) Compression Method: null (0) Extensions Length: 5 Extension: renegotiation_info (len=1) [JA3S Fullstring: 771,49199,65281] [JA3S: fbe78c619e7ea20046131294ad087f05] Handshake Protocol: Certificate Handshake Type: Certificate (11) Length: 4667 Certificates Length: 4664 Certificates (4664 bytes) Handshake Protocol: Server Key Exchange Handshake Type: Server Key Exchange (12) Length: 329 EC Diffie-Hellman Server Params Handshake Protocol: Server Hello Done Handshake Type: Server Hello Done (14) Length: 0 No. Time Source Destination Protocol Length Info 15 14:09:09.621213 0.1.0.195 192.147.130.166 TCP 54 18624 → 443 [ACK] Seq=518 Ack=5095 Win=65535 Len=0 Frame 15: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: 00:00:00_00:00:00 (00:00:00:00:00:00), Dst: 00:00:00_00:00:00 (00:00:00:00:00:00) Internet Protocol Version 4, Src: 0.1.0.195, Dst: 192.147.130.166 Transmission Control Protocol, Src Port: 18624, Dst Port: 443, Seq: 518, Ack: 5095, Len: 0 No. Time Source Destination Protocol Length Info 16 14:09:09.667712 0.1.0.195 192.147.130.166 TLSv1.2 180 Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message Frame 16: 180 bytes on wire (1440 bits), 180 bytes captured (1440 bits) Ethernet II, Src: 00:00:00_00:00:00 (00:00:00:00:00:00), Dst: 00:00:00_00:00:00 (00:00:00:00:00:00) Internet Protocol Version 4, Src: 0.1.0.195, Dst: 192.147.130.166 Transmission Control Protocol, Src Port: 18624, Dst Port: 443, Seq: 518, Ack: 5095, Len: 126 Transport Layer Security TLSv1.2 Record Layer: Handshake Protocol: Client Key Exchange Content Type: Handshake (22) Version: TLS 1.2 (0x0303) Length: 70 Handshake Protocol: Client Key Exchange Handshake Type: Client Key Exchange (16) Length: 66 EC Diffie-Hellman Client Params TLSv1.2 Record Layer: Change Cipher Spec Protocol: Change Cipher Spec Content Type: Change Cipher Spec (20) Version: TLS 1.2 (0x0303) Length: 1 Change Cipher Spec Message TLSv1.2 Record Layer: Handshake Protocol: Encrypted Handshake Message Content Type: Handshake (22) Version: TLS 1.2 (0x0303) Length: 40 Handshake Protocol: Encrypted Handshake Message No. Time Source Destination Protocol Length Info 17 14:09:09.667712 192.147.130.166 0.1.0.195 TCP 54 443 → 18624 [ACK] Seq=5095 Ack=644 Win=65535 Len=0 Frame 17: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: 00:00:00_00:00:00 (00:00:00:00:00:00), Dst: 00:00:00_00:00:00 (00:00:00:00:00:00) Internet Protocol Version 4, Src: 192.147.130.166, Dst: 0.1.0.195 Transmission Control Protocol, Src Port: 443, Dst Port: 18624, Seq: 5095, Ack: 644, Len: 0 No. Time Source Destination Protocol Length Info 18 14:09:09.850830 192.147.130.166 0.1.0.195 TLSv1.2 60 Change Cipher Spec Frame 18: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: 00:00:00_00:00:00 (00:00:00:00:00:00), Dst: 00:00:00_00:00:00 (00:00:00:00:00:00) Internet Protocol Version 4, Src: 192.147.130.166, Dst: 0.1.0.195 Transmission Control Protocol, Src Port: 443, Dst Port: 18624, Seq: 5095, Ack: 644, Len: 6 Transport Layer Security TLSv1.2 Record Layer: Change Cipher Spec Protocol: Change Cipher Spec Content Type: Change Cipher Spec (20) Version: TLS 1.2 (0x0303) Length: 1 Change Cipher Spec Message No. Time Source Destination Protocol Length Info 19 14:09:09.850830 0.1.0.195 192.147.130.166 TCP 54 18624 → 443 [ACK] Seq=644 Ack=5101 Win=65535 Len=0 Frame 19: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: 00:00:00_00:00:00 (00:00:00:00:00:00), Dst: 00:00:00_00:00:00 (00:00:00:00:00:00) Internet Protocol Version 4, Src: 0.1.0.195, Dst: 192.147.130.166 Transmission Control Protocol, Src Port: 18624, Dst Port: 443, Seq: 644, Ack: 5101, Len: 0 No. Time Source Destination Protocol Length Info 20 14:09:09.850882 192.147.130.166 0.1.0.195 TLSv1.2 99 Encrypted Handshake Message Frame 20: 99 bytes on wire (792 bits), 99 bytes captured (792 bits) Ethernet II, Src: 00:00:00_00:00:00 (00:00:00:00:00:00), Dst: 00:00:00_00:00:00 (00:00:00:00:00:00) Internet Protocol Version 4, Src: 192.147.130.166, Dst: 0.1.0.195 Transmission Control Protocol, Src Port: 443, Dst Port: 18624, Seq: 5101, Ack: 644, Len: 45 Transport Layer Security TLSv1.2 Record Layer: Handshake Protocol: Encrypted Handshake Message Content Type: Handshake (22) Version: TLS 1.2 (0x0303) Length: 40 Handshake Protocol: Encrypted Handshake Message No. Time Source Destination Protocol Length Info 21 14:09:09.850882 0.1.0.195 192.147.130.166 TCP 54 18624 → 443 [ACK] Seq=644 Ack=5146 Win=65535 Len=0 Frame 21: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: 00:00:00_00:00:00 (00:00:00:00:00:00), Dst: 00:00:00_00:00:00 (00:00:00:00:00:00) Internet Protocol Version 4, Src: 0.1.0.195, Dst: 192.147.130.166 Transmission Control Protocol, Src Port: 18624, Dst Port: 443, Seq: 644, Ack: 5146, Len: 0 No. Time Source Destination Protocol Length Info 22 14:09:09.853046 0.1.0.195 192.147.130.166 TLSv1.2 379 Application Data Frame 22: 379 bytes on wire (3032 bits), 379 bytes captured (3032 bits) Ethernet II, Src: 00:00:00_00:00:00 (00:00:00:00:00:00), Dst: 00:00:00_00:00:00 (00:00:00:00:00:00) Internet Protocol Version 4, Src: 0.1.0.195, Dst: 192.147.130.166 Transmission Control Protocol, Src Port: 18624, Dst Port: 443, Seq: 644, Ack: 5146, Len: 325 Transport Layer Security TLSv1.2 Record Layer: Application Data Protocol: Hypertext Transfer Protocol Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 320 Encrypted Application Data: 0000000000000001994d95e32cb7032dd20e3aef66fb01e47ba39b3172b8f13827c910bb… [Application Data Protocol: Hypertext Transfer Protocol] No. Time Source Destination Protocol Length Info 23 14:09:09.853046 192.147.130.166 0.1.0.195 TCP 54 443 → 18624 [ACK] Seq=5146 Ack=969 Win=65535 Len=0 Frame 23: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: 00:00:00_00:00:00 (00:00:00:00:00:00), Dst: 00:00:00_00:00:00 (00:00:00:00:00:00) Internet Protocol Version 4, Src: 192.147.130.166, Dst: 0.1.0.195 Transmission Control Protocol, Src Port: 443, Dst Port: 18624, Seq: 5146, Ack: 969, Len: 0 No. Time Source Destination Protocol Length Info 24 14:09:09.853142 0.1.0.195 192.147.130.166 TLSv1.2 464 Application Data Frame 24: 464 bytes on wire (3712 bits), 464 bytes captured (3712 bits) Ethernet II, Src: 00:00:00_00:00:00 (00:00:00:00:00:00), Dst: 00:00:00_00:00:00 (00:00:00:00:00:00) Internet Protocol Version 4, Src: 0.1.0.195, Dst: 192.147.130.166 Transmission Control Protocol, Src Port: 18624, Dst Port: 443, Seq: 969, Ack: 5146, Len: 410 Transport Layer Security TLSv1.2 Record Layer: Application Data Protocol: Hypertext Transfer Protocol Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 405 Encrypted Application Data: 000000000000000295ebb492fcdbeec8a31733de019476b366d08237f9af976ca5fac7a3… [Application Data Protocol: Hypertext Transfer Protocol] No. Time Source Destination Protocol Length Info 25 14:09:09.853142 192.147.130.166 0.1.0.195 TCP 54 443 → 18624 [ACK] Seq=5146 Ack=1379 Win=65535 Len=0 Frame 25: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: 00:00:00_00:00:00 (00:00:00:00:00:00), Dst: 00:00:00_00:00:00 (00:00:00:00:00:00) Internet Protocol Version 4, Src: 192.147.130.166, Dst: 0.1.0.195 Transmission Control Protocol, Src Port: 443, Dst Port: 18624, Seq: 5146, Ack: 1379, Len: 0 No. Time Source Destination Protocol Length Info 26 14:09:10.032487 192.147.130.166 0.1.0.195 TLSv1.2 183 Application Data Frame 26: 183 bytes on wire (1464 bits), 183 bytes captured (1464 bits) Ethernet II, Src: 00:00:00_00:00:00 (00:00:00:00:00:00), Dst: 00:00:00_00:00:00 (00:00:00:00:00:00) Internet Protocol Version 4, Src: 192.147.130.166, Dst: 0.1.0.195 Transmission Control Protocol, Src Port: 443, Dst Port: 18624, Seq: 5146, Ack: 1379, Len: 129 Transport Layer Security TLSv1.2 Record Layer: Application Data Protocol: Hypertext Transfer Protocol Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 124 Encrypted Application Data: 000000000000000175fd6d8e4b1d9a808aa397c5cad18198abbee35d75eeb2a3a7958de7… [Application Data Protocol: Hypertext Transfer Protocol] No. Time Source Destination Protocol Length Info 27 14:09:10.032487 0.1.0.195 192.147.130.166 TCP 54 18624 → 443 [ACK] Seq=1379 Ack=5275 Win=65535 Len=0 Frame 27: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: 00:00:00_00:00:00 (00:00:00:00:00:00), Dst: 00:00:00_00:00:00 (00:00:00:00:00:00) Internet Protocol Version 4, Src: 0.1.0.195, Dst: 192.147.130.166 Transmission Control Protocol, Src Port: 18624, Dst Port: 443, Seq: 1379, Ack: 5275, Len: 0 No. Time Source Destination Protocol Length Info 28 14:09:12.527203 0.1.0.195 3.220.9.154 TCP 54 18643 → 443 [SYN] Seq=0 Win=65535 Len=0 Frame 28: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: 00:00:00_00:00:00 (00:00:00:00:00:00), Dst: 00:00:00_00:00:00 (00:00:00:00:00:00) Internet Protocol Version 4, Src: 0.1.0.195, Dst: 3.220.9.154 Transmission Control Protocol, Src Port: 18643, Dst Port: 443, Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 29 14:09:12.527203 3.220.9.154 0.1.0.195 TCP 54 443 → 18643 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 Frame 29: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: 00:00:00_00:00:00 (00:00:00:00:00:00), Dst: 00:00:00_00:00:00 (00:00:00:00:00:00) Internet Protocol Version 4, Src: 3.220.9.154, Dst: 0.1.0.195 Transmission Control Protocol, Src Port: 443, Dst Port: 18643, Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 30 14:09:12.527203 0.1.0.195 3.220.9.154 TCP 54 18643 → 443 [ACK] Seq=1 Ack=1 Win=65535 Len=0 Frame 30: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: 00:00:00_00:00:00 (00:00:00:00:00:00), Dst: 00:00:00_00:00:00 (00:00:00:00:00:00) Internet Protocol Version 4, Src: 0.1.0.195, Dst: 3.220.9.154 Transmission Control Protocol, Src Port: 18643, Dst Port: 443, Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 31 14:09:12.527932 0.1.0.195 3.220.9.154 TLSv1 571 Client Hello Frame 31: 571 bytes on wire (4568 bits), 571 bytes captured (4568 bits) Ethernet II, Src: 00:00:00_00:00:00 (00:00:00:00:00:00), Dst: 00:00:00_00:00:00 (00:00:00:00:00:00) Internet Protocol Version 4, Src: 0.1.0.195, Dst: 3.220.9.154 Transmission Control Protocol, Src Port: 18643, Dst Port: 443, Seq: 1, Ack: 1, Len: 517 Transport Layer Security TLSv1 Record Layer: Handshake Protocol: Client Hello Content Type: Handshake (22) Version: TLS 1.0 (0x0301) Length: 512 Handshake Protocol: Client Hello Handshake Type: Client Hello (1) Length: 508 Version: TLS 1.2 (0x0303) Random: caa6116ba06161c7229589ae9ebb129c8cce8491ac5718b5ab74e494d6decc83 Session ID Length: 32 Session ID: 70036f8c3877352a72905f0e89069583b1919c545b2c5144ac0a9764dc957aef Cipher Suites Length: 52 Cipher Suites (26 suites) Compression Methods Length: 1 Compression Methods (1 method) Extensions Length: 383 Extension: renegotiation_info (len=1) Extension: server_name (len=30) Extension: extended_master_secret (len=0) Extension: signature_algorithms (len=24) Extension: status_request (len=5) Extension: signed_certificate_timestamp (len=0) Extension: application_layer_protocol_negotiation (len=14) Extension: ec_point_formats (len=2) Extension: key_share (len=38) Extension: psk_key_exchange_modes (len=2) Extension: supported_versions (len=9) Extension: supported_groups (len=10) Extension: padding (len=196) [JA3 Fullstring: 771,4865-4866-4867-49196-49195-49188-49187-49162-49161-52393-49200-49199-49192-49191-49172-49171-52392-157-156-61-60-53-47-49160-49170-10,65281-0-23-13-5-18-16-11-51-45-43-10-21,29-23-24-25,0] [JA3: 6fa3244afc6bb6f9fad207b6b52af26b] No. Time Source Destination Protocol Length Info 32 14:09:12.527932 3.220.9.154 0.1.0.195 TCP 54 443 → 18643 [ACK] Seq=1 Ack=518 Win=65535 Len=0 Frame 32: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: 00:00:00_00:00:00 (00:00:00:00:00:00), Dst: 00:00:00_00:00:00 (00:00:00:00:00:00) Internet Protocol Version 4, Src: 3.220.9.154, Dst: 0.1.0.195 Transmission Control Protocol, Src Port: 443, Dst Port: 18643, Seq: 1, Ack: 518, Len: 0 No. Time Source Destination Protocol Length Info 33 14:09:12.712870 0.1.0.195 3.220.9.154 TCP 54 18643 → 443 [FIN, ACK] Seq=518 Ack=1 Win=65535 Len=0 Frame 33: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: 00:00:00_00:00:00 (00:00:00:00:00:00), Dst: 00:00:00_00:00:00 (00:00:00:00:00:00) Internet Protocol Version 4, Src: 0.1.0.195, Dst: 3.220.9.154 Transmission Control Protocol, Src Port: 18643, Dst Port: 443, Seq: 518, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 34 14:09:12.712870 3.220.9.154 0.1.0.195 TCP 54 443 → 18643 [FIN, ACK] Seq=1 Ack=519 Win=65535 Len=0 Frame 34: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: 00:00:00_00:00:00 (00:00:00:00:00:00), Dst: 00:00:00_00:00:00 (00:00:00:00:00:00) Internet Protocol Version 4, Src: 3.220.9.154, Dst: 0.1.0.195 Transmission Control Protocol, Src Port: 443, Dst Port: 18643, Seq: 1, Ack: 519, Len: 0 No. Time Source Destination Protocol Length Info 35 14:09:12.712870 0.1.0.195 3.220.9.154 TCP 54 18643 → 443 [ACK] Seq=519 Ack=2 Win=65535 Len=0 Frame 35: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: 00:00:00_00:00:00 (00:00:00:00:00:00), Dst: 00:00:00_00:00:00 (00:00:00:00:00:00) Internet Protocol Version 4, Src: 0.1.0.195, Dst: 3.220.9.154 Transmission Control Protocol, Src Port: 18643, Dst Port: 443, Seq: 519, Ack: 2, Len: 0 No. Time Source Destination Protocol Length Info 36 14:09:14.257504 0.1.0.195 192.147.130.166 TCP 54 18624 → 443 [FIN, ACK] Seq=1379 Ack=5275 Win=65535 Len=0 Frame 36: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: 00:00:00_00:00:00 (00:00:00:00:00:00), Dst: 00:00:00_00:00:00 (00:00:00:00:00:00) Internet Protocol Version 4, Src: 0.1.0.195, Dst: 192.147.130.166 Transmission Control Protocol, Src Port: 18624, Dst Port: 443, Seq: 1379, Ack: 5275, Len: 0 No. Time Source Destination Protocol Length Info 37 14:09:14.257504 192.147.130.166 0.1.0.195 TCP 54 443 → 18624 [FIN, ACK] Seq=5275 Ack=1380 Win=65535 Len=0 Frame 37: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: 00:00:00_00:00:00 (00:00:00:00:00:00), Dst: 00:00:00_00:00:00 (00:00:00:00:00:00) Internet Protocol Version 4, Src: 192.147.130.166, Dst: 0.1.0.195 Transmission Control Protocol, Src Port: 443, Dst Port: 18624, Seq: 5275, Ack: 1380, Len: 0 No. Time Source Destination Protocol Length Info 38 14:09:14.257504 0.1.0.195 192.147.130.166 TCP 54 18624 → 443 [ACK] Seq=1380 Ack=5276 Win=65535 Len=0 Frame 38: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: 00:00:00_00:00:00 (00:00:00:00:00:00), Dst: 00:00:00_00:00:00 (00:00:00:00:00:00) Internet Protocol Version 4, Src: 0.1.0.195, Dst: 192.147.130.166 Transmission Control Protocol, Src Port: 18624, Dst Port: 443, Seq: 1380, Ack: 5276, Len: 0