Edit tour

Windows Analysis Report
http://review-page-violation-issue-meta-center.vercel.app/

Overview

General Information

Sample URL:	http://review-page-violation-issue-meta-center.vercel.app/
Analysis ID:	1466497
Infos:

Detection

Score:	72
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Phishing site detected (based on favicon image match)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4856 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5972 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2224 --field-trial-handle=2180,i,14074570221467818592,8360864355931828750,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6828 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4424 --field-trial-handle=2180,i,14074570221467818592,8360864355931828750,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6616 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://review-page-violation-issue-meta-center.vercel.app/" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://review-page-violation-issue-meta-center.vercel.app/	Avira URL Cloud: detection malicious, Label: phishing
Source: http://review-page-violation-issue-meta-center.vercel.app/	SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Antivirus detection for URL or domain

Source: https://review-page-violation-issue-meta-center.vercel.app/favicon.ico	Avira URL Cloud: Label: phishing
Source: https://review-page-violation-issue-xi.vercel.app/index-user.css	Avira URL Cloud: Label: phishing
Source: https://verified-badge.surge.sh/static/media/fbVideo.png.1fd476160a3ed7a2f565.png	Avira URL Cloud: Label: phishing

Phishing

AI detected phishing page

Source: https://review-page-violation-issue-xi.vercel.app

LLM: Score: 9 brands: Facebook Reasons: The URL 'https://review-page-violation-issue-xi.vercel.app' is highly suspicious as it does not match the legitimate domain name 'facebook.com' associated with the Facebook brand. The page prominently displays a login form requesting sensitive information (c_user and xs), which is a common tactic used in phishing attacks. The page also uses social engineering techniques by claiming there is a 'Page Violation' to create a sense of urgency and trick users into providing their credentials. Additionally, the domain name is hosted on 'vercel.app', which is not associated with Facebook. There is no CAPTCHA present, which is often used on legitimate sites to prevent automated attacks. Based on these factors, it is highly likely that this site is a phishing site. DOM: 1.1.pages.csv

Phishing site detected (based on favicon image match)

Source: https://review-page-violation-issue-xi.vercel.app/form.html

Matcher: Template: facebook matched with high similarity

Source: https://review-page-violation-issue-meta-center.vercel.app/	HTTP Parser: No favicon
Source: https://cdn.glitch.global/07e008b6-db29-44ab-8f97-cf6860d16bfe/detailed%20video.mp4?v=1719424079780	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 23.211.8.90:443 -> 192.168.2.7:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.211.8.90:443 -> 192.168.2.7:49714 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.8.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.8.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.8.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.8.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.8.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.8.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.8.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.8.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.8.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.8.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.8.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.8.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.8.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.8.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.8.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.8.90
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.8.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.8.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.8.90
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: review-page-violation-issue-meta-center.vercel.appConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: review-page-violation-issue-meta-center.vercel.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://review-page-violation-issue-meta-center.vercel.app/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /form.html HTTP/1.1Host: review-page-violation-issue-xi.vercel.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://review-page-violation-issue-meta-center.vercel.app/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index-user.css HTTP/1.1Host: review-page-violation-issue-xi.vercel.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://review-page-violation-issue-xi.vercel.app/form.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /static/media/fbVideo.png.1fd476160a3ed7a2f565.png HTTP/1.1Host: verified-badge.surge.shConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://review-page-violation-issue-xi.vercel.app/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET 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
Source: global traffic	HTTP traffic detected: GET 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
Source: global traffic	HTTP traffic detected: GET /wikipedia/commons/6/6c/Facebook_Logo_2023.png HTTP/1.1Host: upload.wikimedia.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://review-page-violation-issue-xi.vercel.app/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/media/fbVideo.png.1fd476160a3ed7a2f565.png HTTP/1.1Host: verified-badge.surge.shConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wikipedia/commons/6/6c/Facebook_Logo_2023.png HTTP/1.1Host: upload.wikimedia.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: review-page-violation-issue-meta-center.vercel.appConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: review-page-violation-issue-meta-center.vercel.app
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: review-page-violation-issue-xi.vercel.app
Source: global traffic	DNS traffic detected: DNS query: time.windows.com
Source: global traffic	DNS traffic detected: DNS query: cdn.glitch.global
Source: global traffic	DNS traffic detected: DNS query: verified-badge.surge.sh
Source: global traffic	DNS traffic detected: DNS query: upload.wikimedia.org

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: public, max-age=0, must-revalidateContent-Length: 39Content-Type: text/plain; charset=utf-8Date: Tue, 02 Jul 2024 22:40:28 GMTServer: VercelStrict-Transport-Security: max-age=63072000; includeSubDomains; preloadX-Vercel-Error: NOT_FOUNDX-Vercel-Id: iad1::6595n-1719960028877-ede2e134a771Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: public, max-age=0, must-revalidateContent-Length: 39Content-Type: text/plain; charset=utf-8Date: Tue, 02 Jul 2024 22:40:36 GMTServer: VercelStrict-Transport-Security: max-age=63072000; includeSubDomains; preloadX-Vercel-Error: NOT_FOUNDX-Vercel-Id: iad1::rrb99-1719960036294-2e6b462ce874Connection: close

Source: chromecache_75.2.dr	String found in binary or memory: http://www.apple.com/DTDs/PropertyList-1.0.dtd
Source: chromecache_68.2.dr	String found in binary or memory: https://api.web3forms.com/submit
Source: chromecache_71.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=935729
Source: chromecache_71.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=999088
Source: chromecache_71.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=195016)
Source: chromecache_71.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=201297)
Source: chromecache_71.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=190655)
Source: chromecache_68.2.dr	String found in binary or memory: https://cdn.glitch.global/07e008b6-db29-44ab-8f97-cf6860d16bfe/detailed%20video.mp4?v=1719424079780
Source: chromecache_68.2.dr	String found in binary or memory: https://cdn.glitch.global/38680663-fd6c-4cfc-921a-6d69fd66649d/images-removebg-preview.png?v=1704368
Source: chromecache_71.2.dr	String found in binary or memory: https://github.com/jensimmons/cssremedy/issues/14#issuecomment-634934210)
Source: chromecache_71.2.dr	String found in binary or memory: https://github.com/mozdevs/cssremedy/issues/14)
Source: chromecache_71.2.dr	String found in binary or memory: https://github.com/mozdevs/cssremedy/issues/4)
Source: chromecache_71.2.dr	String found in binary or memory: https://github.com/mozilla/gecko-dev/blob/2f9eacd9d3d995c937b4251a5557d95d494c9be1/layout/style/res/
Source: chromecache_71.2.dr	String found in binary or memory: https://github.com/tailwindcss/tailwindcss/pull/116)
Source: chromecache_71.2.dr	String found in binary or memory: https://github.com/tailwindlabs/tailwindcss/issues/3300)
Source: chromecache_80.2.dr	String found in binary or memory: https://review-page-violation-issue-xi.vercel.app/form.html
Source: chromecache_71.2.dr	String found in binary or memory: https://tailwindcss.com
Source: chromecache_68.2.dr	String found in binary or memory: https://transparency.meta.com/en-gb/policies/community-standards/
Source: chromecache_68.2.dr	String found in binary or memory: https://upload.wikimedia.org/wikipedia/commons/6/6c/Facebook_Logo_2023.png
Source: chromecache_68.2.dr	String found in binary or memory: https://verified-badge.surge.sh/static/media/fbVideo.png.1fd476160a3ed7a2f565.png

Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443

Source: unknown	HTTPS traffic detected: 23.211.8.90:443 -> 192.168.2.7:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.211.8.90:443 -> 192.168.2.7:49714 version: TLS 1.2

Source: classification engine

Classification label: mal72.phis.win@21/53@25/9

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2224 --field-trial-handle=2180,i,14074570221467818592,8360864355931828750,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://review-page-violation-issue-meta-center.vercel.app/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4424 --field-trial-handle=2180,i,14074570221467818592,8360864355931828750,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2224 --field-trial-handle=2180,i,14074570221467818592,8360864355931828750,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4424 --field-trial-handle=2180,i,14074570221467818592,8360864355931828750,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://review-page-violation-issue-meta-center.vercel.app/	100%	Avira URL Cloud	phishing
http://review-page-violation-issue-meta-center.vercel.app/	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Source	Detection	Scanner	Label
https://upload.wikimedia.org/wikipedia/commons/6/6c/Facebook_Logo_2023.png	0%	Avira URL Cloud	safe
https://github.com/jensimmons/cssremedy/issues/14#issuecomment-634934210)	0%	Avira URL Cloud	safe
https://review-page-violation-issue-meta-center.vercel.app/favicon.ico	100%	Avira URL Cloud	phishing
https://transparency.meta.com/en-gb/policies/community-standards/	0%	Avira URL Cloud	safe
https://github.com/mozdevs/cssremedy/issues/4)	0%	Avira URL Cloud	safe
https://github.com/tailwindlabs/tailwindcss/issues/3300)	0%	Avira URL Cloud	safe
https://github.com/mozdevs/cssremedy/issues/14)	0%	Avira URL Cloud	safe
https://review-page-violation-issue-xi.vercel.app/index-user.css	100%	Avira URL Cloud	phishing
https://github.com/tailwindcss/tailwindcss/pull/116)	0%	Avira URL Cloud	safe
https://tailwindcss.com	0%	Avira URL Cloud	safe
https://cdn.glitch.global/38680663-fd6c-4cfc-921a-6d69fd66649d/images-removebg-preview.png?v=1704368	0%	Avira URL Cloud	safe
https://github.com/mozilla/gecko-dev/blob/2f9eacd9d3d995c937b4251a5557d95d494c9be1/layout/style/res/	0%	Avira URL Cloud	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=935729	0%	Avira URL Cloud	safe
https://bugs.webkit.org/show_bug.cgi?id=201297)	0%	Avira URL Cloud	safe
https://verified-badge.surge.sh/static/media/fbVideo.png.1fd476160a3ed7a2f565.png	100%	Avira URL Cloud	phishing
https://bugs.chromium.org/p/chromium/issues/detail?id=999088	0%	Avira URL Cloud	safe
https://bugs.webkit.org/show_bug.cgi?id=195016)	0%	Avira URL Cloud	safe
https://api.web3forms.com/submit	0%	Avira URL Cloud	safe
https://bugzilla.mozilla.org/show_bug.cgi?id=190655)	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
verified-badge.surge.sh	138.197.235.123	true	false	unknown
www.google.com	142.250.186.164	true	false	unknown
review-page-violation-issue-xi.vercel.app	76.76.21.123	true	true	unknown
review-page-violation-issue-meta-center.vercel.app	76.76.21.93	true	false	unknown
upload.wikimedia.org	185.15.59.240	true	false	unknown
time.windows.com	unknown	unknown	false	unknown
cdn.glitch.global	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://review-page-violation-issue-meta-center.vercel.app/favicon.ico	false	Avira URL Cloud: phishing	unknown
https://upload.wikimedia.org/wikipedia/commons/6/6c/Facebook_Logo_2023.png	false	Avira URL Cloud: safe	unknown
https://cdn.glitch.global/07e008b6-db29-44ab-8f97-cf6860d16bfe/detailed%20video.mp4?v=1719424079780	false		unknown
https://review-page-violation-issue-xi.vercel.app/index-user.css	true	Avira URL Cloud: phishing	unknown
https://review-page-violation-issue-meta-center.vercel.app/	false		unknown
https://review-page-violation-issue-xi.vercel.app/form.html	true		unknown
http://review-page-violation-issue-meta-center.vercel.app/	true		unknown
https://verified-badge.surge.sh/static/media/fbVideo.png.1fd476160a3ed7a2f565.png	false	Avira URL Cloud: phishing	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://github.com/jensimmons/cssremedy/issues/14#issuecomment-634934210)	chromecache_71.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/tailwindlabs/tailwindcss/issues/3300)	chromecache_71.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/mozdevs/cssremedy/issues/4)	chromecache_71.2.dr	false	Avira URL Cloud: safe	unknown
https://tailwindcss.com	chromecache_71.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/tailwindcss/tailwindcss/pull/116)	chromecache_71.2.dr	false	Avira URL Cloud: safe	unknown
https://transparency.meta.com/en-gb/policies/community-standards/	chromecache_68.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/mozdevs/cssremedy/issues/14)	chromecache_71.2.dr	false	Avira URL Cloud: safe	unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=935729	chromecache_71.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.glitch.global/38680663-fd6c-4cfc-921a-6d69fd66649d/images-removebg-preview.png?v=1704368	chromecache_68.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/mozilla/gecko-dev/blob/2f9eacd9d3d995c937b4251a5557d95d494c9be1/layout/style/res/	chromecache_71.2.dr	false	Avira URL Cloud: safe	unknown
https://api.web3forms.com/submit	chromecache_68.2.dr	false	Avira URL Cloud: safe	unknown
https://bugs.webkit.org/show_bug.cgi?id=201297)	chromecache_71.2.dr	false	Avira URL Cloud: safe	unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=999088	chromecache_71.2.dr	false	Avira URL Cloud: safe	unknown
https://bugs.webkit.org/show_bug.cgi?id=195016)	chromecache_71.2.dr	false	Avira URL Cloud: safe	unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=190655)	chromecache_71.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
76.76.21.123	review-page-violation-issue-xi.vercel.app	United States	16509	AMAZON-02US	true
138.197.235.123	verified-badge.surge.sh	United States	14061	DIGITALOCEAN-ASNUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
185.15.59.240	upload.wikimedia.org	Netherlands	14907	WIKIMEDIAUS	false
142.250.186.164	www.google.com	United States	15169	GOOGLEUS	false
76.76.21.93	review-page-violation-issue-meta-center.vercel.app	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.7
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1466497
Start date and time:	2024-07-03 00:39:31 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 19s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://review-page-violation-issue-meta-center.vercel.app/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	19
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal72.phis.win@21/53@25/9
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://cdn.glitch.global/07e008b6-db29-44ab-8f97-cf6860d16bfe/detailed%20video.mp4?v=1719424079780

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, SIHClient.exe, SgrmBroker.exe, MoUsoCoreWorker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.163, 172.217.18.14, 64.233.167.84, 34.104.35.123, 20.101.57.9, 216.58.212.138, 142.250.74.202, 216.58.206.74, 142.250.186.138, 142.250.186.42, 142.250.186.74, 172.217.23.106, 172.217.16.202, 142.250.184.234, 142.250.185.106, 142.250.185.74, 142.250.181.234, 142.250.186.106, 172.217.18.10, 172.217.18.106, 142.250.184.202, 151.101.2.132, 151.101.66.132, 151.101.130.132, 151.101.194.132, 13.85.23.86, 93.184.221.240, 20.242.39.171, 20.166.126.56, 142.250.186.99
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, j.sni.global.fastly.net, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, twc.trafficmanager.net, wu.ec.azureedge.net, clientservices.googleapis.com, ctldl.windowsupdate.com, wu.azureedge.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, clients.l.google.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: http://review-page-violation-issue-meta-center.vercel.app/

Input	Output
URL: https://review-page-violation-issue-xi.vercel.app/form.html Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": true,"captcha": false,"reasons": ["The text creates a sense of urgency by stating that there has been unusual activity on the user's page and their access has been limited.","The text also asks the user to provide necessary information to submit an appeal, which could be used to gain sensitive information."]}
Title: Meta Facebook OCR: facebook Q How Can We Helo? Meta Help Apply Page Violation We have detated unusual activity on your page that violates our terms of use. Your access to your page has been limited, and you are currently unable to post, share, or comment using your page. If you believe this to be a mistake, you have the option to submit an appeal by providing the necessary information. Detailed Video Information Please be sure to provide the requested information below. c user Please make sure account not to log out from your computer or laptop until you have received a verification email. META+? 2024 About AdChoices Terms and policies Privacy Policy Create ad Cookies Carees Create Page
URL: https://review-page-violation-issue-xi.vercel.app Model: gpt-4o	```json{ "phishing_score": 9, "brands": "Facebook", "phishing": true, "suspicious_domain": true, "has_prominent_loginform": true, "has_captcha": false, "setechniques": true, "has_suspicious_link": true, "legitmate_domain": "facebook.com", "reasons": "The URL 'https://review-page-violation-issue-xi.vercel.app' is highly suspicious as it does not match the legitimate domain name 'facebook.com' associated with the Facebook brand. The page prominently displays a login form requesting sensitive information (c_user and xs), which is a common tactic used in phishing attacks. The page also uses social engineering techniques by claiming there is a 'Page Violation' to create a sense of urgency and trick users into providing their credentials. Additionally, the domain name is hosted on 'vercel.app', which is not associated with Facebook. There is no CAPTCHA present, which is often used on legitimate sites to prevent automated attacks. Based on these factors, it is highly likely that this site is a phishing site."}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.91015303303765
Encrypted:	false
SSDEEP:	24576:rJw5RvhO0uyf9APP4MpG7VwKLEKbUbIg+BT:GXI0HJM0VwYYETV
MD5:	7F439D8C7B708AEF67BA7912B3D91F14
SHA1:	E944527D04E8EC74283E1E2C7008F57B774E9CEA
SHA-256:	8326FBB48FFCAC4E7FFFFC020E2E52F6F558E990ACEBDE4C65C4019A0F295E95
SHA-512:	175BBA4144CCB56B24EC4D4169028330883AF65CD3125C418822E563F66CFC61ABE73C7DA2DE5CE3F5B6F3011F95D7423C0C140FA535B1500A4FA5E3FBA8D655
Malicious:	false
Reputation:	low
URL:	https://cdn.glitch.global/07e008b6-db29-44ab-8f97-cf6860d16bfe/detailed%20video.mp4?v=1719424079780:2f7ae1b0270210:c
Preview:	..................................................................................................................................................)iiiiix!.E..P.F...ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ]................................................................................................................................................................................................................................................................................)iiiix....a.......6/N.....G.!%.GS.C..1!.e......qi-`..D.H.....R...G.."(.VO..\|...8....mS?./>a.!...z._1..F'...)B.....B...O..)..T.^.?_..d..>B{j.....7.y.k...8...3O.5..+.Qd\...h......$&}.z...N../.Gy........W..rn-.U.Z...4J..y...,...c/.`...J.a2.X...O.....>QO.......m....)....u-.+..}h...}N...4..

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2084 x 2084, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	54771
Entropy (8bit):	6.914686028286603
Encrypted:	false
SSDEEP:	1536:KtEYAEL5KENqJ9jR8Ho6l7tLxoiSyJcI/UgO:uuxEY9jROl7tLxoW9lO
MD5:	E4DA23704F27C9DF07E6C21A13E28BFD
SHA1:	AF6F06778B34A6B7844168F257FFF50611BC7DD9
SHA-256:	2ADFD474D91FD20C51084309ED000C1AE6CC7F5F70AF14D375930F5A71301308
SHA-512:	D42B18C6626354154EBED9AE3C0938E6FBCDB39BC59F1E4B6B2DA22E51EA84EC819B30DA7784EFE53CB6818E6884AD39F868AF572710E6B00E9BCDBF09C63F85
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...$...$.....h,7.....pHYs...#...#.x.?v.. .IDATx....jeY.......`...L...26.Y......P?.U..0UO..OP......R1......`c.F....n..m......[.7T..}.......(.+k/A.....b6......]).N......_z.....7.ULV....... ....V$.{...^D.....}3...gB...................p.;1...........-{..N.p...........C....@........w#.A..t7hX...J....{79...@.......?...c...-..k.#.........(l....V.$.........7.,..I..7.'$...`......6N.....J..Q`pP~.........M.........VI........!2...4g....t.e....\|L...&....x.A........._m6..Y........>E....0p)....7......T.pUW.M...... ...`..Y..-.;...-.....N.0.]..........=!:.:.. V.....A...@...!4X..D.@_].D.W..B]........$.....m....v..`.lT.....B]........$...lP.....4.n.................!H...X..?.t <.X....6..... ...`.R...{N-.t.y..n7\..\|......$H...x.rn.6:h~.....p..I......'.$...\|A.zp{j.v.s.....6........\|. ...`.......7.....".......?.$.......`G\|...].nQ.)...C&H........6L...... ....c......h..;......>.$......<:8X..m..t..H.. .....$........v......s.B.S...@W......*..n......G.w.

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 466 x 275, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	43494
Entropy (8bit):	7.983988849147233
Encrypted:	false
SSDEEP:	768:4ZQy04PNbubfzzvgl+lzsrFDdJkauKIpQtb+/swsPnxsgaDtlhlMBl24YoC:qQ341CLfvLV2xkvKcQtb+/vsPxHMfhlF
MD5:	F530BCADF85C359AC2472FF403A5AF4D
SHA1:	106DEDE0B761C9C3C8CE43BBE4D525A065C50FAF
SHA-256:	EE8F03C7BC16DD1848838907E76672FE2043F2EFD7B3124C50FBD7E1CDF1A2BD
SHA-512:	0E2CD75B9355EF7D01E5B0727EFCB57CA34B396644152525B381B4F83619D9177B0647975DC069B5F4E1936BF6C119CBE696999EB469DEF83EEA71E90955F7FC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................p... cHRM..z&..............u0...`..:....p..Q<....bKGD..............IDATx.....dG.&.}.j..s.8.N .G&n..:PGWu....pg)........_.......B.rwvzzv....@.....8.x..T.........@!......#....;...T?...W....=z..........G..Z..n..=z.+z..G..........7.=z..q...n..=z.+z..G..........7.=z..q...n..=z.+z..G..........7.=z..q...n..=z.+z..G..........7.=z..q...n..=z.+z..G..........7.=z..q...n..=z.+z..G..........7.=z..q...n..=z.+z..G..........7.=z..q...n..=z.+z..G..........7.=z..q...n..=z.+z..G..........7.=z..q...n..=z.+z..G..........7.=z..q...n..=z.+z..G..........7.=z..q...n..=z.+z..G..........7.=z..q...n..=z.+z..G..........7.=z..q...n..=z.+z..G..........7.=z..q...n..=z.+z..G..........7.=z..q...n..=z.+z..G......>....p.u^I.v\|;..{....s=z..q......#....3...w..v{....X.{.=...G.v..........5.q?.{...v{.............k.G.......'....0..k..H.~^D.=L................(..Yc.t.5.t...................'..Y$.}?..u`......3:..f6?l..

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (35922)
Category:	downloaded
Size (bytes):	68737
Entropy (8bit):	5.744914002179128
Encrypted:	false
SSDEEP:	1536:PIRB1q6LDjOusjwdGfsxzn6t37peBZ0iWFjnAPZgNMu3:PI9q6LWuRim6JEBCiWFQKx
MD5:	752D850FD3237368955E1283E534851C
SHA1:	A89D26F39D4A5B1DA104FAF06AC317FF36DB4980
SHA-256:	6E1D365F9AD8981B173733EB030927D77C27EE77F773958A4A839C13A5F09F45
SHA-512:	C8A50C58D741F015E2371DB8E67D845D449EB3FA81142205CE2DC06740E9B6E40F2723D63394A6707C4FF92BF0B8B0E6175D60AF8115FD0548C1EAE10449265C
Malicious:	false
Reputation:	low
URL:	https://review-page-violation-issue-xi.vercel.app/form.html
Preview:	<!doctype html>.<html>. <head>. <link rel="icon" href="https://upload.wikimedia.org/wikipedia/commons/6/6c/Facebook_Logo_2023.png" type="image/png"/>. <meta charset="UTF-8">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <link href="index-user.css" rel="stylesheet">. <link rel="shortcut icon" href="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

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	39
Entropy (8bit):	4.31426624499232
Encrypted:	false
SSDEEP:	3:ErAbcBxYAFDJvzqxgl:1wBxYA7vzqxg
MD5:	D4AC7F1BBA70BA87C56E6D93092B7CCA
SHA1:	96492A95A7F9153EED58A3598C4CCE56EDC6F8D1
SHA-256:	91218093A08027E8F69C8051F9DEEF1FE6C22B278B3F6BDF761E7587CB272774
SHA-512:	AFDE5B08290C83B95037CACE1B4625457690C824E21615A01413CE8A1040F8C86CD6ABD873DDD57D31C053F835C0F05EB5CDA2B102A17EF558240E73A1AFD1F4
Malicious:	false
Reputation:	low
URL:	https://review-page-violation-issue-meta-center.vercel.app/favicon.ico
Preview:	The page could not be found..NOT_FOUND.

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.957989383012408
Encrypted:	false
SSDEEP:	24576:HApUJLNkT+5V5jfVAOr3JbLsM9T7UMzmGz5CcPlRBh:gpGNkChjCi3JHsKIQmTcPlh
MD5:	7284B4814D17C4DE764F59B5036A36FE
SHA1:	914ED34C72EC3168E7FBD5A274BE2E9B543BDB2B
SHA-256:	EEAB7D92590A957C5305B9CA789363FFACA1545923C688004B5CFBB38000EC2C
SHA-512:	7CA2A11AE46BD926F0F26014D109A48FFA728007BB5BF88D6E7069D8E9D42C476FB6EBD00249419136C7D3A9BBCDE8702E95547E29EDC933B7DF7A3336A04F54
Malicious:	false
Reputation:	low
URL:	https://cdn.glitch.global/07e008b6-db29-44ab-8f97-cf6860d16bfe/detailed%20video.mp4?v=1719424079780:2f7ae1b0270210:a
Preview:	..R.2..G0)...o..@.q........_...T.:S<'C.F..}p..cUf..W......u.BR.a.,r..iz.:.K..v..M...}....f2..i!.i.zqNmM.v.\j.._...6._N.>`.[N"Ej/..[..f.e..`;..0E_.[..~p..8....I.;.A7....g+...9).o....ka.0..W.-...0....Z..<.`...S.[V.C.......)Z......G..G...d..~............Z .lw=.R.U,8..r.).:>W+.;K.a.~a.H............1F.{@C.....j..Fi..Y1_.-@N.`w.......{.d#...5F.I... :.a.V.U.q0..0.:......Zk....x....6.....&X..........jC.....p..v....j...+'..~..o.....>FA/..X........#...r......u.j.Ey)..}#....`Pd.$...)e..Z.."..[..F...i .n.c.1..{..........WY.....a.wD.`74..b......6-.-,!.....6...s........F..p..S.-.5......0G....K...q..$.......e.R...~.y...n.ir...xcS+~.@...d.U.y4a......L..\|=..u\|..AFk..B....m....=.q.t6.@...._.8..(..@v.2..V.J.......#.....i..E..........&.;.......T....gg:L.a4....d.k.._,.s...3if:".@....Q..../K8+........}.I.5...C..w])K~lT.#;a..7_.u>....{.......'zI.V...J.hmy...l]0.)aT=z.th.y??..V-.8N%l.wD.\......^....c.....8>:..y.............9ZnU..]o;..F.......m.0'.m.t......M

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	28962
Entropy (8bit):	5.086039518984806
Encrypted:	false
SSDEEP:	192:qgu7WX4hPAa0ozoYZ93t3lj9U0115QQZT9iBT9iZ/CMViOFtZ7Zsf5cwdMM6DaVb:EeJcn1j9535QQJ/wOepHRXBFUY9HBm10
MD5:	7616967CBB9D6FB41CC888E53048EC3F
SHA1:	EA21BDA6ABCE5AD82D2BB03EBF00943105D1567F
SHA-256:	51A5BFE2C0863B87AB76777C871FADCD1DD32A0B1485560725814887EB13F325
SHA-512:	C30083A3774964EBB68C9DC7EE7F2DA74F8ACCC1150EE888CF218102553F65450CFBE3EC9518303C2B205381B4A67E4242886006EF245AECB9C144818CAE313F
Malicious:	false
Reputation:	low
URL:	https://review-page-violation-issue-xi.vercel.app/index-user.css
Preview:	/.! tailwindcss v3.3.3 \| MIT License \| https://tailwindcss.com./../.1. Prevent padding and border from affecting element width. (https://github.com/mozdevs/cssremedy/issues/4).2. Allow adding a border to an element by just adding a border-width. (https://github.com/tailwindcss/tailwindcss/pull/116)./..,.::before,.::after {. box-sizing: border-box;. / 1 /. border-width: 0;. / 2 /. border-style: solid;. / 2 /. border-color: #e5e7eb;. / 2 /.}..::before,.::after {. --tw-content: '';.}../.1. Use a consistent sensible line-height in all browsers..2. Prevent adjustments of font size after orientation changes in iOS..3. Use a more readable tab size..4. Use the user's configured `sans` font-family by default..5. Use the user's configured `sans` font-feature-settings by default..6. Use the user's configured `sans` font-variation-settings by default../..html {. line-height: 1.5;. / 1 /. -webkit-text-size-adjust: 100%;. / 2 /. -moz-tab-size: 4;. / 3 */. -o-tab-s

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.885217131989671
Encrypted:	false
SSDEEP:	24576:bJiAl4K5PFEce6Oq64TJgd3SFPSJ10Ms/:bR4K5PFfed3JJ9s/
MD5:	D9DB92223D0DD204FFF6C50CBBEA155D
SHA1:	241E13878EDAB084AF34DBD36BEDC9D40419FFC8
SHA-256:	F6E3294410AB70EBF6E49748B53C1C5CDCCD1A8467A44D38EBAFAAD3B43F9F39
SHA-512:	91A1574F13B85B4679255B284394A0707FBC504F8F34E3C50B9DB2E150844732631745C38545F83A90C976D3C0F7045B0F9F02704A529F436A4F56A4483CCE02
Malicious:	false
Reputation:	low
URL:	https://cdn.glitch.global/07e008b6-db29-44ab-8f97-cf6860d16bfe/detailed%20video.mp4?v=1719424079780:2f7ae1b0270210:e
Preview:	.X....D..."..P4G..<..n.x.Z\|\|m{.%.^..:;.k......a..H...G.B...M...R.C.g+.[d-_....E....X.-.)..U.~q.7]x......<...\$).u[l.k.7.........^...9.f)xpW..-......:u.uA.9k.....Z.<B........5[}.[..f..~\|._.}.g@4.(Gg.(<..L..S.w.j.o...$...w..H.e+...8.5.S..R.\|y..d.R.a.F...o...>.7......j....4..\e.!\|.X.X....E.\|I(.. GtB.~...@Yc...)......?h.......kP..\.......%.........u..H...y..._...:j. ....r .....Ah.....S.gQr......2b.....{...\|0.g15.L........2...":.h.QvN.fe.lHo.z..f...w..~....k...n...v.-&..-._Fb.I._..........K.f1b..-r....=..k..h..Z.`.A#?.j.....>..M.......=...1B%......]9 t....A...G.5..K-.+.W.x.@..S.....T...D(..X.]<..4...&t.o....$&K...L....%..S..Tn.0.).[.P...C..m.......X.....:.......F.W(UL.@.[....H.........!.....t....X.....1....`....8.p......?..c.;k1......'.:.}.^u..O....U..(....7......'1...`..t....;G_....>!`;v.o.Mp...Q.>..@!+t.J.O6'7..."?...L.?.E...2+..l.7..&j.....o.\...H...~~.+.jL...U...[...K....".2....r....7...>..,_6.H.gn%...f.5.7........WGy...=.8...v\....

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.799976806020776
Encrypted:	false
SSDEEP:	24576:wZIW/tTvX1uE3+q9YZIW/tT7VyFO0nv/+so7Q:wZF/ZvXcjq9YZF/Z7VyFO0nXro7Q
MD5:	4BAA0ADE1B489EB24A83E1585862F9F0
SHA1:	CDEDAEA4EB3B5BED2F411E1EEC3D8D7B8ACEADAB
SHA-256:	F6E405A4F20D7819D423AC0F6CA965ADE98642B984A4ABAF6759AD11B0538CEF
SHA-512:	0EDE80271F41328A6EDE7DF8567A60738C5BA2F6DA41972D611C126CC352DA558B0499DC2F0BC77F95FEAB51484E91B12ED21D435F00C858811253C42F92288B
Malicious:	false
Reputation:	low
URL:	https://cdn.glitch.global/07e008b6-db29-44ab-8f97-cf6860d16bfe/detailed%20video.mp4?v=1719424079780:2f7ae1b0270210:6
Preview:	-.HG........>.s.-........Y..9..S..w...&Fd.)B[.u......oO.za..l..iJ....9K{.i.!N....tr~.Z.e.1G.#...Y:tQp...G.....w].B..........8....bk.......1..b.S7x%.mC..Pe..>09.D~.......ArO%........!...e..BG..Q..(...t.J...q.4....E..d/.....k91...O.=..&X<..o0..\|.Va.3....YYG4.E.>.z..Ee.v..Ls...c.f...t...k....d...'.4...1..Z.<...`%...BI.6^.......cc..D..P.-.i(R.r.3s..mS<V...U.a.....w.?.....v+P..+..4r.6.YT7....^.Cg..`;z.....r..f.I...3".........V.d.%...Y.k....l.T......]. ...n.%&.gF...a..b,.[.lw...?.B..&gV.J...b.4.......<.`..H.9..7.^Zq..ort1I..~.<..I....i..7<.....'`....E}v.Z..@[.=.u...+.[..+....(..E.....`..N..Q.S.=.y.z....._..%X.z....f...P/#...^C..y.........t.*..Z.A......P...uNm.......`....iK.<._...s......../..xj..Y.#>o.O...@..>....0.....g......P0..u...2p..AgZ...i]...9..s.......!...A.r.o.Y.[..=.7..a7......~.h..Wlo...5.!.....^.R.>["d...I..s6+Ld."....n..]E3.C7#X`....3..>ZYZ./.I.5.i.zf.)..3..z...].>........y...E1......e [.F..J$.....c.<......~...I....D.I........

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2084 x 2084, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	54771
Entropy (8bit):	6.914686028286603
Encrypted:	false
SSDEEP:	1536:KtEYAEL5KENqJ9jR8Ho6l7tLxoiSyJcI/UgO:uuxEY9jROl7tLxoW9lO
MD5:	E4DA23704F27C9DF07E6C21A13E28BFD
SHA1:	AF6F06778B34A6B7844168F257FFF50611BC7DD9
SHA-256:	2ADFD474D91FD20C51084309ED000C1AE6CC7F5F70AF14D375930F5A71301308
SHA-512:	D42B18C6626354154EBED9AE3C0938E6FBCDB39BC59F1E4B6B2DA22E51EA84EC819B30DA7784EFE53CB6818E6884AD39F868AF572710E6B00E9BCDBF09C63F85
Malicious:	false
Reputation:	low
URL:	https://upload.wikimedia.org/wikipedia/commons/6/6c/Facebook_Logo_2023.png
Preview:	.PNG........IHDR...$...$.....h,7.....pHYs...#...#.x.?v.. .IDATx....jeY.......`...L...26.Y......P?.U..0UO..OP......R1......`c.F....n..m......[.7T..}.......(.+k/A.....b6......]).N......_z.....7.ULV....... ....V$.{...^D.....}3...gB...................p.;1...........-{..N.p...........C....@........w#.A..t7hX...J....{79...@.......?...c...-..k.#.........(l....V.$.........7.,..I..7.'$...`......6N.....J..Q`pP~.........M.........VI........!2...4g....t.e....\|L...&....x.A........._m6..Y........>E....0p)....7......T.pUW.M...... ...`..Y..-.;...-.....N.0.]..........=!:.:.. V.....A...@...!4X..D.@_].D.W..B]........$.....m....v..`.lT.....B]........$...lP.....4.n.................!H...X..?.t <.X....6..... ...`.R...{N-.t.y..n7\..\|......$H...x.rn.6:h~.....p..I......'.$...\|A.zp{j.v.s.....6........\|. ...`.......7.....".......?.$.......`G\|...].nQ.)...C&H........6L...... ....c......h..;......>.$......<:8X..m..t..H.. .....$........v......s.B.S...@W......*..n......G.w.

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, MP4 v2 [ISO 14496-14]
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.437929345547357
Encrypted:	false
SSDEEP:	24576:IFc2ktmTomTUTsMjSzPqWiuWEaytk4CSrVckILp:Ii2kpOzPqWiP2CkAN
MD5:	DD3247B63BD73BEF167A104CF6B93F90
SHA1:	207290BC761ABC79EFD11EAD3743BFF2DD167296
SHA-256:	DA64764314B16BD5D578F4BE773E7FFF23381537300CDAEF2A5059F6C6A78E69
SHA-512:	BB593DE66EF82A3C3009E60AB9E18AAB5A674144D6A2FCD1836656F9D9D0CF107C61A16A0B17299D41DF4F48DE26418B7B4E2B9668725DBC8DAAEEF736271436
Malicious:	false
Reputation:	low
URL:	https://cdn.glitch.global/07e008b6-db29-44ab-8f97-cf6860d16bfe/detailed%20video.mp4?v=1719424079780:2f7ae1b0270210:0
Preview:	....ftypmp42....mp42...ymoov...lmvhd.....[...[.........................................................@.................................b.trak...\tkhd....c6H.c6H............=................................................@.............b.mdia... mdhd....c6H.c6H...]...y........-hdlr........vide.............VideoHandler..b7minf....vmhd...............$dinf....dref............url ......a.stbl....stsd............avc1.............................H...H.........h264..................................1avcC.d.3....gd.(.+ ..@..-@@@P..>.....@...h.,....stts..................0.ctts........................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	44
Entropy (8bit):	4.615808539574484
Encrypted:	false
SSDEEP:	3:FMJ0KthY51:2JBqP
MD5:	E06C387C193DE08A9E889BAE6C33CAA0
SHA1:	204F9792EAA0B809FECA59F462ED47EE32543830
SHA-256:	3C61E05D4FD5150E07EB08721BF4CC97FCAD7D6FA5E8CC057DD90D5D72CAD160
SHA-512:	EE363BB1EECE23EB40B5D2EA455170A2D85EECBEF566DC7E0F057F226D139DEA9E7C71481C19C0378870534F356014F1F4B8CFCB683CA62D4C5A919D57DB510A
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSFwksXeEW0fEkFhIFDbKjxUASBQ2BMmj6EhAJrgf8syviIJcSBQ1C2rr3?alt=proto
Preview:	ChIKBw2yo8VAGgAKBw2BMmj6GgAKCQoHDULauvcaAA==

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.933956768478917
Encrypted:	false
SSDEEP:	24576:zn1nEGl/Td+EDRNdxZhqd+eLKxbMAIUhmolinQ+q9f:ziGZ5+idp6KdpLintq9f
MD5:	73246004079A58489FAE5EAF2B135370
SHA1:	C2DFB987F7BD899B2015FDCBC5BC997BF2658996
SHA-256:	6BFB6651D02208ED2C8B100234AD6DECCD340DBA766F7691871A00999608DB11
SHA-512:	413BEE468533E1FDDCFEDA058E7BC45ADDC0D60DCA389F9ED78CCBE3D925EA9E3478D6F240CC28002A221AD633A294E439C1D0F0413AF02D7E1EFA4746C91B6E
Malicious:	false
Reputation:	low
URL:	https://cdn.glitch.global/07e008b6-db29-44ab-8f97-cf6860d16bfe/detailed%20video.mp4?v=1719424079780:2f7ae1b0270210:5
Preview:	........rx`..R.t.reG.C..................Tk..?....`..f..[..zQ.g.^...6.c.^X.l..I.F....Z.\...6.k.".==.A...3Fdg...f\|z.t...).S..J..O....Ta..\|.hx.........`........)...T.dp>k.w3.F.{E..X.n0..t3.=e./u. ....t}lA.QK..0.w.V`....y.~U..}.s...P.e ..8...($..q...+...:..Q....Z.\.>}..X. N".G.A..^..h&..js....6.._......o..m.}..\...J..Cg..,W.....:.\|.._Dp.'...9..S.....3]{...>DA..5z..?../.`I.m -.5A.Z....\|E[....o.x-.........J.F..R.Y.9.(.J.J.......\|l...:.....3(.J..g..W..b.'.6 ..y.....=..^....A...2..w<w@q...c.......:.....%'.%....O!.0....>.Z.~\..e!...4..N..)....z~^Q...c..[.M..;.a..^.....)....i...h..5..G]=O...G.t..J...Zfc..w2u[..]m.<..vB.@.....b.7...y`..5]..........Q.C?4..v....P.A..9M.=...6(#......t........'....P...P....)NT......;..........r=G.%.S....t ........+i.....X....E.=W...zvK..*..1o.F....e.Z....e;.....Xa....d6im........".>01.6..o..,.'..)V9....E........4=G.W7....u_.i....7-...?.,P[.r+....i..~.bM.....h.1P...m!.......I.s..#..)...l...c.h.BH...m..U?G.L..Y.z.........ym

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1002
Entropy (8bit):	4.7079452678048765
Encrypted:	false
SSDEEP:	24:xD5rAjYRoHRbAGVDosfVFI2WryQw6PGCq5n86BMRls4NSCL:xlcj9jVxrIGQDeCq5n86B+FNSE
MD5:	54739C1FC056382F73C213572F494BE2
SHA1:	A17F2B21352441563148139FD0CBC501CD1CDE24
SHA-256:	F7E133B9A4B80B9AA3DE9EA7ADE28F7158155EC4E722383E22D0946C9EDFAF14
SHA-512:	1F791114001B523727CDBF32FB9E8A0F085785B05183D8D3921738A247BBCC1C282948233790419BDC82433D7226B9775DC6B0966D6A8590DC4741582980DF86
Malicious:	false
Reputation:	low
URL:	https://review-page-violation-issue-meta-center.vercel.app/
Preview:	<html>.<head>. <title> META BUSSINESS SUIT </title>. <style>. .loader {. border: 5px solid #f3f3f3; /* Light grey /. border-top: 5px solid #3498db; / Light blue /. border-radius: 50%;. width: 50px;. height: 50px;. animation: spin 2s linear infinite;. position: absolute; / Set the position to absolute /. top: 0; / Set the top to 0 /. left: 0; / Set the left to 0 /. right: 0; / Set the right to 0 /. bottom: 0; / Set the bottom to 0 /. margin: auto; / Center the loader */. }.. @keyframes spin {. 0% { transform: rotate(0deg); }. 100% { transform: rotate(360deg); }. }. </style>. <script>. window.onload = function() {. setTimeout(function() {. window.location.href = 'https://review-page-violation-issue-xi.vercel.app/form.html'; // Change to your desired URL. }, 3000); // Change delay as needed. }.</script>.</head>.<body>. <div class="loader"></div>.</body>.</htm

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.928133720099346
Encrypted:	false
SSDEEP:	24576:nr4p46jJAmEVq2gyit6cmX+xNH3i2L/yO5U3fRL+8Aek:rT6j+JgbobX+vS2mLfbk
MD5:	04095854A528A7301A749F6E0CF531BE
SHA1:	E4A12A364365FBD6C30A56A8B495F0F6FE170D12
SHA-256:	14F534F9913B87D6F66E1A71FD09B0D3B418AC5486E01B5FF677568B4D129DA2
SHA-512:	D2D50D8D7273B13FD7CABCCCC119E28713CB4A80349F9F80520D846CBB5A04B6E8DEBE23F8D3810561943F96393B9DE1920A9999B204AE13456AED977EA6EE96
Malicious:	false
Reputation:	low
URL:	https://cdn.glitch.global/07e008b6-db29-44ab-8f97-cf6860d16bfe/detailed%20video.mp4?v=1719424079780:2f7ae1b0270210:9
Preview:	.}.I+;.}..t`.k?.\|.?..G...# ...&....2...,..x.d\|....$M.}...W..-...').i6)...^Of..!..O.b..\z..]...F..2e.%a..Ck...P....6..D...9..&.3.g..0.....9.-.=..#3.>o.oR8-.w..x.h..Y.b.v#;..~......R....:....]H..&_O.=...,.m......d.CKnW.l.j.b...B.x.RT.....#......Kj..35.l.........Q.>.F.ml..mTCG}.;.R..O...>g.K.A......3_...S...r>..._.....<F.6b..*:......k..R.%.nY.,mY_...G..d.Y;.]....S.E.m...Z.F.....{.......[.S...3..H..42.EZ..bP....ufWT.........H........E"...ci......W.t.q....u.$...H......./.'.......``.o.%N\U.....1j.w7.t^.b.wM...>.-..Z!R.!m.0.B.@..&.?u^...D...;...X+........q..Q.w...s._.0.6k!.y.K2N....x.S....\|..O&].MGu42f....g.nT.7f.%.,...ph{..[..}.?y.C..y[.>J..B...%.^.G..Aq.....1gw."..T.W..@..+$..(...p.%L.j....S..8`..g..b.....}.....I.Q...7...e.r.%.....6..<.....L.1.~....&}..N..&...<......m.7Ub.v<B.s........L.....o.).g..(IQF.m.OF.mSF`s\|....Q.."..87.F...I........J.._..oh.Y.9...5...5m.a.Ov.8..b.+1eU2d)~<V<....x........2....>../?..dF.Q..Tv.N9..R...o...IMm._2=.

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.8880178323502355
Encrypted:	false
SSDEEP:	24576:dr7IYM7lUalpR4EbhvjKkkL6NwlFy0hHxEoveUOCjbdrTOCr/T:2YFo5hvHelFBxBveUOCjp3/T
MD5:	606F86AC340B35CBB7577FD009B2DDB7
SHA1:	D8AB0752F1D24AF6E6F473D50589F986194F752A
SHA-256:	E0FCA6C164A380332585D531F124BA33A4A379AF579141D6905BDEDBFB37A3E5
SHA-512:	4C874D45FEBF6A8F9CFE68961A19E1A051B9103982D81AFF5AEB33DC4BD8D586C80ADA16976210DDF9A563C41E7874A121CB67549F88447E6D1D0B8892450679
Malicious:	false
Reputation:	low
URL:	https://cdn.glitch.global/07e008b6-db29-44ab-8f97-cf6860d16bfe/detailed%20video.mp4?v=1719424079780:2f7ae1b0270210:d
Preview:	.?=._...<.f..n.K.s...'....=m.BZ).%b.L..\.....H...."(..I".`/.xW...T..o.b..m..?.g...@..J.1...... ,.D8.:c..A...i..I..[..(`..D<>..V{..M.os.694..r.!\|..J.C.J...-....+q.....iD.~......b..)b..]..DRc.wq.d...i......q..!t.~X.......v....`..:.....-XhX.^A-.."...I.5t.u/6..f......za.'(.....;~LN..Y..9[Vg..RI.0)I9.....-B.o...@h...i.....7...."....k..di.p3357..\|..WC.....uK.\|........J..m..-...;..L.Y.A.[z....'H...5V.P3..y.......y..U..../..N.WL...~X..N.jt.N\|up.~.3/..^$......c.\.Ml..c.q.].......j..8..K.i.....>.w..yGo.G.b.>.h...(B........S<.....H....#fQ...{.&.<.jC.]M_.)=~.@...=,/...05..j.5..~0.Y..{...89......3.;.E7...Q{.XF.p`."Mhy_ ...`...X.ov..]..a..Gc...[ .....3..H....(...7..,...6..-...Fv........%.....!.....\[K..x......5ea..G.....F....N...........[.k...).'....5z..Se7@.Yv..\.D.+6.^U.Q..J...,.o...ph.]...#...@j: ..{AN..rv..<1!..W....Z..hvTZ.>.........;.@ct..........~..z..v..P..i5SJ.....:.S,...P..#.R.....2.r.f\|.w...=5S.wW.u..,#[......c.....,.[Z$Bo.Z.V~=.Y.....K..

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.868281417424992
Encrypted:	false
SSDEEP:	24576:QxcUEPuVE8ObBKWwObvfIgptBqZhs5CUXkolZ/K2ypSFJ1:w7EPu+3bgWwOjf//qZh413bVypUL
MD5:	F522F816E11F5F32037C23DF00A2FAAB
SHA1:	5D6C4B05E25969A463F2A2A2DC1BDC392325D274
SHA-256:	2C0CC4BD0BCBC9EA8390D951ACAD53C253B8B88D28ABF5DED7C9F43620A9F5AD
SHA-512:	293E8E317B3BF592DB1804BDC25EFD32BD34D1010B9EDE26D005953928BB08DF2C879CD7166B0A1526F28403DF526B244BD96B07789FA603CA4A302C7EC706FE
Malicious:	false
Reputation:	low
URL:	https://cdn.glitch.global/07e008b6-db29-44ab-8f97-cf6860d16bfe/detailed%20video.mp4?v=1719424079780:2f7ae1b0270210:4
Preview:	p..Ll_.M.J.E..&.:..}.f......B.k..Z.t.\....I.....@Xc...t..U..........J.,.5....d.1......!...)..5>...)..4D.b...{Q..>.#....l.../2#I...t...o..q.aU9..[..2.c.R#$....N.....S?l>.....e<.......bc.."h0ZNw....N_S:.......m:-(........fK......:G..9-."R.4.Y.z$.2(,d..D.Y..Z.....<.......3...4!...A..6.4.x..2Q5.u..kU.u&...K."...!..y.\#...NyK.D....x..!7f...&FW..Wf...L.c...b.s.&..(.T.9.=......`x.. x.}...l...f....?...Dw$~L.H........WP...d.[.Q...Q...lH......#...<..[q-_.l5 ..CH..q.g....3"..v{....4..,\.C.. ._.>.D..{........l.s0.-cB...}.>...6..x.......#...........j.....r....7z..O.'.~._..x..E..=./.X%..Q..Gyl;..U.)..L..F=.L.F...f.^.....x..W....f.....d\.W...s.....r..Qz..He!.:5...p..:, .....K..d@.-='.X..K...a...d........o;.....Mjo..^...S.}i....u./)>..T..1...!..{.Y.,...l.+&~..m.\|6_...Z.Y...}.:..!m...i..(%/&J...Z....)wx.mR.f.=..U.pC..nL..AH....y....SYIm.......N..Stk6.............+..f...[}\.}ob..0.\|..'.a.F...\.tu........\.Kj;....=b...B}..RR{ C....>....<..,1:x..Y.....

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	39
Entropy (8bit):	4.31426624499232
Encrypted:	false
SSDEEP:	3:ErAbcBxYAFDJvzqxgl:1wBxYA7vzqxg
MD5:	D4AC7F1BBA70BA87C56E6D93092B7CCA
SHA1:	96492A95A7F9153EED58A3598C4CCE56EDC6F8D1
SHA-256:	91218093A08027E8F69C8051F9DEEF1FE6C22B278B3F6BDF761E7587CB272774
SHA-512:	AFDE5B08290C83B95037CACE1B4625457690C824E21615A01413CE8A1040F8C86CD6ABD873DDD57D31C053F835C0F05EB5CDA2B102A17EF558240E73A1AFD1F4
Malicious:	false
Reputation:	low
URL:	https://review-page-violation-issue-xi.vercel.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
Preview:	The page could not be found..NOT_FOUND.

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 466 x 275, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	43494
Entropy (8bit):	7.983988849147233
Encrypted:	false
SSDEEP:	768:4ZQy04PNbubfzzvgl+lzsrFDdJkauKIpQtb+/swsPnxsgaDtlhlMBl24YoC:qQ341CLfvLV2xkvKcQtb+/vsPxHMfhlF
MD5:	F530BCADF85C359AC2472FF403A5AF4D
SHA1:	106DEDE0B761C9C3C8CE43BBE4D525A065C50FAF
SHA-256:	EE8F03C7BC16DD1848838907E76672FE2043F2EFD7B3124C50FBD7E1CDF1A2BD
SHA-512:	0E2CD75B9355EF7D01E5B0727EFCB57CA34B396644152525B381B4F83619D9177B0647975DC069B5F4E1936BF6C119CBE696999EB469DEF83EEA71E90955F7FC
Malicious:	false
Reputation:	low
URL:	https://verified-badge.surge.sh/static/media/fbVideo.png.1fd476160a3ed7a2f565.png
Preview:	.PNG........IHDR................p... cHRM..z&..............u0...`..:....p..Q<....bKGD..............IDATx.....dG.&.}.j..s.8.N .G&n..:PGWu....pg)........_.......B.rwvzzv....@.....8.x..T.........@!......#....;...T?...W....=z..........G..Z..n..=z.+z..G..........7.=z..q...n..=z.+z..G..........7.=z..q...n..=z.+z..G..........7.=z..q...n..=z.+z..G..........7.=z..q...n..=z.+z..G..........7.=z..q...n..=z.+z..G..........7.=z..q...n..=z.+z..G..........7.=z..q...n..=z.+z..G..........7.=z..q...n..=z.+z..G..........7.=z..q...n..=z.+z..G..........7.=z..q...n..=z.+z..G..........7.=z..q...n..=z.+z..G..........7.=z..q...n..=z.+z..G..........7.=z..q...n..=z.+z..G..........7.=z..q...n..=z.+z..G..........7.=z..q...n..=z.+z..G......>....p.u^I.v\|;..{....s=z..q......#....3...w..v{....X.{.=...G.v..........5.q?.{...v{.............k.G.......'....0..k..H.~^D.=L................(..Yc.t.5.t...................'..Y$.}?..u`......3:..f6?l..

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 225 x 224, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	11859
Entropy (8bit):	7.966658978676977
Encrypted:	false
SSDEEP:	192:mJXjqqqA1sbXR8sp3lpFGSPWvsuo7K5cfQ3JCu7LcuDTFepXZO6JFpGDy/G8C143:qqqq2sV8m3PklifQ3su/LepXo6JOSbgS
MD5:	4E51E07483C97F85A2F8EFA893633AC7
SHA1:	F63C4174F2E4C85C6A7AD0EE5F10316EDE74F802
SHA-256:	780218A74810758B68FB25F47896CCC39A8E5FB97A7E1003BC14EB24EAB108C9
SHA-512:	4283AA8D840F103BAAABC294AD3AB2049682F01D52C63023096C85A3268D77D4BA81C0A6E4B5958DCD50B8B7A3122714302D0C2A80E31D1357183A007C0D0801
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................IDATx^.]..M...3f.`&..&..M.)..d(E.-o.....u.x."..p)4#.G.P..e.-J...dj......93sf....u.:g..\|.v..Z.~{......"...D@" ...H.$.....D@" ...H.$.....D@" ...H.$.....D@" ...H.$...c.\.x......D@"....._..q.D@"P:...xk.R.C.....C.C......(W.D.M.@.V(...5...H~t...!.7....5.......eff...\|...-.!..._..)u;.G.....O..]......yw..V..Un.u.....V1.~.......J.@.+[..=..QJ.B.{G..]/.=...~(..}...-.....+.....W.T.,.\....3...G......R.....5j.'...9.+%../(.\|.mz%...1.JE%2z.......><.= .P.e.A...j.A.,.0.OX....=.%.{{.X.....W>." .P.I.....Czt..qX..L.....2~.o..+_.<S.......?.Lo ......&aL..Ja.U..>.=u.\}...\jLV..r...Qh@+....~.oc.j..7T.fj.U%..]I....b..-kX6.2.R.].....%......[DX(.......PR3....?n[.F...a...l.....eW..FN..?...O.^.....zH.O.G..s....S..u.C...E8@W.-V7.z..-..{......X.l...a..i4&+....U.R..Bx...M...s...6..m.......J..m..:wh...=.]c..ic.wXj...N.J.....!.T....J.U..'......-{....v...I....]..b..:w..'.......j.S..*...w....hO.........'.]....J...G..[\|..%pgF....I.

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.926094683479502
Encrypted:	false
SSDEEP:	24576:UosiAsnBGdpauCazyLYQKpPTaemYArHRE+mN5bies0:PsinYddCazy/ITaemTu+wX
MD5:	5AC3FFE8067BD202819C337B6F41C0DF
SHA1:	D33633F650C823F86E027AAA82F84E769CE5850F
SHA-256:	A5F323FFF445CDCDD3DE0F5EC03A6398F29722B21C3538EEBCAAFCC65751DEA5
SHA-512:	5FB6001D8F85359ECBFB12274E7DAC188E9030C209F807293D1BD6809FCE0D28FB50CB52349B7D66C94A66F3EE8714EC1A5FA37B4CFD56E3C1923178AEAA674B
Malicious:	false
Reputation:	low
URL:	https://cdn.glitch.global/07e008b6-db29-44ab-8f97-cf6860d16bfe/detailed%20video.mp4?v=1719424079780:2f7ae1b0270210:8
Preview:	.0...._..bJ....Z....8q........O7...%_x.F.tRK......H...53.9.#......._.\|...=.h3,.E..eN(.M...........f/...G.i.G(>..0.7.t..Ft...0...a../(=u.a.A.......0.d&...............'f7+5...\|A....8p...N..(..L\|..n.f.Y..f....=+h..L.R....SQ.......(.LVO.o.+.m....s6b......$..<r....X..6N9..U3..V\|.....`U,...;H..Ja..}..F..?..}.c98....&@..q))F....n...Z.X-..t?7c.......A.PC....]$......(....}W.....M8_N.....zV.{s.tM......+....a:......bLN....!...<......4.H[OXn..]..ed.)..\|W,.2.........D.d.bW....W..0y>........8.~..Hx5.....4_.?.0.3..h[.....i...;.@.o3...@@..h...R1r.. ...wcX....ce...x..F..o.........~.....\&...@.....H.4.y8.]S.....\......u..xy..9Z37...;.w..d._3.~CI ...f.%..._...V.M/=~..H.r/.......&...^.j.0..tn...}o.i.d:9........{..../..*8.n......3......A@..po.#eYH..C........4.....9....F....../`$.A....j+{....r.....e..&.... j...c.$...9.So.jj.m..[.C:.3.....p.....J.`.K(..EI.S.\|............F.<V.fDo.g.T'.>..2(..dON..xM#g..l...+....{2....9zf......1...#%]j...-....$.pp&..

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 225 x 224, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	11859
Entropy (8bit):	7.966658978676977
Encrypted:	false
SSDEEP:	192:mJXjqqqA1sbXR8sp3lpFGSPWvsuo7K5cfQ3JCu7LcuDTFepXZO6JFpGDy/G8C143:qqqq2sV8m3PklifQ3su/LepXo6JOSbgS
MD5:	4E51E07483C97F85A2F8EFA893633AC7
SHA1:	F63C4174F2E4C85C6A7AD0EE5F10316EDE74F802
SHA-256:	780218A74810758B68FB25F47896CCC39A8E5FB97A7E1003BC14EB24EAB108C9
SHA-512:	4283AA8D840F103BAAABC294AD3AB2049682F01D52C63023096C85A3268D77D4BA81C0A6E4B5958DCD50B8B7A3122714302D0C2A80E31D1357183A007C0D0801
Malicious:	false
Reputation:	low
URL:	https://cdn.glitch.global/38680663-fd6c-4cfc-921a-6d69fd66649d/images-removebg-preview.png?v=1704368326610
Preview:	.PNG........IHDR.....................IDATx^.]..M...3f.`&..&..M.)..d(E.-o.....u.x."..p)4#.G.P..e.-J...dj......93sf....u.:g..\|.v..Z.~{......"...D@" ...H.$.....D@" ...H.$.....D@" ...H.$.....D@" ...H.$...c.\.x......D@"....._..q.D@"P:...xk.R.C.....C.C......(W.D.M.@.V(...5...H~t...!.7....5.......eff...\|...-.!..._..)u;.G.....O..]......yw..V..Un.u.....V1.~.......J.@.+[..=..QJ.B.{G..]/.=...~(..}...-.....+.....W.T.,.\....3...G......R.....5j.'...9.+%../(.\|.mz%...1.JE%2z.......><.= .P.e.A...j.A.,.0.OX....=.%.{{.X.....W>." .P.I.....Czt..qX..L.....2~.o..+_.<S.......?.Lo ......&aL..Ja.U..>.=u.\}...\jLV..r...Qh@+....~.oc.j..7T.fj.U%..]I....b..-kX6.2.R.].....%......[DX(.......PR3....?n[.F...a...l.....eW..FN..?...O.^.....zH.O.G..s....S..u.C...E8@W.-V7.z..-..{......X.l...a..i4&+....U.R..Bx...M...s...6..m.......J..m..:wh...=.]c..ic.wXj...N.J.....!.T....J.U..'......-{....v...I....]..b..:w..'.......j.S..*...w....hO.........'.]....J...G..[\|..%pgF....I.

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.982129848129395
Encrypted:	false
SSDEEP:	24576:hHeles4ecEjV7cuVRxex9fzdNgqZbQUFV9q:5elsecUV/RxeEqJn9q
MD5:	F0044FFDB2DBB3C4ADED0262C8462EC1
SHA1:	B8E6F197CA5C7DFE982579AC0C7E3191D5393517
SHA-256:	E450B34620FF2C0F529B7FBB3749AD0240806EEF9688E8074DFFFAEDDE1717CC
SHA-512:	73F1DAC3973F75F4ECF22761445755B3FDDFCF626CD330C0F25484F2BF34B986A8B7A81CDF62D2EDF426BFB27BC275047B2FC31365C4A977B256CB4471F5F897
Malicious:	false
Reputation:	low
URL:	https://cdn.glitch.global/07e008b6-db29-44ab-8f97-cf6860d16bfe/detailed%20video.mp4?v=1719424079780:2f7ae1b0270210:1
Preview:	,,...c....Ts...}.....d.A.@.2.Xk.s0.....=G..)../.g...../Ly,.....@AYr.&......<.q.+..joY....]9.p....R...S.._Xe".<..!.z.....=.u..[I.6.h[C.MS...=H\|.hFrcc...{.ARK......c..z.t....T.....;.]...Hi:.#........MV..".V...u.n.t....wf..f.Ys.pZ.../.pt.*.J.@U.dt.....0..(...w~...c'.._.....q..7J.9Q"....).n`&.t..p...J._.Ut..?..g8...$...p.Qj..r..b..\.....t....8......0..VdRn2..'"...M^'_...d.bY.$..ey.k.6.......Zr.^.Q......H.L...L.\|`7..L.C..'...`"....K.ZF.m.?.Vw....F..=..d{C..Q+zV....=....z.........^.H=1V7.7K..&.vU.DX........e,V....n...+Z..@.....Mv.q.nB...j8N.....}.......!n.z /3.F7...A.8L....x...f.o....0.9.....J.....M$..?:@q#..c2......_._6.... ....Z.......e\....G%..Y....V............#...`8..]...5..ar.S..`.Mb...<.M4q.E.#y..R.v11~.PL.........)9.t.$....b9..................=..xSB..).i..N.3...^......abw:}..6e..4..j-.J_6..@.A...].. .1.....z.....7....oH.....X..U.G.{...D..{=.f.n.E...+.......kf?..p....^v.NxM.c..._.\|.j.>l.......{..+c.yJq.>.H..C....<..$..eh6....10.P..2....]

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.980051635433582
Encrypted:	false
SSDEEP:	24576:bEv1uDnchACXeVgbUncST4wkiqfQh9bjpp+ZNO7YmrSoclau0dcLO:bq47cCUeVgbcc4qfQhpANOkFocIu0dR
MD5:	DC51B15FE5907CFCA8AB02DB1D7BFC68
SHA1:	922052E3AA790BF3D995EA034DB510F395C1EBCC
SHA-256:	F274CEB8DCEC3984BF15B97F7D2A00A655CB6B55C43F9435D61D8DEA3531E716
SHA-512:	48DBA4FD8741DB4A48CB300242E6528B4C54BE29479E9FC8ABF5E66B9EADD611873621CE472467C9BF961485A4A3C9D2660211AE8504F53F3A40CFF6349252C5
Malicious:	false
Reputation:	low
URL:	https://cdn.glitch.global/07e008b6-db29-44ab-8f97-cf6860d16bfe/detailed%20video.mp4?v=1719424079780:2f7ae1b0270210:3
Preview:	bl...H..=..Q....h.0.~.2...,!}.x%&k@.....K.........O3......d.N-..x...G.\|_.].pGs..i.R$U.&.r1p.U{.q9.....W!..`.W.;Q.{....f.........C0n!...VQP......Uy.p.^_......R.`.d..l.(g..y9...@.e[......ZX....... .........1.x&....N.......~.t(..$.S%...C....31A......'.+...N!....K..G'.....i][....!........x..-...X_.IlK.....'....a...Rb.0......Y..X....II.g....\|.sG;....%.D......$.....:.?.&.z.981.F....`../...Y..K.r..{.....L!V.$.......~qK...'.......PI.....:i.......m....D.L.N...R..s.y.D......~O}.y.?uL..&6f...z./.-....G4.s....D......f.j;...{.v..`l24O....M.mrL.f...hm.?.AC.,..V....u..1.[<.,....^...>...)..j.Z.I..!"....'I..B#.........-.^a.A...-...\.............Kv..P.G.B.V^...!..H)..8).A'I .......0..B.HT.g.=.N.%.[..v.+57.&+..a.i0......].X..zw.F.u..q...U.<..F .f.CO.].. ....\|.f...A..k....e.j..)<b%/..Q...i&.1..\|....~...`.,.....m...4@Z;.W`x.j[..v.....k..=.{..2u.H..\|.7..[..PHG.nb.d:#X.UG...R"R.....v...f...^\|..O...j.J... ;#G.....z.B!%McW.tx?K(.#e.. Q.'...Z..Py...

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.842400042356849
Encrypted:	false
SSDEEP:	24576:zXetmJQ4k6S7/PKv2c1HiLCpedCPt+Gl+Q:zOtyQ4U/PKv0+pBPt+Gl+Q
MD5:	273651951AC9AD3038CCCF2B1D9B8C41
SHA1:	60364D94E0093A2BBC7AC48004C36262BB3FC0F6
SHA-256:	6179B232B1B6CEA7793BA5816D667727E1647AC57C5196FC8A067BEA03441779
SHA-512:	921B03CFC13B26D9CF7BB34567CFA39AF3B3EB1F3ED89621ED00533B11D45C67391B7CFC4B78F365539EFA547D9E90BFFBCB8D46B86313322218A7D079774699
Malicious:	false
Reputation:	low
URL:	https://cdn.glitch.global/07e008b6-db29-44ab-8f97-cf6860d16bfe/detailed%20video.mp4?v=1719424079780:2f7ae1b0270210:7
Preview:	..._.....Kp...P./.6Pq.......}...........Op.....}.Z.5R.=)..A=.O&s.#....k.!..x..Dm.O.C(..Djq.s.\U-.S......z.<..?..m..[.}.6ssf!%3k.7...Lh6..$..>./.s.......3..[.pA..6..Un<..w._.!...../.f.(\|..%.K....a.....t....QG.....X....k..uaI.t.u...........p.A$.%.\G..z)#..N.g.>Q..S\'A...l:1....4Ra.......'....h.(.d.=%=j...ABW.F..n.~/D...B..>..Y.'..L..Q{..p9.+...(.....R`u75.,.p6Q..lZ....'...-..L.fE...N...S.I....sO.[/..4l/...1.f..rt.p....G.\|8...bP(.d.W....{FT-p..-i5......w....\RmJx.!.pR.I.i...!.^X.z...L.m.q.....Y.....D>t=.,....R.JL.(v......m...o.YC".....sO._..k".TC...F....2.Z.:......../I./...>dB..2..X......Z..xk..L.........H.-..6$c..L...2'...:C..Y.OW.G...fnh.C..O.R?......0t&..........D..=.$.,<O.#.T.#.H.8v.>i4.........w@.\|.H.oE..x.....@O..CVR....0.#.....g..T...r..%8..l.G0. ........wM....ZZ..,9.r0\R.XQy.kc..o-.8}+...D\|.R.k....E.5^2_B..!.............8s...]c...m.F.L......tU.;...~..D.].G?..AV..$..L..++D....j..\|.)9.......R8...D....Ur....n.{.t7.}.@.TV...aua).

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.943022167984043
Encrypted:	false
SSDEEP:	24576:pq2QPVUFI0hpjwaPrbUFaeGIf1s8BHCqVUFaeG4:4veNrjR4j1PHC7x
MD5:	B1C79A8E6ABEA922D4A06146FBE1FAC5
SHA1:	B77BDA0D25D6FE43F6605459C7FE213E44EA3AF5
SHA-256:	7AC7A0C37BCE6ACB4A34AE3D998E50EB2001B9C76A836756115CC08D5A51A361
SHA-512:	D6483E5C17E838172085FFF6519BE91F09BBD13E39485FCB7A6E4AD468FA8AD7C34909F40382ABF85963ED7C17E178EAB8DA00DBEC68A2A6BE9CCA96F5F93EB0
Malicious:	false
Reputation:	low
URL:	https://cdn.glitch.global/07e008b6-db29-44ab-8f97-cf6860d16bfe/detailed%20video.mp4?v=1719424079780:2f7ae1b0270210:2
Preview:	].f......#W<1.."}..J0.HP...u.6.6.GP./.U.!..E.\|d..7.....[.BK.g.-.....\|\|a.R..v%\.....i...q....C!.....@t.(b...K....[..^..:..Y".....9s:....z.FH@7..Y....I._&.l.[..s.>.....>A....5.\|.).v.....BL[6.0..6......)Dw#9oQ9.....^i.../...M.I%......F2..xO.1...>4D..H...E%1\|...3.W.8s...:\.c..{....#.:ab..IF.....;...Y......@...]n..i......'...@..)...L.%.A..f.n..U..-U... ...jo.F....W...)[...<.....#..]d.a..w..?f.o..!~.A..........~l......J..0..^.]Q?7~.....3,.:.u....9.V.T#p.5-.r:.`.X.CH.$....cv..F..........<.8...>...{.EY/...'..s.f.,.]tL...qEg..`J5..q....WT'1,..2.......j......A."..?.4EH.(tY....MX.A....{..u.:3.....Fr.ASn@l.....c.....b...l"...U..O..rCz......e...'l....~(.....T....8V....W}..<...X......=...D.)..K.-k_UW..8.i.p.. 9..L.....6D8.e..a.>zS.@.?.L.Y.n....?..B...i.0..f..v`.'#..8.T.......F.i...CV.v20.....6.C.>..(.Z.?e.gS,o...O.....>..=..+L.6~..4..Q$.qK.f.Y..[..d...s{..Uf.........[,...1.nD....).@.HH.....c;.........R..\....UCP./OK....A....DZ.I...;.e...FY.v.n8=.K....

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	44
Entropy (8bit):	4.371379278161679
Encrypted:	false
SSDEEP:	3:HkgWfQOg3kxJ31:FWfQOgwJF
MD5:	DF85724122986C36CF566394A7630EB5
SHA1:	25A66395B2BC1367E52B5C8906D87B3203436DDA
SHA-256:	3805627B2B903BF76A38B44002E6867810B92EBA0DE2EF328B91022641A8B6E4
SHA-512:	494380987E984CA123CC409A518FAA9EC940727A4FCDA2A91E5361026B66CFEE35774326E9536795CC4B7EF31AC8E99F4CD5AF0216DDDED35DEE705B3B920E88
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAmuB_yzK-IglxIFDULauvcSFwksXeEW0fEkFhIFDaIu-EwSBQ2BMmj6?alt=proto
Preview:	CgkKBw1C2rr3GgAKEgoHDaIu+EwaAAoHDYEyaPoaAA==

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.872386582985386
Encrypted:	false
SSDEEP:	24576:xGg+0KPD9oM2cv1Sr92GjfVtuBSmYHEMHYg:xI0KPjxGjaBXMR
MD5:	109C546F61DA4C55D5DD9F9BF4754458
SHA1:	E541337ECB2CD52E72D497EC338BB8BBE6E814DF
SHA-256:	EE4BE29649F5B2EF71BEE46975DCD0044DEA7F6E5B9A985B0781C8E79D1B2123
SHA-512:	F457B72049FB861BED9B1619AC01607A37AFB53655E7620C978556F948259C13337983410576E5CB616A8D33CC75A03513A47AC80C62DAE099969947B2F9F7B0
Malicious:	false
Reputation:	low
URL:	https://cdn.glitch.global/07e008b6-db29-44ab-8f97-cf6860d16bfe/detailed%20video.mp4?v=1719424079780:2f7ae1b0270210:b
Preview:	..9.....4.}...'...0G..)...m...MEL.Gv.......]..e..d......w...k.p./^...1......Hw.k.O.......%V..#Q.+.T......e........:.....D_.^....l7.T..#F.6.....@yG...7 ..]6%M$.x...$y..~..m.0..H...[..RgAW..._..F."..t.6.3J`.}.C..C..c.. ...E.......np..{....1.\.v..._.}..]x..7./.~rt.....B.=$W.''..b.T...{..ucR..,.V.[......'.k.g..B..,.c./kO..j..X:....n..G..g..7[..{.m0..-...(........w:<g..N...sB.OQ......$.........[...".Yf{.AR.._..@.x41..!....p...W=..x.H)'..2.`.:.t-..G....%=JOL....\|.g.iX`..=.t.\.L.[.Y?...z.]s...)..R......W^.Qn.`a..:..$vb......\.e... .....'.Y.V.......'..........&..=...'...K/r..q{..W^<..k`....v\D..FW....V..F....0..@w@!....F.`..".....c.L.T..\;.L..+..T.....H....y.......L...X._9..:..:.=..d.t...oQ?.<o.....g.A...YA...KU....Fz.9.v.7..j..j.I(..A..za.....}>[$..}.".V.?.A>.$g.c.....x..T....b;{k>n......\yn............-.m..vq......G....\q,. ..).8......2..G.Tj.R......u/.........J:j.c...H...HE(id)..O....L.We.B..._..l.%.:U....gN~>.4).P..3.*.h..t.(..X......J.Q tQ!!..\&O

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 3, 2024 00:40:18.292010069 CEST	49671	443	192.168.2.7	204.79.197.203
Jul 3, 2024 00:40:18.604226112 CEST	49671	443	192.168.2.7	204.79.197.203
Jul 3, 2024 00:40:19.213630915 CEST	49671	443	192.168.2.7	204.79.197.203
Jul 3, 2024 00:40:19.354254961 CEST	49674	443	192.168.2.7	104.98.116.138
Jul 3, 2024 00:40:19.354506969 CEST	49675	443	192.168.2.7	104.98.116.138
Jul 3, 2024 00:40:19.479273081 CEST	49672	443	192.168.2.7	104.98.116.138
Jul 3, 2024 00:40:20.416743040 CEST	49671	443	192.168.2.7	204.79.197.203
Jul 3, 2024 00:40:22.838720083 CEST	49671	443	192.168.2.7	204.79.197.203
Jul 3, 2024 00:40:26.731878042 CEST	49704	80	192.168.2.7	76.76.21.93
Jul 3, 2024 00:40:26.732009888 CEST	49705	80	192.168.2.7	76.76.21.93
Jul 3, 2024 00:40:26.738512993 CEST	80	49704	76.76.21.93	192.168.2.7
Jul 3, 2024 00:40:26.738526106 CEST	80	49705	76.76.21.93	192.168.2.7
Jul 3, 2024 00:40:26.738594055 CEST	49704	80	192.168.2.7	76.76.21.93
Jul 3, 2024 00:40:26.738831997 CEST	49705	80	192.168.2.7	76.76.21.93
Jul 3, 2024 00:40:26.738831997 CEST	49705	80	192.168.2.7	76.76.21.93
Jul 3, 2024 00:40:26.745105028 CEST	80	49705	76.76.21.93	192.168.2.7
Jul 3, 2024 00:40:26.838437080 CEST	49677	443	192.168.2.7	20.50.201.200
Jul 3, 2024 00:40:27.215138912 CEST	49677	443	192.168.2.7	20.50.201.200
Jul 3, 2024 00:40:27.229104042 CEST	80	49705	76.76.21.93	192.168.2.7
Jul 3, 2024 00:40:27.229927063 CEST	80	49705	76.76.21.93	192.168.2.7
Jul 3, 2024 00:40:27.229980946 CEST	49705	80	192.168.2.7	76.76.21.93
Jul 3, 2024 00:40:27.236074924 CEST	49705	80	192.168.2.7	76.76.21.93
Jul 3, 2024 00:40:27.240941048 CEST	80	49705	76.76.21.93	192.168.2.7
Jul 3, 2024 00:40:27.257375002 CEST	49707	443	192.168.2.7	76.76.21.93
Jul 3, 2024 00:40:27.257402897 CEST	443	49707	76.76.21.93	192.168.2.7
Jul 3, 2024 00:40:27.257476091 CEST	49707	443	192.168.2.7	76.76.21.93
Jul 3, 2024 00:40:27.258093119 CEST	49707	443	192.168.2.7	76.76.21.93
Jul 3, 2024 00:40:27.258105040 CEST	443	49707	76.76.21.93	192.168.2.7
Jul 3, 2024 00:40:27.650749922 CEST	49671	443	192.168.2.7	204.79.197.203
Jul 3, 2024 00:40:27.747699022 CEST	443	49707	76.76.21.93	192.168.2.7
Jul 3, 2024 00:40:27.749922991 CEST	49707	443	192.168.2.7	76.76.21.93
Jul 3, 2024 00:40:27.749934912 CEST	443	49707	76.76.21.93	192.168.2.7
Jul 3, 2024 00:40:27.750930071 CEST	443	49707	76.76.21.93	192.168.2.7
Jul 3, 2024 00:40:27.750992060 CEST	49707	443	192.168.2.7	76.76.21.93
Jul 3, 2024 00:40:27.758644104 CEST	49707	443	192.168.2.7	76.76.21.93
Jul 3, 2024 00:40:27.758709908 CEST	443	49707	76.76.21.93	192.168.2.7
Jul 3, 2024 00:40:27.759006023 CEST	49707	443	192.168.2.7	76.76.21.93
Jul 3, 2024 00:40:27.759018898 CEST	443	49707	76.76.21.93	192.168.2.7
Jul 3, 2024 00:40:27.806828022 CEST	49707	443	192.168.2.7	76.76.21.93
Jul 3, 2024 00:40:27.949177027 CEST	443	49707	76.76.21.93	192.168.2.7
Jul 3, 2024 00:40:27.949882030 CEST	443	49707	76.76.21.93	192.168.2.7
Jul 3, 2024 00:40:27.950043917 CEST	49707	443	192.168.2.7	76.76.21.93
Jul 3, 2024 00:40:27.963359118 CEST	49677	443	192.168.2.7	20.50.201.200
Jul 3, 2024 00:40:28.191462040 CEST	49707	443	192.168.2.7	76.76.21.93
Jul 3, 2024 00:40:28.191481113 CEST	443	49707	76.76.21.93	192.168.2.7
Jul 3, 2024 00:40:28.301979065 CEST	49709	443	192.168.2.7	76.76.21.93
Jul 3, 2024 00:40:28.302004099 CEST	443	49709	76.76.21.93	192.168.2.7
Jul 3, 2024 00:40:28.302054882 CEST	49709	443	192.168.2.7	76.76.21.93
Jul 3, 2024 00:40:28.302650928 CEST	49709	443	192.168.2.7	76.76.21.93
Jul 3, 2024 00:40:28.302659035 CEST	443	49709	76.76.21.93	192.168.2.7
Jul 3, 2024 00:40:28.794768095 CEST	443	49709	76.76.21.93	192.168.2.7
Jul 3, 2024 00:40:28.801820040 CEST	49709	443	192.168.2.7	76.76.21.93
Jul 3, 2024 00:40:28.801836967 CEST	443	49709	76.76.21.93	192.168.2.7
Jul 3, 2024 00:40:28.802189112 CEST	443	49709	76.76.21.93	192.168.2.7
Jul 3, 2024 00:40:28.802638054 CEST	49709	443	192.168.2.7	76.76.21.93
Jul 3, 2024 00:40:28.802699089 CEST	443	49709	76.76.21.93	192.168.2.7
Jul 3, 2024 00:40:28.802783966 CEST	49709	443	192.168.2.7	76.76.21.93
Jul 3, 2024 00:40:28.848498106 CEST	443	49709	76.76.21.93	192.168.2.7
Jul 3, 2024 00:40:28.940943003 CEST	443	49709	76.76.21.93	192.168.2.7
Jul 3, 2024 00:40:28.941236973 CEST	443	49709	76.76.21.93	192.168.2.7
Jul 3, 2024 00:40:28.941338062 CEST	49709	443	192.168.2.7	76.76.21.93
Jul 3, 2024 00:40:28.964451075 CEST	49674	443	192.168.2.7	104.98.116.138
Jul 3, 2024 00:40:28.964462042 CEST	49675	443	192.168.2.7	104.98.116.138
Jul 3, 2024 00:40:28.989192009 CEST	49709	443	192.168.2.7	76.76.21.93
Jul 3, 2024 00:40:28.989212990 CEST	443	49709	76.76.21.93	192.168.2.7
Jul 3, 2024 00:40:29.054985046 CEST	49710	443	192.168.2.7	142.250.186.164
Jul 3, 2024 00:40:29.055023909 CEST	443	49710	142.250.186.164	192.168.2.7
Jul 3, 2024 00:40:29.055087090 CEST	49710	443	192.168.2.7	142.250.186.164
Jul 3, 2024 00:40:29.055824041 CEST	49710	443	192.168.2.7	142.250.186.164
Jul 3, 2024 00:40:29.055838108 CEST	443	49710	142.250.186.164	192.168.2.7
Jul 3, 2024 00:40:29.081101894 CEST	49672	443	192.168.2.7	104.98.116.138
Jul 3, 2024 00:40:29.458184958 CEST	49677	443	192.168.2.7	20.50.201.200
Jul 3, 2024 00:40:29.696393013 CEST	443	49710	142.250.186.164	192.168.2.7
Jul 3, 2024 00:40:29.743382931 CEST	49710	443	192.168.2.7	142.250.186.164
Jul 3, 2024 00:40:29.827625036 CEST	49710	443	192.168.2.7	142.250.186.164
Jul 3, 2024 00:40:29.827649117 CEST	443	49710	142.250.186.164	192.168.2.7
Jul 3, 2024 00:40:29.829220057 CEST	443	49710	142.250.186.164	192.168.2.7
Jul 3, 2024 00:40:29.829281092 CEST	49710	443	192.168.2.7	142.250.186.164
Jul 3, 2024 00:40:29.837826014 CEST	49710	443	192.168.2.7	142.250.186.164
Jul 3, 2024 00:40:29.837922096 CEST	443	49710	142.250.186.164	192.168.2.7
Jul 3, 2024 00:40:29.888118029 CEST	49710	443	192.168.2.7	142.250.186.164
Jul 3, 2024 00:40:29.888148069 CEST	443	49710	142.250.186.164	192.168.2.7
Jul 3, 2024 00:40:29.932611942 CEST	49710	443	192.168.2.7	142.250.186.164
Jul 3, 2024 00:40:30.294229031 CEST	49711	443	192.168.2.7	23.211.8.90
Jul 3, 2024 00:40:30.294277906 CEST	443	49711	23.211.8.90	192.168.2.7
Jul 3, 2024 00:40:30.294362068 CEST	49711	443	192.168.2.7	23.211.8.90
Jul 3, 2024 00:40:30.316293001 CEST	49711	443	192.168.2.7	23.211.8.90
Jul 3, 2024 00:40:30.316329002 CEST	443	49711	23.211.8.90	192.168.2.7
Jul 3, 2024 00:40:30.941597939 CEST	443	49711	23.211.8.90	192.168.2.7
Jul 3, 2024 00:40:30.941700935 CEST	49711	443	192.168.2.7	23.211.8.90
Jul 3, 2024 00:40:30.987204075 CEST	49711	443	192.168.2.7	23.211.8.90
Jul 3, 2024 00:40:30.987237930 CEST	443	49711	23.211.8.90	192.168.2.7
Jul 3, 2024 00:40:30.987623930 CEST	443	49711	23.211.8.90	192.168.2.7
Jul 3, 2024 00:40:31.029977083 CEST	49711	443	192.168.2.7	23.211.8.90
Jul 3, 2024 00:40:31.385453939 CEST	49712	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:31.385490894 CEST	443	49712	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:31.385695934 CEST	49712	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:31.387192011 CEST	49713	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:31.387203932 CEST	443	49713	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:31.387537956 CEST	49713	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:31.388503075 CEST	49712	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:31.388504028 CEST	49713	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:31.388516903 CEST	443	49713	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:31.388520956 CEST	443	49712	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:31.412559032 CEST	49711	443	192.168.2.7	23.211.8.90
Jul 3, 2024 00:40:31.456507921 CEST	443	49711	23.211.8.90	192.168.2.7
Jul 3, 2024 00:40:31.587112904 CEST	443	49711	23.211.8.90	192.168.2.7
Jul 3, 2024 00:40:31.587222099 CEST	443	49711	23.211.8.90	192.168.2.7
Jul 3, 2024 00:40:31.587274075 CEST	49711	443	192.168.2.7	23.211.8.90
Jul 3, 2024 00:40:31.653769016 CEST	49711	443	192.168.2.7	23.211.8.90
Jul 3, 2024 00:40:31.653788090 CEST	443	49711	23.211.8.90	192.168.2.7
Jul 3, 2024 00:40:31.653815985 CEST	49711	443	192.168.2.7	23.211.8.90
Jul 3, 2024 00:40:31.653831959 CEST	443	49711	23.211.8.90	192.168.2.7
Jul 3, 2024 00:40:31.832305908 CEST	49714	443	192.168.2.7	23.211.8.90
Jul 3, 2024 00:40:31.832338095 CEST	443	49714	23.211.8.90	192.168.2.7
Jul 3, 2024 00:40:31.832422018 CEST	49714	443	192.168.2.7	23.211.8.90
Jul 3, 2024 00:40:31.832652092 CEST	49714	443	192.168.2.7	23.211.8.90
Jul 3, 2024 00:40:31.832664013 CEST	443	49714	23.211.8.90	192.168.2.7
Jul 3, 2024 00:40:31.864418030 CEST	443	49713	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:31.864418983 CEST	443	49712	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:31.865108013 CEST	49712	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:31.865139008 CEST	443	49712	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:31.865185976 CEST	49713	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:31.865195990 CEST	443	49713	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:31.866213083 CEST	443	49712	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:31.866233110 CEST	443	49713	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:31.866276026 CEST	49712	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:31.866338015 CEST	49713	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:32.242363930 CEST	49713	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:32.242531061 CEST	443	49713	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:32.242731094 CEST	49712	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:32.242912054 CEST	443	49712	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:32.244338036 CEST	49713	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:32.244357109 CEST	443	49713	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:32.369050026 CEST	443	49713	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:32.369112968 CEST	49713	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:32.369127989 CEST	443	49713	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:32.369169950 CEST	443	49713	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:32.369204044 CEST	443	49713	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:32.369224072 CEST	49713	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:32.369231939 CEST	443	49713	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:32.369272947 CEST	49713	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:32.375258923 CEST	443	49713	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:32.375269890 CEST	443	49713	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:32.375346899 CEST	49713	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:32.375356913 CEST	443	49713	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:32.375385046 CEST	49713	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:32.413434029 CEST	49712	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:32.413459063 CEST	443	49712	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:32.445218086 CEST	443	49714	23.211.8.90	192.168.2.7
Jul 3, 2024 00:40:32.445301056 CEST	49714	443	192.168.2.7	23.211.8.90
Jul 3, 2024 00:40:32.455852985 CEST	443	49713	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:32.455869913 CEST	443	49713	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:32.455892086 CEST	443	49713	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:32.455936909 CEST	49713	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:32.457144976 CEST	443	49713	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:32.457154036 CEST	443	49713	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:32.457171917 CEST	443	49713	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:32.457242966 CEST	49713	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:32.457242966 CEST	49713	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:32.457250118 CEST	443	49713	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:32.458009005 CEST	443	49713	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:32.458077908 CEST	49713	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:32.458085060 CEST	443	49713	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:32.459659100 CEST	443	49713	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:32.459693909 CEST	443	49713	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:32.459702969 CEST	443	49713	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:32.459743023 CEST	49713	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:32.459757090 CEST	443	49713	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:32.459764957 CEST	49713	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:32.464786053 CEST	49713	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:32.477758884 CEST	49712	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:32.486342907 CEST	49714	443	192.168.2.7	23.211.8.90
Jul 3, 2024 00:40:32.486361027 CEST	443	49714	23.211.8.90	192.168.2.7
Jul 3, 2024 00:40:32.486684084 CEST	443	49714	23.211.8.90	192.168.2.7
Jul 3, 2024 00:40:32.493357897 CEST	49714	443	192.168.2.7	23.211.8.90
Jul 3, 2024 00:40:32.524496078 CEST	443	49712	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:32.536494970 CEST	443	49714	23.211.8.90	192.168.2.7
Jul 3, 2024 00:40:32.542546988 CEST	49677	443	192.168.2.7	20.50.201.200
Jul 3, 2024 00:40:32.543411970 CEST	443	49713	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:32.543448925 CEST	443	49713	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:32.543497086 CEST	49713	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:32.543514967 CEST	443	49713	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:32.543548107 CEST	49713	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:32.544325113 CEST	443	49713	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:32.544361115 CEST	443	49713	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:32.544425964 CEST	443	49713	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:32.544462919 CEST	49713	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:32.544677973 CEST	49713	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:32.551062107 CEST	49713	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:32.551086903 CEST	443	49713	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:32.631936073 CEST	443	49712	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:32.631983042 CEST	443	49712	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:32.632019997 CEST	443	49712	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:32.632055044 CEST	443	49712	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:32.632061005 CEST	49712	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:32.632062912 CEST	443	49712	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:32.632091045 CEST	443	49712	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:32.632101059 CEST	443	49712	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:32.632122040 CEST	49712	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:32.632124901 CEST	443	49712	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:32.632139921 CEST	49712	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:32.697036982 CEST	443	49714	23.211.8.90	192.168.2.7
Jul 3, 2024 00:40:32.697099924 CEST	443	49714	23.211.8.90	192.168.2.7
Jul 3, 2024 00:40:32.697170019 CEST	49714	443	192.168.2.7	23.211.8.90
Jul 3, 2024 00:40:32.711976051 CEST	443	49712	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:32.711988926 CEST	443	49712	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:32.712048054 CEST	49712	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:32.712064028 CEST	443	49712	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:32.712109089 CEST	49712	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:32.712739944 CEST	443	49712	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:32.712748051 CEST	443	49712	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:32.712773085 CEST	443	49712	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:32.712789059 CEST	49712	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:32.712817907 CEST	49712	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:32.712822914 CEST	443	49712	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:32.712835073 CEST	443	49712	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:32.712881088 CEST	49712	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:32.791606903 CEST	49712	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:32.791625023 CEST	443	49712	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:32.796832085 CEST	49714	443	192.168.2.7	23.211.8.90
Jul 3, 2024 00:40:32.796850920 CEST	443	49714	23.211.8.90	192.168.2.7
Jul 3, 2024 00:40:32.796861887 CEST	49714	443	192.168.2.7	23.211.8.90
Jul 3, 2024 00:40:32.796869040 CEST	443	49714	23.211.8.90	192.168.2.7
Jul 3, 2024 00:40:32.828284979 CEST	49717	443	192.168.2.7	138.197.235.123
Jul 3, 2024 00:40:32.828315973 CEST	443	49717	138.197.235.123	192.168.2.7
Jul 3, 2024 00:40:32.828547001 CEST	49718	443	192.168.2.7	138.197.235.123
Jul 3, 2024 00:40:32.828556061 CEST	443	49718	138.197.235.123	192.168.2.7
Jul 3, 2024 00:40:32.828579903 CEST	49717	443	192.168.2.7	138.197.235.123
Jul 3, 2024 00:40:32.828610897 CEST	49718	443	192.168.2.7	138.197.235.123
Jul 3, 2024 00:40:32.829763889 CEST	49717	443	192.168.2.7	138.197.235.123
Jul 3, 2024 00:40:32.829775095 CEST	443	49717	138.197.235.123	192.168.2.7
Jul 3, 2024 00:40:32.830528021 CEST	49718	443	192.168.2.7	138.197.235.123
Jul 3, 2024 00:40:32.830540895 CEST	443	49718	138.197.235.123	192.168.2.7
Jul 3, 2024 00:40:33.512940884 CEST	443	49718	138.197.235.123	192.168.2.7
Jul 3, 2024 00:40:33.513506889 CEST	49718	443	192.168.2.7	138.197.235.123
Jul 3, 2024 00:40:33.513530016 CEST	443	49718	138.197.235.123	192.168.2.7
Jul 3, 2024 00:40:33.514626026 CEST	443	49718	138.197.235.123	192.168.2.7
Jul 3, 2024 00:40:33.514904022 CEST	49718	443	192.168.2.7	138.197.235.123
Jul 3, 2024 00:40:33.516372919 CEST	443	49717	138.197.235.123	192.168.2.7
Jul 3, 2024 00:40:33.516647100 CEST	49718	443	192.168.2.7	138.197.235.123
Jul 3, 2024 00:40:33.516731977 CEST	443	49718	138.197.235.123	192.168.2.7
Jul 3, 2024 00:40:33.518707991 CEST	49717	443	192.168.2.7	138.197.235.123
Jul 3, 2024 00:40:33.518721104 CEST	443	49717	138.197.235.123	192.168.2.7
Jul 3, 2024 00:40:33.519035101 CEST	49718	443	192.168.2.7	138.197.235.123
Jul 3, 2024 00:40:33.519042969 CEST	443	49718	138.197.235.123	192.168.2.7
Jul 3, 2024 00:40:33.519912004 CEST	443	49717	138.197.235.123	192.168.2.7
Jul 3, 2024 00:40:33.520242929 CEST	49717	443	192.168.2.7	138.197.235.123
Jul 3, 2024 00:40:33.522798061 CEST	49717	443	192.168.2.7	138.197.235.123
Jul 3, 2024 00:40:33.522888899 CEST	443	49717	138.197.235.123	192.168.2.7
Jul 3, 2024 00:40:33.614360094 CEST	49717	443	192.168.2.7	138.197.235.123
Jul 3, 2024 00:40:33.614382029 CEST	443	49717	138.197.235.123	192.168.2.7
Jul 3, 2024 00:40:33.717173100 CEST	49717	443	192.168.2.7	138.197.235.123
Jul 3, 2024 00:40:33.724509954 CEST	443	49718	138.197.235.123	192.168.2.7
Jul 3, 2024 00:40:33.724601984 CEST	49718	443	192.168.2.7	138.197.235.123
Jul 3, 2024 00:40:34.589168072 CEST	443	49718	138.197.235.123	192.168.2.7
Jul 3, 2024 00:40:34.589195967 CEST	443	49718	138.197.235.123	192.168.2.7
Jul 3, 2024 00:40:34.589211941 CEST	443	49718	138.197.235.123	192.168.2.7
Jul 3, 2024 00:40:34.589329004 CEST	49718	443	192.168.2.7	138.197.235.123
Jul 3, 2024 00:40:34.589343071 CEST	443	49718	138.197.235.123	192.168.2.7
Jul 3, 2024 00:40:34.589422941 CEST	49718	443	192.168.2.7	138.197.235.123
Jul 3, 2024 00:40:34.848666906 CEST	443	49718	138.197.235.123	192.168.2.7
Jul 3, 2024 00:40:34.848685026 CEST	443	49718	138.197.235.123	192.168.2.7
Jul 3, 2024 00:40:34.848813057 CEST	49718	443	192.168.2.7	138.197.235.123
Jul 3, 2024 00:40:34.848841906 CEST	443	49718	138.197.235.123	192.168.2.7
Jul 3, 2024 00:40:34.851066113 CEST	443	49718	138.197.235.123	192.168.2.7
Jul 3, 2024 00:40:34.851088047 CEST	443	49718	138.197.235.123	192.168.2.7
Jul 3, 2024 00:40:34.851196051 CEST	49718	443	192.168.2.7	138.197.235.123
Jul 3, 2024 00:40:34.851196051 CEST	49718	443	192.168.2.7	138.197.235.123
Jul 3, 2024 00:40:34.851206064 CEST	443	49718	138.197.235.123	192.168.2.7
Jul 3, 2024 00:40:34.852020025 CEST	443	49718	138.197.235.123	192.168.2.7
Jul 3, 2024 00:40:34.852118969 CEST	443	49718	138.197.235.123	192.168.2.7
Jul 3, 2024 00:40:34.852154016 CEST	49718	443	192.168.2.7	138.197.235.123
Jul 3, 2024 00:40:34.852854967 CEST	49718	443	192.168.2.7	138.197.235.123
Jul 3, 2024 00:40:34.853327990 CEST	49718	443	192.168.2.7	138.197.235.123
Jul 3, 2024 00:40:34.853341103 CEST	443	49718	138.197.235.123	192.168.2.7
Jul 3, 2024 00:40:34.868809938 CEST	49721	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:34.868840933 CEST	443	49721	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:34.869221926 CEST	49721	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:34.869654894 CEST	49721	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:34.869674921 CEST	443	49721	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:35.356884956 CEST	443	49721	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:35.357330084 CEST	49721	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:35.357359886 CEST	443	49721	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:35.357726097 CEST	443	49721	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:35.358174086 CEST	49721	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:35.358239889 CEST	443	49721	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:35.358530998 CEST	49721	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:35.358572960 CEST	443	49721	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:35.358656883 CEST	49721	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:35.358668089 CEST	443	49721	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:35.558339119 CEST	443	49721	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:35.604439020 CEST	49721	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:35.649115086 CEST	443	49721	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:35.649126053 CEST	443	49721	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:35.649171114 CEST	443	49721	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:35.649204016 CEST	443	49721	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:35.649207115 CEST	49721	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:35.649230003 CEST	443	49721	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:35.649266005 CEST	49721	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:35.649467945 CEST	49721	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:35.652250051 CEST	443	49721	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:35.652262926 CEST	443	49721	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:35.652297020 CEST	443	49721	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:35.652307987 CEST	443	49721	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:35.652342081 CEST	49721	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:35.652350903 CEST	443	49721	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:35.652391911 CEST	49721	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:35.652448893 CEST	443	49721	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:35.652719021 CEST	49721	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:35.653580904 CEST	49721	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:35.653597116 CEST	443	49721	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:35.653604984 CEST	49721	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:35.653647900 CEST	49721	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:35.661022902 CEST	49724	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:35.661043882 CEST	443	49724	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:35.661379099 CEST	49724	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:35.661750078 CEST	49724	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:35.661765099 CEST	443	49724	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:36.151253939 CEST	443	49724	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:36.151835918 CEST	49724	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:36.151856899 CEST	443	49724	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:36.152236938 CEST	443	49724	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:36.152719975 CEST	49724	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:36.152791023 CEST	443	49724	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:36.153074026 CEST	49724	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:36.153112888 CEST	443	49724	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:36.153199911 CEST	49724	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:36.153209925 CEST	443	49724	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:36.352608919 CEST	443	49724	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:36.352740049 CEST	443	49724	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:36.352816105 CEST	49724	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:36.358767986 CEST	49724	443	192.168.2.7	76.76.21.123
Jul 3, 2024 00:40:36.358788967 CEST	443	49724	76.76.21.123	192.168.2.7
Jul 3, 2024 00:40:36.404279947 CEST	49725	443	192.168.2.7	185.15.59.240
Jul 3, 2024 00:40:36.404331923 CEST	443	49725	185.15.59.240	192.168.2.7
Jul 3, 2024 00:40:36.404397964 CEST	49725	443	192.168.2.7	185.15.59.240
Jul 3, 2024 00:40:36.404963017 CEST	49725	443	192.168.2.7	185.15.59.240
Jul 3, 2024 00:40:36.404978037 CEST	443	49725	185.15.59.240	192.168.2.7
Jul 3, 2024 00:40:36.511698008 CEST	49726	443	192.168.2.7	138.197.235.123
Jul 3, 2024 00:40:36.511734009 CEST	443	49726	138.197.235.123	192.168.2.7
Jul 3, 2024 00:40:36.511810064 CEST	49726	443	192.168.2.7	138.197.235.123
Jul 3, 2024 00:40:36.512208939 CEST	49726	443	192.168.2.7	138.197.235.123
Jul 3, 2024 00:40:36.512223959 CEST	443	49726	138.197.235.123	192.168.2.7
Jul 3, 2024 00:40:37.128456116 CEST	443	49725	185.15.59.240	192.168.2.7
Jul 3, 2024 00:40:37.129240990 CEST	49725	443	192.168.2.7	185.15.59.240
Jul 3, 2024 00:40:37.129267931 CEST	443	49725	185.15.59.240	192.168.2.7
Jul 3, 2024 00:40:37.130768061 CEST	443	49725	185.15.59.240	192.168.2.7
Jul 3, 2024 00:40:37.130839109 CEST	49725	443	192.168.2.7	185.15.59.240
Jul 3, 2024 00:40:37.130846977 CEST	443	49725	185.15.59.240	192.168.2.7
Jul 3, 2024 00:40:37.130899906 CEST	49725	443	192.168.2.7	185.15.59.240
Jul 3, 2024 00:40:37.132236004 CEST	49725	443	192.168.2.7	185.15.59.240
Jul 3, 2024 00:40:37.132314920 CEST	443	49725	185.15.59.240	192.168.2.7
Jul 3, 2024 00:40:37.132641077 CEST	49725	443	192.168.2.7	185.15.59.240
Jul 3, 2024 00:40:37.132646084 CEST	443	49725	185.15.59.240	192.168.2.7
Jul 3, 2024 00:40:37.182653904 CEST	49725	443	192.168.2.7	185.15.59.240
Jul 3, 2024 00:40:37.193044901 CEST	443	49726	138.197.235.123	192.168.2.7
Jul 3, 2024 00:40:37.193603039 CEST	49726	443	192.168.2.7	138.197.235.123
Jul 3, 2024 00:40:37.193618059 CEST	443	49726	138.197.235.123	192.168.2.7
Jul 3, 2024 00:40:37.194664955 CEST	443	49726	138.197.235.123	192.168.2.7
Jul 3, 2024 00:40:37.194729090 CEST	49726	443	192.168.2.7	138.197.235.123
Jul 3, 2024 00:40:37.195207119 CEST	49726	443	192.168.2.7	138.197.235.123
Jul 3, 2024 00:40:37.195266008 CEST	443	49726	138.197.235.123	192.168.2.7
Jul 3, 2024 00:40:37.195794106 CEST	49726	443	192.168.2.7	138.197.235.123
Jul 3, 2024 00:40:37.195802927 CEST	443	49726	138.197.235.123	192.168.2.7
Jul 3, 2024 00:40:37.245165110 CEST	49726	443	192.168.2.7	138.197.235.123
Jul 3, 2024 00:40:37.260777950 CEST	49671	443	192.168.2.7	204.79.197.203
Jul 3, 2024 00:40:37.393663883 CEST	443	49725	185.15.59.240	192.168.2.7
Jul 3, 2024 00:40:37.393692970 CEST	443	49725	185.15.59.240	192.168.2.7
Jul 3, 2024 00:40:37.393704891 CEST	443	49725	185.15.59.240	192.168.2.7
Jul 3, 2024 00:40:37.393733025 CEST	443	49725	185.15.59.240	192.168.2.7
Jul 3, 2024 00:40:37.393760920 CEST	443	49725	185.15.59.240	192.168.2.7
Jul 3, 2024 00:40:37.393760920 CEST	49725	443	192.168.2.7	185.15.59.240
Jul 3, 2024 00:40:37.393796921 CEST	443	49725	185.15.59.240	192.168.2.7
Jul 3, 2024 00:40:37.393810987 CEST	49725	443	192.168.2.7	185.15.59.240
Jul 3, 2024 00:40:37.393810987 CEST	49725	443	192.168.2.7	185.15.59.240
Jul 3, 2024 00:40:37.435053110 CEST	443	49726	138.197.235.123	192.168.2.7
Jul 3, 2024 00:40:37.435092926 CEST	443	49726	138.197.235.123	192.168.2.7
Jul 3, 2024 00:40:37.435148954 CEST	49726	443	192.168.2.7	138.197.235.123
Jul 3, 2024 00:40:37.435167074 CEST	443	49726	138.197.235.123	192.168.2.7
Jul 3, 2024 00:40:37.448276043 CEST	49725	443	192.168.2.7	185.15.59.240
Jul 3, 2024 00:40:37.479525089 CEST	49726	443	192.168.2.7	138.197.235.123
Jul 3, 2024 00:40:37.485074997 CEST	443	49725	185.15.59.240	192.168.2.7
Jul 3, 2024 00:40:37.485093117 CEST	443	49725	185.15.59.240	192.168.2.7
Jul 3, 2024 00:40:37.485126972 CEST	443	49725	185.15.59.240	192.168.2.7
Jul 3, 2024 00:40:37.485141993 CEST	443	49725	185.15.59.240	192.168.2.7
Jul 3, 2024 00:40:37.485150099 CEST	49725	443	192.168.2.7	185.15.59.240
Jul 3, 2024 00:40:37.485172987 CEST	443	49725	185.15.59.240	192.168.2.7
Jul 3, 2024 00:40:37.485204935 CEST	49725	443	192.168.2.7	185.15.59.240
Jul 3, 2024 00:40:37.485223055 CEST	49725	443	192.168.2.7	185.15.59.240
Jul 3, 2024 00:40:37.499051094 CEST	443	49725	185.15.59.240	192.168.2.7
Jul 3, 2024 00:40:37.499078989 CEST	443	49725	185.15.59.240	192.168.2.7
Jul 3, 2024 00:40:37.499116898 CEST	49725	443	192.168.2.7	185.15.59.240
Jul 3, 2024 00:40:37.499125004 CEST	443	49725	185.15.59.240	192.168.2.7
Jul 3, 2024 00:40:37.499161005 CEST	49725	443	192.168.2.7	185.15.59.240
Jul 3, 2024 00:40:37.499176025 CEST	49725	443	192.168.2.7	185.15.59.240
Jul 3, 2024 00:40:37.521869898 CEST	443	49726	138.197.235.123	192.168.2.7
Jul 3, 2024 00:40:37.521887064 CEST	443	49726	138.197.235.123	192.168.2.7
Jul 3, 2024 00:40:37.521929026 CEST	443	49726	138.197.235.123	192.168.2.7
Jul 3, 2024 00:40:37.521940947 CEST	443	49726	138.197.235.123	192.168.2.7
Jul 3, 2024 00:40:37.521959066 CEST	49726	443	192.168.2.7	138.197.235.123
Jul 3, 2024 00:40:37.521981001 CEST	443	49726	138.197.235.123	192.168.2.7
Jul 3, 2024 00:40:37.521991014 CEST	443	49726	138.197.235.123	192.168.2.7
Jul 3, 2024 00:40:37.522005081 CEST	49726	443	192.168.2.7	138.197.235.123
Jul 3, 2024 00:40:37.522022963 CEST	49726	443	192.168.2.7	138.197.235.123
Jul 3, 2024 00:40:37.523086071 CEST	443	49726	138.197.235.123	192.168.2.7
Jul 3, 2024 00:40:37.523096085 CEST	443	49726	138.197.235.123	192.168.2.7
Jul 3, 2024 00:40:37.523123026 CEST	443	49726	138.197.235.123	192.168.2.7
Jul 3, 2024 00:40:37.523149967 CEST	49726	443	192.168.2.7	138.197.235.123
Jul 3, 2024 00:40:37.523160934 CEST	443	49726	138.197.235.123	192.168.2.7
Jul 3, 2024 00:40:37.523190975 CEST	49726	443	192.168.2.7	138.197.235.123
Jul 3, 2024 00:40:37.523206949 CEST	49726	443	192.168.2.7	138.197.235.123
Jul 3, 2024 00:40:37.524008036 CEST	443	49726	138.197.235.123	192.168.2.7
Jul 3, 2024 00:40:37.524112940 CEST	443	49726	138.197.235.123	192.168.2.7
Jul 3, 2024 00:40:37.524126053 CEST	49726	443	192.168.2.7	138.197.235.123
Jul 3, 2024 00:40:37.524172068 CEST	49726	443	192.168.2.7	138.197.235.123
Jul 3, 2024 00:40:37.524456024 CEST	49726	443	192.168.2.7	138.197.235.123
Jul 3, 2024 00:40:37.524471045 CEST	443	49726	138.197.235.123	192.168.2.7
Jul 3, 2024 00:40:37.572565079 CEST	443	49725	185.15.59.240	192.168.2.7
Jul 3, 2024 00:40:37.572648048 CEST	443	49725	185.15.59.240	192.168.2.7
Jul 3, 2024 00:40:37.572648048 CEST	49725	443	192.168.2.7	185.15.59.240
Jul 3, 2024 00:40:37.572690964 CEST	49725	443	192.168.2.7	185.15.59.240
Jul 3, 2024 00:40:37.573386908 CEST	49725	443	192.168.2.7	185.15.59.240
Jul 3, 2024 00:40:37.573404074 CEST	443	49725	185.15.59.240	192.168.2.7
Jul 3, 2024 00:40:37.658921003 CEST	49727	443	192.168.2.7	185.15.59.240
Jul 3, 2024 00:40:37.658942938 CEST	443	49727	185.15.59.240	192.168.2.7
Jul 3, 2024 00:40:37.659024000 CEST	49727	443	192.168.2.7	185.15.59.240
Jul 3, 2024 00:40:37.660006046 CEST	49727	443	192.168.2.7	185.15.59.240
Jul 3, 2024 00:40:37.660021067 CEST	443	49727	185.15.59.240	192.168.2.7
Jul 3, 2024 00:40:38.262909889 CEST	443	49727	185.15.59.240	192.168.2.7
Jul 3, 2024 00:40:38.264010906 CEST	49727	443	192.168.2.7	185.15.59.240
Jul 3, 2024 00:40:38.264027119 CEST	443	49727	185.15.59.240	192.168.2.7
Jul 3, 2024 00:40:38.265031099 CEST	443	49727	185.15.59.240	192.168.2.7
Jul 3, 2024 00:40:38.265127897 CEST	49727	443	192.168.2.7	185.15.59.240
Jul 3, 2024 00:40:38.265137911 CEST	443	49727	185.15.59.240	192.168.2.7
Jul 3, 2024 00:40:38.265194893 CEST	49727	443	192.168.2.7	185.15.59.240
Jul 3, 2024 00:40:38.265558004 CEST	49727	443	192.168.2.7	185.15.59.240
Jul 3, 2024 00:40:38.265620947 CEST	443	49727	185.15.59.240	192.168.2.7
Jul 3, 2024 00:40:38.265753031 CEST	49727	443	192.168.2.7	185.15.59.240
Jul 3, 2024 00:40:38.265762091 CEST	443	49727	185.15.59.240	192.168.2.7
Jul 3, 2024 00:40:38.307471991 CEST	49727	443	192.168.2.7	185.15.59.240
Jul 3, 2024 00:40:38.495115995 CEST	49677	443	192.168.2.7	20.50.201.200
Jul 3, 2024 00:40:38.524854898 CEST	443	49727	185.15.59.240	192.168.2.7
Jul 3, 2024 00:40:38.524884939 CEST	443	49727	185.15.59.240	192.168.2.7
Jul 3, 2024 00:40:38.524893045 CEST	443	49727	185.15.59.240	192.168.2.7
Jul 3, 2024 00:40:38.524935007 CEST	443	49727	185.15.59.240	192.168.2.7
Jul 3, 2024 00:40:38.524946928 CEST	49727	443	192.168.2.7	185.15.59.240
Jul 3, 2024 00:40:38.524960041 CEST	443	49727	185.15.59.240	192.168.2.7
Jul 3, 2024 00:40:38.524967909 CEST	443	49727	185.15.59.240	192.168.2.7
Jul 3, 2024 00:40:38.524990082 CEST	49727	443	192.168.2.7	185.15.59.240
Jul 3, 2024 00:40:38.525017023 CEST	49727	443	192.168.2.7	185.15.59.240
Jul 3, 2024 00:40:38.599289894 CEST	443	49727	185.15.59.240	192.168.2.7
Jul 3, 2024 00:40:38.599317074 CEST	443	49727	185.15.59.240	192.168.2.7
Jul 3, 2024 00:40:38.599387884 CEST	49727	443	192.168.2.7	185.15.59.240
Jul 3, 2024 00:40:38.599405050 CEST	443	49727	185.15.59.240	192.168.2.7
Jul 3, 2024 00:40:38.599436045 CEST	49727	443	192.168.2.7	185.15.59.240
Jul 3, 2024 00:40:38.599452972 CEST	49727	443	192.168.2.7	185.15.59.240
Jul 3, 2024 00:40:38.630129099 CEST	443	49727	185.15.59.240	192.168.2.7
Jul 3, 2024 00:40:38.630151987 CEST	443	49727	185.15.59.240	192.168.2.7
Jul 3, 2024 00:40:38.630188942 CEST	49727	443	192.168.2.7	185.15.59.240
Jul 3, 2024 00:40:38.630198002 CEST	443	49727	185.15.59.240	192.168.2.7
Jul 3, 2024 00:40:38.630233049 CEST	49727	443	192.168.2.7	185.15.59.240
Jul 3, 2024 00:40:38.676541090 CEST	443	49717	138.197.235.123	192.168.2.7
Jul 3, 2024 00:40:38.676631927 CEST	443	49717	138.197.235.123	192.168.2.7
Jul 3, 2024 00:40:38.676856995 CEST	49717	443	192.168.2.7	138.197.235.123
Jul 3, 2024 00:40:38.682363033 CEST	443	49727	185.15.59.240	192.168.2.7
Jul 3, 2024 00:40:38.682434082 CEST	443	49727	185.15.59.240	192.168.2.7
Jul 3, 2024 00:40:38.682466984 CEST	49727	443	192.168.2.7	185.15.59.240
Jul 3, 2024 00:40:38.682508945 CEST	49727	443	192.168.2.7	185.15.59.240
Jul 3, 2024 00:40:38.683156013 CEST	49727	443	192.168.2.7	185.15.59.240
Jul 3, 2024 00:40:38.683167934 CEST	443	49727	185.15.59.240	192.168.2.7
Jul 3, 2024 00:40:39.601150990 CEST	443	49710	142.250.186.164	192.168.2.7
Jul 3, 2024 00:40:39.601219893 CEST	443	49710	142.250.186.164	192.168.2.7
Jul 3, 2024 00:40:39.601264000 CEST	49710	443	192.168.2.7	142.250.186.164
Jul 3, 2024 00:40:40.085155010 CEST	49698	443	192.168.2.7	104.98.116.138
Jul 3, 2024 00:40:40.087560892 CEST	49729	443	192.168.2.7	104.98.116.138
Jul 3, 2024 00:40:40.087599039 CEST	443	49729	104.98.116.138	192.168.2.7
Jul 3, 2024 00:40:40.087671995 CEST	49729	443	192.168.2.7	104.98.116.138
Jul 3, 2024 00:40:40.088354111 CEST	49729	443	192.168.2.7	104.98.116.138
Jul 3, 2024 00:40:40.088372946 CEST	443	49729	104.98.116.138	192.168.2.7
Jul 3, 2024 00:40:40.385631084 CEST	49698	443	192.168.2.7	104.98.116.138
Jul 3, 2024 00:40:40.408545971 CEST	443	49698	104.98.116.138	192.168.2.7
Jul 3, 2024 00:40:40.408586025 CEST	443	49698	104.98.116.138	192.168.2.7
Jul 3, 2024 00:40:40.408818007 CEST	49698	443	192.168.2.7	104.98.116.138
Jul 3, 2024 00:40:41.223751068 CEST	49710	443	192.168.2.7	142.250.186.164
Jul 3, 2024 00:40:41.223787069 CEST	443	49710	142.250.186.164	192.168.2.7
Jul 3, 2024 00:40:41.555856943 CEST	443	49729	104.98.116.138	192.168.2.7
Jul 3, 2024 00:40:41.555949926 CEST	443	49729	104.98.116.138	192.168.2.7
Jul 3, 2024 00:40:41.556062937 CEST	49729	443	192.168.2.7	104.98.116.138
Jul 3, 2024 00:40:50.413980961 CEST	49677	443	192.168.2.7	20.50.201.200
Jul 3, 2024 00:40:57.114911079 CEST	80	49704	76.76.21.93	192.168.2.7
Jul 3, 2024 00:40:57.114993095 CEST	49704	80	192.168.2.7	76.76.21.93
Jul 3, 2024 00:40:57.209275961 CEST	49704	80	192.168.2.7	76.76.21.93
Jul 3, 2024 00:40:57.214157104 CEST	80	49704	76.76.21.93	192.168.2.7
Jul 3, 2024 00:41:23.764533043 CEST	49717	443	192.168.2.7	138.197.235.123
Jul 3, 2024 00:41:23.764568090 CEST	443	49717	138.197.235.123	192.168.2.7
Jul 3, 2024 00:41:29.092103004 CEST	49737	443	192.168.2.7	142.250.186.164
Jul 3, 2024 00:41:29.092179060 CEST	443	49737	142.250.186.164	192.168.2.7
Jul 3, 2024 00:41:29.092602968 CEST	49737	443	192.168.2.7	142.250.186.164
Jul 3, 2024 00:41:29.093008995 CEST	49737	443	192.168.2.7	142.250.186.164
Jul 3, 2024 00:41:29.093024015 CEST	443	49737	142.250.186.164	192.168.2.7
Jul 3, 2024 00:41:29.744492054 CEST	443	49737	142.250.186.164	192.168.2.7
Jul 3, 2024 00:41:29.753433943 CEST	49737	443	192.168.2.7	142.250.186.164
Jul 3, 2024 00:41:29.753465891 CEST	443	49737	142.250.186.164	192.168.2.7
Jul 3, 2024 00:41:29.753892899 CEST	443	49737	142.250.186.164	192.168.2.7
Jul 3, 2024 00:41:29.756614923 CEST	49737	443	192.168.2.7	142.250.186.164
Jul 3, 2024 00:41:29.756829023 CEST	443	49737	142.250.186.164	192.168.2.7
Jul 3, 2024 00:41:29.799778938 CEST	49737	443	192.168.2.7	142.250.186.164
Jul 3, 2024 00:41:34.761111021 CEST	49717	443	192.168.2.7	138.197.235.123
Jul 3, 2024 00:41:34.761111021 CEST	49717	443	192.168.2.7	138.197.235.123
Jul 3, 2024 00:41:34.761168003 CEST	443	49717	138.197.235.123	192.168.2.7
Jul 3, 2024 00:41:34.762435913 CEST	49717	443	192.168.2.7	138.197.235.123
Jul 3, 2024 00:41:39.678764105 CEST	443	49737	142.250.186.164	192.168.2.7
Jul 3, 2024 00:41:39.678857088 CEST	443	49737	142.250.186.164	192.168.2.7
Jul 3, 2024 00:41:39.678961039 CEST	49737	443	192.168.2.7	142.250.186.164
Jul 3, 2024 00:41:41.206953049 CEST	49737	443	192.168.2.7	142.250.186.164
Jul 3, 2024 00:41:41.206993103 CEST	443	49737	142.250.186.164	192.168.2.7

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 3, 2024 00:40:25.041940928 CEST	53	53881	1.1.1.1	192.168.2.7
Jul 3, 2024 00:40:25.050056934 CEST	53	54194	1.1.1.1	192.168.2.7
Jul 3, 2024 00:40:26.027529001 CEST	53	60734	1.1.1.1	192.168.2.7
Jul 3, 2024 00:40:26.717364073 CEST	51427	53	192.168.2.7	1.1.1.1
Jul 3, 2024 00:40:26.718669891 CEST	59649	53	192.168.2.7	1.1.1.1
Jul 3, 2024 00:40:26.727864981 CEST	53	51427	1.1.1.1	192.168.2.7
Jul 3, 2024 00:40:26.729770899 CEST	53	59649	1.1.1.1	192.168.2.7
Jul 3, 2024 00:40:27.239430904 CEST	61647	53	192.168.2.7	1.1.1.1
Jul 3, 2024 00:40:27.239594936 CEST	62676	53	192.168.2.7	1.1.1.1
Jul 3, 2024 00:40:27.248338938 CEST	53	61647	1.1.1.1	192.168.2.7
Jul 3, 2024 00:40:27.248891115 CEST	53	62676	1.1.1.1	192.168.2.7
Jul 3, 2024 00:40:29.045712948 CEST	55867	53	192.168.2.7	1.1.1.1
Jul 3, 2024 00:40:29.046050072 CEST	51006	53	192.168.2.7	1.1.1.1
Jul 3, 2024 00:40:29.052556038 CEST	53	55867	1.1.1.1	192.168.2.7
Jul 3, 2024 00:40:29.053070068 CEST	53	51006	1.1.1.1	192.168.2.7
Jul 3, 2024 00:40:31.371093035 CEST	60100	53	192.168.2.7	1.1.1.1
Jul 3, 2024 00:40:31.371462107 CEST	64436	53	192.168.2.7	1.1.1.1
Jul 3, 2024 00:40:31.382445097 CEST	53	64436	1.1.1.1	192.168.2.7
Jul 3, 2024 00:40:31.383800983 CEST	53	60100	1.1.1.1	192.168.2.7
Jul 3, 2024 00:40:31.830950975 CEST	59679	53	192.168.2.7	1.1.1.1
Jul 3, 2024 00:40:32.571917057 CEST	49954	53	192.168.2.7	1.1.1.1
Jul 3, 2024 00:40:32.572195053 CEST	57176	53	192.168.2.7	1.1.1.1
Jul 3, 2024 00:40:32.575551033 CEST	60126	53	192.168.2.7	1.1.1.1
Jul 3, 2024 00:40:32.575985909 CEST	64539	53	192.168.2.7	1.1.1.1
Jul 3, 2024 00:40:32.584911108 CEST	53	63031	1.1.1.1	192.168.2.7
Jul 3, 2024 00:40:32.592736959 CEST	53	57176	1.1.1.1	192.168.2.7
Jul 3, 2024 00:40:32.684281111 CEST	53	60126	1.1.1.1	192.168.2.7
Jul 3, 2024 00:40:33.353157997 CEST	58288	53	192.168.2.7	1.1.1.1
Jul 3, 2024 00:40:33.353643894 CEST	59332	53	192.168.2.7	1.1.1.1
Jul 3, 2024 00:40:33.373980999 CEST	53	59332	1.1.1.1	192.168.2.7
Jul 3, 2024 00:40:34.869229078 CEST	63546	53	192.168.2.7	1.1.1.1
Jul 3, 2024 00:40:34.869405031 CEST	58644	53	192.168.2.7	1.1.1.1
Jul 3, 2024 00:40:35.757054090 CEST	53	64539	1.1.1.1	192.168.2.7
Jul 3, 2024 00:40:35.891618013 CEST	60789	53	192.168.2.7	1.1.1.1
Jul 3, 2024 00:40:35.891808033 CEST	60816	53	192.168.2.7	1.1.1.1
Jul 3, 2024 00:40:36.368012905 CEST	62844	53	192.168.2.7	1.1.1.1
Jul 3, 2024 00:40:36.368259907 CEST	61787	53	192.168.2.7	1.1.1.1
Jul 3, 2024 00:40:36.374766111 CEST	53	62844	1.1.1.1	192.168.2.7
Jul 3, 2024 00:40:36.374927998 CEST	53	61787	1.1.1.1	192.168.2.7
Jul 3, 2024 00:40:36.446660042 CEST	53	60789	1.1.1.1	192.168.2.7
Jul 3, 2024 00:40:36.488683939 CEST	53	58644	1.1.1.1	192.168.2.7
Jul 3, 2024 00:40:37.290581942 CEST	53	63546	1.1.1.1	192.168.2.7
Jul 3, 2024 00:40:37.650921106 CEST	59991	53	192.168.2.7	1.1.1.1
Jul 3, 2024 00:40:37.651278973 CEST	60888	53	192.168.2.7	1.1.1.1
Jul 3, 2024 00:40:37.657687902 CEST	53	59991	1.1.1.1	192.168.2.7
Jul 3, 2024 00:40:37.657924891 CEST	53	60888	1.1.1.1	192.168.2.7
Jul 3, 2024 00:40:38.802920103 CEST	53	60816	1.1.1.1	192.168.2.7
Jul 3, 2024 00:40:43.317437887 CEST	53	62403	1.1.1.1	192.168.2.7
Jul 3, 2024 00:40:47.226032019 CEST	57371	53	192.168.2.7	1.1.1.1
Jul 3, 2024 00:40:47.232196093 CEST	60247	53	192.168.2.7	1.1.1.1
Jul 3, 2024 00:40:47.267810106 CEST	53	60247	1.1.1.1	192.168.2.7
Jul 3, 2024 00:41:02.315812111 CEST	53	58891	1.1.1.1	192.168.2.7
Jul 3, 2024 00:41:24.642680883 CEST	53	54300	1.1.1.1	192.168.2.7
Jul 3, 2024 00:41:25.548770905 CEST	53	50023	1.1.1.1	192.168.2.7
Jul 3, 2024 00:41:27.337460995 CEST	138	138	192.168.2.7	192.168.2.255

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Jul 3, 2024 00:40:35.759876966 CEST	192.168.2.7	1.1.1.1	c1f0	(Port unreachable)	Destination Unreachable
Jul 3, 2024 00:40:37.290649891 CEST	192.168.2.7	1.1.1.1	c200	(Port unreachable)	Destination Unreachable
Jul 3, 2024 00:40:38.802982092 CEST	192.168.2.7	1.1.1.1	c1f0	(Port unreachable)	Destination Unreachable
Jul 3, 2024 00:40:47.268383980 CEST	192.168.2.7	1.1.1.1	c24c	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jul 3, 2024 00:40:26.717364073 CEST	192.168.2.7	1.1.1.1	0x755b	Standard query (0)	review-page-violation-issue-meta-center.vercel.app	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:40:26.718669891 CEST	192.168.2.7	1.1.1.1	0x493c	Standard query (0)	review-page-violation-issue-meta-center.vercel.app	65	IN (0x0001)	false
Jul 3, 2024 00:40:27.239430904 CEST	192.168.2.7	1.1.1.1	0x9900	Standard query (0)	review-page-violation-issue-meta-center.vercel.app	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:40:27.239594936 CEST	192.168.2.7	1.1.1.1	0xc45d	Standard query (0)	review-page-violation-issue-meta-center.vercel.app	65	IN (0x0001)	false
Jul 3, 2024 00:40:29.045712948 CEST	192.168.2.7	1.1.1.1	0x94e	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:40:29.046050072 CEST	192.168.2.7	1.1.1.1	0x619b	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 3, 2024 00:40:31.371093035 CEST	192.168.2.7	1.1.1.1	0x5068	Standard query (0)	review-page-violation-issue-xi.vercel.app	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:40:31.371462107 CEST	192.168.2.7	1.1.1.1	0x4294	Standard query (0)	review-page-violation-issue-xi.vercel.app	65	IN (0x0001)	false
Jul 3, 2024 00:40:31.830950975 CEST	192.168.2.7	1.1.1.1	0xd1b6	Standard query (0)	time.windows.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:40:32.571917057 CEST	192.168.2.7	1.1.1.1	0x265f	Standard query (0)	cdn.glitch.global	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:40:32.572195053 CEST	192.168.2.7	1.1.1.1	0x81e3	Standard query (0)	cdn.glitch.global	65	IN (0x0001)	false
Jul 3, 2024 00:40:32.575551033 CEST	192.168.2.7	1.1.1.1	0xe62c	Standard query (0)	verified-badge.surge.sh	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:40:32.575985909 CEST	192.168.2.7	1.1.1.1	0x6bb0	Standard query (0)	verified-badge.surge.sh	65	IN (0x0001)	false
Jul 3, 2024 00:40:33.353157997 CEST	192.168.2.7	1.1.1.1	0xc5f	Standard query (0)	cdn.glitch.global	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:40:33.353643894 CEST	192.168.2.7	1.1.1.1	0xa0f5	Standard query (0)	cdn.glitch.global	65	IN (0x0001)	false
Jul 3, 2024 00:40:34.869229078 CEST	192.168.2.7	1.1.1.1	0x2dd2	Standard query (0)	verified-badge.surge.sh	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:40:34.869405031 CEST	192.168.2.7	1.1.1.1	0x3f27	Standard query (0)	verified-badge.surge.sh	65	IN (0x0001)	false
Jul 3, 2024 00:40:35.891618013 CEST	192.168.2.7	1.1.1.1	0x91cc	Standard query (0)	verified-badge.surge.sh	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:40:35.891808033 CEST	192.168.2.7	1.1.1.1	0xef63	Standard query (0)	verified-badge.surge.sh	65	IN (0x0001)	false
Jul 3, 2024 00:40:36.368012905 CEST	192.168.2.7	1.1.1.1	0xacb6	Standard query (0)	upload.wikimedia.org	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:40:36.368259907 CEST	192.168.2.7	1.1.1.1	0x1e5a	Standard query (0)	upload.wikimedia.org	65	IN (0x0001)	false
Jul 3, 2024 00:40:37.650921106 CEST	192.168.2.7	1.1.1.1	0xb4bb	Standard query (0)	upload.wikimedia.org	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:40:37.651278973 CEST	192.168.2.7	1.1.1.1	0x3b26	Standard query (0)	upload.wikimedia.org	65	IN (0x0001)	false
Jul 3, 2024 00:40:47.226032019 CEST	192.168.2.7	1.1.1.1	0xf036	Standard query (0)	cdn.glitch.global	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:40:47.232196093 CEST	192.168.2.7	1.1.1.1	0x218b	Standard query (0)	cdn.glitch.global	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jul 3, 2024 00:40:26.727864981 CEST	1.1.1.1	192.168.2.7	0x755b	No error (0)	review-page-violation-issue-meta-center.vercel.app		76.76.21.93	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:40:26.727864981 CEST	1.1.1.1	192.168.2.7	0x755b	No error (0)	review-page-violation-issue-meta-center.vercel.app		76.76.21.142	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:40:27.248338938 CEST	1.1.1.1	192.168.2.7	0x9900	No error (0)	review-page-violation-issue-meta-center.vercel.app		76.76.21.93	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:40:27.248338938 CEST	1.1.1.1	192.168.2.7	0x9900	No error (0)	review-page-violation-issue-meta-center.vercel.app		76.76.21.164	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:40:29.052556038 CEST	1.1.1.1	192.168.2.7	0x94e	No error (0)	www.google.com		142.250.186.164	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:40:29.053070068 CEST	1.1.1.1	192.168.2.7	0x619b	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 3, 2024 00:40:31.383800983 CEST	1.1.1.1	192.168.2.7	0x5068	No error (0)	review-page-violation-issue-xi.vercel.app		76.76.21.123	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:40:31.383800983 CEST	1.1.1.1	192.168.2.7	0x5068	No error (0)	review-page-violation-issue-xi.vercel.app		76.76.21.98	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:40:31.839474916 CEST	1.1.1.1	192.168.2.7	0xd1b6	No error (0)	time.windows.com	twc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 00:40:32.592736959 CEST	1.1.1.1	192.168.2.7	0x81e3	No error (0)	cdn.glitch.global	j.sni.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 00:40:32.684281111 CEST	1.1.1.1	192.168.2.7	0xe62c	No error (0)	verified-badge.surge.sh		138.197.235.123	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:40:32.750010967 CEST	1.1.1.1	192.168.2.7	0x265f	No error (0)	cdn.glitch.global	j.sni.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 00:40:33.366252899 CEST	1.1.1.1	192.168.2.7	0xc5f	No error (0)	cdn.glitch.global	j.sni.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 00:40:33.373980999 CEST	1.1.1.1	192.168.2.7	0xa0f5	No error (0)	cdn.glitch.global	j.sni.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 00:40:35.757054090 CEST	1.1.1.1	192.168.2.7	0x6bb0	Server failure (2)	verified-badge.surge.sh	none	none	65	IN (0x0001)	false
Jul 3, 2024 00:40:36.374766111 CEST	1.1.1.1	192.168.2.7	0xacb6	No error (0)	upload.wikimedia.org		185.15.59.240	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:40:36.446660042 CEST	1.1.1.1	192.168.2.7	0x91cc	No error (0)	verified-badge.surge.sh		138.197.235.123	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:40:36.488683939 CEST	1.1.1.1	192.168.2.7	0x3f27	Server failure (2)	verified-badge.surge.sh	none	none	65	IN (0x0001)	false
Jul 3, 2024 00:40:37.290581942 CEST	1.1.1.1	192.168.2.7	0x2dd2	No error (0)	verified-badge.surge.sh		138.68.112.220	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:40:37.657687902 CEST	1.1.1.1	192.168.2.7	0xb4bb	No error (0)	upload.wikimedia.org		185.15.59.240	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:40:38.802920103 CEST	1.1.1.1	192.168.2.7	0xef63	Server failure (2)	verified-badge.surge.sh	none	none	65	IN (0x0001)	false
Jul 3, 2024 00:40:47.245002985 CEST	1.1.1.1	192.168.2.7	0xf036	No error (0)	cdn.glitch.global	j.sni.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 00:40:47.267810106 CEST	1.1.1.1	192.168.2.7	0x218b	No error (0)	cdn.glitch.global	j.sni.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

review-page-violation-issue-meta-center.vercel.app

https:

review-page-violation-issue-xi.vercel.app

verified-badge.surge.sh

upload.wikimedia.org

fs.microsoft.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49705	76.76.21.93	80	5972	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 00:40:26.738831997 CEST	465	OUT	GET / HTTP/1.1 Host: review-page-violation-issue-meta-center.vercel.app Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 3, 2024 00:40:27.229104042 CEST	238	IN	HTTP/1.0 308 Permanent Redirect Content-Type: text/plain Location: https://review-page-violation-issue-meta-center.vercel.app/ Refresh: 0;url=https://review-page-violation-issue-meta-center.vercel.app/ server: Vercel Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e Data Ascii: Redirecting...

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49707	76.76.21.93	443	5972	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:40:27 UTC	693	OUT	GET / HTTP/1.1 Host: review-page-violation-issue-meta-center.vercel.app Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:40:27 UTC	484	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 0 Cache-Control: public, max-age=0, must-revalidate Content-Disposition: inline Content-Length: 1002 Content-Type: text/html; charset=utf-8 Date: Tue, 02 Jul 2024 22:40:27 GMT Etag: "54739c1fc056382f73c213572f494be2" Server: Vercel Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Vercel-Cache: HIT X-Vercel-Id: iad1::tl8sn-1719960027843-656f984b37af Connection: close
2024-07-02 22:40:27 UTC	1002	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 74 69 74 6c 65 3e 20 4d 45 54 41 20 42 55 53 53 49 4e 45 53 53 20 53 55 49 54 20 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2e 6c 6f 61 64 65 72 20 7b 0a 20 20 20 20 20 20 62 6f 72 64 65 72 3a 20 35 70 78 20 73 6f 6c 69 64 20 23 66 33 66 33 66 33 3b 20 2f 2a 20 4c 69 67 68 74 20 67 72 65 79 20 2a 2f 0a 20 20 20 20 20 20 62 6f 72 64 65 72 2d 74 6f 70 3a 20 35 70 78 20 73 6f 6c 69 64 20 23 33 34 39 38 64 62 3b 20 2f 2a 20 4c 69 67 68 74 20 62 6c 75 65 20 2a 2f 0a 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 25 3b 0a 20 20 20 20 20 20 77 69 64 74 68 3a 20 35 30 70 78 3b 0a 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 35 30 70 78 3b 0a 20 20 20 20 20 20 61 6e 69 Data Ascii: <html><head> <title> META BUSSINESS SUIT </title> <style> .loader { border: 5px solid #f3f3f3; /* Light grey / border-top: 5px solid #3498db; / Light blue */ border-radius: 50%; width: 50px; height: 50px; ani

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.7	49709	76.76.21.93	443	5972	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:40:28 UTC	656	OUT	GET /favicon.ico HTTP/1.1 Host: review-page-violation-issue-meta-center.vercel.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://review-page-violation-issue-meta-center.vercel.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:40:28 UTC	363	IN	HTTP/1.1 404 Not Found Cache-Control: public, max-age=0, must-revalidate Content-Length: 39 Content-Type: text/plain; charset=utf-8 Date: Tue, 02 Jul 2024 22:40:28 GMT Server: Vercel Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Vercel-Error: NOT_FOUND X-Vercel-Id: iad1::6595n-1719960028877-ede2e134a771 Connection: close
2024-07-02 22:40:28 UTC	39	IN	Data Raw: 54 68 65 20 70 61 67 65 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 66 6f 75 6e 64 0a 0a 4e 4f 54 5f 46 4f 55 4e 44 0a Data Ascii: The page could not be foundNOT_FOUND

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.7	49711	23.211.8.90	443

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:40:31 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-02 22:40:31 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=149399 Date: Tue, 02 Jul 2024 22:40:31 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.7	49713	76.76.21.123	443	5972	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:40:32 UTC	749	OUT	GET /form.html HTTP/1.1 Host: review-page-violation-issue-xi.vercel.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://review-page-violation-issue-meta-center.vercel.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:40:32 UTC	508	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 61 Cache-Control: public, max-age=0, must-revalidate Content-Disposition: inline; filename="form.html" Content-Length: 68737 Content-Type: text/html; charset=utf-8 Date: Tue, 02 Jul 2024 22:40:32 GMT Etag: "752d850fd3237368955e1283e534851c" Server: Vercel Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Vercel-Cache: HIT X-Vercel-Id: iad1::wz6rt-1719960032298-62f763f96bf9 Connection: close
2024-07-02 22:40:32 UTC	2372	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 70 6c 6f 61 64 2e 77 69 6b 69 6d 65 64 69 61 2e 6f 72 67 2f 77 69 6b 69 70 65 64 69 61 2f 63 6f 6d 6d 6f 6e 73 2f 36 2f 36 63 2f 46 61 63 65 62 6f 6f 6b 5f 4c 6f 67 6f 5f 32 30 32 33 2e 70 6e 67 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 70 6e 67 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 Data Ascii: <!doctype html><html> <head> <link rel="icon" href="https://upload.wikimedia.org/wikipedia/commons/6/6c/Facebook_Logo_2023.png" type="image/png"/> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initi
2024-07-02 22:40:32 UTC	1045	IN	Data Raw: 41 41 41 41 41 41 41 41 41 41 43 5a 57 54 6b 6f 6c 31 6b 37 6d 4a 68 5a 4f 2b 2b 59 57 54 76 2f 6d 46 6b 37 2f 35 68 5a 4f 2f 2b 59 57 54 76 2f 6d 46 6b 37 2f 35 68 5a 4f 2f 2b 59 57 54 76 2f 6d 46 6b 37 2f 35 68 5a 4f 2b 2b 58 57 54 75 59 6d 56 6b 35 4b 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 43 50 59 45 41 51 6d 46 67 36 6d 5a 68 5a 4f 2f 79 59 57 54 76 2f 6d 46 6b 37 2f 35 68 5a 4f 2f 2b 59 57 54 76 2f 6d 46 6b 37 2f 35 68 5a 4f 2f 2b 59 57 54 76 2f 6d 46 6b 37 2f 35 68 5a 4f 2f 2b 59 57 54 76 2f 6d 46 6b 37 2f 35 68 5a 4f 2f 2b 59 57 54 76 Data Ascii: AAAAAAAAAACZWTkol1k7mJhZO++YWTv/mFk7/5hZO/+YWTv/mFk7/5hZO/+YWTv/mFk7/5hZO++XWTuYmVk5KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACPYEAQmFg6mZhZO/yYWTv/mFk7/5hZO/+YWTv/mFk7/5hZO/+YWTv/mFk7/5hZO/+YWTv/mFk7/5hZO/+YWTv
2024-07-02 22:40:32 UTC	4744	IN	Data Raw: 35 68 5a 4f 2f 2b 59 57 54 76 2f 30 4c 4f 6d 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 37 61 4a 64 50 2b 59 57 54 76 2f 6d 46 6b 37 2f 35 68 5a 4f 2f 2b 59 57 54 76 2f 6d 46 6b 37 2f 35 68 5a 4f 2f 2b 59 57 54 76 2f 6d 46 6b 37 2f 35 68 5a 4f 2f 2b 59 57 54 76 2f 6d 46 67 36 6d 51 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 6d 56 6b 35 4b 4a 68 5a 4f 2f 79 59 57 54 76 2f 6d 46 6b 37 2f 35 68 5a 4f 2f 2b 59 57 54 76 2f 6d 46 6b 37 2f 35 68 5a 4f 2f 2b 59 57 54 76 2f 6d 46 6b 37 2f 35 68 5a 4f 2f 2f 51 73 36 62 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 74 6f 6c 30 2f 35 68 5a 4f 2f 2b 59 57 54 76 2f 6d 46 6b 37 2f 35 68 5a 4f 2f 2b 59 57 54 76 2f 6d 46 6b 37 2f 35 68 5a 4f 2f 2b 59 57 54 76 2f 6d 46 6b 37 Data Ascii: 5hZO/+YWTv/0LOm/////////////////7aJdP+YWTv/mFk7/5hZO/+YWTv/mFk7/5hZO/+YWTv/mFk7/5hZO/+YWTv/mFg6mQAAAAAAAAAAAAAAAAAAAAAAAAAAmVk5KJhZO/yYWTv/mFk7/5hZO/+YWTv/mFk7/5hZO/+YWTv/mFk7/5hZO//Qs6b/////////////////tol0/5hZO/+YWTv/mFk7/5hZO/+YWTv/mFk7/5hZO/+YWTv/mFk7
2024-07-02 22:40:32 UTC	5930	IN	Data Raw: 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 2f 77 41 41 41 59 35 56 4f 52 4b 58 57 44 67 67 6c 56 63 34 4b 5a 56 58 4f 43 6d 58 57 44 67 67 6a 6c 55 35 45 76 38 41 41 41 45 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 Data Ascii: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/wAAAY5VORKXWDgglVc4KZVXOCmXWDggjlU5Ev8AAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
2024-07-02 22:40:32 UTC	7116	IN	Data Raw: 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 55 75 71 33 2f 6d 31 35 41 2f 35 68 5a 4f 2f 2b 59 57 54 76 2f 6d 46 6b 37 2f 35 68 5a 4f 2f 2b 59 57 54 76 2f 6d 46 6b 37 2f 35 68 5a 4f 2f 2b 59 57 54 76 2f 6d 46 6b 37 2f 35 68 5a 4f 2f 2b 59 57 54 76 2f 6d 46 6b 37 2f 35 68 5a 4f 2b 4b 53 56 54 63 71 41 41 41 41 41 41 41 41 41 41 43 54 56 54 59 68 6d 46 6b 37 33 35 68 5a 4f 2f 2b 59 57 54 76 2f 6d 46 6b 37 2f 35 68 5a 4f 2f 2b 59 57 54 76 2f 6d 46 6b 37 2f 35 68 5a 4f 2f 2b 59 57 54 76 2f 6d 46 6b 37 2f 35 68 5a 4f 2f 2b 59 57 54 76 2f 6d 46 6b 37 2f 35 39 6b 53 50 2f 66 7a 4d 50 2f 2f 2f 2f 2f 2f 2f Data Ascii: ////////////////////////////////////////////////////////////////////Uuq3/m15A/5hZO/+YWTv/mFk7/5hZO/+YWTv/mFk7/5hZO/+YWTv/mFk7/5hZO/+YWTv/mFk7/5hZO+KSVTcqAAAAAAAAAACTVTYhmFk735hZO/+YWTv/mFk7/5hZO/+YWTv/mFk7/5hZO/+YWTv/mFk7/5hZO/+YWTv/mFk7/59kSP/fzMP///////
2024-07-02 22:40:32 UTC	8302	IN	Data Raw: 67 49 44 41 77 4d 44 42 41 59 45 42 41 51 45 42 41 67 47 42 67 55 47 43 51 67 4b 43 67 6b 49 43 51 6b 4b 44 41 38 4d 43 67 73 4f 43 77 6b 4a 44 52 45 4e 44 67 38 51 45 42 45 51 43 67 77 53 45 78 49 51 45 77 38 51 45 42 44 2f 32 77 42 44 41 51 4d 44 41 77 51 44 42 41 67 45 42 41 67 51 43 77 6b 4c 45 42 41 51 45 42 41 51 45 42 41 51 45 42 41 51 45 42 41 51 45 42 41 51 45 42 41 51 45 42 41 51 45 42 41 51 45 42 41 51 45 42 41 51 45 42 41 51 45 42 41 51 45 42 41 51 45 42 41 51 45 42 41 51 45 42 44 2f 77 41 41 52 43 41 44 4a 41 39 6b 44 41 53 49 41 41 68 45 42 41 78 45 42 2f 38 51 41 48 51 41 42 41 41 49 43 41 77 45 42 41 41 41 41 41 41 41 41 41 41 41 41 41 41 45 49 42 77 6b 45 42 51 59 43 41 2f 2f 45 41 46 77 51 41 41 45 43 42 41 51 44 41 67 59 4d 43 51 67 49 Data Ascii: gIDAwMDBAYEBAQEBAgGBgUGCQgKCgkICQkKDA8MCgsOCwkJDRENDg8QEBEQCgwSExIQEw8QEBD/2wBDAQMDAwQDBAgEBAgQCwkLEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBD/wAARCADJA9kDASIAAhEBAxEB/8QAHQABAAICAwEBAAAAAAAAAAAAAAEIBwkEBQYCA//EAFwQAAECBAQDAgYMCQgI
2024-07-02 22:40:32 UTC	6676	IN	Data Raw: 74 66 71 63 53 70 72 6c 30 61 4b 63 34 39 34 42 70 4f 4e 34 57 62 77 4a 58 68 42 66 75 32 58 6d 52 6f 52 59 36 41 37 58 76 62 64 56 61 7a 41 79 6d 78 31 6c 68 50 4f 6b 63 57 55 43 50 4c 74 35 76 45 6d 47 4d 4c 34 62 68 2b 6b 32 34 2b 6c 62 61 39 43 75 70 78 4c 68 61 67 59 75 70 6b 57 6b 59 67 70 73 47 63 6c 59 72 53 30 73 69 4e 42 74 63 57 75 4f 77 71 63 77 65 4a 63 6e 48 65 31 7a 35 6f 2f 35 47 46 2b 6c 31 57 4c 65 50 52 6d 6e 76 6f 44 63 57 49 75 4e 55 4f 68 73 72 4b 63 52 76 43 68 4f 5a 65 47 50 69 6e 42 72 49 73 33 51 79 62 78 49 4c 51 43 2b 42 63 45 33 74 65 35 41 74 30 48 55 4b 74 59 49 35 57 39 62 68 58 7a 44 7a 61 73 2b 74 57 55 76 6f 56 2b 2b 69 57 50 4c 6c 6d 67 69 49 6e 68 34 42 4f 68 4e 78 6f 6d 36 57 4a 35 51 47 68 35 64 59 74 47 39 37 37 61 Data Ascii: tfqcSprl0aKc494BpON4WbwJXhBfu2XmRoRY6A7XvbdVazAymx1lhPOkcWUCPLt5vEmGML4bh+k24+lba9CupxLhagYupkWkYgpsGclYrS0siNBtcWuOwqcweJcnHe1z5o/5GF+l1WLePRmnvoDcWIuNUOhsrKcRvChOZeGPinBrIs3QybxILQC+BcE3te5At0HUKtYI5W9bhXzDzas+tWUvoV++iWPLlmgiInh4BOhNxom6WJ5QGh5dYtG977a
2024-07-02 22:40:32 UTC	10674	IN	Data Raw: 2b 49 31 72 65 55 58 73 52 31 56 36 34 5a 30 32 43 72 39 36 73 58 56 39 69 76 61 72 6c 53 55 2f 5a 52 37 45 4e 61 47 67 41 4d 61 4c 64 57 39 56 4b 49 72 69 75 68 44 64 2b 34 49 42 33 51 36 6a 6c 30 74 35 51 44 64 45 53 4d 4e 32 63 32 57 72 46 56 6c 4a 4b 4c 54 4a 57 70 54 45 47 55 6a 6a 6c 69 77 6d 76 50 49 34 64 6c 6c 77 72 4e 49 74 73 32 78 30 38 79 4b 43 62 44 58 61 34 48 70 4e 6b 69 69 6f 39 67 62 62 37 73 73 5a 77 50 34 4f 62 69 44 4e 4f 4c 58 70 6d 46 65 48 51 35 63 50 42 4e 72 65 45 64 61 79 32 48 44 65 77 56 53 50 59 2b 71 4c 44 5a 68 62 45 4f 49 48 51 2f 68 49 38 34 4a 64 70 37 51 30 61 2f 59 72 63 41 4c 4d 2b 49 37 76 62 5a 38 6c 35 64 43 31 61 62 44 6b 6f 58 31 4a 52 46 42 76 30 55 45 53 42 78 61 72 55 49 4e 4b 70 30 7a 55 70 6c 31 6f 55 72 43 Data Ascii: +I1reUXsR1V64Z02Cr96sXV9ivarlSU/ZR7ENaGgAMaLdW9VKIriuhDd+4IB3Q6jl0t5QDdESMN2c2WrFVlJKLTJWpTEGUjjliwmvPI4dllwrNIts2x08yKCbDXa4HpNkiio9gbb7ssZwP4ObiDNOLXpmFeHQ5cPBNreEday2HDewVSPY+qLDZhbEOIHQ/hI84Jdp7Q0a/YrcALM+I7vbZ8l5dC1abDkoX1JRFBv0UESBxarUINKp0zUpl1oUrC
2024-07-02 22:40:32 UTC	11860	IN	Data Raw: 6f 73 44 62 2f 75 56 78 2b 71 31 56 38 50 6d 59 62 73 73 38 30 4b 50 58 6e 46 7a 5a 57 4e 46 62 4b 7a 67 76 70 34 4a 2b 6a 69 62 64 6d 68 57 30 36 55 6d 59 4d 37 4c 51 70 75 57 69 42 38 4b 4d 78 72 32 4f 47 78 42 46 77 66 51 71 42 78 4c 69 50 48 7a 48 59 75 30 69 77 36 56 65 72 4b 65 54 79 50 33 55 4b 56 42 56 65 5a 4b 48 52 34 30 77 74 49 34 30 77 76 55 73 4d 56 41 44 77 46 51 67 4f 68 4f 4a 46 2b 55 6e 59 2b 6c 61 71 4d 79 63 42 31 6a 4c 66 47 46 51 77 76 57 4a 61 4c 44 4d 76 47 65 59 4c 6e 6a 52 38 4f 2b 68 42 43 32 35 48 31 72 47 32 63 6d 52 57 44 73 35 4b 55 4a 61 74 79 72 59 63 2f 42 42 39 72 7a 62 42 5a 37 44 59 67 41 6b 62 6a 56 54 75 68 36 74 39 6d 32 4f 4e 6e 77 4d 6a 38 2f 45 39 34 6a 75 75 35 71 76 31 37 44 36 45 76 59 58 4f 67 38 71 73 42 6a Data Ascii: osDb/uVx+q1V8PmYbss80KPXnFzZWNFbKzgvp4J+jibdmhW06UmYM7LQpuWiB8KMxr2OGxBFwfQqBxLiPHzHYu0iw6VerKeTyP3UKVBVeZKHR40wtI40wvUsMVADwFQgOhOJF+UnY+laqMycB1jLfGFQwvWJaLDMvGeYLnjR8O+hBC25H1rG2cmRWDs5KUJatyrYc/BB9rzbBZ7DYgAkbjVTuh6t9m2ONnwMj8/E94juu5qv17D6EvYXOg8qsBj
2024-07-02 22:40:32 UTC	10018	IN	Data Raw: 65 78 20 6a 75 73 74 69 66 79 2d 63 65 6e 74 65 72 20 69 74 65 6d 73 2d 63 65 6e 74 65 72 20 6d 74 2d 37 20 6d 64 3a 68 69 64 64 65 6e 20 6c 67 3a 68 69 64 64 65 6e 20 73 6d 3a 62 6c 6f 63 6b 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 6f 72 64 65 72 20 77 2d 38 30 20 73 68 61 64 6f 77 2d 6c 67 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 62 6f 72 64 65 72 2d 62 20 70 6c 2d 33 20 62 67 2d 73 6c 61 74 65 2d 32 30 30 22 3e 4d 65 74 61 20 48 65 6c 70 20 43 65 6e 74 65 72 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 Data Ascii: ex justify-center items-center mt-7 md:hidden lg:hidden sm:block"> <div class="border w-80 shadow-lg"> <div> <p class="border-b pl-3 bg-slate-200">Meta Help Center </p>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.7	49712	76.76.21.123	443	5972	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:40:32 UTC	604	OUT	GET /index-user.css HTTP/1.1 Host: review-page-violation-issue-xi.vercel.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://review-page-violation-issue-xi.vercel.app/form.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:40:32 UTC	511	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 0 Cache-Control: public, max-age=0, must-revalidate Content-Disposition: inline; filename="index-user.css" Content-Length: 28962 Content-Type: text/css; charset=utf-8 Date: Tue, 02 Jul 2024 22:40:32 GMT Etag: "7616967cbb9d6fb41cc888e53048ec3f" Server: Vercel Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Vercel-Cache: HIT X-Vercel-Id: iad1::gdgbd-1719960032536-949eff392490 Connection: close
2024-07-02 22:40:32 UTC	2372	IN	Data Raw: 2f 2a 0a 21 20 74 61 69 6c 77 69 6e 64 63 73 73 20 76 33 2e 33 2e 33 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 68 74 74 70 73 3a 2f 2f 74 61 69 6c 77 69 6e 64 63 73 73 2e 63 6f 6d 0a 2a 2f 0a 0a 2f 2a 0a 31 2e 20 50 72 65 76 65 6e 74 20 70 61 64 64 69 6e 67 20 61 6e 64 20 62 6f 72 64 65 72 20 66 72 6f 6d 20 61 66 66 65 63 74 69 6e 67 20 65 6c 65 6d 65 6e 74 20 77 69 64 74 68 2e 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6d 6f 7a 64 65 76 73 2f 63 73 73 72 65 6d 65 64 79 2f 69 73 73 75 65 73 2f 34 29 0a 32 2e 20 41 6c 6c 6f 77 20 61 64 64 69 6e 67 20 61 20 62 6f 72 64 65 72 20 74 6f 20 61 6e 20 65 6c 65 6d 65 6e 74 20 62 79 20 6a 75 73 74 20 61 64 64 69 6e 67 20 61 20 62 6f 72 64 65 72 2d 77 69 64 74 68 2e 20 28 68 74 74 70 73 Data Ascii: /! tailwindcss v3.3.3 \| MIT License \| https://tailwindcss.com//*1. Prevent padding and border from affecting element width. (https://github.com/mozdevs/cssremedy/issues/4)2. Allow adding a border to an element by just adding a border-width. (https
2024-07-02 22:40:32 UTC	1043	IN	Data Raw: 74 72 6f 6e 67 20 7b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 65 72 3b 0a 7d 0a 0a 2f 2a 0a 31 2e 20 55 73 65 20 74 68 65 20 75 73 65 72 27 73 20 63 6f 6e 66 69 67 75 72 65 64 20 60 6d 6f 6e 6f 60 20 66 6f 6e 74 20 66 61 6d 69 6c 79 20 62 79 20 64 65 66 61 75 6c 74 2e 0a 32 2e 20 43 6f 72 72 65 63 74 20 74 68 65 20 6f 64 64 20 60 65 6d 60 20 66 6f 6e 74 20 73 69 7a 69 6e 67 20 69 6e 20 61 6c 6c 20 62 72 6f 77 73 65 72 73 2e 0a 2a 2f 0a 0a 63 6f 64 65 2c 0a 6b 62 64 2c 0a 73 61 6d 70 2c 0a 70 72 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 75 69 2d 6d 6f 6e 6f 73 70 61 63 65 2c 20 53 46 4d 6f 6e 6f 2d 52 65 67 75 6c 61 72 2c 20 4d 65 6e 6c 6f 2c 20 4d 6f 6e 61 63 6f 2c 20 43 6f 6e 73 6f 6c 61 73 2c 20 22 4c 69 62 65 72 61 74 Data Ascii: trong { font-weight: bolder;}/1. Use the user's configured `mono` font family by default.2. Correct the odd `em` font sizing in all browsers./code,kbd,samp,pre { font-family: ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberat
2024-07-02 22:40:32 UTC	4744	IN	Data Raw: 62 6f 72 64 65 72 73 20 62 79 20 64 65 66 61 75 6c 74 2e 0a 2a 2f 0a 0a 74 61 62 6c 65 20 7b 0a 20 20 74 65 78 74 2d 69 6e 64 65 6e 74 3a 20 30 3b 0a 20 20 2f 2a 20 31 20 2a 2f 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 69 6e 68 65 72 69 74 3b 0a 20 20 2f 2a 20 32 20 2a 2f 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6c 61 70 73 65 3a 20 63 6f 6c 6c 61 70 73 65 3b 0a 20 20 2f 2a 20 33 20 2a 2f 0a 7d 0a 0a 2f 2a 0a 31 2e 20 43 68 61 6e 67 65 20 74 68 65 20 66 6f 6e 74 20 73 74 79 6c 65 73 20 69 6e 20 61 6c 6c 20 62 72 6f 77 73 65 72 73 2e 0a 32 2e 20 52 65 6d 6f 76 65 20 74 68 65 20 6d 61 72 67 69 6e 20 69 6e 20 46 69 72 65 66 6f 78 20 61 6e 64 20 53 61 66 61 72 69 2e 0a 33 2e 20 52 65 6d 6f 76 65 20 64 65 66 61 75 6c 74 20 70 61 64 64 69 6e 67 20 69 6e Data Ascii: borders by default./table { text-indent: 0; / 1 / border-color: inherit; / 2 / border-collapse: collapse; / 3 /}/1. Change the font styles in all browsers.2. Remove the margin in Firefox and Safari.3. Remove default padding in
2024-07-02 22:40:32 UTC	5930	IN	Data Raw: 20 20 2d 2d 74 77 2d 72 69 6e 67 2d 6f 66 66 73 65 74 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 23 30 30 30 30 3b 0a 20 20 2d 2d 74 77 2d 72 69 6e 67 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 23 30 30 30 30 3b 0a 20 20 2d 2d 74 77 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 23 30 30 30 30 3b 0a 20 20 2d 2d 74 77 2d 73 68 61 64 6f 77 2d 63 6f 6c 6f 72 65 64 3a 20 30 20 30 20 23 30 30 30 30 3b 0a 20 20 2d 2d 74 77 2d 62 6c 75 72 3a 20 20 3b 0a 20 20 2d 2d 74 77 2d 62 72 69 67 68 74 6e 65 73 73 3a 20 20 3b 0a 20 20 2d 2d 74 77 2d 63 6f 6e 74 72 61 73 74 3a 20 20 3b 0a 20 20 2d 2d 74 77 2d 67 72 61 79 73 63 61 6c 65 3a 20 20 3b 0a 20 20 2d 2d 74 77 2d 68 75 65 2d 72 6f 74 61 74 65 3a 20 20 3b 0a 20 20 2d 2d 74 77 2d 69 6e 76 65 72 74 3a 20 20 3b 0a 20 20 2d 2d 74 77 2d Data Ascii: --tw-ring-offset-shadow: 0 0 #0000; --tw-ring-shadow: 0 0 #0000; --tw-shadow: 0 0 #0000; --tw-shadow-colored: 0 0 #0000; --tw-blur: ; --tw-brightness: ; --tw-contrast: ; --tw-grayscale: ; --tw-hue-rotate: ; --tw-invert: ; --tw-
2024-07-02 22:40:32 UTC	7116	IN	Data Raw: 20 7b 0a 20 20 77 69 64 74 68 3a 20 31 32 30 70 78 3b 0a 7d 0a 0a 2e 77 2d 5c 5b 36 30 30 70 78 5c 5d 20 7b 0a 20 20 77 69 64 74 68 3a 20 36 30 30 70 78 3b 0a 7d 0a 0a 2e 77 2d 5c 5b 36 33 30 70 78 5c 5d 20 7b 0a 20 20 77 69 64 74 68 3a 20 36 33 30 70 78 3b 0a 7d 0a 0a 2e 77 2d 66 75 6c 6c 20 7b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 7d 0a 0a 2e 6d 61 78 2d 77 2d 32 78 6c 20 7b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 34 32 72 65 6d 3b 0a 7d 0a 0a 2e 6d 61 78 2d 77 2d 6d 64 20 7b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 32 38 72 65 6d 3b 0a 7d 0a 0a 2e 6d 61 78 2d 77 2d 73 6d 20 7b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 32 34 72 65 6d 3b 0a 7d 0a 0a 2e 62 6f 72 64 65 72 2d 63 6f 6c 6c 61 70 73 65 20 7b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c Data Ascii: { width: 120px;}.w-\[600px\] { width: 600px;}.w-\[630px\] { width: 630px;}.w-full { width: 100%;}.max-w-2xl { max-width: 42rem;}.max-w-md { max-width: 28rem;}.max-w-sm { max-width: 24rem;}.border-collapse { border-col
2024-07-02 22:40:32 UTC	7757	IN	Data Raw: 7d 0a 0a 2e 70 6c 2d 37 32 20 7b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 38 72 65 6d 3b 0a 7d 0a 0a 2e 70 6c 2d 39 36 20 7b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 32 34 72 65 6d 3b 0a 7d 0a 0a 2e 70 6c 2d 5c 5b 31 32 5c 2e 37 35 72 65 6d 5c 5d 20 7b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 32 2e 37 35 72 65 6d 3b 0a 7d 0a 0a 2e 70 6c 2d 5c 5b 37 5c 2e 37 35 72 65 6d 5c 5d 20 7b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 37 2e 37 35 72 65 6d 3b 0a 7d 0a 0a 2e 70 6c 2d 5c 5b 39 5c 2e 37 35 72 65 6d 5c 5d 20 7b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 39 2e 37 35 72 65 6d 3b 0a 7d 0a 0a 2e 74 65 78 74 2d 63 65 6e 74 65 72 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a Data Ascii: }.pl-72 { padding-left: 18rem;}.pl-96 { padding-left: 24rem;}.pl-\[12\.75rem\] { padding-left: 12.75rem;}.pl-\[7\.75rem\] { padding-left: 7.75rem;}.pl-\[9\.75rem\] { padding-left: 9.75rem;}.text-center { text-align: center;}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.7	49714	23.211.8.90	443

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:40:32 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-02 22:40:32 UTC	535	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=149347 Date: Tue, 02 Jul 2024 22:40:32 GMT Content-Length: 55 Connection: close X-CID: 2
2024-07-02 22:40:32 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.7	49718	138.197.235.123	443	5972	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:40:33 UTC	657	OUT	GET /static/media/fbVideo.png.1fd476160a3ed7a2f565.png HTTP/1.1 Host: verified-badge.surge.sh Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://review-page-violation-issue-xi.vercel.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:40:34 UTC	402	IN	HTTP/1.1 200 OK Server: Surge Surge-Cache: HIT Surge-Stamp: 587::1718973935979-f530bcadf85c359ac2472ff403a5af4d Age: 579992 Date: Tue, 02 Jul 2024 22:40:33 GMT Cache-Control: public, max-age=0, must-revalidate ETag: "ee8f03c7bc16dd1848838907e76672fe2043f2efd7b3124c50fbd7e1cdf1a2bd" Content-Type: image/png Accept-Ranges: bytes Response-Time: 2ms Content-Length: 43494 Connection: close
2024-07-02 22:40:34 UTC	14958	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 d2 00 00 01 13 08 02 00 00 00 0d b6 10 70 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 80 00 49 44 41 54 78 da ec fd f9 93 64 47 92 26 88 7d aa 6a f6 de 73 f7 38 f3 4e 20 13 47 26 6e a0 80 3a 50 47 57 75 cd ce cc ca 70 67 29 14 a1 08 85 14 0a 85 c2 5f c9 7f 8b 94 15 fe b2 42 ee 72 77 76 7a 7a 76 c9 9e e9 9e e9 ae ab eb 40 e1 be af 04 f2 ce c8 38 fc 78 cf cc 54 f9 83 bd e7 ee 11 19 89 aa 40 21 a3 aa d0 ef 13 88 23 c2 d3 e3 f9 3b cc d4 d4 54 3f fd 94 fe 57 ff b7 ff 16 3d 7a f4 e8 d1 e3 b8 c0 7f ec 13 e8 d1 a3 47 8f 7f 5a e8 cd 6e 8f 1e 3d 7a 1c 2b 7a b3 db Data Ascii: PNGIHDRp cHRMz&u0`:pQ<bKGDIDATxdG&}js8N G&n:PGWupg)_Brwvzzv@8xT@!#;T?W=zGZn=z+z
2024-07-02 22:40:34 UTC	8370	IN	Data Raw: 9c e3 cf 41 18 ec 08 20 81 37 a8 02 11 49 53 26 57 39 82 30 b8 ed a4 6e 00 4a b0 24 8b 01 30 c2 cd ad f4 d9 d5 5b db 7b c1 fb b5 94 d2 a0 ac 60 13 ad b7 9f b9 74 ee c7 df 7f f6 ec c9 c1 1b f5 2e 34 72 f6 3a 89 98 5d ee 9a 60 b6 5c bd bd c8 4e 1c dd 01 64 2c fa 15 2e 7b 16 87 68 48 1d 56 85 fb 85 7b 40 02 0b 95 e2 73 09 a8 10 18 38 75 6a 6d 6d 7d 78 ea ff f4 bf 7f e5 b7 af fd ec 97 af 5c f9 fc da 74 16 1c 93 73 ce 91 c4 26 c6 a8 66 a9 a8 ca ca 97 51 43 8c b1 ae eb ec 26 62 69 c3 45 59 df 8c 8e c0 7d c8 39 de 52 5c 4a 11 49 8d 30 9e 8d ef ec 6e cf 42 28 63 e1 18 9e 1d 7b 82 25 58 42 54 24 83 17 30 53 17 bd 24 b0 99 9a c2 90 58 61 70 22 e4 04 67 37 fc 33 97 4e 8d 67 4f de fa e9 d5 10 42 59 96 04 34 4d e3 7d 09 20 24 1b 0e 87 8c 54 56 6e ba 7b e7 e4 7a f1 83 Data Ascii: A 7IS&W90nJ$0[{`t.4r:]`\Nd,.{hHV{@s8ujmm}x\ts&fQC&biEY}9R\JI0nB(c{%XBT$0S$Xap"g73NgOBY4M} $TVn{z
2024-07-02 22:40:34 UTC	16384	IN	Data Raw: 85 10 26 b3 a4 a3 d2 9b 36 34 af 02 b5 6c 76 8f af f3 c8 83 cf dc 65 59 eb 36 be e0 14 44 66 04 25 9a 81 0a 46 01 73 d0 01 68 6a 4b 7d ad ba b2 5d b4 05 b2 9a 29 68 d9 e2 e9 dc 63 98 cb e6 18 5c a6 31 18 01 64 4a d1 59 32 33 53 47 79 03 61 0e 2d ef d0 e5 2f 00 12 d0 00 6c 14 0c 45 be fb ac 45 db 0c 2d b7 56 21 96 20 04 11 4d c6 99 cc a0 4a 0a 08 e7 0b 32 d2 ae ab df 21 da 3d bf 1b 0a ca 6b b3 28 75 f3 dc 90 ed 0c 28 29 d4 c8 80 68 e6 34 77 80 e1 64 dc b4 bd 36 60 e8 24 57 68 7f c1 4f db 04 22 e7 5e cc 2d 7d 5d 34 92 1c ea cb 04 93 45 45 16 c1 0b 46 c3 2a a5 00 b5 a2 28 a0 16 4d 45 38 57 09 03 9d 7a c9 dc 8f b1 23 87 64 97 db 34 74 75 bc 79 ad 6d 7d f3 d6 c3 dd ef 59 eb be b2 85 e5 c3 cd d3 9c 2d c4 39 83 69 b4 5c 8d 46 8c 26 22 44 14 15 9a 88 ab 9f ef bd Data Ascii: &64lveY6Df%FshjK}])hc\1dJY23SGya-/lEE-V! MJ2!=k(u()h4wd6`$WhO"^-}]4EEF*(ME8Wz#d4tuym}Y-9i\F&"D
2024-07-02 22:40:34 UTC	3782	IN	Data Raw: 99 ec 8a 7b c2 fc 7b 15 b3 91 6b 01 8e 79 67 0c 1e 4f 27 73 13 57 ed 12 f9 19 83 b3 cc 51 53 21 06 17 6a 3d bd 3f c7 ff 6b 75 2f f6 69 1b 72 5d fe ee 89 3f bb fc f5 3c 37 7f 7a ff f3 f3 87 e5 8b d3 f1 24 a7 e0 c7 ff 68 28 29 37 fa f4 ee 7d 7a 83 bf e7 28 49 f9 f0 34 5e cd 1a 03 4b 23 21 d2 e1 cd 32 c6 72 66 70 70 18 00 56 df 81 2d 5f 6c ee 49 c9 7d 2f a4 c4 e6 a8 ed 0e 3e 6e 24 b1 00 9a 3b 9a ac 12 76 ce 85 90 30 8c b2 72 71 07 1b 08 64 66 09 67 40 55 15 a4 64 ab f7 64 78 64 d0 a9 ef 90 e1 33 52 d9 1f 3b 99 20 cb d7 98 a7 a4 96 af fd f8 f3 8f 8e 5a e8 a8 e6 6e be 88 4a e2 1a 83 ef 93 f8 7a ba b1 71 61 32 dd 3e 9c f7 87 b3 ae 0b 11 60 66 56 50 6e 91 5c da c1 e1 e4 95 e9 c4 71 a5 b4 fa 3b cb 02 9e 93 7f fc d8 05 e6 d8 27 7e fc df c7 d6 d0 4e 5c 81 8e dd d0 Data Ascii: {{kygO'sWQS!j=?ku/ir]?<7z$h()7}z(I4^K#!2rfppV-_lI}/>n$;v0rqdfg@Uddxd3R; ZnJzqa2>`fVPn\q;'~N\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.7	49721	76.76.21.123	443	5972	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:40:35 UTC	21180	OUT	GET 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 [TRUNCATED] Host: review-page-violation-issue-xi.vercel.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://review-page-violation-issue-xi.vercel.app/form.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:40:35 UTC	147	IN	HTTP/1.1 308 Permanent Redirect Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Tue, 02 Jul 2024 22:40:35 GMT
2024-07-02 22:40:35 UTC	19126	IN	Data Raw: 4c 6f 63 61 74 69 6f 6e 3a 20 2f 41 41 41 42 41 41 4d 41 45 42 41 41 41 41 45 41 49 41 42 6f 42 41 41 41 4e 67 41 41 41 43 41 67 41 41 41 42 41 43 41 41 4b 42 45 41 41 4a 34 45 41 41 41 77 4d 41 41 41 41 51 41 67 41 47 67 6d 41 41 44 47 46 51 41 41 4b 41 41 41 41 42 41 41 41 41 41 67 41 41 41 41 41 51 41 67 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 2f 77 41 41 41 5a 64 58 4f 69 79 59 56 7a 70 50 6d 46 63 36 54 35 64 58 4f 69 7a 2f 41 41 41 42 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 43 41 51 45 41 45 6d 46 6f 35 62 35 68 59 4f 2b 47 59 Data Ascii: Location: /AAABAAMAEBAAAAEAIABoBAAANgAAACAgAAABACAAKBEAAJ4EAAAwMAAAAQAgAGgmAADGFQAAKAAAABAAAAAgAAAAAQAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/wAAAZdXOiyYVzpPmFc6T5dXOiz/AAABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAQEAEmFo5b5hYO+GY
2024-07-02 22:40:35 UTC	19322	IN	Data Raw: 52 65 66 72 65 73 68 3a 20 30 3b 75 72 6c 3d 2f 41 41 41 42 41 41 4d 41 45 42 41 41 41 41 45 41 49 41 42 6f 42 41 41 41 4e 67 41 41 41 43 41 67 41 41 41 42 41 43 41 41 4b 42 45 41 41 4a 34 45 41 41 41 77 4d 41 41 41 41 51 41 67 41 47 67 6d 41 41 44 47 46 51 41 41 4b 41 41 41 41 42 41 41 41 41 41 67 41 41 41 41 41 51 41 67 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 2f 77 41 41 41 5a 64 58 4f 69 79 59 56 7a 70 50 6d 46 63 36 54 35 64 58 4f 69 7a 2f 41 41 41 42 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 43 41 51 45 41 45 6d 46 6f 35 62 35 68 Data Ascii: Refresh: 0;url=/AAABAAMAEBAAAAEAIABoBAAANgAAACAgAAABACAAKBEAAJ4EAAAwMAAAAQAgAGgmAADGFQAAKAAAABAAAAAgAAAAAQAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/wAAAZdXOiyYVzpPmFc6T5dXOiz/AAABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAQEAEmFo5b5h
2024-07-02 22:40:35 UTC	20	IN	Data Raw: 66 0d 0a 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 0a 0d 0a Data Ascii: fRedirecting...
2024-07-02 22:40:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.7	49724	76.76.21.123	443	5972	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:40:36 UTC	19749	OUT	GET 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 [TRUNCATED] Host: review-page-violation-issue-xi.vercel.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://review-page-violation-issue-xi.vercel.app/form.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:40:36 UTC	363	IN	HTTP/1.1 404 Not Found Cache-Control: public, max-age=0, must-revalidate Content-Length: 39 Content-Type: text/plain; charset=utf-8 Date: Tue, 02 Jul 2024 22:40:36 GMT Server: Vercel Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Vercel-Error: NOT_FOUND X-Vercel-Id: iad1::rrb99-1719960036294-2e6b462ce874 Connection: close
2024-07-02 22:40:36 UTC	39	IN	Data Raw: 54 68 65 20 70 61 67 65 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 66 6f 75 6e 64 0a 0a 4e 4f 54 5f 46 4f 55 4e 44 0a Data Ascii: The page could not be foundNOT_FOUND

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.7	49725	185.15.59.240	443	5972	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:40:37 UTC	650	OUT	GET /wikipedia/commons/6/6c/Facebook_Logo_2023.png HTTP/1.1 Host: upload.wikimedia.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://review-page-violation-issue-xi.vercel.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:40:37 UTC	661	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 08:06:30 GMT etag: e4da23704f27c9df07e6c21a13e28bfd server: ATS/9.1.4 content-type: image/png x-object-meta-sha1base36: khqfbdm55vq0s0y0eqr5onb4hjn6qc9 last-modified: Wed, 11 Oct 2023 12:15:27 GMT content-length: 54771 age: 52446 x-cache: cp3079 hit, cp3079 hit/350 x-cache-status: hit-front server-timing: cache;desc="hit-front", host;desc="cp3079" x-client-ip: 8.46.123.33 x-content-type-options: nosniff access-control-allow-origin: * access-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache timing-allow-origin: * accept-ranges: bytes connection: close
2024-07-02 22:40:37 UTC	14256	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 08 24 00 00 08 24 08 06 00 00 00 68 2c 37 ba 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 20 00 49 44 41 54 78 9c ec dd cd 6a 65 59 96 d8 f1 15 e1 a2 e9 dd 60 eb fa ab 4c 83 1b 89 32 36 1e 59 aa 89 f1 c8 d2 dc 83 50 3f c1 55 8e f6 30 55 4f 90 91 4f 50 8a e1 19 85 e2 09 52 31 f0 d0 e4 95 c7 86 94 c0 60 63 d3 46 c2 0d a6 cb 6e f7 95 6d fa 98 a6 dc d7 9c 9b 5b 91 37 54 8a 08 7d dc 8f f3 f1 fb 81 88 ec 28 aa 2b 6b 2f 41 94 94 7f ad f5 62 36 9b 05 00 00 00 d0 5d 29 c7 4e c4 fc e3 b1 0e d6 f4 5f 7a 1a 11 17 8f fd 37 d5 55 4c 56 f3 b7 03 00 00 00 ac 83 20 01 00 00 00 56 24 e5 7b ff 81 ff 5e 44 8c 1e f1 fb 8d 7d 33 ba d7 cd 67 42 87 ab f2 f1 90 df 9f d6 d5 e3 83 09 00 00 00 e0 f3 04 09 Data Ascii: PNGIHDR$$h,7pHYs.#.#x?v IDATxjeY`L26YP?U0UOOPR1`cFnm[7T}(+k/Ab6])N_z7ULV V${^D}3gB
2024-07-02 22:40:37 UTC	16320	IN	Data Raw: 00 00 80 1a 99 1e b4 8a 43 e5 09 24 50 0b 83 0f d5 69 db 02 00 00 d6 6a 66 4f ce 1c ff 54 9e db b5 3d 5b 0d 13 00 00 80 9a 3a e6 74 03 75 20 90 40 e5 39 d5 00 00 00 0c 43 bf 15 e1 a1 32 a7 1e 2a 33 fe 9a b1 5c 63 a8 00 00 00 d4 98 d3 0d d4 82 40 02 75 e0 54 03 00 00 b0 26 bb 26 93 c7 7f 2f 8b 33 7b 72 ad 49 02 00 00 d0 10 4e 37 50 79 02 09 54 9a 53 0d 00 00 c0 5a 3d 70 30 8b 5f f9 68 32 31 2e e8 0c 00 00 40 e3 38 dd 40 a5 8d 59 0f 55 e5 54 03 00 00 b0 16 fd 13 0d 9f 3f 9c 85 5d db b3 d5 20 01 00 00 68 a8 7e f8 fe 68 92 59 0b a6 8a 34 24 50 65 47 9c 6a 00 00 00 56 63 ef ce e4 f8 a7 f2 9c 30 02 00 00 00 2d 70 a8 28 b3 df a2 a9 22 81 04 2a 69 f0 a1 79 af ed 00 00 00 2b d5 3f d1 f0 f0 e1 e4 35 63 b9 c6 f0 00 00 00 68 09 a7 1b a8 24 81 04 2a c7 a9 06 00 00 60 Data Ascii: C$PijfOT=[:tu @9C23\c@uT&&/3{rIN7PyTSZ=p0_h21.@8@YUT?] h~hY4$PeGjVc0-p("iy+?5ch$*`
2024-07-02 22:40:37 UTC	16320	IN	Data Raw: b7 e7 e3 b0 1c 01 00 3e d3 3d fe a0 90 70 49 26 00 00 00 00 00 30 bc f9 cb c2 03 00 d8 4c 21 01 00 00 00 00 00 46 d4 e9 c6 6a 67 5d 8a 00 00 9b 39 d9 00 00 00 00 00 00 23 fa b8 13 ea 08 00 00 5b 28 24 00 00 00 00 00 c0 88 de f9 30 36 64 08 00 f0 30 85 04 00 00 00 00 00 18 d1 89 73 d1 92 21 00 c0 e7 7e 12 9b 0a 09 6b 72 01 00 00 00 00 80 e1 2c 5d 17 1c 00 c0 56 77 0b 09 dd e3 71 56 32 00 00 00 00 00 30 9c 85 65 c1 01 00 6c e5 64 03 00 00 00 00 00 8c e0 e2 4a 2c c9 0f 00 e0 51 0a 09 00 00 00 00 00 30 82 0b 2b fe ae 1d 00 60 8b b5 50 48 00 00 00 00 00 80 d1 9c ba 10 fb 44 08 00 f0 90 b3 b1 a5 90 60 a5 14 00 00 00 00 00 0c e8 bd c5 d8 2f 33 00 80 47 6d 2e 24 5c 92 0f 00 00 00 00 00 0c 66 fe b2 c0 00 00 b6 e3 64 03 00 00 00 00 00 0c a9 d3 8d d5 ce ba f4 00 00 Data Ascii: >=pI&0L!Fjg]9#[($06d0s!~kr,]VwqV20eldJ,Q0+`PHD`/3Gm.$\fd
2024-07-02 22:40:37 UTC	7875	IN	Data Raw: 00 ec 40 8f 12 4e bc 35 00 00 00 00 c0 de b5 18 61 21 46 00 d8 3e 41 02 c0 8e d4 92 f3 56 dc 7a 6f 00 00 00 00 80 bd 79 ec 31 c2 9d 11 00 6c 9f 20 01 60 87 7a 71 fb b9 17 b8 00 00 00 00 00 ec ce 7d 92 03 31 02 c0 ee 08 12 00 76 ac 96 dc b4 02 57 94 00 00 00 00 00 b0 33 b7 7d 33 c2 93 27 07 d8 1d 41 02 c0 1e f4 02 f7 a0 17 b9 00 00 00 00 00 6c cf aa 16 31 02 c0 3e 08 12 00 f6 a4 96 3c f4 4d 09 a2 04 00 00 00 00 80 ed b8 a8 25 4b 6f 0b b0 1f 82 04 80 3d ea 45 6e 8b 12 56 e6 00 00 00 00 00 b0 51 47 b5 e4 d8 93 02 ec cf 2f de 1e 60 bf 7a 94 b0 fc f0 75 fd 7f c6 ff 1a 07 00 00 00 00 c0 bb 3c b7 ff e6 5a 4b ae 3c 23 c0 7e d9 90 00 30 10 7d 6d d8 91 79 00 00 00 00 00 bc 59 8b 11 16 62 04 80 61 10 24 00 0c 48 2d b9 4c f2 a5 ff a5 19 00 00 00 00 80 97 bb 4f 72 50 Data Ascii: @N5a!F>AVzoy1l `zq}1vW3}3'Al1><M%Ko=EnVQG/`zu<ZK<#~0}myYba$H-LOrP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.7	49726	138.197.235.123	443	5972	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:40:37 UTC	396	OUT	GET /static/media/fbVideo.png.1fd476160a3ed7a2f565.png HTTP/1.1 Host: verified-badge.surge.sh Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:40:37 UTC	402	IN	HTTP/1.1 200 OK Server: Surge Surge-Cache: HIT Surge-Stamp: 615::1718973935979-f530bcadf85c359ac2472ff403a5af4d Age: 579996 Date: Tue, 02 Jul 2024 22:40:37 GMT Cache-Control: public, max-age=0, must-revalidate ETag: "ee8f03c7bc16dd1848838907e76672fe2043f2efd7b3124c50fbd7e1cdf1a2bd" Content-Type: image/png Accept-Ranges: bytes Response-Time: 2ms Content-Length: 43494 Connection: close
2024-07-02 22:40:37 UTC	2424	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 d2 00 00 01 13 08 02 00 00 00 0d b6 10 70 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 80 00 49 44 41 54 78 da ec fd f9 93 64 47 92 26 88 7d aa 6a f6 de 73 f7 38 f3 4e 20 13 47 26 6e a0 80 3a 50 47 57 75 cd ce cc ca 70 67 29 14 a1 08 85 14 0a 85 c2 5f c9 7f 8b 94 15 fe b2 42 ee 72 77 76 7a 7a 76 c9 9e e9 9e e9 ae ab eb 40 e1 be af 04 f2 ce c8 38 fc 78 cf cc 54 f9 83 bd e7 ee 11 19 89 aa 40 21 a3 aa d0 ef 13 88 23 c2 d3 e3 f9 3b cc d4 d4 54 3f fd 94 fe 57 ff b7 ff 16 3d 7a f4 e8 d1 e3 b8 c0 7f ec 13 e8 d1 a3 47 8f 7f 5a e8 cd 6e 8f 1e 3d 7a 1c 2b 7a b3 db Data Ascii: PNGIHDRp cHRMz&u0`:pQ<bKGDIDATxdG&}js8N G&n:PGWupg)_Brwvzzv@8xT@!#;T?W=zGZn=z+z
2024-07-02 22:40:37 UTC	16384	IN	Data Raw: 7f c8 45 a2 f3 65 f0 6b b3 1e fe 99 40 61 c6 0c c7 20 98 49 8c a1 0e 69 a6 31 78 32 58 22 44 43 24 02 41 73 a2 0c 76 c0 d4 1e ac bf 9d c7 19 32 fd 95 8e 58 6e 40 87 3c fc e5 10 ec c1 12 de fd 65 17 8b f0 34 83 0d 99 d2 66 48 8e 24 99 38 22 f1 55 65 51 29 28 80 2e ec 4b 9c 09 bf 73 23 3e af 36 06 7a e3 fb 07 e2 6b 66 70 33 fe 6c cc ee dc bc ce 91 7f 3d e0 d5 f6 fa aa c7 0c a1 d4 46 04 10 55 1b 4b 75 8a b5 c5 da 84 c9 62 5b e0 4b ad 4c 82 81 89 0f 98 bf 03 66 92 97 55 1b 08 59 bf f1 48 51 86 e5 0f ef ff 39 c7 13 da 57 9a 33 bc ba 0f b6 a9 b6 4c cd 85 59 42 34 13 53 d5 14 49 13 25 47 ec 03 8f 41 4e 1c 03 6c aa 50 18 88 59 74 71 21 f9 d2 fa cd d6 ef 85 fb cd d3 83 b2 cb 5f af fe 20 7f 36 66 77 b9 ee 68 b9 59 c0 bc 07 d7 01 7c 9d 1e d2 9f 2c 18 ea 04 b0 a4 1a Data Ascii: Eek@a Ii1x2X"DC$Asv2Xn@<e4fH$8"UeQ)(.Ks#>6zkfp3l=FUKub[KLfUYHQ9W3LYB4SI%GANlPYtq!_ 6fwhY\|,
2024-07-02 22:40:37 UTC	16384	IN	Data Raw: 19 ad 9c d4 04 2a 04 68 5a 06 1f 98 80 ae d5 64 22 d7 12 4e 46 c3 95 db 77 f6 ee de 9d 35 4c 4a ce 90 c4 8c 0c 6c 92 99 fc 4a 92 94 66 08 9e f9 bb df f9 a6 29 66 33 6c ae ad d6 b3 a6 2c e6 6c d3 fc d2 7e d1 a8 1a ec cc 1a 57 14 ff f1 3f ff f4 95 d7 3e 9a 36 dc 58 15 a7 40 c9 ca 1c 0d cd 54 01 4f e5 3a 2c 4e ea fa dd 0f ae 12 ff 74 75 f4 cf bf f1 cc da b4 4e a5 4b 5e 5c 4a f1 88 a1 21 bb 73 f3 c6 7f f9 bf fd e7 ab c3 96 2e a9 da d4 b3 f1 ea 68 18 42 e3 7d 15 43 62 61 66 0e b1 16 e7 01 4c 1a fc fc 97 6f fc fc 67 bf f9 ec da 16 c9 4a 55 ac b0 5b 99 36 a4 f0 00 ab 69 cb 78 27 e6 a4 d1 34 45 73 83 f5 90 c2 a7 57 6f ab 79 50 c5 e4 67 b3 59 6a f6 4e 9f 5e df 58 a9 ce 9e 1a 22 19 3b ca 3c f2 94 12 58 52 4a 59 3c c5 cc 86 c3 61 8c f1 be 57 70 c4 71 6a 39 7d 81 25 Data Ascii: *hZd"NFw5LJlJf)f3l,l~W?>6X@TO:,NtuNK^\J!s.hB}CbafLogJU[6ix'4EsWoyPgYjN^X";<XRJY<aWpqj9}%
2024-07-02 22:40:37 UTC	8302	IN	Data Raw: fa ba 99 6c 8e a7 30 42 34 04 85 63 31 58 48 c9 40 22 3e df b3 85 98 bc f7 c4 0c ca 81 df 0c 62 62 21 e6 3e 46 16 af 26 f3 8e aa 5a c0 d8 3d c0 ac ad 5e 7d f3 9d 3e 81 a4 76 be 8a 7d b0 64 de d7 96 68 36 6b ef dd db bd 75 eb 7e 48 d5 74 73 b3 1a 03 a0 f3 17 9e 7e f0 60 7f e7 e1 c3 9d 9d dd 66 54 37 a3 7a be 38 88 b1 9d 6e 8c 72 a5 f0 a7 79 9c ff ec e3 0e 94 e3 83 dc e3 cf 94 93 d7 92 df bf fd 33 a9 31 e1 71 cb 67 8f 5b 69 b3 a1 e2 c5 f2 ef 82 97 d6 f6 24 46 08 09 49 01 f1 9b 5b e7 bf f5 ad ef fd f5 5f 7f 6b 6b 0a 9f 0b a5 88 d5 62 d4 48 24 22 8e c8 19 1c 28 af 1c 2d ed 09 48 18 0e 54 a9 49 52 4e e6 95 28 af 25 ed 1f e2 d5 37 76 fe e3 7f 7e f9 d7 af bd 73 ef e1 2c a8 33 aa 40 35 94 55 2d 27 9f 25 4d 60 38 e7 0c e6 bd 8f 31 11 8b f3 55 df c7 18 e1 a5 51 b5 Data Ascii: l0B4c1XH@">bb!>F&Z=^}>v}dh6ku~Hts~`fT7z8nry31qg[i$FI[_kkbH$"(-HTIRN(%7v~s,3@5U-'%M`81UQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.7	49727	185.15.59.240	443	5972	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:40:38 UTC	389	OUT	GET /wikipedia/commons/6/6c/Facebook_Logo_2023.png HTTP/1.1 Host: upload.wikimedia.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:40:38 UTC	661	IN	HTTP/1.1 200 OK date: Tue, 02 Jul 2024 08:06:30 GMT etag: e4da23704f27c9df07e6c21a13e28bfd server: ATS/9.1.4 content-type: image/png x-object-meta-sha1base36: khqfbdm55vq0s0y0eqr5onb4hjn6qc9 last-modified: Wed, 11 Oct 2023 12:15:27 GMT content-length: 54771 age: 52447 x-cache: cp3079 hit, cp3079 hit/351 x-cache-status: hit-front server-timing: cache;desc="hit-front", host;desc="cp3079" x-client-ip: 8.46.123.33 x-content-type-options: nosniff access-control-allow-origin: * access-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache timing-allow-origin: * accept-ranges: bytes connection: close
2024-07-02 22:40:38 UTC	14256	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 08 24 00 00 08 24 08 06 00 00 00 68 2c 37 ba 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 20 00 49 44 41 54 78 9c ec dd cd 6a 65 59 96 d8 f1 15 e1 a2 e9 dd 60 eb fa ab 4c 83 1b 89 32 36 1e 59 aa 89 f1 c8 d2 dc 83 50 3f c1 55 8e f6 30 55 4f 90 91 4f 50 8a e1 19 85 e2 09 52 31 f0 d0 e4 95 c7 86 94 c0 60 63 d3 46 c2 0d a6 cb 6e f7 95 6d fa 98 a6 dc d7 9c 9b 5b 91 37 54 8a 08 7d dc 8f f3 f1 fb 81 88 ec 28 aa 2b 6b 2f 41 94 94 7f ad f5 62 36 9b 05 00 00 00 d0 5d 29 c7 4e c4 fc e3 b1 0e d6 f4 5f 7a 1a 11 17 8f fd 37 d5 55 4c 56 f3 b7 03 00 00 00 ac 83 20 01 00 00 00 56 24 e5 7b ff 81 ff 5e 44 8c 1e f1 fb 8d 7d 33 ba d7 cd 67 42 87 ab f2 f1 90 df 9f d6 d5 e3 83 09 00 00 00 e0 f3 04 09 Data Ascii: PNGIHDR$$h,7pHYs.#.#x?v IDATxjeY`L26YP?U0UOOPR1`cFnm[7T}(+k/Ab6])N_z7ULV V${^D}3gB
2024-07-02 22:40:38 UTC	16320	IN	Data Raw: 00 00 80 1a 99 1e b4 8a 43 e5 09 24 50 0b 83 0f d5 69 db 02 00 00 d6 6a 66 4f ce 1c ff 54 9e db b5 3d 5b 0d 13 00 00 80 9a 3a e6 74 03 75 20 90 40 e5 39 d5 00 00 00 0c 43 bf 15 e1 a1 32 a7 1e 2a 33 fe 9a b1 5c 63 a8 00 00 00 d4 98 d3 0d d4 82 40 02 75 e0 54 03 00 00 b0 26 bb 26 93 c7 7f 2f 8b 33 7b 72 ad 49 02 00 00 d0 10 4e 37 50 79 02 09 54 9a 53 0d 00 00 c0 5a 3d 70 30 8b 5f f9 68 32 31 2e e8 0c 00 00 40 e3 38 dd 40 a5 8d 59 0f 55 e5 54 03 00 00 b0 16 fd 13 0d 9f 3f 9c 85 5d db b3 d5 20 01 00 00 68 a8 7e f8 fe 68 92 59 0b a6 8a 34 24 50 65 47 9c 6a 00 00 00 56 63 ef ce e4 f8 a7 f2 9c 30 02 00 00 00 2d 70 a8 28 b3 df a2 a9 22 81 04 2a 69 f0 a1 79 af ed 00 00 00 2b d5 3f d1 f0 f0 e1 e4 35 63 b9 c6 f0 00 00 00 68 09 a7 1b a8 24 81 04 2a c7 a9 06 00 00 60 Data Ascii: C$PijfOT=[:tu @9C23\c@uT&&/3{rIN7PyTSZ=p0_h21.@8@YUT?] h~hY4$PeGjVc0-p("iy+?5ch$*`
2024-07-02 22:40:38 UTC	16320	IN	Data Raw: b7 e7 e3 b0 1c 01 00 3e d3 3d fe a0 90 70 49 26 00 00 00 00 00 30 bc f9 cb c2 03 00 d8 4c 21 01 00 00 00 00 00 46 d4 e9 c6 6a 67 5d 8a 00 00 9b 39 d9 00 00 00 00 00 00 23 fa b8 13 ea 08 00 00 5b 28 24 00 00 00 00 00 c0 88 de f9 30 36 64 08 00 f0 30 85 04 00 00 00 00 00 18 d1 89 73 d1 92 21 00 c0 e7 7e 12 9b 0a 09 6b 72 01 00 00 00 00 80 e1 2c 5d 17 1c 00 c0 56 77 0b 09 dd e3 71 56 32 00 00 00 00 00 30 9c 85 65 c1 01 00 6c e5 64 03 00 00 00 00 00 8c e0 e2 4a 2c c9 0f 00 e0 51 0a 09 00 00 00 00 00 30 82 0b 2b fe ae 1d 00 60 8b b5 50 48 00 00 00 00 00 80 d1 9c ba 10 fb 44 08 00 f0 90 b3 b1 a5 90 60 a5 14 00 00 00 00 00 0c e8 bd c5 d8 2f 33 00 80 47 6d 2e 24 5c 92 0f 00 00 00 00 00 0c 66 fe b2 c0 00 00 b6 e3 64 03 00 00 00 00 00 0c a9 d3 8d d5 ce ba f4 00 00 Data Ascii: >=pI&0L!Fjg]9#[($06d0s!~kr,]VwqV20eldJ,Q0+`PHD`/3Gm.$\fd
2024-07-02 22:40:38 UTC	7875	IN	Data Raw: 00 ec 40 8f 12 4e bc 35 00 00 00 00 c0 de b5 18 61 21 46 00 d8 3e 41 02 c0 8e d4 92 f3 56 dc 7a 6f 00 00 00 00 80 bd 79 ec 31 c2 9d 11 00 6c 9f 20 01 60 87 7a 71 fb b9 17 b8 00 00 00 00 00 ec ce 7d 92 03 31 02 c0 ee 08 12 00 76 ac 96 dc b4 02 57 94 00 00 00 00 00 b0 33 b7 7d 33 c2 93 27 07 d8 1d 41 02 c0 1e f4 02 f7 a0 17 b9 00 00 00 00 00 6c cf aa 16 31 02 c0 3e 08 12 00 f6 a4 96 3c f4 4d 09 a2 04 00 00 00 00 80 ed b8 a8 25 4b 6f 0b b0 1f 82 04 80 3d ea 45 6e 8b 12 56 e6 00 00 00 00 00 b0 51 47 b5 e4 d8 93 02 ec cf 2f de 1e 60 bf 7a 94 b0 fc f0 75 fd 7f c6 ff 1a 07 00 00 00 00 c0 bb 3c b7 ff e6 5a 4b ae 3c 23 c0 7e d9 90 00 30 10 7d 6d d8 91 79 00 00 00 00 00 bc 59 8b 11 16 62 04 80 61 10 24 00 0c 48 2d b9 4c f2 a5 ff a5 19 00 00 00 00 80 97 bb 4f 72 50 Data Ascii: @N5a!F>AVzoy1l `zq}1vW3}3'Al1><M%Ko=EnVQG/`zu<ZK<#~0}myYba$H-LOrP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.7	49717	138.197.235.123	443	5972	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:40:38 UTC	102	IN	Data Raw: 48 54 54 50 2f 31 2e 30 20 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 0d 0a Data Ascii: HTTP/1.0 408 Request Time-outCache-Control: no-cacheConnection: closeContent-Type: text/html
2024-07-02 22:40:38 UTC	110	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>

Target ID:	0
Start time:	18:40:18
Start date:	02/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	18:40:22
Start date:	02/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2224 --field-trial-handle=2180,i,14074570221467818592,8360864355931828750,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	18:40:25
Start date:	02/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://review-page-violation-issue-meta-center.vercel.app/"
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	20:33:27
Start date:	02/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4424 --field-trial-handle=2180,i,14074570221467818592,8360864355931828750,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://review-page-violation-issue-meta-center.vercel.app/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Chrome Cache Entry: 90

Chrome Cache Entry: 91

Chrome Cache Entry: 92

Chrome Cache Entry: 93

Windows Analysis Report
http://review-page-violation-issue-meta-center.vercel.app/