Windows
Analysis Report
https://clinicasanclemente.com/ap/
Overview
Detection
Score: | 52 |
Range: | 0 - 100 |
Whitelisted: | false |
Confidence: | 100% |
Signatures
Classification
- System is w10x64
- chrome.exe (PID: 4308 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --st art-maximi zed "about :blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4) - chrome.exe (PID: 4564 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --ty pe=utility --utility -sub-type= network.mo jom.Networ kService - -lang=en-U S --servic e-sandbox- type=none --mojo-pla tform-chan nel-handle =2060 --fi eld-trial- handle=200 8,i,178321 3528645293 5298,15271 7127500922 76784,2621 44 --disab le-feature s=Optimiza tionGuideM odelDownlo ading,Opti mizationHi nts,Optimi zationHint sFetching, Optimizati onTargetPr ediction / prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)
- chrome.exe (PID: 6352 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" "htt ps://clini casancleme nte.com/ap /" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)
- cleanup
Source | Rule | Description | Author | Strings |
---|---|---|---|---|
JoeSecurity_HtmlPhish_10 | Yara detected HtmlPhish_10 | Joe Security |
Source | Rule | Description | Author | Strings |
---|---|---|---|---|
JoeSecurity_HtmlPhish_10 | Yara detected HtmlPhish_10 | Joe Security |
Click to jump to signature section
Phishing |
---|
Source: | File source: | ||
Source: | File source: |
Source: | HTTP Parser: |
Source: | HTTP Parser: |
Source: | HTTP Parser: |
Source: | HTTP Parser: |
Source: | HTTP Parser: |
Networking |
---|
Source: | DNS query: | ||
Source: | DNS query: | ||
Source: | DNS query: | ||
Source: | DNS query: | ||
Source: | DNS query: | ||
Source: | DNS query: | ||
Source: | DNS query: | ||
Source: | DNS query: | ||
Source: | DNS query: | ||
Source: | DNS query: | ||
Source: | DNS query: | ||
Source: | DNS query: | ||
Source: | DNS query: | ||
Source: | DNS query: | ||
Source: | DNS query: | ||
Source: | DNS query: |
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: |
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: |
Source: | DNS traffic detected: | ||
Source: | DNS traffic detected: | ||
Source: | DNS traffic detected: | ||
Source: | DNS traffic detected: |
Source: | HTTP traffic detected: |
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: |
Source: | Classification label: |
Source: | Process created: | |||
Source: | Process created: | |||
Source: | Process created: | |||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior |
Source: | Window detected: |
Reconnaissance | Resource Development | Initial Access | Execution | Persistence | Privilege Escalation | Defense Evasion | Credential Access | Discovery | Lateral Movement | Collection | Command and Control | Exfiltration | Impact |
---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Gather Victim Identity Information | Acquire Infrastructure | Valid Accounts | Windows Management Instrumentation | Path Interception | 1 Process Injection | 1 Process Injection | OS Credential Dumping | System Service Discovery | Remote Services | Data from Local System | 1 Encrypted Channel | Exfiltration Over Other Network Medium | Abuse Accessibility Features |
Credentials | Domains | Default Accounts | Scheduled Task/Job | Boot or Logon Initialization Scripts | Boot or Logon Initialization Scripts | Rootkit | LSASS Memory | Application Window Discovery | Remote Desktop Protocol | Data from Removable Media | 3 Non-Application Layer Protocol | Exfiltration Over Bluetooth | Network Denial of Service |
Email Addresses | DNS Server | Domain Accounts | At | Logon Script (Windows) | Logon Script (Windows) | Obfuscated Files or Information | Security Account Manager | Query Registry | SMB/Windows Admin Shares | Data from Network Shared Drive | 4 Application Layer Protocol | Automated Exfiltration | Data Encrypted for Impact |
Employee Names | Virtual Private Server | Local Accounts | Cron | Login Hook | Login Hook | Binary Padding | NTDS | System Network Configuration Discovery | Distributed Component Object Model | Input Capture | 3 Ingress Tool Transfer | Traffic Duplication | Data Destruction |
This section contains all screenshots as thumbnails, including those not shown in the slideshow.
Source | Detection | Scanner | Label | Link |
---|---|---|---|---|
0% | Avira URL Cloud | safe |
Source | Detection | Scanner | Label | Link |
---|---|---|---|---|
0% | Avira URL Cloud | safe |
Name | IP | Active | Malicious | Antivirus Detection | Reputation |
---|---|---|---|---|---|
google.com | 172.217.16.206 | true | false | high | |
www.google.com | 142.250.186.164 | true | false | high | |
clinicasanclemente.com | 68.65.120.84 | true | false | unknown | |
0nline1.online-mba.xyz | unknown | unknown | false | high |
Name | Malicious | Antivirus Detection | Reputation |
---|---|---|---|
false | unknown | ||
false |
| unknown |
- No. of IPs < 25%
- 25% < No. of IPs < 50%
- 50% < No. of IPs < 75%
- 75% < No. of IPs
IP | Domain | Country | Flag | ASN | ASN Name | Malicious |
---|---|---|---|---|---|---|
239.255.255.250 | unknown | Reserved | unknown | unknown | false | |
142.250.186.164 | www.google.com | United States | 15169 | GOOGLEUS | false | |
68.65.120.84 | clinicasanclemente.com | United States | 22612 | NAMECHEAP-NETUS | false |
IP |
---|
192.168.2.4 |
Joe Sandbox version: | 42.0.0 Malachite |
Analysis ID: | 1586834 |
Start date and time: | 2025-01-09 17:07:00 +01:00 |
Joe Sandbox product: | CloudBasic |
Overall analysis duration: | 0h 3m 4s |
Hypervisor based Inspection enabled: | false |
Report type: | full |
Cookbook file name: | browseurl.jbs |
Sample URL: | https://clinicasanclemente.com/ap/ |
Analysis system description: | Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01 |
Number of analysed new started processes analysed: | 8 |
Number of new started drivers analysed: | 0 |
Number of existing processes analysed: | 0 |
Number of existing drivers analysed: | 0 |
Number of injected processes analysed: | 0 |
Technologies: |
|
Analysis Mode: | default |
Analysis stop reason: | Timeout |
Detection: | MAL |
Classification: | mal52.phis.troj.win@23/4@26/4 |
EGA Information: | Failed |
HCA Information: |
|
- Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
- Excluded IPs from analysis (whitelisted): 142.250.74.195, 172.217.18.14, 74.125.71.84, 142.250.185.174, 216.58.206.78, 142.250.186.46, 142.250.184.202, 142.250.185.202, 142.250.185.234, 142.250.185.170, 142.250.184.234, 172.217.16.202, 172.217.16.138, 216.58.206.74, 216.58.206.42, 172.217.18.10, 142.250.186.170, 142.250.186.106, 142.250.181.234, 142.250.185.106, 142.250.185.138, 142.250.186.138, 199.232.214.172, 192.229.221.95, 142.250.185.110, 142.250.185.206, 142.250.184.206, 172.217.16.206, 142.250.185.67, 142.250.186.174, 184.28.90.27, 20.12.23.50, 13.107.246.45
- Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com
- Not all processes where analyzed, report is missing behavior information
- Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
- VT rate limit hit for: https://clinicasanclemente.com/ap/
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | downloaded |
Size (bytes): | 16 |
Entropy (8bit): | 3.452819531114783 |
Encrypted: | false |
SSDEEP: | 3:Has6Ln:6sCn |
MD5: | CD598D2DCE38CFBA2981425AFD8CC5FF |
SHA1: | 56C8577B18B89C77A6AC58B925F8ECAB11BEF02C |
SHA-256: | 64BC0BCC655408713CCC3195B859007631C335758AAC8575658AC138509233E8 |
SHA-512: | 61797961E4747CA9CD7B3E6746E5243F7D9EF59B21B27911E974CEB68460C71ED438FEAAE6C7E1BC77A50E687D63A26623DB0AC1204DEAC60D094EFD0271C6FA |
Malicious: | false |
Reputation: | low |
URL: | https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAnWm0MRbjt0xBIFDa8aOOA=?alt=proto |
Preview: |
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | downloaded |
Size (bytes): | 353536 |
Entropy (8bit): | 6.031117862766441 |
Encrypted: | false |
SSDEEP: | 6144:SODDORezIlikECAtwafzsCNU1W9gor53/OR7uxc6RrA8EvhIajS4qbVw7TvoN:SKORVmptw6sCGA9gsJ/OR7VRWeSpRJN |
MD5: | 2D035C5D226CC83EE6D98FA46E76DAE4 |
SHA1: | 7D83647F3AEF744D6AA6F201AA04242F6671F9EE |
SHA-256: | 1FFF84BD0F1C927C3D92CFA8A6DD033CDE24062A29F22255204D94742AB858C1 |
SHA-512: | 71ECA620E6C8ACF157EC96C49275138F1A4A3E4957AFDEA7BEA8865DE7316F045A7E3516BD24E54C10F2082EC9AF7951C2D17A1DA7FE75A01B1ADB959C59D9ED |
Malicious: | false |
Reputation: | low |
URL: | https://clinicasanclemente.com/ap/ |
Preview: |
Timestamp | Source Port | Dest Port | Source IP | Dest IP |
---|---|---|---|---|
Jan 9, 2025 17:08:01.990148067 CET | 49675 | 443 | 192.168.2.4 | 173.222.162.32 |
Jan 9, 2025 17:08:06.562278986 CET | 49738 | 443 | 192.168.2.4 | 142.250.186.164 |
Jan 9, 2025 17:08:06.562304974 CET | 443 | 49738 | 142.250.186.164 | 192.168.2.4 |
Jan 9, 2025 17:08:06.562432051 CET | 49738 | 443 | 192.168.2.4 | 142.250.186.164 |
Jan 9, 2025 17:08:06.562809944 CET | 49738 | 443 | 192.168.2.4 | 142.250.186.164 |
Jan 9, 2025 17:08:06.562824965 CET | 443 | 49738 | 142.250.186.164 | 192.168.2.4 |
Jan 9, 2025 17:08:07.280939102 CET | 443 | 49738 | 142.250.186.164 | 192.168.2.4 |
Jan 9, 2025 17:08:07.281542063 CET | 49738 | 443 | 192.168.2.4 | 142.250.186.164 |
Jan 9, 2025 17:08:07.281573057 CET | 443 | 49738 | 142.250.186.164 | 192.168.2.4 |
Jan 9, 2025 17:08:07.282584906 CET | 443 | 49738 | 142.250.186.164 | 192.168.2.4 |
Jan 9, 2025 17:08:07.282660961 CET | 49738 | 443 | 192.168.2.4 | 142.250.186.164 |
Jan 9, 2025 17:08:07.283878088 CET | 49738 | 443 | 192.168.2.4 | 142.250.186.164 |
Jan 9, 2025 17:08:07.283943892 CET | 443 | 49738 | 142.250.186.164 | 192.168.2.4 |
Jan 9, 2025 17:08:07.334285975 CET | 49738 | 443 | 192.168.2.4 | 142.250.186.164 |
Jan 9, 2025 17:08:07.334312916 CET | 443 | 49738 | 142.250.186.164 | 192.168.2.4 |
Jan 9, 2025 17:08:07.381283998 CET | 49738 | 443 | 192.168.2.4 | 142.250.186.164 |
Jan 9, 2025 17:08:07.901191950 CET | 49739 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:07.901233912 CET | 443 | 49739 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:07.901304007 CET | 49739 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:07.901818037 CET | 49740 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:07.901865959 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:07.901916027 CET | 49740 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:07.902080059 CET | 49739 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:07.902095079 CET | 443 | 49739 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:07.902331114 CET | 49740 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:07.902344942 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:08.639734030 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:08.640258074 CET | 49740 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:08.640271902 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:08.640532017 CET | 443 | 49739 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:08.640717030 CET | 49739 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:08.640734911 CET | 443 | 49739 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:08.641163111 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:08.641213894 CET | 49740 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:08.641585112 CET | 443 | 49739 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:08.641642094 CET | 49739 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:08.647429943 CET | 49740 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:08.647489071 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:08.649385929 CET | 49739 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:08.649440050 CET | 443 | 49739 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:08.649827003 CET | 49740 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:08.649836063 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:08.694689035 CET | 49740 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:08.694698095 CET | 49739 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:08.694761038 CET | 443 | 49739 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:08.740703106 CET | 49739 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:09.122041941 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.122107029 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.122128963 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.122170925 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.122167110 CET | 49740 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:09.122198105 CET | 49740 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:09.122200966 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.122210026 CET | 49740 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:09.122220039 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.122243881 CET | 49740 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:09.122252941 CET | 49740 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:09.142728090 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.142797947 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.142808914 CET | 49740 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:09.142827034 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.142858982 CET | 49740 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:09.188290119 CET | 49740 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:09.212227106 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.212260962 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.212291956 CET | 49740 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:09.212304115 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.212346077 CET | 49740 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:09.233186960 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.233237982 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.233254910 CET | 49740 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:09.233261108 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.233300924 CET | 49740 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:09.234925032 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.234970093 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.234978914 CET | 49740 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:09.234997988 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.235038996 CET | 49740 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:09.236890078 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.236932039 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.236938953 CET | 49740 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:09.236954927 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.236988068 CET | 49740 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:09.237018108 CET | 49740 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:09.302742958 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.302778959 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.302824974 CET | 49740 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:09.302845001 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.302870989 CET | 49740 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:09.302894115 CET | 49740 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:09.323184013 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.323213100 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.323287964 CET | 49740 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:09.323297024 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.323337078 CET | 49740 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:09.324081898 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.324103117 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.324151993 CET | 49740 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:09.324157000 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.324187040 CET | 49740 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:09.325064898 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.325086117 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.325129986 CET | 49740 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:09.325134039 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.325169086 CET | 49740 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:09.326639891 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.326658964 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.326692104 CET | 49740 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:09.326697111 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.326739073 CET | 49740 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:09.327630997 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.327672005 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.327707052 CET | 49740 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:09.327717066 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.327739000 CET | 49740 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:09.327754974 CET | 49740 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:09.357780933 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.357801914 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.357872963 CET | 49740 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:09.357887983 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.358226061 CET | 49740 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:09.393507004 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.393537045 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.393716097 CET | 49740 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:09.393734932 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.393773079 CET | 49740 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:09.394071102 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.394093037 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.394140959 CET | 49740 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:09.394145966 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.394220114 CET | 49740 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:09.425457001 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.425499916 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.425523043 CET | 49740 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:09.425539970 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.425570965 CET | 49740 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:09.425904989 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.425921917 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.425955057 CET | 49740 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:09.425961018 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.425987005 CET | 49740 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:09.426006079 CET | 49740 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:09.426234961 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.426249027 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.426290989 CET | 49740 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:09.426295042 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.426322937 CET | 49740 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:09.426338911 CET | 49740 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:09.426604986 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.426628113 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.426675081 CET | 49740 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:09.426678896 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.426707983 CET | 49740 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:09.431947947 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.431965113 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.432015896 CET | 49740 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:09.432020903 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.432065010 CET | 49740 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:09.448483944 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.448502064 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.448668957 CET | 49740 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:09.448674917 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.448709965 CET | 49740 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:09.467061043 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.467149019 CET | 49740 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:09.467155933 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.467175007 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.467212915 CET | 49740 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:09.576446056 CET | 49740 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:09.576488972 CET | 443 | 49740 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.661036015 CET | 49739 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:09.707329988 CET | 443 | 49739 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.835728884 CET | 443 | 49739 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.844407082 CET | 443 | 49739 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:09.844472885 CET | 49739 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:09.844882011 CET | 49739 | 443 | 192.168.2.4 | 68.65.120.84 |
Jan 9, 2025 17:08:09.844903946 CET | 443 | 49739 | 68.65.120.84 | 192.168.2.4 |
Jan 9, 2025 17:08:16.014576912 CET | 49723 | 80 | 192.168.2.4 | 2.22.50.144 |
Jan 9, 2025 17:08:16.019629002 CET | 80 | 49723 | 2.22.50.144 | 192.168.2.4 |
Jan 9, 2025 17:08:16.019682884 CET | 49723 | 80 | 192.168.2.4 | 2.22.50.144 |
Jan 9, 2025 17:08:17.097002983 CET | 443 | 49738 | 142.250.186.164 | 192.168.2.4 |
Jan 9, 2025 17:08:17.097059011 CET | 443 | 49738 | 142.250.186.164 | 192.168.2.4 |
Jan 9, 2025 17:08:17.097174883 CET | 49738 | 443 | 192.168.2.4 | 142.250.186.164 |
Jan 9, 2025 17:08:18.959654093 CET | 49738 | 443 | 192.168.2.4 | 142.250.186.164 |
Jan 9, 2025 17:08:18.959686995 CET | 443 | 49738 | 142.250.186.164 | 192.168.2.4 |
Jan 9, 2025 17:09:02.161267042 CET | 49724 | 80 | 192.168.2.4 | 199.232.210.172 |
Jan 9, 2025 17:09:02.166516066 CET | 80 | 49724 | 199.232.210.172 | 192.168.2.4 |
Jan 9, 2025 17:09:02.166594028 CET | 49724 | 80 | 192.168.2.4 | 199.232.210.172 |
Jan 9, 2025 17:09:06.616791964 CET | 49858 | 443 | 192.168.2.4 | 142.250.186.164 |
Jan 9, 2025 17:09:06.616842031 CET | 443 | 49858 | 142.250.186.164 | 192.168.2.4 |
Jan 9, 2025 17:09:06.616931915 CET | 49858 | 443 | 192.168.2.4 | 142.250.186.164 |
Jan 9, 2025 17:09:06.617151022 CET | 49858 | 443 | 192.168.2.4 | 142.250.186.164 |
Jan 9, 2025 17:09:06.617189884 CET | 443 | 49858 | 142.250.186.164 | 192.168.2.4 |
Jan 9, 2025 17:09:07.266601086 CET | 443 | 49858 | 142.250.186.164 | 192.168.2.4 |
Jan 9, 2025 17:09:07.300431013 CET | 49858 | 443 | 192.168.2.4 | 142.250.186.164 |
Jan 9, 2025 17:09:07.300512075 CET | 443 | 49858 | 142.250.186.164 | 192.168.2.4 |
Jan 9, 2025 17:09:07.301064968 CET | 443 | 49858 | 142.250.186.164 | 192.168.2.4 |
Jan 9, 2025 17:09:07.303060055 CET | 49858 | 443 | 192.168.2.4 | 142.250.186.164 |
Jan 9, 2025 17:09:07.303138971 CET | 443 | 49858 | 142.250.186.164 | 192.168.2.4 |
Jan 9, 2025 17:09:07.361653090 CET | 49858 | 443 | 192.168.2.4 | 142.250.186.164 |
Jan 9, 2025 17:09:17.197649956 CET | 443 | 49858 | 142.250.186.164 | 192.168.2.4 |
Jan 9, 2025 17:09:17.197709084 CET | 443 | 49858 | 142.250.186.164 | 192.168.2.4 |
Jan 9, 2025 17:09:17.197820902 CET | 49858 | 443 | 192.168.2.4 | 142.250.186.164 |
Jan 9, 2025 17:09:18.959151030 CET | 49858 | 443 | 192.168.2.4 | 142.250.186.164 |
Jan 9, 2025 17:09:18.959194899 CET | 443 | 49858 | 142.250.186.164 | 192.168.2.4 |
Timestamp | Source Port | Dest Port | Source IP | Dest IP |
---|---|---|---|---|
Jan 9, 2025 17:08:02.468964100 CET | 53 | 49848 | 1.1.1.1 | 192.168.2.4 |
Jan 9, 2025 17:08:02.498549938 CET | 53 | 55199 | 1.1.1.1 | 192.168.2.4 |
Jan 9, 2025 17:08:03.493657112 CET | 53 | 56382 | 1.1.1.1 | 192.168.2.4 |
Jan 9, 2025 17:08:06.554194927 CET | 62805 | 53 | 192.168.2.4 | 1.1.1.1 |
Jan 9, 2025 17:08:06.554572105 CET | 52790 | 53 | 192.168.2.4 | 1.1.1.1 |
Jan 9, 2025 17:08:06.560868979 CET | 53 | 62805 | 1.1.1.1 | 192.168.2.4 |
Jan 9, 2025 17:08:06.561297894 CET | 53 | 52790 | 1.1.1.1 | 192.168.2.4 |
Jan 9, 2025 17:08:07.866121054 CET | 60311 | 53 | 192.168.2.4 | 1.1.1.1 |
Jan 9, 2025 17:08:07.866262913 CET | 59602 | 53 | 192.168.2.4 | 1.1.1.1 |
Jan 9, 2025 17:08:07.878905058 CET | 53 | 59602 | 1.1.1.1 | 192.168.2.4 |
Jan 9, 2025 17:08:07.900584936 CET | 53 | 60311 | 1.1.1.1 | 192.168.2.4 |
Jan 9, 2025 17:08:09.667128086 CET | 53 | 62779 | 1.1.1.1 | 192.168.2.4 |
Jan 9, 2025 17:08:13.745136976 CET | 138 | 138 | 192.168.2.4 | 192.168.2.255 |
Jan 9, 2025 17:08:20.419329882 CET | 53 | 53307 | 1.1.1.1 | 192.168.2.4 |
Jan 9, 2025 17:08:24.250590086 CET | 63588 | 53 | 192.168.2.4 | 1.1.1.1 |
Jan 9, 2025 17:08:24.250885963 CET | 50783 | 53 | 192.168.2.4 | 1.1.1.1 |
Jan 9, 2025 17:08:24.270525932 CET | 53 | 63588 | 1.1.1.1 | 192.168.2.4 |
Jan 9, 2025 17:08:24.272803068 CET | 53 | 50783 | 1.1.1.1 | 192.168.2.4 |
Jan 9, 2025 17:08:24.273360968 CET | 60530 | 53 | 192.168.2.4 | 1.1.1.1 |
Jan 9, 2025 17:08:24.284105062 CET | 53 | 60530 | 1.1.1.1 | 192.168.2.4 |
Jan 9, 2025 17:08:24.355858088 CET | 54327 | 53 | 192.168.2.4 | 8.8.8.8 |
Jan 9, 2025 17:08:24.356185913 CET | 55487 | 53 | 192.168.2.4 | 1.1.1.1 |
Jan 9, 2025 17:08:24.362977982 CET | 53 | 55487 | 1.1.1.1 | 192.168.2.4 |
Jan 9, 2025 17:08:24.364511967 CET | 53 | 54327 | 8.8.8.8 | 192.168.2.4 |
Jan 9, 2025 17:08:25.368539095 CET | 53105 | 53 | 192.168.2.4 | 1.1.1.1 |
Jan 9, 2025 17:08:25.368675947 CET | 53378 | 53 | 192.168.2.4 | 1.1.1.1 |
Jan 9, 2025 17:08:25.377784967 CET | 53 | 53105 | 1.1.1.1 | 192.168.2.4 |
Jan 9, 2025 17:08:25.384635925 CET | 53 | 53378 | 1.1.1.1 | 192.168.2.4 |
Jan 9, 2025 17:08:30.404686928 CET | 64926 | 53 | 192.168.2.4 | 1.1.1.1 |
Jan 9, 2025 17:08:30.404870987 CET | 58207 | 53 | 192.168.2.4 | 1.1.1.1 |
Jan 9, 2025 17:08:30.413489103 CET | 53 | 58207 | 1.1.1.1 | 192.168.2.4 |
Jan 9, 2025 17:08:30.417789936 CET | 53 | 64926 | 1.1.1.1 | 192.168.2.4 |
Jan 9, 2025 17:08:30.418890953 CET | 58253 | 53 | 192.168.2.4 | 1.1.1.1 |
Jan 9, 2025 17:08:30.428750992 CET | 53 | 58253 | 1.1.1.1 | 192.168.2.4 |
Jan 9, 2025 17:08:36.249083996 CET | 57936 | 53 | 192.168.2.4 | 1.1.1.1 |
Jan 9, 2025 17:08:36.249083996 CET | 64823 | 53 | 192.168.2.4 | 1.1.1.1 |
Jan 9, 2025 17:08:36.257783890 CET | 53 | 57936 | 1.1.1.1 | 192.168.2.4 |
Jan 9, 2025 17:08:36.263629913 CET | 53 | 64823 | 1.1.1.1 | 192.168.2.4 |
Jan 9, 2025 17:08:36.264199018 CET | 63921 | 53 | 192.168.2.4 | 1.1.1.1 |
Jan 9, 2025 17:08:36.281095982 CET | 53 | 63921 | 1.1.1.1 | 192.168.2.4 |
Jan 9, 2025 17:08:36.293430090 CET | 59361 | 53 | 192.168.2.4 | 1.1.1.1 |
Jan 9, 2025 17:08:36.293966055 CET | 61932 | 53 | 192.168.2.4 | 8.8.8.8 |
Jan 9, 2025 17:08:36.300265074 CET | 53 | 59361 | 1.1.1.1 | 192.168.2.4 |
Jan 9, 2025 17:08:36.301265001 CET | 53 | 61932 | 8.8.8.8 | 192.168.2.4 |
Jan 9, 2025 17:08:39.200105906 CET | 53 | 63525 | 1.1.1.1 | 192.168.2.4 |
Jan 9, 2025 17:09:01.950880051 CET | 53 | 60726 | 1.1.1.1 | 192.168.2.4 |
Jan 9, 2025 17:09:02.145755053 CET | 53 | 62963 | 1.1.1.1 | 192.168.2.4 |
Jan 9, 2025 17:09:06.309418917 CET | 58298 | 53 | 192.168.2.4 | 1.1.1.1 |
Jan 9, 2025 17:09:06.309534073 CET | 52158 | 53 | 192.168.2.4 | 1.1.1.1 |
Jan 9, 2025 17:09:06.327634096 CET | 53 | 58298 | 1.1.1.1 | 192.168.2.4 |
Jan 9, 2025 17:09:06.330037117 CET | 53 | 52158 | 1.1.1.1 | 192.168.2.4 |
Jan 9, 2025 17:09:06.330667019 CET | 61365 | 53 | 192.168.2.4 | 1.1.1.1 |
Jan 9, 2025 17:09:06.344058990 CET | 53 | 61365 | 1.1.1.1 | 192.168.2.4 |
Jan 9, 2025 17:09:06.719813108 CET | 63100 | 53 | 192.168.2.4 | 1.1.1.1 |
Jan 9, 2025 17:09:06.720029116 CET | 65072 | 53 | 192.168.2.4 | 1.1.1.1 |
Jan 9, 2025 17:09:06.729790926 CET | 53 | 65072 | 1.1.1.1 | 192.168.2.4 |
Jan 9, 2025 17:09:06.751132011 CET | 53 | 63100 | 1.1.1.1 | 192.168.2.4 |
Jan 9, 2025 17:09:06.764997959 CET | 55192 | 53 | 192.168.2.4 | 1.1.1.1 |
Jan 9, 2025 17:09:06.765193939 CET | 58943 | 53 | 192.168.2.4 | 8.8.8.8 |
Jan 9, 2025 17:09:06.772303104 CET | 53 | 58943 | 8.8.8.8 | 192.168.2.4 |
Jan 9, 2025 17:09:06.772635937 CET | 53 | 55192 | 1.1.1.1 | 192.168.2.4 |
Timestamp | Source IP | Dest IP | Trans ID | OP Code | Name | Type | Class | DNS over HTTPS |
---|---|---|---|---|---|---|---|---|
Jan 9, 2025 17:08:06.554194927 CET | 192.168.2.4 | 1.1.1.1 | 0x5f60 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Jan 9, 2025 17:08:06.554572105 CET | 192.168.2.4 | 1.1.1.1 | 0x3773 | Standard query (0) | 65 | IN (0x0001) | false | |
Jan 9, 2025 17:08:07.866121054 CET | 192.168.2.4 | 1.1.1.1 | 0x27f | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Jan 9, 2025 17:08:07.866262913 CET | 192.168.2.4 | 1.1.1.1 | 0x20c0 | Standard query (0) | 65 | IN (0x0001) | false | |
Jan 9, 2025 17:08:24.250590086 CET | 192.168.2.4 | 1.1.1.1 | 0xee67 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Jan 9, 2025 17:08:24.250885963 CET | 192.168.2.4 | 1.1.1.1 | 0x9bc | Standard query (0) | 65 | IN (0x0001) | false | |
Jan 9, 2025 17:08:24.273360968 CET | 192.168.2.4 | 1.1.1.1 | 0x7f59 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Jan 9, 2025 17:08:24.355858088 CET | 192.168.2.4 | 8.8.8.8 | 0x2ada | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Jan 9, 2025 17:08:24.356185913 CET | 192.168.2.4 | 1.1.1.1 | 0xb1a8 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Jan 9, 2025 17:08:25.368539095 CET | 192.168.2.4 | 1.1.1.1 | 0x2c2e | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Jan 9, 2025 17:08:25.368675947 CET | 192.168.2.4 | 1.1.1.1 | 0xb9e5 | Standard query (0) | 65 | IN (0x0001) | false | |
Jan 9, 2025 17:08:30.404686928 CET | 192.168.2.4 | 1.1.1.1 | 0xad83 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Jan 9, 2025 17:08:30.404870987 CET | 192.168.2.4 | 1.1.1.1 | 0xb34a | Standard query (0) | 65 | IN (0x0001) | false | |
Jan 9, 2025 17:08:30.418890953 CET | 192.168.2.4 | 1.1.1.1 | 0x4cff | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Jan 9, 2025 17:08:36.249083996 CET | 192.168.2.4 | 1.1.1.1 | 0xcf18 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Jan 9, 2025 17:08:36.249083996 CET | 192.168.2.4 | 1.1.1.1 | 0x40e1 | Standard query (0) | 65 | IN (0x0001) | false | |
Jan 9, 2025 17:08:36.264199018 CET | 192.168.2.4 | 1.1.1.1 | 0x2702 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Jan 9, 2025 17:08:36.293430090 CET | 192.168.2.4 | 1.1.1.1 | 0xb977 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Jan 9, 2025 17:08:36.293966055 CET | 192.168.2.4 | 8.8.8.8 | 0x7db6 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Jan 9, 2025 17:09:06.309418917 CET | 192.168.2.4 | 1.1.1.1 | 0x907b | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Jan 9, 2025 17:09:06.309534073 CET | 192.168.2.4 | 1.1.1.1 | 0x9327 | Standard query (0) | 65 | IN (0x0001) | false | |
Jan 9, 2025 17:09:06.330667019 CET | 192.168.2.4 | 1.1.1.1 | 0x6739 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Jan 9, 2025 17:09:06.719813108 CET | 192.168.2.4 | 1.1.1.1 | 0xdb6e | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Jan 9, 2025 17:09:06.720029116 CET | 192.168.2.4 | 1.1.1.1 | 0x194b | Standard query (0) | 65 | IN (0x0001) | false | |
Jan 9, 2025 17:09:06.764997959 CET | 192.168.2.4 | 1.1.1.1 | 0xfa30 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Jan 9, 2025 17:09:06.765193939 CET | 192.168.2.4 | 8.8.8.8 | 0x11b2 | Standard query (0) | A (IP address) | IN (0x0001) | false |
Timestamp | Source IP | Dest IP | Trans ID | Reply Code | Name | CName | Address | Type | Class | DNS over HTTPS |
---|---|---|---|---|---|---|---|---|---|---|
Jan 9, 2025 17:08:06.560868979 CET | 1.1.1.1 | 192.168.2.4 | 0x5f60 | No error (0) | 142.250.186.164 | A (IP address) | IN (0x0001) | false | ||
Jan 9, 2025 17:08:06.561297894 CET | 1.1.1.1 | 192.168.2.4 | 0x3773 | No error (0) | 65 | IN (0x0001) | false | |||
Jan 9, 2025 17:08:07.900584936 CET | 1.1.1.1 | 192.168.2.4 | 0x27f | No error (0) | 68.65.120.84 | A (IP address) | IN (0x0001) | false | ||
Jan 9, 2025 17:08:24.270525932 CET | 1.1.1.1 | 192.168.2.4 | 0xee67 | Name error (3) | none | none | A (IP address) | IN (0x0001) | false | |
Jan 9, 2025 17:08:24.272803068 CET | 1.1.1.1 | 192.168.2.4 | 0x9bc | Name error (3) | none | none | 65 | IN (0x0001) | false | |
Jan 9, 2025 17:08:24.284105062 CET | 1.1.1.1 | 192.168.2.4 | 0x7f59 | Name error (3) | none | none | A (IP address) | IN (0x0001) | false | |
Jan 9, 2025 17:08:24.362977982 CET | 1.1.1.1 | 192.168.2.4 | 0xb1a8 | No error (0) | 172.217.16.206 | A (IP address) | IN (0x0001) | false | ||
Jan 9, 2025 17:08:24.364511967 CET | 8.8.8.8 | 192.168.2.4 | 0x2ada | No error (0) | 172.217.168.78 | A (IP address) | IN (0x0001) | false | ||
Jan 9, 2025 17:08:25.377784967 CET | 1.1.1.1 | 192.168.2.4 | 0x2c2e | Name error (3) | none | none | A (IP address) | IN (0x0001) | false | |
Jan 9, 2025 17:08:25.384635925 CET | 1.1.1.1 | 192.168.2.4 | 0xb9e5 | Name error (3) | none | none | 65 | IN (0x0001) | false | |
Jan 9, 2025 17:08:30.413489103 CET | 1.1.1.1 | 192.168.2.4 | 0xb34a | Name error (3) | none | none | 65 | IN (0x0001) | false | |
Jan 9, 2025 17:08:30.417789936 CET | 1.1.1.1 | 192.168.2.4 | 0xad83 | Name error (3) | none | none | A (IP address) | IN (0x0001) | false | |
Jan 9, 2025 17:08:30.428750992 CET | 1.1.1.1 | 192.168.2.4 | 0x4cff | Name error (3) | none | none | A (IP address) | IN (0x0001) | false | |
Jan 9, 2025 17:08:36.257783890 CET | 1.1.1.1 | 192.168.2.4 | 0xcf18 | Name error (3) | none | none | A (IP address) | IN (0x0001) | false | |
Jan 9, 2025 17:08:36.263629913 CET | 1.1.1.1 | 192.168.2.4 | 0x40e1 | Name error (3) | none | none | 65 | IN (0x0001) | false | |
Jan 9, 2025 17:08:36.281095982 CET | 1.1.1.1 | 192.168.2.4 | 0x2702 | Name error (3) | none | none | A (IP address) | IN (0x0001) | false | |
Jan 9, 2025 17:08:36.300265074 CET | 1.1.1.1 | 192.168.2.4 | 0xb977 | No error (0) | 142.250.186.78 | A (IP address) | IN (0x0001) | false | ||
Jan 9, 2025 17:08:36.301265001 CET | 8.8.8.8 | 192.168.2.4 | 0x7db6 | No error (0) | 172.217.168.78 | A (IP address) | IN (0x0001) | false | ||
Jan 9, 2025 17:09:06.327634096 CET | 1.1.1.1 | 192.168.2.4 | 0x907b | Name error (3) | none | none | A (IP address) | IN (0x0001) | false | |
Jan 9, 2025 17:09:06.330037117 CET | 1.1.1.1 | 192.168.2.4 | 0x9327 | Name error (3) | none | none | 65 | IN (0x0001) | false | |
Jan 9, 2025 17:09:06.344058990 CET | 1.1.1.1 | 192.168.2.4 | 0x6739 | Name error (3) | none | none | A (IP address) | IN (0x0001) | false | |
Jan 9, 2025 17:09:06.729790926 CET | 1.1.1.1 | 192.168.2.4 | 0x194b | Name error (3) | none | none | 65 | IN (0x0001) | false | |
Jan 9, 2025 17:09:06.751132011 CET | 1.1.1.1 | 192.168.2.4 | 0xdb6e | Name error (3) | none | none | A (IP address) | IN (0x0001) | false | |
Jan 9, 2025 17:09:06.772303104 CET | 8.8.8.8 | 192.168.2.4 | 0x11b2 | No error (0) | 172.217.168.78 | A (IP address) | IN (0x0001) | false | ||
Jan 9, 2025 17:09:06.772635937 CET | 1.1.1.1 | 192.168.2.4 | 0xfa30 | No error (0) | 216.58.206.46 | A (IP address) | IN (0x0001) | false |
|
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
0 | 192.168.2.4 | 49740 | 68.65.120.84 | 443 | 4564 | C:\Program Files\Google\Chrome\Application\chrome.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
2025-01-09 16:08:08 UTC | 668 | OUT | |
2025-01-09 16:08:09 UTC | 269 | IN | |
2025-01-09 16:08:09 UTC | 16115 | IN | |
2025-01-09 16:08:09 UTC | 16384 | IN | |
2025-01-09 16:08:09 UTC | 16384 | IN | |
2025-01-09 16:08:09 UTC | 15259 | IN | |
2025-01-09 16:08:09 UTC | 1401 | IN | |
2025-01-09 16:08:09 UTC | 16384 | IN | |
2025-01-09 16:08:09 UTC | 16384 | IN | |
2025-01-09 16:08:09 UTC | 16384 | IN | |
2025-01-09 16:08:09 UTC | 16322 | IN | |
2025-01-09 16:08:09 UTC | 71 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
1 | 192.168.2.4 | 49739 | 68.65.120.84 | 443 | 4564 | C:\Program Files\Google\Chrome\Application\chrome.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
2025-01-09 16:08:09 UTC | 603 | OUT | |
2025-01-09 16:08:09 UTC | 319 | IN | |
2025-01-09 16:08:09 UTC | 1251 | IN |
Click to jump to process
Click to jump to process
Click to jump to process
Target ID: | 0 |
Start time: | 11:07:57 |
Start date: | 09/01/2025 |
Path: | C:\Program Files\Google\Chrome\Application\chrome.exe |
Wow64 process (32bit): | false |
Commandline: | |
Imagebase: | 0x7ff76e190000 |
File size: | 3'242'272 bytes |
MD5 hash: | 45DE480806D1B5D462A7DDE4DCEFC4E4 |
Has elevated privileges: | true |
Has administrator privileges: | true |
Programmed in: | C, C++ or other language |
Reputation: | low |
Has exited: | false |
Target ID: | 2 |
Start time: | 11:08:01 |
Start date: | 09/01/2025 |
Path: | C:\Program Files\Google\Chrome\Application\chrome.exe |
Wow64 process (32bit): | false |
Commandline: | |
Imagebase: | 0x7ff76e190000 |
File size: | 3'242'272 bytes |
MD5 hash: | 45DE480806D1B5D462A7DDE4DCEFC4E4 |
Has elevated privileges: | true |
Has administrator privileges: | true |
Programmed in: | C, C++ or other language |
Reputation: | low |
Has exited: | false |
Target ID: | 3 |
Start time: | 11:08:07 |
Start date: | 09/01/2025 |
Path: | C:\Program Files\Google\Chrome\Application\chrome.exe |
Wow64 process (32bit): | false |
Commandline: | |
Imagebase: | 0x7ff76e190000 |
File size: | 3'242'272 bytes |
MD5 hash: | 45DE480806D1B5D462A7DDE4DCEFC4E4 |
Has elevated privileges: | true |
Has administrator privileges: | true |
Programmed in: | C, C++ or other language |
Reputation: | low |
Has exited: | true |