Edit tour

Windows Analysis Report
http://quizzical-dubinsky-9105e4.netlify.app/

Overview

General Information

Sample URL:	http://quizzical-dubinsky-9105e4.netlify.app/
Analysis ID:	1590418
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Detected non-DNS traffic on DNS port

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5416 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1076 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2524 --field-trial-handle=2504,i,8395221929143535413,13691894162141763066,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6552 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://quizzical-dubinsky-9105e4.netlify.app/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST / HTTP/1.1Host: quizzical-dubinsky-9105e4.netlify.appConnection: keep-aliveContent-Length: 45Cache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1Origin: https://quizzical-dubinsky-9105e4.netlify.appContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://quizzical-dubinsky-9105e4.netlify.app/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 57418 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57361 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57269
Source: unknown	Network traffic detected: HTTP traffic on port 57271 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57321 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57285 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57266 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57270
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 57268 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57271
Source: unknown	Network traffic detected: HTTP traffic on port 57264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57360 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57419 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57418
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57419
Source: unknown	Network traffic detected: HTTP traffic on port 57270 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57265
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57266
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57321
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57267
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57268
Source: unknown	Network traffic detected: HTTP traffic on port 57284 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57360
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57284
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57361
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57285
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57264
Source: unknown	Network traffic detected: HTTP traffic on port 57267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57269 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57265 -> 443

Source: classification engine

Classification label: mal56.win@17/2@6/5

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2524 --field-trial-handle=2504,i,8395221929143535413,13691894162141763066,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://quizzical-dubinsky-9105e4.netlify.app/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2524 --field-trial-handle=2504,i,8395221929143535413,13691894162141763066,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://quizzical-dubinsky-9105e4.netlify.app/	100%	Avira URL Cloud	phishing

Source	Detection	Scanner	Label	Link
https://quizzical-dubinsky-9105e4.netlify.app/favicon.ico	100%	Avira URL Cloud	phishing

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
quizzical-dubinsky-9105e4.netlify.app	3.124.100.143	true	false		unknown
www.google.com	142.250.185.68	true	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://quizzical-dubinsky-9105e4.netlify.app/favicon.ico	false	Avira URL Cloud: phishing	unknown
https://quizzical-dubinsky-9105e4.netlify.app/	false		unknown
http://quizzical-dubinsky-9105e4.netlify.app/	true		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.185.68	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
3.124.100.143	quizzical-dubinsky-9105e4.netlify.app	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1590418
Start date and time:	2025-01-14 01:26:52 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 1s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://quizzical-dubinsky-9105e4.netlify.app/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.win@17/2@6/5
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 216.58.206.67, 142.250.186.174, 64.233.184.84, 142.250.186.78, 142.250.181.238, 216.58.206.78, 142.250.185.106, 172.217.16.202, 142.250.185.234, 216.58.206.74, 142.250.185.202, 142.250.186.106, 142.250.185.170, 142.250.186.170, 142.250.184.234, 142.250.185.74, 142.250.186.138, 142.250.184.202, 172.217.18.10, 142.250.185.138, 216.58.206.42, 142.250.181.234, 2.16.168.117, 23.50.108.3, 199.232.214.172, 142.250.186.46, 172.217.18.14, 142.250.184.206, 142.250.185.206, 216.58.206.46, 184.28.90.27, 172.202.163.200, 13.107.246.45
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, dns.msftncsi.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
VT rate limit hit for: http://quizzical-dubinsky-9105e4.netlify.app/

Input	Output
URL: http://quizzical-dubinsky-9105e4.netlify.app Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": true, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": true }
URL: http://quizzical-dubinsky-9105e4.netlify.app
URL: https://quizzical-dubinsky-9105e4.netlify.app/ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Password protected site", "prominent_button_name": "Submit", "text_input_field_labels": [ "Password" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://quizzical-dubinsky-9105e4.netlify.app/ Model: Joe Sandbox AI	{ "brands": "unknown" }

URL: https://quizzical-dubinsky-9105e4.netlify.app/ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Please enter your password to get access.", "prominent_button_name": "Submit", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://quizzical-dubinsky-9105e4.netlify.app/ Model: Joe Sandbox AI	{ "brands": "unknown" }

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HwT:QT
MD5:	344EB8D19F5C0A3435EF32FD9601F1FB
SHA1:	E082EB1D89D91CC1A25A1D510268E576109DA07E
SHA-256:	B44289B54959639FCA6A742F7CC2E2A5AF9C6E7B73C1B3E25227CA9790F3A587
SHA-512:	EB9F1CD4A566192160371F4B182EE00180F6912333FFB79C537BD80635A6AFE6379FBE7BB74043D635BA65C9F4F956D9E97E516E24E516F2591192A36F866EAE
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAkJmpY4Y65zHBIFDc5BTHo=?alt=proto
Preview:	CgkKBw3OQUx6GgA=

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 14, 2025 01:27:45.978816032 CET	49675	443	192.168.2.4	173.222.162.32
Jan 14, 2025 01:27:50.455584049 CET	49738	443	192.168.2.4	142.250.185.68
Jan 14, 2025 01:27:50.455620050 CET	443	49738	142.250.185.68	192.168.2.4
Jan 14, 2025 01:27:50.455691099 CET	49738	443	192.168.2.4	142.250.185.68
Jan 14, 2025 01:27:50.455938101 CET	49738	443	192.168.2.4	142.250.185.68
Jan 14, 2025 01:27:50.455944061 CET	443	49738	142.250.185.68	192.168.2.4
Jan 14, 2025 01:27:51.117212057 CET	443	49738	142.250.185.68	192.168.2.4
Jan 14, 2025 01:27:51.117491961 CET	49738	443	192.168.2.4	142.250.185.68
Jan 14, 2025 01:27:51.117508888 CET	443	49738	142.250.185.68	192.168.2.4
Jan 14, 2025 01:27:51.119147062 CET	443	49738	142.250.185.68	192.168.2.4
Jan 14, 2025 01:27:51.119235992 CET	49738	443	192.168.2.4	142.250.185.68
Jan 14, 2025 01:27:51.120335102 CET	49738	443	192.168.2.4	142.250.185.68
Jan 14, 2025 01:27:51.120429039 CET	443	49738	142.250.185.68	192.168.2.4
Jan 14, 2025 01:27:51.164978027 CET	49738	443	192.168.2.4	142.250.185.68
Jan 14, 2025 01:27:51.164987087 CET	443	49738	142.250.185.68	192.168.2.4
Jan 14, 2025 01:27:51.211956978 CET	49738	443	192.168.2.4	142.250.185.68
Jan 14, 2025 01:27:52.429688931 CET	49741	80	192.168.2.4	3.124.100.143
Jan 14, 2025 01:27:52.430001020 CET	49742	80	192.168.2.4	3.124.100.143
Jan 14, 2025 01:27:52.435528040 CET	80	49741	3.124.100.143	192.168.2.4
Jan 14, 2025 01:27:52.435597897 CET	49741	80	192.168.2.4	3.124.100.143
Jan 14, 2025 01:27:52.435718060 CET	49741	80	192.168.2.4	3.124.100.143
Jan 14, 2025 01:27:52.436074972 CET	80	49742	3.124.100.143	192.168.2.4
Jan 14, 2025 01:27:52.436131001 CET	49742	80	192.168.2.4	3.124.100.143
Jan 14, 2025 01:27:52.441220045 CET	80	49741	3.124.100.143	192.168.2.4
Jan 14, 2025 01:27:53.089446068 CET	80	49741	3.124.100.143	192.168.2.4
Jan 14, 2025 01:27:53.101701021 CET	49743	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:27:53.101742029 CET	443	49743	3.124.100.143	192.168.2.4
Jan 14, 2025 01:27:53.102072001 CET	49743	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:27:53.105114937 CET	49743	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:27:53.105148077 CET	443	49743	3.124.100.143	192.168.2.4
Jan 14, 2025 01:27:53.134288073 CET	49741	80	192.168.2.4	3.124.100.143
Jan 14, 2025 01:27:53.761024952 CET	443	49743	3.124.100.143	192.168.2.4
Jan 14, 2025 01:27:53.761362076 CET	49743	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:27:53.761421919 CET	443	49743	3.124.100.143	192.168.2.4
Jan 14, 2025 01:27:53.762643099 CET	443	49743	3.124.100.143	192.168.2.4
Jan 14, 2025 01:27:53.762759924 CET	49743	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:27:53.767071009 CET	49743	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:27:53.767071962 CET	49743	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:27:53.767102957 CET	443	49743	3.124.100.143	192.168.2.4
Jan 14, 2025 01:27:53.767164946 CET	443	49743	3.124.100.143	192.168.2.4
Jan 14, 2025 01:27:53.807178974 CET	49743	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:27:53.807216883 CET	443	49743	3.124.100.143	192.168.2.4
Jan 14, 2025 01:27:53.853318930 CET	49743	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:27:54.066056013 CET	443	49743	3.124.100.143	192.168.2.4
Jan 14, 2025 01:27:54.066246986 CET	443	49743	3.124.100.143	192.168.2.4
Jan 14, 2025 01:27:54.066318989 CET	49743	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:27:54.066396952 CET	443	49743	3.124.100.143	192.168.2.4
Jan 14, 2025 01:27:54.066468954 CET	49743	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:27:54.066476107 CET	443	49743	3.124.100.143	192.168.2.4
Jan 14, 2025 01:27:54.066525936 CET	49743	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:27:54.093831062 CET	49743	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:27:54.093900919 CET	443	49743	3.124.100.143	192.168.2.4
Jan 14, 2025 01:27:54.471791983 CET	49744	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:27:54.471820116 CET	443	49744	3.124.100.143	192.168.2.4
Jan 14, 2025 01:27:54.471879959 CET	49744	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:27:54.472064972 CET	49744	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:27:54.472074986 CET	443	49744	3.124.100.143	192.168.2.4
Jan 14, 2025 01:27:55.125161886 CET	443	49744	3.124.100.143	192.168.2.4
Jan 14, 2025 01:27:55.127576113 CET	49744	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:27:55.127593040 CET	443	49744	3.124.100.143	192.168.2.4
Jan 14, 2025 01:27:55.127918005 CET	443	49744	3.124.100.143	192.168.2.4
Jan 14, 2025 01:27:55.129520893 CET	49744	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:27:55.129585028 CET	443	49744	3.124.100.143	192.168.2.4
Jan 14, 2025 01:27:55.129657984 CET	49744	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:27:55.175338984 CET	443	49744	3.124.100.143	192.168.2.4
Jan 14, 2025 01:27:55.182564974 CET	49744	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:27:55.438059092 CET	443	49744	3.124.100.143	192.168.2.4
Jan 14, 2025 01:27:55.438091993 CET	443	49744	3.124.100.143	192.168.2.4
Jan 14, 2025 01:27:55.438175917 CET	49744	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:27:55.438189983 CET	443	49744	3.124.100.143	192.168.2.4
Jan 14, 2025 01:27:55.438247919 CET	49744	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:27:55.439202070 CET	49744	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:27:55.439210892 CET	443	49744	3.124.100.143	192.168.2.4
Jan 14, 2025 01:27:57.980803967 CET	80	49742	3.124.100.143	192.168.2.4
Jan 14, 2025 01:27:57.980962992 CET	49742	80	192.168.2.4	3.124.100.143
Jan 14, 2025 01:27:58.870228052 CET	49742	80	192.168.2.4	3.124.100.143
Jan 14, 2025 01:27:58.875463009 CET	80	49742	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:01.040141106 CET	443	49738	142.250.185.68	192.168.2.4
Jan 14, 2025 01:28:01.040270090 CET	443	49738	142.250.185.68	192.168.2.4
Jan 14, 2025 01:28:01.044883013 CET	49738	443	192.168.2.4	142.250.185.68
Jan 14, 2025 01:28:02.870764017 CET	49738	443	192.168.2.4	142.250.185.68
Jan 14, 2025 01:28:02.870790005 CET	443	49738	142.250.185.68	192.168.2.4
Jan 14, 2025 01:28:03.985254049 CET	57263	53	192.168.2.4	1.1.1.1
Jan 14, 2025 01:28:03.990183115 CET	53	57263	1.1.1.1	192.168.2.4
Jan 14, 2025 01:28:03.990272999 CET	57263	53	192.168.2.4	1.1.1.1
Jan 14, 2025 01:28:03.995162010 CET	53	57263	1.1.1.1	192.168.2.4
Jan 14, 2025 01:28:04.444108963 CET	57263	53	192.168.2.4	1.1.1.1
Jan 14, 2025 01:28:04.449270964 CET	53	57263	1.1.1.1	192.168.2.4
Jan 14, 2025 01:28:04.449376106 CET	57263	53	192.168.2.4	1.1.1.1
Jan 14, 2025 01:28:08.628948927 CET	57264	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:08.629014969 CET	443	57264	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:08.629117966 CET	57264	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:08.629359007 CET	57265	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:08.629452944 CET	443	57265	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:08.629473925 CET	57264	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:08.629492998 CET	443	57264	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:08.629539013 CET	57265	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:08.630299091 CET	57265	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:08.630337000 CET	443	57265	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:09.260476112 CET	443	57264	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:09.260865927 CET	57264	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:09.260880947 CET	443	57264	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:09.261405945 CET	443	57264	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:09.261883974 CET	57264	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:09.261956930 CET	443	57264	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:09.262236118 CET	57264	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:09.263526917 CET	443	57265	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:09.263726950 CET	57265	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:09.263758898 CET	443	57265	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:09.265950918 CET	443	57265	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:09.266304016 CET	57265	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:09.266499043 CET	443	57265	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:09.303332090 CET	443	57264	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:09.320389986 CET	57265	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:09.834659100 CET	443	57264	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:09.834793091 CET	443	57264	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:09.834861040 CET	57264	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:09.834882021 CET	443	57264	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:09.834930897 CET	57264	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:09.834938049 CET	443	57264	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:09.835045099 CET	443	57264	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:09.835098982 CET	57264	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:09.836664915 CET	57264	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:09.836684942 CET	443	57264	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:09.892846107 CET	57265	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:09.935362101 CET	443	57265	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:10.077063084 CET	443	57265	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:10.077198982 CET	443	57265	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:10.077275038 CET	57265	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:10.077315092 CET	443	57265	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:10.077389002 CET	57265	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:10.077403069 CET	443	57265	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:10.077495098 CET	443	57265	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:10.077548981 CET	57265	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:10.098869085 CET	57265	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:10.098906040 CET	443	57265	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:20.538567066 CET	57266	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:20.538626909 CET	443	57266	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:20.538830996 CET	57266	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:20.539109945 CET	57267	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:20.539213896 CET	443	57267	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:20.539313078 CET	57267	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:20.539510012 CET	57266	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:20.539532900 CET	443	57266	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:20.539731026 CET	57267	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:20.539771080 CET	443	57267	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:21.173137903 CET	443	57267	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:21.173681974 CET	57267	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:21.173749924 CET	443	57267	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:21.175910950 CET	443	57267	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:21.176470995 CET	57267	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:21.176686049 CET	443	57267	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:21.176717997 CET	57267	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:21.182399035 CET	443	57266	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:21.183079004 CET	57266	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:21.183105946 CET	443	57266	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:21.184241056 CET	443	57266	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:21.184892893 CET	57266	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:21.185070992 CET	443	57266	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:21.223328114 CET	443	57267	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:21.228110075 CET	57266	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:21.228115082 CET	57267	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:21.737524033 CET	443	57267	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:21.737562895 CET	443	57267	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:21.737646103 CET	57267	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:21.737667084 CET	443	57267	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:21.737723112 CET	57267	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:21.739516973 CET	57267	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:21.739567041 CET	443	57267	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:21.773930073 CET	57266	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:21.815350056 CET	443	57266	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:21.955611944 CET	443	57266	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:21.955735922 CET	443	57266	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:21.955813885 CET	57266	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:21.955859900 CET	443	57266	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:21.955918074 CET	57266	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:21.955930948 CET	443	57266	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:21.955996990 CET	443	57266	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:21.956074953 CET	57266	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:21.956634998 CET	57266	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:21.956662893 CET	443	57266	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:23.089732885 CET	80	49741	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:23.089859009 CET	49741	80	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:23.621170998 CET	49741	80	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:23.626123905 CET	80	49741	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:29.487219095 CET	57268	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:29.487272024 CET	443	57268	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:29.487356901 CET	57268	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:29.487600088 CET	57268	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:29.487618923 CET	443	57268	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:29.489650011 CET	57269	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:29.489691973 CET	443	57269	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:29.489764929 CET	57269	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:29.489959002 CET	57269	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:29.489976883 CET	443	57269	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:30.131009102 CET	443	57268	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:30.131412983 CET	57268	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:30.131452084 CET	443	57268	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:30.132195950 CET	443	57268	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:30.132635117 CET	57268	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:30.132829905 CET	57268	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:30.132836103 CET	443	57268	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:30.132869005 CET	443	57268	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:30.149460077 CET	443	57269	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:30.150290966 CET	57269	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:30.150324106 CET	443	57269	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:30.151036024 CET	443	57269	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:30.151550055 CET	57269	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:30.151717901 CET	443	57269	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:30.180377007 CET	57268	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:30.195600986 CET	57269	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:30.708787918 CET	443	57268	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:30.708914995 CET	443	57268	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:30.708970070 CET	57268	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:30.708992004 CET	443	57268	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:30.709058046 CET	57268	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:30.709064960 CET	443	57268	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:30.709140062 CET	443	57268	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:30.709187984 CET	57268	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:30.713911057 CET	57268	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:30.713927984 CET	443	57268	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:30.785835981 CET	57269	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:30.827375889 CET	443	57269	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:30.971772909 CET	443	57269	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:30.971848011 CET	443	57269	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:30.971904039 CET	57269	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:30.971921921 CET	443	57269	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:30.971973896 CET	57269	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:30.971982002 CET	443	57269	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:30.972055912 CET	443	57269	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:30.972103119 CET	57269	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:30.972847939 CET	57269	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:30.972862959 CET	443	57269	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:37.253741980 CET	57270	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:37.253796101 CET	443	57270	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:37.253895998 CET	57270	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:37.254138947 CET	57271	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:37.254184961 CET	443	57271	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:37.254257917 CET	57271	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:37.254348040 CET	57270	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:37.254367113 CET	443	57270	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:37.254489899 CET	57271	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:37.254503965 CET	443	57271	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:37.884958982 CET	443	57270	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:37.885422945 CET	57270	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:37.885443926 CET	443	57270	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:37.885905027 CET	443	57270	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:37.886718035 CET	57270	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:37.886802912 CET	443	57270	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:37.886902094 CET	57270	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:37.908587933 CET	443	57271	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:37.909936905 CET	57271	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:37.909955025 CET	443	57271	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:37.910249949 CET	443	57271	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:37.912058115 CET	57271	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:37.912117958 CET	443	57271	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:37.927371979 CET	443	57270	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:37.961779118 CET	57271	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:38.465395927 CET	443	57270	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:38.465445042 CET	443	57270	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:38.465504885 CET	57270	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:38.465521097 CET	443	57270	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:38.465563059 CET	443	57270	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:38.465593100 CET	57270	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:38.465615034 CET	57270	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:38.466499090 CET	57270	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:38.466511965 CET	443	57270	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:38.534904957 CET	57271	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:38.579338074 CET	443	57271	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:38.721323967 CET	443	57271	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:38.721357107 CET	443	57271	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:38.721443892 CET	443	57271	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:38.721452951 CET	57271	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:38.721501112 CET	57271	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:38.721951008 CET	57271	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:38.721971989 CET	443	57271	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:45.158629894 CET	57284	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:45.158701897 CET	57285	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:45.158724070 CET	443	57284	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:45.158797026 CET	443	57285	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:45.158880949 CET	57284	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:45.158901930 CET	57285	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:45.159132004 CET	57285	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:45.159151077 CET	443	57285	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:45.159286976 CET	57284	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:45.159343958 CET	443	57284	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:45.785326004 CET	443	57284	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:45.785832882 CET	57284	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:45.785902977 CET	443	57284	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:45.786390066 CET	443	57284	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:45.786804914 CET	57284	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:45.786864042 CET	57284	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:45.786875963 CET	443	57284	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:45.786894083 CET	443	57284	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:45.787427902 CET	443	57285	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:45.787749052 CET	57285	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:45.787817001 CET	443	57285	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:45.788134098 CET	443	57285	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:45.788405895 CET	57285	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:45.788476944 CET	443	57285	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:45.840230942 CET	57285	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:45.840316057 CET	57284	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:46.391804934 CET	443	57284	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:46.391887903 CET	443	57284	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:46.392214060 CET	57284	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:46.392278910 CET	443	57284	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:46.392316103 CET	443	57284	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:46.392358065 CET	57284	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:46.392386913 CET	57284	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:46.395270109 CET	57284	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:46.395302057 CET	443	57284	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:46.443602085 CET	57285	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:46.487411022 CET	443	57285	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:46.625263929 CET	443	57285	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:46.625400066 CET	443	57285	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:46.625648022 CET	443	57285	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:46.625657082 CET	57285	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:46.625735998 CET	57285	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:46.626353979 CET	57285	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:46.626394033 CET	443	57285	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:50.510718107 CET	57321	443	192.168.2.4	142.250.185.68
Jan 14, 2025 01:28:50.510778904 CET	443	57321	142.250.185.68	192.168.2.4
Jan 14, 2025 01:28:50.510885000 CET	57321	443	192.168.2.4	142.250.185.68
Jan 14, 2025 01:28:50.511157990 CET	57321	443	192.168.2.4	142.250.185.68
Jan 14, 2025 01:28:50.511173010 CET	443	57321	142.250.185.68	192.168.2.4
Jan 14, 2025 01:28:51.147742987 CET	443	57321	142.250.185.68	192.168.2.4
Jan 14, 2025 01:28:51.148020029 CET	57321	443	192.168.2.4	142.250.185.68
Jan 14, 2025 01:28:51.148051023 CET	443	57321	142.250.185.68	192.168.2.4
Jan 14, 2025 01:28:51.148509026 CET	443	57321	142.250.185.68	192.168.2.4
Jan 14, 2025 01:28:51.148983002 CET	57321	443	192.168.2.4	142.250.185.68
Jan 14, 2025 01:28:51.149064064 CET	443	57321	142.250.185.68	192.168.2.4
Jan 14, 2025 01:28:51.196021080 CET	57321	443	192.168.2.4	142.250.185.68
Jan 14, 2025 01:28:57.192081928 CET	57360	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:57.192107916 CET	443	57360	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:57.192179918 CET	57360	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:57.192497015 CET	57361	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:57.192544937 CET	443	57361	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:57.192591906 CET	57361	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:57.192811966 CET	57360	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:57.192823887 CET	443	57360	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:57.192949057 CET	57361	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:57.192962885 CET	443	57361	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:57.824636936 CET	443	57360	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:57.825031042 CET	57360	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:57.825045109 CET	443	57360	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:57.826143980 CET	443	57360	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:57.826525927 CET	57360	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:57.826703072 CET	57360	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:57.826706886 CET	443	57360	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:57.870975018 CET	57360	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:57.870984077 CET	443	57360	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:57.909003019 CET	443	57361	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:57.909411907 CET	57361	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:57.909439087 CET	443	57361	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:57.910572052 CET	443	57361	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:57.910908937 CET	57361	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:57.911082029 CET	443	57361	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:57.963447094 CET	57361	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:58.393810034 CET	443	57360	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:58.393871069 CET	443	57360	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:58.393920898 CET	57360	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:58.393935919 CET	443	57360	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:58.393971920 CET	57360	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:58.393984079 CET	443	57360	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:58.394028902 CET	57360	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:58.397846937 CET	57360	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:58.397854090 CET	443	57360	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:58.441972017 CET	57361	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:58.483340979 CET	443	57361	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:58.623090982 CET	443	57361	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:58.623220921 CET	443	57361	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:58.623282909 CET	57361	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:58.623289108 CET	443	57361	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:58.623331070 CET	57361	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:58.623403072 CET	443	57361	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:58.623545885 CET	443	57361	3.124.100.143	192.168.2.4
Jan 14, 2025 01:28:58.623594046 CET	57361	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:58.623764038 CET	57361	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:28:58.623774052 CET	443	57361	3.124.100.143	192.168.2.4
Jan 14, 2025 01:29:01.046456099 CET	443	57321	142.250.185.68	192.168.2.4
Jan 14, 2025 01:29:01.046622038 CET	443	57321	142.250.185.68	192.168.2.4
Jan 14, 2025 01:29:01.046670914 CET	57321	443	192.168.2.4	142.250.185.68
Jan 14, 2025 01:29:02.871176004 CET	57321	443	192.168.2.4	142.250.185.68
Jan 14, 2025 01:29:02.871218920 CET	443	57321	142.250.185.68	192.168.2.4
Jan 14, 2025 01:29:05.991818905 CET	57418	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:29:05.991895914 CET	443	57418	3.124.100.143	192.168.2.4
Jan 14, 2025 01:29:05.992038965 CET	57418	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:29:05.992403984 CET	57419	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:29:05.992492914 CET	443	57419	3.124.100.143	192.168.2.4
Jan 14, 2025 01:29:05.992579937 CET	57419	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:29:05.993485928 CET	57419	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:29:05.993521929 CET	443	57419	3.124.100.143	192.168.2.4
Jan 14, 2025 01:29:05.993674994 CET	57418	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:29:05.993710041 CET	443	57418	3.124.100.143	192.168.2.4
Jan 14, 2025 01:29:06.639875889 CET	443	57418	3.124.100.143	192.168.2.4
Jan 14, 2025 01:29:06.640371084 CET	57418	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:29:06.640403032 CET	443	57418	3.124.100.143	192.168.2.4
Jan 14, 2025 01:29:06.641503096 CET	443	57418	3.124.100.143	192.168.2.4
Jan 14, 2025 01:29:06.641963005 CET	57418	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:29:06.642133951 CET	443	57418	3.124.100.143	192.168.2.4
Jan 14, 2025 01:29:06.642179012 CET	57418	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:29:06.653877974 CET	443	57419	3.124.100.143	192.168.2.4
Jan 14, 2025 01:29:06.654243946 CET	57419	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:29:06.654309988 CET	443	57419	3.124.100.143	192.168.2.4
Jan 14, 2025 01:29:06.655498981 CET	443	57419	3.124.100.143	192.168.2.4
Jan 14, 2025 01:29:06.655913115 CET	57419	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:29:06.656100035 CET	443	57419	3.124.100.143	192.168.2.4
Jan 14, 2025 01:29:06.683350086 CET	443	57418	3.124.100.143	192.168.2.4
Jan 14, 2025 01:29:06.693881035 CET	57418	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:29:06.708995104 CET	57419	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:29:07.210063934 CET	443	57418	3.124.100.143	192.168.2.4
Jan 14, 2025 01:29:07.210192919 CET	443	57418	3.124.100.143	192.168.2.4
Jan 14, 2025 01:29:07.210369110 CET	57418	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:29:07.210401058 CET	443	57418	3.124.100.143	192.168.2.4
Jan 14, 2025 01:29:07.210424900 CET	443	57418	3.124.100.143	192.168.2.4
Jan 14, 2025 01:29:07.210454941 CET	57418	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:29:07.213648081 CET	57418	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:29:07.213648081 CET	57418	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:29:07.242928028 CET	57419	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:29:07.287327051 CET	443	57419	3.124.100.143	192.168.2.4
Jan 14, 2025 01:29:07.429605961 CET	443	57419	3.124.100.143	192.168.2.4
Jan 14, 2025 01:29:07.429708004 CET	443	57419	3.124.100.143	192.168.2.4
Jan 14, 2025 01:29:07.429889917 CET	57419	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:29:07.429927111 CET	443	57419	3.124.100.143	192.168.2.4
Jan 14, 2025 01:29:07.431107998 CET	57419	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:29:07.431286097 CET	57419	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:29:07.431327105 CET	443	57419	3.124.100.143	192.168.2.4
Jan 14, 2025 01:29:07.524802923 CET	57418	443	192.168.2.4	3.124.100.143
Jan 14, 2025 01:29:07.524836063 CET	443	57418	3.124.100.143	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 14, 2025 01:27:46.426738977 CET	53	64501	1.1.1.1	192.168.2.4
Jan 14, 2025 01:27:46.527538061 CET	53	53330	1.1.1.1	192.168.2.4
Jan 14, 2025 01:27:47.551357985 CET	53	61313	1.1.1.1	192.168.2.4
Jan 14, 2025 01:27:50.447786093 CET	55766	53	192.168.2.4	1.1.1.1
Jan 14, 2025 01:27:50.447899103 CET	54943	53	192.168.2.4	1.1.1.1
Jan 14, 2025 01:27:50.454618931 CET	53	54943	1.1.1.1	192.168.2.4
Jan 14, 2025 01:27:50.454894066 CET	53	55766	1.1.1.1	192.168.2.4
Jan 14, 2025 01:27:52.419313908 CET	53709	53	192.168.2.4	1.1.1.1
Jan 14, 2025 01:27:52.419534922 CET	54778	53	192.168.2.4	1.1.1.1
Jan 14, 2025 01:27:52.427858114 CET	53	54778	1.1.1.1	192.168.2.4
Jan 14, 2025 01:27:52.429039001 CET	53	53709	1.1.1.1	192.168.2.4
Jan 14, 2025 01:27:53.091501951 CET	57256	53	192.168.2.4	1.1.1.1
Jan 14, 2025 01:27:53.091501951 CET	52206	53	192.168.2.4	1.1.1.1
Jan 14, 2025 01:27:53.099944115 CET	53	52206	1.1.1.1	192.168.2.4
Jan 14, 2025 01:27:53.101259947 CET	53	57256	1.1.1.1	192.168.2.4
Jan 14, 2025 01:27:54.478319883 CET	53	60060	1.1.1.1	192.168.2.4
Jan 14, 2025 01:28:03.984611988 CET	53	50155	1.1.1.1	192.168.2.4
Jan 14, 2025 01:28:04.533406973 CET	53	62733	1.1.1.1	192.168.2.4
Jan 14, 2025 01:28:05.252289057 CET	138	138	192.168.2.4	192.168.2.255
Jan 14, 2025 01:28:23.629895926 CET	53	63218	1.1.1.1	192.168.2.4
Jan 14, 2025 01:28:46.239018917 CET	53	62076	1.1.1.1	192.168.2.4
Jan 14, 2025 01:28:46.580001116 CET	53	61429	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 14, 2025 01:27:50.447786093 CET	192.168.2.4	1.1.1.1	0x6d3d	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:27:50.447899103 CET	192.168.2.4	1.1.1.1	0x1cb8	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 14, 2025 01:27:52.419313908 CET	192.168.2.4	1.1.1.1	0xf4ff	Standard query (0)	quizzical-dubinsky-9105e4.netlify.app	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:27:52.419534922 CET	192.168.2.4	1.1.1.1	0xad15	Standard query (0)	quizzical-dubinsky-9105e4.netlify.app	65	IN (0x0001)	false
Jan 14, 2025 01:27:53.091501951 CET	192.168.2.4	1.1.1.1	0x7a35	Standard query (0)	quizzical-dubinsky-9105e4.netlify.app	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:27:53.091501951 CET	192.168.2.4	1.1.1.1	0xa2a	Standard query (0)	quizzical-dubinsky-9105e4.netlify.app	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Jan 14, 2025 01:27:50.454618931 CET	1.1.1.1	192.168.2.4	0x1cb8	No error (0)	www.google.com		65	IN (0x0001)	false
Jan 14, 2025 01:27:50.454894066 CET	1.1.1.1	192.168.2.4	0x6d3d	No error (0)	www.google.com	142.250.185.68	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:27:52.429039001 CET	1.1.1.1	192.168.2.4	0xf4ff	No error (0)	quizzical-dubinsky-9105e4.netlify.app	3.124.100.143	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:27:52.429039001 CET	1.1.1.1	192.168.2.4	0xf4ff	No error (0)	quizzical-dubinsky-9105e4.netlify.app	3.125.36.175	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:27:53.101259947 CET	1.1.1.1	192.168.2.4	0x7a35	No error (0)	quizzical-dubinsky-9105e4.netlify.app	3.124.100.143	A (IP address)	IN (0x0001)	false
Jan 14, 2025 01:27:53.101259947 CET	1.1.1.1	192.168.2.4	0x7a35	No error (0)	quizzical-dubinsky-9105e4.netlify.app	3.75.10.80	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

quizzical-dubinsky-9105e4.netlify.app

https:

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49741	3.124.100.143	80	1076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 14, 2025 01:27:52.435718060 CET	452	OUT	GET / HTTP/1.1 Host: quizzical-dubinsky-9105e4.netlify.app Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 14, 2025 01:27:53.089446068 CET	313	IN	HTTP/1.1 301 Moved Permanently Content-Type: text/plain; charset=utf-8 Date: Tue, 14 Jan 2025 00:27:52 GMT Location: https://quizzical-dubinsky-9105e4.netlify.app/ Server: Netlify X-Nf-Request-Id: 01JHH3BBS4P4EY4WEC8MM6FFD0 Content-Length: 61 Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 68 74 74 70 73 3a 2f 2f 71 75 69 7a 7a 69 63 61 6c 2d 64 75 62 69 6e 73 6b 79 2d 39 31 30 35 65 34 2e 6e 65 74 6c 69 66 79 2e 61 70 70 2f Data Ascii: Redirecting to https://quizzical-dubinsky-9105e4.netlify.app/

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49743	3.124.100.143	443	1076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:27:53 UTC	680	OUT	GET / HTTP/1.1 Host: quizzical-dubinsky-9105e4.netlify.app Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:27:54 UTC	273	IN	HTTP/1.1 401 Unauthorized Content-Type: text/html Date: Tue, 14 Jan 2025 00:27:53 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01JHH3BCQQF8982333J465Y5J2 Connection: close Transfer-Encoding: chunked
2025-01-14 00:27:54 UTC	913	IN	Data Raw: 64 64 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 73 77 6f 72 64 20 50 72 6f 74 65 63 74 69 6f 6e 3c 2f 74 69 Data Ascii: ddf<!DOCTYPE html><html> <head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no"> <title>Password Protection</ti
2025-01-14 00:27:54 UTC	2372	IN	Data Raw: 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 20 20 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 37 35 25 3b 0a 20 20 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 33 36 34 70 78 3b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 32 34 70 78 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 77 68 69 74 65 3b 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 72 67 62 28 31 34 2c 20 33 30 2c 20 33 37 29 3b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 38 70 78 3b 0a 20 20 20 20 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 32 70 78 20 34 70 78 Data Ascii: ion: relative; display: flex; flex-direction: column; width: 75%; max-width: 364px; padding: 24px; background: white; color: rgb(14, 30, 37); border-radius: 8px; box-shadow: 0 2px 4px
2025-01-14 00:27:54 UTC	278	IN	Data Raw: 6f 72 6d 20 6d 65 74 68 6f 64 3d 22 70 6f 73 74 22 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 66 6f 72 6d 2d 6e 61 6d 65 22 20 76 61 6c 75 65 3d 22 66 6f 72 6d 20 31 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 70 61 73 73 77 6f 72 64 22 20 6e 61 6d 65 3d 22 70 61 73 73 77 6f 72 64 22 20 70 6c 61 63 65 68 6f 6c 64 65 72 3d 22 50 61 73 73 77 6f 72 64 22 20 61 75 74 6f 66 6f 63 75 73 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 22 62 75 74 74 6f 6e 22 3e 53 75 62 6d 69 74 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 20 20 3c 2f 66 6f 72 6d 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 2f 64 69 76 3e 0a Data Ascii: orm method="post"><input type="hidden" name="form-name" value="form 1" /> <input type="password" name="password" placeholder="Password" autofocus> <button class="button">Submit</button> </form> </div> </div> </div>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49744	3.124.100.143	443	1076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:27:55 UTC	630	OUT	GET /favicon.ico HTTP/1.1 Host: quizzical-dubinsky-9105e4.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://quizzical-dubinsky-9105e4.netlify.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:27:55 UTC	273	IN	HTTP/1.1 401 Unauthorized Content-Type: text/html Date: Tue, 14 Jan 2025 00:27:55 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01JHH3BE2KJBJXJ4W16R0MVA34 Connection: close Transfer-Encoding: chunked
2025-01-14 00:27:55 UTC	913	IN	Data Raw: 64 64 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 73 77 6f 72 64 20 50 72 6f 74 65 63 74 69 6f 6e 3c 2f 74 69 Data Ascii: ddf<!DOCTYPE html><html> <head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no"> <title>Password Protection</ti
2025-01-14 00:27:55 UTC	2372	IN	Data Raw: 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 20 20 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 37 35 25 3b 0a 20 20 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 33 36 34 70 78 3b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 32 34 70 78 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 77 68 69 74 65 3b 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 72 67 62 28 31 34 2c 20 33 30 2c 20 33 37 29 3b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 38 70 78 3b 0a 20 20 20 20 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 32 70 78 20 34 70 78 Data Ascii: ion: relative; display: flex; flex-direction: column; width: 75%; max-width: 364px; padding: 24px; background: white; color: rgb(14, 30, 37); border-radius: 8px; box-shadow: 0 2px 4px
2025-01-14 00:27:55 UTC	278	IN	Data Raw: 6f 72 6d 20 6d 65 74 68 6f 64 3d 22 70 6f 73 74 22 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 66 6f 72 6d 2d 6e 61 6d 65 22 20 76 61 6c 75 65 3d 22 66 6f 72 6d 20 31 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 70 61 73 73 77 6f 72 64 22 20 6e 61 6d 65 3d 22 70 61 73 73 77 6f 72 64 22 20 70 6c 61 63 65 68 6f 6c 64 65 72 3d 22 50 61 73 73 77 6f 72 64 22 20 61 75 74 6f 66 6f 63 75 73 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 22 62 75 74 74 6f 6e 22 3e 53 75 62 6d 69 74 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 20 20 3c 2f 66 6f 72 6d 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 2f 64 69 76 3e 0a Data Ascii: orm method="post"><input type="hidden" name="form-name" value="form 1" /> <input type="password" name="password" placeholder="Password" autofocus> <button class="button">Submit</button> </form> </div> </div> </div>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	57264	3.124.100.143	443	1076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:28:09 UTC	895	OUT	POST / HTTP/1.1 Host: quizzical-dubinsky-9105e4.netlify.app Connection: keep-alive Content-Length: 45 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://quizzical-dubinsky-9105e4.netlify.app Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://quizzical-dubinsky-9105e4.netlify.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:28:09 UTC	45	OUT	Data Raw: 66 6f 72 6d 2d 6e 61 6d 65 3d 66 6f 72 6d 2b 31 26 70 61 73 73 77 6f 72 64 3d 33 66 25 37 44 25 32 39 45 37 54 25 34 30 43 25 33 46 79 Data Ascii: form-name=form+1&password=3f%7D%29E7T%40C%3Fy
2025-01-14 00:28:09 UTC	273	IN	HTTP/1.1 401 Unauthorized Content-Type: text/html Date: Tue, 14 Jan 2025 00:28:09 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01JHH3BVWG0R1T876KC5XFY6DV Connection: close Transfer-Encoding: chunked
2025-01-14 00:28:09 UTC	913	IN	Data Raw: 65 37 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 73 77 6f 72 64 20 50 72 6f 74 65 63 74 69 6f 6e 3c 2f 74 69 Data Ascii: e70<!DOCTYPE html><html> <head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no"> <title>Password Protection</ti
2025-01-14 00:28:09 UTC	2372	IN	Data Raw: 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 20 20 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 37 35 25 3b 0a 20 20 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 33 36 34 70 78 3b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 32 34 70 78 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 77 68 69 74 65 3b 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 72 67 62 28 31 34 2c 20 33 30 2c 20 33 37 29 3b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 38 70 78 3b 0a 20 20 20 20 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 32 70 78 20 34 70 78 Data Ascii: ion: relative; display: flex; flex-direction: column; width: 75%; max-width: 364px; padding: 24px; background: white; color: rgb(14, 30, 37); border-radius: 8px; box-shadow: 0 2px 4px
2025-01-14 00:28:09 UTC	423	IN	Data Raw: 69 76 20 63 6c 61 73 73 3d 22 70 61 73 73 77 6f 72 64 2d 65 72 72 6f 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 61 6c 65 72 74 2d 62 6f 78 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 57 72 6f 6e 67 20 70 61 73 73 77 6f 72 64 2c 20 70 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 2e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 66 6f 72 6d 20 6d 65 74 68 6f 64 3d 22 70 6f 73 74 22 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 66 6f 72 6d 2d 6e 61 6d 65 22 20 76 61 6c 75 65 3d 22 66 6f 72 6d 20 31 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 70 61 73 73 77 6f 72 64 22 20 6e 61 6d Data Ascii: iv class="password-error"> <p class="alert-box"> Wrong password, please try again. </p> </div> <form method="post"><input type="hidden" name="form-name" value="form 1" /> <input type="password" nam

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	57265	3.124.100.143	443	1076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:28:09 UTC	630	OUT	GET /favicon.ico HTTP/1.1 Host: quizzical-dubinsky-9105e4.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://quizzical-dubinsky-9105e4.netlify.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:28:10 UTC	273	IN	HTTP/1.1 401 Unauthorized Content-Type: text/html Date: Tue, 14 Jan 2025 00:28:09 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01JHH3BWC2NASZCTHN6R5CPAYR Connection: close Transfer-Encoding: chunked
2025-01-14 00:28:10 UTC	913	IN	Data Raw: 64 64 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 73 77 6f 72 64 20 50 72 6f 74 65 63 74 69 6f 6e 3c 2f 74 69 Data Ascii: ddf<!DOCTYPE html><html> <head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no"> <title>Password Protection</ti
2025-01-14 00:28:10 UTC	2372	IN	Data Raw: 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 20 20 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 37 35 25 3b 0a 20 20 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 33 36 34 70 78 3b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 32 34 70 78 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 77 68 69 74 65 3b 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 72 67 62 28 31 34 2c 20 33 30 2c 20 33 37 29 3b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 38 70 78 3b 0a 20 20 20 20 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 32 70 78 20 34 70 78 Data Ascii: ion: relative; display: flex; flex-direction: column; width: 75%; max-width: 364px; padding: 24px; background: white; color: rgb(14, 30, 37); border-radius: 8px; box-shadow: 0 2px 4px
2025-01-14 00:28:10 UTC	278	IN	Data Raw: 6f 72 6d 20 6d 65 74 68 6f 64 3d 22 70 6f 73 74 22 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 66 6f 72 6d 2d 6e 61 6d 65 22 20 76 61 6c 75 65 3d 22 66 6f 72 6d 20 31 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 70 61 73 73 77 6f 72 64 22 20 6e 61 6d 65 3d 22 70 61 73 73 77 6f 72 64 22 20 70 6c 61 63 65 68 6f 6c 64 65 72 3d 22 50 61 73 73 77 6f 72 64 22 20 61 75 74 6f 66 6f 63 75 73 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 22 62 75 74 74 6f 6e 22 3e 53 75 62 6d 69 74 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 20 20 3c 2f 66 6f 72 6d 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 2f 64 69 76 3e 0a Data Ascii: orm method="post"><input type="hidden" name="form-name" value="form 1" /> <input type="password" name="password" placeholder="Password" autofocus> <button class="button">Submit</button> </form> </div> </div> </div>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	57267	3.124.100.143	443	1076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:28:21 UTC	895	OUT	POST / HTTP/1.1 Host: quizzical-dubinsky-9105e4.netlify.app Connection: keep-alive Content-Length: 46 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://quizzical-dubinsky-9105e4.netlify.app Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://quizzical-dubinsky-9105e4.netlify.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:28:21 UTC	46	OUT	Data Raw: 66 6f 72 6d 2d 6e 61 6d 65 3d 66 6f 72 6d 2b 31 26 70 61 73 73 77 6f 72 64 3d 79 53 66 42 6d 46 25 32 33 37 25 37 43 34 73 76 41 34 42 36 Data Ascii: form-name=form+1&password=ySfBmF%237%7C4svA4B6
2025-01-14 00:28:21 UTC	273	IN	HTTP/1.1 401 Unauthorized Content-Type: text/html Date: Tue, 14 Jan 2025 00:28:21 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01JHH3C7GHYW1F70BF0JXVPTPM Connection: close Transfer-Encoding: chunked
2025-01-14 00:28:21 UTC	913	IN	Data Raw: 65 37 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 73 77 6f 72 64 20 50 72 6f 74 65 63 74 69 6f 6e 3c 2f 74 69 Data Ascii: e70<!DOCTYPE html><html> <head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no"> <title>Password Protection</ti
2025-01-14 00:28:21 UTC	2372	IN	Data Raw: 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 20 20 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 37 35 25 3b 0a 20 20 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 33 36 34 70 78 3b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 32 34 70 78 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 77 68 69 74 65 3b 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 72 67 62 28 31 34 2c 20 33 30 2c 20 33 37 29 3b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 38 70 78 3b 0a 20 20 20 20 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 32 70 78 20 34 70 78 Data Ascii: ion: relative; display: flex; flex-direction: column; width: 75%; max-width: 364px; padding: 24px; background: white; color: rgb(14, 30, 37); border-radius: 8px; box-shadow: 0 2px 4px
2025-01-14 00:28:21 UTC	423	IN	Data Raw: 69 76 20 63 6c 61 73 73 3d 22 70 61 73 73 77 6f 72 64 2d 65 72 72 6f 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 61 6c 65 72 74 2d 62 6f 78 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 57 72 6f 6e 67 20 70 61 73 73 77 6f 72 64 2c 20 70 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 2e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 66 6f 72 6d 20 6d 65 74 68 6f 64 3d 22 70 6f 73 74 22 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 66 6f 72 6d 2d 6e 61 6d 65 22 20 76 61 6c 75 65 3d 22 66 6f 72 6d 20 31 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 70 61 73 73 77 6f 72 64 22 20 6e 61 6d Data Ascii: iv class="password-error"> <p class="alert-box"> Wrong password, please try again. </p> </div> <form method="post"><input type="hidden" name="form-name" value="form 1" /> <input type="password" nam

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	57266	3.124.100.143	443	1076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:28:21 UTC	630	OUT	GET /favicon.ico HTTP/1.1 Host: quizzical-dubinsky-9105e4.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://quizzical-dubinsky-9105e4.netlify.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:28:21 UTC	273	IN	HTTP/1.1 401 Unauthorized Content-Type: text/html Date: Tue, 14 Jan 2025 00:28:21 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01JHH3C7ZBF34SW83WA5C1PBB8 Connection: close Transfer-Encoding: chunked
2025-01-14 00:28:21 UTC	913	IN	Data Raw: 64 64 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 73 77 6f 72 64 20 50 72 6f 74 65 63 74 69 6f 6e 3c 2f 74 69 Data Ascii: ddf<!DOCTYPE html><html> <head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no"> <title>Password Protection</ti
2025-01-14 00:28:21 UTC	2372	IN	Data Raw: 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 20 20 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 37 35 25 3b 0a 20 20 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 33 36 34 70 78 3b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 32 34 70 78 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 77 68 69 74 65 3b 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 72 67 62 28 31 34 2c 20 33 30 2c 20 33 37 29 3b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 38 70 78 3b 0a 20 20 20 20 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 32 70 78 20 34 70 78 Data Ascii: ion: relative; display: flex; flex-direction: column; width: 75%; max-width: 364px; padding: 24px; background: white; color: rgb(14, 30, 37); border-radius: 8px; box-shadow: 0 2px 4px
2025-01-14 00:28:21 UTC	278	IN	Data Raw: 6f 72 6d 20 6d 65 74 68 6f 64 3d 22 70 6f 73 74 22 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 66 6f 72 6d 2d 6e 61 6d 65 22 20 76 61 6c 75 65 3d 22 66 6f 72 6d 20 31 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 70 61 73 73 77 6f 72 64 22 20 6e 61 6d 65 3d 22 70 61 73 73 77 6f 72 64 22 20 70 6c 61 63 65 68 6f 6c 64 65 72 3d 22 50 61 73 73 77 6f 72 64 22 20 61 75 74 6f 66 6f 63 75 73 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 22 62 75 74 74 6f 6e 22 3e 53 75 62 6d 69 74 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 20 20 3c 2f 66 6f 72 6d 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 2f 64 69 76 3e 0a Data Ascii: orm method="post"><input type="hidden" name="form-name" value="form 1" /> <input type="password" name="password" placeholder="Password" autofocus> <button class="button">Submit</button> </form> </div> </div> </div>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	57268	3.124.100.143	443	1076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:28:30 UTC	895	OUT	POST / HTTP/1.1 Host: quizzical-dubinsky-9105e4.netlify.app Connection: keep-alive Content-Length: 44 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://quizzical-dubinsky-9105e4.netlify.app Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://quizzical-dubinsky-9105e4.netlify.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:28:30 UTC	44	OUT	Data Raw: 66 6f 72 6d 2d 6e 61 6d 65 3d 66 6f 72 6d 2b 31 26 70 61 73 73 77 6f 72 64 3d 76 4c 44 68 25 32 38 78 25 32 43 30 6d 25 33 42 77 57 Data Ascii: form-name=form+1&password=vLDh%28x%2C0m%3BwW
2025-01-14 00:28:30 UTC	273	IN	HTTP/1.1 401 Unauthorized Content-Type: text/html Date: Tue, 14 Jan 2025 00:28:30 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01JHH3CG8HTBA9M3ZQZBH28QAX Connection: close Transfer-Encoding: chunked
2025-01-14 00:28:30 UTC	913	IN	Data Raw: 65 37 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 73 77 6f 72 64 20 50 72 6f 74 65 63 74 69 6f 6e 3c 2f 74 69 Data Ascii: e70<!DOCTYPE html><html> <head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no"> <title>Password Protection</ti
2025-01-14 00:28:30 UTC	2372	IN	Data Raw: 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 20 20 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 37 35 25 3b 0a 20 20 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 33 36 34 70 78 3b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 32 34 70 78 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 77 68 69 74 65 3b 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 72 67 62 28 31 34 2c 20 33 30 2c 20 33 37 29 3b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 38 70 78 3b 0a 20 20 20 20 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 32 70 78 20 34 70 78 Data Ascii: ion: relative; display: flex; flex-direction: column; width: 75%; max-width: 364px; padding: 24px; background: white; color: rgb(14, 30, 37); border-radius: 8px; box-shadow: 0 2px 4px
2025-01-14 00:28:30 UTC	423	IN	Data Raw: 69 76 20 63 6c 61 73 73 3d 22 70 61 73 73 77 6f 72 64 2d 65 72 72 6f 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 61 6c 65 72 74 2d 62 6f 78 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 57 72 6f 6e 67 20 70 61 73 73 77 6f 72 64 2c 20 70 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 2e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 66 6f 72 6d 20 6d 65 74 68 6f 64 3d 22 70 6f 73 74 22 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 66 6f 72 6d 2d 6e 61 6d 65 22 20 76 61 6c 75 65 3d 22 66 6f 72 6d 20 31 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 70 61 73 73 77 6f 72 64 22 20 6e 61 6d Data Ascii: iv class="password-error"> <p class="alert-box"> Wrong password, please try again. </p> </div> <form method="post"><input type="hidden" name="form-name" value="form 1" /> <input type="password" nam

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	57269	3.124.100.143	443	1076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:28:30 UTC	630	OUT	GET /favicon.ico HTTP/1.1 Host: quizzical-dubinsky-9105e4.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://quizzical-dubinsky-9105e4.netlify.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:28:30 UTC	273	IN	HTTP/1.1 401 Unauthorized Content-Type: text/html Date: Tue, 14 Jan 2025 00:28:30 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01JHH3CGS0RP157GF0T04MMSVM Connection: close Transfer-Encoding: chunked
2025-01-14 00:28:30 UTC	913	IN	Data Raw: 64 64 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 73 77 6f 72 64 20 50 72 6f 74 65 63 74 69 6f 6e 3c 2f 74 69 Data Ascii: ddf<!DOCTYPE html><html> <head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no"> <title>Password Protection</ti
2025-01-14 00:28:30 UTC	2372	IN	Data Raw: 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 20 20 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 37 35 25 3b 0a 20 20 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 33 36 34 70 78 3b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 32 34 70 78 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 77 68 69 74 65 3b 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 72 67 62 28 31 34 2c 20 33 30 2c 20 33 37 29 3b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 38 70 78 3b 0a 20 20 20 20 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 32 70 78 20 34 70 78 Data Ascii: ion: relative; display: flex; flex-direction: column; width: 75%; max-width: 364px; padding: 24px; background: white; color: rgb(14, 30, 37); border-radius: 8px; box-shadow: 0 2px 4px
2025-01-14 00:28:30 UTC	278	IN	Data Raw: 6f 72 6d 20 6d 65 74 68 6f 64 3d 22 70 6f 73 74 22 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 66 6f 72 6d 2d 6e 61 6d 65 22 20 76 61 6c 75 65 3d 22 66 6f 72 6d 20 31 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 70 61 73 73 77 6f 72 64 22 20 6e 61 6d 65 3d 22 70 61 73 73 77 6f 72 64 22 20 70 6c 61 63 65 68 6f 6c 64 65 72 3d 22 50 61 73 73 77 6f 72 64 22 20 61 75 74 6f 66 6f 63 75 73 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 22 62 75 74 74 6f 6e 22 3e 53 75 62 6d 69 74 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 20 20 3c 2f 66 6f 72 6d 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 2f 64 69 76 3e 0a Data Ascii: orm method="post"><input type="hidden" name="form-name" value="form 1" /> <input type="password" name="password" placeholder="Password" autofocus> <button class="button">Submit</button> </form> </div> </div> </div>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	57270	3.124.100.143	443	1076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:28:37 UTC	895	OUT	POST / HTTP/1.1 Host: quizzical-dubinsky-9105e4.netlify.app Connection: keep-alive Content-Length: 49 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://quizzical-dubinsky-9105e4.netlify.app Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://quizzical-dubinsky-9105e4.netlify.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:28:37 UTC	49	OUT	Data Raw: 66 6f 72 6d 2d 6e 61 6d 65 3d 66 6f 72 6d 2b 31 26 70 61 73 73 77 6f 72 64 3d 25 33 41 45 4e 58 5f 42 4e 63 25 32 42 5a 65 5f 33 4c 77 41 25 32 34 Data Ascii: form-name=form+1&password=%3AENX_BNc%2BZe_3LwA%24
2025-01-14 00:28:38 UTC	273	IN	HTTP/1.1 401 Unauthorized Content-Type: text/html Date: Tue, 14 Jan 2025 00:28:38 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01JHH3CQV0RE9EMBC7WGREXTJA Connection: close Transfer-Encoding: chunked
2025-01-14 00:28:38 UTC	913	IN	Data Raw: 65 37 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 73 77 6f 72 64 20 50 72 6f 74 65 63 74 69 6f 6e 3c 2f 74 69 Data Ascii: e70<!DOCTYPE html><html> <head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no"> <title>Password Protection</ti
2025-01-14 00:28:38 UTC	2372	IN	Data Raw: 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 20 20 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 37 35 25 3b 0a 20 20 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 33 36 34 70 78 3b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 32 34 70 78 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 77 68 69 74 65 3b 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 72 67 62 28 31 34 2c 20 33 30 2c 20 33 37 29 3b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 38 70 78 3b 0a 20 20 20 20 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 32 70 78 20 34 70 78 Data Ascii: ion: relative; display: flex; flex-direction: column; width: 75%; max-width: 364px; padding: 24px; background: white; color: rgb(14, 30, 37); border-radius: 8px; box-shadow: 0 2px 4px
2025-01-14 00:28:38 UTC	423	IN	Data Raw: 69 76 20 63 6c 61 73 73 3d 22 70 61 73 73 77 6f 72 64 2d 65 72 72 6f 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 61 6c 65 72 74 2d 62 6f 78 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 57 72 6f 6e 67 20 70 61 73 73 77 6f 72 64 2c 20 70 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 2e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 66 6f 72 6d 20 6d 65 74 68 6f 64 3d 22 70 6f 73 74 22 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 66 6f 72 6d 2d 6e 61 6d 65 22 20 76 61 6c 75 65 3d 22 66 6f 72 6d 20 31 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 70 61 73 73 77 6f 72 64 22 20 6e 61 6d Data Ascii: iv class="password-error"> <p class="alert-box"> Wrong password, please try again. </p> </div> <form method="post"><input type="hidden" name="form-name" value="form 1" /> <input type="password" nam

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	57271	3.124.100.143	443	1076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:28:38 UTC	630	OUT	GET /favicon.ico HTTP/1.1 Host: quizzical-dubinsky-9105e4.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://quizzical-dubinsky-9105e4.netlify.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:28:38 UTC	273	IN	HTTP/1.1 401 Unauthorized Content-Type: text/html Date: Tue, 14 Jan 2025 00:28:38 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01JHH3CRB4MSKNZ5690ZDQ1RK5 Connection: close Transfer-Encoding: chunked
2025-01-14 00:28:38 UTC	913	IN	Data Raw: 64 64 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 73 77 6f 72 64 20 50 72 6f 74 65 63 74 69 6f 6e 3c 2f 74 69 Data Ascii: ddf<!DOCTYPE html><html> <head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no"> <title>Password Protection</ti
2025-01-14 00:28:38 UTC	2372	IN	Data Raw: 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 20 20 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 37 35 25 3b 0a 20 20 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 33 36 34 70 78 3b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 32 34 70 78 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 77 68 69 74 65 3b 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 72 67 62 28 31 34 2c 20 33 30 2c 20 33 37 29 3b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 38 70 78 3b 0a 20 20 20 20 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 32 70 78 20 34 70 78 Data Ascii: ion: relative; display: flex; flex-direction: column; width: 75%; max-width: 364px; padding: 24px; background: white; color: rgb(14, 30, 37); border-radius: 8px; box-shadow: 0 2px 4px
2025-01-14 00:28:38 UTC	278	IN	Data Raw: 6f 72 6d 20 6d 65 74 68 6f 64 3d 22 70 6f 73 74 22 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 66 6f 72 6d 2d 6e 61 6d 65 22 20 76 61 6c 75 65 3d 22 66 6f 72 6d 20 31 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 70 61 73 73 77 6f 72 64 22 20 6e 61 6d 65 3d 22 70 61 73 73 77 6f 72 64 22 20 70 6c 61 63 65 68 6f 6c 64 65 72 3d 22 50 61 73 73 77 6f 72 64 22 20 61 75 74 6f 66 6f 63 75 73 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 22 62 75 74 74 6f 6e 22 3e 53 75 62 6d 69 74 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 20 20 3c 2f 66 6f 72 6d 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 2f 64 69 76 3e 0a Data Ascii: orm method="post"><input type="hidden" name="form-name" value="form 1" /> <input type="password" name="password" placeholder="Password" autofocus> <button class="button">Submit</button> </form> </div> </div> </div>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	57284	3.124.100.143	443	1076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:28:45 UTC	895	OUT	POST / HTTP/1.1 Host: quizzical-dubinsky-9105e4.netlify.app Connection: keep-alive Content-Length: 47 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://quizzical-dubinsky-9105e4.netlify.app Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://quizzical-dubinsky-9105e4.netlify.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:28:45 UTC	47	OUT	Data Raw: 66 6f 72 6d 2d 6e 61 6d 65 3d 66 6f 72 6d 2b 31 26 70 61 73 73 77 6f 72 64 3d 34 74 25 33 46 63 25 32 34 68 31 42 37 68 45 53 25 37 43 6b 45 Data Ascii: form-name=form+1&password=4t%3Fc%24h1B7hES%7CkE
2025-01-14 00:28:46 UTC	273	IN	HTTP/1.1 401 Unauthorized Content-Type: text/html Date: Tue, 14 Jan 2025 00:28:46 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01JHH3CZHRRMA76ZX71TQFEN9P Connection: close Transfer-Encoding: chunked
2025-01-14 00:28:46 UTC	913	IN	Data Raw: 65 37 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 73 77 6f 72 64 20 50 72 6f 74 65 63 74 69 6f 6e 3c 2f 74 69 Data Ascii: e70<!DOCTYPE html><html> <head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no"> <title>Password Protection</ti
2025-01-14 00:28:46 UTC	2372	IN	Data Raw: 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 20 20 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 37 35 25 3b 0a 20 20 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 33 36 34 70 78 3b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 32 34 70 78 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 77 68 69 74 65 3b 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 72 67 62 28 31 34 2c 20 33 30 2c 20 33 37 29 3b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 38 70 78 3b 0a 20 20 20 20 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 32 70 78 20 34 70 78 Data Ascii: ion: relative; display: flex; flex-direction: column; width: 75%; max-width: 364px; padding: 24px; background: white; color: rgb(14, 30, 37); border-radius: 8px; box-shadow: 0 2px 4px
2025-01-14 00:28:46 UTC	423	IN	Data Raw: 69 76 20 63 6c 61 73 73 3d 22 70 61 73 73 77 6f 72 64 2d 65 72 72 6f 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 61 6c 65 72 74 2d 62 6f 78 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 57 72 6f 6e 67 20 70 61 73 73 77 6f 72 64 2c 20 70 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 2e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 66 6f 72 6d 20 6d 65 74 68 6f 64 3d 22 70 6f 73 74 22 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 66 6f 72 6d 2d 6e 61 6d 65 22 20 76 61 6c 75 65 3d 22 66 6f 72 6d 20 31 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 70 61 73 73 77 6f 72 64 22 20 6e 61 6d Data Ascii: iv class="password-error"> <p class="alert-box"> Wrong password, please try again. </p> </div> <form method="post"><input type="hidden" name="form-name" value="form 1" /> <input type="password" nam

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	57285	3.124.100.143	443	1076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:28:46 UTC	630	OUT	GET /favicon.ico HTTP/1.1 Host: quizzical-dubinsky-9105e4.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://quizzical-dubinsky-9105e4.netlify.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:28:46 UTC	273	IN	HTTP/1.1 401 Unauthorized Content-Type: text/html Date: Tue, 14 Jan 2025 00:28:46 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01JHH3D028X7GW758ESS200V7S Connection: close Transfer-Encoding: chunked
2025-01-14 00:28:46 UTC	913	IN	Data Raw: 64 64 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 73 77 6f 72 64 20 50 72 6f 74 65 63 74 69 6f 6e 3c 2f 74 69 Data Ascii: ddf<!DOCTYPE html><html> <head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no"> <title>Password Protection</ti
2025-01-14 00:28:46 UTC	2372	IN	Data Raw: 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 20 20 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 37 35 25 3b 0a 20 20 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 33 36 34 70 78 3b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 32 34 70 78 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 77 68 69 74 65 3b 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 72 67 62 28 31 34 2c 20 33 30 2c 20 33 37 29 3b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 38 70 78 3b 0a 20 20 20 20 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 32 70 78 20 34 70 78 Data Ascii: ion: relative; display: flex; flex-direction: column; width: 75%; max-width: 364px; padding: 24px; background: white; color: rgb(14, 30, 37); border-radius: 8px; box-shadow: 0 2px 4px
2025-01-14 00:28:46 UTC	278	IN	Data Raw: 6f 72 6d 20 6d 65 74 68 6f 64 3d 22 70 6f 73 74 22 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 66 6f 72 6d 2d 6e 61 6d 65 22 20 76 61 6c 75 65 3d 22 66 6f 72 6d 20 31 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 70 61 73 73 77 6f 72 64 22 20 6e 61 6d 65 3d 22 70 61 73 73 77 6f 72 64 22 20 70 6c 61 63 65 68 6f 6c 64 65 72 3d 22 50 61 73 73 77 6f 72 64 22 20 61 75 74 6f 66 6f 63 75 73 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 22 62 75 74 74 6f 6e 22 3e 53 75 62 6d 69 74 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 20 20 3c 2f 66 6f 72 6d 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 2f 64 69 76 3e 0a Data Ascii: orm method="post"><input type="hidden" name="form-name" value="form 1" /> <input type="password" name="password" placeholder="Password" autofocus> <button class="button">Submit</button> </form> </div> </div> </div>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	57360	3.124.100.143	443	1076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:28:57 UTC	895	OUT	POST / HTTP/1.1 Host: quizzical-dubinsky-9105e4.netlify.app Connection: keep-alive Content-Length: 50 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://quizzical-dubinsky-9105e4.netlify.app Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://quizzical-dubinsky-9105e4.netlify.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:28:57 UTC	50	OUT	Data Raw: 66 6f 72 6d 2d 6e 61 6d 65 3d 66 6f 72 6d 2b 31 26 70 61 73 73 77 6f 72 64 3d 47 70 6a 25 32 43 71 25 32 43 56 70 79 2a 49 69 25 35 45 37 79 25 32 39 Data Ascii: form-name=form+1&password=Gpj%2Cq%2CVpy*Ii%5E7y%29
2025-01-14 00:28:58 UTC	273	IN	HTTP/1.1 401 Unauthorized Content-Type: text/html Date: Tue, 14 Jan 2025 00:28:58 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01JHH3DB9VYCSN8D044N6BQE34 Connection: close Transfer-Encoding: chunked
2025-01-14 00:28:58 UTC	913	IN	Data Raw: 65 37 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 73 77 6f 72 64 20 50 72 6f 74 65 63 74 69 6f 6e 3c 2f 74 69 Data Ascii: e70<!DOCTYPE html><html> <head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no"> <title>Password Protection</ti
2025-01-14 00:28:58 UTC	2372	IN	Data Raw: 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 20 20 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 37 35 25 3b 0a 20 20 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 33 36 34 70 78 3b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 32 34 70 78 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 77 68 69 74 65 3b 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 72 67 62 28 31 34 2c 20 33 30 2c 20 33 37 29 3b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 38 70 78 3b 0a 20 20 20 20 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 32 70 78 20 34 70 78 Data Ascii: ion: relative; display: flex; flex-direction: column; width: 75%; max-width: 364px; padding: 24px; background: white; color: rgb(14, 30, 37); border-radius: 8px; box-shadow: 0 2px 4px
2025-01-14 00:28:58 UTC	423	IN	Data Raw: 69 76 20 63 6c 61 73 73 3d 22 70 61 73 73 77 6f 72 64 2d 65 72 72 6f 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 61 6c 65 72 74 2d 62 6f 78 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 57 72 6f 6e 67 20 70 61 73 73 77 6f 72 64 2c 20 70 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 2e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 66 6f 72 6d 20 6d 65 74 68 6f 64 3d 22 70 6f 73 74 22 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 66 6f 72 6d 2d 6e 61 6d 65 22 20 76 61 6c 75 65 3d 22 66 6f 72 6d 20 31 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 70 61 73 73 77 6f 72 64 22 20 6e 61 6d Data Ascii: iv class="password-error"> <p class="alert-box"> Wrong password, please try again. </p> </div> <form method="post"><input type="hidden" name="form-name" value="form 1" /> <input type="password" nam

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	57361	3.124.100.143	443	1076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:28:58 UTC	630	OUT	GET /favicon.ico HTTP/1.1 Host: quizzical-dubinsky-9105e4.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://quizzical-dubinsky-9105e4.netlify.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:28:58 UTC	273	IN	HTTP/1.1 401 Unauthorized Content-Type: text/html Date: Tue, 14 Jan 2025 00:28:58 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01JHH3DBS7FC2QM9D0TFSQNT67 Connection: close Transfer-Encoding: chunked
2025-01-14 00:28:58 UTC	913	IN	Data Raw: 64 64 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 73 77 6f 72 64 20 50 72 6f 74 65 63 74 69 6f 6e 3c 2f 74 69 Data Ascii: ddf<!DOCTYPE html><html> <head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no"> <title>Password Protection</ti
2025-01-14 00:28:58 UTC	2372	IN	Data Raw: 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 20 20 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 37 35 25 3b 0a 20 20 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 33 36 34 70 78 3b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 32 34 70 78 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 77 68 69 74 65 3b 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 72 67 62 28 31 34 2c 20 33 30 2c 20 33 37 29 3b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 38 70 78 3b 0a 20 20 20 20 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 32 70 78 20 34 70 78 Data Ascii: ion: relative; display: flex; flex-direction: column; width: 75%; max-width: 364px; padding: 24px; background: white; color: rgb(14, 30, 37); border-radius: 8px; box-shadow: 0 2px 4px
2025-01-14 00:28:58 UTC	278	IN	Data Raw: 6f 72 6d 20 6d 65 74 68 6f 64 3d 22 70 6f 73 74 22 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 66 6f 72 6d 2d 6e 61 6d 65 22 20 76 61 6c 75 65 3d 22 66 6f 72 6d 20 31 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 70 61 73 73 77 6f 72 64 22 20 6e 61 6d 65 3d 22 70 61 73 73 77 6f 72 64 22 20 70 6c 61 63 65 68 6f 6c 64 65 72 3d 22 50 61 73 73 77 6f 72 64 22 20 61 75 74 6f 66 6f 63 75 73 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 22 62 75 74 74 6f 6e 22 3e 53 75 62 6d 69 74 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 20 20 3c 2f 66 6f 72 6d 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 2f 64 69 76 3e 0a Data Ascii: orm method="post"><input type="hidden" name="form-name" value="form 1" /> <input type="password" name="password" placeholder="Password" autofocus> <button class="button">Submit</button> </form> </div> </div> </div>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	57418	3.124.100.143	443	1076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:29:06 UTC	895	OUT	POST / HTTP/1.1 Host: quizzical-dubinsky-9105e4.netlify.app Connection: keep-alive Content-Length: 48 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://quizzical-dubinsky-9105e4.netlify.app Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://quizzical-dubinsky-9105e4.netlify.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:29:06 UTC	48	OUT	Data Raw: 66 6f 72 6d 2d 6e 61 6d 65 3d 66 6f 72 6d 2b 31 26 70 61 73 73 77 6f 72 64 3d 66 57 2a 66 32 50 73 65 25 35 44 25 37 44 77 64 75 6a 25 35 44 36 Data Ascii: form-name=form+1&password=fW*f2Pse%5D%7Dwduj%5D6
2025-01-14 00:29:07 UTC	273	IN	HTTP/1.1 401 Unauthorized Content-Type: text/html Date: Tue, 14 Jan 2025 00:29:07 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01JHH3DKXAMYQC19M68F2RXG0C Connection: close Transfer-Encoding: chunked
2025-01-14 00:29:07 UTC	913	IN	Data Raw: 65 37 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 73 77 6f 72 64 20 50 72 6f 74 65 63 74 69 6f 6e 3c 2f 74 69 Data Ascii: e70<!DOCTYPE html><html> <head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no"> <title>Password Protection</ti
2025-01-14 00:29:07 UTC	2372	IN	Data Raw: 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 20 20 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 37 35 25 3b 0a 20 20 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 33 36 34 70 78 3b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 32 34 70 78 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 77 68 69 74 65 3b 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 72 67 62 28 31 34 2c 20 33 30 2c 20 33 37 29 3b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 38 70 78 3b 0a 20 20 20 20 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 32 70 78 20 34 70 78 Data Ascii: ion: relative; display: flex; flex-direction: column; width: 75%; max-width: 364px; padding: 24px; background: white; color: rgb(14, 30, 37); border-radius: 8px; box-shadow: 0 2px 4px
2025-01-14 00:29:07 UTC	423	IN	Data Raw: 69 76 20 63 6c 61 73 73 3d 22 70 61 73 73 77 6f 72 64 2d 65 72 72 6f 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 61 6c 65 72 74 2d 62 6f 78 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 57 72 6f 6e 67 20 70 61 73 73 77 6f 72 64 2c 20 70 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 2e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 66 6f 72 6d 20 6d 65 74 68 6f 64 3d 22 70 6f 73 74 22 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 66 6f 72 6d 2d 6e 61 6d 65 22 20 76 61 6c 75 65 3d 22 66 6f 72 6d 20 31 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 70 61 73 73 77 6f 72 64 22 20 6e 61 6d Data Ascii: iv class="password-error"> <p class="alert-box"> Wrong password, please try again. </p> </div> <form method="post"><input type="hidden" name="form-name" value="form 1" /> <input type="password" nam

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	57419	3.124.100.143	443	1076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:29:07 UTC	630	OUT	GET /favicon.ico HTTP/1.1 Host: quizzical-dubinsky-9105e4.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://quizzical-dubinsky-9105e4.netlify.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:29:07 UTC	273	IN	HTTP/1.1 401 Unauthorized Content-Type: text/html Date: Tue, 14 Jan 2025 00:29:07 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01JHH3DMC9YF0E3T8M840BEWBQ Connection: close Transfer-Encoding: chunked
2025-01-14 00:29:07 UTC	913	IN	Data Raw: 64 64 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 73 77 6f 72 64 20 50 72 6f 74 65 63 74 69 6f 6e 3c 2f 74 69 Data Ascii: ddf<!DOCTYPE html><html> <head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no"> <title>Password Protection</ti
2025-01-14 00:29:07 UTC	2372	IN	Data Raw: 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 20 20 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 37 35 25 3b 0a 20 20 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 33 36 34 70 78 3b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 32 34 70 78 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 77 68 69 74 65 3b 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 72 67 62 28 31 34 2c 20 33 30 2c 20 33 37 29 3b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 38 70 78 3b 0a 20 20 20 20 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 32 70 78 20 34 70 78 Data Ascii: ion: relative; display: flex; flex-direction: column; width: 75%; max-width: 364px; padding: 24px; background: white; color: rgb(14, 30, 37); border-radius: 8px; box-shadow: 0 2px 4px
2025-01-14 00:29:07 UTC	278	IN	Data Raw: 6f 72 6d 20 6d 65 74 68 6f 64 3d 22 70 6f 73 74 22 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 66 6f 72 6d 2d 6e 61 6d 65 22 20 76 61 6c 75 65 3d 22 66 6f 72 6d 20 31 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 70 61 73 73 77 6f 72 64 22 20 6e 61 6d 65 3d 22 70 61 73 73 77 6f 72 64 22 20 70 6c 61 63 65 68 6f 6c 64 65 72 3d 22 50 61 73 73 77 6f 72 64 22 20 61 75 74 6f 66 6f 63 75 73 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 22 62 75 74 74 6f 6e 22 3e 53 75 62 6d 69 74 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 20 20 3c 2f 66 6f 72 6d 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 2f 64 69 76 3e 0a Data Ascii: orm method="post"><input type="hidden" name="form-name" value="form 1" /> <input type="password" name="password" placeholder="Password" autofocus> <button class="button">Submit</button> </form> </div> </div> </div>

Target ID:	0
Start time:	19:27:42
Start date:	13/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	19:27:45
Start date:	13/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2524 --field-trial-handle=2504,i,8395221929143535413,13691894162141763066,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	19:27:51
Start date:	13/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://quizzical-dubinsky-9105e4.netlify.app/"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://quizzical-dubinsky-9105e4.netlify.app/	HTTP Parser: No favicon
Source: https://quizzical-dubinsky-9105e4.netlify.app/	HTTP Parser: No favicon

Source: https://quizzical-dubinsky-9105e4.netlify.app/	HTTP Parser: No <meta name="author".. found
Source: https://quizzical-dubinsky-9105e4.netlify.app/	HTTP Parser: No <meta name="author".. found

Source: https://quizzical-dubinsky-9105e4.netlify.app/	HTTP Parser: No <meta name="copyright".. found
Source: https://quizzical-dubinsky-9105e4.netlify.app/	HTTP Parser: No <meta name="copyright".. found

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: quizzical-dubinsky-9105e4.netlify.appConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: quizzical-dubinsky-9105e4.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://quizzical-dubinsky-9105e4.netlify.app/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: quizzical-dubinsky-9105e4.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://quizzical-dubinsky-9105e4.netlify.app/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: quizzical-dubinsky-9105e4.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://quizzical-dubinsky-9105e4.netlify.app/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: quizzical-dubinsky-9105e4.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://quizzical-dubinsky-9105e4.netlify.app/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: quizzical-dubinsky-9105e4.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://quizzical-dubinsky-9105e4.netlify.app/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: quizzical-dubinsky-9105e4.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://quizzical-dubinsky-9105e4.netlify.app/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: quizzical-dubinsky-9105e4.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://quizzical-dubinsky-9105e4.netlify.app/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: quizzical-dubinsky-9105e4.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://quizzical-dubinsky-9105e4.netlify.app/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: quizzical-dubinsky-9105e4.netlify.appConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: quizzical-dubinsky-9105e4.netlify.app

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://quizzical-dubinsky-9105e4.netlify.app/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 45

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTP Packets

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 5416, Parent PID: 5308

General

Chronological Activities

Analysis Process: chrome.exePID: 1076, Parent PID: 5416

General

Chronological Activities

Analysis Process: chrome.exePID: 6552, Parent PID: 5308

General

Chronological Activities

Disassembly

Windows Analysis Report
http://quizzical-dubinsky-9105e4.netlify.app/